• 2 Posts
  • 5 Comments
Joined 1 year ago
cake
Cake day: July 7th, 2023

help-circle
  • While there are a lot of critics of this, ask yourself: for how many services and apps you use (e.g. messenger, cloud storage, email, operating system, web browser…) are you willing to pay recurrently? If that answer is not for every single one of them, then this move is the answer.

    The internet desperately needs a way to fund things and advertising seems to be the only viable solution on a bigger scale. And I don’t think that there is anyone better suited than mozilla for the job of pushing a privacy respecting way of doing so. Sure this needs to be done the right way, but they should be given the benefit of the doubt.

    And this doesn’t mean that everything needs to be cluttered with ads. You could still pay a bit to remove them.

    Even if the answer to the question above was yes, consider the masses. Other people might not care enough/have the same awareness about privacy to pay, but they could gain a lot with this. Consider people in less fortunate circumstances monetary wise. Don’t they deserve privacy if they can’t afford to pay for services?




  • Tldr: This is a traffic analysis attack, it exposes metadata without help or access to data from whatsapp. Other messengers are vulnerable too. It requires vast resources and access only governments have. It is not a threat model that todays messengers defend against.

    The interesting part of the article ist the last one.

    According to the internal assessment, the stakes are high: “Inspection and analysis of network traffic is completely invisible to us, yet it reveals the connections between our users: who is in a group together, who is messaging who, and (hardest to hide) who is calling who.”

    The analysis notes that a government can easily tell when a person is using WhatsApp, in part because the data must pass through Meta’s readily identifiable corporate servers. A government agency can then unmask specific WhatsApp users by tracing their IP address, a unique number assigned to every connected device, to their internet or cellular service provider account.

    WhatsApp’s internal security team has identified several examples of how clever observation of encrypted data can thwart the app’s privacy protections, a technique known as a correlation attack, according to this assessment. In one, a WhatsApp user sends a message to a group, resulting in a burst of data of the exact same size being transmitted to the device of everyone in that group. Another correlation attack involves measuring the time delay between when WhatsApp messages are sent and received between two parties — enough data, the company believes, “to infer the distance to and possibly the location of each recipient.”

    Today’s messenger services weren’t designed to hide this metadata from an adversary who can see all sides of the connection,” Green, the cryptography professor, told The Intercept.



  • I agree with you, that the future of Desktop Linux are the atomic Distros. They are more stable and require less intervention, so they can be used more easily by less knowledgeable users and users who prefer a stable OS(in the non-breaking way, not no updates). Making Linux more accessible for new users, is exactly what Linux needs.

    I disagree on your view about the Fedora atomic spins, especially universal blue. Who cares if the underlying OS downloads as one big image. It all happens in the background, you don’t notice that. Everytime you reboot, you are on an updated system.