Kyle Rankin @kyle@librem.one

Social media is going to be intolerable the next six months with all the helicopter parents and celebrities nagging me every day to practice good hygiene, vote and get vaccinated. #yourenotmyrealdad

My uninformed theory about the Mozilla layoffs is that Google waited for anti-trust hearings and then canceled/drastically reduced FF sponsorship claiming COVID cost-cutting, safe in the knowledge that browsers weren't brought up in the hearings. #speculation

Testing your code in production. #devops #agile #movefastandbreakthings https://www.washingtonpost.com/world/russia-unveils-coronavirus-vaccine-claiming-victory-in-global-race-before-final-testing-is-complete/2020/08/11/792f8a54-d813-11ea-a788-2ce86ce81129_story.html

"DSP chips are much more vulnerable to risks as they are being managed as ‘Black Boxes’ since it can be very complex for anyone other than their manufacturer to review their design, functionality or code." https://arstechnica.com/information-technology/2020/08/snapdragon-chip-flaws-put-1-billion-android-phones-at-risk-of-data-theft/

@ted @silmathoron @mozilla @protonmail Sure, some people keep their house tidy all the time, and some people rush to clean it when they have guests coming to visit.

If proprietary code were higher quality than free software, you wouldn't have to spend so much time "cleaning it up" before open sourcing it.

@aral Or put another way, if defaults don't matter, why did the US tech industry fight so hard to remove the part of the California data privacy law that would require tracking to be opt-in?

Check out this Dice article by @yaelwrites on how to build a career in #infosec. Bonus: I'm quoted in it! https://insights.dice.com/2020/08/04/cybersecurity-expert-careers-skills-embrace-pitfalls-avoid/

@nerd7473 No, but we haven't published a new estimated date yet (we will soon) because while much of Evergreen is running in parallel to Dogwood, parts of the process were blocking based on the outcome of Dogwood testing.

This extensive and thoughtful post by a member of the #Librem5 community does a good job of explaining the past and present mobile Linux ecosystem and why Purism's approach with phosh makes strategic sense long-term. https://amosbbatto.wordpress.com/2020/08/05/advantages-of-phosh/

One of the most interesting things to me about NSA's document on cellphone tracking is that all their mitigations rely on software features they admit are flawed and could be hacked. This is why we rely on hardware to prevent tracking on the #Librem5: https://puri.sm/posts/how-librem-5-solves-nsas-warning-about-cellphone-location-data/

Customers are asking us about the recent GRUB2 vulnerability so I wrote a quick post explaining how it works and why @purism hardware isn't affected. For even more details, check out Dan Goodin's excellent Ars Technica article I link in my post.

https://puri.sm/posts/why-the-grub2-secure-boot-flaw-doesnt-affect-purism-computers/

@johns When your garden is surrounded by a wall you don't control, you have to sneak in plants through the side door.

TikTok offers 3rd parties to audit their code to quiet #privacy concerns. Auditability, not just of TikTok w/ hand-picked regulators/experts, is critical for software we rely on. For real privacy and security, you want software w/ a #FOSS license. https://www.washingtonpost.com/technology/2020/07/29/tiktok-privacy-antitrust-china/