Privacy

3976 readers
253 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 2 years ago
MODERATORS
1
 
 

Ring is terminating its partnership with police tech provider Flock Safety, the Amazon-owned company announced Thursday.

The partnership between Flock and Ring came under scrutiny after the Amazon doorbell company ran an ad during the Super Bowl that touted a “Search Party” feature that uses AI to help locate lost pets. When a user initiates the feature, it activates a network of participating Ring cameras, which scan footage for images resembling the missing dog. The Electronic Frontier Foundation called the feature a “surveillance nightmare.”

Flock, meanwhile, operates a network of automated license plate readers, and sells access to that software to customers that include law enforcement agencies.

Ring’s decision to cancel its partnership with Flock comes as tech companies face growing pressure to reexamine their work with federal agencies including Immigration and Customs Enforcement. Earlier this week, Salesforce employees pressed CEO Marc Benioff to cancel “ICE opportunities,” CNBC reported. More than 900 Google employees also asked their company to divest itself from ICE and U.S. Customs and Border Protection.

2
 
 

Nancy Guthrie's kidnapping has led many to question how private their data actually is, as the FBI has managed to recover footage of a suspect from her doorbell camera, despite it being supposedly disabled.

Shared by FBI Director Kash Patel in a post on X, the images and video footage shows a masked individual approach her house, following power being completely disabled.

It shouldn't surprise you to find out that your data is never truly safe or secure if it's being uploaded and shared on the cloud, as while the convenience is certainly handy, it's far from private.

As reported by Tom's Guide, the situation in Guthrie's case is a little more complicated though, as she appeared to have a 2nd Generation Google Nest Doorbell, which is both wireless – so it didn't shut off when the house's power was cut – and it has a small amount of on-device storage.

Following the Wi-Fi connection cutting out at her home, the device then switched to local storage, with three hours of event-based data also captured without a Nest Aware subscription.

This footage was then stored within Google's servers despite being 'deleted' – as things don't actually get removed entirely straight away – allowing officials to recover it from the backend before it was overwritten.

3
4
2
submitted 1 hour ago* (last edited 29 minutes ago) by artiman@piefed.social to c/privacy@programming.dev
 
 

Hello i am looking for a private messaging app to chat with my family, What would be the best option to use I want it to be decentralized, user-friendly and have good and secure E2EE, must be free as in beer and open source, I have used matrix and didn't like it because of encryption issues, I am currently using XMPP but I am having issues with image uploads and image downloads, I am considering deltachat and it seems to be the best option, if anyone has any suggestion that is better i would appreciate it.

5
6
7
8
 
 

Apple's new App Review Guidelines expand the list of user-generated content experiences that can be removed from the App Store without notice.

9
10
11
12
13
 
 
14
 
 
15
16
 
 

Russian authorities have begun restricting access to Telegram, one of the country’s most popular social media apps, as the government continues to push everyday Russians toward its own tightly controlled alternatives to foreign tech platforms.

On Tuesday, the government said it was restricting access to Telegram for the “protection of Russian citizens,” accusing the app of refusing to block content authorities consider “criminal and terrorist.”

Russia’s telecommunications regulator Roskomnadzor said in a statement that it would continue to restrict the operation of the Telegram messenger “until violations of Russian law are eliminated.”

17
 
 

Last week, the digital rights group Electronic Frontier Foundation sent a letter to Amazon, Apple, Discord, Google, Meta, Microsoft, and Reddit, demanding that the companies stop giving data to the Department of Homeland Security, which houses ICE, in response to administrative subpoenas.

“Based on our own contact with targeted users, we are deeply concerned your companies are failing to challenge unlawful surveillance and defend user privacy and speech,” read the letter.

18
 
 

Amazon Ring’s Super Bowl ad offered a vision of our streets that should leave every person unsettled about the company’s goals for disintegrating our privacy in public.In the ad, disguised as a heartfelt effort to reunite the lost dogs of the country with their innocent owners, the company...

19
 
 

Hello!

With the recent news about Discord, I've seen several people starting to consider Matrix as an alternative. That's why I wanted to share my experience with self-hosting it, because the whole hosting and upkeep of the server can be extremely simplified (and kind of cheap), if you choose the right tools for the job.

tl;dr - You can host Matrix with 2 very simple config changes and around 4 commands through this ansible project.

A little disclaimer - my use-case for Matrix is mostly to just bridge other messanging platforms, in my case it's Discord (text only), WhatsApp, FB Messenger and Telegram. I have set up voice support but never properly stress-tested it, and the user count of my server is 2 users. While the setup process will mostly be the same, I can't vouch for the chosen VM to handle higher traffic.

