Brutkey

Dan Goodin
@dangoodin@infosec.exchange

A reminder that software makers, hardware makers, cloud services, payment processors, and the like will throw their customers under the bus whenever it suits them. Your payment card, food delivery account, AWS instance, Gmail address -- all can be taken away on a whim for any reason or no reason. These providers are NOT your friend. Make plans now. Have backups in place. Practice self-reliance. Ween yourself off these one at a time.


Steff 🏳️‍⚧️🏳️‍⚧️ 🏳️‍🌈🏳️‍🌈
@Steve@ferral.cat

@dangoodin@infosec.exchange
Yes. One of the things to consider is global diversity as you plan for continuity. Given contemporary politics, you may find your services unacceptably limited or monitored in certain countries, so prepare to adapt.
I run many of my own services (email, storage, akomma, etc) in a US data center, this week I started looking at snapshotting images to AMS data centers.

I'm still trying to sort out what to do if they start freezing or grabbing bank accounts - this regularly happens on a more key basis today.

As with any of this, understand your risk profile and tolerance, and try to assess the risk conditions. Build mitigation plans and establish relationships. Things can change very quickly, so prepare accordingly.

http :verified:
@http@infosec.exchange

@dangoodin@infosec.exchange Not sure what's the alternative to an email service provider. Self-hosting email is probably not a good idea either.
Besides having your data offline, probably next best thing is to have a backup provider.

Dan Goodin
@dangoodin@infosec.exchange

@http@infosec.exchange

For some of these things, email among them, I don't know what the answer is either, other than to anticipate the possibility.

Dan Goodin
@dangoodin@infosec.exchange

@http@infosec.exchange

For some of these things, email among them, I don't know what the answer is either, other than to anticipate the possibility.

mkj
@mkj@social.mkj.earth

@dangoodin@infosec.exchange As I see it, a big part of the answer to email is to have your own domain name and use that.

https://michael.kjorling.se/blog/2025/get-your-own-domain-name/

With an own domain name (under a reasonable TLD), can point it at basically any email service and pick back up if you get kicked out. Pre-pay for even just 1 extra year and keep it at that and you have plenty of time to work things out if the company behind your payment card suddenly doesn't like you. Transfer to another registrar if the registrar turns sour.

@http@infosec.exchange

mkj
@mkj@social.mkj.earth

@dangoodin@infosec.exchange As I see it, a big part of the answer to email is to have your own domain name and use that.

https://michael.kjorling.se/blog/2025/get-your-own-domain-name/

With an own domain name (under a reasonable TLD), can point it at basically any email service and pick back up if you get kicked out. Pre-pay for even just 1 extra year and keep it at that and you have plenty of time to work things out if the company behind your payment card suddenly doesn't like you. Transfer to another registrar if the registrar turns sour.

@http@infosec.exchange