Salamander

  • 5 Posts
  • 79 Comments
Joined 4 years ago
cake
Cake day: December 19th, 2021

help-circle
  • Salamander@mander.xyzOPtoPrivacy@lemmy.mlThe Pager
    link
    fedilink
    arrow-up
    2
    ·
    3 days ago

    Yeah, as others mentioned, you can get cheaper data plans depending on the monthly data you need.

    However, one of the interesting properties is that, unlike with phones, there is no restriction on the number of pagers that can listen to your assigned RIC. You can use one subscription to communicate with as many pagers as you would like, and each individual pager can be programmed using text filters such that one can implement their own sub-address system.





  • Salamander@mander.xyzOPtoPrivacy@lemmy.mlThe Pager
    link
    fedilink
    arrow-up
    5
    ·
    4 days ago

    LoRA is sort of a slower version of wifi and as such, you should assume Meshtastic is monitored, at least for traffic metadata. The actual messages are encrypted though.

    LoRa is great in that it gives us direct control and ownership over the infrastructure. One can participate in the network without their identity being known. But, yes, traffic metadata specifying the sender and recipient identifiers are plain text and can be easily logged.

    Default configurations will have your device broadcasting often to contact new neighbors and will re-broadcast incoming messages. Since the device is quite active, and the chirped signal signal so characteristic when seeing via an SDR, someone who is actively tracking a Meshtastic device can do so very effectively.

    Still, the fact that you own fully the device and have total control over it opens up a lot of possibilities. To give one example: if the mesh around here were strong, I could make use of a device configured for Rx only as a meshtastic pager. I might set up my Raspberry pi to inject a message from a randomized sender via MQTT in response to an XMPP message. Then, I would not use any radio transmitter at all.

    For regular peer-to-peer chatting, yes, the default properties are very leaky, but we can change some of what we don’t like.

    There is actually still such a thing as a satellite pager, a receive-only device that can get pages that cover regions as big as small countries. They stopped making the receivers quite a while back, but some are still around and the subscriptions are still available, though expensive. This info is itself some years old so maybe they are all gone by now.

    That is very interesting. When I looked into satellite devices I only found two way devices, like the GARMIN inReach. I figured that it made sense that satellite comms would be 2-way because broadcasting all over the world seems rather extreme.

    I have searched for these now and found the Iridium 9501 from Motorola. It is pricey, ~$680 for the device and either $90 (150 messages) or $150 (unlimited) per month for the subscription. In the description it says that you do need to program three ‘Message Delivery Areas’ as the messages are not broadcast globally, but I think this is acceptable.

    Thanks for pointing that out. $90/month is pricey… But it is cool enough that I would seriously consider it if I would travel a lot for work.

    POCSAG pagers still exist in the US too, though again, they are quite expensive compared to cell phones. Their main attraction is supposed to be higher reliability, so e.g. doctors can get paged even with the mobile phone network is out. I don’t know if that advantage still exists. In the more distant past there was something called ARDIS which I think is gone now. That was quite a robust signal, so you could get paged even in sub-basements of buildings and places where mobile phones didn’t work. Repair technicians who worked in those places often carried them.

    I think that the advantage might still exist, especially in buildings with thick walls and underground floors. While looking into pagers I found discussions about them being phased out in many hospitals and replaced with ‘EPIC secure chat’ and with sharing private cellphone numbers.

    In the Netherlands there is also the P2000 system, which is considered to be very reliable. That network makes use of FLEX to send messages to emergency services. It is possible to easily capture those too using SDR, or to see a live dump of these messages in sites like this one: https://p2000-online.net/alleregiosf.html

    I’ve followed this stuff slightly as it’s interesting for the reasons you say, but I’d have to say it’s not really cost effective for most of us. POCSAG in particular only works in relatively localized areas like single countries. I know a guy who would want something like it, but only if it worked pretty much everywhere, since he travels a lot.

    Yea, I can see that. So, that guy might like the satellite pager, but probably will not like the price tag.

    Thanks for your reply!


  • Salamander@mander.xyzOPtoPrivacy@lemmy.mlThe Pager
    link
    fedilink
    arrow-up
    4
    ·
    4 days ago

    I do like Meshtastic a lot and I am still trying to get the most out of it. But there are too many gaps around here. In the city there are more nodes, but also a lot of buildings. Outside of the city there is more line of sight but few nodes.




