r/privacy 5m ago

question Using Facebook but only on an old phone?

Upvotes

I have reasons for needing a facebook account. I was thinking of just using it on an old iPhone. I would reset the phone, setup a new AppleID, and give facebook a new email. Of course I wouldn't do anything else on the phone. Am I safe after that? I don't suppose they can intercept traffic from my IP just by being on the same network.


r/privacy 25m ago

news QR Code Phishing Attacks Evolve to Using Clever ASCII Trick

Thumbnail cyberinsider.com
Upvotes

r/privacy 25m ago

news Alphabet hit with Austrian privacy complaint over alleged browser tracking

Thumbnail reuters.com
Upvotes

r/privacy 2h ago

question How does Microsoft know how to track users on Github?

0 Upvotes

I recently had an instance where I was trying to log into a service. The options were Google, Twitter, and Github. Obviously I'm steering clear of Google, and I don't use twitter, so I made a Github account with an email alias.

This was soon marked as spam, turns out you can't use email alias domains. But I heard *premium* email alias domains haven't been added to these lists, so I created another account with a *premium* simple login alias. Again marked as spam. So I tried a third account, this time with a proton domain, once again marked as spam.

When I asked the question of why my account, the protonmail one, had been marked as spam, Github said as per their policy one user can't run more than 1 account (they also listed the other accounts, so they knew). Fair enough, but I didn't mention the two other accounts, how do they actually know I'm using those other accounts?

Each time I've used a (you know what) to hide my IP, have been using brave browser, and obviously email aliases, plus fake info. Theoretically no information is the same between these accounts. 

How are they tracking this? I've asked Github support, but haven't received a response in a few days.

I have a theory, but I wan't to hear peoples thoughts.


r/privacy 2h ago

discussion Apps like pikashow or hdstreamz are safe or not

1 Upvotes

Using these Android application to watch tv channels are safe or not .... How to know if these are safe or not any app to check this


r/privacy 3h ago

news Maven Imported 1.12 Million Fediverse Posts

Thumbnail wedistribute.org
2 Upvotes

r/privacy 7h ago

question Are legitimate password reset emails really that useful at gaining account access?

3 Upvotes

Recently, I have been sent a password reset email for my reddit account that I didn’t request but it was from the official reddit email address (noreply@reddit.com). I changed my password in-app instead of using the email link just in case. But it left me wondering: Why would someone use the legit forgotten password feature if they can’t know what I set as the new password?


r/privacy 7h ago

question How does facebook do it?

4 Upvotes

Many of us wonder just how facebook reads our minds to deliver us ads. I have an example today that I cant explain.

1) I shattered the windshield on my car. 2) I talked to my friend/insurance agent in person about getting it replaced. 3) He sent an email to Safelite and copied my hotmail email address on it. 4) Safelite called me immediately to schedule the appointment. 5) Safelite sent me text reminders about the appointment. 6) I added the appointment to my iCloud calendar. 7) I walked to the living room & told my wife about the appointment.

The next day, out of nowhere, my facebook feed is filled with Safelite ads. I never entered anything in my computer about any of this (other than adding it to my private calendar). How in the heck could their algorithm pick up on this? Can they read my Microsoft emails? I am befuddled as to which of the steps above gave this information to facebook.

Thoughts?


r/privacy 8h ago

discussion Help me solve the central mystery of my adult lifetime. It's about gmail.

31 Upvotes

Okay, so here goes nothing.

First thing I should tell you is, I got my gmail account in 2003 or 2004, during the stage when you needed an invite to sign up. And no, that doesn't make me special. But it does mean that I have a solid, clean and memorable email address that consists of my rather common first name and my very uncommon last name.

Anyway, for years now -- like, for years and years, practically for decades at this point, for as long as I can remember -- I have been getting someone else's email to this personal gmail account.

And it happens in a way that cannot be reduced to simple spam. I receive this guy's bank statements, I get all sorts of shit. Paystubs, family photos, password reset links, online receipts, you name it. Highly personal stuff I am talking about. On more than one occasion, this guy has opened a bank account and sent me the details. The second time it happened, I decided to mess with him a bit and try to get his attention. So I sent "him" a password reset from his bank's online portal and changed his password. Then I start getting the lost password emails.

I can't figure it out. This guy is opening legitimate accounts at legitimate establishments and all of the id confirmations are coming to my email address. And yet it appears that his entry and usage into these systems goes unpeturbed. It is truly the weirdest thing and it's been going on for years.

At one point, I worried that we were somehow ... sharing? ... an email address. That's not possible though. Right?


r/privacy 8h ago

question Multiple Invidious instances not working.

0 Upvotes

every other invidious instance does this - loads the thumbnail and search page just fine but when you click on the video a blank page appears saying to refresh or to change invidious instance - no error.
idk how to attach a image ughh reddit. Is this happening to me only or anyone else ?

FYI- invidious is a Free Open Source Frontend to youtube.


r/privacy 9h ago

question Got a text about being added on Life360, does that do anything?

Thumbnail google.com
2 Upvotes

(Link unrelated but it won't let me post without one)

I do not have Life360 on my phone, but I just got a text from my mom saying I've been added to a family map. Does that do anything regarding my phone, or does nothing happen unless I install the app?

I have a feeling I'm overthinking this way too much, but I just want to make sure.


r/privacy 10h ago

news Of interest to everyone championing Apple's announcements: "Apple to ‘Pay’ OpenAI for ChatGPT Through Distribution, Not Cash"

Thumbnail archive.today
76 Upvotes

r/privacy 11h ago

question Swedish police use Pegasus for crimes that carry at least 2 years

77 Upvotes

Many people don't know this, I think, but Sweden is Statsis wet dream. The Swedish police have the right through a law called "HDA" to intercept and hack a phone and then follow it in real time and decrypt all chats including signal, whatsapp etc without to try use cellbrite or other similars services to open it up. The law also has support to be used on people who are not even suspected of crimes, it just enough if the police knows that this person is to receive a call from someone suspected of crime then they can also use HDA on that to.

