Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)H
Posts
2
Comments
222
Joined
2 yr. ago

  • Jump
  • I remember Linus Tech Tips had a hot take once that adblocking/bypassing was the same as piracy. I agree with him.

    On Youtube, the user is expected to watch ads to get the video. That's the cost of the service, how it was designed. Using circumventions to get the content without paying the price, is piracy.

    And personally I'm all for piracy.

  • The screenshot earlier in the thread clearly said "Evolution is potentially unsafe", so if the user continues to install it then that's a risk they took on themselves

  • Big fan of i2p but adoption is low, making network analysis attacks much cheaper. Not to mention i2p has client identifiers that are sent to the destination server (look up "client destinations", you'll find info in various i2p forums and also https://www.whonix.org/wiki/I2P), which Tor doesn't have.

    Imo Tor onion services are safer due to how much more expensive network analysis attacks are, but i2p has a better future because anybody can be a peer (Tor has high entry requirements, even for relays). I use I2P to support the network. But I'm not going to fault an open source developer for choosing the more popular option to start with, in this case Tor.

  • Moonlight/sunshine can be used for remote desktop, and doesn't have many controversies that I can remember, far less than Rustdesk at least. You just don't get the free relay servers, which some might call a plus.

    Don't get me wrong, I personally still consider Rustdesk a viable alternative, I just think the controversies are recent enough and concerning enough that they should be brought up for consideration.

    As for the forgive/forget bit, don't mind it that was just me poking at Lemmy's hypocrisy a bit

  • I once had a ham sandwich so good I switched to Linux

  • I'm sure OP's goal isn't actually to moderate content. It's common for tools clearly designed for piracy to say "we don't condone piracy". OP is using a plausible excuse to not provide encryption, without directly encouraging people to use encryption themselves. Or maybe OP doesn't realize that people can encrypt their files themselves and bypass all moderation, who knows ¯\_(ツ)_/¯

  • You should check out my comment here. Bring-your-own-encryption is a good thing that OP is encouraging here

  • buy at...places like brick and mortar stores? How would that get you any privacy in the first place? Cameras in the store can identify you. The store could ask you to take your mask and sunglasses off before serving you. And then there's payment tracking. Even cash would have to be laundered before-hand to be safe.

  • Cool video but it's old and barely relevant. Traffic analysis attacks are extremely difficult to pull off, especially on hidden services (since relay nodes are more distributed than exit nodes). Mixnets are cool but still immature. Tor is the best option here, and will fit the use case of 99% of users. For those who want to defend against traffic analysis, there are ways to do so that take way more time and effort, like breaking up a file into tons of tiny pieces. Up to you if you want to put in the effort.

    As usual, Whonix has a great page about this: https://www.whonix.org/wiki/Speculative_Tor_Attacks

    in research settings, Tor processes and anonymity protection might be seriously degraded under specific conditions. Therefore, users who are likely to be targeted by advanced adversaries should bear this in mind when undertaking anonymous activities -- for a small subset, defaulting to offline activities (whenever possible) might be the only safe course of action in their circumstances.

  • what's wrong with Tor?

  • Yeah what's with the homegrown repo viewer. Why not just embed a sourcehut page with some custom styling.

  • ime rideshare drivers are generally incredibly good at driving, so I trust their judgement. Are there stats that they get in more crashes?

  • that's probably generalized too far and reaches into pseudo-science.

    Just understand the concept of Turing-completeness, and the idea that many systems are Turing equivalent.

  • I agree with not providing the encryption, and having the user provide it themselves. If the server provides the encryption, then it could be backdoored. If you as the user can't be bothered to encrypt the files yourself, then you definitely aren't inspecting the client-side code yourself either.

    Just be safe and encrypt the files yourself

  • They want to be able to scan content for illegal contents, without users needing to report it and provide the decryption key first

  • CMV burner phones were always questionable in their privacy. How do you know the anonymous seller of your burner phone, isn't the government in disguise?

  • Rustdesk did have some massive controversies in the past, like:

    Which raises doubts as to how trustworthy the development team is.

    And while some other people say "it's ok that was in the past they fixed it", keep in mind that most of Brave Browser's controversies were in the past, and yet lemmy still hasn't forgiven them yet...so I'd like to know how long it takes for lemmy to forgive past mistakes

  • Just check the permissions of an app before installing. Bazaar has a gauge for how "safe" an app is based on permissions. If it doesn't request internet, filesystem access, and other powerful permissions, it'll be marked as the safest.

    Really it's the same as docker. It's secure most of the time, but don't come crying about getting hacked if you give all your containers access to /dev, host networking, etc

  • Privacy @lemmy.ml

    YSK: you can buy (email) accounts anonymously using darknet markets

  • Technology @lemmy.world

    Github compromised by supply chain attack on a VS Code extension

    www.bleepingcomputer.com /news/security/github-confirms-breach-of-3-800-repos-via-malicious-vscode-extension/