privacyguides

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

taaz, in Hetzner server hosting potentially running MITM proxies on hosted servers

The linked research: notes.valdikss.org.ru/jabber.ru-mitm/

I have two dedis from Hetzner and I was somewhat satisfied with it. Oh my, it migh be that time of the year where I go shopping for a NUC.

KingThrillgore,
@KingThrillgore@lemmy.ml avatar

Had a friend that got a cheapo Gigabyte NUC and he needed to use a dummy HDMI for it to even boot. As it, it wouldn’t boot w/o a monitor. Take heed.

KairuByte,
@KairuByte@lemmy.dbzer0.com avatar

That’s a pretty meh problem though. It’s the whole reason dummy HDMI’s exist.

justJanne,

There’s no provider that’s going to be more safe than Hetzner, tbh.

If a provider doesn’t comply, you’ll just get special services raiding their DCs instead.

And if you switch to a VPS provider, you’re even more exposed.

Set up CAA with proper restrictions, enforce CT for your clients and use proper full disk encryption to prevent them from placing implants on your server itself.

ezchili,

Just buy a raspi to check the certificates periodically :>

TonyToniToneOfficial,
@TonyToniToneOfficial@lemmy.ml avatar

Alwyzon is nice. Good ping times.

empireOfLove,

Ahhh. Going after Russian services of course.

Knowing the German government I’m not terribly surprised Hetzner was forced to comply quietly. But still, if they’ll do it for one user, they’ll do it for everyone. Really sucks.

GlitzyArmrest, in What's the best privacy friendly way to use discord on android ?
@GlitzyArmrest@lemmy.world avatar

I use Aliucord which by default removes many of the associated Discord trackers.

It should be noted that all 3rd party apps are against Discord TOS. No one has ever been banned for these clients as far as I know, but it is possible that they could start banning in the future.

EliasTheOG,

When they ban thats when I will use there app as a web app inside Hermit…but for now I prefer Vendetta over aliucord which is far more updated and has themes and plugins support

peopleproblems, in Your Cheap Android TV Streaming Box May Have a Dangerous Backdoor

Wanna know a neat trick?

Don’t give your TV your wifi password, or an ethernet cable. Turn any cheap “smart tv” into a “cheap tv”. Use your other devices that you already ignored privacy warnings of trust and nobody loses anything.

Orygin,

Okay chief. What do I use to play YouTube videos, local tv news, Netflix or pirated movies on my tv then ? I have to have a laptop or a computer on the side to play the content? That computer has to be able to playback 4k HDR. It also has to use edge to get 1080p out of Netflix (scratch that I have a 4k subscription). It has to consume less or the same then my TV.

I’m curious about what real alternative you got, that is as useful and user friendly as using the android tv directly ?

ForgotAboutDre,

Don’t buy cheap streaming boxes. Buy one from a reputable retailer made by a trusted manufacturer.

IFleeFromTheShape,

I’d say this is the answer, I got a Nokia 8000 a few weeks ago and so far it hasn’t appeared on any of these device watchlists.

Natanael,

A roku, Chromecast, etc, which will get updates for longer than the TV itself, and which is much less likely to be backdoored.

Or begging companies to support Miracast properly

expr,

Chromecast. That’s what I do. TV with no wifi, Chromecast for content.

peopleproblems,

Buy a chrome cast, fire stick, or roku and stick it in your android TV that isn’t connected to the wifi.

The chrome cast, fire stick, and roku have their own privacy issues associated, but if they were running malware (outside of what we know of those services collecting and selling user data to advertisers) they would have bigger problems.

dukethorion, (edited ) in Brave is sunsetting strict fingerprint protection mode
@dukethorion@lemmy.world avatar

“Fewer than 0.5% of Brave users are using Strict fingerprinting protection mode, based on our telemetry data.”

Probably because most users who enable strict mode, also disable the telemetry?

So now we see the effect of disabling telemetry, a negative change in the product.

Guess its back to Chromite only then.

ThatRocco, in Automakers’ data privacy practices “are unacceptable,” says US senator
@ThatRocco@lemmy.world avatar

When I went to trade school in 2010 for automotive repair our instructors told us this was going to happen. At the time, I thought they were just grumpy old men who didn’t like that cars were becoming more and more electronic. How wrong I was

Skanky, in Secretive White House Surveillance Program Gives Cops Access to Trillions of US Phone Records

Did everyone forget Snowden already?

