this post was submitted on 12 Aug 2024
24 points (100.0% liked)

Mlem for Lemmy

5524 readers
4 users here now

Official community for Mlem, a free and open-source iOS Lemmy client.

Rules

  1. Keep it civil.
  2. This is a forum for discussion about Mlem. We welcome a degree of general chatter, but anything not related to Mlem may be removed at moderator discretion. This is not a forum for iPhone/Android debate. Posts and comments saying nothing but "iOS bad/I use Android" will be removed as off-topic.
  3. We welcome constructive criticism, but ask that it be both precise and polite.

FAQ

Download Mlem for iOS

GitHub

Website

Donate to Mlem

founded 2 years ago
MODERATORS
 

Hello,

Could someone explain why the Mlem app seems to be at the top of the list based on my iOS privacy report collected over a couple of months? It's a bit weird that no other apps or Mastodon clients reach such high numbers. The Ice Cubes app, for example, only collected 10 domains even though it's also an ActivityPub based network. Additionally, Mlem app's second most frequently contacted domain was a Google domain used to track app analytics, similar to Snapchat, Reddit, or Monzo. Can anyone provide some transparency on this? Thank you.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 21 points 2 months ago (2 children)

It looks like the biggest domain count driver by far is image fetching for link posts, since rendering a website preview involves fetching both the preview image from the linked website and the favicon from Google (favicons account for all those t1.gstatic calls). Disabling website previews and the associated image fetching code cut the domain list down to just Lemmy instances. Mastodon appears to proxy image requests through the instance, which prevents that high domain count. Lemmy has recently added that feature, but right now only instances running the very latest Lemmy code perform image proxying.

We're looking into adding enhanced privacy features to 2.0; we'll include one to disable fetching favicons and image thumbnails, since favicons especially are a known tracking/fingerprinting vector.

[–] [email protected] 8 points 2 months ago

Ah that makes a lot of sense. Appreciate such a quick turnaround!

[–] [email protected] 2 points 2 months ago (1 children)
[–] [email protected] 5 points 2 months ago

It's looking like we'll have the public 2.0 TestFlight launched within the next couple of weeks, though the error bars on that timeline are pretty wide because development speed is dependent on our free time. You can also check our roadmap post for a feature-by-feature list of what's left; we're expecting to merge a couple of the outstanding items in the next few days.