A dedicated place to share all of our wins! Welcome to our 37th week of privacy & security wins
Now, this only works if you all want it to work. That means:
Don’t be shy! Even the smallest win is something you can share. The more of you who contribute the better it is for everyone
Be positive. Remember we’re all in different places of our journey. Someone enabling 2FA on their first account can be just as excited as someone who figured out how to install Qubes on their new system. Give each other some love!
After several months with no progress I have successfully restored a phone I once flashed to working condition, installed Magisk, removed the Chinese crap, installed a firewall, so now it’s like it’s not even Chinese! (But it still suffers from having Android 6)
LeEco Le S3 X626
(their branding centers around ecology, in fact, they are so eco-friendly that they don’t allow you to run custom roms unless you use a bug in their fastboot implementation) (it’s hard-resetting. if you hard reset the phone while in fastboot mode, it will skip locking and will successfully boot a custom rom)
Just deleted my Telegram account. It’s kinda unfortunate because I liked the Telegram concept when I used it back in 2020 but now it’s just crypto slop, Pavel Durov talking all the time about his cryptocurrency and handling personal data to the govt… I’ll miss you, Telegram… :'/
Just helped @tmxdd23 lay the foundation for his new privacy blog!
He reached out for help and we worked on the next few hours setting up his Codeberg repos, one for his Hugo development, and another for the built site, which can auto-publish to a codeberg.page site, similar to Github Pages.
Then he learned about subdomains and added that page as a subdomain to a temporary domain, so once he does flesh out his blog site, it can be connected to a more permanent domain.
Next step for him would be modifying Hugo site to way he wants. Best of luck to him for that!
I began to delete some accounts (and requesting data, where possible), going through Bitwarden in alphabetical order. My discoveries so far are:
Some services are easy to deal with.
Some requires you to contact support, if you want to delete your account (which I haven’t done yet).
Amino specifically, won’t let you delete your account from the site, you have to do it in their app. But I can’t log in because my phone fails their attestation for some reason (yet Revolut works just fine).
I wanted to start using rss more but I didn’t like how most rss readers update all feeds at the same time, leading to a possible traffic analysis profile. So I programmed my own Reader. Using Pythonista on iOS I created an extremely useful and privacy rich program. It uses the Python requests library which only downloads the html on the requested page along with feed parser. There is zero JavaScript and only loads the rss articles of the feed I want to view. Requests also allows you to submit any user agent in the header along with using a socks proxy if I wanted to add even more anonymity other than my vpn. The Referer is set to empty along with a timeout of 10 seconds in case there is some problem with the page load. Once the code downloads the static page, it strips out only the text I want to view. It removes any links, or other website information that isn’t relevant to the article. Because it doesn’t download any images there are no tracking pixels or uniquely generated image links that could be loaded like traditional rss readers. I added a bunch of user agents which are randomly selected at the start of the script. It only loads the page that I requested so there aren’t any redirects. Once the page has been formatted it saves it as a static HTML page which is then opened with the iOS Quick Look. I forked the code so I can also use it in the share sheet to open any link I want. I’ve found it works on most websites that don’t employ captcha’s.
Welcome to our 37th week of privacy & security wins 
