from Charger8232@lemmy.ml to privacy@lemmy.ml on 07 May 03:01
https://lemmy.ml/post/29712598
This is original content. AI was not used anywhere except for the bottom right image, simply because I could not find one similar enough to what I needed. This took around 6 hours to make.
Transcription (for the visually impaired)
(I tried my best)
The background is an iceberg with 6 levels, denoting 6 different levels of privacy.
The tip of the iceberg is titled “The Brainwashed” with a quote beside it that says “I have nothing to hide”. The logos depicted in this section are:
- Apple
- TikTok
- PayPal
- Google Chrome
- CashApp
- Samsung
- Steam
- Microsoft Windows
- Ring (Security Camera)
- YouTube
- Amazon
- Discord
- Gmail
- ChatGPT
The surface section of the iceberg is titled “As seen on TV” with a quote beside it that says “This video is sponsored by…”. The logos depicted in this section are:
An underwater section of the iceberg is titled “The Beginner” with a quote beside it that says “I don’t like hackers and spying”. The logos depicted in this section are:
- Telegram
- Authy
- Brave Browser
- Privacy.com (Virtual Cards)
- DuckDuckGo
- iMessage
- Proton Mail
- AdBlock (Browser Extension)
A lower section of the iceberg is titled “The Privacy Enthusiast” with a quote beside it that says “I have nothing I want to show”. The logos depicted in this section are:
An even lower section of the iceberg is titled “The Privacy Activist” with a quote beside it that says “Privacy is a human right”. The logos depicted in this section are:
- Monero
- GrapheneOS
- Vanadium (Web Browser)
- KeePassDX
- SimpleX Chat
- Accrescent
- SearXNG
- Aegis Authenticator
- OpenWrt
- Mullvad VPN
- An illustration of physical cash
The lowest portion of the iceberg is titled “The Ghost”. There is a quote beside it that has been intentionally redacted. The images depicted in this section are:
- A cancel sign over a mobile phone, symbolizing "no electronics"
- An illustration of a log cabin, symbolizing "living in a log cabin in the woods"
- A picture of gold bars, symbolizing "paying only in gold"
- A picture of a death certificate, symbolizing "faking your own death"
- An AI generated picture of a person wearing a black hoodie, a baseball cap, a face mask, and reflective sunglasses, symbolizing “hiding ones identity in public”
End of transcription.
threaded - newest
Throw away mobile phone and just use an air gapped machine. Your productivity will tank but then you’ll eventually add local databases of the shit you actually need on your air gapped machine and your productivity will triple.
thehackernews.com/…/wikileaks-Brutal-Kangaroo-air…
Well shit, I shouldn’t be the first to tell you that if you’re serious about your privacy then get off of windows.
Also if the CIA is targeting with you with air gap malware, then you fucked all the way up. Pedophiles are saying “damn, fuck that guy”
This is Lemmy. You’re the 30billionth to tell me.
Since we are 6, that’s about 6 billion times per each of us.
I think someone is stealing some of my 6 billion for themselves. Just some. Not all. Just. Some.
Yeah, that’s because I didnn’t count you!
The government targeting pedos? That would be a more effective way to eliminate government than doge
Will it though? It’s not like paying with cash or even a credit/debit card takes radically longer than paying with a phone. It’s not like reading a book vs mindlessly scrolling Reddit or Lemmy makes productivity drop.
We get used to instantaneous tasks and convenience but in fine it’s like speeding up while driving from work to home, it’s not really the seconds or even minutes daily that count, it’s where you are going.
So… a “dumb” phone will probably for most not make productivity “tank” IMHO.
until you need to collaborate with the average person who uses google docs and gmail
What does that have to do with a phone?
Edit: FWIW you can say no (ideally explaining why, even providing an alternative while doing so, e.g. NextCloud with CollaboraOffice, for email… well you can clarify in a footer that this email thread is not private and suggest creating Tuta or ProtonMail account, even if one time use) to people who use Google Docs and GMail. You can also have a one time use account.
Yes, your productivity is going to tank. No way you’ll be prepared for a full air gapped machine on day 1.
Again I’m not comparing a perfectly setup productivity machine online versus an offline one, I’m comparing an entertainment machine also used for work vs an offline one.
FWIW I did do offline holidays and yes, I was missing a lot, yet arguably it didn’t make me less productive. Now I travel with kiwix with StackOverflow and Wikipedia .zim files and each time I believe, maybe naively, that I’m more productive, so indeed iteration helps but my point was more against distractions.
I don’t have internet. Now my productivity is 0%. Help.
TIL I'm a privacy activist--who can help me get to the ghost mode?
(Do I even want to get there or is that limited to journalists who have entire states trying to unalive them?)
Only you can answer that.
Pretty much, but if you want to give up all technology, work for yourself, and fake your death, then more power to you!
Seems like faking your death would cause more privacy problems than it solves. Why not just “stay alive” with a completely innocuous identity? Then adopt some new identity which cannot be traced back to the original?
If you’re alive, you are asked for documents such as property records, taxes, etc. and if you refuse then bad things happen. If you fake your death, no more questions are asked and you can take on fake identities. In essence, faking your death takes your identity out of “the system”
Do you like living in the woods and not enjoy technology (or can live perfectly happily without it)?
limited to journalists who have entire states trying to unalive them. Don’t live your life in fear
You should stage your death, like they tried to do on prison break and then move to Mexico or Columbia. Send me a DM for more information /J
unalive them
Easier than you think it is. Hard to keep at it. All you need to do is stop using a phone or computers. Death cert is only needed when you’ve been compromised and people are out to get you. Gold isnt really usable unless you stumble onto a secret underground society where all trade is done in gold. Realistically, you’d sooner be trading goods (or services) for other goods (or services).
This level technically shuns technology and that brings its own challenges. Its like saying you cant have privacy with technology. I dont necessarily agree with this statement so I’d say don’t go to this level.
There is this steadily growing activist group that you could join up with.
Unless you’re a woman and want to be treated as a human being, I guess.
Pretty good!! I agree with 95%.
Loved the “As seen on TV” category!
I agree that Tuta is more secure than ProtonMail.
Some are blended like Tor, that should be in Activist if used in secured computer.
Was not aware of the existence of Coincarp (logo by GrapheneOS). Is a crypto price tracker used by Activists? I left crypto a couple of years ago but though Activists just don´t trade much and stick for the long haul and use Monero for purchases.The logos next to it are Vanadium, which is a web browser made by GrapheneOS, and Aegis Authenticator, which is a time-based one-time password (TOTP) application.
Wow… I use Aegis exclusively as my authenticator since 2 years ago and completely did not recognize the logo by itself!!! I used Yandex image search and it told me coincarp… Sorry.
Curious why Tuta may be more secure than Proton? I’ve been debating switching off Proton but calibrating my risk profile, Germany being part of 14 Eyes and all.
The CEO of Proton has tried cozying to Trump and any company led by a guy who does that is knocked down several notches for me
If any service is at the whim of someone’s emotions or opinions, it’s at the bottom, and it should stay there.
Let the program be the program, and if we can’t see how it’s written, assume the above is true.
Foss or die
Technically speaking is highly contested and you have arguments pro and con, one way an another. They use different technologies so it is hard to compare properly, specially since it depends on the users using it properly.
If the technology is good, it does not matter where it is located. Switzerland, specially since a couple of years, does provide more freedom guarantees than Germany but it is not immune at all, actually, the US had used the Alpine country to do operations due to its attractiveness to dissidents and criminals alike. However, for the overwhelming majority of customers, either option is fine for they privacy and security. Only metadata has been obtained in few instances in both companies and nothing else… at least no that was used in a court of law.
For ultimate targets, if they have to rely on email, that they should not, I would choose Tuta though. These are my reasons.
Now, Proton overall, for most is a bit more reliable and full feature and better put together so it is easier to recommend. Think of Proton as the Apple of emails, quite secure and miles away from Gmail, but security wise and ethically, of the two, my bet would be with Tuta.
I would probably argue they are the same in terms of security and privacy. Privacy communities tend to disfavor Proton because its all eggs in one basket, and also for political reasons. Both of those are subjective to your personal threat/privacy profile.
Its true that a single point of failure is more risk than separate services, but that fact doesn’t undermine their security on a technical level, and has nothing to do with privacy. As for the political, yes it’s something to watch but nothing wrong has been done. They are set up as a non profit with checks and measures in place to prevent corruption from happening. I’m OK with different points of view and having different points of view on a board is a good thing.
Its not. They don’t even sign their releases or support PGP
Tuta is not a proton replacement
I just switched from Android to iOS, and while I have many complaints, I’m pleasantly surprised by how “walled off” the apps mostly are. Unlike Android, they have to comply to function for the general public.
It feels a lot more like tier two, where it isn’t like a spyware implant but your banking app or whatever will still function. And yes I know it’s far from good, just talking degrees here…
I agree that Apple, while not entirely private, is still a decent choice compared to Android. They both have their flaws though.
I just switched from iOS to deGoogled Android (e/OS setup by Murena) and as discussing with a friend yesterday, the biggest trade off is arguably security, namely than iOS and AOSP are relatively secure (even though far form perfect) and applications have both permissions to explicitly request and also containerized (e.g. limited file system access) … yet you do not need a security flaw to exist if your data are being exfiltrated periodically by the OS or apps. So arguably depending on your thread model (e.g. voluntarily offering your data vs spam/scam vs private malicious actors like NSO vs state level espionage) and your needs (banking apps vs Web equivalent) then one can be more appropriate than the other.
Even before I cared about privacy, I think Apple would’ve been unacceptable to me due to how tightly locked down it is. Like… I’d have to go through hoops and pay some money for a cert (not much if you know where to look, but still) to get something as basic as an adless Youtube client.
ayo, I think I won the privacy bingo! thats what this is right?
Android missing?
Hi from near the top of the iceberg. I have five from the top and two from the next level down, plus two from level four. A balanced diet?
I wasn’t able to fit everything, but I specifically excluded Android, because it isn’t inherently bad. GrapheneOS is based on the Android Open Source Project (AOSP), for example, so I didn’t want to give the wrong idea.
I’d put Android/iOS on top layer then AOSP on the 2nd layer then deGoogled Androids on 3rd layer then PostMarketOS on 4th or 5th layer.
Depends what they are, I think a fair amount of people might be in the same boat, with a few services from different tiers.
Where’s GOG.com?
Not sure if gog has anything to do with privacy. Altho if it was on the list I imagine it’d be up there with steam ( not sure why that one’s on the list either )
I’d argue that gog might be a bit better, since you can download executables from their website, and then use them offline, without telemetry. But still, I think neither are necessarily all that relevant here.
Well that sounds like a malware poisoned well
They are a relatively established game storefront, and have been at it for over a decade. Same Corp that’s also behind CD Projekt Red.
In the end, any storefront that distributes executables could in theory distribute malware, but I’d honestly be more worried about steam, since their publishing process seems a lot more automated, with less oversight.
If its not signed upstream, don’t download it
The problem with mullvad is a lot of its IPs are flagged as bots or denied around the web. Is there a good VPN that will still give access to most of the web?
I’ve never had that issue with Mullvad unless it was for a streaming app.
Sometimes I get detected and it makes me do a cloud flare “I’m not a robot” page.
I just got Mullvad again and the main site I get flagged on is reddit. Which I wouldn’t care but the state of search is so abysmal that I still regularly have to query reddit to find what I’m actually looking for (for some types of info anyway). It’s fine though, there’s some mullvad servers that haven’t been flagged yet so I just server hop as needed. Less convenient, but not terrible
Oh yeah! Reddit does that? But I just login with a throwaway account.
Sometimes after logging in, it will say there was a problem or just reload the login page.
If that happens just click login again and it will load normally.
Interestingly enough, Reddit - the only website I use that denied me entry from my VPS - doesn’t block Tor at all.
Interesting, I’ll have to try that out!
<img alt="" src="https://lemmy.ml/pictrs/image/5c49e403-67d3-4742-9822-c8e7aa31eeb4.png">
Yeah, it’ll give me one of these screens with most mullvad servers. I don’t really interact on reddit anymore so I refuse to log in even with a throwaway (on my phone at least). Maybe there’s something to it, maybe it’s my own silly little battle against rude web design 😅
Try a Reddit mirror like RedLib, i.e. https://redlib.privacyredirect.com/
It’s so cringe how they make everything cutesy
All of us.
Reddit is the ONLY website I use that outright denies me entry from my VPS (unless you count the “sorry we’re not available in Europe because we’d have to abide by GDPR”). Even Youtube lifts the ban after waiting for a while!
when this happens, just hit “reconnect” on the VPN and refresh - usually after one or two reconnects Reddit won’t have blocked that IP yet, IME
LibRedirect works for me
LibRedirect + Libreddit instances is fantastic.
Honestly, Reddit is one of the few services that can be redirected easily now. Invidious, Freetube, NewPipe, etc. is constantly being nuked by Youtube, and while Twitter redirects are still alive, they were dead for a short period, ProxiTok never works, nor does Proxigram instances…
If you’re Privacy Activist tier, that CF CAPTCHA should spin infinitely. Otherwise, you’re being fingerprinted.
I’ve been running into this a lot with Proton, too.
Gotta use less popular locations close to what you need. As a german I have mostly been using Finland and other smaller eastern European countries, those generally work just fine. Germany itself barely ever.
Those are mutually exclusive.
Just avoid those shitty websites that don’t respect their user’s privacy.
I’ve had fewer issues when using servers in Asia.
As a US citizen your crypto transactions need to be individually listed in your tax returns. It’s the main reason I don’t use crypto, it makes my taxes super complicated.
I absolutely report all of my cryptocurrency that the government would need to break PKI to trace back to me. I would never violate laws that I could rely on never being caught violating.
Sorry, this post is a bit confusing…
I think they mean that it would be difficult for the government to prove you own(ed) crypto if you purchase it from places other than from an exchange that collects your information (cash for bitcoin, etc.)
Ohh, gotcha! Yeah, I’m not messing around with taxes. That can get you in some serious trouble.
Unless it’s one of those cases that matters the most, like being wealthy.
<img alt="" src="https://hexbear.net/pictrs/image/de253590-4b1f-4968-81a6-189d17289b22.jpeg">
I was at the bike shop a few weeks back and a ghost walked in. He came in wearing a medical mask covered by a bandana, sunglasses, cap. They wore gloves, long sleaved pants and shirt.
First question from staff, ‘this a robbery?’
Ghost, ‘no, I just need 27 2.5 tubes, miss.’
They get the tubes, he agrees. Staff asks if he has an account. Ghost says, “nope, why would I need one?” Staff says they do it for records, insurance claim assist, and discounts. Ghost goes with a John Doe, pays cash and peaces the fuck out.
Total King, but dude was given up a lot. Half of us were drinking beers enjoying a warm evening in spring. I hope he has had some good rides.
I can say with confidence thay he was a white male. In his 50s. About 5’10". 140 lbs-ish. If anyone wants to get any tips, good luck!
I respect it but what’s the point? I kinda hope he’s some kind of super-criminal or as you say he’s given up a lot to hide from a state that probably doesn’t even care he exists even if they did know who he was.
I’m no ghost, not even close. Be careful though, “what’s the point?” Is essentially the question everybody asks at every phase of that iceberg diagram.
A possible answer to your question though, is that even if the state doesn’t know or care about him today that might change tomorrow.
That’s not my threat profile but it’s a valid one.
Probably an activist who isn’t just protecting himself
I’d have guessed white nationalist if it was anywhere but a bike shop
Don’t make assumptions. Privacy is a right for all
Exactly right. My bad. Thanks for the reminder. Geography and majority opinions in the area were coloring my perspective but are not relevant
I would drop off the face of the earth only to stash porn mags all over the woods.
Speaking as a former kid of rural america you would be doing the lords work, friend
“No, no… the robbery’s far too far to walk”
Ha. The tubes were the final pieces to the getaway vehicle
I think this is the first time I’ve seen an iceberg meme with sources and explanations for each item. Fantastic. Your work is appreciated.
To be honest, and it wouldn’t work here, but I sometime enjoy the cryptic nature of iceberg memes at the lower ranks. It’s like a scavenger hunt.
Iceberg explanations are a whole Youtube genre, though - it’s such a convenient narrative structure.
What is so bad about nordvpn? What makes protonvpn better?
Been a nordvpn user for around 4 years now. If I need to switch I’ll do it, this is just the first time I’ve heard it isn’t all that great.
ProtonVPN is open source, meaning the code running ProtonVPN can be inspected by anyone to make sure privacy is being upheld. ProtonVPN is also based in Switzerland, which has strict privacy laws. NordVPN has had many criticisms about their privacy and security practices. ProtonVPN also has a free tier.
Thank you. I remember back in the day hearing they didn’t keep logs and figured “well alright sounds good!” and that was the end of it.
I’ll give Proton a try when my current plan of Nordvpn ends. Didn’t know Proton was open source either, so that’s pretty cool! Wish I didn’t get downvoted to hell for asking a question, but it is what it is.
I’d put OpenVPN and WireGuard on the 5th layer.
Anyone else noticed you are descending and are dangerously low in the pic? I didn’t realize lol
Privacy isn’t dangerous unless it gets in the way of your life (your job, relationships, housing, etc.). As long as you maintain a good balance, more privacy is generally better.
Oh, am I that far gone?
spoiler
I don’t see Qubes, Whonix or Tails on there.
Can you explain why you would think Steam is so bad? I would argue they’re pretty fair, especially with the option to buy steam cards for cash to not disclose your personal data. Does the client do some unsavory shit?
No. And also chrome is somehow at the bottom of this list, I don’t care if it’s chromium or vanadium, it’s still chrome.
It’s Vanadium, a fork by the people from GrapheneOS. You could say the same about Graphene, that it’s still Android, but reality is more complex.
When I first installed GOS, wanted to like Vanadium. Went right back into a FF fork+UBO once I saw that while its blocklists did stop ads themselves on TvTropes, it did nothing to the HTML elements that contained them so it left big ugly white boxes visible.
Vanadium is focused on security and privacy, but not much on adblocking. For that reason I use Cromite, which is much better blocking ads while keeping good security policies.
Chromium-based browsers have arguably better security than Firefox. …github.io/firefox-chromium.html
Vanadium further improves Chromium’s security by disabling the JS JIT Compiler, using a hardened memory allocator (GrapheneOS hardened_malloc) enabling ARMv8.5 MTE, and applying other hardening patches (github.com/GrapheneOS/Vanadium/tree/main/patches).
The secureblue project maintains a hardened Chromium build for Linux called Trivalent, which uses most of the patches from Vanadium, among others. You can get it from their repo: repo.secureblue.dev/secureblue.repo
I really wanted to include Trivalent, but I didn’t want to seem too Chromium-oriented and start a flame war.
You could add secureblue. I would put it in the same category as GrapheneOS and Vanadium.
