andylicious1337 1w ago • 75%
it is still a great list so thanks for getting it back up 👍
but i have a few questions: is there a reason (or privacy concern) why Linux Mint isn't one of the recommended distros? and am I wrong or isn't bitward a good privacy friendly password-manager?
andylicious1337 1w ago • 100%
oh ok. yeah i did some testing yesterday and it already pissed me off, that it asks you to register your instance... and so I swicthed to snikket :D
andylicious1337 1w ago • 100%
i know Signal and use it with a few friends but i am always on the adventure of trying out new ways of communication and that is why i was wandering if Rocket.Chat could be a good privacy messaging option :)
andylicious1337 1w ago • 100%
snikket looks really nice. i tried ejabberd but failed setting it up 🙈🙈🙈 but snikket looks promising.
Hi :) what do you guys and gals think about using Rocket.Chat self-hosted as a private messenger? Is this a bad idea or would it be ok?
andylicious1337 2w ago • 100%
oh ok. I am using Nabu Casa Cloud for mine so i am always online via cloud. i tested it with enabling flight-mode and the app goes directly to the disconnected state. Altought the app I developed for a share grocery-list has the same issue, so I will give HA a try anyway :) so still a good recommendation 😀👍
andylicious1337 2w ago • 50%
you might be right about it being a hassle but if someone is asking something like this inside a community about privacy it most certainly does not meet OPs critera :D
andylicious1337 2w ago • 100%
thank you for the info. that clears up some doubts I had with xmpp :)
andylicious1337 2w ago • 100%
that is an idea I might take :) how does this handle being offline? for example i sometimes lose connection in same stores here, but I still need to at least see the entries on the list :)
andylicious1337 2w ago • 85%
kinda funny to recommend Google Keep inside a privacy-community :) but ok, everybody has their threat-modell i guess :D
andylicious1337 2w ago • 83%
but why isnt it secure? if you know that the other person is using the same version of omemo it is secure. and if you are self-hosting it, meta-data is no issue either
andylicious1337 2w ago • 100%
ok but if I'd recommend a client to the people I want to text with via xmpp I can be certain which client they use. My idea isnt to write with strangers but only with real people I know (friends and family).
andylicious1337 2w ago • 100%
I am asking because I want to understand the "hype" about XMPP that and why it is always mentioned when someone is asking for a good privacy friendly messenger :)
Ok so, here I am again asking another question 🙈🙊 But hear me out: I read this post here about, if there even is a good privacy messenger that can be trusted. Someone in the comments mentioned Conversations (a XMPP client for Android). This made me look into XMPP and at the moment I am giving Conversations a try. Reading into XMPP, I couldn't find a problem security or privacy wise. Also it seems like it does not matter what server I use (atm. we are on 07f.de) since it is all e2e with OMEMO. Am I missing something or is it really this good? And if I dont trust anyone, I could host my one instance of ejabberd, right?
Ok so here is the situation: As many here (I guess), I dont like Meta, but since I want to promote my 3D-printed stuff more, I see my self in a position where there is no way around Instagram 🤢 So my question is, if maybe someone here already uses Instagram here "privately" or if someone has ideas on how to use it but still giving Meta as few info as possible? My idea at the moment would be to use Mullvad for every traffic going to insta. For signup I will of course use an email with a custom-domain that is never used somewhere else and if I like other posts, I will only use the account, related to my business. My personal account is just for getting in touch with real people I know and to promote my business-account. The personal account will not have my real name and uses also a different email from a custom domain. Thanks in advance for you comments and trust my, I really hate having to submit to Meta and their stupid social media crap.... Edit: Thanks for all your great feedback. I will def. look into all of these ideas 👍 I also forgot two things: 1. I am using Linux only for this on PC and no Windows(dont know if this changes anything) 2. I am using LibreWolf on Linux Mint and Waterfox on Graphene OS (of course with Ublock and Privacy Badger ;) )
andylicious1337 3w ago • 80%
I would love to do the same (although not the hardcore step with arch :D) but how would I game and also isn't the support for drivers sometimes really iffy?
andylicious1337 4w ago • 100%
that is only done once at the creation of an account and does not proof that the number ist not saved hashed.
andylicious1337 4w ago • 100%
ah ok. that makes sence. so only if the secure channel of the key exchange is somrhow attacked, the encryption can be broken, correct? i dont wanna ever use telegram (not even on 1-1 e2ee chat) but basically they are still bad since they use encryption wich is not a standard and could be compromised?
(i hope thats it with all the question i have 🙈)
andylicious1337 1mo ago • 50%
ok but if the source of the server is not know, how can the client be save?
I know how e2ee works but couldn't a bad closed-source server still be a problem?
btw. not trying to call you out, I just really want to know, cuz I cant get my head around it 🙈🙊
andylicious1337 1mo ago • 50%
but if this is your argument, you could also say that Telegram is good because their client can also be built from their open source. of course you have to activate e2ee on a 1-1 chat first...
andylicious1337 1mo ago • 100%
good points altough the number is note saved. the hash of the phonenumber is hashed so Signal could not hand out your number, just the hash.
Hi :) How concernt are you about leaking your personal information by using a custom-domain for emails? Because anyone could see, who registered the domain, correct?
andylicious1337 1mo ago • 100%
that's why I love great communities like this one here. you aks one think, maybe totally overthinking and read an answer like this, which helps you realize the overthinking :)
thanks for that. what you say makes sence. I really NEED to make a threat-model to find out, what is worth keeping private and what isn't worth the trouble.
Thank you :)
andylicious1337 1mo ago • 100%
oh ok, I have not tried that yet. I have only set up one address which I use yo send and receive from.
about the encryption: I thought the point with e2ee encryption on proton is mainly, that the mails are stored encrypted one their servers so they can not read them or hand them out to anyone.
It's me again with another question for recommendation 🙈 This time I am searching for a new Email-Provider: Currently I am using mailbox.org (privacy-friendly provider based in Germany). Since my subscription is comming to an end there, I tought about switching to proton mail-plus. What I like about them is, that they have an easy way of creating alias-emails and also support the option to use your own domain. But maybe you gals and guys have another great provider which offers good features for a good price. Also: I dont need Cloud-Storage or anything like that, so just mail is fine. Thx in regards :)
Hi :) I know that Telegram is not save and not a good messenger if you are a privacy-geek. Sadly some parts of my family still think so. I brougth up the arguments, that they are cooperating with Russia, that they or closed-source on the server-side and that e2ee is not on by default and only available for 1-on-1 chats. My question now is, if you gals and guys might have some other arguments or sources I could use. I don't want to convince anyone to switch away from Telegram (because I am no missionary :D) I just want people to understand the risks of using Telegram.
Hi privacy fans :) I've been a lurker in this lemmy-community for a while now and a "fan" of privacy for about 4 years now. Since 4 years, I've been on and of with VPNs. Sometimes I think I dont need one, sometimes I change my mind and start searching for one. The only one I tested (and used) so far, was Mullvad. But now reading about Surfshark, I was wondering, if there might be a better solution or if Mullvad is already the best solution for VPN. What I dont like about Surfshark is, that it is part of North Security and that it is not open-source (or at least I can find any info about that). I hope you guy and gals have some suggestions or recommendation :) Edit: wow... thanks for all of your fast replies. Coming from Reddit, I am used to only shitposting. Thanks for all your input. I will look into all the mentioned VPN hosters, thx 👍