all 40 comments

sorted by: hot top controversial new old
[–] [S] 77 points 6 months ago (1 child)

“Shortly before I left my boss told me, direct quote, my job is to protect the company. There was another time I got into a very serious ontological discussion with a fairly senior engineer about what the difference was between taxes and fines and they didn’t understand there was a difference,” he said.”

😳

  • source
  • hideshow 1 child comment
  • [–] 67 points 6 months ago (1 child)

    "Yeah, no shit"

    -anyone on the internet and paying even the slightest bit of attention for the past 5 years

  • source
  • hideshow 1 child comment
  • [–] 48 points 6 months ago (7 children)

    I really should take all of them to small claims for the time and energy needed to block them.

  • source
  • hideshow 7 child comments
  • [–] 18 points 6 months ago (6 children)

    I have to wonder if there is a way to do that. Basically we all inconvenience them to death.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 15 points 6 months ago (4 children)

    The way I see it they’re not gonna waste the time and money to fight a $1,000 claim and articles like this would convince a local judge that I can’t just opt out.

    And since the other side didn’t bother to show up I’d win by default.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 3 points 6 months ago (3 children)

    Any not-your-lawyer types out there wanna make some good trouble by confirming this?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 6 months ago (2 children)

    I have a lawyer but I feel like me coming to her with this would be like those folks who said we’d both be billionaires if I built a Facebook app for free.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 38 points 6 months ago

    Shocked pikachu face?

  • source
  • [–] 50 points 6 months ago (1 child)

    And when will those companies punished according to their crimes?

  • source
  • hideshow 1 child comment
  • [–] 13 points 6 months ago

    In a lawless place there is no enforcement of one's word, is blind trust or nothing...

  • source
  • [–] 12 points 6 months ago

    I’d gasp but I don’t want to get the hiccups.

  • source
  • [–] 10 points 6 months ago

    I am a solo developer on some of these platforms and have to do an annual privacy evaluation which I find painful as the company taking up my valuable time to answer all their BS questions, are the ones breaking privacy. Insane. Further, I had to pay $100 annually to the UK privacy commission as it is required for all UK companies which is also deeply ironic as the same government is requiring you to submit ID for some websites which has made the privacy leaks even more damaging.

    As a solo developer I am feeling the brunt of the privacy charades while the big companies just continue to violate privacy unchecked. I have zero desire or intentions to break anyone’s privacy an ask for no information from anyone outside of pulling down their profile to sign in as is required to determine app permission. That is it. No phone numbers, no real names, no biometrics, no photos of ID or anything outside of those username on that platform but I am burdened as if I was collecting all of this and as if I was the one breaking privacy. This world is mental.

  • source
  • [–] 9 points 6 months ago (2 children)

    Yup online privacy done been gone!

  • source
  • hideshow 2 child comments
  • [–] 8 points 6 months ago* (last edited 6 months ago) (1 child)

    Article behind paywall.

    An independent privacy audit of Microsoft, Meta, and Google web traffic in California found that the companies may be violating state regulations and racking up billions in fines. According to the audit from privacy search engine webXray, 55 percent of the sites it checked set ad cookies in a user’s browser even if they opted out of tracking. Each company disputed or took issue with the research, with Google saying it was based on a “fundamental misunderstanding” of how its product works.

    The webXray California Privacy Audit viewed web traffic on more than 7,000 popular websites in California in the month of March and found that most tech companies ignore when a user asks to opt-out of cookie tracking. California has stringent and well defined privacy legislation thanks to its California Consumer Privacy Act (CCPA) which allows users to, among other things, opt out of the sale of their personal information. There’s a system called Global Privacy Control (GPC), which includes a browser extension that indicates to a website when a user wants to opt out of tracking.

    According to the webXray audit, Google failed to let users opt out 87 percent of the time. “Googleʼs failure to honor the GPC opt-out signal is easy to find in network traffic. When a browser using GPC connects to Googleʼs servers it encodes the opt-out signal by sending the code ‘sec-gpc: 1.’ This means Google should not return cookies,” the audit said. “However, when Googleʼs server responds to the network request with the opt-out it explicitly responds with a command to create an advertising cookie named IDE using the ‘set-cookie’ command. This non-compliance is easy to spot, hiding in plain sight.”

