I'd 100% take the job if you haven't already. The technology exists and will be used with or without your involvement. Being in the industry gives you valuable info about how the tools work and what they're capable of. Our fight against mass surveillance would be useless without people on the inside who have knowledge about what our enemies can do. We would have no idea what devices and operating systems Cellebrite can break into without the documents being leaked a while back, for example.
Not saying you should immediately leak sensitive info (don't do anything dumb), but if you put your head down and be careful you can help us fight the good fight while doing a job you enjoy.
Well at least they're giving people the option. Most other companies just declare they're giving themselves permission to use your data unless you opt-out (meaning if you've lost access to the account you've got no way to stop them)
They mostly work from what I've used, but since websites are able to tell them apart from regular credit cards it's up to them to decide. YMMV but most subscriptions won't allow a prepaid card to be used as payment, but for one-off purchases they typically work fine
It is getting worse though. I'm getting more and more "payment processor declined card" errors while using them even on sites that used to accept them. I think in the past they've been kinda obscure but now they're rising in popularity as people try to protect their privacy. And so more sites are cracking down on them
It's kind of like VoIP numbers. They used to work for SMS verification everywhere but now it's pretty rare to find any website that won't detect and block them
It has to be a mobile device with a phone number. When I tried this out a while ago the QR code prompts your phone to open its SMS app to send a text message. It can't be opened on a desktop
Depends on your threat model and what you're intending to guard against. You're running an unsupported version of macOS so we'll address that first, if you don't mind losing 32-bit app support I would consider upgrading to Catalina at least. 10.14 Mojave stopped receiving security updates in 2021.
If you're worried about someone physically getting your laptop I would enable FileVault in System Preferences with a strong password (you can enable it for the boot drive and also removable drives like USB sticks), and make sure you shut the laptop down whenever you're leaving it somewhere.
TextEdit can work for writing simple documents but LibreOffice is a good option too, but the macOS port isn't very good (lots of bugs and it runs slow af for me but YMMV)
I wouldn't be so sure. As more and more countries apply these laws it'll be easier for companies to just enforce it for everyone instead of having to keep track of where it's required
I don't blame you. Personally I get more satisfaction from using fake IDs or directing a video selfie thing to a video game character etc or finding some obscure bypass to whatever bullshit they throw at me. That way I still get what I want from the website and they get nothing of value from me, lmao.
Since data only sims allow you to access the data network without having a phone number, can you guys get them without doing the KYC process?
I haven't actually looked into local options much. It might only be overseas companies, in which case you'd still have an overseas number which would stand out if the goal is to remain anonymous. But I might look into it some more.
I mean, the answer to stopping spam calls seems obvious to me. Allow the user to choose whether they receive incoming calls from anybody or contacts only
True, but this wouldn't work for everyone. A freelancer who gets called out to jobs would need to have their phone open to all calls, for example. And a screening step or straight-to-voicemail might annoy potential clients.
I feel as though the government is just trying to implement this to have further surveillance
This is the one and only reason. Things like "it'll stop spam" are just arguments given to make the idea sound more palatable to the general public
Join the rest of us, lol. KYC-less phone numbers haven't been legal in decades in Australia
Joking aside, about the only alternative I can think of is data-only SIM cards. They let you use the mobile phone network and apps etc., you just don't have a number accessible to you. But iirc these use foreign numbers and can make you stand out more. But it might be worth considering for certain use cases
With Bill C-22, the government would hold the copy. The lock you trust would no longer be a lock only you can open. It would be a lock the locksmith was ordered to duplicate.
I don't think this analogy sells just how bad this is. Building a backdoor means fundamentally weakening the encryption. Instead of having an extra key it's more like building a lock with a concealed button that lets you completely bypass it and open the door, and then just hoping nobody finds it besides the 'right' people (i.e cops and gov).
It depends. Certain behaviour like creating multiple accounts in a short time span, or creating an account using Tor/VPN will trigger ProtonMail into making you verify with a phone number, a (non-ProtonMail) email address, or by paying them
I would love to see a country go the other way and put IDs and biometric data in a special category where companies are either banned from collecting it or required to be held liable for damages if it's stolen or misused. It'll never happen though
Gotta ignore what they're telling the public and listen to what they're telling their shareholders and customers
I'd 100% take the job if you haven't already. The technology exists and will be used with or without your involvement. Being in the industry gives you valuable info about how the tools work and what they're capable of. Our fight against mass surveillance would be useless without people on the inside who have knowledge about what our enemies can do. We would have no idea what devices and operating systems Cellebrite can break into without the documents being leaked a while back, for example.
Not saying you should immediately leak sensitive info (don't do anything dumb), but if you put your head down and be careful you can help us fight the good fight while doing a job you enjoy.
Well at least they're giving people the option. Most other companies just declare they're giving themselves permission to use your data unless you opt-out (meaning if you've lost access to the account you've got no way to stop them)
Don't worry guys its only for specific high-danger events like 'crowded areas', easy enough to avoid
I think people who've had bank accounts frozen or seized by their government for attending a protest might disagree with you
They mostly work from what I've used, but since websites are able to tell them apart from regular credit cards it's up to them to decide. YMMV but most subscriptions won't allow a prepaid card to be used as payment, but for one-off purchases they typically work fine
It is getting worse though. I'm getting more and more "payment processor declined card" errors while using them even on sites that used to accept them. I think in the past they've been kinda obscure but now they're rising in popularity as people try to protect their privacy. And so more sites are cracking down on them
It's kind of like VoIP numbers. They used to work for SMS verification everywhere but now it's pretty rare to find any website that won't detect and block them
In this day and age if you don't see the value of a decentralised currency that no government can control, you're very naive
It has to be a mobile device with a phone number. When I tried this out a while ago the QR code prompts your phone to open its SMS app to send a text message. It can't be opened on a desktop
Depends on your threat model and what you're intending to guard against. You're running an unsupported version of macOS so we'll address that first, if you don't mind losing 32-bit app support I would consider upgrading to Catalina at least. 10.14 Mojave stopped receiving security updates in 2021.
If you're worried about someone physically getting your laptop I would enable FileVault in System Preferences with a strong password (you can enable it for the boot drive and also removable drives like USB sticks), and make sure you shut the laptop down whenever you're leaving it somewhere.
TextEdit can work for writing simple documents but LibreOffice is a good option too, but the macOS port isn't very good (lots of bugs and it runs slow af for me but YMMV)
I wouldn't be so sure. As more and more countries apply these laws it'll be easier for companies to just enforce it for everyone instead of having to keep track of where it's required
Depends what device you're using. I've only done it on a desktop using apps like CamTwist
I don't blame you. Personally I get more satisfaction from using fake IDs or directing a video selfie thing to a video game character etc or finding some obscure bypass to whatever bullshit they throw at me. That way I still get what I want from the website and they get nothing of value from me, lmao.
It's the same with ID verification. For your safety you need to start giving random websites your drivers license or passport..
I haven't actually looked into local options much. It might only be overseas companies, in which case you'd still have an overseas number which would stand out if the goal is to remain anonymous. But I might look into it some more.
True, but this wouldn't work for everyone. A freelancer who gets called out to jobs would need to have their phone open to all calls, for example. And a screening step or straight-to-voicemail might annoy potential clients.
This is the one and only reason. Things like "it'll stop spam" are just arguments given to make the idea sound more palatable to the general public
Join the rest of us, lol. KYC-less phone numbers haven't been legal in decades in Australia
Joking aside, about the only alternative I can think of is data-only SIM cards. They let you use the mobile phone network and apps etc., you just don't have a number accessible to you. But iirc these use foreign numbers and can make you stand out more. But it might be worth considering for certain use cases
my kind of gig
I don't think this analogy sells just how bad this is. Building a backdoor means fundamentally weakening the encryption. Instead of having an extra key it's more like building a lock with a concealed button that lets you completely bypass it and open the door, and then just hoping nobody finds it besides the 'right' people (i.e cops and gov).
It depends. Certain behaviour like creating multiple accounts in a short time span, or creating an account using Tor/VPN will trigger ProtonMail into making you verify with a phone number, a (non-ProtonMail) email address, or by paying them
I would love to see a country go the other way and put IDs and biometric data in a special category where companies are either banned from collecting it or required to be held liable for damages if it's stolen or misused. It'll never happen though