Getting comfortable with the lack of privacy with my Week Notes (6 mins read).
Looking back at a few years of writing week notes publicly, and how I approach privacy around what I (want to) write in them.
Getting comfortable with the lack of privacy with my Week Notes (6 mins read).
Looking back at a few years of writing week notes publicly, and how I approach privacy around what I (want to) write in them.
Attached: 1 image Here's an interesting medical privacy #GDPR issue. The NHS have sent me a letter. It is printed / folded in such a way that anyone seeing the unopened envelope can see what it is about. That could be the postie, family, guest, etc. This is why it is important to test your processes end to end, QA your final product, and try to anticipate what might go wrong.
Public listings have made sensitive data searchable due to misconfigured third-party services
PSA: tiktok can see everything you type in their browser. so when you click a link to buy something in someone’s profile, everything you type after clicking that link will be logged by tiktok. EVERYTHING. move accordingly.twitter.com/krausefx/statu…Post details
🔥 New Post: Announcing InAppBrowser - see what JavaScript commands get injected through an in-app browser 👀 TikTok, when opening any website in their app, injects tracking code that can monitor all keystrokes, including passwords, and all taps. krausefx.com/blog/announcin…Felix Krause (@KrauseFx)Thu, 18 Aug 2022 20:59 +0000
EricaJoy (@EricaJoy)Fri, 19 Aug 2022 15:46 +0000
🔥 New Post: Announcing InAppBrowser - see what JavaScript commands get injected through an in-app browser 👀 TikTok, when opening any website in their app, injects tracking code that can monitor all keystrokes, including passwords, and all taps. krausefx.com/blog/announcin…Felix Krause (@KrauseFx)Thu, 18 Aug 2022 20:59 +0000
Facebook has started to use a different URL scheme for site links to combat URL stripping technologies that browsers use to improve privacy and prevent user tracking.
Finally! Someone has managed to do it! I'll admit, slightly upset that we couldn't have been the ones to do it first, but so glad this crap is being addressed. great work!Syeef (@syeefk)Sat, 16 Apr 2022 16:25 +0000
installed an app. started it. got notification: "app has pasted from your clipboard" never uninstalled faster also the clipboard had a naughty link in it so a big lol instead of oh shit there 🤣Miss Amy (@MissAmyTobey)Sun, 05 Dec 2021 17:53 GMT
Stop uploading your address book to social media sites. It’s not your data!
@mikko (@mikko)Fri, 09 Apr 2021 15:09 +0000
hashtag donttweetpicturesofyourfacewithotheridentifyingdatainresponsetodataminingoperationsdisguisedasfunmemeschallenge
Stimulus Functions (@taotetek)Fri, 26 Mar 2021 20:41 GMT
Encrypting and Decrypting Text with OpenSSL (2 mins read).
How to use openssl
to encrypt text with a shared passphrase.
My interpersonal relationships prof told us she tracked everything her husband did on his phone and computer—gps, internet history, texts/emails—because the secret to a successful marriage is knowing that you can’t trust anyone.
Katherine Rhodes (@krhodes0521)Sat, 30 Jan 2021 22:22 GMT
Telegram Messenger (@telegram)Sun, 10 Jan 2021 13:53 GMT
Fun fact: *67 still works to block your number from appearing on caller ID.Katelyn Bowden (@medus4_cdc)Tue, 22 Dec 2020 01:46 GMT
The difference between WhatsApp and Signal (both end-to-end encrypted) in the new App Store privacy section is stark
HoliDev (@Dev14e)Wed, 16 Dec 2020 19:42 GMT
Strava have updated their privacy defaults to prioritise safety - great news! Thanks to everyone who leant their voice to this issue 😊
Post details
***UPDATE*** @Strava have now changed this setting to default to private - for anyone who had it set to 'Everyone' it is now set to private until you choose to enable it. Thank you for listening and taking this seriously Strava! twitter.com/Strava/status/…Andrew Seward (@MrAndrew)Wed, 14 Oct 2020 08:18 +0000
Andrew Seward (@MrAndrew)Wed, 14 Oct 2020 08:19 +0000
(1/2) Out running this morning on a new route and a lady runs past me. Despite only passing, when I get home @Strava automatically tags her in my run. If I click on her face it shows her full name, picture and a map of her running route (which effectively shows where she lives)Andrew Seward (@MrAndrew)Mon, 14 Sep 2020 15:34 +0000
Why I Actively Discourage Online Tooling like jwt.io
and Online JSON Validators (5 mins read).
Why you should be opting for local tooling when working with sensitive data, even Non-Production ones.
An interesting read on creating a extensible platform which isn't truly private, vs a walled garden with true privacy, and the tradeoffs we have to consider.
Blocking Twitter Widgets from This Site (2 mins read).
Enforcing a privacy-aware removal of Twitter's JavaScript widget from this site.
A great writeup of a huge event - when I went a few years ago I was bowled over by how much time I'd need to spend to see everything I wanted to (hint: it was more than the few days I was there)
IndieWebCamp Amsterdam 2019 (19 mins read).
Recapping my time at IndieWebCamp Amsterdam, my first 'official' IndieWeb event, and meeting some of the big names in the community.
This is a very interesting read - privacy and data ownership is quite familiar to those of us who have been using tech for some meaningful amount of our lives, but what about those who've never touched the Internet, but have suddenly found their data is being collected and owned by someone, somewhere?
I've been using DuckDuckGo for a couple of years now, and have no complaints. The privacy baked into the product is great, and their extensibility for things like !gh
to search on GitHub or searching "html pretty print" is awesome for quick productivity boosting.
I'd recommend you giving it a go, and see how you feel after a while. And if you're finding search results aren't so great every so often, you can !g
to get your Google results!
This is a great post by Jon about Firefox Containers and the power they can hold.
I lazily use them as a way to have i.e. multiple email accounts logged in, or at work having several AWS accounts logged in at once but have also got some pieces in place to containerise certain privacy-infringing companies' attempts to track me.
You're currently viewing page 1 of 1, of 45 posts.