Q&A: What Social Media Do We Use?

Q&A: What Social Media Do We Use?

Show Video

<b>What social media apps are</b> <b>we currently using the most?</b> <b>We have some</b> <b>questions about fingerprinting</b> <b>and virtual machines</b> <b>and our recommendations</b> <b>for Android alternatives.</b> <b>We had a lot of questions this week.</b> <b>Welcome to the Q&A for</b> <b>Surveillance Support 218,</b> <b>where we are answering your questions</b> <b>from our amazing patrons who allow us</b> <b>to make this podcast for all of you.</b> <b>You can view and join the questions</b> <b>on patreon.com slash surveillance pod</b> <b>or xmrchat.com slash surveillance pod</b> <b>where it's not recurring,</b> <b>but you don't have to give over any</b> <b>personal information.</b>

<b>You just put in an email, display name</b> <b>and send us a question. No email.</b> <b>Oh, no email, nevermind.</b> <b>You don't have to put in anything.</b> <b>Just send us some Monero</b> <b>and you can put any display name you want</b> <b>and send us your thoughts.</b> <b>Our first question comes from Ethan</b> <b>and we had a lot of questions this week,</b> <b>so we're gonna try</b> <b>really hard to keep it brief.</b>

<b>First up, which social media apps</b> <b>are you using most frequently right now?</b> <b>I'm pretty much only on Mastodon.</b> <b>I mean, technically I have like PeerTube</b> <b>because I self-host that.</b> <b>If you count things like Signal,</b> <b>then technically I'm</b> <b>really active on Signal</b> <b>because I text my wife all day long,</b> <b>but if you're talking</b> <b>traditional social media,</b> <b>I'm definitely a Mastodon guy.</b> <b>That's my personal thing.</b> <b>Yeah, I mean, kind of same here.</b> <b>Yeah, I don't really like social media.</b>

<b>I never liked the consumption aspect</b> <b>and I don't generally like consumption</b> <b>of most platforms in general</b> <b>and I really enjoy Mastodon.</b> <b>But even then, like I post a</b> <b>lot to like Techlor socials,</b> <b>but I don't really like use most of them</b> <b>if that makes sense.</b> <b>Like I post to them and then</b> <b>I have my personal Mastodon</b> <b>and that's really the only</b> <b>major personal social media app</b> <b>that I ever use.</b> <b>Even then I'd say, like if</b> <b>you follow my personal Mastodon,</b> <b>you'll know I post there like</b> <b>maybe once every couple days</b> <b>on average.</b>

<b>So pretty rare.</b> <b>For the record, I</b> <b>really like the visual aspect</b> <b>of things like Pixel Fed.</b> <b>I think it's really cool.</b> <b>I just don't take a lot of pictures.</b>

<b>So for me, it makes more</b> <b>sense to just go follow</b> <b>those accounts from Mastodon.</b> <b>I'm more of a text guy.</b> <b>That's what's cool about the Fediverse.</b> <b>You can follow different</b> <b>mediums from the same place.</b>

<b>It's cool.</b> <b>Ethan's next question is,</b> <b>are there any privacy focused</b> <b>education apps you recommend?</b> <b>Replying to recent current</b> <b>DHS monitoring over 200 sites</b> <b>including Duolingo.</b> <b>Yeah, I mean, you can try</b> <b>to avoid some of the obvious</b> <b>red flags.</b> <b>You know, if you found a</b> <b>list of things that you have</b> <b>concerns that you</b> <b>personally want to avoid,</b> <b>you can avoid things like Duolingo.</b> <b>I'm more in the boat that</b> <b>if you're following a lot</b> <b>of the advice that we</b> <b>give and you also set up your</b> <b>Duolingo account with alias information,</b> <b>it's not directly tied to anything else.</b> <b>Duolingo doesn't require any</b> <b>kind of like direct PII, right?</b> <b>Like you can set it up with a fake name,</b> <b>fake username, fake</b> <b>email, fake everything.</b>

<b>As long as you do all those</b> <b>things and you take kind of</b> <b>the precautions that we</b> <b>discuss commonly on this podcast,</b> <b>I think that you're going to be fine,</b> <b>even using things like Duolingo.</b> <b>I use Duolingo for a long</b> <b>time and I keep it in a web app</b> <b>when I can and I have it</b> <b>set up with an alias email</b> <b>and I kind of keep it as its own little</b> <b>like siloed account.</b> <b>So I think that's the best way to do it</b> <b>if you even use something like Duolingo.</b>

<b>Otherwise, I don't have like</b> <b>a privacy first alternative</b> <b>to Duolingo, but I do have advice</b> <b>to make Duolingo more private.</b> <b>I agree, I'm the same way.</b> <b>I do use Duolingo</b> <b>currently and for the record,</b> <b>I know there's better ways to learn,</b> <b>but right now I'm very limited on money.</b> <b>I'm also very limited on time.</b>

<b>I can't really commit to like paying or</b> <b>seeing the same tutor</b> <b>at the same time every week.</b> <b>And I know it's working</b> <b>because you know, I live in Texas.</b> <b>I overhear Spanish</b> <b>conversations around me constantly</b> <b>and every time I swear I understand more</b> <b>than I did last time.</b> <b>So yeah, you can put a</b> <b>privacy card on there.</b>

<b>I'm using an alias email.</b> <b>I've put in like two Xs</b> <b>for my name or something.</b> <b>I put in a zip code for downtown.</b> <b>You can use it in a PWA</b> <b>like Henry was just saying.</b> <b>And their web app is nice.</b> <b>It's like a good web app.</b>

<b>The FOSS community in</b> <b>general suffers from a problem</b> <b>of not being up to par.</b> <b>Like we have a handful of</b> <b>things like email and browsers.</b> <b>Like, you know, Brave and Firefox are</b> <b>just as good as Chrome,</b> <b>arguably better in a lot of ways.</b>

<b>Proton is just as good as Gmail.</b> <b>You know, we have</b> <b>things that can compete,</b> <b>but then when you start</b> <b>getting down to the niche things,</b> <b>like we talked about AI</b> <b>this week on the podcast,</b> <b>learning apps, grammarly replacements,</b> <b>this, that and the other, to-do lists.</b> <b>My wife has been looking for a to-do list</b> <b>since we got married</b> <b>to switch to something</b> <b>a little bit more private.</b> <b>And there's just not a lot</b> <b>of good options out there.</b> <b>So yeah, that's just kind</b> <b>of a FOSS problem in general.</b> <b>And I mean, there's people who make apps,</b> <b>but they're, you know,</b> <b>they're not very good looking.</b>

<b>No offense to those people.</b> <b>I know you did a lot of work.</b> <b>You did better than I could,</b> <b>but they're not very polished.</b> <b>They don't have the same</b> <b>kind of funding and development</b> <b>that these mainstream apps do.</b> <b>So unfortunately, a lot of the time,</b> <b>you're just gonna have to take an</b> <b>approach of harm reduction.</b> <b>I think another way</b> <b>to word what you said,</b> <b>kind of like a running</b> <b>analogy or like a sports analogy</b> <b>is like the team doesn't have much depth.</b>

<b>The big players are really good,</b> <b>but beyond those first few players,</b> <b>like things kind of start</b> <b>dwindling a little bit more.</b> <b>It's something that to work on, you know?</b> <b>I think that it's</b> <b>something we can all improve on.</b> <b>It's something we can be upfront about.</b> <b>And in the long run, I</b> <b>think we can get there,</b> <b>but that means we just have work to do.</b>

<b>I would take that as</b> <b>encouragement if I were you,</b> <b>because you could sit</b> <b>here and look at it.</b> <b>And like I said, I'm</b> <b>not trying to criticize.</b> <b>I don't know any code.</b> <b>I wish I did.</b> <b>I'm actually trying to learn code</b> <b>and I would love to</b> <b>contribute once I know some code.</b> <b>But you could sit here</b> <b>and look at this as like,</b> <b>"Oh, Nate's</b> <b>complaining, everything sucks."</b>

<b>Or if you know code, you could be like,</b> <b>"Hey, I know code.</b> <b>I can start working on a</b> <b>to-do list in my free time.</b> <b>I can start working on a, you know,</b> <b>some kind of Duolingo front end or</b> <b>something in my free time."</b> <b>I mean, that one's kind of a tall order</b> <b>to do a lingo replacement.</b>

<b>But you know, if you know these things</b> <b>and you have the time or the resources,</b> <b>you could take that as an opportunity.</b> <b>Nobody else is doing it.</b> <b>You could be the first one</b> <b>and you could become the</b> <b>dominant name in that space.</b> <b>Next question, what crypto for private</b> <b>and instant transfers</b> <b>Monero takes too long for</b> <b>when I need to send money IRL</b> <b>on the spot instantly confirmed.</b> <b>Once again, I'm really</b> <b>not the crypto expert.</b>

<b>And unfortunately, I'm</b> <b>gonna go out on a limb and say,</b> <b>there probably are none</b> <b>where you're gonna get</b> <b>both of those things.</b> <b>With Bitcoin, you don't get either.</b> <b>So that's fun.</b> <b>And I'm sure all the crypto maxis will</b> <b>come in the comments</b> <b>and tell me that Bitcoin</b> <b>cash version two lightning</b> <b>slash whatever fork</b> <b>probably has this, but whatever.</b> <b>There are obviously definitely some</b> <b>that are faster than others.</b> <b>Like I have made transactions</b> <b>with Monero and you're right.</b>

<b>It is a little slow, but for context,</b> <b>I've never made any</b> <b>transactions with Bitcoin</b> <b>because it was too</b> <b>slow and I just gave up</b> <b>and moved on with my day.</b> <b>So the only privacy coins</b> <b>that I know of are like Monero,</b> <b>Zcash, I've heard some</b> <b>people talk about pirate chain,</b> <b>but I don't know anything about it.</b> <b>I think there's a couple other ones.</b> <b>So this might be a</b> <b>situation where you have to pick one</b> <b>or the other either you</b> <b>get something really fast</b> <b>that doesn't have great</b> <b>privacy, or you take Monero</b> <b>and just accept the fact</b> <b>that you're gonna have to hang out</b> <b>and talk with the</b> <b>person for 10, 15 minutes</b> <b>until the transaction goes through.</b>

<b>You don't need to wait for</b> <b>the full block to be completed.</b> <b>Most Monero wallets</b> <b>should actually show you</b> <b>if there's an incoming transaction</b> <b>and it's waiting essentially to confirm.</b> <b>I think it's the block</b> <b>lock is what they call it.</b> <b>So, and it shows on your end too.</b> <b>I can speak to Cake Wallet at least.</b> <b>If I am receiving a Monero transaction,</b> <b>it'll literally show it</b> <b>like one out of 10 received.</b>

<b>And then if I check it</b> <b>again, five minutes later,</b> <b>it says like six out of 10 received.</b> <b>It will show you that it's being received</b> <b>and typically like most</b> <b>people aren't trying to scam you.</b> <b>And if you like</b> <b>obviously trust the person.</b>