LollerCorleone,
@LollerCorleone@kbin.social avatar

Many people forgot, many others now think that he is the villain of the story just because he did what he had to do to save his life, a whole lot don't care because 'they have nothing to hide'. For what it's worth, people who actually care about their privacy is a very small minority in pretty much all countries.

AngrilyEatingMuffins,

Unironically yes most people have

SulaymanF,

But Obama said he put safeguards in place!

InEnduringGrowStrong, in Where to store OTP tokens
@InEnduringGrowStrong@sh.itjust.works avatar

I memorize the seed and calculate the next token in my head.

Passwords in KeePass, totp in Aegis.
My phone does have both, but they each have their own encryption.

smeg, in Privacy friendly clock app ?

App for what? What are you using that doesn’t already have a clock?

Gruntyfish, in It seems Gen Z is just fine with parents knowing where they are all the time

The rest of Gen Z can speak for themselves.

CmdrShepard,

I think if anyone is qualified to speak for Gen Z, it’s most certainly Business Insider.

AzzyDev, in Chat Control 2.0: EU governments set to approve the end of private messaging and secure encryption

What’s stopping someone from just sending public keys or something through Signal and encrypting their messages that way? There’s no way to enforce this with such simple loopholes present. We shouldn’t be focusing on breaking privacy and instead invest in helping existing victims in ways that actually matter.

princessnorah,
@princessnorah@lemmy.blahaj.zone avatar

Whilst I agree with your sentiment, this isn’t how end-to-end encrypted chats work. Otherwise, it would be impossible to know the messages you’re receiving are coming from the person you think they are.

AzzyDev,

I suppose you’re right, but forging that kind of thing would be difficult, also considering the PKI already in place. If someone has their own email server and they sign/encrypt their email, and host their public key on a key server somewhere, it’s highly unlikely that all three would be compromised. and even if that fails, you could just meet up with them and exchange flash drives with keys.

JiveTurkey, in Riot Games Now Requires Kernel-Level Anti-Cheat Software for League of Legends, Following Valorant's Implementation

This is dumb. Anyone installing this is giving absolute full control of their PC to riot and their Chinese owners. This level of control will do nothing to stop the most popular types of cheating from capture cards and AI. It’s a huge sacrifice with zero promise.

Midnight, in The Battle for Biometric Privacy

What’s far more likely than 3d printed prosthetics becoming fashonable is people just rolling over and accepting the distopian surveilance state.

I can’t even get most of my family to use Signal to prevent Facebook from reading their private messages, what could happen to convince them to go full cyberpunk?

sv1sjp,
@sv1sjp@lemmy.world avatar

I was going to write exactly this… Most of people even from GenZ they just don’t care… Cofee, traveling, stories of traveling to make jealous other people and that’s life for 21st century…

ISOmorph,

It’s an age thing I think. My parents and their generation don’t give a shit about that stuff because they’ll be dead in 10-20 years anyway (their words). My gen and the ones after seem to be have more sensibility to that topic because they’ll have to live in that dystopian hellscape.

Midnight,

If everyone you know uses secure messaging apps, youre in a bubble; their adoption rate is very small.

Of the people I know, even those who use Signal/Matrix still use Chrome and GMail/Docs/Drive. They have a long way to go before they don prosthetic noses.

Gooey0210, in DivestOS is fundraising, no longer sustainable ($12,000 goal)

I don’t use any of their roms or apps but will donate $1-5

Have heard good things about the project, and there’s actually not that many similar projects out there

Long live foss, we are a legion

Gooey0210, (edited )

Now you! 1000027180

CJOtheReal, in How Meta’s New Face Camera Heralds a New Age of Surveillance

If you film me with that shit i should be legally allowed to shove it in your ass.

pearsaltchocolatebar,

It’s no different than using a cellphone to record in public.

CJOtheReal,

And thats illigal as well… You can’t walk around filming people in my country…

Dark_Arc, (edited ) in The state of open source SMS messagers
@Dark_Arc@social.packetloss.gg avatar

You definitely shouldn’t invest time in SMS. Without RCS (or some custom messaging protocol support), “texting apps” are pretty much a dead market.

