Kyle Rankin @kyle@librem.one

@freakazoid You may want to rethink inciting violence or misdemeanor vandalism on a public forum.

"Users who decline to share footage through the app may have police showing up at their door asking them to share in person if online requests don't work out. Law enforcement can also go to Amazon directly with a valid legal demand and bypass the user's consent to access the footage entirely." #privacy https://arstechnica.com/tech-policy/2019/08/dont-call-our-surveillance-products-surveillance-ring-tells-police/

@wsaewyc Yes, the example I just gave in the smilidon issue--a user must choose to *opt in* to the user-provided hashtags by following people. They then choose how they apply them (filters vs searches).

@wsaewyc https://source.puri.sm/liberty/smilodon/issues/6 this is the approach I'd like to take, for instance, for Librem Social.

The main difference between the Webmin RCE and similar build infrastructure attacks in proprietary tools is that since Webmin is FOSS, it has the opportunity to use Reproducible Builds so we all can detect this kind of attack in the future.

https://www.virtualmin.com/node/66890

@wsaewyc I prefer solutions that empower the user to control their own content instead of solutions that put ever greater power into central authorities.

So happy that the ribs turned out.

When your shopping cart has 8 racks of pork spare ribs, 3lbs of Kosher salt and 2lbs of brown sugar, everyone you meet in the store knows your plans for the weekend. #bbq #lowandslow

@drewmoore I don't believe their customer list has been made public (and I don't expect it to be) and the article only hints at it ("US co-working space") so I don't know.

It's gonna take a lot to drag us away from you
There's nothing that a hundred nodes on Tor could ever do
I wish domains weren't all trackin' ya
Gonna take some time to build a `net without those ads

The AI bots cry out in the night
As they parse user data for some advertising company
I know that I must do what's right
As sure as Amazon Echo fights Google Assistant to own the data from me
I seek to cure what's deep inside
Frightened of this thing that they've become

It's gonna take a lot to drag us away from you
There's nothing that a hundred nodes on Tor could ever do
I wish domains weren't all trackin' ya
Gonna take some time to build a `net without those ads

I bought and plugged Echo in tonight
And she hears every whisper of each quiet conversation
She streams a song, then books a flight
Her LEDs reflect the stars that guide me toward salvation
I stopped an old man along the way
Hoping to find some old forgotten words to reclaim privacy
He turned to me as if to say
"Foolish boy, it's listening to you!"

OK everyone, time to reset your face and fingerprint. https://www.theguardian.com/technology/2019/aug/14/major-breach-found-in-biometrics-system-used-by-banks-uk-police-and-defence-firms

@cwt I don't believe so, as you do not own the copyright

After decades of suffering through ipchains/iptables syntax, and seeing how easy fw and ufw made common firewall workflows, it's disappointing that the best Debian's iptables replacement can do is:

nft add rule inet filter input tcp dport 22 accept

When syntax for common workflows is complicated, you increase the chance the admin will make a mistake that exposes them to attackers. See S3 bucket permissions for more examples of this. #infosec #devops

I really appreciate all of the kind and generous offers to host Linux Journal mirrors. For that matter many of the ex-staff (including me) have the knowledge + resources to mirror, but site hosting is up to the parent company as they own it, not the ex-staff.

@darthwayne Awesome!

@timhildred @linuxjournal Exploring options, but I love the feel of a real book.

I can't speak for the rest of the @linuxjournal archive, but I own the decade+ worth of articles I wrote. A lot of them are just as relevant today (I refer to them myself quite often). Would anyone be interested in some kind of "Best of Hack and /" polished and updated compilation?