301
submitted 3 days ago by [email protected] to c/[email protected]

Google’s AI model will potentially listen in on all your phone calls — or at least ones it suspects are coming from a fraudster.

To protect the user’s privacy, the company says Gemini Nano operates locally, without connecting to the internet. “This protection all happens on-device, so your conversation stays private to you. We’ll share more about this opt-in feature later this year,” the company says.

“This is incredibly dangerous,” says Meredith Whittaker, the president of a foundation for the end-to-end encrypted messaging app Signal.

Whittaker —a former Google employee— argues that the entire premise of the anti-scam call feature poses a potential threat. That’s because Google could potentially program the same technology to scan for other keywords, like asking for access to abortion services.

“It lays the path for centralized, device-level client-side scanning,” she said in a post on Twitter/X. “From detecting 'scams' it's a short step to ‘detecting patterns commonly associated w/ seeking reproductive care’ or ‘commonly associated w/ providing LGBTQ resources' or ‘commonly associated with tech worker whistleblowing.’”

126
submitted 4 days ago* (last edited 4 days ago) by [email protected] to c/[email protected]

With the latest version of Firefox for U.S. desktop users, we’re introducing a new way to measure search activity broken down into high level categories. This measure is not linked with specific individuals and is further anonymized using a technology called OHTTP to ensure it can’t be connected with user IP addresses.

Let’s say you’re using Firefox to plan a trip to Spain and search for “Barcelona hotels.” Firefox infers that the search results fall under the category of “travel,” and it increments a counter to calculate the total number of searches happening at the country level.

Here’s the current list of categories we’re using: animals, arts, autos, business, career, education, fashion, finance, food, government, health, hobbies, home, inconclusive, news, real estate, society, sports, tech and travel.

Having an understanding of what types of searches happen most frequently will give us a better understanding of what’s important to our users, without giving us additional insight into individual browsing preferences. This helps us take a step forward in providing a browsing experience that is more tailored to your needs, without us stepping away from the principles that make us who we are.

We understand that any new data collection might spark some questions. Simply put, this new method only categorizes the websites that show up in your searches — not the specifics of what you’re personally looking up.

Sensitive topics, like searching for particular health care services, are categorized only under broad terms like health or society. Your search activities are handled with the same level of confidentiality as all other data regardless of any local laws surrounding certain health services.

Remember, you can always opt out of sending any technical or usage data to Firefox. Here’s a step-by-step guide on how to adjust your settings. We also don’t collect category data when you use Private Browsing mode on Firefox.

The Copy Without Site Tracking option can now remove parameters from nested URLs. It also includes expanded support for blocking over 300 tracking parameters from copied links, including those from major shopping websites. Keep those trackers away when sharing links!

1
submitted 6 days ago by [email protected] to c/[email protected]

Microsoft's announcement: "We are introducing a new Game Pass recommendation card on the Settings homepage. The Game Pass recommendation card on Settings Homepage will be shown to you if you actively play games on your PC. As a reminder – the Settings homepage will be shown only on the Home and Pro editions of Windows 11 and if you’re signed into Windows with your Microsoft account."

1
submitted 6 days ago by [email protected] to c/[email protected]

Brussels is set to issue new antitrust charges against Microsoft over concerns that the software giant is undermining rivals to its videoconferencing app Teams.

According to three people with knowledge of the move, the European Commission is pressing ahead with a formal charge sheet against the world’s most valuable listed tech company over concerns it is restricting competition in the sector.

Rivals are concerned that Microsoft will make Teams run more compatibly than rival apps with its own software. Another concern is the lack of data portability, which makes it difficult for existing Teams users to switch to alternatives.

The tech company has also faced complaints from European cloud computing providers that are concerned that Microsoft is abusing its dominant position in the sector to force users to buy its products and squashing competition from smaller start-ups in Europe.

1
submitted 1 week ago by [email protected] to c/[email protected]

The new open ecosystem of extensions on Firefox for Android launched in December with just over 400 extensions. Less than five months later we’ve surpassed 1,000 Firefox for Android extensions. That’s an impressive achievement by this developer community! It’s exciting to see so many developers embrace the opportunity to explore new creative possibilities for mobile browser customization.

What are some of your favorite new Firefox for Android extensions?

1
submitted 1 week ago by [email protected] to c/[email protected]

The new open ecosystem of extensions on Firefox for Android launched in December with just over 400 extensions. Less than five months later we’ve surpassed 1,000 Firefox for Android extensions. That’s an impressive achievement by this developer community! It’s exciting to see so many developers embrace the opportunity to explore new creative possibilities for mobile browser customization.

What are some of your favorite new Firefox for Android extensions?

1
submitted 1 week ago by [email protected] to c/[email protected]

EA has tried this before, with predictable results. In 2020, EA Sports UFC 4 included full-screen ads for the Amazon Prime series The Boys that would appear during 'Replay' moments. These were absent from the game when it launched, with EA introducing the ads about a month later, thereby preventing them from being highlighted in reviews. It wasn't long before the backlash led to EA disabling the ads.

1
submitted 1 week ago by [email protected] to c/[email protected]

EA has tried this before, with predictable results. In 2020, EA Sports UFC 4 included full-screen ads for the Amazon Prime series The Boys that would appear during 'Replay' moments. These were absent from the game when it launched, with EA introducing the ads about a month later, thereby preventing them from being highlighted in reviews. It wasn't long before the backlash led to EA disabling the ads.

135
submitted 1 week ago by [email protected] to c/[email protected]
  • Mullvad VPN's blog post: DNS traffic can leak outside the VPN tunnel on Android

Identified scenarios where the Android OS can leak DNS traffic:

  • If a VPN is active without any DNS server configured.
  • For a short period of time while a VPN app is re-configuring the tunnel or is being force stopped/crashes.

The leaks seem to be limited to direct calls to the C function getaddrinfo.

The above applies regardless of whether Always-on VPN and Block connections without VPN is enabled or not, which is not expected OS behavior and should therefore be fixed upstream in the OS.

We’ve been able to confirm that these leaks occur in multiple versions of Android, including the latest version (Android 14).

We have reported the issues and suggested improvements to Google and hope that they will address this quickly.

prevent app-based VPN implementations from leaking DNS requests when the VPN is down/connecting (this is a preliminary defense against this issue and more research is required, along with apps preventing the leaks on their end or they'll still have leaks outside of GrapheneOS)

1
submitted 1 week ago by [email protected] to c/[email protected]

After reversing its position on remote work, Dell is reportedly implementing new tracking techniques on May 13 to ensure its workers are following the company's return-to-office (RTO) policy, The Register reported today, citing anonymous sources.

Dell will track employees' badge swipes and VPN connections to confirm that workers are in the office for a significant amount of time.

Dell's methods for tracking hybrid workers will also reportedly include a color-coding system. From "consistent" to "limited" presence, the colors are blue, green, yellow, and red.

The Register reported today that approximately 50 percent of Dell's US workers are remote, compared to 66 percent of international workers.

An examination of 457 companies on the S&P 500 list released in February concluded that RTO mandates don't drive company value but instead negatively affect worker morale. Analysis of survey data from more than 18,000 working Americans released in March found that flexible workplace policies, including the ability to work remotely completely or part-time and flexible schedules, can help employees' mental health.

1
submitted 1 week ago by [email protected] to c/[email protected]
1
submitted 1 week ago by [email protected] to c/[email protected]
[-] [email protected] 28 points 1 month ago

the purpose of this post is not to endorse the use of Reddit (), but rather to inform users of a privacy-friendly approach in case they need to utilize the platform.

[-] [email protected] 12 points 1 month ago

Note: If the link isn’t working for you or if you can’t find the app, update the default F-Droid repository in your F-Droid client.

[-] [email protected] 12 points 2 months ago* (last edited 2 months ago)

i deleted the crossposts of this post from /c/[email protected] and /c/[email protected] (because protonmail is a faux-opensource snakeoil privacy product) and flagged the posts in other communities as spam.

I find your response discouraging, and your actions appear excessive. While Proton may not be flawless, it does offer superior privacy protection when compared to commonly used options like Google and Microsoft.

I volunteered my time and effort to craft the post, including citations, offering more background information, and incorporating reliable links to official resources. However, you made claims without substantiation, deleted the crossposts of my post from /c/[email protected] and /c/[email protected], and flagged the posts in other communities as spam. Your decision seems to be unsupported by members of the four communities I had shared my post to.

It's disheartening to see such actions taken without proper consideration, thereby causing harm to the privacy community at large. Avoiding hasty decisions that may stifle valuable contributions within the privacy community should be paramount. Consequently, I respectfully ask you to reconsider your initial reaction, abstaining from premature removals rooted in personal opinions devoid of solid backing.

By embracing a balanced stance that values both freedom of expression and responsible fact-checking, we contribute positively towards nurturing healthy debates and maintaining transparent communication channels. In light of this, I hope you will take the necessary steps to reinstate the removed posts, allowing for continued conversation on their merits.

Edit: You have now banned me from both of those communities.

Edit: You have deleted another post of mine from c/[email protected] that was titled "Chat Control May Finally Be Dead: European Court Rules That Weakening Encryption Is Illegal", with your reason being that it is "snakeoil spam" even though the community members do not think so (the post has more than 750 upvotes)

[-] [email protected] 19 points 3 months ago

The nonprofit software house argues that users, without coercion, manipulation, or deception, should be able to: download and install any alternative, legitimate browser; set that browser as their default; and use their chosen browser on an ongoing basis.

The report defines various manipulative interface patterns like "Confirmshaming", "Forced Action", "Visual Interference", and "Disguised Ads."

[-] [email protected] 23 points 3 months ago

Android's Messages, Dialer apps quietly sent text, call info to Google

Google's Messages and Dialer apps for Android devices have been collecting and sending data to Google without specific notice and consent, and without offering the opportunity to opt-out, potentially in violation of Europe's data protection law.

According to a research paper, "What Data Do The Google Dialer and Messages Apps On Android Send to Google?" [PDF], by Trinity College Dublin computer science professor Douglas Leith, Google Messages (for text messaging) and Google Dialer (for phone calls) have been sending data about user communications to the Google Play Services Clearcut logger service and to Google's Firebase Analytics service.

"The data sent by Google Messages includes a hash of the message text, allowing linking of sender and receiver in a message exchange," the paper says. "The data sent by Google Dialer includes the call time and duration, again allowing linking of the two handsets engaged in a phone call. Phone numbers are also sent to Google."

The timing and duration of other user interactions with these apps has also been transmitted to Google. And Google offers no way to opt-out of this data collection.

[-] [email protected] 6 points 3 months ago

One option is QKSMS

Another is Connect You

Fossify Messages (fork of Simple SMS Messenger) should be released on F-Droid sometime soon.

[-] [email protected] 9 points 3 months ago

IzzyOnDroid releases do not follow the same privacy and security standards as F-Droid does, so I wouldn't be recommending them.

[-] [email protected] 8 points 3 months ago

It hasn't been released on F-Droid.

[-] [email protected] 5 points 4 months ago

I’m not the writer of the article, but here’s an answer you can find on running a quick search.

According to this article from the Electronic Frontier Foundation (EFF):

What is 2G and why is it vulnerable?

2G is the second generation of mobile communications, created in 1991. It’s an old technology that at the time did not consider certain risk scenarios to protect its users. As years have gone, many vulnerabilities have been discovered in 2G and it’s companion SS7.

The primary problem with 2G stems from two facts. First, it uses weak encryption between the tower and device that can be cracked in real time by an attacker to intercept calls or text messages. In fact, the attacker can do this passively without ever transmitting a single packet. The second problem with 2G is that there is no authentication of the tower to the phone, which means that anyone can seamlessly impersonate a real 2G tower and your phone will never be the wiser.

Cell-site simulators sometimes work this way. They can exploit security flaws in 2G in order to intercept your communications. Even though many of the security flaws in 2G have been fixed in 4G, more advanced cell-site simulators can take advantage of remaining flaws to downgrade your connection to 2G, making your phone susceptible to the above attacks. This makes every user vulnerable—from journalists and activists to medical professionals, government officials, and law enforcement.

view more: next ›

ForgottenFlux

joined 4 months ago