Same.

Bless Bruce but if I were able to write one sentence and call it a blog entry some things would be different around here!

You’re talking about the French kid. As it turns out, operating an email service requires knowing a users ip and the government can implement ip monitoring if they want to. Protons response was to use tor or a vpn like theirs which everyone got mad at them about but was later upheld in court as the correct solution (email provider isn’t a telecommunications provider judgement).

How to be paranoid but not schizophrenic guide. Avoiding mental illness in the modern age %100 no cap real strats the pros use now you’re playing with power!

Gotta excercise the ol creative muscles somehow. Thanks for putting up with it!

I think what you just said is our breakdown. Neither cryptocurrency, cryptography (in its d-h or one time code permutation) or any other technology removes the requirement that you trust the other party both to perform their side of the process and to not betray you.

It’s important to not go down that route because if you can’t ever trust then you can’t believe you can ever have privacy or anonymity except when you completely retreat from all communication or interaction both electronically and physically.

Remember that the problem cryptocurrency solves is the credit card clearing problem, not the problem of trusting your counterpart.

Also your proton example might be the one where some ding dong used their out of the box (no adp) icloud email as the recovery for proton and the cops got the icloud through a logged in device and recovered the proton account using it as opposed to forced ip logging but I might be mistaken.

I still dont think you’re comparing apples to apples here.

A physical payment for the thing you linked (I dont use posteo but they seem to use the same cash+nonce system everyone else does) consists of a sealed addressed envelope with the bills and a number used once (nonce) at the recipient in order to associate receipt with account. The nonce is not saved or recorded.

So a surveilling party could possibly perform in depth inspection of every letter going to the service they’re trying to surveil, record all the payments and nonces, cross reference the mailing location of the individual letters (idk of any post service that bins them according to location of origin but I’ll go with your description!) with public camera footage and make a positive id for all the people who mailed the letters and they still don’t have the ability to associate payment/person/letter/nonce with a particular account because the nonce isn’t retained.

They’d just know you sent a letter containing money and a code to a service.

Again, what I described is a type of investigation that is extremely expensive and requires exacting precision at every step in order to not make an error that would make the evidence inadmissible.

They’d have to have infiltrated the recipient at the time and place of associating account with nonce and if that’s the case it doesn’t matter if you’re using the monero jetpack/ninja climb or the physical letter walk across the gymnastics mat t-posing method because the other end of the mat is jail.

But let’s look at it from the other direction, they’re not trying to remove privacy and anonymity in general, they’re specifically trying to get you:

You are observed through your open window from the cleaning service van across the street. When you leave to mail your letter, which contains unique microscopic markings and fiber identifiers cross referenced to the s/n of envelope boxes you were recorded on cctv purchasing at the drug store last week, the van radios a follow car around the corner that appears to be a bunch of hoodlums who slow to a crawl and yell out their car window, berating and denigrating you. You don’t respond, though their yelling distracts you from the pebble in your shoe and the traffic cameras get a good id on you through gait recognition.

The follow car bumps into a fire hydrant and you round the corner and enter the restaurant, where the server seems to be looking at you and texting constantly. Your grilled cheese has melted chocolate in it with the unique mushroomy taste of senna. You catch the host and bartender running your change back to the office and hear the sound of a scanner and notice the shifting white light coming from behind the open door.

You put part of your change in the envelope with the nonce you wrote using your non dominant hand and lick it to seal the flap, activating dozens of moisture sensitive polymer capsules to absorb and preserve the trace genetic material left behind for later analysis. Outside the restaurant, you drop the letter in the mailbox and head home. The restaurants host radios when you round the corner and a flower seller with dark sunglasses, an earpiece and a conservative suit on under their apron rolls their cart down to the mailbox, unlocks it and picks out your letter.

They know that you sent a letter with money and a code to some address. If they allow it to continue on its way then they can’t associate it with a particular account because the code isn’t retained after use.

I agree about the devil you know vs the infinite possible future ones you don’t.

I think you’re making way too many assumptions about physical surveillance (“they know you care about privacy” as opposed to the actual thing they know, which is simply that you mailed a letter, being able to narrow your suspect list down based on the fact that they care about privacy, etc) but even if I were to take every single one of them at face value then the authorities have less information than is public on a bitcoin transaction (I know you’re a fan of monero, I’m using the amount of information in a bitcoin transaction here to make my point clear in the language of crypto). And they had to be looking when you did it.

I’m of the opposite opinion: digital surveillance is game over. The opponent still has orders of magnitude more resources than you, but they also have access to your entire communications chain via well documented backdoors, can apply millions of exploits on each piece of software or hardware involved in that chain, can literally directly translate those resources to faster and higher quality exploits and with hndl they don’t even have to be there when it happens. I think the best thing you can do is avoid the digital as much as possible.

I always used to laugh at my professors, friends and coworkers who were “revolver next to the fax machine in case it gets any funny ideas” types but a few decades around computer security done made me into a stereotype.

Of course Im not suggesting that d-h is comparable to some mathematical expression of laundering your money during lunch and sending a letter. You can’t compare the two using mathematics because elliptic curve works in a really narrow set of domains. Now my friends in actuarial work might have something to say about that but I was trying to use types of equations as a way to help explain how the physical and digital are different. what I mean is that any new discovery or development could undo the security of digital transactions, specifically blockchains which exist as public ledgers in perpetuity. When solving the calculus of what degree of concern and care a person needs to exercise you gotta look to any possible future.

Physical transactions are done when theyre done. You either succeed or you don’t, no one can dig back into the perfect public copy of everything you did and reveal it was you (or even in the case of some blockchains what was done!). Perhaps they find out they have a surveillance video of you going to the restaurant and getting lunch then mailing a letter and try to use it as evidence that you conducted a cash transaction using a nonce. It’s meaningless.

You don’t need to worry about it in any way you wouldn’t have to worry about conducting the transaction digitally. The solution space of a physical transaction is finite, which of course could be partially or completely encompassed by the infinite solution.

That last part is to say that for both a physical or digital transaction you gotta worry that the other party (or yourself) screwed it up somehow or betrayed their counterpart but because it’s common to both methods it’s not worth discussing.

Again the point of all this math talk isn’t to suggest that we ought to be talking in proofs or something silly like that. Some people really “get” math though and using it as a metaphor can help get the point across.

They might see that I ate a sandwich and mailed a letter vs my transactions are in a public ledger and can be tied to me at any time in the future when that ledgers cryptography gets broken or my information or the other party’s information gets corroborated.

Quantum is fake. Everybody knows it but no one talks about it.

Parallel computing is not fake though, and the technology to do it is being deployed at scale never seen before in our lives. Hash cracking software is already designed to take advantage of video cards, and the same mathematics were put into service and honed on those video cards years before during the crypto boom(s).

So now you have to contend with the future of ai: if the bubble pops then there’s piles of parallel computing hardware out there that are suddenly upside down on their leases and have to be pressed into service doing something, anything. If the bubble doesn’t pop then consistent improvements in efficiency of new stuff cause old hardware to become available to the part of the market that can afford a little more per millisecond of torch time: crypto and crackers.

This is already happening.

The space you need to be able to solve for to transact physically is limited and finite, the same space for digital is unlimited and infinite.

I think you’re making some critical errors in this reply. If you make personal privacy or security decisions based on its content, it’s probably a very good idea to reevaluate them with a clear and honest outlook.

It is easier to develop trust of a single provider than to develop trust of a random decentralized network of providers in a system that has been under confirmed attack for at least 15 years.

Browser fingerprinting can be defeated or manipulated in many ways to accomplish different goals outside of either using tor or a vpn.

Cash may not be under active surveillance and provides fantastic anonymity if you are capable of handling it appropriately. Even if you are not, investigating cash transactions is incredibly expensive, cumbersome, time sensitive and is defeated by a million simple methods that have been in practice for millennia.

Physical surveillance is barely even circumstantial evidence of the crimes we’re talking about, Hndl troves are incontrovertible. People get caught using monero to do crimes all the time.

Of course if you dress up like the hamburgler you’re gonna stick out. Just look normal.

I did not intend to fight you about this, the point of my reply was to provide some context about the often overlooked physical side of things.

We very often overlook the physical because we think it’s too unknown and that we understand the digital much better but in many years I’ve never met a person who thought that way and could explain in detail how the web works or why certificates are scrubbed.

Keep your nose clean out there, you never know whose gonna be looking in 20 years…

Physical surveillance of mail is incredibly expensive, slow and subject to a bunch of regulations.

It also doesn’t consistently work.

Electronic surveillance of communications is incredibly cheap in comparison, near instantaneous and an evolving new technology that’s loosely regulated if at all.

It also creates a 1:1 copy of the transmission for interpretation at a later date.

Hndl applied to physical surveillance is all metadata. Hndl for digital interactions is content too.

Physical movement can be tracked by cameras. All digital transactions are tracked by virtue of the way the internet works.

When you put your trust in digital transactions you are putting your trust in the cryptography that hopefully underpins them. With recent regimes of harvest now decrypt later, you are putting your trust in both the perfect forward and quantum/parallel resistance of that cryptography.

Just some food for thought. Sending cash might be a smarter choice than you think.

Yeah I use mullvad.

Uhh, proton works fine…

You might need to clear your browsing data. You might want to start doing that all the time if you’re concerned about anonymity or privacy.

Idk

Everyone telling you email isn’t private is right.

Don’t use it for things you don’t want to be public knowledge.

What is your desktop environment?

Specs for what?

The hardware you run it on will have a range of specs.

The model you try to use will have a bunch of measurements that can be called specs.

Once you pick some hardware, the measurements of the model you run on it can be adjusted for “accuracy” or speed.

Of course, the range of hardware that’s available to you informs that calculus.

The alternative to answering this post is to get a Mac mini or whatever they’re selling as a desktop llm device now and not mess around.

Yes it works good if you read first and plan and follow the instructions. If you just yeet it into your computer you will have problems.

You may end up doing a reinstall as opposed to a patch or upgrade.

You may find that dynamic wallpaper not working, needing to update with command line, photos app can’t edit and needing to use a third party browser is an okay set of tradeoffs to get to sequoia (macos 15) which still gets point updates and security patches (grimly: for now).

If I was using a 10,1 I’d back up my system and jump straight to sequoia with oclp. If you can get by long enough to save up for a more recent computer (m1+) then that’s a win. Sequoia is the last version of macos with support for Intel processors. Now is a bad time to be running old versions.

E: before oclp the linux wisdom for these models was to go in with a soldering iron or a chip clip and disable the dedicated gpu in order to avoid problems with it. Often it would break the hdmi or DisplayPort or whatever video out port was on the side of the laptop because while the integrated display could run off the intel processors gpu the video out was hardwired to the dgpu.

Your computer is MacBook Pro 10,1 and pro 15” retina mid 2012 a1398.

The relevant technologies are ivy bridge, intel hd 4000 and nvidia Kepler.

According to opencore legacy patcher, you can use Ventura (osx/macos 13)with broken live text if you go the opencore route.

That will most likely offer a better experience than linux on your hardware.