privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

Gooey0210, in British man Aditya Verma appears in Spanish court over plane-bomb hoax

You were convicted of thought crime, next time think what you… think, punk

possiblylinux127,

Exactly, this is such a silly case. I think its even funnier that he was interviewed by MI6 and MI7

coffeebiscuit, in Should I get one of those shielded wallets?

The rfid can work trough fabric. So a shielded wallet is a smart choice. Technically someone can make you pay by tapping your pants with a terminal device. Does this happen allot? No not really. But technically possible and more likely when more people use tap.

Here there is a maximum amount that can be paid with only contactless payment without a PIN code. If the price is higher a pin prompt will show up automatically (max $25,-) If you pay more things in a short time with the rfid than the pin prompt will eventually show up. So an unlimited amount of low payments isn’t possible. (Do check your bank for these details.) So when you lose your card your account can’t be drained. (Unless you have less than the minimum amount on your account)

Phones can also be setup as a contactless payment method, and would physically work the same. With the benefits of having a stronger signal, and being locked behind your phone lock (facial recognition or whatever.)

joat_mon,

In the UK the max for contactless payments is £100 and contactless is now the norm, so a shielded wallet would be highly recommended.

sxan,
@sxan@midwest.social avatar

Contactless payment works only half the timeon actual registers. What magic do scammers have that makes their readers work so well, and why aren’t stores using it?

Yesbutnotreally, in Ghostery Private Search

Wasn’t Ghostery bought by a data broker/ad company?

JoeKrogan,
@JoeKrogan@lemmy.world avatar

My thoughts exactly… Hard pass

Zerush,
@Zerush@lemmy.ml avatar

Yes, but the same as with Startpage. Despite the company, it’s privacy features are already valid (GDPR), better as DuckDuckGo, Qwant, and other privacy search engines, the only seach engines without any tracker and/or ads are Andisearch. MetaGer, Mojeek, GetPage, Groot Search and few more, but it’s depend of which data is collected to put in risk the privacy, tecnical data are not the same as personal data. Ads and trackers are anyway blocked with the adblockers everybody use, the risk is only the logging of the user activity and this none of the privcy search engines do.

LWD,

Ghostery was also intimately involved with what is now Brave Search, IIRC.

Toribor, (edited )
@Toribor@corndog.social avatar

Yes. If you use Ghostery and are looking for an alternative I highly recommend Privacy Badger. It’s created by the Electronic Frontier Foundation and is free and open source. Great piece of software.

Cheradenine,

Yes they were, and they used what you personally blocked to better enable ads that would bypass their adblocker. They had some catchy name for it, I don’t remember what. When they were exposed for their practices the privacy community did a mass uninstall. These features actually seem good, but I will never trust them again.

I tried to follow the link just to look at it, my firewall blocks it for ‘tracking’, I could bypass it but once bitten, twice shy.

MedicPigBabySaver, in Skynet is comming...

Already in my home. I call my robot vacuum “Skynet”.

dukethorion,
@dukethorion@lemmy.world avatar

Was my wifi SSID since 2009.

akilou,

My home server is Skynet

fluckx,

One of the ISPs here gave you email addresses from Skynet ( skynet.be ).

Little did we know…

Chais, in Targeted Ads are a Cybersecurity Risk
@Chais@sh.itjust.works avatar

All ads are a cybersecurity risk, not just the targeted ones. The targeted ones just offer new and exciting vectors.

Murdoc,

I hate ads more than anyone, but how are all ads a cybersecurity risk? Like say just a posted image that says “Buy (product X)”?

HumanPerson,

Ever downloaded an app off sourceforge without adblock? You or I may not fall for it but in big companies someone will eventually.

Chais, (edited )
@Chais@sh.itjust.works avatar

I’m not saying it was always the case. Back when ads were just images hosted on the same machine as the rest of the page they were only annoying.
But nowadays even so-called acceptable ads are delivered by third-party servers. So suddenly you have to trust not only the operator of the page you’re visiting but also any advertising partners they use. And since all modern advertising uses a gazillion of metrics that necessitates JavaScript you end up executing code that neither you nor the page operator have any actual need for nor influence on, hoping that the ad network has some sort of vetting process so they don’t end up unwittingly delivering malware.
That’s a tall order in my opinion.

KarnaSubarna, in This is how I KNOW it works as intended
@KarnaSubarna@lemmy.ml avatar

I’m afraid that protection might not last long.

bleepingcomputer.com/…/brave-to-end-strict-finger…

anarchy79,
@anarchy79@lemmy.world avatar

We are just rocks tumbling down a cliff side.

TexMexBazooka,

An interesting note-

Another issue is that Strict mode is used by roughly 0.5% of Brave’s users, with the rest using the default setting, which is the Standard mode.

This low percentage actually makes these users more vulnerable to fingerprinting despite them using the more aggressive blocker, because they constitute a discernible subset of users standing out from the rest.

anarchy79,
@anarchy79@lemmy.world avatar

That’s what I’ve always said, you got no out, if youre a big black blob on the map, the connections show exactly who you are.

TexMexBazooka,

Fingerprinting is tricky, you have to be as big standard as possible. Ironically privacy plugins make you more identifiable sometimes

knobbysideup, in Privacy Concerns on Lemmy: A Call for More User Control
@knobbysideup@sh.itjust.works avatar

If you don’t want to share information on a public forum, then don’t.

LWD,
OfficerBribe, (edited ) in This is how I KNOW it works as intended

CNN might be the only site I’ve seen that actually checks if you have made a cookie choice then. The whole cookie acceptance thing is dumb, but they are following the law.

Thankfully there is a plan that EU will make changes fo current policy so those popups might go away.

chiliedogg,

The plan should be “Tracking opt-in required - no banners or notifications allowed.”

floofloof, (edited ) in Privacy Concerns on Lemmy: A Call for More User Control

On Lemmy any comment you post gets federated out to other servers, so it’s available to anyone who sets up a server. So by design it is not possible to control who gets to see or archive your comments. I could set up a server to permanently archive every comment it sees, and if your server sends me your comment it goes into my archive. Probably people are already doing this for data mining. It’s not clear that you could bolt some kind of privacy control on to this architecture, which is fundamentally designed for sharing.

LWD,

Could ≠ Should.

Smarter defaults should be encouraged by products that are made for consumers, not corporations

andyburke,
@andyburke@fedia.io avatar

Although I agree that is how things work now, one could imagine a different approach:

For instance, I could maybe control who my content gets federated to. That is, if I decide I don't particularly want my content blasted to certain places that my instance would not call any blocked ones with my data.

If that causes some issues with ActivityPub, you can imagine encrypted blobs that could only be opened by others with a shared key.

We don't need to achieve perfection out of the gate, to me these questions are worth discussing so that we can build out more high quality tech for the fediverse, let's not try to just immediately shut down discussion.

mr_satan,
@mr_satan@monyet.cc avatar

How would you ensure other instances are not sharing your content?

To me this seems to be a question of ideology. I came here from Reddit because this is an open forum with transparent history.

Federetion by design ensures that accessibility (as far as I understand, correct me if I’m wrong). This design principle to me is the core. If that seems like an issue maybe this style of social media is not for you.

LWD,

Can you elaborate on what being “an open forum” means?

mr_satan,
@mr_satan@monyet.cc avatar

In this context, it’s an open public digital space. Noone is obligated share anything.

The part that is discussed as a privacy issue is a design element. It is by design post are visible to everyone, it is by design that comments are visible to everyone.

How is it a privacy issue when the user desides what to post for everyone to see?

If you are looking for a different design ideology then maybe you need a different social media platform.

LWD,

So regarding an open, public digital space like Twitter, how do you feel about people having the ability to lock their accounts and instantly hide all their tweets from the public?

Mastodon doesn’t have that, but it could.

My reaction to adding something like that will always be “that would be rad” regardless of previous assumptions about how public an app should be, or truisms like “the Internet is forever”, because I believe strongly that trying to fix issues is better than letting them languish unchecked.

mr_satan,
@mr_satan@monyet.cc avatar

I’ve never been on Twitter. Besides Reddit I really disliked all other main platforms. So answering your question: I don’t care, it’s a different platform for different style of social media interactions.

the Internet is forever

My position has nothing to do with this sentiment. Internet forgets, and often.

I like federated nature of Lemmy, I like that there is no “private” accounts. This is a feature not a bug.

I’m not trying to argue against privacy, but what you are describing isn’t a privacy issue or an issue at all. It’s a design element. And it’s this design is why I like it here.

As someone here has said, at some point the responsibility has to fall on the user. You don’t need to share anything. As long as the nature of the platform is clear (and it’s a separate discussion) the is no issue to be fixed.

If to you that is seems as an issue, well then maybe you are at the wrong place. And if the platform changes in the direction I don’t agree, I will leave.

LWD,

I like that there is no “private” accounts. This is a feature not a bug.

I’m not trying to argue against privacy…

I appreciate your honesty but this seems to conflict

mr_satan,
@mr_satan@monyet.cc avatar

How is this conflicting? You are a private person same as I, I don’t know who you are, you don’t know who I am.

How is selective hiding of post and comments privacy?

