privacyguides

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

Cyberjin, (edited ) in ‘Constantly monitored’: the pushback against AI surveillance at work

Could be worse, like in China some has surveillance in the bathrooms, so the workers won’t slack off

fadhl3y, in UK proposes selfie-based, AI age verification system for porn sites

Classic - clearly some British politicians have shares in a facial AI company.

joyful_hyaena, in Does the "Redirector" add-on affect your browser fingerprint in any way?

I would also like to know. I’ve been using Mullvad browser pretty much since it came out and I’ve always wanted to add the Libreddirect extension but never dared because of fingerprinting. I remember reading a while ago that on chromium browsers, some scripts can detect the mere presence of extensions. I have no idea if that could happen in firefow-based browsers as well.

RedNight, in DivestOS is fundraising, no longer sustainable ($12,000 goal)

I’m not a heavy user of the Divested ecosystem or use the ROMs, but I’ll donate to keep the options healthy and encourage good work! I wish there were a couple more cryptocurrency options like ethereum and bitcoin cash.

neurospice, in DivestOS is fundraising, no longer sustainable ($12,000 goal)

This dev is very important to the FOSS android ecosystem. I’ve divested an old phone and I love how opinionated the project is in regards to security. They are very active and take the project very seriously - when I submitted a bug report on github I got a response within three minutes!

Please donate!

Imprint9816, (edited ) in DivestOS is fundraising, no longer sustainable ($12,000 goal)

This was a big concern in the Kuketz review. The whole project is basically one guy. Now this guy needs 12k in the next 7 weeks to keep going.

Divest is an amazing project and dealing with these costs is a major issue for any small business. Hoping for the best!

Donated. If you don’t reach the goal, hopefully it helps out in someway.

blunderworld, in Opting into 'link history' on Facebook and Instagram means agreeing to (more) ad targeting

I have no sympathy for anyone naïve enough to agree to this.

xyguy, in Opting into 'link history' on Facebook and Instagram means agreeing to (more) ad targeting

Opting into ‘link history’ on Facebook and Instagram means agreeing to (more) ad targeting

hswolf, in BVG out here recommending the best 2FA Apps!
@hswolf@lemmy.world avatar

If you get Bitwarden pro (really cheap), you can save an OTP link together with the site credentials, it’s really good for keeping everything in one place

SaltyIceteaMaker,
@SaltyIceteaMaker@iusearchlinux.fyi avatar

Proton pass can also do this

PracticalParrot,

I do this. I want to point out it is absolutely TERRIBLE for security. It’s turning 2 factor back into 1 factor authentication.

goodhunter,

Consider your threat model. You could use a yubikey for Bitwarden log in.

kniescherz,

I would argue its more like a 1.5 factor. Not secure when your bitwarden gets compromised. But more security for stolen, leaked, phised passwords.

I currently have 60 OTPs in Bitwarden, I probably would not have activated 2FA on so many sites without BW.

IdleSheep, (edited )
@IdleSheep@lemmy.blahaj.zone avatar

This isn’t really a good idea because then you’re putting all your eggs in one basket. The whole point of 2FA is that the second factor is in a separate location so if your first factor (password) gets compromised the second one (OTP code) still protects your account. If both factors are in one place you’re back to a single point of failure instead of 2, losing a key benefit of 2FA.

If you’re gonna do this, at the very least have 2FA with a security key on your bitwarden vault.

kniescherz,

You lose security, sure. But you are gaining so much more ease of use. Bitwarden autofills your credentials and puts your token into your clipboard. Also it syncs your tokens to all devices. Effectifly this makes a site as easy to login as a site without 2fa.

The alternative is on desktop always get your smartphone, open some app type a token or on the phone to switch to multiple apps to get your credentials. Not fun imho.

I currently activated 2fa on over 60 sites, I doubt I would use it as much without BW.

For me, the key benefit of 2Fa is getting more security against leaked, stolen, phished passwords, and that still holds up.

IdleSheep, (edited )
@IdleSheep@lemmy.blahaj.zone avatar

The alternative is on desktop always get your smartphone, open some app type a token or on the phone to switch to multiple apps to get your credentials. Not fun imho.

There are desktop apps for OTP, you don’t need a phone. And since you only need to setup an OTP secret once, doing it for your phone and pc isn’t that big of a deal.

I have my OTP secrets in 3 places, 2 yubikeys and my phone’s authenticator app, with the former meant for my PC.

For me, the key benefit of 2Fa is getting more security against leaked, stolen, phished passwords, and that still holds up.

If your vault doesn’t have 2FA too this doesn’t hold up though. Means you’re trusting a single service that can get hacked with all your secrets. Sure, your other accounts are more protected against leaks and stuff, but if your password vault isn’t, you didn’t really change much, just pointed the hackers to one single place.

Yes I know hacking a password vault isn’t some walk in the park and rarely happens, but the point is any leaks from it would be 10 times more catastrophic for you if all your OTP secrets are also stored in it. I’ll spare myself from that nightmare with the small inconvenience that is a separate, offline OTP app.

kniescherz,

Good points!

I got the vault protected via yubikey of course ;)

derpgon,

If you get Vaultwarden, absolutely free, you don’t have to pay and have full control over your data. It’s a win-win!

Asudox, in The state of open source SMS messagers
@Asudox@lemmy.world avatar

I use QUIK. It’s pretty minimalist and quite nice to use.

Lemongrab,
@Lemongrab@lemmy.one avatar

QUIK is a fork of QKSMS but updated. Partison SMS is another fork

Asudox,
@Asudox@lemmy.world avatar

Yeah

rustyriffs,

Where can these be found?

Asudox,
@Asudox@lemmy.world avatar

Both can be found in GitHub. I use Obtainium to get QUIK releases.

Caboose12000,

obtainuim looks really useful for keeping these updated, but is there a reason they aren’t just on f-droid? until now I thought that was considered the norm or standard for open source android apps

Natanael,

F-Droid either requires app developers to set up their own repository (and point users to them) or to follow the F-Droid repo rules (the F-Droid devs compile and sign your app, not you)

timbuck2themoon, (edited )
rustyriffs,

Thank you

Transcendant, in The state of open source SMS messagers

I’m happy with my version of simple messenger, I’ve not updated it for a while… Am I good to keep using that? Can you explain more what you mean by selling out?

miss_brainfart,
@miss_brainfart@lemmy.ml avatar

The lead dev sold simplemobiletools to Zippo Apps (or whatever they’re called), a company known for buying apps and stuffing them full of ads, trackers and bullying people into buying subscriptions.

That news came a bit out of the blue, and while I understand why he sold it, the fact that he sold it to such a fuckface company that goes against everything his apps stood for is… yeah

Transcendant,

That’s very disappointing to hear. I’ve upgraded to the latest Fdroid version, and I guess that is where the updates will end!

digger,
@digger@lemmy.ca avatar

One of the developers is forking the whole project.

Transcendant,

What an absolute legend!

digger,
@digger@lemmy.ca avatar

If you’re looking for it - https://github.com/FossifyOrg

LemmyIsFantastic, in How Meta’s New Face Camera Heralds a New Age of Surveillance

More alarmist bill crap. Just going to make sure the public never wants to hear another privacy article again.

Metas glasses aren’t even particularly novel. They certainly ain’t the end of privacy.

wintermute, in The state of open source SMS messagers

I’m using this ohne after Signal dropped SMS support

jws_shadotak, (edited )

That’s simple mobile tools, which op was referring to as the sellouts.

GnomeComedy, (edited )

That’s the app OP is talking about ‘selling out’ to advertisers.

miss_brainfart, (edited ) in The state of open source SMS messagers
@miss_brainfart@lemmy.ml avatar

The simplemobiletools apps are being forked by one of their bigger co-developers, so I’ll just use that as soon as it’s available.

Until then, as long as you got the build from F-Droid, there shouldn’t be anything to worry about.

techognito,
@techognito@lemmy.world avatar

github.com/FossifyOrg

link to the new fork

stallmer, in How Meta’s New Face Camera Heralds a New Age of Surveillance

Just make your own that have an insane number of IR LEDs on them.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacyguides@lemmy.one
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #