Join us now at the IRC channel.
| <--Firee has quit (Quit: lolmoi) | Aug 04 00:00 | |
| MinceR | https://img.pr0gramm.com/2019/07/22/db2251a08349e7bb.jpg | Aug 04 00:18 |
|---|---|---|
| MinceR | https://full.pr0gramm.com/2019/07/22/bfaf9383b57e1c7d.jpg | Aug 04 00:34 |
| <--zerogue has quit (Quit: Goodbye Cruel World) | Aug 04 02:22 | |
| -->zerogue (~irc@nullstruct.com) has joined #techrights | Aug 04 02:27 | |
| ---MinceR gives voice to zerogue | Aug 04 02:50 | |
| schestowitz | MrGreenFriendd: hi | Aug 04 03:03 |
| MrGreenFriendd | hi | Aug 04 03:03 |
| schestowitz | I suppose anonymity isn't the most important thing | Aug 04 03:07 |
| schestowitz | as if's known we spoke to Eric | Aug 04 03:07 |
| schestowitz | that is not the secret | Aug 04 03:07 |
| schestowitz | So encryption-wise, well... if documents were already shown in court, then too the contents are not secret | Aug 04 03:08 |
| MrGreenFriendd | Jami also has VoIP | Aug 04 03:13 |
| schestowitz | I used to do VoIP more | Aug 04 03:15 |
| schestowitz | in this case we need to transmit files mostly and text can be done over IRC, unless there's more condidential stuff | Aug 04 03:16 |
| MrGreenFriendd | it is 2019, i think everything should be E2EE :) I'm just trying to help | Aug 04 03:16 |
| schestowitz | voip can be harder to take notes off | Aug 04 03:21 |
| schestowitz | pgp is for text and attachments | Aug 04 03:21 |
| -viera/#techrights-Tux Machines: Games: Drift Into Eternity, Moonlighter - Between Dimensions DLC, MiniGolf Maker, Godot Vulkan Progress http://www.tuxmachines.org/node/126588 [https://pleroma.site/objects/868c28fe-dbcf-4077-901c-af48a18d1741] | Aug 04 03:27 | |
| -viera/#techrights-Tux Machines: kate-editor.org Update http://www.tuxmachines.org/node/126589 [https://pleroma.site/objects/6ed8c17d-fe5f-4a61-8bc7-bbe4cde69122] | Aug 04 03:30 | |
| MrGreenFriendd | AFAIK, Signal works on Tablets & Android emulators: can use a seperate device with any phone number that can get SMS or call (e.g. landline) | Aug 04 03:31 |
| MrGreenFriendd | https://signal.org/android/apk/ | Aug 04 03:32 |
| -TechrightsBot-tr/#techrights-signal.org | NO TITLE | Aug 04 03:32 | |
| schestowitz | if it's on a phone, then it cannot be secure | Aug 04 03:32 |
| schestowitz | I spoke to Eric about it | Aug 04 03:33 |
| schestowitz | Even Signal | Aug 04 03:33 |
| schestowitz | which strictly requires a phone number | Aug 04 03:33 |
| MinceR | Signal insists on their software only being accessible in a form build by them via google play | Aug 04 03:33 |
| MinceR | i wouldn't trust such a form of "secure" communications | Aug 04 03:33 |
| schestowitz | Vault7 shows the agents, CIA in this case, bypass the encryption | Aug 04 03:33 |
| schestowitz | at the OS level | Aug 04 03:33 |
| MinceR | s/ld/lt/ | Aug 04 03:34 |
| MrGreenFriendd | i haven't used this, but AFAIK Signal works with Anbox: https://anbox.io | Aug 04 03:35 |
| -TechrightsBot-tr/#techrights-anbox.io | Anbox - Android in a Box | Aug 04 03:35 | |
| schestowitz | I could never install a nbox | Aug 04 03:37 |
| schestowitz | I tried some months ago | Aug 04 03:37 |
| schestowitz | Android itself is not secure, it's never built to be secure | Aug 04 03:37 |
| schestowitz | there are other means by which to transmit documents | Aug 04 03:38 |
| schestowitz | and it's possible to compress the files with a password | Aug 04 03:38 |
| <--mmu_man has quit (Ping timeout: 245 seconds) | Aug 04 03:38 | |
| -viera/#techrights-Tux Machines: Events: DebCamp, Vintage Computer Festival West, Ubucon Europe http://www.tuxmachines.org/node/126590 [https://pleroma.site/objects/a072a188-4315-4eed-933c-055a08bbac7e] | Aug 04 03:39 | |
| -viera/#techrights-Tux Machines: Porting wine to amd64 on NetBSD http://www.tuxmachines.org/node/126591 [https://pleroma.site/objects/4700d595-63a3-4d7b-b93a-6d1e1de24669] | Aug 04 03:41 | |
| MrGreenFriendd | MinceR, i haven't done this but here are the instructions. u r saying this doesnt work? https://github.com/signalapp/Signal-Android/wiki/How-to-build-Signal-from-the-sources | Aug 04 03:45 |
| -TechrightsBot-tr/#techrights-How to build Signal from the sources · signalapp/Signal-Android Wiki · GitHub | Aug 04 03:45 | |
| MinceR | no | Aug 04 03:46 |
| MinceR | i'm saying when f-droid attempted to host their software, they came up with some bullshit | Aug 04 03:47 |
| MinceR | https://github.com/signalapp/Signal-Android/issues/281 | Aug 04 03:47 |
| -TechrightsBot-tr/#techrights-Not yet published on F-Droid · Issue #281 · signalapp/Signal-Android · GitHub | Aug 04 03:47 | |
| -viera/#techrights-Tux Machines: AMD Radeon GCN Offloading Support For OpenMP/OpenACC On The Way For GCC 10 http://www.tuxmachines.org/node/126592 [https://pleroma.site/objects/7c5a3c08-1a4d-4409-a078-ca3f7debce28] | Aug 04 03:50 | |
| MrGreenFriendd | schestowitz, i thought that Vault7 exploits do not apply to Anbox or https://www.android-x86.org? i'm guessing: CIA would simply pressure companies to add binary-blobs to their software, or worse exploit the baseband-firmware--- neither which apply for Andbox/Android-86 | Aug 04 03:51 |
| -TechrightsBot-tr/#techrights-www.android-x86.org | Android-x86 - Porting Android to x86 | Aug 04 03:51 | |
| schestowitz | true | Aug 04 03:51 |
| schestowitz | But Eric would probably not use Anbox | Aug 04 03:52 |
| schestowitz | yesterday we spoke about phones not being secure | Aug 04 03:52 |
| schestowitz | as for Anbox, after I had generated a Android app I tried to install Anbox without success | Aug 04 03:52 |
| schestowitz | I think pgp would work best if he needs strictly private chat | Aug 04 03:53 |
| schestowitz | http://techrights.org/2019/01/28/another-call-for-epo-leaks/ | Aug 04 03:53 |
| -TechrightsBot-tr/#techrights-techrights.org | Another Call for EPO Leaks | Techrights | Aug 04 03:53 | |
| schestowitz | http://techrights.org/2017/06/17/epo-whistleblowing-guidelines/ | Aug 04 03:54 |
| -TechrightsBot-tr/#techrights-techrights.org | European Patent Office (EPO) Whistleblowing Guidelines | Techrights | Aug 04 03:54 | |
| schestowitz | http://techrights.org/2017/06/20/whistleblowing-guidelines-part-2/ | Aug 04 03:54 |
| -TechrightsBot-tr/#techrights-techrights.org | European Patent Office (EPO) Whistleblowing Guidelines: Motivation and Impact of Leaks | Techrights | Aug 04 03:54 | |
| schestowitz | http://techrights.org/2017/12/29/epo-whistleblowers/ | Aug 04 03:54 |
| -TechrightsBot-tr/#techrights-techrights.org | Another Option for EPO Whistleblowers | Techrights | Aug 04 03:54 | |
| schestowitz | more tips there | Aug 04 03:54 |
| MrGreenFriendd | MinceR, yeh, it does seem like a bullshit reason why Moxie doesnt want Signal in Fdroid. However, i still think Moxie/Signal is trustworthy | Aug 04 04:05 |
| MrGreenFriendd | MinceR, this is how i verify the Signal.apk https://blog.torproject.org/mission-improbable-hardening-android-security-and-privacy | Aug 04 04:05 |
| -TechrightsBot-tr/#techrights-blog.torproject.org | Mission Improbable: Hardening Android for Security And Privacy | Tor Blog | Aug 04 04:05 | |
| MrGreenFriendd | MinceR, search that website for "tirefire" to find Signal-verification instructions :) "Even if Signal won't make the criterion for the official F-Droid repo (or wherever that tirefire of a flamewar is at right now)" | Aug 04 04:09 |
| MinceR | :) | Aug 04 04:11 |
| schestowitz | MinceR: he worked for FB | Aug 04 04:16 |
| schestowitz | they put a back door in everything | Aug 04 04:16 |
| schestowitz | he's compromised | Aug 04 04:16 |
| schestowitz | they keep private keys on servers | Aug 04 04:16 |
| schestowitz | but that aside, we probably don't need Signal for this | Aug 04 04:16 |
| schestowitz | there are other, possible simpler methods for passing text and files | Aug 04 04:17 |
| schestowitz | anonymity isn't required in this case | Aug 04 04:17 |
| MrGreenFriendd | schestowitz, who is "he"? moxie worked for facebook?? | Aug 04 04:18 |
| acer-box | https://en.wikipedia.org/wiki/Moxie_Marlinspike | Aug 04 04:20 |
| -TechrightsBot-tr/#techrights-en.wikipedia.org | Moxie Marlinspike - Wikipedia | Aug 04 04:20 | |
| acer-box | "Between 2014 and 2016, Marlinspike worked with WhatsApp, Facebook, and Google to integrate the Signal Protocol into their messaging services." | Aug 04 04:20 |
