The Privacy Iceberg

This is original content. AI was not used anywhere except for the bottom right image, simply because I could not find one similar enough to what I needed. This took around 6 hours to make.

Transcription (for the visually impaired)

(I tried my best)

The background is an iceberg with 6 levels, denoting 6 different levels of privacy.

The tip of the iceberg is titled “The Brainwashed” with a quote beside it that says “I have nothing to hide”. The logos depicted in this section are:

The surface section of the iceberg is titled “As seen on TV” with a quote beside it that says “This video is sponsored by…”. The logos depicted in this section are:

An underwater section of the iceberg is titled “The Beginner” with a quote beside it that says “I don’t like hackers and spying”. The logos depicted in this section are:

A lower section of the iceberg is titled “The Privacy Enthusiast” with a quote beside it that says “I have nothing I want to show”. The logos depicted in this section are:

An even lower section of the iceberg is titled “The Privacy Activist” with a quote beside it that says “Privacy is a human right”. The logos depicted in this section are:

The lowest portion of the iceberg is titled “The Ghost”. There is a quote beside it that has been intentionally redacted. The images depicted in this section are:

  • A cancel sign over a mobile phone, symbolizing “no electronics”
  • An illustration of a log cabin, symbolizing “living in a log cabin in the woods”
  • A picture of gold bars, symbolizing “paying only in gold”
  • A picture of a death certificate, symbolizing “faking your own death”
  • An AI generated picture of a person wearing a black hoodie, a baseball cap, a face mask, and reflective sunglasses, symbolizing “hiding ones identity in public”

End of transcription.

  • cy_narrator@discuss.tchncs.de
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    7 days ago

    I use KeepassDX and Aegis, I use Facebook, Viber, Whatsapp and Gmail to communicate, use Linux, also use Lemmy as is apperant from this very comment. I have uBlock Origin installed on Firefox as the main browser, I also have Protonmail as my main email, also I use simpleLogin. My search engine is DuckDuckGo. I also use ProtonVPN and used to use Opera VPN.

    I am from all of the above tiers

  • hummy_bee@mander.xyz
    link
    fedilink
    arrow-up
    0
    ·
    9 days ago

    Also, I am out of the loop? What’s up with firefox? I have used it on linux mint for maybe 6 years now with uBlock. Currently trying to use DuckDuckGo as default browser because that Google AI results thing is starting to annoy me.

  • brucethemoose@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    9 days ago

    I just switched from Android to iOS, and while I have many complaints, I’m pleasantly surprised by how “walled off” the apps mostly are. Unlike Android, they have to comply to function for the general public.

    It feels a lot more like tier two, where it isn’t like a spyware implant but your banking app or whatever will still function. And yes I know it’s far from good, just talking degrees here…

    • EngineerGaming@feddit.nl
      link
      fedilink
      arrow-up
      0
      ·
      9 days ago

      Even before I cared about privacy, I think Apple would’ve been unacceptable to me due to how tightly locked down it is. Like… I’d have to go through hoops and pay some money for a cert (not much if you know where to look, but still) to get something as basic as an adless Youtube client.

    • St3alth@lemmy.ml
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      9 days ago

      I agree that Apple, while not entirely private, is still a decent choice compared to Android. They both have their flaws though.

    • utopiah@lemmy.ml
      link
      fedilink
      arrow-up
      0
      ·
      9 days ago

      I just switched from iOS to deGoogled Android (e/OS setup by Murena) and as discussing with a friend yesterday, the biggest trade off is arguably security, namely than iOS and AOSP are relatively secure (even though far form perfect) and applications have both permissions to explicitly request and also containerized (e.g. limited file system access) … yet you do not need a security flaw to exist if your data are being exfiltrated periodically by the OS or apps. So arguably depending on your thread model (e.g. voluntarily offering your data vs spam/scam vs private malicious actors like NSO vs state level espionage) and your needs (banking apps vs Web equivalent) then one can be more appropriate than the other.

  • Gina@lemmy.wtf
    link
    fedilink
    English
    arrow-up
    0
    ·
    9 days ago

    Throw away mobile phone and just use an air gapped machine. Your productivity will tank but then you’ll eventually add local databases of the shit you actually need on your air gapped machine and your productivity will triple.

      • Gina@lemmy.wtf
        link
        fedilink
        English
        arrow-up
        0
        ·
        9 days ago

        Well shit, I shouldn’t be the first to tell you that if you’re serious about your privacy then get off of windows.

        Also if the CIA is targeting with you with air gap malware, then you fucked all the way up. Pedophiles are saying “damn, fuck that guy”

    • utopiah@lemmy.ml
      link
      fedilink
      arrow-up
      0
      ·
      9 days ago

      Your productivity will tank

      Will it though? It’s not like paying with cash or even a credit/debit card takes radically longer than paying with a phone. It’s not like reading a book vs mindlessly scrolling Reddit or Lemmy makes productivity drop.

      We get used to instantaneous tasks and convenience but in fine it’s like speeding up while driving from work to home, it’s not really the seconds or even minutes daily that count, it’s where you are going.

      So… a “dumb” phone will probably for most not make productivity “tank” IMHO.

      • Gina@lemmy.wtf
        link
        fedilink
        English
        arrow-up
        0
        ·
        9 days ago

        Yes, your productivity is going to tank. No way you’ll be prepared for a full air gapped machine on day 1.

        • utopiah@lemmy.ml
          link
          fedilink
          arrow-up
          0
          ·
          edit-2
          9 days ago

          What does that have to do with a phone?

          Edit: FWIW you can say no (ideally explaining why, even providing an alternative while doing so, e.g. NextCloud with CollaboraOffice, for email… well you can clarify in a footer that this email thread is not private and suggest creating Tuta or ProtonMail account, even if one time use) to people who use Google Docs and GMail. You can also have a one time use account.

    • absquatulate@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      9 days ago

      Not sure if gog has anything to do with privacy. Altho if it was on the list I imagine it’d be up there with steam ( not sure why that one’s on the list either )

      • VeganCheesecake@lemmy.blahaj.zone
        link
        fedilink
        arrow-up
        0
        ·
        9 days ago

        I’d argue that gog might be a bit better, since you can download executables from their website, and then use them offline, without telemetry. But still, I think neither are necessarily all that relevant here.

          • VeganCheesecake@lemmy.blahaj.zone
            link
            fedilink
            arrow-up
            0
            ·
            9 days ago

            They are a relatively established game storefront, and have been at it for over a decade. Same Corp that’s also behind CD Projekt Red.

            In the end, any storefront that distributes executables could in theory distribute malware, but I’d honestly be more worried about steam, since their publishing process seems a lot more automated, with less oversight.

  • Matt@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    8 days ago

    Just tell the normie that you have nothing to say if you have nothing to hide. Also, why there’s no F-Droid?

  • admin@lemmy.today
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    8 days ago

    The only thing stopping me from being ‘the Activist Group’ is that Mullvad requires payment. Sorry, but I’m running a little tight on budget.

    At the same time, I can’t use Proton VPN for torrenting.

  • utopiah@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    9 days ago

    You can replace the generated image by searching for images of “Goggle wool ski mask” IMHO.

  • Anna@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    8 days ago

    Using basic things like Graphene OS and keepass shouldn’t be considered privacy activist

  • MajesticElevator@lemmy.zip
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    9 days ago

    Sadly, using small niche VPNs that might be more trusted makes you stand out more. It’s pretty unusual to have a Mullvad user on your server

    They don’t rotate IPs as well so a lot of them are blacklisted… and don’t offer port forwarding anymore

    I wish they could change IPs reguarly and add port forwarding back :-( - I would happily pay for their service again

    Because 5€ for their current service is overpriced

    • RiQuY@lemm.ee
      link
      fedilink
      arrow-up
      0
      ·
      9 days ago

      Check out IVPN, I find the service very similar but they also offer reverse split tunneling (choosing what programs go through the VPN).

    • dogs0n@sh.itjust.works
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      9 days ago

      Sadly, using small niche VPNs that might be more trusted makes you stand out more.

      This probably doesn’t matter does it? Because being spotted as a mulvad, airvpn, etc user doesn’t make you more of a target for anything.

      It just means that if they try to trace your connection back to you, they won’t find anything out, because you have a trusted zero-logging vpn.

      Only think I could see is it could potentially be easier to track usage through the ip and assume it’s one person, but idk you could do that with anything if you look at the request timings, etc. It’s still just guesses.

      Am i missing something?

      It’s pretty unusual to have a Mullvad user on your server

      Probably not on the usual sites people visit (youtube, etc, the big sites 99% of ppl go to exclusively), but I can see your point for any smaller site.

      Because 5€ for their current service is overpriced

      Airvpn provide a discount for each extra month you sign up for in bulk which is nice. It’s a great service in my opinion.

      https://airvpn.org/

      • trashboat@midwest.social
        link
        fedilink
        English
        arrow-up
        0
        ·
        9 days ago

        Sadly, using small niche VPNs that might be more trusted makes you stand out more.

        This probably doesn’t matter does it? Because being spotted as a mulvad, airvpn, etc user doesn’t make you more of a target for anything.

        I’m just taking a stab at this since I’m not entirely certain, but I would think that this would weaken you against fingerprinting since it depends on having many different semi-unique characteristics as you browse?

        • MajesticElevator@lemmy.zip
          link
          fedilink
          arrow-up
          0
          ·
          edit-2
          9 days ago

          This ^

          If you have 2 accounts on a website for example, you can be easily exposed if using a niche VPN. If on a more popular VPN, it’s not as likely as some other users probably use those as well

          Realistically, on bigger websites it doesn’t matter as much - it would really depend on your config. You’re bound to be fingerprinted at some point anyways. It’s just too hard and too annoying to blend in.

          At this point I believe we should just aim at randomizing our fingerprint every few seconds by sending BS rather than aiming to all have the same one

        • MajesticElevator@lemmy.zip
          link
          fedilink
          arrow-up
          0
          ·
          9 days ago

          Interesting option as well, but some problems :

          • Not audited iirc
          • Port forwarding leads to identification of the individual account, and facts about this aren’t really explained. They admitted than in case they receive a legal order against someone who has port forwarding, they must give the identity because they can get it.
            • Sure, changing ports frequently is a way around this but meh, I’d like to know what they will provide if that happens
          • MajesticElevator@lemmy.zip
            link
            fedilink
            arrow-up
            0
            ·
            9 days ago

            I’ll add that their servers are a bit slow (I have a gigabit connection) and they don’t have a server in my country

      • MajesticElevator@lemmy.zip
        link
        fedilink
        arrow-up
        0
        ·
        9 days ago

        Going to get hate for it (justified), but NordVPN

        Reasons: low price, and someone I know already had an account.

        Could switch but most VPNs don’t have what I’m looking for (port forwarding), as well as IPs that often change and a solid userbase to mask traffic in smaller websites

        Tested mullvad a few years ago and had some small connection problems, but the main issue was that it wasn’t usable in many websites due to their IPs being really abused (+ blocked from streaming services).

        • Brumefey@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          0
          ·
          9 days ago

          I don’t get why the second layer of Op iceberg is solutions having strong marketing budget. As far as I know (correct me if I’m wrong) Nord VPN has been audited by 3rd parties which confirmed its no-log policy. Also feel more anonymous when using a mainstream VPN because many users share the same IP. On the contrary if you use a VPN where only 2 users are on the same IP, seems easier to track you. Maybe I’m wrong but the hate for NordVPN does not seems justified.

          • MajesticElevator@lemmy.zip
            link
            fedilink
            arrow-up
            0
            ·
            edit-2
            9 days ago

            The hate is mainly because they run current anti consumer techniques, such as:

            • infinite fake sales (illegal is most countries)
            • misleading fear mongering (VPNs don’t bring much security at all, and aren’t the only tool you need to achieve anonymity at all. Most people don’t need a VPN.) but this has some positive impacts: normies use VPNs so they become more accepted
            • ultra aggressive misleading marketing: occasionally, false claims are made through sponsorships

            They are also in a country where they can legally not provide any info to anyone (also in case of legal problem I believe), but it is a double edged sword, as it also means they can lie and sell our info and will never get sued over it

            Such things makes it hard to trust, but the reality is they’re most likely fine to use because they already make a ton of money. They probably won’t risk to lose a business over this.