How to de-Samsung Samsung Galaxy? To be sure, I would have to build the phone myself, which is impossible. Pixel with Graphene OS is more trustworthy than Samsung.


The government told Google to turn over information on anyone who viewed multiple YouTube videos and livestreams. #Privacy

https://www.forbes.com/sites/thomasbrewster/2024/03/22/feds-ordered-google-to-unmask-certain-youtube-users-critics-say-its-terrifying/


Really wish people would stop shilling Nostr as a "privacy" protocol. Nostr is an awesome decentralized protocol, but it is absolutely NOT privacy-respecting by default.

#cybersecgirl #privacy #nostr

nostr:nevent1qqsfysr087p8dxc2k6phg994meftq7674l4re4lujs8p7h2qjgksedqpr3mhxue69uhkummnw3ezucnfw33k76twv4ezuum0vd5kzmqzyp8t3qcs666wm9wx6e4rjkea8n64nwzl4my0w6ga4l2qt2fwq4wk6qcyqqqqqqgg3ktkt


Connected! https://image.nostr.build/d04a6dc866aed1478a6e50a97e44d4d711dadb43a4559cc04cf6ee79f14e761b.jpg #tor #webtunnel #privacy


😐
"Google sets a cookie in your browser that expires every two years. However, this timer is reset every time you use a Google service. In practice, this means that Google will never forget you, unless you spend several years in prison. Murder charges and the Google cookie never expire."

- Mikko Hypponen, "If It's Smart, It's Vulnerable".

#privacy #degoogle #decentralization


Awesome news for freedom of speech and privacy from The Tor Project!

"The Tor Project officially introduced WebTunnel, a new bridge type specifically designed to help bypass censorship targeting the Tor network by hiding connections in plain sight."

#cybersecgirl #privacytechpro #tor

nostr:nevent1qqs24z9hqu4alvqh24k90s4vnq36lcfuk7xre2ztf9ak6972vy88z9gpp4mhxue69uhkummn9ekx7mqzyqus2f7gl4rdzvvxrvnmjg6sm9guv90qfnz0tqx59ztfm6f28zvzqqcyqqqqqqg36hyry


Protecting Your Privacy in a World of Free Services: Practical Steps and Tools

The article provides strategies for enhancing online privacy amid prevalent free services, emphasizing minimizing data sharing, using privacy settings, understanding service terms, and employing encryption and secure communication tools

This is a long form article, you can read it in https://habla.news/a/naddr1qqxnzde3xqcnjvfjxccr2wf4qgstnsye2sdgdjjgvcff0svyphglxru786lrstqcny5wxqjus9wnqtgrqsqqqa28alluvk

Part 4 of a 5 part series for beginners about the importance of online privacy.

### Previous Articles
nostr:naddr1qqxnzdes8yunsd3c8yergdfcqgstnsye2sdgdjjgvcff0svyphglxru786lrstqcny5wxqjus9wnqtgrqsqqqa28ekuf3v

nostr:naddr1qqxnzdes8yunjdfnxsersd3sqgstnsye2sdgdjjgvcff0svyphglxru786lrstqcny5wxqjus9wnqtgrqsqqqa28ljryjn

nostr:naddr1qqxnzde3xqcrwvfs8y6nxdphqgstnsye2sdgdjjgvcff0svyphglxru786lrstqcny5wxqjus9wnqtgrqsqqqa283ze93k

### Practical Steps and Tools
In the vast digital landscape where free services are entwined with personal convenience, protecting one’s privacy often appears as a daunting task. However, the digital age also offers a plethora of tools and strategies designed to safeguard personal information. This article outlines practical steps individuals can take to enhance their privacy online and introduces privacy-enhancing technologies (PETs) that can significantly reduce the footprint left behind in the digital sand.

### Strategies for Minimizing Personal Data Exposure
The first line of defense against privacy invasion is minimizing the amount of personal data shared online. This can be achieved through conscious data sharing, utilizing privacy settings on social media, and understanding the terms of service and privacy policies of platforms.

- **Conscious Sharing**: Think twice before sharing personal information online, whether it's on social media, online forms, or registration pages. Question the necessity of providing detailed personal data for the service offered.
- **Adjusting Privacy Settings**: Dive into the privacy settings of online accounts and adjust them to the highest level of privacy comfort. Opt out of data sharing and tracking options wherever possible.
- **Understanding Terms of Service**: While often lengthy and complex, the terms of service and privacy policies provide insight into how data is collected, used, and shared. Tools like "Terms of Service; Didn't Read" (tosdr.org) can help simplify this information.

### The Role of Encryption and Secure Communication Tools
Encryption is a powerful tool for protecting data privacy, ensuring that information is readable only by the intended recipient.

- **Secure Messaging Apps**: Opt for messaging apps that offer end-to-end encryption, such as Signal or WhatsApp, to protect the contents of your communication from being intercepted.
- **Virtual Private Networks (VPNs)**: A VPN encrypts internet traffic, hiding your online activities from ISPs, advertisers, and potential eavesdroppers. It's particularly useful when using public Wi-Fi networks.
- **Encrypted Email Services**: Services like ProtonMail and Tutanota offer encrypted email communication, adding an extra layer of privacy to your email exchanges.
- Head over to https://www.privacyguides.org/en/tools/ to see the recommended tools and services to use. Also have a look a https://alternativeto.net/ and see if you can find OpenSource alternatives to the services you use now.

### Legal Protections and Rights
Familiarizing oneself with the legal protections and rights concerning online privacy can empower individuals to take action when their privacy is compromised.

- **General Data Protection Regulation (GDPR)**: For residents of the EU, GDPR offers some privacy protections, including the right to access, rectify, and erase personal data held by companies.
- **California Consumer Privacy Act (CCPA)**: Residents of California can leverage CCPA to request businesses to disclose the data collected about them and opt-out of the sale of their personal information.

### Privacy-Enhancing Technologies (PETs)
Beyond individual actions, numerous technologies have been developed to enhance user privacy automatically.

- **Privacy-focused Browsers**: Browsers like Brave or Firefox with privacy extensions can block trackers and ads, reducing the amount of data collected by websites.
- **Search Engines That Respect Privacy**: Switching to search engines like Brave Search, DuckDuckGo or Startpage can prevent search queries from being tracked and linked to your identity.
- **Data Anonymization Tools**: Tools that anonymize data, such as Tor Browser, can obscure your online activities, making it difficult for trackers to build a coherent profile.
- Head over to https://www.privacyguides.org/en/tools/ to see the recommended tools and services to use. Also have a look a https://alternativeto.net/ and see if you can find OpenSource alternatives to the services you use now.

### Conclusion
Protecting your privacy in an era dominated by free services is both a right and a responsibility. By taking proactive steps to minimize data exposure, utilizing encryption and secure communication tools, and leveraging legal protections, individuals can significantly enhance their online privacy. Moreover, adopting privacy-enhancing technologies not only shields personal information but also sends a clear message to service providers about the value users place on their privacy. As digital citizens, we have the power to shape the digital landscape into one that respects and protects our privacy.


# Guardian Project Announces Its Repository Is No Longer Included in F-Droid by Default

"Guardian Project remains committed to producing free software. But for some of our key use cases, it is unfortunately not yet possible to address them without including some proprietary libraries in our free software apps. This means that the Guardian Project repository is no longer included in F-Droid by default."

#cybersecgirl #fdroid #guardianproject

https://guardianproject.info/2024/02/24/the-future-of-our-fdroid-compatible-app-repository/


A leaky database spilled 2FA codes for the world’s tech giants

"...the technology company left one of its internal databases exposed to the internet without a password, allowing anyone to access the sensitive data inside using only a web browser, just with knowledge of the database’s public IP address."

One more example of how people are usually the weakest link in pentesting and cybersecurity.

#cybersecgirl #privacytechpro #cybersecurity #infosec #opsec

https://techcrunch.com/2024/02/29/leaky-database-two-factor-codes/


We are inflated with artificial needs that we can only satsify with low-quality products.
#wakeup


I like to be underground.


Interesting.

nostr:nevent1qqs83j4q9q2tm0w94mlz8559hfcrv7vja5rw4u48jd2z2f2tlpk26tcpz3mhxue69uhhyetvv9ujuerpd46hxtnfdupzps04prtqjh0j7gd26z4pjevy489hf7qyl68ps8d0yp0vmjd8fdcqqvzqqqqqqyecsuv0


#GrapheneOS releases significant new security enhancement, USB-C Port Security

#cybersecgirl #privacy #security

nostr:nevent1qqsr2m8v4zk36wnwn4rh5kfse77mnqrcy79k3gpp7wkw8pf5sff3jfqpp4mhxue69uhkummn9ekx7mqzyrq45kn9nph84dqnfhhr4wzj2nd9ch2tqnncknckeq5rwxfdx4gc2qcyqqqqqqgvuvrvw


Ups...

https://torrentfreak.com/piracy-shield-cloudflare-disaster-blocks-countless-sites-fires-up-opposition-240226/


Extensions can be used to fingerprint your browser, so for best privacy practices I recommend installing extensions sparingly.

#uBlockOrigin is a must, then #NoScript, and depending on your threat model, possibly #Bitwarden password manager.

Mullvad browser comes with the first two pre-installed.

Since logins can also be used to track you, I highly recommend using #qubesos so users can create specific qubes (appvms) for specific purposes or identities.

For example, a user can have one qube with its own IP and OS and browser specifically for using the #alby extension, #nostr etc., that is not used to log in to anything else on the web.

I highly recommend everyone practice privacy through isolation and compartmentalization to the degree their threat model calls for.


Yes.
nostr:nevent1qqsqp20gu2agt5sc4llv4253drh34r7aweswv0pxx78pyx9k4cz2emgpz3mhxue69uhhyetvv9ujuerpd46hxtnfdupzp78xcep59u0q2fyqvv8z0cgpdh8rtlp6v98xqs60aa92y5pn9r9fqvzqqqqqqyzmsg6v
#privacy #plebchain


Nothing to hide, but so much to lose.


Nginx core developer quits project in security dispute, starts “freenginx” fork - Enlarge (credit: Getty Images)

A core developer of Nginx, curr... - https://arstechnica.com/?p=2003602 #invasionofukraine #opensource #webservers #freenginx #security #hosting #ukraine #biz #russia #nginx #tech #cves #f5


For the people wishing to see on Nostr the features #GrapheneOS Vanadium browser has:

- Type-based Control Flow Integrity enabled

- Hardware memory tagging (MTE) enabled for the main allocator

- Strict site isolation and sandboxed iframes

- JavaScript JIT disabled by default with per-site override option

- Native Android autofill implementation to avoid needing sandboxed Google Play for autofill support

- WebGPU disabled for attack surface reduction

- WebRTC IP handling policy toggle to control peer-to-peer WebRTC mode

- Compiler hardening: automatic variable initialization, strong stack protector, well defined signed overflow

- High performance content filtering engine using EasyList + EasyPrivacy with a per-site override option

- More complete state partitioning without origin trial opt-out

- High entropy client hints replaced with the frozen user agent values to avoid leaking device/OS info

- Battery API always shows the battery as charging and at 100% capacity

- Trivial subdomain hiding disabled

- Consistent browser behavior across users without usage of feature flags and seed-based trials
- Nearly all remote services disabled by default or removed. Only connects to GrapheneOS servers by default. There are only 2 default services: component updates such as certificate authority and certificate revocation updates and DNS-over-HTTPS connectivity checks when enabled

- Web search and global search intents to replace the need for an OS search app

- Option to always open links from other apps, custom tabs and search intents in Incognito mode

Better default settings, including non-user-facing flags:

- Reduce Accept-Language header by default (only available via chrome://flags)

- Third party cookies disabled by default

- Payment support disabled by default

- Website background sync disabled by default

- Sensors access disabled by default

- Protected media (DRM) disabled by default

- Hyperlink auditing disabled by default

- Do Not Track enabled by default mainly to avoid users differentiating themselves from others by enabling it since it has no real value

- WebRTC IP handling policy set to the most private value by default instead of the least private value (turned into a user-facing option by Vanadium)

nostr:nevent1qqstu7eafcpguaqfplrvh88vu5ked4ke6kcxh7svrllastrdh9vgnnspz3mhxue69uhkummnw3ezummcw3ezuer9wcpzps26tfjesmn6ksf5mm36hpf9fkjut49sfeutfutvs2phrykn25v9qvzqqqqqqyyjcwrn


I love ZFS (file system), simple, flexible and powerfull. I am building my personal encrypted cloud servcie on raid-z.
LUKS -> ZFS -> VMWare, that's my combination.


I live in France, I use #VPN server in Germany, but only browse French language sites and buy from French online shops. It is possible to find out where I live, especially as it is possible to tell from my IP address that I am using a VPN.


Mice die in mousetraps because they don't understand why cheese is free.

#PrivacyMatters #privacy


infosec tip: stop oversharing (online and off)

a single piece of personal information might seem harmless on its own, but when combined with other openly available information that has been shared or is accessible, it can be analyzed by threat actors or open source intelligence (OSINT) practitioners to build a detailed picture of you, your location, your workplace, and the people around you, and can make it easier to impersonate you.

#cybersecgirl #osint #privacy

https://image.nostr.build/7847016bfe05688cb00be135f770038c86745c16c4081905a4a33c98e1272785.jpg#m=image%2Fjpeg&dim=1080x1071&blurhash=%7CZO%3A%3BJoL%7Eqof%25gozWBj%5BV%40%25MWBofj%40RjayWAj%5Bof_3ofD%25juV%40ayt7axogoeWBaeWVt7WVofofWAt7ofRjoej%5Dj%5BaxWVWB9FWU-%3Bayj%5Bj%5BWBj%5BWBxuf6ayj%5BRifka%23ayozxuayIoayxuoLt6j%5BRjxafPV%40ayRjafj%5Dayt6&x=68ec4409808275abe6fe69e96ef7a69823a00473747cebb3bb69e1d8c313744c


https://scenesat.com/

#demoscene


stoo 👏🏻 using 👏🏻 facebook 👏🏻

Each Facebook User Is Monitored by Thousands of Companies

#cybersecgirl #privacytechpro #facebook

https://www.consumerreports.org/electronics/privacy/each-facebook-user-is-monitored-by-thousands-of-companies-a5824207467/


#privacytechpro tip: you can connect orbot to tor on android #GrapheneOS without it taking up a vpn slot.

connect to your always-on vpn ex: #mullvad or #proton as usual. be sure to use splittunneling to exclude apps that don't play nicely with a vpn from vpn traffic for best experience.

open orbot, make sure 'start orbot on boot' and 'allow background starts' is ticked in settings. then manually connect via your notification or in the app

now #orbot will auto-start and connect to tor while your always-on vpn stays connected

#cybersecgirl #tor #vpn #guardianproject

https://github.com/guardianproject/orbot


#privacytechpro tip: google collects your activity data, this includes things like your search queries, websites visited, #youtube videos watched, and locations visited.

take back your privacy. say no to google's data harvesting spyware.

go to https://myactivity.google.com/ and delete and turn off everything you can.

#cybersecgirl #google #spyware #infosec

https://image.nostr.build/0ae0ced67ad31f60dcad091f7a26581cd2cb46244867aa421e03e7763ddda23a.jpg#m=image%2Fjpeg&dim=720x1150&blurhash=%5E26u09%3FvH%3BaKEoRP%25jIU8%5EoLpLxb9dNGi%40oLpKWB4pof%24%7Baep0V%5B9GWBxtoLxuof-ot7o%24ayjDj%5B%24_jaS*a%7BVqfkndn%25T2WVR2WBDzRPb%7CozitWo&x=f141c5a4aab8fbed73a3a73f09e43377766f14f05760f24734bfc336de2dfb20


once more for those in the back. if you care about your privacy and security, stop using telegram.

#telegram does not use end-to-end encryption by default, collects and stores user data, including your IP address, username, phone number, contacts, and device details. it is not a safe or secure app.

