privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

xvlc, in Kroger Sued for Sharing Sensitive Health Data With Meta

I was confused for a second asking myself when Kroger was split into Kroger Sued and Kroger Nord.

mypasswordis1234, in Best alternative to Chromecast?
@mypasswordis1234@lemmy.world avatar

Rpi + LineageOS Android TV + SmartTube + Jellyfin + Bluetooth pilot + MiraCast

akilou,

Oof. This summarizes perfectly what it’s like to give a shit about privacy.

mypasswordis1234,
@mypasswordis1234@lemmy.world avatar

I believe that doing these few things that we can do is a very low price to pay in the fight against a multi-billion dollar corporation

akilou,

Explain setting up a Raspberry Pi to your aunt and have her tell me it’s a low pricw. Let alone lineage os, Jellyfin, Smart tube, and whatever else was in your list. And that solves just casting and steaming. Now do email, messages, browser tracking and fingerprinting, and everything else in our lives… It a lot. And honestly too much.

Chozo,

Yep, I'm with you on that. I'm actually pretty tech-literate, and even I don't have the time/energy to bother with all of that shit. That's a lot of work and maintenance just for a single task that I want to be as idle as possible. Watching videos should just be two clicks, not studying and building and troubleshooting and updating and configuring a dozen things.

mypasswordis1234, (edited )
@mypasswordis1234@lemmy.world avatar

Yes, I understand that setting up a Raspberry Pi with LineageOS and other apps can be a challenge for many people. Protecting your online privacy definitely requires effort, especially when using different services. But even small steps, such as using alternative apps, can make a difference in increasing privacy. Even if you can’t implement all the privacy suggestions, you can choose a few that are most important to you.

This is a long-term war that requires technical knowledge from us. Big Tech corporations take advantage of our lack of knowledge. Information is power, and power is money. That’s the point.

If your aunt doesn’t care, screw it. Take care of yourself.

Lemmyfunbun,

Didnt know their was Lineage for TVs

zonsopkomst, in I deleted my google accounts today
@zonsopkomst@lemmy.ml avatar

Anyone have any alternatives to Voice?

frantic6423,

I moved my number to VoIP.ms and while it’s not nearly the same service wise, SMS do come to my email and I can call and receive calls via any VoIP app I want.

zonsopkomst,
@zonsopkomst@lemmy.ml avatar

Thanks. Looks promising. Will def look further into.

warmaster, in Plex Discover Together shares a bit too much. ...

From the link:

Plex is a hybrid streaming service/self-hosted media server.

There’s the main problem. You’re partially in control. I encourage everyone to switch to Jellyfin, even if you don’t have anything to hide.

BolexForSoup, (edited )
@BolexForSoup@kbin.social avatar

Jellyfin is such a PITA to set up for those that aren't more technically inclined.

Contend6248, (edited )

Huh? It’s far easier, throw in your server IP+Port or DNS and quick connect your clients with a short code.

The bullshit claim solution by Plex makes me pull my hair out, especially on remote instances.

Even when running, it managed to break the database 3 times, with no repair tool of working, interestingly there are plenty, community built and official ones, so that problem is common.

Rebuilding takes a whole day with the intro-outro detection.

What a nightmare to administrate.

As someone who has bought a lifetime subscription a year ago i was enraged as my girlfriend told me that she got ads in Plex, turns out they just added their free streaming service in there without even asking, fuck them, Jellyfin evolved great!

BolexForSoup, (edited )
@BolexForSoup@kbin.social avatar

Most people literally have no idea what you just wrote. I’m not saying jellyfish isn’t the superior option, I’m saying it’s less accessible.

Sightline,

Swim or sink.

BolexForSoup, (edited )
@BolexForSoup@kbin.social avatar

This is terrible advice when you’re encouraging people to open up their network to the broader public without full understanding of what they’re doing.

Contend6248, (edited )

That is my advice to the people not having a clue what i’ve wrote. You don’t want to tell me that people not able to setup Jellyfin are full aware of anything they are doing with Plex?

Not everyone should self-host, especially not people unable to watch a 10 minute setup tutorial of Jellyfin, or god forbid, reverse proxies.

