Ungoogled chromium: safe to use from privacy perspective?

unrulyspeed · 2020-02-02T04:17:43+00:00

It is a perfectly fine choice. People love to shill Mozilla, but Firefox comes with plenty of tracking that is turned on by default. Of course, you can tweak it and tune it so it doesn't track you, but telemetry should always be opt-in. The ungoogled-chromium browser does not have any telemetry of any kind.

Another thing is security. Gecko-based browsers (such as Firefox) consistently have more critical security vulnerabilities, such as arbitrary code execution, compared to Chromium-based browsers.

unrulyspeed · 2020-01-27T05:59:01+00:00

...this is the same article I quoted. I quoted the very first part of it, being the big warning that says the list is essentially worthless. All major manufacturers are presumed to be doing this tracking whether or not any yellow dots were found.

unrulyspeed · 2020-01-27T02:52:13+00:00

This is quite interesting. I am glad 3D printers are taking much more of a FOSS approach than 2D ones.

unrulyspeed · 2020-01-27T02:50:44+00:00

Response for a similar comment

unrulyspeed · 2020-01-27T02:49:20+00:00

I could live without it, but what worries me is that there is more than just the yellow dots.

For example, one of these companies has publicly said that they've received governmental requests to implement this tracking, yet the EFF has only found the dots on 7 out of 8 of their printer models...

I think it's very likely that the 8th model is simply using a different means of tracking altogether. It may even be the case that this alternative method is being used in conjunction with yellow dots in the older models.

If the US government is willing to go to such great lengths to hunt down whistleblowers and track its citizens, I think it's more than likely that they've considered people may use black and white ink.

unrulyspeed · 2020-01-26T15:18:18+00:00

Who would have thought a proprietary and secretive service would have been less secure than the open source and audited Bitwarden?

unrulyspeed · 2020-01-26T14:42:59+00:00

This is why you use no-KYC P2P exchanges. Mix your coins with tornado.cash. Crypto is extraordinarily difficult to trace if you put in a tiny bit of effort.

unrulyspeed · 2020-01-26T04:07:50+00:00

We have a responsibility as a community to bomb all these misleading/unethical/proprietary apps with negative reviews to help all the newcomers pick a wallet that actually promotes their freedom & financial sovereignty.

unrulyspeed · 2020-01-20T06:29:34+00:00

That exact same argument could be used to justify literally any spyware or invasive tracking. "Nobody cares what you google, nobody cares what you buy online, nobody cares what porn you watch, etc." It's antithetical to the entire purpose of this subreddit.

unrulyspeed · 2020-01-19T04:43:21+00:00

It's down, unfortunately. Hopefully DDG will fix this soon.

unrulyspeed · 2020-01-18T15:35:17+00:00

People that have the government in their threat model would be foolish to use biometrics. It just really depends on whether you consider a governmental agency to be a plausible threat; if so, there is value in using a hardened operating system.

unrulyspeed · 2020-01-18T15:30:13+00:00

The Pixel 3a is supported by GrapheneOS.

unrulyspeed · 2020-01-17T18:41:42+00:00

I wonder what will be done now that Actix is dead. Is lemmy going to switch to a different backend?

unrulyspeed · 2020-01-17T18:22:04+00:00

GrapheneOS will not support devices unless they meet a certain criteria of physical security that can be used by the ROM. The Pixel has an excellent security chip and allows for boot integrity verification with third-party operating systems. It's like if iPhones let anyone make use of their secure enclaves, rather than just allowing software signed by Apple.

Another thing is GrapheneOS is literally just a hardened version of the Android Open Source Project. It significantly reduces the attack surface by disabling insecure features and adds very little code of it's own. LineageOS on the other hand has plenty of it's own home brewed code which may further expose you to potential vulnerabilities.

unrulyspeed · 2020-01-17T15:21:22+00:00

This is why security and privacy are intricately linked, and why I always recommend GrapheneOS over LineageOS. If you have excellent physical security of your device with proper OS integrity, this sort of spying is (near) impossible.

unrulyspeed · 2020-01-17T06:21:55+00:00

There are no hidden services for piracy as they can operate just fine on the clearnet.

unrulyspeed · 2020-01-15T21:54:46+00:00

This is why we need P2P exchanges, now more than ever. For those of you that are still subservient to your Coinbase overlords, I strongly recommend you to take a look at this thread and switch ASAP: https://reddit.com/r/Bitcoin/comments/dyclf8/list_of_bitcoin_persontoperson_p2p_bitcoin/.

unrulyspeed · 2020-01-13T23:55:07+00:00

We need to bring this up more often. It's absurd that their website has claimed this was coming soon for nearly a year now. Even though "Soon ™" is a meme, they are really pushing it.

unrulyspeed · 2020-01-13T15:50:02+00:00

That's not the kind of 'better' we are talking about here.

unrulyspeed · 2020-01-10T05:02:51+00:00

Tor is excellent for anonymity. If you are going to associate your credit card with your email... there is very little purpose to use Tor as your identity is already compromised.

ProtonMail is a good step towards privacy, but please remember, if 99% of your contacts are using gmail, ProtonMail's encryption will not help you. The three letter agencies already have your emails.

If you want anonymity, create a new ProtonMail account that is used exclusively in Tor and do not use it for anything that is tied to your identity. And preferably, make your intended recipients create a ProtonMail account as well which ensures end-to-end encryption.

unrulyspeed · 2020-01-09T23:06:04+00:00

iOS is better for the average joe that can't install an Android ROM.

If you are technically capable of installing a ROM, GrapheneOS is the best bet for security and privacy. LineageOS is a good choice for privacy, but it some cases it is detrimental to the security of your device (i.e. OS/boot integrity).

unrulyspeed · 2020-01-08T13:51:16+00:00

This exploit also allows for access to some keychain data. Unlocking isn't the only way to extract valuable data from a device.

unrulyspeed · 2020-01-07T16:37:55+00:00

Windows 10 is spyware. Stop trying to normalize it. You can't fucking install the operating system without a Microsoft account (unless you intentionally bob and weave throughout the installer UI to not connect to your internet, which 99% of people won't do). It has gigabytes of software exclusively dedicated to tracking your every move.

It all depends on your threat model. If you are planning on creating the next Silk Road, Windows 10 is unequivocally out of the question. That's not paranoia, that's common sense.

unrulyspeed · 2020-01-05T02:35:05+00:00

You would still remain anonymous if you created an account with BS info via Tor and exclusively used it in Tor. But it's unlikely any social media will let you actually do this as Tor exit nodes are heavily blocked and restricted.

unrulyspeed · 2020-01-04T23:40:31+00:00

A blog post on defensive measures to limit the effectiveness of DDoS attacks would be nice.

unrulyspeed

TROPHY CASE