#cybersecgirl #telegram #comsec #opsec
nostr:nevent1qqsqjgytq2fjcscf57eux2s8dnpxdjxdfmvmq8yuxxputqh4vl8a54spzpmhxue69uhkummnw3ezuamfdejsygrq65m8turaa6086au3pmayg6pdsl94xgcnhfnt3azyn4jfzu3fdvpsgqqqqqqstypxcw


Trusted third parties are security holes.
nostr:nevent1qqs0jnt0dajtejddvaythmxnvkq2dhyzfglt5lu4j85r5367kstxxqgpp4mhxue69uhkummn9ekx7mqzyzcls5fue694yzhh47e4n0mdmpj2cla82x6yl33kc45g9k360gnt5qcyqqqqqqgjehgx5


More #GrapheneOS coverage, this time by Android Police. GrapheneOS appreciates the very positive feedback with the discovery of vulnerabilities. However, the same unfocus with what the mitigations the GOS team suggested from other articles are present here.

Automatic reboots do not entirely fix this vulnerability, rather it is a part (of many) countermeasures against threat actors who'd want to take advantage of it. While a safe power off or reboot caused by our auto-reboot feature does make a scenario where taking advantage of this impossible (by means of making the device BFU), that weakness would always still be present. If a threat actor timed to attack the device when the reboot hasn't happened then there is still window of attack. Security researchers who have read these articles have already noted criticisms and holes in relying only on automatic reboots (as we have) and have been reading the article believing this is our approach when that is not entirely true. GrapheneOS doesn't rely just on this single feature,  we have several.

Proper reset attack protections, an example such as preventing sensitive data in memory being used by zeroing them and patching up the problems with unsafe reboots would fix this. This is what GrapheneOS suggested to Google.

Any suggestions that this feature is the entire proposed solution is incorrect and the project cares deeply about real security enhancements that eliminate entire vulnerability groups and capabilities of active threats in the operating system. There is no utility to just defeating vulnerabilities one by one. Computer and data security requires cooperation by sharing information to the community, and it's very important that said community have the most accurate and reliable information about modern threats and how to defeat them.

https://www.androidpolice.com/new-exploit-shows-google-pixels-auto-reboot-option/


Musk, like Zuckenberg, lives in the bubble of his ego. As expected, the blue stamp changes nothing. It fills the rich man's wallet.
https://arstechnica.com/tech-policy/2023/10/musks-paid-checkmarks-help-fuel-xs-spread-of-israel-hamas-misinformation/


Impressive work of citizenship. Guy collected screenshots for Polish National Broadcaster news (4million, for 2016-2023)

https://video.nostr.build/d21977613c54d8784fbbcc7a1701330a3a6b6e5b6566f5679e46932366c0b0b6.mp4

Attaching an english summary of Bloomberg article.

https://i.nostrimg.com/348a0dead8e75b07d59e3a22b47baf290eb05d1c78535c9999ffaa808830594c/file.jpg

Late congrats to Polish people on a corrective course! #Democracy #Poland


GN 💜

https://nostrcheck.me/media/public/nostrcheck.me_3407312603378638131697592188.webp


Will work for tek. #tech #cyberpunk #retro

https://image.nostr.build/1cca2fee738015dbde5c5afbf41fdfd2762e7969a2dea9b3bbfd90bf20a8d578.gif


Freedom and decentralization:

Has no ONE
Has no one way
Has no one value system
Has no one option
Has no one means of exchange
Has no one algorithm
Has no one leader

It has many individuals that can choose to be together or trade between or build together voluntarily. It will look like 1000s of different societies existing in harmony, some exclusionary and some open. There will be lone wolves and communes. There will be prosperity and struggle. Available to all will be hope.

https://image.nostr.build/cfcc7a32299c63a8e8344b10d86a57b77301e7a67fa7c977725a23e96a15e7af.jpg


Peace!

https://image.nostr.build/64bce8ed20e8e621cab3c8088ebac7cc2501d0f210feffe128f6d2fc9e489b9a.jpg


#Zapathon #privacy

https://image.nostr.build/8418768e77c26bd2fde77b16bdb424081b0fee9fa078ea9c1215f1a1ec094e19.jpg


OrganicMaps is also good.


Hi #nostr. I'm trying to find my way in free cyberspace.


My set-up of many years.