privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

mojo, in Firefox needs a 180° turn to full privacy out of the box.

Did you just group Brave with LibreWolf and Tor Browser lol

Pantherina,

Yup because they are all privacy hardened out of the Box.

Kata1yst,
@Kata1yst@kbin.social avatar

Can't agree with you on Brave. You're putting a lot of trust in a for profit company with no real transparency or accountability mechanism.

jherazob,
@jherazob@beehaw.org avatar

And involved in crypto BS

sir_reginald, (edited ) in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?
@sir_reginald@lemmy.world avatar

As always, use free software. Look for Lemmy clients in F-Droid. Voyager is a good one.

unionagainstdhmo,
@unionagainstdhmo@aussie.zone avatar

It’s always struck me as a bit odd that people choose to use a paid proprietary app to access a free and open source social media platform which is developed and hosted entirely by volunteers based on donations. Whilst I don’t have a problem with people making money off of Lemmy apps, making them proprietary and with ads seems against the spirit of Lemmy

adrian783,

radiowaves are free, radio sets aren’t.

unionagainstdhmo,
@unionagainstdhmo@aussie.zone avatar

Transmitters aren’t free

ohlaph,

It might be greed or to offset their server costs. Or both.

superbirra, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

sync does not have ads for me as of now :)

Retrograde,
@Retrograde@lemmy.world avatar

Sync is the only option for me

UNWILLING_PARTICIPANT,

I’m using Sync but pretty disappointed we still can’t post using it

Amir,
@Amir@lemmy.ml avatar

You can definitely post on Sync…

UNWILLING_PARTICIPANT,

Oh look at that. Must’ve been added in an update without me noticing. Woohoo!

superbirra,

what

UNWILLING_PARTICIPANT,

Nvm

willybe, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

I take it schools aren’t teaching tech literacy. We wouldn’t want the kids to get in the way of our overlord marketing agencies.

MiddledAgedGuy,

I wonder if they ever really have? When I was in school they taught you how to use a computer, but not what the computer was doing or how it worked.

I’m not too connected to the educational sector anymore but anecdotally it seems like becoming tech literate has a growing stigma (it’s always had a stigma). Happily ignoring what it’s doing while it’s actively abusing you.

tordenflesk, in Accept cookie banners with third-party cookies rejected

Ublock Origin->Cookie Notices->Check all 4.

rinze,
@rinze@infosec.pub avatar

Yes, I’m aware those filters exist, but I’m asking about the practical implications of the set up I mentioned in the post.

bitwolf, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

Sync Pro (paid) Jerboa (free)

dandu3,

Sync pro is an absolute ripoff.

I had it for reddit and I’m not buying it again

MBM, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

It’s wild just how many apps there are for Lemmy, ha

0ops,

Wow, no kidding

UNWILLING_PARTICIPANT,

Yeah I love it

Kushia, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?
@Kushia@lemmy.ml avatar

Personally I like Connect even though it’s not FOSS because it’s layout is similar to RiF.

0ops,

I didn’t even realize that it wasn’t, tbh. There’s no ads or purchases or anything

taladar, in Is this even legal? Hiding data deletion behind login (after email request)

What would prevent someone else from requesting the deletion of your account if there was no proof that you are the person whose account it is?

pacjo,

I’m writing from the email associated with the account, this is enough for most services I encountered

mp3,
@mp3@lemmy.ca avatar

Emails can be spoofed.

lazynooblet,
@lazynooblet@lazysoci.al avatar

But spoofing doesn’t allow a 2 way conversation. Confirming the email should be enough

pacjo,

That’s just how it is. If you try hard enough everything can be spoofed. You can also try guessing someone’s password and creation date of an account. This is not the issue here.

mp3,
@mp3@lemmy.ca avatar

The issue is with support not giving you an adequate account recovery method, they’re correct about validating ownership of the account tho.