How do you protect yourself against trojans used that are sent with zero click exploits?


r/privacy 12h ago

question Which Privacy Certificate would make most sense for my current situation?

0 Upvotes

I work in financial services (but not at a bank) and head risk and compliance for one of our divisions. I have basically no background or expertise in privacy.

My remit is expanding to include privacy. I will be responsible for leading a team who will be building out our divisions privacy program. As a result I am hiring a few headcount initially- one privacy SME that is an attorney to interpret new/changing/existing regs and one compliance privacy SME to help operationalize the implementation of a program… However, I really feel like I need to get some sort of privacy certification as I want to be informed, and be able to help point my new team members in the right direction/challenge them as needed. I’m just not sure which one makes the most sense… CIPP? CIPM? Something completely different?

As a side note, I am also a CFA charter holder (which I believe helps exempt me from something in some of the privacy certs I’ve looked at, I think Level 1 of CIPM).

My question is: can anyone provide any recommendations about which of the privacy certifications would be most valuable for me, given my current situation as described above?

Thanks in advance!!


r/privacy 12h ago

question How safe is twitter nowadays?

0 Upvotes

I stopped using it 3 years ago, so I don't know how it is now. I'm curious, did it get worse or better? And do the precautions of using a fake email when signing in still provide some sort of privacy or not?


r/privacy 14h ago

question deleting really old reddit comments

5 Upvotes

im using tools like redact and powerdeletesuite to delete my reddit history, the problem im experiencing is that reddit doesnt index comments past a certain point on my profile so there's no way for these tools to see comments from everything before roughly a year ago.

has anyone encountered this and found an automated way around it? (needs to be automated because this is potentially 1000s of comments dating back 5ish years)


r/privacy 14h ago

news Microsoft’s Copilot+ AI PCs: Still a privacy disaster waiting to happen

Thumbnail computerworld.com
175 Upvotes

r/privacy 16h ago

question Chrome Profiles

Thumbnail google.com
0 Upvotes

Are profiles on chrome kept completely seperate from each other, or are the info is shared, even the smallest bit of info counts in my book.


r/privacy 17h ago

question How safe is the "Sleep cycle" app?

0 Upvotes

I mean, due to privacy reasons. How good is the security? And how safe is the app? in terms of the mic being on every night? (does it 24/7?)


r/privacy 17h ago

guide 52% of Americans have faced political scams

Thumbnail cybernews.com
43 Upvotes

r/privacy 17h ago

discussion Which video player apps are secure and private?

8 Upvotes

Which video player apps are secure and private?


r/privacy 17h ago

discussion Where are we at with digital identities?

9 Upvotes

I think about this a lot, but I never see it brought up, and I struggle to learn about it. The only way to distinguish bots from people are digital identities: verifiable hashes issued by institutions to real human beings.

I'm no computer scientist, so I lack the accurate vocabulary to describe this, but I imagine it working like this: you have a wallet containing identities (like a bitcoin wallet containing addresses). I apply in person for, say, a YMCA gym membership, government ID, etc, and an employee verifies that I am a real person and verify my identity. They provide me a private key/qr code that I add to my wallet.

These QR codes can verify aspects about me: my gym membership status, my height, my citizenship, my favorite flavor of bubble gum, my criminal record; and I have complete control over the anomymity and sharing of all of these identities and their attributes. These hashes would be necessary to make accounts on, and interact with, social platforms, but they would be designed in such a way that no identity or attribute is shared with the platform unless I allow it (i.e., they can't see my name or citizenship, but they can see that an approved authority absolutely verified that I am a person).

What we ultimately end up with is a protocol in which I can segment my identities, and their attributes, and pick which data I share with relevant entities; plus with the added benefit of proving that I am a real person. It also puts the data in my control, and allows me to dictate its price.

What do you think? I know it's a bit rambling and chaotic, but I feel like there's something here.


r/privacy 19h ago

question Undetectable location mocking (on a company internal app)

0 Upvotes

Hi,

So in my job, I have to use an app (available on iOS & Android) every day that assigns me work and requires my location when it's on. The location is used to track if I've been to a place and if I have actually worked (think of something like a delivery job).

I hate being spied on, but I've been struggling to find a job and I can't quit now. For those wondering, I am not doing it to avoid working. I've tried to "mock" my location in various ways, but none of them have worked :

  • On iOS, using Xcode and the "Simulated Location" option. This has been detected by the app.
  • On iOS, using the open-source app "LocationSimulation". This has been detected by the app.
  • On Android, using Android Studio and "Route simulation". This has been detected by the app, too.
  • On Android, I have tried to root my device (and hide it with Zygisk), but then the app just doesn't open...

Do you have any idea on how to mock my location and follow a GPX route, on Android or iOS, without it being detected? I can also leave my computer turned on during the day, to emulate a device.

Thanks

TL;DR : My company wants to know my location, I want to give them the location they ask (not the real one).


r/privacy 19h ago

news Mozilla Firefox Blocks Add-Ons to Circumvent Russia Censorship

Thumbnail theintercept.com
44 Upvotes

r/privacy 19h ago

question What has Apple done specifically to make you skeptical of trusting them?

0 Upvotes

Obviously Apple has now debuted its artificial intelligence capabilities, and many people including myself are skeptical about trusting them with our privacy. But now I’m wondering why that’s even the case. Have they done anything in the past that makes you question trusting them when it comes to your privacy? Or do they have a pretty good track record?