spaceboy

Site seems down. Blank page with a link pointing to:

http://maketrumptweetseightagain.com/cpanel

> A bit over a week spent trying to make it work, and it never did

I feel your pain. I remember trying to install DNSCrypt[1] on Linux and failing miserably. I was convinced it would work if only I found the right solution online, or if only the right amount of caffeine was in my bloodstream, or if by sheer effort of will I could get it working, but I still failed. I partially got it installed, error messages galore in my terminal, and all my /paths/ were wrong. It was a humbling experience. I quickly uninstalled it as I don't want partially working, broken soft running on my machine.

I guess for this situation a decent OpenVPN client would be ideal like Viscosity[2]

[1] https://www.dnscrypt.org/

[2] https://www.sparklabs.com/viscosity/

It's up to the users. Personally I don't post anything by cnet, zdnet, medium, techcrunch, arstechnica etc

See: https://news.ycombinator.com/submitted?id=spaceboy

There's something similar on Telnic https://www.telnic.org

> And asks you to login to Facebook

Your very clean, presentable looking Facebook account which is heavily manicured, and ready to be presented at a job interview.

JS increases the finerprintability a huge amount. It's worth looking at ClientJS to see how many bits of identifying information can be hoovered up with JS.

[1] https://clientjs.org

> I wonder if we can come up with a widely adopt(able|ed) fingerprint that we can mask ourselves with, do any of these identifying bits actually make the web more usable for us?

https://anonymous-proxy-servers.net/en/jondofox.html

JonDofox with JS turned off and uBlock origin installed. There's actually a small pool of users with this config but it needs to be bigger. As you said, as soon as we get consensus on what config to use, we can all switch to it en-masse.

The best minds of my generation are thinking about how to make people click ads—and that's ok: https://www.ybrikman.com/writing/2014/08/10/the-best-minds-o...

Also relevant: https://www.bloomberg.com/news/articles/2011-04-14/this-tech...

> the way your brain tricks you into thinking you make "free decisions"

It's my own experience that I have Free Will[1] without my brain tricking me. The idea of free will is not without controversy, though, and we could argue at length of whether it's truly free in the classical sense, or a mix of advice, persuasion, deliberation, and prohibition.

https://en.wikipedia.org/wiki/Free_will

Can't help but bring up the notion of envy these people (technocrats specifically) have for the biological miracle that is the human body. They can simulate the human brain all they want, but they'll never match it, as it's orders of magnitude more complex than any supercomputer they can dream of. And it has free will, which AI does not. AI is impotent at making free decisions because it's deliberately constrained by the programmers to think rigidly and inside their own custom black box. There's no room to roam unless we get to Mars where we can unleash AI and watch it make free decisions, which I suspect Musk is trying to do...Turning planets into giant labs where AI can be less constrained.

Windows doesn't wipe the memory properly though, and the default browser (MS Edge for Win10, and plain old IE for older versions), are awful default browsers, forensically speaking.

I'll leave this link here for those who use Tails and need to wipe files and other data, either there and then, or after the fact of deletion (clearing files from free space):

https://tails.boum.org/doc/encryption_and_privacy/secure_del...

There's nothing about TailsOS that could arouse suspicion if there's nothing persistent on it that could arouse suspicion, or draw more attention to you. TailsOS is strictly a utility like a wrench or a screwdriver. Providing you exit TailsOS properly and watch the screen as it's wiping the memory to ensure it has infact wiped. TailsOS can prove to be an innocuous O.S after you unload it from memory. They might ask questions, but they have nothing on you.

Bringing a Windows OS is stupid as Windows doesn't clean up properly after shutting down and leaves a forensic footprint which is difficult to cleanup unless you use something like Bleachbit[1] or CCleaner after using Windows. You typically want to offload cleaning up to the O.S level and avoid using such tools such as CCLeaner in the first place (Keep in mind, since this is Windows, there are issues with free space on the drive that leave deleted files remaining on the hard-disk, even after explicitly stating they should be deleted).

With TailsOS, In other words, you can browse freely and with peace of mind that you won't leave a forensic footprint behind, giving you an upper-hand over other passengers who have to self-censor their browsing for fear of scrutiny at a later date from border officers.

[1] https://www.bleachbit.org

[2] https://www.piriform.com/CCLEANER

I have tried deterministic password managers, but as with most solutions they have flaws and tradeoffs[1] to consider.

[1] https://tonyarcieri.com/4-fatal-flaws-in-deterministic-passw...

[2] Also related: https://news.ycombinator.com/item?id=13016132

I thought the U.S had better key disclosure law[1] than other countries? Personally I would rather not self-incriminate myself by revealing a key, no matter how draconian and lengthy the sentencing was. Why, you ask? Well I consider all my own personal data likened to an extension of my own mind, and revealing a key is like slicing a thin part of my brain and attempting to pick its contents. Never a gentlemanly thing to do in any circumstance.

In terms of being stopped and searched when traveling, I just carry a TailsOS bootable live USB. My laptop doesn't have a hard-drive and boots entirely from my TailsOS USB stick. I did not enable any persistent storage and any bookmarks I need to remember, I simply remember them by rote, like in that movie The Book of Eli[2]. My threat model is such that I don't want anybody knowing my business when traveling. The intrusiveness should only go so far as one question, like "Business or Pleasure?" and that's all.

