Re: [DNG] [OT] The End of Trust

2018-12-04 Thread Rick Moen
Quoting Martin Steigerwald (mar...@lichtvoll.de):

> For those of you how understand german language I highly recommend 
> browsing through the Firefox compendium of Mike Kuketz¹.
> 
> I learned a lot of stuff on how to armor Firefox to reduce the amount of 
> abuse by webmasters and advertisement networks. Of course there the the 
> argument of being asocial to webmasters by blocking all the stuff. But 
> currently I do not trust in ethical integrity of advertisement networks 
> and see this as necessary defense.
> 
> [1] https://www.kuketz-blog.de/firefox-umatrix-firefox-kompendium-teil9/

In this case, Google Translate produces a remarkably clear and cogent
Englisch rendition.  I second the recommendation of this series of
articles.  Vielen Dank, Martin.

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Request for comments - training room

2018-12-04 Thread Steve Litt
On Mon, 3 Dec 2018 13:42:36 +
Rowland Penny  wrote:

> On Mon, 3 Dec 2018 13:22:40 +
> g4sra  wrote:

> > 
> > Interestingly little mention of workstation BOOTP, NFS Root, Cloning
> > On Boot. Manually applying CCR's in each training room of 28+
> > workstations is going to be a pita. No one mentioned the likes of
> > Puppet, Ansible, ClusterSSH etc.
> >   
> 
> This is probably down to the very little information you provided, I
> also have no idea what 'Creedence Clearwater Revival' has to do with
> anything we are discussing ;-)

I can answer that. We all figure that someday people won't spout
uncommon and unagreed upon acronyms. But someday never comes.
 
SteveT

Steve Litt 
December 2018 featured book: Rapid Learning for the 21st Century
http://www.troubleshooters.com/rl21
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] [OT] The End of Trust

2018-12-04 Thread chillfan
I'd agree with that. We're more aware so we see more of it going forward, but 
it's definitely getting worse.

Developers and admins can play a role in helping users who don't know much 
about tech, but I think standards all-round just need to be fixed so that some 
of that work isn't necessary.

About javascript, I think it would be better for responsible people not to use 
it on websites at all or only using it where it's actually needed. It would be 
a mess still, but at least it would be manageable.

Cheers,

chillfan

‐‐‐ Original Message ‐‐‐
On Tuesday, December 4, 2018 11:08 AM, Andres Suarez 
 wrote:

> It's just becoming more open and cynic. My cellphone is already turning
> my private OFFLINE conversations into ad-topics.
> 

> The thing is, in this times (and what follows) there's some people who
> can do something for self-defence, and many others who can't and/or
> will never acknowledge what is happening.
> 

> ---
> 

> Andres Suarez
> Mobile +79310009732

publickey - chillfan@protonmail.com - 0xB179B25B.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] [OT] The End of Trust

2018-12-04 Thread Antony Stone
On Tuesday 04 December 2018 at 12:09:42, Andres Suarez wrote:

> It's just becoming more open and cynic. My cellphone is already turning
> my private OFFLINE conversations into ad-topics.

More detail / explanation please?

Antony.

> The thing is, in this times (and what follows) there's some people who
> can do something for self-defence, and many others who can't and/or
> will never acknowledge what is happening.
> 
> > For your reading pleasure:
> > 
> > https://www.eff.org/the-end-of-trust
> > 
> > Most of it is familiar but I did discover something that I didn't
> > know.  
> > Tucked away in the sidebar on page 226 is this interesting factoid:
> > 
> > "The website freedom-to-tinker.com, hosted by Princeton’s
> > Center for Information Technology Policy, published a study
> > highlighting a particularly invasive data-mining software
> > called “session replay scripts” that are being used by an
> > increasing number of websites. According to the study, session
> > replay scripts “record your keystrokes, mouse movements,
> > and scrolling behavior, along with the entire contents of the
> > pages you visit.” Unlike most third-party analytics services,
> > which provide aggregate statistics of your searches and the
> > pages you visit, session replay scripts actually record your
> > individual browsing session in its entirety, “as if someone is
> > looking over your shoulder”.
> > 
> > The study lists tens of thousands of websites that were
> > either found recording users’ browsing sessions or have the
> > capability to do so. Among the big-name sites are xfinity.com,
> > windows.com, texas.gov, petco.com, and fandango.com. The
> > following sites were also found on that list."
> > —Landon Bates
> > 
> > Here are links to the study and full list:
> > 
> > https://freedom-to-tinker.com/2017/11/15/no-boundaries-exfiltration-o
> > f-personal-data-by-session-replay-scripts/
> > 
> > https://webtransparency.cs.princeton.edu/no_boundaries/session_replay
> > _sites.html
> > 
> > It just keeps getting worse and worse . . .
> > 
> > golinux

-- 
If I needed my own advice, I wouldn't give it to others.

   Please reply to the list;
 please *don't* CC me.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] [OT] The End of Trust

2018-12-04 Thread Andres Suarez
It's just becoming more open and cynic. My cellphone is already turning
my private OFFLINE conversations into ad-topics.

The thing is, in this times (and what follows) there's some people who
can do something for self-defence, and many others who can't and/or
will never acknowledge what is happening. 
-- 
Andres Suarez
Mobile +79310009732

В Пн, 03/12/2018 в 20:26 -0600, goli...@dyne.org пишет:
> For your reading pleasure:
> 
> https://www.eff.org/the-end-of-trust
> 
> Most of it is familiar but I did discover something that I didn't
> know.  
> Tucked away in the sidebar on page 226 is this interesting factoid:
> 
> "The website freedom-to-tinker.com, hosted by Princeton’s
> Center for Information Technology Policy, published a study
> highlighting a particularly invasive data-mining software
> called “session replay scripts” that are being used by an
> increasing number of websites. According to the study, session
> replay scripts “record your keystrokes, mouse movements,
> and scrolling behavior, along with the entire contents of the
> pages you visit.” Unlike most third-party analytics services,
> which provide aggregate statistics of your searches and the
> pages you visit, session replay scripts actually record your
> individual browsing session in its entirety, “as if someone is
> looking over your shoulder”.
> 
> The study lists tens of thousands of websites that were
> either found recording users’ browsing sessions or have the
> capability to do so. Among the big-name sites are xfinity.com,
> windows.com, texas.gov, petco.com, and fandango.com. The
> following sites were also found on that list."
> —Landon Bates
> 
> Here are links to the study and full list:
> 
> https://freedom-to-tinker.com/2017/11/15/no-boundaries-exfiltration-o
> f-personal-data-by-session-replay-scripts/
> 
> https://webtransparency.cs.princeton.edu/no_boundaries/session_replay
> _sites.html
> 
> It just keeps getting worse and worse . . .
> 
> golinux
> 
> 
> 
> 
> 
> 
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] [OT] The End of Trust

2018-12-04 Thread Martin Steigerwald
Rick Moen - 04.12.18, 10:09:
> Quoting spiralofhope (spiralofh...@spiralofhope.com):
> > On Mon, 03 Dec 2018 20:26:51 -0600
> > 
> > goli...@dyne.org wrote:
> > > Most of it is familiar but I did discover something that I didn't
> > > know.
> > 
> > This is something I suspected since the 2000s when I realized how
> > capable JavaScript had become.
> > 
> > I'll articulate this problem as:
> > 
> > Your mouse position and timing is tracked to determine what video
> > previews you are interested in, on PornHub.
> 
> It's been obvious for a couple decades that the horrifically
> overfeatured nature of JavaScript is the keystone factor behind the
> security problems of Web browsers, and that its feature set needs to
> be reduced and controlled, e.g., via personally tuned use of browser
> extensions such as NoScript or uBlock Origin.

For those of you how understand german language I highly recommend 
browsing through the Firefox compendium of Mike Kuketz¹.

I learned a lot of stuff on how to armor Firefox to reduce the amount of 
abuse by webmasters and advertisement networks. Of course there the the 
argument of being asocial to webmasters by blocking all the stuff. But 
currently I do not trust in ethical integrity of advertisement networks 
and see this as necessary defense.

[1] https://www.kuketz-blog.de/firefox-umatrix-firefox-kompendium-teil9/

Ciao,
-- 
Martin


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] [OT] The End of Trust

2018-12-04 Thread Rick Moen
Quoting spiralofhope (spiralofh...@spiralofhope.com):

> On Mon, 03 Dec 2018 20:26:51 -0600
> goli...@dyne.org wrote:
> 
> > Most of it is familiar but I did discover something that I didn't
> > know.  
> 
> This is something I suspected since the 2000s when I realized how
> capable JavaScript had become.
> 
> I'll articulate this problem as:
> 
> Your mouse position and timing is tracked to determine what video
> previews you are interested in, on PornHub.

It's been obvious for a couple decades that the horrifically
overfeatured nature of JavaScript is the keystone factor behind the
security problems of Web browsers, and that its feature set needs to be
reduced and controlled, e.g., via personally tuned use of browser
extensions such as NoScript or uBlock Origin.

-- 
Cheers,  "I am a member of a civilization (IAAMOAC).  Step back
Rick Moenfrom anger.  Study how awful our ancestors had it, yet
r...@linuxmafia.com  they struggled to get you here.  Repay them by appreciating
McQ! (4x80)  the civilization you inherited."   -- David Brin
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] [OT] The End of Trust

2018-12-04 Thread Edward Bartolo
On a similar worrying note, my country's government has hired a
private company to provide equipment to read and count votes. It is
still at trial stage but the opposition is already complaining the
software used is giving different results for the same set of votes in
different circumstances.

While I stress I am NOT against private enterprises, I do think they
are getting too much power for which, they should not be entitled
especially in a democracy. Vote reading functions and vote counting
functions should be open sourced and open to scrutiny by all
interested parties.

This deep lack of respect for the human person, especially privacy and
the right for fair treatment, is stemming from greed dictating
policies and decisions. Needless to state, with this latter statement,
I do not mean people are not entitled to work to increase their
wealth, far from it.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] [OT] The End of Trust

2018-12-04 Thread spiralofhope
On Mon, 03 Dec 2018 20:26:51 -0600
goli...@dyne.org wrote:

> Most of it is familiar but I did discover something that I didn't
> know.  

This is something I suspected since the 2000s when I realized how
capable JavaScript had become.

I'll articulate this problem as:

Your mouse position and timing is tracked to determine what video
previews you are interested in, on PornHub.

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng