If you're reading this I'd recommend against joining the ml or hexbear chat groups
Please join the actual Blahaj Matrix group instead as it is moderated by Ada
Blahaj Sidebar:
We have a public matrix channel for all Blahaj users at #blahaj:chat.blahaj.zone
If you're looking for the support channel, rather than the general chat channel, you can find it at #blahaj-support:chat.blahaj.zone
Whether you like them or not, they have very useful mutual aid groups that have funded a lot of HRT, rent, etc for trans people. One trans person got hit by a hurricane and needed assistance with rent for 2 months and it was paid in full. Without their help, that person would have been homeless.
I appreciate the intent of this message, but how sure are you that federated social media like Lemmy is really any safer than Reddit? Not much on here is encrypted, to my knowledge, and instance admins need to respond to subpoenas just like anybody else... In the event of hostile government action, you're much better off communicating on E2EE platforms, and unfortunately, posting on public social media platforms is a risk.
You can mitigate much of that risk with a burner email and VPN, but you can do that on other platforms too.
Mainstream social media track and identify in non-obvious ways such as browser fingerprinting. If you're on a federated open source social media site then there's none of that. If you use a VPN (and if you can't afford one, Proton offer a free tier) or Tor browser to mask your IP and you're using a non personally identifiable email address that goes a long way towards protecting yourself.
Beyond that, never posting identifying info about yourself such as the place you live, including the State, will protect you even further.
But I do agree that using an E2EE service is the best way to communicate.
I don't know a lot about this. If the United States wants to subpoena records from an instance admin based outside of the United States, do they have to comply?
I think it's pretty murky, ignoring a subpoena is a crime, so US may be able to charge them with obstruction and request extradition, it's then on their home countries to decide whether to accept the US's requests. Either way I'm sure it would make them ever traveling to the US very tense.
See: Julian Assange
Remember though, these instance admins are generally doing this out of the kindness of their heart on shoestring budgets, it's so much safer and easier for them to just comply with legal requests. They're nice people, but not political martyrs.
Centralized platforms are much more dangerous, the various FOSS federated platforms are auditable and don't contain inherent spyware. You can also use certain sites as a proxy, or start your own VPS+lemmy instance to use as a secure proxy for yourself. The restrictive nature of sites like reddit means they can ban you for taking basic security precautions, which they do regularly.
I generally agree, but that is not conveyed in your image, it just (basically) says "come to Lemmy, you'll be safe". There are critical extra steps you should take if you're worried about safety - this just feels more like an advertisement.
The decentralized nature of federated social media is the only advantage it has. But it's kind of a wash. The big social media platforms have resources and weight they can throw at resisting state level surveillance. The operator of the Mastodon instance you sign up for probably doesn't have a lawyer on retainer let alone the army of legal experts Facebook or X could throw at the problem. That said you can always change instances or use multiple ones to begin with.
I mean this is great except for hexbear and .ml, wtf lol
Hexbear has a really large trans community with a lot of mutual aid work. Are you trans?
When I first checked Lemmy this morning, I quickly found three threads from trans communities full of people afraid for their freedoms and even their lives because of the results of the eletion, and another that was a circlejerk about how the election didn't actually matter. That's pretty much it in a nutshell.
edit: To clarify, the dismissive circlejerk was on lemmygrad. I actually think lemmy.ml isn't bad, just a mixed bag sometimes. Lemmygrad.ml is significantly worse, and Hexbear is worst of all. Don't go there for anything but vibes-based politics that will sacrifice any ideal and any person if it means they can be smug (as smug as the worst liberal) on the internet.
Lemmy lacks the resources to protect anyone; use things that we already have, like tor, instead.
Tor is a good choice, yes, but most normal people aren't going to use that daily. It should absolutely be used for purchasing things like DIYhrt though.
Ah... well... the Tor Project currently receives funding from the US Department of State, and has in the past received funding from DARPA and the US Naval Research Laboratory... (Tor sponsors list)
the federal government currently accounts for well over half of the Tor Project’s overall funding.
Privacy group demands answers about government’s influence on Tor
Just fyi
Relatedly, lie frequently and believably on the internet. Bots and potential doxxers don’t deserve the truth and others will benefit from your efforts in poisoning the well.
Aye.
Lemmy itself is inherently public.
People should be careful what they post anywhere online, including here.
Don't doxx yourself peopleThe "no takesies backsies" rule of the Internet applies 100x on decentralized platforms like Lemmy, since anything you post is being broadcasted to tons of other instances which can do whatever they want with the info. When you 'delete' something on the fediverse, all you're doing is politely requesting every instance that received the content to remove it.
Also rotate accounts regularly, using different information in each one.
Afaik revolt.chat (real Discord alternative) has a trans community as well.
Lemmy is not a secure platform. Whoever wrote this should consult a real cyber security expert. Do we have any here? I consider myself very savvy, but I don't play games assuming I know enough.
Of course not, its public facing. The point is to not give away sensitive information like browser fingerprint and IP to a giant corporation that is known to work with law enforcement.
Install Linux on your computer, install GraphineOS on your google pixel phone or lineageos on any other android phone, get a VPN (Mullvad is the best choice), always encrypt your communications, always encrypt your data (some distros support full disk encryption), find people you can trust, and most importantly be careful.
i recommend Privacy Lock to force entering credentials to unlock the phone if you drop it or shake it, and don't use fingerprint so you can't be physically forced to unlock it
Joined the matrix. Not trans, but I'll support all of you and spread the good word.
edit: they kicked me after I said I wasn't trans, even though I support them. Oh well.
Its a trans group chat, its for trans people. Public facing communities like this one are fine to converse respectfully in. If you do know trans people, be sure to spread the image around.
PGP!!!
