Notices by Rysiekúr Memesson (rysiek)

Google started editing people's e-mails in GSuite, replacing links with a link through google.com:https://mobile.twitter.com/sneakdotberlin/status/1317734739537653760https://twitter.com/tblodt/status/1317875714981416962?s=20

This means that Google will track a click on a link *in e-mail* even if you're using an external client.

I am *guessing* this is under the pretext of phishing protection, but it actually *creates* additional phishing risk for text-only clients, since now all links are google.com links.

#FuckGoogle #privacy

@theoutrider mood:

"Is that a Linux in your pocket or are you just happy to see me" #FOSDEM

Any sufficiently hyped technology is indistinguishable from crap.

@galaxis @elomatreb also 2018: every "app" is now a thin layer over a full blown browser with JS, video, and audio support, but tracking ~2 versions behind the upstream browser and carrying vulnerabilities fixed in (and described publicly by) the upstream.

Just listened to ep.226 of Defensive Security podcast by @jerry. Good stuff, as always.

I did get a bit disappointed that when discussing "compromised CEO e-mail account sends an e-mail asking to do X", the simple solution of digitally signing an e-mail (GPG/PGP for instance) was not mentioned at all.

If e-mails are signed, and people are trained, you *can* tell the difference between a legit and malicious e-mail coming from the mailbox. Attackers now need to compromise the CEO device itself.

A dream position: any in which I can say "no, sorry, we do not support Microsoft Windows"

Wow:

"Most of the world's Internet users lost access to YouTube for several hours Sunday after an attempt by Pakistan's government to block access domestically affected other countries. (...)

An Internet expert explained that Sunday's problems arose when a Pakistani telecommunications company accidentally identified itself to Internet computers as the world's fastest route to YouTube. "

https://abcnews.go.com/Technology/story?id=4344105&page=1

@natecull and pure text files are pretty much the only thing that could potentially survive the inevitable collapse of this civilization; everything else that needs specific pieces of software to read it, will go quietly into the night.

#WhyIJoinedMastodon
Always been a decentralization advocate, had an identi.ca StatusNet account for years before "pumpioification". Since then I was looking for an alternative, and Mastodon provided one.

#WhyIGotIntoMastodon
All the old friends from early StatusNet days started to show up, or simply were already there. Many new friends were made.

#WhyIStayOnMastodon
Well, I stay on #Fediverse, Mastodon is an important part of it, and for me the gateway to it. But I stay on Fediverse.

THIS IS IMPORTANT!

We need people to call their MEPs. Most importantly:
- Romanian S&D:
http://www.europarl.europa.eu/meps/en/search.html?country=RO&politicalGroup=4280
- Romanian EPP:
http://www.europarl.europa.eu/meps/en/search.html?country=RO&politicalGroup=4269
- British S&D:
http://www.europarl.europa.eu/meps/en/search.html?country=GB&politicalGroup=4280
- British ECR:
http://www.europarl.europa.eu/meps/en/search.html?country=GB&politicalGroup=4271
- Italian S&D:
http://www.europarl.europa.eu/meps/en/search.html?country=IT&politicalGroup=4280
- Polish EPP:
http://www.europarl.europa.eu/meps/en/search.html?country=PL&politicalGroup=4269

Please report back (in a private message, preferably) what they say! This would help us a LOT!

#Art11 #Art13 #SaveYourInternet

I'm in Strasbourg, lobbying hard. Updates soon, but was able to talk to Axel Voss, the main guy behind the current (bad) versions of #Art11 and #Art13. Doing my best to #SaveYourInternet.

Lessons from today:
- Pro-Art11/Art13 MEPs do not know how copyright law works (no surprises there, the copyright law is a mess!)
- Wikimedia Commons is a very good example of a service that could suffer very much.
- As during #ACTA, MEPs are not entirely against sitting down and discussing the issues.

I love the hypocrisy of Microzon Facegoopple and their ilk regarding #GDPR and similar regulations.

Corp: Selling user data is ok and users are perfectly fine with it, because they get their personalized ads. Precious precious personalized ads.

EU: Ok, then show them this information clearly and ask them for consent explicitly.

Corp: OH NOES THAT WILL TURN USERS AWAY!!1!

EU: Wait, I thought users wanted it? You wouldn't be lying about that, would you, eh?

Current status.

White House Eliminates Cybersecurity Position
https://www.schneier.com/blog/archives/2018/05/white_house_eli.html

Uhm...

Wait, what. Windows 10 sends info on USB devices plugged in directly to Microsoft?

And it does that using pure HTTP?
https://pastebin.com/ttYp5rLg

You gotta be kidding me.

#InfoSec

Google disables Domain Fronting:
https://www.theverge.com/2018/4/18/17253784/google-domain-fronting-discontinued-signal-tor-vpn

I was always on the fence about DF: 1. no browser support (but does help Tor or apps like Signal), and most importantly 2. reliance on big players like Google or Cloudflare.

Turns out my gut feeling about 2. was right. Centralizing the Internet is not a solution.

@Shamar @cwebber

The problem with the NC is that it's counter-productive and does not achieve what artists want it to achieve.

It does nothing to stop people who do not care about licensing from "stealing" your work.

OTOH it stops people who feel strongly about licensing from using your work, making derivatives, making it popular.

It's terribly vague -- what does it even mean? If I use this CC By-NC picture in a presentation funded by a grant, is that "commercial"?

CC By-SA is way better.

Wow, this is old news (June 2017), but... how can I support this?
https://www.engadget.com/2017/06/19/eu-proposes-banning-encryption-backdoors/

"The European Parliament has proposed amended regulation that would not only require end-to-end encryption when available, but forbid backdoors that offer guaranteed access to law enforcement. EU residents need to know that the "confidentiality and safety" of their data is "guaranteed," according to the draft, and backdoors risk "weakening" that privacy."

#InfoSec

@angristan stigmatizing all users of a particular piece of software is pretty uncool, tbh