    The audit said that Microsoft fails to opt out users in the same way and has a failure rate of 50 percent in the web traffic webXray viewed. Meta’s failure rate was 69 percent and a bit more comprehensive. “Meta instructs publishers to install the following tracking code on their websites. The code contains no check for globally standard opt-out signals—it loads unconditionally, fires a tracking event, and sets a cookie regardless of the consumerʼs privacy preferences,” the audit said. It showed a copy of Meta’s tracking data which contains no GPC check at all.

    webXray is an independent technology company that runs a search engine that lets people look for privacy violations on the internet. Its founder Timothy Libert is the former lead of cookie policy and compliance at Google. Libert told 404 Media he felt his job at Google was to protect its users but that his bosses didn’t agree. He left the company in 2023 and started webXray.

    “Shortly before I left my boss told me, direct quote, my job is to protect the company. There was another time I got into a very serious ontological discussion with a fairly senior engineer about what the difference was between taxes and fines and they didn’t understand there was a difference,” he said.

  • source
  • hideshow 1 child comment
  • [–] 14 points 6 months ago (2 children)

    so you're telling me that all those times I said google was listening to me through my phone, and like a thousand people said I was full of shit, I was right?

  • source
  • hideshow 2 child comments
  • [–] 6 points 6 months ago

    I love that if you tell people that you don't use google/microslop/whatever and tell them why, YOU are the paranoid weirdo. Buddy we're way past paranoid, we're at "i don't care because convenience"

  • source
  • parent
  • [–] 11 points 6 months ago (13 children)

    I'm trying out Google's Gemma4 LLM, which is run locally, and is touted as a 100% private model.

    Asking it some questions about itself, at one point it acknowledged that chats were sent to "developers".

  • source
  • hideshow 13 child comments
  • [–] 26 points 6 months ago (3 children)

    Yeah, I wouldn't trust anything LLM says.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 6 months ago (2 children)

    Oh, I don't ask for actual answers, but asking it to provide bibliography often points me to the sources, so that I can draw my own conclusions.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 6 months ago (1 child)

    So what bibliography did it provide to prove that the chats are not private?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 6 months ago

    The engineers and trainers who work on my underlying models regularly review anonymized logs of interactions to identify failures,-hallucinations, and "degraded" logic—exactly like the failure that occurred in this conversation.

  • source
  • parent
  • [–] 11 points 6 months ago (2 children)

    You mean it hallucinated a positive response to your leading question as it is meant to? You are operating on a fundamental misunderstanding of what LLMs do. Even if what you said is true, an LLM would have no knowledge of that unless it was explicitly told as such as an input - and why would they be stupid enough to do that?

  • source
  • parent
  • hideshow 2 child comments
  • [–] -2 points 6 months ago* (1 child)

    You are welcome to try. I can pastebin the prompt. I asked it about itself, the model. It replied that it didn't exist. I pointed it the the docs, from the Google page. It acknowledged the page was legit, and told me there was no mention of Gemma 4, although there were like 20 mentions, including download links. It insisted. It took me pointing out the specific paragraphs to have it say "this may indicate there is Gemma 4 model. May be...

    At some point it told me I was hallucinating.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 6 months ago

    I don’t need to try. You aren’t learning facts from interrogating an LLM. If it doesn’t have information, it will make up a result. If it does have information, it will make up a result. Even that is personifying it too much because really the transformer has no concept of what „making something up“ is. It takes an input and gives an output, no matter what.

  • source
  • parent
  • 43 comments in c/privacy@lemmy.ca view that post
    [–] 114 points 6 months ago* (last edited 6 months ago) (3 children)

    So the corporations that make their money on mass surveillance are still spying on people?

    I'm shocked, shocked!

  • source
  • hideshow 3 child comments
  • [–] 29 points 6 months ago (1 child)

    Super Ultra Mega Surprised

  • source
  • hideshow 1 child comment
  • [–] 27 points 6 months ago (6 children)

    I'm pretty sure apple paid to be omitted here. They absolutely track you despite lying and saying they don't.

  • source
  • hideshow 6 child comments
  • [–] 3 points 6 months ago (3 children)

    So what your telling me is that corporation can commit whatever crimes they want.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 12 points 6 months ago* (22 children)

    I run all my stuff in a private tab nowadays. And nuke all cookies etc each session.

    Also, make sure I have anti-fingerprinting enabled.

    With a VPN.

    The only annoying thing is I get a few texts/emails saying "A new device just accessed your account. Was it you?". Yes, yes it was. And I'm not relying on a cookie or fingerprinting for security.

  • source
  • hideshow 22 child comments
  • [–] 18 points 6 months ago (16 children)

    Private tabs do nothing for the backend, your ISP, browser, search engine, and any sites you visit, can still see everything you do. All private tabs do is they don't save history or cookies on your frontend.

    VPN hides your data from your ISP, but there are still workarounds. Multi-hop can make you harder to triangulate though.

    You still need to use a privacy-centric browser and search engine or else the ones you use can still send information about you back to their servers where they can build a profile on you. They won't have your real IP address as long as you never connect without a VPN, but any little data they collect on you can be collated with the rest to profile you and potentially identify you.

    Even with browsers like firefox or waterfox, you still need to enable all of the security settings or else there are gaps that can be exploited. HTTPS-only mode, DNS over HTTPS, anti-tracking extensions, etc...

    Even then, I wouldn't be surprised if there's an unseen gap somewhere. But it's a lot better than using google and microsoft and no vpn.

  • source
  • parent
  • hideshow 16 child comments
  • [–] 10 points 6 months ago (6 children)

    Also, browsers still send so much unique data that they can be reasonably well fingerprinted. I don't really know all the things, but you can combine info such as OS, browser version, window size, list of extensions, HTTP request headers, timezone, etc...
    Plus you could also track behavior.
    And even with VPN some analysis might be able to figure out what you're looking at based on traffic patterns.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 12 points 6 months ago (1 child)

    https://amiunique.org/ shows you many of the things they can check for

  • source
  • parent
  • hideshow 1 child comment
  • [–] 10 points 6 months ago

    Holy shit, that's a lot of data. I had no idea they could see what language packs I have installed on my keyboard. I have a pretty unique combination of languages, so that probably makes me really easy to identify across platforms.

    Is there an easy way to disable or block fingerprinting?

  • source
  • parent
  • [–] 10 points 6 months ago (1 child)

    We need a browser extension that will add or remove a random number of dummy browser extensions per session to further obfuscate the fingerprinting

  • source
  • parent
  • hideshow 1 child comment
  • Browsers like Tor and Mullvad have the right idea. They do all the most important privacy tweaks out of the box and encourage you not to modify it, so that way everyone using the browser has the same fingerprint which makes it much more difficult to track any one user.

  • source
  • parent
  • [–] 4 points 6 months ago

    Some VPN providers offer a setting that makes it harder to analyze traffic patterns. They make every packet the same size and send them at regular intervals along with extra noise. It makes everything look uniform so that AI can't match your traffic to/from the VPN server with traffic between the VPN server and your web activity.

    It might be overkill, and it adds latency and uses extra data. But for maximum paranoia, it's an option

  • source
  • parent
  • [–] 1 point 6 months ago

    VPN is only blocking your IP. Every other way they track well still work. I mean what does a VPN gibe you? encryption all sites are https hide DNS from ISP there is DOT and DOH. Last one is SNI that could be fixed by ECH if sites used it.

  • source
  • parent
  • [–] 2 points 6 months ago* (last edited 6 months ago) (2 children)

    You still need to use a privacy-centric browser

    Check out Konform Browser. Least leaky one out there.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 6 months ago (2 children)
  • [–] 6 points 6 months ago

    If you trust your ISP to examine all your web traffic, and if you don't mind every site you visit knowing your real IP address, and if you're not worried about hackers and sniffers on public wifi stealing your data, then I suppose you don't need one.

    But if by overrated, you mean they only handle certain aspects of security and aren't a complete solution by themselves, then I agree. But no one who understands VPNs expects them to be a complete solution by themselves.

  • source
  • parent
  • [–] -1 points 6 months ago (2 children)

    Your ISP and browser can see everything you do, but your search engine can only see what you're doing when you're actively on the site, and through cookies. Same with those other sites. Using incognito absolutely helps with that.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 6 months ago (1 child)

    That's plain false. With a VPN enabled, the ISP can see data volume and time stamps, and what VPN server you're connected to. Nothing else.

    Your browser, depends on the browser. Chrome, Edge, etc., yeah, they're watching everything you do. An open-source privacy-focused browser with maximum privacy settings enabled is not watching as much, if anything at all.

    And incognito doesn't hide your fingerprint from search engines or websites. It's basically worthless for privacy. All it does is clear cookies, caches, and browsing history from the local device.

  • source
  • parent
  • hideshow 1 child comment
  • I was talking about this statement:

    Private tabs do nothing for the backend, your ISP, browser, search engine, and any sites you visit, can still see everything you do. All private tabs do is they don't save history or cookies on your frontend.

    Obviously if you use a VPN your ISP can't see it.

    If you use a private browser they're not watching you, but again, your browser can easily log all that information if they are inclined to.

    I didn't say anything about fingerprinting and neither did you. Cookies are a large part of tracking, I never said it was the only way they're tracking. But if I go on one site and they fingerprint me, and then I go on another site and they fingerprint me, the first site doesn't automatically know I was on the second site because of the same fingerprint. They would know because of the cookies.

  • source
  • parent
  • [–] 11 points 6 months ago (2 children)

    One of the most overlooked, underused, and still hasn't seen production release privacy settings is the ability to partition, or not decorate visited links.

    In Firefox based in about:config

    
    layout.css.visited_links_enabled    
    
    false
    

    In chromium based in chrome://flags

    Partition the Visited Link Database, including 'self-links'
    
    Enabled
    
  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 6 months ago

    Stitching is the concept of updating your profile by appending your interactions from private sessions when you approve that "Yes, it was you" accessing your account "from a new device", or when it's otherwise possible to associate your current session with previous ones in any way.

  • source
  • parent
  • [–] 6 points 6 months ago (1 child)
  • [–] 11 points 6 months ago (1 child)

    This is a bit vindicating lol. Every single social media post on the internet even here on Lemmy when something comes out about scalping people for more of their data there is a top comment saying: "do this and this to opt out" as a solution and it gets high visibility.

    I usually say "yeah, there is a high chance that does nothing" and there are always people who say that is not true, without exception... Well, here is more proof.

  • source
  • hideshow 1 child comment
  • [–] 1 point 6 months ago

    Because people (like this literal independent audit group) are checking and reporting back.

    While I have no doubt at all that some people just take these tools and guides as gospel, a lot of the time the people supporting them are checking them. This comment section alone is filled with people suggesting Wireshark to check where data packets are being sent to for local models.

  • source
  • parent
  • [–] 2 points 6 months ago

    My reaction is a certain Riviera reference.

    The accursed!

  • source
  • [–] 2 points 6 months ago
    [–] 1 point 6 months ago

    Are they at least tracking less? (Not that I think that makes it okay.)

  • source
  • 8 comments in c/hackernews@lemmy.bestiver.se view that post

    That's because they have a rapist mentality.

  • source
  • [–] 5 points 6 months ago (6 children)

    These companies will find it very difficult to track you if you use uBlock to ban their scripts worldwide on all sites. If you must use one of their sites, you can enable their scripts only on their own domains.

  • source
  • hideshow 6 child comments
  • [+] 1 point 6 months ago (5 children)
  • [–] 2 points 6 months ago (4 children)

    uBlock won't block them globally by default, no. Instead, I block all the scripts on Google sites globally, then unblock needed scripts on the specific domains I need to use. Which at the moment, isn't any of them, since when I use YouTube I use a custom client like Freetube through a VPN or Invideous.

    What this accomplishes is that my browser isn't currently allowed to contact domains owned by Google for anything, and no scripts hosted by them are allowed to run.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 6 months ago (1 child)

    Switch ublock to advanced mode and you can block third party stuff by default. Many websites will break but you can whitelist stuff easily

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 6 months ago

    I have it in advanced mode. Most of the privacy tracking stuff is blocked by the filter lists I have, so I don't block third party by default. The big offenders aren't blocked because most people still use them. I do not.

  • source
  • parent
  • [+] 1 point 6 months ago (1 child)
  • [–] 2 points 6 months ago

    check out a YT tutorial on how to use uBlock advanced mode. it's very simple, once you have it explained to you.

    if you want additional filter lists beyond the basic ones uBlock ships with, here's a list of ones you can mix and match depending on your needs: https://github.com/yokoffing/filterlists

    and if you do a lot of gaming, chances are you've looked up stuff on a wiki. and chances are, that wiki is hosted on fandom. here's a filter list to make that usable: https://github.com/squabbled/FandomFixed

  • source
  • parent