privacyguides

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

Gooey0210, in Using email aliases (email alias services) with self-hosted email

SimpleLogin has it’s selfhostable thing Not exactly sure how that works

JackGreenEarth, in What is the good alternative right now to Google translate?

Microsoft translator exists. But is is also a MAGMA company.

luthis,

“Make America Great” … My Ass!?

Kata1yst,
@Kata1yst@kbin.social avatar

I love this interpretation. But for anyone curious, this is the new "FAANG" abbreviation.

Meta
Apple
Google (Alphabet)
Microsoft
Amazon

luthis,

FAANG

Facebook Apple Amazon Nicrosoft Google???

Oh it’s ‘Netflix’ apparently, would have thought Microsoft would have been waaaaaay bigger than Netflix.

sleeo, in What is the good alternative right now to Google translate?

I use Deepl

netchami,

It provides pretty good translations, but it’s not particularly good for privacy. Obviously it’s better than Google, but their privacy policy isn’t great.

DarkThoughts,

My main issue is they want credit card info to get an API key, which is required if you want to use it through (properly integrated) addons or whatever. The translations are pretty much magic though. Really good results most of the time.

InfiniWheel,

The API is also the only way to have it be private as well, as one of the perks is that all your entries get deleted.

LWD, (edited ) in SimpleX Self-Host Script, Tutorial, on Monero Provider

deleted_by_author

  • Loading...
  • leraje,
    @leraje@lemmy.blahaj.zone avatar

    How was that an ad? What exactly did you think was being advertised?

    And some of us quite like tutorials as they tend explain not just what to do but why it’s being done.

    Saki,

    Leave it to the cryptocurrency people to turn a simple tutorial into an ad.

    I’m from the same Lemmy instance monero.town (technically a mod?) and can see your point. Initially I was vocal about perceived link-spamming, advertising this SimplifiedPrivacy thing; at least a few users there were/are feeling the same way, as you can see e.g. here. So please don’t lump crypto (esp. Monero) users as a single kind of people.

    Like @leraje pointed out, some of info provided by this user (ShadowRebel) can be useful. Perhaps some people prefer a video to text. Monero users tend to respect freedom (of speech) and advertisement is not forbidden in Monero.town anyway. Perhaps you can understand that this does not mean “the cryptocurrency people” are the same.

    Wave,

    So please don’t lump crypto (esp. Monero) users as a single kind of people.

    I was expecting childish reactions when I shared this post. But that doesn’t matter, if only one user has benefited from it, it was well worth it.

    Only two days and we already have at least two new servers:

    smp://BgQRXMpC_pOpm2eAWvwFAvz6o1pJMu8y6_LaxZYxAFg…xftp://YLfpIjjRjJdOHKSPHCxhHMUmB_auPkxSIkfo76cH7F…

    smp://nfm-LwDDqi9KDPzebYMbriFXdbE3cHvcfHeEhS-1230…xftp://v6P3u9_CPYcgoA79e6tHinywTuzxb6RR6hrSaHrlhz…

    Saki, (edited )

    @ride I know the background: this info could be very useful, and you commented, “Even if not directly Monero-related, this draws attention to the community when such contributions come from here.”

    The problem is, !privacyguides has a different set of rules than Monero.town does, explicitly stating:

    This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.

    Hence, as you can see in monero.town/post/1085883 (you double-posted the same thing, too), a negative comment about this:

    I feel like this might count as self-promotion, given it’s mentioning a particular website, their GitHub, their running service, etc. Regardless, it is informative

    @LWD is not “childish”, even stating “it is informative.” But even if this post may be useful, we should follow the rules of !privacyguides when (cross-)posting here; otherwise, Monero.town may look bad.

    Wave,

    Yes, thanks for the clarification.

    Nerrad, in Signal details costs of keeping its private messaging service alive | TechCrunch
    @Nerrad@lemmy.world avatar

    This Lemmy post caused me to start a monthly Signal donation. Support non profit messaging and social media.

    Still a bit angry though about them dropping SMS support and forcing me into Google Messages.

    Echo5,

    Pretty sure Fdroid has a basic messaging app or two that might fit the bill so you don’t have to use google.

