• 3 Posts
  • 28 Comments
Joined 3 years ago
cake
Cake day: September 9th, 2021

help-circle



  • To be frank, the OP seems to have no understanding of the underlying technology at play here.

    I suggest to the OP to use umatrix webbrowser extension and examining what 3rd-party websites are contacted when you visit say… reddit, vs say… a mastodon instance.

    You will see that visiting a mastodon instance does not contact any 3rd-party trackers or ads.

    If this is not proof enough, then OP, you should realize that the whole point of the fediverse is to shed ourselves of the shitty ad-tech environment that arose during the 2010’s, there is not a centralized controller of a federated site like mastodon or peertube, so you can always spin up your own server that is completely free of tracking and just use that.

    I hope that makes sense.








  • Both tiktok/facebook encourage conformity, discourage intelligent thought, reward mindless consumption, shortens attention spans. the companies spy on users with impunity, and the software is locked down and impedes the open internet.

    There’s nothing inherently wrong with a service like this existing. facebook has pioneered this parasitic model, dominated the internet for years, the bar is so low that it cannot possible go lower.

    Intelligent families will prohibit their children from unrestricted access to websites like facebook/tiktok/youtube.

    All in all, it is a trend and will be replaced, and whatever replaces it will probably be an improvement.


  • I cannot afford this, you could buy a (albeit shitty) car for that price!

    I wanted to get a pinephone, but that thing is made in China and owned by a HongKong company.

    Due to lack of secure/reliable phone options, may just get a dumb-phone that has a hotspot. . . There’s nothing wrong with that. Besides, I already use an offline Garmin GPS ( works great ), I have a nice camera for photos, and use a laptop for most internet usage.

    I may have a strong case of cognitive dissonance, but abandoning my smart-phone is starting to sound like a pragmatic idea.






  • I appreciate your critique and well written essay, as well as your motivation. Thank you again for writing this, and I will heed your advice and be more skeptical of signal foundation. However, but I have followed Marlinspike for years, and was an early signal adopter, so I do have some trust that the project is not compromised.

    comment from lobster also makes some good points here, and I tend to agree with this guy

    This take comes up every so often, e.g. in some of the linked articles. I’m sympathetic to many of the concerns raised, but I’ve yet to see serious engagement with some of the deeper issues raised. For example: A significant number of security and privacy-enhancing technologies (PET) have received US military funding or other support. See: Tor from the Naval Research Lab, OpenBSD from DARPA. SELinux comes from the NSA. The Open Technology Fund has also support Ricochet, WireGuard, ? Delta.chat, and Briar (that the author recommends), etc. (link). Are all these tools suspect? As an aside, the EU also funds a significant number of PETs. While not as egregious as the US, the EU is no enemy of mass surveillance, either. One reason for Signal’s centralization is, in short, that it’s hard to update federated protocols, including their security features. E2E encryption in XMPP or email is still a pain, and far from usable for most people. I hope that e.g. Matrix can pull it off, but they face challenges that centralized services don’t. With a centralized service, you know that you can handle unforeseen security developments quickly. Shouldn’t this be a key priority for a security tool? Using phone numbers as identifiers has its benefits: you don’t need to store users’ contacts on your servers. A service like Wire, that does allow you to sign up without a phone number, has to store your full social graph on their end. Avoiding this sort of metadata is a hard problem — Signal has opted for minimizing the amount they store. It’s hard to overstate how much ease of use matters when it comes to gaining mass adoption for these tools. For a long time, privacy & security tools were super user-unfriendly, reserved only for a small technical elite (see PGP). If we want to combat mass surveillance, we need tools that the masses want to install (in my experience, it’s hard enough to convince activist groups to migrate off Discord or Slack — the alternatives need to be similarly easy to use).

    How do you feel about the guy who donated 50 million to Signal? He probably has the most influence on the project second only to Marlinspike.


  • chiefstorm@lemmy.mltoPrivacy@lemmy.mlDessalines - Why not Signal?
    link
    fedilink
    arrow-up
    4
    arrow-down
    3
    ·
    edit-2
    3 years ago

    I appreciate and admire your motivation @dessalines@lemmy.ml

    However, Signal is like the one application that’s user friendly and is NOT compromised

    I don’t trust the US, but I do trust Moxie Marlinspike to be a privacy advocate, he has spent his entire career being an advocate for privacy.

    Signal went a whole year without publishing server source code because they were being subtle about introducing mobilecoin crypto-asset support, and they didn’t want people to jump hog wild into mobilecoin. Now, they have released the server source code, so… unless they are not actually running that code, then this argument is invalid.

    Not to mention their website makes it sound like they will introduce support for more privacy friendly crypto, such as Monero. Perhaps the mobilecoin was just a test implementation to begin with.