_jomo

7 miesięcy temudiscuss

I made https://fahrplan.cc where you can filter the [not] recorded sessions, categories, and titles.

I've mostly made it for myself to skip the recorded sessions when on-site and to see what's coming up at the current time of day. It therefore tries to include all the self organized sessions, workshops, meetups, music programs, etc. I've been running it for a few years and people use it for all kinds of use cases, including sitting at home and watching the streams.

_jomo

4 lata temudiscuss

This seems to affect users from the EU, but not from the US.

_jomo

5 lat temudiscuss

> reproducible build available at F-Droid

It's not available at F-Droid. They have an F-Droid compatible repository that you can manually add to your F-Droid client where they ship binaries.

I also can't find any mention of reproducible builds on their website, and their builts seem to include proprietary binaries.

The issue [0] to publish the app on F-Droid is still open.

0: https://github.com/oxen-io/session-android/issues/73

_jomo

6 lat temudiscuss

Any service that claims to be "free" and doesn't have a very obvious business model gets me very suspicious. I usually start reading the service's privacy policy.

This website's "Privacy Policy" states:

> We collect [personal information] by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.

Yet personal data is collected through Google Analytics without being mentioned anywhere and without my consent. The policy is also the linked privacy policy for the Android and iOS app. It doesn't let the reader know why personal information is collected and how it's used, as it claims. Is that different in the actual apps? Also, what data does the website and the app collect?

_jomo

7 lat temudiscuss

This is a "feature", not a bug. Twitter keeps asking for phone numbers all the time and then suggests you also allow others to discover your account via phone number.

So this guy merely enumerated a lot of phone numbers and found accounts of users who agreed to have their phone number publicly match their account.

_jomo

7 lat temudiscuss

I'd like to point out that GDPR compliant sites don't need to ask permission for strictly necessary cookies.

I also recommend using Cookie AutoDelete for Chrome [0] or Firefox [1]. You can define a whitelist of websites where you actually need Cookies (because you want to stay logged in), and the rest will be forgotten when you close the tab. It even allows different rules in Firefox Containers.

0: https://chrome.google.com/webstore/detail/cookie-autodelete/...

1: https://addons.mozilla.org/en-US/firefox/addon/cookie-autode...

_jomo

7 lat temudiscuss

Also, in my experience address locations on Google Maps are often very inaccurate, so it's not even a good source.

_jomo

7 lat temudiscuss

I keep wondering why people who seemingly care about their privacy continue to use Google products/services, doing all their online activity while logged in to their Google account.

_jomo

7 lat temudiscuss

Useful website, but years out of date and unmaintained.

The actively maintained community fork can be found at https://justdeleteme.xyz.

Repo: https://github.com/jdm-contrib/jdm

_jomo

7 lat temudiscuss

Please don't rely on the Referer being present (ever). It's an optional header to send in a request and you can configure your browser — at least Firefox — to not send it for privacy reasons.

Logout (or anything else that triggers changes of any kind) shouldn't be a GET request.

_jomo

7 lat temudiscuss

Comcast has even published an informational RFC describing how to inject crap into HTTP requests:

https://tools.ietf.org/html/rfc6108

_jomo

7 lat temudiscuss

I think most VPNs use NAT, so many users share the same IP address. Otherwise the VPN would be mostly pointless.

_jomo

7 lat temudiscuss

You seem to ignore that this constrains abusers as much as it does legitimate users. Collective punishment in order to mitigate abuse by a few is the wrong way to go.

_jomo

7 lat temudiscuss

They have been doing this for any account registered from a VPN or Tor. However, you can simply appeal the block and tell them you haven't tweeted and not broken any rules.

They will send you an automated mail, offering to validate your phone number, or reply to the mail if your problem is not solved. Just reply to the mail.

Unfortunately, processing the request takes anywhere between 10 minutes and 2 weeks; usually a couple days at least. I assume this is on purpose to make it cumbersome for spammers.

They always reply with the same boilerplate, but the account will be unlocked:

  Your account is now unlocked, and we’re sorry for the inconvenience.
   
  Twitter has automated systems that find and remove automated spam accounts and it looks like your account got caught up in one of these spam groups by mistake. This sometimes happens when an account exhibits automated behavior in violation of the Twitter Rules (https://twitter.com/rules).

  Again, we apologize for the inconvenience. Please do not respond to this email as replies will not be monitored.

_jomo

7 lat temudiscuss

You can get most of this by analyzing server logs with IP addresses. No cookies required. You might need some JavaScript tracking for more detailed analytics, but there is absolutely no need for external tracking by Google or the likes.

Examples for self-hosted analytics include GoAccess (server log analyzer) [0] or Matomo (JavaScript tracking, formerly Piwik) , although I think it uses tracking cookies by default [1]

0: https://github.com/allinurl/goaccess

1: https://matomo.org

Submissions

HomeAssistant Supervisor Authentication Bypass

Dovecot Mailbox Encryption

Infinite Multiplayer Minesweeper

Scroll Anchoring in Firefox 66

The role of mastodon.social in the Mastodon ecosystem

Making the Building of Firefox Faster for You with Clever-Commit from Ubisoft

Maintaining Different Git Identities

Domain Validation and Padlocks

About Domain Validation and Padlocks

comments