If you don’t want it to be seen – don’t post it.

LWD,

Choosing who to share your data with has been considered a privacy setting since the inception of Facebook and the subsequent erosion of those same settings.

For example, privacy settings on Facebook are available to all registered users: they can block certain individuals from seeing their profile, they can choose their “friends”, and they can limit who has access to their pictures and videos.

mr_satan,
@mr_satan@monyet.cc avatar

And that is the different premise for the social network.

You do have the equivalent choice here.

If you want Facebook, go to Facebook. It’s not worse or better it’s different.

Well Facebook is worse, but the reasons are corporate not design issues (it’s more complicated than that, but that’s beyond the point).

LWD,

We were talking about the definition of privacy, and I was giving an example to bolster my definition of it. We can switch to a different topic if you want, but first I want to cement this definition.

ZeroHora, in Brave to end 'Strict' fingerprinting protection as it breaks websites
@ZeroHora@lemmy.ml avatar

Another issue is that Strict mode is used by roughly 0.5% of Brave’s users, with the rest using the default setting, which is the Standard mode.

How are they getting this data? If it’s with telemetry this data doesn’t seem reliable, I doubt that people who change the fingerprint setting don’t disable telemetry.

Umbrias,

Alternatively, lol

SnotFlickerman, in This is how I KNOW it works as intended
@SnotFlickerman@lemmy.blahaj.zone avatar

Welcome to the Corporate Internet.

Get ready to play by Their Rules on Their Services.

Good thing a lot of them are useless fucking Dinosaurs like CNN that need to die anyway.

anarchy79,
@anarchy79@lemmy.world avatar

Not today.

Not.

Today.

astraeus,
@astraeus@programming.dev avatar

That’s why places like Lemmy and Mastodon are nice, even if big corpo buys up some instances, there’s still the option to just start free ones elsewhere.

cooopsspace, in How bad is Idea of .Zip as password manager?

Because it’s bad, prone to errors, user interface is poor and relies on you following your process perfectly every time.

Bitwarden.

Or KeePass.

greywolf0x1,

KeepassXC if you’re on Linux and KeepassDX on android, preferably on Fdroid.

Gooey0210, in Manifest v3 is Worse than I Thought

We will kill chrome

darkstar,

I doubt it. Normies love chrome, and the majority of normies don’t even know about ad blockers. Chrome will continue unfortunately

Gooey0210,

Are you using chrome? 🫤

darkstar,

Nope, I use Firefox

Obi,
@Obi@sopuli.xyz avatar

Anyone remembers when Chrome was the hot new kid on the block and we all converted the “normies” to it because it was so much better than IE? We’re reaping what we sowed.

makingStuffForFun,
@makingStuffForFun@lemmy.ml avatar

I still carry so much shame for this.

darkstar,

This is so true. I feel personally responsible

RedWizard, in PSA: Anyone can tell if you are using WhatsApp on your computer
@RedWizard@lemmygrad.ml avatar

And…?

FriendBesto,

It means you have even less privacy than the already abysmal notion that you thought you had.

Or,

That Whatsapp users are an even bigger set of Meta’s removed. 'Cause they are just raping yet another previously unknown data point.

RedWizard, (edited )
@RedWizard@lemmygrad.ml avatar

This isn’t new, interesting or noval information. If you run whats app from the desktop app or from web.WhatsApp.com on you’re browser on a PC then no shit they know your on your PC

Why does it matter if the people I’m chatting with know if in onnmy PC?

FriendBesto,

I see the issue. The issue is that you seemingly did not bother to read the link. Since that is not what is being discussed. It is not that you cannot tell whether someone is using a PC or a phone, but rather which PC or phone or peripheral you are using if you have number of them. Your point has literally nothing to do with the post.

“Be’ery wrote in his blog post explaining the data leak that it is a consequence of the way WhatsApp is designed: When someone sends a message to another WhatsApp user, their device creates a different session key for each device the receiver is using, thus telling the sender how many devices the receiver is using.”

lemmyreader, in The recent problem of maintaining privacy on the Internet (includes Networking)

The Snapchat has a word-filter suggestion makes most sense. But then again Cloudflare is very popular on the Internet as the cheap and well-known MITM anti-DDOS tool.

I haven’t read much about i2p, but I wouldn’t be surprised if the government has their paws in there too.

You will have to trust something if you want to communicate, there’s also GNUnet, ZeroNet, DeltaChat, and probably a lot more.

MigratingtoLemmy,

Ah, I completely missed this. Of course they use Cloudflare, perhaps the biggest MiTM-service on the planet.

Thanks, this makes a lot of sense

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #