privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

cheese_greater, in Verizon Gave Phone Data to Armed Stalker Who Posed as Cop Over Email

So glad everythings up for grabs that easily

BearOfaTime, in Verizon Gave Phone Data to Armed Stalker Who Posed as Cop Over Email

Wow. Wtf Verizon?

Also, wtf psychopath? How did you think you wouldn’t get caught?

jacktherippah, (edited ) in How much privacy will I lose if I switch to e/OS

I recommend sticking to GOS. If you’d like to use something else, I’d recommend DivestOS. CalyxOS, LineageOS, /e/OS and iodéOS are all significant downgrades in usability, privacy and security and therefore not worth using on a Pixel.

version_unsorted,

Can you speak to how those are significant downgrades?

i_shot_the_sherry, in YouTube adds tracking parameters to shared URLs that can be traced back to individual Google accounts

I believe Spotify is doing something similar.

Would be nice if social networks and messengers would automatically strip these parameters.

noodlejetski,

adding this list to uBlock Origin helps: github.com/…/LegitimateURLShortener.txt

cupcakezealot,
@cupcakezealot@lemmy.blahaj.zone avatar

best filter maintainer ever

MagneticFusion,

Firefox on desktop has an option when copying links to copy without site tracking

brbposting,

Eventually I think sites will customize every URL for each user.

TikTok is quite sneaky. Sharing from their mobile app, you get: https://www.tiktok.com/t/[9digitCode]/

Only by opening the URL in a browser will you see: https://www.tiktok.com/@[user]/video/[19numerals]?_t=[alphanumericIdentifier]&_r=1…which can be sanitized.

Here’s how they took it a step further too: YCombinator.

otter, (edited )

Same with Reddit, FB Messenger, Instagram, TikTok… Some of them are harder to spot, like how Reddit now goes reddit.com/r/example/s/8913y4h93

Would be nice if social networks and messengers would automatically strip these parameters.

I started using URLCheck on Android and SO MANY links have some kind of tracker that you can drop and not lose any functionality. Things like Signal (and even Lemmy/Mastodon) could do something similar and throw up a little warning when it encounters a known tracker, then offer to clean the URL for you.

Another advantage is that the clean URLs are a lot more descriptive

otter,

For example, see the link in the post body here:

reddit.com/…/whats_going_on_with_kim_kardashian_a…

MaximilianKohler,

Why are you linking to reddit…

otter,

I was linking to a page where someone unknowingly used a link with a tracker, as an example of what I was talking about

Here’s a screenshot if that’s better

https://lemmy.ca/pictrs/image/e1c73a1a-6135-4341-a21c-bc9f3de38249.png

i_shot_the_sherry,

I’m using FairEmail on Android. When tapping a link, thr app detects tracking parameters and offers to remove them. I really like that feature and wish other apps would offer something similar.

otter,

Oh that’s nice! Hopefully more apps integrate that function

jivandabeast,

Pretty sure TikTok does it as well

variants, (edited )

That was the first place I noticed it, thought it was really smart of them, someone would send me a meme or whatever and it would show their account at the top. Was impressed that they generate so many links, now they can see who knows who so easily

miss_brainfart, in Governments spying on Apple, Google users through push notifications: US senator | World DNA
@miss_brainfart@lemmy.ml avatar

I don’t think I can really fault any Android developer for wanting to use Firebase and be done with it, because it’s just so simple to implement, and generally easy to work with.

But some things should be more important than comfort, shouldn’t they.

skullgiver, (edited )
@skullgiver@popplesburger.hilciferous.nl avatar

deleted_by_author

  • Loading...
  • miss_brainfart, (edited )
    @miss_brainfart@lemmy.ml avatar

    I mean, it was kinda expected and inevitable that one big service was going to reign supreme. Lots of things make push notification a real hassle, like you describe. Speaking for Android as I don’t know much about iOS, Firebase works incredibly well, it’s a super elegant solution, and if Google wasn’t such a shitshow, I’d love it.

    But it is a shitshow, in so many ways. So some services encrypt the contents, some don’t send them over those servers in the first place, but the remaining metadata is still shockingly useful for surveillance purposes.

    I don’t really know where I’m going with this comment, but as an EU resident, I’d just like to see alternative systems getting more attention.

    Idk, it’s just that so many people hear news like this and go: „It is what it is, can’t change it“

    Well not with that attitude, that’s for sure

    Pantherina, in YouTube adds tracking parameters to shared URLs that can be traced back to individual Google accounts

    Of course it does. Firefoxes new ClearURL copy feature is great

    papertowels,

    This was the final thing that convinced me to give Firefox another go, thank you.

    pineapplelover, (edited )

    One of us! One of us! Firefox is fucking amazing, just set up all the recommended extensions like ublock origin and privacy badger.

