• 8 Posts
  • 60 Comments
Joined 4Y ago
cake
Cake day: Jan 03, 2022

help-circle
rss

The question is whether they were using infrared to see through normal sunglasses. IR blocking sunglasses prevent “night vision” from seeing through the lenses. Under infared, you can see through normal dark sunglasses like they aren’t even there.


Got any further info about these more advanced methods?

I haven’t seen anything beyond the feature distance models. I have seen the models that essentially recreate you entire anatomy in 3D, place it in a database, then use that profile to match to in the future–almost like a 3D match move artist would do for visual effects. Not sure if this is just a proof of concept though.

I wouldn’t be surprised if the millimeter wave scanners at airports have been collecting 3D models of us for this database over the last decades.


IR blocking sunglasses are the simplest and most practical solution.

Facial recognition systems compare the distance ratios between your eyes and nose primarily. Hiding your eyes is very effective towards fucking that up. A mask alone is typically not enough.


That immediately came to mind. But is there a way to have it reroute to a different platform if the video is on an alternative platform? I follow a few youtubers in grayjay that I only recently discovered mirror on peer tube. Grayjay didn’t give any hints.


I’m not sure whether you’re asking why to use a frontend vs YouTube rawdog or conflating Odysee/Peertube with a YouTube frontend. I thought they were frontends as well for a long time.

If you’re asking why to use a frontend proxy for YouTube, there could be a few reasons. The obvious being privacy concerns, but other people prefer the less cluttered interface, no ads, no YouTube premium or sign in with google popups, no manipulative algorithm.



To play devil’s advocate, I could argue the monetization of YouTube has lead to all of the quirks of the platform people like us hate.

  • Shilling scams and shitty products
  • Biased reviews
  • Corporate pressured censorship
  • Age restriction
  • Algorithm optimized content
  • The general corporatization of YT (see YouTube Rewind feature Will Smith and a bunch if other celebrities)

The list goes on.

Although I agree there should at least be some way for creators to recoup the expenses they put towards producing videos. An ad-free patreon style donation system seems the most practical and balanced from what Ive experienced.


Fair point. I’m sure many would disagree with me, but for web video anything more than HD is pointless except for very niche content. But even HD streaming at scale is taxing and expensive.

Airlines make the majority of their money from a small percentage of flyers paying business and 1st class. I think there’s a world where this principal can be applied to something like peertube hosting in some form.


Do you mind sharing your channel? EDIT: Nvm found it. Added the new hyprland video to my watch list.

And can I ask how you find other interesting channels?

I’m sure you weighed the pros and cons of Peertube vs Odysee. What made you choose peertube?


I agree with you for the majority of “content creators”. But I think there’s a sizable number of people who aren’t interested in making videos for a profit and I imagine there’s a fair overlap with people in this community and the fediverse at large.

If I were to create videos I would make them on either peertube or Odysee. I wasn’t really aware of either platform other than vague whispers of them until recently, and I find it difficult to gauge the community sentiment on which of these platforms would be suitable for finding interesting content as well as posting it, hence this post.


When is it time to switch away from youtube?
We all hate google and youtube, but overall as a community we're all simultaneously lukewarm and non-committal about pushing towards using an alternative. I admittedly cling to invidious frontends for dear life. It seems like whenever somebody asks for an alternative to youtube, they're offered Odysee and Peertube, but inevitably many others chime in about the shortcomings of both of those platforms. Can we as a community come to a consensus as to which of these platforms should be pushed forward? I don't even think it needs to be a binary choice. Obviously youtube cannot be immediately replaced for it's archival of educational and tutorial videos, but we can at least push newcomers towards using invidious frontends for those instances. Maybe Odysee is better for some type of content over Peertube. Let's discuss which platform works best for what and try to be more active about sharing and promoting them not just to viewers but potential creators as well. If you go to share a youtube link, try to see if that video exists on an alternate platform first and share that link instead. I think that's a good first step towards getting away from youtube in the privacy community. But youtube alternatives are still very much on the fringe and I'm hoping this post will at least inspire some discussion about changing that.
fedilink

I haven’t had that experience at all and I’ve been here for years. Maybe you’re lurking in the wrong subs.


I use Signal but I keep signal use to personal IRL contacts. I don’t use Matrix as much anymore but if you have a matrix room I’d join in. I’m on the more advanced side of the privacy lifestyle so my communications are highly compartmentalized. Simplex is a bit clunky still but for smaller communities it’s not terrible.


Do you have plans to make a Simplex group soon? You mentioned on the pod it’s where you two first met. Would love to chat and Simplex is the most private option imo.


I’d be curious to see this symbol replacing the hand in the previous thread’s eye and palm.


I finally got around to installing this app but it requires an account. Is this a recent requirement?


I can’t remember any time in the last 2 years before I deleted my reddit account where a post I made didn’t get auto-moderated.


My bad. Its been a while, but Thunderbird at one point. If I remember right there was an update relatively recently that made it much more difficult to import offline emails, so if you find a better alternative let me know.


I should re-iterate I download the emails to use in an offline client. Their service doesn’t support third party clients to receive and send email.

When I do taxes, I need to search thousands of emails for receipts and the tuta apps make this impossible. This is my workaround.


I’ve used Tuta for years, paid account with multiple custom domains.

I prefer them for their principles, but their clients are extremely frustrating. Emails load very slowly and their email search is basically unusable.

I’ve resorted to downloading old emails and using other clients to import and search through them. I really wish they would improve their email search.



I can honestly say Ive never used x or twitter. I absolutely hate the format and it seems like a waste of life to scroll through a feed reading quick snippets of text.

At least with a reddit or Lemmy style social media platform, I can click on the text snippet and be brought to a more in depth post about it. And it’s simple to navigate replies for useful information.

Twitter is like somebody yelling something from a megaphone, then a crowd of people screaming over them randomly.

Discord is the next platform that needs to die. Online forums were perfect for what they did, then discord came along and now it’s a nightmare to comb through any type of community or support system for useful information. Again, people screaming into the void…




I’ve been using it for many months and I like it a lot. Only one of my banking apps doesn’t work.

Currently my main issue is that webauthn stopped working after an update. And the community support hasn’t been helpful.

I wish they had better documentation in general.


Yeah pimeyes absolutely needs to be shut down and laws need to be in place to protect private citizens from having their information sharable and searchable without their explicit consent. “Publicly available information” is always the line people use to defend these services. I’m arguing that our modern capabilities needs to be adjusted for. Things shouldn’t be so publicly accessable in the first place and personal data aggregation should be a much more vetted and potentially licensed business. Can we talk about what other purpose these facial recognition databases serve other than to stalk, expose, or extort people? If they required proof of identity and only allowed searches of your own face then I could understand the value.



I think the only real path forward is for a developer to figure out a way to decentralize video hosting. The future of the free internet is decentralization. We’ve seen which way the wind blows when platforms are centralized.

Consumer storage is abundant and cheap as hell. There will need to be incentives for: 1. Creators 2. Node hosters 3. Moderators. Potentially AI could do the heavy lifting on number 3. Figuring out a way to avoid ad based revenue would be another hurdle. In an ideal world, creators would accept that only 10% of their viewers would contribute to them monetarily (through patreon or donations) and use the platform for its freedom from corpo bullshit.

But as much as the Foss and decentralized crowd has been growing, I think we’re still a long way out from average people becoming fed up enough to care. I still get eye rolls from everybody I know IRL when I try to get them to open an invidious link.


I’m in the same boat as you in that I need Instagram for work. My approach is to create a separate work profile in GrapheneOS. I handle all of my mobile work apps in that profile using a separate VPN from all other profiles. I don’t expect to be completely free from tracking in this profile, but for my threat model I don’t mind too much. Any web queries I make in this profile I keep strictly work related.

People arguing you just shouldn’t use Instagram need to remember Instagram is a tool just like Windows, Adobe, etc. Sometimes you need a specific tool to do your job and I believe as long as you containerize that aspect of your life then you’ll be fine.

Just don’t use your work Instagram for personal stuff, not even browsing memes.


I had a few episodes saved offline in my apple podcast app but it appears you are correct. Surely there’s an archive somewhere?


Legality of OSINT and Data Aggregators Hoarding Leaked Data?
I was listening to a Bazzell podcast where he mentions his company self hosting and maintaining a database of personal data and credentials for use in OSINT investigations. Some acquired through public sources but others acquired through leaks. Then of course there are data aggregate companies that do the same but are going on to sell this data for a profit. What is the legality of this? Obviously acquiring publicly available data is legal, but how are these companies able to hold on to leaked usernames, passwords, and other confidential personal information. Especially those that were initially acquired through illegal means?
fedilink

In most cases it’s just too annoying of a process to get on the list. But I understand why the invidious team prefers to vet instances rather then have something like a beacon system that auto populates all consenting instances.


I operate an invidious instance. Google has really cracked down the past two weeks on YouTube front ends. Its extremely frustrating.

Invidious devs are finalizing a workaround so hopefully things will be working again in the next week or two.


Damn. You’re correct. My brain saw instance and ignored the rest.


Looking in the NewPipe settings I found a place to enter instances and there is one already configured. I guess I was proxied the whole time without realizing. Thanks for the clarification btw.


Understanding YouTube Frontend Options
I'll start by stating my threat model is avoiding corporate tracking, profiling, and analytics. For anything beyond that scope I believe tor is ideal. Correct me if I'm wrong but my understanding is that Newpipe is a frontend to provide an alternative to the awful YouTube app and/or youtube account. However, your IP along with other device information may still be exposed to google servers. Any ideas as to what info beyond IP is sent to google? Whereas invidious instances act as a proxy in addition to what is offered by Newpipe, but you are trusting your privacy to the instance owner. My idea for utilizing these services is the following: Newpipe for managing subscription based YouTube viewing. Google would have my IP, but this IP would be a VPN IP address that periodically changes. Much more reliable than invidious and better quality. App is great. Invidious for random video searches as well as content I may want to be slightly more cautious about associating with. I'm looking for feedback on this conceptual setup. I've also been considering making a public invidious instance that I can use but hopefully obfuscates my viewing through its usage by others.
fedilink

I often wish all services could provide an opt out “I’m aware no 2fa is risky but I really don’t give a damn about this account so fuck off with the constant email verifications”. Or if companies insist on forcing 2fa, at least support hardware keys. Don’t even get me started about banks…


Good point. I’m aware of the icloud method of imessage cracking, but I often forget that I’m not always the weakest link; it’s up to the people around you as well.


I eventually managed to get the yubikey to work, although it is very buggy and the steps to get it working are unacceptable IMO for the “most secure phone OS”. Hardware keys should be a major priority and should simply work just as easily as using passwords, but it seems to be a stale open feature request for a few years. Luckily for me, once bitwarden is authenticated with 2fa I don’t need my hardware key unless I reinstall it. So that’s one major hurdle behind me. Another plus is that while you need sandboxed google services to utilize hardware key auth, they don’t need network permissions to work.


If iMessages are e2ee and you aren’t using iCloud, is there any evidence your messages aren’t private? As far as I’m aware iMessage is considered a very secure messaging channel. It seems like most people distrust it due to the Apple affiliation. Not that I blame them, I feel the same about Google.


Just for the sake of getting used to / transitioning to a single gos phone, does it make sense to use the insecure phone as a hotspot and utilize the pixel without a sim (so data only device). I would be using e2e encrypted apps for texts and calls so this makes sense in my head.


Appreciate the info.

It seems absurd to me that a third party online service is required for a hardware key to work in the first place. I figured it would be authenticating strictly between the locked service and the user.


Most helpful comment. Thank you. I’m heavily considering carrying two phones. My biggest hurdle is the Yubikey at this point because it locks me out of my password manager and most of my more important apps.

You mention using the usb-c connection. I tried that but it doesn’t seem to register. I guess I just need to research some more.

Thanks for giving me some hope!


Help me to not revert back to iPhone after GrapheneOS Issues
I recently acquired a pixel phone and set up gos. Prior to trying gos I was using an iPhone hardened as much as possible based off of recommendations and guides from respected OSINT experts. It’s only been a week but I’ve found gos extremely frustrating and mostly useless except for web browsing. I can’t seem to get my Yubikey to work so my 2FA is borked. Works fine on my iPhone. I’ve previously managed to degoogle my life but now certain apps require me to use sandboxed google apps just to run. I’m facing the nearly insurmountable task of convincing my friends, family, and colleagues to download and use signal when they are all using encrypted iMessage. Most of my banking apps just simply do not work. Mobile banking is unfortunately something important that I need in my occupation. A part of the appeal of gos was being able to have an isolated dedicated profile for banking. There’s also a few features that I’m assuming are iPhone exclusive that it really sucks to have without. Double tapping the bottom of the screen to shift everything down so you can reach the top of the screen with your finger when using one hand. Holding down on the space bar to move the text cursor between characters. Maybe these exist on gos though? I understand most of the issues lay on the shoulders of the app developers. I’m grateful for the devs for creating and working on this project. I’m not bashing anyone here. I’m simply asking for some guidance on how I can break through the hurdles and make this work for me, from the mouth of those who were once in my position.
fedilink

[Question] YouTube frontend with algorithm?
I’ve been using invidious for a few years. I recently changed up my morning routine and have been eating breakfast watching YouTube via the TV app versus on my PC. It made me realize I kind of miss the recommended videos in some circumstances like when I just wanna veg out. Are there any current viable yt front ends that either maintain the algorithm or utilize their own to find you new content?
fedilink

Can data removal services be trusted?
What is the general consensus on trusting data removal services with the data you provide them? I’ve spent 5 years telling myself I’ll go through the long lists of data aggregators and one by one manually send removal requests. But it’s such a massive undertaking. I’d like to finally get it done through one of these services, but my gut tells me it feels wrong. Has anybody used them and how do you feel about it? Is DeleteMe a good choice?
fedilink

[Question] Securely Passing Host VPN to KVM?
I've attempted to create a VM on my ubuntu host machine that is accessing the internet via a dedicated VPN app. I'm able to disconnect my host VPN and access the web within the VM, but cannot access the web when the host VPN is enabled. Ideally I'd like to enable the VPN on the host and pass through web access to the VM. I have two questions: 1. If my use case is to use a VM to increase privacy and security as well as isolate my operations within the VM from my host, is it better to have the VPN app from inside the VM or pass the host's through to the VM? 2. If it doesn't make much of a difference, how can I go about passing the host's VPN to the VM? In either scenario, I'd still like to keep the host's VPN active while being able to use the VM, which I currently cannot.
fedilink

PSA: Twitch Shadowbans Users on VPN + Linux
If you notice your chat messages show up in the chat feed but don't appear on the streamers in-screen chat, you have been shadowbanned. Twitch will still take your money for donations, subs, etc, but your feedback won't be seen by anybody but you. This shadowban does not appear in the appeals page and can be applied randomly and intermittently. You are never informed about this by the way. You'll likely be talking in a chat and assuming you're being ignored. Hop into a private tab and load up the stream where you'll be able to notice if your messages are missing in chat. From my observations, there seems to be some type of algorithm/system that determines who to shadowban. I'm assuming it assigns extra points for factors like VPN usage, Linux, and adblockers. Once you've been shadowbanned, switching one of those three will not work to unban you until some arbitrary timer expires. I'm posting this in case anybody else has experienced this and felt frustrated and isolated. You're not being ignored (unless you're a twat and are being ignored). You're just being punished by Twitch for being privacy conscious.
fedilink