• 0 Posts
  • 145 Comments
Joined 2 years ago
cake
Cake day: August 8th, 2023

help-circle
  • People don’t seem to understand the risks presented by normalizing client-side scanning on closed source devices. Think about how image recognition works. It scans image content locally and matches to keywords or tags, describing the person, objects, emotions, and other characteristics. Even the rudimentary open-source model on an immich deployment on a Raspberry Pi can process thousands of images and make all the contents searchable with alarming speed and accuracy.

    So once similar image analysis is done on a phone locally, and pre-encryption, it is trivial for Apple or Google to use that for whatever purposes their use terms allow. Forget the iCloud encryption backdoor. The big tech players can already scan content on your device pre-encryption.

    And just because someone does a traffic analysis of the process itself (safety core or mediaanalysisd or whatever) and shows it doesn’t directly phone home, doesn’t mean it is safe. The entire OS is closed source, and it needs only to backchannel small amounts of data in order to fuck you over.

    Remember the original justification for clientside scanning from Apple was “detecting CSAM”. Well they backed away from that line of thinking but they kept all the client side scanning in iOS and Mac OS. It would be trivial for them to flag many other types of content and furnish that data to governments or third parties.




  • Remember, when iPhones are off, they just become Airtags. Most modern phones are sending/receiving BLE signals even if you don’t expressly intend them to. I wouldn’t go anywhere near a protest with anything besides degoogled Android, because its the only OS where you can actually disable the radios. Even then I would probably opt for a Faraday bag.

    Other considerations… Apple (and probably Google) devices are doing client side scanning of images and turning on GPS to geotag images unless you specifically disabled that features. In other words, there are ways you can be correlated to locations and activities after the fact. Just ask all those J6 rioters.



  • I suppose your level of enthusiasm for this offering tracks strongly with how credible you consider Rob Braxman. I have heard people here and elsewhere say he’s a quack or even a psyop. I do know that he’s one of the few sources to talk about client side scanning, the illusory nature of Apple’s “privacy” and other modern privacy issues.

    We need robust options for privacy. Googled Android and Apple iOS are horrible options for genuine anonymity and privacy. So, I welcome any competition in this space.










  • Unfortunately it has been demonstrated through whitehat research that simply deleting your old account is relatively useless. They have shadow profiles of users based on probabilistic data. For example, say your spouse with her decades old account keeps making posts about what you ate on date night, your trip to Cabo, or worse yet she posts a bunch of pictures of her, you, and the kids. Facebook makes a shell profile based on this conception of “you” and begins aggregating all the info it can about this person.

    More over, every time an acquaintance of yours gives their FB app permissions to access their contacts (to suggest Friends or whatever) if your contact info is on the list, FB now has your real name, your email, your mobile phone number, etc. You never opted in, but it doesnt matter - other people are opting you into FB data collection all the time, unless you literally don’t tell anyone your real phone number or email address.





  • I just use ViMusic or RiMusic or one of those types of forks. I believe it uses YouTube and other sources. It is ad-free and has the usual stuff you’d expect like suggestions, playlists, genres etc. Occasionally the source platform will make a change that breaks it, an update comes out fixes it.

    That and there are still (probably ancient at this point) desktop clients that scrape your Pandora and download local copies of all the tracks. That’s another good way to never listen to ads.