privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

ono, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

I start with whatever is on F-Droid, and narrow it down from there.

Jerboa was the only option there until recently. I see Voyager and Eternity are there now. I’ll have to give them a try.

WeLoveCastingSpellz,

thunder is awesome too

refurbishedrefurbisher,

Eternity FTW

schizoidman,

Voyager is currently many versions ahead of the one listed on F-Droid. It is still usable but you may want to get the latest version from GitHub.

ono,

If new versions don’t make it to F-Droid, they might as well not exist for me. There are only a couple of apps that I find important enough that I’ll spend time manually building/pulling/installing, and a Lemmy reader isn’t one of them. Thanks for the tip, though.

carzian,

Have you considered using github.com/imranr98/obtainiumYou give it the repository of the app and it will handle checking for new versions and updating them

ono,

Part of what I value in F-Droid is the additional layer in the build/release process, because it makes tampering more likely to be detected.

It’s still nice to know a tool like obtanium exists, though. Thanks for the link.

jacktherippah,

This is exactly the reason why I don’t like F-Droid as a way to get apps. You’ll have to trust an additional party when getting your apps, and updates are often a couple days behind. I prefer to get it straight from the developer’s GitHub or Coderberg or whatever.

ono, (edited )

You’ll have to trust an additional party when getting your apps, and updates are often a couple days behind.

I know how it works, and in this case, that’s fine with me.

F-Droid has an excellent track record; better than many developers have. And I’m not addicted to having the latest versions of everything on the day they’re released. In fact, not immediately jumping on the latest versions has saved me from nasty bugs more than once.

FutileRecipe,

Part of what I value in F-Droid is the additional layer in the build/release process, because it makes tampering more likely to be detected.

Barely and not really. “F-Droid can’t ensure the apps are safe. You still need to trust the upstream developers. We only do some basic check.” forum.f-droid.org/t/…/2

ono,

N + 1 > N

FutileRecipe,

N + X - Y ? N

Except now you’re adding an additional party to trust (the -Y). So it could still be considered less secure than N.

ono,

So it could still be considered less secure than N.

It could be, or it could not be. Depends on the particulars, and on the needs of the individual.

Mind, I’m not going around presuming to tell other people what’s better for them, as one or two others in this thread are doing. I’m just stating what’s a good fit for me.

FutileRecipe,

Depends on the particulars, and on the needs of the individual.

That’s not really how things like security works. It’s either more secure or it’s not. The security of a thing does not depend on needs. Now, does the application of it or does someone need it to be more secure? That’s where risk acceptance and the needs of the individual come into play.

I’m not going around presuming to tell other people what’s better for them, as one or two others in this thread are doing.

Same. I’m not saying “stop doing this.” I’m just trying to educate people and make sure they’re not operating with a misunderstanding. Needs of the individual and all that. I think some people just go crazy for something that’s not big tech, and then quit looking at the particulars.

ono,

Depends on the particulars, and on the needs of the individual.

That’s not really how things like security works.

If that were true, threat modeling wouldn’t exist. ;)

I think some people just go crazy for something that’s not big tech, and then quit looking at the particulars.

I expect that’s probably true. It’s safe to assume I’m not one of them, though. Cheers.

FutileRecipe, (edited )

If that were true, threat modeling wouldn’t exist.

I feel like we’re talking about different things. I’m talking about static concepts, if X is more secure than Y, not individual setups where something is tweaked. Threat modeling is tailoring the security to your needs. It doesn’t bend security of a static object or make the application of something less than what it is. It requires one’s actions to do that by not utilizing it.

Take bullet proof glass, for example. Bullet proof glass is more secure than regular glass. Now, do you need (does your threat model require) bullet proof glass? No? Ok, that doesn’t mean bullet proof is now less secure than regular glass, it’s just unneeded.

FutileRecipe,

I’m not sure why people insist on F-Droid, considering the F-Droid Security Issues.

ono,

I use it because, contrary to what that scare piece you linked would have the reader believe, it’s better for my needs than the alternatives.

(I’m no stranger to software development and security, by the way. I understand the pros and cons.)

FutileRecipe,

that scare piece you linked would have the reader believe

So an indepth and critical analysis of something is now a “scare piece?” Ok.

deegeese, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

I like Voyager a lot but it might be iOS only.

refurbishedrefurbisher, (edited )

Voyager is on Android as well. It’s technically a webapp, so you can run it on any device that supports displaying a webpage.

Example: m.lemmy.world

knobbysideup, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?
@knobbysideup@sh.itjust.works avatar

This is why ad blockers should always be used. Small devs don’t have relationships with advertisers or control over what ad networks will do.

Or you can pay once and be done with them. I think the price of a burger is not a big ask for something you use every day.

I do both.

refurbishedrefurbisher,

Even the FBI recommends ad blockers for security.

cm0002, in roku remote app showing ads now

Are you using the actual official remote app? It looks different from mine and doesn’t have the “featured” tab shown

https://lemmy.world/pictrs/image/44aa8793-c4f3-4586-9b31-a7fb48153855.png

elephantgrenades,

Yeah, they updated it. Just opened my app and it has the Featured section.

cm0002,

Damn, thanks I just turned off auto update for it so I can stay on this version as long as possible lmao 😂

Kir,

Apparently, they also worsened the UI

refurbishedrefurbisher,

Could be A/B testing that Roku is doing.

ebits21, (edited ) in Authy Desktop client will be discontinued from August 2024
@ebits21@lemmy.ca avatar

Glad I already migrated to using KeepassXC on the desktop for TOTP codes, partially out of frustration trying to use the Authy Linux desktop client.

And hey, now I own my data!

potemkinhr,
@potemkinhr@lemmy.ml avatar

I’m (still) using the regular Keepass but that is indeed a nice feature, might consider switching to it for TOTP. Thank you!

TwilightKiddy,

If by “regular” you mean Keepass 2.0, then there is a plugin for TOTP.

Oha, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

Infinity is great

illectrility,

It’s Eternity now but yes it is

cupcakezealot,
@cupcakezealot@lemmy.blahaj.zone avatar

i got scared cause i was on infinity and saw this post and thought infinity was showing ads now :p

Platform27, in Can I edit .docx files without a Microsoft 365 subscription and if not are there any alternatives

Due to its proprietary nature, finding software that can properly read those files can be tricky.

LibreOffice is the usual go-to for folks wanting an office suite, that respects privacy, and FOSS. It can read docx files, but it can mess up formatting. Still, for many it’s the preferred choice. It’s got the best reputation.

Now if formatting REALLY matters, take a look at OnlyOffice. It handles those MS formats so much better. It’s not a bad suite, but it’s hard to beat the good reputation Libreoffice has gained.

FlihpFlorp,

Oh this is helpful

Yeah another person said it gets funky with formatting but that’s not a huge deal for me as the most complex formats for the class syllabus I like to just have a copy but probably nothing I can’t do by saving it as a pdf

And like I said in those comments my own documents aren’t complex mostly just using tab and enter to make my documents more readable for myself

TCB13, (edited )
@TCB13@lemmy.world avatar

You don’t use complex formats you say… just don’t forget that LibreOffice thinks bullets points are “complex formats”:

https://lemmy.world/pictrs/image/1ef94126-115b-4a4b-8207-84bca7387e49.jpeg

What OS are you using?

FlihpFlorp,

Ah I see good to know. For me formatting issues aren’t a super big deal and sounds like it’s outweighed with its reputation here. I guess if it does become an issue I can simply hop over to open office but I’ll cross that bridge when I get there

TCB13,
@TCB13@lemmy.world avatar

LibreOffice and OnlyOffice will certainly be better than OpenOffice.

FlihpFlorp,

Also didn’t see your bottom question at first but I’m on windows and edit documents both on my home laptop and one I bring to my classes which is why being able to play nice with proton drive is a must for me.

TCB13,
@TCB13@lemmy.world avatar

So why not simply use MS Office? Way less hassle to deal with. Licenses are available for cheap on eBay or pirated form reputable sources.

FlihpFlorp,

I was planning on using MS Office originally when writing the posts but 1) I didn’t know if it was going to work after my subscription expired, and 2) I wanted to see what else is out there

TCB13,
@TCB13@lemmy.world avatar

Seriously, download MAS and choose Ohook. Enjoy your permanently serialized and activated MS Office. :)

takeda,

So in the description you said edit, but here you say read (syllabus). If just reading is the requirement, there was a word reader, not sure if it is still available. I also believe once subscription expires, you still will be able to view, just edit.

Also what’s wrong with your school requiring word document and not providing a free license for the software? My college at least provided free license during my class.

As other alternatives I don’t have better than libre office (at the time I was using, libre office didn’t exist and I used OpenOffice, I still was using it, primarily, because of using Linux on my laptop) and submitted my work as PDF and didn’t have problems, but my class were requirements in computer science so I’m sure I wasn’t the only one doing it.

FlihpFlorp,

Yeah that’s my bad I just couldn’t think of an example where there was formatting in the document

Yeah I’m definitely going to try libreoffice

infeeeee,

Docx is not a proprietary format, it’s a standard, it’s called Office Open XML: en.wikipedia.org/wiki/Office_Open_XML

And M$ published its specifications, so Libreoffice devs could support it. But here comes the funny part: M$ (deliberately?) doesn’t follow the specification it published. So the formatting problems of LibreOffice come from M$, because they don’t follow their specs, but M$ can just do whatever they want because of its market share.

I read this story a long time ago, and I’m paraphrasing, but on this wiki page you can read a lot of controversies related to this format: en.wikipedia.org/…/Standardization_of_Office_Open…

HumanPerson,

Aren’t the specifications also insanely long and complicated for good measure?

infeeeee,

Yeah, wiki says it’s 6000 pages. But that’s not that long compared to other similar file standards, and it also contains pptx and xlsx.

For comparison PDF standard is about 1000 pages, HTML (without CSS, just pure HTML) is 1500 pages.

unrelatedkeg,

Not only are they insanely long, MS strategically doesn’t follow its own specs in places so other software using the specs “fuck up formatting” even if they follow MS’s specs perfectly.

grue,

Docx is not a proprietary format, it’s a standard

It’s a “standard” only in the sense that Microsoft took the MS Office binary file formats (which are basically just writing the internal state of Word/Powerpoint/whatever to disc), serialized it to XML, half-assed some bullshit documentation for it, and bribed the standards body to rubber-stamp it. It’s still, at it’s core, basically defined by whatever nonsense Microsoft’s implementation does.

Cwilliams,

M$ is the best abbreviation for Microsoft yet

000, in roku remote app showing ads now

There are no ads in your screenshot

aldalire,

“Featured” tab on the bottom left

Municipal0379,

Setup a pi-hole, you’ll never be happier.

aldalire,

this ad in particular goes through it. I have one and set up my phone to use it.

AtariDump,
daftwerder, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

Eternity is great! free, no ads, and no lag while scrolling. it also supports swipe to go back from posts.

Rez,
@Rez@sh.itjust.works avatar

I’m so used to navigating in Eternity at this point that all other apps seem clunky and unintuitive

Oha,

same

ieatpillowtags, in I deleted all my post from my reddit account, can they still monetize them?

I think it’s enough to stop engaging with Reddit, there’s not much point in worrying about what you’ve already posted there imo.

RedditWanderer, (edited )

You’re saying there is no point, and the comment below agrees with you, because the only point is that it removes threads and that’s getting old.

No it’s not getting old, that’s the entire point of deleting posts. Reddit should not get post traffic through google for something I did, and I can take that away. Me alone won’t have a big impact, but if we all do it Reddit will have more struggles.

In order of efficacy:

  • Don’t post to Reddit: this is what reddit needs to keep going. Reddit doesn’t produce anything.
  • If you have popular posts people come back to (like help communities) delete them, this still drives traffic and app downloads for reddit.
  • Commenting/upvoting/downvoting on posts drives engagement. If you have to visit reddit, don’t click on votes and don’t comment.

A reminder that reddit is still struggling to IPO and sell off, in large part due to the.exodus.

cyanarchy,

Dude I’m not interested in going scorched earth on one of the most useful repositories of practical information and discussion, and I’m disturbed that you’re so zealous to do so.

HiT3k, (edited )

For fucking real. If I ever come across a niche question about some obscure router setting and the only answer on the internet was some comment in a ten year old Reddit post and the comment says “DELETED BY SUCH AND SUCH APP - fuck u/spez” I’m gonna cry.

solrize,

“This post has been moved to Lemmy at url xxyyzz, fuck spez” would keep the info around, if that makes you feel better.

Land_Strider,

That should be the only way, but I seriously doubt that Reddit admins would keep the links intact in that case. Out of their greed and malice they would probably mess with the Lemmy link, then put the blame narrative on the poster for deleting/making the information unavailable.

