privacyguides / privacyguides.org Goto Github PK

Description

EFF has announced that HTTPS Everywhere browser extension will be soon depreciated by the end of 2021 as modern web browsers already have native support to forcefully encrypt http sites to https.

"With these simple settings available, EFF is preparing to deprecate the HTTPS Everywhere web extension as we look to new frontiers of secure protocols like SSL/TLS. After the end of this year, the extension will be in “maintenance mode.” for 2022. "
~ EFF

• Source : https://www.eff.org/deeplinks/2021/09/https-actually-everywhere

This makes no sense in keeping the extension further enlisted in privacyguides.org .

Suggestion

Normal users generally tend not to update themselves on a regular basis. In this case referring a soon to be depriciated extension to such a consumer base is not paticularly a good option. It is best for a privacy guide to stay as updated as a browser so that its users at any point can get the correct information they need and not an older alternative solution to the problem.

PrivacyGuides should rather encourage users to enable the native settings (available on both firefox and chromium and all its derivatives) manually as they offer the same functionality.

URL of affected page:
https://privacyguides.org/browsers/

Description

URL of affected page:
https://privacyguides.org/operating-systems/

The privacy policy of NixOS is only the privacy policy of nixos.wiki. This makes no sense.

Description

Looking at the site, a lot of links are V2, which has been deprecated, they should be updated to V3

Description

Add noscript to the list of add ons reccomended

Change the Firefox logo without the fox with the normal normal one for the new people that don't know that are the same.

It should seen like this:

Description

Since links to download software for a certain platform (F-Droid, Google Play Store, Linux, iOS etc.) only have icons, they aren't accessible to users of screen readers, because they are missing names. All you hear link, link, link….

If we don't want to add visible text and only keep the icons, the <i> tags for icons should have aria-hidden="true" and the <a> inside them should have aria-label set to the name of a platform.

Top navigation shouldn't be nested in the <header>. It should be in in <nav> tag adjacent to it.

The legal icons in the footer (left side of the line that specifies which license the site is under) are selectable but not spoken. They also need accessibility labels.

The main page has incorrect order of heading sizes.

I found some issues with the site. Listed in no particular order.

• Update Kryptor being out of Beta. URL of affected page #84
• Update .onion service to V3 for Searx, DuckDuckGo, Njalla, and Tor Project.
• Add V3 .onion service for Tor Project in Browser section.
• ProtonMail onion service is highlighted in red implying they don't offer a .onion service when they do offer a onion service which was listed below.
• ProtonMail already has search for body/content of messages. Site currently implies that they will have it in 4.0
• Link in Related Information for Password Managers is dead.

Apologies for the formatting.

i cannot participate in the following discussions without registering my email address...

Suggest a New Provider or Software
Ask a Question
Share an Idea

...and i'm not going to register my mail address - microsoft is a f'n evil bastard of a company and allot of developers (including myself) have left this place since they acquired it

if you'll allow me to post comments regarding the above topics as issues instead of discussions, that would be ok, however, given that Privacy Guides is about privacy, and microsoft is absolutely not concerned with user privacy -- quite the opposite -- i humbly ask that you consider moving to a more ethical, privacy respecting platform, such as Codeberg

that said, if you care to read what i initially wanted to post....

[Edit: moved to #115]

Description

It says that "E-mail body searching" is not yet possible but this is now possible.
URL of affected page:
https://privacyguides.org/providers/email/

• https://www.eff.org/deeplinks/2021/03/googles-floc-terrible-idea
• https://www.eff.org/deeplinks/2021/04/am-i-floced-launch
• https://amifloced.org/
• https://www.eff.org/deeplinks/2021/04/after-cookies-ad-tech-wants-use-your-email-track-you-everywhere

Description

URL of affected page: https://privacyguides.org/software/real-time-communication/#federated

This is practically privacytools/privacytools.io#2424 from where I am hoping for a warning label to be applied onto Element/Matrix.

• Per-room profiles leak in user-directory (problem for people coming from Discord and examples listed in issue comments): matrix-org/synapse#5677
• Media redactions are never actually removed (direct links keep working): matrix-org/synapse#1263
• Reactions in private rooms aren't encrypted: https://github.com/matrix-org/matrix-doc/issues/2678

Description

DNS provider Snoptya's name is supposed to be spelled Snopyta.

Inverse the T and the Y

URL of affected page:
https://privacyguides.org/providers/dns/
Reference:
https://snopyta.org/
https://snopyta.org/service/dns/index.html

website_tor links should be included in recommendation-card.html

Description

URL of affected page: https://privacyguides.org/providers/dns/

See also #166 and https://github.com/privacyguides/privacyguides.org/discussions/117#discussioncomment-1440335 (quick how)

Validate these are all working, they were with PTIO but don't seem to be correctly implemented with this redesign.

• Logo https://developers.google.com/search/docs/advanced/structured-data/logo
• Breadcrumbs https://developers.google.com/search/docs/advanced/structured-data/breadcrumb
• Articles on /blog/ https://developers.google.com/search/docs/advanced/structured-data/article
• Navbar https://schema.org/SiteNavigationElement
• Organization https://schema.org/Organization

Description

On wide screens, the text is too wide too be easily readable. I suggest that the text is condensed into smaller columns, like below. According to the Refactoring UI book, to create the best reading experience, "make your paragraphs wide enough to fit between 45 and 75 characters per line. [...]. A width of 20-35em will get you in the right ballpark".

Potential fix

This is with a width of 35rem, or around col-lg-6 class name. If you agree with me then I can open a PR for this.

Current situation

Description

The two recommended browser extensions for android, ETag Stoppa and Cookie AutoDelete. Show as no longer available for Firefox android on the add-ons page, and they can no longer be installed.

Etag Stoppa was also last updated in December 2018, so it’s probably abandoned.

URL of affected page:
https://www.privacyguides.org/browsers/

Description

SSLLabs Ranking can be improved (Currently B).

https://www.ssllabs.com/ssltest/analyze.html?d=privacyguides.org

There are several issues to correct. Please refer to the report.

Screenshots

TODO:

• Merge privacytools/privacytools.io#2154 into main
• Host Privacy Guides Lemmy instance privacytools/privacytools.io#2140 (comment)
  • Probably a good idea, better than hosting another forum for this project.

Description

Include a submenu/drop-down/hyperlinks under "Browsers" Page for faster viewing of content of different sections.

URL

https://www.privacyguides.org/browsers/

Additional context

It was included in (old)privacytools.io website which made mobile and desktop easier to navigate to certain sections.

Description

https://privacyguides.org/operating-systems/#win10

This page does need to be re-written. It is quite a bit out of date. I think we could benefit from bringing privacytools/privacytools.io#926 forward into this PR.

Additionally regarding removal of Cortana, (something that wasn't possible when that page was written), we should provide instruction privacytools/privacytools.io#926 (comment).

It's worth noting O&O ShutUp10, already supports Windows 11.

Closes: #172 (comment)

https://www.reddit.com/r/PrivacyGuides/comments/pnh9n8/what_happened_to_privacytools/hcr2i2z?utm_source=share&utm_medium=web2x&context=3

Confirmed in iOS Safari

Description

So if u go to
Software > Productivity tools
Software > Meta data removal tools
Software > File encryption software

U end up in the same page. All of those categories are on one huge page instead of independent pages like the rest of ur software categories.

Edit: My apologies i should've opened this issue under content correction.

Description

Logo needs to be made smaller on mobile screens smaller than 396px, so that the hamburger button can be aligned correctly. Also, the default Bootstrap hamburger is quite ugly.

This:

Should become something like this:

Maybe a sticky header?

Could you add add a section on alternatives to googles FCM push notifications, such as unifiedpush?

Description

Received this message on Reddit.

URL of affected page: https://privacyguides.org/providers/vpn/

Under Port Forwarding for Mullvad it says:

Remote port forwarding is allowed on Mullvad, see Port forwarding with Mullvad VPN.

But I think it should be mentioned that port forwarding is only allowed if you make one-time payments, if you have a subscription setup it's not allowed.

Port forwarding is not allowed for accounts that have an active automatic recurring subscription (via PayPal or credit card). It is therefore not possible to add ports to such accounts. If you have an automatic subscription then you can log in to your account, click on "Manage subscription" and cancel it. Your current time will remain on the account and you can make manual one-time payments from then on.

https://mullvad.net/en/help/port-forwarding-and-mullvad/

Might be a minor thing but had an issue with this so why I'm sending this.

keepassxc and keepassdx are separate program, don't combine then into one.

Not sure if this is a website or content issue.

Tested on a Samsung phone. Can anyone pipe in and test whether this is the same on others as I have yet to try it on another phone. Try testing it on a phone with increased screen estate (Think phones like the Galaxy S8 with it's screen) if possible. Thanks!

P.S. I downsized the image because it appeared too big on GitHub. I can upload the original image size if necessary.

Basic Information

Name: DivestOS
Category: Android Operating Systems
URL: https://divestos.org, http://divestoseb5nncsydt7zzf5hrfg44md4bxqjs5ifcv4t7gt7u6ohjyyd.onion, https://github.com/divested-mobile, https://forum.f-droid.org/t/divestos-an-aftermarket-system/10105

Description

DivestOS is a soft fork of LineageOS. It aims to support both old and new devices. Standout features are automated kernel CVE patching, proprietary blob removal, delta OTA updates, signed releases, verified boot, and a realtime malware scanner.

Additional context

It brings to the tables features that no other ROM does.
eg. automated kernel CVE patching, automated proprietary blob removal, OTA delta updates with Tor support, etc.

The project dates back to 2014, https://divestos.org/index.php?page=history, but public release wasn't until last year.

Previously, privacytools/privacytools.io#2041

My connection with the software

I am the author.

Description

privacy.firstparty.isolate has been made (effectively) redundant with recent firefox updates, and should be removed
URL of affected page:
https://www.privacyguides.org/browsers/

For SEO purposes:

I see that you can access the website via www.privacyguides.org and via privacyguides.org - there is no redirection.

It's best to choose one or the other. I see (page source) that the canonical version is www.privacyguides.org, so apparently the choice was already made, so there should be a redirection from the naked domain to the www subdomain.

Description

URL of affected page:
https://github.com/privacyguides/privacyguides.org/blob/main/README.md

Basic Information

Name: Mull
Category: Mobile Browsers
URL: https://f-droid.org/en/packages/us.spotco.fennec_dos/, https://github.com/divested-mobile/mull-fenix, https://divestos.org/index.php?page=our_apps#mull

Description

Mull is a FOSS build of Fenix (Firefox for Android), with slightly altered arkenfox.js included.

Additional context

Originally was Fennec based and started as builds of my patchset I upstreamed here https://bugzilla.mozilla.org/show_bug.cgi?id=1419581 in 2017.

Here is a release date comparison: https://divestos.org/misc/ffa-dates.txt

Previously, privacytools/privacytools.io#2248

My connection with the software

I am the author.

Protonmail only supports the .onion URL for signing in and onwards.
They force the surface web domain for signing up and it often needs a de-anonymizing method of verification, like a phone number. They support CAPTCHAs but tor does not work with CAPTCHAs so the only way to sign up using tor is either by using another browser or using a phone number which leaks information.

The fix would be to make a clarification or warning by the .onion section for protonmail.

Description

This isn't supposed to be there.

URL of affected page:
https://privacyguides.org/software/productivity/#metadata-removal-tools
https://privacyguides.org/software/file-sharing/#sync
https://privacyguides.org/software/real-time-communication/#exploiting-centralized-networks
https://privacyguides.org/software/real-time-communication/#teamchat

Description

A section dedicated to two-factor authentication (2FA). Potenial software to include could be:

• Aegis Authenticator
• andOTP

This page could also be used as a template: https://thenewoil.xyz/mfa.html

Description

URL of affected page: privacytools.io/about/ redirected to https://www.privacyguides.org/about/ which is a 404 error.

In the Process of Moving to New Website, I think "Privacy Browser" isn't on New Site anyone.
I'm not sure if Privacy Browser still needs Android Webview. If it needs Webview, then It would be good to include Privacy Browser with "Android Webview" flair again,.

https://github.com/privacytools/privacytools.io/issues/1051

Affected url/page
URL: https://njal.la/
Page: /providers/hosting/

Description

The service in question is called "njalla", the service in question is missing a proper privacy policy (legal doc) explaining what information the service collects, how it's used, and how it's being protected, etc. The fact that such an important document/note is missing is bad, the "1337" team ("njalla" team) has written up a terms of service witch briefly explains what information they collect. The problem with the terms of service document/note is that it lacks the necessary information to call it a proper privacy policy. The fix that i propose to you guys' is one of the following three listed below.

1. Contact the "1337" team and ask them to provide a proper privacy policy.
2. Display a warning on the website saying they lack a proper privacy policy.
3. Remove "njalla" from the site all together and look at a replacement.

The options i've proposed above seem like the most logical, if there is any other alternative methods someone wants to add feel free to do so.

This issue was opened by,
Mr. Muffin,
Representative of The New Oil,
(not opening this issue on behave of The New Oil)

Full URLs:
https://njal.la/
https://njal.la/tos/
https://thenewoil.org/about.html
https://privacyguides.org/providers/hosting/

Description

This is how it supposed to be. First the big header title and then the H2 i guess with the link.

1. Here are the headers that need some attention:

2. So here u only have the big title and no h2 beneath the title. So there is obiously no where to link to.

3. Lastly u have to links here pointing to the same section. You can remove one or add some text between them.

URL of affected page:
1&2 https://privacyguides.org/providers/dns/, https://privacyguides.org/browsers/

3. https://privacyguides.org/software/email/#mobileclients, https://privacyguides.org/operating-systems/#mobile_os

Onymochat is an end-to-end encrypted, decentralized, anonymous chat application. You can also host your anonymous .onion webpage with Onymochat.

Repository and installation instructions: https://github.com/SamratDuttaOfficial/onymochat

Features

• Start your own chat server for two or more users from your own PC.
• Users can get connected to a chat server using the public key of the server.
• You can launch your chat client and chat with anyone who has your public key and server details (after he/she/they joins the server).
• You can launch your own anonymous .onion webpage with Onymochat. You can use this anonymous website for your journalistic works and whistleblowing.

You don't have to rely upon any third-party app to provide you with a platform/server to anonymously chat with your friend. You can host your own server and if the person you want to chat with has the server's public key, he/she/they can join the server with his/her/their chat client and chat with you.

Multiple people can use a single chat server. The chat data is deleted whenever the server is closed. The chat is end to end encrypted, so even if someone hacks into the server somehow, they won't be able to get to know what two people are talking about. It uses 4096 bit RSA keys for encryption. You connect to the chat server over the Tor network, which gives you anonymity.

Security

Let's see what makes Onyomochat a secure chat application:

• End-to-end 4096 bit RSA encryption for messages.
• Version 3 Onion Service for your .onion webpage.
• Version 3 Onion Service for your chat server.
• Connection to server over the Tor network.

Hovering over the red ? by microG here does nothing, when it should show additional info. Other tooltips on the site are working (on the DNS table for example) so there's a bug with this badge here somewhere.

Description

https://www.theregister.com/2021/09/07/protonmail_hands_user_ip_address_police/

URL of affected page:
https://www.privacyguides.org/providers/email/

Currently, adding recommendation cards looks something like this (added manually per software):

{% assign browser = site.browsers | where:"name","Firefox" %}
{% for post in browser %}
{% include recommendation-card.html %}
{% endfor %}

{% assign browser = site.browsers | where:"name","Tor Browser" %}
{% for post in browser %}
{% include recommendation-card.html %}
{% endfor %}

A better solution would look something like this:

{% assign browser = site.browsers | where:"type","Recommendation" %}
{% for post in browser %}
{% include recommendation-card.html %}
{% endfor %}

As I'm looking at this..... this code may just work as-is 😄

But, I want to make sure that recommendation cards are being added in the correct order (as specified by order if applicable, otherwise alphabetically) at the very least. Once that is confirmed and the existing browsers.html page is updated to the more concise format we can close this issue.

Although, ideally this might actually be better implemented as a one-liner and a new included file, like simply:

{% include recommendation.html collection="browsers" %}

This issue also has to be applied to worth mentioning and anti-recommendations!

Description

As of v3.0.3, Kryptor is no longer in beta.

URL of affected page:
https://privacyguides.org/software/productivity/#encrypt

privacy_policy links should probably be included in recommendation-card.html as well.

Description

PrivacyTools github repositories have been archived, but don't link to corresponding privacyguides.org repositories. May be this is intentional (since privacytools.io doesn't link to privacyguides either)?

URL of affected page: https://github.com/privacytools/privacytools.io/

Session Messenger is missing under Real-Time Communication - Decentralized.
The section Decentralized is removed. Please Re-evaluate the Section and Messenger.

privacytools/privacytools.io#1678