Let's remind everyone what a safe internet actually means. 🌐🌍

Share this & Spread the word!

#SaferInternetDay26 #SID

🔗 Protecting your safety online starts here: https://tuta.com/blog/minimum-password-length
2024 NIST rules on minimum password length: Aim for 16 characters or more! | Tuta

With the rise of quantum computers, passwords need to be longer - and more complex. These tips help you secure your online accounts.

Tuta
@Tutanota
I’ve been using unique 20-char random passwords for at least five years. Occasionally, I’ve run into a site where the limit is lower, and then I’ve thought a bit about whether I really need an account at such a poorly coded site. Nope!

@Tutanota

I've been using KeePassXC for years and my default password length is 32 characters comprising A-Z, a-z, 0-9, and special characters...

@TCMuffin @Tutanota My password generator is my hands smashing the keyboard.
@Azarilh @TCMuffin @Tutanota That's not bad, but keyboard smashes tend to be less cryptographically secure than properly generated random passwords.
@zm Well, i am not 100% serious. I manually add some random special characters with shift and capital letters.
@Azarilh Ah okay that makes more sense :)
@Tutanota IYPS as one of the apps, where everyone can experiment and check password strength in offline mode. Android version: https://f-droid.org/en/packages/com.iyps/
IYPS | F-Droid - Free and Open Source Android App Repository

Evaluate passwords, predict crack times, and get tips for stronger passwords.

@Tutanota

That second column isn't designed to make anything safer for the end user.

@simonzerafa

... while also not helping victims of abuse.

@Tutanota

@panda @simonzerafa @Tutanota what would help victims of abuse?

Genuine question

@mu

Disclaimer: I am not an expert and solutions depend on the country.

In Germany, we have a lot of open cases and police is barely managing the existing load, so having more staff would help.

Police also doesn't know how to internet. Some police stations will just send you away, if you report abuse on the internet or IRL.

Police does not delete CSAM from the internet, even if they could.

Just a few examples. I can add (german) sources if needed.

@simonzerafa @Tutanota

Pädokriminelle Foren im Darknet: Jetzt löschen wir richtig - STRG_F

Eva Winter (Name geändert) wurde als Minderjährige schwer sexuell missbraucht. “Alles, was man sich an sexualisierter Gewalt vorstellen und überleben kann, ist mir passiert”, erzählt sie uns im Interview. Vom Missbrauch seien auch Fotos und Videos gemacht worden. Dass solche Aufnahmen noch Jahrzehnte später im Darknet kursieren, ist für die Betroffenen die Hölle: ”Ich wünschte, ich hätte jemanden vor mir, der das einfach beenden würde. Der es löschen könnte”, sagt Winter. Dass das geht, haben wir vor drei Jahren schon bewiesen. Damals versicherten Politik und Ermittlungsbehörden das anzugehen: „Mittlerweile weiß man, wie wichtig es ist, die Bilder zu löschen. Das BKA hat das Verfahren jetzt umgestellt”, betonte etwa Bundesinnenministerin Nancy Faeser (SPD) 2022. Doch unsere aktuelle Recherche zeigt: Offenbar ist nichts passiert. Also löschen wir wieder - und dieses Mal so richtig. Die Ergebnisse: Insgesamt rund 310.199 Links zu Millionen Aufnahmen, 21,6 Terabyte Daten konnten wir aus den größten pädokriminellen Foren im Darknet entfernen. Zwei Foren haben wir in die Knie gezwungen, eines wurde inaktiv. Und wieder bleibt die Frage: Wann wird die Politik endlich handeln? Recherchedokument zum Film: https://docs.google.com/document/d/1A19NHLhxGG4Kjrb2E90oih7_UrEHuvKCr2YP1T8pIPg/edit?tab=t.0Ein Film von Daniel Moßbrucker, Robert Bongen, Lisa Hagen, Tobias HübersMitarbeit: Chika NgwuKamera: Henning Wirtz, Lisa Hagen, David DiwiakSchnitt: Jan Littelmann Grafik: Thorben Korpel Farbkorrektur: David DiwiakMischung: Felix WenzelEndfertigung: Maximilian Klein Redaktion: Lutz Ackermann

ZDF
@Tutanota It's not about a safer internet it`s about collecting more data from us.
@Tutanota Just a note. Age verification is not mutually exclusive to everything that is on the safer column. If the real world has age requirements in some operations, it's acceptable that the digital world also has the same. Making the Internet lawless is what drives attacks on other liberties.

@gonun13 @Tutanota

This what you think is also an attack on my liberty to get legal available NSFW stuff. And on the safety on jung people will be worse with age verification than else. You have to get safe NSFW stuff than disallowing that completely.

