Google started editing people's e-mails in GSuite, replacing links with a link through google.com:https://mobile.twitter.com/sneakdotberlin/status/1317734739537653760https://twitter.com/tblodt/status/1317875714981416962?s=20

This means that Google will track a click on a link *in e-mail* even if you're using an external client.

I am *guessing* this is under the pretext of phishing protection, but it actually *creates* additional phishing risk for text-only clients, since now all links are google.com links.

#FuckGoogle #privacy

Calling all #Fediverse admins of instances in the #EU. The #CopyrightDirective is coming, we need to show the MEPs how massively the EU Internets will be affected.

We are preparing a list of all EU-based #Pleroma, #Mastodon, #GNUSocial, #Peertube, #Funkwhale, and any other instances.

Please *contact me*. All I need is the domain name, which EU Member State it's located in, and the rough topic of the instance. Approximate user count welcome, but not necessary.

Please help. This is important.

@cwebber

Holy shit, [nostalgia intensifies]!

Found code me and @czesiekhaker hacked together to stream #CreativeCommons Global Summit 2011:
https://web.archive.org/web/20120402221923/http://lwb.elka.pw.edu.pl/trac/lwb/browser/main/videostreaming

Yes, we were streaming the whole damn CC Global Summit using a bunch of VLCs in a trench coat. And it *worked*.

We were also handling the WiFi. Guess who was the only person on the whole summit who got a new shiny Mac and their WiFi just would not work? Larry fucking Lessig.

Good times. I believe that's when I met @cwebber , too.

Hey @cwebber do you know what the ticket price is for Copyleft Conf? Cannot find it anywhere outside of the login-first-area...

So, the fact that my main e-mail client (Mailpile) and my social media (Mastodon) are both browser-based means that I cannot easily open random links coming my way through these channels in a separate cube, using porcupine: https://micahflee.com/2016/06/qubes-tip-opening-links-in-your-preferred-appvm/

This is less than ideal. Why does everything have to be browser-based these days.

@lain

Hey #InfoSec, anybody has heard/used/analyzed "FirstPoint MobileGuard"?
http://www.firstpoint-mg.com/full-mobile-guard/

They make some extraordinary claims, and I don't see any whitepapers nor tech literature available to support them. Perhaps I am missing something?

With all my gripes with# Signal (centralized, non-federated, server-based, Electron-based desktop app), the fact that in my circle of contacts it's not longer the "pretty good solution we should be using" but the "pretty good solution we are using but looking for something better" is such a win.

I just wanted to stop for a second and appreciate that.

If we're talking about the need to move to something better than Signal, we are in a pretty decent place.

#infosec

@JackyDahlhaus I am waiting for machine learning algos to start being trained on bad puns and polka music.

This would give us Weird AI.

/me shows himself out

@Shamar @kaniini if the copyright system made it possible to ban clean room reimplementations, you would not have a lot of the GNU utils, which are cleanroom reimplementations of closed-source tools from different UNIXes.

Patent laws are being used for this exact purpose these days. That's why they're considered evil by the FLOSS community.

Be careful what you wish for.

On drones, #Google, #Evil, #reCaptcha, and the #AGPL:
https://joeyh.name/blog/entry/prove_you_are_not_an_Evil_corporate_person/

#GoodRead #FreeSoftware #DontBeEvil

Oh boy. https://github.com/signalapp/Signal-Desktop/issues/1635

tl;dr Signal Desktop is based on Electron, which in turn is based on Chromium 58-59, and it seems to be affected by bugs that have been fixed in Chrome/Chromium 60-62.

Gotta love #Electron. As somebody said "now everyone is running 5 different instances of old insecure versions of the most scrutinized and attacked application on Earth."

#InfoSec

@phryk @federicomena nope, we will definitely end up with geocities UI.

UI/UX is a whole research area. If you want to do research, go ahead by all means! But if you're creating an UI to be used in production by real users, don't go overboard. It has to work in the context of the OS and all other programs/UIs on it.

Think about how annoying all special snowflake UIs for WiFi settings, antivirus software, firewall systems, and music players on Windows were.

Ugh.

@Martin03 how is Keybase not a centralized walled-garden?

Wait, what. Windows 10 sends info on USB devices plugged in directly to Microsoft?

And it does that using pure HTTP?
https://pastebin.com/ttYp5rLg

You gotta be kidding me.

#InfoSec

@alienghic @cwebber @Shamar @kaniini @starbreaker and this (as a licensing scheme) is 100% fine, because anyone has a clear choice -- either you go with GPL, or you pay.

Notice there is nothing about "noncommercial" in the GPL.

That's my point, NC is not necessary to achieve what people think it's needed for. And it's counter-productive and problematic in general.

Wow, this is old news (June 2017), but... how can I support this?
https://www.engadget.com/2017/06/19/eu-proposes-banning-encryption-backdoors/

"The European Parliament has proposed amended regulation that would not only require end-to-end encryption when available, but forbid backdoors that offer guaranteed access to law enforcement. EU residents need to know that the "confidentiality and safety" of their data is "guaranteed," according to the draft, and backdoors risk "weakening" that privacy."

#InfoSec