• 0 Posts
  • 26 Comments
Joined 2 years ago
cake
Cake day: August 6th, 2023

help-circle

  • I doubt they would be allowed to hand out keys (which they do not hold) to another government that would compromise American businesses, agencies, etc.

    Um, yes they would. The very point of eyes agreements is they allow countries intelligence agencies which aren’t allowed to spy on their own people to spy on each other’s people then pass each other the data. Snowden revealed this all a decade ago.

    The CIA and FBI do not store classified sensitive info on iPhones that are backed up anywhere. At least not anything that would come as a surprise to the British or be a risk. Nothing they wouldn’t have access to via the existing intelligence sharing.

    The UK and the US are thick as thieves and have been since the end of WW2.


  • This is frightening.

    They do not have the ability to just remove e2e back-ups in the UK alone and walk away from this, that’s not how the law is written as I understand it.

    The snooper’s charter gives the UK government the RIGHT to DEMAND access to encryption keys of any user GLOBALLY. The law is that they can force the cooperation of Apple to decrypt the account of an American user, of a German user, of a Russian user, of a South African user, of a Brazilian user, of a Japanese user who have never stepped foot in the UK.

    So they’re claiming that this protects their users, that they haven’t complied but the only way to avoid complying with these secret gag orders for compromising encryption GLOBALLY at the demand of the UK government is to remove themselves entirely from the jurisdiction of the UK. Is to remove all executives and technical personnel from UK soil, to not hire such people who live in or are citizens of the UK as technical personnel as they could be gag ordered and compelled to cooperate. To basically entirely pull out of any presence but maybe storefronts in the UK and take steps to prevent the arrest and pressuring of their executives and key technical people with access from being subject to UK coercion.

    That they haven’t done that means all users globally are still at risk. This may be a big PR stunt to convince people they haven’t caved when in fact they have in secret and will hand over data of global users to the UK which shares it via eyes agreements with the US, with France, Australia, etc. This has the added benefit of allowing the UK to keep such access secret by acting annoyed with Apple but not actually pressing any case. If they try and actually prosecute or pressure Apple that’s a sign that they haven’t cooperated globally, if they only offer angry words to the press IMO that’s a sign that in secret they’ve given access globally and only informed UK users that their cloud data isn’t protected.




  • As an extra step you can block DNS requests to external services from within your network to prevent devices trying to reach hardcoded for example Google DNS servers to bypass your filtering which isn’t uncommon with some IoT/streaming devices. Best to both block the known IPs as well as have DNS redirects for the urls that point back to your firewall at whatever IP it’s using to serve DNS from. There is a list called DoH servers by name or something like that which you can add to the blocklist to try and prevent usage of any DNS but your own.


  • Yeah they include a gigabit ethernet port which is really useful for full quality 4k, amazing how many cheaper streaming devices only have 10/100 ports which I suppose is adequate if all you do is stream Netflix.

    But to me it’s just cheaping out to save a dollar or two on the manufacturer’s part that with ethernet & protocol overhead could result in problems potentially even for 1080p streams. Whereas gigabit even with overhead and lackluster conditions you’re going to get 700-800mbps sustained. People think for 1080p bluray dumps for instance that oh bitrates are only around 40-50mbps average but if you fast forward, if you’re seeking around the actual bitrate being consumed jumps to double or more at times and that 100mbps port will choke on that and buffer whereas the gigabit will not flinch. And though I don’t use the playback speed option myself much Infuse does allow playing back at 1.5 and 2x speeds which consume around 1.5x and 2x the bitrate respectively.

    But it’s just nice to not have to deal with wireless hiccups too.


  • Putting this here as another comment so as to not get too lengthy in my original reply:

    The only other things I can recommend in the streaming space would be Dune-HD’s products which are more expensive than Apple TV (though not more than Nvidia shield pro) and are not quite as simple and easy to use but do offer customization and a nice virtualized linux+androidtv system on some of their models AND maybe the Nvidia Shield Pro with caveats. But I have a bit of a bone to pick with the Shield for a number of reasons:

    1. Price. They haven’t updated the hardware in 5 years and have changed it from a premium product without ads to standard AndroidTV with ads on the homescreen yet charge the same $200 price, meanwhile Apple dropped the price on their AppleTV and is eating their lunch with annual hardware updates and regular software updates that bring new functionality
    2. Features. The shield still has bugs around things like framerate switching while AppleTV does not nor does Dune-HD’s products
    3. The lack of updates, the move from a premium android experience without homescreen ads to one with ads. I feel it could be killed off any moment, they’re just lazily milking the product which is probably the only reason they haven’t. You /can/ with some effort alter the launcher to a 3rd party launcher to lose the ads but it’s not easy, it usually requires revisiting and you can do the same thing with the Dune-HD products and they care a lot more and offer a lot more IMO.

    The only reason you might really prefer Dune-HD over an Apple TV is the ability to side-load a modded youtube app if you use that a ton but even that feels up in the air with how hard Google is going in their war on anyone using things like that and how successful they’ve been against it. You can’t block ads in ad-supported major streaming services (Netflix, Max, Hulu, Disney+, etc), neither with pihole nor any other way I’m aware of.



  • Yes. An Apple TV will be about as private as you can get for something that supports mainstream streaming apps (running a mini-pc won’t allow better than 720p quality and you’ll struggle to get remotes to work, it’ll be a clunky experience via web browsers often). It will be a lot better than a smart TV, especially a Roku who are among the worst.

    If you want a bit more privacy consider running a pihole and redirecting DNS traffic at your firewall to your pihole or blocking all DNS traffic not from your pihole. I run a firewall solution that includes DNS redirection and blocking and there are a lot of measurement endpoints for streaming apps that you can block without the app breaking so that’s another little ounce. This doesn’t require a ton more effort though it is more effort it can be a set and forget type of thing. Importantly this does not block in-app ads.

    For me the fact they don’t have any ads is what sells me on it. I don’t want ads on my homescreen. I don’t even want them in the apps but getting that peace and lack of clutter on the homescreen is so nice.

    Apple TVs are also just so smooth. Smart TV’s feel sluggish and pathetic compared to how well everything just works on a device that’s properly powered for the task and not constantly sucking up all your data.

    Apple TVs also have a lot of Apple privacy settings though obviously some of them apps may not allow like many streaming apps require a location check at least intermittently for licensing reasons to prove you’re still in the country but you can limit it as much as possible.

    If you have a decent wifi network and you know you’re not going to be streaming say homemade BluRay rips the wifi entry model is excellent (currently it supports wifi 6 and has a really good wifi chip). I personally run Plex and a media server so I choose the wifi+ethernet model to have the reliability of ethernet and don’t regret it but it’s understandable if your situation precludes being able to use a wired connection or you want to save the $20 extra they charge.

    The only other things I can recommend in the streaming space would be Dune-HD’s products which are more expensive than Apple TV (though not more than Nvidia shield pro) and are not quite as simple and easy to use but do offer customization and a nice virtualized linux+androidtv system on some of their models AND maybe the Nvidia Shield Pro with caveats. But I have a bit of a bone to pick with the Shield for a number of reasons:

    1. Price. They haven’t updated the hardware in 5 years and have changed it from a premium product without ads to standard AndroidTV with ads on the homescreen yet charge the same $200 price, meanwhile Apple dropped the price on their AppleTV and is eating their lunch with annual hardware updates and regular software updates that bring new functionality
    2. Features. The shield still has bugs around things like framerate switching while AppleTV does not nor does Dune-HD’s products
    3. The lack of updates, the move from a premium android experience without homescreen ads to one with ads. I feel it could be killed off any moment, they’re just lazily milking the product which is probably the only reason they haven’t. You /can/ with some effort alter the launcher to a 3rd party launcher to lose the ads but it’s not easy, it usually requires revisiting and you can do the same thing with the Dune-HD products and they care a lot more and offer a lot more IMO.

    The only reason you might really prefer Dune-HD over an Apple TV is the ability to side-load a modded youtube app if you use that a ton but even that feels up in the air with how hard Google is going in their war on anyone using things like that and how successful they’ve been against it. You can’t block ads in ad-supported major streaming services (Netflix, Max, Hulu, Disney+, etc), neither with pihole nor any other way I’m aware of.


  • Why not HEVC 10bit? We’re quickly approaching the age of AV1 and HEVC has been on the scene for a decade now so might as well have a relatively recent codec and HEVC offers improvements of 20% bitrate reduction for same quality even for 480p content vs 264. Modern devices don’t have any issues decoding it either even in software and open source encoders are mature enough. AV1 might be an even better bet but encoding time takes a really noticeable hit compared to HEVC and client device support still isn’t entirely there, the encoders are also still a little more finicky than HEVC.

    As to ripping DVDs to EAC3, I wouldn’t.

    Almost all DVDs are natively AC3 regular dolby digital. You can’t add more quality by doing lossy conversions and the bitrates typically present for DVDs are low enough that doing a conversion to lower the bitrate doesn’t really make sense. We’re talking 512-640kbps for 5.1 audio (and 192 to 240 for stereo) which isn’t unreasonable and the damage incurred in conversion to save say half that IMO just doesn’t make sense with modern storage prices and the amount of storage being used for 480p content. You can easily save as much without damaging the audio by choosing HEVC10 as your video encoder. If you insist on doing a conversion for DVD audio I would suggest doing so to either AAC if you have a good encoder and know how to use it or Opus but I wouldn’t recommend it (all TVs pretty much natively play/decode AC3 audio so given you’re not saving that many bits you’re just inducing degradation of conversion from AC3 to AAC/Opus and again back to AC3 for playback).

    Now for BluRays I fully agree converting from those massive 2000-4000kbps DTS-HD MA, TrueHD, PCM audio streams to EAC3 at 640kbps for multi-channel audio can save a fair amount of space at scale and doesn’t incur meaningful audio degradation (while offering equivalent quality to 1000kbps AC3).


  • Yeah as far as “just works” goes AppleTV with infuse is really high up there.

    Support for all the lossless audio you want, dolby-vision, perfect framerate switching, etc. Either that or something like a Dune-HD box (no framerate switching bugs, lossless audio, DV, etc) or an NVIDIA Shield Pro (though the value of this last one is not great, hasn’t been refreshed in years hardware-wise, more expensive than AppleTV, still has issues with framerate switching not working as well as the looming fact that it feels like Nvidia could kill it and its support off any year now).

    Biggest complaint with infuse would have to be lack of extras support after people have begged for it for a decade. Other than that and having not quite as many sort options as something like Kodi/Libelec it’s pretty great. It allows for directplay and pretty efficiently connects to Jellyfin, Plex, etc. You do have to pay for a pro subscription to infuse if your library has 4k/HDR/DV video or uses any audio codecs but AAC and FLAC as they even gate regular Dolby Digital behind payment (the patent on it has expired) and claim it’s because they use the official Dolby SDK and have to pay for that. Not a lot of money admittedly, $12 a year, it’s peanuts compared to what most spend on streaming services, less than the cost of one month ad-free anything.



  • Majestic@lemmy.mltoPrivacy@lemmy.mlStreaming-devices without adware?
    link
    fedilink
    arrow-up
    21
    arrow-down
    1
    ·
    3 months ago

    If you just don’t like ads AppleTV works great.

    That said if you’re set on something less locked down you might look into Dune-HD boxes. They have some that have a dual OS. One is Android TV (not sure how mod-able) the other is Linux that can have other kinds of apps. They’re virtualized and accessible without a reboot. They have great codec support. Just realize only some of their models have the Android TV dual system thing.


  • If you block ALL traffic from it? Sure. It’s possible but more involved and requires the right hardware to block their tracking domains while leaving streaming apps working.

    It’s best not to use smart TVs as well smart TVs. The apps they have are almost always slower or inferior in some way to the versions you get on streaming devices, updated less often, etc. I recommend pairing a TV with a quality streaming device like an Nvidia shield (or shield pro) or an AppleTV*. Alternatively if you want something a little cheaper in Androidtv space there is the Walmart brand Onn 4k pro.

    *warning with Apple is while they’re pretty good on privacy (meh, there are no excellent choices that support streaming apps in 1080p quality) and don’t have ads their app-store is a bit more locked down. They have all the major streaming services but if you do high seas type stuff it will be more involved and difficult. Though if you have a local media collection (source your own discs or high seas) and run Plex or Jellyfin they have apps for both of those that work great as well as Infuse which usually requires a subscription unless you don’t need 4k or any proprietary audio codecs like dolby for any of your media. I personally can say I enjoy my AppleTV 4K and I think it’s a great device but I run my own media-server and have some common streaming services I pay for.



  • Cons:

    You absolutely cannot get 2FA authenticator codes from 90% of services. Many services that require a phone number even without 2FA just for “verify you’re a human” or because they want your data or to verify region use shortcode services that also will not work with ANY VOIP provider.

    You will not receive their codes. These companies vary from banking institutions to gaming companies to online shopping marketplaces and stores to a Google account (used to be you could get an automated phone call to verify an account, not anymore, must be able to receive SMS from shortcodes that are disabled for VOIP numbers to register and to recover an account) just about anyone you could end up doing business with.

    A shockingly large amount of companies demand phone numbers and send verification texts before allowing you to do business with them, to create an account, to recover an account, to delete an account, to place an order, etc.

    They really shouldn’t, it’s a bad security practice but companies love it because with a phone number they can lower support costs by just allowing people to do a self-service where they get an automated text and can unlock their locked account. They also love harvesting that data and preventing anonymization with VOIP numbers and the reduction of fraud and increase of reliable KYC that comes with requiring them.

    And they all take it as a given that EVERYONE or at least 99% have a cell plan with a non-VOIP number that works with these and the 1% who don’t they don’t care about in the developed world and are an acceptable loss.



  • Take a look here for some alternatives:

    https://dessalines.github.io/essays/why_not_signal.html#good-alternatives

    • Matrix
    • XMPP
    • Briar
    • SimpleX

    Also just because there are no alternatives doesn’t mean your default position should be we just have to trust whatever exists now because it’s good enough. Or that we can’t criticize it ruthlessly, distrust it. Call it out and as a result of that build perhaps the desire for something better, a fix as it were.

    The evidence and history clearly points towards Signal being very suspicious and likely in bed with the feds. This is not conspiracy thinking. Conspiracy thinking is thinking that the country/empire that gave away old German engima machines whose code they’d cracked to developing countries without telling them they’d cracked it in the late 40s/early 50s, that went on to establish a crypto company just to subvert its encryption. That’s done everything Snowden revealed has in fact changed suddenly for the first time in half a century for no particular reason and not to its own benefit. That’s fanciful thinking. That’s a leap of logic away from the proven trends, the pattern of behavior, and indeed the incentivizes to continue using their dominant position to maintain dominance and power. They didn’t back down on the clipper chip because they just gave up and decided to let people have privacy and rights. They gave up on it because they found better ways of achieving the same results with plausible deniability.

    Also why is everything “tankies” with you people. Privacy advocates point out the obvious and suddenly it’s a communist conspiracy. LOL