Meine Datenschutz und Privatsphäre Übersicht 2025, für die Allgemeinheit

Teilen er­be­ten

als PDF:

https://cryptpad.digitalcourage.de/file/#/2/file/pIOSst7Z53pFECyng-lX9LlQ/

 #DSGVO #TDDDG ( #unplugtrump )
#Datenschutz #Privatsphäre #sicherheit #Verschlüsselung
#encryption #WEtell #SoloKey #NitroKey #Email #Cybersecurity #Pixelfed #Massenűberwachung
#Google #Metadaten #WhatsApp #Threema #Cryptpad #Signal
#Hateaid #Cyberstalking #Messenger #Browser #Youtube #NewPipe #Chatkontrolle #nichtszuverbergen #ÜberwachungsKapitalismus #Microsoft #Apple #Windows #Linux #Matrix #Mastodon #Friendica #Fediverse #Mastodir #Loops #2FA #Ransomware #Foss #VeraCrypt #HateAid #Coreboot #Volksverpetzer #Netzpolitik #Digitalisierung #FragdenStaat #Shiftphone  #OpenSource #GrapheneOS #CCC #Mail #Mullvad #PGP #GnuPG #DNS #Gaming #linuxgaming #Lutris #Protondb #eOS #Enshittification
#Bloatware #TPM #Murena  #LiberaPay #GnuTaler #Taler #PreppingforFuture
#FediLZ #BlueLZ #InstaLZ #ThreatModel
#FLOSS #UEFI #Medienkompetenz

Unlocking Windows 11: Bypassing Compatibility Checks for Legacy PCs

As Microsoft tightens its grip on Windows 11 compatibility, many users find themselves locked out of upgrades due to outdated hardware. However, innovative workarounds are emerging, enabling developer...

https://news.lavx.hu/article/unlocking-windows-11-bypassing-compatibility-checks-for-legacy-pcs

Microsoft has moved its Recall AI feature to the Windows 11 Release Preview Channel, advancing it despite known data filtering issues

#Windows11 #Microsoft #Recall #CopilotPlusPC #AI #Privacy #Cybersecurity #TPM #WindowsHello #DataSecurity

https://winbuzzer.com/2025/04/11/microsoft-advances-windows-recall-ai-to-release-preview-despite-lingering-concerns-xcxwbn/

Did a new release of `ssh-tpm-agent`, `v0.8.0`.

Notable changes is hierarchy keys, keyctl backed passwords and some preliminary landlock support.

https://github.com/Foxboron/ssh-tpm-agent/releases/tag/v0.8.0

Also #Windows als #KVM auf einen #Linux Host läuft ja super. Musste nur libvirt Treiber auf dem Gast installieren, damit ich LAN habe und auch die Auflösung ändern kann, aber sonst kann ich nicht meckern. Nur das Durchleiten des #TPM Moduls ging danach nicht mehr, konnte ich aber problemlos per Software emulieren.

Since it's topical atm:

Device bound credentials and hardware encryption via TPM is great, until your TPM fails/dies/breaks...

Been there, it is very much not fun... was lucky enough to regain access to my (then) system; decrypting the drive took 19 hours.

Does anyone know how persistent secrets are loaded into Windows with Virtualization Based Security? I understand how online credentials can be stored in secured memory in VTL1, but how do, for example, Windows Hello credentials get set up in VTL1 without a way to access them from VTL0?

The key material has to be on disk somewhere, which could then be encrypted by any process with access to the TPM. Is VTL1 just using the physical TPM and proxying a separate vTPM to VTL0?
#tpm

i read #TPM daily, usually morning and evening. Marshall is smart and paying close attention
https://saturation.social/@clive/114180134672406312

Banco Central mantiene en 4% Tasa Política Monetaria por tercera ocasión

El jerarca del BCCR afirmó que una de las razones por las que se dejó la TPM en el mismo nivel es que hay muy poca transferencia de las rebajas anteriores en las tasas de interés del mercado financiero.
La entrada Banco Central mantiene en 4% Tasa Política Monetaria por tercera ocasión aparece primero en Semanar [...]

#BancoCentral #MercadoFinanciero #País #TASADEPOLÍTICAMONETARIA #TPM #ÚltimaHora

https://semanariouniversidad.com/pais/banco-central-mantiene-en-4-tasa-politica-monetaria-por-tercera-ocasion/

Via #TalkingPointsMemo @ 5:31pm ET on Mar 07, 2025

The #Trump #WhiteHouse has taken its attempt to seize direct control over the entire #ExecutiveBranch to a new level and laid out a startling legal rationale for the move in a previously unreported email obtained by #TPM. If successful, Trump would be making a dramatic end run around the #Senate’s #AdviceAndConsent power for certain appointed positions.

