It’s a relatively new thing. i was watching YT for years with Mullvad with no issues then late last year started getting blocked. Right now I can only watch on either NewPipe or on the official web client while logged in.

Cops confiscate devices all the time without good reason lmao. It’s commonplace to seize devices on a person upon arrest. Judges also grant search warrants upon very little evidence too. Cops absolutely don’t need to “prove” anything to a judge to get a warrant; there is no standard of proof at all; it’s a standard of evidence, which is not the same thing as proof, and a low standard of evidence at that.

in addition to what others have said, also have your browser fingerprint as fairly generic, and what is unique should ideally be randomised upon each start of your browser. There’s nothing stopping a Lemmy instance from running clientside code that gathers your browser fingerprint, and if they are well-resourced enough to have access to fingerprint data from other sites, they could correlate it to de-anonymise you.

Self host email and nextcloud. Keepass for pw manager. I use davx5 and fossify calendar for mobile calendar. Nextcloud mobile just manages your files and doesn’t have the other Nextcloud apps.

Idc about Proton either way though. Imo if proton was fine for you before then it’s fine for you now. I just prefer to have control over my own services.

Protonmail is a widely used and common email provider. There is no reason why an employer would be prejudiced against your application based on you having a Protonmail address. I think a far more common thing employers think about when seeing applicants’ email addresses are things like “haha, they’re still using their email address from when they were 8 of alexdaboss at gmail dot com”, but I highly doubt they care about what domain it’s on unless you’ve got like a pornhub.com address or something.

It’s not hard to obtain someone’s biometric data. My concern wouldn’t be Amazon knowing my handprint (my government has my handprint, Amazon can just ask them if they want), but how incredibly easy it is to just get a print of someone else’s palm and charge them for your shopping. Pretty silly to use any biometrics as a primary authenticator rather than as a 2FA option.

If it’s low privacy needs (ie you don’t have a state threat model), Signal is completely fine. I use it to talk to my friends. I also use Matrix, though federated Matrix isn’t the best for privacy either due to the amount of metadata that leaks through federation. But federated Matrix is also fine for the kinds of things you would use eg Discord or IRC for.

If you do have a state threat model, I personally think SimpleX is ideal for that, but it doesn’t have as much of a userbase so you probably need people who care enough (eg people actively under threat) to switch to a new platform. Whereas most people I know are already on either Signal or Matrix, and I’m not having particularly sensitive conversations with them either so both work fine.

Saudi is aligned with the US/west, and even if they weren’t, multiple geopolitical powers can be oppressive at once, believe it or not.

If no one’s on any kind of private messaging platform, SimpleX is good and fairly easy to use. But I mostly use Signal just because everyone’s on it.

Also consider your threat model; Signal is appropriate for just casual personal conversations, but it is centralised and not self-hostable. The servers are run by the Signal org who are based in the US. If the potential of message metadata (which can be used to eg create networks of who’s messaging who) getting into the hands of the US state could create significant issues for you, you may want to at least find either a decentralised or self-hostable solution which is not so US-centric. I assume, though, since you’re talking to these people on non-private platforms, that these are not super sensitive discussions anyway.

SMS 2FA is not secure, and I don’t particularly care about the security of my bank account. I have a state threat model as a political organiser, a very real one given the arrests, raids, imprisonment, etc I and my comrades have faced, meanwhile I’m not aware of any rando civilians hellbent on stealing my money. And frankly I don’t have that much money to steal anyway. If you’re determined to get my sim card to log into my meagre bank account you probably need the money more than me.

I guess if you’re that worried about SMS security you could get an esim and rely on device encryption to protect it. Wouldn’t be the most secure thing in the world but at least it provides some protection, and if you buy an esim anonymously (e.g. with https://silent.link/) an attacker can’t impersonate you to try get your sim card.

You would be surprised at the incompetence of the surveillance state. I’ve known people subject to terrorism investigations by world superpowers where the state couldn’t figure out the basic facts about that person’s life, let alone find anything that may be helpful to prosecution. This kind of fearmongering only encourages people to not be cautious. Not that the extent of surveillance isn’t terrifying, but at the other end of the table is just other human beings. All humans are fallible, including the ones who spy on us, and we can both outsmart and outmanoeuvre them if we’re serious about it.

Is iMessage not also proprietary?

The alternative is a discord server, which in privacy terms is questionable choice too.

I use a Discord-Matrix bridge to communicate with some groups that are only on Discord. Of course it still all goes over Discord’s servers so the messaging itself isn’t private, but you at least don’t have to use Discord’s proprietary client, and the only data Discord will have is the data you send it from the Matrix bridge (plus identifying data on the Matrix server you’re using).

What do you usually use and offer when people ask you for contact?

Signal as a preference—not because I think it’s the best chat app (I dislike its centralised nature; not being able to self-host is a near-on dealbreaker if not for the fact that everyone I know is on Signal; and it requiring a phone number to sign up is also bad for privacy)—but because it’s the one the most people have. All my friends are on it luckily, by nature of my friends largely being communists or young queer people (or both). I also offer SMS and email. If someone asks a pretty open-ended “how can I contact you”, I might also mention Matrix and Simplex as options in case they have those.

Do you use ba[n]king apps?

No, and I really don’t understand why people do unless your bank requires it and there isn’t another appropriate bank that doesn’t require it. I’ve tried my bank’s app (which works fine on GOS luckily) and found it didn’t offer anything the web UI didn’t offer, other than the option to use the app as 2FA for banking stuff, but I just get SMS 2FA from my bank.

What’s your way of transport after having few beers in pub? Do you use taxi via calling it directly or use that weird Telegram taxi addon?

I don’t use taxis; I use public transport. But if I had to get a taxi, I would probably either use my GPlay profile on my GOS phone to install Uber, or I would probably just ring a taxi company over the phone.

Is there a way to convert google map pins to open source solutions and vice versa?

I’m not aware of a way. I’ve just told people to either give me an address or coordinates, because I don’t have google maps.

What’s your recommended software for directions? What do you use for driving?

Organic Maps has been my go-to for a while. It’s wonderful. Works well for driving too. I use RHVoice for text-to-speech, which iirc was recommended to me by a fellow lemming.

I don’t track fitness activities, and I use GOS+Pixel.

Moreover as I know that it is no open to sign up how to get a RiseUP account?

Invite. Last time I checked, they weren’t allowing invites because of abuse.

Tbh if you don’t know anyone with an account you are almost definitely not the target demographic. If you need just email then there are plenty of more general privacy email providers that aren’t specifically for organisers, or you could self-host.

You can use a password manager so you don’t have to remember it. And enable 2FA, shouldn’t really be possible for some rando to get into it, only well-resourced and organised attackers.

we refused pressure to deplatform both Palestinian student groups and Zionist student groups

Insane equivocation. One of those is a national and ethnic group; the other is a political movement whose pet project is currently on trial for genocide… “we refused pressure to deplatform both Jewish student groups and National Socialist student groups”

Unless you specifically look for jobs at politically oriented organisations (eg companies that pander to the privacy-conscious crowd, non-profits, etc), I just keep my professional life and my political life separate. I’m sure most people just have a “work profile” for job stuff and keep their personal life private.

I’m just using Obtainium, but I assume they probably will put it on F-Droid soon.

Someone forked and is maintaining Mull: https://gitlab.com/ironfox-oss/IronFox

Will have to see long-term if this is a good option of course, as it’s not been long.

Someone forked Mull and is still maintaining it: https://gitlab.com/ironfox-oss/IronFox

Obviously it’s early days so we’ll have to see if this is a sustainable alternative.