Privacy

37371 readers

477 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

What should I do after finding my info on a Data Breach searching website? (lemmy.world)

submitted 1 day ago by A9b382ks@lemmy.world to c/privacy@lemmy.ml

12 comments fedilink hide all child comments

I put my old Gmail accounts on websites like haveibeenpwned.com osintleak.com pentester.com and osint.industries

And the results had a lot of personal info like old usernames I used, old passwords, IP addresses and other info

What can I do now?

I deleted all of my old Gmail accounts. I changed all of my usernames everywhere or deleted the accounts associated with them and changed all the passwords. I use Proton and Email aliases when signing up for services and random generated passwords with fake info everywhere(if possible) and I do use a VPN on all of my devices.

Is there anything more I can do?

Because those Emails had my full real name in them and I used them literally everywhere.

you are viewing a single comment's thread
view the rest of the comments

[–] CatZoomies@lemmy.world 3 points 21 hours ago

HTTPS with no VPN:

You trust the web site to encrypt your data if and only if the web site has properly implemented encryption along with encrypted DNS traffic. Sometimes you make a connection to HTTP before you're redirected to HTTPS. Your ISP can see what web sites you visit, but the ISP can't see what you're doing because the traffic is encrypted so long as encryption is implemented correctly. ISP knows you went to https://www.website.com/.

Conclusion: Your ISP knows exactly what web sites you visit, but can't see what you're doing on the web site (if encryption is properly configured by the web site provider).

HTTP or HTTPS with trusted VPN (e.g., Mullvad):

You trust the VPN provider. Your connections are encrypted entirely. Your ISP can't see what web sites you're visiting nor can they interpret your traffic.

Conclusion: Your ISP is completely blind to what you're doing and where you're going.

ExpressVPN:

"HTTPS is essential for security, but it can only do so much. Don’t fall into a false sense of security—there are limitations to HTTPS protection:

HTTPS doesn’t hide what websites you visit. Your ISP or network provider can still see which sites you access, even if they can’t view what you do on them.

HTTPS won’t protect data stored on a website. If a site suffers a data breach, HTTPS won’t prevent hackers from accessing your saved information.

HTTPS cannot encrypt all your internet traffic. It only secures connections between your browser and a site—not your entire internet activity.

You have no control over HTTPS. The protocol is set by website owners, so if you visit a website without HTTPS protection, there is no way for you to enable it." Source: https://www.expressvpn.com/blog/https-vs-vpn/

PureVPN:

"HTTPS:

Encrypts data between your browser and websites.

Protects against eavesdropping on web transactions.

Activated automatically with 'https://' VPN:

Encrypts and routes all internet traffic, including from apps.

Protects the entire internet connection. A VPN is used to establish an encrypted connection - also referred to as tunnel - between your device and unsecure network like the Internet. Since all your traffic goes through the VPN's server rather than that of your ISP, nobody can find out what you're up to online. What HTTPS Cannot Do?

Hide Your IP Address: HTTPS doesn't mask your IP address. Websites and your ISP can still see your IP and location, whereas a VPN hides your IP, making your online presence more anonymous.

Encrypt All Internet Traffic: HTTPS only secures data between your browser and websites. A VPN encrypts all your internet traffic, including apps and services outside your browser.

Prevent ISP Tracking: Your ISP can still see which sites you visit with HTTPS, they just can’t see the exact content. A VPN encrypts all your traffic, preventing ISPs from tracking your web activities. https://www.purevpn.com/blog/https-vs-vpn/

Here are more sources I won't quote, but you can read:

https://www.zdnet.com/article/reader-question-answered-if-i-have-https-do-i-need-a-vpn/
https://nordvpn.com/blog/https-vs-vpn/
Mullvad. This is more advanced as the article is targeted to technical users. However, it explains how they handle encrypted DNS in their services: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls