privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

kworpy, in AirDrop cracked by China, revealing phone number & email

You guys are gullible as shit if you think this is real. This is yet another bullshit scare tactic by the Chinese government. Also these articles are hardly even sourced and are just copypasted from other news sites to farm clicks.

possiblylinux127,

Yeah this does smell fishy. The Chinese government is quick to manipulate and lie and I doubt they would want to get people not to use a service they can break.

WebTheWitted,

Ahh, that makes sense. I was wondering, “Why the hell are they announcing their zero day to the Internet?”

Matt, in How good/bad is Firefox sync.

Firefox Sync is end-to-end encrypted and open source, so your data is secure.

itsaj26744,
@itsaj26744@programming.dev avatar

Private? And do they track lot of things If I sign in ?

Zerush, (edited )
@Zerush@lemmy.ml avatar

Your syc data is secure, yes, but not so your account data, because is also known by Google, amon yor IP other. Enough to track you through every page with Google APIs (most) also your email, whichi is an unique identificator in the web. Don’t trust any web or service which share data to third parties, less in US webs or services. This is one of the reason because I always prefer EU soft, webs and services. They are also not perfect respect privacy, but lightyears better as those from US companies, where something like privacy laws, GDPR and user protection don’t exist or only in very deficient manner.

lemann, in How good/bad is Firefox sync.

Basically I am using mull on android and librewolf on linux

You may prefer to skip Mozilla entirely and self host your own Firefox Sync: github.com/mozilla-services/syncstorage-rs

Otherwise, i’ve been using Firefox Sync for years and haven’t had a single issue with it.

Regarding data sharing, do note that your Firefox Account email address is shared with Troy Hunt (haveibeenpwned) via the Firefox Monitor service, so Firefox can warn you if you have suffered a data breach. Deleting your account is the only way to opt out of that. …mozilla.org/…/how-do-i-opt-out-firefox-monitor

I personally have no issue with it as he’s a well known security consultant - BUT the caveat being that he’s a Microsoft regional director, you couldn’t know if that data is being shared any further.

kratoz29,
@kratoz29@lemm.ee avatar

You may prefer to skip Mozilla entirely and self host your own Firefox Sync: github.com/mozilla-services/syncstorage-rs

Bruh, I didn’t know about this, I swear we can self host almost anything, can we self host the Internet?

Outtatime, in AirDrop cracked by China, revealing phone number & email
@Outtatime@sh.itjust.works avatar

China has deals with apple in that the government can spy on any Apple devices for Chinese citizens.

TheAnonymouseJoker,
@TheAnonymouseJoker@lemmy.ml avatar

You know who actually has real deals with Apple (CIA shell company)? Something something Snowden Assange PRISM FISA gag…

China is not the problem. If you think USA Freedom™ companies are so moral, then why do USA companies not stop business with China and pay back over a trillion dollars worth of debt? Or how about letting Assange free in “western democracy”, or Snowden out of Russia with zero risk of getting JFK’d?

Outtatime,
@Outtatime@sh.itjust.works avatar

I agree. I’m just referring to China since this article is. They claim they figured it out but really they already have the keys to the backdoor. It was a requirement that Apple provided it to China before Apple devices could be sold in China.

TheAnonymouseJoker,
@TheAnonymouseJoker@lemmy.ml avatar

To me it seems more like a custom for US/West tech cos to engage in this spying behaviour, as they themselves also benefit from it (ads -> capitalism -> money + data for AI + helping insurance cos and FICO/VantageScore), besides their 3 letter daddies. The “China!” thing is hogwash, because China is engaging in basically the same or lesser surveillance practices as 5/9/14 Eyes governments for much lesser time.

possiblylinux127, (edited )

I think we should use Foss software because no single entity can be trusted.

And just to be clear, China is very much bad. I’m not sure why you are suddenly complaining about the US. Also I’m pretty sure China - US relations are not great so I’d imagine the CIA isn’t exactly in league with China. Just look at the number of Pandas in the US.

newcool1230, in Authy Desktop client will be discontinued from August 2024

Are there a list of alternative desktop 2fa apps?

Rentlar, (edited )

I use the flatpak Authenticator on my box. I was able to import my andOTP profile relatively easily through the json file.

jaykay, in Authy Desktop client will be discontinued from August 2024
@jaykay@lemmy.zip avatar

Raivo FTW

lemmyuser30,

Sold to Mobime months ago. The enshittification will happen eventually.

jaykay,
@jaykay@lemmy.zip avatar

Bitwarden here I come lol I’m a bit worried about having both passwords and totp in one app tho

azdle, (edited ) in How good/bad is Firefox sync.
@azdle@news.idlestate.org avatar

As others have said, it’s quite good on privacy. For the truly paranoid, IIRC you can even self-host the sync server.