Dumbing down self-hosting below the bare minimum is dangerous, but to each their own.

BolexForSoup, (edited )
@BolexForSoup@kbin.social avatar

deleted_by_author

  • Loading...
  • Contend6248,

    You’re free to have your own opinion

    BolexForSoup, (edited )
    @BolexForSoup@kbin.social avatar

    sadfasfsad

    frozen,
    @frozen@lemmy.frozeninferno.xyz avatar

    Plex is definitely easier to set up. I’ve done it multiple times over several servers. I’ve literally never heard of the database breaking, and I’ve deleted media that was actively being watched. Meanwhile, Jellyfin fails basic metadata matching on the exact same media set and also lacks built-in SSO. One of the biggest niceties of Plex is inviting people to join and they can just immediately login with Google.

    I’m not saying Plex is better, and I’m not defending their recent enshittification. It’s gotten worse, for sure. And I’m sure Jellyfin is great, but I haven’t had time to put the effort in to fix the metadata issues or create accounts so my users can switch over.

    sxan, in Plex Discover Together shares a bit too much. ...
    @sxan@midwest.social avatar

    What’s “futanari,” uncle Joeldebuijn?

    Technus, in Largest Study of its Kind Shows Outdated Password Practices are Widespread

    It’s 2023 and I still see signup forms that are like “must have at least one of each: number, lowercase letter, uppercase character, special character (but not , . " & / + < > {} [] )”

    That, plus no single sign-on (privacy issues aside) and login flow design so bad that password managers don’t know what the fuck is going on, and it’s no wonder password security is still a huge issue.

    ultratiem,
    @ultratiem@lemmy.ca avatar

    My old domain registrar set an 7 character limit, no special characters of any kind. Just numbers and letters. This was back in 2020 🫠

    BearOfaTime, in How to use RCS on Android while giving minimal data to Google?

    Keep in mind that RCS is still SMS to anyone without Google Messages.

    Also, the encryption in RCS is problematic - last time I read how it worked I wasn’t convinced it was as secure as advertised (I don’t recall why, but I think it’s because it’s not really E2E).

    sadreality, in Kroger Sued for Sharing Sensitive Health Data With Meta

    They don't even pretend anymore...

    They just act like we are stupid fucking peasants and daddy Sam let's them abuse us.

    thefartographer,

    Hey! That’s UNCLE daddy Sam to you! Now go apologize to Aunt Mommy-sister.

    sadreality,

    ohh punish me harder, daddy

    Bakkoda,

    Bruncle Sam

    kevincox,
    @kevincox@lemmy.ml avatar

    We are stupid fucking peasants as they have regulatory capture so they know the worst that will happen is they get a small slap on the wrist. Most people don’t actually care and those that do don’t have the money to buy the laws that we need.

    Why waste time pretending when it doesn’t make 2 cents of difference. It is just a waste of money.

    sadreality, (edited )

    You are falling for daddy's trick biggest trick....

    Sure plebs have no political power but there are two things left: Personal direct action and organizing both as consumers and workers.

    While with things like food shelter medical, not much choice left. With other products, people can vote with money. People can limit how much data they let out.

    People can job hop, demand higher wage, this is mostly limited to older, higher paying folk but them doing this helps everyone.

    Finally, organize as consumers and labour.

    I see voting being pushed as solution, you can keep voting but don't be naive haha

    Funnily enough people who push voting as the only solution will down vote direct action posts into oblivion. I am starting to assume the poltiics crowds are indeed either bad actors, ie bots or shills.

    Fascism is not holding [us] back... shit wages, healthcare and hi prices are tho

    BloodSlut, in Largest Study of its Kind Shows Outdated Password Practices are Widespread

    not even mentioning websites that have something like a 20 character limit on passwords

    floofloof,

    My favourites are the ones that let you set a 35-character password and, presumably, happily hash it and store it in the database, but then provide a login screen that requires passwords to be 20 characters or less.

    valkyre09,

    My HP printer had a hard limit of 16 characters. My password manager generated 20 characters. The login form had no issue accepting 20 characters, which were of course wrong.

    Just another reason to not buy HP I guess

    m_r_butts, (edited )

    deleted_by_author

  • Loading...
  • beetus,

    I think battle.net did this for a long time. I am probably misremembering but gosh whatever service I experienced it with was annoying

    ultratiem,
    @ultratiem@lemmy.ca avatar

    I was under the impression that even just letters (no case) would take a lifetimes to brute force if you exceeded 15 characters. And that drops to just 11 if you mix cases, numbers and special characters.

    XTL,

    That’s probably about correct, horse battery staple.

    TrickDacy,
    @TrickDacy@lemmy.world avatar

    One of the worst offenders I’ve seen was a bank I used to use. I think they limited to 16 characters and also got angry about a couple different special characters I tried to use. The problem beyond that? The form would let you submit any length and just silently chopped off characters 17+ or whatever. I had to reset my password several times to figure out what was going on. Pathetic…

    Goun,

    I’ve seen this, wtf does this people have on their heads!?

    pipariturbiini,

    Earlier this year I signed up as a member to a professional organization that also grants IT-related certifications… I couldn’t figure out why the account registration wouldn’t let me proceed, until I typed a super short password instead.

    SnotFlickerman, in Largest Study of its Kind Shows Outdated Password Practices are Widespread
    @SnotFlickerman@lemmy.blahaj.zone avatar

    Obligatory: “12345? That’s amazing! I’ve got the same combination on my luggage!”

    JoeKrogan, in Kroger Sued for Sharing Sensitive Health Data With Meta
    @JoeKrogan@lemmy.world avatar

    This is why I stick to Krogan owned sites

    joeldebruijn, in Telemetry in Flutter?

    For me an indicator would be Cwtch.

    Its an onion adress based metadata surveillance resistant chat app with a high focus on privacy.

    Developed in. … Flutter.

    git.openprivacy.ca/cwtch.im/cwtch-ui

    SnotFlickerman, in Plex Discover Together shares a bit too much. ...
    @SnotFlickerman@lemmy.blahaj.zone avatar

    This isn’t an entirely “new” feature, in a way.

    You always had access to see what your friends were watching on your own server. This is a consequences of being an admin, you kind of have to have access to that kind of data to manage your system and streams.

    This seems to just extend it to showing you what they’re watching on other servers, as well.

    Anyway, if the concern is that Plex, the company, has access to this data, then yeah, you probably should have read the privacy policy a little closer.

    Jellyfin is there and doesn’t have a parent company to “phone home” data to.

    frozen,
    @frozen@lemmy.frozeninferno.xyz avatar

    It’s unfortunate that Jellyfin is just slightly worse than Plex at pretty much everything. Playback is smooth, sure, but set up is harder, getting good metadata is harder, logging in is harder, etc.

    The metadata one really put me off. I set up a Jellyfin instance with the exact same media set as my Plex instance, and it immediately started “recognizing” standard movies and shows as porn and hentai. I’m still going to push through and get it properly set up eventually, but even so, I’m not looking forward to manually managing accounts when people can just SSO with Plex.

    RGB3x3,

    it immediately started “recognizing” standard movies and shows as porn and hentai.

    Jellyfin just knows its users and knows what they want.

    cheese_greater,

    I wonder if the Romans or any ancient people used jellyfish(es) for alternative purposes…They used sponges to wipe themselves, communally

    averyminya,

    I’ve had similar issues/experiences with Jellyfin as well.

    Sightline,

    Metadata has been far better in JF than Plex.

    frozen,
    @frozen@lemmy.frozeninferno.xyz avatar

    I mean, I have a ton of media that Plex recognizes automatically and Jellyfin doesn’t, so… Agree to disagree, I guess. I’m not trying to defend Plex’s recent enshittification, but that doesn’t change the fact that it’s generally a better experience than Jellyfin right now.

    _number8_,

    Anyway, if the concern is that Plex, the company, has access to this data, then yeah, you probably should have read the privacy policy a little closer.

    come on, you know this is a non answer. also plex shouldn’t have this data, it should be for the admin only.

