verifytheposter

joined 3 months ago
sorted by: new top controversial old
18
You can't opt out of Apple's own keylogger (appleinsider.com)
 

every App Store search is logged letter-by-letter, with millisecond timestamps. Apple can compute your typing speed.

every search you type, timed to the millisecond, stored to your account

https://appleinsider.com/articles/26/06/17/apples-app-store-search-data-stores-every-single-keystroke

Matrix Metadata Problem: the server sees everything except your messages in c/foss@beehaw.org
[–] verifytheposter@leminal.space 1 points 4 hours ago (1 children)

These aren’t mutually exclusive trade-offs: Matrix could support communities while minimizing or encrypting metadata by default. There should be a protocol that doesn’t require device details and profile data to be exposed just to participate.

Matrix Metadata Problem: the server sees everything except your messages in c/matrix@lemmy.ml
[–] verifytheposter@leminal.space 1 points 4 hours ago

Matrix can expose your device name and device details to other homeservers through federation. Profile information such as your avatar and bio can also be queried remotely. A client version is not a dedicated federation field, but it can leak through the device name. Signal at least has Sealed Sender, which hides the sender's identity from its own service in supported cases.

This is about metadata, not centralisation, self-hosting, or phone-number registration. Those are separate issues, not trade-offs.

Matrix Metadata Problem: the server sees everything except your messages in c/matrix@lemmy.ml
[–] verifytheposter@leminal.space 1 points 4 hours ago (1 children)

It's already a problem that it sends the client's version, device details, avatar, and bio at all. Those device details are transmitted during federation along with everything else.

https://spec.matrix.org/latest/server-server-api

Matrix Metadata Problem: the server sees everything except your messages in c/matrix@lemmy.ml
[–] verifytheposter@leminal.space 1 points 15 hours ago (2 children)

signal done it pretty well

Matrix Metadata Problem: the server sees everything except your messages in c/matrix@lemmy.ml
[–] verifytheposter@leminal.space 1 points 15 hours ago (3 children)

Signal is free from this disaster, and client version and device details are only visible to the main server — not to mention the avatar, name, and many more items listed above being in plain text.

19
Matrix Metadata Problem: the server sees everything except your messages (dfrws.org)
 

Matrix Metadata Problem: the server sees everything except your messages

People pick Matrix because of end-to-end encryption. But E2EE only protects message content — everything around it is plaintext.

The server sees:

  • Your ID, IP, client type and version, device you use
  • Your presence, typing status, read receipts
  • Which rooms you join and when you join/leave
  • Who else is in those rooms → your entire social graph
  • Room names, topics, avatars (all plaintext state)
  • For every message: who sent it, which room, a millisecond timestamp, type, size

And federation copies all of that to every other server whose users are in the room. Your "social footprint" isn't one copy — it's as many as there are servers.

13
Matrix Metadata Problem: the server sees everything except your messages (dfrws.org)
 

Matrix Metadata Problem: the server sees everything except your messages

People pick Matrix because of end-to-end encryption. But E2EE only protects message content — everything around it is plaintext.

The server sees:

  • Your ID, IP, client type and version, device you use
  • Your presence, typing status, read receipts
  • Which rooms you join and when you join/leave
  • Who else is in those rooms → your entire social graph
  • Room names, topics, avatars (all plaintext state)
  • For every message: who sent it, which room, a millisecond timestamp, type, size

And federation copies all of that to every other server whose users are in the room. Your "social footprint" isn't one copy — it's as many as there are servers.

-1
Matrix Metadata Problem: the server sees everything except your messages (dfrws.org)
submitted 19 hours ago* (last edited 19 hours ago) by verifytheposter@leminal.space to c/matrix@programming.dev
9 comments fedilink
 

Matrix Metadata Problem: the server sees everything except your messages

People pick Matrix because of end-to-end encryption. But E2EE only protects message content — everything around it is plaintext.

The server sees:

  • Your ID, IP, client type and version, device you use
  • Your presence, typing status, read receipts
  • Which rooms you join and when you join/leave
  • Who else is in those rooms → your entire social graph
  • Room names, topics, avatars (all plaintext state)
  • For every message: who sent it, which room, a millisecond timestamp, type, size

And federation copies all of that to every other server whose users are in the room. Your "social footprint" isn't one copy — it's as many as there are servers.

14
You can't opt out of Apple's own keylogger (appleinsider.com)
 

every App Store search is logged letter-by-letter, with millisecond timestamps. Apple can compute your typing speed.

every search you type, timed to the millisecond, stored to your account

https://appleinsider.com/articles/26/06/17/apples-app-store-search-data-stores-every-single-keystroke

58
You can't opt out of Apple's own keylogger (appleinsider.com)
 

every App Store search is logged letter-by-letter, with millisecond timestamps. Apple can compute your typing speed.

every search you type, timed to the millisecond, stored to your account

https://appleinsider.com/articles/26/06/17/apples-app-store-search-data-stores-every-single-keystroke

19
You can't opt out of Apple's own keylogger (appleinsider.com)
submitted 1 day ago* (last edited 1 day ago) by verifytheposter@leminal.space to c/apple@lemmy.ml
0 comments fedilink
 

every App Store search is logged letter-by-letter, with millisecond timestamps. Apple can compute your typing speed.

every search you type, timed to the millisecond, stored to your account

https://appleinsider.com/articles/26/06/17/apples-app-store-search-data-stores-every-single-keystroke

10
Apple's 'private' typing data (leminal.space)
 

An IEEE S&P 2026 Distinguished Paper audited Apple's differential privacy. 5 of 9 mechanisms violate their own guarantees; ~87% of macOS data collection affected.

your typing stats + Safari domains leave your device daily, "anonymized" by a shield that's proven broken. No real protection.

https://arxiv.org/abs/2605.21378

Rustdesk "This app tracks and reports your activity" in c/privacy@lemmy.ca
[–] verifytheposter@leminal.space 1 points 1 month ago

Fair point. My mistake.

