[Security Discussion] CHEF-KOCH:
Sp go one, disable the whole Tor network or stop using Tor (if you not already did) because without the NSA tor wouldn't exist today. See I2P it's same good as Tor but people don't (or less) know about it because lack of money or other reasons. In fact NSa spends millions to secure the net (they also helped to create some encryption algos like AES - so would you know stop using it according to you logic?). I'm not saying that I like all stuff the NSA did (like to pay for backdoors) but in the security topic explain us how would you like handle/seperate the security + terrorism stuff? It's easy to complain but it's a lot harder to move the ass and do something. If you don't like it just sign a petition and ask the politic peoples why they need that much surveillance to track some possible terrorism. You see it's a self-made problem and not a problem what was introduced over night.

Payroll or not, you think it's because of it - but again without any proof you stuff is seriously lacking of details and logical reasons. Tell me to support servers/clouds without money. So the whole open source stuff isn't that good at is promise it is, in fact people like me need to pay there bills. To open the source which in fact will be soon or later copied (stolen without perm) is a huge risk, because if everyone use the same code and someone found a security risk mostly all software is compromised (see Freak/OpenSSL story). And don't even think that the source isn't a reasons to secure something - it's not.

Yes it was until the audit was fully done, it still shows that it's secure to use. So as I said now ohter wannabe guys picking up the source and release the same software under different name - VeraCrypt with some fixed. I think it's the wrong way to instantly recommend such software without some suspects or audits. But secure or not, that may applies to the code - as I already explained you very well - that's placebo, I steal you HDD/Smarphone and you simply can't talk about security anymore (but I admit it's more realistic that someone steal your smartphone).

That wasn't a repost. It was just because some people here seems to like the framework very much so I just gave an mirror - take it or leave it. If you found this not correct, it's just your opinion - I must live with it but not agree. That's how the whole discussion works.

You know that is impossible to retrace anything without deep package inspection, so you given IP's (which lacks of information since you not given any port or process whee this comes from) - is just impossible. As I said it would be anything, from a heartbeat to anything else what will be needed to ensure that you device is able to connect. You can remove the ping or ping6 binaries but that don't have anything todo with heartbeat or how the protocols you use may act like. It's just to make panic - isn't it? If I connect to google or any other server my connection also goes around the world to different internet points - so what, it's normal behavior because there is no direct way to the servers and back from it. Again without tcpdump or any useful information you "proof" is lack of information and is just wrong.

Again I'm not that paranoid saying all is evil. I say give the proof and decompile yourself and see what's going on. myths just working like that, some guy was angry about google and start a fake statement about something without proper info and everyone re-spell's that - That's called a myth.

I'm here the only one who said, that app-to-os implementation are just bull**** and nothing else. So we already have the proof given by Snowden and others which truly shows that you can't hide forever. So it's deepening what you needs are. If you have distrust in everything than good luck living in your cave. All I said was that something should be implemented end-to-end so that people no matter which protocols they use is automatically secured without need to care whatever tools they use (just out of the box). But opti seems to not understand that and every-time popups with his encryption statement - you can encrypt the whole day - that doesn't prevent privacy data leakage over e.g. reverse engineering. Or If you just gave me the password if I use a gun next to your head. We wouldn't need such external stuff if the 20 years old protocols would be dropped. It's just not because something to hide, it's just your human right so why not choose an goverment which works like this - but no what people doing - they blame google, ms, apple for spying and tracking - it's just naive - you voted the government which forced google, ms, apple to include such stuff and not the opposite. Think about it. Spying coasts a lot of money and only the big ones are able to do such surveillance 24 hours per day but that doesn't mean automatically that google does it or wasn't forced by secret agreements. SO don't popup with the spying argument if it's already clear that that isn't the real problem, it's just an argument to scare some naive people that aren't able to think behind the corners.

* If the framework was already present you can simply use the ota survival script, which re-applies the framework right after the first boot.

* On a fresh system just use the script which includes to copy the framework and necessary stuff in the correct folders.

There are some guides, yes the main problem is that there very fast deprecated. The only what comes to my mind is a global wiki or another platform everyone can work on (of course some experts must proof the statements -> 4 eyes principle).