    Scolding7300,

    community.signalusers.org/t/…/57

    Apparently there’s no RCS API so any 3rd party app will disappear at some point (if RCS becomes the popular protocol)

    Echo5,

    That’s frustrating. Here’s to hoping someone will come up with a FOSS solution.

    nosnahc,
    @nosnahc@lemmy.world avatar

    Google Message? Why? QKSMS work well

    kurcatovium,

    Actually it does not, sadly. I’ve used it for years (probably five or even more) and ditched it couple months ago when I got angry at it. The main problem is I could not force it to accept MMS on newer android (used to work on my old phone IIRC) which is crucial for my work - because voice mail gets delivered as MMS in my country. Every time I got work phone call that I missed meant voice mail that never got delivered. I got notification that I have MMS, and that I need to allow them, but that’s it. Everything was allowed in the app and in the systsm, still no MMS.

    ForestOrca,
    @ForestOrca@kbin.social avatar

    Same. I've been supporting it for some years now, but I'm upping the ante. I have many friends, family, and business associates I've been able to get on Signal. It's a super useful app, and a crucial privacy service. Let's do what we can to keep it going.

    otter,

    The biggest thing for me right now is backups

    I can’t comfortably recommend it to people that will lose access if they lose their phones / upgrade without following the process perfectly

    ForestOrca,
    @ForestOrca@kbin.social avatar

    Umm, doesn't one have to backup anything one wants to save/ have access to in the future? Aren't upgrades a thing will all software? I'm not sure how this is different for Signal versus any other messaging app. Or any app / client that produces documents, etc?

    otter,

    The process is a bit involved on mobile. Setting up a backup location, using a third party app to sync updates and deletions etc. It could be simplified by integrating with common cloud storage services (the encrypted file)

    Also iOS doesn’t have backups at all last I checked. If you lose your phone the messages are toast

    ForestOrca, (edited )
    @ForestOrca@kbin.social avatar

    I just checked the Signal Support (https://support.signal.org/hc/en-us/articles/360007059752-Backup-and-Restore-Messages). And it appears there is a method generally, but not for iOS. Tho' screenshots work. And I understand how not backing up, and disappearing messages contribute to security.

    otter,

    Well sure, but encrypted backups are still secure. What’s not secure (or private rather) is someone realizing they can’t have a backup of important chats and going back to Facebook Messenger.

    Backups are a thing on Android, and they’re planned for iOS. It just hasn’t happened yet. People can choose what they want to backup and when they want disappearing messages turned on.

    plague_sapiens,
    @plague_sapiens@lemmy.world avatar

    Use Molly instead. There are 2 versions, one FOSS one and one with some proprietary data (notification stuff).

    Vincent,
    GrappleHat,
    @GrappleHat@lemmy.ml avatar

    I hadn’t seen that, thanks!! I was also among those confused when Signal pulled SMS, but now it finally makes sense.

    Signal could have done better PR to explain the “why” at the time.

    bionicjoey, in Thoughts on this Reddit post claiming 'Lemmy doesn't care about privacy'?

    If you post something on the internet, there should be no expectation that it won’t be preserved for an arbitrary length of time. Same as how you can’t legally claim that you expect privacy while in public

    DidacticDumbass,

    This. Everyone needs to be mindful about what they post. You are communicating with real human beings afterall, with their own life history and memory.

    So be kind and give up the fantasy you can reverse your actions.

    milkytoast, in Signal details costs of keeping its private messaging service alive | TechCrunch
    @milkytoast@kbin.social avatar

    does anyone know roughly how much operating costs could be per person? I'd like to donate, but I don't have a whole lot of money. I'd like to at least ensure that I'm covering "my share" so to speak

    Vincent, (edited )

    Signal had 40 million active users in 2021. With 14 million in infra cost, that comes to .35 per user/year. Total expenses are about 33 million, so about .825 per user/year. All in all that seems very reasonable.

    https://news.ycombinator.com/item?id=38291950

    So it should be pretty easy to cover your own costs and maybe that of a couple of friends to make the transaction fees worth it :)

    milkytoast,
    @milkytoast@kbin.social avatar

    so $1 a year would cover it? might as well covery whole family at that point. think I can afford $5 a year lol

    catacomb,

    Funny, that’s in line with the $1 a year WhatsApp was going to charge.

    Sounds like just $5 will pay for me and 4 others, so that’s nice.

    Vincent, (edited )

    Haha exactly, by that calculation $1 a year would cover you and two others. Get that family onboard :)

    DeflectedBullhorn, in Does anyone here have a reliable source for listening to old episodes of the The Privacy, Security, & OSINT Show Podcast?

    Look what fell off a truck in Base64.

    spoilerbWFnbmV0Oj94dD11cm46YnRpaDozYzIxZjVmM2E4ZTRmZTIzMTk2MTdjOWRmNjU0OGIwMmVjYWIy MGFjJmRuPVRoZStQcml2YWN5LCtTZWN1cml0eSthbmQrT1NJTlQrU2hvdystK0VwKzAwMS0zMDUm dHI9dWRwOi8vdHJhY2tlci5vcGVuYml0dG9ycmVudC5jb206ODAmdHI9dWRwOi8vdHJhY2tlci5v cGVudHJhY2tyLm9yZzoxMzM3L2Fubm91bmNl

    GravitySpoiled, in Using email aliases (email alias services) with self-hosted email

    Using a public service like proton or firefox for that has the advantage of you blending in with the crowd, i.e. the service doesn’t know who the account belongs to whereas the service knows exactly that it belongs to you because only you have the top level domain.

    In theory … in the real world it doesn’t matter too much because noone will hunt you down.

    I guess that it’s no more of a hassle than using one email with your own top level domain.

    MajesticFlame, (edited ) in Why Not Store Encrypted Emails in Plaintext Locally?

    I think Tutanota (or just Tuta now?) does this, since search works correctly.

    I think not using PGP helps Tuta a lot with this, since PGP is really outdated and does not play well with modern features.

    privacybro, in Google Resuming the transition to Manifest V3 - Chrome for Developers

    can someone refresh me on why exactly migrating to manifest v3 is bad?

    mephiska,

    From what I've read it will disable ad-blocking extensions.

    ericjmorey,
    @ericjmorey@programming.dev avatar
    5ubieee, in Secretive White House Surveillance Program Gives Cops Access to Trillions of US Phone Records

    yayyy ^-^

    pg_jglr, in Signal details costs of keeping its private messaging service alive | TechCrunch

    Bit difficult to keep using it since they killed sms interoperability. I understand the security concerns but if no one uses it, doesn’t really matter does it.

    LollerCorleone, (edited )
    @LollerCorleone@kbin.social avatar

    If you were using Signal just for SMS, none of your messages were secure anyway since the SMS protocol itself is not–defeating the purpose of signal. And if you had already convinced people to install Signal by using SMS as a caveat, you can just continue contacting them through the app.

    I was able to convince pretty much everyone who matter in my life to install Signal and they all love it because WhatsApp has become too cluttered and spammy.

    Kalkaline,
    @Kalkaline@leminal.space avatar

    I can’t get anyone to use it. They should market it as a workaround for the Android/iPhone/PC messaging issues with privacy and security as a bonus, but I don’t know if iPhone users would go for it.

    infectoid,
    @infectoid@lemmy.world avatar

    iPhone user and monthly signal donor here. Have been using it since it was available for signal. Have managed to get everyone I care about to install and use it.

    I basically made it the only way to message me and get my attention.

    I’m not that special, I just care about my friends and I think they might like me enough to do this one thing for me. At least they know they can cut me out of their lives by uninstalling signal.

    moreeni,

    It does because it’s code you have to take into account when adding new features. Basically unnecessary pain in the ass.

    Excrubulent, (edited ) in List of experts advising the EU in support of CSAM legislation has been published
    @Excrubulent@slrpnk.net avatar

    I’m gonna need a breakdown on what “in support of CSAM” means in this context, since the link doesn’t provide any.

    I assume they’re doing something bad because it’s lobbyists and cops advising on internet security, but I still don’t understand your title.

    Edit: I misread the title and missed the word “legislation”. Reading it properly it is completely clear.

    Edit 2: The title was apparently edited, I can read just fine, and this question is no longer terribly relevant.

    BrikoX,
    @BrikoX@lemmy.zip avatar

    It’s about the EU Chat Control legislation, which goal is to break E2EE to “save” the world from CSAM.

    These experts helped to write this draft: eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=S…

    Excrubulent,
    @Excrubulent@slrpnk.net avatar

    Oh… “in support of CSAM legislation”. Yeah… I can’t read apparently.

    BrikoX,
    @BrikoX@lemmy.zip avatar

    It’s on me. I missed the word “legislation” initially and edited the title after your comment.

    Excrubulent,
    @Excrubulent@slrpnk.net avatar

    Oh lol, well thanks, good to know.

    privacybro, in Alleged RCMP leaker says he was tipped off that police targets had 'moles' in law enforcement

    Tutanota was (at least) compromised from the moment that they were ordered by German courts to spy on anyone that they were ordered to. Including skipping encryption upon email arrival. Why the hell they are suggested in the privacy space after that just proves how retarded most privacy bros are.

    ReversalHatchery, (edited )

    Why, what else could have they done with laws? Protonmail and literally every other provider on the clearnet is also susceptible to this. The only thing they can do is have lawyers to find what the absolute most minimum they are required to do and only do that, but that’s all.

    privacybro, (edited )

    False.

    Proton can not be made to spy on customers most they can do is hand over info they already have

    proton.me/blog/climate-activist-arrest

    Proton’s encryption cannot be bypassed by legal order. Tutanota’s can.

    techcrunch.com/…/german-secure-email-provider-tut…

    ReversalHatchery, (edited )

    Proton can be legally ordered to start recording the IP address of a specific user. That’s why they recommend that you always connect through their Onion site.
    Other than that and if that’s possible, I think it may also be possible to legally order Proton to keep the unencrypted form of incoming emails for a specific user, but Proton did not said it in the article, and Swiss laws might protect them against that. It’s certainly possible technically, and good to be aware of it, I think.

    Sorry but I can’t open the second link, as it actively resists it. I suspect though that the problem with Tutanota was not their encryption, but their legal system, which required them to keep a copy of the incoming emails.

    Also, don’t mistake me, I’m all for protonmail, and I mean this. But did you know they only encrypt the email contents? Metadata like title, sender recipient and other things in the mail header don’t get encrypted.

    privacybro,

    you’re right about the IP thing. that’s a good clarification rather than just “spy”. i suppose it’s less dire than Tutanota not encrypting incoming mails if you use tor and vpn by default.

    yeah basically it more or less proves that swiss privacy is a bit stronger in this case vs Germany.

    on the proton encryption, i did know about this but does that apply to proton-to-proton, proton-to-NonProton, or both? if you have details on this let me know.

    either way the fact that they dont makes me feel that proton is a similar honeypot to signal and telegram, where they make a compromise with the five eyes, to give them metadata even if actual contents are safe. metadata can be much more powerful than contents often times

    in general email is just the worst protocol when it comes to privacy. sadly.

    ReversalHatchery,

    on the proton encryption, i did know about this but does that apply to proton-to-proton, proton-to-NonProton, or both? if you have details on this let me know.

    As I know it applies to both. Formerly they were asking (among other things) about the titles of your latest emails for account recovery. (after I have put all the links here I realized that these don’t give a details on whether this also applies to inter-proton messages…)

    A few sources:

    proton.me/…/proton-mail-encryption-explained

    Subject lines and recipient/sender email addresses are encrypted but not end-to-end encrypted.

    www.reddit.com/r/ProtonMail/comments/…/eiphhs7/?c…

    …stackexchange.com/…/why-is-some-meta-data-not-en…

    either way the fact that they dont makes me feel that proton is a similar honeypot to signal and telegram, where they make a compromise with the five eyes, to give them metadata even if actual contents are safe. metadata can be much more powerful than contents often times

    Yeah, might as well be. But if it is, I’m afraid we won’t get to know for a few decades, if ever. And I think it’s still better than the alternatives… the alternative email providers, that is.
    If it comforts you, in their reddit comment I linked they mention (in 2019…) that there’s a proposal they support for openpgp to be able to have an encrypted subject line.

    privacybro,

    Really appreciate your thoughts and time, thanks.

    I found out also that Tutanota is essentially the same, except that they do E2EE subject lines between tutanota users, but I am guessing that is because they don’t use PGP unlike Proton. In which case, Proton is in the right in this case because they are increasing E2EE interoperability beyond just their own users. So, my comment about honeypotting was really uncalled for I think, and I apologize for that.

    The OpenPGP proposal is interesting, but I couldn’t find anything on it. All I found was this below, which explains that email headers can’t be/aren’t encrypted, and subject is one of those, so that’s why. I have no clue what Proton was talking about, or where they got that info

    reddit.com/…/cant_find_the_openpgp_subject_line_e…

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacyguides@lemmy.one
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #