privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

N0x0n, (edited ) in Why do you think they don't show Brave here?

Fingerprint resistance of firefox? Is more like somewhat…

You have to change a few things in about:config, disable webRTC and spoof:

  • user-agent
  • font fingerprint
  • audio context …

But it’s the “best” OOTB alternative we can have rn.

LWD,

I prefer Firefox(forks) but would also like to know what they’re talking about.

anamethatisnt, (edited ) in Mullvad uses Gmail
  1. If privacy is of utmost concern, we recommend that you refrain from communicating any personal data to us since plain-text email is not a safe media for communication. If necessary, use PGP-encrypted email.
  2. We do use a third party to operate our email service, so we remind you to carefully read #1 again.

from: mullvad.net/en/help/no-logging-data-policy#email

LWD,

They oughta say who though.

anamethatisnt,

I can agree on that, but their dns already do for anyone who is interested to find out.

const_void, in Ah yes, smart lights need Tor.

TP-Link is trash. Avoid at all costs.

henfredemars, (edited )

I went to ask nicely for help from their support department and got a development build for one of their routers. Not only was it an ancient version of OpenWRT with the myriad of unpatched vulnerabilities, but it had absolutely dumb/weird configurations like the Wi-Fi password being a user account password exposed to a patched up SSH daemon with shell /bin/false. Just a whole lot of why and an obvious lack of care put into the software.

Their devices function… Most of the time. That’s about all that’s redeeming.

xela, in Mullvad uses Gmail

…because why would you go to all the trouble to pay Mullvad (presumably to keep your sensitive information away from big tech) to then give it to google in the form of an e-mail should you reach out to Mullvad for support? Google would then suck up any and all data that comes via their gmail service.

moreeni,

What? I’m really struggling to see why this comment is upvoted and the article is downvoted. The article doesn’t contradict anything in this comment

LWD,

It’s because of the difference in credentials. One is a website positing as having both privacy and cryptocurrency investment advice services, and the other is a random Lemur

GravitySpoiled, (edited ) in Why do you think they don't show Brave here?

Not enough market share. Keep it simple. The one who use brave know about firefox. Grab the low hanging fruit

essellburns,

Grab the low hanging fruit

Sounds like locker room banter to me

Haystack, in Ah yes, smart lights need Tor.

Fwiw the TP link bulbs usually have a local API that Home Assistant has an integration for. You can use that and block their internet access - unless they’ve removed that feature. I only used one of these briefly because someone gave it to me. Usually just use cheap ZigBee bulbs. I would throw that one out though as someone else said it’s likely been compromised already…

errorlab,

I’m all in on ZigBee and z-wave. The bulb is isolated, don’t even know my app login.

Do you mind sharing what ZigBee lightbulbs you recommend?

Flying_Hellfish, (edited )

The zigbee bulbs I’ve had the best luck with are Innr, although they are kind of pricy. Ikea bulbs are good for the price, but every one I have, has very loud coil whine when off. I had some on bedside stands and had to move them to other rooms. Sengled are nice when they work, I’ve had issues with them dropping off my network.

Both Ikea and Innr are also repeaters, Sengled does not do repeaters in their bulbs. Neither Ikea or Innr are exactly cheap, but they’ve been the most solid for me.

GravitySpoiled, in Apple is bringing sideloading and alternate app stores to the iPhone

All apps must be “notarized” by Apple

Is that legal?

LWD,

Considering how many technicalities Apple is weaseling through right now, it’s probably the most legal thing in existence.

Of course, legality does not mean morality, and in this case I would argue it’s the opposite

WhatAmLemmy, (edited )

Sideloading is explicitly about enabling the user to install multimedia and apps that are not approved by the manufacturer or OS vendor, so this is probably illegal (depends on how the law’s been written) and I expect Apple to be taken to court over it in the very near future.

LWD,

How I hope you are right

dan1101,

That has to violate the spirit of the law at the very least.

jasep, (edited )
Catsrules, (edited )

“I will make it legal”.

