Slashdot Mirror


Ask Slashdot: How Do I Reduce Information Leakage From My Personal Devices?

Mattcelt writes: I find that using an ad-blocking hosts file has been one of the most effective way to secure my devices against malware for the past few years. But the sheer number of constantly-shifting server DNs to block means I couldn't possibly manage such a list on my own. And finding out today that Microsoft is, once again, bollocks at privacy (no surprise there) made me think I need to add a new strategic purpose to my hosts solution — specifically, preventing my devices from 'phoning home'. Knowing that my very Operating Systems are working against me in this regard incenses me, and I want more control over who collects my data and how. Does anyone here know of a place that maintains a list of the servers to block if I don't want Google/Apple/Microsoft to receive information about my usage and habits? It likely needs to be documented so certain services can be enabled or disabled on an as-needed basis, but as a starting point, I'll gladly take a raw list for now.

148 of 261 comments (clear)

  1. Simple by NEDHead · · Score: 4, Informative

    Never use an internet connected device

    1. Re:Simple by ArmoredDragon · · Score: 1

      It's rather shocking that APK wasn't the first to post in this discussion.

    2. Re:Simple by ihtoit · · Score: 2

      I think it was APK who did the submission.

      --
      Political debates have me rolling my eyes so much I think I got optical whiplash. I should sue. - Foamy The Squirrel
    3. Re:Simple by radarskiy · · Score: 1

      Never have information.

    4. Re:Simple by Anonymous Coward · · Score: 5, Interesting

      Yesterday, I was waiting while sitting in an airplane. I hadn't put my iPhone yet in "airplane" mode. The cell reception was next to non-existent. I turn on the music player and it gets stuck on the startup screen. Nothing I can do. I turn on airplane more, then it works immediately. It's not the first time I noticed this happen. Even just trying to listen to your own tunes Apple still makes your devices connect "home", regardless of how you disable any limited settings that may have an effect on this. Therefore,

      > Never use an internet connected device

      is accurate.

      That's just an example. Almost every program by Apple does that, as seen in the Activity Monitor on OS X. People like to rant on Windows 10 calling home, but MS is just learning from the experts ;)

    5. Re:Simple by Aighearach · · Score: 4, Informative

      Never say yes to an app permission your use of the app doesn't require. Generally this requires only using open source apps, and downloading the source and turning off extra permissions.

      Never require networking from apps that you don't want to phone home.

      Assume everything that can phone home, does.

      As to the complaint that MS's "privacy mode" isn't as private as some people wanted, it reminds me of Richard Feynman at Los Alamos complaining that otherwise-intelligent people thought that secrets were safe because they were stored in devices called "safes." Had they been called "locking cabinets that reduce the likelihood of access a little bit, especially by honest folks" or something else literal, they might have had less problems with secrets being stolen. "Privacy mode" isn't intended to make everything "private," it is intended to mask your pr0n access from casual examination of your browser history. But that isn't actually private in most cases, it is just web traffic and they could unmask you at the router anyways. Internet doesn't have a "private" option, if you want private you'll need a "private network." Internet is a "public network." It is like wanting privacy on the sidewalk; you can't have it. You can usually keep people from touching you, though.

      Ultimately if you want a private mobile device, you should be buying hardware, replacing the OS with something FL/OSS and only using a private network.

    6. Re:Simple by omnichad · · Score: 4, Insightful

      No, it appears to be reverse-trolling aimed at APK. For one, it links to a competing HOSTS file engine.

      And then the most telling, is this quote:

      But the sheer number of constantly-shifting server DNs to block means I couldn't possibly manage such a list on my own.

    7. Re:Simple by omnichad · · Score: 1

      At least they could make phoning home asynchronous. It would at least hide it better.

    8. Re:Simple by Anonymous Coward · · Score: 2, Funny

      Almost all apps, even a basic fleshlight app

      That was an interesting error.

    9. Re: Simple by Anonymous Coward · · Score: 1

      Ahahahahaha
      Have a look at the permissions granted to preinstalled apps. The notepad on my phone has access to *everything*

    10. Re:Simple by Hylandr · · Score: 1

      I see what you did there. :)

      +1 Funny

      --
      ~ People that think they are better than anyone else for any reason are the cause of all the strife in the world.
    11. Re:Simple by jafiwam · · Score: 1

      No, it appears to be reverse-trolling aimed at APK. For one, it links to a competing HOSTS file engine.

      And then the most telling, is this quote:

      But the sheer number of constantly-shifting server DNs to block means I couldn't possibly manage such a list on my own.

      "Managing" the list isn't needed.

      I use the same one linked in the submission, and I update it about once a year when I start to see stuff I don't want.

      Sometimes I add things I want, and sometimes I have to search through it to take something off. But, both of those things are pretty rare.

      For most stuff, the HOSTS file lists are 99.9995% effective at blocking ads, and slightly less effective at preventing malware attempts.

      Some day I am going to figure out how to pull that list into a script and load the primary domains onto a DNS server, which will both be a smaller file but also be manageable on a network-wide level instead of per device.

    12. Re:Simple by omnichad · · Score: 1

      "Managing" the list isn't needed.

      Never said that it was. Just saying that this fact wouldn't be brought up if it was APK doing the submission.

    13. Re:Simple by I4ko · · Score: 1

      I prefer blackhole routes you insensitive clod. Better yet, use a proper firewall. You know, those guys can just type IP addresses in there, and with HOSTS you are hosed. Not to say that now malicious scripting is served from inline javascript in the HTML itself. There is no HOSTS file that will help you with that. Only a deep packet inspection firewall and a mangling proxy (like privoxy if it is still alive) can help here. You need to carve out portions of the HTML itself. Also go read and implement all STIGs relevant to your operating system, device and browser. You will soon see that certain things don't work, but info isn't much leaked. And at the end of the day - just reach for the power button. That is the only sure way the device isn't leaking anything about your.

    14. Re:Simple by RockDoctor · · Score: 1

      There's a vitriolic fleshlight app?

      --
      Birds are not dinosaur descendants;birds are dinosaurs, for all useful meanings of "birds", "are" and "dinosaurs"
  2. Freedome VPN claims to do this by pls2917 · · Score: 1, Flamebait

    Freedome VPN claims to help with this:
    https://www.f-secure.com/en_US...

    1. Re:Freedome VPN claims to do this by beelsebob · · Score: 4, Insightful

      Right - then you just leak information to the VPN host.

    2. Re:Freedome VPN claims to do this by Cute+Fuzzy+Bunny · · Score: 1

      Eh, you're only safe until the value of the data they're holding is greater than what they're being paid. Or until a government insists on having access.

      Good luck proving they're the source of the leak and suing them when the company is gone, there's no money and the people involved are sitting on an island somewhere.

      The third choice is not doing anything wrong, not caring who is folding, spindling and mutilating the tidbits of your life and not worrying about it. Because they probably already know almost everything about you.

  3. Don't Use One by Anonymous Coward · · Score: 1, Informative

    Forget a smart phone. Use a simple prepaid phone and don't link it to anything.

    1. Re:Don't Use One by greenfruitsalad · · Score: 1

      or you could just ask your friendly neighbourhood homeless person to buy you a prepaid sim card in his name for a big mac meal.

    2. Re:Don't Use One by allo · · Score: 1

      Or buy as used one with SIM on ebay

  4. To refine the question, with subquestions by Actually,+I+do+RTFA · · Score: 2

    Is there a way to use some things (E.g. Google Maps) with known leaks, without exposing every activity to Google all the time on unrelated sites. It seems like limiting some domains make sense, but I'm thinking of things like cloudfront.net

    Also, is there some way to prevent the CDN-style spying/extra downloads?

    --
    Your ad here. Ask me how!
    1. Re:To refine the question, with subquestions by Lord+Bitman · · Score: 1

      cloudfront, as far as I am aware, usually operates via per-distribution subdomains.

      But then, based on your follow-up, "CDN-style spying", I might simply have no idea what you're talking about. Do you consider CDNs to be a form of spying?

      --
      -- 'The' Lord and Master Bitman On High, Master Of All
    2. Re:To refine the question, with subquestions by amicusNYCL · · Score: 3, Informative

      There's a curated hosts file here that contains a section for blocking domains used for Windows 10 reporting, if that's your thing:

      http://someonewhocares.org/hos...

      There are also several domains relating to Google and Apple.

      If you have a small list of several domains you want to block, you can probably just search for hosts files and include several of those domains as additional keywords.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    3. Re:To refine the question, with subquestions by whoozwah · · Score: 1

      The Ublock Origin extension can be configured to pull this host file and apply it with automatic updates.

    4. Re:To refine the question, with subquestions by Anonymous Coward · · Score: 1

      Awesome. Don't forget to block the Microsoft ip addresses that are hard coded in a DLL somewhere in the network stack.

    5. Re:To refine the question, with subquestions by amicusNYCL · · Score: 1

      I understand that, but it sounds like the OP is looking for more than browser-based blocking.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    6. Re:To refine the question, with subquestions by tepples · · Score: 1

      Which hardware firewall is recommended for use with a laptop on Wi-Fi at a restaurant or public library?

    7. Re:To refine the question, with subquestions by Aighearach · · Score: 1

      Google maps doesn't have a leak; actually, google is the data provider! They're not providing a pipe to some other map, or putting a tollbooth in front of a public map, it is actually their map stored on their server, and when you use google maps you explicitly ask them for that data. Asking somebody for something isn't the same as leaking your identity to them. You're telling them who you are when you show them your face to ask to look at their stuff. ;)

    8. Re:To refine the question, with subquestions by silas_moeckel · · Score: 1

      VM pfsence or similar route everything though that.

      ZSUN Wifi Flash is tiny and there have been a string of portable firewalls to do just this.

      --
      No sir I dont like it.
    9. Re:To refine the question, with subquestions by omnichad · · Score: 1

      You could run Windows in a VM or an alternate OS. Or, you could use a wireless bridge device connected to your laptop's LAN port.

      Maybe you could write a rootkit to bypass the hardcoded IPs.

    10. Re:To refine the question, with subquestions by whoozwah · · Score: 1

      I was more throwing that out there for the OP's benefit, piggybacking off your initial comment.

    11. Re:To refine the question, with subquestions by Actually,+I+do+RTFA · · Score: 1

      To my understanding, some CDNs server a unique datafile to every response, instead of using cached files. This can be done by introducing meaningless arguments into the URL that resolve to the same location, but do not need to. It's similar to the 1 px transparent gifs.

      Unlike the gifs, blackholeing the CDNs doesn't work, because the JS is required by the main page.

      So, it's more expensive, but also more reliable.

      --
      Your ad here. Ask me how!
    12. Re:To refine the question, with subquestions by niftymitch · · Score: 3, Informative

      This is getting harder and harder to do.

      If you do want to make progress invest in a Raspberry Pi
      and a WiFi USB thing. Perhaps two....

      Run the Pi and the laptop network hardwired together.
      Have the Pi connect to the WiFi of the coffee shop.
      A Pi can run a decent firewall and Squid proxy with one of many Linux
      distro packages. It is easy to reload the uSD card with a clean
      OS install. It is easy to remove the uSD card and inspect the
      system for anomalies.

      The second one... Install it as a VPN access point at your home network
      connection. The Pi in your home and the Pi in the coffee shop can contain
      shared secrets for a secure link that is harder to man in the middle attack.

      There are cooperating groups sharing curated lists of addresses and host
      domains that the Pi at home can slurp up and maintain.

      The mobile Pi WiFi USB thing can be replaced for ten bucks and
      some can have their MAC address randomized to look like yet
      another iPhone.

      I would love to see a product packaged like the Airport Express
      that would manage a firewall and VPN.

      It is also important to explore VM. A virtual machine
      can operate as a sacrificial OS. Copy the image
      start it, get work done, stop it and trash it.

      This is astoundingly difficult to do correctly.

      --
      Truth is stranger than fiction, but it is because Fiction is obliged to stick to possibilities; Truth isn't. Mark Twain.
    13. Re:To refine the question, with subquestions by Actually,+I+do+RTFA · · Score: 1

      Right, I want to use some Google services (e.g. Maps) while preventing a data-leak when not using their service (e.g. being on /.)

      I get that I cannot use G.maps without telling Google things. I just want to only tell Google what I want to tell them explicitly.

      --
      Your ad here. Ask me how!
    14. Re:To refine the question, with subquestions by Aighearach · · Score: 1

      If you're worried about a data-leak "when not using their service," it sounds like you're a bit confused about what you want. If it is some other thing that is leaking, like slashdot, then why are you even talking about maps?

      Try to describe your complaint in such a way that your words are literally true. Whatever stylistic form you're attempting may be great, but your complaint is not at all clear.

      It may be that you don't have a specific complaint, and just heard some people on the internet say some non-specific bad things about google, and now you've got concerns. In that case, chin up.

    15. Re:To refine the question, with subquestions by Actually,+I+do+RTFA · · Score: 1

      I want to use Google maps. This means not blackholing all of Google to 127.0.0.1.

      I want to use /. and other sites, without Google tracking me. Normally this means blackholing all of Google to 127.0.0.1

      Sure, it's technically /. that put the tracking on their site, but the solution is normally to violently kill Google's IP.

      Similar to how I typically keep FB from getting any requests, which means I could not log into FB if I want to.

      --
      Your ad here. Ask me how!
    16. Re: To refine the question, with subquestions by Actually,+I+do+RTFA · · Score: 1

      Thank you for the recommendation, AC. I plan on experimenting with umatrix tonight.

      --
      Your ad here. Ask me how!
    17. Re:To refine the question, with subquestions by KGIII · · Score: 1

      Look at uMatrix. It's available for Firefox now. It's so free, the author won't even let me send him money. However, it is a bit much at first. Once you get the hang of it, and save your settings, things go quite well. No, Google has no idea what I'm here. Yes, I can still use Maps.

      --
      "So long and thanks for all the fish."
    18. Re: To refine the question, with subquestions by Lab+Rat+Jason · · Score: 1

      Your Sig, Juxtaposed on this thread is freaking hilarious!

      --
      Which has more power: the hammer, or the anvil?
    19. Re: To refine the question, with subquestions by KGIII · · Score: 1

      Ha! I so gotta learn to scroll down before posting. :/

      It's worth setting up. It is a whitelist approach. It works. It's just a bit of a pain in the ass to get set up. I'd send you the JSON that I have saved but, alas, that'd reveal too much about me and I'm too lazy to fix that. Hmm... Well, I guess... It'd reveal the only porn site I have in my record is 4cam and that I took enough time to configure it to, umm... Watch. If you can get past that, I'd probably be willing to share. It's got mostly geek sites loaded. Some video sites. I'd make your own, it's worth the time investment.

      --
      "So long and thanks for all the fish."
    20. Re: To refine the question, with subquestions by Actually,+I+do+RTFA · · Score: 1

      I'm certainly capable of getting past 4cam being already set up with the whitelist. If you don't mind sharing your JSON file... well, I'll probably have to do a lot of work on my own. But it always helps to have a working example.

      And, from what I understand, I would just use the JSON file initially until I found a specific site that did not work.

      --
      Your ad here. Ask me how!
    21. Re: To refine the question, with subquestions by KGIII · · Score: 1

      It turns out, that is a .txt file. No big deal. There's a rules and a settings backup. They are in this zip file:
      http://www.filedropper.com/uma...

      I just made that one. It doesn't have that particular site in it. ;-) I did have to edit it to enable the scripting on that page.

      You are technically correct but making it sound harder than it is. You can use that file until you get your own going. Meaning, you'll just edit my file. You don't edit it personally or by hand. It is done by GUI. When you find a site that doesn't work, start clicking stuff. It changes colors to indicate that it is blocking stuff. There's green (go) and red (stop) and a few things to block or unblock.

      It does have a learning curve. It is not too hard. It's like an old-school Windows firewall, software based, except it's just for your browser. One of the best things is that I can share the settings file. I've actually automated this (thus I never see it and had forgotten it is .txt). I simply place it on a network share and have it grabbed and copied with a cron job. (Yes, I have nothing better to do. Retirement is awesome like that.)

      So, that should get you started. The rules are pretty straight forward. You can just use mine. They work well enough - edit as needed. The settings for sites is pretty straight forward but it takes some getting used to. Go ahead and use mine, that should give you the gist of it and a good leg-up. I've had that file for... Hmm... A while? I've been using it and migrating it for quite a while. I also have different preferences than you. So, you might want to take a peek. Often times, I've just decided to go for bare functionality - you may want to adjust that.

      After you've loaded the file(s), just refresh this page. That'll give you a good example of what I've done - it works for me. If you've got any questions, I'll do what I can to help.

      --
      "So long and thanks for all the fish."
    22. Re:To refine the question, with subquestions by bingoUV · · Score: 1

      I presume you use google maps on a mobile device, and firefox on non-mobile device, so uMatrix cannot help you, right? Or am I mistaken?

      For mobile devices, where google maps is most useful, I try blocking all access from it using Xprivacy / firewall when I am not using. This includes contacts, GPS, internet and some other. When using, I only enable GPS and internet, and disable again once I am done.

      Not sure how good this is.

      --
      Bingo Dictionary - Pragmatist, n. A myopic idealist.
    23. Re:To refine the question, with subquestions by watice · · Score: 1

      Besides the someonewhocares list, I've used the yoyo list with dnsmasq for years, on a cron job updating every 2 weeks or so. http://pgl.yoyo.org/adservers/...

  5. APK - hosts file engine by unrtst · · Score: 1

    How the hell are you someone that's been on slashdot EVER and haven't been bombarded by "APK" posts.
    Google "APK Hosts File Engine".

    1. Re:APK - hosts file engine by amicusNYCL · · Score: 1

      In his quest to block ads that he doesn't want to see, maybe he's just looking for a piece of software that isn't advertised via spamming Slashdot.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    2. Re:APK - hosts file engine by Aighearach · · Score: 1

      I've been here for a long time, and active that whole time, and that doesn't really ring a bell to me. Probably seen it, but probably ignored it too. When was the last time I heard some neckbeard pining for hot grits? I don't know, I never paid much attention to that sort of idiocy. The idiocy itself sometimes rises to a level that feels like a bombardment, but it is generally a wide range of idiocy rather than a specific meme being the bomb.

      When I think of slashdot and hosts files, I actually think of the Big Taco on Slashdot Radio talking about using hosts files (on linux) to filter web advertising, and whatever script was being used for email before SpamAssassin. Back then, half of slashdot had their email on a private mailserver that they managed themselves.

      Oh, how times and users have changed! What a world the future is! (MEDICAL WARNING: FLASHING LIGHTS)

    3. Re:APK - hosts file engine by IceAgeComing · · Score: 1

      Who is responsible for that strobing set of web pages? Seriously, that's not cool.

    4. Re:APK - hosts file engine by Aighearach · · Score: 1

      Kinda silly to complain about the strobing when I put a warning right on the link.

      It is by some famous artist, you'll have done well in life if you die half as famous as him. If it doesn't speak to you, well that is art. Nobody asked it to speak to you. Go and choose something else. Be strong, little newbie. You can do it. Find some kittens or something.

    5. Re:APK - hosts file engine by Hognoxious · · Score: 2

      You should have put the warning before the link. His finger got cramp before he reached it.

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    6. Re:APK - hosts file engine by amicusNYCL · · Score: 1

      Wow, an "AC who is definitely not APK, posting about APK in the third person" posting a duplicate reply in the same comment thread? That's so unlike APK, APK never posts duplicate replies, this AC must definitely not be APK! APK is so clever!

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    7. Re:APK - hosts file engine by amicusNYCL · · Score: 1

      Get your story straight APK, this week I'm the Adblock shill, not the advertiser. Next week I'll probably be the advertiser again, or maybe just a bad programmer. Whatever your mind decides to conjure up that week, really.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  6. Re:know your enemy by mrchaotica · · Score: 1

    Tunnel DNS. Tunnel everything.

    To where?

    --

    "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

  7. If it hurts stop doing it by Anonymous Coward · · Score: 1

    There are plenty of OS's that are not made by Micsro$soft and do not 'phone-home'.

    There is a small list

    http://www.howtogeek.com/190217/10-alternative-pc-operating-systems-you-can-install/

  8. Good luck ... by gstoddart · · Score: 3, Interesting

    How Do I Reduce Information Leakage From My Personal Devices?

    You haven't been given the same tools on your mobile device as we have on desktops, because the ad revenue from mobile devices is what everybody most wants.

    The OS, and every app largely exist to track you and serve you ads.

    I'd be surprised if there was an easy mechanism, which worked on multiple devices, and didn't require a rooted device. Because this is precisely the kind of thing which isn't nearly as available as it should be.

    Me, I'm betting the OS makers have pretty much decided no way in hell you're getting that kind of control, and if they gave it to you malicious apps would use it to take over where your device really goes.

    Being able to control that is a two way street, and the potable devices don't surrender as much control.

    --
    Lost at C:>. Found at C.
    1. Re:Good luck ... by tepples · · Score: 3, Informative

      Disable Google Play Services and obtain free apps through F-Droid instead of proprietary apps through Google Play Store. Better yet, if your phone is supported, install a third-party Android Open Source Project (AOSP) ROM such as CyanogenMod or Replicant. I can't guarantee it'll plug all leaks, but it should stop the big one.

    2. Re:Good luck ... by gstoddart · · Score: 4, Insightful

      So, root it, built it from a kit, forego the apps you really wanted, and hope you can trust these 3rd parties.

      While technically correct, people generally don't wish to build their phone from a kit and have to take that level of control. Because it's a pain in the ass.

      I've pretty much decided I'll use Firefox with no javascript or cookies enbaled for most of my browsing, I'll uninstall any app which is just a wrapper around content I can get from the web or which can't run in airplane mode, I'll mostly leave my wifi off, and when I used the native Google apps I just go "la la la". But for most people, that's not going to be acceptable either.

      Your solution? I'd probably just stop using the device altogether ... at a certain point in one's life, endlessly fiddling with technology ceases to be fun, and just becomes a chore.

      --
      Lost at C:>. Found at C.
    3. Re:Good luck ... by AlanBDee · · Score: 2

      CyanogenMod and Microsoft are getting a little too close for comfort. http://www.androidcentral.com/...

      However, the last version I used (6 mo. ago) was very nice if you didn't want to tie your device to Google. At this point for security conscious people, Apple might be the least horrible solution. I've also started to be less critical of Microsoft lately.

    4. Re:Good luck ... by castionsosa · · Score: 2

      There is a balance, but it isn't easy for most:

      1: Start with a decent phone that has an unlockable bootloader. HTC devices come to mind, as well as Google Nexus offerings.
      2: Install CyanogenMod, or a good base ROM with support. It doesn't hurt to donate some as well to said project. Gapps after that.
      3: Install XPrivacy if possible. This does an excellent job at stopping nosy apps cold.
      4: Install AFWall+. This is a last resort, but a solid defense at keeping apps that phone home from doing so.
      5: Enable mock locations, and set your GPS when on long trips.
      6: Get a good VPN service. I am a fan of VyprVPN because they had a good Linux booth at a recent convention in Austin. There are others as well. Or, you can set up one yourself on a remote virtual machine hosting service.
      7: Install F-droid and Ad-Away.
      8: For a web browser, I have found Dolphin pretty decent, and good at stopping some of the nastier stuff.
      9: Install Titanium Backup to back up apps and their data encrypted, then push them off to a cloud provider.

      Yes, this takes time to set up, but it works well, and takes very little fussing or upkeep to keep things working.

    5. Re:Good luck ... by sacrilicious · · Score: 1

      I'll mostly leave my wifi off

      Good practice, since (for example) a given grocery store can start correlating your media access address with your presence, even if they don't (initially) know your identity. Ditto anyone scanning for wifi pings on the highway.

      So here's an elaboration on keeping wifi mostly off: I have an event managing app (in my case, Llama, there are others) that I've configured to shut off wifi every time I disconnect from any network. I manually re-enable whenever I get to my destination (e.g. home); for whatever reasons, it's easier for me to remember to re-enable as I start using some service at home than it is for me to remember to disable as I leave a given location.

      I could tell my automator (Llama) to re-enable wifi when I my location gets close to work or home, but locating precisely enough to not turn on wifi at the supermarket near my house requires more battery than I like.

      --
      - First they ignore you, then they laugh at you, then ???, then profit.
    6. Re:Good luck ... by KGIII · · Score: 1

      I got so sick of my Android that I asked around Slashdot and finally went with a Windows phone. I have no shame... None... So far, I've spent zero time, relatively, screwing with it. I don't have to worry about apps stealing my information - it doesn't have any apps. Well, not any that didn't come installed. I've added zero apps. It actually updates itself when needed. I don't have to worry about the OEM, the cell company, or a strange guy named Ralph who works in accounts receivable. Nope, updates come from (for better or worse) Microsoft. It's never even offered me Windows 10 but I believe I can install it - if I want.

      I don't have a Windows computer. I do have a Windows phone. I'm pretty sure that, at this point, it's just the planet fucking with me. I don't have a giant ego but it sure seems like it's conspiring to fuck with me. Truth be told, I'm kind of happy with my Windows phone. It's snappy, has a fine battery life, and seems to get the job done. It looks like all the apps I could want are out there or in the store and most are even free (as in beer). So far? No issues. Yes, yes I said that about a Window-based phone.

      --
      "So long and thanks for all the fish."
  9. My thoughts exactly by Giant+Electronic+Bra · · Score: 1

    Windows will never really be safe, you have no idea what the heck MS is up to today, and what the next service pack will do. Just install FC23 or whatever and be done with it.

    --
    "Malo periculosam, libertatem quam quietam servitutem." -- Jefferson
    1. Re:My thoughts exactly by bhcompy · · Score: 1

      Life is not safe.

    2. Re:My thoughts exactly by tepples · · Score: 2

      Just install FC23 or whatever and be done with it.

      That's fine if you either A. own hardware compatible with Fedora (or whatever X11/Linux distribution for PCs) or B. were planning on replacing your PC anyway. Desktop compatibility is pretty good, I'm told, but laptop compatibility is not guaranteed unless it's from an explicitly Linux-friendly manufacturer such as System76.

    3. Re:My thoughts exactly by Alain+Williams · · Score: 1

      laptop compatibility is not guaranteed unless it's from an explicitly Linux-friendly manufacturer such as System76.

      That it a bit pessimistic. A quick google will tell you what issues, if any, others have had installing Linux on your hardware. I find that most works well.

    4. Re:My thoughts exactly by Teun · · Score: 1

      Over the past 12 years I've had laptops by HP, Toshiba, Asus and Lenovo, on all of them Linux worked well to excellent.

      --
      "The likes of Facebook and WhatsApp are free to those whose privacy is of zero value."
    5. Re:My thoughts exactly by Giant+Electronic+Bra · · Score: 1

      Maybe not, but we KNOW that MS is actively gathering information. I don't doubt that if you are an expert enough Windows guru there are policies and documentation somewhere to allow you to root it all out and make it behave as you want, but I can install FC23 and OOTB I'm pretty much certain its not doing something untoward. Nor will it be filled with crapware that some OEM added which totally defeats all security (MAJOR problem IME).

      Just saying "nobody is ever safe" is pretty silly though. There's a reason we don't let children play in traffic. Some things are safer than others, a LOT safer.

      --
      "Malo periculosam, libertatem quam quietam servitutem." -- Jefferson
    6. Re: My thoughts exactly by tepples · · Score: 1

      but you'd have to try pretty hard to end up with a laptop that can't run Linux out of the box.

      Laptops whose keyboard is detachable (e.g. ASUS Transformer Book T100TA) and compact traditional laptops with the same chipset (e.g. ASUS EeeBook X205TA) have been troublesome, with keyboard, touch, Wi-Fi, audio, and suspend not working out of the box for quite a while. And that's disappointing, as the same company's compact laptops used to be poster children for X11/Linux support.

  10. HHG reference by Anonymous Coward · · Score: 1

    Keep the device switched off in the bottom drawer of a locked filing cabinet, in an disused lavatory with a sign on the door saying 'beware of the leopard'

    1. Re:HHG reference by ihtoit · · Score: 2

      you've been to my house, clearly. Please turn off the light next time, hm?

      --
      Political debates have me rolling my eyes so much I think I got optical whiplash. I should sue. - Foamy The Squirrel
    2. Re:HHG reference by Mattcelt · · Score: 1

      But then they'll claim they couldn't reach me, and bulldoze my house!

  11. Self Controlled VPN + DNS Forward with Hosts by xanie · · Score: 2

    I've gone the route of using VPN to my home network, and using a DNS Server with the Hosts file installed, effectively destroying many advertising links on my mobile devices. Unfortunately, it's not perfect, but I have ad-block in nearly ever application on my iDevice now.

    --
    Fundamentalism stops a thinking mind.
  12. Re:know your enemy by Anonymous Coward · · Score: 1

    To your home server, obviously. Where you have to whitelist addresses. After a few weeks of frustration, you'll probably wish you had just used a decent RBL.

  13. Recommended by Malwarebytes by tepples · · Score: 1

    Then how about a piece of software advertised via the "Third Party Misc Tools" section of a site operated by Malwarebytes?

    Also watch for the "ad spaminem" fallacy.

    1. Re:Recommended by Malwarebytes by amicusNYCL · · Score: 4, Insightful

      You know as well as I do that his software would be better received if he maintained a web site for it and didn't treat Slashdot as his personal advertising site. When he posts 30+ wall-of-text advertisements in certain threads then his reputation gets diminished a bit. He is, by definition, a spammer, so people can be excused if they don't want to use a piece of "security software" advertised by a spammer, regardless of who else hosts or recommends it.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    2. Re:Recommended by Malwarebytes by gstoddart · · Score: 1, Flamebait

      OK, what's the "crazy, strident, screeching nut job" fallacy one?

      Sorry, I've seen the posts, and you don't get to be taken seriously by being a ranting idiot who is only a half a degree of crazy away from the time cube guy. At that point you should just accept that nobody is ever going to decide to try your "product" or listen to what you say.

      Crazy internet troll posting isn't a criteria for ever trusting the crap you keep claiming is awesome.

      --
      Lost at C:>. Found at C.
    3. Re:Recommended by Malwarebytes by amicusNYCL · · Score: 1

      Apk posts ac so you can avoid him.

      You are seriously still posting as other people, referring to yourself in the third person? Seriously? You still think people don't know that's you? Or some random AC out there just knows APK's motivation for posting as AC?

      OK, you're saying that you post as AC so people can avoid you? Then here's a question: if you purposefully post using low karma so that your spam is easy to avoid, then why do you re-post your spam when someone mods it down? And then, after re-posting your spam 30+ times in a single comment thread, why do you gloat about "defeating" the moderating system?

      I'll just burn you out of your modpoints (I've done so literally 175++ @ a time, lol) - so keep it up! I figure it this way - I can easily repost as much as I like

      But now you're trying to suggest that the reason you post as AC is so that it's easy for people to avoid your spam? I don't buy it, APK. I think you would post at +5 if you could. The reason you post as AC is because, if you had a registered account, it would quickly lose karma and you would be posting at -1. So you stay as AC to keep your posts at 0 instead of -1. You also stay as AC because when you've tried crap like this on other forums they just ban you. You've finally found a place where you can't be banned, where you can post your spam all day long if you want to. That's why you're AC.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    4. Re:Recommended by Malwarebytes by amicusNYCL · · Score: 1

      Here's APK thinking that "outsmarting" means posting as someone else and referring to himself in the third person. Soon he'll be along to post as himself thanking himself for posting as someone else. This is APK "outsmarting" someone.

      an inferior competitor

      APK insult? check

      advertiser lackey

      APK insult? check

      in fear of apk's superior methods

      APK insult? check

      failing vs. apk

      APK insult? check

      Your favorite color truly must be transparent

      APK insult? check

      We all see through you easily

      APK insult? check

      You can't handle that apk outsmarts you at every turn

      APK insult? check

      If you're trying to make apk look good you're doing a marvellous job.

      APK insult? check

      Yeah, there's noooooo way that's APK posing as someone else. Can't be that. An AC using all of APK's lame insults and backing him up, when no other people post to back him up, is definitely not APK. Must be some completely separate person, who didn't bother to register an account, but wants to post a message in support of APK anyway (and apparently familiar with my post history, as if I'm someone notable here).

      Man, I really wish that I could be like APK, but he's just so damn clever and smart.

      But wait, APK, you forgot to answer my question. I'm sure that was just an oversight on your part since you were too busy outsmarting me. Here, let me ask it again:

      OK, you're saying that you post as AC so people can avoid you? Then here's a question: if you purposefully post using low karma so that your spam is easy to avoid, then why do you re-post your spam when someone mods it down?

      You have an answer to that question, right APK? Go ahead, show me how smart you are.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    5. Re:Recommended by Malwarebytes by amicusNYCL · · Score: 1

      No APK, not every AC poster is you. Just the ones who defend you using the same lame insults or grammar structure that you use. And especially the ones who cite my post history, as if there are people out there not connected to either you or I who decide to spend the time going through my post history, as if they have nothing better to do. What's more, you know that I'm right, because you're sitting there actually making those posts. You know that it can't be proven, and you know that I'm right. You also know that you are being dishonest when you make those posts representing yourself as someone other than you. You know you're being dishonest, and so do I, even though I can't prove it based on the information that Slashdot shares about posters. You truly are an Anonymous Coward.

      What's the first rule when dealing with spammers, APK? Spammers lie. You prove that statement true every time you post and refer to yourself in the third person, because doing so is dishonest. You are representing yourself as someone you're not, and you know that to be a fact. As far as I go, I *am* "amicusNYCL", that is my identity here. I don't post anonymously except if I have sensitive information to reveal, and I don't have any other registered accounts. amicusNYCL is my only account, it is my Slashdot identity, it is who I am. You can look through my post history and see every post I've ever made, other than the handful that had sensitive information which I posted anonymously. My record is there for all to see. Yours is not, because you are an Anonymous Coward. I know this to be true also. You can accuse me of having however many accounts you want, but I know for a fact that I have a single account, just like I know for a fact that you are intentionally dishonest with everyone by representing yourself as something that you are not. Every time you accuse me of having multiple accounts it just further cements the fact that you have no idea what you're talking about. You know that you have no idea, but that doesn't stop you from willingly saying things that are not true. That's how you represent yourself, as an intentionally dishonest person. You can post your anonymous messages of support to yourself all you want, but at the end of the day you know that you are a dishonest person, and I know it too.

      What's the first rule when dealing with spammers, APK?

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    6. Re:Recommended by Malwarebytes by amicusNYCL · · Score: 1

      Yes, you are APK. Which Anonymous Coward around here talks about people "eating their words" all the time? Which Anonymous Coward incessantly posts links to other Slashdot comments backing up his non-points? Which Anonymous Coward posts in support of APK as if APK has some legion of anonymous supporters but for some reason people who are actually registered don't seem to show up to support APK? Who else do you think is reading this thread, APK? It's just you and me, buddy.

      I'm not apk.

      APK, what's the first rule when dealing with a spammer?

      Search your feelings; you know it to be true.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    7. Re:Recommended by Malwarebytes by amicusNYCL · · Score: 1

      I'm not trying to stop you from posting, APK, I'm only trying to stop you from spamming. Getting you to admit that you are also a liar posting as other people would be a bonus, but I'm not exactly holding my breath on that one. Because I know what the first rule is when dealing with spammers.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    8. Re:Recommended by Malwarebytes by amicusNYCL · · Score: 1

      I've never tried to stop you from posting, APK. I don't submit all of your posts to Steve, only your spam. I like how you keep bringing up Article 19, since that was a discussion of an advertising POS trying to use Article 19 to justify why they should be allowed to advertise to everyone. I enjoy the fact that you're trying to use the same argument as an advertising POS to justify your own spam.

      I've always said you're free to post whatever you want here. People are free to mod you down, and once you take that step of re-posting your crap because it got modded down then that's when you become the spammer that you've always been destined to be.

      I also like how you keep trotting out the tired old "well you can't prove me wrong on hosts" line, as if I've ever even attempted to do that. Once again, you're playing a game that only you are playing, and you think you're winning. I have nothing to say about hosts files, and I never have. I have nothing to say about your technical skills. I've only ever criticized your spam. You want to talk about staying on-topic? You need to stay on-topic. I'm not talking about hosts files, I'm not talking about your technical ability, I'm talking about you spamming Slashdot, so stay on topic.

      You want to spread information about hosts? Fine, post your advertisement once per topic if it makes you feel good, and if people think that it is valuable on-topic information then they will mod it up. People mod it down when they see it posted multiple times in a thread and they see it rightly for what it is: spam. If you don't want it to be spam, then don't repeatedly post it in the same thread, and try to actually engage what people are talking about instead of just pasting your canned advertisement all over the place.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    9. Re:Recommended by Malwarebytes by amicusNYCL · · Score: 1

      The master of evading questions is really telling me to stop evading? Here, I'll post this now a fourth time:

      OK, you're saying that you post as AC so people can avoid you? Then here's a question: if you purposefully post using low karma so that your spam is easy to avoid, then why do you re-post your spam when someone mods it down? And then, after re-posting your spam 30+ times in a single comment thread, why do you gloat about "defeating" the moderating system?

      Am I on topic? Yes, scroll up and look at the title of this thread.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    10. Re:Recommended by Malwarebytes by amicusNYCL · · Score: 1

      You're destiny is blowhard loserville.

      I remember 5th grade too, those insults were fun. Nice grammar, by the way.

      You claim you're a programmer: Where's your ware? It's not!

      What? It's not what? Have you been drinking, APK? Did you miss your medication? Did you take your medication then start drinking?

      You're dead afraid of apk and his facts on hosts superiority to that bloated junk you champion stupidly.

      The only thing I "champion" is clearing Slashdot of your spam.

      Want to know a secret? I have 3 privacy/security browser extensions on Opera right now, and ABP is not one of them.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  14. It comes down to VPN settings and tuning effort by Nonesuch · · Score: 5, Informative

    If you don't want to root your device and don't want to tunnel all your traffic to a VPN server (adds latency) , you can use one of the Android "NoRoot" firewalls that routes app traffic through a local VPN for inspection and filtering. This uses more CPU and battery, but all protection is done within your mobile device. It takes a lot of manual effort to build a policy that blocks undesirable traffic and still lets apps work.

    You can tunnel your traffic to a commercial VPN provider, but now you are trusting them to maintain performance and not invade your privacy, and they won't have any visibility to the contents of traffic that is inside SSL/TLS encryption, for better or for worse (e.g. cannot inspect Android apps downloaded as APKs from SSL websites).

    Better yet, you can root the device and add your own Certificate Authority and firewall settings. Now you can use your own VPN to ensure all traffic from all applications goes to a remote VPN headend for inspection/modification, even traffic the device thinks is encrypted with SSL. If you have many users going through the same VPN, you can do things with packets and headers to make it difficult for CDNs and ad networks to identify individual users who are all behind the same gateway.

    If you have more time than money, you can build up a VPN headend with open source tools (e.g. Squid+SSLbump)., and write policy to block traffic that doesn't meet your security policy, and to log what your device tries to send. You can use header modification to strip out identifying information and cookies.

    If you are a business or otherwise have more money than time, the expensive approach is to use a commercial firewall appliance that has a client VPN and URL filtering service (e.g. Checkpoint, Palo Alto, Juniper, F5, etc). You set up the VPN to send all your mobile device traffic through the firewall, and use firewall policy to decrypt SSL, inspect APKs, and block ads. This solution is very effective at blocking ads and undesirable network traffic, and can often detect or block malicious APKs and other attacks.

  15. got root? by tepples · · Score: 2

    You can't install it as an APK on your Android device because only root can write to the hosts file, and by default, only an Android device's manufacturer (not its owner) is root.

  16. Xprivacy by snarfies · · Score: 2

    1) Root your phone. If you don't have full control over your device, you have no chance.

    2) Install Xposed Framework (http://repo.xposed.info/)

    3) Install Xprivacy (http://repo.xposed.info/module/biz.bokhorst.xprivacy)

    Xprivacy doesn't block your programs from sending whatever they want to send - if you try to do that, most programs will crash. Instead, it feeds your programs completely false information. Boom, you win.

    1. Re:Xprivacy by hankwang · · Score: 1

      Does Xposed stuff work on Android 5/Lollipop? At least when I upgraded from 4.4 to 5.1, most of the Xposed plugins that I had stopped working.

    2. Re:Xprivacy by castionsosa · · Score: 1

      I just wish it had Android 6.x support. :/

  17. Easy.... by bobbied · · Score: 1

    Two things...

    1. VPN your network connection.

    2. Don't put anything on your device you wouldn't want to publish on line.

    Apart from that, who cares? IF you do, you are either worried about stuff you shouldn't for health reasons, or stupid to put information into that portable computer you call a Smartphone/Tablet..

    --
    "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    1. Re:Easy.... by Anonymous Coward · · Score: 1

      This is dumb. your contacts list alone is subject to massive abuse if posted alone. Do you really use your fucking phone with no contacts, names, email addresses, or phone numbers? You are fucking idiot.

  18. Do a whitelist of domains to trust by Anonymous Coward · · Score: 1

    I think you're running into the limitations a blacklist has -- you can't effectively block all known "bad" domains because there are simply too many.

    It'd be more efficient to create a whitelist of all domains/servers you'd like to access instead, since you'd have that information much more readily available.

  19. Compatible device? by truck_soccer · · Score: 1

    Install ubuntu touch.

    1. Re:Compatible device? by Gojira+Shipi-Taro · · Score: 1

      Hahahahaah!
      wait, you're serious? Allow me to continue,

      HAHAHAHHAHAHAHHAAHHAH

      Half baked mobile OS that was what, three years late to the party? No.

      Besides, then you're just leaking data to Canonical.

      --
      "Oh my God. This is terrible. This is the end of my Presidency. I'm fucked."; ~ Donald J. Trump
    2. Re:Compatible device? by truck_soccer · · Score: 1

      I installed it on my nexus 7 because I like to tinker, and it was....well....gross.

  20. Double-ziplock bags by Theovon · · Score: 1

    I prevent leakage by using those little plastic bags with the two rows of ziplock. Especially the ones with the yellow and blue making green (even though it’s actually magenta and cyan that make green).

  21. Here's how to do it by Artem+S.+Tashkinov · · Score: 5, Informative

    Here's my old comment verbatim:

    First of all there are immortal cookies (infinite cache entries created specifically for your unique PC). Secondly, there's a unique combination of your web browser + OS + fonts + plug ins: https://panopticlick.eff.org/ Thirdly, there are unique patterns in your behaviour (websites that you visit and how frequently you do that) and other wonderful metrics to trace you.

    If you want to avoid being traced and tracked there's just one way:

    • You buy a single time anonymous SIM card with Internet.
    • You go to some public place where there no web cameras installed or you're not under their monitoring.
    • You browse the web using at least TOR, or even better a combination of VPN + TOR.
    • You use the most common computer OS (Windows 7 64), the most common web browser (IE11/Google Chrome or Mozilla Firefox) and the least number of browser plugins and extensions.
    • You do NOT login using Facebook/Google/Microsoft/Yahoo/etc. services, because these companies trace your presence on unrelated websites using various "Share Me" options.
    • You do NOT use Skype/WhatsApp/Vibe other apps.
    • You completely destroy your browser profile and this SIM card after you're finished.

    This is actually a recipe for browsing the web anonymously however this is the reality of the modern web - not to be traced means to be anonymous as much as possible.

    All other ways are only half measures. Or, like people have suggested, you may stop using the Internet completely. It should have long been renamed to a "Trackingnetwork".

  22. Read how Black Hats Work by BoRegardless · · Score: 1

    If you really want to start limiting info gathering, I would suggest a 2nd phone for digital work.

    Your first phone might just be analog voice only, or at least you don't do digital on it.

    Move the digital phone from ATT to Verizon every month back and forth with a new SIM card and disposable email addresses & new phone numbers if you really want to limit access.

    Connecting through your lapto through a cell phone hotspot connection isolates it from WIFI snooping.

  23. Brave might suffice your browsing privacy needs. by Qbertino · · Score: 2, Interesting

    Brave beta is just out. A project from the former CEO of Mozilla.
    AFAICT out of the box one of the safest and most private browsers around.
    Definitely a leg up from the usual suspects.

    --
    We suffer more in our imagination than in reality. - Seneca
  24. Firewall by aaarrrgggh · · Score: 1

    Personally trying to set up a Ubiquity EdgeRouter to do the same. In my case, there are just a few devices I don't want to have any external access, so I will have a dedicated SSID for them and provide local network access but no routing. Other things I will have to manually switch a network port for a device to give access to the Internet.

    Haven't hit the point yet where I feel a need to do a transparent proxy; my goal is mainly to strip "cloud" functionality off devices that I don't want to have it.

    Try too hard though, and you will drive yourself batty.

    (For the iPhone, I use 1-Blocker. It does a pretty good job, but far from perfect.)

  25. Fox Mulder by U2xhc2hkb3QgU3Vja3M · · Score: 1

    Trust no one.

    1. Re:Fox Mulder by burtosis · · Score: 1

      Not even yourself.

  26. Otterbox! by yodleboy · · Score: 1

    If it can keep crap out, it can keep crap in right?

    1. Re:Otterbox! by wysiwig3 · · Score: 1

      Yes! The Otterbox Faraday Edition.

  27. Even simplerer by U2xhc2hkb3QgU3Vja3M · · Score: 1

    Don't buy any devices.

  28. Re:Perhaps Not Simple but ? by turkeyfish · · Score: 1

    If that is the case, then shouldn't it be possible to create a program that pre-cashes all outgoing streams prior to their being sent and then inject meaningless random signals into the stream so that the receiving end simply gets garbled data?

    This way one could conceivably "randomize" data except that you specifically wish to transmit. Presumably, such an algorithm would intercept all interrupts, trace their source, and randomize as required. No doubt it would greatly slow the system, but would it not in theory work?

  29. Re:Brave might suffice your browsing privacy needs by Anonymous Coward · · Score: 1

    Definitely a leg up from the usual suspects.

    Like a dog with it's leg up in the air and waiting for the piss to come. Because that's what brave is. As in you are brave if you think that a YACC (yet-another-Chromium-clone) is going to be the end all privacy-conscious super-powers-to-the-user browser of the future then you deserve to be pissed on.

    You want privacy? NO TURN-KEY SOLUTION WILL EVER BE COMPLETELY PRIVATE. Start with TAILS Linux and a TOR enabled browser and JavaScript disabled then you'd be taking a step in the right direction, but with much distance still to travel since it will require drastic changes to your online habits to remain truly private in today's world.

  30. Re:Perhaps Not Simple but ? by omnichad · · Score: 2

    I have no idea what you are saying.

  31. Re:know your enemy by denis-The-menace · · Score: 1

    BB10!

    --
    Obama's legacy: (N)othing (S)ecure (A)nywhere and (T)error (S)imulation (A)dministration
  32. For Computers by psergiu · · Score: 1

    For Computers - OS X and Little Snitch https://www.obdev.at/products/...
    A bit costly but it does the job you want.
    Also, OS X being a UNIX machine, you can use your hosts file.

    --
    1% APY, No fees, Online Bank https://captl1.co/2uIErYq Don't let your $$$ sit in a no-interest acct.
  33. Re:Brave might suffice your browsing privacy needs by Anonymous Coward · · Score: 2, Informative

    The last I read, Brave will inject it's own ads. No thanks.

  34. Not Really by Giant+Electronic+Bra · · Score: 1

    I've been running Linux since kernel 0.99a (the first one that had networking that really 'just worked'). I can count the number of times an x86-based piece of hardware that I could ATTEMPT to boot an install medium on failed to actually install without some sort of effort (and in EVERY case I got the machine working by searching around online for a bit and adding a kernel boot param). This includes many different laptops. I think there've been a very few cases where some ancillary piece of hardware on a laptop didn't actually have a driver, but it was always something weird. I bought a newer Logitech USB headset last year, and never could get Linux to work with that, so its not that ONE HUNDRED percent of stuff always works, but the ratio is 99% at this point, even of new hardware.

    Truth is there's enough people out there running linux on most hardware, often as parts of various products where the consumer never sees the OS and doesn't need windows, so that few vendors avoid Linux support anymore. Even weird stuff like my Chromebook, and various oddball laptops all seemed to work. Truthfully even if there's a weird peripheral on them someone has developed support for it.

    Frankly its gotten to the point where you just don't even need to consider hardware compatibility, though certainly if I am going to build a machine or buy a printer or whatever I'll go find out how well the hardware support works and buy what is likely to be 'the best'.

    While I'm clearly a 'Linux guy' I'm far from a ravening hardcore 'true believer' either. Its just that over the years, certainly for my purposes, its proven to be most useful. The fact that its relatively secure and entirely free of 'surprises' is a bonus.

    --
    "Malo periculosam, libertatem quam quietam servitutem." -- Jefferson
    1. Re:Not Really by KGIII · · Score: 1

      I go through a lot of hardware. Linux works on all of it. Well, all of it that I've tried. I have hardware that I've never actually turned on. I have hardware that is still in unopened boxes. I suspect Linux works on them all. If it doesn't work by default (and it generally does) then I can usually find someone else who has made it work. Sometimes, I'm the guy who makes it work and sometimes I'm the one who asks for help. Usually, it just works.

      --
      "So long and thanks for all the fish."
  35. Re:Perhaps Not Simple but ? by mikael · · Score: 1

    turkeyfish is suggesting that the TCP/IP sockets layer attempts to cache all the data being sent. Unfortunately, this isn't going to work because the reason the application stalls is because the TCP/IP layer is attempting to request a DHCP address from the network (which isn't going to happen), look up the address of a particular hostname (which isn't going to happen either), then stalling again when it tries to open a synchronised two-way connection with the desired host (which isn't going to happen as well).

    --
    Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
  36. Adult Depends by trevc · · Score: 1

    Adult Depends should work (or were you talking about personal electronic devices? I only read the headlines).

  37. Re:Perhaps Not Simple but ? by vtcodger · · Score: 1

    "I have no idea what you are saying."

    Proof that the scheme works.

    --
    You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
  38. Re:Perhaps Not Simple but ? by omnichad · · Score: 1

    My subthread was about this tracking being better (or at least unnoticeable) if performed asynchronously to the main program thread (it works offline just fine). They likely use the word cache (or cash) when they meant buffer. And changing the outgoing data is just going to cause an error response from Apple and still put the app on hold . Why not just block the request or simulate a dead connection (airplane mode) instead? There's no point interpreting his post, it's worse technobabble than you'd find in an episode of CSI: Cyber.

  39. With Hammer by nirved · · Score: 1

    Use the force. Repeat until smashed into gray goo.

  40. Re:Perhaps Not Simple but ? by bigtreeman · · Score: 1

    bamboozled by bullshit

    --
    Go well
  41. You'd be surprised how much you lose by Cute+Fuzzy+Bunny · · Score: 1

    About 18 years ago, well before our current models of internet, social media and data collection were even born I had an interesting experience.

    I applied for a high end insurance package with a lot of umbrella/liability protection that came at a very low cost. The cost was low because as my insurance agent put it "They're going to crawl up your with a microscope the size of a small country". Since I've held top secret and nuclear q clearances, this didn't really bother me.

    About 3 weeks later I get a call from an investigator asking what my association was with an ex-girlfriend's ex-husband. I'd actually never met him and only dated her for a few months and there was very little paperwork of any form where we'd be 'linkable'. As in she may have filled out some forms with my address/phone as an alternative contact on her health insurance or at Blockbuster. And yet here I was answering questions about how well I knew her ex. As it turns out, back in the 80's he'd been implicated in some insurance fraud.

    All without access to any of my internet doings, because it barely existed at the time.

    Right now I know everything I buy at a store with a loyalty program, everything I buy from credit cards or on an online retailer is fully sorted and collated and probably sold many times. My picture is taken dozens of times a day when I'm not aware of it, with many of those photos linked to usage of a payment method or some other means of identifying me and the picture.

    I guess the long and short of it is that someone somewhere knows a hell of a lot more than you think they do, even if you shop with cash and a mask.

    These days I'm more interested in simplicity and convenience. I use a chrome box and a chrome book with 1tb of Drive storage. Its unlikely that something can persistently get into either product without physical access. I'd suspect that google has far better protections for my data than I could ever provide even if I were an expert in every aspect of security and maintenance. I'd imagine that they follow far more rules about who and what can look at my data than the local supermarket does.

    I also imagine that if I used some super secure hardware with a super secure open sourced everything, a VPN and encrypted everything I might be safer. From what is a different question. I'd also imagine that I'd land on some watch list and would be okay with that because I'd imagine that a lot of people who would stray so far to secure their privacy are doing it because they're routinely committing crimes or planning to do so.

  42. Re:Duct Tape by Ann+O'Nymous-Coward · · Score: 1

    Well that explains the screams coming from your toilet.

  43. I'm Old School by sizzlinkitty · · Score: 1

    I've handled this issue in the past for devices I just use for web surfing by not setting a default gateway on the network interface (via dhcp most of the time). Then I use socks proxying over ssh to a jump box on my network with firefox for my web browsing (Firefox is loaded with ABP and Ghostery).

  44. Re:Perhaps Not Simple but ? by KGIII · · Score: 1

    > CSI: Cyber.

    Ha! I Googled. That actually exists!

    Err... I don't get out much.

    --
    "So long and thanks for all the fish."
  45. Turn it off, select devices with care by AHuxley · · Score: 1

    If a smart TV has ethernet and wifi, never use it. Use the USB or that data connections to "sneaker net" any files to the device.
    Buy a camera thats a camera and not a networked database device with a good lens. Select the images you like and upload them later or from an OS.
    Sort the images on a computer and select only the images you want to share. Understand that any free cloud, hosting, advertizing network or OS uploads will have all images examined for facial recognition, for images of interest of the security services, NGO's and police.
    Facial recognition: Privacy advocates raise concern over 'creepy' system Government says will enhance national security (10 Sep 2015)
    http://www.abc.net.au/news/201...
    Stop uploading your information to turn key, free services supplied by advertizing brands.

    Understand what Microsoft, Apple and Google do and offer to profit from you and your use of their products and services.
    Securing against cloud and networked products is not a good idea. They have your data just by using their products.
    Use MS or Apple OS for a limited set of applications. Play games on MS, enjoy media on Apple. Anything more interesting and keep it to an OS that you understand and know will not "phone home" or use cloud AV on every file.

    The need for a device that can live stream video is useful, ensure that that device is only used for that. If lost or taken, all that is lost is that device and not other data sets, files, contacts.

    --
    Domestic spying is now "Benign Information Gathering"
  46. Re:Perhaps Not Simple but ? by rtb61 · · Score: 2

    Best bet is for a fire wall router to block all undesirable IPs out and in and this updated from the internet, with user interaction required. Trying to secure an OS from perv http://www.urbandictionary.com... OS manufacturer, is impossible, the can straight up go around any software blocks you put in and redo them every single update. So either drop the OS or upgrade to a secure modem router designed with the express purpose of blocking pervert corporations. Windows anal probe 10, specifically requires a redesign of the firewall router to keep M$'s prying eyse out of you system. You might very need to check and approve of disapprove every single IP address the router firewall attempts to access. So the firewall reports back with a delivered page for each new IP access with a request for temporarily approve, allow or block, with details gathered about the site and presented, before access to the site is allowed.

    --
    Chaos - everything, everywhere, everywhen
  47. Re:APK Hosts File Engine uses that & 9 more by Anonymous Coward · · Score: 1

    So, I've been trying out your HOSTS list. It has blocked all these web sites:

    adf.ly
    afterdawn.com
    betanews.com
    bit.ly
    bleepingcomputer.com
    cbc.ca
    cdfreaks.com
    cloudfront.net
    cnbc.com
    cnet.com
    cnn.com
    destructoid.com
    download.cnet.com
    foxnews.com
    guru3d.com
    hothardware.com
    linux.com
    list-manage.com
    mirror.co.uk
    neowin.net
    netdna-cdn.com
    netdna-ssl.com
    netflix.com
    nytimes.com
    opensubtitles.org
    osnews.com
    pcper.com
    rockstargames.com
    seattletimes.com
    slickdeals.net
    sourceforge.net
    thesmokinggun.com
    timesunion.com
    tomshardware.com
    tomshardware.net
    usatoday.com
    washingtonpost.com
    yuku.com

    Some I can understand, but most of them just seem like overkill

  48. To stop personal data leakage by mjwx · · Score: 1

    To stop leakage, buy an Ipad with wings.

    --
    Calling someone a "hater" only means you can not rationally rebut their argument.
  49. Re: Perhaps Not Simple but ? by omnichad · · Score: 1

    It's worse than it sounds. I watched the first episode and laughed. It has worse technobabble than regular CSI's "GUI interface using visual basic to track the killers IP"... By far.

  50. he wants a list by gl4ss · · Score: 1

    he seems to know already you need to block at the router.

    what he is looking for is a simple list. amazingly nobody has posted one.

    one problem is that you need to keep updating the list, because microsoft keeps adding new to the list.

    --
    world was created 5 seconds before this post as it is.
  51. Financial models is the key by shanen · · Score: 1

    Only mention of "financial models" in the thread? But that is the key.

    IF (the big "if") the financial model depends on protecting your privacy, then your privacy might get protected.

    If the financial model depends on abusing your privacy, then you are firetrucked.

    Small solution: Persuade the google (good luck, Mr Phelps!) to add a financial model tab to Google Play. The developer would explain what the financial model is, and the google would add a secure annotation about any part of the financial model they can confirm. This would give us some basis to decide which apps might be legit. (However, as regards the google, remember that their operative motto now is "All your attention are belong to us.")

    Big solution for the push advertising part of the problem: Turn the entire system on its head with a privacy-protection intermediary for a pull-driven advertising system. (Details of one possible implementation available upon polite request.)

    --
    Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
  52. Re: Perhaps Not Simple but ? by omnichad · · Score: 1

    For not having watched television for 3 decades, you seem to be able to practically quote The Simpsons:

    We can't bust heads like we used to, but we have our ways. One trick is to tell 'em stories that don't go anywhere - like the time I caught the ferry over to Shelbyville. I needed a new heel for my shoe, so, I decided to go to Morganville, which is what they called Shelbyville in those days. So I tied an onion to my belt, which was the style at the time. Now, to take the ferry cost a nickel, and in those days, nickels had pictures of bumblebees on 'em. Give me five bees for a quarter, you'd say.

    Now where were we? Oh yeah: the important thing was I had an onion on my belt, which was the style at the time. They didn't have white onions because of the war. The only thing you could get was those big yellow ones...

  53. Re: Perhaps Not Simple but ? by omnichad · · Score: 1

    I'm told I can get OTA, even with just an internal antenna, but I've never actually tried it and I don't believe them anyhow.

    I do use OTA. But I have a poor connection and poor aim - it's inside my attic pointed at a metal vent and with trees and a building in the way. And for that matter, I think the F-connector was crimped onto the cable wrong at the attic end. The antenna itself is half a broken outdoor antenna that I got for free from a friend. At 40 miles out, I get all the major networks in HD (ABC, FOX, CBS, NBC, CW, PBS). It's better quality that satellite or cable, since they recompress and rebroadcast from antenna source anyway.

    And if you prefer to do your viewing on a computer screen while multitasking, get an HDHomerun network tuner.

  54. Re: Perhaps Not Simple but ? by KGIII · · Score: 1

    I might have to look into it for the missus. I guess I can get her satellite if she really wants it. The place is covered in solar panels, it might as well have an uglier doodad sticking out of it somewhere.

    According to this site:
    https://transition.fcc.gov/mb/...

    I get nothing...

    I could have sworn there was a local site from maine.gov but I am not seeing it. You can put in Rangeley, Maine. My home is actually about 24 miles away from the village center. That site says nothing reaches me but neighbors have said that I should get it. I'm also way, way up on the side of a hill. I seem to recall one neighbor telling me that they even got some Canadian channels with their aerial antenna. I'm a wee bit more than 40 miles out - probably closer to 120 miles out, as the crow flies.

    I am now a bit curious. I'll have to poke at it when I get home. It'll give me an excuse to get up on the roof and check the solar panels and see if any damage was done during the winter. Thanks! (No novel this time, I am tired.)

    --
    "So long and thanks for all the fish."
  55. Re: Perhaps Not Simple but ? by omnichad · · Score: 1

    Way up on a hill will greatly increase your range (as will having a mast otherwise). In fact, instead of putting your street address or zip, put in your direct latitude and longitude (zoom in on Google Maps and pull it from the URL as a cheap trick). Or drag the marker. That web site takes elevation into account. I always used antennaweb.org but I like this a lot too. No parameters on either site to adjust for a taller antenna or a stronger gain antenna.

    Problem with these sites is that if you're "out of range" it tells you nothing. I put in 44.8960003,-70.5338503 (which is 10 miles SE of Rangeley) and it lights up with several channels. Even Rangeley Planatation lights up.

    I dragged the marker to the tops of hills (mountains?) all around Rangeley and get channel listings showing. Just not in the valleys (where the larger hills cut off the signal).

  56. Re: Perhaps Not Simple but ? by KGIII · · Score: 1

    I'll definitely have to give it a shot? I'm not completely anti-television or anything. I'm just not into TV enough to have a dish on my house. I'd probably watch Nova or Frontline if I remembered when they came on. With a TV card, I can even go so far as to do my own DVR thing. That's good thinking, thanks! It might even keep the missus amused but she doesn't seem to be into TV a whole lot either. She just kind of turns it on and meanders around aimlessly. She's kind of taken to playing with VMs of varied OSes as of late. She does the same thing in all of them (mostly contacting friends back home and reading a few sites that she seems to like) but at least she's having fun and mostly harmless.

    I guess one technically has to be a mile high to be a mountain or something like that? If that's true, Maine only has one technical mountain. The rest are just hills. They're old and have been rubbed off by glaciation. They're not majestic, like the Rockies, but are old and wise mountains. (That's really what they remind me of.)

    So, I'm probably not technically on the side of a mountain at home. At least not on a mountain that's a mile high. I just typed in Rangeley (I don't actually have a zip code of my own) but moving the marker does seem to indicate more than if I type in the name. So, I might get something up on the house. I'm also on the "right" side of the mountain - so I'm exposed to the SSE which lines me up with the side to get reception.

    I have a friend with a rather fancy transit. I think that's what they're called. At any rate, leveled out and looking through it has shown that my house is quite a ways up there. The cell phones and GPS all say different heights. All of them. Even if they're on the deck railing, they say different heights. Otherwise, I'd share that information too but it so happens that I not only don't remember it, it's seemingly pretty inaccurate. As I recall, they had as much as 50' of difference between them? (We tried a few in one day, one of which was even a fairly expensive Garmin or the other brand - TomTom I think.)

    *snickers* Someone has come along and moderated me as OFF TOPIC. I mean, really? It's not incorrect but that's kind of what I do. I might be on-topic once in a while but it's not intentional! Pfft... Slashdot *IS* my personal blog. Thank you. It was good for a chuckle. I'd say I'm sorry but I'd rather not lie and I am not sorry. In fact, I'm so not sorry that I'll probably do it again tomorrow. 'Cause that's what I do.

    Either way, I'll certainly have to look into it. From the looks of things - and doing a little more research, I might not even have to go with an outdoor antenna. I do not actually have an attic (double envelope house - salt-box style if you're curious) but I can probably figure something out internally - if needed. I mostly just stream stuff. I'm not actually sure what I'd do if I didn't have broadband. I've not had it before but I always had something to put on in the background. If it gets really rough, I can read.

    --
    "So long and thanks for all the fish."
  57. iptables by NewYork · · Score: 1
  58. Re:AmicusNYCL's "APKolypse" #2/2 by amicusNYCL · · Score: 1

    APK, you forgot to answer my question for a third time. Here it is again:

    OK, you're saying that you post as AC so people can avoid you? Then here's a question: if you purposefully post using low karma so that your spam is easy to avoid, then why do you re-post your spam when someone mods it down?

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  59. Re:AmicusNYCL's "APKolypse" #2/2 by amicusNYCL · · Score: 1

    None of apk's downmodders prove him wrong on his points on hosts in his posts so it's definitely sockpuppeteers from adblock shills like you and advertisers that bought almostalladsblocked out so it doesn't work right by default who farm karma to abuse it downmodding is who is doing it.

    Take a deep breath and try that sentence again.

    None of your downmodders prove you wrong? News flash: people who moderate a thread cannot post in that thread, and vice-versa. So, yeah, people who want to hide your spam don't also take the time to try and address any points you make, they just hide your spam. That's how it works here. Welcome to Slashdot, Alex.

    Which Anonymous Coward incessantly talks about how no one can prove him wrong? Which Anonymous Coward accuses everyone of being a sockpuppet? Which Anonymous Coward accuses people of being adblock shills? Which Anonymous Coward uses the term "almostalladsblocked"? Which Anonymous Coward keeps trying to post as other people and thinks that no one knows what he's doing? What's the first rule when dealing with a spammer?

    I suspect you of doing it in fact amicusnycl.

    I'm sure you do. I actually believe you when you say that. But you're wrong about it, and I know for a fact that you're wrong because you're talking about me, which just goes to reinforce my opinion of you and what you think about me. I haven't used my mod points in probably 3 months, I honestly can't remember the last story I modded. They keep giving me 15, but they keep expiring before I use them.

    Ever wondered why slashdot wouldn't help you when you said you wrote dice?

    No, I didn't, because I realize that the management of Slashdot doesn't really give a shit. If they gave a shit about making Slashdot a great place then it would support Unicode. They bought the site and have been just riding it out since then. BTW, Dice does not own Slashdot any more.

    By the way, which Anonymous Coward knows that I wrote to Slashdot about filtering out your spam?

    It was the same when you tried to get apk's software removed by malwarebytes hphosts and they wouldn't.

    Steve still thanks me when I send him your spam reports. He's a pleasant guy to deal with. You've seen what I've sent him, you know that I'm not being emotional or vindictive, I just send him the collection of your spam links when you flood a story.

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  60. Re:AmicusNYCL's "APKolypse" #2/2 by amicusNYCL · · Score: 1

    I figured you would offer some lame non-reply. I was right.

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  61. Re:AmicusNYCL's "APKolypse" #2/2 by amicusNYCL · · Score: 1

    Asking again. Question: You on topic?

    Definitely.

    You can't prove apk wrong on hosts.

    I've never attempted to. I don't care to.

    I figured you'd avoid a simple question with a lame evasion.

    Truly, you are a master of the "I know you are but what am I?" school of debate, APK.

    This is what your little fit is down to now, throwing out the same lame non-insults and evading any questions about your spamming habits or the fact that you dishonestly misrepresent yourself. You're a paper tiger. You're pathetic. You think that if you claim victory enough times then people will start to believe you've won. You haven't won anything, you're desperate to appear intelligent or meaningful when in fact you're a spammer relying on anonymous posting to try and make yourself look good. And, what's worse, you think that people can't tell. You won't even sign your posts any more, just stringing along some vain misguided attempt to appear respectable. No doubt at some point you'll decide again to post "as yourself" where you once again declare victory, once again point out that I'm not proving you wrong when I'm not even trying to, and throw out the same stupid taunts and insults while trying to show "support" coming from yourself posting anonymously.

    I feel bad for you, man. You've got a lot of growing up to do.

    Suck my balls.

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  62. Re:Bwaahahaha "browser extensions"? LOL! by amicusNYCL · · Score: 1

    Haha! Wow, I really hit a nerve there, didn't I?

    It's nice to see you come out of your anonymous shell and post as you again. I think that's a defensive mechanism, when you don't like what's happening you try to hide and play anonymous and write messages in support of yourself, that's your defensive mechanism. Too bad you can't do that offline, huh?

    Seriously man, you've got a lot of growing up to do. And seriously, suck my balls.

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  63. Re:Bwaahahaha "browser extensions"? LOL! by amicusNYCL · · Score: 1

    An Anonymous Coward calling out my name, huh? You're a funny guy, APK.

    Seriously though, grow up. And, really, my balls aren't going to suck themselves.

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  64. Re:know your enemy by allo · · Score: 1

    > Block things like CRL lookups with your proxy.
    You think of OCSP. CRLs are downloaded once and then checked locally.

  65. Re:Bwaahahaha "browser extensions"? LOL! by amicusNYCL · · Score: 1

    No, APK, it's still obvious when you post. Guess who the only person is that I've ever seen capitalize my username.

    Seriosuly man, this is getting really sad for you at this point. I'm sorry you feel the need to keep on replying to everything that I post. Really, it doesn't look good. Linking to this discussion does not look good for you. You need to just drop it and move on.

    And, seriously, grow up.

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  66. Re:AmicusNYCL's "APKolypse" #1/2 by OffTheWallSoccer · · Score: 1

    (Real users like my program. It gives more speed, security, reliability & anonymity - enumerated list above doesn't)

    ... apk

    That may be true, but your constant spamming annoys a much larger group (not that you give a shit).

    Worse than your spamming is your trolling. Again, not that you give a shit. I only ever see your posts because I browse at -1 so that when I have mod points I can mod-up underrated posts. I don't need to waste my mod points on your posts because others have already "destroyed you". Sorry for borrowing your catchphrase (not that you give a shit).

    Don't waste your time replying. Or waste your time, if it suits you (I don't give a shit).

  67. Re:Amicusnycl, answer a question (lol)... apk by amicusNYCL · · Score: 1

    Grow up APK. You're a delusional immature sociopath, and people know it. Against a man in his 50s who thinks that posting anonymous messages in support of himself is clever, there's really nothing I can say to make you realize how stupid you look. You think that "high comedy" is calling someone "queer". That is definitely high comedy for people in the range of 11-12 years old. You have illustrated time and time again that your emotional maturity level is about at that level. If your emotional maturity was even at a fraction of your intelligence then you may be able to see yourself for how ridiculous you are, but with your maturity level where it is there's not a chance. Even though I do feel bad for you, still, you need to grow the hell up and move on. You lost this battle a long time ago.

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  68. Re:Amicusnycl, answer a question (lol)... apk by amicusNYCL · · Score: 1

    APK, you are pathetic. Truly pathetic. Grow the hell up man, get a fucking grip on yourself. You're trolling me and several other people, all day, literally. That's how you spend your time? What the hell is wrong with you? Get a grip and fuck off with the constant trolling.

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black