I just published passphraseme to PyPI. It's a simple cryptographically secure script to generate high entropy passphrases using EFF's wordlists. Try it out with:
Can you explain how requiring community members to pledge to make a
"harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, religion, or sexual identity and orientation"
When projects are hostile to creating a mechanism to ban assholes, it just makes it clear to people who will likely get abused -- who often are very talented and could contribute a lot -- to steer clear of that project.
The purpose of a CoC is for projects and communities to have a clear policy of what type of behavior is unacceptable and will get you kicked out. It's not "common sense", considering abusive behavior is so rampant -- and often the most abusive people are even celebrated (Jake Appelbaum, John Draper, etc.).
Kindly reminding them of their manners is a joke when they can just ignore you without consequence
@maiki that's a good question, I haven't used this on Android in a long time so I'm not sure. If mobile is necessary, probably I'd use Conversations and get the other side to use an OMEMO client
Just re-read a 2015 article I wrote called Chatting in Secret While We're All Being Watched. It's about the tools and operational security involved with having an anonymous, encrypted conversation over the internet, under mass surveillance.
The thing I am most excited about with the Librem Key is its integration with Heads to make detecting tampering easy. It's something that doesn't exist anywhere else and in this deep dive post I explain the technical details. #infosechttps://puri.sm/posts/the-librem-key-makes-tamper-detection-easy/
@codewiz oh maybe he's not aware of the encryption. But still, this is a totally legit reason to distrust Chrome. Data collection is rampant, and I don't like my browser doing it. It's an anti-feature, and he's concerned it'll get worse.
@codewiz I'm sure he knows the syncing is encrypted. It doesn't stop the fact that automatically opting you into sending data to Google is a privacy violation.
Information that most likely is logged by not encrypted is IP and timestamp every time you open a browser, ties to your Google account. Probably considerably more, too