[1] https://en.wikipedia.org/wiki/Key_disclosure_law#United_Stat...

[2] https://en.wikipedia.org/wiki/The_Book_of_Eli

Even though web beacons / trackers like Google Analytics are fairly harmless, I still wouldn't trust them in this app because they often sit close to the main app's code and can be MITM'd to do bad things like send back snippets of a recording, or metadata about a recording like the name of the video file. That is, of course if this app has such beacons. I haven't sat between the traffic of this app (ab)using Burp Suite or Fiddler[2] to give a proper opinion

[1] https://portswigger.net/burp/

[2] http://www.telerik.com/fiddler

Apparently this scene from The Labyrinth is based on the heaven/hell logic puzzle he devised: https://www.youtube.com/watch?v=ReFhu8KYbmU

> Many of his logic problems are extensions of classic puzzles. Knights and Knaves involves knights (who always tell the truth) and knaves (who always lie). This is based on a story of two doors and two guards, one who lies and one who tells the truth. One door leads to heaven and one to hell, and the puzzle is to find out which door leads to heaven by asking one of the guards a question. One way to do this is to ask "Which door would the other guard say leads to hell?". This idea was famously used in the 1986 film Labyrinth.

According to: https://en.wikipedia.org/wiki/Raymond_Smullyan

> Use a VPN and now you're only vulnerable to the VPS service and the NSA

You can always try 'chaining' VPNs together, or stacking them on top of each other so that if one of the VPS servers is compromised, a TLA gets nothing but encrypted traffic and can't see what you're doing. The only caveat here is the 'exit' VPS is always going to have to be unencrypted. This is why it's worth looking into offshore VPS providers in non-five-eyes countries. I'm not sure what countries these are. I haven't done the research.

Typically I achieve chaining by doing the following:

- Hardware VPN that I connect to as normal. Personally I use http://www.pivpn.io/

- Then I connect to another VPN on my host/hypervisor machine

- Then I fire up Virtualbox and run another VPN inside the VM

- The chain now has three hops, and the exit VPN is on a box that I control. I avoid Digital Ocean like the plague as it's a US company.

That's good advice. It's necessary and worth it to harden any server that you deploy bash recipes on. The amount of tutorials online that leave out the IPV6 advice in that Linode article is astonishing.

Here's a few more:

https://github.com/sovereign/sovereign

https://github.com/Nyr/openvpn-install

https://github.com/ttlequals0/autovpn

https://github.com/robbintt/popup-openvpn

https://github.com/jlund/streisand

They really need to make their promoted tweets cheaper. I attached a credit card with $100.00 to spend on ADs and Twitter burned through it in a week for a few paltry 'promoted tweets' that had very little engagement or views.

A little bit, yes. But it's a given now that client-side JS is open source, and many have got used to this. I've seen developers try to obfuscate their code using obscure packing utilities, and abusing eval(), but such code is trivial to de-obfuscate/unpack, and doing so only makes me want to see the code more since you've something to hide.

What a curious TLD:

    .cern

I want one of those

What does the -no-remote switch do?

I looked here: https://developer.mozilla.org/en-US/docs/Mozilla/Command_Lin...

It says

    Do not accept or send remote commands; implies -new-instance.

But what are remote commands?

If it's "TLS-Protected data" then how can it be intercepted? I thought the idea behind TLS is to protect data on the wire. The only way I can think TLS would be intercepted is if a rogue certificate was placed somewhere

This is why I use isolated sessions when browsing. I compartment my surfing these days because of this exact type of attack (identities and other browsing artifacts spilling over into serendipitous/casual/random browsing). Mozilla are even going to ship this strategy in Firefox soon[1]. Another strategy to lessen the amount of data collected on you is to outright disable Facebook like buttons and Twitter share buttons, because these widgets track you as you navigate around the web. This can be done in uBlock origin[2] under the '3rd party filters' tab and selecting Fanboy's annoyance filter list alongside Anti-ThirdpartySocial filter list.

[1]: https://wiki.mozilla.org/Security/Contextual_Identity_Projec...

> Individuals behave differently in the world when they are in different contexts. The way they act at work may differ from how they act with their family. Similarly, users have different contexts when they browse the web. They may not want to mix their social network context with their work context. The goal of this project is to allow users to separate these different contexts while browsing the web on Firefox. Each context will have its own local state which is separated from the state of other contexts

[2] https://github.com/gorhill/uBlock

You can still download them from here: https://media.ccc.de

> This account has been terminated due to multiple or severe violations of YouTube's policy against spam, deceptive practices, and misleading content or other Terms of Service violations.

I need something similar to Coinbase where I can attach a card and just buy some BTC without all the KYC BS you see in Coinbase. There has to be something like that which is heavily vetted by the BTC community? I've seen local bitcoins, but I want to keep everything as virtual as possible.

Number plates should be in Base58 https://en.wikipedia.org/wiki/Base58

Genuinely scared to list the plugins I use because it would fingerprint[1] me specifically

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=757726