Kyle Rankin @kyle@librem.one

I just wrote a post that talks about user empowerment and how that influences how @purism designs its products, from hardware to software to security to services to social: https://puri.sm/posts/with-purism-products-you-are-in-control/

In honor of another Open Core company moving to the Extinguish phase of Embrace/Extend/Extinguish for their #FOSS code, here are some of my thoughts on Open Core: https://www.linuxjournal.com/content/some-thoughts-open-core

To follow up, *some* Google sites are on the block list, but many more are on the unblock list. The complete list of blocked sites is here: https://disconnect.me/trackerprotection/blocked and the list of sites they allow through is here: https://disconnect.me/trackerprotection/unblocked

Mozilla announced "Enhanced Tracking Protection" to protect people from tracking (https://blog.mozilla.org/blog/2019/06/04/firefox-now-available-with-enhanced-tracking-protection-by-default/), but if you check out the https://disconnect.me/trackerprotection list of trackers, all Google trackers are still allowed through. #privacy

I paid a contractor w/ a credit card over the phone. I wanted a receipt, gave him an email. He uses Square, they linked that CC and email, now every purchase w/ that CC at a Square kiosk generates an email receipt. I have no account, how do I opt out/unlink? #privacy

Factory sensor calibration settings can be used by apps/websites to fingerprint iOS and (some) Android devices. This reinforces why adding "Lockdown Mode" to the Librem 5 was a good idea. #privacy https://www.zdnet.com/article/android-and-ios-devices-impacted-by-new-sensor-calibration-attack/

Most "duress mode" safeguards are misguided movie threat fantasies, would put you at more risk in real life. Instead, cross borders w/o sensitive data, comply w/ searches w/o smuggling. You are a bad liar, customs agents are pro lie detectors. #infosec

A: Purdue infiltrated WHO
C: That's what I want to find out
A: I say Purdue infiltrated WHO
C: So you're the reporter?
A: Yes
C: And you don't know the org's name?
A: Well I should
C: Well then who's the org?
A: Yes
C: I mean the org's name
A: WHO
C: Purdue infiltrated who
A: Yes
https://arstechnica.com/science/2019/05/world-health-organization-parroted-purdues-deceptive-opioid-claims-report-says/

Why yes, I did just quote Robert Frost in a ticket comment. It seemed appropriate, I am a nerd, and I'd do it again.

I figure your 7th birthday is a good time to learn. #security #startemyoung

I've long thought that it was messed up that engineers chose to portray AI servants as women, and that it reinforced bad stereotypes and behaviors. Now some studies have come out that reinforce this: https://www.bbc.com/news/technology-48349102

I've been critical of elastic in the past for making basic security like TLS part of their paid Enterprise software. I'm happy to see them open up these security features now: #infosec https://www.elastic.co/blog/security-for-elasticsearch-is-now-free