<b>So I think I would still probably</b> <b>just encourage using Monero.</b> <b>It is a limitation to Monero</b> <b>that I hope people are able to figure out</b> <b>and make better in the long run.</b> <b>But it's gonna be hard to</b> <b>find a service that does that.</b> <b>You know, it gives you</b> <b>the privacy of Monero</b> <b>but also makes it instant.</b> <b>That's asking a lot, I</b> <b>think just based on the design</b> <b>of Monero and how kind of</b> <b>the pricing security it offers.</b>

<b>The next question is what are</b> <b>the biggest usability barriers</b> <b>on Cubes OS, ignoring hardware</b> <b>compatibility issues?</b> <b>So I'm just gonna rephrase that and say,</b> <b>let's assume you already</b> <b>got it installed, right?</b> <b>Like barring</b> <b>installation issues with Cubes OS,</b> <b>what are the usability issues from there?</b> <b>What changes would you wanna see</b> <b>before you would</b> <b>recommend Cubes OS to any layman?</b> <b>I'm planning a Cubes OS review.</b> <b>So I'll definitely</b> <b>have like better thoughts.</b> <b>So this is very preliminary.</b>

<b>My initial thoughts is the fact</b> <b>that you have to read documentation.</b> <b>They even know what you're doing.</b> <b>And I wanna say that Cubes OS</b> <b>documentation is fantastic.</b>

<b>Like if you go on their</b> <b>site, you read through it.</b> <b>They do a great job of</b> <b>outlining how it works.</b> <b>And I think most</b> <b>people can kind of follow it</b> <b>and get behind it.</b>

<b>But there's no like</b> <b>good walkthrough, you know?</b> <b>Like there are some</b> <b>fancy pieces of software</b> <b>that someone can</b> <b>download and it walks through</b> <b>how to use it, it</b> <b>gives them a walkthrough,</b> <b>tells them like things you should do,</b> <b>things you shouldn't do.</b> <b>And then they kind of have</b> <b>at least a good starting point</b> <b>without needing to</b> <b>read formal documentation.</b> <b>And that's something that I</b> <b>think when I booted up Cubes</b> <b>for the first time</b> <b>was really interesting.</b> <b>I was like, well, I'm</b> <b>just kind of like going.</b> <b>All right, let's see what happens.</b>

<b>So that's the first</b> <b>thing for me at least.</b> <b>The second thing is I</b> <b>think the desktop environment</b> <b>is hideous.</b> <b>And I tried to install</b> <b>GNOME, I tried to install KDE.</b> <b>And if you've ever</b> <b>tried to do that on Cubes,</b> <b>it's actually a lot more</b> <b>complicated than it normally is</b> <b>because of the way</b> <b>that Cubes is designed.</b>

<b>Like you have to try to</b> <b>get installed on Dom Zero,</b> <b>but it has to apply to</b> <b>each virtual machine.</b> <b>And the way Cubes is</b> <b>designed, it's not as easy</b> <b>as it normally is to just flip flop</b> <b>between different desktop environments.</b> <b>So in my journey of trying to set up</b> <b>different desktop environments on Cubes,</b> <b>it was actually really obnoxious.</b>

<b>And I realized that it</b> <b>could actually create</b> <b>some instability.</b> <b>And more importantly, it's hard to</b> <b>actually make it unified.</b> <b>Like it's hard to have</b> <b>GNOME set up in a way</b> <b>where like system</b> <b>menus, fonts, everything</b> <b>in every virtual</b> <b>machine is perfectly unified</b> <b>and not kind of mix and matched.</b>

<b>So I think the DE and</b> <b>the lack of a walkthrough</b> <b>and like a basic start</b> <b>guided are like the two biggest</b> <b>things that personally I</b> <b>think are kind of holding</b> <b>at back right now.</b> <b>I have been using Cubes for so long</b> <b>that I honestly don't</b> <b>remember what I struggled with,</b> <b>but I'm gonna say it's probably the same</b> <b>things you mentioned.</b> <b>I will admit the UI is not great.</b> <b>I also remember that it</b> <b>was actually the first</b> <b>Linux distro I ever tried</b> <b>and immediately realized,</b> <b>I'm like, I have no idea what I'm doing.</b>

<b>So I rolled back to Mint and tried a</b> <b>couple other distros.</b> <b>And eventually once I understood Linux,</b> <b>I went back to Cubes</b> <b>and there was still a bit</b> <b>of a learning curve,</b> <b>but at least then like,</b> <b>that's why I always</b> <b>tell people, I'm like,</b> <b>you have to have a</b> <b>basic understanding of Linux</b> <b>before you try to take on Cubes.</b> <b>Because there are a lot of</b> <b>things that are not designed</b> <b>with like a GUI.</b> <b>So for example, my wife,</b> <b>I've been open about this,</b> <b>my wife uses Pop OS on her laptop</b> <b>and it just makes sense to her.</b>

<b>She knows to open the software store.</b> <b>If there's anything</b> <b>really advanced, she'll ask me,</b> <b>but she knows how to update things.</b> <b>She knows how to install</b> <b>software and how to use it.</b> <b>With Cubes, like they</b> <b>kind of leave it up to you.</b> <b>Like, okay, here are the VMs</b> <b>and there's not really</b> <b>a desktop to be fair.</b>

<b>Which I think is</b> <b>another point against it.</b> <b>I think customization</b> <b>is a little bit lacking,</b> <b>which I get why, but at the same time,</b> <b>like if we,</b> <b>theoretically, and I don't even know</b> <b>if I necessarily care about this,</b> <b>if we wanted the layman to use it,</b> <b>then that would</b> <b>definitely need to be a thing.</b> <b>But it's also, like Henry was saying,</b> <b>it's just not very intuitive.</b>

<b>Like it's intuitive now</b> <b>that I know what I'm doing,</b> <b>but as a first time</b> <b>user, it was very like,</b> <b>I don't know where anything is.</b> <b>I don't know how to install software.</b> <b>I don't know how to update things.</b>

<b>I don't understand, and again,</b> <b>this goes back to read the documentation,</b> <b>but I don't understand why the templates</b> <b>don't have internet access.</b> <b>So I can't install new key</b> <b>rings to install new things.</b> <b>It's, yeah, I don't</b> <b>want to belabor the point.</b> <b>I think Henry hit the</b> <b>nail pretty good on the head.</b> <b>It's just not very intuitive.</b>

<b>Do you know what's better</b> <b>than great documentation?</b> <b>Not needing documentation?</b> <b>Exactly, and I think</b> <b>that's kind of the next step</b> <b>for cubes, like they've</b> <b>done a lot of great work,</b> <b>very respectable operating system.</b> <b>I really like what they're doing.</b> <b>Especially on the budget.</b> <b>Especially on the budget,</b> <b>especially with the team.</b> <b>But that's kind of the</b> <b>next step for them, I think,</b> <b>is like how do you bring</b> <b>this to the wide public,</b> <b>where they don't need</b> <b>to go online to your site</b> <b>to read the documentation,</b> <b>to understand how it works?</b> <b>Like how do you make that happen?</b> <b>And that's a really hard thing to do.</b>

<b>So I don't want to discount.</b> <b>Like when we're criticizing cubes,</b> <b>it's not because we</b> <b>think it's easy to fix.</b> <b>It's because we want to see it get better</b> <b>and we kind of have a vision</b> <b>for what it could look like</b> <b>to make it easy and</b> <b>more accessible to people.</b>

<b>But it's not taking away</b> <b>the good work they've done.</b> <b>They've done a lot of great stuff.</b> <b>Next question, do you</b> <b>self host an OIDC provider?</b> <b>And if so, which?</b> <b>I'm gonna say I don't,</b> <b>because I don't know what that is.</b> <b>Henry actually told me</b> <b>before we started recording,</b> <b>apparently it's kind of like an SSO</b> <b>single sign on thing.</b> <b>It's a little bit interesting,</b> <b>but it also just doesn't</b> <b>seem like something I need</b> <b>in my life, to be honest.</b>

<b>I don't see much of a use</b> <b>for it for myself personally.</b> <b>It's definitely useful in</b> <b>like corporate environments.</b> <b>I guess that's another</b> <b>reason I've never cared.</b> <b>If I had a team, maybe it</b> <b>would be worth it to me,</b> <b>but since I'm running</b> <b>solo, it's just whatever.</b> <b>I mean, same here.</b>

<b>I don't self host this.</b> <b>I try to avoid SSO in general,</b> <b>but there are some</b> <b>situations where I do like it.</b> <b>If there's a website that I think</b> <b>I just don't get good vibes from,</b> <b>and I don't trust them to like properly</b> <b>encrypt my</b> <b>credentials or keep things safe.</b> <b>I actually prefer</b> <b>sometimes using Google SSO</b> <b>for like this like spare Google account</b> <b>that I use mostly for that.</b> <b>But even then, I try to</b> <b>just not use it too much</b> <b>because everyone has heard</b> <b>the horror stories of people</b> <b>who like have all these</b> <b>accounts created on their Facebook</b> <b>or their Google account, and</b> <b>then they delete the account,</b> <b>they forget about all the other accounts.</b> <b>So I try not to rely on that too much.</b>

<b>Second to last question from Ethan is,</b> <b>I've seen lots of news on behavior</b> <b>modification capitalism.</b> <b>Do you think the current new</b> <b>supply chain is inadequate?</b> <b>How can someone know</b> <b>which new source to trust?</b> <b>I wanna start by saying</b> <b>we try to keep this Q&A</b> <b>as organic as possible.</b> <b>So we try to keep like</b> <b>research behind the scenes</b> <b>as minimal as possible so</b> <b>we can answer your questions</b> <b>as if you asked us in real time.</b>

<b>I've never heard of this behavior</b> <b>modification capitalism</b> <b>before, but just going off of what you</b> <b>say in this question</b> <b>of do you think the current new supply</b> <b>chain is inadequate?</b> <b>I'm unclear about this.</b> <b>I mean, like, I guess I can speak to</b> <b>personal experience.</b> <b>Sometimes I'll cover something that</b> <b>really is just news.</b> <b>It's just something that happened</b> <b>objectively, factually,</b> <b>all those things, and I can cover it</b> <b>and just cover the</b> <b>talking points of what happened.</b> <b>Sometimes, and I'm sure</b> <b>Nate's experienced this,</b> <b>in the comments you'll</b> <b>get 50% of people say,</b> <b>"Why didn't you bring this up?"</b> <b>And 50% of people saying,</b> <b>"Why didn't you bring</b> <b>this other thing up?"</b> <b>So where I'm going</b> <b>with this is two people</b> <b>who have their own</b> <b>views are interpreting me</b> <b>not talking about</b> <b>something as me being for</b> <b>what they're against,</b> <b>if that makes sense.</b> <b>I see that a lot where</b> <b>sometimes I'll watch something</b> <b>that seems very impartial, very just,</b> <b>that is what happened,</b> <b>and then I'll check comments on something</b> <b>and they'll say,</b> <b>"Well, this is biased news.</b>

<b>"This is not true news."</b> <b>And I guess I just</b> <b>struggle to follow that sometimes.</b> <b>Not that it doesn't</b> <b>happen and it isn't a problem,</b> <b>but those are kind of my thoughts.</b> <b>So I don't know exactly</b> <b>what this terminology is.</b> <b>As for whether the new</b> <b>supply chain is inadequate,</b> <b>I would say that there's</b> <b>probably too much money</b> <b>and it's probably</b> <b>centralized with too many individuals,</b> <b>but I don't know if</b> <b>that's exactly the problem</b> <b>that you're referring to, but I do think</b> <b>that there are too many</b> <b>people in the news world</b> <b>who have too many conflicts of interest</b> <b>that shouldn't exist.</b>

<b>So I'd love to see more</b> <b>independent news sources</b> <b>that are reliable.</b> <b>That's not a bad thing to want.</b> <b>So as usual, take it</b> <b>with a grain of salt,</b> <b>but according to Brave's AI summary,</b> <b>behavior modification</b> <b>capitalism is just another word</b> <b>for surveillance capitalism.</b>

<b>Yeah, I'm not really sure</b> <b>how these things are related,</b> <b>to be honest.</b> <b>I think what I try to do is</b> <b>remain open to the possibility</b> <b>that I don't have all the facts.</b> <b>I try to find sources</b> <b>that seem to get it right</b> <b>most of the time and</b> <b>verifiably get it right,</b> <b>not just agree with me most of the time,</b> <b>but I think one way</b> <b>to check a news source</b> <b>is see what they say</b> <b>about something you know.</b>

<b>So like if they say the anonymous</b> <b>cryptocurrency Bitcoin,</b> <b>I'm gonna cut them a little bit of slack</b> <b>because everybody</b> <b>says that, but deep down,</b> <b>I'm also like, okay, so</b> <b>at very least that reporter</b> <b>does not necessarily know</b> <b>everything about this space.</b> <b>If you go check them on a subject</b> <b>where you're very much an expert</b> <b>and they keep screwing it up,</b> <b>maybe don't trust them with your news</b> <b>because they're probably</b> <b>screwing up other things</b> <b>you're not an expert on.</b> <b>But if you go to the</b> <b>something that you are,</b> <b>and again, verifiable things,</b> <b>and they keep getting it right,</b> <b>then that's probably a good indicator</b> <b>that they can be trusted in other things.</b> <b>But I think also, you know,</b> <b>we say this about our own show,</b> <b>but I think it applies</b> <b>to general news as well,</b> <b>getting multiple sources.</b> <b>Like Reuters is kind of my main source</b> <b>just because they have that little 10</b> <b>minute daily podcast</b> <b>and it gives me a good snapshot</b> <b>of what's going on in the world.</b> <b>But I mean, if people send</b> <b>me articles from other things,</b> <b>or if I see articles when I'm online,</b> <b>like I will definitely</b> <b>look at other sources</b> <b>and read other sources,</b> <b>especially if they're saying,</b> <b>no, calm down, you know,</b> <b>that Reuters headline</b> <b>story was wrong today.</b>

<b>Then I'm like, oh, tell me why.</b> <b>Why is it wrong?</b> <b>Why should I believe you?</b> <b>But I do agree with Henry.</b> <b>I think there are a lot of problems</b> <b>and part of this is,</b> <b>I think there's a lot of</b> <b>factors that go into it,</b> <b>but I think there are</b> <b>some conflicts of interest</b> <b>with the mainstream news and their</b> <b>funding and who runs it.</b> <b>I also think that too many people are</b> <b>running to sub-stack</b> <b>and going, oh, this guy's the</b> <b>only person with this story,</b> <b>therefore he must be right.</b> <b>And maybe there's a</b> <b>reason he's the only person</b> <b>with that story, just saying,</b> <b>like obviously</b> <b>whistleblowers are a thing,</b> <b>but I think we could all</b> <b>benefit a little bit more</b> <b>from some critical thinking.</b> <b>The New Oil actually wrote a blog post</b> <b>about critical</b> <b>thinking and it's literally</b> <b>how to evaluate a claim.</b>

<b>Who's making the claim?</b> <b>What are their credentials?</b> <b>What is the claim itself?</b> <b>Does it conflict any known evidence?</b> <b>There are ways to evaluate this stuff</b> <b>that give you a pretty good read</b> <b>on whether or not it's trustworthy.</b> <b>I think the whole world</b> <b>needs a lot of that right now.</b> <b>What I'd personally like to see,</b> <b>right now there's a lot of criticism</b> <b>towards news outlets</b> <b>and it's been that way for probably the</b> <b>last five years now,</b> <b>maybe more, but I</b> <b>think people don't apply</b> <b>the same criteria that they're</b> <b>criticizing news for</b> <b>to individual creators</b> <b>and where they</b> <b>actually get their news from.</b> <b>And I think it's necessary.</b>

<b>I feel like we've kind of</b> <b>developed a little community</b> <b>that really holds us accountable.</b> <b>We get something wrong</b> <b>and we get like ton of comments about it.</b> <b>And it's something we</b> <b>like try to clear up</b> <b>and like when we really screw up,</b> <b>we really try to make</b> <b>it right when we can,</b> <b>but that's not normal, I think.</b> <b>A lot of creators I see</b> <b>make really big mistakes</b> <b>and they say things</b> <b>aren't completely wrong and--</b> <b>And they never issue a correction.</b> <b>They never issue any kind of correction.</b>

<b>They don't unlist it.</b> <b>And then people in the</b> <b>comments will just agree with it</b> <b>and say, "Wow, I didn't</b> <b>know this," as if it's fact.</b> <b>And that's not to say we haven't made,</b> <b>both of us have each made mistakes,</b> <b>but I think the reaction to those</b> <b>in ways to correct them</b> <b>is definitely a little bit different.</b>

<b>Not to belabor this point too much,</b> <b>but I think it's</b> <b>important to differentiate news</b> <b>and analysis.</b> <b>If there's somebody you wanna go to</b> <b>because you like their analysis</b> <b>and you like their</b> <b>perspective on things, that's fine.</b> <b>Just admit that they have a bias.</b> <b>There's a difference.</b> <b>All right, and then</b> <b>Ethan's last question.</b>

<b>I don't have too much insight into this,</b> <b>but it says, "I'm very excited</b> <b>for peer-to-peer applications.</b> <b>Have you seen</b> <b>anything cool on that topic?</b> <b>Are peer-to-peer applications more</b> <b>private than centralized?</b> <b>I worry about the</b> <b>added risk of being hacked</b> <b>due to being connected on a peer network</b> <b>using potentially vulnerable code."</b> <b>In regards to that last part,</b> <b>I think that's universal,</b> <b>whether it's centralized or</b> <b>whether it's peer-to-peer.</b> <b>Code can be crappy,</b> <b>whether it's peer-to-peer,</b> <b>whether it's centralized.</b> <b>It can be private or not,</b> <b>whether it's peer-to-peer,</b> <b>whether it's centralized.</b>

<b>I don't think that really has any</b> <b>specific implication.</b> <b>I haven't seen anything particularly cool</b> <b>on the peer-to-peer front.</b> <b>I don't really pay</b> <b>attention to it, to be honest.</b> <b>But in general,</b> <b>I don't have anything</b> <b>against peer-to-peer.</b> <b>I think it's the same thing</b> <b>with everything else in privacy.</b> <b>It's gotta be usable.</b>

<b>It's gotta have the features</b> <b>that are gonna track mainstream people.</b> <b>It's gotta have the</b> <b>performance, all that kind of stuff.</b> <b>I don't have anything</b> <b>specific to call out</b> <b>that I'm looking forward to</b> <b>or whether or not I</b> <b>think it's gonna catch on.</b> <b>Yeah, I'd actually make the claim</b> <b>that generally speaking,</b> <b>P2P is actually less private.</b>

<b>Generally, that</b> <b>doesn't include edge cases.</b> <b>So when you think of</b> <b>torrenting, for example,</b> <b>your IP address is</b> <b>public and a full network</b> <b>and anyone can go in.</b> <b>And this is why you</b> <b>see those people online</b> <b>who get requests from their ISP.</b> <b>They downloaded something illegal,</b> <b>they violated the terms and conditions,</b> <b>and it's because the ISP</b> <b>or whoever else is doing</b> <b>this kind of analysis can go in and see</b> <b>all the peers who are connected</b> <b>and downloading a certain</b> <b>torrent file at a given time.</b> <b>That concern applies to everything else.</b>

<b>So actually with Signal and Telegram,</b> <b>there was some research</b> <b>published not too long ago</b> <b>that exposed the fact</b> <b>that your IP address</b> <b>is visible to your contacts</b> <b>when you don't enable</b> <b>some of the privacy features</b> <b>inside of those</b> <b>messengers that would prevent you</b> <b>from connecting to them P2P.</b> <b>I think in general, I don't mind saying</b> <b>that P2P actually has the</b> <b>potential of being less private,</b> <b>but then on the other hand,</b> <b>you have things like Briar</b> <b>that have a Tor P2P implementation</b> <b>so that by default, it</b> <b>does have action protection</b> <b>for each peer.</b> <b>And so there is a way to do it better,</b> <b>but I actually would be a</b> <b>little bit more cautious</b> <b>about P2P, but that is the main thing</b> <b>I'd be watching out for, for</b> <b>any kind of P2P implementation,</b> <b>if anyone's kind of</b> <b>curious to look into that.</b> <b>I don't think hacking</b> <b>or vulnerable code though</b> <b>is dependent on whether</b> <b>or not something's P2P</b> <b>or centralized.</b>

<b>That seems to be a</b> <b>pretty independent thing</b> <b>from what I can tell.</b> <b>David Johnson, one of</b> <b>our classics, a series,</b> <b>well, David Johnson's a</b> <b>classic, not the question,</b> <b>a series of interconnected questions</b> <b>about browser fingerprinting in VM.</b> <b>So the first one is how much importance</b> <b>do you assign to</b> <b>combating advanced fingerprinting</b> <b>techniques that go beyond easy to thwart</b> <b>cookie type technology?</b> <b>I'll start by saying this is</b> <b>an extremely complicated area</b> <b>of discussion.</b> <b>It's still debated even in</b> <b>the research and amongst experts</b> <b>what the best way to deal</b> <b>with browser fingerprinting is.</b>

<b>All I can tell you is that it is</b> <b>legitimately a problem.</b> <b>And my best analysis on</b> <b>the research I've seen so far</b> <b>is that a hybrid approach is</b> <b>the best way to deal with it,</b> <b>which is blocking scripts and trackers</b> <b>that block it by default and</b> <b>just prevent the fingerprinting</b> <b>from happening in the first place.</b> <b>But I also believe in going beyond that</b> <b>and also using browsers that implement</b> <b>browser fingerprinting</b> <b>techniques.</b> <b>So what comes to mind</b> <b>for me is the Tor browser</b> <b>is probably the best version of this,</b> <b>where they try to make</b> <b>users all look the same.</b>

<b>And there might still be edge cases</b> <b>where there might be a really unique way</b> <b>to fingerprint users.</b> <b>But if you're doing the blocking,</b> <b>you're also using something that has</b> <b>browser fingerprinting</b> <b>built in.</b> <b>There's also a Mulvad browser as well.</b> <b>And then to some extent Brave even has</b> <b>some of this as well.</b> <b>Then you're getting kind</b> <b>of the best of all worlds.</b>

<b>But I don't go beyond that.</b> <b>Mainly because-- and this is something</b> <b>I say pretty frequently--</b> <b>there is no evidence-based way</b> <b>to deal with the problem completely.</b> <b>If I had a good answer for all of you</b> <b>that was easy, accessible, then I would</b> <b>totally recommend it.</b>

<b>But there is no easy, usable,</b> <b>convenient way for all of you</b> <b>to just avoid fingerprinting techniques.</b> <b>What I just shared is kind of the best</b> <b>you can do as far as I'm</b> <b>aware and as far as it seems</b> <b>like most people are aware.</b> <b>We can hypothesize.</b> <b>We can put together theories.</b>

<b>But they wouldn't be backed</b> <b>by actual data and evidence</b> <b>that they work.</b> <b>I just don't feel</b> <b>comfortable going there with people.</b> <b>And it's not part of my risk</b> <b>tolerance to go there either.</b> <b>So I'm going to do what's most</b> <b>accessible and easiest to do,</b> <b>in addition to being evidence-based</b> <b>so that I can guarantee, get</b> <b>benefits for what I'm doing.</b> <b>Those are kind of my loose thoughts.</b>

<b>I assign importance to it</b> <b>by saying, do what you can.</b> <b>Use a browser that takes it seriously</b> <b>because it is important.</b> <b>But it shouldn't make you freak out when</b> <b>you're using the web.</b> <b>This is very niche</b> <b>stuff, very advanced stuff.</b> <b>And you're probably nowhere</b> <b>soft than the average person</b> <b>if you're using any of these browsers.</b> <b>You're probably much better off.</b>

<b>Yeah, I don't really</b> <b>have anything to add.</b> <b>I think you should do</b> <b>what you can, I think.</b> <b>And you'll talk about</b> <b>this in a later question.</b> <b>But Byron Tao mentions that turning off</b> <b>app tracking on your iPhone does appear</b> <b>to actually be effective</b> <b>based on the experts that he</b> <b>spoke to and the people who</b> <b>work on the inside.</b> <b>So I think things like changing the</b> <b>settings on your devices,</b> <b>changing the settings in your apps,</b> <b>using fingerprint-resisting</b> <b>technology-- so Tor, Brave.</b> <b>Trying to make sure you don't overdo it</b> <b>because I've seen</b> <b>those people who are like,</b> <b>I have Ghostry and UBlock</b> <b>and Disconnect and Brave</b> <b>and Privacy Badger and Cookie</b> <b>Auto-Delete and this and that</b> <b>and the other.</b>

<b>And it's like, cool.</b> <b>You stick out like a sore thumb because</b> <b>you have every freaking</b> <b>plug-in known to man, whereas</b> <b>somebody who just has UBlock</b> <b>and Grammarly probably</b> <b>blends in a lot better.</b> <b>Not that I'm encouraging</b> <b>Grammarly, but I'm just saying.</b> <b>Just like Henry said, I think</b> <b>trying to do the best you can</b> <b>without overdoing it--</b> <b>because you definitely do hit</b> <b>a point of diminishing returns.</b> <b>You should go the best that you can for</b> <b>your daily workflow.</b>

<b>But there are dedicated tools that</b> <b>are designed for justice in mind.</b> <b>And that's where you get Hunix.</b> <b>That's where you get Tails OS.</b> <b>I think that's kind of the hidden thing</b> <b>that I guess we haven't been</b> <b>saying that we should say here</b> <b>is that there are dedicated tools</b> <b>that you should be using if</b> <b>fingerprinting is actually</b> <b>something you absolutely need to think</b> <b>about for a specific scenario.</b>

<b>But we're just</b> <b>thinking of day-to-day use.</b> <b>Is it something you should be concerned</b> <b>about for most people?</b> <b>It's something to think about and just do</b> <b>what they can about.</b> <b>But there are dedicated tools for that.</b>

<b>And also on that note, it's a constant</b> <b>game of cat and mouse.</b> <b>So even let's say somebody says Brave.</b> <b>Brave is good enough for me.</b> <b>It has a lot of great</b> <b>out-of-the-box privacy</b> <b>features that don't impede my workflow.</b> <b>And you could say, well, yeah,</b> <b>what about this fingerprinting</b> <b>technique?</b> <b>Valid.</b> <b>But as time goes on and</b> <b>that gets more common,</b> <b>Brave is going to come up</b> <b>with a way to counter that.</b>

<b>And whoever else, for the record,</b> <b>I'm not trying to sing</b> <b>Brave's praises specifically.</b> <b>But the privacy community is going</b> <b>to find a way to counter that.</b> <b>And then the companies,</b> <b>when that starts to spread on,</b> <b>the companies are going to</b> <b>find a way to work around that.</b> <b>I mean, just look at the</b> <b>whole YouTube ad blocking thing.</b> <b>I don't mean that in a defeatist way</b> <b>where it's like, well,</b> <b>it doesn't really matter.</b>

<b>But at the same time, it's not worth</b> <b>ruining your job and your relationships</b> <b>and running yourself ragged.</b> <b>David goes on to say next, it is claimed</b> <b>that a lot of such techniques are not</b> <b>virtual machine resistant.</b> <b>In other words, the fingerprint will not</b> <b>persist across the same</b> <b>virtual machine configuration</b> <b>on different VMs.</b> <b>Do you do anything to compartmentalize</b> <b>your same browsing</b> <b>activity into different VMs</b> <b>for this reason?</b> <b>Technically, I do just</b> <b>through the use of cubes.</b>

<b>I have one cube that's</b> <b>dedicated for the new oil,</b> <b>one that's dedicated for important stuff</b> <b>like banking and medical, one that's</b> <b>dedicated for personal stuff.</b> <b>On Windows, not so much.</b> <b>But also on Windows, I primarily use</b> <b>this as video</b> <b>editing, gaming stuff that's</b> <b>not really that sensitive.</b>

<b>But I still do things on Windows.</b> <b>Like I port master.</b> <b>I use a VPN.</b>

<b>Again, I've changed a</b> <b>bunch of the settings.</b> <b>I've disabled a bunch of</b> <b>stuff with some of the more</b> <b>trustworthy Windows scripts out there.</b> <b>So I technically do.</b>

<b>But I think virtual machines in general</b> <b>are a much more advanced thing.</b> <b>I think they're great if</b> <b>they know what you're doing.</b> <b>But I think asking the</b> <b>average person to use them</b> <b>is a little bit too much.</b> <b>Don't really disagree.</b> <b>And I mean, kind of</b> <b>speaking to my last point,</b> <b>I made this analogy</b> <b>with a friend recently</b> <b>because they saw some of the</b> <b>fingerprinting discussions</b> <b>on our forum on TechFlow recently,</b> <b>where the CAGI CEO went</b> <b>in and kind of justified</b> <b>their reasoning for not</b> <b>including fingerprinting</b> <b>resistance.</b> <b>I disagreed and gave my</b> <b>reasons for our fingerprinting</b> <b>resistance is important.</b>

<b>It's a whole thing.</b> <b>If you want to dig into</b> <b>both of our reasonings,</b> <b>my takeaway from it is</b> <b>it's a lot like microplastics.</b> <b>In a sense of</b> <b>microplastics are this thing</b> <b>where we know is a problem.</b> <b>It's everywhere.</b> <b>We know it's everywhere.</b> <b>We have research showing it's everywhere.</b>

<b>But we also just don't fully understand</b> <b>how to deal with it yet.</b> <b>And we don't even know</b> <b>the real impacts of it yet.</b> <b>We know that it's</b> <b>probably used pretty often.</b>

<b>And a lot of people do manipulate it.</b> <b>But we don't know to what extent.</b> <b>We don't know how to</b> <b>fully deal with it yet.</b>

<b>It's very early on.</b> <b>It's one of those things that I think</b> <b>should be kind of seen</b> <b>as microplastics, which is</b> <b>do what you can realistically.</b> <b>But it's a problem that everyone is</b> <b>equally dealing with.</b>

<b>It is not something</b> <b>that's individualized.</b> <b>And there are dedicated tools, again,</b> <b>that you should be using if you really</b> <b>care about this stuff,</b> <b>which is like Hunix, Tails OS,</b> <b>any of these kind of tools that you</b> <b>can utilize to help kind of</b> <b>get away from the fingerprinting</b> <b>concerns in the first place.</b> <b>There's this weird overlap</b> <b>here of effort to success.</b> <b>And I can never actually tell you</b> <b>that what you're going to do</b> <b>is going to guarantee success</b> <b>because we just don't</b> <b>have the information to make</b> <b>it completely foolproof.</b> <b>That's the best advice I can give.</b>

<b>Anything else is kind of</b> <b>speculating how successful it</b> <b>is.</b> <b>OK, the next one, I'm actually going</b> <b>to carry it to you</b> <b>because this is your book.</b> <b>OK.</b> <b>So the book I recommended by Byron Tao,</b> <b>which is called "Means</b> <b>of Control" for those who</b> <b>are joining us, goes</b> <b>into quite a bit of detail</b> <b>into large scale harvesting</b> <b>and resale of phone location data</b> <b>and also some degree of DNS data by</b> <b>surveillance capitalism</b> <b>companies.</b> <b>How likely do you think it is</b> <b>that the same thing is going</b> <b>on with browser fingerprinting data</b> <b>but has not been brought to light?</b> <b>Absolutely.</b>

<b>There's not a freaking doubt in my mind.</b> <b>Like you said, we don't</b> <b>really have a lot of evidence.</b> <b>And Henry just said that too.</b> <b>That's the problem with</b> <b>browser fingerprinting.</b> <b>And for the record, I am</b> <b>so slow to put out videos.</b> <b>I'm sorry.</b>

<b>It came out all the way in November.</b> <b>But my latest video is all</b> <b>about browser fingerprinting.</b> <b>And I quoted as much as</b> <b>I could, which you still</b> <b>have to take it with a grain of salt</b> <b>because these are companies who are</b> <b>marketing their browser</b> <b>fingerprinting to other companies.</b> <b>So of course, they're going to BS.</b> <b>And they're going to</b> <b>be like, yeah, man, we</b> <b>can track an ant crawling</b> <b>on a tombstone in China.</b> <b>Like, we're so advanced.</b>

<b>So they could be lying.</b> <b>But there's-- that was a three body</b> <b>reference, by the way.</b> <b>So they're saying that</b> <b>they can do everything.</b> <b>But at the same time, we know</b> <b>that these companies sometimes</b> <b>lie.</b> <b>So it's kind of hard to tell.</b>

<b>You have to take it with a grain of salt.</b> <b>But at the same time,</b> <b>they're very open about it.</b> <b>They're like, no, we can track anybody.

2025-03-24 14:04

Show Video

Other news

How to turn your hard drive into cloud storage - Strada Agents 2025-04-11 03:55
Datacom CISO Collin Penman on AI-powered threats and cyber fatigue 2025-04-11 05:50
Strange Tech from the Quantum Realm! 2025-04-04 17:45