privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

Yesbutnotreally, in What should be used for anonymous usernames?

deleted_by_author

  • Loading...
  • jollyrogue,

    It does.

    AzureRT,
    @AzureRT@reddthat.com avatar

    What the fuck. I never knew Bitwarden had a username gen until I went to checked to see if it did, and I immediately notice it

    jollyrogue,

    It’s fairly recent, and I don’t think they advertise it. It appeared one day in the generator. 😆

    I don’t think it’s particularly good, but it’s something!

    just_another_person,

    Must be a new feature. I developed a client for BW 6 months ago, and this was definitely not a thing.

    evulhotdog,

    It’s been in the Chrome extension for at least a year.

    just_another_person,

    Must be client side only. TIL

    mojo,

    It’s really not all that different from a passphrase generator

    just_another_person,

    Well, the same thing, but just not part of the BW server API is all.

    trevor,

    deleted_by_author

  • Loading...
  • just_another_person,

    It’s not a public project. It was based on their docs to be compliant though, much the same as the vaultwarden project.

    mojo,

    Yup that’s where my username came from

    sheogorath,

    (👁 ͜ʖ👁)

    shootwhatsmyname,
    @shootwhatsmyname@lemm.ee avatar

    👁️ 👁️

    👅

    davel, in Cops Used DNA to Predict a Suspect’s Face—and Tried to Run Facial Recognition on It
    @davel@lemmy.ml avatar

    Next thing you know this will be the new expert witness pseudoscience.

    SnotFlickerman, (edited )
    @SnotFlickerman@lemmy.blahaj.zone avatar

    Beat me to the punch, I was saying just as much, considering the history of forensic science in general. It won’t be long before they’re producing bogus “research” to justify it at a new investigative method.

    agent_flounder, (edited )
    @agent_flounder@lemmy.world avatar

    Propublica did an article on that.

    propublica.org/…/understanding-junk-science-foren…

    E.g.

    The reliability of bloodstain-pattern analysis has never been definitively proven or quantified, but largely due to the testimony of criminalist Herbert MacDonell, it was steadily admitted in court after court around the country in the 1970s and ’80s. MacDonell spent his career teaching weeklong “institutes” in bloodstain-pattern analysis at police departments around the country, training hundreds of officers who, in turn, trained hundreds more.

    In 2009, a watershed report commissioned by the National Academy of Sciences cast doubt on the discipline, finding that “the uncertainties associated with bloodstain-pattern analysis are enormous,” and that experts’ opinions were generally “more subjective than scientific.” More than a decade later, few peer-reviewed studies exist, and research that might determine the accuracy of analysts’ findings is close to nonexistent.

    davel,
    @davel@lemmy.ml avatar

    Remember this article when you end up on a jury.

    agent_flounder,
    @agent_flounder@lemmy.world avatar

    Or sitting behind the defense table.

    possiblylinux127, in Google Update Reveals AI Will Start Reading All Your Private Messages

    “Start”

    amju_wolf, in Haier hits Home Assistant plugin dev with takedown notice
    @amju_wolf@pawb.social avatar

    Good to know which company should be avoided for buying home appliances. I really hope the notice will be the first thing to show ope when you search their name + HA Integration.

    themeatbridge,

    All the HVAC control systems are anti-opensource. They pretend like their proprietary controls are trade secrets worth billions in research and development, but ultimately they are all just glorified mercury switches. Honeywell, Johnson, Mitsubishi, Schneider, Trane, Siemens, none of them want to allow third party control without getting their beaks wet with licensing fees. Even their commercial departments have started phasing out support for protocols like BACNet and Modbus.

    Temperature sensors are cheap as shit. Low voltage relays are cheap as shit. Even digitally controlled zone dampers shouldn’t cost more than $100 installed. If you can access your ventilation in your attic or basement, you could zone every room in your house for less than it costs to replace a single AC compressor, and run it all on a raspberry pi.

    But you need to know what you’re doing, and they will throw every hurdle in your way. No contractors would risk drawing the ire of their suppliers by doing it for you.

    BearOfaTime,

    Sounds like a market opportunity. Would be super disruptive

    sxan,
    @sxan@midwest.social avatar

    The Honeywell HomeAssistant integration works pretty well, and has been around for a while, but it works through a web API. I’d prefer to have a fully local connection, but I’m not going to replace the entire HVAC control system to get it.

    DrWeevilJammer,
    @DrWeevilJammer@lemmy.ml avatar

    Several Venstar thermostat models feature local API and work great with Home Assistant

    JoeKrogan, in Active combat against surveillance instead of passive defense
    @JoeKrogan@lemmy.world avatar

    I would instead recommend running a tor relay or i2p node. That way you have encrypted traffic and are helping others and further legitimizing privacy by its everyday use

    LWD, (edited ) in 23andMe hackers accessed ancestry information on millions of customers using a feature that matches relatives

    deleted_by_author

  • Loading...
  • Canadian_Cabinet,

    Yep. I did their test like 5 years ago and after the major hack (or breach or whatever) recently I requested that they delete my info

    KinglyWeevil, in Mozilla says Apple’s new browser rules are “as painful as possible” for Firefox

    My wife has an iPad and one of the things I hate the most is that you can’t install adblock extensions into Firefox on it like you can on Android. Which is a thing that has made using the browser on the phone wayyyy more enjoyable.

    deranger,

    I use DNS level blocking for blocking ads on iOS devices.

    PopShark,

    Which service do you use (if any) for it? Personally I use controld but I hear NextDNS is the most popular

    deranger,

    NextDNS. Pretty cheap and supports DNS over HTTPS.

    jadedwench,

    I use AdGuard both on my Android phone and iPad. Not quite as good on the iPad because Apple doesn’t make it easy, but definitely makes a huge difference. For me, $30 a year is worth it and you can use it on 3 devices. I got sick of the ads in apps that were downright disturbing in some cases and reporting them didn’t do a whole lot. Browser extensions can do a lot more to tidy up the experience, but I will take what I can get.

    adguard.com/en/welcome.html

    ScoobyDoo27,

    Why are you paying per year? You can get lifetime adguard licenses for cheap from stack social.

    Loucypher,

    You can pay a lifetime licence for 10$ apps.apple.com/fr/app/…/id1126386264?l=en-GB

    jadedwench,

    I ended up getting it from them directly. I am on Android 90% of the time and don’t pay for the license from the Apple store. No idea if that one is a single device or the same as the multi-device. I tend to not do things from the Apple store as I don’t have an iPhone and they seem to want or assume you have one. Just like I can never use their watch (not that I want one).

    krnl386,
    @krnl386@lemmy.ca avatar

    The Orion browser for iOS/iPadOS supports both Firefox and Chromium extensions, however, the support is quite buggy and limited. Nonetheless, a valiant effort by Orion devs.

    kbal, in The Irish government wants to pass a law that could see you or your loved ones jailed for possession of memes, cartoons or any content that could be deemed "hateful".
    @kbal@fedia.io avatar

    It's too bad you couldn't find a link to somewhere other than x.com. Just going by the headline though, this could lead to great new career opportunities for Irish black market contraband meme dealers.

    SheeEttin,
    LWD, (edited ) in How good/bad is Firefox sync.

    deleted_by_author

  • Loading...
  • itsaj26744,
    @itsaj26744@programming.dev avatar

    Thanks, Looks like gonna use it

    FairLight, in A question about secure chats

    Cybersec researcher here. The content of your chat is encrypted end to end. Their servers can’t read what you write. This is because they use the same protocol as signal, x3dh and double ratchet. However, they can and will collect everything else. Contact info, for example, phone, etc

    BearOfaTime,

    If you login to another device with WhatsApp, does it show your chat history? If so, then the servers have your key.

    I’ve never used any FB service, so I don’t know., and I don’t know anyone who uses WhatsApp.

    redeven,
    @redeven@lemmy.world avatar

    To “link” other devices you have to scan a qr from your phone, so it’s certainly possible that during that process the devices connect and share the key, and the servers don’t have it.

    Or the servers could have it. Idk, it’s closed source, that’s the problem at hand.

    nightwatch_admin,

    No, the protocol is sound enough, WhatsApp doesn’t have the key, doesn’t want the key (so they will probably not be responsible for what you are communicating with others), and doesn’t need the key - as others have put so eloquently, the metadata is rich enough for them.

    BearOfaTime, (edited )

    Sounds like it transfers the ID Out-of-band, so that’s good, does the desktop get the chat history then? (It’s possible it pulls chat history from the phone).

    Oh, I agree with the closed source issue. That makes it a no-sale for me.

    Rinox,

    Initially you could only log in from one device, as it created a new private key every time you switched device. Then they implemented Whatsapp Web, which essentially required the primary device to be connected to the internet, the chats would then be transferred from the primary device to the secondary devices (I assume through an encrypted tunnel of some sorts). Then as of late they have implemented a new technology that allows you to share your private key among multiple devices, making them all the “primary device”. The chat history and all the messages can be shared from one device to another while encrypted. The weak spot at one point was the chat backup, which was unencrypted and stored in your Google Drive, so technically Google could have had access to all your chats. Today though, you can encrypt the backup through a password.

    In theory Whatsapp has never needed to read your chats to have the functionality it has. That’s in theory because it’s closed source and we cannot know anything for certain. All this is just what Meta/Whatsapp said or pure speculation.

    Lime66,

    deleted_by_author

  • Loading...
  • 0xD,

    You literally send the message you report, that has nothing to do with breaking encryption.