The main project I wanted to talk about is the matrix-docker-ansible-deploy, because it makes self-host the whole Matrix stack, along with a metric ton of optional services, extremely easy. For those that don't know, ansible is a tool that allows you to write "playbooks" of steps to run on a specified server that will set up whatever you need. In this case, the playbook is set up to install Matrix and any of the dozens of services, install it and their requirements, configure it, and all you have to do is set up config options telling it what you want and run the playbook, making it super easy.

So, how does the self-hosting actually looks like? I'm assuming knowledge about setting up hosting, ssh, domain, and basic work with docker.

You need to get a domain, and get a VPS. I've chosen Hetzner cloud CAX11 (ARM, 2 VCPU, 4GB RAM, 40Gb storage), which goes for ~7$ a month including storage and IP.

Get your private key and IP, and don't forget to set up firewall. You also need to set up Ansible and Just on your computer, here's the docker I'm using for the job. Make sure to run it from the matrix-docker-ansible-deploy folder (so from inside the repo):

docker run -it --rm -w /work -v `pwd`:/work -v $HOME/Work/Matrix-server/hetzner.key:/root/.ssh/id_rsa:ro --entrypoint=/bin/sh docker.io/devture/ansible:2.16.1-r0-0

Once you're there, you just pull the ansible project and can start with a Quickstart. This is the most difficult step - you have to set up and configure two files, one with your server host IP, and one with config vars.yml.

But, the basic config is extremely simple. You just give it a domain, and generate a few DB passwords, and you'll have a working matrix server. If you want other services, like bridges, it's usually also simple, and the documentation is clear. For example, adding voice support was literally just adding matrix_rcp_enabled: true into the vars.yml file.

Once you have that set up, the whole install process is literally running (from inside the ansible docker mentioned above)

just update (to update the playbook)

and then

ansible-playbook -i inventory/hosts setup.yml --tags=install-all,ensure-matrix-users-created,start

And that's it. Assuming you have your server SSH key set up properly, it should simply run and install whatever you have configured. It might throw some errors, but so far every one I've seen was extremely clear.

Also, don't forget to update often! I'm using this command from the ansible docker (with ssh key setup) mentioned above that does it:

git config --global --add safe.directory /work && git pull && just roles && just setup-all

I've never had the ansible fail in a way I couldn't figure out, even when I was updating after more than half a year - the script is so robust it even told me to remove depreciated config options. It's one of those rare projects that is so extremely robust it can handle a lot of situations. The only difficult issue I had in the two years was running out of space, since that made random things fail, and Matrix is pretty data heavy (because it saves all images).

As for my experience with matrix, I've been using it as my only message app for two years, and most of the time, it has been fine.

There are a few caveats:

  • WhatsApp bridge requires me to log in to WhatsApp app every two weeks. I just have it in a separate quarantine profile on my GrapheneOS, and log it from time to time.
  • Messenger bridge has stopped logging in after two years of usage without issues last week. I haven't solved it yet, but it looks like Meta has upped their bot detection.
  • Discord bridge works great for chat, including servers, but AFAIK you can't join voice.
  • Telegram had issues with logging out when I used a new account, but after using my personal, it's all right. Topics don't work AFAIK, though.
  • And of course - all of the apps still get my data and my messages.

But, I was tired of not being able to convince my friends to switch, and by bridging it all to Matrix, I can at least avoid having their apps and visiting their sites, which is an OK compromise for me.

If you have any questions, feel free to ask. I wanted to share some visibility for this project, because just by watching the gazzilion of steps the playbook is doing, I can imagine that trying to actually self-host Matrix manually might be pretty long edeavour, but this project has so far done everything perfectly in a matter of three commands and a config change.

20
 
 

Australia's Privacy Commissioner Carly Kind determined in 2024 that Bunnings breached privacy laws by scanning hundreds of thousands of customers' faces without their proper consent.

A review of that decision by the Administrative Review Tribunal of Australia has now found the opposite

The retailer did not break the law by scanning customers' identities, but should improve its privacy policy and notify customers of the use of AI-based facial recognition technology, the ruling said

Petty typical stuff by this point. The privacy-invading company wins, pissweak government makes a few privacy "recommendations" but stops short of enforcing anything

21
 
 

Discover the exciting new features of TeamSpeak 6, including a complete redesign, screen sharing capabilities, and community server management, all aimed at improving user experience in gaming communication.

22
23
24
25
view more: next ›