SnotBubble

joined 1 year ago
[–] SnotBubble@lemmy.ml 2 points 1 month ago (8 children)

What country is that? I'm curious if they're also racists.

[–] SnotBubble@lemmy.ml 3 points 1 month ago (2 children)

Would it work to block outgoing traffic at the router?

[–] SnotBubble@lemmy.ml 2 points 2 months ago

I forgot to mention, it's easy to use, as it's similar to every other messenger app, so even not so techy members can use it.

[–] SnotBubble@lemmy.ml 7 points 2 months ago (2 children)

I'd recommend Threema. It's privacy focused, based in Switzerland. You don't even need a phone number to create an account, they collect no data on you (claimed, but haven't checked) and the code is open source, under A-GPL 3 license.

There's a build for Apple and Android, for which you pay once.

I use this to talk with important family members.

[–] SnotBubble@lemmy.ml 2 points 4 months ago (2 children)

Why this ensures the account is deleted, I wanted to convince the company to improve their policy so that other people will have an easier time to delete their accounts, should they wish this. That is also why I wasn't talking "legal" and mentioned the company benefits from this.

[–] SnotBubble@lemmy.ml 3 points 4 months ago

It's easy to say "Del my account per Article 17 GDPR". I wrote this whole template so that other might have an easier time than I do. I posted the template here so it inspires other privacy-aware individuals to do the same. If 1 website changes their account deletion policy because of it, it's still a win.

 

Hello, I wrote a mail template which I send to websites that don't have an easy process of deleting an account.

Maybe it helps you, maybe you will use it too for when you want to delete your unused accounts and maybe you can contribute to it. The better the message gets and the more websites offer an easy way to delete accounts, the safer we'll be online.


If you can influence the deletion policy, please read on. Otherwise, please forward this to someone that can influence this process.

It's better for the business to offer an easy way to delete an account. Ideally, it would be good to delete accounts which weren't active for more than say 5 years, with a mail notification beforehand. Why? Here are the main reasons:

  • There are higher operation and maintenance costs because you have unused accounts in your databases.
  • The services load slower, with a performance penalty, because each user-related query has to go through many unused users.
  • The people opinion of your services decreases, because you don't offer an easy way to delete accounts
  • People might change their mail to a throw-away address and leave the account open, thus producing more waste than necessary.
  • In case of a security breach, the amount of compromised data is higher than in case you regularly delete accounts, which might lead to financial penalties.
  • The information you get out of a database with active accounts is much more precious than the information from a stale database, or one with obsolete data.

I hope this information helps and that you will change your policy of deleting accounts. Each website that does this, contributes to a better, safer ecosystem.

[–] SnotBubble@lemmy.ml 2 points 8 months ago (1 children)

Before I wrote this thread, I ran for a couple of minutes a browser from a docker container. I couldn't browse any website because of the missing CompanyName CA certificate. So, I stopped because it was too freaky.

[–] SnotBubble@lemmy.ml 19 points 8 months ago

Thank you for sharing this info. It's very convincing and well argumented.

I won't try anything else and will use my personal device.

[–] SnotBubble@lemmy.ml 3 points 8 months ago

I tried opening a browser in a Docker container and but couldn't browse any site except google because it didn't recognize the CA authority.

[–] SnotBubble@lemmy.ml 9 points 8 months ago (1 children)

Yeah, I'll use my own device, log on to the guest network and start Wireguard on my laptop. Seems a fair choice both for the company and myself.

[–] SnotBubble@lemmy.ml 3 points 8 months ago (1 children)

It's good to know that they can't bypass wireguard or Tor. I was a worried about that.

As others have suggests, I will probably use a separate device to check my mail. That seems the safest and fairest option both from the company and my perspective.

86
submitted 8 months ago* (last edited 8 months ago) by SnotBubble@lemmy.ml to c/privacy@lemmy.ml
 

I work on a corporate laptop that has an infamous root CA certicate installed, which allows the company to intercept all my browser traffic and perform a MITM attack.

Ideally, I'd like to use the company laptop to read my own mail, access my NAS in my time off.

I fear that even if I configure containers on that laptop to run alpine + wireguard client + firefox, the traffic would still be decrypted. If so, could you explain how the wireguard handshake could be tampered with?

What about Tor in a container? Would that work or is that pointless as well?

Huge kudos if you also take the time to explain your answer.

EDIT: A lot of you suggested I use a personal device for checking mails. I will do that. Thanks for your answers!

 

While camping, I noticed that if you look long enough at almost any star, you start seeing some tiny, subtle colors in that star. Even crazier, they sometimes flicker between more colors. In my case orange, blue and something like cyan.

Besides constellations, what else could you observe regarding starts, with the naked eye?

view more: next ›