parpol, (edited )

what they mean is emails can be extremely easily spoofed. It is pretty much like me changing my username to pacjo to gain access to your account.

taladar,

Email (on domains without DKIM and SPF at least) can be spoofed so easily, you could literally do it with on-board tools and a few lines of typing though. It is literally just sending an email that has your email address in the From header.

lud,

What are the odds that OP is emailing from an email that’s not configured correctly? Very low.

taladar,

If you mean from a domain without DKIM and SPF on the sending domain and DKIM and SPF validation on the receiving one? Pretty high.

lud,

Not really since Microsoft, Yahoo (I guess), and Google dominate the email space really hard.

taladar, (edited )

In terms of domains not really. Only the free-mailers use domains by one of those. The corporate users still need to set up their DNS properly for those technologies even if they use one of them as a mail hoster.

lud,

Why would OP contact OPPO using a corporate email?

It’s extremely likely that they don’t have their own domain since it’s very uncommon for personal usage. Some absolutely do but they are in the minority.

Of course custom emails need to be set up properly, otherwise all mails would just go to spam.

sqgl, in ProtonMail Complied with 5,957 Data Requests in 2022 - Still Secure and Private?

I suppose they now keep logs of their VPN service too then.

ReakDuck, (edited )

Swiss law doesnt allow complying with VPN services afaik.

ProtonVPN and ProtonMail are completely seperate too.

sqgl, (edited )

Do you mean the law doesn’t allow forcing the VPN service to comply with VPN log requests by authorities?

And what do you mean by “completely separate”?

Proton VPN… is operated by the Swiss company Proton AG, the company behind the email service Proton Mail.

en.wikipedia.org/wiki/Proton_VPN

Romain_Ty,

@sqgl @ReakDuck
From what I understood :
Under Swiss laws, VPN providers are not forced to log anything.
They also can't comply with orders coming from a foreign country if not approved by Swiss authorities.
If someone is put under surveillance, he/she have to know that.

However, always remind that that's just the law, not what is technically possible. If you're considered as a real threat for an important country, neither Switzerland or any country will protect you.

hackris, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

Please. For the love of god, NEVER use a proprietary app to use a piece of FOSS software. I think it’s kind of sad that we have this amazing FOSS social network and people use fucking proprietary software to use it.

pirrrrrrrr,

Open-source it a better interface then.

Until it’s as useful as at least Sync for Lemmy, people will use 3rd party proprietary apps

sir_reginald, (edited )
@sir_reginald@lemmy.world avatar

There are a bunch of good FOSS Lemmy clients, which I’d argue are as good as Sync or Boost (I can’t know for sure since I don’t use proprietary software, I judge by the screenshots).

Jerboa sucks, I’ll give you that. But both Voyager and Eternity are high quality clients that work amazingly well and are constantly updated. They have plenty of features and are very configurable.

hackris,

I mean isn’t Lemmy licensed under the AGPL? I’m just asking because AFAIK a proprietary client is not even allowed under this license.

SeriousBug,

You couldn’t make a proprietary server. Client is fine, AGPL doesn’t apply when you are accessing the server over a public API.

aspensmonster,
@aspensmonster@lemmygrad.ml avatar

AGPL doesn’t apply when you are accessing the server over a public API.

The AGPL does apply when interacting with the covered work (Lemmy server) over a network. A proprietary client would still nevertheless be required, upon request, to furnish you with the source code of the covered work it is talking to over the network (the Lemmy server).

boyi,

Do you really know what you are talking about? I think you’re bullshitting. We are talking about propriety client which doesnt modified the source codes of the server.

hackris,

Thank you, didn’t know this :)

vox, (edited )
@vox@sopuli.xyz avatar

i use sync. there’s nothing even close to the quality of the client. (The onlt client that implements material you in a fun and usable way, sync is usable one-handed)
I had been using Liftoff for a while (before switching to Sync as soon as it came out), which i quite liked but it feels a lot worse than sync

cypherpunks, (edited )
@cypherpunks@lemmy.ml avatar

(The onlt client that implements material you in a fun and usable way, sync is usable one-handed)

Touchscreen keyboards and their consequences have been a disaster for the human race.

cashews_best_nut,

That’s silly and I’m a long time Linux user.

Cyberflunk, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

Sync!

Retrograde,
@Retrograde@lemmy.world avatar

Sync gang rise up!

cypherpunks, (edited ) in Here's what telegram's founder say about Whatsapp's privacy
@cypherpunks@lemmy.ml avatar

Sure, fuck WhatsApp, but Telegram isn’t even end-to-end encrypted most of the time. Their group chats never are, and their “secret chat” encryption for non-group chats must be explicitly enabled and hardly ever is because it disables some features. And when it is encrypted, it’s with some dubious nonstandard cryptography.

It’s also pseudo open source; they do publish source code once in a while but it never corresponds to the binaries that nearly everyone actually uses.

And the audacity to talk about metadata when Telegram accounts still require a phone number today (as they did five years ago when this post was written) is just… 🤯

State-sponsored exploits against WhatsApp might be more common than against Telegram, or at least we hear about them more, but it’s not because the app is more vulnerable: it’s because governments don’t need to compromise the endpoint to read your Telegram messages: they can just add a new device to your account with an SMS and see everything.

(╯° °)╯︵ ┻━┻

Anything claiming to prioritize privacy yet asking for your phone number (Telegram, WhatsApp, Signal, …) is a farce.

qyron,

Then what is the choice?

lemonuri,

Read up on Xmpp or matrix as good alternatives.

Gooey0210,

Matrix not yet untill they implemented proper encryption and security stuff

SimpleX is pretty cool

Neon, (edited )

Signal is just fine. This with the PhoneNumber is a really stupid hardliner-take.

Something can be private without being anonymous.

BearOfaTime, (edited )

Simplex - requires nothing, just install. But you connect with other people by sending a code outside of SimpleX. Though they’ve added a directory service for groups.

XMPP

Wire (not Wiremin), though it requires an email account, which is easily addressed with a disposable email.

Signal is very secure from what I’ve read, despite the phone number identifier.

nutomic,
@nutomic@lemmy.ml avatar

Telegram isn’t perfect, but it is infinitely better than Whatsapp because it doesn’t belong to Facebook, and also isn’t from the United States. Also it can be used by normies without problem, unlike Matrix or Xmpp or what have you.

moreeni,

Brother, it has servers all over the world (including the US) where it hosts your data unencrypted. Telegram is nearly not inifinitely better than WhatsApp.

randint,
@randint@lemmy.frozeninferno.xyz avatar

Shit, 2019 really was five years ago.

Gooey0210,

Bravo, bravo, bravo!!

Dude, see you on the same side of the barricades when the time comes to fight the centralized army of agent Smiths 👏👏👏

Neon, (edited )

Anything claiming to prioritize privacy yet asking for your phone number (Telegram, WhatsApp, Signal, …) is a farce.

Yeah, sure. The privacy farce signal.

I’m getting tired of this stupid hardline-take.

Sal,
@Sal@mander.xyz avatar

And the audacity to talk about metadata when Telegram accounts still require a phone number today (as they did five years ago when this post was written) is just… 🤯

Not only that, but I believe that they actively try to prevent VoIP numbers from being used to create accounts.

UnfortunateShort,

I don’t agree with everything but that last point of yours. Requiring your phone number only means your are not anonymous. There is no need to be anonymous to communicate privately. In fact, it can be counterproductive, since your are much more vulnerable to social engineering.

Gooey0210,

And also not secure if somebody sim swapped you, and then your privacy goes into the hands of the FSB agent who sim swapped you

Dra,

Signal is great. Stop being overzealous

Dehydrated, in Here's what telegram's founder say about Whatsapp's privacy

Both WhatsApp and Telegram suck. Just like any other messenger that’s either proprietary or not end to end encrypted. Signal is clearly the best choice.

