• 0 Posts
  • 44 Comments
Joined 9M ago
cake
Cake day: Aug 04, 2023

help-circle
rss

Do you never join photos when in social gatherings and someone takes a group picture with their phone?


You don’t need to give away very specific personal information on your resume. It just needs to list your work experience, skills, and certifications. That’s it. You don’t even need to put your education if you’re not a fresh graduate. The most personal info you’ll need to include is your name and maybe your general area of residence (i.e. city and state).


it feels like I’m just giving my data to them

Same, OP. I wish there’s a way to just give your name and have them delete everything they have on that, instead of possibly giving them even more information than what they had just to request to opt out.


Adguard and Mullvad DNS.


It’s ridiculous how something that is supposed to be very confidential and kept private is asked everywhere you need services.


The most impactful are probably browser (Firefox), adblocker (uBlock Origin), DNS over https (Mullvad), and password manager (Bitwarden), because these are used every single day.



I filed a Do Not Sell My Information request with my car’s manufacturer. I hope that helps even just a bit.


Thanks for the summary. To respond to OP, no I don’t think this is the best explanation. The people who usually say they don’t care about privacy because they have nothing to hide are people who don’t care about surveillance either, so that doesn’t exactly change their minds.

The best way to make them understand is to provide examples that may affect them directly. And I’m not talking about the “show me your phone” or “leave your bathroom door open” response, because that’s not a good example of mass surveillance that we are trying to explain to them. It’s hard to find the best comparison, but one example is home cameras and baby monitors. Those things are so insecure that anyone can access them over the internet. So we ask them, are you fine that any rando on the internet can tap your living room camera and watch you even though you’re just watching tv and not really doing anything private?


Were both of you connected to the same network at the time you had the conversation? It’s possible your coworker had a lot of search/browsing history of what you were talking about and whoever is pushing the ads figured out you’re likely related to them by way of location/vicinity. I don’t think android is actively listening to your every conversation.


I just got that from the website itself, unless I’m misreading it:

image


It says they use Bing behind the scenes and deliver search ads from Bing as well.


They’re probably riding on one of the big telcos’ towers right? I wonder how they’ll keep that private. The site doesn’t load properly for me and I can’t see any more info other than the plans.


Unless you can get the majority of your customer base on decentralized social media platforms, you’ll have to live with having to maintain a presence on both sides. Now if you’re asking how to run your business more securely on centralized platforms, general advice would be:

  • Use a separate account to manage your business page. Don’t use your personal account or email.
  • Logon to your business account on a desktop browser with uBO in a container tab. Know that you will be limited on some features (i.e. no reels/shorts on desktop).

Does your vpn provider have dns blocking features? They might have adblocking capabilities.


You’re correct in that you shouldn’t mess with the DNS settings when on the vpn. Off vpn, I have had good experiences with Control D ans Aha Blitz on browsers and mobile, with the latter allowing you to actually select the granular filter lists yourself. I recently switched to Mullvad’s DoH though and it’s been good so far


I donate to Signal from time to time.


It’s not black or white, so don’t worry about trying to do everything on your own at once. Just taking steps to enhancing your privacy like you’re doing now asking questions is already a step in the right direction. If you’re not confident in hosting locally for now, you can try one of the providers NextCloud recommends. Sure it’s not as good has hosting your own, but it’s a big step away from using OneDrive or Google Drive.


It’s easier on reddit because you can make throwaway accounts without an email. Most lemmy instances require email verification so there’s more effort needed to create accounts. I assume a lot of users here prefer to just not share personally identifiable information, or at least use 2 or 3 “permanent” accounts to separate anonymity, personal stuff, and nsfw.


7zip for quick encryption of individual files. Veracrypt for portability of a large number of files.


Everything else can either be replaced, or is on my own infrastructure.

I’m curious, do you have accounts on other social media? Also, do you have any accounts on sites like shopping, government sites, etc.? And if you do, do you intentionally not use MFA (if it’s available) because you believe it should be those services making sure you are secure instead of you taking steps to make it harder to compromise your accounts?

Have you looked at it from this angle?: MFA is one of the steps that service providers are doing to be responsible with securing your account.

Security is a never ending game of cat and mouse, and the malicious actors are always a step ahead. There’s no such thing as being 100% secure, so both sides have to take steps to secure a transaction. If you believe security is 100% the burden of the provider, then we shouldn’t be using passwords and password managers in the first place, because the burden of having to maintain, secure, and memorize passwords shouldn’t be on the consumer. That’s great in theory, but not possible in practice, at least in the present.

It’s kinda weird that you like to have your own agency on things (i.e. own infrastructure) yet the minute you need to use a third party service, you let go and put everything on the service, KNOWING they are not doing a good job with it.


Cool! This looks great. Thanks for the suggestion!


I have the same question but for IOS. I know the Notes app can scan documents, but I also use Genius Scan just because it has more features and it produces better quality scans. I read through their privacy policy and it seems safe (everything local) as long as you don’t subscribe to their cloud features.



I now go with “Never trust, always verify”, which is the tagline for zero trust in infosec.


As with most things privacy related, it depends on your threat model. A journalist may be scrutinized more than a regular tourist. If you’re going for business that involves trade secrets, you’ll also need to be extra careful with your data.

For China, yes it’s good advice to be a little paranoid with privacy. Just get a vpn before traveling and keep it on at all times. Don’t connect your phone to random usb ports like in your hotel room. Be aware of what wifi spots you connect to and try to limit personal activity online (i.e. logging on to banking, social media, etc.) unless necessary. Only bring in data that you need (i.e. don’t take an external drive of photos that you don’t need). Reset all passwords of the accounts you logged in to when you get back.

SK is fine for a regular tourist. Just take general precautions and you should be fine. Again, it depends on your threat model.


ControlD with AdGuard as backup. Might have to try Mullvad’s as well. Then AhaDNS Blitz on my phone.


Oh I didn’t know that. Thanks for correcting me, I’ll update my comment.


Somewhat, because you’re proxying your searches through ddg, just like with startpage.

Edit: Apparently I’m mistaken, you are accessing google directly with DDG, unlike with startpage where your query goes through them first. I’m a startpage user so I wasn’t really aware of how DDG does their bangs.


Does lemmy signup use reCAPTCHA? Because I’m starting to think I’m a robot when trying to sign up new accounts. lol. I’ve never had such a hard time getting it right on the first time. Or maybe my eyesight is just getting bad.


Sure. But as I said, those sms messages are just “hey, wanna go to x next weekend?” types of communication. Yeah it’s giving out your potential location at a given time, but my risk profile is not at the level where I have to hide my location from someone who is interested enough to intercept my text messages to find out my location.


All the new people I’ve met since moving have only been in contact with me via sms. The only exception was when I was forced to install whatsapp to join a group chat to schedule casual basketball games. Then again I’m an older millennial and the people I meet often enough to exchange numbers with aren’t into social media that much either, so no friend requests and adding each other on social media. Just plain old sms if people want to meet up.


Assuming you’re on Windows and want something other than Defender, you can try Malwarebytes. For encryption, you can use Veracrypt.


Getting a base model can somewhat help too. My 2020 car only has carplay. No built in navigation or any remote or homing tech (that I know of). It’s the higher trims that get all the fancy tech “features”.


What was 4chan’s issue with the name?


Great writeup! I like how you broke down the privacy policy piece by piece. Good luck on future articles!


Stubhub, Seatgeek, etc. tack on their own fees as well. There’s really no escape especially for large venues (arenas, stadiums) where they have a monopoly on ticket selling. Thankfully the 2 local small venues in my city where most of the acts I follow go to still use a different ticketing vendor and you can also still buy at the box office.


I third(?) this. Security and IT teams are too busy to be monitoring your everyday habits. Sure, they can see your history if they wanted to, but they won’t unless there is an appropriate justification to do so, and it’s usually triggered by an incident or HR. There also stricit rules with doing so because employees still have the right to their own privacy. It’s not like HR can just go over to the security guy and ask them to pull someone’s browsing history.


While browser containers won’t work since you’re using the same IP anyway, blocking the trackers themselves would be more effective. DNS blocking, uBlock, and Privacy Badger can help block fb trackers on websites. So fb knows your ip, but at least they can’t track you across other sites.