Recent comments in /f/Privacy

Wahaha wrote

You can only make use of this if you already have the data. At that point it matters little whether they have to brute force the password based on every possibility or based on a huge list. The password is going to get cracked.

How does a 200GB password list come in handy when trying to guess the password of some online account that locks you out after three failed attempts? It doesn't.

1

dontvisitmyintentions wrote (edited )

I've followed the kerfuffle from afar, reading the most popular articles and comments on the "LiberaChat" side. And one theme dominates these stories, like a poorly-written comic book (which is how all drama plays out on this side of the Current Year):

Rasengan pisses off the right people. Every bad decision he might have made makes me chuckle. This Korean dude might actually be based.

I can imagine good reasons for doing all the terrible things he does (like dropping a bespoke, byzantine ircd nobody else uses for something normal people can configure, an ircd which was even controversial a decade ago when there were more people hacking on ircds), but I don't need to. He angers the people who got so angry that they died their hairlogo trans colors and moved out of their parents' house so they could stay up late and put their dildos on a shelf. At least, I'm 41% sure that's what happened.

Edit: (two days later) It turns out they anonymize IPs now like Rizon and other mainstream networks do. Based.

1

vistingghost wrote

I don't want to lie about my UA but I have to change it in order to avoid Cloudflare's CAPTCHA. Cloudflare passes Tor Browser's UA for IP addresses of Tor exit nodes. Btw, Cloudflare distinguishes its users by TLS/SSL fingerprinting as well as by HTTP headers including UA. I must doubt that organizations encouraging TLS/SSL want fingerprinting more beyond security. Hey, Tor Project and EFF, don't be evil...

2

BlackWinnerYoshi wrote

I don't even change my user agent most of the time, so it just equals to what my browser is, but pretending to be Windows 10 while I actually have Windows 7, so it is Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0 currently (this is what LibreWolf does by default, btw).

So anyway, the only time the user agent differs from the defaults is when I want to enable a desktop version on mobile and when I want to bypass getting user agent blocked because I'm using Wget, so I usually just empty it (or set it to a browser user agent because it also gets blocked).

Also, since I block third party scripts with uMatrix by default, there's not much point to constantly changing the user agent because the trackers won't see it anyway.

1

Wahaha wrote

No single user-agent would protect your privacy anyway. What I do is to let my user-agent switch every ten minutes. Also, user-agent not only carries browser information, but also browser version and operating system.

Having scripts blocked per default also helps.

I don't mind websites knowing my user-agent is fake. I mind websites having the ability to track me based on my user-agent. Thus my user-agent changes automatically.

4

Wingless wrote (edited )

I assume they add passwords to the next list...

The key thing for cracking passwords is, at some point it is way faster to search every password anybody has ever thought of, than to search every password anyone possibly could think of.

Yes, an honest site would just let you look up in the index starting with any string of letters, so you didn't have to give away your password in the process. Therefore, this is not an honest site. Q.E.D.

Faster proof: It's a site, from a company, on a computer. Therefore it is spying on you and selling your information. Q.E.D.

2

liminal wrote

The fact that I prefer to use monero to move my funds doesn't imply that I wouldn't support laws mandating a more privacy-respecting way of making bank transfers. Even if I don't support companies marketing virtual assistants, I'm not immune to surveillance through Amazon devices.

Free market doesn't exist, the money always flow from the government, they get to decide who gets the bigger slice of the pie, and then cut a little space where people who don't know better can gamble their life away. Next time you are gonna tell me communism has nothing to do with the Soviet Union and maoist China, because that's not how it was supposed to work? These are ghosts from the past wich for some reason still haunt many people.

The state is evil, the market is evil, we must contain them both. When people will start to value real privacy, it will be too late. Right now Apple is plastering cities with commercials advertising the privacy granted by their phones, this is their main slogan: "privacy, that's iphone". After all these years, we are at this point, companies are selling the illusion of privacy, that's the kind of progress the market has brought us.

Who cares if people will start looking for real privacy, if when they'll do big companies will have already ammassed decades of data of any kind, do you think that won't be enough to control and debase billion of lives? It's not like they don't have enough already, they just need to get better at extracting value from it.

I said what would be the least we should expect, if you prefer to accept this state of affairs, until the masses won't start suddenly caring, I guess you are settling for even less than me.

3

liminal wrote

the guy who tapes you in the shower

So the carmakers? According to the article you agree to this kind of surveillance whenever you buy a modern cars, that's fucked up.

On another note, I think the least lawmakers should do is come up with a very strict definition of what constitutes "anonymized data", since that's another expressions that gets used to justify this kind of stuff.

0

Wingless wrote

This is even worse than I expected. And the "solutions" are the classic BULLSHIT they feed us - "privacy" by means of not giving the data to people who don't pay money for it! ARE YOU KIDDING ME?

In order for a car to be driveable:

(a) It must have NO GODDAMNED TRANSPONDERS OF ANY KIND. (b) It must have NO SATELLITE LOCATION TRACKING CAPABILITIES. (c) It must have NO BUGS LISTENING TO YOUR CONVERSATIONS. And so on!

I added (c) because hell, there has to be an "anonymized" set of voice recordings for downloading from the same crooked auto manufacturers that set up this spy data sale!

Any company involved in PROVIDING the data resold by Otonomo needs to be named, shamed, boycotted, and obliterated. Maybe I can scrounge up an old Yugo instead, made in a free country. Otonomo isn't the problem, they're practically Chelsea Manning here. The problem is the guy who tapes you in the shower, not the one who shows you what he found on the online forum.

3