Since January Google has been using browser fingerprinting and IP triangulation to track across incognito windows.

Meta wants in the game as well. Nothing done on a phone with Meta apps is done in isolation.

Edit: seems like only vanilla mobile browsers affected. Brave was not vulnerable, DDG minimally so, and I expect Iron/Waterfox with uBlock would also not have allowed tracking.

https://securityonline.info/androids-secret-tracking-meta-yandex-abused-localhost-for-user-data/

No, you use one as the backup. That’s why I said use JShelter, but if a site breaks beyond use, switch IPs and then reload with NoScript instead to be more selective of what is blocked and what’s not. That way I can still block Cloudflare and Google and Apple and still let the actual site load. And JScreep seems (for me, YMMV) to treat each as distinct fingerprints.

IMO if you know you can have multiple fingerprint profiles anyway based on which combo of extensions you use that do roughly the same job, that’s a net benefit.

The why is browser fingerprinting. Which Google started using as of January to track everyone.

https://abrahamjuliot.github.io/creepjs/

So if you go to ANY page with Google trackers, even in private mode, Google knows.

For vanilla FF I use multi - account containers, uBlock, and privacy badger.

For other FF forks like Librewolf, I get more blocky, like JShelter, a random agent switcher, and if that breaks a site beyond use I try Chameleon and NoScirpt.

It is, but it’s a use case that has a shitload of money behind it.

Do you know why we have had reliable e-commerce since 1999? Porn websites. That was the use case that pushed credit card acceptance online.

The demand is so huge that firms would rather stumble a bit at first to save huge amounts for a bad but barely sub-par UX.

This 100%.

Wealthy people essentially pay staff to do make things happen for them, and those staff don’t sign up for IG or FB stressing abou making sure to use their ONE email like RichieRich1975@hotmail.com for everything.

PA staff are both IT staff and human password managers, creating and curating massive sets of logins that are functionally disposable. With enough clout and money, if you DO have a problem with a social media platform, or your phone number, a PA calls an Executive CSR and sorts out the problem.

So it’s that their “privacy” is masked by the haphazard way they interact with things that track them. For them, tracking them is security to ensure you know who they are so that have a frictionless experience. If they want a dummy account to creep on people or be a perv, they get that easily, too.

Brace yourselves for being told on MSN and Yahoo about the hottest new toy this Xmas! If you don’t buy it, you might be arrested for child abuse!

Anyone know what Linux distro? I assume Ubuntu…

“Brad, I saw you cheating on Stacy at the club last night” [your pgp key here]

Sorry if it seemed smug at all. The “My my” was more being happy that the Fdroid app repo is pulling it’s weight and a valuable resource that fascists seem to over look.

I do like this a lot.

Since you sort of need to be there with the hat, it makes me wonder of you might get more response and/or geographic spread if you has some sort of leave behind. A sticker, or a card that you can slot in places.

I do think that leaving it as the gpg key is better, not a QR code. It helps ID this for nerds like you and me. I would never scan a wild QR.

My, my. Look at all the open source, privacy focused period trackers in the Fdroid store.

Can’t happen fast enough.

There’s 2 separate universes here.

Devs and tech companies care only for UX, convenience, and reduced friction to use any service. They would put their granny’s home address and SSN in the headers if it made a page load 10ms faster. Their incentives are all short-sighted to hit the next goal to outcompete other devs/companies and ship their end of history killer app that will solve all problems - and that will still get bloated and enshittified within 18 months.

Then there’s us, a subset of rational people educated about how much data gets transmitted, who are horrified by the general state of being online, and are hard to impress when it comes to more than just saying “privacy!” when promoting anything at all.

IMO, we have to DIY and cobble together so much of our own protection, we’re closer to artists that live a strange life that few people understand, seems weird from the outside, but we love for the peace of mind. Which is not enough to be any appreciable segment of the market to move the needle on any product worth real money.

Yes, but no one checks the legality of cheap Chinese devices from Amazon.

Shodan.io is the searchable index of open IoT devices.

Change the default password, people!

Indeed I did! Thanks

F. This will be moved to an OSINT tool within a week, and scraped into a darkweb database by next Friday.

Honestly, unless there’s a shared currency to keep afloat, regional bodies like this are always a tentative benefit at best. Especially in this neighborhood.

Rwanda is orders of magnitude more just a normal, functional country than DRC.

Because it’s a fear-mongering angle that still sells. AI has been a vehicle for scifi for so long that trying to convince Boomers that of won’t kill us all is the hard part.

I’m a moderate user for code and skeptic of LLM abilities, but 5 years from now when we are leveraging ML models for groundbreaking science and haven’t been nuked by SkyNet, all of this will look quaint and silly.