privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

Tzeentch, in Remove Modem/SimCard from a Car
@Tzeentch@lemmy.blahaj.zone avatar

Your best bet is to find a car where its easiest to disable the antenna/cellular modem for, so look for a car that has a fuse for the DCM(digital communications module) you can pull, as having it be a fuse means you can readily reconnect it should you need to, try to find its schematic online, or find the repair manual for the car or use a car maintenance program,

Apparently its also possible to call the car company and ask for an opt out when serviced,

I vaguely remember some people experimenting with replacing the head unit with aftermarket ones, but no idea how well that would actually go in practice

Lemonparty,

I vaguely remember some people experimenting with replacing the head unit with aftermarket ones, but no idea how well that would actually go in practice

This varies wildly from manufacturer to manufacturer and even year to year. For example, GM cars used to route damn near everything through the entertainment unit, so that was your central computer. Cell antenna, on star control panel, every that phoned home. That was as recently as mid 2010s. It also led to hilarious problems where a relatively simple issue like an OnStar button not working well required a complete replacement of the stereo unit (which was $8k or so in parts and labor). Now that instrument clusters are doing more while also getting more diagnostic and digital, things are transitioning to a more centralized computing system somewhere else. This can make it easier OR more difficult to get around, depends on design.

For other brands it’s borderline impossible to even use an aftermarket system. Mazdas for example the entire infotainment system relies on itself. There’s nowhere to even put a traditional aftermarket. I’m sure it’s possible, but the design of the interior is completely based around the infotainment unit.

Gooey0210, (edited ) in Here's what telegram's founder say about Whatsapp's privacy

Guys, please stop using telegram if you care for your security and privacy

Telegram is not fully open source, sometimes they release the source, but the hashes of the builds don’t even match (so it’s a different source code) 🚩

Zero transparency about data handling, even when they get caught they don’t tell details 🚩 (Telegram in the recent years has got really shady reputation)

Very often ways they implement security is weird: non open source app, non open source server, leaking APIs, use of phone numbers, at some point they started asking for an email, non encrypted chats by default, never encrypted group chats… it can continue forever 🚩

Non-standard encryption is a real red flag, non-open-source 🚩

I know some people that work/worked for the police, and they can read all the messages easy peasy, i was trying to tell to the people many years ago, but everyone was so amused by the stickers. Now you can just read stories of the journalists and activists, and how they got imprisoned with the use telegram 👁️‍🗨️💀

PLEASE, STOP USING TELEGRAM IF YOU CARE FOR YOUR PRIVACY OR SECURITY

clot27, (edited )
@clot27@lemm.ee avatar

Except if you open source server, there’s no way to verify it is using same code anyways and their client is already open source so waste point.

sometimes they release the source, but the hashes of the builds don’t even match.

When did this happen? Source?

Signal asks phone numbers, emails are universally known. If you don’t want to give them your real phone number, buy one from fragment.com (their web3 service where they sell phone number for crypto). Emails are already public and they ask them only for recovery process and its opt on so there’s no problem with that.

All chats are encrypted by default from private to group using mtproto, where there have been no breaches found yet so stop spreading misinformation.

Again telling personal experience which maybe lie, can you share source of your claims? Which journalist got arrested due to telegram?

Gooey0210,

You can go and check yourself mr. Senior Officer of FSB, i don’t want to fight for your war

clot27,
@clot27@lemm.ee avatar

I would spread misinformation on internet and tell others to find source of it 🤓

hunt4peas, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

I am using Voyager & Eternity and both have no ads.

SuperSpaceFan,
@SuperSpaceFan@kbin.melroy.org avatar

And they are free

trigonated,

Same with Connect.

averyfalken,

I use eternity chase its Foss and easily available in the fdroid store

MBM, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

It’s wild just how many apps there are for Lemmy, ha

0ops,

Wow, no kidding

UNWILLING_PARTICIPANT,

Yeah I love it

danie10, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?
@danie10@lemmy.ml avatar

I’m reading this on Boost (once off payment) and no ads…

Cheradenine, in Accept cookie banners with third-party cookies rejected

It is an excellent question, but there is a third option, which is also blocking at the DNS level. Firefox and Safari block 3rd party cookies by default too.

In your example I do not think there is a difference, and my firewall logs seem to confirm this.

ebits21, (edited ) in ProtonMail Complied with 5,957 Data Requests in 2022 - Still Secure and Private?
@ebits21@lemmy.ca avatar

My understanding is that the email is encrypted still so… they hand over the encrypted data which might be useless.

(CEO did a podcast this week for a Linux podcast)

LWD, (edited )

deleted_by_author

  • Loading...
  • sqgl, (edited )

    I thought the email body is e2e encrypted nowadays by default(?). And I mean regardless of who your provider is.

    sqgl, in ProtonMail Complied with 5,957 Data Requests in 2022 - Still Secure and Private?

    I suppose they now keep logs of their VPN service too then.

    ReakDuck, (edited )

    Swiss law doesnt allow complying with VPN services afaik.

    ProtonVPN and ProtonMail are completely seperate too.

    sqgl, (edited )

    Do you mean the law doesn’t allow forcing the VPN service to comply with VPN log requests by authorities?

    And what do you mean by “completely separate”?

    Proton VPN… is operated by the Swiss company Proton AG, the company behind the email service Proton Mail.

    en.wikipedia.org/wiki/Proton_VPN

    Romain_Ty,

    @sqgl @ReakDuck
    From what I understood :
    Under Swiss laws, VPN providers are not forced to log anything.
    They also can't comply with orders coming from a foreign country if not approved by Swiss authorities.
    If someone is put under surveillance, he/she have to know that.

    However, always remind that that's just the law, not what is technically possible. If you're considered as a real threat for an important country, neither Switzerland or any country will protect you.

    shortwavesurfer, in ProtonMail Complied with 5,957 Data Requests in 2022 - Still Secure and Private?

    My threat model is not LE, its google, facebook, etc. If me using privacy services happens to make LE’s job harder well thats just the cherry on top.

    ReversalHatchery,

    At the same time it’s also important that the provider only complies with requests where it legally has to. I trust Proton to act this way.

    fox2263, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

    Good god I thought that was my client for a moment. Almost uninstalled before realising it was an image.

    Phew

    Shamot, in Accept cookie banners with third-party cookies rejected
    @Shamot@jlai.lu avatar

    When I see this, the only viable option I see is to close the site and boycott it. Any other choice would encourage more companies to do this blackmail.

    Cheradenine,

    While I agree, and I use TOR or Orbot for everything( which means quite a few things are blocked for me), this doesn’t answer OP’s question.

    Agility0971,
    @Agility0971@lemmy.world avatar

    In duckduckgo search results there is a link to block this domain. I always block shitty domains that farm clicks

    rinze, (edited )
    @rinze@infosec.pub avatar

    Where’s that? I just ran a test search but I can’t see it :-?

    Agility0971,
    @Agility0971@lemmy.world avatar

    Hmm… I cannot see it anymore either. They appeared under each search entry as hyperlink.

    superbirra, in The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?

    sync does not have ads for me as of now :)

    Retrograde,
    @Retrograde@lemmy.world avatar

    Sync is the only option for me

    UNWILLING_PARTICIPANT,

    I’m using Sync but pretty disappointed we still can’t post using it

    Amir,
    @Amir@lemmy.ml avatar

    You can definitely post on Sync…

    UNWILLING_PARTICIPANT,

    Oh look at that. Must’ve been added in an update without me noticing. Woohoo!

    superbirra,

    what

    UNWILLING_PARTICIPANT,

    Nvm

    Engywuck, (edited ) in Accept cookie banners with third-party cookies rejected

    Interesting question. IMHO you’re right: if you reject 3rd party cookies at browser level, so “accepting” them from the GDPR form shouldn’t really matter. Plus, many browsers nowadays forbid 3rd party websites to access cookies from other websites (in my understanding)…

    I’d like someone with a more deep knowledge to contribute to the discussion.

    Atemu, (edited )
    @Atemu@lemmy.ml avatar

    Cookie banners are not really about cookies.

    What they’re actually asking for is consent to process your data for profit in unethical ways. That usually involves cookies but could theoretically be done entirely without. They’re just a technological standard.

    You might aswell say: “We use https. [consent] [settings]”

    JokerProof, in ProtonMail Complied with 5,957 Data Requests in 2022 - Still Secure and Private?

    The article is actually pretty balanced. Yes Proton is secure and private, but if you’re hiding from law enforcement, don’t expect a third party to take the fall for you.

    Vendetta9076, (edited )
    @Vendetta9076@sh.itjust.works avatar

    If you’re hiding from the LEOs in any real way you sure as fuck aren’t using email.

    independantiste, in ProtonMail Complied with 5,957 Data Requests in 2022 - Still Secure and Private?
    @independantiste@sh.itjust.works avatar

    Idk for most people, but the reason I use proton mail is to avoid google parsing everything I receive to send me ads. I “have nothing to hide” on a legal pov, I’m not a criminal, the worst offence I do is like Jay walking or crossing at a red light on foot when there is no one at midnight. I don’t use proton services to protect myself from the law (or in other words to avoid the consequences of my acts), I just want to be a customer instead of a product.

    Fluid,
    @Fluid@aussie.zone avatar

    This exactly. This is the audience for proton mail, and their success while sticking to this model is hope for us all

    M500,

    YOU JAY WALK!?

    You are a disgrace!!! How do you sleep with yourself?

    DISGUSTING!

    /s

    But that’s a really great point. It’s easy to thinking of your threat model as all or nothing. And you are right. I’m not hiding from the law. I’m hiding from advertisers. If the government acquires my information then it was a mistake on their part as there is nothing there to find other than emails from my bank.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #