Comments

You must log in or register to comment.

BlackWinnerYoshi wrote

This site uses Clownflare (clear net only), visit it in archive.org (clear net only) instead.

TL;DR: the "safest apps" are the most dangerous apps, including Etsy.


Now, I don't care about most of the article - we all know big corpos collect as much of our data as possible. I care about the so called "safest apps", while in reality, they're dangerous.

They're also saying that:

Even with video calling service Zoom’s conferencing flaw from last year, it managed to crack the top 10.

Well, what are you doing, Komando? Defending Zoom? This piece of rubbish? And what about the "safest apps"?

  • Signal and Telegram - they require your phone number. You really claim to be private with this?
  • Clubhouse - this app is kind of obscure to me, and I can't even visit their Clownflared website because Wayback Machine doesn't like its JavaScript (so no reading their privacy policy there - although, I obviously know that Clownflare will collect your data from the shadows), but what if I check their App Store listing (clear net only), what do I see there? Contact info, identifiers, contacts, usage data, user content, diagnostics? And you call it private, Komando?
  • Netflix - this attempts to enslave you with Digital Restrictions Management. Obviously, those are only attempts, and I refuse its usage. I hope you are doing this too.
  • Teams and Skype - they're owned by Microsoft, and Skype works with the PRISM and also used to redirect Chinese people to an even more censoring version of Skype. Next!
  • Classroom and Shazam - owned by big corpos. Google and Apple, respectively.
  • Boohoo - Uses Clownflare. Good luck trying to make me think you're private with a MITM attacking me, boo hoo.

So it doesn't look great at all. But wait, I skipped Etsy. Why? Well, here goes a long section about it.

Let's see what the situation with Etsy is, in terms of privacy:

  • Tor support - no onion domain, but it looks like you can log in without getting your account terminated. Not sure about registration or shopping, though.
  • Monero acceptance - no cryptocurrency to select in the bottom left corner, or anywhere else.
  • No personal data required for registration - obviously requires your e-mail address and password, but also your first name, but it's not that tragic.
  • Compatibility with established standards - Etsy doesn't have OpenSearch, but you can use the Mycroft Project search engine plug-in (clear net only) if you use a web browser derived from Firefox, like LibreWolf. You can't receive e-mail notifications encrypted with PGP, though.
  • No Cloudflare - obviously, if it had Clownflare, BCMA would automatically redirect to an archived version of the website, and I would say to bail immediately.
  • As little downtime as possible - not a privacy issue, but it's still important. It doesn't look like Etsy has much downtimes, really.

So, by looking at those points alone, Etsy seems to be okay. But what about the privacy policy? Let's see another six points:

  • IP addresses - paragraph two, point three, says that it will receive them from your web browser, mobile app, and Internet of Things (a thing you can give up). There is no duration on how long they are stored.
  • Content data - paragraph two, point six, says it stores your location to "improve" search results. So probably not storing search results itself, but there is still no duration on how long the location is stored.
  • System info - paragraph two, point three, says Etsy will store your device-specific information such as the operating system, with no duration attached.
  • Metadata - there doesn't seem to be a mention of it. However, looking at all of the other points, it's likely it is collected.
  • Interaction data - paragraph two, point four, says the information collected from their vendors and suppliers includes customer service interactions. You should know what duration is attached by now.
  • Third party sharing - paragraph two, point eight, says that your information will be shared to third parties like Twitter. Only if you actually connect your accounts, I guess, but still.

So, no, it doesn't look great at all. Bail.

2

burnerben wrote

surprised twitter doesn't collect tons of data, especially if you configure your settings properly.

1