@gonun13 @Tutanota Correct, it is only mutual exclusive to privacy.
@soderling No, it is not. Any digital service could query a digital gov ID just for age verification (yes/no signed key) and nothing else is stored in either side. A government audit can run on all users just to make sure they have those signed keys WITHOUT knowing who they are.
@gonun13 @soderling And how do you guarantee that the government is not saving which keys are they looking up?
@aubrey @soderling They can save it, it's pointless, it's just a valid age verification token. The critical point is the authentication system that by law and governance, would be made in a way where you only authorise an age verification not sharing private data with the digital service OR logging on the government side what site you're trying to use. There are more technical steps available for privacy like key pairs, blockchain, owning your data I would prefer first but it is possible.
@gonun13 @soderling Well, then the government gives me a token for something. First, they know I requested a token at this time (which is also a privacy problem, but not that big). I give that token to the site I want to use, that is okay still. But then the government asks the site owner to give them all the users with all their tokens. Now the government can match the users with real people based on the tokens they gave out.
@aubrey @soderling That's not exactly the sequence. Service -> govID -> you authenticate with govID -> you share age verification with service -> they store a valid age verification token -> gov can check valid tokens not who made them (by law).
The are other conversations involved like anonymity vs privacy. Public vs private data. But it is technically possible, it's more on how we setup our digital legal governance.
@gonun13 @soderling (by law) is the problem. Why should I trust my government is actually doing that. I don't think it is possible to trust the government is not saving any of that data without having access to their servers. And even if it was possible, I don't think the government is going to implement it that way. Governments love to collect anything they can. (EU and Chat control for example)
@aubrey EU is doing such software and it's open source. They are very transparent about how it works.
@Azarilh The client software may be open source, but we don't know what's happening on their servers
@aubrey We can know how the software communicates with the servers, what information it gets.
@Azarilh Yes, that is true. But is it actually written, so there is no way to connect your profiles with your identity? I haven't read the source code to be honest
@aubrey I am not sure if it's completely safe, i am waiting for the final version then we can rate it.
@aubrey True thus we should fight governments with better solutions. But the digital world can't become a lawless place or catered just by big corps.
@aubrey
Yes that is true. The Verification by the EU App is 1. on Smartphone only 2. The Credentials are saved on that Smartphone 3. the App Talks every time your're Verify your age with the gov server in a hack of a lot times
@gonun13 @soderling

@aubrey

I am wondering that this is not criticized. Why you are not asking why it should be a Smartphone? Why should it not disconnected to the Credentials Physically to the Device? Why should i let my IP address to a Server for Verify?

@gonun13 @soderling

@gonun13 You block legal porn sites, people will get to illegal porn sites full of potential malware. Or simply to torrents.

Age verification online solves absolutely nothing. Better education is the solution.

On the other hand, blocking social media is a double edged sword. 1: It might keep children safe from toxic behaviour; but they won't learn to recognise such behaviours once they are adults. But i guess once you are an adult you don't matter anymore? Hence, education is the solution.
1/2

@gonun13 2: It might keep them ignorant on important stuff if their education is bad. Some parents are queerphobic, and children discover about queerness only in social media, which is extremely helpful. Some children only get emotional support from social media, as they CANNOT get it in person due to discrimination. This law puts at risk queer children.
2/2

@Azarilh

https://www.youtube.com/watch?v=dnuPVzMEyzo

EDIT:
I deleted the shortened and Context less versions out because of stupid YouTubers making bad cuts of that Video. Please be Careful with Content of him if YouTubers do Manipulate it.

@gonun13

Volker Pispers - Ist fehlende Bildung ein Grund für unsere gesellschaftlichen Probleme?

YouTube
@Azarilh I agree Education is key and blocking is a double edged sword.
But the current ecosystem is causing a complete brain rot of an entire generation fueled by big corps and authoritarian regimes. Thus we need to start gatekeeping and moderating some usages or at least creating digital safe networks where devices handled by minors can connect freely. Children should be allowed to grow naturally and not jump start to all the crazy shit adults like to sell.

@gonun13 Yes, i just don't think outright banning social media to minors is the solution. I'd rather governments fining and eventually blocking specific social media sites if their moderation is inadequate. Also doom scrolling should be illegal, as well as algorithms that promote negative interraction.

Yet no laws about any of that. Blocking social media outright is literally incompetence. Social media sites do all of that stuff cos it's legal.

@Azarilh
Azarilh! I cannot emphasize enough how harmful these algorithms and doom scrolling are, robbing you of time to do something meaningful. When will people realize that such dark patterns don't just happen on a splash page? When will people realize what makes people addicted?
@gonun13
@Chris2000SP @Azarilh @gonun13 Social interaction on the internet is not the problem. Big tech using their (quasi) monopoly to influence user behavior for "shareholder value" is the problem. E.g., there are some good videos on YT; but I hate to go there because it tries to capture as much of my time as possible. Same for any other commercial platform. Most adults can't deal with this properly. Kids on *social* media, fine. Kids on "commercial influencer", "the user is the product" platforms, NO.

