Skip Navigation
Privacy@lemmy.ml: An open source two factor auth app that syncs keys between devices?

Isn't the value of two factor auth that it requires a physical device (your phone or computer) with the auth key to authenticate you? Then why don't many two factor auth apps seem to support syncing? If it's fine to do so, are there any open source cross platform apps that sync keys?

18
Privacy@lemmy.world: An open source two factor auth app that syncs keys between devices?

Isn't the value of two factor auth that it requires a physical device (your phone or computer) with the auth key to authenticate you? Then why don't many two factor auth apps seem to support syncing? If it's fine to do so, are there any open source cross platform apps that sync keys?

5
You can change the density of Firefox's UI in about:config by setting "browser.uidensity" between 0 to 2, and it applies immediately!

Crossposted another Reddit user's post: https://reddit.com/r/firefox/comments/1dso5sz/easy_trick_to_make_firefox_compact_1_in_firefoxs/

9
You can change the density of Firefox's UI in about:config by setting "browser.uidensity" between 0 to 2, and it applies immediately!

Crossposted another Reddit user's post: https://reddit.com/r/firefox/comments/1dso5sz/easy_trick_to_make_firefox_compact_1_in_firefoxs/

5
Privacy@Lemmy.ml: On Simplelogin, are there any practical differences between public and premium domains?

All I found was this comment about the difference.

>Premium domain is only available when you have premium, because fewer people pay and fewer people use it, so there is less abuse and the domain name has better reputation, so when you public domain is not working, using the premium domain may be able to register.-

2
Privacy@Lemmy.world: On Simplelogin, are there any practical differences between public and premium domains?

All I found was this comment about the difference.

>Premium domain is only available when you have premium, because fewer people pay and fewer people use it, so there is less abuse and the domain name has better reputation, so when you public domain is not working, using the premium domain may be able to register.

0
Privacy@lemmy.ml: What are your thoughts on this old r/Privacy post? 1.6K upvotes "Apple tracks you, even if you don't have Apple devices"

https://reddit.com/r/privacy/comments/v624di/apple\_tracks\_you\_even\_if\_you\_dont\_have\_apple/

>We investigate what data iOS on an iPhone shares with Apple and what data Google Android on a Pixel phone shares with Google. We find that even when minimally configured and the handset is idle both iOS and Google Android share data with Apple/Google on average every 4.5 mins. The phone IMEI, hardware serial number, SIM serial number and IMSI, handset phone number etc are shared with Apple and Google. Both iOS and Google Android transmit telemetry, despite the user explicitly opting out of this. When a SIM is inserted both iOS and Google Android send details to Apple/Google. iOS sends the MAC addresses of nearby devices, e.g. other handsets and the home gateway, to Apple together with their GPS location. Users have no opt out from this and currently there are few, if any, realistic options for preventing this data sharing.

https://www.scss.tcd.ie/doug.leith/apple\_google.pdf

0
Privacy@lemmy.world: What are your thoughts on this old r/Privacy post? 1.6K upvotes "Apple tracks you, even if you don't have Apple devices"

https://reddit.com/r/privacy/comments/v624di/apple\_tracks\_you\_even\_if\_you\_dont\_have\_apple/

>We investigate what data iOS on an iPhone shares with Apple and what data Google Android on a Pixel phone shares with Google. We find that even when minimally configured and the handset is idle both iOS and Google Android share data with Apple/Google on average every 4.5 mins. The phone IMEI, hardware serial number, SIM serial number and IMSI, handset phone number etc are shared with Apple and Google. Both iOS and Google Android transmit telemetry, despite the user explicitly opting out of this. When a SIM is inserted both iOS and Google Android send details to Apple/Google. iOS sends the MAC addresses of nearby devices, e.g. other handsets and the home gateway, to Apple together with their GPS location. Users have no opt out from this and currently there are few, if any, realistic options for preventing this data sharing.

https://www.scss.tcd.ie/doug.leith/apple\_google.pdf

1
Privacy@Lemmy.ml: Do browsers block websites from uploading data that could be used for fingerprinting like resolution, installed fonts, etc.?

Fingerprinting works by collecting bits of information about the browser and device to identify users. Couldn't browsers see when a website gets such info with JS and either prevent or ask permission from the user for the website to make HTTP requests to upload such information to the website. Idk if they do something like this already.

12
Privacy@Lemmy.world: Do browsers block websites from uploading data that could be used for fingerprinting like resolution, installed fonts, etc.?

Fingerprinting works by collecting bits of information about the browser and device to identify users. Couldn't browsers see when a website gets such info with JS and either prevent or ask permission from the user for the website to make HTTP requests to upload such information to the website. Idk if they do something like this already.

4
Firefox@Lemmy.ml: Does Firefox block websites from uploading data that could be used for fingerprinting like resolution, installed fonts, etc.?

Fingerprinting works by collecting bits of information about the browser and device to identify users. Couldn't browsers like Firefox see when a website gets such info with JS and either prevent or ask permission from the user for the website to make HTTP requests to upload such information to the website. Idk if they do something like this already.

11
Firefox@Lemmy.world: Does Firefox block websites from uploading data that could be used for fingerprinting like resolution, installed fonts, etc.?

Fingerprinting works by collecting bits of information about the browser and device to identify users. Couldn't browsers like Firefox see when a website gets such info with JS and either prevent or ask permission from the user for the website to make HTTP requests to upload such information to the website. Idk if they do something like this already.

6
Privacy@Lemmy.world: Are there any privacy issues with keeping camera or mic access on for iOS apps?

iOS is very good about sandboxing and only letting apps run things while the app is open and focused on. It shows green and orange dots when the camera or mic is being used, and none of my use them without saying so and they only do so when they actually need them. If that is the case, are there any potential privacy issues with it?

4
Privacy@Lemmy.ml: Are there any privacy issues with keeping camera or mic access on for iOS apps?

iOS is very good about sandboxing and only letting apps run things while the app is open and focused on. It shows green and orange dots when the camera or mic is being used, and none of my use them without saying so and they only do so when they actually need them. If that is the case, are there any potential privacy issues with it?

4
Privacy@Lemmy.ml: Why use catch-all email domains over email aliases?

I've been looking at using email aliases services, and right now I'm thinking of using Simplelogin for all my online accounts and accounts where I can change my email easily, and getting my own domain to share with people and where I can't easily update my email. It seems like I shouldn't use my own domain for online services because it would be unique and can be tracked.

I did lots of reading about this and am still wondering why someone would want to opt for catch-all domains over aliases. Catch-alls seem highly susceptible to spam and while I haven't actually done any email aliasing yet, it doesn't seem to take much effort to make a new alias if you have a plan with unlimited aliases.

15
Privacy@Lemmy.world: Why use catch-all email domains over email aliases?

I've been looking at using email aliases services, and right now I'm thinking of using Simplelogin for all my online accounts and accounts where I can change my email easily, and getting my own domain to share with people and where I can't easily update my email. It seems like I shouldn't use my own domain for online services because it would be unique and can be tracked.

I did lots of reading about this and am still wondering why someone would want to opt for catch-all domains over aliases. Catch-alls seem highly susceptible to spam and while I haven't actually done any email aliasing yet, it doesn't seem to take much effort to make a new alias if you have a plan with unlimited aliases.

2
Privacy@Lemmy.ml: What are the best ways to minimize fingerprinting on Firefox?
  • You're absolutely right micro-optimization, I found that I did too much of that in 2022 and 23 and really cut down on that this year, I found that doing so is basically never worth it. I'm not gonna do that with privacy either, I'm focusing on what actions I can take that will make big improvements to my privacy rather than tweak every little thing.

  • Privacy@Lemmy.world: What are the best ways to minimize fingerprinting on Firefox?

    I did the tests on fingerprint.com/demo/ and https://coveryourtracks.eff.org/ and they both said I have a unique fingerprint, even when I enabled privacy.resistFingerprinting to True.

    3
    Privacy@Lemmy.ml: What are the best ways to minimize fingerprinting on Firefox?

    I did the tests on fingerprint.com/demo/ and https://coveryourtracks.eff.org/ and they both said I have a unique fingerprint, even when I enabled privacy.resistFingerprinting to True.

    19
    Lemmy.world: Any addons like Stylus for websites styles, that can automatically backup files on my device?
  • Tab Session manage can automatically backup sessions to the backup folder. I mentioned that on r/Firefox and got this response:

    Oh, this is interesting. It does a backup-to-disk 30 seconds after startup.

    During init() it schedules the backup with

    setTimeout(backupSessions, 30000);

    This generates a silent download to a predefined folder through the functions in these files:

    https://github.com/sienori/Tab-Session-Manager/blob/master/src/background/background.js

    https://github.com/sienori/Tab-Session-Manager/blob/master/src/background/backup.js

    https://github.com/sienori/Tab-Session-Manager/blob/master/src/background/export.js

    I didn't know setTimeout() worked in background scripts. If setInterval() works, too, then this could be done every 15 minutes or whatever interval would be sensible for user styles.

  • Lemmy.ml: Any addons like Stylus for websites styles, that can automatically backup files on my device?
  • I've received complaints about spamming posts so I added the instance names in the titles. I thought there's no harm in posting crossposting, I know Lemmy is federated but I want to ensure they show up instead of hoping for automatic feed algorithm to show them when it may or may not.

    IDK why I so much flak. If any here downvotes my posts or this comment please respond below with your thoughts to help me figure out how to move forward.

  • InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/β€žInitials” (https://github.com/dicebear/dicebear) by β€žDiceBear”, licensed under β€žCC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)TH
    TheTwelveYearOld @lemmy.world
    Posts 162
    Comments 68