Privacy

This magazine is not receiving updates (last activity 0 day(s) ago).

pico , in Introducing Dark Web Monitoring for credential leaks | Proton

Proton revealed information to the FBI without hesitation when they asked. I will not be using proton.

https://www.forbes.com/sites/thomasbrewster/2023/08/08/protonmail-fbi-search-led-to-a-suspect-threatening-a-2020-election-official/?sh=39c25608235c

emzili ,

They can only reveal metadata since they keep everything encrypted, but that was enough to track down this person's Proton recovery email address? That's disconcerting.

Trying to use a commercial privacy service to threaten election officials is definitely some dumb shit though, but I bet they could have avoided that outcome with some better opsec

britishblaze ,

Yeah? Proton have always said they will comply with Swiss authorities for requests for metadata. Good luck finding any email provider that doesn't comply with it's home countries laws.

michael_palmer , in Introducing Dark Web Monitoring for credential leaks | Proton
RestrictedAccount , in Microsoft wants to hide the 'Sign out' button in Windows 11 behind a Microsoft 365 ad

Marketing people achieving the opposite of the desired results

land , in Israel is killing people based on being in the same Whatsapp group
@land@lemmy.ml avatar

Israel aimed to spark a regional conflict to avoid facing genocide allegations. However, Iran didn't buy into their PR tactics.

MigratingtoLemmy , in Smartphones With Popular Qualcomm Chip Secretly Share Private Information With US Chip-Maker

Nitrokey has been in the news before for their sometimes-not-so-technically-correct articles, but they are spot on this time. Qualcomm indeed spies on users using A-GPS as a cover.

However, I was unaware that Nitrokey has a special version of Graphene.

steakmeoutt ,

Yeah no. This article is literally incorrect from its first supposition. They suggest they have “degoogled” the phone then install microG and are surprised to find that it makes the phone ping google. Well duh, how else is microG going to allow access to Google Framework services for apps like YouTube and Gmail?

Calling these clowns researchers is like calling a kid who makes a lego house an architect.

BearOfaTime ,

They stated this, which you conveniently ignored to build your straw man:

Later we found out that this request originates from microG, an open source re-implementation of Google's proprietary core libraries and applications.

And the hardware still communicated with a Qualcomm server, without using Google Services.

This is a known issue and has been documented elsewhere. It still occurs under Lineage without Google Services.

steakmeoutt ,

I’m not conveniently ignoring anything - I read the article. For them to find this out “later” would require that they didn’t understand what the fuck they were doing from the beginning.

BigMikeInAustin ,

My life has gotten better since I started doing everything perfect the first time with full knowledge.

h3ndrik , in Secure Operating Systems (Microkernels seems to be the future)

What's your issue with Linux? The kernel? The userland?

Keep in mind that GrapheneOS is Android which runs a modified Linux kernel, too.

Maybe use one of the other operating systems?

Or less known things like Debian GNU/kFreeBSD or the Hurd kernel? or normal BSD?

Have you tried the more modern hardening approaches to Linux? Containerization / Virtualization?

What's the use-case and threat scenario?

SecuMiKern OP ,

Both Kernel and userland

Android runs a linux kernel yes but is very far from normal linux distros, it almost alleviate all of problems with linux

Hurd kernel's concept seems solid but it doesn't look like actively developed?

OpenBSD might be best choice as you say at least until Genode or something similar become useable

As I mentioned in post Kicksecure plans to harden Linux but is not there yet, For virtualization and containerization there is QubesOS but still that doesn't seem ideal and it requires some beefy hardware

moon , in Is it true that only the website name is visible to ISPs?

Yes, https hides most things but leaks the sni (server name indicator. We came up with a solution called esni (encrypted sni), but that also had issues. It didn't have much adoption before esni got replaced with ech (encrypted hello). Cloudflare actually has a neat website to check if your browser is supporting ech.

You can learn more about it here, it's pretty cool!
https://blog.cloudflare.com/handshake-encryption-endgame-an-ech-update/

  • All
  • Subscribed
  • Moderated
  • Favorites
  • [email protected]
  • kbinchat
  • All magazines