• 2 Posts
  • 35 Comments
Joined 1Y ago
cake
Cake day: Sep 16, 2024

help-circle
rss

so i am right and you are wrong. linux from SCRATCH you are a joke.


i took it as dumb worthless feedback, that’s why I tried to tell you how you can make it constructive on your next try if you actually know anything.


so how much mitigations? I’ve heard 0. do you know? 1 mitigation? 2?


If you think its wrong then show it. Show where I can get the source code and build instructions to build my own debian image.


I clearly said if i’m not sure about something. I takes time to do research if you can do better than go ahead and show us what you know. If you think something I said is wrong then please make a constructive reply and tell us all how it really is.

And QubesOS isnt based on linux kernel. It uses Xen. Linux is used in the Qubes aka VMs.


OP is wrong about firmware. linux-firmware package is not about mitigating firmware vulnerabilities. It’s just blobs for things like nvidia and other stuff. I don’t know if Linux has firmware vulnerability mitigation but if it doesn’t then QubesOS is much better because it does prevent a lot of the vulnerabilities by disabling hyperthreading.


We need to stop the attacks against those who are trying to level up their privacy
There are lot of people in the privacy communities who are shaming and attacking those of us who want take take privacy seriously. more than just using firefox and a vpn. So many people are trying to influence the privacy community to not use whonix or tor browser. That it's paranoid and extreme to leave your phone at home. And so on. They keep pushing this propaganda without even knowing what they are talking about. They will keep spamming everywhere that you don't need to protect your firmware from physical access adversaries because the only adversaries who can do something like that are feds and feds will never target you unless you are a cartel leader or running a darknet market or something very terrible. But these same people who spread this propaganda can't even tell you what the difference is between bios and uefi. Which means they have no idea what they are talking about and are just spreading propaganda/disinformation. Why would they do that? They are probably american feds. We all know there is lots of evidence of feds like fbi,nsa,cia corruption and they all hate privacy and keep spamming their propaganda about if you have nothing to hide then you don't need privacy. With that in mind it's obvious that they are doing at least some sort of propaganda/influence campaigns to slow down, derail, end privacy activism. We also know it doesn't take much to become a terrorist. UK gov has officially publicly announced that anyone on X who retweets an ongoing protest is a terrorist and they will be arrested. Elon musk is officially a terrorist and the uk gov has repeatedly asked usa to hand him over. So it's very easy to become targeted by feds, you dont have to do anything bad, just use freedom of speech. And in france it was many times in the news about a group of friends who were arrested for using Signal. A girl they tried to convince to start using signal called the police and said they are using anonymous communication called Signal and then they were arrested and all their computers taken and forensics went through all the data on their computer and judge said its criminal evidence they have ad blockers on their browser. It's an infinite list of evidence about how tyrannical the feds are and it doesn't take anything to become targeted by them, just bad luck. Imagine if you are traveling and go to a hostel and tell the people you're staying there together with that your computer is off limits, no touching it and you will know because you have lots of security to detect tampering. If they start gossiping about this and then call the police you will probably have your computer confiscated and then forensics will go through it. Or maybe they'll send an undercover hacker to try some covert physical access attacks. And this is just talking about feds being adversary. There are also criminals that are hackers. And feds can be criminals too, like the high ranking cia officer who recently traveled south america and drugged and raped dozens of women before he was finally caught. This all leads to my suggestion. I think we need to stop the feds influence and propaganda campaigns against the privacy communities. Stop shaming and attacking people for wanting more privacy than you. We need to start banning these people. Are there any privacy communities remaining where you can say you're using tor browser without getting attacked for being an "extremist" and paranoid just because you use tor browser or leaving phone at home? **I'm happy there are so many that agree with me. Remember to not get stuck in the details but it's about the bigger picture I'm saying here. To the few who are questioning the little stories I said and asking for sources: I didn't think it was necessary, i honestly believed most here would have heard of it. Of course you won't find an "official" source because of all the corrupt censorship the governments are doing. That france story was a hot topic in all the privacy and tech communities when it was happening. I found discussions everywhere about it. If you can't find any good sources for these stories then I maybe will have trouble finding it too, maybe it is gone because of censorship. And even if I do find it, then it will just give the feds more meta data about me because they are probably angry at me for making this post and want to find me and punish me for making this post. I bet half the downvotes are from feds.**
fedilink

they also make extreme examples of anyone threatening to “blow it up”, show the public all the corruption and give freedom to the people. Edward Snowden is an example. Also recently Roman Storm the Tornado Cash dev. These extreme attacks from the government are meant to cause fear so no one dares to do anything like that again.


i forgot about that reason. That’s true I think some people have that as their motive. They are probably thinking that it’s best to not let the beginners know that vpn doesn’t do much on its own or that brave doesn’t actually stop all tracking and won’t necessarily give you a non-unique fingerprint etc. They want to make it look easy to get privacy because if they make it look hard that these simple beginner steps aren’t enough then they won’t even get started and give up.

I think it’s a wrong mindset to have. I don’t think those types of people who give up if they realize privacy isn’t a one click solution are the target audience for privacy. We want the people who can actually spend some time to learn and put in some effort because if they can’t do that then they probably don’t care that much about privacy to begin with.

But its just my opinion not a fact.


I think it’s personal for techlore regarding grapheneos because a few people in the gos community helped him in a way he felt was rude. Then techlore started making lots of bad videos about gos and then maybe he out of cope had to try see some light in google because he alienated himself from gos community. That’s just my guess.


You are right but I think most people would in hindsight say they wished the did more to protect their computer when shit happens. It’s like a camera, you can buy a cheap camera meant to be used for a vacation then thrown away and it’s not worth much but the pictures you have taken are worth a lot as in semantic value, memories you want to keep.

In someones computer they have their entire digital life. Work, personal life, social life, all kinds of data, pictures, banking, investments, crypto, etc. All that is priceless. That’s why ransomware viruses are so effective, people will pay and do anything to get their data back and they all wished they had just done some simple backups and from then on they will probably spend effort on security.


The big divide in the privacy community (threat model)
Everything I say will be generally speaking for all privacy communities so not specific to this community or another one unless I say otherwise in a short section. Almost every single time I start a topic or make a reply and also many of the posts I read because they are interesting, there's always this one guy or several guys who have to say the same old argument about "that's tin foil, feds don't do that, unless you are a president or something like that then you don't need to have that in your threat model". That's the divide I'm talking about because the privacy community can be split into two categories that are opposed to each other on that point. And it's a big issue because it becomes core in the types of discussions we can have. For example in techlore's community they are very much against people who take privacy seriously. If you go to there community and start talking about leaving phone at home, using grapheneos, qubesos, intel me, etc, you will get run over by lots of angry people telling you not to talk about that and then you get censored and maybe banned. Techlore himself have made several videos recommending against grapheneos and he prefers Google. I mentioned that community because I think it's at the extreme end of the spectrum of this divide. The problem with all the people on that end of the divide is they can't know what they're saying is true but they are saying it like its a fact. Where are they even getting those ideas from? Are they insiders working high up in the ranks for intel agencies like fbi, cia, nsa? Are there basically hundreds of Edward Snowdens out there? I don't think so. I think the cause for the divide is unfortunately political. It's about where are you getting your news from and which political party do you prefer. We're not going to talk about that in this topic more than to say I think that is the cause of the divide. Technology is great to discuss because it's just logic and facts and objective arguments. But bring in politics and it becomes a mess and that's the problem with this divide in the privacy community. There's also another possible cause which is actually very likely as well, which is that at least some of the people on that side of the divide are feds spreading propaganda to get us to lower our guard against them. The problem with both sides of the divide trying to talk to each other is all the unknown data we deal with in privacy and security discussions. And there is a lot of those unknown data. Those black holes get filled with arguments based on the political ideas from their side of the divide. It's just not possible to have discussions with people on the other side of the divide. With all that said I think privacy@lemmy.ml is one of the best privacy communities and have done a good job trying to get both divides together but personally I mostly just try to ignore the ones from the other side of the divide and listen to only those on the same side of the divide.
fedilink

yeah the elites who run the world have limitless money for the lobbying. I don’t think it’s possible to win this war on their turf under their rigged rules. Revolution is the only way but I don’t think that’s a realistic possibility neither. They have so many ways to divide and conquer.


problem is getting everyone to do revolution at the same time. That’s one of the purposes of mass surveillance, they can detect the early beginnings of organization and send them to prison before it grows into a big snowball.


You have to negotiate.

They: Do you have whatsapp?

You: No i hate that app but we can use Rehnijobuboba, heard of that?

They: No and there’s no way I’m installing something I can’t even speak.

You: Ok, you dont want to install that and I don’t want whatsapp, lets meet halfway and use Signal together!

They: Fine.



If they don’t want to use private communication then just leave it. If you want privacy you have to get used to having a less social life, at least online. That’s the key really, if you want a social life, you have to start going offline, out into the real world and meet people. Get to know your neighborhood a bit or join some outdoor activity or club or something. I know it’s weird at first about going outside because we’re all basement computer nerds but you will find freedom without all the online surveillance when you leave your home.

JK, because next challenge is to convince everyone you meet that they should leave their phones are home and if you thought getting people to use Signal is hard you have no idea because that’s just step 1.




Problem is first party tracking. Blocking is just against third parties. For first party tracking you are just going to have to use tor browser.


I learned about Cloudflare mitm quickly because when you use Tor browser you will see how many websites use cloudflare because you can’t access all those sites. So I did a little research about this problem about cloudflare and found out how serious and huge problem it is.


That doesnt delete your data. Now they have right to keep it forever for their “legitimate” reasons to protect them from a user who break their ToS. All you accomplish is give up the little rights you have.

Corporations could actually do this anyway because there are so many vague rules in ToS and they can bend them however they want and without any user knowing you could all be flagged as a malicious users just so they have “legitimate” reason to do lots of nasty things with your data such as sharing them with networks who work together to prevent “malicious” users and “russian troll farms” etc. The whole system is rigged and just an illusion of protections for consumers/people.


It’s normal but people don’t like it. Just ask the people you know if they are ok with all the mass surveillance, they don’t like it. But it’s just too difficult for them to do anything about it. They don’t like this “small beginner steps” approach to privacy. They want complete privacy without effort or nothing at all and they don’t want to pay for it. It’s laughable and sad but that’s my experience talking about privacy with people. But the point here i guess is that mass surveillance has been forced on us all. They create a new wonderful technology with lots of use case but then they also add in some mass surveillance on it as well as a bonus.



privacy is about making effort to protect it. With your logic you should just use google chrome browser and be signed in to google because it makes an easier experience. Then install alexa in your home and make it a smart home, it also makes life easier.



Do you think it’s better to use a VPN if you aren’t using TOR Browser?


You can copy the part of the url watch?v=4sfIBRTcRpU and use it in the frontend you prefer.




Why not is the question and that comes down to guessing. Sheep do what they are told so don’t need to guess much there. Those who are not sheep have to go through a long journey to gradually keep increasing their privacy and unlearn the sheep habits we’ve been conditioned to have.

The end goal is to throw away your phone because you can do everything on your computer instead including buying a phone number, using voip and take and make calls. Phones are unnecessary spy devices used by sheep.


You can buy for cents phone numbers online for one time verification purpose or even rent the number for long term if you need. It’s better to use these anonymous cheap throwaway numbers if you want privacy instead of your real phone number for everything.


NSA is infamous for illegal and unconstitutional mass surveillance.


They are very cheap, only $1 for 10 aliases and then then $0.1/month for any additional aliases. But can’t pay with monero.


Can I open an account with TOR browser and pay with monero without having to give any info like a secondary email or phone number?


I dont think it matters if an email service is a honeypot because if you want E2EE communication then use Signal, not email. And if you are sending emails to other email providers then there’s probably not E2EE and it’s unecessary to be a honeypot because the metadata can be collected anyway very easily. Almost all data passes through Google/Microsoft/Amazon/Cloudflare.


what kind of risks are there with buying a second hand phone? I don’t know so much about how phones work. But for example with a laptop they could in theory implant all kinds of hidden spyware and backdoors in the firmware and it would be impossible to find it and remove it. The only protection against that is that we believe it’s so unlikely someone random would do that. So that is just an example what I’m talking about when I ask about what the risks would be when buying a second hand phone?