Zach "earboxer" DeCook @zachdecook@librem.one

SourceHut:

820ms, 50 KiB

GitLab:

4030ms, 4400 KiB

Also GitLab:

GitHub’s new notifications: a case of regressive design

https://drewdevault.com/2020/03/13/GitHub-notifications.html

Idea: NFC receipts as an alternative to paper receipts

I don't want to give you my email address, but you encode the receipt data onto an NFC pad I can tap my phone to, we can save paper without giving you that oh-so-tasty data

The web was a mistake

Want to know what President Trump is up to? Even his daily whereabouts leak...
Don't expect to have #privacy!
https://www.nytimes.com/interactive/2019/12/20/opinion/location-data-national-security.html

How did you improve your privacy and security in 2019? What are you looking to do more of in 2020?

Hey there!

Among other things you can do to help the project, you can help us review the work being done by other contributors.

This is incredibly helpful to increase the quality of contributions, and it's also a good way to understand better how #Funkwhale works internally while improving your own skills, such as programming (Python, Javascript), webdesign, REST APIs, documentation and writing, databases, sysadmin, ansible, docker, automation, etc.

---

It's open to anyone, and you don't have to commit on anything: if you are interested, create an account on https://dev.funkwhale.audio and send me a message with your username and your areas of interest and I'll add you to the corresponding groups.

If, for any reason you want to stop, you can leave the groups on your own (or ask me to remove you).

---

When someone submits a contribution and want some reviews, they'll simply mention the corresponding groups. This is where you receive a notification.

Click the link, read the contribution and post one or more comments, if you have any:

- Questions (even, and *especially* questions that might sound silly)
- Improvements suggestions
- Proof-reading
- Feedback
- Testing

If you have nothing to say, but want to let the contributor know you reviewd their work, you can also leave a thumb up.

Literally *any* of the above helps!

You don't have to review everything that is sent your way, and are also free to chose which contributions you are comfortable reviewing.

Thank you so much for your help!

#BoostsAppreciated

"Browsers are pretty good at loading pages, it turns out" by Carter Sande https://carter.sande.duodecima.technology/javascript-page-navigation/

See also: https://jakearchibald.com/2016/fun-hacks-faster-content/

Librem 5 Devkit on a train, it just works.

It would be better if the internet were modeled off of something like Tor .onion services, where you *know* you have a secure path, because the address is literally the fingerprint of the server. "But how can I make sense of which site is which?" You guessed it, petnames https://github.com/cwebber/rebooting-the-web-of-trust-spring2018/blob/petnames/draft-documents/making-dids-invisible-with-petnames.md

And, bookmarks *are* petnames, with a minor UI tweak https://www.w3.org/2005/Security/usability-ws/papers/02-hp-petname/

The DNS + SSL CA model puts users at risk. I hope we can move past it.

So the government of Kazakhstan is MITM'ing all SSL'ed traffic https://lobste.rs/s/uqj8nq/mitm_on_all_https_traffic_kazakhstan#c_0boxyk

The way they are doing this is by adding a Certificate Authority (CA) that allows them to snoop all traffic.

This is, by the way, why SSL is criticized as being "only as secure as the weakest CA in your system". Here it's deliberate, but that's a problem in general.