• 9 Posts
  • 45 Comments
Joined 2Y ago
cake
Cake day: Jun 18, 2023
help-circle
rss
@aldalire@lemmy.dbzer0.comtoPrivacy@lemmy.ml•installing linux on my surface pro 8
link
fedilink
15•
edit-2
2M

Use the surface-linux custom kernel https://github.com/linux-surface/linux-surface/wiki/Supported-Devices-and-Features#feature-matrix

It seems from the feature matrix that all features are supported except your builtin camera. I personally use this kernel (arch with hyprland) and it works perfectly. The nvidia dgpu is sometimes a pain tho

link
fedilink
Remember That DNA You Gave 23andMe?
external-link
23andMe is not doing well. Its stock is on the verge of being delisted. It shut down its in-house drug-development unit last month, only the latest in several rounds of layoffs. Last week, the entire board of directors quit, save for Anne Wojcicki, a co-founder and the company’s CEO. Amid this downward spiral, Wojcicki has said she’ll consider selling 23andMe—which means the DNA of 23andMe’s 15 million customers would be up for sale, too. 23andMe’s trove of genetic data might be its most valuable asset. For about two decades now, since human-genome analysis became quick and common, the A’s, C’s, G’s, and T’s of DNA have allowed long-lost relatives to connect, revealed family secrets, and helped police catch serial killers. Some people’s genomes contain clues to what’s making them sick, or even, occasionally, how their disease should be treated. For most of us, though, consumer tests don’t have much to offer beyond a snapshot of our ancestors’ roots and confirmation of the traits we already know about. (Yes, 23andMe, my eyes are blue.) 23andMe is floundering in part because it hasn’t managed to prove the value of collecting all that sensitive, personal information. And potential buyers may have very different ideas about how to use the company’s DNA data to raise the company’s bottom line. This should concern anyone who has used the service. DNA might contain health information, but unlike a doctor’s office, 23andMe is not bound by the health-privacy law HIPAA. And the company’s privacy policies make clear that in the event of a merger or an acquisition, customer information is a salable asset. 23andMe promises to ask its customers’ permission before using their data for research or targeted advertising, but that doesn’t mean the next boss will do the same. It says so right there in the fine print: The company reserves the right to update its policies at any time. A spokesperson acknowledged to me this week that the company can’t fully guarantee the sanctity of customer data, but said in a statement that “any scenario which impacts our customers’ data would need to be carefully considered. We take the privacy and trust of our customers very seriously, and would strive to maintain commitments outlined in our Privacy Statement.” Certain parties might take an obvious interest in the secrets of Americans’ genomes. Insurers, for example, would probably like to know about any genetic predispositions that might make you more expensive to them. In the United States, a 2008 law called the Genetic Information Nondiscrimination Act protects against discrimination by employers and health insurers on the basis of genetic data, but gaps in it exempt providers of life, disability, and long-term-care insurance from such restrictions. That means that if you have, say, a genetic marker that can be correlated with a heart condition, a life insurer could find that out and legally deny you a policy—even if you never actually develop that condition. Law-enforcement agencies rely on DNA data to solve many difficult cases, and although 23andMe says it requires a warrant to share data, some other companies have granted broad access to police. You don’t have to commit a crime to be affected: Because we share large chunks of our genome with relatives, your DNA could be used to implicate a close family member or even a third cousin whom you’ve never met. Information about your ethnicity can also be sensitive, and that’s encoded in your genome, too. That’s all part of why, in 2020, the U.S. military advised its personnel against using consumer tests. Spelling out all the potential consequences of an unknown party accessing your DNA is impossible, because scientists’ understanding of the genome is still evolving. Imagine drugmakers trolling your genome to find out what ailments you’re at risk for and then targeting you with ads for drugs to treat them. “There’s a lot of ways that this data might be misused or used in a way that the consumers couldn’t anticipate when they first bought 23andMe,” Suzanne Bernstein, counsel at the Electronic Privacy Information Center, told me. And unlike a password that can be changed after it leaks, once your DNA is out in the wild, it’s out there for good. Some states, such as California, give consumers additional genetic-privacy rights and might allow DNA data to be deleted ahead of a sale. The 23andMe spokesperson told me that “customers have the ability to download their data and delete their personal accounts.” Companies are also required to notify customers of any changes to terms of service and give them a chance to opt out, though typically such changes take effect automatically after a certain amount of time, whether or not you’ve read through the fine print. Consumers have assumed this risk without getting much in return. When the first draft of the human genome was unveiled, it was billed as a panacea, hiding within its code secrets that would help each and every one of us unlock a personalized health plan. But most diseases, it turns out, can’t be pinned on a single gene. And most people have a boring genome, free of red-flag mutations, which means DNA data just aren’t that useful to them—at least not in this form. And if a DNA test reveals elevated risk for a more common health condition, such as diabetes and heart disease, you probably already know the interventions: eating well, exercising often, getting a solid eight hours of sleep. (To an insurer, though, even a modicum of risk might make someone an unattractive candidate for coverage.) That’s likely a big part of why 23andMe’s sales have slipped. There are only so many people who want to know about their Swedish ancestry, and that, it turns out, is consumer DNA testing’s biggest sell. Wojcicki has pulled 23andMe back from the brink before, after the Food and Drug Administration ordered the company to stop selling its health tests in 2013 until they could be proved safe and effective. In recent months, Wojcicki has explored a variety of options to save the company, including splitting it to separate the cash-burning drug business from the consumer side. Wojcicki has still expressed interest in trying to take the company private herself, but the board rejected her initial offer. 23andMe has until November 4 to raise its shares to at least $1, or be delisted. As that date approaches, a sale looks more and more likely—whether to Wojcicki or someone else. The risk of DNA data being misused has existed since DNA tests first became available. When customers opt in to participate in drug-development research, third parties already get access to their de-identified DNA data, which can in some cases be linked back to people’s identities after all. Plus, 23andMe has failed to protect its customers’ information in the past—it just agreed to pay $30 million to settle a lawsuit resulting from an October 2023 data breach. But for nearly two decades, the company had an incentive to keep its customers’ data private: 23andMe is a consumer-facing business, and to sell kits, it also needed to win trust. Whoever buys the company’s data may not operate under the same constraints.
fedilink
295
Remember That DNA You Gave 23andMe?
fedilink
@aldalire@lemmy.dbzer0.comtoPrivacy@lemmy.ml•A web browser extension for accessing I2P network anonymously
link
fedilink
2•1Y