    Empricorn,

    uBlock Origin is now recommended by Firefox itself!? Or did you mean the community?

    pineapplelover, (edited )

    Mostly all extensions recommended by the community. However there is a recommended section on mozilla addons as well

    velox_vulnus, (edited ) in Governments spying on Apple, Google users through push notifications: US senator | World DNA

    Wion is a subsidary of Essel Group, and a right-wing, populist mouthpiece. They’re responsible for spreading hate in India against the minority groups.

    catalog3115, (edited )

    It is genuine & legitimate news. These are links for people who don’t want to use WION

    jaybone, in YouTube adds tracking parameters to shared URLs that can be traced back to individual Google accounts

    Do people use the share button rather than just copy the URL from the address bar? Am I just really old?

    octoperson,

    If you use youtube on a mobile app rather than a browser, it doesn’t have an address bar

    TigrisMorte,

    Never use an app for what should be a web page.

    Starglasses,

    That would be all apps then. Apps are legitimately great. Websites do the same scummy things.

    TigrisMorte,

    websites are sandboxed while apps have almost full access. So, no, they don't.

    Starglasses,

    What does that mean? I don’t understand. Apps have full access to what that websites don’t?

    TigrisMorte,
    flames5123,

    Exactly. A website has to download ALL the HTML every time. Sure, it can put all that in a JavaScript file and cache it but it has to be built each time. With an app, you (the devs) get to choose what to load, and it’s just usually a few simple things each time instead of constantly running a script.

    Using Lemmy as a web app really sucked. Having an actual app with actual integration to a robust UI works.

    TigrisMorte,

    Plus as an app developer you get to go through the user's contacts and files. Having an actual app locks you and allows you to be the product the app owners sell. Nothing else and certainly nothing of value for 99% of the apps out there.

    OminousOrange,
    @OminousOrange@lemmy.ca avatar

    But it’s blockable on websites. Firefox with ublock makes YouTube, Facebook, and instragam a relatively pleasant experience again.

    serratur,

    There is other apps like newpipe or grayjay, i havent experienced any ads using them

    TigrisMorte,

    And I know folks that have never lost money on crypto. Doesn't make crypto less of a risk.

    nik282000,
    @nik282000@lemmy.ca avatar

    Apps are legitimately great.

    Except they are mostly just lobotomized websites where you can’t copy the text or save media to your local device.

    Touching_Grass,

    Am I just really old?

    Sounds like you have cleaned a few trackballs in your days

    jaybone,

    Now I just try to keep my regular balls clean.

    TigrisMorte,

    Pics or didn't happen.

    Touching_Grass, (edited )

    LemonpartyDOTcom

    GBU_28,

    Keep up the good fight, buddy

    RovingFox,
    @RovingFox@infosec.pub avatar

    Many people use a phone and many people have youtube app on it.

    SandroHc,
    @SandroHc@lemmy.world avatar

    An added benefit of the share button is that it generates a minified link – “youtu.be/abcde” instead of “youtube.com/watch?v=abcde”. I find it neater.

    quo,

    deleted_by_author

  • Loading...
  • flames5123, (edited )

    That is 100% wrong. Did you read the tweets or even look at a single YouTube URL?

    youtube.com/watch?v=FOO&si=BAR would be shortened to just youtu.be/FOO?si=BAR

    The link to other people’s account is in the &si=BAR part. Probably standing for “share ID” or “source ID”or something. The shortened link is just the same as the long one with watch?v=FOO being included in the URL instead of the parameters.

    variants,

    I always assume shortened links are viruses, at least that’s what got ingrained in me from the yearly security IT lectures

    givesomefucks,

    Share is easier to do it at a specific time in the video.

    Like, you can manually add the “t=x” at the end for seconds, but it’s just easier to click the box to make the share button add it.

    TigrisMorte,

    Or you could just tell the person what to FF to.

    phoneymouse, in YouTube adds tracking parameters to shared URLs that can be traced back to individual Google accounts

    Never log in to YouTube

    digdilem,

    I find it convenient to do so to follow channels.

    viking,
    @viking@infosec.pub avatar

    Then use newpipe.

    Brutticus,

    free tube!

    euphoric_cat,
    @euphoric_cat@lemmy.blahaj.zone avatar

    use a privacy frontend, they let you login too

    corbin, (edited )

    Or just an RSS reader, every channel has an RSS feed

    dannym,

    If you’re on Android use grayjay, if you’re on Linux use freetube. You can follow channels on both of those.

    If using grayjay and you can afford it please do pay for the license; you’re not technically required; it’s based on the honor system, but it helps the developers at FUTO work on it and it helps them donate to other FOSS projects.

    If you use freetube please donate to them, even a dollar, the developers will greatly appreciate it.

    Let’s support software that doesn’t hate us!

    dukethorion, in Proton Drive Camera Backup has Arrived!
    @dukethorion@lemmy.world avatar

    Doesnt show any photos you’ve already uploaded to Drive (you know, the thousands you’d like to see). Their answer was download everything and reupload it.

    Can’t select folders to upload. Defaults to DCIM/Camera.

    Only works with a wifi connection, no option for mobile data.

    TheAnonymouseJoker, in La privacy in chat online dal punto di vista legale * Chat è leggi
    @TheAnonymouseJoker@lemmy.ml avatar

    You should probably supply a translated version link.

