not much

  • 24 Posts
  • 168 Comments
Joined 1Y ago
cake
Cake day: Dec 08, 2022

help-circle
rss

Many people probably won’t be bothered by these things, but I am. I don’t want to pay full price for something that I don’t truly own. I miss the familiarity. I miss the reliability. I miss feeling like it’s mine. Dependable. Trustworthy.

Picking my old guitar up again has never looked so appealing. I think I want to go back to investing more time, money, and energy into things that aren’t connected to the internet

Upvoted.


Yup.

Buy any domain name, doesn’t matter what.

Suggested to OP and others that self-hosting email is easy and reliable is a bad idea in my opinion.

Instead I suggest the OP to let go of the “free” requirement. There are at least three email providers that provide email for 1 Euro a month including a few email aliases. Another option is to find a web hosting company that also provides email with web hosting. For example Gandi used to do that though I read they made some changes with their hosting options.


Sure, but what random psycho would go through all your comments collecting data like weather on a specific day, car, job, etc… just to mess with you in real life. That’s like one in a billion unless you specifically seek out those kind of people.

Scraping experiments have been done in the Fediverse several times and with the booming A.I. such an action does not seem very unlikely to me.



I saddens me that it feels like the multi-billion dollar data harvesting companies are winning, but I no longer know if this is a hill that I’m willing to die on.

It is a very sad thing indeed :(

What are your thoughts on what we have to give up in our lives just to stay in control of our personal information?

I guess it depends whether you want to be reachable 24/7 on mobile or not.

With Signal and with things like WhatsApp and for that matter Telegram a phone number is only required to sign up. And you do not have to restrict yourself to one phone number.

Actually that is not correct because contacts syncing is another thing. If you are willing to have a private life without Meta and a second life which includes Meta Zuck it is technically possible. Buy a cheap smartphone with another SIM card for signing up and for syncing contacts and then link it to desktop apps that you can check a few times a day to check in with your friends via the Meta Zuck channels. The cheap smartphone can stay off unless you need to sync contacts.


That is true to some extend (Though search engines would afaik correct 404 pages and delete the old fetched data), but the automatic deletion does stop part of the audience of having a lot of data to create a fingerprint.


I’ve read on several websites that Nokia comes with pretty much stock Android.


On Mastodon (and maybe also Akkoma/Pleroma/Misskey/firefish and so on) there is an option in the settings to auto delete your posts (formerly known as toots) with fine tune options if you for instance want to delete your posts but save your favorites and boosts. Several people have their toots older than one month automatically deleted. Before this was an option in Mastodon, people already did this with help of other software.

Lemmy is not very similar as StackExchange/SuperUser/Quora but in some threads Lemmy resembles a Q&A site so it makes sense to leave the conversations as is.

Regarding the most private social media question I’d think of Friendica, Hubzilla, and Pixelfed as best.


Well, people in the USA probably do know one German name related to NASA :




What ? You did not obey the surveillance capitalism overlords ? :-) /j

Thanks for sharing, good to know!

Is PixelFed https://pixelfed.org a good alternative for privacy minded people out there ? I know that PixelFed users can be followed from Mastodon which seems nice to me.



Exactly. What makes this a bit complicated and maybe interesting from a historical point of view is that this is about Spain. A country which has been very slow with removing some of the “relics” from the fascist Franco era (Franco died in 1975) and at the same time having regions that long for independence like Basque country and Catalunya (and the post topic is related to that, Catalunya aiming for independence). Since the Twin Towers attacks in 2001 the words “terror suspect” and “terrorists” have been used much more often (also by ordinary “normies” people that I knew) and maybe not always rightly so.



Except with a VPN you’re not identified by the servers you connect to, so they can safely not log any traffic and as such, law enforcement can’t ask to hand out data about a specific account because they don’t know which account did it. Same goes for logging the IP of the account, because again, they don’t know which account it is, and can’t force a service to log all users for the sake of finding one.

VPN and Tor and I guess i2p can disguise your IP address indeed.

It’s not true for mail services however, as the email address is your login and/or is linked to a specific account, forever and exclusively.

I’m not following what you mean by this ?


Source: the 3 first words of my comment…

https://disroot.org/en/privacy_policy Section 4.1

You’re the ones defending a service yet you don’t know that. Seems like someone who just found out the service can do better research. But hey, thanks for not being overly aggressive and claiming to know everything like this other guy.

I simply asked you a question and thanks for pointing out more details. I have decided to trust Riseup and Disroot for reasons in the past. It is up to me to care about my privacy and security when there is the need for it. Other people will use Google Gmail with GnuPG, that up to them.


“helped” is very misleading. Companies can’t refuse to provide information they have when served a search warrant / court order. These companies DID NOT choose to provide the info on their own.

You are suggesting all these companies are completely helpless against legal requests. That is not correct. A company should first make clear that the legal request is actually completely legitimate and correct. After that they can look at whether they should provide the information or not.

See the data here :


Serious topics like privacy and self improvement have become very similar in people’s perception. They are also just another thing to consume, as unhinged as it sounds. Everything must be consumed, everything must be rented. Everyone must live in a distorted perception of “safety”, whose harbingers are fucking western corporations. It is insanity and it must be prevented from taking over Lemmy’s communities atleast on main .ml instance, and I will do what is needed to prevent that, in places I moderate.

👍


Law can be different per country and when there is nothing to hand over, then there is nothing. Here is an example of Mullvad : https://mullvad.net/sv/blog/update-the-swedish-authorities-answered-our-protocol-request


Their privacy policy. They log IP addresses and are not immune to legal actions, and as such, are not really better than Proton in terms of legal actions

They log IP addresses ? Source ?


PGP doesn’t protect anything but message contents.

Indeed, be careful with choosing your email subject line when using GnuPG to encrypt.

Additionally, if you key it compromised all of your messages are compromised.

Yes, maybe for some people it is. I once knew a person who created a new GnuPG key every few months. It is also recommended in some howtos that making your key never expire is a bad idea.

By the way, for all readers interested in using GnuPG, FSF updated their Email Self-Defense guide this week. https://hostux.social/@fsf/112405348416810419


It is very strange to me that Lemmy users are behaving in a reverse manner to how they should. Are they too young? Or are they too bad at privacy game, believing all this Proton/Graphene/Brave and whatever else is trendy?

It is indeed probably a new and young generation preferring to watch videos on their smart phones rather than reading from a desktop computer. YouTube (with its influencers and content creators) is very popular and that is unlikely to change any time soon. Problem is that getting privacy and also security right is not that simple. Take for example the Riseup and Disroot comments in this thread. I trust Disroot and Riseup to do the right thing, and I bet that handing over personal data would be about the last thing they would ever do. I guess this is difficult to understand for people who have nothing at all in common with activism and for that matter anti-capitalism.


By the way, the earlier posted article https://restoreprivacy.com/protonmail-discloses-user-data-leading-to-arrest-in-spain had an update starting at the paragraph with title *Update: Statement from Proton and additional commentary*
fedilink

I just used gThumb recently to try to post something I had inverted, but posting it to sopuli/lemmy scrubbs the exif data and it was posted as if I didn’t do anything.

Yes, uploading to Mastodon and Lemmy will likely automatically wipe EXIF data by those sites.

So, gThumb uses exif data to modify pictures which is likely what is added.

*What alternative are you using?

For image cropping I’ve switched to Gwenview which I’m pleased with.


What’s up with added EXIF data by gThumb ?
- Make a screen shot of your desktop - Check with a viewer and see no EXIF data - Load it in gThumb to use its crop feature, crop and save - Check again with a viewer and see that gThumb added EXIF data including the gThumb version In the mean time I've started to use other software to crop screen shots but I am still puzzled why gThumb always adds EXIF data ?
fedilink

Exactly! I am not saying that Proton is some kind of virus but lots of folks are screaming “Proton! Proton!” (and “You have to think for yourself!” - Life of Brian) as if it is the only answer for privacy and security.

Riseup exists since about 1999 and is like Disroot non profit with focus on activism. Proton is like some other companies, I think, a response to the Snowden revelations, which is iirc 2013, a time after which self-hosting email (e.g. Mail in a box) became topical for a while and several other new email companies started to pop up.


Your email relay or Beehaw could be “hacked”.


I’ve never heard of those 2 providers and they don’t seem to be any better.

You never heard of the other two providers but yet you already draw the conclusion that they don’t seem to be better. What does “better” mean to you in this context ?


All the commenters suggesting that Proton is just a company and would always give in to legal requests and all other companies and any email provider would do the same, here’s some more to add. Yesterday I saw a now invalid toot comment from ProtonPrivacy on Mastodon Social where they wrote that it was Apple who was to blame and that Proton gave the recovery email address only because this was a case of a terrorism suspect suggesting that if that (terrorism) was not the case they would not have given in to the request. Today their comment sadly gives a 404 error. Searching a bit further this article comes up mentioning Proton and Wire :

In the new resolution, the National Audience judge recalls that in January, in a judicial report he issued on the case, he highlighted a conversation from July 12th and 13th, 2020, about the king’s visits, which was included in the Tsunami investigative evidence, and of which he admits that until that point he had not made reference in his investigation which extends over the period from 2016 to 2022. Specifically, one of the people under investigation, the Girona businessperson Josep Campmajó, spoke to the figure named Xuxu Rondinaire, with profile @marietadelulllviu, about mobilizations in 2019, using the Wire messenger app. The judge has asked for the identification of this person, information now obtained by the Civil Guard, which details that they used Europol to ask the Swiss authorities for the Wire firm to identify the person behind this pseudonym, with a profile that is also used in Proton Mail, an encrypted email system. In the police cooperation form requesting the information, the Spanish officers indicate to the Swiss authorities that the investigation is for the crime of terrorism.



https://www.theguardian.com/technology/article/2024/may/07/jack-dorsey-quits-bluesky-board-urges-users-stay-elon-musk-x-twitter

Earlier on Saturday, he unfollowed all but three accounts on X: Edward Snowden, Stella Assange, the wife of the WikiLeaks founder Julian, and Musk.

“Don’t depend on corporations to grant you rights,” Dorsey tweeted. “Defend them yourself using freedom technology. (you’re on one).”

Despite his promotion of alternatives to the site he founded, Dorsey has publicly shared his admiration for Musk. In 2022, he called the multibillionaire the “singular solution I trust” for the future of Twitter, though a year later he criticised Musk for his “fairly reckless” moves after taking control of the site.


This comes a few days after Jack Dorsey confirmed that he had left the board of Bluesky and then starting to use Tw(X)tter and calling Tw(X)tter “freedom technology”. Coincidence ?


The moment your VPN app starts it will change gateway and name servers for your host. If the virtual NIC of your VM is bridged with your host I would expect it to work fine for the VM. Is this with KVM or Qemu or VirtualBox or something else ? How is networking configured ?


Proton is the only one I know of who takes mailed cash.

Proton accepts payments via postal mail you mean ? Posteo and mailbox.org do that.



Apparently it’s (by default) everything that doesn’t explicitly specify a license (especially a FOSS one) within the javascript code of the page, which is a ridiculously huge portion of JS on the internet.

It is never to late to start something and make people aware of problems and as far as I am concerned not only about software licenses but JavaScript as a security problem.


Disroot stopped using RainLoop long time ago when people became aware of a security bug in RainLoop and the fact that the RainLoop project appeared to be dormant. I think Disroot switched to SnappyMail, and then to Roundcube.


Long time ago Riseup, focused on activists, required two invite codes, probably to avoid abuse. They’ve relaxed it with asking for only one invite code. You should imho not be asking for invite codes on the Internet but ask your activist friends or read this : https://support.riseup.net/en/knowledgebase/1-accounts/docs/13-how-do-i-get-an-account



um I don’t use a vpn. Please tell me why I should use a VPN.

It is up to you to use a VPN or not. Some people use a VPN to watch regular TV series which are blocked in their own country. Some people, like myself, despise the ad- and tracking- exploitation industry, other people may want to download e-books from anna’s archive or simply do not trust their ISP. Other people live in countries where their government is very oppressive and intends to arrest and torture any critical voices.

I have nothing to hide.

Reminds me of : “Arguing that you don’t care about the right to privacy because you have nothing to hide is no different than saying you don’t care about free speech because you have nothing to say.”

Recommended viewing : https://piped.video/results?search_query=Shoshana+Zuboff


That reminds me : Last time I tried Garuda Linux it came with a local Whoogle instance.




> Large part of USA citizens may have had their private medical > data stolen :( UnitedHealth says files with personal information that could cover a “substantial portion of people in America” may have been taken in the cyberattack earlier this year on its Change Healthcare business. The company said Monday after markets closed that it sees no signs that doctor charts or full medical histories were released after the attack. But it may take several months of analysis before UnitedHealth can identify and notify people who were affected. UnitedHealth did say that some screen shots containing protected health information or personally identifiable information were posted for about a week online on the dark web, which standard browsers can’t access. The company is still monitoring the internet and dark web and said there has been no addition file publication. It has started a website to answer questions and a call center. But the company said it won’t be able to offer specifics on the impact to individual data. The company also is offering free credit monitoring and identity theft protection for people affected by the attack. UnitedHealth bought Change Healthcare in a roughly $8 billion deal that closed in 2022 after surviving a challenge from federal regulators. The U.S. Department of Justice had sued earlier that year to block the deal, arguing that it would hurt competition by putting too much information about health care claims in the hands of one company. UnitedHealth said in February that a ransomware group had gained access to some of the systems of its Change Healthcare business, which provides technology used to submit and process insurance claims. The attack disrupted payment and claims processing around the country, stressing doctor’s offices and health care systems. Federal civil rights investigators are already looking into whether protected health information was exposed in the attack. UnitedHealth said Monday that it was still restoring services disrupted by the attack. It has been focused first on restoring those that affect patient access to care or medication. The company said both pharmacy services and medical claims were back to near normal levels. It said payment process was back to about 86% of pre-attack levels. UnitedHealth said last week when it reported first-quarter results that the company has provided more than $6 billion in advance funding and interest-free loans to health care providers affected by the attack. UnitedHealth took an $872 million hit from from the cyberattack in the first quarter, and company officials said that could grow beyond $1.5 billion for the year. Minnetonka, Minnesota-based UnitedHealth Group Inc. runs one of the nation’s largest health insurers. It also runs one of the nation’s largest pharmacy benefits management businesses, provides care and offers technology services. Company slipped nearly $3 to $488.36 in midday trading Tuesday while broader indexes climbed.
fedilink


It was at the Securedrop website. How did I end up there ? I read something about Sequoia and encryption and then wanted to see what Securedrop entailed. Meanwhile I've raised the security settings. Still, today someone in this community (?) mentioned that Tor browser does not protect the remote to check for the OS, and now this. Color me surprised.
fedilink


When will Proton Mail be in F-Droid ?
EDIT : Option to vote for Official F-droid Repository https://protonmail.uservoice.com/forums/945460-general-ideas/suggestions/47173612-official-f-droid-repository
fedilink


Proposed FTC Order will Prohibit Telehealth Firm Cerebral from Using or Disclosing Sensitive Data fo
Under the proposed order, filed by the Department of Justice upon notification and referral from the FTC, Cerebral will also be required to pay more than $7 million over charges that it disclosed consumers’ sensitive personal health information and other sensitive data to third parties for advertising purposes and failed to honor its easy cancellation promises.
fedilink

![](https://lemmy.ml/pictrs/image/51faa0ca-2b47-4eba-bc8c-d9edabba5ca9.png)
fedilink



Alcohol Addiction Treatment Firm will be Banned from Disclosing Health Data for Advertising to Settl
According to the complaint, the company contradicted its privacy promises. From 2020-2022, the company allegedly disclosed users’ personal information, including their health information, to numerous third-party advertising platforms via tracking technologies, known as pixels and application programming interfaces (APIs), which Monument integrated into its website. Monument used the information to target ads for its services to both current users who subscribe to the lowest cost memberships and to target new consumers, according to the complaint. Monument used these pixels and APIs to track “standard” and “custom events,” meaning instances in which consumers interacted with Monument’s website. The FTC says that Monument gave the custom events descriptive titles that revealed details about its users such as “Paid: Weekly Therapy” or “Paid: Med Management,” when a user signed up for a service. Monument disclosed this custom events information to advertising platforms along with users’ email addresses, IP addresses, and other identifiers, which enabled third parties to identify the users and associate the custom events with specific individuals, according to the complaint.
fedilink

Why I Lost Faith in Kagi
https://hackers.town/@lori/112255132348604770
fedilink



Fan of Libredirect browser add-on here. This one looks useful. https://github.com/libredirect/frontends_manager By the way, My favorite Teddit instance was taken down by its owner, claiming that Teddit is no longer maintained and Reddit was rate limiting the instance. Now [Redlib](https://github.com/redlib-org/redlib) recommended. Very few instances but it works fine for me.
fedilink

Nitter is over - It’s been a fun ride
cross-posted from: https://lemmy.ml/post/11962108 > What to do now? > > Don't trust corporations, especially those where one egomaniac has all the power. Use open-source and community driven solutions if you can (like Mastodon).
fedilink

cross-posted from: https://lemmy.world/post/11797575 > Walmart, Delta, Chevron and Starbucks are using AI to monitor employee messages::Aware uses AI to analyze companies' employee messages across Slack, Microsoft Teams, Zoom and other communications services.
fedilink

Best privacy friendly, reliable and affordable domain name extension ?
Question after reading this new article : https://www.dutchnews.nl/2024/01/criticism-as-dutch-domain-registry-plans-move-to-amazon-cloud/ My current preferences : - Not more expensive than two euros a month - Whois information cloaking - Not profiting from some Pacific Island money deal - Privacy friendly Edit : Found a spreadsheet by EFF from 2017 which gives some insights : https://www.eff.org/wp/which-internet-registries-offer-best-protection-domain-owners
fedilink


Beginning in the second half of the 1970s, the world witnessed the birth and affirmation of so-called Big Tech – the five largest companies that operate in the field of information technology, which are also known today as “GAFAM” (Google, Apple, Facebook, Amazon, and Microsoft). In the roughly 50 years since then, these companies have been able to build empires of intellectual property of technologies and systems – primarily through acquisitions of other companies both small and large, which allowed them to center technological innovations within their walls. “The GAFAM Empire”, a project developed by DensityDesign Lab and Tactical Tech, collects the information of more than 1,000 acquisitions made by these companies, in order to look back on the history of the industry through the limited data publicly available on the web. The information visualizes a landscape of acquisitions to identify common interests, which are then broken down into a deep analysis of GAFAM’s history. The project visualizes the data in different shapes and through different focuses, allowing the reader to understand a complex system of relationships that is constantly evolving and that is redefining the concepts of competition and monopoly.
fedilink