this post was submitted on 31 Mar 2024
18 points (84.6% liked)

Privacy

34171 readers
1127 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Hi there, So just watched latest video of Jim Browning and in the video he had a sponsor I had not heard about before, Guard.io. So I went to check it out, and it seems like a fairly decent service (by that I mean, a service I would put on family members devices) for helping against possible phishing attempt and general safeguarding online activity etc.. I currently have installed Ublock Origin in their browsers and pointed their DNS to base.dns.mullvad.net, but that's about it.

So:

  • Anyone had any experience with this service?
  • What's the general consensus around this service?
  • Is it necessary, compared to the measures I mentioned above?
  • Are there any other general measure I could implement on their devices? (they are on both apple and Android ecosystems)

Thanks for any suggestions 🌻

top 17 comments
sorted by: hot top controversial new old
[–] catloaf@lemm.ee 25 points 10 months ago (2 children)

Seems sketchy. You give them access to everything instead? How do we know they won't be an avenue to compromise?

This bit from their FAQ does not inspire confidence either:

Is Guardio Legit?

Guardio is definitely 100% legitimate, and it’s also a great product.

If it was, they wouldn't need to say stuff like that.

[–] hddsx@lemmy.ca 3 points 10 months ago (1 children)

What do you mean? You prefer services that advertise that they are definitely 80% legit, it just depends on who your sales guy is?

[–] umami_wasbi@lemmy.ml 5 points 10 months ago* (last edited 10 months ago) (1 children)

I guess what he mean the service must proof itself legit by actions, rather saying it out loud in a FAQ.

Still, that FAQ explicitly saying they are legit gives me the feel of "The lady doth protest too much, methinks,".

[–] hddsx@lemmy.ca 2 points 10 months ago

Sorry, my sarcasm didn’t translate through text.

It does indeed have β€œI’m always wearing a condom” vibes, even if we’re at dinner

[–] Sunny@slrpnk.net 2 points 10 months ago

Hmm, I agree that it's not the best advertising in the world. But also they are closed source, so I guess it can never truly be trusted. Question that really remains is: is it better to use them than to not use them, for lesser tech savvy peeps.

[–] Kissaki@feddit.de 8 points 10 months ago* (last edited 10 months ago) (1 children)

I wouldn't use it.

Seems to me like free plan is what browsers natively support anyway. (Scam site blacklist. I highly suspect they use the same. They can't compete with the one Google hosts and all major browsers integrate.)

And instead of paying 15 usd per month, Windows defender is a well funded, well established, well trusted solution.

There's no practical gain in blockage before download. Windows defender scans upon and after download, before execution.

[–] Sunny@slrpnk.net 1 points 10 months ago

Fair enough, thanks 😊

[–] randombullet@programming.dev 6 points 10 months ago (1 children)

Just use NextDNS and PiHole/AdGuardHome and redirect all port 53 requests to your local DNS instance.

DoT and DoH will mitigate some phishing risks.

Social engineering is the biggest threat, especially through vishing.

[–] Sunny@slrpnk.net 1 points 10 months ago (1 children)

I personally use nextDNS, and love it. However my setup is too strict for their use cases and blocks newspapers and stuff they read. I also don't feel comfortable logging their devices. I guess I could spin up a few more nextDNS accounts for them on the free plan instead though, that's probably what I should do.

[–] randombullet@programming.dev 1 points 10 months ago (1 children)

You can put them in another bucket with custom rules.

[–] Sunny@slrpnk.net 1 points 10 months ago (1 children)

Hold on, is that possible in nextDNS? Never seen that option before.

[–] randombullet@programming.dev 1 points 10 months ago (1 children)

I pay for NextDNS. It's under new profiles on the top left.

[–] Sunny@slrpnk.net 2 points 10 months ago

I alos pay, but have completely missed this feature hehe. Thanks for pointing this out, completely solves this issue for me πŸ™Œ

[–] headroom@lemmy.ml 3 points 10 months ago (1 children)

Is it necessary, compared to the measures I mentioned above?

That product is trash but how is what you're doing helping with phishing?

[–] Sunny@slrpnk.net 1 points 10 months ago (1 children)

As another comment said, through DoT and DoH. Also newly registered links (30days) are blocked by default (at least with my nextDNS settings). I was however mixing up, thinking Mullvad would do the same.. I should probably make a nextDNS profile for each member in family.

[–] headroom@lemmy.ml 1 points 10 months ago

Ye mullvad uses their blocklists but does not provide the features mostly listed in the security tab. I still don't get how dot and doh are relevant with phishing.

[–] Pantherina@feddit.de 3 points 10 months ago

Until its known by people that actually know stuff, avoid it