It can be a bit annoying like how c/hackernews post only external links with topic titles, but that is the (temporary) cost of freedom and privacy.

solrize,

Maybe you’re right but at least you will have tried.

retrieval4558,

Yeah as someone who has gotten into Linux and DIY computer builds in the last year, I’ve been pretty sad at some deletions. Ultimately the fault is on Reddit itself but still pretty sad.

octobob,

Yeah, looking up how to do something on an 8 year old post and finding deleted comments is getting really old. It’s even worse now that Google’s search engine has gone down in a bullshit flaming AI crapshoot and adding reddit to your search is the only way to find a human answer anymore.

RedditWanderer, (edited )

Personally it brings me joy to see that you’re falling on empty posts from top google searches, and hope you find many more in the future. You’re just saying that you prefer to give money to Reddit if it’s convenient for you.

That’s the entire point of leaving reddit with our 10+ years of contribution; leaving reddit wasn’t convenient for me, I’m not gonna help it be convenient for you. Get rekt spez.

datavoid,

How does looking at reddit from a search, not logged in, and with an ad blocker, give reddit money?

RedditWanderer,

Your ad blockers and “not logged in” protections aren’t actually protections. You’re still tracked on VPN and icognito. Sure now it’s not necessarily your account (although they can make good guesses), but to them it’s someone. Every month youre making it on charts of “real active user data”, helping reddit continue to look profitable as a business. They’ll likely be able to hold on a bit longer and get funding until adblockers go away.

Just visiting reddit isn’t in my list though, it doesn’t help reddit that much. Either way I don’t see why I should leave my helpful content up for others to view. I don’t get to pick to show my post only to adblock people, so OP definitely has an impact deleting them.

datavoid,

That’s totally fair, I deleted my comments and account as well. Definitely not interacting with the site anymore besides the occasional search for niche info

octobob,

“the internet is turning into a hellscape so I’m going to make it worse”

Cool? I guess?

RedditWanderer, (edited )

Reddit is turning into a corporate hellscape so I’m going to help make it worse.

FTFY. The community didn’t start this and Reddit shouldn’t succeed just because we want good memes. There are other ways.

FutileRecipe,

now that Google’s search engine has gone down in a bullshit flaming AI crapshoot

Tried Kagi yet?

Melody,

SearXNG is free. Don’t waste your time with Kagi.

averyminya,

Users deleted comments was the only power we really had. How is reddit worth anything when all the people who shared information now lead to deleted comments?

I deleted a lot of my guides because of reddit. I still have them, but they’re no longer online due. Reddit is even kind enough to say that my account which I deleted no longer exists, maybe because it was banned. So that’s nice, all of us who deleted it in protest have been labeled as banned users.

I’ve had to use search “reddit” a couple times for various niche things but I stopped after multiple “answers” were just directing to deleted comments.

ioslife,

Except most of Reddit of bots now too lol

SheeEttin, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

I use Boost and I like it. But I gave the dev the few bucks for ad-free.

If there’s a malicious ad, report it to the dev. I’m pretty sure they can ban it.

OminousOrange, (edited )
@OminousOrange@lemmy.ca avatar

I like Boost too. And it’s only a one-time payment for ad-free too, unlike Sync.

andthenthreemore,

Sync is a one time payment for ad-free. It’s ultra that is subscription which has a load of bumph you don’t need and ad-free as well.

OminousOrange,
@OminousOrange@lemmy.ca avatar

Ah, thanks for clarifying.

cupcakezealot, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?
@cupcakezealot@lemmy.blahaj.zone avatar

i bought boost the first day because i loved boost for reddit but, honestly, i’m loving eternity even more these days.

it’s on neo store/fdroid and the repo is here: codeberg.org/Bazsalanszky/Eternity

library_napper,
@library_napper@monyet.cc avatar

Kinda sketch if they’re not on the official fdroid repo

cupcakezealot,
@cupcakezealot@lemmy.blahaj.zone avatar
ModsAreCopsACAB, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

Blokada, never seen a single ad in any of my apps. It’s a battery hog, but it works like a charm since I can’t get access to my router for a pi-hole.

library_napper,
@library_napper@monyet.cc avatar

I use AdAway for this

tryagain, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

Voyager!

Psythik,

+1. No ads; doesn’t track you (at least according to the DDG app).

Trincapinones, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

I use Eternity, it’s a fork of Infinity for reddit

vpklotar,

Me too, absolutely love it! Been working great for me the last couple of months.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 20975616 bytes) in /var/www/kbin/kbin/vendor/symfony/http-kernel/Profiler/FileProfilerStorage.php on line 171

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 4210688 bytes) in /var/www/kbin/kbin/vendor/symfony/error-handler/Resources/views/logs.html.php on line 38