  • This scanner is for 2-factor authentication in the case that one does not want to use a phone app. When you try to log in, or pay online, the browser displays a unique QR code that the scanner is able to decode.

    You would enter your pin into the scanner, scan the code, and the scanner displays a number. You then type that decoded number into a field under the QR code and your are let through.

    It can be ordered for free here in the NL: https://www.ing.nl/particulier/digitaal-bankieren/mijn-ing/scanner

    So, with this scanner as a 2FA method, the app is not needed. One can pay offline with a card, online with a scanner, and check account balances through any browser using the scanner to log in.





  • OK, fine… I’ll be honest…

    I have had good experiences with it. I have not had problems with apps. Most of my apps I get via Obtaininum. As for the UI, I think it is fine.

    I don’t think Google will be able to lock my Pixel’s bootloader, and, if they do, well it is already running the OS. So it shouldn’t be a problem for a while. If at some time GrapheneOS stops being supported I will find something else. I don’t need a guarantee of permanence to find it useful today.


  • If they can send me over the second half of my thesis I would appreciate it enormously! 😀

    The analytics tools that I am personally uncomfortable with involve dynamic, changing forms of data. I run GPSLogger on my phone (without a SIM card) and continuously log the GPS data to a text file. This data is then synced to my computer when WiFi is available. I can display this data on a map using gpx-viewer, and show very detailed tracking data of myself.

    I have explored this map with some friends/family. They get to see a time-stamped movie of my life - my trips to work, to the shop, when I go out, if I go on a trip, etc. The data displayed in this manner is somewhat intimate, personal information. Anyone I have shown this to has said that they would not be so comfortable with such a map of their lives existing… Well, if they are carrying a active phone with a SIM card, it does.

    To think that a company like Google can own such a map for a very large number of people makes me uncomfortable. On top of that, each of those map trajectories can be associated with an individual and their personality… They have the ability to pick out specific trajectories on the basis of the political ideologies or shopping behaviors of the personas behind them. This is extreme. I am of the opinion that the convenience afforded by a these technologies does not justify the allocation of that super-power to the companies that enable the technology.

    A few years ago Facebook enabled a “Graph search” feature. This allowed users to create search queries such as"Friends of friends of X who like the page “X” and went to school near Z". That tool seemed super cool on the surface, but it quickly became obvious how something like that could be easily exploited. Later on in Snowden’s book I learned about XKeyscore from the NSA, which is like an extra-powerful no-consent-needed graph search that is available to some people. This is not just targeted ads.

    I guess that what I am trying to convey is… For me, making the privacy-conscious choice is about not contributing to the ecosystem of very concrete tools that give super-powers to groups of people that may not have my best interest in mind. In my mind it is something very tangible and concrete, and I find many of those convenience tradeoffs to be clearly worth it.



  • Fresh from the Farm Fungi - he is a mushroom farmer from Colorado. He has a ton of valuable information on growing mushrooms and running a business. He also has a few series of videos on very interesting experiments such as growing boletus, morelles, and cordyceps.

    Microbehunter - he is a biology teacher that runs a microscope channel. His videos are very useful for learning the basics of microscopy.

    Huygen Optics - I’m not sure about this guy’s background. He worked in R&D for Phillips in the 90s and he knows a lot about optics and chemistry, but I don’t know much more. He has built some equipment in has garage for sputtering metals on surfaces and has some pretty cool videos.

    MissOrchidGirl - she is more popular than the others. She has great info about caring for orchids and a fantastic orchid collection.

    Ben Felix - he is a portfolio manager with very solid financial advice. He supports his claims with research articles.


  • The “Slur filter” is a server setting. The filter makes use of a “regex” (a text matching algorithm) to automatically remove any text that matches those words. An admin needs to explicitly set the rules for that regex. The regex does not take language into account, it is a simple text matching algorithm.

    The box is in the Admin settings page and looks like this:

    I know that lemmy.ml makes use of a strict set of regex rules. The translation of the french word for “late” matches an ableist slur in English, and so it is removed by lemmy.ml. I am not sure about whether you can check regex for each individual server, but I believe that most instances don’t filter that specific word out.

    EDIT: Ah, I found out how to check the regex. You can check an instance’s regex by going to the the URL https://{instance}.{TLD}/api/v3/site and looking for “slur_filter_regex”. For example, for lemmy.ml you would go to:

    https://lemmy.ml/api/v3/site