4 ms·
> at this moment in time yup. So was The Great Suspender. This is why privacy is a one-way circuit breaker kind of system. Once you give your privacy away, yo
by jiveturkey 4y ago
> at this moment in time
yup. So was The Great Suspender.
This is why privacy is a one-way circuit breaker kind of system. Once you give your privacy away, you can never assume anything about how your data is used. No matter the entity, you simply cannot trust that they will hold your data secure and use it in your best interests. Even Apple, hell even Signal, has leaky bits and "side channels" that can, and you must assume will, be subverted.
VPN services are well off the mark in terms of privacy protection. That the ~~marketing~~ propaganda is so focused on the opposite is an abomination.
- TechieKid 4y agoSidechannels in Signal is news to me. Can you provide some keywords to search for, or any links?
- jiveturkey 4y agoThe contact discovery services leaks the fact that you are using Signal. It is not optional. It's clear why that is, so I won't spell it out.
- growwrkr6 4y agoThey can get download records from Google or Apple to check for Signal downloads. So there’s really no reason for Signal to try and hide one is merely using Signal. Best to focus on securing content.
- jiveturkey 4y agoYou are missing the attack vector here.
- fourthark 4y agoIt is optional isn’t it? I never gave Signal permission to read my contacts and yet I still use it.
- steve_avery 4y agoI assume you are talking about the chrome plugin "the great suspender"; I am not sure what controversy you refer to? What happened to it?
- ar_lan 4y agoSee https://github.com/greatsuspender/thegreatsuspender/issues/1295 https://github.com/greatsuspender/thegreatsuspender/issues/1...
- SenHeng 4y agoBetter link https://github.com/greatsuspender/thegreatsuspender/issues/1263 https://github.com/greatsuspender/thegreatsuspender/issues/1... > TLDR: The old maintainer appears to have sold the extension to parties unknown, who have malicious intent to exploit the users of this extension in advertising fraud, tracking, and more. In v7.1.8 of the extension (published to the web store but NOT to GitHub), arbitrary code was executed from a remote server, which appeared to be used to commit a variety of tracking and fraud actions. After Microsoft removed it from Edge for malware, v7.1.9 was created without this code: that has been the code distributed by the web store since November, and it does not appear to load the compromised script. However, the malicious maintainer remains in control, however, and can introduce an update at any time. It further appears that, while v7.1.9 was what was listed on the store, those who had the hostile v7.1.8 installed did NOT automatically receive the malware-removing update, and continued running the hostile code until Google force-disabled the extension.