Computers and the internet gave you freedom. Trusted Computing would take your freedom.
Learn why: https://vimeo.com/5168045

  • 0 Posts
  • 569 Comments
Joined 2Y ago
cake
Cake day: Jun 07, 2023

help-circle
rss

plaintext is the unencrypted form of data. encryption produces ciphertext. encrypting the same data with the same key twice results in the same ciphertext, unless additional steps were taken to insert additional data that does not match (like a nonce) to the plaintext


the way it works is that the veracrypt container basically contains 2 encrypted partitions. if it can’t decrypt the first one with the password, it will try the second one, but always pretend to try both so that the time it takes to unlock it does not give it away. by writing to either, you risk overwriting data in the other one (except that you can input both the hidden and main partition passwords and it will make sure to keep the hidden partition unaffected), but otherwise both partitions are fully functional


the way it works is that the veracrypt container basically contains 2 encrypted partitions. if it can’t decrypt the first one with the password, it will try the second one, but always pretend to try both so that the time it takes to unlock it does not give it away. by writing to either, you risk overwriting data in the other one (except that you can input both the hidden and main partition passwords and it will make sure to keep the hidden partition unaffected), but otherwise both partitions are fully functional


or just the individual characteristics and flaws of the lens/sensor/postprocessing software, some of which can be unique per device, and potentially comparable to other photos made with it.



They aren’t encrypted, hence why I never said they were.

you did, just with different words. without encryption and with centralized servers how would this claim of yours be the case?

If it’s a private group they don’t know what’s happening.

you know, trust and safety teams aren’t looking at the content with the apps when they look for harmful content. they have access to better moderation tools with access to the database, where the messages are readable to them because of the lack of end to end encryption.


the thread is visible here, just a single comment was deleted


what you speak of is certified android. but a vendor can sell android phones (not certified) without google services, and that is android.



“As the largest digital rights network in Europe, our position is firm: the use of spyware is inherently incompatible with fundamental rights, and therefore should be banned, as well as the market of private companies that are profiting from human rights violations.”

I hope these positions will also apply against chat control and any similar proposals


“privacy enthusiasts” not everybody can do that. also remember that privacy is a spectrum.


well, cannot say that masses are running from fucking 11 to linux :/


without a proxy google can still connect your watching habits to you by IP, and see how often you pause or rewind, but at least they can’t feed you with garbage you don’t need and can’t fingerprint your client and how you move your mouse.


and when I ask my favorite creators, what do I bring up as the upside? that it doesn’t have ads?

that’s not an upside for a lot of them.


I was thinking about it but google does not agree, they continue doing it, so we must do what we can to protect our community privacy


I’m pretty sure the law already said that the reject button cannot be more convoluted to access than the accept button, corporate websites just couldn’t care less


yeah. I wouldn’t expect that opt out to be honored. maybe by your provider, but not by zoom.


that’s plausible. in my opinion a therapist should take the effort to take their own interpretation of what has been said, instead of relying on a machine that digests the system in a uniform way. words of a patient can mean a lot of things, even depending on things like their body language. but I have to admit I’m even more concerned about the privacy consequences which you pointed out. that’s like, it simply can’t go unabused in my opinion. too tempting. I wouldn’t even want to run a business that just stores it without abuse, it’s too risky too.


are you kidding? only available for google phones. are we supposed to give money to google for this situation?


app manager can already work as an app installer, but it needs wireless debugging enabled which can be a security risk. and you have to install app manager too somehow.


in your opinion what advantage would AI give to experienced therapists?


one can only hope it has any meaning. what platform do they use for online applications appointments? zoom? ms teams? google meet?


You need to verify age for all these services already, if you offer those.

half of the given examples the cashier can just look at you if you are noticeably older than the age limit, but even when they want your ID they will just look at it with their eyes, not scanning it with a computer that cannot be verified right then and there what its doing


monero does not, but it’s users do manually. at least not too long ago it was recommended in the community


but we do use self custody wallets, which is actually a good thing. and we do churn, because the anonymity set of the sender (right?) is pretty limited as of now. and churning is almost like mixing between wallets.



not everybody can install custom roms, either for compatibility, app selfblocking, or tech literacy reasons, or that they can’t afford to tuse a possibly unstable system (stability often varies by device and update)


serverside checks neither on federated services, or anywhere where the user chooses their server


for a privacy oriented phone you don’t need a very specific security chip that only a single pije of phones have. that’s maximalism.



and don’t forget that using encrypted messaging services is likely to be illegal soon in the EU


not everyone has nudes on their phones, not everyone will get to know that they are leaked, and afaik google hasn’t even leaked user images ever.

they. won’t. notice. it. they wouldn’t notice even if they were subjected to personalized pricing.


maybe flagship phones are different, but I don’t think I ever had such a device in my hands. I regularly help people with affordable phones, and as far as I can tell each had them preinstalled


you still have to trust them that they don’t save the plaintext email somewhere else before they run tbeir encryption.

and that’s what I do. I trust that they are doing it. what better can I do? the other option is to use a provider that 100% is not doing that, which does not seem to be better. or hosting it for myself, which maybe a small minority of people are capable to do it


Where does this come from? An ultra conservative tabloid?

umm, no, I haven’t read it anywhere. It’s just how it is. why do you think this is not the case?

are you immediately imagining me as a russian tankie?

Basically what the ECR and the Patriots say, which is amusing because they are the authoritarian ones, including some big fan of Putin, MAGA, and Hitler. When you think about it, it’s not surprising that an “healthy dose of sovereignty” goes side by side with far-right ideas.

well their dose is not healthy

what is becoming a political block that could eventually compete with the USA, China, and that could stop the imperialism of Russia.

as I see this would either need voluntary high cooperation of most countries, which would be a good thing (but not in the sense of imposing my country’s laws on your country because your country hosts servers of interest), but something very hard to achieve because that would need to be maintained for multiple political parties when they are elected.
or a united states of europe that would basically replace each country’s political system with a top-down system as the other user said, where there are no local elections for the ruling party anymore, or much less meaningful, but only an EU-wide election. which I’m not sure if it’s bad, it’s certainly a lot different. but it’s not something I like that after that, moving to another EU country is not an option if what you want is to leave a bad legal regime.

you know, maybe I have these main problems with the eu cloud act:

  • 10 days is way too little time for appeal, especially when there’s a high volume of requests (a single country could overload their capacity)
  • you won’t get to know if a country has held the gun to your email or other provider to hand over your data. yes this is the case already, but this change makes it even worse.
  • if a country bans encryption, does that mean my online service providers have to ban me from the encrypted functions?


What you propose is an alliance where countries maintain their differences, essentially the dissolution of the EU and the return to the Europe of the early 1900.

to the 1900? what? do you think that currently the EU is one big country with no major differences?

the EU consists of several different communities, with different cultures and different thinking. I think each country should be able to keep its healthy dose of sovereignty. I’m not saying what we have today is ideal, but turning everything to be more authoritarian is not going to make anything better.


nobody needs to install it nowadays, because it comes preinstalled on all phones. and lots of people just mindlessly allow every kind of permission


and what can they apply that limit to, if not to all tor visitors? It’s not like they can distinguish them.


to me it’s not that they market their security, I think it’s still meaningful. if they actually dont keep unencrypted messages, that rids them of the need to hand over past data when police comes knocking. but the way they do discounts, the way they publish prices on the pricing page, and things like that that make me question whether do I really want to recommend this to others.