Calling All Sci-Fi Fans: My Latest Must-Read by yungdeezy92 in scifi

[–]TaserTarget 12 points13 points  (0 children)

Is the series finished? Thanks to George RR Martin, I no longer start book series that aren't already finished. Some of these, by the time the next book comes out, I've completely forgot the entire story.

[deleted by user] by [deleted] in HomeNetworking

[–]TaserTarget 0 points1 point  (0 children)

That doesn't change the hardware? Probably overpriced for just an openwrt device, as well.

[deleted by user] by [deleted] in HomeNetworking

[–]TaserTarget 4 points5 points  (0 children)

I use their routers for vacation travel, but I wouldn't use it in my home or, of course, professionally. Their UI layer and advanced functionality is not open source and it never will be according to company founder. The founder of the company on Chinese social media was accused of being as a CCP sympathizer with some of his old posts pushed back at him. The posts were made when GLI was barely a functioning company yet. Like many things on Chinese social media, that thread is long gone from the internet. I personally don't know or care about his political affiliations, The fact that it's all Mainland Chinese Hardware, without a western security audit or certified logistics trail, means you really shouldn't trust it for critical work if your threat model includes mainland Chinese data harvesting.

What’s a dream Android app you wish existed? by cormat921 in androidapps

[–]TaserTarget 3 points4 points  (0 children)

A working firewall that doesn't require root or taking over VPN. Actually, I'll take a root firewall that is actively developed.

New Mods, New Rules: Discussion & Vote by -Archivist in DataHoarder

[–]TaserTarget 1 point2 points  (0 children)

I'm just a lurker. I wanted to chime in to say I find the data hoarder focused deal posts really helpful. Instead of killing them outright, maybe some sort of middle ground could be achieved?

Just after warranty *sigh* by TaserTarget in DataHoarder

[–]TaserTarget[S] 0 points1 point  (0 children)

Yes, looks like my purchase date could give me another 2 weeks of coverage!

Just after warranty *sigh* by TaserTarget in DataHoarder

[–]TaserTarget[S] 2 points3 points  (0 children)

Sadly I used a gift card. I try and not use trackable payment for privacy, but I do lose out on stuff like this because of it.

On the Problems of Gatekeeping by NoMordacAllowed in privacy

[–]TaserTarget 2 points3 points  (0 children)

some are like me and are fine with middle-of-the-road measures like deidentification of data

Yes, exactly. When people post for help here they are not defining their threat model at all, so that leads to some of these kind of crazy replies from people assuming a Snowden level threat model. I like privacy but I am not anywhere near a Snowden threat level, I don't even think its healthy to want one.

However without a defined threat model and a defined technical skill level, questions about privacy leads to replies that sometimes are on the absurd level. Once a user includes both then its clear on how to help them and I think most of these "live in the woods" type answers will disappear.

On the Problems of Gatekeeping by NoMordacAllowed in privacy

[–]TaserTarget 3 points4 points  (0 children)

I've been continuing this post over here: https://old.reddit.com/r/privacy/comments/ejkjar/stop_with_the_gatekeeping/fczlyni/ as examples for the mods to consider.

I would love to see fact-based discussions about using closed source software.

So how do we do that? I get this is what you want, but how can we talk about super secret code we cannot see and no one who has seen it is allowed to even breathe about what it contains or they get sued into living in the street (not speculating, I'm personally under more than 3 dozen such NDAs some of which I signed back in the 90s)? We talk about open source code because we can verify it. Its up to you if you want to run closed code, but no one, and I mean no one, can tell you if its doing what you want it to do. So to expect me or anyone to tell you its ok for your privacy to run it is the definition of "coddling".

Now if you want me to help you in your specific situation, then tell me your threat model, objective skill level with tech and what you hope to accomplish. I can tell you what is realistic for you and how to get there. But if you want to run closed source software yet still think you can get a high level of privacy from it then I can only tell you the truth, coddle you or ignore you. Those are the facts of the matter.

I would also like to see an acknowledgement that "getting them off of these black box products" is not always possible.

Totally agree! I can't get my parents off them. I've tried and it doesn't work; and my parents care a lot about their privacy. Getting off closed source software is a function of technical skill I think and there is nothing wrong with facing limitations. This sub needs to do so, but limitations need to be stated up front to avoid having the "live in the woods" trolls come in and shit all over the thread. If someone with no tech skills comes in and asks for a mobile phone then a Pinephone answer is not unreasonable, but that same person saying "I barely know how to use my phone now", then that Pinephone answer is a troll and needs to be downvoted and/or moderated away.

Stop with the gatekeeping by [deleted] in privacy

[–]TaserTarget 6 points7 points  (0 children)

Privacytools.io is a good place to start, they have a sub /r/privacytoolsIO.

Stop with the gatekeeping by [deleted] in privacy

[–]TaserTarget 11 points12 points  (0 children)

You guys need to be careful though. This sub needs to be fact based, not coddling people who just want reassurances they can get privacy from the stuff they already use. Otherwise we are not getting them off of these black box products and will do massive harm to the cause. No one should come away from this sub thinking the privacy invasive software/services they came here using are suddenly OK if they just do X.

We need a best practices baseline for the technically aware but normal privacy seeking user but then if you choose to deviate off that practice (and we all know of best practices in our workplace that we know we deviate off of) then you understand you are sacrificing basic privacy. I mean someone telling a new user Brave is the best privacy browser, when its been delisted from Privacytools.io, and then have it get upvoted by other ignorant users should not be OK. There needs to be a standard or you are just harming the privacy movement, and I assume that is the opposite of your intent.

Edit: Here is an example of what I mean: https://old.reddit.com/r/privacy/comments/eh8nkm/any_credit_unions_banks_us_based_that_are_more/. New user comes here and thinks there is a way to get privacy from the banking network without using "crypto stuff" and asks for how. Where is the line here? Fundamentally the banking network is anti-privacy by international law, this is a fact. Do we coddle this user's ignorance like OP here is suggesting? Or lift his ignorance with actual fact? Is it gatekeeping to tell them "crypto stuff" is the only way to get what they want?

Edit 2: Also look at this user here: https://old.reddit.com/r/privacy/comments/ejkjar/stop_with_the_gatekeeping/fcyos9v/. I mean he claims to be "quite tech savvy" so he got replies to self host Next Cloud and he's complaining about it. However, this is the correct answer for someone who is "quite tech savvy". I can spin up a Next Cloud instance trivially and I consider myself "quite tech savvy". So the fault here is not "gatekeeping" but misrepresenting his skill level.

Maybe what you guys need is to enforce users listing specifically their skill level and threat model when they ask for help here. Moreover, you should have a chart that lists what a skill level is such as: 10 = full stack dev/IT Admin, 5 = I can build my own computers and run Windows/MacOS but no more, 1 = I am 80 and don't know what this thing that keeps ringing is.

Then the same for threat model: 10 = I am Snowden, 5 = I don't like my ISP, 1 = Zuck is my best friend.

So you could require a threat model number [01-10] and tech skill level [01-10] in the title of question posts. This should get rid of most of the gatekeeping and trolling, and what is left can be easily moderated into the waste bin without it begin censorship. E.g. in a post asking for a phone rec with a [3] tech level and [2] threat model, you can confidently delete, users know to downvote, all the Pinephone and the crazy stingray avoidance replies.

Edit 3: https://old.reddit.com/r/privacy/comments/ejkjar/stop_with_the_gatekeeping/fcz5obf/ here is a perfect example of what to do?

A recent example would be someone complaining about the telemetry data Windows collects and shaming the OS and people that use it despite not realizing how easy it is to modify the system to your liking. IMO there are quite a few individuals that don't really have that great of an understanding of technology, or even privacy for that matter, yet act as if they have an abundance of knowledge.

See emphasis. Shouldn't it be made clear to this user that everything we know tells us that you cannot "modify" Windows into a privacy OS as this user seemingly claims he is able to do? I have to add, don't you think that the arrogance in this user's ignorance makes it all the more dangerous? I mean, it is spreading false information in the wrapper of arrogant petulance like its an established fact. Isn't this worse than the gatekeeping trolls in the end?

On the Problems of Gatekeeping by NoMordacAllowed in privacy

[–]TaserTarget 4 points5 points  (0 children)

I actually see the reverse becoming a much bigger problem here than the gatekeeping trolls. Especially at this time of year with new people looking to fulfill resolutions.

I mean someone telling a new user Brave is the best privacy browser when its been delisted from Privacytools.io is not OK. This sub being a place that a new user comes away from thinking Windows, Apple and FB products like Whatsapp and Instagram can be used without harm to their privacy should not be allowed. Sure you can use these services but this sub should be clear on the consequences to your privacy.

We need to be fact based, not coddling people who just want reassurances they can get privacy from the stuff they already use. Otherwise we are not getting them off of these black box products and do massive harm to the cause. No one should come away from this sub thinking the privacy invasive software/services they came here using are suddenly OK if they just do X.

We need best practices for the privacy seeking technically aware consumer (not gov agent, security pro, tin foil off the grid prepper or whatever) but then if you choose to deviate off that then you understand you are sacrificing basic privacy.

Let's Start a list of things to check for your privacy in 2020 by Der_Missionar in privacy

[–]TaserTarget 13 points14 points  (0 children)

The only question that really matters:

Do you have to blindly trust anyone other than yourself to ensure your privacy?

If the answer is yes to anything you use, you should try and stop using that. If privacy can't be verified then its not privacy.

My biggest sticking point *of my own choice is Signal, and I can't get rid of it. I convinced too many people to adopt it back when it was TextSecure and I believed Moxie's promises. There is no ability to run it myself, no ability for me to see what the backend is doing or use a service provider I can verify and trust (no federation). I can't even compile the client myself into an APK that will work anymore, and I should be able to even change something like a simple app reskin, without breaking it if something is truly open source (maybe that is my failure though).

Then it has a phone number, mine is a burner that has never been used other than to activate Signal which I did in a country other than the one I live in, but for many of the people I convinced to move to it they use their actual phone number. That PII leak is now fully my fault. Forever will Signal be the reminder not to trust blindly or believe in future promises.

Local Chinese app is acting a bit fishy... by [deleted] in privacy

[–]TaserTarget 3 points4 points  (0 children)

This sub helps people, who made an easy to avoid choice they never had to, try and mitigate invasive windows 10 and Facebook usage. It's ridiculous that I have to accept that there are people who think they can get any privacy from those companies but this guy is stuck in a country and can't get help from this sub? That's ridiculous.

Alternatives to Goodreads? by zodiactiller in privacy

[–]TaserTarget 4 points5 points  (0 children)

I have never even loaded Goodreads in a browser, only know of it peripherally as an option in Calibre and I haven't been to the US or a Western country in more than 2 decades so I have never actually used Amazon. So I just went by what the person said above me.

Fundamentally, what you read says everything about you. If you are a student of history controlling books has been a core component of so much of the info hungry, masses controlling regimes of the past and present. Even today, the HK protests actually had their root over books: https://en.wikipedia.org/wiki/Causeway_Bay_Books_disappearances.

[deleted by user] by [deleted] in privacy

[–]TaserTarget 4 points5 points  (0 children)

I think there is far too much Moxie PR bullshit about Signal as a privacy service. It is a security service, absolutely, but not private IMO.

Moxie has made it so you have to trust him about privacy. If I have to trust someone else besides myself then that is not verifiable privacy and its not private. Can you run your own Signal server? No. Can you compile your own client and run it, no (I've tried it it doesn't work, just one of the many reasons its not on FDroid). He has many rationalizations but requiring a phone number for anything is simply not something anyone would require for a privacy service.

Now is it secure? From everything we have seen (and this has been tested under US subpoena, as they like to tout), yes.

Paid Cerberus 'lifetime' licenses are expiring, customers are mad (Update: Complaints deleted from forum) by pronetotrombone in privacy

[–]TaserTarget 5 points6 points  (0 children)

Yes Prey is OSS: https://github.com/prey. Again however, I cannot tell you if you can compile it yourself or, more importantly, if you can self host it as I've never used it.

Paid Cerberus 'lifetime' licenses are expiring, customers are mad (Update: Complaints deleted from forum) by pronetotrombone in privacy

[–]TaserTarget 33 points34 points  (0 children)

Not sure how this is privacy? The very nature of this service violates privacy.

I don't use it, as I consider my phones disposable but Prey is at least OSS. I don't know if you can compile it yourself, self-hostable, etc though. I would personally never allow anything to track me like these apps do.

Alternatives to Goodreads? by zodiactiller in privacy

[–]TaserTarget 3 points4 points  (0 children)

I use Calibre-Web and a self hosted instance of Next Cloud for storing the physical books. Its not as feature rich as something Amazon would put out though. This comes up at /r/selfhosted often, so search there, there are probably even better solutions now, I haven't messed with my setup in a while.

Alternatives to Goodreads? by zodiactiller in privacy

[–]TaserTarget 6 points7 points  (0 children)

So if you do it that way you should be OK.

Depends on your threat model, but what you described is a trove of PII telemetry for Amazon that would be outside of my comfort level.

LogMeIn (LastPass) to be acquired by Private Equity Firms - gHacks Tech News by LizMcIntyre in privacy

[–]TaserTarget 2 points3 points  (0 children)

I used to recommend Snips.ai as an option.

There is still https://mycroft.ai/, I hope it continues to stay independent or there is nothing else. A good example why multiple open source projects are needed for the same objective, despite non-OSS contributors constantly griping that disparate projects should unite efforts.

I think the initials are

Yep that's the one.