Skip Navigation

Posts
23
Comments
703
Joined
2 yr. ago

  • Nothing much you can do except make it harder for nefarious parties to get your information. If you’re in the U.S. most of your information is public. With two pieces of info about you, you’re one Google search away from your name, physical address, schools you went to, where you’re employed, etc. You can’t stop this, so just make it harder when your data does get leaked.

    Here are my best practices:

    • Own my email domain name and use it for generating unlimited random aliases.
    • Update old accounts using a random alias.
    • Generate random usernames using a proper username generator. Unique username per account.
    • If an old account email can’t be updated, changed, or deleted, spoil the information in their system by using fake info and then abandon the account (Anon O’Moose, 1234 Fake Street, Beverly Hills, CA 90210).
    • One email alias per account - never shared.
    • Unique passwords via a password manager (e.g., passwords like ‘Obtuse4-Entangle-Matrix’).
    • Enable TOTP multi-factor authentication wherever possible.
    • For legacy security questions, always use a passphrase generator for the answer, and save both the question and answer into your password manager. “In what city did you go to school?”Answer: “Bandit4-Topic-Guardian”.
    • Save recovery codes for your accounts into your password manager.
    • Leverage virtual credit card numbers if your provider offers it. One virtual card per account - never shared.
    • Create accounts only if you have no choice.
    • Submit your formal request in Opt Out Prescreen to minimise the sale of your info.
    • Delete all centralised social media accounts. Instruct people to text or call you.
    • Switch to Linux completely if you can. Get off Windows and Mac where possible.
    • Get off iOS if you can and try to run a proper trusted degoogled OS where possible. You can experiment with Linux phones in the future, but right now it’s not mature enough yet nor is it as secure as something like Graphene OS on Pixel phones.
    • Get all your data on prem only. If you choose to backup some data for safeguarding online, encrypt it before you upload it.
    • If your phone number has been leaked and you’re getting multi factor code requests, excessive spam, etc. consider setting up a new phone line with new number. Then update all your accounts, employer, government records, etc. to point to the new phone number. Let your contacts know. Once satisfied, deactivate your old phone number.
    • Minimise posting any personal details about yourself online. Never identify physical locations. Make up fake details about yourself, your employment, etc. Make yourself a little more anonymous by providing fake information. One day you have a pet, another day you’ve never had pets, one day you’re divorced, another day you’re 18 years old, etc. Strive to be consistently inconsistent with the data you post about yourself online. Lots of things I’ve said on Lemmy about myself are untrue, while some things are true. It’s important to not reveal personal identifiers as it is trivial for a determined actor to correlate data and pinpoint who you are.
    • Never, ever have any usernames, passwords, email addresses, or security questions that have any meaningful information related to you. ALWAYS use random generators. There is only one password you need to remember, and that is the one password to your password manager. Write it down on paper using pencil (graphite lasts longer than ink) and stick it in a safe.
    • Use a VPN properly and with discretion, based on your privacy threat model.
  • I was sort of with you on My Hero Academia as I’m currently watching it for the first time. Parts of it were good and it was enjoyable for the most part watching it as an adult. Dragon Ball Z doesn’t hold up as well but I still love it as I grew up with that.

    However, just yesterday I finished s03e11 “One For All”. And holy shit was that a gut-wrenching and emotional episode about the legendary hero “All Might”. Seeing this Superman like hero being broken and exposed while the whole world watches was incredible. I won’t say anymore, but it was incredibly moving how that episode turned out. Cemented it as an incredible anime for me so far. I’m looking forward to watching the rest of it, and hopefully I will still enjoy it. But boy did it take a long time of watching and filler episodes to get to this point.

  • Now it’s crazy because our politician wants to fuck a couch.

  • Take out the king in one move with this one simple trick.

  • Bro my body can’t take it anymore, I’m so sick. I’ve had 23 Mountain Dews and 14 Doritos Dew It Right today. My LG tv still wants me to sing and dance to continue.

  • And you are correct as there are now Samsung and LG smart monitors. It won’t be long before all monitors are smart.

  • Permanently Deleted

    Jump
  • The Regime: “It’s preventable as long as you accept Jesus Christ as Lord and Savior, and bury those problems deep inside. No, deeper. Now shut up and get back to work.”

  • Cat: “This is my divine right - my birthright.”

  • Turtle Power

  • Enjoy your coming Steam Deck! It’s incredible to have your PC library in your hands in a very comfortable device! Every now and then I fire up my old ROMs that I backed up back in the day, so I’ve been dabbling with X-Men Legends on GameCube.

    +1 for Control. Played it a few years ago and had a wonderful time with it.

  • Help me

    Jump
  • Reported. Scam.

  • In the age of information take-downs by the Fanta Menace's Nazi regime, make sure to archive this and mirror it to Peertube and Archive.org.

    YouTube link (for now, it will probably disappear in the next 48 hours): https://www.youtube.com/watch?v=jDJaymU2hfw

    You can also find this on Archive.org. I won't put the link here to help protect it from takedowns. If you have the capacity to do so, seed the torrent. Don't let the world forget of this hilarious clown-show.

    And remember - you probably feel empathy witnessing someone get bullied like this. But don't forget what this James Bond villain is responsible for, the havoc he has caused, and the millions of lives he has disrupted. Harden your heart because these facists will NEVER change. Cyberdump man-baby emerald mine fascist Nazi jumping Tesla man deserves to get cyberbullied, and at points in the video he looks like he is going to cry; those are Crocodile Tears. He'll hide the pain with his hundreds of billions of dollars, memes, and ketamine while sitting in his ivory tower resting his feet on Trump's back.

  • Already upgraded to Linux Mint - https://lemmy.world/post/24365609

    It’s been going great! Everything works as I expected. I now have full confidence that I will never switch back to Windows. It really does feel liberating having an OS that doesn’t track me.

  • Hopefully we'll get the true version of Tales of Symphonia! The proper 60 FPS GameCube version, and not the crappy 30 FPS ports with missing lines of dialogue.

  • Permanently Deleted

    Jump
  • Great questions! Seriously, those made me think for sure.

    For question one, I suppose a profiler could do that. If my domain name is myemaildomain.com, they probably could track all emails and sell it collectively. But I don’t think corporations do that at this time. That would be akin to profiling all Hotmail, Gmail, Live, etc emails, appreciating those are massive services. I suppose if nefarious actors were to do that to my domain, I could consider switching domains - I have multiple domain names I own, and it’d be trivial to use the other ones. In the years I’ve been using a custom domain for email, I haven’t encountered any nefarious actors and have significantly eliminated any spam.

    For question two, the domain provider I use doesn’t do that in their terms of service. However, if they did look at my MX records and decided they wanted to profile me as a user of Addy, they definitely could do that. Though it would hurt their business as many users would migrate their domains to new registrars - I certainly would move my domains to a new registrar!

  • Permanently Deleted

    Jump
  • When you get an email from Company A that sends to your alias email, the email goes to your inbox. When you reply to that email, your alias provider forwards it to Company A where the sender is your alias address.

    In short, you simply reply and your alias service takes care of it for you so that the recipient only sees your alias email and not your true email.

  • Permanently Deleted

    Jump
  • I signed up with them ensuring I read their privacy policy. Based on my personal privacy threat model, I’m okay with their policy. This wouldn’t fit a more intensive threat model.

    I haven’t read it recently but last I remember they do have the option to temporarily store an email in the event of a failed delivery, until it can eventually get sent to you. This is opt-in I believe, and a toggle you can enable in your account.

    In the time I’ve used them I haven’t had any issues with email deliveries. Been happy with the service so far, having left SimpleLogin and Proton for political reasons.

  • Permanently Deleted

    Jump
  • This is what I do as well. I purchased my own custom domain name and run aliases off it using Addy. So as an example, an email for an online account would look like: random9.words@mycustomemail.com

    Then I feed these accounts into a password manager so I don’t have to remember them.

    All the aliases forward mail directly to my main inbox. Companies never see what my real address is. If I get spam, I know which company either sold my data or leaked my data. I can then take action by simply turning off that email alias and then spinning up a new one.

    The best thing about owning your custom domain is that you’re in control and never have to change your email addresses. If I want to move to a new email provider, I can easily do that. The process, simplified:

    • Buy a domain name
    • Sign up for an email account at Tuta, Mailbox, etc.
    • Set up your custom domain at that provider.
    • Go to your Domain provider and update your MX records so that it syncs with the email provider.
    • if you want to switch email providers, get a new one and then update your MX records to point to the new provider.
    • If you updated your records to point to the new provider, you’re done. It’s that simple. You won’t miss an email.

    Edit: All providers make it very simple to set up a custom domain. If you can follow instructions and copy and paste text, their systems will run checks to make sure you did it correctly and it’s syncing properly. Very easy for those who aren’t technical.