| <--schestowitz has quit (Quit: Konversation terminated!) | Aug 04 04:20 | |
| -->schestowitz (~roy@unaffiliated/schestowitz) has joined #techrights | Aug 04 04:21 | |
| schestowitz | pasted from another PC | Aug 04 04:21 |
| schestowitz | as I had copy-paste issues | Aug 04 04:21 |
| MrGreenFriendd | oh, u mean FB paid him to use his Signal-protocol in WhatsApp. yeh , i know about that, but that doesnt mean that Signal is compromised. | Aug 04 04:21 |
| schestowitz | anyway, they let the network be compromised by intentionally weak networks that have back door/government access | Aug 04 04:21 |
| schestowitz | WhatsApp is compromised | Aug 04 04:22 |
| schestowitz | the governments can request access to it, and do... | Aug 04 04:22 |
| schestowitz | but that's not the point anyway | Aug 04 04:22 |
| schestowitz | Eric needs something simpler than VoIP | Aug 04 04:22 |
| ---MinceR gives voice to schestowitz | Aug 04 04:23 | |
| MrGreenFriendd | i like to think that FB/whatsapp used Moxie to get good PR, to make WhatsApp 2.0 (with Signal Protocol). and then as soon as Moxie walked out the door. FB changed WhatsApp to 2.0.1 (now with backdoor) hahaha | Aug 04 04:24 |
| schestowitz | they'll say it's to comply with the law | Aug 04 04:24 |
| schestowitz | and guess where these serves are located anyway (NSL) | Aug 04 04:25 |
| oiaohm | schestowitz: its when whatsapp changed to signal saw the 5 eyes asking for backdoor access. | Aug 04 04:26 |
| oiaohm | Before that it was server client so able to get man in middle quite simple. | Aug 04 04:26 |
| schestowitz | MrGreenFriendd: our main mitm threat here is Microsoft | Aug 04 04:33 |
| schestowitz | as they might want to get advanced knowledge of what's being published | Aug 04 04:33 |
| schestowitz | to suppress or refute | Aug 04 04:33 |
| schestowitz | not the government is the threat here, the overlap between it and corporations notwithstanding | Aug 04 04:33 |
| MrGreenFriendd | i'm sure u guys have seen this, but this shows Signal is pretty well battle-tested: when Signal was required by a USA Federal Grand Jury - Supoena, to provide data associated with phone numbers including: name, addresses, phone numbers, email addresses, payment, IP logs, cookies, account history, etc | Aug 04 04:37 |
| MrGreenFriendd | Signal only gave up the: time of: account creation & last connection! And fought the "gag order" and won (with help of ACLU) https://www.aclu.org/blog/national-security/secrecy/new-documents-reveal-government-effort-impose-secrecy-encryption | Aug 04 04:39 |
| -TechrightsBot-tr/#techrights-www.aclu.org | New Documents Reveal Government Effort to Impose Secrecy on Encryption Company | American Civil Liberties Union | Aug 04 04:39 | |
| MrGreenFriendd | https://signal.org/bigbrother/eastern-virginia-grand-jury/ | Aug 04 04:39 |
| -TechrightsBot-tr/#techrights-signal.org | NO TITLE | Aug 04 04:39 | |
| schestowitz | it's possible they already have the data | Aug 04 04:40 |
| schestowitz | but they need to make it seem legal | Aug 04 04:40 |
| schestowitz | Parallel Construction | Aug 04 04:40 |
| MrGreenFriendd | schestowitz, u mean by exploit 'endpoints' yeh, but that is diff problem | Aug 04 04:40 |
| schestowitz | esp. when using a phone with its proprietary baseband OS | Aug 04 04:40 |
| MrGreenFriendd | i agree, but that is out of Signal's scope, it is just an app-- not an OS.. it seems like the most secure Android OS is GrapheOS, but yeh, still same "blackbox problem" of the basebandOS https://GrapheneOS.org | Aug 04 04:43 |
| -TechrightsBot-tr/#techrights-GrapheneOS.org | GrapheneOS | Aug 04 04:43 | |
| MrGreenFriendd | https://www.reddit.com/r/GrapheneOS/ it is CopperHeadOS "reincarnated" (same dev) | Aug 04 04:44 |
| -TechrightsBot-tr/#techrights-www.reddit.com | GrapheneOS | Aug 04 04:44 | |
| schestowitz | why not PGP? | Aug 04 04:44 |
| -viera/#techrights-Tux Machines: Security: GitHub (Microsoft) Lawsuit, LibreOffice FUD From Microsoft Tim, Slackware Patch/Upgrade and Debian LTS http://www.tuxmachines.org/node/126593 [https://pleroma.site/objects/2bf0e0f2-7539-4f77-a3a3-89446b308baf] | Aug 04 04:47 | |
| MrGreenFriendd | schestowitz, PGP is clunky to use, and leaks tons of metadata (over email), has no VoIP, no ephemeral (disappearing) messages, no "perfect forward secrecy", really crappy 'key-stretching' for protecting privkeys & symmetric encryption, | Aug 04 04:50 |
| MinceR | PGP is also vulnerable to social engineering downgrade attacks | Aug 04 04:51 |
| schestowitz | metadata does not give away much in this case | Aug 04 04:51 |
| schestowitz | it's public knowledge I speak to Eric | Aug 04 04:51 |
| MinceR | (subtly break messages until a correspondent gives up and switch to unencrypted) | Aug 04 04:51 |
| schestowitz | it's just the contents of our exchange that would be better off, strategically, not seen by a third party, notably Microsoft and its lawyers | Aug 04 04:52 |
| MrGreenFriendd | i love Moxie's quote: "In the 1990s, I was excited about the future, and I dreamed of a world where everyone would install GPG. Now I’m still excited about the future, but I dream of a world where I can uninstall it." https://moxie.org/blog/gpg-and-me/ | Aug 04 04:52 |
| -TechrightsBot-tr/#techrights-moxie.org | NO TITLE | Aug 04 04:52 | |
| schestowitz | he competes with it | Aug 04 04:53 |
| schestowitz | and EFF helps him, on their payroll | Aug 04 04:53 |
| schestowitz | while FUDing PGP | Aug 04 04:53 |
| schestowitz | like they did with efail | Aug 04 04:53 |
| schestowitz | they never corrected themselves | Aug 04 04:53 |
| schestowitz | they assume html web pages as 'emails' | Aug 04 04:53 |
| schestowitz | (eff run by hipsters now that the founder is dead) | Aug 04 04:56 |
| -viera/#techrights-Tux Machines: today's howtos and programming bits http://www.tuxmachines.org/node/126594 [https://pleroma.site/objects/2f26f6b8-60e6-44b4-a607-3eff7eb1a8ca] | Aug 04 04:56 | |
| <--en__ has quit (Ping timeout: 268 seconds) | Aug 04 04:57 | |
| -viera/#techrights-Tux Machines: today's leftovers http://www.tuxmachines.org/node/126595 [https://pleroma.site/objects/98bed0a9-d300-4ff6-98c7-6f321b079711] | Aug 04 04:58 | |
| MrGreenFriendd | schestowitz, i know PGP+email still "works", but it is 2019, we should be using something *better*. I'm here to help Eric & you. i'm just brainstorming on alternatives | Aug 04 05:03 |
| schestowitz | Signal needs a phone number | Aug 04 05:04 |
| schestowitz | I don't have that | Aug 04 05:04 |
| MrGreenFriendd | oh,i thought u had a landline | Aug 04 05:04 |
| schestowitz | I do | Aug 04 05:05 |
| -viera/#techrights-Tux Machines: Links 4/8/2019: GNU Guile 2.9.3 and Wine Staging 4.13 http://techrights.org/2019/08/03/wine-staging-4-13/ [https://pleroma.site/objects/cbf07c89-ff5c-484b-a30e-48efb8464efe] | Aug 04 05:05 | |
| MrGreenFriendd | what are your guys opinion on KeyBase? looks like solid crypto, but kinda bloated program https://keybase.io/ | Aug 04 05:06 |
| -TechrightsBot-tr/#techrights-keybase.io | Keybase | Aug 04 05:06 | |
| schestowitz | curl -s https://updates.signal.org/desktop/apt/keys.asc | sudo apt-key add - | Aug 04 05:06 |
| schestowitz | echo "deb [arch=amd64] https://updates.signal.org/desktop/apt xenial main" | sudo tee -a /etc/apt/sources.list.d/signal-xenial.list | Aug 04 05:06 |
| -TechrightsBot-tr/#techrights- ( status 404 @ https://updates.signal.org/desktop/apt ) | Aug 04 05:06 | |
| schestowitz | sudo apt update && sudo apt install signal-desktop | Aug 04 05:06 |
| schestowitz | MrGreenFriendd: I have keybase | Aug 04 05:07 |
| schestowitz | looks like signal has their own repo | Aug 04 05:07 |
| schestowitz | a tad off for free sw | Aug 04 05:07 |
| schestowitz | *odd | Aug 04 05:07 |
| schestowitz | usually blobs do this | Aug 04 05:07 |
| schestowitz | from https://signal.org/download/ | Aug 04 05:08 |
| -TechrightsBot-tr/#techrights-signal.org | NO TITLE | Aug 04 05:08 | |
| MrGreenFriendd | https://blog.cryptographyengineering.com/2014/08/13/whats-matter-with-pgp/ | Aug 04 05:08 |
| -TechrightsBot-tr/#techrights-blog.cryptographyengineering.com | What’s the matter with PGP? – A Few Thoughts on Cryptographic Engineering | Aug 04 05:08 | |
