Recent comments in /f/Privacy

whitestar wrote (edited )

I try to use Peertube and Odysee instead of Youtube because I don´t believe the solution to Youtube tracking is to play cat and mouse with Google, the solution is to have an alternative platform that respects privacy and freespeech, but lots of valuable content can be found in Youtube and sometims I still have to visit so thank you for the proxy.

3

Wahaha wrote

No, I don't care enough. My point is that the tool is designed in a way to fish more passwords and the moment you "check" your password with the tool, you have to change it anyway, so there's no point in doing so in the first place.

Also, why would anyone download hundreds of gigabytes to check whether their password is compromised, if one could also just update their password?

1

LnWpxtqPEXyDjAH9rs27 wrote

Have you done even a tiny bit of research?

Downloading the Pwned Passwords list

The entire set of passwords is downloadable for free below with each password being represented as either a SHA-1 or an NTLM hash to protect the original value (some passwords contain personally identifiable information) followed by a count of how many times that password had been seen in the source data breaches. The list may be integrated into other systems and used to verify whether a password has previously appeared in a data breach after which a system may warn the user or even block the password outright. For suggestions on integration practices, read the Pwned Passwords launch blog post for more information.

Please download the data via the torrent link if possible! If you can't access torrents (for example, they're blocked by a corporate firewall), use the "Cloudflare" link and they'll kindly cover the bandwidth cost.

1

Wingless wrote

I thought pregnant man emoji, very funny. But I thought nothing is too crazy, I looked it up, and IT IS REAL! https://blog.emojipedia.org/new-emojis-in-2021-2022/ Actually THEY are real because there have to be six different races of proud vaginal papas.

Now "emoji" is a private company, or to be more precise, it's a private company saying "I Get To Post Pictures and You Don't Because YOU might Post 256 Pixels of Child Porn And We Can't Have That But You Can Exercise Your Creativity By Reordering My Pictures In Many Combinations". With a caveat for the censorship issues raised above. Normally I wouldn't bother.

Still, in this case, I think they have inadvertently appealed to unwanted diversity, and they're going to have to backtrack because they're going to normalize unnatural minority groups. You can't have that, and they should know, that what you WANT to say always has to take a back seat to the unhealthy inference someone MIGHT take. Because if you look up online, there's no Fat Man Emoji of course, because fat people are bad. And yet, it is rumored that in dark spaces on the internet, there may be a few fat men looking to be recognized as if they were a legitimate lifestyle choice and not just freaks, dig? So we, erm, I mean THEY, none of them around HERE mind you might be prone to post some illicit sentiment they have failed to predict and contain. Oh boy those were good cheeseburgers this afternoon. I got to go deliver a BABY...

They will abandon their effort, or at least, go back to the Drawing Board.

1

Wingless wrote

The U.S. had a choice. Freedom or tyranny. The purity of abandoning the strange doctrine that speech, that information is inherently evil, rather than evidence of evil. Or censorship that devours everything, destroys everything, collaborates with every tyrant around the world.

And we see how they chose.

The ban on child porn creates a market for child porn and the fresh abuse of children to make those images from scratch, like printing money. The refusal to acknowledge a private space - ANYWHERE - means that foreign governments can just go ahead and send their notices that the Hanzi for "Liberate Hong Kong, revolution of our times" looks like a cartoon child rape, which of course is JUST AS BAD as a real one. It doesn't matter whether children are raped, but whether people THINK about them getting raped, let alone SEE them getting raped and start asking inconvenient questions about whether there is something they could actually DO to stop it.

This is the society where colleges control dissemination of information with an iron fist, lest something politically incorrect be said, even if it means that students have to play in Covid-infested classrooms to get something approximating an educational experience.

This is the society that never goes to China with anything but demands that they censor the software pirates, censor the servers doing lookups for racist websites, censor the cruelty to animals, crack down on drugs and products that might compete with name brands ... then says look at us, we stand for FREEDOM.

Now, nobody sane trusted Apple anyway, and yet, emergencies come up and security tossed to the winds. If you're a dissident from another country facing constant deportation, or some nutcase trying to protest a pipeline or an election or a race issue, I bet you have a lot of emergencies.

This isn't the first, maybe not even the worst. The CARS. God told Lot, "Go out and find me *ten competent techies with the honesty to report on and fight back against 1984, and Democracy will be spared". Lot came back with... https://www.vice.com/en/article/4avagd/car-location-data-not-anonymous-otonomo

We got NOBODY. The internet must burn, the libraries must burn, the cities must burn, the vaccine will not be given, the virus will mutate, the people will die, the civilization will die, all things will pass away, and every few DAYS there is another harbinger like this that points the way to doom.

3

dontvisitmyintentions wrote

The article leaves the question of "who" open, but the latest gist comment puts it in perspective (emphasis mine):

In all cases, we can see the headers set-cookie, server, cf-ray and expect-ct with values set by Cloudflare, which would not be possible if TLS termination was done directly on matrix.org/vector.im servers.

Unfortunately the "Grid" project which claims to want to resolve the privacy issues in defaults and docs seems to want to re-architect the protocol, instead. From a year-old question on the project's status (emphasis mine):

Grid is definitely not stalled, but all the work is currently happening between people who are exchanging and trying new things on a test network. Once we have conclusive data and an API we are happy with, we will update this repository. It will happen at some point this year. It is simply not the only project we are working on, so it all looks slow/stalled from the outside, but it is actually not. At some point there will be an update. But the network and the protocol is in use at the moment, if that can reassure you.

BTW, that gist the article links to is apparently an old version, and the new ones are at https://gitlab.com/libremonde-org/papers/research/privacy-matrix.org/-/tree/master/. And that's a year old. Even chasing down updated docs from these people is tedious. No wonder their code is absent.

All I want is a doc that details how it is and isn't possible to secure a server and client, what you configure and what you patch. Give that a name to fork it, sure. Instead, these are just treatises and blog posts. Many such cases.

2

dontvisitmyintentions wrote

Some Twitter replies express frustration in their being so cagey about something they claim is so easy. A few others condemn Pillar's privacy violations, but obviously those are built in to the software.

Still others question whether they contacted the right person in the RCC. I'm beginning to wonder myself whether they went more for bombast than concern. Did they show his superiors the data, or is this all a "trust me, bro" situation? We can't expect the mainstream media to care about the distinction, but this guy's organization would. I imagine they found a lot of other correlations. Was this just the first guy to resign?

I wish we had more information.

2

Wahaha wrote

You can only make use of this if you already have the data. At that point it matters little whether they have to brute force the password based on every possibility or based on a huge list. The password is going to get cracked.

How does a 200GB password list come in handy when trying to guess the password of some online account that locks you out after three failed attempts? It doesn't.

1