RCS is both more secure and more user friendly than SMS can be by design. Once the iPhone gets RCS support in the coming months/years, this will be especially true.

Anticorp,

If you message cross-platform from Android to iOS, and you can’t get everyone to agree upon a 3rd party app, then you’re kind of stuck with sms. This isn’t a problem that is going away in the near future. Apple relies on their locked messaging platform to influence their users into thinking iOS is the best. The users then pressure all of their friends to get iPhones too. It’s an effective strategy for them. Very few iPhone users seem to understand the games being played.

Dark_Arc, (edited )
@Dark_Arc@social.packetloss.gg avatar

digitaltrends.com/…/apple-iphone-getting-rcs-2024…

Maybe try searching what I said first…?

fadedmaster,
@fadedmaster@sh.itjust.works avatar

In fairness, even the author of the article you linked didn’t think that’d ever happen. I’m somewhat up to date on most general tech things and missed this announcement too (though to be honest I don’t follow Apple announcements anyway).

priapus,

There is no open source RCS messaging app afaik

LWD, (edited )

deleted_by_author

  • Loading...
  • Dark_Arc,
    @Dark_Arc@social.packetloss.gg avatar

    You’re right, I’ve updated my reply… Hopefully someday that will be a generic RCS feature not exclusive to Google and/or Apple and Google will work to make the E2EE work between their two systems.

    LWD, (edited )

    deleted_by_author

  • Loading...
  • Natanael,

    If the MLS group messaging encryption protocol can get finalized any day soon then they might use that

    nymwit,

    Samsung messages has Google’s RCS implementation and E2EE, too.

    smeg,

    Plenty of services still unfortunately rely on SMS for 2FA, so we’ll still need a client to receive them. Doesn’t really need to be able to send them though, I don’t think any human has sent an SMS message deliberately for about 12 years!

    petrescatraian,

    @smeg Me and my friends use it as a fallback for mildly urgent stuff. If anything is more urgent, then we call each other.

    @Dark_Arc

    scoobford,

    I don’t think any human has sent an SMS message deliberately for about 12 years!

    sweats nervously in American

    spacecowboy,

    I don’t know anyone in Canada that isn’t a new Canadian that uses anything other than the default sms app on their phone. (FBM and Insta and what not don’t count in my example).

    SMS is alive and well in Canada.

    smeg,

    My condolences. But seriously though, what if you want to have a group chat, or send a file?

    spacecowboy,

    Plenty of group chats that mix iMessage and sms, just through iMessage, or just sms group chats.

    Most new Canadians I interact with have WhatsApp, however, as I understand that’s quite popular abroad.

    smeg,

    SMS doesn’t have group chats does it? Unless your client is just sending the same message to everyone and grouping together the responses?

    scoobford,

    I don’t know about the underlying technology, but every client I’ve used for the past couple decades supported groups.

    However, they absolutely sucked. There was no way to leave. Unless someone made a new group without you and everyone used that, you’d keep getting messages.

    apis,

    SMS is my primary mode of contact with the rest if the world. I use Signal as well, but most people I know only use SMS.

    smeg,

    So how do you have group chats or send files with your non-Signal contacts?

    apis,

    It has never occurred to me to do either of those things, and apparently hasn’t to anyone I’m in contact with either.

    Though I don’t use group chats or send files in Signal either, so there’s that.

    Jomn, (edited )
    @Jomn@jlai.lu avatar

    You don’t x)

    More seriously, in these cases, I often rely on emails instead. But I don’t really use group chats a lot (even with my contacts that are on Signal), nor send many files, so it’s not features I really miss. And SMS works with everyone, so it’s always my default if the contact isn’t on Signal.

    smeg,

    Blimey, you and I have wildly different use cases, I don’t think I’ve sent an email to someone who wasn’t a business for decades!

    nymwit,

    Group chats work over SMS. I use cloud links for large files or just SMS/MMS for pictures and you just live with the low quality if texting with an iPhone user.

    smeg,

    SMS doesn’t have group chats does it? Unless your client is just sending the same message to everyone and grouping together the responses?

    nymwit,

    I mean, maybe? I’ve used group texts with every sms client on every android smartphone I’ve ever used. Don’t know how it works on the backend.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacyguides@lemmy.one
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #