SecurityPro

Security and privacy professional. Currently testing and evaluating Signal username staging application.

  • 2 Posts
  • 43 Comments
Joined 1 year ago
cake
Cake day: June 27th, 2023


  • SecurityProtoPrivacy@lemmy.mlHybrid watch for notifications
    arrow-up
    3
    arrow-down
    0
    ·
    22 days ago
    link
    fedilink

    Similar question: Android smart watches only connect to one phone. I like receiving silent notifications on my watch from my android phone. However I also have an Apple phone for work and would like a ring or some other small wearable (not a second watch) to receive notifications from my Apple phone.



  • SecurityProOPtoPrivacy@lemmy.mlPermission Slip by Consumer Reports
    arrow-up
    8
    arrow-down
    0
    ·
    1 month ago
    link
    fedilink

    First quick check of the app with classysharkExodus shows the following trackers built in:

    1. Google AdMob -AdMob makes earning revenue easy with in-app ads, actionable insights, and powerful, easy-to-use tools that grow your app business
    2. Google Firebase Analytics - This logs user language preference and user location










  • SecurityProtoPrivacy@lemmy.mlReddit started blocking VPN users on old.reddit.com
    arrow-up
    1
    arrow-down
    3
    ·
    7 months ago
    edit-2
    7 months ago
    link
    fedilink

    Regarding: “On Android you can use [Stealth] . That’s what I use for searches that pull up Reddit posts.

    The stealth protocol does not have anything to do with accessing individual sites or services. The purpose of stealth is when trying to estata VPN connection to a provider that does not allow VPNs. For example, a public wifi that blocks VPN connections or some countries that require ISPs to block VPN connections.


  • SecurityProtoPrivacy@lemmy.mlLooking for a privacy focused travel assistant on mobile
    arrow-up
    3
    arrow-down
    0
    ·
    7 months ago
    edit-2
    7 months ago
    link
    fedilink

    Anytype has responded and I had a couple other clarifying questions. Their first response:

    “Hi! In our privacy policy we include Amplitude & Sentry & explain why we work with them: anytype.io/app_privacy. Currently, you can opt-out by electing local-only or self-hosted network Mode”

    Sentry is only used for bug tracking and I don’t have any issue or privacy concerns with that.

    I had already looked on their website for a privacy policy and the only one I could locate was a website only privacy policy. I learned later that the application privacy policy is buried as a link somewhere within the website privacy policy. This is not very easy to find.

    I reviewed the application privacy policy and it conflicted with their answer stating that a user could opt out of information sharing with Amplitude by using “local only” or “self-hosted”. So I pointed this out and posted this reply to them:

    “Also, app privacy policy section for Amplitude states: Amplitude Analytics Purpose: deliver behavioral and app usage data. Opt-out possible: NO

    This is the response I received:

    “Indeed this is outdated information, as it was written before self-hosting and local-only mode were properly configurable. Opt-out is now possible using these methods, and we will be updating the policy accordingly.




  • I looked at some of these on my own and found:

    • graylog provides data privacy and protection services for companies offering software as a service (SaaS). So this seems legit to me and needed for their core functionality. It is not a marketing or data analytics company.

    • amplitude appears to be a data analytics company and on the surface is not needed and Anytype should explain this.

    • sentry appears to be an application error tracking company and this seems a legit connection

    • api2 seems like a generic server name and likely needed for their core functionality, this seems legit to me

    • telemetry also seems like a generic server name; however, the purpose, based on its name does not seem to be needed. Anytype should explain this as well.