isaacaggrey

What is Solve for X?

Solve for X is in collaboration with TED, MIT Technology Review, Singularity University, X PRIZE Foundation, GE Focus Forward, and the ASU Center for Science and Imagination to provide a forum to encourage and amplify technology-based moonshot thinking and teamwork.

It's a place to hear about and discuss radical technology ideas for solving global problems. Radical in the sense that the solutions could help millions or billions of people. Radical in the sense that the audacity of the proposals makes them sound like science fiction. And radical in the sense that there is some real technology breakthrough on the horizon indicating that these ideas could really be brought to life.

Source: https://www.solveforx.com/about/

Release Notes: https://www.mozilla.org/firefox/15.0/releasenotes/

> Except in practice you have both factors on the phone

What do you mean by this? I'm not doubting you, but I'm still a bit confused -- currently taking a Security course, so I'm a newbie in the field.

Do you mean that if the phone is compromised (and you don't know its compromised) that once you input your password (the "what you know") the system is broken? Certainly, I can see that.

I may still be misunderstanding, but if you don't store your password(s) on your phone, then does it prevent this attack?

> compromising the phone (2nd factor for the general public) allow compromising both passwords and the authenticator

Unless I've misunderstood how 2-factor authentication works, this is misinformation. The entire point of 2-factor authentication is that you need _both_ factors; i.e., having only one does not compromise the system.

For users, HTTPS Everywhere is a must: https://www.eff.org/https-everywhere

Also, by using DuckDuckGo [1] over HTTPS you get the same ruleset in HTTPS Everywhere [2] even if you don't have the extension installed.

[1] https://duckduckgo.com/

[2] http://www.gabrielweinberg.com/blog/2010/09/duckduckgo-imple...

That's not entirely fair. If you're not logged into Facebook, you still have to log in there as well. As huragok said, once you're past set up, it is just click, password, and go as far as I can tell.

However, I'm not arguing against that a lot of people probably _are_ already logged into Facebook.

> Secondly, I'm surprised the FSF is using a service that has anything to do with proprietary, closed source, non-free software.

Where does FSF's post say anything about FSF using proprietary software? As far as I can tell, the post is simply about how some r/GNU redditors [1] noticed how Microsoft's gateway was incorrectly categorizing donate.fsf.org, not that FSF itself is using a service that is proprietary (unless you mean PayPal).

[1] http://www.reddit.com/r/gnu/comments/v21q3/how_microsoft_thr...

> Leave your computer for a second or accidentally forget to log off at the library or apple store?

If you left your computer, then you have bigger issues to worry about (i.e., it being stolen, searching through your emails for CC info, etc). In other words, the malicious use of an export button is no bigger of a problem than it already is to leave your belongings unattended in a public space.

> But now you've made it even more enticing to steal someone's password

It is already enticing to steal someone's password because more often than not people use the same password across services anyway.

I can see where you're coming from on your second point, but I'm of the opinion I should be able to take the data I'm putting into a service (reviews, chats, messages, etc) with me -- it doesn't prevent the service from still monetizing that data (through ads, suggested products, etc), and if anything it continues to give the service an incentive to make their platform better so I would want to stick around with them only because of their superior recommendations and whatnot.

As floatingatoll said [1], BrowserID is the protocol, Persona is Mozilla's implementation of the protocol [2].

[1] http://www.hackerne.ws/item?id=3739315

[2] https://groups.google.com/forum/?fromgroups#!topic/mozilla.d...