@mkretz

https://www.zdf.de/play/talk/unbubble-100/pornografie-13f-100?q=porn

This is German. Dunno if that is on YouTube or not because That is Porn Discussion from 2022

@Azarilh @gonun13

Zwischen Kontrolle und Freiheit: Streitgespräch über Pornografie und Jugendschutz

13 Fragen stellt kontroverse Positionen zur Pornografie gegenüber – ein intensives Streitgespräch.

ZDF
Kehrtwende in UK: Pornhub widersetzt sich britischen Alterskontrollen

Ein halbes Jahr lang hat sich Pornhub den britischen Alterskontrollen gebeugt und massenhaft Nutzer*innen überprüft. Jetzt macht der Konzern eine Kehrtwende und kündigt seinen Rückzug aus dem Vereinigten Königreich an. Dahinter steckt ein geschickter PR-Stunt. Die Analyse.

netzpolitik.org
@Tutanota how about "content moderation by humans"? Seems important to me when it comes to any platform/software, where harassment could happen.

@xela @Tutanota

Yes that is very important but you have to get supported by Sorting and showing important content that has to be moderated. So you have to use as Mod some tools to sort that content and Moderate that content in a propper way. Floods of Content could be worse to handle if it is too much for one Person. So you have to get Tools to Rank the Worst Post to the Top and less worse to the bottom if you handle really lots of Content. That is possible to get and will help to Mod Content.

@Chris2000SP sure, totally agree, moderation needs tools. But humans must have "the last say".
Anyway, why I mentioned moderation here was, because it's not mentioned at all in the info graphic for a safer web - and I think, it should be there. @Tutanota
@xela @Tutanota
of course humans must have the last say! I will not tolerate a Moderation that force overblocking.
@Tutanota true! And maybe also: Properly trained human community managers, moderation teams, dispute resolution perssonel, ... ?
@Tutanota this way of thinking should become mainstream, but unfortunately we are far behind that in public debates.

@Tutanota

You missed the most important one.

A safe internet require distributed and transparent ownership, not tight control by secretive for-profit companies.

Without that, none of the rest matters.

@TCatInReality
There is no ownership of internet. There is ownership on internet.
The left column is for safety on internet protecting against abuse by systems on internet under any ownership.
@Tutanota

@EregLoch @Tutanota

Sure, yes, the internet protocol is not "owned" and there is no central ownership of the servers.

But I think you know exactly what I'm referring to about distributed, transparent ownership vs the techbro, for-profit oligarchy that dominate the internet experience for most of the world's users.

@TCatInReality
Of course I understand, as well as the point that these would crumble when privacy and open source would be enforced as a means to enable competition through distribution/federation and transparency. Meaningful tranparancy requires open source.
@Tutanota

@EregLoch @Tutanota

Yes, open source is good and important.

But it's been available the entire time - yet the oligarchs have still managed to seize control of the experience for nearly everyone.

We need to break up the power of the oligarchy thru antitrust, taxation, campaign finance laws and other regulation. And yes, privacy rights are a part of that...but it's the tail on the dog.

But maybe that's what you mean by "enforce" open source. Perhaps our positions overlap significantly.

@TCatInReality
Oh, I'm quite sure our positions basically overlap.
Breaking the power of Tech oligarchy is primarily a USA task and will be tedious and time consuming, especially with the current USA administration. Other countries can only do so much to fight it, and now risk penalties from Trump if they try.
What we need worldwide are alternatives respecting privacy as a base value and using open source (and APIs) to provide for transparancy and distribution
@Tutanota

@EregLoch @Tutanota

I largely agree

But I would say non-US countries can do a lot to break the oligarchs by abandoning American tools and replace with non-US, open source tools. Cut off their non-US revenue streams.

Sure, Trump will get angry and try to retaliate. But he will anyway of something (Greenland, windmills, etc). Time to stop appeasing and go on the offensive. Treat America like the #PariahNation it now is.

@Tutanota
You need to update your graphic with giving ai agents your passwords.
@Tutanota Without tracking and data collection recommendation algorithms would not work. And that's safer. Yes.
@Tutanota The graphic is correct for email. The Internet is more than just email.
@Tutanota and moderation for public communities, 4chan isnt exactly safe

@Tutanota short slogans are nice for marketing.

The Internet is not safer for victims of harassment, when the attackers enjoy anonymity and no accountability because of it.

Platforms can't abide by laws, if they can't figure out if their users are legally (of age) visiting.

Brevity isn't winning any arguments.