• 0 Posts
  • 20 Comments
Joined 2Y ago
cake
Cake day: Jul 02, 2023

help-circle
rss

They can make it so much harder to do that, to the point where almost everyone just gives up.


If you’re upset that your hacked-to-bits, rooted, unlocked and/or unencrypted device is failing checks: I’d say, tough luck. Until we can create provably untampered app-containers, that level of access genuinely breaks TOS on apps and regulations on handling personal data.

Hard disagree. If you own the device, you should be in full control of what’s going on. Sure, attestation can give some extra security, but that decision should be up to the user. Everything else is just excuses for user hostile DRM: platforms levaraging technology to secure their own profit margin against the interests of user.


Websites do not have access to your IMEI. That’s only a concern when you use the app.



This doesn’t advocate for any substantial improvement of data protections. It’s merely a convenience argument to legitimize banning Chinese cars for economic reasons. American car manufacturers will continue to harvest and sell all your data, just with less competition.

Of course, this isn’t a surprise coming from the CFR, the lobbying organization for US imperialism.


Obviously acquiring publicly available data is legal

Under the EU GDPR it is often not legal. Controllers need a legal basis, which only exists if there is an appropriate relationship between the controller and the data subject.


The uMatrix add-on for Firefox seems to do what you want.


Key servers can be dishonest, so you need to have another way of verifying that the key you receive is correct.



“A brief search showed that the applicant gave false statements in their VISA application form, in violation of 18 U.S.C. §1546. Lifetime ban applied.”



What about the centuries of imperialism here and there


Have you ever seen the statistics? The DPAs are massively underfunded and the Irish DPC in particular is notorious for ignoring complaints, to the point where the EU is considering launching infringement procedures against Ireland for not properly enforcing the GDPR. If you think they will take action on a complaint like this, you will get disappointed.

On the other hand, petitioning the courts to intervene is probably easier than you think. In some member states you don’t even need a lawyer, so all it takes is a bit of time and some court fees. I’m not saying it’s the preferred option, but realistically it is the shortest path to a result.


The DPC is almost certainly going to ignore complaints like this. You can choose between suing meta or suing the DPC.


DPAs don’t have the resources to take action on every single complaints. You can sue the controller or processor directly under article 79 if you want to be sure that an issue gets dealt with quickly.


Using a VPN does exactly nothing against cookies or device fingerprinting.


You can virtualize a TPM, but you can’t obtain a valid endorsement key.


This system would use cryptography and hardware to make sure that you are unable to lie about any of this. Basically, there is a chip inside your CPU that contains special keys installed by the manufacturer. However, this chip only activates itself when it detects that your device is running the approved software. Furthermore, it is made (almost) impossible to open this chip and retrieve the keys without destroying it.


I beg to differ. It’s indeed possible to scrape and store any comment indefinitely, but there are certainly ways to limit the size and prevalence of that happening. With rate limiting, bot detection and legal enforcement you can reduce the likelihood that someone will scrape and store all your comments. By accepting that everything will be scraped, you are unnecessarily conceding privacy.