privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

vxx, in Next smartphone I buy, which one do you recommend?

I’m happy with Motorola. I don’t buy high end phones though, as I don’t care about paying 400 extra for a good camera.

I have a G42

bullshitter,

Motorola feels like the best in affordable phones. Plus stock rom experience.

Kuro,

Just picked up a new Motorola phone myself, and it does install TikTok and a few other apps by default, so not sure if OP would like that. They were easy enough to uninstall though.

vxx,

I forgot about that, mine had Facebook, but it didnt come back with updates.

Kuro, (edited )

I kind of gagged a little at the sight of TikTok being installed, but really liking the phone so far. Coming from a one plus phone, I really appreciate the stock android

BearOfaTime, (edited )

You nay be able to disable the installer that reinstalls those apps.

Check out Universal Android Debloater

github.com/0x192/universal-android-debloater

StickBugged,

I’ve got a g31 which I’ve had for about a year, and the only thing I don’t really like about it is the lack of custom ROMs and stuff like that

EddyBot, in Why Bluesky over sth like Activitypub?

the most honest reason I read about is probably that former Twitter user who felt out of place on Mastodon or other Activitypub servers because the “Nerds” who care about privacy and decentral systems which were already on it have a different microblogging culture and they didn’t want adept

so now a new competitor gets traction because the people who felt out of place on Mastodon can relife the Twitter experience from over a decade ago
the fake exclusivity even make you feel special despite the lack of features

stockRot,

The superiority dripping from this comment is suffocating

Darkassassin07, in My "Smart"TV keeps connecting to Netflix, and i don't even have Netflix
@Darkassassin07@lemmy.ca avatar

Why the hell would you connect that to a network?

A smart tv is primarily a surveillance device that also happens to display video.

Mikelius,

Got mine connected to the network so I can take advantage of a local install of Emby, but blocked from Internet access, and every time it makes a DNS request (still blocked, but logged), it’s added to a personal hosts file for the entire network just in case the kill switch doesn’t work for some anomalous reason

moitoi,
@moitoi@lemmy.dbzer0.com avatar

Pro tip: Do the same for your printer.

netchami,

Super pro tip: Do the same for any device that does not absolutely need internet access. Don’t buy IoT garbage that needs to connect to some cloud server. Use local solutions like Jellyfin for media streaming, Navidrome for music, Home Assistant for home automation, etc.

There are so many other things you can self host, Nextcloud for your files, calendars, notes and other stuff, Immich or PhotoPrism for your photos, FreshRSS for news articles and other sources that support RSS feeds, Pi-Hole or AdGuard Home for DNS. Definitely check out !selfhosted.

Mikelius,

This ^ I start by blocking any new device to the network, even if it needs internet access (e.g. a new mini PC or something) and monitor for odd activity. If the device needs internet activity and has shown no signs of trying to phone going to something suspicious, I grant it from there (note my devices are under constant monitoring though). If it doesn’t need access (tv, home automation, printer, vacuum, etc) it stays where it’s at.

But yeah agreed completely. I avoid all IoT that won’t work without a third party cloud or internet access. Using Nextcloud (which does my rss feeds too), HA, pihole, and Emby (also blocked from internet access via firewall rules) for me. Also a few apps I created for myself for things where there weren’t any useful or good FOSS alternatives for.

netchami,

That’s great. It’s nice to see that there are other people who care about self-hosting. Any particular reason why you are still using Emby instead of Jellyfin?

Mikelius,

I tried Jellyfin so that I could move away from Emby, but the deal breakers for me were:

  • No way to view my music library in folders (I organize all my music by genres)
  • Terrible performance on Samsung Tizen (my primary tv)
  • Can’t stream custom music radio stations by their m3u files

Other things that I didn’t like:

  • Doesn’t save the filters I selected when viewing the library previously
  • Doesn’t have as much working plugins on home assistant (this may have changed by now?)

I truly do want to go to Jellyfin, but the biggest deal breaker of them all is the lack of support getting it to work on the Samsung TVs efficiently. Perhaps someday it’ll change, but at the moment, I’ll probably stick to Emby but keep an eye out on updates :)

netchami,

That probably won’t solve your issues, but I can tell you a little about my setup:

  • I use Navidrome for local Music streaming, it supports the Subsonic API so you will find a compatible client for it on every platform
  • I have an LG OLED “Smart” TV, but I never connect it to the network, instead I have an HTPC running Linux and Kodi that I use to access Jellyfin (that would solve your performance issue with the Jellyfin app on your “Smart” TV)

I really hope that your issues get solved soon, I wish you good guck

CaptPretentious,

It’s not going to be long until we have always online DRM TVs. Where the TV will prompt you to reconnect to the internet before continues to function.

