Nope. I don’t talk about myself like that.

  • 0 Posts
  • 21 Comments
Joined 2 years ago
cake
Cake day: June 8th, 2023

help-circle

  • Forgive me for not covering 100% of this advanced topic in my 3 paragraphs on Lemmy… Nuance gets long, and most people have attention spans of a squirrel.


    maybe it’s hard to distinguish between google services, but if you play some online game, chat over whatsapp or signal, or have a voip call, that’s an entirely different story.

    Already covered as

    That leaves just the raw connection analysis…

    Where specifics can’t be divined… but other details might.


    these can probably be told apart by DNS requests

    Addressed already with

    DNS by default is often plaintext. You can setup your device to use DoH or other encrypted versions of DNS.


    when having a voip call, through a service that supports peer to peer calls (most do, and it’s default on), an observer may even be able to deduct something about who you are speaking with, like what general area they live at.

    Actually this is quite unlikely. ASNs are not as structured as you think. It takes an external database that specifically tracks DHCP’d ISP addresses. Case in point, when I moved to my new house… Google maps though I was a good 60 miles away from where I was… it was after repeated access to google maps and other service for about a month before maps started getting accurate with where I’m accessing their service from.

    And that point is covered with

    It would take a bunch of external additional data to actually tie you to anything directly, eg server logs or other sources… which usually means more than one party is already working together against you. At that point you’ve got bigger issues usually.


    then what if you have apps that try to establish connections to services at home.

    If you purposefully steer your car off the road… of course you’re going to crash. If you’re going to expose non-encrypted things onto the internet…

    At that point you’ve got bigger issues usually.

    I would suspect the untrusted wifi to NOT be the leading thing you’d want to care about in this situation. But even then… I would start making reasonable assumptions such as you’re likely on a DHCP connection without static addressing… your site and resources will rotate IPs every once in a while. Makes tracking you even harder.


    with HTTPS you leak your internal domain names because of TLS SNI.

    Encrypted SNI (ESNI) / Encrypted Client Hello (ECH) exists… Cloudflare for example supports ECH, and they transit a LOT of data.

    But once again… would be outside of the scope of discussion here. Yes… an ISP can make an educated guess of where you’re likely to be going… and maybe even make a reasonable guess of what you could doing… But certainly not the details of it.


    And this all ignores the fact that a random coffee shop isn’t going to do full packet inspection to get this data to begin with. It’s not worth it for them. They gain very little from collecting meta data without some bigger company backing them to do so… Which falls under

    It would take a bunch of external additional data to actually tie you to anything directly, eg server logs or other sources… which usually means more than one party is already working together against you. At that point you’ve got bigger issues usually.

    Edit: Typo that changed meaning. Fixed.



  • HTTPS is used on virtually every site out there these days. That is used to encrypt your traffic from the get go. So specifics of the traffic/request won’t be obvious/known. The EU could be big enough to force manufacturers to inject their certificates into devices… could be a man in the middle attack. But you can always just remove certs you don’t trust from your devices.

    DNS by default is often plaintext. You can setup your device to use DoH or other encrypted versions of DNS.

    That leaves just the raw connection analysis… eg, that your device is sending traffic to some known IP… many site share hosts so that can be hard to determine though often not really… Proxy or VPN services can make it impossible to do this type of analysis… but then those services will be able to tell.

    Ultimately being able to say that “Shalafi sent some packets to an IP that google owns and received a bunch back” could be email… could be youtube… could be any number of things… at some point it become educated guess at best. And what specifically happened (ex: Watched a video about tying shoes) is simply unknown. It would take a bunch of external additional data to actually tie you to anything directly, eg server logs or other sources… which usually means more than one party is already working together against you. At that point you’ve got bigger issues usually.






  • Indeed it is there…

    That makes the whole article suspect for me… Anyone writing news for their locale, will know at the very least what fucking counties belong to their state… For something like that to make it through the author and the copy editor is wild.

    Notice: Transcripts are machine and human generated and lightly edited for accuracy. They may contain errors.

    Ah… There it is… It’s probably audio fed to an LLM… This whole transcript is likely an AI hallucination.

    Edit: and this is from PBS? Come on… Don’t give the right even more reason to cancel you. FFS.



  • you are sharing your location with a greedy company […] and then the highest bidder access this information

    Pretty sure I read it.

    You can do location sharing WITHOUT interacting with any “greedy company” or “highest bidder”.

    Then you state…

    if you run nextcloud and that addon I don’t remember, or reitti, at home and use that, and you keep is somewhat safe*

    and I confirm that you can do it in Nextcloud, and ALSO Home Assistant… as Home assistant is also likely to be something people are running.

    I think you didn’t read my comment

    I think that you think that everyone who ever comments to your post is always arguing against you.

    Edit: missed a couple of words.



  • Your entire comment here is part of the reason this country is as broken as it is.

    My comment was just on the facts. Not that I agreed with them.

    So your insinuation and downvote, just shows that you make a lot of assumptions about people and I would argue that your post is way more damaging to the country than mine.

    Edit: I’m not here arguing with you. I’m just outlining why you see it the way you do. I think it’s shit. But apparently you think I agree with the system just because it’s working for me. That’s not the case, and you’re the worse off for starting random hostility with people for it.




  • One card at $5k limit (making this number up, only you know what you’re approved for on your card) doesn’t necessarily show worthiness for holding more debt. I have 4 active cards… aggregating about $40k of revolving limits. Of course rarely ever use them and pay them down.

    Holding no non-revolving debts can actually hurt you. If you haven’t had a car note or mortgage in a long time, they don’t know if you’re capable of holding such debt effectively anymore. Before we bought a house, I specifically held onto the car notes and only paid the second car off after we secured the mortgage. Of course with a mortgage, I’ll be sitting on “debt” (really building equity in the house) for a while. but meeting the terms of that debt monthly only strengthens evidence that I can manage debt correctly, increasing score.

    Edit: For you, try to increase your limits on your card. If not take out another card and make a purchase every few months on it to keep it active. As you increase the “allowances” you have, and keep that in check… you’ll find your number goes up quite quickly. As far as non-revolving debt, don’t take out a loan if you don’t need it, but think about sitting on a loan for your next purchase even if you have the cash on hand to build the credit up.