• 2 Posts
  • 165 Comments
Joined 2 years ago
cake
Cake day: October 28th, 2024

help-circle

  • That’s fair, I have definitely learned more when I add my own weird constraints. Though I also find it takes 10x longer, and what’s frustrating is that even after years of “learning” from this process, I still constantly run into these week-long time sinks troubleshooting various issues in my bespoke configurations. I still have to sift through documentation, forum posts, wiki articles. Do small scale experiments to break things down and figure out what’s going on. Just takes so much time. Perhaps not exactly tutorial hell but still feels like a hell of its own.












  • I believe you can use the command-line tool “adb” for this. It’s been a while since I’ve done it since I use syncthing now, but here’s a quick intro:

    1. on phone, enable developer options
    2. on computer, install android tools, which should come with adb (Do not install full android developer toolkit, it’s huge. You only need adb)
    3. on computer run ‘adb devices’, which should currently print that no devices were found
    4. plug phone into computer, and accept authorization prompt on phone
    5. on computer run ‘adb devices’ again and it should list your phone with the status “authorized”

    Now you should be able to use adb pull -p -a <folder name> to back up folders to your computer, for example adb pull -p -a /sdcard/DCIM.

    Note that you will have trouble backing up the /sdcard/Android folder, which contains a lot of app data. Unfortunately I think you need root to back up that folder. Alternatively you can back up individual apps using adb backup ....

    Personally I think in the long term, automatic backups like syncthing is better. Manual backups are a hassle and because of that, you won’t do them as often.






  • I want the whole fingerprinting industry to just go away.

    Be careful what you wish for. As hardware attestation continues to spread, companies won’t need fingerprints to identify you. Though if you want, hardware attestation can be thought of as an unique and unforgeable fingerprint. Poisoning the well won’t work for it.

    Just to clarify, hardware attestation is not bad in itself. It can be used by the user to secure their device (aka secure boot). It’s when third-parties try to use it, where it becomes a threat to privacy. Like a website asking for your hardware-attested device id.

    Of course we don’t want to give our id to these third parties. But we need to convince everybody else to do the same. Because if everybody else gives up their id, then websites won’t care about the few “privacy extremists”. And those people will simply be locked out of the web.

    But anyways, back to fingerprinting. I feel like the best way to get a sense of the scale of the issue, is to simply dive into the developer discussions around it. Look into mailing lists and feature discussions for Tor browser, Mullvad browser, and Brave. I guarantee you there are discussions around trying to make the browser look identical to the average user, and the challenges of doing so.



  • Adversarial methods like that won’t work. Google will know when their data starts getting poisoned. Their ad targeting will lose effectiveness, their profit margin impacted. And they will tweak and tighten their trackers until they can squeeze out a good fingerprint again. In the end Google simply rolls out Web Environment Integrity, and consumers won’t be able to use the web unless they prove their identity. If you want to fight big tech, this is the endgame they will push toward. If you want to play a cat and mouse game with big tech, big tech wins in the end since they have all the money.

    Tor Browser recognizes this. So Tor Browser just erases any existing identifiers, while accepting that websites can identify Tor users and block them if they want. It’s a very explicit signal that “this is a user that cares about privacy”, and it’s up to the website to accept that user or not. If a website doesn’t care, then usually it will work fine in Tor Browser. If a website does care and tries to block Tor users, then Tor Browser doesn’t bother fighting it. There are better places for them to focus their energy.

    Ultimately if you want the web to be private, the only solution is to convince everybody else to want the same. Websites won’t block privacy-seeking users, if everybody is a privacy-seeking user. Then, even big tech will have to concede.