An issue arises with that. Linux is fundamentally insecure, as you are likely well aware if you use secureblue. secureblue is designed to be as secure as possible while still being Linux, and so is still bound by the same constraints. Qubes OS is not a distro, so it (should be) more secure, but it is an absolute pain to use. Furthermore, Qubes OS emulates Linux distros, so the question becomes “Why not just emulate the most secure Linux distro?” which is either Whonix or secureblue depending on who you ask. Is that more secure than running secureblue on bare metal? What about GrapheneOS used in desktop mode? And what about emulating Linux inside of GrapheneOS using the Linux terminal? There are plans to use multiple distros inside of the terminal, so what about secureblue inside of GrapheneOS?
The whole situation spirals out of control. I know this iceberg chart isn’t ranking security, it’s ranking what software people generally use for each experience level, but neither secureblue nor Qubes OS would fit nicely in any category. You can read this post for more of my thoughts about this mess.
I know about the security issues in desktop Linux, but I still think secureblue fits that level of the iceberg pretty well. I would put Qubes there as well.
afaik the client does collect a bunch if data, most (all, i think? but not a 100% on that) of which is opt-in.
they do need stuff like IPs for internet related features.
telemetry wise there’s the steam hardware survey, which is opt-in, and it asks every single time it attempts to collect your systems hardware and OS information. this could technically be identifying information, but since it’s opt-in it’s not a privacy violation and it’s entirely optional. (plus it’s super useful for all involved: users, devs, and steam. it’s kind of a win-win and straight up necessary info for devs to know which hardware they should optimize for)
they might be putting it at the top because steam has native support for DRM?
but that’s also weird, because DRM isn’t a privacy violation. it’s a shitty practice, barely does anything, barely works, and keeps breaking or hobbling otherwise perfectly good games, all of which is shitty, but it’s little to do with privacy. and the dev has to specifically opt-in and integrate it as a feature…unless they’re thinking of 3rd party DRM that can be waaay more intrusive, like Vanguard… THAT’S a privacy and security nightmare just waiting to blow up in people’s faces.
otherwise…i haven’t really heard anything bad about steam privacy wise?
doesn’t mean that there’s nothing to be concerned about, but i feel like there’d been some news about it if there was…
Seeing steam at the top makes me question the list. Likely a hate of DRM rather than privacy
Yeap, and Brave in the middle. They only pretend they are for privacy, but they are the very opposite.
No epic store and brave is not on the top…
Yeah i hate when I see people using Brave, because they have been brainwashed.
Does anyone remember when they were injecting their own referral links into links for online stores (99% certain they did this pls prove wrong if you know better)? This alone leaves them with 0 trust in my books.
Brave is and always has been gross. Never understood how they’ve been so successful at tricking people into installing it.
OP replied in another comment its because “firefox is not secure” lemmy.dbzer0.com/post/43710170/18564861 :
In another reply parents to this one:
So OP is saying it’s not private nor safe? I get what some people are saying of Firefox constantly changing Terms of Services but that’d be in regard to privacy not security and OP tries to argue not being safe which his iceberg also implies in terms of privacy not being good too. Yeah, LibreFox’s ToS isn’t the same as Firefox’s ToS and his counterarguments to Firefox and Firefox-based on replies is Chrome-based browsers exclusive to niche OSes (also OP don’t even try arguing Brave on comments so probably just trying to rage-bait with every opportunity). I’d love OP to argue using the examples he used in the iceberg. So many discourse incosistencies along with the iceberg. Also OP FYI while privacy does not mean secure, lack of privacy could mean security risks in some cases.
and then Tor so high up, unless you’re hell bent on leaving 0 traces that thing is a pain to use, can’t have it maximalised, pages load sometimes minutes at a time, no addons, just suffering. nobody sane uses that thing for more than the occasional trip to whatever deep web market is not yet exit scamming
They’re not the very opposite. They have done wrong things, just like Mozilla. Doesn’t make them Google though.
They are not “just like” Mozilla.
That’s not what I wrote
Also, please stop with the Mozilla praise
You seem unaware of the bullshit they do. They’re not clean at all.
Yeah. All the issues, even small and quickly-resolved ones, paint a picture - that they are eager to disrespect users’ consent.
Their bottom line is gold, this should tell you everything you need to know about the creator of the meme.
it also has a log cabin… and Log Cabin is a maple syrup brand… and maple syrup is from maple trees… and maple leaves are on Canadian flags… so… a snowman?
Agree. Steam doesn’t even save your birthday, and asks for it every time
They legally have to.
It might be there because there is a lot of data associated with the steam account, especially the community part of it, e.g.:
All this can be used to create a very detailed behaviour profile and accurately deduce the social status of the real person who uses the account. Maybe the data isn’t misused and it’s just there so the features can actually exist.
Personally, I doubt Valve actually does this as expansive and invasive as other big tech companies. I’m pretty sure they at least aggregate anonymised data to measure how e.g. their sales perform, which game to promote on the store front page etc.
But we can’t be sure because it’s not public.
i don’t think valve does much with the data even internally. if they did at least the game recommending queue would be slightly accurate. instead i have to manually blacklist tags for it to stop showing me things i’m just deeply uninterested in. like yes Mr. Valve my steam library of RPGs, puzzle games, and open world sandboxes clearly profiles me as someone who’d be interested in the newest Fifa game every year, sure buddy
I think they changed the name in the newer versions so surely you’ll be interested now!
now you say it, maybe it’s my clicker games that make Valve think i’d like to buy a game where the point seems to be that the number in the title goes up by one every year
Yes but my point was that I believe they changed the name from FIFAYY to FCYY (and I think raised the price).
woah! the innovation!
Talk about high effort content holy shit
Also my toxic trait is that I use stuff from every single tier
f-droid? the guardian project?
On browsers, as you put Chromium then also put Firefox or deMozillaed Firefox e.g. WaterFox.
I’d put Brave back to the 2nd layer due to relying on Chromium and being heavily marketed while gathering data for its crypto scheme. I’d also put Firefox on the 2nd or 3rd layer.
FF doesnt deserve much better than Brave as it sends telemetry, so both on tier 2. LibreWolf would fit for tier 3 or maaaybe 4.
Do you trust this preference panel on telemetry? If not why not? If you do believe it is legit what do you believe it remains problematic?
<img alt="" src="https://lemmy.ml/pictrs/image/52e1f305-0d6e-4526-9359-1f23e8e6fe15.png">
Lol, no. Here’s a list of all the things that panel doesn’t account for.
forum.level1techs.com/t/…/198039
Also, there’s nothing close to even attempting privacy without strong fingerprint protection anyway, which I should have also mentioned. Vanilla FF allows a bright shining canvas fingerprint that Brave and Librewolf disable.
I’m not sure what’s that’s supposed to show as “there are built in settings for some of this stuff, it’s not complete and many settings are abstracted away from the user. Enter about:config” since it might be hierarchical, i.e. disabling a single telemetry toggle, either via Preferences or
about:configmight disable all the other ones. I haven’t looked specifically at that part of the code of Firefox but I’d trust more a Wireshark analysis than this since it doesn’t actually show (unless I missed that part, quite possible as it’s relatively long) that information does actually go back to Mozilla even while one has disabled all telemetry option.Fingerprinting is fair, in the sense that yes, if you do broadcast your userAgent and other public information you do narrow the potential search space and thus expose you as an individual more, yet has nothing to do with Mozilla.
More on Brave lemmy.ml/post/29741804
But we’re taking about this in the context of this infographic. So we have to distill this down to:
Should FF be with, or above, Brave?
I assume we’re also taking about relatively low-barrier changes that most users can implement. So vanilla FF vs vanilla Brave, there’s a difference. Can we harden FF? Sure. Will 95%+ of people do that with Librewolf or 3 dozen other forks out there? Why bother when there’s nuance to be gained with other forks? So now vanilla FF stops being relevant.
And to be clear, I don’t use Brave unless I absolutely have to. I don’t love it, but vs. normie Vanilla FF, there’s a slight edge.
Up to you and OP but the fact that there isn’t even Firefox or LibreWolf or WaterFox but there is Chrome, Brave and Chromium is problematic to me. At the very least Firefox should be there and IMHO below Chrome.
Not up to me, I would have done the same as you suggested.
On the 5th layer I’d add NitroKey or YubiKey to remind people that in addition to software you can have physical tokens too.
I considered adding security keys, but I ran out of space and couldn’t decide on a “de facto” brand
IMHO with these 2 you cover most.
Too bad I can’t upvote more than once. Thanks for making/sharing
You can replace the generated image by searching for images of “Goggle wool ski mask” IMHO.
I have a little bit of everything except As Seen on TV and Ghost.
I mostly have 3,4,5 and still use YT and Discord
Gold is great until you find out you can manufacture it and mass production was kept secret to avoid what happened with diamonds.
The day we can mass produce gold is the day we have a post-scarcity society. Full elemental transmutation, which would be required to mass produce gold, would also eliminate virtually all resource shortages.
We are already post scarcity
The scarcity of housing and food is artificial scarcity
Post-scarcity refers to most goods being able to be produced in abundance with minimal human labor. Even assuming that current food production fully falls under that umbrella, housing definitely does not, and it requires a lot more than just food and housing.
Housing it definitely does. There’s more empty houses than homeless people.
We’ve already arrived at post scarcity. All we need to do is this off the capitalists that keep unused housing empty. The scarcity is artificial
I was referring to the fact that building and maintaining housing is still a largely manual process, and requires a fairly large amount of human labor. Maintaining power, water, sewage, and other things required for modern housing requires an even larger amount of human work.
Whether there are enough houses to actually fit all the people is unrelated to this.
My point is we already did all that. Thanks to efforts from our ancestors, we no longer have a scarcity of housing.
What we do have is a bunch of oligarchs who have stolen our housing and are holding it for ransom
Post-scarcity does not refer to the physical resources required to maintain civilization. It refers to the ability to maintain said resources and civilization without a lot of human labor. We could have ten houses per person, but housing still wouldn’t fall under the post-scarcity umbrella until we could maintain and build new houses with minimal human labor.
produce gold? please tell me how one “mass produces” a base element?
Mines
alchemy
Impressive, an academic grade meme.
You, sir/madam, are an artist and a scholar
This is a modern art masterpiece. I’ve starred at it for hours while installing Arch Linux on my brand new T480.
install gentoo
install haiku
install Yocto
install slackware
Wanna cyber?
Malwarebytes is good in my opinion and ads didn’t told me about it. I discovered it by myself. And nowdays ads can’t really tell me much because I block every single ad I just possibly can.
Yeah I’ve also heard malware bytes is good. I heard if from thenewoil.org.
I am precisely in the middle of this chart.
Sadly, using small niche VPNs that might be more trusted makes you stand out more. It’s pretty unusual to have a Mullvad user on your server
They don’t rotate IPs as well so a lot of them are blacklisted… and don’t offer port forwarding anymore
I wish they could change IPs reguarly and add port forwarding back :-( - I would happily pay for their service again
Because 5€ for their current service is overpriced
Check out IVPN, I find the service very similar but they also offer reverse split tunneling (choosing what programs go through the VPN).
Mullvad has that now. It usually works.
I can’t find the announcement and this issue is still open, can you share your source? github.com/mullvad/mullvadvpn-app/issues/2808
That’s not port forwarding though 🤔 but still a nice thing to have I guess
What do you use instead of Mullvad now?
airvpn.org is a great option that is still privacy friendly and allows port forwarding. Still niche if you care about that, so may not be for you.
Interesting option as well, but some problems :
I’ll add that their servers are a bit slow (I have a gigabit connection) and they don’t have a server in my country
Going to get hate for it (justified), but NordVPN
Reasons: low price, and someone I know already had an account.
Could switch but most VPNs don’t have what I’m looking for (port forwarding), as well as IPs that often change and a solid userbase to mask traffic in smaller websites
Tested mullvad a few years ago and had some small connection problems, but the main issue was that it wasn’t usable in many websites due to their IPs being really abused (+ blocked from streaming services).
I don’t get why the second layer of Op iceberg is solutions having strong marketing budget. As far as I know (correct me if I’m wrong) Nord VPN has been audited by 3rd parties which confirmed its no-log policy. Also feel more anonymous when using a mainstream VPN because many users share the same IP. On the contrary if you use a VPN where only 2 users are on the same IP, seems easier to track you. Maybe I’m wrong but the hate for NordVPN does not seems justified.
The hate is mainly because they run current anti consumer techniques, such as:
They are also in a country where they can legally not provide any info to anyone (also in case of legal problem I believe), but it is a double edged sword, as it also means they can lie and sell our info and will never get sued over it
Such things makes it hard to trust, but the reality is they’re most likely fine to use because they already make a ton of money. They probably won’t risk to lose a business over this.
This probably doesn’t matter does it? Because being spotted as a mulvad, airvpn, etc user doesn’t make you more of a target for anything.
It just means that if they try to trace your connection back to you, they won’t find anything out, because you have a trusted zero-logging vpn.
Only think I could see is it could potentially be easier to track usage through the ip and assume it’s one person, but idk you could do that with anything if you look at the request timings, etc. It’s still just guesses.
Am i missing something?
Probably not on the usual sites people visit (youtube, etc, the big sites 99% of ppl go to exclusively), but I can see your point for any smaller site.
Airvpn provide a discount for each extra month you sign up for in bulk which is nice. It’s a great service in my opinion.
airvpn.org
I’m just taking a stab at this since I’m not entirely certain, but I would think that this would weaken you against fingerprinting since it depends on having many different semi-unique characteristics as you browse?
This ^
If you have 2 accounts on a website for example, you can be easily exposed if using a niche VPN. If on a more popular VPN, it’s not as likely as some other users probably use those as well
Realistically, on bigger websites it doesn’t matter as much - it would really depend on your config. You’re bound to be fingerprinted at some point anyways. It’s just too hard and too annoying to blend in.
At this point I believe we should just aim at randomizing our fingerprint every few seconds by sending BS rather than aiming to all have the same one
mullvad.net/en/vpn/daita
I don’t get how that’s relevant to what I said. That’s still something else
Your last sentence?
What you sent is to prevent your ISP (or government) from correlating your internet activity to your identity
What I’m talking about if preventing fingerprinting or correlating 2 sessions to the same website (the entity that tracks you is the website itself in this case)
Mullvad is one of the most popular VPNs with loads of other users wtf
Compared to other options like mainstream VPNs and proton, they don’t have much servers, so, users
I’m not confident thats a valid assumption
What’s the issue with steam? I thought the epic game store was the one actively spying on your device
They also have so many security breaches that it won’t even make the news anymore.
Many of those are caused by people having insecure accounts without enabling 2FA etc. And there is a lot of money involved, even the top TF2 accounts are worth tens of thousands of euro’s
I am now paranoid about someone getting in and deleting my gibus
I could also imagine DRM, though not directly privacy related, being a thing. Like the issues of freedom and openness are probably also important to many people who value privacy and might therefore prefer GOG or something over Steam.
Edit: I see someone else mentioned this already: lemmy.world/comment/16903223
Until recently, your steam activity and games played are public and your relationship with other steam users can be traced even if you have a private profile.
Good to know, thanks
Steam has telemetry. They gather a ton of data on you. What details, how they use it, and how secure it is I can’t answer, but it’s clear that it’s happening.
Does that happen only when you use Steam or is it gathering data at all times?
I don’t know. I’m sure it only transmits when active, but that doesn’t mean its not collecting data at all times. If you’re on windows you can turn it off with a script, but it might turn back on after major updates.
I’m on Linux, actually. I installed Steam with great reluctance because everything else I’m running is privacy-friendly FOSS stuff but one of my best friends wanted to play something and there was no other way. As it always happens, we ended up never playing together and I just did stuff on my own, so I should probably just uninstall it at this point.
Thanks!
Use flatpak steam and faltseal to deny as access to user directories.
It collects and stores information about your system and also has your identity tied to your purchases.
I don’t think it’s a big privacy concern as far as tracking and spying on you.
But realize any device you install steam on then is tied to your real identity if you purchased games on that account. And can be used with data gained from other parties to determine your online activity if a government were to be able to obtain both.
Thank you so, so much for the transcription, appreciated!
Tried the Privacy Activist and Enthusiast section. Was not really fun and you loose connection to most of your friends and family. Now I have a balanced setup with something out of each layer. Perfect balanced, as things should be
Everyone’s personal comfort level.
Give tech classes to elderly. Explaining to them the iphone photo face recognition saw several of their eyes bug out of their head. Some loved it.
Totally agree about the self ostracization. While I agree with the sentiment you’ll cripple yourself socially.
Finding your personal comfort zone is the tech journey
Heeeey it’s me. Totally socially crippled.
I don’t even know how to maintain relationships, don’t have an interest in trying. There’s something wrong with me.
My only friend on this planet is my uncle.
Vibe
I get it. Am this way to an extent. Mom for me.
Recently attempted to be social at work. Out of the 5, 1 is worth spending additional time with.
If you are comfortable with yourself and who you are, it may take a bit to meet people you actually enjoy.
If you feel like something is wrong with you therapy would not hurt. Reccomend it for everyone to get them the self care tools they need/want.
In my experience I was attempting to be social out of obligation and why it always felt like pulling teeth to do anything is because I didn’t really like the people I was with.
Wish you luck bb 🙏
I’ve done the whole therapy thing, I just do not have it in me to have friends.
I haven’t had a desire to make a friend since I was a kid.
I do get lonely. I’ll have a thought that I’d like to share and I know I drive my wife crazy.
I wouldn’t even care if I could find a way to make some money. Right now I’m a stay at home dad. That’s what my wife wanted me to do. I was making money on the stock market, not taking big risks, just making above minimum wage. Then the election happened and now that’s over.
Thank you for caring.
Wife not fren, fren?
Being social is pretty similar to exercising. When you first try to do it after a while, it’s usually painful and not enjoyable. It isn’t until practicing and keeping at it that it will get easier and you can actually feel the benefits. Finding someone that you can actually share your hobbies with can go a long way, especially if they are able to give some sort of input as well that is beneficial to what you’re working on.
I live deep in the Appalachian mountains and I haven’t met a single person interested in the things that I am since I was a kid.
I’m so bad and hate socializing so much that I recently got the Mortal Kombat II deluxe arcade cabinet, the same dude kept joining my match every single time I played so I just stopped going online haha.
He contacted me and we talked once, and that was that.
I really like him too, I just can’t handle it. Even that tiny little bit of it.
I don’t know why I’m like that. I’m not bad at talking to people. I’ve been told I’m damn good at it. I’ve been told I’m charismatic and all that. There’s just something broken in me.
Probably comes from the abuse I suffered as a kid if I’m being honest. It was rough, and it trained me I guess.
But then again, my whole family is like me. I don’t even know 90% of them, but I can tell you that 90% of them do not have Facebook. The ones that do, they don’t ever post, they don’t ever like, nothing. It’s like it’s just who we are or something.
I have brothers who grew up in different households. Two of them never experienced any abuse as children, they were spoiled. They are just like me. They talk to no one.
So maybe it’s the environment you live on? If I lived in the Appalachian mountains I’d just relax alone to keep the peace, sounds comfy enough for me. People in the Nordics are like that too.
Could be it honestly. :)
I have taken my own approach; there are things from each layer that I use. Some begrudgingly but others gladly.
The problem I faced when starting this journey is it does cut out a lot of people. And it becomes isolsting. So I did reel back a bit.
Totally agree with this, two steps forward one step back basically
It’s equally frustrating to talk to people who’re completely entrenched in the Enthusiast / Activist section. The utter disconnect when it comes to what’s viable for most people is annoying to deal with sometimes. Statements like “Everyone who is able to read can easily learn to use Arch Linux” or “Everyone can flash their phone” do give me headaches. Was there, did both, wouldn’t recommend to my less nerdy family.
I can totally understand where you are coming from.
I do hold the view that if you can read, you too can install GrapheneOS, or try Linux; but that doesn’t make it right for everyone. It’s a self imposed journey. I can’t expect everyone to make the same choices I do.
That is where I will educate people as to why I chose what I chose; however I will not try to force someone down the same road.
So totally understood.
Yea, being able to and actually doing so are very different. Reading is the barrier to entry for most everything. Time and energy are the missing resources, though. I am a tech enthusiast, and I struggle to find time to do all the things I want.
I get that. We all make choices to decide what we do with our time.
Giving it a try is most of the time the first step. I tried GrapheneOS , used it until my device no longer received updates. Then Google Pixels got disappointing and iOS 14/15 got out with big privacy changes, so I switched the first time to Apple. I know, ironic , but it works for me. I remove most permissions from apps, use my own DNS block list enforced by MDM and if possible, self host my apps and services or use paid / open source ones. I am here on Lemmy instead of Reddit or Instagram…. I also tried Jollas SailfishOS v3 , it was ok, but this was back at the time very limited for social interactions, now with v5 it would have been better. Also good to know, at my place , Apple Pay is one of the most secure and private pay systems…. I hate that, this feels wrong.
I used to run LineageOS with a lot of my own tweaks to meet my privacy needs; however I reached a point I decided it didn’t fit my needs for security. So, I went back to GrapheneOS. Which, I am 1uite haply with. Ultimately, I dream of a fully operational Linux phone of sorts; but we aren’t there yet.
I ditched reddit, and most centralized social media. I ditched many big tech services in place of self hosting my own. And even that is mostly locked down. Very little exposed to the web. Ad blocking, as well as my own underlying upstream DNS, with a fallback that isn’t Google or Cloudflare. Services being firewalled off. Reverse proxy setup limiting access via IP:Port while also including SSL certs for local only https.
And this list goes on; it’s a constant journey. But the hard part is to still be social. Hahaha
Did you look at SailfishOS (Linux Smartphone) It supports Android App virtualization.
Cant say that I have, but will now!
i also hate the idea of giving up apple pay when testing graphene. i really hope to find a somewhat ok alternative, but from what i’ve heard it seems to be the best there is atm :(
My bank app just has its own NFC payment system, independent from Google, and that works fine.
The FOSS circlejerk for lack of better term is very loud on Fediverse as a whole. It’s tiring when each time anyone mentions using Windows, or Apple there’s at least one fucker telling you to swap to linux lol…
It’s very loud so I have thought at times to switch back to reddit, where it’s at least less pervasive.
yeah honestly i really think that you should swap to linux!
I already use linux where it belongs, on my home server. Don’t need it for my personal PC.
It’s easy, just don’t have any friends or family! /sad panda
I guess I’m in the privacy enthusiast section. Although I do use searxng. And I will admit I do use some things from the top layer, like YouTube and steam. Also i don’t like how proton is a section above tuta aside from quantum safe encryption which is meaningless at the current state of technology (I agree that could change soon) aside from that proton mail is just as good as tuta.
I use everything from the privacy enthusiast section on a daily basis except for addy.io and tuta since i use proton for email and email aliasing.
Maybe I am wrong, but I think proton doesn’t encrypt headers and some metadata, Tuta encrypts everything or almost everything. Also, proton mail is not available in F-Droid
Personally, I don’t like proto, it doesn’t follow the separation of powers principle, what happens if proton suddenly changes their policy? That is why true free and open software tend to be decentralized, for example mastodon vs bluesky, the only way I can really trust you it is if you can’t “betray” me, even if you really want
Tuta is located in Germany which has more power to look into your data than the Swiss government, but it’s mhe.
Also what separation of power do you mean? Proton is also owned by a non profit and Tuta is just a Gmbh which is owned by two individuals it seems. Changing something regarding the non profit or the structure is pretty hard to do
Tuta is however more open with that you can find their annual report or at least part of it if you want.
Sorry, I took for granted that you had to buy a pack with vpn, cloud storage, etc. That would have means that you would have to change a lot of services again in the case the proton company let you down. I still think that Tuta is a little more private for the reasons I mentioned
You mentioned almost nothing? Tuta can even more easily change their privacy policy. Not saying Tuta isn’t the right choice, but it’s worse than a lot of people make you think it is
You might be right I searched it up and found that protonmail doesn’t encrypt header lines which isn’t great. The f-droid point is also valid. But unfortunately there is no decentralised email providers, even tuta is still centralised. I would be interested if there are any options for decentralised mail.
On another note regardless of whether I’m using proton or tuta it’s hardly ever end to end encrypted since everyone I’m sending the mail to uses Gmail.
I have no clue why telegram is often mentioned when it comes to “privacy focused messaging”. They don’t even have e2e encrypted group chats. Only 1:1 chats may be encrypted as an opt-in. Even WhatsApp is more secure than that, since they use signals encryption.
Also the “we don’t give out even a byte of data to anyone” statements made by telegram have been thoroughly debunked as lies. When telegrams bottom line is in danger, they have and will give out your data.
well that section has a few not so effective services, like authy, and imo brave and adblock, to depict what people believe at that point. and telegram probably gets to be there because it’s not the usual big tech companies, and it seems fine, even if unencrypted.
and only on the phone app
Yes, this is the exact reason Telegram was put there. I even see Telegram recommended alongside Signal, despite the privacy risks.
Yea, telegram being advertised as a privacy messenger is a joke. If people want to have group chats like in discord and don’t care about privacy, whatever. But to try and flaunt how privacy focused you are while using your own home-brewed encryption is a joke. Not to mention the fact you have to turn it on for every chat you want end to end encrypted.
The whole thing about not giving out data is really only accomplished by spreading user data across several countries. So you would have to get a search warrant from every country to get the data, relying on some countries not wanting to cooperate with other countries. That is not real security. Real security would be encrypting it so you literally couldn’t give them the data, even if they had a search warrant. Ya know, like signal.
Even Threema is more secure than Telegram, this iceberg is messed up and missing a lot of things and some inconsistencies. You could say it’s not free but so isn’t mullvad and it’s in the iceberg.
WhatsApp claim to use this. They do not show their code nor did they do any kind of audit. Therefore we have to assume that there is no encryption.
or that some part of the encryption, like key handling is flawed. also, considering they have an RCE vulnerability every year, I wouldn’t be surprised if the encryption keys could just be stolen remotely.
we also don’t know if facebook has implemented some kind of analytics for message content, sent files and media.
Just curious, does telegram keep a log of our msgs? Im guessing right now, mitm attacks doesn’t work since tls exists, but telegram can still read the msg cuz it’s not e2e?
Yes.
I feel that I2P is missing somewhere in here too.
p.lemmy.world/c/i2p@lemmy.world
@Charger8232
It's nice how firefox is just nowhere in there
chromium is taking its place, somehow
@greywolf0x1 That there is Vanadium, GrapheneOS's hardened Chromium... also funny how Tor is above GrapheneOS and Mullvad and all that stuff. Not much sense is being made on the two levels above ghost.
I forgot to put it on there. I would put it probably in The Beginner. Chromium-based browsers aren’t all bad, such as Vanadium or Trivalent, so people sometimes feel more comfortable sticking with what seems familiar (coming from Chrome).
Because of Lemmy: proton, GrapheneOS, pi hole, open wrt, nextcloud
Yeah Tor is just straight up unusable for most sites.
My experience is it does work with most sites. And the minority of sites where it doesn’t work are evil sites that I don’t want to visit anyway
In my experience, most sites are broken not by Tor, but rather by Javascript turned off. But I do it in my normal browser as well, and it breaks just as much, with the exception that there I whitelist a lot.
Maybe email the site admin and let them know
I usually tell them to test their site in Tor Browser on Strict mode to reproduce the issue.
Same.
Weird how Apple and iMessage are not in the same category. How do distrust apple’s privacy claims but trust iMessage?
I guess maybe that iCloud (photo’s, storage etc) isn’t encrypted but iMessage is? But good point
What if you turn on advanced data protection? Though even if that does achieve what you want it sucks that it’s opt in.
I haven’t had an iPhone the last few years so I’m not sure what would be the best way to go about it. A decade ago I definitely felt safer with apple than I would now, even though stuff might actually be better encrypted now.
It’s worth noting that I had to retire a few devices that I used with my iCloud before I could enable ADP because they didn’t support it. That may be why it’s opt in, although it’s not a very good reason.
The other reason may be because Apple can’t recover your passcode if you turn on ADP and they don’t want customer support nightmares of users losing access to all their precious photos and memories because they could be bothered to manually back them up or remember their passcode
Idk about older devices (unless it’s due to no longer supported os updates), but password recovery makes sense. Have you seen how tech literate your average person is? Definitely would create a lot of angry customers.
Well, following that (not fully wrong) logic everything until enthusiast level is useless since it runs on Windows and often not degoogled Chromium. And (given the meme doesn’t contain /e/OS, iode, ShiftOS or Linux Mobile anywhere) anything until activist that happens on mobile phones is equally useless since it runs on Apple/Google Android.
I’m more annoyed about “Linux” as a whole being sorted into “Enthusiast”. Using your Steam Deck in Desktop mode, buying a brand new Linux laptop for +600€ or even installing and using Linux Mint really isn’t as enthusiastic anymore. :D
True. Apple would need a category on its own, but if i have to choose would place it on “As seen on TV”.
It is fairly private and they quite give a fight about maintaining that status. There are no cases I am aware off they comply to open the system for authorities publicly and if so, they do not claim encryption anymore (as per UK.) Now… the key word is publicly; If I were a zealous top intelligence agency I would not force Apple to break an account for me so to obtain evidence on an individual so I can present it to a judge… for me Apple or Protonmail (or any other popular encrypted service really) would be far more valuable a place where I quietly could obtain intel on tens of thousands of targets and with that find other ways to find evidence if need be. It is a good sacrifice for the sustainability of the scheme.
Of course, this is just a thought and no evidence has been brought up. Apple is a large company and some whistleblower could easily popup if that were the case… yet again, having the right tight team is easy to keep it undercover, specially in a closed sourced software. The fact that the US is eyeing so many encrypted SaaS but Apple, with its omnipresence reach, is almost always left alone is a bit odd.
Funny how you need more and more technical knowledge to go deeper into privacy, until the last level, which is basically giving up on technology itself.
The last level is living in a cabin in the woods and writing manifestos about industrial society and the ills of technology O_o
<img alt="" src="https://upload.wikimedia.org/wikipedia/commons/8/8d/Cabin_outside_1_0.jpg">
Hey, it’s my house! How’d you get a picture of it?!
You play games on steam? clearly brainwashed.
also how dare you slander Malwarebytes like that
@Charger8232 I am privacy enthusiast and I don't plan to go any farther - lack of privacy in one direction, lack of users in the other direction 😁
Any Chromium-based browser in anything but the top-most panel is a non-starter with their abandonment of Manifest v2. Manifest v3 seriously cripples any Chromium-based browser’s ability to be secure, as extensions like uBlock Origin are no longer compatible by design.
Google has it’s ad business to protect, after all.
Not all Chromium-based browsers are bad. Browsers such as Vanadium or Trivalent are very secure, and discourage the use of extensions altogether due to privacy and security risks. These browsers come with ad blocking preinstalled.
I am pretty sure that Vanadium does not have an adblocker in it.
Not outright stated. Closest I could tell on a skim of their site is third party blocked by default
I use Vanadium. It does have an ad blocker.
Settings > Site settings > Ads > BlockedIt does have some built-in blocklists, but they’re limited compared to UBO. For example, blocking the ads on a site, but not the big HTML elements they used to be in.
Vanadium is purely for GrapheneOS, and Trivalent is purely for Linux. Both of which also appear (looking at this on mobile) to require compiling by the user.
Soooo… an appropriate pair of tools for, what, 0.5% of all computer users in aggregate?
Really appropriate suggestions, there. /s
Show me something Windows based that can be as secure as LibreWolf along with the appropriate extensions for blocking ads, fingerprinting, CDNs, and other spyware-like content.
Because Chromium in any variation, it ain’t.
Vanadium comes preinstalled on GrapheneOS, and Trivalent comes preinstalled on Trivalent. Compatible Linux distros can add the Trivalent repo to install it without building.
LibreWolf is far from secure, as it is based on Firefox and so comes with the same security issues. If you meant to say privacy and not security, the reason nobody makes high threat model browsers for Windows is because Windows itself is not private and it would be a losing battle.
I give workshops on privacy. I always tell them that if they get nothing else out of my presentation, its that they should use a password manager.
Honestly I think keepass should be beginner. That comes first before everything else.
Also I think Tor Browser should come before VPNs. Its free and easier to use than VPNs (for when you want to google something secret and don’t want to be tracked. Most beginners are selective like that)
Why keepass and not Bitwarden? Wouldn’t bitwarden be more user friendly for trying to ease people into secure technologies?
Bitwarden had some security issues historically. I generally recommend using software for password managers that isn’t internet connected.
My keepass trainings involve generating a veracrypt encrypted USB drive (for windows and Mac users) for storing a backups of their keepass file. I also recommend they upload it to whatever cloud storage they use (google drive or iCloud usually)
What security issues? If you mean potential security vulnerabilities researcher found that they’ve patched, I don’t understand how that would be different from Keepass and their previous security vulnerabilities. Bitwarden has never had a security issues historically that I know of. Lastpass, on the other hand…
I also really don’t get these two. They seem to contradict each other.
I usually recommend bitwarden, where they can use the browser extension and mobile phone app. It gives them autofill features on all their sites. Getting someone to change their passwords and use a password manager is already difficult enough. Giving them the most convenient option is going to make it more like they stick with it.
I use Keepass but mostly for convenience and I don’t understand why it’s in the 5th category. If I have 50 different accounts with 50 different passwords but they can all be had with one keepass password, how is that different than having 50 different accounts all using the same password?
If you use an easy password for your password manager, it’s trivial to crack with a few word lists and hashcat, just as any other account.
Websites get hacked all the time, and your login details (and PII) ARE available for sale from shady people right now. It’s important that, the next time one of the sites you use gets hacked, you don’t have to scramble to update all your other logins.
I myself use a password manager protected by a pin, and the password itself is ridiculously complex. Not everyone will do that, but that seems to be the best solution for using a password manager. Hell, even though it’s a complicated password I’ve ended up memorizing it (I don’t know if that’s a good thing or not lol).
~ how is that different than having 50 different accounts all using the same password?
Because the password manager would have to be hacked itself.
If you just use the same password for everything, any of those 50 sites could be hacked.
If you don’t use a second factor to unlock your password database then you are correct.
Here is the real secret. If the only authentication you have on an account is password auth then you really have no authentication at all. Passwords are not security
What is that currently, and what would it need to be given the looming threat of quantum computers?
I like your thinking. Here an example why password manager make sense. If you would use the same password at every website and one of the would be for example Facebook, and they would get breached. Your password associated with your username and email , is now know to some hacker group. And in case of Facebook, the password is not hashed , it was stored in plain text. Now they have fun to try different websites with combinations of your name , email and password.
Alternatively a password manager stores for every website a different password, and your only mission is to keep that manager secure with a good , rememberable password.
Also , what I do , is using an email alias service. So I have a different Password and Email for each account. I don’t have to care if something gets breached, I am safe and aware of what information gets stolen.
And for future, we could all use passkeys and FIDO2 to block most phishing attempts.
TAILS is missing :(
as is i2p, qbittorrent and a few others
And qubes/whonix.
So what’s the deal with i2p? I heard it was a more secure alternative to vpns, I downloaded it but I haven’t been motivated to figure out how to set it up on Linux.
It’s more similar to tor than a vpn.
Ah, is it considered more secure, or is it just different?
as a darknet it’s more secure than tor, but less people use it so less anonymous. the benefits are really for using in-network services there, not so much for accessing the clearnet, though you’ll find clearnet things bridged to i2p
Ah, so for in-house networks to remain secure from others on their network?
to remain secure from outside observers is the main goal, the i2p network is much more secure than tor or a vpn, though it does a good job protecting you from others on the network too.
In some ways I2p is more secure, but it has its own pros and cons. It’s primarily used with services & sites within its own network, similar to onion sites, and used that way it’s said to be faster than Tor. It can be used for torrenting with a client that supports it, like qBittorrent or BiglyBT, without harming the network. There are outproxies you can use if you want to anonymize access to normal websites, but there’s only a few of them, and it’s slow. You can have it and Tor running at the same time without them interfering with each other, though.
So, it sounds like you’d be better off just running Tor or a vpn unless you have a specific use-case for i2p. I looked briefly at the install instructions, but it seemed to be like it would be a hassle to initially setup on my linux build.
I think that would be fair to say. I mostly run it to contribute to the network, so that other people can communicate or share files more privately. (On OpenSuSE, it can be installed from the repo and just run with no special configuration.)
Ah, nice. Yeah, I just looked on Synaptic and there’s no package for i2p.
That’s how amnesiac it is.
Thanks a ton OP for linking to all the tools and services in description, this is an awesome resource!
sexy chart!
Could use some anti-malware/AV for beginners and privacy enthusiast level.
Not everyone in there is running a secured OS.
Cash and Monero being on the same tier is very funny
.
It’s objectively more private, if you take your own bias out of the equation. Monero doesn’t get much use however, its not very popular, but it is private.
.
Monero doesn’t need to be mainstream, it’s immediately useful for privacy. Its price could dump 99% and it would be equally useful. You buy some, make your transaction, enjoy your anonymity and then forget about it. It’s a tool, not an investment.
.
You can exchange it to another accepted crypto, or convert to fiat depending on what you’re trying to do. If you differ the exact amounts you buy and use, and delay the timing of your monero purchase and final purchase, it gives you anonimity. Or more like plausible deniability. Nobody said anonymity was convenient. You also don’t need every purchase to be anonymous for it to be useful.
When you do most of those purchases you’re not anonymous to begin. But if you want to buy an embarrassing pornographic game on Steam and don’t want your payment provider to have “FURRYDICKS STUDIO” in your name, you sure can use Monero.
.
.
I think this is simply a privacy education issue. Here’s how to anonymously buy a steam game, step by step:
If your secure computer is totally anonymous, so is your purchase.
Of my last 1 million purchases, exactly zero were done this way. The currency is not worth zero so obviously it’s useful to some. “I don’t personally use it” is an unconvincing argument, you simply don’t care about private purchases which is totally ok.
If you were a progressive reporter in Saudi Arabia buying a web subscription to New York Times you would probably keep a balance of monero around, so these steps would take no time at all.
For the rest of us with nothing to hide, some of us use Monero like this simply to protect those who do need privacy. The more who use it, the better anonymity it provides.
.
“Again: How many of your last 100 purchases were made directly with monero? Just ballpark, I’m sure you have a sense.”. A reasonable interpretation of this is, “you don’t use it, so no one should”.
Apparently millions of people find it useful. If you don’t that’s totally ok.
.
I’ve never used a parachute personally. They’re pretty inconvenient, have to be set up exactly right in order to work, and can expose you to pretty serious danger if not. That said, I’m sure they’re extremely useful for those in niche situations in which they may apply.
.
Lol, appreciate it. Thought it was somewhat apt, though not perfect.
On topic, I do agree with you to an extent. The lack of point-of-sale implementation will always be the greatest pitfall of something like Monero. Of course, many store fronts have no desire to easily facilitate truly anonymous transactions, whether for legal reasons, customer data collection, or otherwise.
The idea of complete anonymity is alluring, but not really achievable in most cases as things currently stand. Having said that, don’t let the dream of absolute perfection get in the way of progress, it is still a useful tool regardless and can provide a degree of anonymity in situations where you would otherwise have none.
.
You won’t get a lot of people talking about their usage, lol. Are you in witness protection? I think witness protection is useless too, since I’ve never heard anyone even admit to being in the program. Do you watch porn? Porn is completely useless, no one has ever even admitted watching it to me, even after I badger them about their fetishes.
Monero is exactly what I think it is. Is its value inflated 100x by pump and dump investors? Sure. Is it useful to millions even without the investments? You bet.
My friend uses it to anonymously buy servers. Their country has a history of killing political activists so they take their privacy seriously when it comes to that kind of thing.
I would say Monero was useful to them, at that time. It didn’t have to be mainstream to be useful. They weren’t investing in it. It allowed them to make an international transaction which is much harder to track than other accepted payment methods.
Do you think credit cards are ideal? People happily pay a 4% fee to Visa to buy something at the store, yet you think a spot convert is going to be the death knell?
As well as the deflation of their currency, as the currency increases at around 10% a year, as you’re praying that a CPI that does hedonic adjustments and substitutions maintains your standard of living; as we go from free range to factory farms, and housing appreciation is excluded entirety.
Maybe it wont be bitcoin, maybe it will be fractional shares, or spot convert gold, but I am definitely waiting for the day when I can hold 0$ in cash. I’m already near 0, but I’d like to replace it entirely.
.
You want just a fatty wad of cash, and for tellers to sit there counting change or what?
Or maybe a CBDC, so they can inflate it even more, giving out your purchasing power like like its a political football?
.
Well its still early days, Biden was very against Crypto, so point of sales systems couldnt provide it. Companies like Square are now working on it, so you will be able to use it; or any form of cash you want, or fractional shares and gold etf.
Maybe all currencies will just be forced to compete on inflation one day, and everyone will use the one with the lowest annual growth in new supply.
You think countries are going to wholesale give up control of monetary policy?
You can absolutely use monero without converting it to other currency. You just haven’t looked in right places. Of course you can’t buy a loaf of bread with it, but you cannot use gold either, neither can you rent a server with something like mongolian togrog, yet, they’re all still valid forms of currency.
.
Wall Street investors took you up on your offer.
.
Well, perhaps not Monero, and perhaps not a loaf of bread either, but also not far from that. One large e-shop in Slovakia I use (Alza) supports crypto payments via Confirmo (BTC, ETH, USDT, USDC, SOL, POL, LTC, TRX). They sell mostly electronics, but also some food items.
Now, since you’ve mentioned bread:
<img alt="image that is hopefully loading" src="https://files.catbox.moe/jaghq9.png">
But I haven’t yet tried crypto.
Ditto
Well which one is it?
ExpressVPN is an arm of Israeli intelligence and should be on the tip of the iceberg: reuters.com/…/expressvpn-employees-complain-about…
All users should cancel their accounts immediately.
“As seen on TV” does not imply privacy, it just implies a large advertising budget. These are software that market themselves as private (and are sometimes better than nothing at all) but may still be just as bad as software on the tip of the iceberg.
Did AI write this?
Mark boyle, the man who quit money and electricity
It’s genuinely wild that Firefox and LibreWolf are nowhere on these
Probably because people above the waterline don’t know Mozilla exists, and people below have seen how things have been going lately.
They do perhaps know, Firefox did have about 27%+ of the market at one point and people outside of the USA are more likely to know about it. Nevertheless, FF is currently about 3.25% of the total browser base. That is still about 160+ - 200+ million users.
Firefox is really bad a portraying what they’re actually doing, and the privacy concerns people have with them have been widely overblown. But on top of that librewolf is a privacy oriented fork not made by Mozilla
For want of $100 /year Apple developer subscription , the libewolf team can’t sign binaries for Silicon M series Macs.
I spent an hour and a half trying to get librewolf to work, and just gave up for Waterfox instead.
On my laptop I run Firefox for some things, Watefox for others, and fall back to Chrome only as absolutely necessary when Gecko can’t get me there.
I tried waterfox and it was just too glitchy for me I had many more crashes than Firefox, and their claim to fame was that chrome extensions worked with it but I literally never got a single one working. Session buddy just saves your sessions locally, but that would not work AT ALL on waterfox.
I didn’t even know that they claim Chrome extensions will work, I simply use the Firefox extensions in Waterfox.
My browsing style is antiquated, my ADHD will only afford me about eight tabs per browser window and I usually have about four of those going at a time.
I aggressively kill tabs to save my own mental memory more than the machine’s memory.
I also recently learned that a lot of people don’t erase tabs upon quitting the browser, which feels wild to me… Why not use bookmarks at that point?
Something strange happened in the last decade, wherever one has 300 emotional support tabs and browsers had to create really elaborate tab groups and memory management for juggling stacks upon stacks of tabs.
I don’t think anyone actually uses bookmarks anymore, except you, me, about any 3000 misc nerds.
What caused it to crash so many times and how long ago did you use it? I’ve been using Waterfox for years and it’s been mostly great. I also never use Chrome extensions; just stick to Firefox add-ons.
Matrix is also missing.
I was disapponted at that, I spooled up one of those instances a few months back and its federated and is magical. If only I could convince my family to move away from that old group text grumbles in person who cosplays as a sysadmin
Same. It’s so hard to get ppl to switch.
I’m just frustrated that Matrix is more popular than XMPP. Yes, it’s about as easy to spin it up, and I was surprised to see it runs fine on my low-end VPS, but it’s noticeably more resource-intensive, and I’m especially worried about the ever-expanding storage. I really don’t like the “store everything forever” model, I think it should be opt-in or allowing you to set an archival period.
How the heck is TOR less secure than any of the vpns? Also nice vpn psyop/ad.
This isn’t a ranking of security. It is ranked based on the experience level at which people generally begin to start using certain software. They build on top of each other.
Was going to say links or it never happened but you provided them! And categorized by level! Excelsior!
Thanks also to the comments giving more information.
So grateful for this platform. For the most part.
Brave 🤮🤮🤮
You can disable the most bloat and remove the ads. After that , it is a very good Chrome alternative. If you have to use chromium based browsers. Feel free to name a better one that has adblocking (after manifest v3) and fingerprint protection.
Cromite
Ok looks interesting, it is missing a Mac/iOS version but else, pretty promising. Only downside is, that it looks hard to recommend for family and friends that are not tech savvy.
Why is Incogni bad?
i think this is a good summary
lol. lmao, even.
A beginner will choose what seems private, regardless of whether or not it actually is.
What’s up with brave? I know they are bloated as hell but I thought they tried to be private.
A company founded and funded on the concept of activity tracking? Private?
Also, when they first started they seemed to have an unlimited advertising budget, which is why they blew up. Where did that money come from, and what was the promise to those investors on how Brave will bring back revenue to them?
Monero? Really? I used to mine it and know about it but just advertising crypto is just weird.
Monero is anonymous instead if pseudonymous. It’s also the main crypto on darknet marketplaces.
…I know
So how is this advertising? Do you think op was payed by the monero project to promote it? It’s a genuinely good privacy tool.
Dude, don’t be so narrow minded.
Feel free to open up my mind and explain youself, but right now I don’t understand where you’re coming from. I don’t think OP’s shilling or has any stake in XMR, he’s just stating that it’s private and secure for transactions.
No need to repeat myself. You proven there’s no way getting to an understanding. Have a good day.
There has been 0 argument in this conversation. He has only asked questions, which to me seemed to be in good faith. And there has been no answer so don’t bother to repeat yourslef indeed.
.
What’s open wrt for?
Open source router you install it on your personal router instead of the vendor firmware and gain 200% of the functionality.
Could I request if you could ELi5 for me? Unfortunately, I didn’t understand a thing.
Without getting into the technical side of things.
Normal Windows home edition is to what ever firmware your ISP (Internet service provider) puts on your router to make it play nice with their network.
Open WRT is to cracks knuckles fuck it, ill configure it myself (think Arch linux, or any program/platform where the user is given a bundle of sticks and a phone book of a manual and told “try not to hurt yourself”)
Its a community updated router firmware/software project that gives the user a bit too much control. This allowes people who know what they are doing to make some very secure, free, and complex networks, but also gives you the tools to piss off your ISP or break something.
Thank you. I’ll maybe set it up when I move. Thanks for informing me.
Its like (actually literally) installing Linux on your router instead of its little corporate steal-your-data software. It allows your old router to have all kinds of modern features and full-blown control. My netgear orbi system was dying. I don’t know what the hell was happening to it, but everything was super slow and clunky and netgear quit supporting it a few years ago. I thought I was going to have to get a new expensive mesh router system. But instead the nerds here told me I could probably install OpenWRT on them and it turns out they were right. My router was one of an expansive list of routers that is compatible with it. It was tricky to install, but I used AI to guide me through it. And now my shit’s super snappy, fast, uses the latest security protocols. Turns out I can crank my radios up higher than normal and get really, really good coverage and really high speed all the time. It’s for real this one weird trick that tech companies don’t want you to know about.
Okay. Thanks. A bit advanced for me, but I will take my time to understand it.
Just like you can change your Windows PC to Linux, or install a custom ROM on Android, to have better control over your devices, it is also possible to change the firmware on most routers.
OpenWRT is the most popular option for that. It’s a Linux based firmware, that has a package manager allowing you to install additional things on your router.
For example, I have a TP-Link TL-WR902AC v3. Out of the box it is just a USB-powered 5GHz extender. After installing OpenWRT to it, I added:
By adding WG and DoH to the “repeater”, I can connect this little guy to any public WiFi, and securely connect my devices to it.
Thank you.
Open source router firmware.
Also, I am out of the loop? What’s up with firefox? I have used it on linux mint for maybe 6 years now with uBlock. Currently trying to use DuckDuckGo as default browser because that Google AI results thing is starting to annoy me.
It’s fine. For legal reasons (particularly in the EU and California) they had to add a Terms of Use fit the browser, and the had to translate a bunch of broad, idealist, simple phrases into legalese so they wouldn’t get killed by those governments.
Privacy policy changes are worrying. They also implemented Privacy Preserving Attribution, which sends anonymized data to advertisers, and enable it by default. I personally like LibreWolf.
I didn’t know. Thanks for informing me. I’ll checkout librewolf
I’m a big fan of Duckduckgo, since Im using it for a couple of years. The search results have become much better compared to the past.
I use something from each tier except the As Seen on TV tier.
Enthusiast level. Not bad. Not bad. Also where would you put librewolf?
What does LibreWolf have to do with privacy?
It has more than Brave surely. The question is, if they are on same level or not.
The only thing stopping me from being ‘the Activist Group’ is that Mullvad requires payment. Sorry, but I’m running a little tight on budget.
At the same time, I can’t use Proton VPN for torrenting.
It’s like $6.50USD /month, 2x the cost of mainstream vpn’s.
It’s valuable for me so I’m happy to pay and support them, but I’m mostly only need them while traveling.
The median monthly salary in my country is $300-$500. It absolutely is a big cost for some people.
Can I ask what has you subscribing toVPN’s year round? I have three use cases for my subscription
I end up subscribed to Mullvad for maybe 5 months a year. I still end up paying less than a NordVPN subscription, I feel good about supporting Mullvad’s mission (like the ongoing development of their own browser).
I also love that I can share my subscription with other users if I needed to, just by giving them current account ID number. In this way, it would be practical to give up to five people access while still protecting all of my devices since I throw the VPN on my travel router.
I will schill for a very short list of companies, all day long, and Mullvad would be on that list twice simply because they don’t trick me into an endless subscription of any sort while all the others get committed income out of me annually.
I need one because a large portion of the internet is blocked, pretty much everyone around me uses some sort of censorship evasion for this reason. I have a subscription to a VPS rather than a VPN - it allows me flexibility in what protocol to use because some can get censored (already has happened with Wireguard I used to have), as well as allows hosting a variety of services in addition.
Full-fat VPS and roll-your-own proxy solutions are wonderful! Can you recommend a vps service that gives you the global access and a workspace for you to build your tools for your toolkit?
Most I’ve priced were either more than $6usd /month or were very, very over-provisioned, but I’m interested in learning!
I already made browser suggestions lemmy.ml/post/29712598/18453254 but I would also add Ceno ceno.network in the 5th layer due to its P2P and caching nature.
Using basic things like Graphene OS and keepass shouldn’t be considered privacy activist
I keep my passwords in an encrypted file instead of a bunch of sticky notes! I’m a privacy activist!
Next step: Faking your own death
Calling GrapheneOS a “basic thing” when 99% of people will never touch their OS is a bit of a stretch.
.
I care about privacy, but you just lose a lot of features like “Find my device”, security check-ins, now playing, live transcriptions, etc… If you care too much about privacy, okey, but it’s not a “basic thing”
GrapheneOS is absolutely niche. You have to go out of your way to buy a Pixel (which in many countries isn’t even available), choose the bank that has a working app on Graphene, etc
Here I was thinking that KeePass was about as privacy respecting as possible.
I m definitely a privacy enthusiast, but I use searx also, the rest I have no clue what they are
Is tuta better than protonmail?
People say it is because Proton has collaborated with the government, but it just hasn’t happened yet because Tuta isn’t big enough to warrant such a thing. There’s almost no way to prevent such a thing from happening with email providers, it just isn’t private communication at all
Is it easy to implement Openwrt?
Very easy - as long as your router is on the table of hardware.
Thank you very much, I will investigate this further to see if it is feasible to implement.
Wow this blew up. People still not getting the meme portion of this?
64 people and counting :P
RIP your inbox lol
I have my inbox hooked up to my RSS reader, too, which means I get a notification on my phone every single time someone comments…
what RSS reader do u use?
Having tried Feeder and Read You, I currently use Capy Reader. It needs a few tune-ups before having a UX as good as the others, but it has features that the others lack (search capabilities, filtering, etc.).
Kudos for inclusive alt texting!!
That’s the only reason I upvoted this!
I think I’m probably slowly transitioning to “the ghost” but more as a matter of digital minimalism than for privacy lmao
I love this! May I share on my blog and with my newsletter subscribers at Punching Up Press? We’re probably in boxes #2 and #3, with a lot of readers starting off in box #1.
I was actually expecting you to comment.
Absolutely! Giving credit is appreciated, as well.
Haha, I always love a good infographic! Who can I credit for the infographic and links? I have only like 65 subscribers since I don’t do much promotion, but I think this will be very helpful to them.
Simply leaving a link to this post is fine. Thank you!
The post is here! Thanks again for letting me use the infographic.
Looks good! Thank you!
I’d be happy to collaborate in the future if you ever want to :)
I always love a good infographic! I’d be happy to collaborate on projects related to the theme of the broligarchy and data privacy. Let me know if you have ideas!
Just tell the normie that you have nothing to say if you have nothing to hide. Also, why there’s no F-Droid?
I got the impression most people do indeed have nothing to say or think they do. So this analogy irks me, unlike the more universal “curtains on windows/doors in bathroom”.
I’m like a mix of the three tiers above ghost and in not really trying to be which is odd
Thanks for providing this. It is obvious you put a lot of time into this. Truly appreciated. I will have to look into these.
How did you find these yourself?
I’ve been learning about privacy for the better part of 6 years. At first, most of my information came from lurking on Reddit and Lemmy, but then I started getting first-hand experience and doing my own research.
.
In regards to addy, are my messages private in relation to the service or does it only serve to keep my anonymity to other threat actors?
Both. It’s open source and privacy respecting. Though, email is fundamentally insecure anyways.
Nice! Will start using. I ran out of Proton aliases this year and have been reusing some of them, which sucks. Thank you
I suppose it aims to be private. According to their FAQ:
The author answers “what if I don’t trust you?” by pointing out that you can host Addy on your own server. It is fully OSS and you don’t need to use their cloud service.
I wouldn’t put Telegram at that level. I would put it in “The Brainwashed.” Its encryption is disabled by default. You need to manually enable it on each chat, and you can’t enable it on group chats. The app gives a false sense of privacy. Telegram flaunts its end-to-end encryption, but it never mentions that it is disabled by default, and it refuses to enable the default. The final result is that people are not using the feature.
A cryptographer and professor wrote a good piece about Telegram’s encryption, calling it “unusual” and the “non-standard authenticated encryption mode ever invented”: Is Telegram really an encrypted messaging app?
Where I am, Telegram’s pretty much the primary social media in addition to the primary messenger. While I could avoid Whatsapp (which would’ve been harder if I were older), I still would’ve had a very hard time if I deleted Telegram.
I always wished I could pull a House M.D. and just start a life underground.
I’m a mix of UbO, Firefox, Windscribe, Windows (modified), Protonmail, Discord, and Cash
What’s the logo between Tor and ProtonVPN?
It’s ProtonVPN’s logo
I don’t see Blokada mentioned here. It definitely deserves a mention somewhere.
I use KeepassDX and Aegis, I use Facebook, Viber, Whatsapp and Gmail to communicate, use Linux, also use Lemmy as is apperant from this very comment. I have uBlock Origin installed on Firefox as the main browser, I also have Protonmail as my main email, also I use simpleLogin. My search engine is DuckDuckGo. I also use ProtonVPN and used to use Opera VPN.
I am from all of the above tiers
I am apparently the privacy activist (not using Monero, SimpleX Chat, Degoogled Chromium, or Keypass, though). I do use uBlock Origin (Gecko ffs!) and Bitwarden (self-hosted Vaultwarden). Unfortunately, I am using Telegram, but trying to move all my contacts to my own Snikket server. It’s a very slow process.
Iceberg of the year! Btw I would place tiktok the 1st over all softwares in layer 1.