• 6 Posts
  • 66 Comments
Joined 2 years ago
cake
Cake day: May 6th, 2024

help-circle

  • Short answer: no. Tor is specifically designed to mask all network requests from the Tor browser. All the cafe can see is your connection to a Tor node.

    If they were somehow detecting video based on traffic patterns ( how often packets are transmitted or received they’d have to sever the only connection they see and your whole Tor session would freeze or need to connect to a new bridge. I believe Tor even attempts to try to mask traffic patterns to disassociate guard node and exit node traffic.

    Most likely invidious was having issues.

    If you control the access point at home, see if you can put your devices on a separate VLAN. This should help isolate your devices from any infected devices. Otherwise using a hot spot will isolate you from infected devices.



  • Do you want it to be so complicated that no one you know in real life is able to use it for more than two weeks before they make some kind of mistake or change that deletes their entire message history and identity? Matrix

    Do you want a slim chance that friends and family might use it, but you have to listen to privacy nutjobs tell you your app is a CIA NSA PsyOp and you might as well cc: potus(at)whitehouse(dot)gov all your messages, it’s run by an american non-profit obviously it can’t be trusted? Signal



  • listless@lemmy.cringecollective.iotoPrivacy@lemmy.mlSignal in 2026?
    link
    fedilink
    arrow-up
    150
    arrow-down
    3
    ·
    4 months ago

    The client is open source, so it doesn’t matter what the server code is, you can see everything the client sends and therefore tell what possible data is being collected.

    It’s run by a non-profit so there’s no shareholders to please.

    Your messages and decryption key are not stored on their servers.

    It’s been independently audited.

    They have publicly posted responses to user information requests where they only provide the account creation date and last access time.

    The (admittedly incompetent) US government recommends using Signal (for non-classified information) and top officials have been caught using it (Houthi Working Group).

    You can never be 100% sure, but it appears to have excellent security and privacy.




  • First they came for my email address, and I did not speak out because I had nothing to hide. Then they came for my phone number, and I did not speak out because I had nothing to hide. Then they came for my precise location at all times, and I did not speak out because I had nothing to hide. Then they came for me and had evidence that I emailed a nearby business a month ago, called a nearby business last week and location data said I was nearby at the time of the crime and there was no data left to speak for me.






  • Just because the laptop is powered down does not mean that no circuits are getting power. Wake on LAN/WLAN is a thing, and most devices without a physical power switch, (a power bitton is not a switch), mean that there is a miniature power draw listening for that signal. The manufacturer might have other bits that are still active as well, you can’t be sure. If your ultra paranoid about state level actors it might be a good idea. If you’re just worried about somebody swiping your credit card number or something, probably overkill.



  • Web pages are not allowed to list your extensions. They can indirectly surmise you have certain extensions based on how your requests differ from expectations. For example, if they have advertisements, but your browser never actually makes any requests to load the images, CSS, JS or HTML for the advertisements, they can deduce you have an ad-blocker. That’s a datapoint they now have to ID you: “has an ad-blocker”

    Now let’s say they have an ad they know AdBlockPlus allows, but uBlock Origin doesn’t. They see your browser doesn’t load that ad. Another datapoint: “Not using AdBlockPlus”.

    Based on what requests go back and forth between your browser and their servers, they map out a unique fingerprint.

    Now you visit another site, and lo and behold, all the same quirks are found. Tada, they now say “hm, probably the same browser,” and start personalizing content. Site use an ad network, so it’s the common denominator, not the sites you visit. The ad networks do the between-sites tracking.

    also, VPN does diddly squat when you login to some service like google, facebook, xitter, amazon, outlook, reddit, etc. You logged in as you. They don’t give a shit you’re logging in from another IP. And if the sites are working with the same ad network, if you’ve ever logged in from your real IP even once, they they just add another datapoint about you: “Sometimes uses a VPN” and that gets tucked away in your permanent record.

    nothing you do online is private. I’m not saying “give up” but it’s pretty bleak and I don’t see it getting better anytime soon.