#StopDictatorDon
https://talkingpointsmemo.com/news/exclusive-trump-makes-aggressive-new-claim-of-executive-power-to-circumvent-the-senate

Kate Riga with clarity on next steps, via the Talking Points Memo Podcast:

https://www.youtube.com/watch?v=cWlY9CaTO9Q&t=2033s

Via #TPM @ 5:12pm ET, Mar 06, 2025

A federal judge ruled that President #Trump’s firing of #GwynneWilcox was unlawful and ordered her restored to the #NationalLaborRelationsBoard in an opinion that excoriated his quest to craft a new, super-powerful presidency.

“A President who touts an image of himself as a ‘king’ or a ‘dictator,’ perhaps as his vision of effective leadership, fundamentally misapprehends the role under Article II of the U.S. #Constitution"

#NLRB

https://talkingpointsmemo.com/news/judge-nlrb-trump-supreme-court

Donald Trump Personally Thanks John Roberts For Keeping Him Out Of Jail: ‘I Won’t Forget It’
#trump #scotus #JohnRoberts #TPM #TalkingPointsMemo
March 5, 2025
https://talkingpointsmemo.com/morning-memo/donald-trump-personally-thanks-john-roberts-for-keeping-him-out-of-jail-i-wont-forget-it

Imaginative threat scenario:

When it comes to #SecureBoot some people don't want to enroll Microsoft keys because they are afraid it opens up the possibility of booting malicious boot environments.

My LUKS password is TPM sealed with PCR7 and requires a PIN. Microsoft keys enrolled.

You are a threat actor trying to decrypt my disk. You have managed to successfully boot a malicious initramfs and presented me with a LUKS prompt.

What do you do once I hit enter?

Literal #showerthoughts of the day: why isn't there a new boot firmware for personal computers that combines good ideas from iBoot and depthcharge, while keeping #UEFI as the interface for the OS and adding some cool extras?

• (when preinstalled on a Product™) start out in normie mode: verified boot a stock OS; require a timed presence check or a physical jumper to Take Control and enter nerd mode
• in nerd mode, an authenticated (configurable MFA!!) admin interface lets the user manage policies that can then be selected at boot time
• policies are configs/scripts as simple as "boot anything from the first USB stick found" or as advanced as "ask for extra password, boot only from nvme0, verify against key X, measure to #TPM PCR Y (to allow unlocking FDE), show TPM-TOTP, and disable suspend"
• you can have multiple policies just like on Apple silicon; each policy would have its own isolated EFI variable store (!)
• policies are signed on the TPM (requiring admin auth to sign) and stored to NVRAM/etc., and verified every time
• security bonus: where possible, out-of-band indication of which policy has been booted (LEDs, tiny LCDs, etc.)
• OSdev bonus: policy checkbox that turns on… a built-in m1n1 style mmiotrace (& debug) hypervisor! (literally why the hell don't we have that everywhere?!)
• the admin interface can be a nice GUI; it all must be written in Rust of course; and it must be like, just a payload for coreboot/PEI/etc. (reinventing early init is out of scope)

some computer company plz hire me to bring this vision to life? :3

TPM и Secure boot это полурак полухуй на десктопах

TPM более менее надёжно может защищать с PIN, но и тут есть проблемы, хер разбери у тебя на плате китайский камущек сделанный джунхуем за три копейки без защиты от tampering или что то реально рабочее, шифровуются ли линии - непонятно, куча нюансов, Проще тупо включить argon в luks и быть уверенным что так оно за себя постоит.

А Secure Boot, в каких случаях он хоть что то полезное делает вообще? Ядро повреждено вирусней и так вы в безопасности? Так тогда это уже пиздец и с компа уже все унесли.

Хрень это все вообщем, microsoft как обычно шизы
#linux #tpm #secure_boot #opsec #luks

Talking Point Memo's Josh Marshall is asking for help from US citizens in documenting town hall meetings in these united States:

"I’m trying to compile a list of all the town halls where GOP members of Congress got rocked by constituents this past week while they were on break. There are so many now that I can’t really write a whole post about each one. But I wanted to ask if you could send me links if there are examples where your member of Congress or Senator had a similar experience so I can add it to the list."
https://talkingpointsmemo.com/edblog/ye-olde-gop-townhall-list

#USPolitics #USGovernment #TownHalls #JoshMarshall #TPM