Atemu, in Why Bluesky over sth like Activitypub?
@Atemu@lemmy.ml avatar

Not invented here syndrome.

sexy_peach,

Wdym?

Atemu,
@Atemu@lemmy.ml avatar
MudMan, (edited ) in Next smartphone I buy, which one do you recommend?
@MudMan@kbin.social avatar

I have a Xperia 1.

It has a flagship SoC, but it also has a SD card slot, a headphone jack, no notch or cutout, front firing stereo speakers and a nice blocky look without a massive camera bump.

The downside is software support can be a bit spotty and the cameras are made for manual use, as opposed to being AI-driven point-and-shoot things. That last one could be a positive depending on your preference, though.

But overall? I'm very satisfied, and I went there specifically because I was tired of the ongoing Apple-ification of Samsung in the first place. You may want to consider coming to the dark side and incentivizing Sony to keep making a phone with a feature set, instead of copy-pasting Apple's or Samsung's playbook.

Daaric,

Same boat here, I have the 5 II and I absolutely love it. Great size, the camera is OK on auto but can do wonders in manual mode (depending on your skill).
The lack of software support is a bummer though. I was surprised it’s not in LineageOS’ official support anymore…

Do you use any custom ROM on your Xperia?

MudMan,
@MudMan@kbin.social avatar

Nope. Honestly, I stopped tinkering with that stuff altogether ages ago. It's a candybar that gives me text messages and takes photos, I don't need to make it my own.

erranto, in Feeling like Privacy is a lost war.

Unlike most privacy concerned people. I don’t believe that privacy is very useful without anonymity. metadata is at the heart of surveillance and tracking. In this regard I was a little optimistic when tor came out and hoped that many technologies will be build around that. that didn’t happen because you can’t build a business and make a profit by providing anonymity. now half websites are systematically blocking tor exit nodes. it can’t be used safely with torrents. and even briar the messenger built to use tor has been compromised by its developers so that you can’t be anonymous on briar . All in all I share the same frustration and can’t see a brighter future for privacy and anonymity .

hackris,

Can you elaborate on the Briar claim? Very curious.

erranto,

Briar shares your hardware’s Bluetooth MAC address with your contacts even if you haven’t added that contact or connected with that contact using Bluetooth. meaning all your briar contacts even those on groups are storing your MAC address ( a unique device identifier) which makes plausible deniability virtual impossible. I remember reading the devs themselves acknowledge that briar isn’t a anonymous chat app (somewhere in their git repo or the wiki or the blog, can’t remember where exactly), so beware of this aspect.

hackris,

I never needed hardcore anonymity but I was always sceptical why people think Briar is anonymous when it uses Bluetooth. Now that I know that the MAC is shared even without using Bluetooth, I’m even more confused. Thanks for the info.

beefpeach,

Don’t forget that the government owes like 75% of the exit nodes.

BaumGeist,

This is a myth that’s been addressed by the project. For starters, there are no disclosures about the amount of nodes owned by the Government/NSA/CIA/etc. You’re probably thinking how the project, in 2012, received 80% of its funding from the US Gov source.

You may make the argument of “follow the money”, or you could also make the argument that this type of tech this widely distributed benefits the government too (field agents for some agencies allegedly use Tor, as do foreign defectors) and compromising the network would lead to a potential vector to compromise their interests.

It’s also worth noting that Tor uses 3 hops (entry, relay, and exit nodes) and you can check the location/IP of your current route at any time to ensure geographic diversity. An actor would have to own all 3 to know what you were visiting and trace the traffic back to you.

rho50, in How bad is TPM on a laptop for privacy?

Tl;dr: TPMs are very unlikely to make your privacy better or worse, but they could definitely be abused by a company like MS to make end users’ experiences worse. They could also be used for significant security and privacy gains… they’re a tool.

The TPM can be used to provide a cryptographic binding between aspects of your system’s configuration and a unique key which is resident within the TPM (a process called “attestation”). It can also generate secondary keys that are associated with the base key, and use those to do cryptographic operations like encryption/decryption and authentication.

Telemetry wise, the TPM’s only utility might be to “prove” that the data sent from your PC wasn’t tampered with. That said, I don’t think MS is actually doing that, and they don’t need to in order to be incredibly invasive in their telemetry.

The (imo) worst way in which a TPM might be abused in a user-hostile sense is to detect if the OS has been modified by the user, or if an installation isn’t legitimate, etc. That could be used to disable certain features if you try to install unauthorised software, dual boot Linux or whatever. This would be similar to the smartphones of today, which can for example disable access to banking apps if jailbroken/rooted.

