lainchan / sec

Surrender

The Oracle · 2020-03-25 21:09
Have you ever got into a point in wich you have to take the bullet and just give away your information to, for example, Facebook? because it just happend to me, with the social distancing i had to make a Facebook account to continue working, to sign up i had to give my cellphone number and take a photo of my face with the clear instruccions to not have anyone else on it, to not be blurry and be well lit. I once saw a screenshot of Facebook asking for a clear scan of ID card or similar to somebody and i fear it gets to that point. I can not not create this account mainly because my coworkers won't help me out getting my work to my boss, they just thing i'm a paranoid lying freak. Am i the only one that bumped into a similar situation?
Anamika · 2020-03-25 21:37
Nah, I don't. I'm fine. >>10489 Great post.
Otto Normalverbraucher · 2020-03-25 21:37
>following instructions never gonna make it
Tequila · 2020-03-25 21:41
I used to buy stuff on Aliexpress. Then one day they said for "security" they needed a scan of my driver's license. I said fuarrrk that and never shopped there again.
藤原純一 · 2020-03-25 22:02
>I once saw a screenshot of Facebook asking for a clear scan of ID card or similar to somebody and i fear it gets to that point. I had this happen years ago, it happened because I was using facebook only for the purpose of using their login authentication for an app I was making (yes I'm part of the problem). I complied, but a week later they derezzed me anyway with no real explanation given and no chance of appeal. Make sure your account activity resembles that of a typical user, or they will soykaflist you. Or better yet grow a spine and refuse to use their service to begin with.
Tomohisa "Tom" Kanezaki · 2020-03-25 22:40
>>10488 Don't use facebook. There are millions of reasons why, even normal people are somewhat aware that facebook is a terrible service. If you have to "take the bullet" for work you could at least use a dedicated facebook browser/sandbox, a low-res potato image and a prepaid SIM. Basic privacy precautions, lurk more on /sec/. >I can not not create this account mainly because my coworkers won't help me out getting my work to my boss Call your boss and ask for a E-Mail address? >clear instruccions to not have anyone else on it, to not be blurry and be well lit I never heard a more obvious invitation to the facial recognition pool lol
Dr. X · 2020-03-26 00:35
Is fecesbook even usable as substitute for proper groupware? Doesn't your organization have it's own nextcloud and ticket system?
Naomi Nascimento · 2020-03-26 00:38
what kind of soykafty organization uses facebook for coordination? Get off that sinking ship anon
Crazy Jake · 2020-03-26 01:42
>>10490 Thank you. Maybe you should make facebook account too, fellow cool and edgy cyberpunker who watches anime and only installs linux.
Elliot Alderson · 2020-03-26 02:15
OP here, first of all thanks for replying i guess, kind of needed that slap, made me remember that i'm not a lone schizo that cares about privacy and i shoudn't just give it up (though i kind of need the money), though lurking would have worked too. >>10493 I guess my activity will be kind of average, ephemeral maybe, just random spouts of chatting and responding to post on a group. >>10495 >>10496 To answer that question, badly managed with soykaft workers companies on the 3rd world use facebook, at least it seems, exactly where i work, not tech related by the way. >>10494 Boss probably doesn't know what an email is, i guess a relative made his facebook acount and he just auto logins from a phone or whatever, also i don't have his phone and nobody wants to ask for me, nobody is attending the company phone either so it's facebook or nothing. After thinking about it i'll probably gonna quit whenever i can, not just for this alone though.
Pris · 2020-03-26 02:23
Holy soykaf those hoops. Years ago I had a fb account and I didn't put up with any of their soykaf then. Fake name, fake photos, everything. Man, you let your guard down severely and got botnetted hard. You should've told your boss to go fuarrrk themselves and use a non-invasive service. >>10497 You're the only edgelord I see here pretending anybody should have to submit to this horseshit.
John Doe · 2020-03-26 03:26
>>10497 yikes >>10494 If it's free, you're the product. Unfortunately, they have become a titan of data aggregation and analysis. They need to be purged from the world.
Mario Rossi · 2020-03-26 18:42
Maybe that is only my point of view but i think surrendering at the current point is about the worst thing you can do. I am not going to succumb to herd mentality, facebook and co are wrong and people that use it strengthen it. But i suppose people will do what they want, maybe you should reconsider but thats up to you. The facebook procedure sounds like something really bad, if people cant see whats wrong with this or atleast respect it, i cant respect them either.
Batou · 2020-03-27 18:40
OP here, another little update, i got derezzed! wow, i know they are data hungry but man they just made me upload data just to search my name and say "effing commie need not apply". I'm NOT going to try again, that was enough botnetting for the decade. Boss can go to heck. That was a ride.
Ein · 2020-03-28 00:09
>>10512 So you're not only a hypocrite that doesn't abide by his beliefs but also an idiot that yells down norm1es in public forum where your boss can see it?
Emmanuel · 2020-04-28 12:10
>>10488 I can't help you, but I can say: Welcome to the CyberGoolag, Lain.
Anemone · 2020-05-03 14:53
if facebook thinks your name sounds fake, they will lock you out of your account until you supply 2 pics of your government mandated ID/drivers license/whatever with your face, name and birthdate on it. had that happen to me like 3 times.
Otto Normalverbraucher · 2020-05-03 19:27
Yep. I had one foot out the door of facebook (never posted, logged in maybe once per month, didn't use messenger, etc.) and then I joined a band and had to enter back into that soykaf ecosystem since a lot of networking/promotion is done through there. Really is like kicking dead whales down the beach, man, especially considering how non-punk being dependent on facebook products is
Cypher · 2020-05-08 20:47
>>10492 Did you purchase sex toys? Authorities would think you're running a prostitution ring even if you're obviously just buying stuff casually.
Jet Black · 2020-05-08 22:48
Of course. I have a normal persona, which I use to sign up for accounts that my school and society requires me to use, and nothing that I use in my anonymous persona can be linked back to my normal life. What more can I do? If I don't do normal looking stuff then my ISP and Google will deem me as suspicious and I would be under even more scrutiny
Acid Burn · 2020-05-09 02:49
>>10876 It's better to look a little suspicious than to throw huge info their hands. A weak social graph demonstrates without a doubt your personality and capabilities etc; better for it to be obscured
Nobody important · 2020-05-09 03:11
>>10846 fyi you can just give them fake dox and they'll restore your account. they're an advertising company not the fbi.
Crazy Jake · 2020-05-09 03:17
>>10491 this. OP, facebook has no authority. you don't actually have to do the things they ask you to do. i really shouldn't have to tell you this. if you want to be on their website you just need to trick their ML automod tools and whatever poor malnourished serf in the windowless facebook moderator dungeon gets assigned your ticket. it's really not that hard if you're a little bit persistent.
Donna Hawthorne · 2020-05-09 03:34
>>10878 >>10879 I played around with trying to use fake details and it seemed to always catch it. Even when using photos that werent on the internet it seems like the facial recognition picks up on people that are already in their database
Jet Black · 2020-05-09 18:10
>>10488 What are you willing to die for? I'm willing to die for the freedom of mankind.
Just another Random Lainon · 2020-05-09 23:52
>>10881 you're probably getting nailed for inconsistency in the actual file you upload rather than the subject of the picture. it is a lot easier to detect that sort of thing than to verify if the ID itself is legit (especially since they accept things like mail and utility bills as a form of identification). for instance, the naive way to trick facebooks face detection thing would be like this: >steal someone's pic from another social media site (vk is a good option) >crop the image to just their face >upload but from facebook's end they see this: >the resolution is wrong for a cameraphone or webcam >the jpeg artifacts in the image have been upscaled and truncated near the edges >reject (without even looking at the person in the photo) in the case of ID, they might detect a shop similarly >color depth is different in the area around the name: certain color pixels appear here that don't appear anywhere else in the image >this region of inconsistent pixels is box-shaped >reject clearly it's a lot easier to design automated tooling that can detect that kind of thing than to design a facial recognition engine that wouldn't have an unacceptable rate of false positives (can you imagine the soykafstorm if fb's face detection system had a racial bias). so the trick is more about hiding evidence of image editing rather than actually forging the subject. i've sent fb really terrible shops of bank documents and mail before and they didn't say soykaf because i took steps to blend in with the positives. >run image through jpeg encoder with heavy but still believable compression (think soykafty webcam from 2008, not deep fried meme). >use an aspect ratio and pixel density that actually corresponds to a smartphone camera >scrub metadata if the image came from social media (sometimes they'll put urls in the exif data which is obviously a dead giveaway) there's a whole lot more to discuss when it comes to not triggering the spam filter in the first place (using a popular email, using a believable name, faking contacts, adding people as friends so you seem real but not adding them too randomly or too quickly, etc.) but the rule of thumb there is just to think about what your average dipshit would do when they get a facebook account and act like them.
Apoc · 2020-07-07 12:17
How many of you are actual criminals? Because with paranoid op sec like this you could be. I dont give facebook my phone or name either. Not that I use it now but when I did I had it on a phone that I was only used for home internet and didnt upload much. Having the app on your main phone and using it on your computer is a bad idea. fuarrrk I hate that company.
Nameless · 2020-07-07 14:06
>>10488 think of opsec is like eating vegetables. It's impossible to be one hundred percent certain you're eating the healthiest diet, nutritionists are always debating no one knows for sure what's best for you. However, there is probably something you can do to improve your diet. It's simply something you need to regularly keep an eye on and be aware of. It's probably not too bad if you go out and eat macdonalds once in a while (although it's still not good), however, you have to make sure that in general, you're getting enough vegetables and stuff into your diet or you'll start to feel the effects of being unhealthy. Sometimes, eating healthy is not the most enjoyable thing, sometimes it might slightly alienate you from your friends, for example, if you go out and they all get burgers but you say "nah, i'm watching my weight so i'll skip this one lads". They'll understand probably, but it's a little strange to them. But you can tell instantly that one person who only eats burgers, they have a soykaf life of obesity and sad death. opsec is exactly like that.
Hiro Protagonist · 2020-07-07 14:20
>>11434 This is my thinking as well. I get frustrated when people say "well my cell carrier knows my location so my opsec is already fuarrrked and there's no point in trying so I just use social media like a normal person". It just seems like a shallow excuse for not putting in effort. Every step you take to protect your privacy is good. I'm currently at a stage that a lot of people dismiss as impractical: I don't have any google apps on my phone, don't use most forms of social media, have a lot of IRL contacts on signal, etc. but I obviously didn't get here all at once. It was a gradual process of improving my privacy wherever practical. I still have tons of areas where I can improve but I'm not discouraged by that fact at all. In time I will get there if I keep at it.
Y.T · 2020-07-07 14:31
>>11435 Something else I should add: I think there's a delicate balance, as a community, when it comes to shaming/soykaftalking people for using botnet software. Too little and you're tacitly encouraging mediocrity, too much and you can make people feel overwhelmed and inadequate. I feel like we can sometimes err too much towards the latter. Snarky ">uses facebook" type responses do have a benefit in that they can encourage people to do better but I think its preferable to give anecdotal evidence that getting off Facebook is not only possible but can be done without substantial negative consequences, along with a recognition that everyone has different needs. For instance, I still have a gmail account because my university uses gsuite and as part of my job I am expected to respond to emails using that account. For others, not using gmail is trivial and without that context it seems easy to mock me for not taking such a basic privacy step. On the other hand I can easily do away with e.g. twitter and Instagram where others may have legitimate reasons for needing to keep those accounts around. Obviously they should always be looking for opportunities to improve, just as I await my chance to get rid of my uni gmail account, but its pointless to give them soykaf for it as long as they're actively trying to get better.
Agent Smith · 2020-07-07 16:44
>>11435 I was where you're at for a while, unfortunately I had to get a new phone and this one is unrootable. It's a comfy position to be in. You can tell it's working when you see ads for things that you would never ever be interested in. >>11432 If I were a criminal, I would not tell *anyone* who did not need to know. Not even anonymously. That is the biggest thing, is separating your online identities. Truly good opsec means that you keep tight lips.
Morpheus · 2020-07-07 19:34
>>10500 What's wrong with data analysis? I would like to have as much data as facebook
藤原純一 · 2020-07-08 21:06
You could easily buy a 200 peso (VIVA MEXICO) flip phone and use a photo of someone else + their name. https://www.google.com/search?client=ubuntu&channel=fs&q=picture+of+person+with+id&ie=utf-8&oe=utf-8 Come on, OP! Try harder.
Mitnick · 2020-07-09 18:41
>>11439 I wonder if Gus Fring (Better Call Saul) would have a Facebook, its set in 2004 tho. The hidden in plain sight motto holds true though. Being completely anonymous can bite you in the ass in many ways. Larping as a secret agent when there's no reason too can backfire badly. Like if someone went for a walk with no ID, phone etc, had an accident and died there might be no way to ID the body and the family would never find out what happened to them. I too agree its good to be low key and stealthy in many scenarios but just the other day someone on the intercom asked if it was me and I said no, cause reasons, and it only was the postman. I think for some Lains this leave-no-trace hobby is paranoia taken too far, especially if you're not doing spy soykaf like Mike Ehrmantraut.
Masami Eiri · 2020-07-13 00:26
Nobody interesting has kikebook as their only method of communication, and life's too short to spend the whole thing watching life through the internet. The whole "using facebook is hiding in plain sight" thing is dumb. Most people don't use facebook, so if you're trying to blend in join the majority. Facebook claims 2.6 billion active users, but how much of that number is bots run by 3rd world upvote monkeys?
William Holtzer · 2020-07-13 00:50
>>11470 i think you're looking at this wrong. it's more important to have your identities thoroughly separated than it is to be completely anonymous. the government knows who i am because i have to pay taxes and drive. that doesn't mean the government (or anyone else who cares to look) should get my full name and a bunch of personal details about me spelled out on a facebook account or whatever.
Wintermute · 2020-07-13 00:53
>>11432 Everyone's a criminal if the government wants them to be, and there's plenty of people in prison for being inconvenient enough. It's not a great idea to stand out more than necessary, and not existing is standing out less than existing. The less they have on you, the less can serve to fuarrrk you over.
J.C. Denton · 2020-07-13 00:58
>>11508 yeah its kind of like how traffic laws are so extensive and complicated that your average driver will commit countless infractions on their way to the store. it all results in a situation where if a cop wants to pull you over and search your car they can figure out a completely legal reason to do so.
Unsigned · 2020-07-13 21:07
>>11508 >and not existing is standing out less than existing But as for not existing, some people can get away with it, and it works, you don't need facebook if you're just a regular wagie with a soykaf job. But you do need facebook if you have to connect in professional environments, or whatever their flavor of bullshit is. Also same with LinkedIn, but Facebook is becoming irrelevant as a platform for a lot of reasons lately, while it's apps are still going strong. Just take a phone, remove the microphones, block the camera, and use it exclusively as a botnet device, hide it behind a firewall and monitor all of it's traffic. There you go, you can now converse with the botnet on it's terms and it can't spy on you when you're watching Strike Witches.
Lady Jessica · 2020-08-20 05:05
>>10488 Never let a crisis go to waste they said. Everyone is cattle now.
John Doe · 2020-08-30 02:45
>>11436 What do you use instead of Gmail?
Pulse · 2020-08-30 09:46
>>10488 Hardmode no-botnet lifestyle/hobby is the only distraction I have from suicidal thoughts. I can subconsciously pretend I'm isolated because I don't have social media or IM and I'm doing "the right thing".