blog-contributions/opsec/closedsource/index.html

184 lines
9.2 KiB
HTML
Raw Normal View History

2024-07-25 12:23:36 +02:00
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="description" content="">
<meta name="author" content="">
<link rel="shortcut icon" href="../../../../../../assets/img/favicon.png">
<title>Why can't I trust closed source software?</title>
<!-- Bootstrap core CSS -->
<link href="../../assets/css/bootstrap.css" rel="stylesheet">
<link href="../../assets/css/xt256.css" rel="stylesheet">
<!-- Custom styles for this template -->
<link href="../../assets/css/main.css" rel="stylesheet">
<!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
<!--[if lt IE 9]>
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
<script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
<![endif]-->
</head>
<body>
<!-- Static navbar -->
<div class="navbar navbar-inverse-anon navbar-static-top">
<div class="container">
<div class="navbar-header">
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
<a class="navbar-brand-anon" href="\index.html">nihilist`s Blog</a>
</div>
<div class="navbar-collapse collapse">
<ul class="nav navbar-nav navbar-right">
<li><a href="/about.html">About</a></li>
<li><a href="/blog.html">Categories</a></li>
2024-08-12 23:22:38 +02:00
<li><a href="https://blog.nowhere.moe/donate.html">Donate</a></li>
2024-07-25 12:23:36 +02:00
<li><a href="/contact.html">Contact</a></li>
</ul>
</div><!--/.nav-collapse -->
</div>
</div>
<!-- +++++ Posts Lists +++++ -->
<!-- +++++ First Post +++++ -->
<div id="anon2">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
2024-08-18 22:50:34 +02:00
<a href="../index.html">Previous Page</a></br></br><p><img src="../../assets/img/user.png" width="50px" height="50px"> <ba>nihilist@mainpc - 2024-04-29</ba></p>
2024-07-25 12:23:36 +02:00
<h1>Why can't I trust closed source software? </h1>
<p>"Hey, i just wrote this code, i compiled it, it gave me this .exe file, run it on your computer!</p>
<p> What? You want the source code ? Hell no, just trust me bro!"</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /grey -->
<!-- +++++ Second Post +++++ -->
<div id="anon3">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>What is closed source software?</b></h2>
<p>To briefly explain, any software out there was first written (a developer wrote some source code, for example in the go language), it was then compiled, and then the compilation produced a binary file (for example it became a .exe file on windows)</p>
<img src="1.png" class="imgRz">
2024-08-12 23:22:38 +02:00
<p>The catch here is that when you try to reverse-engineer binary files, it's going to be very hard to figure out what the original source code was. This practice is called <a href="https://blog.nowhere.moe/binexp.html">Reverse Engineering</a>, a niche in cybersecurity, where someone tries to figure out what the original sourcecode was intended to be, with only the binary to work with.</p>
2024-07-25 12:23:36 +02:00
<p>One thing is for sure: you can't arrive at the original sourcecode from just the binary. It's mostly guess work.</p>
<p>Most software companies (which can be corporations) out there are greedy, they work hard to produce software, and they hate to have any competition. Hence they want keep their software sourcecode private, to make it as hard as possible to others to arrive at the same level of functionnality. That is exactly why closed source software is used by most people. </p>
<p>The most popular example out there is Windows, they would definitely not like their sourcecode to be leaked/reversed like it with <a href="https://www.theverge.com/2018/2/8/16992626/apple-github-dmca-request-ios-iboot-source-code">Apple's IOS</a>.</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<div id="anon2">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Spyware example, and how to replace it</b></h2> </br> </br>
<b>Discord: a Privacy Nightmare </b>
<p>Let's take a popular example: <a href="https://spyware.neocities.org/articles/discord">Discord</a> as detailed in their article on spyware watchdog, it's one of the worst pieces of spyware out there. It's sourcecode is not public, and they confirm that they collect large amounts of sensitive user data (as much as they can).</p>
