Joke would be on him as I don't use (mainstream) social media!

That entirely depends on a shitload of factors and contexts 😅 (cybersecurity engineer here)

@JustThat Any third party (or a compromised server) injecting JavaScript which would trigger on 'pasted' data and transmitting this to the attacker. Or stuff similar to this.

In most cases this won't be an issue but again, when you're facing state actors, I would not want to enable any form of data copying/pasting. Pretty much limiting as much not-directly-under-controp data handling.

Or simply some data stealing addons working this same way?

That's how I'd fuck over people using password managers 😄

From a cyber perspective, this entirely depends on your threat model.

@Jilano Hi there, join the club 😄

@zemaitis Windows somehow chooses to ignore my update settings, Linux won't even update without me entering my password :)

And if I'd want to change Linux' behavior on this, I'd simply program it to behave the way I want to!

@Stuxnet Oh, and before I forget it; the S in Windows and Microsoft stands for surveillance!

@Stuxnet And the P in Windows stands for privacy ;)

@skylord This! I'm a cybersecurity engineer but have no (official) degree :)

Edit; looking at other comments, this be country specific. I'm not sure about the laws and such over here but my title (given by the company) includes engineer so yah 😄

Yeah, thats why I went into cybersecurity! Except that this also causes crippling depression, but hey, it's not programming!

@butwhytho Although for some people it literally is a job but yeah, got your point and agree in general 😄

@Demolishun Not sure, what's that?

@Demolishun It also entirely depends on what kinda data you generate I think. Like, Google is connected to PRISM. No matter how random stuff you enter, they'll probably correlate anyways

@camel Alright, let's start.

Firstly, you state that you don't have privacy on the Internet anyways; nonsense.
Just the fact that I can't find your email address just like this disproves that.

Best service that mankind has ever known? That's subjective, not a fact.

Aaanyways, what @Demolishun and @Root said is correct.

Google is a manipulative, data harvesting mass surveillance engine.

And you know what's funny? Many people just say "then don't use it."

Alright, sure! In the meantime I'll go login to this websi.... ahh, Google captcha... aaaand already fucked. Then don't use that website! Maybe I need to use it? Maybe I don't have a choice?

As for using or not using a product based on what the company behind it does... I don't know about you but I'd rather not give any data (I'm in an 'i don't have a choice, partially, situation) to a company which fucks over its users security and privacy wise and has an active NSA integration.

They don't get convicted at all due to settlements and shittons of lawyers...

It's up to the individual to choose what they're okay with but keep in mind that this can also have consequences for other people's choices.
For example, let's say I don't want anything to do with Google (which I don't) and I HAVE to send someone an email who only has a gmail address... right, I'm fucked due to their choices :) (this goes multiple ways, for the record)

I personally refuse to use as much Google stuff as I can. I do have an android phone but it runs a custom, degoogled rom. (I could go for an iPhone but apple is just as integrated within NSA's surveillance networks and iOS is mostly a black box)
I use an end-to-end encrypted email provider which works great!
I'm personally only using Signal and other open source, end to end encrypted messengers (no, WhatsApp is Facebook owned so no way in he'll I'm using that).

It's not that hard but I prefer to vote with my usage/money, against privacy infringement and mass surveillance.

@Root Heading off to bed but @camel, @Root is absolutely right and I'll write out a huge ass comment tomorrow!

A system that can now bypass the users' VPN connection for apps it chooses :)

@localjoost Lol yes wut, I literally rapped the weekly rant thing at the top and then the new rant button...

@theNox Maybe a bit late but; you're back!!! Welcome 😊

@kiki Haha, it's not less appreciation, I actually fucking hate Apple but yeah, I follow tons of tech sites multiple times a day so!

@kiki I only have a Dutch source... (benign one, though)

@kiki Luckily apple is reverting this change due to public outrage.

Although, it had come to light that this firewall bypass "feature" makes it very easy to gain remote (backdoor) access to macs, and it appears that apple was warned of this well before release.

@ZeldaFan69-2 @frogstair for the record, the "ARE YOU SURE YOU WANT TO ERASE THIS MEDIUM, ALL DATA ON IT WILL BE LOST" message from gparted has saved me a few times from fucking up already 😅

@kiki How is he radical? I've heard from Mac users who have mitm'd to check this that the article you're quoting isn't entirely correct since they see traffic every time they open an app as the Berlin dude describes.

Except for the technical details, he's completely correct as far as I can read.

@kiki I hope for it! Too bad that'd only be for tech savvy people 😞

Apple royally screwed it's Mac userbase over...

@frogstair Nah, you get a veeeeery clear warning before being able to format with gparted and you can't run it without root access so for your normal users, this would never happen even close to easily.

@kiki It does seem like (how Louis explains it) the app just won't launch if you're online and don't get a callback from the server.

Aka; apple can now choose what software you can use!

@kiki Mac can just use a different dns server so it probably won't matter at all :(

Have a look at the Louis Rossmann video about this! (Apple watching & logging EVERY APP YOU OPEN with new OS)

@kiki As far as I'm aware it does not but I hope for the privacy and safety of all Mac users that it does...

@kiki Correction from my side:
Not sure about the API removal but they at least added API functionality which makes it impossible to block shit on network level.

https://m.slashdot.org/story/378250

@kiki Every time you open a program in macos big sur from now on, a hash of that program will be sent to apple so they know you opened it. Yesterday quite some people experienced application loading issues after the update which was due to an outage at apples side.

Now, you could block this at system api level but since the new update removes the entire api, that option is gone.

You could do pihole level blocking or hosts file based blocking of course but all macos has to do now is just call a different goddamn dns server and its bypassed. Or you could block that on firewall leve.... oh right, that api is gone now.

So this is pretty much a big fuck you from apple to its users as for control (which you already didn't have that much) and privacy.