Skip to content

Dropsafe

by Alec Muffett

  • Resources
    • A Primer for End-to-End Encryption
    • A “Duck Test” for End-to-End Secure Messaging
    • Why Privacy will always be more impactful than Safety
    • Muffett on Passwords
    • Pre-Flight Travel Checklist
  • About
    • About
    • Login
    • FAQs
  • Search
  • RSS
    • RSS (All)
    • RSS (Comments)
  • #Identity, #OnlineSafety & #AgeVerification – notes on “Can facial analysis technology create a child-safe internet?”

    2021/07/11 08:25:45 BST

    A few days ago I was asked some questions by Alex Hern, towards an article which came out in today’s Observer. In response, I sent him an essay, which I attach mildly edited and with entirely rephrased questions (to avoid quoting) attached below… Question: what are the main challenges of online identity? I’m going to…

    (more…)

    age assurance age verification alex hern guardian identity observer online abuse online safety
  • The unexpected difference between “Age Verification” and “AgeVerification”

    2021/06/20 09:45:56 BST

    Following my previous blogpost which provides a pre-formatted Twitter search query for issues around “end to end encryption”, I decided to build something similar for Twitter discussion surrounding age-verification… and have discovered something rather odd… Simply: you can do a relatively-enormous search across verbose, abstract text strings like “age assurance” and “verification of children online”,…

    (more…)

    age assurance age verification twitter
  • TwitterSearch #ageverification

    2021/06/19 20:31:05 BST

    Long search with many, nuanced terms CLICK HERE FOR SEARCH Blunt search for “age verification” CLICK HERE FOR SEARCH “age verification” List of relevant Twitter accounts CLICK HERE FOR PEOPLE LIST

    (more…)

    twittersearch
  • This is your occasional reminder that some self-styled “privacy” activists will unwisely demand ALL of 1/ software monoculture 2/ gratuitous interoperability 3/ scraping protection; these are bad ideas singularly, and worse when combined

    2021/06/15 07:57:02 BST

    It would be a massively bad idea for everyone to use the same software From 2019, Ashkan Soltani writes: Resulting Thread Screencap Screencapped because Twitter limits unrolling of old threads – if you want to read the thread in-context, click HERE – plus Ashkan now blocks me because he doesn’t like being argued with, which…

    (more…)

    ashkan soltani interoperability monoculture privacy scraping twitter
  • This is an important and awesome thread on #ANOM #TrojanShield by @granick (+ unrolled)

    2021/06/10 13:13:04 BST

    Unrolled The #ANOM #TrojanShield news is really disturbing. I'm surprised that Twitter is not more up in arms. First, let's remember that everything we know right now is FBI public relations. This is the best story they can tell for why the public should support #TrojanShield. We don't really know what happened. But some of…

    (more…)

    anom end to end encryption granick
  • #UyghurTribunal Day 4

    2021/06/08 17:22:42 BST

    #UyghurTribunal Day 4: An anonymous PRC former camp guard is giving key testimony from Germany, where he has been given asylum. He testifies that all #Uyghurs are treated as political prisoners (terrorists, enemies of the state), also that "the rules are different in #Xinjiang". Describes torture methods designed to extract confessions: beating; inserting a pipe…

    (more…)

    china uyghur
  • BBC Instagram: Pakistani journalists under attack, censorship

    2021/06/04 22:25:53 BST

    https://www.instagram.com/tv/CPrwjgRMUJ9/

    (more…)

  • CVE-2021-31166 HTTP Protocol Stack Remote Code Execution Vulnerability I learned RCE at my Grandma’s knee; “Billy,” she said, whisking cake batter as the cat circled awaiting a few fallen drops of sweet goo, “there’s an article in Phrack 49…”

    2021/06/04 10:02:04 BST

    (more…)

    twitter
  • If you want to see each and every new @torproject Onion site as-and-when it has a HTTPS certificate issued, you want to follow this web page:

    2021/05/30 23:03:47 BST

    For reasons of integrity and trust, all HTTPS Certificates which are issued by Certificate Authorities must be registered into a variety of centralised “transparency logs” – primarily in order to detect “cheating”. This means that we can see all V3 onions sites which are registered: Real World Onion Sites: Certificate Transparency Log This is both…

    (more…)

    certificate transparency onion sooc
  • If you visit the @Wikipedia page on the #DiffieHellman #encryption algorithm, you will see this illustration of how the protocol works; I think we can do better, but I lack the skills and @Wikipedia “clout” to do it.

    2021/05/30 21:00:12 BST

    A pet bugbear of mine is that if you go to the Wikipedia page for the Diffie-Hellman key-exchange algorithm, you will see this image that ostensibly explains how it works: To be fair: it’s clean, elegant, symmetrical, and colourful, and I kinda like it, but the thing that frustrates me most is that it’s not…

    (more…)

    diffie hellman encryption
  • Make your cleartext website #UNBLOCKABLE by adding a @torproject Onion address, using #EOTK and a HTTPS certificate from #HARICA

    2021/05/30 14:29:54 BST

    Note: this blog post, and the documentation that it links to, are in a state of rapid change; please add comments below, or raise issues at Github, in case of error or suggestions for improvement. Back in March, the Tor Project announced this: …but it’s taken until today for me to implement the same for…

    (more…)

    dropsafe eotk onion tor
  • Stop talking about who you think should *not* have #privacy. Instead: talk about who you think really, *really* needs it, and *why* they need it.

    2021/05/30 11:49:05 BST

    A short Twitter Essay (twessay?) The thing which makes me cringe in this @rj_gallagher piece on @signalapp is the quote from @greggcorp, attached. I gut-feel like: dude, do you even “dual use”? How is it that the consequences of enabling free, disintermediated speech… /1 How is it that the consequences of enabling free, disintermediated speech…

    (more…)

    concerns are not the same as needs privacy
←Previous Page
1 … 176 177 178 179 180 … 672
Next Page→

Dropsafe

Proudly powered by WordPress