<p>Discord even goes out of it's way and contains a process logger to spy on what you do on your computer.</p>
<p>That service even forces you to add a phone number in case if it suspects you tried to create an account anonymously (via a vpn or via tor).</p>
<p>You get it, it's a nightmare for privacy and anonymity there is out of the question. The perfect governmental proxy to spy on the masses.</p>
<img src="2.png" class="imgRz">
<b>Matrix : The Decentralised and Open Source Alternative</b>
<p>Take the counter example, <a href="https://matrix.org/">Matrix</a> is an <a href="https://github.com/matrix-org">open source</a> chat protocol. Meaning if there were any spyware to be baked into the software, you would see it in the sourcecode, and rest assured the entire open source community would go into huge turmoil and you would know it. </p>
<p>You are also free to use other equally elegant UX/UI clients (for example using <a href="https://github.com/cinnyapp/cinny">cinny</a> or <a href="https://element.io/">element</a>), you can self host both the server and the client, and it implements <a href="https://matrix.org/docs/older/faq/">E2EE</a> (end to end encryption)</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<!-- +++++ Second Post +++++ -->
<div id="anon1">
<div class="container">
<div class="row">
<div class="col-lg-8 col-lg-offset-2">
<h2><b>Remove surveillance using Open-Source Software</b></h2> </br> </br>
<p>To conclude, here are the requirements you need to look for, for any software that you use:</p>
<ol>
<li><p>It must be open source</p></li>
<li><p>It must be self-hostable (for decentralisation) (meaning the serverside code must also be fully opensource)</p></li>
<li><p>It must implement privacy features like encryption</p></li>
<li><p>It should not contain any telemetry, or any spyware.</p></li>
<li><p>It should ONLY do what it was originally meant to do.</p></li>
</ol>
<p>By that standard, you can already discard software like Windows, Discord, Whatsapp, Instagram, iOS, pre-installed phone host OSes, Word, Excel, etc, as none of them are open source, and you can be damn sure that they are spying on everything you do, willfully or not. (ever since the US government passed the <a href="https://www.dni.gov/files/icotr/Section702-Basics-Infographic.pdf">FISA section 702</a>.)</p>
<p><b>YOU CAN NEVER TRUST PEOPLE.</b></p>
<p><b>SO YOU CAN'T TRUST THEIR CLOSED SOURCE SOFTWARE.</b></p>
<p><b>YOU CAN ONLY TRUST TECHNOLOGY THAT CAN BE VERIFIED!</b></p>
<p><b>SO YOU NEED TO USE OPEN SOURCE SOFTWARE!</b></p>
<img src="../privacy/1.png" class="imgRz">
<p>Now that you have the full reasoning laid out, and <a href="../privacy/index.html">if being watched by an entire crowd when you are using your computer doesn't sit well with you</a>, it's time for you to move out of all that surveillance, out of that theater/circus that is closed-source software (in which you are the clown on stage, for corporations to see), <b>it's time for you to close the blinds and declare that the show is over</b> to these entire crowds that have infringed upon your basic right of privacy. <a href="../linux/index.html">It's time to install Linux</a>.</p>
</div>
</div><!-- /row -->
</div> <!-- /container -->
</div><!-- /white -->
<!-- +++++ Footer Section +++++ -->
<div id="anonb">
<div class="container">
<div class="row">
<div class="col-lg-4">
<h4>Nihilism</h4>
<p>
Until there is Nothing left.
</p>
</div><!-- /col-lg-4 -->
<div class="col-lg-4">
<h4>My Links</h4>
<p>
2024-08-15 14:43:58 +02:00
<a target="_blank" rel="noopener noreferrer" href="http://blog.nowhere.moe/rss/feed.xml">RSS Feed</a><br/><a target="_blank" rel="noopener noreferrer" href="https://matrix.to/#/#nowheremoe:nowhere.moe">Matrix Chat</a><br/>
2024-07-25 12:23:36 +02:00
</p>
</div><!-- /col-lg-4 -->
<div class="col-lg-4">
<h4>About nihilist</h4>
2024-08-12 23:22:38 +02:00
<p style="word-wrap: break-word;"><u>Donate XMR:</u> 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8</p></br><p><u>Contact:</u> nihilist@nowhere.moe (<a href="https://nowhere.moe/nihilist.pubkey">PGP</a>)</p>
2024-07-25 12:23:36 +02:00
</div><!-- /col-lg-4 -->
</div>
</div>
</div>
<!-- Bootstrap core JavaScript
================================================== -->
<!-- Placed at the end of the document so the pages load faster -->
</body>
</html>