• 12 Posts
  • 15 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle










  • Ah, if it’s only available on flatpaks, that’s why few people know about it.

    Flatpak is a very insecure method to download software BTW, you probably should avoid it

    Edit: It’s curious that I’m getting downvoted for stating a fact. It seems a lot of flatpak users don’t understand security. But that’s kinda the point: even the flatpak developers don’t understand the difference between integrity and authenticity

    Flatpak currently does not provide authenticity, and one developer made it clear that he doesn’t understand why that matters in the above ticket that requested signatures of packages back in 2016. It’s been 7 years and still they haven’t fixed this. I don’t think the flatpak team understands or cares about security.








  • Yeah exactly, you’re misinformed.

    As soon as you use Tor Browser (which you won’t try), it’ll lock you your account until you give them your phone number and an OTP sent to that number.

    We’re not discussing anything that requires that level of privacy

    For some people, everything requires privacy. For some people, they can’t access the Internet without services like Tor.

    You’re being intentionally dismissive of folks at-risk. That harms our community.


  • Yeah? Go signup for a new account on Discord with Tor Browser and see how far you get.

    This is not misinformation; it’s very informed information. I use Tor Browser everyday, so I know very well which services treat me like a second-class citizen and ban me just for existing (without doing anything bad). See also Paypal, Ebay, Amazon, Twitter, Facebook, Reddit, 90% of banks, etc.

    Unfortunately, most fraud detection systems these days use Machine Learning algorithms that ban you before or immediately after you create an account because they can’t uniquely fingerprint your session or because you “look” like someone who did something bad in the past (again because they can’t uniquely fingerprint you). These are false-positives, and they don’t care because not enough people complain about needing services for anonymous users.

    I work in cybersecurity; this is a very informed opinion.


  • That’s not possible on Discord. They require a phone number. Many countries have Mandatory SIM Registration laws that make it illegal to get a phone number anonymously.

    And Discord will auto-ban your account just for using Tor Browser or other privacy addons in your web browser.

    My point is: don’t use Discord. Use a service that allows you to only use a throwaway email.

    Message sent from Tor Browser using an account on Lemmy registered with a throwaway email