EngineerGaming,
@EngineerGaming@feddit.nl avatar

Signal is not the best choice, it’s just a somewhat aceptable middle ground. I prefer something that doesn’t require a phone number and something you can self-host, like XMPP.

Dehydrated,

Good luck convincing normies to use some obscure messaging protocol. It’s difficult with Signal, even harder with Matrix, basically impossible with XMPP. 99.99999% have never in their life heard about XMPP. Also most mobile clients absolutely suck. You also can’t get proper push notifications without completely ruining your battery life. What a great choice!

skullgiver, (edited )
@skullgiver@popplesburger.hilciferous.nl avatar

deleted_by_author

  • Loading...
  • kixik,

    Jami with unifiedPush notifications is a pretty good option

    EngineerGaming,
    @EngineerGaming@feddit.nl avatar

    I don’t see a big difference, the hardest thing by itself is convincing someone to install one more program or app. Also Conversations does not suck.

    Dehydrated,

    Conversations is only available on Android. And that’s the problem. You need different clients on different plattforms, etc. It’s just a mess. Some clients don’t support encryption and everything is just unnecessarily complicated, especially for new users. You can’t just tell someone “let’s chat on XMPP”. You need to explain to them what XMPP is, what app to download depending on what OS they use, tell them how to set everything up, etc, etc…

    Signal is definitely not perfect, but it’s the best known private messenger and doesn’t compromise on privacy and security. It’s very simple to use, the setup process is basically the exact same as on WhatsApp or Telegram, it has good clients for every platform and they have operated safely with a great record for over 10 years.

    I understand that other solutions might be better in theory, but if we keep suggesting a new obscure and hard to use messenger to noobs, they will never make the switch. In order to get more privacy for ourselves and the (potentially less technical) people we need to communicate with, let’s just get them to use something simple and private like Signal.

    CaptainSpaceman,

    Yea, ive gotten pretty wide adoption from friends and family on Signal, but id love to have a comparable product with even more features/security/privacy

    Matrix may get there eventually, but for now its Signal.

    Dehydrated,

    Agree

    ShortN0te,

    You mean that XMPP protocol which is not encrypted by default? Oh yes you mean that.

    XMPP would need to be redesigned from ground up as a secure and private messaging protocol to be a valid choice.

    XMPP has it advantages but to many cry out that it is the savior when it is not. We need something better.

    EngineerGaming,
    @EngineerGaming@feddit.nl avatar

    The major clients now do have OMEMO. Yea, I agree it’s flawed but that’s so far it’s the one I settled on. Do you know other, more refined selfhostable solutions? I am now looking for development there but doubt I’d get few people that I already got there to switch again.

    ShortN0te,

    Not aware that there is a modern decentralized secure and private chat protocol. Sadly. I also am not aware of any developmenta of something like that, so XMPP is the best we got (for decentralized open widly supported protocols)

    I know that a lot of clients do encryption of the message body by default, but it still leaves a lot of stuff in plain text (afaik).

    xilliah, in ProtonMail Complied with 5,957 Data Requests in 2022 - Still Secure and Private?

    Well I’m a customer and I think it’s fine if the requests are legitimate. The question then of course is what is legitimate.

    crandlecan,

    Arresting XR rebels… So jo, it’s not legitimate at all

    belated_frog_pants,

    Its always about petty shit like piracy. You’d wish it was all them catching CSAM creators but thats a sliver of it. They’d be catching more rich dudes if it was.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 18878464 bytes) in /var/www/kbin/kbin/vendor/symfony/http-kernel/Profiler/FileProfilerStorage.php on line 171

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 10502144 bytes) in /var/www/kbin/kbin/vendor/symfony/error-handler/Resources/views/logs.html.php on line 25