Rustdesk "This app tracks and reports your activity" in c/privacy@lemmy.ca
[–] verifytheposter@leminal.space 1 points 1 month ago

Fair point. My mistake.

4
Rustdesk "This app tracks and reports your activity" (leminal.space)
 

Can RustDesk's telemetry be disabled? Collecting user device information, session duration, and other telemetry data seems unnecessary for a remote desktop application. Users should have the option to disable all telemetry and they should be disabled by default.

https://f-droid.org/packages/com.carriez.flutter_hbb/

0
Does anyone know a Nostr client that supports bulk adding relays? (leminal.space)
 

cross-posted from: https://leminal.space/post/35929945

Does anyone know a Nostr client that supports bulk adding relays?

Many clients let you export all relays as a text file or zip, but there’s no import feature. This makes switching clients or sharing relay lists tedious.

Is there a way to bulk import relay lists efficiently? If you’ve found a trick or client that does this, please share!

#Nostr #Decentralization #Relay #Crypto #CryptoCommunity #Web3 #OpenWeb #Privacy #PeerToPeer #Federated #DecentralizedNetwork #PrivacyTools #DigitalFreedom #NostrRelay #SocialMedia #Tech #Innovation #Blockchain #Distributed #Networking #OpenSource #Software #TechCommunity #Coding #Programming #Developers #TechNews #OpenTech #DigitalPrivacy #DataOwnership #InternetFreedom #SocialNetworking #P2P #TechTrends #NostrClient #NostrApp #NostrNetwork #RelayManagement #TechSolutions #DigitalRights #TechDiscussion #FOSS #FreeSoftware #Cryptography #DigitalSecurity #OpenInternet #DecentralizedApps #PrivacyFirst #Web3Community #TechSupport #TechTips #NetworkingTools #TechTalk #DigitalInnovation

3
Does anyone know a Nostr client that supports bulk adding relays? (leminal.space)
 

Does anyone know a Nostr client that supports bulk adding relays?

Many clients let you export all relays as a text file or zip, but there’s no import feature. This makes switching clients or sharing relay lists tedious.

Is there a way to bulk import relay lists efficiently? If you’ve found a trick or client that does this, please share!

#Nostr #Decentralization #Relay #Crypto #CryptoCommunity #Web3 #OpenWeb #Privacy #PeerToPeer #Federated #DecentralizedNetwork #PrivacyTools #DigitalFreedom #NostrRelay #SocialMedia #Tech #Innovation #Blockchain #Distributed #Networking #OpenSource #Software #TechCommunity #Coding #Programming #Developers #TechNews #OpenTech #DigitalPrivacy #DataOwnership #InternetFreedom #SocialNetworking #P2P #TechTrends #NostrClient #NostrApp #NostrNetwork #RelayManagement #TechSolutions #DigitalRights #TechDiscussion #FOSS #FreeSoftware #Cryptography #DigitalSecurity #OpenInternet #DecentralizedApps #PrivacyFirst #Web3Community #TechSupport #TechTips #NetworkingTools #TechTalk #DigitalInnovation

6
New to Nostr on Android. Do you use Amber, Citrine and Morganite for Nostr? (leminal.space)
 

cross-posted from: https://leminal.space/post/35929431

New to Nostr on Android. Do you use Amber, Citrine and Morganite for Nostr?

I just downloaded Amethyst to start using Nostr. While looking into setup guides and recommendations, I also came across Amber, Citrine, and Morganite.

Right now I’m wondering how people actually use these together in practice.

Do most of you just use Amethyst by itself and call it a day, or is it worth setting up the “full gem stack”?

Curious what setup you’re using and whether you think the extra apps are worth it.

#Nostr #Amethyst #Amber #Citrine #Morganite #NostrApps #NostrClient #AndroidApps #PrivacyApps #Decentralized #DecentralizedSocial #OpenSource #Fediverse #CryptoApps #SecureMessaging #NostrCommunity #TechTips #AppSetup #GemApps #MobileApps #DigitalPrivacy #SecureSocial #P2PApps #PersonalData #NostrNetwork #SecureNetwork #NostrGuide #NostrNewbie #MobilePrivacy #TechExploration #SelfHosted #TechCommunity #AppRecommendations #PrivacyTools #DigitalSecurity #MobileSocial #OpenSourceApps #NostrTips #NostrSetup #DataOwnership #PrivacyMatters #SecureCommunication #TechEnthusiast #PrivacyFirst #MobileTech #NostrLife #NostrAndroid #PrivacyConscious #SecureMessagingApps #TechAdvice #SocialNetworking #GemStack #NostrStack #TechCurious #DigitalFreedom #DecentralizedSocialNetwork

view more: next ›