TPMs (>2.0 at least) otherwise have the potential to realise a significant improvement in security and privacy for users, if used correctly. They can be used for encryption and credentials that are bound in hardware and therefore practically impossible to steal. And can detect hardware tampering and potentially foil Evil Maid attacks. Imagine if your login sessions for various websites were bound to your hardware, such that a dodgy extension could never steal your cookies.

wAkawAka,
@wAkawAka@lemmy.world avatar

Big thanks for detailed answer! My understanding is more clear now.

agent_flounder, in 2024 mustang extensive invasions of privacy
@agent_flounder@lemmy.world avatar

Big if true. …so much for track day, I guess?

I figured this day would eventually arrive where your car snitches on you to the cops.

I suppose they could track your speed a millisecond at a time and you pay a fine based on speed over limit times distance traveled and it is then the charges are sent every month like a bill. You can appear in court but will always lose of course. Of course they’re capturing the drivers face at all times and sending that to the po po to make sure they charge the right person.

I guess I’m never buying another new car. Fuck everything, at this point. I’m so done.

icedterminal,

so much for track day, I guess?

Stuff like this is likely planned in advance with sports and super cars. Since this technology has existed for a while. Assuming you visit a recognized track, wherever it may be, the limiter simply turns off. For example, the 2009 and later Nissan GTR is sold in Japan with a 112 MPH artificial limiter in the software. The limit is there by law. GPS / Sat Nav is standard on this car. If you visit say, Fuji or Laguna Seca, the car knows where it is and turns the limiter off. Allowing you to achieve the ~200 MPH top speed. Examples sold for other markets such as US and EU need not worry. The redline in 6th gear is your physical limiter.

On a slightly related note, clever people have figured out ways around limiters. Such as tricking the GPS or modifying the ECU. Unfortunately, these days it gets harder to do this as manufacturers like Mercedes, BMW, VW, and a few others, are encrypting the communication network physically located in the car. It’s not the traditional low and high speed CAN Bus. FlexRay is becoming more commonplace unfortunately.

woshang, in Tor isn't as decentralised as we thought?

It is not new.

privacybro, in Gitlab now requires phone number/credit card verification

For alternatives, I recommend to use a community-ran Gitea instance. Project Segfault runs one.

about.gitea.com

git.projectsegfau.lt

Also check out Forgejo, it’s another git software. Disroot has an instance.

forgejo.org

git.disroot.org

intrepid,

How many instances will one have to register on? This isn’t going to improve until forgefed is done.

privacybro,

explain further please?

intrepid,

You won’t be able to contribute to a project on any of those instances, unless you register on it. So if you are a prolific contributor, you might end up signing up on dozens of those instances.

Forgefed is a federation protocol for such instances. It’s based on ActivityPub - the same that powers Lemmy and Mastodon. You can have just one account on a single instance and still be able to contribute to projects on multiple others. It’s still in the works though. It’s expected that at least gitlab, gitea and forgejo will support it.

Fisch,
@Fisch@lemmy.ml avatar

Codeberg also uses Forgejo

library_napper, in Tor isn't as decentralised as we thought?
@library_napper@monyet.cc avatar

I, umm, this is good news. For project doing their job at keeping us safe.

ultratiem, in is there a way tominimise risk while using facebook?
@ultratiem@lemmy.ca avatar

You can’t use Facebook privately. There’s no such thing.

Oisteink, in My idea of maintaining E2EE between people in the age of the UK's and EU's anti-privacy laws

Longest shower though I’ve seen for a while. While you seem somewhat clueless in what you talk about you manage to fit in many cool words. That’s a plus.

sir_reginald, in Tor isn't as decentralised as we thought?
@sir_reginald@lemmy.world avatar

try I2P

elias_griffin, (edited ) in Time to ditch #duckduckgo

Looks like you are using Firefox. Use arkenfox sure, but cut Mozilla off it’s 115 server network it uses to track you via FF by using a host deny list, FOSS git clone harden-firefox. You’ll have to disable to update ublock origin or remove the extensions line, but it’s better to just cut the adverts and tracking by removing it from the networks than by browser interception (slower, loss of performance, still hits your computer). Links included to do that in that repo.

Alternative browers are Librewolf and Qutebrowser. When you really don’t want to be tracked for some things use Lynx.

A great search engine replacement is Grasp. It’s being funded by Paul Graham, the founder of Y Combinator and although you only get 100 free searches a months, it can come in very handy. The search results it gives you, unlike Kagi which is just a reformat of DuckDuckgo yet with AI, it’s results are completely different than any other engine and imo, on point, surely for anything technical.

My general search engine is an envs.net free hosting of Searx. envs.net is a free Linux shell community with many services like blogs, email, matrix hosting, etc etc. If you do end up using their German Searx as main search donate to them, I did.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #