this post was submitted on 17 Nov 2023
3 points (100.0% liked)

the_dunk_tank

15897 readers
1 users here now

It's the dunk tank.

This is where you come to post big-brained hot takes by chuds, libs, or even fellow leftists, and tear them to itty-bitty pieces with precision dunkstrikes.

Rule 1: All posts must include links to the subject matter, and no identifying information should be redacted.

Rule 2: If your source is a reactionary website, please use archive.is instead of linking directly.

Rule 3: No sectarianism.

Rule 4: TERF/SWERFs Not Welcome

Rule 5: No ableism of any kind (that includes stuff like libt*rd)

Rule 6: Do not post fellow hexbears.

Rule 7: Do not individually target other instances' admins or moderators.

Rule 8: The subject of a post cannot be low hanging fruit, that is comments/posts made by a private person that have low amount of upvotes/likes/views. Comments/Posts made on other instances that are accessible from hexbear are an exception to this. Posts that do not meet this requirement can be posted to !shitreactionariessay@lemmygrad.ml

Rule 9: if you post ironic rage bait im going to make a personal visit to your house to make sure you never make this mistake again

founded 4 years ago
MODERATORS
 

The privacy sub may be even more paranoid than the stim subs.

This haunts them in their sleep:

programming-communism

all 23 comments
sorted by: hot top controversial new old
[–] jaeme@hexbear.net 2 points 2 years ago (2 children)

Privacy sub... Iphone

What a lack of computer literacy and libre software thought does to a mf.

[–] LaGG_3@hexbear.net 1 points 2 years ago

us-foreign-policy but for the companies that can access your information

[–] edge@hexbear.net 0 points 2 years ago (2 children)

As if Android is any better?

[–] umbrella@lemmy.ml 0 points 2 years ago (1 children)

It is leagues ahead if you are literate enough to wipe off the original firmware and get your own in it.

[–] edge@hexbear.net 0 points 2 years ago (1 children)

I want a phone, not a second job.

[–] umbrella@lemmy.ml 0 points 2 years ago

Its fine if you are not literate to install a custom ROM. Use the defaults.

I have mine modified, no need for a second job, just 30 minutes of research once.

[–] jaeme@hexbear.net 0 points 2 years ago (2 children)

Android is leagues ahead of Apple, first of all, the core of Android is libre, anyone is able to take Android and create their own mobile operating system around it (with various amounts of success). Of course, this leads to OEMs who create bastardized nonfree operating systems with privacy holes, but it also leads to things like Vanilla Android, GrapheneOS, CalyxOS, /e/ etc.

There are also GNU/Linux phones like UBports, GNOME/KDE mobile shell, so it's not a binary decision.

Android is not without its flaws (like Google play services and closed down hardware), but to say it's not better than Apple is misleading. Countries choose Android, only America pushes their Apple sludge.

[–] ChaosMaterialist@hexbear.net 0 points 2 years ago (1 children)

Every cell phone, even dumb phones, can track you with a warrant or Stingray. Rather than picking which is better, understand that every single cellphone is snitching on you and act accordingly.

[–] YearOfTheCommieDesktop@hexbear.net 1 points 2 years ago* (last edited 2 years ago) (1 children)

To be clear, it is possible to defend yourself, but ofc no defense is perfect. For illegal activities that might attract federal attention? best to avoid them at all costs. But for general privacy in your day to day life that isn't practical for most people, and "every cellphone is snitching on you" is way too reductive, even if it's true in a sense.

For example the person you are replying to mentions Linux phones, many of which publish schematics and make hardware kill switches for the discrete modem a big selling point. That still isn't perfect protection, but it would protect you from a stingray... and if you have a thought out threat model, you can make the choice whether or not that device is appropriate for your situation.

[–] ChaosMaterialist@hexbear.net 0 points 2 years ago (1 children)

Let me be clear first: If you want to get rid of advertising, then yes your advise is OK. If you want to defend against the Surveillance system, it's not close to adequate. This is the fundamental gap I'm trying to address.

I understand where your heart is at, but you are making a mistake. Free/Libre software is about Freedom, and from that guarantee we can build other guarantees about security and privacy. However Freedom itself does not guarantee security nor privacy. Freedom is also the freedom to shoot yourself in the foot.

To be clear, it is possible to defend yourself, but ofc no defense is perfect.

There is a perfect defense: Don't use technology. Much of this advise is trying to use technology to fight technology. It's a rabbit hole that has no bottom, and the best defense is to not play. The problem is attack surface. Technology is incredibly complex and is chattier than your extroverted :LIB: friend at brunch, and boy howdy kitty-cri-texas do people love to listen! You can reduce this attack surface, but it never goes away as long as you are using technology.

But for general privacy in your day to day life that isn't practical, and "every cellphone is snitching on you" is way too reductive, even if it's true in a sense.

Here's the trail crumbs you might make on the Web as you browse each and every website:

  1. DNS request - sends URL domain/hostname (www.hexbear.net, for example), collects IP and timestamp. Your ISP is often the default DNS, so they are collecting this information. Google (8.8.8.8) and Cloudflare (1.1.1.1) as well.
  2. 1st party HTTP(S) request - Encrypts body but sends URL domain/hostname in the clear across the network, collects IP and timestamp.
  3. 3rd party request - Usually advertising, but also could be security (Sign In With Google, Okta, etc), collects IP and timestamp
  4. 3rd party cookies - Sent and updated with every request to that domain (Amazon cookie to Amazon.com, FB cookie to Facebook.com, etc), collects IP and timestamp
  5. 1st party advertising - Think Amazon's "Customers also bought...", has full access to your request, collects IP and timestamp and User-Agent.
  6. Logs - Usage data about what you do on the website, both front-end and back-end, collects IP and timestamp
  7. Telemetry - Usage data about what you do with your app, collects IP and timestamp

You can use custom software for #3 and #4 on the device (most of the advise here), but do you block google.com? You can use a network DNS blocker (e.g. Pi-Hole) for #1, #3, #4, and some of #7, but that only works on networks you control. VPNs advertise as solving #2, but that's pure ideology; it only moves where the routing traffic goes and still can log information in transit.

This also ignores data brokers who buy all of this information and compile it together.

And this is just the advertising/surveillance defense against tech companies. I haven't even touched cop or fedposting defense.

[–] robot_dog_with_gun@hexbear.net 0 points 2 years ago

if your threat is state-level actors your computer security is approximately moot and maybe you should spend your money on laywers and having a discreet way out of the country

[–] xXthrowawayXx@hexbear.net 0 points 2 years ago (1 children)

I know your hearts in the right place about this, but android is not better than iOS for privacy.

The only way android can be made decently privacy respecting is through graphene and that requires a very small subset of the ocean of android devices and requires that you give up almost everything that makes a smartphone useful.

The solution to privacy isn’t graphene or android, it’s not using a smartphone at all.

[–] combat_brandonism@hexbear.net 1 points 2 years ago (1 children)

and requires that you give up almost everything that makes a smartphone useful

that's hyperbolic, I use graphene and rarely use the profile I've got their play services shim enabled in. the only thing I have found myself entirely unable to use so far is google pay for event tickets that require it, which isn't often.

[–] kzhe@lemm.ee 1 points 2 years ago

iPhone? Reddit? Where the hell is your GrapheneOS Pixel?

[–] GladimirLenin@hexbear.net 0 points 2 years ago

This guy just got tricked into downloading a communism and you're laughing?

[–] davel@hexbear.net 0 points 2 years ago* (last edited 2 years ago)

It’s like Snowden & Assange taught these people nothing.

All the new media literacy pedagogy should be thrown out and replaced with Michael Parenti’s Inventing Reality and Make-Believe Media.

[–] cresspacito@hexbear.net 0 points 2 years ago (1 children)

Obviously most apps are stealing your data but people's reactions to Temu are literally insane. They have a thing where they'll literally paypal you £20-£40 to refer other users, I was 1 referral away and 2 friends wouldn't download it because it's Chinese. Another two friends said that people they know had money stolen by it... like, legality and possibility aside yes, I'm sure Pinduoduo, one of the BIGGEST COMPANIES IN THE WORLD needs to steal your last tenner

[–] Omniraptor@hexbear.net 1 points 2 years ago* (last edited 2 years ago)

why would one of the BIGGEST COMPANIES IN THE WORLD need

You can say the exact same thing about PayPal which is known to 'misplace' people's money and make it extremely difficult to get back. I don't see how any other fintech company would be different.

[–] LaGG_3@hexbear.net 0 points 2 years ago (1 children)

Is there an iPhone equivalent of deleting System32 because that's clearly the answer to this question.

If anyone is that worried about data privacy, they shouldn't have a smartphone lol.

[–] ArsenLupin@hexbear.net 0 points 2 years ago (1 children)

I think that attitude is frankly toxic. It's the digital equivalent of "if you don't like America, you can move to Afghanistan!".

[–] oregoncom@hexbear.net 1 points 2 years ago

The real toxic attitude is simply expecting everyone to have a smartphone. Stop trying to make me install an app or scan a QR code for everything. I've gone without using a smartphone for months at a time and I was fine. Pre-covid there were usually a couple times where some event or restaurant or work thing required some unnecessary app, but since covid I think people have gotten sick of this type of stuff and it's not as common. Worse case scenario just get a burner phone for when you're forced to use a smartphone.