Privacy

33268 readers
531 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
1
 
 

My ISP is AT&T (located in the U.S.) and I have issues loading random websites. Currently have Google DNS set in my router, which works great. But I'm guessing there's a better, more private, option?

2
 
 

I've been looking to improve the home network in my home lab. It seems that Ubiquiti has everything I could want in their various products.

However, it seems too good to be true. How much snooping does the router/firewall/APs do on my traffic? If you have a similar case, what has been your experience with Ubiquiti?

3
4
 
 

So...yeah. As I'm moving away from google, I'd like to store my contacts elsewhere. I have proton (I know, I know), but this is also not great, since their system isn't too android-friendly. Which system (maybe self-hosted) would you suggest to easily sync/backup your contacts?

Thanks!

5
 
 

I grew up in the 90s. I remember using dos commands and installing a cdrw drive in our family’s compaq pc so I could burn cds with music I found on Kazaa. Somehow, I didn’t learn what I needed to in order to set up what I’d like to have privacy wise.

Posting here before I just start getting computer science textbooks, looking for any resources to increase my knowledge and ability with computers, networking, and connectivity. Podcast, video content creators, books, anything. I’m going to make time to do some online learning for python. My current programming knowledge is limited to excel/VBA

What I want to have:

Linux mini pc connecting to tv for torrents/streaming. I’ve heard about using a mini pc before the isp modem to filter dns and tracking- I do not understand this, but I have heard of flashing routers with different os

As safe and private a phone as possible that can still be moderately convenient- probably going to get a used pixel with graphene using Wi-Fi only/no sim

Security cameras with secure, private storage- need to learn about self-hosting

Below are the topics I’d like to be able to study on my own time. I’m grateful for any advice but I’m stubbornly curious and need to understand the underlying concepts- not just a step by step.

Internet protocol; I get the gist of things like dns is a phone book for ip addresses; vpn is a not a magic bullet, it’s just a shifting of trust; cell phones are pretty much unable to be completely anonymous without tremendous work and sacrifice.

Computer/network systems; troubleshooting Linux problems, editing boot loaders defaults (I have a pc w dual boot windows and Linux, tried to remove the Linux to try another distro, couldn’t get it). Flashing Wi-Fi routers and associated troubleshooting, setting up self hosting- plex jellyfish, backup data. Performance figures for computers and what that means for various applications, like you’d need x gb for this, and an ssd of x for that

Purchasing and scrubbing used devices- I like the idea of reducing e waste and picking up a dell optiplex from a thrift store.

I’m also aware I’m in that space where I don’t know what I don’t know yet; so I’m probably missing topics.

What am I missing? Where should I look?

6
 
 
7
68
submitted 2 days ago* (last edited 2 days ago) by TuxEnthusiast@sopuli.xyz to c/privacy@lemmy.ml
 
 

DAITA: Defence Against AI-guided Traffic Analysis. Which one of these would consider to be the best option for privacy? I can't have both on at the same time.

8
 
 

Whatsapp is privacy invasive, and we likely know that even when using E2EE, this is possible due to metadata tracking.

An easy way to avoid one creepy thing, contact scanning and the creation of "who knows whom" social nets, is to not grant apps permission to your contacts!

But this is not easy, as apps often enforce this, just as they do with

  • embedded cameras instead of using the system camera
  • embedded galleries instead of the 2 available portals (but Google will soon forbid that)
  • asking for unneeded permissions

Only GrapheneOS also allows blocking these permissions

  • sensors
  • internet
  • loading code from memory i.e. from the internet (why would they do that? Is there something they want to hide?)
  • debugging their own code to spy on the system behavior

But this app can help everyone on any Android to at least fix this :)

9
 
 

Not sure, how long Google is at it, it may just be new to me, but today the wife googled for something, and she couldn't get there as the response was "can not connect". "Fix the internet NOW!", was my order.

Analysing the link on Google's page, it displayed the link as https://www.example.com/, but it actually goes to https://googleadservices.com/?blabla, which is blocked by our DNS, therefore the error.

Displaying one link, but going to another is misleading, lying, tactics of phishers and scammers, IMO.

Is this new, or is it just me, who never clicks on the first result of a Google search?

10
 
 

So, I was told to not use Signal, so all that is left is Matrix. And I am not techy enough to have my own server and neither are my relatives, so Matrix.org is the only option

11
 
 

cross-posted from: https://lemmy.dbzer0.com/post/36880616

Help Combat Internet Censorship by Running a Snowflake Proxy (Browser or Android)

Internet censorship remains a critical threat to free expression and access to information worldwide. In regions like Iran, Russia, and Belarus, journalists, activists, and ordinary citizens face severe restrictions when trying to communicate or access uncensored news. You can support their efforts by operating a Snowflake proxy—a simple, low-impact way to contribute to a freer internet. No technical expertise is required. Here’s how it works:


What Is Snowflake?

Snowflake is a privacy tool integrated with the Tor network. By running a Snowflake proxy, you temporarily route internet traffic for users in censored regions, allowing them to bypass government or institutional blocks. Unlike traditional Tor relays, Snowflake requires minimal bandwidth, no configuration, and no ongoing maintenance. Your device acts as a temporary bridge, not a permanent node, ensuring both safety and ease of use.


Is This Safe for Me?

Short answer: Yes.

Long answer: pobably. Here is why:

  • Your IP address is not exposed to the websites they access. So, you don't have to worry about what they are doing either. You are not an exit node.
  • No activity logs. Snowflake cannot monitor or record what users do through your connection. The only stored information is how many people have connected to your bridge. Check docs for further info on this.
  • Low resource usage. The data consumed is comparable to background app activity—far less than streaming video or music.
  • No direct access to your system
  • No storage of sensitive data. Snowflake proxies do not store any sensitive data, such as IP addresses or browsing history, on your system.
  • Encrypted communication. All communication between the Snowflake proxy and the Tor network is encrypted, making it difficult for attackers to intercept or manipulate data.

You are not hosting a VPN or a full Tor relay. Your role is limited to facilitating encrypted connections, similar to relaying a sealed envelope.

Your IP address is exposed to the user (in a P2P-like connection). Be mindful that your ISP could also potentially see the WebRTC traffic and the connections being made to it (but not the contents), so be mindful of your threat model.

For most users, it is generally safe to run Snowflake proxies. Theoretically, your ISP will be able to know that there are connections being made there, but to them it will look like you're calling someone on, say, Zoom.

Historically, as far as we know, there haven't been any cases of people getting in legal trouble for running entry relays, middle relays, or bridges. There have a been a few cases of people running exit nodes and getting in trouble with law enforcement agencies, but none of them have been arrested or prosecuted as far as I know it. If you are aware of any cases, let me know so I can update this post.

Do not hesitate to check Snowflake's official documentation for further reference and to make informed decisions.


How to Set Up a Snowflake Proxy

Option 1: Browser Extension (Brave, Firefox, or Chrome)

  1. Install the Snowflake extension.
  2. Click the Snowflake icon in your browser toolbar and toggle "Enable Snowflake."
  3. Keep the browser open. That’s all.

Note: Brave users can enable Snowflake directly in settings. Navigate to brave://settings/privacy and activate the option under "Privacy and security."


Option 2: Android Devices via Orbot

  1. Download Orbot (Tor’s official Android app).
  2. Open the app’s menu, select "Snowflake Proxy," and toggle it on.
  3. For continuous operation, keep your device charged and connected to Wi-Fi.

Your device will now contribute as a proxy whenever the app is active.


Addressing Common Concerns

  • Battery drain: Negligible. Snowflake consumes fewer resources than typical social media or messaging apps.
  • Data usage: Most users report under 1 GB per month. Adjust data limits in Orbot’s settings or restrict operation to Wi-Fi if necessary.

Why Your Participation Matters

Censorship mechanisms grow more sophisticated every year, but tools like Snowflake empower ordinary users to counteract them. Each proxy strengthens the Tor network’s resilience, making it harder for authoritarian regimes to isolate their populations. By donating a small amount of bandwidth, you provide someone with a critical connection to uncensored information, education, and global dialogue.

Recent surges in demand—particularly in Russia—highlight the urgent need for more proxies. Your contribution, however small, has an impact.

By participating, you become part of a global effort to defend digital rights and counter censorship. Please, also be mindful of your threat mode and understand the potential risks (though very little for most people). Check Snowflake's official documentation for further reference and don't make any decisions based on this post before taking your time to read through it.

Please share this post to raise awareness. The more proxies, the stronger the network.

– llama

12
22
submitted 2 days ago* (last edited 2 days ago) by llama@lemmy.dbzer0.com to c/privacy@lemmy.ml
 
 

cross-posted from: https://lemmy.dbzer0.com/post/36841328

Hello, everyone! I wanted to share my experience of successfully running LLaMA on an Android device. The model that performed the best for me was llama3.2:1b on a mid-range phone with around 8 GB of RAM. I was also able to get it up and running on a lower-end phone with 4 GB RAM. However, I also tested several other models that worked quite well, including qwen2.5:0.5b , qwen2.5:1.5b , qwen2.5:3b , smallthinker , tinyllama , deepseek-r1:1.5b , and gemma2:2b. I hope this helps anyone looking to experiment with these models on mobile devices!


Step 1: Install Termux

  1. Download and install Termux from the Google Play Store or F-Droid

Step 2: Set Up proot-distro and Install Debian

  1. Open Termux and update the package list:

    pkg update && pkg upgrade
    
  2. Install proot-distro

    pkg install proot-distro
    
  3. Install Debian using proot-distro:

    proot-distro install debian
    
  4. Log in to the Debian environment:

    proot-distro login debian
    

    You will need to log-in every time you want to run Ollama. You will need to repeat this step and all the steps below every time you want to run a model (excluding step 3 and the first half of step 4).


Step 3: Install Dependencies

  1. Update the package list in Debian:

    apt update && apt upgrade
    
  2. Install curl:

    apt install curl
    

Step 4: Install Ollama

  1. Run the following command to download and install Ollama:

    curl -fsSL https://ollama.com/install.sh | sh
    
  2. Start the Ollama server:

    ollama serve &
    

    After you run this command, do ctrl + c and the server will continue to run in the background.


Step 5: Download and run the Llama3.2:1B Model

  1. Use the following command to download the Llama3.2:1B model:
    ollama run llama3.2:1b
    
    This step fetches and runs the lightweight 1-billion-parameter version of the Llama 3.2 model .

Running LLaMA and other similar models on Android devices is definitely achievable, even with mid-range hardware. The performance varies depending on the model size and your device's specifications, but with some experimentation, you can find a setup that works well for your needs. I’ll make sure to keep this post updated if there are any new developments or additional tips that could help improve the experience. If you have any questions or suggestions, feel free to share them below!

– llama

13
 
 

I saw Nubo mentioned in a thread a while back but there were only a few comments. Does anyone use Nubo? What has your experience been like?

https://nubo.coop/en/

14
 
 

[Wall of Text]

Hello Fellow Lemmings,

I've been on a 2+ year long digital hygiene project involving moving to various self-hosted services, tidying up my backup procedures, cancelling underutilized subscriptions, streamlining my task management and calendaring, purging corporate evil from my phone, etc.

Recently, I made a big spreadsheet of my apps including their licenses, whether they're FOSS, whether they have cloud dependencies, where I'm sourcing them from, and whether I think they are sketchy. I hope to share this eventually once I have worked out what to do about a few of the remaining proprietary gremlins lurking on my silicon. I would love some input on how to deal with the apps I'd like to quit, minimize using, replace with FOSS alternatives, etc. The phone in question is an Android device running GrapheneOS.

I view my adversaries as follows:

  • First and foremost, I hate advertising, personalized tracking, intrusive notifications, etc. Corporate America/ Big Tech is my arch nemesis. I also feel an ethical obligation to move away from these solutions. I would also like to have control over my own data where possible and when it's within my skill level
  • I want my phone to be secure. I don't need to show up on in some scammer or spammer's list because some sketchy app stole my credit card or personal info. Same goes for physical security, I don't want anyone unlocking it unless I've given them permission to use it.
  • I'm least worried about state actors. Anything they want to know about me they could buy off Google, Amazon, etc. I really doubt I'm much of a target except the way they target all of us by piggybacking on corporate tracking. I know there are people on here who don't have the privilege of ranking this so low on the list and count myself lucky that this is >>currently<< not a bigger issue.

I'm approaching this from a practical point of view, unfortunately I do have some proprietary software I haven't found a suitable alternative to. I will probably still have a few of them, even after my purge is complete. Having said that, I'm a firm believer in risk reduction. I'd appreciate your insights, I've numbered them as that may help keep the conversation from becoming too chaotic.

  1. Discord Not sure what to do about this other than say "I told you so, we should have never left mumble!" I have communities on here I can't get elsewhere and always accessing via the desktop website is impractical when I'm actively involved in planning a surprise Minecraft raid.

  2. eeero If they get their act together, we're due to get fiber in the next year or so. They seem to install with eeero routers, but I would prefer to get rid of amazon, I really like the gli router I have for travel. Does anyone have experience with their router offerings? I'd like to have Wireguard access back to the home and network ad-blocking on a per-device basis is desirable. I've been using a drop in gateway to provide adblocking for my phone and laptop while I'm at home.

  3. Google Lens Some features can be replaced with TinEye or imgops, but the main thing I need is the augmented reality integration with google translate where you can point the camera at text to have it translated live on the screen. Do any FOSS translator apps include AR translation?

  4. Google Maps I'm surprised at how reliant I've become on this for opening/closing times, browsing satellite maps for fun, browsing satellite maps to find parking garage entrances, checking busy times, viewing menus, etc. I like Organic Maps for its simplicity and impressive ease of use. OSMand has an awesomely absurd amount of detail. For some reason I keep opening google maps, and it's more than just the menus and phone numbers. What map app(s) do you use for driving, biking, exploring? Do any FOSS map apps provide phone numbers, opening hours, and menus reliably?

  5. Google Translate I need the conversation translate feature where you can talk back and forth and have it live translate like an interpreter would. I can put it in its own profile to isolate it, but I'm still giving it a lot of info just by using it. What's my best FOSS or even reduced-harm alternative?

  6. Lyft & Uber & Southwest I may just disable these except for the rare occasion where I need them. What's the risk of enabling, using, then immediately disabling?

  7. Ring It seems like the big players are Amazon and Google. Can you recommend any privacy respecting doorbells that are relatively easy to set up? I need the ease of use because due to current life events my Home Assistant project is progressing very slowly. I failed at the VM install and don't want to screw up the system with a bare metal install as I have frequently used docker images running on it (data backed up though!). My Linux knowledge is begintermediate/intermediate with a weakness in networking.

  8. Youtube I have Thorium installed to access Peertube and ween myself off YouTube. This is a long term project. Short term, I have Tubular, a newpipe fork with sponsorblock baked in whic accesses youtube okay. I do have the official youtube app because I like being able to line up videos on the TV via chromecast. Tubular doesn't seem to cast. What do you do to get video/audio to your external screens?

  9. X-plore File Manager There is no alternative that I have found that does so much so well. This program is God-tier. I can do SSH, access network shares, set up sync jobs to backup folders, access nextcloud, and so much more. Possibly the most important app on my phone, but it's proprietary.

  10. F-Stop Photo Gallery I haven't found a gallery that works as well as this one. I also like that it can access network shares though it doesn't seem to include them in the favorites and ratings tabs, so there must be some sort of limitation with the metadata or something. I use it for basic photo management on my phone while I use a different app to view my old vacation photos and stuff like that. But it's proprietary. :'''-(

  11. Tody Keeps track of repeating chores by room and changes color from green to red based off of how long it's been since it was done. This works better for my brain than due dates because sometimes I can only keep everything in the yellow, but that looks like chaos with overdue everything when done in a traditional task management app. I know there is at least one other proprietary app that does this. Does anyone know of a FOSS app or better option?

  12. Nova Launcher I have an extreme aversion to clutter, unwanted notifications, bad spacing. I'm hard to please. Nova Launcher has scratched my itch for home screen customization for years and years. I think they recently got bought out or something, but people didn't panic terribly. I'm fairly certain there is no alternative that will meet my needs, so what can I do to limit my exposure? Can I use an app like Hypatia to see what URLs it reaches out to and block any telemetry and phoning home via DNS or something like that?

  13. Futo vs Transcribro The GrapheneOS default keyboard is fine but doesn't have voice input. I tried Transcribebro and recently stumbled across the source available Futo which has the source published, but is under some sort of non-commercial license. I'm not a company and I'm not so keen on the corporate grift to begin with. I care more about replacing google voice typing with something less malicious. Futo seems better integrated, but I'm torn about whether I should use/support Transcribro simply on account of it being open-source. Thoughts and experiences?

  14. Whatsapp I prefer Signal, but there are places I visit where Whatsapp has a majority share of users for any communication. Can I do anything to stop all the spam and idiotic crypto group invites and junk that comes along with this app? It's totally true to what I think of when I hear the "Meta experience", clutter and bullshit.

  15. Strava Is anyone hosting Wander? I've seen it posted on here and maybe on Mastodon but the installation process intimidated me a little bit. If I'm uploading my rides at all and I'm tracking on my cycle computer rather than with my phone, is there any additional privacy lost from installing the app? I use it for the heatmaps and people on here previously shared a number of useful alternative tools for making personal heatmaps overlaying map data. It's too much work without automating it somehow. I would like to reduce my exposure and understand the risks better though. Any ideas or experiences?

  16. Final question, for those of you using GrapheneOS, do you isolate apps in profiles or use the private space/work profile feature? How do you split up your apps. I've been running 2 profiles with one being Financial and Medical apps and one being everything else. Is this separation even necessary with the app sandboxing? I've been reading their forums, but it's an absurd amount of information to digest.

Thank you for any insights, experiences, recommendations you may share. I'm sure I will annoy the FOSS brigade (which I would like to eventually 100% join), the power users who answer these questions a dozen times a month, and the nihilists who think privacy is already a lost cause. Having said that, I appreciate your assistance as I have come a long way to get to this point and my proprietary dependencies are lower than they've been and more contained than they've been in a very long time.

15
16
 
 

if I go to an HTTPS site and it has a reader option, this is shown. it happens on every site. thoughts?

Android Firefox

17
 
 

I wanted to maybe start making PeerTubr videos, but then I realized I've never had to consider my voice as part of my threat model. A consequence that immediately comes to mind is potentially having your voice trained on by AI, but I'm not (currently) in a position where others would find it desirable to do so. Potentially in the future?

I'd like to know how your threat model handles your personal voice. And as a bonus, how would voice modulators help your voice in/prevent your voice from being more flexible in your threat model? Thanks!

18
 
 

I don't like using reddit. But sometimes I have to while looking something up. However, I get this message when I have Mullvad turned on that reads You've been blocked by network security.

How do I bypass this? Changing VPN locations doesn't seem to affect it. I don't want to turn my VPN off for reddit.

19
 
 

ISPs get legal notices from companies and are liable if it is found that their users are downloading illegal torrents and they don't take action against those users.

How are VPNs any different? By using a VPN, aren't you essentially transferring your accountability to the VPN provider? Wouldn't courts find that since this or that VPN service's exit server was used in ____ illegal online activity, they're responsible and must cease operations?

How do VPNs operate? Are laws different for them? If yes, then how does that benefit the state? Wouldn't the state benefit from treating VPNs the same as ISPs so they get more control?

20
 
 

I will be stuck in low or no internet areas and having a way to save a whole website (such as a small community wiki or something) to browse while bored would be very nice. It'd be nice if its features like search could be kept working. Any suggestions for a Foss app that can do this?

21
 
 

We all know Signal, Matrix, Telegram, SimpleX, etc... But if you can't access the internet you can't communicate. Pretty logic. But would it be possible, at least theoretically, to create an app that permits to message people even if the internet goes down?

It might be a dumb question I really have no idea to be honest.

22
 
 

Are there any phone screening apps for Android that don't rely on a 3rd party service, something that functions more along the lines of ublock or similar?

23
 
 

Hey everyone, I hope you are well.

I recently purchased a TP-Link Archer C7 from a thrift store for 4 dollars and converted it into a pineapple router using a firmware build that someone made based on Open-WRT for testing and educational purposes, and it it has raised a few other thoughts and interests.

I have two questions.

  1. Is anyone aware of a software available through F-Droid or otherwise which can be used to turn a phone into a temporary access point serving FTP for file sharing purposes? I think it would be handy to be able to share files to several people in proximity and I would imagine turning a phone into a mobile FTP AP would be something that has been done. If anyone is aware of any such project, I would be highly interested.

  2. For running such a thing whether it be through a phone or a router, is anyone aware of a mobile power source which can fit in a backpack easily and power a 12 volt 1.5 amp router for ~10 hours?

I would love to be able to have the ability to basically have a backpack that acts as a mobile NAS that serves FTP/SFTP.

Thanks.

24
 
 

I feel like this exists but I forgot to bookmark it and I'm having a hell of a time finding it if it does exist (largely due to broken SearXNG instances argh!) In my experience each one I save into Fennec via search string only lasts a few months before it breaks intermittently or entirely. I'd rather use a link that picks one at random and is thus more likely to just return results without too much fiddling.

Yes ideally I'd host my own... it's on my miles long to-do list...

25
 
 

I am desperately looking for a small phone compatible with a privacy friendly OS, best would be if the phone is not too old, lets say Less than 3 years.

I had a pixel 5 with graphene. Its Brocken and to be honest it was already too big for my small hands.

Usually phones with a width less than 70mm are considered easy to use with one Hand -even with small hands. I dont need a big screen at all since i have good eyes and use small fonts.

E.g. the unihertz jelly max seems perfect but i didnt find an easy way to put a privacy friendly OS.

On the other Hand looking at the supported devices oft graphene/ callyx and e/OS not a single one seems to offer ONE small phone.

Are there people here with the same Problem? Whats your solution?

I See 2 options for me: either i get a cheap (second Hand) big phone and hope that there will be smaller phones again in the near future. or i give up on using phones with one Hand and get a fairphone or pixel (second hand) again... What do you think is better? The Option to compromise in privacy is not an Option for me.

view more: next ›