-Mr. Cook

bionicjoey, in Apple is bringing sideloading and alternate app stores to the iPhone

Apple is bringing being forced to allow sideloading and alternate app stores to the iPhone

FTFY

big_slap,

this is the stuff my nerd heart wishes my government could do for us… maybe it’s time to move, lol

fluckx,

That’s exactly what I was thinking. It’s incredible how the article title tries to spin it…

taladar, in Do you use Mull browser? If so you may want to donate to keep Divested computing alive so they can continue to maintain Divest os and Mull among other things.

So this one guy maintains a mobile OS and a browser and an openwrt fork? That seems like too much work for one person and too few people to have issues with lack of donations if he actually does pull it off.

possiblylinux127,

Maybe that’s why he needs 12 grand

Cheradenine,

Two browsers, Mull (Firefox Android) Mulch (Chromium Android), and their own System Webview, and a bunch of their own apps, and comparison tables for releases etc. They are incredibly hard working and usually release updates same day as a security patch is released.

solrize, in Wi-Fi Password On Post-It Note

The Vivaldi link actually goes to theonion.com/wi-fi-password-on-post-it-note-read-… .

Zerush,
@Zerush@lemmy.ml avatar

Yes, but I did not want to take credit for this discovery, especially on a federated site, which is why I have shared the toot of the person who found it

solrize, (edited )

The Onion is not exactly obscure. If you want to credit the Vivaldi user, I think it’s still preferable to link the Onion directly, and add a note saying where you found it. That saves people from some clicking and tracking.

pineapplelover,

It’s a mastadon instance and Vivaldi is pretty privacy respecting. (Despite being chromium based)

Zerush, (edited )
@Zerush@lemmy.ml avatar

Tracking? I think that the Fediverse isn’t Facebook, no tracking conecting or linking from one to another, tracking from the Onion, but not from Mastodon. Look for yourself who is tracking you themarkup.org/blacklight (nice in your Bookmarks)

https://file.coffee/u/xe22h-zCTD47nBnb-Z27k.png https://file.coffee/u/v0oFOqLJXAy5b4GOKXEEF.png

solrize,

If nothing else, your ISP is also tracking.

Zerush, (edited )
@Zerush@lemmy.ml avatar

That isn’t avoidable if you don’t use an VPN. ProtonVPN (OpenSource) is fine, even the free one (no logs, encrypted military level, no data limits in the free version, made by cientifics of the CERN)

SheeEttin, (edited )

Discovering what? A very popular satirical news site?

Zerush,
@Zerush@lemmy.ml avatar

Not in Spain

CazRaX, in NSA Buys Americans’ Internet Data Without Warrants, Letter Says

That might be a loophole since they aren’t requesting it legally they are buying it like any other can.

library_napper,
@library_napper@monyet.cc avatar

Fyi, this was only possible since Trump made it legal

CazRaX,

OMG, I don’t care about which boogyman you fear, it would have happened eventually regardless of color in the position. Money and power speaks much louder than political party.

neuracnu, in Wi-Fi Password On Post-It Note
@neuracnu@lemmy.blahaj.zone avatar

I keep this sign framed in my house (for the guest network, of course).

https://lemmy.blahaj.zone/pictrs/image/9a86b78f-0618-428c-9976-44cde918a816.png

mp3,
@mp3@lemmy.ca avatar

Same but with a QR code

library_napper, (edited )
@library_napper@monyet.cc avatar

this witch has made the incantation invisible!

possiblylinux127, in Brave to end 'Strict' fingerprinting protection as it breaks websites

Honestly you really should be using Firefox.

umbrella,
@umbrella@lemmy.ml avatar

yes, why are people so allergic to it??

possiblylinux127,

The UI is somewhat clunky and it feels half dead.

I really wish Mozilla would rethink there business.

umbrella,
@umbrella@lemmy.ml avatar

whats clunky about it??

a browser is just an address bar and tabs

possiblylinux127,

With tons if spacing between everything

umbrella, (edited )
@umbrella@lemmy.ml avatar

compact mode, in the same place you would change the theme

i use it for this very reason

PumaStoleMyBluff,

Firefox’s resist fingerprinting breaks sites too.

dditty,

I have encountered a handful of sites that it broke as well. I use the strict protection option and manually add exceptions to the few sites it breaks - then I never have any other issues with them

possiblylinux127,

It doesn’t really break things for me personally. However if it does break something just turn it off.

Mikina,

I’ve been having a pretty good experience with Mullvad, however I don’t hear many people talking about it. I wonder why is that, IIRC it’s being developed with Tor Foundation, and is basically a Tor browser for clear web, and that sounds perfect. So far, I didn’t run into any issues, so is there a catch, or are they just not well enough known yet? Or, maybe people are turned away by their optional VPN?

LWD,

Probably because LibreWolf is most of the way there, and the Mullvad branding + proprietary VPN is more than a bit much. I use(d) the VPN alongside it and found the add-on “hints” regarding the correct DNS settings more frustrating than helpful, too.

Mikina, (edited )

I was using LibreWolf before, but I really like the idea of bundling VPN + Browser, and also the way they handle payments - not only is Mullvad VPN kind of cheap, I can just pay with crypto and don’t need any account (kind of - you just generate username that also serves as an password, without any other contact information required).

But what I like the most about it is the idea of making a browser with the goal of having the same fingerprint between users (as much as possible), and offering it with a VPN - becuase that means that most of other users of the VPN will probably also have the same fingerprint from the browser, so you will blend in with them. I wasn’t really sold on the idea of VPN before that and didn’t use one, but this was what convinced me.

But tbh I haven’t done much research into the company, or into the effectivness of their implementation. I’m kind of betting on their cooperation with Tor Browser, which should have most of this stuff already figured out. But it’s possible that other browsers are just better at it, I never checked.

I do however still use LibreWolf for the occasional site that breaks with Mullvad, but it’s not something that happens too often.

I use(d) the VPN alongside it and found the add-on “hints” regarding the correct DNS settings more frustrating than helpful, too.

Hmm, I don’t think I’ve ever noticed anything about DNS. I think I’ve actually never click on the browser vpn extension, though :D Is it the encrypted DNS hint?

EDIT: Found this, apparently it’s doing pretty well privacytests.org

solrize, (edited ) in VPS suggestions?

I can recommend buyvm. 500gb storage from them (hdd) is $2.5/m I think. You can mount it encrypted. Small hosts like that usually have enough trouble keeping up with the day’s tickets that they can’t spend time messing with your files unless there is a definite issue. Note that if you are serving semi public content (seedbox?) then by definition it’s not very private. And no vps can be as private as using your own hardware.

ArtemisArrow3579,

I am planning on getting an older PC and turning it into a server, but for now I can’t afford it, so I need something temporary

solrize,

You could get a kimsufi or similar cheap dedicated server and again, encrypt a disk partition.

lemmyreader, in British man Aditya Verma appears in Spanish court over plane-bomb hoax

TL;DR

Don’t use snapchat

TIL that Snapchat is an app used in 2024 without E2EE, Wikipedia article on Snapchat :

Encryption

In January 2018, Snapchat introduced the use of end-to-end encryption in the application but only for snaps (pictures and video), according to a Snapchat security engineer presenting at the January 2019 Real World Crypto Conference.[138][139][140] As of the January 2019 conference Snapchat had plans to introduce end-to-end encryption for text messages and group chats in the future.[141]

possiblylinux127,

Its also proprietary so any claim can’t be trusted.

dubyakay, (edited )

Well, doesn’t matter if it’s proprietary. Just need to sniff packets and you’d find out if they are encrypted or not, no?

Edit: looks like it’s not E2E truly. It might be encrypted in flight, but snapchat as an entity can read anyone’s messages. They have a policy to act on threats within thirty minutes and report it to the authorities. Dystopian.

possiblylinux127,

It very much matters. When something is proprietary there is a, no alternatives that will function exactly the same and b, you don’t know what its really doing. For all you know its detecting the sniffing and changing its behavior.

Additionally how do you know what’s being sent if its encrypted.

dubyakay,

Yeah, see my edit.

Before the edit, I just meant the technicality itself: is it actually encrypted or is it plain text? This would have mattered if the state intercepted the message somehow, spying on their citizens. But apparently they did not, because snapchat leaked the data to them in a semi-automated manner: auto-generated incident report based on filtering gets escalated to authorities.

possiblylinux127,

No matter what it was this is just a reminder to use Foss encrypted chats that have been validated by at least one security audit.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #