I mean this is great except for hexbear and .ml, wtf lol
this post was submitted on 06 Nov 2024
261 points (92.8% liked)
Transgender
128 readers
787 users here now
The Lemmy place to discuss the news and experiences of transgender people.
Rules:
-
Keep discussions civil.
-
Arguments against transgender rights will be removed.
-
No bigotry is allowed - including transphobia, homophobia, speciesism, racism, sexism, classism, ableism, castism, or xenophobia.
founded 3 months ago
MODERATORS
Hexbear has a really large trans community with a lot of mutual aid work. Are you trans?
When I first checked Lemmy this morning, I quickly found three threads from trans communities full of people afraid for their freedoms and even their lives because of the results of the eletion, and another that was a circlejerk about how the election didn't actually matter. That's pretty much it in a nutshell.
Lemmy.ml
hexbear.net
no
These are all large trans spaces, and Hexbear has a couple of impressive mutual aid groups thats helped many trans people.
Why not share c/trans over c/transgender? It's way more active.
Lemmy is not a secure platform. Whoever wrote this should consult a real cyber security expert. Do we have any here? I consider myself very savvy, but I don't play games assuming I know enough.
Of course not, its public facing. The point is to not give away sensitive information like browser fingerprint and IP to a giant corporation that is known to work with law enforcement.
I appreciate the intent of this message, but how sure are you that federated social media like Lemmy is really any safer than Reddit? Not much on here is encrypted, to my knowledge, and instance admins need to respond to subpoenas just like anybody else... In the event of hostile government action, you're much better off communicating on E2EE platforms, and unfortunately, posting on public social media platforms is a risk.
You can mitigate much of that risk with a burner email and VPN, but you can do that on other platforms too.
The decentralized nature of federated social media is the only advantage it has. But it's kind of a wash. The big social media platforms have resources and weight they can throw at resisting state level surveillance. The operator of the Mastodon instance you sign up for probably doesn't have a lawyer on retainer let alone the army of legal experts Facebook or X could throw at the problem. That said you can always change instances or use multiple ones to begin with.
Sure, there are things you can do to be safe on Lemmy/the fediverse, but most of those things aren't inherent to the platform, they're just good safety practices, and most importantly none of them are mentioned in this "PSA" about "safety".
I don't disagree with you. Realistically if you're serious about security and a state level actor is in your threat model, you probably shouldn't be using social media at all, but especially not platforms that focus on followers and public posts rather than one-on-one or small group connections. At least not for day to day usage.
I don't know a lot about this. If the United States wants to subpoena records from an instance admin based outside of the United States, do they have to comply?
I think it's pretty murky, ignoring a subpoena is a crime, so US may be able to charge them with obstruction and request extradition, it's then on their home countries to decide whether to accept the US's requests. Either way I'm sure it would make them ever traveling to the US very tense.
See: Julian Assange
Remember though, these instance admins are generally doing this out of the kindness of their heart on shoestring budgets, it's so much safer and easier for them to just comply with legal requests. They're nice people, but not political martyrs.
For extradition, you'd first have to know who the instance admin is.
I don't think foreign ISPs will (or are even allowed to) react to a US request for information.
So the US would have to request that info from the foreign country's government via diplomatic channels.
Thanks, that makes sense. I wasn't sure what to even consider for that kind of thing, but I do recognize these admins are just ordinary folks.
Mainstream social media track and identify in non-obvious ways such as browser fingerprinting. If you're on a federated open source social media site then there's none of that. If you use a VPN (and if you can't afford one, Proton offer a free tier) or Tor browser to mask your IP and you're using a non personally identifiable email address that goes a long way towards protecting yourself.
Beyond that, never posting identifying info about yourself such as the place you live, including the State, will protect you even further.
But I do agree that using an E2EE service is the best way to communicate.
Centralized platforms are much more dangerous, the various FOSS federated platforms are auditable and don't contain inherent spyware. You can also use certain sites as a proxy, or start your own VPS+lemmy instance to use as a secure proxy for yourself. The restrictive nature of sites like reddit means they can ban you for taking basic security precautions, which they do regularly.
I generally agree, but that is not conveyed in your image, it just (basically) says "come to Lemmy, you'll be safe". There are critical extra steps you should take if you're worried about safety - this just feels more like an advertisement.
If you're reading this I'd recommend against joining the ml or hexbear chat groups
Please join the actual Blahaj Matrix group instead as it is moderated by Ada
Blahaj Sidebar:
We have a public matrix channel for all Blahaj users at #blahaj:chat.blahaj.zone
If you're looking for the support channel, rather than the general chat channel, you can find it at #blahaj-support:chat.blahaj.zone
Whether you like them or not, they have very useful mutual aid groups that have funded a lot of HRT, rent, etc for trans people. One trans person got hit by a hurricane and needed assistance with rent for 2 months and it was paid in full. Without their help, that person would have been homeless.
Joined the matrix. Not trans, but I'll support all of you and spread the good word.
edit: they kicked me after I said I wasn't trans, even though I support them. Oh well.
Please don’t take it personally as there are other groups who do welcome allies, the community is a bit worried at the moment, I’m appreciative of your support!
Its a trans group chat, its for trans people. Public facing communities like this one are fine to converse respectfully in. If you do know trans people, be sure to spread the image around.
Lemmy lacks the resources to protect anyone; use things that we already have, like tor, instead.
Tor is a good choice, yes, but most normal people aren't going to use that daily. It should absolutely be used for purchasing things like DIYhrt though.
Ah... well... the Tor Project currently receives funding from the US Department of State, and has in the past received funding from DARPA and the US Naval Research Laboratory... (Tor sponsors list)
the federal government currently accounts for well over half of the Tor Project’s overall funding.
Privacy group demands answers about government’s influence on Tor
Just fyi
Install Linux on your computer, install GraphineOS on your google pixel phone or lineageos on any other android phone, get a VPN (Mullvad is the best choice), always encrypt your communications, always encrypt your data (some distros support full disk encryption), find people you can trust, and most importantly be careful.
i recommend Privacy Lock to force entering credentials to unlock the phone if you drop it or shake it, and don't use fingerprint so you can't be physically forced to unlock it
Afaik revolt.chat (real Discord alternative) has a trans community as well.
Relatedly, lie frequently and believably on the internet. Bots and potential doxxers don’t deserve the truth and others will benefit from your efforts in poisoning the well.
Also rotate accounts regularly, using different information in each one.
Aye.
Lemmy itself is inherently public.
People should be careful what they post anywhere online, including here.
Don't doxx yourself people
The "no takesies backsies" rule of the Internet applies 100x on decentralized platforms like Lemmy, since anything you post is being broadcasted to tons of other instances which can do whatever they want with the info. When you 'delete' something on the fediverse, all you're doing is politely requesting every instance that received the content to remove it.
PGP!!!