Cybersecurity and Privacy

Is it a good idea to crank up the settings in Argon2id to max (20 iterations, 100 length, salted) for applications? I'm new to the cybersecurity subject, but I assume keeping the hashing as slow as possible (and a longer hash length = fewer chances of collusion) helps fight against brute-forcing. Is that correct?

I am looking for a wifi mesh system to improve the coverage in my home. I looked around and found a cheap solution with decent reviews, the Halo 50G by Mercusys (TP Link). I am not a fan of super cheap, super easy to use "magical" solutions, and within minutes of connecting just the access point I was seeing calls to the likes of google, facebook, amazon, etc in my network coming from the device. Not ideal.

And by burned, I mean "realize they have been burning for over a year". I'm referring to a bug in the Tor Browser flatpak that prevented the launcher from updating the actual browser, despite the launcher itself updating every week or so. The fix requires manual intervention, and this was never communicated to users. The browser itself also doesn't alert the user that it is outdated. The only reason I found out today was because the NoScript extension broke due to the browser being so old.

And by burned, I mean "realize they have been burning for over a year". I'm referring to a bug in the Tor Browser flatpak that prevented the launcher from updating the actual browser, despite the launcher itself updating every week or so. The fix requires manual intervention, and this was never communicated to users. The browser itself also doesn't alert the user that it is outdated. The only reason I found out today was because the NoScript extension broke due to the browser being so old.

La crisi dell’attivismo: cosa può insegnarci la battaglia per la privacy?

I haven't kept up with all the news about this, so is there a definitive yes or no answer that Mozilla sells or even shares user information with partners such as Google? Google is paying Mozilla for something.

The only Pixel I have is a Pixel 3XL which is not supported anymore for updates. A few questions. does that mean at some point you have to buy a new phone all the time? How long are they supported, do I need the buy the newest one everytime to have a decently long support? If I can install Calyx, but have already degoogled my phone, is Calyx still useful? But I suppose at this point it's still better to get a Pixel anyway and install Graphene which is supposedly better? how risky is it to run an unsupported phone like my Pixel 3XL? What can happen?

I'm making this post to share some interesting less talked about things about privacy, security, and other related topics. This post has no direct goal, it's just an interesting thing to read. Anyways, here we go:

Den meisten ist wahrscheinlich nicht klar, dass es einen Konflikt zwischen Datenschutz und Privatsphäre geben könnte. Deswegen erstmal die Erklärung.

After the whole Firefox debacle I'm trying to find a new privacy oriented browser for my Mac and iOS devices with bookmark syncing. Ideally an open source browser but I don't think one exists right now that has both macOS and iOS versions. For example LibreWolf has a Mac app but no iOS app.

It looks like the Privacy Act might be a way to audit DOGE on a per-person level. Jamie Raskin has suggested mailing them a formal request for your data.

My small company (less than 30 employees) has been using Skype for internal group meetings and messaging. Since it's closing, we're looking for alternatives.

Someone made a compilation of academic reviews and blogposts here: https://community.signalusers.org/t/wiki-overview-of-third-party-security-audits/13243 but none of them seem to be real security audit reports, ex. compare with real security audits to Delta Chat: https://delta.chat/en/help#security-audits

My small company (less than 30 employees) has been using Skype for internal group meetings and messaging. Since it's closing, we're looking for alternatives.

My small company (less than 30 employees) has been using Skype for internal group meetings and messaging. Since it's closing, we're looking for alternatives.

Wanna chat about something non-infosec amongst those of us who frequent /c/cybersecurity? Here’s your chance! (Keep things civil & respectful please)

Someone made a compilation of academic reviews and blogposts here: https://community.signalusers.org/t/wiki-overview-of-third-party-security-audits/13243 but none of them seem to be real security audit reports, ex. compare with real security audits to Delta Chat: https://delta.chat/en/help#security-audits

Google's newest AI model can peruse your search history to improve its understanding of you as a person. @[email protected] asks: What could go wrong? #Google #AI #Gemeni #Cybersecurity #Tech #Technology https://flip.it/afRE32

Recently there has been controversy around Mozilla Firefox.

@privacyprideIl post completo di Christian Bernieri è sul suo blog: garantepiracy.it/blog/neverend…Ho l'impressione di essere un cagnolino in una stanza che brucia, circondato dal fuoco e ho voglia di dire "This is fine", sorseggiando una tazza di the. Una persona normale, per sopravvivere in un paese normale, ha bisogno di una cosa sola:

I feel like this might be something that people here have insight on because VPNs seem to trigger Captchas a lot. What can I do to bypass them on desktop and android?

I'm getting ready to move off of Google (and Private Internet Access), and Proton is looking like the best option. But I'm nervous. Some of the things I worry about: - Calendar support: I rely really heavily on Google Calendar. How will I share events with others? And what will I do without Google Tasks? - VPN App Quality: Seeing some mixed reviews on Proton VPN Android app. - Proton ethics & politics: Look, I really don't want to open up the holy war here. My big stipulation is: I don't want my money to go to a company that will donate its money or services to fascists. To my knowledge, Proton does not do that. I know they made a post that seemed to praise GOP antitrust efforts. I do not believe that that is the same thing as lending material support for fascists. (And, as someone who is very well read-in on antitrust issues, I'll say that -- for a lot of complicated reasons -- there is some truth to Proton's post, but I wish they had framed it as a critique of the corporate wing of the Democratic party and not praise of the GOP.) - Anything else I haven't thought to ask.

ShadowDragon, a contractor for ICE and other government agencies, has developed a tool that lets analysts more easily pull an individual’s publicly available data from a wide array of sites, social networks, apps, and services across the web. @404media has the story. #ICE #SocialMedia #ShadowDragon #Tech #Technology #CyberSecurity https://flip.it/Rjm1ZI