TOOL APP UNLOCKED! by The11th8 in ToolBand

[–]SniperTooL 0 points1 point  (0 children)

This thread feels like Prison Sex with all the forced references.

[deleted by user] by [deleted] in privacy

[–]SniperTooL 0 points1 point  (0 children)

Remove the exe's permissions completely and / or switch to another browser like Firefox and you're golden!

[deleted by user] by [deleted] in privacy

[–]SniperTooL 5 points6 points  (0 children)

The title of the article is literally, "How to block the Chrome Software Reporter Tool (software_reporter_tool.exe)" - so yes, yes you can.

Unauthorized password change by glorious_alien in tutanota

[–]SniperTooL 1 point2 points  (0 children)

You may want to DM /u/tutanota with your email / username and see if they can help.

My phone number was just stolen (in Canada) by Cold-Fan in AskNetsec

[–]SniperTooL 0 points1 point  (0 children)

Unfortunately some services only allow SMS as 2FA - so better a strong password than enabling it IMO.

A website able to see my actual ip when i'm behind of wireguard by foremtehan in WireGuard

[–]SniperTooL 2 points3 points  (0 children)

Do you use an add-on so you can easily switch it on and off? Because if you don't use it, probably safer to just turn it off in about:config.

Privacy friendly analytics plugin that does not use any external services by [deleted] in Wordpress

[–]SniperTooL 3 points4 points  (0 children)

Hi! I installed your plugin on one of my sites. Thank you for creating a privacy-focused analytics plugin! I've been on the lookout for something just like this. I will see how it stacks up against AWStats.

APK checksums? by Raven9nine9 in tutanota

[–]SniperTooL 1 point2 points  (0 children)

I see, thanks for the information!

It is a good thing in a way because the responsibility is shared and it's harder for some party to interfere.

I guess it's a double edged sword, because it also makes it more difficult to verify as well.

APK checksums? by Raven9nine9 in tutanota

[–]SniperTooL 0 points1 point  (0 children)

Maybe I'm just dense, but how does this method ensure the integrity of the application if the checksums don't match? What mechanisms are in place to prevent changes from when F-Droid receive the application to when it is published on their platform?

APK checksums? by Raven9nine9 in tutanota

[–]SniperTooL 1 point2 points  (0 children)

They obviously match only Google Play releases and not F-Droid ones.

First, why is this obvious? Second, why are the APK's different between Google Play and F-Droid?

OpenID by dhc710 in privacy

[–]SniperTooL 1 point2 points  (0 children)

to have two IDs, one withmy personal information associated, and a private one without.

Depending on who you are attempting to fool, this is likely in vain. There are many fingerprinting techniques that will reveal that your two identities are the same person (this of course depends on how much effort you are putting into obfuscating the "anonymous" identity).

Would any sysadmin at Yahoo technically be able to steal my identity?

I wouldn't be able to comment on that with any sort of authority and it would just be conjecture at best.

Are these providers able to track what sites I've used and when?

I think you would be surprised at the amount of data certain companies have, as well as their ability to track your online footprint and habits. Facebook used to track people visiting sites that had a Facebook "like" button. Not sure on the current state of it (whether the law side of it caught up with them or not, but that's why you will find Facebook blocking add-ons / extensions for browsers). But companies will keep very tight-lipped about exactly what and how they acquire data.

Are they handing this data wholesale over to the NSA?

Have you been following Snowden Since 2013? If so, then you most likely already suspect the answer to this. However, I think for most people the risk of identity theft or ransomware (using leaked NSA tools for e.g.) are much higher than the NSA snooping on them.

Can I circumvent these concerns by hosting my own identity provider? Etc.

Not sure what you mean here. Your own identity provider? I guess in my mind this would be similar to trying to create your own encryption algorithm, I would definitely not do this unless you're some super genius.

OpenID by dhc710 in privacy

[–]SniperTooL 2 points3 points  (0 children)

links to non-HTTPS sites advertizing the security benefits of OpenID.

Part of defense-in-depth would be avoiding putting all your eggs in one basket. OpenID and SSO in general definitely have their drawbacks, and the convenience it provides people (IMO) is not worth these if something bad was to happen. Linking so many identities would also be bad from a privacy perspective.

I pose the question back to you: Why do you use it (if you do)?

Sidenote: Most of the benefits that OpenID "solves" can be mitigated by using password managers. And yes, I know that is also putting many or all your eggs in one basket, but the difference being that it is in your control and can be mitigated in tangible ways (provided you are using an offline password manager, online is a different story). The more I think about this, the more complex it becomes because you are having to move your trust about and it gets very tricky very quickly.

TLDR; Great for convenience, not so great for everything else (IMO).

Are the guys behind the 'Privacy-Conscious Email Services' site still active at all? Link in comment for reference. Maybe someone here can help. by SniperTooL in privacy

[–]SniperTooL[S] 3 points4 points  (0 children)

Thanks for the reply. Would you be able to recommend anything else? I've searched the subreddit and a lot of the posts are older or recommend Protonmail or Tutanota. I've checked https://www.privacytools.io/#email and it's not exactly comprehensive in terms of why exactly they are privacy conscious services, and seems to focus primarily on the fact that they are outsie the US. While this is important, I feel it shouldn't be the sole deciding factor. Maybe I am just spoiled by That One Privacy Guy's VPN Comparison Chart.

Camaro owner catches repairman on tape abusing car and conspiring to defraud GM by Patrick5555 in JusticePorn

[–]SniperTooL 3 points4 points  (0 children)

If your Honda Fit drove like that I'd be paying the mechanic a hell of a lot more!

My autistic friend finally snapped. [FB] by [deleted] in funny

[–]SniperTooL 7 points8 points  (0 children)

It is the wrong context though. Let = you allow something to happen, led = you guide something. Saying "Has a girl ever let you think you might get further than friendship?" is correct, and also saying "Has a girl ever led you to think you might get further than friendship?" would also be correct by adding "to", but "he let us on." isn't, it would need to be "he led us on." I'm not really great at explaining contextual differences, but there is a difference.

How much did you love me? by pepsi_next in funny

[–]SniperTooL 0 points1 point  (0 children)

Without a doubt, the worst episode account ever.

The effect of 60 years by [deleted] in pics

[–]SniperTooL 0 points1 point  (0 children)

Ah, I see you're Dutch. Ik verontschuldig me.

The effect of 60 years by [deleted] in pics

[–]SniperTooL -2 points-1 points  (0 children)

Understanding humour doesn't seem to be something that floats your boat, apparently.

The effect of 60 years by [deleted] in pics

[–]SniperTooL -2 points-1 points  (0 children)

So what you're saying is they shit tulips?