    PeachMan,
    @PeachMan@lemmy.world avatar

    What? Plex is not one of those open source, self-hosted, privacy-centric services. Plex can do whatever the hell Plex wants with your watch history, because you agreed to their broad terms of service that said exactly that when you signed up. You chose to run your traffic and authentication through Plex servers because it’s convenient, not for privacy reasons.

    If you don’t like it, use Jellyfin. I’m personally looking into moving, as Plex seems to be getting slowly shittier.

    _number8_,

    why are you defending them? sure, they’re allowed because they’re a big company so they make the rules, but that doesn’t mean you have to lick their boots and say oh actually that’s fine you made the choice. even big companies SHOULD be ethical. we DESERVE ethical treatment, furthermore, even people who didn’t wade through the terms.

    PeachMan,
    @PeachMan@lemmy.world avatar

    I don’t know how you could read that and think I’m defending them.

    I’m just telling you how the world works. If you want real privacy, you need to PAY somebody with a rock-solid privacy agreement or fully host it yourself. Plex is neither of those things. Remember, if something that costs money to run is free, then YOU are the product.

    gregorum,

    They say they use it to sync up your watch history to your account so it can sync across devices, but I wouldn’t be surprised if they were selling your watch telemetry to advertisers as well.

    Contend6248,

    At that point i would be surprised if they didn’t

    SnotFlickerman,
    @SnotFlickerman@lemmy.blahaj.zone avatar

    It’s a non-answer that their privacy policy explicitly states that they will collect this type of information and that they stipulate what kind parties they can share that info with?

    www.plex.tv/about/privacy-legal/

    That’s the straightest answer that you’re going to get. Privacy policies like this are bullshit, but they’re also the norm so acting like it’s a non-answer after 20 years of this being the norm seems a little… naive, perhaps?

    sir_reginald, in How to use RCS on Android while giving minimal data to Google?
    @sir_reginald@lemmy.world avatar

    Google’s implementation of RCS is proprietary and that’s what most providers use. Relevant discussion here:

    forum.f-droid.org/t/…/13423

    MagneticFusion,

    I understand all the downsides of RCS. I am not saying I will drop everything and proudly use RCS, but the fact of the matter is it is a massive improvement over SMS in terms of privacy and security and just quality. I want to know how I will be able to do this using Google’s Messages app on a currently deGoogled phone running GrapheneOS, while providing the least amount of data possible (ideally would like to avoid installing sandboxed Google Play services)

    sir_reginald, (edited )
    @sir_reginald@lemmy.world avatar

    in that case, you’d be better by not using Google Messages. According to the discussion I linked there seem to be a few other proprietary RCS clients in the Play Store, other than Google’s and Samsung. Not sure of this myself, but it’s worth looking into it.

    If you don’t want to install Google Play services, your best bet is trying your luck with any RCS client other than Google’s. Even Samsung’s (if it even works outside of Samsung phones) has a bigger chance of working without Google Services installed.

    Once you find one that works on a degoogled Android, just follow the usual recommendations: install it in a separated profile, give it as little permissions as possible, maybe a VPN if you don’t want them to get your IP (although given that your RCS provider will probably be your ISP this might prove pointless), etc.

    And remember to assume that it is not private at all and they are harvesting all your metadata. The encryption is proprietary too, so there’s that.

    Edit: I just remembered that encryption is probably exclusive to Google Messages. So you’re screwed, I highly doubt Google Messages will work without Google Services.

    I’m guessing that in the near future when Apple launches RCS, we will have more options in Android too. So just keep up with the RCS news.

    cheese_greater, in Kroger Sued for Sharing Sensitive Health Data With Meta

    Compliance with legislation and common decency: optional

    Bakkoda,

    It’s more profitable to break the law. Until that changes it’s all downhill from here.

    cheese_greater,

    Flat fines are such bullshit

    QuinceDaPence, (edited )

    Needs to be either a percentage of yearly gross revenue averaged over the last 5 years, or a multiple of whatever they stood to gain from the policy (not just the individual plantiff).

    Whichever is higher.

    And don't let them write it off. You still have to pay taxes on the fine

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #