click170

These requests are trivial to detect and block with a proper gateway firewall like pfsense or others. Consumer grade firewalls just don't have enough options, or resources to support those options.

Trust, but verify.

Is it available as one big torrent anywhere or is that more likely once its all been leaked?

This has always seemed like a moot point to me when the government can demand that they install a backdoor at any point in the future under a gag order. Though this is true for any company anywhere basically.

I think this would come down to the purpose of the safe.

If the sole point of the safe can be demonstrated to be defeating law enforcement access then the judge won't look very kindly on you.

If you can make a reasonable argument that the safe was there to prevent thieves and crooks and safe crackers from getting their hands on the contents, you have a stronger case.

Judges don't take lightly to people trying to skirt the law in "clever" ways.

Please don't take this conversation offline, share your thoughts here instead.

Taking a conversation that started in public offline when there is an expressed interest in this very thread just doesn't follow.

In android this is (was?) a built-in feature, no need to install profiles or apps. I say was because it seems like Google is removing all the things I liked about android.

Thank you for highlighting that they are redesigning the UI.

I much prefer to support PFSense because they seem more supportive of their community, I will be looking forward to trying out their new UI when its out!

Using your gateway is what you do when you lose the ability to apply restrictions on your phone. And since this thread is in response to recent changes in android that remove users ability to control the apps on their phone I thought that was implied.

Of course its ideal to not send the packets and waste the battery at all but when that's not an option, I'd rather use a firewall to block the traffic rather then just let it through, regardless of the hit to the battery due to it constantly retrying the blocked connection.

Always-On VPN.

I won't buy a phone that doesn't have that feature.

The menu items were not grouped logically, eg in order to change something in one feature I had to browse through every single config page in order to find the related options. It was possible to do, and PFSense Support was phenomenal (by chance the co-founder answered the phone when we called Support), but the UI left much to be desired.

Compared to my experiences with the Sophos UTM, it's downright painful. With the UTM the UI elements of every part of a service are grouped together, and are duplicated in sections where it's intuitive to do so. Eg Certificate Management can be found in multiple places in the UTM but all things related to the web filter are in one place, all things related to routing are in one place, et al.

Yet another case where gateway firewalls can give you back some of the privacy that these companies attempt to wrench away from you.

PfSense is a free gateway firewall but the UI left much to be desired last I checked. Another option is the Sophos UTM, which has a firewall, web filter, and VPN server built into one.

Gateway protections are your last resort when it comes to protecting yourself from shady behavior like this.

As someone who has multiple years of experience maintaining tableau, it is laughably Ops unfriendly.

Want to change the email address that tableau sends reports to? Requires a restart of a Tableau.

Want to update the ssl certs used in tableau? That's a restart.

Want to upgrade tableau to a new veraion? Get ready to uninstall and reinstall the new version.

Of all of the servers and services that I manage, Tableau is my least favorite. However, apparently its incredibly good at what it does. I say apparently because I maintain it but I don't use it in day to day operations.

The only limitation on the free version of the utm that I found so far is that you can't have more than 10 IPs active, but nothing stops you from using nat to get around that.

The utm itself actually hosts and serves the VPN connection by the way. My phone connects directly to the VPN on my UTM. You'll see a speed hit because of the extra hop unless you put your utm in the cloud.

I hope that's helpful :)

I share your sentiment towards privacy, I guard mine fiercely as well.

If I may say so though, I think you're coming at this the wrong way.

Trying to disable every component in the OS that phones home simply doesn't scale, may I suggest you explore gateway firewall devices such as PFSense, or the free version of Sophos' UTM if you prefer a more polished UI?

I use a Sophos UTM at home and I can see (and block) every request that my Macs use to try to phone home, with HTTP, HTTPS or regular network traffic.

I also use the Always-On VPN on my phone to apply ad blocking at the firewall level which protects my phone as well.

Very much worth checking out. Gateway protections are the only way to go these days IMO.

Edit: Just to add, at first glance I find the SIP system to be rather anti-user, but people in this thread are right. It's valuable protection to have in place. If I used a Mac at home I would only disable this to make the changes I needed before turning it back on again.