Just remember to forward the right ports if you can so you can contribute to the network!!

link
fedilink
My experience with Monero, the ultimate privacy coin
cross-posted from: https://lemmy.dbzer0.com/post/21203134 > I first got introduced to Monero by Mental Outlaw's videos by around late 2022. I actually first mined monero before having owned any (which is a weird flex but ok) and I must say the lack of overpowered ASICS encouraged me greatly to try to start mining. I would hate mining bitcoin on my old laptops because it's futile against machines literally built and engineered to optimize mining. I knew I'd have a fair shot at making some pennies mining monero. And my only real competition are botnets. In the end I got around 50 cents worth of monero through mining! > > Although, I would love to figure out a way to make mining more profitable. Has anyone figured out a way for beginners to optimize hash rate for XMR? I have also heard about merge-mining. > > As far as using and obtaining monero, I bought Monero through Kraken. Don't use the regular kraken site, because they'll charge you higher (i believe it's like 2%) fees. Go instead to, pro.kraken.com. The interface looks a lot more complicated. Figure it out and make a market order, you'll get significantly lower fees (at around 0.5%). Or maybe even better, make a limit order, set the price you want to buy monero at like 2-3 dollars cheaper, and take advantage of monero's volatility RNG :) Monero was bullish for the past couple days, though, so i was like fuck it i'll make a market order i don't care gimme my freedom cash. Also, it takes 1-2 days to withdraw your monero from kraken. Also, > > USE A NON-CUSTODIAL ACCOUNT AND WITHDRAW YOUR XMR WHEN IT IS AVAILABLE IMMEDIATELY. > > privacy wise, i think multiple small withdrawals gives you plausible deniability that you were just transacting with monero, and not holding it all, for tax reasons. Besides, you SHOULD only ever transact with monero from your non-custodial wallet (aka, from your wallet app) to ensure you are getting the privacy benefits of monero. Transacting with monero from Kraken is stupid, since they can just associate the transaction address you gave them (if your bakery advertises "pay at <address1>" then if kraken sees a <address1> transaction they know you're paying the crypto bakery). So, get your freedom cash earlier rather than later ^_^ > > (As an alternative to the adage buy low, sell high,) Buy monero when monero is low, transact with monero when monero is high. Seriously. I bought so much cool shit with this currency. Lemme list them to you. > > 1. Anonymous ukraine phone number through [https://stealths.net/ > ](https://stealths.net) which you access through a proton mail account which they provide provide for you (change the passwords on those things) > > 2. Amazon delivery from [https://monezon.com](https://monezon.com) > > 3. Domain name from [https://njal.la/ > ](https://njal.la/) > > 4. Monero hoodie from [based.win](based.win) [still haven't received it] > > I've also became an executor from Monezon. It's kinda fun to handle people's amazon orders and you get some non-kyc monero. > > Overall, 10/10 community. Love this vision of a more free internet, and, eventually, free world.
fedilink
-29
My experience with Monero, the ultimate privacy coin
fedilink
@aldalire@lemmy.dbzer0.comtoPrivacy@lemmy.ml•Swiss authorities intervene, Proton Mail not blocked in India
link
fedilink
100•1Y

Jesus fucking christ this website is trash. Here i copy pasted the entire article so you don’t have to accept their privacy policy

It took the intervention of Swiss authorities to prevent the blocking of end-to-end encrypted email platform Proton Mail in India after the government sought action against the platform, which was being abused by bad actors to send hoax bomb threats.

In February, a senior Tamil Nadu Cyber Crime Wing police officer requested the Ministry of Electronics and Information Technology to block Proton Mail. An order was also sent to the platform.

This was after several schools in Chennai received hoax bomb threats on February 8. A police investigation found that the mails were sent through Proton Mail.

Even though the police sought information about the users who sent such emails, the cops faced a roadblock as the platform is encrypted end-to-end, which means users’ emails, files, calendar entries, and passwords had strong privacy protections.

In a blog post in March, Proton Mail said, “In response to hoax bomb threats that were sent through Proton Mail, some members of the Indian government suggested taking the extreme measure of blocking Proton…”

Mastek bags supplier spot in Digital Services Framework for UK’s Defence Ministry Mastek bags supplier spot in Digital Services Framework for UK’s Defence Ministry Government issues advisory on CCTV cameras over security concerns Government issues advisory on CCTV cameras over security concerns MeitY issues advisory on CCTV security, asks ministries to avoid suppliers with past breaches MeitY issues advisory on CCTV security, asks ministries to avoid suppliers with past breaches “The issue has been raised to the attention of the Swiss federal authorities, who have been in contact with the relevant Indian authorities to prevent the blocking of Proton Mail in India. Thanks to this assistance, Proton Mail apps and other Proton products are available in India,” the post said.

Moneycontrol has reached out to Proton with further queries and the article will be updated when a respond comes in.

In the blog, the encrypted email service provider also explained why it did not comply with information requested by Indian law enforcement authorities.

Under Swiss law, Proton is not allowed to transmit any data foreign authorities and had to reject requests “that are directly addressed to us”.

“However, Proton is legally obligated to respond to orders from Swiss authorities, who do not tolerate illegal activities conducted through Switzerland and may assist foreign authorities in cases of illegal activity, provided they are valid under international assistance procedures and determined to be in compliance with Swiss law,” the blog said.

The company added, “Blocking access to Proton Mail simply prevents law-abiding citizens from communicating securely and does not prevent cybercriminals from sending threats with another email service, especially if the perpetrators are located outside of India.”

This is not the first time that the Switzerland-headquartered company has courted controversy, especially for being abused by threat actors.

In 2020, the Russian government blocked the encrypted email provider after emails claimed that bombs were planted in public places.

Russia’s Federal Service for Supervision of Communications, Information Technology and Mass Media (abbreviated Roskomnadzor) said the bogus emails were responsible for “creating a real threat of mass disturbance of public order and causing great concern among citizens and public outcry”.

link
fedilink
How to end-to-end encrypt your iCloud
Apparently Apple can end-to-end encrypt your iCloud, but it’s opt in because they still want to profit off your data >_< To enable this, go to Settings -> iCloud -> Advanced Data Protection You need to have all the devices under your apple account to be fully updated, and you’ll need to remember a 28-key passphrase for recovery I hate how big tech treats privacy as an afterthought. This should have been the default. But oh well. Spread the world people.
fedilink
92
How to end-to-end encrypt your iCloud
fedilink
@aldalire@lemmy.dbzer0.comtoPrivacy@lemmy.ml•Why don't people here love SimpleXChat more?
link
fedilink
-1•1Y

This comment right here is the sanest in this thread

link
fedilink
@aldalire@lemmy.dbzer0.comtoPrivacy@lemmy.ml•Why don't people here love SimpleXChat more?
link
fedilink
13•1Y

I did not know it was run by a VC funded company. Isn’t it open source and audited though? https://simplex.chat/blog/20221108-simplex-chat-v4.2-security-audit-new-website.html

Either way, if one needs to communicate without the use of identifiers like a phone number (afaik signal requires one) I trust Session. SimpleX features cool new tech but let’s wait until it matures

link
fedilink
@aldalire@lemmy.dbzer0.comtoPrivacy@lemmy.ml•Why don't people here love SimpleXChat more?
link
fedilink
3•1Y

Session messenger allows you to chat without linking a phone number to your account. It’s what drug dealers use lol.

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•The only two privacy firefox extensions you'll only ever need
link
fedilink
9•1Y

Huh. I stand corrected. You only ever do need uBlock. Thanks

link
fedilink
The only two privacy firefox extensions you’ll only ever need
I believe that the only two privacy extensions you really need to meet 90% of your privacy goals are uBlock origin + NoScript [uBlock origin](https://ublockorigin.com/) is effective because it stops the injection of ads which might contain and inject code. [NoScript](https://noscript.net/) forces you to look at which scripts you really need for the website to function. Say you visit a trusted site, like your lemmy instance, then you can enable running of javascript by default the next time you visit the site. You'll be surprised how functional some sites are even without javascript. I did not like the idea of browsers having Javascript: it's remote code execution and if there's anything malicious in there and your browser is not patched against it you're fucked. This way yeah it'll be annoying when you first visit a site but it remembers your settings for the next time you visit.
fedilink
113
The only two privacy firefox extensions you’ll only ever need
fedilink
When I was configuring my searxng I noticed a search engine that piqued my interest. Link: [yep.com](https://yep.com/about/) From their about page: >Here's how it works. >We offer an unbiased, private search experience that rewards and compensates the makers behind the content. To do this, we use a 90/10 revenue share business model where we pay 90% of advertising revenue directly to these makers. >Simply put, when you use Yep, you’re directly putting money in the pockets of your favorite content creators.
fedilink
7
fedilink
@aldalire@lemmy.dbzer0.comtoPrivacy@lemmy.ml•How to sign up services without phone number?
link
fedilink
79•1Y

I gotchu bruv

ILPT: list of many free temporary number sites Quality Receive an SMS: https://receive-a-sms.com

SMS Receive free: https://smsreceivefree.com Recieve a SMS

Online SMS: https://sms-online.co

Receive SMS online: https://smsreceiveonline.com

Get a free SMS number: https://getfreesmsnumber.com

Receive SMS: http://sms-receive.net

Receive SMS Online.NET: https://www.receivesmsonline.net

7 SIM.NET: http://7sim.net

HS3X: http://hs3x.com

Receive free SMS: http://receivefreesms.com

Receive free SMS.NET: http://receivefreesms.net

Receive SMS Online.IN: http://receivesmsonline.in

Receive SMS online: https://receive-sms-online.com

See SMS: https://www.smsver.com

Groovl: https://www.groovl.com

SMS.SELLAITE: http://sms.sellaite.com

Send SMS now: http://www.sendsmsnow.com

Receive SMS online.EU: http://receivesmsonline.eu

Proovl: https://www.proovl.com/numbers

Anon SMS: https://anon-sms.com

Hide my numbers: http://hidemynumbers.com

Pinger: https://www.pinger.com

Free online phone: https://www.freeonlinephone.org

5SIM: https://5sim.net

SkyCallbd free virtual number: https://www.skycallbd.com/

Capture SMS: https://catchsms.com

SMS Get: http://smsget.net

1S2U: https://1s2u.com

Receive SMS: http://getsms.org

Vritty: https://virtty.com

Text anywhere: http://www.textanywhere.net

Receive SMS online.ME: http://receivesmsonline.me

Temporary emails: https://www.temp-mails.com

Purchase virtual number: http://www.virtualnumberbuy.com

Free Receive SMS online: http://freereceivesmsonline.com

NDTAN SMS: https://sms.ndtan.net

SMS Listen: https://smslisten.com

Free virtual SMS number: https://freevirtualsmsnumber.com

SMS Tibo: https://smstibo.com

Receive SMS number: https://receivesmsnumber.com

Free SMS code: https://freesmscode.com

Online SMS numbers: https://smsnumbersonline.com

SMS reception: https://smsreceiving.com

Trash Mobile https://es.mytrashmobile.com/numeros

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•The enshittification of Github continues
link
fedilink
5•1Y

Only noticed it today. I guess years of adblocking made me ultra sensitive to ads that this one stuck out like a sore thumb.

It is quite antithetical to the principles of FOSS to rely on a platform that pushes ads. It’s unfortunate that we settled on github but it is what it is.

link
fedilink
The enshittification of Github continues
image
Alt text: an ad for Github Copilot when viewing files in a github repo
fedilink
306
The enshittification of Github continues
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•roku remote app showing ads now
link
fedilink
4•1Y

Sun tzu once said a menu button that leads to an ad is considered an ad

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•roku remote app showing ads now
link
fedilink
23•1Y

Yes! I noticed the video player UI changed, it looks pretty clean. Are you a Jellyfin developer? If so, I love you.

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•roku remote app showing ads now
link
fedilink
1•1Y

Oof. My pihole adblocker caught that. I’ll delete these comments

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•roku remote app showing ads now
link
fedilink
1•1Y

How did you set your roku to use your pihole? I have no router access so i have to change each client’s dns. Roku doesnt allow changing their dns

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•roku remote app showing ads now
link
fedilink
9•1Y

I was sent down a rabbit hole of iOS roku apps. Fuck the iOS ecosystem dude, I am not paying $20 a year subscription for a remote app.

I did find a decent one for free, no ads (i have a pihole so it may show ads for people, idk yet) and only asks for donations from time to time. I had to scroll a bit far to find it

https://apps.apple.com/us/app/rocky-roku-remote-control/id1598795880

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•roku remote app showing ads now
link
fedilink
3•1Y

This

Tech companies nowadays are so brazen on stepping and crossing boundaries.

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•roku remote app showing ads now
link
fedilink
4•1Y

Although, theoretically if a FOSS Android app can act as a remote, could there also be a way to self-host a Roku remote? 🤔

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•roku remote app showing ads now
link
fedilink
4•1Y

Oh that’s cool! Unfortunately I am on iOS.

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•roku remote app showing ads now
link
fedilink
1•1Y

this ad in particular goes through it. I have one and set up my phone to use it.

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•roku remote app showing ads now
link
fedilink
31•1Y

Yes I am aware. I mainly use the Jellyfin app on it. I have a PiHole but I unfortunately can’t change the DHCP/DNS settings on my router (i have no admin access to it) so i have to rely change the DNS for every client on my home. But unfortunately Roku does not allow for changing their DNS server.

I have heard about putting my roku on another submet but i don’t know how to do this. Any thoughts 🤔

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•roku remote app showing ads now
link
fedilink
17•
edit-2
1Y

“Featured” tab on the bottom right

link
fedilink
roku remote app showing ads now
image
My dog tore up the remote so we were forced to use the roku app to control the tv. They’re showing ads on the remote app. It feels like we can never escape this dystopian hellacape.
fedilink
418
roku remote app showing ads now
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•Windows pc calling home (even while asleep)
link
fedilink
12•2Y

The thing is, the device was in suspend for a couple days now.

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•Windows pc calling home (even while asleep)
link
fedilink
25•2Y

Oh, my daily driver is a linux, i just have a spare surface book 3 i use occasionally for gaming (the thing is surprisingly powerful)

Idk how well linux would support detaching and touchscreen with pen. But I’ll definitely switch the os to linux sometime in the future when i get a new gaming rig.

link
fedilink
Windows pc calling home (even while asleep)
image
I have a network-wide pi hole and I noticed that it requested activity.windows.com, a url blocked by my pi hole, even while my pc is suspended. I pinged 10.0.0.217 and it is currently unreachable. So, somehow, windows pc’s turn on networking, phones home, and turns off even while suspended. Creepy behavior
fedilink
389
Windows pc calling home (even while asleep)
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•first they push for us to get icloud storage and now this.
link
fedilink
5•2Y

do the prep work now, work some overtime & get a new job so you can afford this phone

🤢

link
fedilink
@aldalire@lemmy.dbzer0.com
creator
toPrivacy@lemmy.ml•first they push for us to get icloud storage and now this.
link
fedilink
3•2Y

Yeah mb. I realized my error after their posts and edited my post to be more informative, but that made the original commenters who pointed out my mistake look bad. I’ll make another edit.

link
fedilink
first they push for us to get icloud storage and now this.
image
uninstall Apple Store, which comes pre-installed in iOS, to stop getting these notifications *edited post. The original description &amp; title was me complaining about this notification thinking it was default behavior of iOS, not knowing it came from the Apple Store*
fedilink
58
first they push for us to get icloud storage and now this.
fedilink