| schestowitz | MrGreenFriendd: I will do another story about the subject shortly | Aug 04 05:08 |
| scientes | schestowitz, as XRevan86 has pointed out Signal also requires identification by design | Aug 04 05:09 |
| schestowitz | pgp now hides subject lin | Aug 04 05:09 |
| schestowitz | line | Aug 04 05:09 |
| schestowitz | not identity of messenger unless they use remailers | Aug 04 05:09 |
| schestowitz | but if set up, then afaik seeing message contents is difficult | Aug 04 05:09 |
| schestowitz | unless one uses Windows or some other OS with back doors | Aug 04 05:09 |
| scientes | youth is wasted on the young | Aug 04 05:10 |
| schestowitz | fascinates me that Signal does not just give debian repos the code with checksums and all | Aug 04 05:11 |
| MrGreenFriendd | schestowitz, why not use KeyBase, instead of PGP+email? | Aug 04 05:11 |
| schestowitz | you're left having to trust the binaries Signal provides, it seems | Aug 04 05:11 |
| schestowitz | and it's in the US | Aug 04 05:11 |
| schestowitz | (where there are crypto extort restrictions, their government conflates programs with grenades etc.) | Aug 04 05:11 |
| scientes | also signal hires only people that live in the US | Aug 04 05:11 |
| scientes | even though its telecomute | Aug 04 05:12 |
| schestowitz | MrGreenFriendd: that's possible | Aug 04 05:12 |
| MrGreenFriendd | or Jami? | Aug 04 05:12 |
| schestowitz | Ring? | Aug 04 05:12 |
| scientes | they <s>probably</s> have links to the NSA | Aug 04 05:12 |
| schestowitz | https://www.youtube.com/watch?v=wwRYyWn7BEo | Aug 04 05:13 |
| -TechrightsBot-tr/#techrights-Linus Torvalds was approached by NSA for backdoor in Linux - Nils Torvalds (father of Linus) - YouTube | Aug 04 05:13 | |
| schestowitz | Even Torvalds (Oregon, same as Eric afaik) was approached by the NSA, according to his dad | Aug 04 05:13 |
| scientes | those people at the NSA are crazy | Aug 04 05:14 |
| scientes | they burn so much coal | Aug 04 05:14 |
| scientes | and they are full of delusions | Aug 04 05:14 |
| schestowitz | imperialism mindset | Aug 04 05:14 |
| schestowitz | gotta know what 8 billion people say all the time | Aug 04 05:14 |
| scientes | cat | Aug 04 05:14 |
| scientes | cats | Aug 04 05:14 |
| scientes | cats | Aug 04 05:14 |
| scientes | cats | Aug 04 05:14 |
| schestowitz | watch how they spied on Assange even in the toilets | Aug 04 05:14 |
| MinceR | >but it is 2019, we should be using something *better* | Aug 04 05:15 |
| MinceR | Cables? | Aug 04 05:15 |
| schestowitz | they had to have lawyer meetings in the ladies' loo | Aug 04 05:15 |
| scientes | the people at the NSA aren't worth the air they breathe | Aug 04 05:15 |
| schestowitz | just to have better chance of confidential strategy-building | Aug 04 05:15 |
| scientes | <schestowitz> watch how they spied on Assange even in the toilets | Aug 04 05:15 |
| scientes | really | Aug 04 05:15 |
| scientes | creepy bastards | Aug 04 05:15 |
| scientes | assange is a martyr | Aug 04 05:15 |
| schestowitz | Spanish media wrote about the spying at the embassy | Aug 04 05:15 |
| schestowitz | El Pais iirc | Aug 04 05:16 |
| scientes | Paįs | Aug 04 05:16 |
| scientes | País | Aug 04 05:16 |
| schestowitz | there's an accent there | Aug 04 05:16 |
| MrGreenFriendd | schestowitz, yes, SFLphone == Ring == Jami (they just love changing their name haha) | Aug 04 05:16 |
| schestowitz | but I don't have a keyboard for it | Aug 04 05:16 |
| MinceR | also, Tox over Tor, and even Ricochet if someone updates it :> | Aug 04 05:17 |
| schestowitz | I use GB/EN keyboard | Aug 04 05:17 |
| scientes | yeah I finialy set up caps lock as compose | Aug 04 05:17 |
| scientes | I have a portugeese keyboard in en_US mode | Aug 04 05:17 |
| scientes | so the keys are labled all wrong | Aug 04 05:17 |
| schestowitz | MrGreenFriendd: I haven't use sip in ages | Aug 04 05:17 |
| MrGreenFriendd | schestowitz, Jami has VoIP, but no disappearing messages. KeyBase has disappearing messages, but no VoIP | Aug 04 05:17 |
| schestowitz | wife and I used to use it | Aug 04 05:17 |
| scientes | the spanish market all uses portugeese keyboards to reduce cost | Aug 04 05:18 |
| scientes | schestowitz, i use it to call the US | Aug 04 05:18 |
| schestowitz | MrGreenFriendd: why not put it all in compressed encrypted archive, then mail it to me with the password separately? | Aug 04 05:18 |
| MinceR | wasn't Ring the one that demanded to have root so it could fuck with the package manager and install packages before it would start building, without even telling the user what it wanted to install? | Aug 04 05:19 |
| MinceR | worst build process i've ever seen | Aug 04 05:19 |
| schestowitz | same ring? | Aug 04 05:21 |
| schestowitz | I read something bad 2 days ago | Aug 04 05:21 |
| schestowitz | about a different ring | Aug 04 05:21 |
| MinceR | ¯\_(ツ)_/¯ | Aug 04 05:21 |
| oiaohm | MinceR: that is no the worst I have seen with ring build process but its well and truely up there. Worst one I found not only wanted to screw with the package manager also added a kernel module to alter the scheduler to reduce it build time. | Aug 04 05:21 |
| MinceR | lol | Aug 04 05:22 |
| schestowitz | not amazon's ring | Aug 04 05:22 |
| schestowitz | https://npmccallum.gitlab.io/post/do-not-use-ring-or-rustls/ | Aug 04 05:23 |
| -TechrightsBot-tr/#techrights-npmccallum.gitlab.io | Do Not Use ring (or rustls) | Aug 04 05:23 | |
| schestowitz | (differnt ring) | Aug 04 05:23 |
| schestowitz | " | Aug 04 05:23 |
| schestowitz | Might I also mention that ring’s implementation doesn’t use blinding during RSA signing? Nor have they merged the latest attack mitigations for pkcs1_encode() from BoringSSL. It is easy to be fast when you’re insecure. | Aug 04 05:23 |
| schestowitz | Then there’s the fact that they don’t do security embargoes. All disclosures are zero days. Never mind the fact that GitHub gives the ability to do all this sanely. | Aug 04 05:23 |
| schestowitz | I’m willing to work around (and patch) some of these issues. But if I can’t contribute without a shakedown, what’s the point? | Aug 04 05:23 |
| schestowitz | Don’t use ring. | Aug 04 05:23 |
| schestowitz | Unfortunately, this means that rustls is now stuck. They are built on top of ring and are widely used in the Rust community. So I can’t recommend rustls until ring fixes its problems. | Aug 04 05:23 |
| oiaohm | MinceR: that kernel module altered the scheduler to give almost 100 percent of cpu time to the build. This was one of the research programs that is complet ass. | Aug 04 05:23 |
| schestowitz | Don’t use rustls. | Aug 04 05:23 |
| schestowitz | " | Aug 04 05:23 |
| schestowitz | Also another ring | Aug 04 05:23 |
| schestowitz | https://www.techdirt.com/articles/20190730/17171242684/amazon-has-already-roped-200-police-departments-into-ring-doorbell-surveillance-promotional-scheme.shtml | Aug 04 05:24 |
| -TechrightsBot-tr/#techrights-Amazon Has Already Roped 200 Police Departments Into Its Ring Doorbell Surveillance/Promotional Scheme | Techdirt | Aug 04 05:24 | |
| schestowitz | https://www.businessinsider.com/amazon-says-200-us-police-departments-partner-with-ring-2019-7 | Aug 04 05:24 |
| -TechrightsBot-tr/#techrights-www.businessinsider.com | Amazon says 200 US police departments partner with Ring - Business Insider | Aug 04 05:24 | |
| oiaohm | schestowitz: https://jami.net/ this was called ring. | Aug 04 05:25 |
| -TechrightsBot-tr/#techrights-jami.net | Jami | Aug 04 05:25 | |
| schestowitz | https://www.vice.com/en_us/article/evy3yz/amazon-is-using-prime-day-to-lock-people-into-a-giant-surveillance-network-xyz | Aug 04 05:25 |
| -TechrightsBot-tr/#techrights-Amazon Is Using Prime Day to Lock People into a Giant Surveillance Network - VICE | Aug 04 05:25 | |
| scientes | schestowitz, that happened to me with libgcrypt | Aug 04 05:25 |
| scientes | the maintained decided to hold my patches ransom | Aug 04 05:25 |
| schestowitz | ha | Aug 04 05:25 |
| scientes | partially because I reported a security problem | Aug 04 05:25 |
| schestowitz | https://www.vice.com/en_us/article/j5wyjy/amazon-told-police-it-has-partnered-with-200-law-enforcement-agencies | Aug 04 05:26 |
| -TechrightsBot-tr/#techrights-Amazon Told Police It Has Partnered With 200 Law Enforcement Agencies - VICE | Aug 04 05:26 | |
| schestowitz | https://www.techdirt.com/articles/20190725/16252942657/amazons-free-doorbell-cameras-only-cost-law-enforcement-agencies-their-dignity-autonomy.shtml | Aug 04 05:26 |
| -TechrightsBot-tr/#techrights-Amazon's Free Doorbell Cameras Only Cost Law Enforcement Agencies Their Dignity And Autonomy | Techdirt | Aug 04 05:26 | |
| scientes | schestowitz, wow, what a piece of shit | Aug 04 05:26 |
| scientes | pay to merge | Aug 04 05:26 |
| schestowitz | https://www.vice.com/en_us/article/mb88za/amazon-requires-police-to-shill-surveillance-cameras-in-secret-agreement | Aug 04 05:26 |
| -TechrightsBot-tr/#techrights-Amazon Requires Police to Shill Surveillance Cameras in Secret Agreement - VICE | Aug 04 05:26 | |
| schestowitz | in short, the name "Ring" is ruined | Aug 04 05:27 |
| schestowitz | I can see why one might want to rename | Aug 04 05:27 |
| schestowitz | the above are all weeks/days old | Aug 04 05:27 |
| schestowitz | from my short-term notes/db | Aug 04 05:27 |
| oiaohm | schestowitz: jami/ring.cx early build process was a kind of a ass with needing package manager access to so call make it simpler for end users to build. | Aug 04 05:28 |
| oiaohm | schestowitz: that was fixed later. | Aug 04 05:28 |
| oiaohm | schestowitz: yes there are fair too many things named ring and while they are named ring they seam to have a history of turning out to be defective in someway. | Aug 04 05:29 |
| schestowitz | it has a bad ring to it | Aug 04 05:29 |
| MrGreenFriendd | MinceR, BTW, here is another way of verifying Signal*.apk's signing cert: (i just tried it, didnt work) $ apksigner verify --print-certs Signal*.apk # https://gist.github.com/nolanlawson/aae1735f54012da8538adf05817a01a7 | Aug 04 05:30 |
| -TechrightsBot-tr/#techrights-gist.github.com | How to check Signal APK SHA256 fingerprint · GitHub | Aug 04 05:30 | |
| schestowitz | github = nsa | Aug 04 05:32 |
| scientes | schestowitz, I'll start timbre-ing people | Aug 04 05:32 |
| schestowitz | owned by the company that kick-started PRISM | Aug 04 05:32 |
| schestowitz | http://techrights.org/wiki/index.php/Microsoft_and_the_NSA | Aug 04 05:32 |
| -TechrightsBot-tr/#techrights-techrights.org | Microsoft and the NSA - Techrights | Aug 04 05:32 | |
| schestowitz | now they push for automatic updates in github | Aug 04 05:32 |
| oiaohm | Microsoft did not kick start PRISM. PRISM starts when Unix operating systems were still dominate in places like the NSA. | Aug 04 05:33 |
| schestowitz | same company that gives NSA zero-days wants to modify your code in an unsupervised fashion :-) | Aug 04 05:33 |
| oiaohm | Assisted is valid. | Aug 04 05:33 |
| schestowitz | no, PRISM documents show it started with Microsoft as first member | Aug 04 05:33 |
| schestowitz | later they added Skype, shortly after buying it | Aug 04 05:33 |
| scientes | that's why Facebook bought WhatsApp | Aug 04 05:34 |
| schestowitz | was it ukrainian? | Aug 04 05:34 |
| scientes | must. eliminate. threats. of. democracy. | Aug 04 05:34 |
| schestowitz | or just the former dev/founder | Aug 04 05:34 |
| schestowitz | buom? | Aug 04 05:34 |
| scientes | its why they try to install shitty public transit systems in South America and Central America too | Aug 04 05:35 |
| schestowitz | Moxie was complicit in luring people into whatsapp with fb back doors | Aug 04 05:35 |
| scientes | even though they are expensive and provide worse service | Aug 04 05:35 |
| schestowitz | I'm sure they paid him well for that | Aug 04 05:35 |
| schestowitz | like they paid Stamos | Aug 04 05:35 |
| scientes | Its not anything besides WhatsApp is usable in South America either | Aug 04 05:36 |
| scientes | because they are corrupt with the telecoms | Aug 04 05:36 |
| oiaohm | schestowitz: yes Microsoft first memember in 2007. https://en.wikipedia.org/wiki/SIGINT_Activity_Designator The spying program that Prism comes out of starts in 2005. | Aug 04 05:37 |
| -TechrightsBot-tr/#techrights-en.wikipedia.org | SIGINT Activity Designator - Wikipedia | Aug 04 05:37 | |
| schestowitz | not with that name | Aug 04 05:38 |
| schestowitz | or scope | Aug 04 05:38 |
| <--MrGreenFriendd has quit (Ping timeout: 258 seconds) | Aug 04 05:38 | |
| oiaohm | scope the 2005 document list objectives covering everything of PRISM. | Aug 04 05:38 |
| oiaohm | It just took them 2 years to get the first party to play ball. | Aug 04 05:38 |
| oiaohm | schestowitz: big complex spying programs like prism don't in fact start up quickly. NSA came up with the idea 2 years before. Microsoft decide to cooperate possilbe after a year or 2 of presure then everything went down hill from there. | Aug 04 05:42 |
| -->MrGreenFriend (~MrGreenFr@104.200.129.212) has joined #techrights | Aug 04 05:43 | |
| ---ChanServ gives channel operator status to schestowitz | Aug 04 05:46 | |
| -->en__ (~x003n@unaffiliated/x003n) has joined #techrights | Aug 04 05:46 | |
| ---schestowitz gives voice to MrGreenFriend | Aug 04 05:46 | |
| scientes | schestowitz, PR-for-pay is really only a github problem too | Aug 04 05:47 |
| scientes | if you use the linux development model it is impossible | Aug 04 05:47 |
| MrGreenFriend | can someone please PM me the scrollback? the last line i see is: schestowitz> later they added Skype, shortly after buying i | Aug 04 05:48 |
| scientes | MrGreenFriend, this channel is publically logged | Aug 04 05:48 |
| MrGreenFriend | link? | Aug 04 05:49 |
| schestowitz | pasted | Aug 04 05:49 |
| schestowitz | pm | Aug 04 05:49 |
| MrGreenFriend | got ur PM, thanks | Aug 04 05:50 |
| oiaohm | scientes: Linux foundation would be able to do PR for pay not that I recommend it at all. | Aug 04 05:50 |
| schestowitz | MrGreenFriend: not in real time | Aug 04 05:50 |
| schestowitz | and with 1-4 months delay | Aug 04 05:50 |
| scientes | oiaohm, yeah but Linus wouldn't put up with that shit | Aug 04 05:50 |
| scientes | and neither would the other developers | Aug 04 05:50 |
| oiaohm | scientes: PR for pay generally does not work. | Aug 04 05:50 |
| oiaohm | scientes: so it fairly much flushing money down tollete. | Aug 04 05:50 |
| scientes | > tollete. | Aug 04 05:51 |
| scientes | Spanish Toilet? | Aug 04 05:51 |
| scientes | toiletté | Aug 04 05:51 |
| oiaohm | My mind just scrambed it. | Aug 04 05:52 |
| scientes | I just blocked that ring developer | Aug 04 05:52 |
| scientes | and reported him | Aug 04 05:52 |
| scientes | not as if that will do any good | Aug 04 05:52 |
| scientes | PR for pay is a great way to earn trust and get jobs /sarcasm | Aug 04 05:52 |
| oiaohm | scientes: ring as in what. | Aug 04 05:53 |
| oiaohm | scientes: too many things called ring. | Aug 04 05:53 |
| scientes | oiaohm, https://npmccallum.gitlab.io/post/do-not-use-ring-or-rustls/ | Aug 04 05:53 |
| -TechrightsBot-tr/#techrights-npmccallum.gitlab.io | Do Not Use ring (or rustls) | Aug 04 05:53 | |
| scientes | PR-for-pay | Aug 04 05:53 |
| MrGreenFriend | schestowitz> MrGreenFriendd: why not put it all in compressed encrypted archive, then mail it to me with the password separately?" huh? what program are u talking about here? PGP? | Aug 04 05:53 |
| scientes | libgcrypt is also kinda shitty software, while it was easy to patch, the API sucks | Aug 04 05:54 |
| scientes | Zinc is the best API | Aug 04 05:55 |
| <--oiaohm has quit (Read error: Connection reset by peer) | Aug 04 05:55 | |
| scientes | ok, its not shitty, its just a poor API design | Aug 04 05:55 |
| -->oiaohm (~oiaohm@unaffiliated/oiaohm) has joined #techrights | Aug 04 05:55 | |
| oiaohm | scientes: the rust ring developer asking for money is lot better than what we had with openssl where the developer did not ask for money and just let the backlog grow. | Aug 04 05:57 |
| oiaohm | He could have biased on donation and told noone as well. | Aug 04 05:58 |
| scientes | I would rather the latter | Aug 04 05:58 |
| scientes | the maintainer has every right to just not maintain it | Aug 04 05:59 |
| oiaohm | in my eyes the maintainer has the right to ask for money to maintain as well. | Aug 04 05:59 |
| scientes | he does, but it is very anti-social behavior | Aug 04 06:00 |
| scientes | and if it is a go project, then they even have the path that the software uses | Aug 04 06:00 |
| scientes | it is reasonable to expect money to speed up work | Aug 04 06:00 |
| oiaohm | he need money to put food in table as well. Short of money does not make people very social. | Aug 04 06:01 |
| scientes | oiaohm, drug dealers have to eat too, you know | Aug 04 06:01 |
| <--MrGreenFriend has quit (Ping timeout: 245 seconds) | Aug 04 06:01 | |
| scientes | oiaohm, and no, he lives in the US, where you do not need money to eay | Aug 04 06:01 |
| oiaohm | Exactly money is kind of excuse for all kinds of evil. | Aug 04 06:01 |
| scientes | the government will give you money for free | Aug 04 06:01 |
| scientes | *give you food for free | Aug 04 06:02 |
| oiaohm | Really people have taken offence to him asking for money most are not thinking about is there some company that could employee him so he did not need to. | Aug 04 06:03 |
| scientes | I mean yeah no-one should take offense | Aug 04 06:03 |
| scientes | they should just ignore him and work around him | Aug 04 06:03 |
| oiaohm | or assist him out of problem. | Aug 04 06:03 |
| scientes | that's not possible | Aug 04 06:03 |
| scientes | such people are never worth dealing with | Aug 04 06:03 |
| -->MrGreenFriend (~MrGreenFr@104.200.129.212) has joined #techrights | Aug 04 06:04 | |
| scientes | I much prefer Ulrich Drepper to that | Aug 04 06:04 |
| oiaohm | Some ways he open about it so its not like the one biasing on donation and not telling anyone. So a person like that can be handled because they are not fibbing. | Aug 04 06:05 |
| ---schestowitz gives voice to MrGreenFriend | Aug 04 06:05 | |
| scientes | biasing on donations is to be assumed | Aug 04 06:05 |
| scientes | that doesn't mean to have to be an anti-social asshole | Aug 04 06:05 |
| scientes | he acted without culture | Aug 04 06:06 |
| scientes | I've done the same | Aug 04 06:06 |
| scientes | but it isn't ok | Aug 04 06:06 |
| oiaohm | he is telling everyone he has a backlog he is not paid to work on the code. | Aug 04 06:06 |
| oiaohm | and he truefully bias based on donations. | Aug 04 06:07 |
| oiaohm | Nothing here should be offensive. | Aug 04 06:07 |
| oiaohm | Sometimes we don't like to hear the truth about the state of development. | Aug 04 06:07 |
| scientes | yeah you are right | Aug 04 06:08 |
| oiaohm | Lets say some party that was using the code decided to pay him a job to maintain the project he would not need mention backlog. | Aug 04 06:08 |
| scientes | he just should have more tact about it | Aug 04 06:08 |
| oiaohm | More tact maybe. But at least he is truthful about the state of the project. | Aug 04 06:09 |
| oiaohm | You can work with truthful. | Aug 04 06:09 |
| MrGreenFriend | https://OnionShare.org & https://github.com/warner/magic-wormhole are cool for sharing files, but only work 'synchronously' (i.e. Alice & Bob both online at same time) | Aug 04 06:09 |
| -TechrightsBot-tr/#techrights-OnionShare.org | OnionShare | Aug 04 06:09 | |
| -TechrightsBot-tr/#techrights-GitHub - warner/magic-wormhole: get things from one computer to another, safely | Aug 04 06:10 | |
| oiaohm | You cannot really work with a maintainer that says this project is perfect and it a broken nightmare. | Aug 04 06:10 |
| scientes | hehehehe so true | Aug 04 06:10 |
| scientes | its not a bug, its a feature! | Aug 04 06:10 |
| oiaohm | Yes its not a bug its a feature is another option a maintainer can decide to take when they don't have enough hours to maintain. I class that is far worse than asking for money. | Aug 04 06:11 |
| MrGreenFriend | <schestowitz> like they paid Stamos" Who is Stamos & what was he paid for? | Aug 04 06:11 |
| -->n003l (~x003n@unaffiliated/x003n) has joined #techrights | Aug 04 06:13 | |
| oiaohm | scientes: a lack of tact you can work with. There are many more who fib(like bug is feature...) or hide it that you really cannot employ because you can never trust them not to fib to their employer. | Aug 04 06:13 |
| oiaohm | It upsets people when they hear that free software is not exactly free. Someone has to pay so it develops. | Aug 04 06:14 |
| scientes | software libre | Aug 04 06:14 |
| scientes | and then Amazon just rapes software libre | Aug 04 06:15 |
| scientes | so it becomes software with a gaping asshole | Aug 04 06:15 |
| <--en__ has quit (Ping timeout: 245 seconds) | Aug 04 06:15 | |
| MrGreenFriend | when u guys say "Software Libre" or "Software Freedom", is those both the same meaning as "Libre Software"? | Aug 04 06:17 |
| *scientes has too much work to do, and still took the Sabbath off | Aug 04 06:17 | |
| scientes | MrGreenFriend, yes, but in Spanish the adjective comes after | Aug 04 06:17 |
| scientes | So free software becomes software libre | Aug 04 06:18 |
| scientes | but you could also loan-word it into libre software | Aug 04 06:18 |
| MrGreenFriend | aww, ok. yes, i agree that "Free Software" is a bad choice of words.... i bet 100 years from now, people will still be confused by its meaning. i usually say "FOSS" instead, cuz that easily redirects the readers to the FOSS wikipedia site | Aug 04 06:19 |
| MrGreenFriend | https://en.wikipedia.org/wiki/Free_and_open-source_software | Aug 04 06:20 |
| -TechrightsBot-tr/#techrights-en.wikipedia.org | Free and open-source software - Wikipedia | Aug 04 06:20 | |
| schestowitz | [06:11] <MrGreenFriend> <schestowitz> like they paid Stamos" Who is Stamos & what was he paid for? | Aug 04 06:24 |
| schestowitz | look it up, FB's CSO | Aug 04 06:24 |
| MrGreenFriend | some funny jokes by "Free Software" detractors: "Free as in 'Mattress'. because it has lots of bugs." "Free as in 'Puppy'. Because u have to babysit it every step of the way" | Aug 04 06:24 |
| schestowitz | Microsoft-handled bloggers say that | Aug 04 06:25 |
| schestowitz | to keep stigma | Aug 04 06:25 |
| schestowitz | of lack of hygiene etc. | Aug 04 06:25 |
| MrGreenFriend | i know i know, i love FOSS, but i just think it's funny (because we always have to say "Free as in 'Speech', not 'Beer'." for the next 100 years :) | Aug 04 06:27 |
| MrGreenFriend | schestowitz, is "freeware" a correct term for the Dell Restore CD's? | Aug 04 06:34 |
| schestowitz | no | Aug 04 06:35 |
| schestowitz | but... | Aug 04 06:35 |
| schestowitz | I am writing about this at this very moment | Aug 04 06:35 |
| MrGreenFriend | because that is another strong claim: "the first man to go to jail for sharing freeware" | Aug 04 06:35 |
| schestowitz | I had those 2 decade ago | Aug 04 06:35 |
| schestowitz | Compaq | Aug 04 06:35 |
| MrGreenFriend | s/jail/prison | Aug 04 06:35 |
| schestowitz | freeware doesn't have this EULA | Aug 04 06:35 |
| MrGreenFriend | so then what would u call it, instead of 'freeware'? | Aug 04 06:36 |
| <--n003l has quit (Remote host closed the connection) | Aug 04 06:42 | |
| MrGreenFriend | btw, here is FB adblocker for firefox/chromium: https://github.com/tiratatp/facebook_adblock | Aug 04 06:43 |
| -TechrightsBot-tr/#techrights-GitHub - tiratatp/facebook_adblock: An open-source Facebook Adblocker Chrome extension | Aug 04 06:43 | |
| schestowitz | ads? | Aug 04 06:53 |
| schestowitz | what's that? :-) | Aug 04 06:53 |
| MrGreenFriend | :) so, then i we'll use KeyBase with you? but what about VoIP? | Aug 04 07:01 |
| schestowitz | MrGreenFriend: here is my outline | Aug 04 07:01 |
| schestowitz | You are here ☞ <b>Part 4</b>: | Aug 04 07:01 |
| schestowitz | <b>Part 5</b>: Microsoft's War on the Right to Repair (One's Own Computers) Makes Lundgren an 'Enemy' to Microsoft | Aug 04 07:01 |
| schestowitz | <b>Part 6</b>: Damage Control Mode: Satya Nadella Fleeing Lundgren After Realising What Microsoft Had Done | Aug 04 07:01 |
| schestowitz | <b>Part 7</b>: Slander and Libel From Microsoft (Demonising the Victim) | Aug 04 07:01 |
| schestowitz | you might want to pass this on | Aug 04 07:01 |
| schestowitz | I haven't written these yet | Aug 04 07:01 |
| schestowitz | and any more info on this can help, photos included | Aug 04 07:02 |
| schestowitz | I am now writing | Aug 04 07:02 |
| schestowitz | Part 4 | Aug 04 07:02 |
| schestowitz | still untitle | Aug 04 07:02 |
| schestowitz | still untitled | Aug 04 07:02 |
| MrGreenFriend | i can call MrGreen right now, on Signal ;) if u need me to ask him anything | Aug 04 07:03 |
| schestowitz | ask him about the outline | Aug 04 07:05 |
| schestowitz | <h3>Overview</h3> | Aug 04 07:05 |
| schestowitz | <b>Part 1</b>: [cref 118744] | Aug 04 07:05 |
| schestowitz | <b>Part 2</b>: [cref 118780] | Aug 04 07:05 |
| schestowitz | <b>Part 3</b>: [cref 119045] | Aug 04 07:05 |
| schestowitz | <h3>Microsoft's Declaration of War on Recyclers</h3> | Aug 04 07:05 |
| schestowitz | You are here ☞ <b>Part 4</b>: | Aug 04 07:05 |
| schestowitz | <b>Part 5</b>: Microsoft's War on the Right to Repair (One's Own Computers) Makes Lundgren an 'Enemy' to Microsoft | Aug 04 07:05 |
| schestowitz | <b>Part 6</b>: Damage Control Mode: Satya Nadella Fleeing Lundgren After Realising What Microsoft Had Done | Aug 04 07:05 |
| schestowitz | <b>Part 7</b>: Slander and Libel From Microsoft (Demonising the Victim) | Aug 04 07:05 |
| schestowitz | <h3>The Legal Aftermath</h3> | Aug 04 07:05 |
| schestowitz | <em>Pending review and research</em> | Aug 04 07:05 |
| schestowitz | cref means existing article reference (it's the CMS ID) | Aug 04 07:05 |
| MrGreenFriend | ok, i'll forward that to him | Aug 04 07:06 |
| MrGreenFriend | what is your KeyBase name? | Aug 04 07:07 |
| schestowitz | "Schestowitz" I think | Aug 04 07:11 |
| -->Firee (~Firee@unaffiliated/firee) has joined #techrights | Aug 04 07:13 | |
| schestowitz | add <b>Part 8</b>: Similar High-Profile 'Bargains' (Aaron Swartz and Marcus Hutchins) | Aug 04 07:14 |
| MrGreenFriend | ok | Aug 04 07:21 |
| -->x003n (~x003n@unaffiliated/x003n) has joined #techrights | Aug 04 07:38 | |
| schestowitz | MrGreenFriend: part 4 done http://techrights.org/2019/08/04/reducing-microsoft-profits/ | Aug 04 07:40 |
| -TechrightsBot-tr/#techrights-techrights.org | Microsoft Being Microsoft, Bullying Everyone Who Reduces Microsoft’s Profits | Techrights | Aug 04 07:41 | |
| schestowitz | depending on how much material gets sent to me, we may be able to do a couple dozen parts | Aug 04 07:41 |
| schestowitz | these are still exploratory and intoductory | Aug 04 07:41 |
| schestowitz | not the gory, gritty-gritty details like testimonies | Aug 04 07:41 |
| -viera/#techrights-Tux Machines: Microsoft Being Microsoft, Bullying Everyone Who Reduces Microsoft's Profits http://techrights.org/2019/08/04/reducing-microsoft-profits/ [https://pleroma.site/objects/3dac5d89-c03a-417a-b776-81ff40a9cdce] | Aug 04 07:42 | |
| <--zerogue has quit (Quit: Goodbye Cruel World) | Aug 04 07:55 | |
| MrGreenFriend | Wow, nice article. Thank You | Aug 04 07:56 |
| MrGreenFriend | MinceR> also, Tox over Tor, and even Ricochet if someone updates it :>" MinceR, Ricochet still works great, and its Tor binary can be easily updated: https://www.privacytools.io/software/im/#ricochetTor | Aug 04 08:05 |
| -TechrightsBot-tr/#techrights-Instant Messaging | privacytools.io | Aug 04 08:05 | |
| MrGreenFriend | rm ~/ricochet/tor && ln -s ~/tor-browser_en-US/Browser/TorBrowser/Tor/tor ~/ricochet/tor | Aug 04 08:06 |
| MrGreenFriend | MinceR, Ricochet is 'synchronous' :( https://cwtch.im is based on Ricochet and is 'asynchronous' (but i couldn't get it to run) | Aug 04 08:07 |
| -TechrightsBot-tr/#techrights-cwtch.im | Cwtch | Aug 04 08:07 | |
| schestowitz | https://mobile.twitter.com/CEOmrGreen/status/1156037248543936512?p=v | Aug 04 08:29 |
| -TechrightsBot-tr/#techrights-mobile.twitter.com | Twitter | Aug 04 08:29 | |
| schestowitz | Me: "Now my case is over the stress should subside and i can fina..." | Aug 04 08:29 |
| schestowitz | My Lawyer: "Just a friendly reminder that you need to pack up your entire apartment, say bye to all your friends, then move across the fucking sea. Sometime this week would be good." | Aug 04 08:29 |
| schestowitz | Eric Lundgren | Aug 04 08:29 |
| schestowitz | @CEOmrGreen | Aug 04 08:29 |
| schestowitz | Replying to | Aug 04 08:29 |
| schestowitz | @MalwareTechBlog | Aug 04 08:29 |
| schestowitz | So true.. haha | Aug 04 08:29 |
| schestowitz | mate wrote to tell me | Aug 04 08:29 |
| schestowitz | " | Aug 04 08:29 |
| schestowitz | As mentioned, I'd encourage Lundgren to not let M$ have too much lead | Aug 04 08:29 |
| schestowitz | time. They are powerful and noisy but slow, make than an advantage. | Aug 04 08:29 |
| schestowitz | " | Aug 04 08:29 |
| schestowitz | MrGreenFriend: maybe you can relay this | Aug 04 08:30 |
| MrGreenFriend | schestowitz, i don't want to pressure him too much. he is really busy. i'm here mainly trying to help with the encryption :) | Aug 04 08:45 |
| schestowitz | yes, I know | Aug 04 08:59 |
| schestowitz | no hurry anyway | Aug 04 08:59 |
| schestowitz | it's not time-sensitive | Aug 04 08:59 |
| schestowitz | at least unless or until Microsoft ramps up the defamatino again | Aug 04 09:00 |
| schestowitz | (my friends thinks we need to not give them time or advance knowledge of what we publish) | Aug 04 09:00 |
| schestowitz | the chapter headings are a giveaway, but I might do two more Chapter before Monday | Aug 04 09:00 |
| schestowitz | well, parts, nof chapters | Aug 04 09:01 |
| schestowitz | so if they defame him, it'll coincide with parts about their defamation | Aug 04 09:01 |
| -viera/#techrights-Tux Machines: #Android Leftovers http://www.tuxmachines.org/node/126596 [https://pleroma.site/objects/e31f16b2-7001-4816-9778-8f5c5c70655c] | Aug 04 09:02 | |
| MrGreenFriend | it's up to him, not me--- (so don't print any of my quotes, please) but i think it should be tied into the whole Software Freedom movement. e.g. http://en.swpat.org/wiki/Software_is_math | Aug 04 09:09 |
| -TechrightsBot-tr/#techrights-Software is math - software patents wiki (en.swpat.org) | Aug 04 09:09 | |
| -->mmu_man (~revol@vaf26-2-82-244-111-82.fbx.proxad.net) has joined #techrights | Aug 04 09:12 | |
| MrGreenFriend | hahaha, i was searching for this *exact* Eben Moglen video to show u. and u already put it on your website, 8 years ago! ;) http://techrights.org/2011/05/03/moglen-on-monopolies-for-algorithms/ | Aug 04 09:29 |
| -TechrightsBot-tr/#techrights-techrights.org | Eben Moglen Explains Why Software Patents Should Not Exist | Techrights | Aug 04 09:29 | |
| <--mmu_man has quit (Ping timeout: 245 seconds) | Aug 04 09:51 | |
| -viera/#techrights-Tux Machines: Today in Techrights http://www.tuxmachines.org/node/126597 [https://pleroma.site/objects/01284895-a04a-412a-8118-f5ba1c6fdd45] | Aug 04 10:05 | |
| <--amarsh04 has quit (Quit: Konversation terminated!) | Aug 04 10:06 | |
| -->amarsh04 (~amarsh04@118.211.39.107) has joined #techrights | Aug 04 10:14 | |
| -viera/#techrights-Tux Machines: #KDE Usability & Productivity: Week 82http://www.tuxmachines.org/node/126598 #gnu #linux [https://pleroma.site/objects/3bb84524-c708-4405-962c-3ab56716c58f] | Aug 04 10:36 | |
| -->MrGreenFriendd (~MrGreenFr@104.200.129.212) has joined #techrights | Aug 04 11:10 | |
| <--MrGreenFriend has quit (Ping timeout: 272 seconds) | Aug 04 11:13 | |
| -viera/#techrights-Tux Machines: Manjaro Linux Team Responds To LibreOffice Versus FreeOffice In Upcoming Version 18.1 http://www.tuxmachines.org/node/126599 [https://pleroma.site/objects/083b7044-bb56-49b2-8d2e-207f8d354488] | Aug 04 12:28 | |
| -viera/#techrights-Tux Machines: Software developer imprisoned in Iran after developing open-source software is now free http://www.tuxmachines.org/node/126600 [https://pleroma.site/objects/8cce25a4-fc9d-4bea-b5a7-62aa7b9ff7e6] | Aug 04 13:57 | |
| -viera/#techrights-Tux Machines: Databases and Data With FOSS (Ish) http://www.tuxmachines.org/node/126601 [https://pleroma.site/objects/62346af7-5a7b-488b-a0ea-6b4f4bde487c] | Aug 04 14:06 | |
| -viera/#techrights-Tux Machines: Programming: GopherCon, TensorFlow, GSoC, SQL and GCC http://www.tuxmachines.org/node/126602 [https://pleroma.site/objects/2e49a4ef-5b79-4fc0-8be4-abce91bc694a] | Aug 04 14:27 | |
| -viera/#techrights-Tux Machines: Ubuntu and Debian: Stephan Fabel, DebConf, Debian's Kotlin and MATE 1.22 http://www.tuxmachines.org/node/126603 [https://pleroma.site/objects/085ab6ad-5626-4450-8a38-4e2f0dd414ca] | Aug 04 14:40 | |
| -viera/#techrights-Tux Machines: The Latest Openwash Parade (Companies Pretending to be Open) http://www.tuxmachines.org/node/126604 [https://pleroma.site/objects/96d6403d-6c9e-4f6e-86f7-8fdca978be75] | Aug 04 14:47 | |
| -viera/#techrights-Tux Machines: Open Hardware/Modding: Raspberry Pi, Open Hardware Month, Alibaba/Pingtouge and AbilityLab http://www.tuxmachines.org/node/126605 [https://pleroma.site/objects/eacb3e8c-f16a-4c4e-b444-6f6102a4b69e] | Aug 04 14:52 | |
| ---MinceR gives voice to MrGreenFriendd oiaohm Firee amarsh04 | Aug 04 15:11 | |
| ---MinceR gives voice to x003n | Aug 04 15:11 | |
| MinceR | 04 090755 <+MrGreenFriend> MinceR, Ricochet is 'synchronous' :( https://cwtch.im is based on Ricochet and is 'asynchronous' (but i couldn't get it to run) | Aug 04 15:11 |
| -TechrightsBot-tr/#techrights-cwtch.im | Cwtch | Aug 04 15:11 | |
| MinceR | nice find | Aug 04 15:11 |
| MinceR | i'll have to check it out | Aug 04 15:11 |
| MinceR | MrGreenFriendd: will ricochet use the new, longer onion addresses for itself if someone updates the Tor in it? | Aug 04 15:21 |
| MinceR | (audio:important) https://imgur.com/gallery/Jm4zwMB ( https://i.imgur.com/mstz5Ry.mp4 ) | Aug 04 15:35 |
| -TechrightsBot-tr/#techrights-It took me forever to find this with sound - Album on Imgur | Aug 04 15:35 | |
| MrGreenFriendd | MinceR, No, AFAIK, i have only seen Ricochet use the old shorter onion addresses. even with Tor 0.4.0.5 on a new install of Ricochet. Ricochet is even easier to install now that it is in the Debian/Ubuntu repos (this uses ur system's installed Tor, so remember to update that Tor package) | Aug 04 15:43 |
| MinceR | pity | Aug 04 15:51 |
| -viera/#techrights-Tux Machines: Security: DEF CON 2019, EU Bug Bounty, Buttercup, FUD and Capital One http://www.tuxmachines.org/node/126606 [https://pleroma.site/objects/dedb0325-2284-48a0-a740-0d5a9a060a2b] | Aug 04 15:57 | |
| -viera/#techrights-Tux Machines: FOSS and Finance http://www.tuxmachines.org/node/126607 [https://pleroma.site/objects/ff767980-a653-4706-8be1-9a846ee1134c] | Aug 04 16:01 | |
| -viera/#techrights-Tux Machines: OSS Leftovers http://www.tuxmachines.org/node/126608 [https://pleroma.site/objects/20b98bfe-5f6c-4719-9e33-52e7cd1bb0f9] | Aug 04 16:03 | |
| MrGreenFriendd | MinceR, that is a good question... Hmmm. u should be able to add 'HiddenServiceVersion 3' to your torrc file, to get the longer addresses... ill try it | Aug 04 16:03 |
| MrGreenFriendd | https://tor.stackexchange.com/questions/17378/what-is-up-with-these-longer-onion-addresses | Aug 04 16:03 |
| -TechrightsBot-tr/#techrights-tor.stackexchange.com | hidden services - What is up with these longer onion addresses? - Tor Stack Exchange | Aug 04 16:03 | |
| MinceR | nic | Aug 04 16:06 |
| MinceR | e | Aug 04 16:07 |
| -viera/#techrights-Tux Machines: Server: Cloud Native Computing Foundation (CNCF), IBM/Red Hat and Hyperledger http://www.tuxmachines.org/node/126609 [https://pleroma.site/objects/4e276a58-479f-4779-a9d4-e4e11a6e2408] | Aug 04 16:08 | |
| -viera/#techrights-Tux Machines: today's leftovers http://www.tuxmachines.org/node/126610 [https://pleroma.site/objects/c0e62953-308b-4198-ae09-a002ae60759c] | Aug 04 16:10 | |
| <--rianne__ has quit (Ping timeout: 248 seconds) | Aug 04 16:21 | |
| MinceR | (audio:important) https://vid.pr0gramm.com/2019/07/22/de95442a0a1839c2.mp4 | Aug 04 16:22 |
| <--pedro4 has quit () | Aug 04 16:22 | |
| -->rianne__ (~rianne@host81-152-239-135.range81-152.btcentralplus.com) has joined #techrights | Aug 04 16:25 | |
| -viera/#techrights-Tux Machines: Links 4/8/2019: Many Openwashing Examples, Dragonchain 'Goes Open Source' http://techrights.org/2019/08/04/dragonchain-goes-open-source/ [https://pleroma.site/objects/87d3f107-45be-4fa1-8402-74efb397116e] | Aug 04 16:27 | |
| -viera/#techrights-Tux Machines: Intel clarifies on US$200 Intel Xe GPUs, new Linux driver signals Xe iGPU+dGPU multi-GPU support http://www.tuxmachines.org/node/126611 [https://pleroma.site/objects/fceffab5-1662-4ed8-ab3b-121b830f37cf] | Aug 04 16:28 | |
| MrGreenFriendd | MinceR, i give up. maybe, u also have to add 'HiddenServicePort' & 'HiddenServiceDir' to torrc; i don't know. but u have a great question. the guys in #tor probly know how to enable the longer addresses in Ricochet. https://trac.torproject.org/projects/tor/wiki/doc/NextGenOnions https://2019.www.torproject.org/docs/tor-onion-service.html.en#four | Aug 04 16:33 |
| -TechrightsBot-tr/#techrights-trac.torproject.org | doc/NextGenOnions – Tor Bug Tracker & Wiki | Aug 04 16:33 | |
| -TechrightsBot-tr/#techrights-2019.www.torproject.org | Tor Project: Onion Service Configuration Instructions | Aug 04 16:33 | |
| MinceR | ic | Aug 04 16:33 |
| -viera/#techrights-Tux Machines: today's howtos http://www.tuxmachines.org/node/126612 [https://pleroma.site/objects/31de1b76-0ea6-48f1-81e1-fabefa99042d] | Aug 04 16:39 | |
| MinceR | https://img.pr0gramm.com/2019/07/26/b91bb935e44e5298.png | Aug 04 16:45 |
| DaemonFC[m] | I got a "SmartyKat triple tower" scratching post for the cats at Walmart. | Aug 04 16:53 |
| DaemonFC[m] | It was rated two stars on their app by some guy who didn't read the box, which says "remove the bolt and washer from the middle post and insert into base". He commented that he "had to keep taking them back because there were no bolts and washers in any of them". | Aug 04 16:53 |
| MinceR | lol | Aug 04 16:55 |
| MinceR | SmartyKat needs a SmartyHuman | Aug 04 16:55 |
| -->titanbiscuit (~tbisk@91.203.70.189) has joined #techrights | Aug 04 16:59 | |
| MinceR | https://i.imgur.com/xzDTr8E.jpg | Aug 04 17:10 |
| ---MinceR gives voice to rianne__ titanbiscuit | Aug 04 17:10 | |
| MrGreenFriendd | https://v.redd.it/523wlztlnid31/DASH_480 | Aug 04 17:19 |
| MrGreenFriendd | funny linux meme | Aug 04 17:19 |
| MinceR | lol | Aug 04 17:24 |
| -->mmu_man (~revol@vaf26-2-82-244-111-82.fbx.proxad.net) has joined #techrights | Aug 04 17:36 | |
| oiaohm | DaemonFC[m]: I did see a batch of scratching posts under a different brand in Australia that had the same kind of instruction but had shipped boltless. | Aug 04 17:51 |
| oiaohm | DaemonFC[m]: replacement bolt taped on outside of box. | Aug 04 17:51 |
| DaemonFC[m] | Someone in China was probably "dealt with" for that. | Aug 04 17:52 |
| DaemonFC[m] | Oh, I used to pack pet cages. Sometimes I'd just toss in two instruction manuals or more because we just printed those out in the office as necessary and they stuck together onn my safety gloves. | Aug 04 17:54 |
| DaemonFC[m] | Rather than getting yelled at for not meeting my quota, I decided to print out more instruction manuals than I needed at the beginning of my shift. | Aug 04 17:54 |
| DaemonFC[m] | I figured that none of the customers would complain if they happened to get two or three sets of instructions in the box. | Aug 04 17:54 |
| oiaohm | China if the company did not pay the extra change for QA bad luck them. | Aug 04 17:55 |
| DaemonFC[m] | One time, I was getting close to the end of my shift and I didn't have as many pages getting stuck together as I usually did, so the last pet cage got a stack of like 15 instruction manuals. | Aug 04 17:55 |
| DaemonFC[m] | And then I tossed it on the pallet. | Aug 04 17:55 |
| ---MinceR gives voice to mmu_man | Aug 04 17:55 | |
| DaemonFC[m] | The supervisors were screaming bloody murder at people who packed one of two pet cages below their quota, and all of them were trying to peel the instructions apart and taking like 5-6 seconds per cage to do it sometimes. | Aug 04 17:56 |
| DaemonFC[m] | I found that I could easily do 6-8 more cages per shift if I just didn't bother making sure that each one got exactly one instruction manual. | Aug 04 17:56 |
| oiaohm | Or the extra QA charge for repacking in case missed item. | Aug 04 17:56 |
| DaemonFC[m] | So the only person not getting bitched out was me. | Aug 04 17:56 |
| DaemonFC[m] | *one or two | Aug 04 17:56 |
| oiaohm | DaemonFC[m]: china you have to pay for the person to bitch at staff for mistakes. | Aug 04 17:57 |
| oiaohm | If you don't bad things happen. | Aug 04 17:57 |
| oiaohm | I really do think with these scratching posts here in Australia they were done as cheap as possible and in china you do that you get goofed product. | Aug 04 17:58 |
| DaemonFC[m] | I figured that it was better for the company anyway to pay a penny or two extra per cage for excess instruction manuals several times during a shift than it was to pay me $12 an hour (2004) to stand there and peel the instructions apart to make sure no extra ones went in the box. | Aug 04 17:58 |
| oiaohm | DaemonFC[m]: being walmart product with the stuff they get from china they could have cut same stupid conner. | Aug 04 17:58 |
| DaemonFC[m] | If I had to stop and peel and spend 6 minutes per shift doing this, then they paid $1.20 + my benefits and employment taxes, per shift (so maybe $1.80-ish) so I could stop and peel the instructions apart. | Aug 04 17:59 |
| oiaohm | Generally double the amount you paid for your rough total cost. | Aug 04 18:00 |
| scientes | DaemonFC[m], how much do you pay in rent? | Aug 04 18:00 |
| scientes | (if you don't mind me asking) | Aug 04 18:00 |
| DaemonFC[m] | We had an inkjet printer set on economy mode with cheap bulk paper and toner. So if I threw even 40-50 extra sets of instructions in per shift, then that only cost the company about 15-20 cents. | Aug 04 18:01 |
| DaemonFC[m] | When my boss finally saw me doing this, I explained it to him as a cost savings for the company and he told everyone to quit worrying about how many instructions went in as long as there was at least one copy per box. | Aug 04 18:01 |
| oiaohm | DaemonFC[m]: boss smart would not have cared if each item got less than 5 and greater than 1 instruction manuals. | Aug 04 18:01 |
| oiaohm | where you put like 15 in that was excessive. | Aug 04 18:02 |
| oiaohm | DaemonFC[m]: you will notice a lot of china products come with black and white laser printed manuals. That for the simple reason they are less likely to self glue to themselves. | Aug 04 18:03 |
| DaemonFC[m] | I explained that if we had 68 people packing cages between the shifts, and each one saved $1.80 of time at the cost of 20 cents of extra instruction manuals, then the company saved about $109 a day total in productivity, which was the cost of one person for an 8 hour shift. | Aug 04 18:03 |
| oiaohm | Basically not using injet would have reduced the sticking as well. | Aug 04 18:04 |
| DaemonFC[m] | 15 being excessive. | Aug 04 18:05 |
| DaemonFC[m] | Yes, but it was funny. | Aug 04 18:05 |
| DaemonFC[m] | Someone out there bought a dog cage and had 15 instruction manuals fall out all over the place, | Aug 04 18:05 |
| oiaohm | DaemonFC[m]: they had the paper to line the bottom of the cage. | Aug 04 18:06 |
| -->MrGreenFriend (~MrGreenFr@104.200.129.212) has joined #techrights | Aug 04 18:09 | |
| <--MrGreenFriendd has quit (Read error: Connection reset by peer) | Aug 04 18:09 | |
| DaemonFC[m] | One time, I was unloading a truck from China and found a singing cigarette lighter. | Aug 04 18:12 |
| DaemonFC[m] | Went back a few rows. | Aug 04 18:12 |
| DaemonFC[m] | Found a pack of Chinese cigarettes. | Aug 04 18:12 |
| DaemonFC[m] | Went back some more and found the guy's wallet. | Aug 04 18:12 |
| DaemonFC[m] | Everything fell out of someone's pockets and then got shipped across the ocean and to Indiana. | Aug 04 18:12 |
| DaemonFC[m] | I was concerned that eventually we'd find him too. | Aug 04 18:12 |
| schestowitz | MrGreenFriend: Microsoft's War on the Right to Repair (One's Own Computers) Makes Lundgren an 'Enemy' to #Microsoft http://techrights.org/2019/08/04/righttorepair/ #righttorepair | Aug 04 18:27 |
| schestowitz | just now | Aug 04 18:27 |
| schestowitz | I want to speed up a bit | Aug 04 18:27 |
| schestowitz | before Microsoft comes up with too much spin | Aug 04 18:27 |
| -TechrightsBot-tr/#techrights-techrights.org | Microsoft’s War on the Right to Repair (One’s Own Computers) Makes Lundgren an ‘Enemy’ to Microsoft | Techrights | Aug 04 18:27 | |
| schestowitz | getting ahead of their game | Aug 04 18:27 |
| -viera/#techrights-Tux Machines: Microsoft's War on the Right to Repair (One's Own Computers) Makes Lundgren an 'Enemy' to #Microsoft http://techrights.org/2019/08/04/righttorepair/ #righttorepair [https://pleroma.site/objects/27531584-49b4-48a3-9261-dabb33e16a89] | Aug 04 18:30 | |
| -viera/#techrights-Tux Machines: #Android Leftovers http://www.tuxmachines.org/node/126613 [https://pleroma.site/objects/af1b1c58-d2f3-44b3-b173-1d48a70fa8ee] | Aug 04 18:30 | |
| ---MinceR gives voice to MrGreenFriend | Aug 04 19:55 | |
| MinceR | (audio) https://imgur.com/gallery/FZSbzDj ( https://i.imgur.com/dnCvI3h.mp4 ) | Aug 04 19:56 |
| -TechrightsBot-tr/#techrights-Kitty on the run - Album on Imgur | Aug 04 19:56 | |
| MinceR | https://i.imgur.com/CL8x6As.png | Aug 04 20:05 |
| DaemonFC[m] | schestowitz: According to the guy who repaired my Galaxy S8+, the S10 is the nastiest Samsung phone to try to repair so far. | Aug 04 20:06 |
| DaemonFC[m] | He says that it is possible, but it requires a lot of work to get it open and replace parts, and that he had to charge more because it eats up so much of his time. | Aug 04 20:06 |
| MinceR | samsung really went downhill sometime around the note 3 | Aug 04 20:07 |
| DaemonFC[m] | They don't even want you to replace the battery because it means they don't get to sell you a new phone every 2 years when the battery starts getting really flaky. | Aug 04 20:07 |
| MinceR | there hardly are any smartphones with user-replaceable batteries anymore | Aug 04 20:07 |
| MinceR | even LG stopped making them | Aug 04 20:07 |
| DaemonFC[m] | If you replace the battery even once, you might be able to use the phone for 5 years, and maybe even some months past that. | Aug 04 20:08 |
| DaemonFC[m] | Which would be horrible for sales of new phones. | Aug 04 20:08 |
| DaemonFC[m] | These newer phones are just really flaky to begin with, MinceR | Aug 04 20:08 |
| DaemonFC[m] | They're well over $1,000 US now and they've never been less reliable. | Aug 04 20:08 |
| DaemonFC[m] | Many fail before they're even close to bumping up against 2 years. | Aug 04 20:09 |
| MinceR | https://i.imgur.com/0zKH0.jpg | Aug 04 20:37 |
| MinceR | https://ircz.de/p/1907039 | Aug 04 21:19 |
| -TechrightsBot-tr/#techrights-ircz.de | IRCZ makes your life worth living Post object | Aug 04 21:19 | |
| <--gde33 has quit (Quit: KVIrc 4.9.3 Aria http://www.kvirc.net/) | Aug 04 21:33 | |
| MinceR | https://ircz.de/p/19070274 | Aug 04 22:00 |
| -TechrightsBot-tr/#techrights-ircz.de | IRCZ makes your life worth living Post object | Aug 04 22:00 | |
| <--Firee has quit (Quit: lolmoi) | Aug 04 22:01 | |
| MinceR | https://img.pr0gramm.com/2019/06/05/5f18d1e311de95b1.jpg | Aug 04 22:33 |
| <--titanbiscuit has quit (Ping timeout: 248 seconds) | Aug 04 23:16 | |
| -->titanbiscuit (~tbisk@91.203.70.189) has joined #techrights | Aug 04 23:22 | |
| MinceR | https://ircz.de/p/19070271 | Aug 04 23:26 |
| -TechrightsBot-tr/#techrights-ircz.de | IRCZ makes your life worth living Post object | Aug 04 23:26 | |
| ---MinceR gives voice to titanbiscuit | Aug 04 23:26 | |
| DaemonFC[m] | https://www.americanbanker.com/articles/capital-one-systems-breached-by-seattle-woman-us-says | Aug 04 23:30 |
| -TechrightsBot-tr/#techrights-www.americanbanker.com | Capital One systems breached by Seattle woman, U.S. says | American Banker | Aug 04 23:30 | |
| scientes | haha, you got pwned by a woman! | Aug 04 23:30 |
| DaemonFC[m] | Capital One moved customer data to Amazon cloud where it was breached by a former Amazon employee who knew of a vulnerability. | Aug 04 23:30 |
| scientes | oh geeze, that is bad | Aug 04 23:31 |
| DaemonFC[m] | No, she got pwned. | Aug 04 23:31 |
| DaemonFC[m] | She got caught and faces 5 years and $250,000 in fines. | Aug 04 23:31 |
| scientes | and what punishment for Amazon and Capital One? | Aug 04 23:31 |
| DaemonFC[m] | I'm guessing that Capital One reaches out to the 100,000 people who are now at lifetime risk for Identity Theft and offers them 12 months of credit monitoring. | Aug 04 23:32 |
| -->gde33 (~gde33@84-106-24-118.cable.dynamic.v4.ziggo.nl) has joined #techrights | Aug 04 23:50 | |
| MrGreenFriend | schestowitz, thanks for that article. one point that would need fact-checking: The M$ logo was *not* on the restore discs. (i only see the Dell logo. You?) Here is a photo of it https://www.extremetech.com/computing/268300-man-gets-15-month-prison-sentence-microsoft-windows-restore | Aug 04 23:59 |
| -TechrightsBot-tr/#techrights-Man Gets 15-Month Sentence for Selling Windows Restore Discs - ExtremeTech | Aug 04 23:59 | |
Generated by irclog2html.py 2.6 by Marius Gedminas - find it at mg.pov.lt!
