FineCoatMummy

joined 2 months ago

I worry that if we get lots of diff jurisdictions with diff laws, it may be easiest for an OS to comply iwth the most strict of them.

Lax ones don't require age verification, but also don't forbid it. Strict ones require it. You can comply with both at once.

Maybe doesn't matter if you can easily bypass the age check. Which is true at the present time. But things like this, they often slip-slope into more KYC style of hard to get around. All it takes is a horrible event all over the headlines. If it "could have been stopped" with stricter measures, they'll come. Once you have a hammer, all problems are nails.

I pay for Proton because I'm not tryin to protect myself from Proton.

I think I could pay with a masked CC if I want. But I don't bother. That isn't part of my threat model. It might be for others, tho.

I've heard of parents being successful at it before. But it took a little group of them. They got together and approach their kids school. They used a positive approach. Not confrontational. More like we have these privacy concerns. But we want to work together with the school on them.

I lost the link now, it was years ago. But they were successful in getting alternatives for the worst "ed-tech" spywares.

[–] FineCoatMummy@sh.itjust.works 11 points 2 days ago (1 children)

is absolutely dystopian

Esp because they could already use, you know... a spike strip!

It feels kinda like targeted v dragnet surviilance debate. Targeted feels OK if you get a warrant from a judge, use the legal procedures. But dragnet makes for a dystopia. Similar here. I don't want a global ability for some centralized db to flip a bit and stop any body's car across the world. Or, worst case, hacked and stops EVERYBODYs car at once.

[–] FineCoatMummy@sh.itjust.works 13 points 4 days ago (1 children)

That's my exp too. Esp with the endless pop-overs like "We share your data with our 5 million partners! Unless you dig through 45 pages of opt out checkmarks, b/c fuck you". 95% of the time, disallow JS bypasses those.

Also tho, some important sites flat don't work with js disabled. I hate that. I get it. There are some things where js is necessary. But it's like 2% good things plus 98% fuckery.

[–] FineCoatMummy@sh.itjust.works 27 points 4 days ago (3 children)

Wow. I wonder how many vulns like this are unknown outside of identity broker co's and gov intel orgs. Seems like new ones discovered hella lot.

Turning the WWW into an app platform was a mistake. JS allows so much fuckery.

it’s really no wonder society is as polarized: it seems to be by design.

For sure. And not in a conspiracy-theory kind of way! Facebook ex-employees testified to the US Congress, said exactly that. FB amplify the most divisive content on purpose. That is the most powerful emotion, to make people engage. Other employee whistleblowers talked to the WSJ about "The Outrage Algorithm". And there's a whole book, "The Chaos Machine" about that.

Polarization drives maximum engagement. Right up until society rips itself apart. And then it's too late.

they had to resort to taking a tractor to work.

I feel bad for the situation but TBH that's kind of badass.

That made me curious! Muppet Wiki says 70 languages and some dialects on top.

Poor JRR did not realize we would eventually have them for real.

And poor George did not realize we'd take 1984 as a blueprint rather than a warning.

Maybe it's for the best, that they both died before they had to see.

whilst considering on abolishing cash altogether

No personal exp with this, but I have a vague idea that the Nordic countries, or maybe Singapore etc are further down the cashless road than we North American peeps are. Though they may also have better protections in some ways.

I do want to preserve cash as an option. I try to use it for everything I can, just to safeguard the option. I try to get my friends to do it, but they find contactless too convenient.

Same in the UK, but its more a case of protecting people

That happened to me in the US once. I deposited a paper check (cheque) for a large sum, and Bank Lady started asking questions. She was trying to protect me against scammers. There are scams where the perp gives the mark a bad check. Mark deposits bad check, withdraws funds immediately which banks let you do if you're a customer in good standing. Mark gives funds to perp. A few days later, bank discovers the check is bad, unwinds the transaction. Now the mark is out the money. The perp has gone to ground and cannot be located.

I assured Bank Lady that I knew about that risk, and I trusted of the origin of the check. That satisfied her.

 

I found this, it's about the data broker loophole. The problem is, in the US we have 4th Amendment protection against warantless searches. Many other nations, have a similar right, by another name. Canada has Section 8 of the Charter of Rights and Freedoms.

These are more and more bypassed by data brokers. The government purchases data from data brokers. Data it could not get without a warant in the past.

Maybe this is not as much a problem yet in Canada as in the US? I'm not sure, hope some Canadians can say how it is? But here in the US, it's a massive prob now.

Related: We Built a Surveillance State: What Now?

 

Paper by,

Simon Lermen, Daniel Paleka, Joshua Swanson, Michael Aerni, Nicholas Carlini, Florian Tramèr

It talks about deanonymizing those who writes under a pseudonym. Sites like reddit, lemmy would be that type.

From the paper,

Given two databases of pseudonymous individuals, each containing unstructured text written by or about that individual, we implement a scalable attack pipeline that uses LLMs to: (1) extract identity-relevant features, (2) search for candidate matches via semantic embeddings, and (3) reason over top candidates to verify matches and reduce false positives.

Our results show that the practical obscurity protecting pseudonymous users online no longer holds and that threat models for online privacy need to be reconsidered.

They can match writing styles, interests, details to infer a job or city, or other unstructured information. That allows to match unrelated pseudonyms to the same person. Like, FooFighterGroupie and Yolanda43905 are the same human, despite they never said it. It can allow also, to match a pseudonym to a real identity across sites. Like someone posted on LinkedIn with a real name. It takes less info than most people expect, to figure out Julia Greenberg of Cedarville, NH is FooFighterGroupie.

You can protect yourself by never giving away much info. But ofc sometimes that's the whole point! Think talking about specific hobbies or w/e, gives away info. Also change up writing styles + vocab use, b/c it is a unique fingerprint.

I doubt this technique is used in a dragnet way... YET! But no reason it can't scale, if the cost of resources goes low eonugh. We could eventually see it become standard, analysis to link people across sites and identities.

 

I'm sorry, this topic is kinda USA centric. At least the details. Maybe not the core idea though. For the non-USA readers, KYC = know your customer.

I am soon to move to a new home for a job xfer. I wish I could do it privately. I had a stalker who broke into my home. I am still apprehensive and tense even though it was years ago. It feels impossible to move privately 😠

I know about Michael Bazzel's Privacy books, and I have read over them. They are good and I follow his advize for some things. I still feel overwhelmed and don't think I can manage it by myself. One problem is, the last edition of the Privacy book was years ago. KYC is in many more places now. Like utilities and services you need when moving to a new home. I run into more things that demand a copy of a gov photo ID or they will not give you a service. This data makes toward the credit bureaus, they always learn. It used to be you could pay for utilities from an LLC, but that often triggers a KYC check now and sometimes they want to copy your ID.

I already try to fight my addy appearing in people search sites but that is hard. There are so many of them. Some outside the USA and do not follow takedown requests.

There must be ways to do this! Maybe they are only available to the rich and famous? I am not rich or famous, lol. But I am middle class and would spend a moderate sum for a service to handle this. I do not feel I can do it on my own. Maybe I could years ago before so many attacks on privacy, but no more.

Has anyone successfully moved AND kept a new home addy private from data brokers? Did you use a service or company to help?

 

I'm new to Lemmy, days not weeks. Liking it so far and I'm trying to contribute in a positive way to the instance.

I have one usability issue, trying to figure out which replies in a post are new since I last read it. I see the number like (4 New) telling me how many, but not which.

Sorting by "New" hardly helps because of the threaded display. Threading is a good thing, IMO, since it preserves the flow of the conversation. But new replies to older replies get buried with a "New" sort. When the post has only a few replies total, I can keep up simply by re-scanning the whole thread. On more popular posts that becomes infeasible.

Please don't beat me up too bad if I'm missing an obvious thing! I saw the user settings, "Show Read Posts", but that seems to be post level, not reply level.

Editing because I am an idiot: I use the web interface through https://sh.itjust.works/.

 

Many of us know how bad modern cars are for privacy. Yet many of our friends and neighbors do not realize how intrusive it really is. I linked a blog entry from Mozilla's investigation about car privacy. In that blog is a link to their make-by-make analysis. The amount of very intimate information a modern car collects is honestly appalling. It includes health data, real time mood information, weight gain or loss, and so on. And it does so even for passengers.

The web has many resources talking about this problem, but almost no resources on what to do about it. I know the simple thing is to say, "just drive an old car bro!" That's fine if you can, but not everyone can. Also it has drawbacks like more maintenance. Sometimes less safety if it's older than certain safety features. For the purpose of this thread, it is more interesting to focus on newer, surveillance enabled cars which are the majority of what people drive on the road today.

Some people have figured out how to bypass the surveillance package on some cars. One way is to uncouple the antenna it uses to phone home. Other times you can bypass the telematics module or remove a fuse that powers it. I feel like we really need a central model by model repository of information.

Past that, how do we prove it has worked, if we do it? Has anyone reading this tried to use an RF detector to see if their car is still trying to phone home, after they have bypassed telematics? What are your experiences? I want to buy one and use it to test my own car, but the info on the web seems sketch.

 

Has anyone read any of her Lieutenant Bak series? "Right Hand of Amon", "A Face Turned Backwards", and those?

She sets them circa 1500 BC in ancient Egypt. I am interested in this era and culture, so I am predisposed to trying these out, but if people think they are terrible I'll probably find another series haha.

view more: next ›