• 79 Posts
  • 576 Comments
Joined 2 years ago
cake
Cake day: June 16th, 2023

help-circle









  • Your location, contacts, nearby devices, nearby WiFi, search history, voice query recordings, which apps you install and use and when, a log of activity on your phone, your advertising profile, which accounts you set up on the phone, possibly facial recognition for photos you take, who you call and message (if using default apps) including which phone numbers you connect to, events in your calendar, browsing history (if using default browser) and YouTube activity (if using the YouTube app).

    Those are the main ones that are usually mentioned in articles about this. Some of it won’t apply if you use only open source apps and no Google apps. But some of it is baked into the OS and the Play Services, and difficult or impossible to avoid.




  • The thing about this one is no one seems sure of the source (it appears to be from multiple sources, including infostealer malware and phishing attacks), so you don’t know which passwords to change. To be safe you’d have to do all of them.

    Some password managers (e.g. Bitwarden) offer an automatic check for whether your actual passwords have been seen in these hack databases, which is a bit more practical than changing hundreds of passwords just in case.

    And of course don’t reuse passwords. If you have access to an email masking service you can not only use a different password for every site, but also a different email address. Then hackers can’t even easily connect that it’s your account on different sites.


  • A password manager is still a good idea, but you have to not use a hacked one. So only download from official sites and repositories. Run everything you download through VirusTotal and your machine’s antivirus if you have one. If it’s a Windows installer check it is properly signed (Windows should warn you if not). Otherwise (or in addition) check installer signatures with GPG. If there’s no signature, check the SHA256 OR SHA512 hash against the one published on the official site. Never follow a link in an email, but always go directly to the official website instead. Be especially careful with these precautions when downloading something critical like a password manager.

    Doing these things will at least reduce your risk of installing compromised software.





  • The pledge, organized by Film Workers for Palestine and published Monday, initially featured 1,200 signatories, including filmmakers and actors: Yorgos Lanthimos, Ava DuVernay, Boots Riley, Adam McKay, Olivia Colman, Mark Ruffalo, Riz Ahmed, Tilda Swinton, Javier Bardem, Emma Stone, Andrew Garfield, Harris Dickinson, Guy Pearce, Jonathan Glazer, Ebon Moss-Bachrach, Abbi Jacobson, Eric Andre, Elliot Page, Payal Kapadia, Joaquin Phoenix, and Rooney Mara.

    Kind of seems like Paramount’s loss. Oh well, they may not have the actors but at least they have Larry Ellison and an unwavering commitment to genocide.