From the security perspective of privacy, do make sure to use a good password for the Mozilla account, the account password is also the encryption key for the E2E encryption.

electro1,
@electro1@infosec.pub avatar

They could have separated the two passwords or at least provide an option to do so

If the user skips the encryption key set up page, then they can make the primary password to be the encryption key

LWD, (edited ) in How good/bad is Firefox sync.

deleted_by_author

  • Loading...
  • itsaj26744,
    @itsaj26744@programming.dev avatar

    Thanks, Looks like gonna use it

    shortwavesurfer, in How good/bad is Firefox sync.

    I use it for bookmarks, but that’s it. All my passwords and stuff are in my password manager, and I do not trust browsers with that data.

    itsaj26744,
    @itsaj26744@programming.dev avatar

    Ya I use bitwarden, was asking about data collection.

    Atemu, in I deleted all my post from my reddit account, can they still monetize them?
    @Atemu@lemmy.ml avatar

    You gave them an irrevocable license to basically use your content in any way they see fit. Them not showing posts you deleted is just them being nice, not being obligated to do so. They could simply ignore your request or restore posts later.

    You should have thought about that when you gave them that license to your content.

    danhab99,
    @danhab99@programming.dev avatar

    Posts tend to die within a day. What would be the point, reddit posts aren’t worth restoring.

    Sheeple,
    @Sheeple@lemmy.world avatar

    Almost. According to EU law, identifiable information including usernames need to be redacted.

    They can restore it but it needs to be without your account information attached

    Zerush, in I don't want Meta AI in WhatsApp, even if it doesn't snoop on my texts
    @Zerush@lemmy.ml avatar

    Easy, don’t use Zuckerbot crap

    brb,

    Not easy when all my friends and family use it

    bbbhltz, in I deleted all my post from my reddit account, can they still monetize them?
    @bbbhltz@beehaw.org avatar

    Did you delete them outright or modify the text and then delete it? That is the tinfoil hat way! If you lived in Europe you could request your data to be deleted. You can also request your data and they are supposed to comply at some point. If you did that you could see what they have.

    The rabbit hole will drive you a little bonkers so maybe don’t overthink it for now and take a look at www.reveddit.com and archive.org to see if your username pops up.

    Swyperider,
    @Swyperider@lemmy.ml avatar

    Just an FYI but if you posted anything prior to March 2023, the Pushshift project archived it. Even if you requested Reddit itself to remove all of your data, everything will exist in that archive forever.

    DreadPotato,
    @DreadPotato@sopuli.xyz avatar

    Seems like a GDPR nightmare waiting to happen for them

    Atemu,
    @Atemu@lemmy.ml avatar

    Not really. It was publicly available information. It’s, by definition, not private.

    LWD, (edited ) in Is it possible to self-host Clarity?

    deleted_by_author

  • Loading...
  • reactive_recall,

    You are right, I’ll see if it works

    TCB13, in Is it possible to self-host Clarity?
    @TCB13@lemmy.world avatar

    Is this yet another MS product like VSCode that is free forever but has a license that only allows to official builds to be used and/or running on their servers or…?

    reactive_recall,

    No idea, I’ll try to look for more info about it

    Platform27, in What are some good real privacy podcasts/channels?

    Personally, I like Techlore, NBTV, Firewalls Don’t Stop Dragons, Luis Rossmann, The Hated One, The PC Security Channel, ThioJoe, and (sometimes) Linux oriented channels like The Linux Experiment do some good privacy/security stuff too.

    Gooey0210,

    Tbh, i wouldn’t recommend some of the channels above

    Still subscribed to techlore, but have a lot of questions about their stands on privacy etc

    Also, Luis Rossmann is a really really great guy, love his work, but he is a little bit boring to watch or listen to

    Platform27, (edited )

    Each to their own preferences. Some of these sources disagree with each other, and that’s a good thing. The worst place to belong, is within an echo chamber. Always think for yourself, and try to understand where others are coming from (why they came to the conclusions they did).

    As for Louis… honestly, I prefer his tempo. It feels more genuine, less like he’s putting on a show for the camera. In the tech world, take Craft Computing, LTT, or Jays2Cents as examples. All have gone on record to admitting to putting on a show, changing how they talk, etc, while on camera. If Louis is putting on a show, I gotta admit, I’m impressed. Hats off to the guy.

    LWD, (edited )

    deleted_by_author

  • Loading...
  • Gooey0210, (edited )

    Have never heard of this guy

    My problem with techlore is that they are ok with using google, apple, facebook

    They pretty much promote proton, and kinda disencourage selfhosting

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #