• 0 Posts
  • 36 Comments
Joined 2 years ago
cake
Cake day: July 11th, 2023

help-circle
  • That a timing attack could be successful is not a given. It’s a possibility, yes, but there is very likely sufficient mixing happening to make that unrealistic or unreliable. An individual doesn’t create much traffic, and thousands are using the server constantly. Calling it a honeypot or claiming the phone number and device is are available is a stretch.

    Timing attacks can work in tor when you are lucky enough to own both the entrance and exit node for an individual because very few people will be using both, and web traffic from an individual is relatively heavy and constant to allow for correlation.




  • At least in theory, this is mitigated. The signal activation server sees your phone number, yes. If you use Signal, the threat model doesn’t protect you from someone with privileged network or server access learning that you use Signal (just like someone with privileged network access can learn you use tor, or a vpn, etc).

    But the signal servers do not get to see the content of your group messages, nor the metadata about your groups and contacts. Sealed sender keeps that private: https://signal.org/blog/sealed-sender/

    You would obviously want to join those groups with a user Id rather than your phone number, or a malicious member could out you. It’s not the best truly anonymous chat platform, but protection from your specific threat model is thought through.

    edit: be sure to go to Settings > Privacy > Phone Number. By default anyone who already has your phone number can see you use signal (used for contact discovery, this makes sense to me for all typical uses of Signal), and in a separate setting, contacts and groups can see your phone number. You will absolutely want to un-check that one if you follow my suggestion above.


  • It’s insane that this is even needed. Show me ads for things relevant to the content of the web page and nothing else. If I’m reading about furnace filters, sure, show me an ad for buying furnace filters, I might buy from you, but don’t follow me around for 2 weeks shoving furnace filter ads in my face. If I’m not reading about them anymore, I’ve moved on.

    The added benefit of this approach for advertisers would be that you can literally embed the ads in the page, making ad-blockers ineffective. They literally chose the worst method for everyone involved.


  • I use both Nextcloud’s Memories app and Immich simultaneously for now, with the same photos. Immich is pointed at a read-only bind-mount of my Nextcloud photos folder on the server side, so they see the same photos. My photos are a mess and I absolutely need the local AI stuff, and right now, neither is perfect, so I have both running and bounce back and forth. If one of them clearly pulls ahead, I’ll probably settle on that one in isolation.


  • This really could use some clarification on what category these belong to. Most of these projects are open source projects where you can either self-host the tool, or choose from one of many free or paid instances online. If someone lacks the technical skill, hardware, or time to self-host, they should shop around. Often there is an “official” instance by the developers, but that’s not always the best option. Sometimes a paid option with more resources is going to be more stable and performant.

    Other suggestions are individual companies services, and a couple of these are just applications you install on your device. It would be helpful to readers to clarify.


  • Collabora makes a bunch of products, and tries to monetize them in various ways. The desktop apps are basically just a Libreoffice derivative and not really worth your time IMO, but either find a provider with both Nextcloud + Collabora Online installed, or self host them, and it’s a fully free and open source alternative to the whole Google Drive and Google Docs platform.


  • Nextcloud paired with Collabora is awesome! (Might be just be called “Nextcloud Office” depending on how it’s packaged up, but it’s the same thing). With Google Docs, you have drive, but the “files” it syncs for your Google Docs documents are just links to open Google Docs in a web browser, you need to manually export them if you want real files. With Nextcloud/Collabora, you literally have .odt or .docx files synced to your computer, but you can open them online with Collabora and have a full “google docs” or better collaborative online interface. Make a change, and the .odt file on your hard drive changes. You can work or collaborate in Word, Libreoffice, or in the web browser with Collabora on the same files (synchronously, only with the latter, but asynchronously with any of them - with the obvious caveat that slight formatting differences will always happen with different applications so keep your collaborative documents simple). It’s brilliant, and the interface is more feature-full than google docs too.


  • It’s more complicated than that. It /did/ work in some sense. The prevalence of severe alcoholism was insane prior to prohibition and it dropped precipitously. The problem is, the cost of prohibition is so many actual lost lives. Both from unsafe supply and organized crime.

    A public health approach also can reduce the harm of alcoholism while not creating new deaths. It’s worth understanding the difference so we can expect, for example, pot to become more abused after legalization, but if public health measures are in place, limited harm.



  • Entropy is calculated from the character set size to the exponent the length of the string: E = log2(R^L). A long string of numbers can have more entropy than a shorter alphanumeric string with special characters. I looked it up and apparently their account number is 16 digits. That’s 53 bits of entropy, which is not guessable. Someone brute forcing would have quadrillions of login attempts to try.



  • Wireguard is just the vpn software, not a service. Most of these services are running wireguard under the hood now because it’s so good. You can also use wireguard yourself to connect your own machines together, (or friends machines, allowing file sharing like a LAN) but that doesn’t help you with torrenting.