privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

PeachMan, in When a service advertise as 100% open source, do you expect the website to be open-source too?
@PeachMan@lemmy.world avatar

It’s pretty common for companies like that to advertise that their app is 100% open source, but then stop short of guaranteeing anything beyond that. In PIA’s case, I would point out that their infrastructure (the servers that they use to route your traffic) are closed, so they could be doing literally anything in there. Their desktop client being open source doesn’t actually do much to guarantee your privacy.

If you want real transparency, Mullvad is the only real option: mullvad.net/en/help/open-source

Having said that, I personally use PIA because it’s cheaper and I don’t care enough.

LunchEnjoyer,
@LunchEnjoyer@lemmy.world avatar

Thanks for the insight! Yeah aware that Mullvad is pretty much the closest to “state-of-the-art” as it gets, compared to the rest of these services in the market.

stepanzak,

I think that the client is what really matters, because AFAIK you have no way to verify what’s actually running on their servers.

PeachMan,
@PeachMan@lemmy.world avatar

Right, you can’t be 100% sure, but there are measures that they can take to make you trust them a bit more. For example, I believe Mullvad runs systems in RAM and keeps no records of who uses what. You don’t even have to give them your email address; they don’t want it. And they submit to regular audits (provided you trust the auditors).

Also, if the client matters, then don’t use their client. Use the OpenVPN client instead.

inson1,

just pay 3 eurs more for better service tbh

inson1, (edited )

Mullvad website isnt open source (github.com/mullvad/mullvadvpn-app/issues/5392)

ccf, in How to prevent link hijacking on sites like Facebook, Reddit and Twitter?
@ccf@lemmy.world avatar

I believe Skip Redirect does this, it’s available for both Firefox and Chrome

miss_brainfart, in Governments spying on Apple, Google users through push notifications -US senator
@miss_brainfart@lemmy.ml avatar

What users often do not realize is that almost all such notifications travel over Google and Apple’s servers.

So on the Android side, is an app safe from this if it doesn’t rely on Firebase Cloud Messaging?

wincing_nucleus073,

correct

miss_brainfart,
@miss_brainfart@lemmy.ml avatar

UnifiedPush needs all the support we can give it

wincing_nucleus073,

agreed…

TheAnonymouseJoker, (edited )
@TheAnonymouseJoker@lemmy.ml avatar

Yes.

Consider blocking Firebase domains in HOSTS file, which you can do in NetGuard or Invizible Pro, which you can supply your HOSTS file.

Not sure if Hagezi or such community made HOSTS rulesets carry Firebase domains in their anti-Google/BigTech part of domains.

There are no client side tools on Apple to accomplish this, unlike on any Android, no matter $50 or $5000.

sabreW4K3,
@sabreW4K3@lemmy.tf avatar

Is there a method to see which apps are using Firebase?

TheAnonymouseJoker,
@TheAnonymouseJoker@lemmy.ml avatar

These are in progressing order of complexity.

  • Exodus database shows the “bad” domains an app connects to.
  • Warden on F-Droid does a similar but more comprehensive job for any installed app packages.
  • App Manager shows activities, services, receivers and providers apps utilise or have in a comprehensive manner.
sabreW4K3,
@sabreW4K3@lemmy.tf avatar

Thanks

miss_brainfart,
@miss_brainfart@lemmy.ml avatar

I use DivestOS, so Google Play Services and all that comes along with it isn’t there in the first place

corbin, in YouTube adds tracking parameters to shared URLs that can be traced back to individual Google accounts

I made a PWA that can quickly remove tracking variables called Link Cleaner. If you install it through Chrome or another Chromium browser on Android, it shows up as a share target, so you can share links to Link Cleaner and then share again to the intended target.

sqgl,

I don’t understand how to install it. Looked in Google Play store but didn’t find it there.

dreamer,

It’s a PWA, which basically means it’s just a website. If you’re using Firefox on mobile opening up the website won’t ask you to install it.

corbin,

When you’re in Chrome or another browser, there’s an install option in the main overflow (three dots) menu.

jaybone, in YouTube adds tracking parameters to shared URLs that can be traced back to individual Google accounts

Do people use the share button rather than just copy the URL from the address bar? Am I just really old?

octoperson,

If you use youtube on a mobile app rather than a browser, it doesn’t have an address bar

TigrisMorte,

Never use an app for what should be a web page.

Starglasses,

That would be all apps then. Apps are legitimately great. Websites do the same scummy things.

TigrisMorte,

websites are sandboxed while apps have almost full access. So, no, they don't.

Starglasses,

What does that mean? I don’t understand. Apps have full access to what that websites don’t?

TigrisMorte,
flames5123,

Exactly. A website has to download ALL the HTML every time. Sure, it can put all that in a JavaScript file and cache it but it has to be built each time. With an app, you (the devs) get to choose what to load, and it’s just usually a few simple things each time instead of constantly running a script.

Using Lemmy as a web app really sucked. Having an actual app with actual integration to a robust UI works.

TigrisMorte,

Plus as an app developer you get to go through the user's contacts and files. Having an actual app locks you and allows you to be the product the app owners sell. Nothing else and certainly nothing of value for 99% of the apps out there.

OminousOrange,
@OminousOrange@lemmy.ca avatar

But it’s blockable on websites. Firefox with ublock makes YouTube, Facebook, and instragam a relatively pleasant experience again.

serratur,

There is other apps like newpipe or grayjay, i havent experienced any ads using them

TigrisMorte,

And I know folks that have never lost money on crypto. Doesn't make crypto less of a risk.

nik282000,
@nik282000@lemmy.ca avatar

Apps are legitimately great.

Except they are mostly just lobotomized websites where you can’t copy the text or save media to your local device.

Touching_Grass,

Am I just really old?

Sounds like you have cleaned a few trackballs in your days

jaybone,

Now I just try to keep my regular balls clean.

TigrisMorte,

Pics or didn't happen.

Touching_Grass, (edited )

LemonpartyDOTcom

GBU_28,

Keep up the good fight, buddy

RovingFox,
@RovingFox@infosec.pub avatar

Many people use a phone and many people have youtube app on it.

SandroHc,
@SandroHc@lemmy.world avatar

An added benefit of the share button is that it generates a minified link – “youtu.be/abcde” instead of “youtube.com/watch?v=abcde”. I find it neater.

quo,

deleted_by_author

  • Loading...
  • flames5123, (edited )

    That is 100% wrong. Did you read the tweets or even look at a single YouTube URL?

    youtube.com/watch?v=FOO&si=BAR would be shortened to just youtu.be/FOO?si=BAR

    The link to other people’s account is in the &si=BAR part. Probably standing for “share ID” or “source ID”or something. The shortened link is just the same as the long one with watch?v=FOO being included in the URL instead of the parameters.

    variants,

    I always assume shortened links are viruses, at least that’s what got ingrained in me from the yearly security IT lectures

    givesomefucks,

    Share is easier to do it at a specific time in the video.

    Like, you can manually add the “t=x” at the end for seconds, but it’s just easier to click the box to make the share button add it.

    TigrisMorte,

    Or you could just tell the person what to FF to.

    sabreW4K3, in How to prevent link hijacking on sites like Facebook, Reddit and Twitter?
    @sabreW4K3@lemmy.tf avatar
    possiblylinux127, in Apple Confirms Governments Using Push Notifications to Surveil Users

    This is why I have always said you shouldn’t trust Apple. They have absolute power over you.

    sparky,
    @sparky@lemmy.federate.cc avatar

    Did you read the article? It says the federal government compelled Apple to comply and gave them a gag order.

    possiblylinux127,

    Which means Apple can’t be trusted. My data stays local.

    trebuchet,

    You can de-Google an Android phone with a custom ROM and have a phone that you have control over and know nobody is spying on you by running a firewall on the phone.

    Can’t do that on an Apple.

    sparky, (edited )
    @sparky@lemmy.federate.cc avatar

    Actually, you can, with Lockdown for iOS or Lulu for macOS. There are other alternatives available, these are just a pair of FOSS examples. You can totally block *.apple.com if you really want to.

    bamboo,

    It’s not quite the same though. With a custom android ROM, you can be pretty confident that everything kernel-and-up is not spying on you. On iOS and macOS, you don’t have the same level of verifiability, as the OS could just circumvent any VPN/firewall you might have configured. They might pinky promise not to, but without running another external firewall it’s not really verifiable.

    cheese_greater,

    Just trust me, I’ve always got contingency plans. I’m not naïve about them

    Cheradenine,

    As the article says, Apple and Google both do it. Apple disclosed it, Google did not.

    How is your conclusion ‘I don’t trust Apple’?

    possiblylinux127,

    Fine, I don’t trust google or apple. I don’t use any of there services anyway.

    jasondj,

    Well, you do. You just don’t know it or like it.

    possiblylinux127,

    I do? I don’t use google services at all. On my phone I run Lineage os and for file sharing I use self hosted nextcloud.

    trebuchet,

    The Ars article on this said Google had been disclosing this for the past decade already whereas Apple didn’t.

    Cheradenine, (edited )

    It said that Google put it in their aggregated report. Not that they disclosed it. There is a big difference between ‘we got 100 requests’ and ‘we got 10 requests for X info, 30 for Y info’.

    ETA: I just looked at the data again, it’s broken in to categories like FISA NSL etc, then it just gives a range of requests 0-1000 etc.

    cerement, (edited ) in privacy seems interesting, i guess I'll see what's it about didn't really think of it much when i moved from Canada to the eu
    @cerement@slrpnk.net avatar

    Startpage was bought out by advertising company System1

    • EDIT
    • Qwant seems decent
    • a lot of claims Duckduckgo has morphed into being a frontend for Bing
    • SearXNG (updated replacement for SearX) gets good reviews, but have to be prepared to hop instances as Google blocks them
    • Kagi is a subscription service that people seem to love
    Curious_Canid, in Any *good* keyboard recommations?
    @Curious_Canid@lemmy.ca avatar

    Every years or so I try out a bunch of alternate keyboards. Then I go back to using Gboard. {sigh}

    I’ve been using swipe typing for years and I just can’t get by without it. None of the privacy oriented keyboards do it well enough to really be usable yet.

    akilou,

    Almost exactly my situation, expect predictions over swiping and Swiftkey over gboard.

    tal, in YouTube adds tracking parameters to shared URLs that can be traced back to individual Google accounts
    @tal@lemmy.today avatar

    This extension will automatically remove tracking elements from URLs to help protect your privacy when browsing through the Internet.

    Firefox:

    addons.mozilla.org/en-US/firefox/…/clearurls/

    Chrome:

    …google.com/…/lckanjgmijmafbedllaakclkaicjfmnk/

    TheSun,

    This is built-in to firefox rightclick menu when copying the URL, no extension needed. Less extensions means less fingerprint

    tal,
    @tal@lemmy.today avatar

    That’ll address the case where one is copy-pasting an URL, but not where following existing links.

    alphapuggle,

    Heads up, I had to remove this extension on my browser because some websites would get stuck in a redirect loop because it’d remove the tracking stuff it’d use in a redirect chain. Took me months to figure out what was causing it

    pixta_test_trowaway, in privacy seems interesting, i guess I'll see what's it about didn't really think of it much when i moved from Canada to the eu

    when i checked YouTube i found mental outlaw in my recommendations, he seems like a good starting base.

    otter, (edited )

    Enjoy exploring! Hope you find it to be a good experience

    Eventually you might find that you’re coming back to the PrivacyGuides.org page, that’s what most people recommend these days as a starting point for recommended tools. There are a lot of companies out there advertising privacy and security without actually PROVIDING privacy and security. It’s becoming a new buzzword

    www.privacyguides.org/en/

    You don’t have to take my word for it though, just keep exploring and learning :)

    eya,
    @eya@lemmy.dbzer0.com avatar

    PrivacyGuides recommends Brave…

    otter, (edited )

    The specific breakdown was as follows

    We recommend Mullvad Browser if you are focused on strong privacy protections and anti-fingerprinting out of the box, Firefox for casual internet browsers looking for a good alternative to Google Chrome, and Brave if you need Chromium browser compatibility.

    So I think they only recommend Brave for those that need Chromium

    For mobile browsers, I don’t quite understand the differences between each. I personally use Mull when I need it, but Brave might be better on Mobile still?

    Pantherina, in YouTube adds tracking parameters to shared URLs that can be traced back to individual Google accounts

    Of course it does. Firefoxes new ClearURL copy feature is great

    papertowels,

    This was the final thing that convinced me to give Firefox another go, thank you.

    pineapplelover, (edited )

    One of us! One of us! Firefox is fucking amazing, just set up all the recommended extensions like ublock origin and privacy badger.

    Empricorn,

    uBlock Origin is now recommended by Firefox itself!? Or did you mean the community?

    pineapplelover, (edited )

    Mostly all extensions recommended by the community. However there is a recommended section on mozilla addons as well

    dd56, in Indian journalists targeted by Israeli spyware again: What do we know?

    DESIGNATED

    otter, in Any *good* keyboard recommations?

    Closest I got was Florisboard because of the customization options

    The main things I’m looking for (in order) are

    • predictions
    • better support for emojis and gifs
    • built in translations

    Google Keyboard works really nicely and it’s hard to give up on some of that

    akilou,

    Can you link me? Searching it in the Play Store turns up some weird results.

    otter,
    akilou, (edited )
    Render,

    The dev is implementing his own word suggestion engine. It will take time before it’s properly implemented.

    otter,

    ok yep that’s pretty terrible

    jacktherippah,

    Suggestions aren’t a thing in Florisboard yet. Still a WIP.

    akilou,

    Then why the hell is the top comment recommending Florisboard and saying predictions are highest priority?

    Pantherina,

    If you need word suggestions use OpenBoard. If you dont, Florisboard is king.

    I always turned off these “you cant type and I know it better anyways” suggestions. Also bilingual + colloquial is not great

    shreddy_scientist, in want a youtube discovery alternative
    @shreddy_scientist@lemmy.ml avatar

    Invidious has a related content option, it’s in the settings where you should definitely already go to ensure the proxy option is turned on too.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 18878464 bytes) in /var/www/kbin/kbin/vendor/symfony/http-kernel/Profiler/FileProfilerStorage.php on line 171

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 10502144 bytes) in /var/www/kbin/kbin/vendor/symfony/error-handler/Resources/views/logs.html.php on line 28