If only there was a Tech podcast / show that had...
- No Swearing (kid and work friendly)
- No personal attacks ("Be Excellent To Each Other")
- No political attacks (no matter who you vote for, we're friends)
- Lots of nerdy-ness (goofy and serious)
The Intercept is hiring a digital security specialist in NYC, if anyone is interested!
You’ll work directly with journalists on operational security issues related to securing devices, communicating with sources, protecting document sets, and collaborating securely. You'll also develop curriculum for and help run an internal digital security training program.
This is a union job. POC, people with disabilities, women, and LGBT candidates are strongly encouraged to apply
By the way, I know all of this because I've been handing out custom per-use email addresses for years. Makes it easy to find when someone sells you out.
Follow up: in the brief time that my email was in Square's system, they opted me into ads from a local merchant I used the card at a month before Square got my email. So I get to opt out of those now too... #privacy
Stories like this one from @arstechnica are not unusual:
https://arstechnica.com/information-technology/2019/06/google-confirms-2017-supply-chain-attack-that-sneaked-backdoor-on-android-devices/
That's why Purism takes the digital supply chain so seriously. Read about our efforts to protect the digital supply chain here:
https://puri.sm/posts/protecting-the-digital-supply-chain/
I just wrote a post that talks about user empowerment and how that influences how @purism designs its products, from hardware to software to security to services to social: https://puri.sm/posts/with-purism-products-you-are-in-control/
In this free Linux Journal ebook, @kylerankin expounds on some of the lessons he's learned through the years that might be obvious to longtime sysadmins but may be news to someone just coming into this position.
https://www.linuxjournal.com/node/1340386sysadmin #devops #FOSS
In honor of another Open Core company moving to the Extinguish phase of Embrace/Extend/Extinguish for their #FOSS code, here are some of my thoughts on Open Core: https://www.linuxjournal.com/content/some-thoughts-open-core
To follow up, *some* Google sites are on the block list, but many more are on the unblock list. The complete list of blocked sites is here: https://disconnect.me/trackerprotection/blocked and the list of sites they allow through is here: https://disconnect.me/trackerprotection/unblocked
Mozilla announced "Enhanced Tracking Protection" to protect people from tracking (https://blog.mozilla.org/blog/2019/06/04/firefox-now-available-with-enhanced-tracking-protection-by-default/), but if you check out the https://disconnect.me/trackerprotection list of trackers, all Google trackers are still allowed through. #privacy
A new paper challenges the argument that invasive tracking of readers helps to support the publishing business. Publishers should reset their association with adtech and put their relationship with their readers first. https://www.eff.org/deeplinks/2019/06/research-shows-publishers-benefit-little-tracking-ads
I paid a contractor w/ a credit card over the phone. I wanted a receipt, gave him an email. He uses Square, they linked that CC and email, now every purchase w/ that CC at a Square kiosk generates an email receipt. I have no account, how do I opt out/unlink? #privacy
UN Special Rapporteur on freedom of opinion and expression @davidakaye has a new book out detailing the complexities of regulating speech online. This @KQEDforum interview is a must-listen if you want to understand the global impact of the problem. https://www.kqed.org/forum/2010101871413/speech-police-navigates-social-media-regulation-free-speech-concerns
Regulations designed to curb "extremist" content on social media platforms can have a negative impact on free expression. Our new white paper authored with @witnessorg and @syrian_archive demonstrates how. https://www.eff.org/deeplinks/2019/06/impact-extremist-speech-regulations-human-rights-content
Third parties should never have access to backups of your encrypted messages, photos, and data by default. It’s time for Apple to #FixItAlready https://fixitalready.eff.org/apple
Sensor calibration settings can be used by apps/sites to fingerprint iOS and Android phones.
We added a "Lockdown Mode" for the Librem 5 which allows you to defend against this.
Librem 5 Lockdown Mode: https://puri.sm/posts/lockdown-mode-on-the-librem-5-beyond-hardware-kill-switches/
Sensor Calibration Attack: https://www.zdnet.com/article/android-and-ios-devices-impacted-by-new-sensor-calibration-attack/
Factory sensor calibration settings can be used by apps/websites to fingerprint iOS and (some) Android devices. This reinforces why adding "Lockdown Mode" to the Librem 5 was a good idea. #privacy https://www.zdnet.com/article/android-and-ios-devices-impacted-by-new-sensor-calibration-attack/
Apple promises privacy, but iPhone apps share your data with trackers, ad companies and research firms - The Washington Post
https://www.washingtonpost.com/technology/2019/05/28/its-middle-night-do-you-know-who-your-iphone-is-talking/?noredirect=on&utm_term=.e6c0feb340e3 #privacy
Most "duress mode" safeguards are misguided movie threat fantasies, would put you at more risk in real life. Instead, cross borders w/o sensitive data, comply w/ searches w/o smuggling. You are a bad liar, customs agents are pro lie detectors. #infosec
A: Purdue infiltrated WHO
C: That's what I want to find out
A: I say Purdue infiltrated WHO
C: So you're the reporter?
A: Yes
C: And you don't know the org's name?
A: Well I should
C: Well then who's the org?
A: Yes
C: I mean the org's name
A: WHO
C: Purdue infiltrated who
A: Yes
https://arstechnica.com/science/2019/05/world-health-organization-parroted-purdues-deceptive-opioid-claims-report-says/
Technical author, FOSS advocate, public speaker, Linux security & infrastructure geek, author of The Best of Hack and /: Linux Admin Crash Course, Linux Hardening in Hostile Networks and many other books, ex-Linux Journal columnist.