    That’s like me showing you a letter I don’t like and then accusing you of intercepting my mail, lmao.

    iturnedintoanewt,
    @iturnedintoanewt@lemm.ee avatar

    Link previews however, are calculated server-side. So, yeah. They see any link posted.

    hersh, in Signal leaked random contacts to me!

    Has anyone else been able to reproduce this? I just tried and was not able to.

    OP, is it possible these people were in group chats you were part of?

    aodhsishaj,

    I still don’t see any bug report anyone can follow up on… I cannot trust OP’s experience until that’s linked here.

    ErKaf,

    The bug report forum from Signal doesn’t give you any link.

    ErKaf,

    No, they are not. I’m in two groups. None of them are in the groups. I only use Signal for Real life friends from my Country. I never joined any random group. These people are from all over the world.

    hersh,

    Interesting. Are there any other accounts on your phone that provide contacts? Maybe social media or other chat platforms? On Android you can see accounts in Settings > Passwords & Accounts (or somewhere similar; it varies a little between brands). You can also check inside your Contacts app by expanding the sidebar (again, varies by brand).

    Just a thought. I don’t have any other contact providers on my phone so I can’t test it myself.

    Please keep us posted if you get any official response or learn anything new!

    ErKaf,

    Nope. And I maybe had to add (did it now) that this only appears to be a problem with Signal Desktop. My signal app on android doesn’t even show other contacts from strangers. I will update this if I get a response, of course.

    Pantherina,

    Group chats very likely. There are often sync issues from mobile, so these may just be old spam or group chat numbers.

    iAvicenna, in Cops Used DNA to Predict a Suspect’s Face—and Tried to Run Facial Recognition on It
    @iAvicenna@lemmy.world avatar

    wow nice to know that from DNA you can predict whether or not a person has a beard, or their style of hair

    dan1101,

    Or what they look like from lifestyle and health factors.

    hansl,

    Even from a perfect witness (and witnesses are very imprefect) you wouldn’t be able to predict if they have a beard or not. That’s why you always multiple variations of the person when they actually distribute renditions.

    Wage_slave,
    @Wage_slave@lemmy.ml avatar

    I was was wondering what I’d look like with a sick tat on my face. And behold, the DNA and AI winning combination knew it, before I ever got it.

    Yesbutnotreally, in Ghostery Private Search

    Wasn’t Ghostery bought by a data broker/ad company?

    JoeKrogan,
    @JoeKrogan@lemmy.world avatar

    My thoughts exactly… Hard pass

    Zerush,
    @Zerush@lemmy.ml avatar

    Yes, but the same as with Startpage. Despite the company, it’s privacy features are already valid (GDPR), better as DuckDuckGo, Qwant, and other privacy search engines, the only seach engines without any tracker and/or ads are Andisearch. MetaGer, Mojeek, GetPage, Groot Search and few more, but it’s depend of which data is collected to put in risk the privacy, tecnical data are not the same as personal data. Ads and trackers are anyway blocked with the adblockers everybody use, the risk is only the logging of the user activity and this none of the privcy search engines do.

    LWD,

    Ghostery was also intimately involved with what is now Brave Search, IIRC.

    Toribor, (edited )
    @Toribor@corndog.social avatar

    Yes. If you use Ghostery and are looking for an alternative I highly recommend Privacy Badger. It’s created by the Electronic Frontier Foundation and is free and open source. Great piece of software.

    Cheradenine,

    Yes they were, and they used what you personally blocked to better enable ads that would bypass their adblocker. They had some catchy name for it, I don’t remember what. When they were exposed for their practices the privacy community did a mass uninstall. These features actually seem good, but I will never trust them again.

    I tried to follow the link just to look at it, my firewall blocks it for ‘tracking’, I could bypass it but once bitten, twice shy.

    LodeMike, in Mozilla's Platform Tilt: Tracking technical issues which disadvantage Firefox relative to the first-party browser within major software platforms

    This is what Mozilla should be doing.

    ExtremeDullard, in Dropbox is sharing users' files with OpenAI, here's how to opt out
    @ExtremeDullard@lemmy.sdf.org avatar

    Missing option that I use:

    Free Google Drive mounted with rclone and then eCryptfs filesystem mounted on the Google Drive mountpoint.

    I get the free space and Google only sees encrypted files.

    TGhost, (edited )
    @TGhost@lemmy.ml avatar

    not bad too, i will not edit the body with that because i think it can be against the ToS of Google, and if not and that’s become a popular solution, that will be for sure in it then.

    You can loose your account so easily with them, so its better to be “reliable” ^^

    zaph,

    I love you so much right now

    TGhost,
    @TGhost@lemmy.ml avatar

    😊 ☺️

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 22400688 bytes) in /var/www/kbin/kbin/vendor/symfony/http-kernel/Profiler/FileProfilerStorage.php on line 174

    Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 10354352 bytes) in /var/www/kbin/kbin/vendor/symfony/error-handler/ErrorRenderer/HtmlErrorRenderer.php on line 339