• 0 Posts
  • 117 Comments
Joined 1 year ago
cake
Cake day: February 19th, 2024

help-circle
  • Brewchin@lemmy.worldtoPrivacy@lemmy.worldSynology Privacy Pollicy?
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    3 days ago

    Short answer: Eventually, yes. But it also depends on what you mean by “privacy” and “danger”, and what else you’re doing with your NAS.

    Longer answer:

    Your NAS can be used in the ways you want, and with the privacy levels you want, without signing up to or using additional cloud services. By choosing to use QuickConnect, you’re trading some of that for convenience.

    History shows that most providers will have a data breach. What that breach includes depends entirely on what you given them and what they’ve taken. Including what their ToS and Privacy Policy says, and has ever said the entire time you’ve used it. That’s assuming good faith and competence, as some services gather more. And then there are things like court orders, some of which you’ll never hear about.

    It also depends on their security model. It’s quite likely that they’re using their own certificates (as it does when you browse to your NAS’s web interface), so would mean they’ll be automatically decrypting and re-encrypting the traffic going through QC. This will often be stated as “end to end encryption”, despite not really being that.

    If your concern is filenames and such, then it’s likely visible to them. Whether they record them is up to their current policies. If your concern is the contents of your screen, video or audio, then it is unlikely. Especially with things like SSH or remote desktop that may have their own transport security.

    However, if you use your own remote connectivity option (eg. WireGuard, Tailscale), you’re not sending data through their servers.

    FWIW, I use Photos and Drive, and both naturally work seamlessly on my LAN. When I’m outside my network, I usually rely on what I’ve saved for offline use. But when I want something specific, I use WireGuard to VPN to my home network to get it. No cloud services and no “I hope they don’t get breached this week” garbage - just a secure point-to-point connection between my device and my home.

    tl;dr: It’s less about what a company says/does about their service, and more about not giving them the opportunity to get it wrong, do bad things, etc.



  • Brewchin@lemmy.worldtoLinux@lemmy.mlLibreOffice is pretty damn good
    link
    fedilink
    English
    arrow-up
    11
    ·
    edit-2
    6 days ago

    Your initial response got peoples’ backs up because of its dismissive tone and (it seemed to me, as you hadn’t provided context) apparent advocacy for web-based tools like O365 or GSheets.

    Many office application users wouldn’t consider vim as an “office application”, as they have their word processing app, their spreadsheet app, their email app, their chat app, their file explorer/manager, maybe something other than Notepad as a text editor, etc, and don’t really know much beyond some of what each of them can do.

    The fact that vim (or Emacs or vim/nvim with plugins, or LazyVim or Doom Emacs) can do all of those things would blow many minds.

    But the setup effort and learning curve is still there, and also requires that they have sufficient permissions/policy to be able to install things.


  • Brewchin@lemmy.worldtoBuy European@feddit.ukMy idea
    link
    fedilink
    English
    arrow-up
    1
    ·
    12 days ago

    The UK seems to speed-run everything the US does politically, so “anyone” probably means a notable percentage of the population.

    Today’s council elections give a hint: Farage’s Reform PLC blew many safe Conservative and Labour seats out of the water. You could fit a cigarette paper between the policies and actions of both parties right now, so they’ll likely both be falling over themselves to work out how to attract the fash vote. 😬

    Today’s probably that grifter’s biggest success to date, and likely all strategised by the Heritage Foundation.





  • I’ve been told off for reporting phishing attempts:

    • Real: “Why did you receive it?!” Dunno mate. Woke up this morning and decided that I wanted it. We all have total control over what email we get sent, right?
    • Fake: “This Isn’t a phishing attempt! What’s wrong with you?!” The From domain, the link domain both look suspicious, and the SMTP headers are dodgy AF. Should I have FAFO and then reported it after the fact?
    • Test: “Why are you reporting this? It’s the test phish we commissioned!” You do realise that you’re meant to do some work, right? Sure, you paid someone to safely phish staff, but that also means following up on it’s effects.

    Damned if you do, damned if you don’t. And manglement gaze at their navels wondering why incidents don’t get reported… 😬






  • I have a 2015 Shield. Best device I’ve ever had, and haven’t ever had to factory reset it.

    My main recommendation - in case it applies to you - is to not run any server software on it (eg. Plex). It’s a solid client device, but has never had what it takes to run server services.

    I think it has plenty of life left in it, so a factory reset might be worthwhile. Also note that the drive in yours may be well past its best.