ciferecaNinjo

joined 2 years ago
MODERATOR OF
 

A Turk was telling me about a peaceful demonstration he attended, in Turkey. He said police surrounded the protest. Then someone in plain clothes threw a stone at the police. One of the demonstrators noticed that the guy who threw the stone had handcuffs in his back pocket. IOW, a cop posing as a demonstrator threw a stone in order to justify the police tagging the protest as “violent” so they could shut it down.

So of course the question is, to what extent are bad actors on Tor actually boot lickers who are working to ruin Tor for everyone?

 

There are many situations where gov-distributed public information is legally required to be open access. Yet they block Tor.

To worsen matters, the general public largely and naively believes it’s correct to call something as “open access” when in fact there are access restrictions in place.

The resource should work like this:

  1. User supplies an URL
  2. Robot tries to access that page from a variety of different countries, residential and datacenter IPs, Tor, various VPNs, different user-agent strings, etc.
  3. Report is generated that reports the site as “openly accessible” if no obsticles (like 403s) were detected. Otherwise tags the site as “restricted access” and lists the excluded demographics of people.

The report should be dated and downloadable as PDF so that activists can send it to the org behind site with a letter saying: “your website is not open access -- please fix”.

This need somewhat aligns with the mission of the OONI project, but they are not doing this AFAICT.

Update

I just read an announcement about Belgium’s “open data” law, which is basically a summary. It said something like “there should be no unnecessary access restrictions”. I’m not sure to what extent that accurately reflects the law, but it’s an example of what one country considers “open”, fwiw. From there, I would say most Tor blockades are not necessary but rather some lazy sysadmin looking for an easy job. They of course would then like to argue that it’s “necessary” to keep the baddies out.

Update 2

The Open Knowledge Foundation Network defines open data to be completely free from restrictions:

https://okfn.org/en/library/what-is-open/

 

Take the anti-spam directive, for example:

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32002L0058&qid=1747912567106

The website gives us the directive but makes no references to the member state’s implementations of that. It seems a bit sloppy that visitors have to try manually searching using some private-sector surveillance advertising search tool to find a member state’s version. In Belgium it’s especially a mess because many of the official websites that “publish” laws are access restricted (e.g. Tor users often denied access). Only some segments of the public can reach some websites. We have Moniteur Belge but that involves digging a law out of a large PDF that globs together many unrelated laws and publications.

According to the EC website, the EC has a duty to verify whether the member state’s version was implemented timely and correctly. Is that done in English, or does the EU have native speakers of all languages on staff doing the verification?

I ask because if there is a translation step, then the EU would perhaps have a good quality English translation of member states laws


which I would like access to. To date, I do machine translations which is tedious. And if the source language is Dutch, the translation tends to be quite poor.

Update: perhaps the biggest shit show is this site:

https://www.stradalex.com/

Visiting from a tor exit node with uMatrix installed, that site is in some kind of endless loop. No idea what kind of shitty JavaScript causes this, but it reloads itself non-stop and never renders. Opening the uMatrix UI shows 3rd party js rows popping up and disappearing faster than you can click to give perms. These people should not be allowed to do web service for legal information.

update 2

This page gives some general links to member state’s law pubs, but you are still left with having to dig around for the implementation that corresponds to the EU directive -- if you can get access.

update 3

Found something useful.. this page is openly accessible and has a “National Transposition” link. From there we can do an /advanced search/ and limit the collection to national transposition and search on 32002L0058, for example.

Then it finds no results, which seems a bit broken. But if I simply do a quick search on 32002L0058 then use the “national transposition” link on the left bar, that seems to work. But then in this test case I followed it all the way to a page that said “ Text is not available.”

In fact, “Text is not available” is what I got on 3 of 3 samples. So it’s a crapshoot. Hopefully the EC folks who verify national implementations are not relying on this same mechanism.

 

Wow, so that’s bizarre. I wonder why the French DPA would think it’s okay to force customers to reveal their gender. Luckily the CJEU overruled them and made it right in the end. But of course it’s still disturbing when a DPA is working against privacy rights.

 

I just heard from someone who tried to deposit €50 in cash into his Belgian bank account. The bank refused to accept the deposit unless he could prove the source of the money.

Indeed.. on a desposit as small as €50. The guy didn’t say where it came from but such small amount could have come in a card as a birthday gift.

Grannies: before putting money in grandkids birthday cards, visit your local notaire and give a sworn testimoney as to where the money came from, get it notorized, and include that with the cash.

The war on cash (thus privacy) has really made some headway in Belgium.

 

wtf.. we cannot simply do an NS lookup in Belgium?

$ dig @"$(tor-resolve resolver1.opendns.com)" -t ns -q europeangreens-eu.mail.protection.outlook.com +tcp +nocomments +nostats +nosearch +noclass +dnssec +noauth +noquestion +nocmd

europeangreens-eu.mail.protection.outlook.com. 0 TXT "Effective April 11, 2025: Due to a court order in Belgium requiring the implementation of blocking measures to prevent access within Belgium to certain domains, the OpenDNS service is not currently available to users in Belgium"

Update

Seems relevant:

Belgian Constitution Article 25:
The press is free; censorship can never be introduced; no security can be demanded from authors, publishers or printers. When the author is known and resident in Belgium, neither the publisher, the printer nor the distributor can be prosecuted.

 

Many member states a daft when it comes to GDPR enforcement. But there are an exceptional few member states that have a Data Protection Authority that actually does their job. E.g., in principle, I might want to file all Article 77 complaints in Norway. Of course, without living there and having no transaction there, it’s outside of the jurisdiction. OTOH, what happens when a company like Microsoft or Google abuses your data and violates the GDPR? I think MS has headquarters in multiple countries: France, Finland, Spain, Norway, Germany, etc. If I have zero confidence in the DPA for the country I am in, can it be effective to direct the GDPR to a another country if MS has a headquarters there? Is there a heirchy of headquarters whereby an ultimate top level headquarters where a corporation is most relevant?

 

Many member states a daft when it comes to GDPR enforcement. But there are an exceptional few member states that have a Data Protection Authority that actually does their job. E.g., in principle, I might want to file all Article 77 complaints in Norway. Of course, without living there and having no transaction there, it’s outside of the jurisdiction.

OTOH, what happens when a company like Microsoft or Google abuses your data and violates the GDPR? I think MS has headquarters in multiple countries: France, Finland, Spain, Norway, Germany, etc. If I have zero confidence in the DPA for the country I am in, can it be effective to direct the GDPR to a another country if MS has a headquarters there?

Is there a heirchy of headquarters whereby an ultimate top level headquarters where a corporation is most relevant?

 

I asked for a sheet of national stamps. They gave me prior stamps which do not have “prior” printed on them. Price was high, but I just figured the postage rates are jumping leaps and bounds. It turns out a circled 1 “①” is apparently a priority indicator.

Just a heads-up.. watch out for that. The normal stamps come in a sheet of 10 and I think it’s the head of a prime minister on those things.

 

“The state of government open data across the globe in 2015”

^ ok, bit old. But still, I’m surprised. Maybe Mexico does well on the basis of not having much data to share.

[–] ciferecaNinjo@fedia.io 1 points 4 months ago

I would say mostly true. And that much is driven by Regulation (EU) 2021/1230. If an ATM offers DCC¹, it must show the exchange rate and fees, and it must give a comparison to a non-DCC option, which must be offered (iow, there must be an opt out).

A common practice is to charge a flat transaction fee when DCC is not used, and to charge no fee when DCC is used, because the exchange rate is so terrible they are profitting hand over fist if you use DCC. But the ATMs often do not expressly state that the fee is waived in the DCC case -- they simply make no mention of the fee you would /otherwise/ pay had you not taken DCC. This is because (IMO) the ATM operator does not want users to relise that the exchange rate builds the fee into their fat margin.

I avoid DCC. But then my bank statement only shows how much was taken from my account in the account’s currency, not the ATM’s currency. The ATM receipt (which apparently does not exist in Germany) gives the local currency you pulled out. These two figures leaves you having trust them as far as the fees go. Some ATMs bundle the fee with the withdrawal amount and the drafting bank has no way of knowing what portion was for the fee. And of course neither do you, unless the machine properly informed you. But what if it didn’t? There is not enough information for the end customer to work out what the overhead was in some cases because the exchange rate applied by the account’s custodian is undisclosed.

¹ DCC: dynamic currency conversion

[–] ciferecaNinjo@fedia.io 1 points 4 months ago

Do you think it's politicians' job to provide technology education?

Of course. Public education comes from the public sector. We should be electing politicians with administrations who are smarter than the general public. Any tech education that comes of Twitter abandonment is welcome.

[–] ciferecaNinjo@fedia.io 1 points 4 months ago

Can’t reach that link, but sounds good for folks that talk more than 800 min/yr.

But that’s almost like a postpaid scenario.. use-it-or-lose it rather than pay-as-you-go. My consumption would be well below that, and I can’t even be certain I will be in any one given country for whole year. I’d probably be spending over $1/min with that plan.

[–] ciferecaNinjo@fedia.io 1 points 4 months ago (2 children)

But there is a need for politicians to reach their constituents, and if they can be effectively reached by an imperfect method,

Leaders should lead, not follow. Politicians can reach and be reached on a Mastodon server, where all their constituents have access.

Asking ~8 billion (or however many) people to make a personal change first is a non-starter. Demanding many orders of magnitude fewer people (politicians) make the first move to break the dystopian cycle is far more sensible.

then I can accept them using it while also promoting better methods.

Posting on Twitter is an assault on promoting better methods. Mirroring everything on Twitter facilitates the Tyranny of Convenience (great essay by Tim Wu) by making Twitter the superset. It’s important and socially responsible to withhold info from Twitter so that it cannot be the superset.

RMS gives good advice for orgs who think they need a Facebook presence:

https://stallman.org/facebook-presence.html

Politicians don’t need a Twitter presence, but to the extent that they are not convinced, the bare minimum action they can take is implement some of the advice on that RMS page.

Any random 3rd party joe shmoe can make a Twitter bot that mirrors a politician’s msgs to Twitter. In fact, force Twitter to do the work simply by not feeding Twitter. Motivation for Twitter’s self-preservation would appropriately ensure gov resources are not spent on Twitter. Make Twitter be the host of dodgy mirror bots without engagement, where you need Mastodon to actually engage with a politician.

[–] ciferecaNinjo@fedia.io 1 points 4 months ago (4 children)

There are moral problems with crossposting to Twitter.

  • Twitter is financed by advertising. I do not finance public services to then finance the advertising revenue of private corporations. Politician’s IT staff, time, and resources used to feed Twitter are not free. Public money is used for the tooling and the operations on that platform of inequality. So people who are excluded from Twitter are financing content fed to Twitter involuntarily via taxation. And those who are priviledged to be on the Twitter platform are hit with ads as a precondition to reaching content they already paid taxes for -- due to an inappropriate intermingling of public and private sectors.

  • Network effect: making Twitter a superset of content exacerbates the stranglehold Twitter has on the world. The private sector will do its thing, but the public sector has a duty to work in the public interest. A public office adding to Twitter’s network effect disservices the public interest.

  • Twitter is a politically manipulated venue with a bias toward right-wing populism. People who vote for a green party or socialist party politician do not endorse feeding an extreme right-wing US agenda with worldwide consequences. They do not have an equal voice on that platform which is wired for right-wing propaganda.

Recall how Trump took power in 2016: Cambridge Analytica and Facebook. FB and Twitter are pawned by right-wing extremists.

[–] ciferecaNinjo@fedia.io 5 points 4 months ago

Shopping – Right to safe, high-quality products that can be repaired, replaced, or returned if needed.

It’s an illusion.

Right to repair started in the US and has been implemented in various states, but still does not exist in Europe. They have been discussing a r2r bill in Europe for over 10 years now. And if you read what they have so far, it’s weak. You can’t even get a repair manual unless you are a licensed professional.

Cannot repair my washing machine because the Dutch manufacturer will not tell me the secret unlock code.

I had a Belgian product die under warranty. No protection. Manufacturer ignored my request for warranty service. Belgian regulators ignored my complaint that the manufacturer ignored me.

Travelling – Compensation for delays or cancellations.

Flixbus was a no-show. Complained to the regulator. No response.

Strange loopholes in EU law too. If the bus route is under 250km, there are no protections for delays or cancellations. You can be stranded in Amsterdam because the bus to Brussels ditched you, and because that trip is under 250km there are no useful passenger rights.

Banking – Secure payments and fair contracts.

Secure payments yes, but FATCA guarantees all contracts are unfair, which discriminate against people on the basis of their national origin.

If you want to do a cash transaction above ~€1k or so, prepare for hostile treatment. A friend asked to withdraw €5k (IIRC) of her own money and the bank called the police, who then brought her in for questioning.

ATMs are really thinning out amid Bill Gates war on cash, which is really taking hold in Europe. Instead of making banking enticing, they are treating cash with hostility to force banking on people.

Surfing – Protection of personal data and safeguards against scams.

Most gov services block Tor. The data protection authorities take no action on most GDPR complaints. Public libraries refuse wifi access to people without mobile phones (the people who need it most).

[–] ciferecaNinjo@fedia.io 3 points 4 months ago (7 children)

I have a right to use twitter to the same extent as you have a right to use lemmy.

Not in the slightest. Twitter is like a private road controlled by a single gatekeeping corporation whose private property rights are the only rights to speak of -- and it’s run by a right-wing populist who controls who can participate. Lemmy is like a network of public roads without centralized ownership, where the concept of rights is not even needed because there is no central corporate control.

The right to choose to use twitter is markedly different from making it a universal right to be able to access twitter.

Why are you talking about a universal right to access Twitter? AFAIK, no one here endorses that.

Either you lick Musk’s boots or you bounce. Those are your choices. Politicians who lick Musk’s boots and drive exclusion cannot effectively represent the people.

Public protest existed for centuries prior to Twitter

Those are different times. We are in Twitter times. Shouting on a street corner brings a smaller audience than posting on Twitter. Higher effort and less exposure; for not licking Musk’s boots. And because of network effect, non-Twitter methods have lost ground to an unequitable elitist platform that exludes people without mobile phone numbers as well as those wise enough not to share their number with Twitter, and those who object to feeding a right-wind ad surveillance platform. The open letter audience someone would have in a free world is dimished because the audience has their eyes glued to Twitter, who poached them by exploiting network effect.

[–] ciferecaNinjo@fedia.io 1 points 4 months ago (1 children)

I tested by accessing ACLU’s timeline anonymously without an account. Is it different for different accounts?

(edit) just tested trying to access the acct of someone arbitrary.. a broken login popup attempted to render. So I guess different accts are different.

[–] ciferecaNinjo@fedia.io 3 points 4 months ago (13 children)

People don’t have a right to use Twitter -- b/c it’s a private company that excludes people (e.g. people without mobile phones). That’s the first problem.

I heard a rumor that (like Facebook) Twitter was closing read access so only members could /read/ posts. Did that ever happen? Maybe not, because I was just able to reach a twitter timeline without having Twitter creds as a test. If that exclusivity plays out, then politicians will be writing messages that a segment of people are excluded from viewing. It would not be enough that they can be reached by other means. Politicians would also have to copy all of their messages to an accessible space somewhere.

It’s also insufficient that I can reach them outside twitter only by non-microblogging means. E.g. by letter. A letter is a private signal not seen by others. Microblogging is an open letter mechanism. It’s important to deliver your msg to a polician in a way that the msg has an audience. Take away the audience and you take away the power of the signal.

[–] ciferecaNinjo@fedia.io 6 points 4 months ago (18 children)

“Support” is vague. Your link is unreachable to Tor users so I can’t see what it’s about.

I boycott Twitter wholly. Will not set foot there. In fact, it’s mutual. Twitter kicked me off their platform when I refused to share a mobile phone number. Thus I inherently support dropping TWTR by not consuming it.

It’s embarassing and very disturbing that the public sector (especially in Europe) uses shitty corporate exclusive walled gardens like Twitter and Facebook. When a politician uses Twitter or Facebook exclusively, they should be sued for free speech infringement. The #1 purpose of free speech is to express yourself to policy makers. When they use an exclusive gatekeeper to block some people from reaching them, it’s an assault on free speech.

Whether they do Mastodon or not does not matter so much. Would be useful if they did, but the real focus should be on just getting them off exclusive tech. They can work out for themselves that Mastodon is useful and inclusive.

[–] ciferecaNinjo@fedia.io 1 points 5 months ago

I’m not sure what their excuse is but there aren’t enough exit nodes to DDoS a nation state. They are performing an essential but very light service which should involve very little traffic, so competency seems to be lacking. AFAIK they do not do the heavy lifting of all the websites who use them. They just get used for logins. The site that redirects to them does all the work before and after authentication.

view more: ‹ prev next ›