-
7 votes
-
Amazon devices in the US will automatically join the Amazon Sidewalk mesh network and start sharing internet with neighbors on June 10th, unless opted out
30 votes -
King County, WA is first in the country to ban government use of facial recognition software
15 votes -
Why does a completely local, self-contained html file need to access gstatic.com?
So, I'm a privacy advocate (or paranoiac, depending on your perspective). I run both uMatrix and NoScript plug-ins (among others) in my Firefox browser, so I can see when and where websites send...
So, I'm a privacy advocate (or paranoiac, depending on your perspective). I run both uMatrix and NoScript plug-ins (among others) in my Firefox browser, so I can see when and where websites send calls out to other locations, and block the ones I want ... google analytics, google fonts, google-apis, google tag manager, and gstatic are all ubiquitous out there, probably 99% of websites use at least one of them (PS: Tildes is in the 1%; yeay, Deimos).
And note ... there may well be nothing at all wrong with any of those sites/services ... but Google has a global all-encompassing Terms and Conditions policy that says, you use anything of Theirs, and They are allowed to harvest your personal data and make money off of it.
And I do not accept those terms.
Okay, that's the prologue. The deal is, I have a small piece of documentation, just basic "how to use this" info, for a WordPress plug-in. It is in .html format, with bundled bootstrap and jquery and a few other assets.
Nothing, anywhere in the entire folder, references gstatic. And yet when I open this local, on-my-computer-only html file ... my browser tells me that it is trying to connect to gstatic.com.
Anyone happen to know why/how that is happening?
4 votes -
Our digital pasts weren’t supposed to be weaponized like this
17 votes -
Introducing Firefox’s new Site Isolation security architecture
19 votes -
Terms and Conditions Apply
9 votes -
Huge Eufy privacy breach shows live and recorded cam feeds to strangers
5 votes -
Here’s what the opt-in app tracking in iOS 14.5 means to marketers — and how they might respond
11 votes -
We found Joe Biden’s secret Venmo. Here’s why that’s a privacy nightmare for everyone.
17 votes -
I mailed an AirTag and tracked its progress; here’s what happened
23 votes -
Ransomware gang threatens release of DC police records
10 votes -
Upcoming lecture and Q&A, May 13th 2021 - Edward Snowden, “What I learned from games: playing for and against mass surveillance”
2 votes -
Australian Criminal Intelligence Agency looking to expand it's intelligence gathering powers by claiming that criminals use encrypted platforms 'almost exclusively'
19 votes -
EFF Surveillance Self-Defense - Privacy breakdown of mobile phones
18 votes -
96% of US users opt out of app tracking in iOS 14.5
35 votes -
The Instagram ads Facebook won't show you
26 votes -
They told their therapists everything. Hackers leaked it all.
15 votes -
Disclosure of a vulnerability in AI Dungeon that enabled accessing all users' private adventures, scenarios, and posts via its GraphQL API
16 votes -
In the tales told by sewage, public health and privacy collide
5 votes -
Misinformation about Permissions Policy and FLoC
8 votes -
Team Navalny apologizes after database of email addresses registered for planned protest leaks online
7 votes -
In defense of Signal
12 votes -
Am I FLoCed?
22 votes -
I called off my wedding. The internet will never forget
24 votes -
533 million Facebook users' phone numbers and personal data have been leaked online
29 votes -
Employees at law enforcement agencies across the US ran thousands of Clearview AI facial recognition searches — often without the knowledge of the public or even their own departments
9 votes -
What does your gaze reveal about you? On the privacy implications of eye tracking
10 votes -
Pasco County’s Sheriff must end its targeted child harassment program
11 votes -
Finding virtue in the virtual
2 votes -
A comparative analysis of security, privacy, and censorship issues in TikTok and Douyin, both developed by ByteDance
5 votes -
French subsidiary of the Swedish retailer IKEA will go on trial over allegations that they snooped on employees and customers using private detectives and police officers
5 votes -
Reddit announces online presence indicators
67 votes -
Encrypted messaging app Signal blocked in China
29 votes -
Privacy is a commons
3 votes -
Feature suggestion - tildes only content
It would be nice if there was an extra box that allows you to add info that is private to the people on tildes. For example I would like to share creds to a game account, but I only want people on...
It would be nice if there was an extra box that allows you to add info that is private to the people on tildes. For example I would like to share creds to a game account, but I only want people on tildes to get that info, not the public who aren't users and just visit.
10 votes -
Hackers break into thousands of security cameras, exposing Tesla, jails, hospitals
16 votes -
Google’s FLoC is a terrible idea
31 votes -
The Amazon Assistant browser extension requires extensive permissions, has the capabilities to monitor and manipulate all of its users' web activity, and seems to violate multiple browsers' policies
11 votes -
Signal's server repo hasn't been updated since April 2020
26 votes -
Ubuntu sends http requests to Google cloud, here’s a fix
Ubuntu has this package installed by default: network-manager-config-connectivity-ubuntu It's only purpose is to provide settings for NetworkManager to send requests to...
Ubuntu has this package installed by default:
network-manager-config-connectivity-ubuntuIt's only purpose is to provide settings for NetworkManager to send requests to connectivity-check.ubuntu.com , and based on the result (AFAIK) detect redirection by captive portals and open an ISP's page (think public WiFi, or hotel rooms, where you need to authorize to access the net).
Well, connectivity-check.ubuntu.com is hosted on Google cloud (you can check that by running:
dig connectivity-check.ubuntu.com whois [the IP from previous query]
), so by default Ubuntu sends requests to a Google cloud page.
I don't say Google counts daily active Ubuntu users (because many of those have the same IP), or that Google actively logs and analyzes that data. But some of you guys may not like that behavior.So what's the fix?
Purge the package
sudo apt purge network-manager-config-connectivity-ubuntu
If you do need a captive portal detection, create your own config file to query some HTTP (not HTTPS) page of your choice, in the example below I have a Debian page used for the same purpose. Use your favorite text editor to create and edit /etc/NetworkManager/conf.d/90-connectivity-custom.conf :
[connectivity] uri=http://network-test.debian.org/nm
Restart NetworkManager
sudo systemctl restart NetworkManager
If you run an Ubuntu derivative, please report if you have network-manager-config-connectivity-ubuntu installed in the comments.
11 votes -
The small web is beautiful
23 votes -
Google to stop selling ads based on your specific web browsing
29 votes -
Spoonbill—a change-tracker for Twitter bios—offers a glimpse into the unseen effort with which we express our identities online, and how the uncanny feeling of being watched informs our sense of self
8 votes -
Brave has acquired Cliqz and their Tailcat search engine, plans to offer a privacy-oriented search engine
9 votes -
Lessons from a year of Covid
9 votes -
Three years later: Did the GDPR actually work?
7 votes -
Introducing State Partitioning / Total Cookie Protection, a new privacy feature in Firefox 86 that universally prevents cookie-based tracking
16 votes -
What are security, privacy, and anonymity?
6 votes -
Browser ‘favicons’ can be used as undeletable ‘supercookies’ to track you online
20 votes