It is a FIDO alliance protocol. This is meant to replace/supplement password, not as 2FA. The sites I use that implement it, Google, Adobe, and Github use it to supplant both the password and 2FA. Cool thing about it is more less: 1) unphishable 2) doesn’t matter if the website’s passphrase data leaks.

You are right. The EMUI outside of China is still based on Android with its own eco-system, although the other EMUI is also based on HarmonyOS which may/may not be compatible with Android, especially in the future. It seems, the phone has disappeared from some international markets altogether, the countries being friendly to China or not, probably because consumers are worried that their phones wouldn’t be supported by critical apps.

Well, you squeeze them, and they squeeze you back. Typical. Like, the US is not expecting that.

Besides the chips, there are still the OS. It’ll take a while yet, if ever, for Huawei phones to gain traction again outside of China. What would you buy: Qualcomm/MediaTek/Huawei(SMIC) chip? What would you buy: Android/Huawei OS?

Turn it off and put it in a Faraday-cage bag.

If your account is that sensitive, generally no. Fastmail wouldn’t escape the court order to turn over some email account’ IPs either. Plus, for accounts that are not e2e encrypted, the law may just demand the contents of the account.

If you have the state actors as enemies, you have to dial up your securities to a different category altogether.

I migrated to ProtonMail out of curiosity after more than a decade, but when they turned over the IP address of a fucking CLIMATE ACTIVIST to police, I decided to halt that process

The police was able to get just the IP addresses. Hide your IPs with Tor for political activism, etc.

deleted by creator

“That momentum is surely gathering pace in the age of generative AI, which we believe presents a remarkable opportunity to create a new stream of revenues, while allowing us to reduce costs across the business” …

News Corp recently reduced staffing costs through widespread redundancies.

No kidding. The email itself is smooth. But now, I bet you would have caught it by the sender, though, the paper mentions using gmail addresses for the from field.

When I was a student, if someone gave me free stuffs, I wouldn’t have thought too much about it. People nowadays have to have 0-trust policy for their online comm; this is pretty dystopian.

Sorry it’s not clear. It’s the example phishing letter sent to the student, in the GPT-V-triad email case.

You don’t need admin access to do a lot of damage on a windows system. From the user space, a malware can:

1. Exfiltrate files
2. Read memory of other processes
3. Read all user credentials from the credential store, including from TPM
4. If the malware can fool the user to authenticate using Windows Hello, even the password managers that store encrypted secrets in credential stores aren’t safe:

See this same class of malware at (unfortunate link, but you can see the detailed discussions there): https://www.reddit.com/r/Bitwarden/comments/14r29p6/meduza_stealer_will_steal_on_windows_browser/

You might already be aware, but there have been instances of information leaks in the past. Even major tech companies restrict their employees from using such tools due to worries about leaks of confidential information.

If you’re worried about your personal info, it’s a good idea to consistently clear your chat history.

Another big thing is AI hallucination. When you inquire about topics it doesn’t know much about, it can confidently generate fictional information. So, you’ll need to verify the points it presents. This even occurs when you ask it to summarize an article. Sometimes, it might include information that doesn’t come from the original source.

While technology is being used to oppress people, it can also be used to liberate them.

Free encrypted tools like the chat app Signal and the encrypted email service Tutanota help activists around the world to protect their private communication. Keeping messages confidential can be a matter of life and death for activists, journalists and whistleblowers in many countries.

That’s why we … will keep fighting for privacy and against and attempt to backdoor encryption.

For Windows PC at least: https://github.com/CMahaff/lasim

This is probably not going to answer your question, but the law doesn’t seem to focus on protocols/network topologies, but focuses on providers with certain sizes. So if the protocol is used by large techs, then they might have to do something on their side to comply with the law, depending on etc…

At least Apple, Signal, and Whatsapp. https://techcrunch.com/2023/06/27/an-encryption-exodus-looms-over-uks-online-safety-bill/

Browser on on PC. On mobile, Connect or Lift-off; can’t really tell the differences yet.

Also beware that for any web/app client that auto-retrieves the image links in a post/comment/message, the other person can put a tracker that can retrieve your IP address, and possibly your browser/other info as well. VPN/Tor would prevent this.

It’s like your email client not retrieving the images automatically to prevent the spammers to get any info about your interactions with the spam emails.

It seems that the IPs are not just logged at the web server level, i.e. it goes up to the Lemmy server too. Do you know if both the admins and the mods have access to the users’ IP addresses?

Not in the web native interface.

@remindme@mstdn.social in 1 week