Secure communication devices

JohnnyDoe said:

Most security tools can be found inside a dedicated device working on a closed network with private servers. There are a few companies offering this

Give me an example.

JohnnyDoe said:

(@CEO would be nice if you can review them in separate threads), some even offer white-label programs, allowing consultants and third party marketers to resell the products to their own clients.

Yes. Some experts in cyber security have partnership with those companies, I am exploring some, few of them are for personal use, it's only for enterprises.
I like white-label concept only if the project is valuable and has great value, I have to say great tools are free of charge and Self-hosted and are great option for paranoid people.

JohnnyDoe said:

However, we all know the story of Anom, so how can we trust a company with our privacy?

I share my proper opinion. There is no full privacy especially in cloud, even open-source projects are protected, security firms can also play the adversary role.

That’s why I mentioned a broad title, there is no such private or secure device or project, it's all about elite mindset and how we understand how things are going.

Examples.

XZ Backdoor
Open source project called. XZ Utils provide a general-purpose data-compression library

So, security is a mindset before technical skills. That's what I wanted to say.

How an Attacker’s Blunder Gave Us a Rare Look Inside Their Day-to-Day Operations
Security tool converted into surveillance tool.

JohnnyDoe said:

Big enterprises but also SME, for example law firms, can benefit from such products.
Also private individuals (who anyway own their own company in 99.99% of cases) who are wealthy enough to be professionally organized, for example with their own family office.

Yes. Right

JohnnyDoe said:

If the entire system is directly controlled and self hosted you can achieve a pretty good level of privacy.

Yes, if they failed to attack the system they will try hack the human.

JohnnyDoe said:

Yes, that's the risk I mentioned when I cited the Anom case.

This is a big problem, the anti virus company code some good malicious softwares for educational purposes. 😉

JohnnyDoe said:

100%, and goes beyond technology.

I always questioning, and thinking out of the box.

JohnnyDoe said:

Classic.

It's naive to think that you can succeed in a fight against the unlimited resources of LE.
Sun Tzu: "If we do not wish to fight, we can prevent the enemy from engaging us… All we need do is to throw something odd and unaccountable in his way."

💯
People are losing their minds, I respect the laws.

I am writing a post here about the devices mentioned.

JohnnyDoe said:

Martin Luther King Jr., Letter from Birmingham Jail (1963): “One has not only a legal but a moral responsibility to obey just laws. Conversely, one has a moral responsibility to disobey unjust laws”.

Thomas Jefferson, in a letter to Albert Gallatin (1787): “If a law is unjust, a man is not only right to disobey it, he is obligated to do so”.

Of course. The law that respects human beings.

JohnnyDoe said:

I had the opportunity to visit their data center, talk with the founder and tech guys, and I was offered to inspect their software. The custom self hosted solutions are very interesting.

I am going to check the following requirements and back to you with conclusion. It takes time and energy but worth it.

. The company has clean history, open-source contributor.
. Leaks, uncover the hidden good and malicious practices.
. Green light. Independent third party audit.
. Security experts thoughts, reddit users opinions.
. Conduct my own due diligence.

I believe it gives only 70% of good privacy.
The next step is : secure network.

JohnnyDoe said:

Some even offer white-label programs, allowing consultants and third party marketers to resell the products to their own clients.

Thank you for the idea, I will share with you more details in private.

CEO said:

The next step is : secure network.

@JohnnyDoe

Watch on YouTube

JohnnyDoe said:

shop.nitrokey.com/shop?search=nitrophone

They also offer consulting services: Consulting Services

I spoke to Alexandra, she gave me some answers I wanted to know.

Update:

Nitrokey.com response.

For NetHSM: Frequently Asked Questions (FAQ) - Nitrokey Documentation
For NK Storage, the box "Independent Security Assessment" at Nitrokeys
For the NitroPhones I would suggest that you look at this:
grapheneos.org/faq#audit

I see that lineageos.org will have a good future, but still no audit mostly for budget related issue. Reddit
It's open source and compatible with different devices.

frame.work is having a bad time.

BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices

eclypsium.com/blog/bombshell-the-signed-back…ork-devices/

fsf.org/news/librephone-project

Someone Snuck Into a Cellebrite Microsoft Teams Call and Leaked Phone Unlocking Details

archive.is/20251030171434/https://www.404med…ing-details/

CEO said:

frame.work is having a bad time.

BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices

I never really understood why framework would be an interesting buy.

I always found it more interesting and "safer" to get a second hand laptop paid with cash, with a Linux OS running, and a Whonix VM properly configured inside!

Pajama Sam said:

I never really understood why framework would be an interesting buy.

I always found it more interesting and "safer" to get a second hand laptop paid with cash, with a Linux OS running, and a Whonix VM properly configured inside!

It is famous on Twitter that's it, doing good organic marketing, and partnership with creators.