• 3 Posts
  • 25 Comments
Joined 1Y ago
cake
Cake day: Nov 07, 2024

help-circle
rss

In case anyone else out there is unaware, the “paid” tier for Osmand is unlockable for free to OSM contributors, meaning if you make a habit of contributing edits to OSM, then all you’d have to do is link to your OSM account within Osmand settings. Not to dissuade anyone from contributing financially, just sayin’ b/c I think that is a nice little perk for editors from the Osmand team.

I personally prefer CoMaps (forked from Organic Maps), the UI is a little more intuitive to me than Osmand.


Can someone help me understand the likely outcome in countries that implement chat control? Will those governments force Google and Apple to remove apps that do not comply (e.g. Signal) from their official app stores? Will those governments somehow detect users who find workarounds and go after them? I figure most people in those countries will shrug their shoulders and move on with their lives, but how will this impact citizens who do not wish to comply?


Can you please share a specific example? I poked around in the settings for Fennec browser and could not find anything about switching profiles.


This has been my experience so far. When I posted this question, I was hoping there was an alternative or equivalent feature for mobile that I just didn’t know about.


Does any Firefox spinoff for Android support separate profiles or multi-account containers?
I've read about creating separate users at the OS level, but I'm hoping for something a tad lighter. Are separate Firefox profiles and/or multi-account containers a thing in any of the various Firefox spinoffs for Android? Testing in Fennec browser, in the little kebab menu, I see an option to sign in, but that's not what I want. I don't see anything related to profiles. When I browse to the page for the multi-account containers extension, it says not compatible w/ Android. Does one of the other Firefox spinoffs for Android have either of these features (profiles or multi-account containers)?
fedilink

I’d think A would work (pointing your custom domain to Anonaddy and linking the specific alias to their gmail as the recipient for that alias). This can be done w/ Anonaddy’s Lite Plan, which is $1/month and allows up to 5 recipients.


I see the problem now; however, if the aliasing tool has regex matching (and the matching pattern is hard to guess), then I believe that solves the problem of keeping spam out while enabling automatic creation, would you agree?


if you use catchall and later run into spam issues, it gets much harder to get rid of it, as you cannot turn off the catchall if you don’t even have a list of aliases to still let through.

If the forwarding/aliasing service automatically creates an alias when the first email is received, then that skirts this problem, right?


I forward those emails to an address which is random. For example: udhxhdjeiwk@example.com.

Can you elaborate on the benefit of using a random string for your secret/true inbox? Is it so that if it’s ever compromised you can just spin up a new random string as your new inbox, point all your aliases to the new one, and burn the old one?

Each alias looks like this: company_name-[eight random character/numbers]@example.com.

Same question, how do the random characters after the company name benefit you? Is it so that if you want (or need) to continue using that particular service after a data leak, then at least you can update your profile to company_name-[different set of random characters]?



Makes sense. Follow-up question: Is there any particular reason why you use the email+hfu2sb5d@example.com or email+ebay@example.com as opposed to just hfu2sb5d@example.com or ebay@example.com?

If I understand correctly, the plus sign helps you see which organization has compromised your info, but the drawback of the plus sign is that a savvy spammer can figure out what your true email address is (the part before the plus sign), whereas aliases such as hfu2sb5d@example.com or ebay@example.com conceal your true email address.

Am I thinking about this correctly?

ETA I’ve also encountered sites where a plus sign in the email address is disallowed, which is another downside of the plus sign approach.


Okay, I think I’m following, thanks for the detailed explanation.

mail-eage

Nice!


Gotcha, so then without a catch-all, is it still possible to make up something on the fly or will I need to predetermine my aliases before I give them out? I guess it’s kinda rare, but I’m thinking about the odd circumstance where I need to come up with something on the spot and I’m away from my computer.


I’ve seen this approach mentioned in other threads. Where does one configure catch-all, is that in the settings for the mail provider or the domain registrar?


Going forward, this approach checks out, but I’m also looking to unfuck my existing accounts. Beginning to think a custom domain is the way to achieve that.


How to skirt websites that block known domains of email forwarding services? [SOLVED]
**Solved:** Thanks to all who commented, especially those who took the time to respond to my follow-up questions. Your responses were enough to convince me of the value of buying a custom domain in order to keep one's true email address private w/ the added benefit of working on websites that block known domains of temp/forwarding service providers. Key takeaways: - Forwarding services' shared domains are useful for blending in w/ the crowd. (credit to @Cricket@lemmy.zip) - Custom domains are handy when you don't care about blending in and you want to use a website that blacklists known domains of disposable/forwarding service providers, including the paid-tier domains. - Deciding whether to enable catch-all: - Enabled: You can make up new addresses without having to configure the alias manually each time, but it's also easier for spammers to guess valid addresses. - Disabled: It's more difficult for spammers to guess valid addresses, but you'll have to configure your aliases manually *unless* you have regex matching for automatic creation of new aliases. With regex matching for automatic creation of new aliases, disabling catch-all has few if any downsides. - Regex matching: Seems to provide the best of all worlds by making it harder for spammers to guess valid addresses without having to configure aliases manually each time. - For aliases, including a string of random characters after the company name makes it harder for spammers to guess your other aliases and/or learn where else you have accounts by spamming emails to every `$companyname@example.com` and seeing which ones bounce back. (credit to @erebion@news.erebion.eu) **Original post:** I've recently signed up for an email forwarding service w/ aliases so that I can keep my true email address private when I sign up for new websites and services. I should clarify that I'm less concerned about *concealing my identity* as I am about protecting my real email address, identifying who leaked my info when my email address is compromised, and being able to stop the spam by turning off that alias. While updating my existing profiles to point to aliases instead of my real address, I've hit a snag - some sites (Steam, Slack, etc) won't allow me to update my email address to any known domains from my email forwarding service. On these sites that block email forwarding addresses, for now I'm either updating my existing email address w/ a plus sign if the website allows it, otherwise I'm just leaving my existing email address unchanged. It's not the end of the world, they already have my real email address, and I can probably go a Very Long Time without needing to check those inboxes anyway, but I'm still miffed that I can't completely migrate my existing accounts to my new scheme. I've read numerous posts about the benefits of custom domains to enable portability of email service providers, and I'm wondering if custom domains are the answer to these sites that disallow forwarding addresses, but I have questions: - How do other people deal with this situation? - Do these websites that block known email forwarding domains typically work on a whitelist or blacklist model? If the former (whitelist), then I'm thinking a custom domain will have the same problem, but if the latter (blacklist), then I reckon a custom domain with catchall might work. - Particularly owners of custom domains, do you find your custom domain is allowed more often than not or do you run into the same problem? EDIT: Clarified my objectives.
fedilink


Good to know there are models compatible with Home Assistant. Thanks for the info.


Thanks for the idea. In your case, do you still need a phone app to program the various PINs or are they all programmable “on board?”


Privacy friendly keypad/electronic door lock at home?
I'm looking into installing a door lock w/ key pad at home for two use cases: 1. I'm out of town and need to allow someone to enter my home, in an emergency or for any reason. 2. Nice to have - "oh shit, did I lock the door" - ability to lock the door remotely from my phone, would also solve use case #1 by unlocking remotely. If there are no privacy respecting / self hosted apps for remote control (use case #2), then a "dumb" electronic lock w/ key pad that enables me to set a PIN that I can give to a friend or neighbor in a pinch and then reset the PIN after I get home, that would be good enough. If no such keypad/electronic locks exist, then my backup plan is to just make a few copies of my key for trusted friends & family and/or hide a key, but I'd like to explore the keypad route.
fedilink

Oh, I see. I must’ve misread a tutorial at some point then. I did not realize one could install an app directly into profile #2, I thought root had all the apps and then specific apps had to be pushed to the other profiles. Thanks for clarifying that.


Got that part, but what throws me is, in order to install a Google app on that secondary “google” profile, don’t you have to first install the Google app on the main profile so that you can then push it to the secondary profile?


What does maintaining a separate profile for Google stuff buy you? I’m familiar with GrapheneOS, but haven’t internalized the separate profile thing yet.


I do kind of relish the images, though. Picture’s worth a thousand words and all. But it’s great to have that choice.


Yes and no. Sometimes a company or organization can serve as a force for good. That said, absolutely a double edged sword. It’s not fair to expect private businesses and organizations to be held hostage by scummy legislators. At the end of the day, no one is entitled to a business’s or organization’s services, so… Don’t want to chase businesses and organizations away? Don’t pass shitty legislation.


Excerpt from the article:

The researchers… call their approach “WhoFi”, as described in a preprint paper titled, “WhoFi: Deep Person Re-Identification via Wi-Fi Channel Signal Encoding.”

Who are you, really?

Re-identification, the researchers explain, is a common challenge in video surveillance. It’s not always clear when a subject captured on video is the same person recorded at another time and/or place.

Re-identification doesn’t necessarily reveal a person’s identity. Instead, it is just an assertion that the same surveilled subject appears in different settings. In video surveillance, this might be done by matching the subject’s clothes or other distinct features in different recordings. But that’s not always possible.

The author asserts that re-identification doesn’t necessarily reveal a person’s identity, although I suppose this is similar to how a single fingerprint or DNA sample doesn’t necessarily reveal a person’s identity, right up until somebody can connect your fingerprint to your identity, say, by correlating your location with other tracking methods or something.