Edit to clarify: I use a Mac, but only has a HTPC and not as a desktop or workstation, and all outbound traffic is blocked by default.

I thought licensing music wasn't an issue with many BBC shows as long as they could be fairly categorized as Documentary.

Eg Top Gear got away with using music from many famous films in almost every show, I thought this is how they were allowed to do that. And their "documentary" status is questionable.

Are you by chance a white heterosexual male? I ask to help understand your biases - of which we all have.

I don't disagree but I think an important distinction is that when you provide your credit card there is an expectation that they will be able to track you based on that.

A big problem with ad tracking these days is that its entirely out-of-site-out-of-mind, nontechy people don't expect to be tracked across the internet as much as when they buy something online with a credit card.

Couldn't agree more. The fault for the state of web advertising these days lies squarely on advertising networks that do not vet their content.

For a long time I used but did not recommend adblock to my trogladite friends and family. Sadly its gotten so bad that I've begun installing it on their machines on their behalf when they ask me for help with their computer because ad blockers are today what antivirus was 10 years ago. They're how you keep yourself safe online.

Adblock usage won't change until the networks do.

I've been using Debian for about 10 years now and with all the FUD I was worried about the systemd switch, but its been largely uneventful for me.

The only bug I've noticed after switching to Jessie is that on one of my systems that has two NICs for some reason both NICs will occasionally end up with the same IP on both NICs. I need to investigate further to figure out the root cause but a reboot always solves the problem for a couple days. I'm confident its not a dhcp server issue.

I expected much more grief due to edge cases that weren't planned for but I've yet to find more than the dual nic issue.

Be careful about wires and electronics in your bags. If it looks even the slightest bit suspicious you might find that they've detonated your luggage instead of delivering it.

Something like a goPro should be fine though, no visible wires and its one of the most iconic cameras these days.

I'm assuming this is a sarcastic post.

It's an interesting thought experiment to extrapolate antitrust ideas onto free software.

If Linux grew big enough could it attract antitrust lawsuits despite not being the product of any single company?

My first impression was to draw the line at organizations that make money, but that leaves the possibility for free software growing so big as to hinder progress, which isn't necessarily beneficial for the community either.

Discuss(?)

To be totally honest, for the first 30 seconds or so as I was reading the story I was sure this was some kind of joke. Not because of anything specific against McAfee, but because of how many candidates there are.

Shit, maybe Colbert or John Stewart (or John Oliver) should run for president too. Everyone else is, and it would help fun each respective show, and perhaps could even be leveraged to demonstrate the impact of money in politics.

> You're suggesting that you can make something as usable on a mobile browser as you can with a native app. That's just not true; if it were, there wouldn't be any native apps.

In the context of forums though, its entirely true and accurate.

If we were talking about apps, as in things that require more than an internet connection to work, I would agree with you.

Just because you can make it an app, doesn't mean you should.

I agree, and was whole-heartedly flagging paywalled articles, until a fellow commentor pointed out that one of the Admins has said that people who do this will face consequences.

Which I think is rather stupid, so I've started using other news sites instead for most of my news. But that's me.

https://news.ycombinator.com/item?id=9717601

Is this being reported on by anyone other than WSJ? I don't like paywalls.

There's an argument to be made that trying to tax undesirable behaviors is a form of corruption.

If you want to change other peoples behavior I have trouble supporting something that unfairly penalizes the poor.

Whats the back story behind this?

Does pando have a reputation for being disruptive?

Is y combinator demo day invite only?

I ask because I don't know.

Thank you!

Too many solutions rely on a centralized off-site hosted server and for some sensitive environments an on premesis solution is required.

Does this support XMPP federation, and is it based on XMPP? If not, I am interested in the analysis performed and why you opted to not use XMPP.

I think a big part of the problem here is the perception of a big company trying to externalize costs onto their users.

The funny thing is, if you ignore the fact that it's a big company named Microsoft who's using your bandwidth and that it's enabled by default, this is actually a pretty awesome feature that could help a lot of people in a lot of situations.

Edit: Clarity

And so begins World War III.

We will look on in horror as the tools we built are used against us.