Show more
Freddy :verified: boosted
Freddy :verified: boosted
Freddy :verified: boosted
Freddy :verified: boosted

As if @google doesn’t already know too much about us, now it wants our sensitive health data too! We have just launched a petition asking @vestager to block their merger with @Fitbit. Add your voice!

#NotOnOurWatch

pvcy.org/googlefitbit nitter.net/privacyint/status/1

NordLockers 10K bounty has been going on for 80 days, and only 412 people have entered. Yet, on the site it says:

"Remember, hackers all over the world are trying to get to the bounty reward first, too."

No they aren't.

Stop advertising yourself as a secure product and get lost.

discsec.net/posts/nordlocker/

@rw loved that quote, definitely something to bare in mind...

Freddy :verified: boosted
Freddy :verified: boosted

Questions to ask when evaluating an online service 

1. Are they open source to an extent that you're comfortable with? Do they ask you to run proprietary software on your devices? Is the code running on their servers open?

2. If they claim to be open source, do they use an OSI-approved or FSF-approved software license? If not, they're misleading you.

3. Is your personal data handled by such proprietary software? Do you ever transmit your personal data to their servers? Even if open source, they would be able to read and use this data however they wish and you wouldn't be able to tell - do you trust them to? What if they're compelled by law enforcement?

4. Do the needs justify the personal data they are collecting about you? If not, why are they collecting it?

5. If they claim to use encryption for the data which is transmitted to their server - question whether or not it's really private. Do they ever handle the unencrypted data? For example, if an email service claims to encrypt incoming emails, they have an opportunity to read the unencrypted email before they store it. Do they disclose these "gotcha"s, or do they make clear the limitations of their encryption? Is any encrypted information decrypted by software they control, like their web application, or a desktop application which is automatically updated without your consent? If so, they could decrypt it on your computer and transmit the decrypted data back to their servers.

6. Are they responsible for any scarce resources, like an email address, phone number, and so on, which you wouldn't be able to take with you if you leave? Are there ways to provide the same functionality without scarcity, such as the use of your own domain? If so, why aren't they offering them? How important are these resources to your identity, will your friends be able to find you if you choose to stop using the service?

7. How do they make money? What is their motivation for providing services to you? If their circumstances change, will their values change? How likely is change?

Freddy :verified: boosted
Freddy :verified: boosted

How would you feel if @google knew whether you're having unprotected sex, when you pass by your favourite stores or your level of fitness?

Yeah, we didn't think so. Ask @EU_Commission to put a stop to Google's data greediness.

#NotOnOurWatch

pvcy.org/googlefitbit nitter.net/privacyint/status/1

@sir who is to say that that's a bad thing. Knowing that people read your articles, or visit your website can provide serious motivation.

write.as has a view count for my articles. I don't particularly care about what that number is, but it is nice when it gets over a thousand or so... I wouldn't say that I'm spying on anyone by checking this. That could be like saying knowing how many views a video has is spying. To me, it isn't.

@kev yes, but thats not to say I would use it (if you get what I mean). What would distinguish it from the indie or xxiivv webrings?

Freddy :verified: boosted

RT @MarkoSaric@twitter.com

New post: How to pay your rent with your open source project

Including @Ghost@twitter.com, @discourse@twitter.com, @matrixdotorg@twitter.com, @gitlab@twitter.com and other great, sustainable open source products.

plausible.io/blog/open-source-

🐦🔗: twitter.com/MarkoSaric/status/

@yarmo I've had worse. About 3 of my submissions have been removed, and many downvoted. Its worth it to keep the discussion on topic though.

@sheogorath yes.

I told @kev about codefund as a way to monetise his site when he was discussing it on here. Sorry if it annoys you...

@amolith you used markdown in a toot... is it possible to learn this power?

Freddy :verified: boosted

If you are government spying worried than probably don’t use email.

Show more
Mastodon 🔐 privacytools.io

Fast, secure and up-to-date instance. PrivacyTools provides knowledge and tools to protect your privacy against global mass surveillance.

Website: privacytools.io
Matrix Chat: chat.privacytools.io
Support us on OpenCollective, many contributions are tax deductible!