    ArcaneSlime, in Verizon Gave Phone Data to Armed Stalker Who Posed as Cop Over Email

    This is why you never comply without a judge-issued warrant (either as a business or a private citizen. Fuck them, if it’s important and there’s enough evidence for a warrant they can get one, if not they can suck rocks) and as a consumer you should be thinking about your privacy.

    MigratingtoLemmy, in YouTube adds tracking parameters to shared URLs that can be traced back to individual Google accounts

    Copy clean URLs with ClearURL

    AceFuzzLord,

    Don’t know if any other browsers do it, but Firefox for desktop added an option when right clicking links to copy without URL tracker. I don’t know if it works on yt links, but it’s definitely a step in the right direction.

    AnEilifintChorcra, in Telegram Android Notifications

    Telegram uses Google services like Signal for notifications - telegra.ph/Notifications-FIX its the first point under the Android section

    core.telegram.org/api/push-updates these are the docs for building your own Telegram app, specifically the push notifications section and again it mentions using APNS for iOS or FCM for Android but they also offer Simple push which would work with Unifiedpush and would be one way to bypass FCM but I don’t know if they offer that in their official app or if there are any other Telegram apps that have implemented it

    FarLine99, (edited )
    @FarLine99@lemmy.world avatar

    “Signal only uses FCM to wake up the Android app if there are new messages waiting on the Signal server and the app isn’t connected to it. Signal does not include any information in these notifications, encrypted or otherwise, so Google can only infer that your device has something queued on Signal’s servers.” I was wondering if a similar system has been implemented in telegram?

    Gooey0210,

    It’s still metadata, ditch google play services all at once

    FarLine99,
    @FarLine99@lemmy.world avatar

    Too radical a solution for me, I used microG for a long time, but the notification problems made me go back to Google services. i’ve banned them from accessing camera/microphone/geolocation via App Ops (put them on ignore mode), so I’m pretty calm. but notifications are still a problem).

    Gooey0210,

    They are priv apps, I believe it’s the same as root

    Most of the privacy apps don’t require you to have gapps and their notifications

    poVoq,
    @poVoq@slrpnk.net avatar

    The Telegram client available on F-droid does not use FCM for push notifications.

    LWD, (edited ) in Telegram Android Notifications

    deleted_by_author

  • Loading...
  • rdri, (edited )

    I’ve been using Telegram enough to understand that such allegations are useless. The first link is literally not about Telegram but about its 3rd party fork that original developers can’t do anything about. The second link is about piracy, and any app owner would handle any data they could in similar situations.

    Telegram is not just a messaging app but a public platform with channels and public chats. Any app with these properties will eventually have the same issues. If you don’t want to risk, you just use it as a personal messaging app and that’s it - in this way it’s not much different from other “secure” messaging apps.

    The way for apps like Signal to remain “truly secure” in “careful” users’ eyes is avoiding the introduction of the public communication part, which could lead to all the same problems some people don’t like Telegram for.

    That said, Telegram actually has a history of being a “bad actor” if you want to call it so. Namely:

    • At first it was possible to steal someone’s account by faking a SIM card (any government can do this). Later Telegram introduced cloud password that helped to prevent such cases.
    • At various points Telegram wrongfully banned and marked as “fake” various channels and bots used by opposition in Russia.

    But I can’t agree that either of that makes Telegram an insecure messaging platform. It’s either about bad management decisions in specific situations (e.g. Durov being worried about Telegram getting banned) or technical aspects of how user reports are handled (basically any channel can get marked “fake” if enough user reports are received).

    wincing_nucleus073, (edited )

    yeah funny how the oh-so-private and amazing signal allows bad actors to take over your account with sim access, and telegram does not.

    toastal,

    Criticism of Telegram isn’t endorsement for Signal. They are both garbage in different ways.

    FarLine99,
    @FarLine99@lemmy.world avatar

    I know and use Signal to communicate with family/friend. but everyone at work uses telegram, I can’t give them all an ultimatum to switch to Signal

    Gooey0210,

    If you’re ready to put on tinfoil, signal is not the way to go too

    Phone number requirement is a big no-no in privacy community, plus signal wants to centralize more and more, when they could actually make it possible to selfhost signal

    FarLine99,
    @FarLine99@lemmy.world avatar

    I don’t agree with you. so far Signal is the most mature and feature-rich messenger of the rest. yes, it provides privacy, not anonymity. but all new people are used to the algorithm of adding people, unlike SimpleX, Matrix, etc.

    miss_brainfart,
    @miss_brainfart@lemmy.ml avatar

    Phone numbers harm anonymity, not privacy.

    Kissaki,

    Your first link:

    42 million user IDs and phone numbers for a third-party version of Telegram were exposed online without a password. The accounts belong to users in Iran, where the official Telegram app is blocked.

    How is that a state exploit of Telegram? It’s not even about Telegram. It’s a third party app.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 18878464 bytes) in /var/www/kbin/kbin/vendor/symfony/http-kernel/Profiler/FileProfilerStorage.php on line 171

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 10502144 bytes) in /var/www/kbin/kbin/vendor/symfony/error-handler/Resources/views/logs.html.php on line 36