privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

thayer, (edited ) in what are your recommendations for a good privacy friendly sms app?

Simple SMS, obtained from F-Droid, is probably the best universal option until the Fossify project adds the fork to their suite (assuming they do).

If you have the ability to toggle network access for your apps (GrapheneOS, etc.), Google Messages is a very solid SMS app that receives regular updates. I would normally only recommend FOSS apps, but many of those options are limited and/or dangerously outdated for SMS.

Dehydrated, (edited ) in A good, privacy respecting and FOSS PDF viewer for Android?

I recommend the GrapheneOS Secure PDF Viewer. Unfortunately it’s not on F-Droid, but you can use Obtanium to pull the apk from their GitHub: github.com/GrapheneOS/PdfViewer

MuPDF is another option, it even is available on F-Droid.

thayer, in Bitwarden Privacy Software Stack Survey

Relevant topics also missing from the survey:

  • Choice of desktop operating system
  • Choice of mobile platform and OS
  • Use of email encryption
  • Use of cloud storage
  • Use and method of disk encryption
montar, in A good, privacy respecting and FOSS PDF viewer for Android?

KOreader is great, but use muPDF if you don’t want to learn

plague_sapiens, in A good, privacy respecting and FOSS PDF viewer for Android?
@plague_sapiens@lemmy.world avatar

github.com/GrapheneOS/PdfViewerI’m using GrapehneOS and the integrated PDF viewer. Can’t say of it works flawlessly on other Android OSes, but you could give it a try!

robber, in A good, privacy respecting and FOSS PDF viewer for Android?

MuPDF Viewer works fine for me. Not very feature rich tho.

vicvinfroi, in A good, privacy respecting and FOSS PDF viewer for Android?

Mupdf: lightweight, works great.

7heo, (edited ) in the encryption keys, why can't the government just sneak on them?
@7heo@lemmy.ml avatar

Seeing as other answers are either links, or wall of texts, I’ll try to keep it short and approachable:

  • Encryption, asymmetrical or symmetrical, relies on private keys being private. Once those keys are compromised, the encryption also is (read on).
  • By default, in the most simplistic form, it doesn’t matter when the content was encrypted, the private key can decrypt it. There are solutions to this problem, making encryption time (or iteration) sensitive.
  • For an attacker with enough means, the private keys can always be exfiltrated, and content can be intercepted, but usually there are much simpler solutions for snooping on encrypted content: the devil is in the (implementation) details (this link is an illustration, and by no means an exhaustive list).
  • Cryptography is always simpler to go around than to break. So never be satisfied with a cryptography only (or protocol only) audit. There are near infinite of ways to neutralize encryption with a single line of code in a client.
  • The architecture is also essential. Client-Server encryption has entirely different use cases than Client-Client encryption (EE2E).
  • And finally, Schneier’s law:

Any person can invent a security system so clever that she or he can’t think of how to break it.

Deckweiss, (edited ) in Bitwarden Privacy Software Stack Survey

I am surprised by the lack of question about VPN/SPN

eager_eagle, in [Discussion] How do you feel about age verification on Porn sites?
@eager_eagle@lemmy.world avatar

In the worst case a privacy nightmare, and in the best case useless.

RGB3x3,

“Please enter your age:”

Me, 15 years old: “Yes, I was born in 1973.”

eager_eagle,
@eager_eagle@lemmy.world avatar

“use this rotary phone to enter your year of birth”

bionicjoey, (edited )

That would probably actually be a decent age verification scheme

wheeldawg,

For 5 minutes

jasondj,

Nah there’s no kids on TikTok smart enough to figure it out and tell all the rest.

Syo, (edited ) in [Discussion] How do you feel about age verification on Porn sites?
@Syo@kbin.social avatar

Absolute waste of tax money and resources, anyone advocating for this policy is an idiot and psychotic control freak that should never be allowed to opine on public policy.

Outdated values are driving this country back into the stone age. The body was designed to be horny as we go through teenage years. It's nature. Rather than guide kids on the safe path, fools would forbid, outlaw, prohibit until they can't control them after age of 18.

Here's how this plays out... Kids are going to masturbate, regardless. They will dive deeper into the Internet into places with no restrictions and be exposed to really messed up stuff. Hey at least the parent can pat themselves on the back, right, they were good partners that did everything right by the book, even paying the kid's therapist.

Moghul, (edited )

Which country would that be? This is EU related.

I don’t disagree with you otherwise. If we had a good age verification system that didn’t involve the website, only gave a boolean age check to the website, wasn’t logged at the government or any other level, I might think this was ok. But we don’t. So as soon as this starts I’ll pirate a bunch of porn.

plain_and_simply, in Verizon Gave Her Data to a Stalker. ‘This Has Completely Changed My Life’

Seriously? What a stupid mistake to make. There should always be internal processes right?

ricecake,

Yup. I used to work for a much smaller tech company, and we had a perfectly reasonable process for dealing with cour orders and search warrants that involved crazy things like “get it in hard copy”, and “verify the information contained in the order”.
For some things, we would even just ask the officer to physically come in and that was weirdly never a problem.

sqgl,

And now they will probably overcompensate with frustrating security theatre beyond sensible precautions.

admiralteal,

I see no problem whatsoever with having frustrating levels of obtuse security required before complying with a request from law enforcement.

There is no downside.

pipariturbiini, (edited ) in [Discussion] How do you feel about age verification on Porn sites?

Kids are smart. Horny teenagers even more so. They will find loopholes or ways to circumvent these kind of things - speaking from experience. At age 13 I installed a keylogger on my PC to get the password for a parental control software my parents installed. Roughly one year later I also exploited a vulnerability in iOS 4 that allowed me to see the parental controls password in plaintext so I could re-enable Safari.

Steamymoomilk,

Mr.hacker man? Lol Yeah adding restrictions is like the alchol prohibition in the US. Restricing it is going to make it more prevlent and easily acessible. There may be more sites that pop up that boot leg it. Kinda like schools with cool math games being blocked so you have unblocked games websites.

winterayars, in In what world does a VPN need access to Camera and Bluetooth?

Camera could be taking pictures of QR codes to make it easier to set up a VPN.

Bluetooth could be integration with things like Yubikeys for authentication.

Dunno if that’s what they’re actually for, though.

BuddyTheBeefalo,

Best practices would not require camera permissions to scan qr codes.

Scan barcodes

Android includes support for the Google Code Scanner API, powered by Google Play services, which allows you to decode barcodes without declaring any camera permissions. This API helps preserve user privacy and makes it less likely that you need to create a custom UI for your barcode-scanning use case.

The API scans the barcode and only returns the scan results to your app. Images are processed on-device, and Google doesn’t store any data or scan results.

…android.com/…/minimize-permission-requests

ultratiem,
@ultratiem@lemmy.ca avatar

I’m going to assume they didn’t implement this because money. Their app runs on everything, from iOS to Android to Windows. Cost savings they likely just flipped camera permissions and didn’t care about small edge cases like these.

With that said, Mullvad is a million times better, cheaper and doesn’t require even an email or account creation to use. They created a system that effectively anonymizes the user before they even subscribe.

Schmeckinger,

5$ per month isnt cheap for a vpn.

ekky43,

Expressvpn is about 10$ a month, so 5$ would definitely be an improvement.

ultratiem, in In what world does a VPN need access to Camera and Bluetooth?
@ultratiem@lemmy.ca avatar

I don’t get why the entire world isn’t on Mullvad.

I don’t trust these guys at all. I trialed them and despite their full money back guarantee, they locked me into a support loop, always switching support staff with boiler plate responses and links that dealt with account issues or whatever. It wasn’t until I left a stern reply demanding the refund or I would escalate the matter with the proper regulatory bodies.

It took 4 support tickets. To me, they came across hella shady.

alsaaas,
@alsaaas@lemmy.dbzer0.com avatar

they closed off Port Forwarding

rwhitisissle,

Worst thing about mullvad is they only offer like 5 devices or so for your subscription. If they bumped it up to 7 or 8 I’d have no complaints.

somegeek,

For the price, 5 devices is really reasonable

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #