Author: michaelbazzell

Lessons Learned from Skiff’s Shutdown

Several months ago, I tested a new end-to-end encrypted (E2EE) email provider called Skiff. They had a great interface and promising product. I never promoted them, aside from a brief mention in the eBooks, because the service was too new. I had learned my own lesson from adopting CTemplar before it had matured, and I did not want to invest my digital life into Skiff until I could see how things developed. Recently, Skiff announced they had been sold to a documents workspace provider called Notion, and that all Skiff email addresses would be terminated in six months.

Fortunately, I had never used my test Skiff accounts for any communication or account creation. However, many people in this community adopted Skiff heavily and are now concerned about the inability to access these accounts in the near future. I want to present some ideas about email adoption, much of which I have already published in previous books, to serve as a reminder for personal email policy.

Password Manager: This is not just to generate and store passwords. You should also store any email address used within a service. When I place a username and password within my password manager, I always record any current or previous email addresses which I provided during signup, or changed after creation. This way, I can always search an email address or email domain to identify any accounts which could be at risk. When CTemplar shut down, I was able to quickly see the five accounts which possessed a CTemplar email address; sign into them and change the address; then not worry once CTemplar shut their doors.

Domains: I have always preached using your own domains for all vital email. Sure, we all have burners with various providers for all of the junk, but I would never use a Proton Mail, Tuta, or Fastmail domain for anything which is important to me, such as a financial institution or work communications. ANY service could shut down or kick you out tomorrow. When you use your own domain, you can easily forward it to another service within an hour.

Redundancy: If Andy gets tired of my weekly emails asking for a new feature at Proton Mail and suspends my account, I can forward my domains to Tuta within a few minutes to keep receiving email. If Hanna over at Tuta decides I am shady and suspends my account for review, I can switch those domains over to Proton Mail (Don't get any ideas you two). I maintain a paid package through Proton Mail, Tuta, and Fastmail at all times. I can store all of my domains at any of them whenever needed. While I doubt any of them are going away any time soon, I have redundancy. Both Proton Mail and Tuta offer secure E2EE, and both have proven their intent at longevity in this space. While I originally focused on Proton Mail due to high adoption within my circles, I now see many more Tuta addresses in my inbox, which encourages me to communicate directly with those people through one of my domains on Tuta.

Business: I see a lot of Skiff bashing online. People say they are sellouts, traitors, liars, etc. They are a business. Businesses pivot, become acquired, and sometimes go broke. We should never rely on a free service to provide us with a lifetime of communications. This is why we should focus on reputable and established paid services, own our own domains through a third-party provider which can be transferred when needed, and possess redundant services which are ready for our communications within an hour of bad news.

Skiff is shutting down. We should get over it. We should move on. We should find a better provider. If their closing forces us to adopt a better email protocol, then we should be thanking them.

Offline Life: IEM Fit

I previously wrote an article about the usage of Digital Audio Players (DAPs) as part of my offline life  at https://inteltechniques.com/blog/2023/11/24/offline-life-daps/ and on page 56 of Issue 006 of UNREDACTED Magazine. I really did not expect much interest in the topic from this community, but I was wrong. We still receive a lot of feedback and questions about DAPs and In-Ear Monitors (IEMs). Two specific topics have come up, and I want to address each.

IEM Fit: I mentioned in the previous post that a tight fit of an IEM is vital. You want comfort, but you also do not want audio to escape. If you have the slightest gap, much of the bass will disappear. Two people in my circles complained about getting a proper fit into their ears. One said that the IEMs would pop out while jogging and another said that one ear constantly needed nudged back into place, even while sitting. I have experienced both of these issues, and the solution which worked best for me was new silicone tips from SpinFit. I had seen these mentioned within the audiophile communities I monitor, but only tried them recently. They are game-changers.

I tried the SpinFit W1 and CP100+ models, both in a large size. I preferred the SpinFit W1, which was actually cheaper at $9.00. Since I typically use the large stock tips provided with my IEMs, the large SpinFit tips worked for me. Their sizes seem to follow IEM stock tips. I encourage you to go to https://spinfit-eartip.com and find your IEM and size recommendation.

These solved two problems for me:

First, they have way more grip than a stock IEM tip. Once I started using SpinFit tips, my IEMs stopped slipping. I could run without needing to constantly reposition them in my ears. They are a bit more difficult to remove, but that is better than sliding out when undesired.

Second, they offer flexibility within the ear canal. Everyone's ears are unique. The angle of insertion could be a challenge for some when the ear-tip does not move. The SpinFit tips are flexible within the ear canal for a better fit. This is hard to explain in words, but the following Gifs should help. The stock tip to the left does not pivot while the SpinFit to the right has more flexibility. Thank you to my neighbor for helping me capture these examples.

Some people insist that SpinFit tips improve the sound from an IEM, but I don't hear any difference. I suspect that the tighter fit without slipping is the reason for better audio. Listeners are instead experiencing the sound as it was meant to be heard. I can say that the tips did not change the audio for me, which is a good thing.

Headphone Jack Fit: Another friend complained that his wired IEMs would become unplugged due to a loose fit within the headphone jack. His assumption was that the jack itself had become worn, but my experience has been that some headphone plugs are made slightly smaller than others, causing a loose connection into the jack. Several people have posted solutions to this using small pieces of paper between the plug and the jack, but I do not like this option. The paper wears away too quickly and if it is too wide, it will interfere with the connection. Instead, I prefer a small piece of string, as seen in the image below.

I tape the string to the back of the unit and insert only a small portion into the jack. I then use the plug to help navigate the string into place. The string lasts longer than paper and is thinner. I can easily force the string to the back side of the unit in order to avoid interference with the interior connections, which are typically on the sides (not the front and back) of the unit.

Hopefully one of these solutions saves you the headaches I have went through maintaining a proper fit to my IEMs.

Digital Guide Updates 2024.02.01

Today we have updated all five digital supplement guides. If you purchased any, please check your email for the download link(s). If you would like more information on these guides, please visit https://inteltechniques.com/books.html. The following provides details of each update:

OSINT Techniques-Leaks, Breaches, & Logs:
Page 81: Updated two commands to correct a file name and use sort instead of gsort.
Page 152: Updated paths within script for options 22-24 for functioning full-disk queries.
Page 157: Added a section about internal drive data storage.
Page 164: Added an option to export a SQLite database to CSV file.
Pages 170-171: Updated eBook price increase for new orders.
Updated DataTool and DataTool.sh scripts on the website to reflect changes.

Extreme Privacy-Mobile Devices:
Page 74: Eliminated line about Telnyx not having voicemail capabilities.
Page 77: Added new section about Telnyx voicemail configuration.
Page 78 & 147: Added new Voip.ms signup code with less scrutiny on new accounts.
Page 80: Added new section about VoIP.ms voicemail configuration.
Page 81: Added URLs for VoIP.ms sanitization.
Page 82: Added new warning about MySudo purchases.
Pages 158-159: Updated eBook price increase for new orders.

Extreme Privacy-macOS Devices:
Page 60: Added clarification about encrypted DNS within macOS.
Pages 79-83: Replaced the Twilio sanitization options and script for better stability.
Page 84: Eliminated line about Telnyx not having voicemail capabilities.
Page 86: Added new section about Telnyx voicemail configuration.
Page 87: Added new Voip.ms signup code with less scrutiny on new accounts.
Page 88: Added new section about VoIP.ms voicemail configuration.
Page 90: Added new section about VoIP.ms API access.
Page 101: Added a new section about UTM Network Connectivity.
Page 109: Corrected Documents path in script.
Pages 116-117: Updated eBook price increase for new orders.

Extreme Privacy-Linux Devices:
Page 18: Added command to remove dark theme background.
Pages 69-74: Added a Twilio access and sanitization script.
Page 75: Eliminated line about Telnyx not having voicemail capabilities.
Page 77: Added new section about Telnyx voicemail configuration.
Page 78: Added new Voip.ms signup code with less scrutiny on new accounts.
Page 80: Added new section about VoIP.ms voicemail configuration.
Page 81: Added new section about VoIP.ms API access.
Pages 112-113: Updated eBook price increase for new orders

Extreme Privacy-VPNs and Firewalls:
Page 20: Added further clarification about PIA's dedicated IP usage.
Page 24: Added brief warning about self-hosted VPN service.
Pages 94-95: Updated eBook price increase for new orders.

UNREDACTED Magazine Issue 006

UNREDACTED Magazine Issue 006 is now available!

https://inteltechniques.com/magazine.html
https://inteltechniques.com/issues/006.pdf

Many thanks to our sponsors:

SLNT: https://slnt.com/
PredictaLab: https://www.predictasearch.com/
Tuta: https://tuta.com/unredacted
Cyber Ways Podcast: https://business.latech.edu/cyberways
Fortify24x7: https://www.fortify24x7.com/
Unchartered: https://www.unchartered.info/
Calabash Investigative Consultants: https://www.calabashicllc.com/
Astropost: https://astropost.io/

UNREDACTED Magazine Status

It has been a year since the last issue of UNREDACTED Magazine, which has prompted many people to ask about future issues. First, the magazine is not 'dead'. Much like the podcast, it is simply on a hiatus. Many people falsely report online that the podcast and magazine are officially never coming back, which is contradictory to my previous post. The reason there have been no issues of the magazine is simply a lack of submissions. While things started strong, the last couple of issues were a struggle for content. Right now, there have been only three article submissions received since January of 2023. Therefore, I have put no effort into another issue.

The magazine is a community-driven product. Without the community driving it, it will go nowhere. If you would like to submit an article, please email it to [email protected]. If enough content is received, I will happily publish the next issue. Without content, there is nothing to publish. I know there is interest, as we still receive emails every day asking about the next issue.

Sponsors are lined up to pay the costs and keep the content free, but there lies other problems. We received constant complaints about having sponsors. Most readers demanded free content without ads, which is unrealistic. Many readers only want ads from companies they already like, which defeats the point of advertisements. The moment we have an ad for a provider different than the one preferred by much of the community, the emails roll in threatening to never read another (free) issue unless we eliminate the current sponsor. I was even bashed online by a CEO of a company which competes with one of our sponsors for allowing anyone but them to place an ad (which they declined to do). Overall, ads may not be worth the hassle.

We have considered a small fee per issue, but the credit card fraud which comes with that is an even bigger issue. What is the solution? I do not know yet. If the articles pour in, I will figure it out.