Notices by Mike Gerwitz (mikegerwitz@social.mikegerwitz.com), page 16
Mike Gerwitz (mikegerwitz@social.mikegerwitz.com)'s status on Wednesday, 18-Oct-2017 02:40:03 EDT
Mike GerwitzThe number of times I get screwed when signing #Git commits by either entering my smartcard PIN incorrectly or forgetting I changed it... On failure, Git aborts entirely. If you write detailed changelog-style commits like me (which can take a decent amount of time to write), you'll get a heart-sinking feeling when you go to commit again and find that your commit message wasn't retained.
So any time there's a failure, I immediately back up the contents of .git/COMMIT_EDITMSG, where the last message was stored. You will lose it if you try to commit again before this. You can also use `git commit -F .git/COMMIT_EDITMSG`, but note that comment lines aren't removed then, so you'll probably want to edit it before or amend after.
This is something I've been doing since I first learned Git, but hopefully the tip's helpful to someone.
So, don't worry about the vulnerability because your password is probably already worthless and can be brute-forced. What the hell? While this _is_ realistic, it is dangerously dismissive and promotes the completely wrong attitude toward security. There's not even a mention of ways to improve your password security---instead, it almost makes people seem silly for having random passphrases by calling them a "cat's hairball".
How about some useful advice that'll actually help the reader rather than make them think "oh, okay, insecure as usual; carry on": choose a better password, and update your shit.
@nev @pineapple It needn't be a taboo to be a privacy concern. If we remove facial recognition and shift to typography: people use aliases for writing or posting online, and bridging those aliases is problematic too. It's whether someone has an _expectation_ of privacy, regardless of what it is.
There are places I have no expectation of privacy where I'd be unhappy if it becomes indexed too. For example, security cameras in stores. I don't care if someone in or around the building sees me entering. I care if the whole world does, even though I'm probably doing something pretty uninteresting, because it violates my expectation of privacy (even though I know that expectation can be easily violated). If I expect that store managers are going to post videos of me online everywhere I go, I may change how I go about doing things. "Shock value" certainly contributes to how violated a person feels, but isn't a precondition.
I have great interest in typesetting, and have gotten great joy out of TeX. Unfortunately, most of today's text is belched onto users' screens using HTML, which will hopefully one day be able to produce a somewhat respectable rendering.
(Though, most everything I do is plain text on a VTE.)
@stragu I do now! Thanks---these look like some interesting perspectives. I'll have to at least skim through them. Any highlights that interest you the most?
Some really interesting results regarding automation of various aspects of life from the Pew Research Center. I don't have time to summarize any of the interesting points, but it's worth a skim.
The article brings up important points. Porn actors often have different identities. What about amateur/revenge porn? This is a much more intimate example of the privacy threats that already exist. People seem to care a lot more when it affects them on such an intimate level, even though this is already being done in non-pornographic settings.
I've been thinking for well over a decade about people who place themselves in porn videos---be it professionally, or just for fun---and how their lives will one day change when everything they have ever posted online, even if it was a lifetime ago, is indexed and searchable. Privacy can't be retro-active---technology is advancing at too great of a pace. By the time you know to be concerned, you've already lost. And there's nothing you can do about that.
Damnit, and here I was advocating that free software was a prerequisite for any respectable definition of "security". Back to the drawing board. Hopefully my whiteboard's design wasn't reviewed by foreign powers.
(In all seriousness: this is a security company hiding in obscurity. Antivirus software is one of the greatest security threats to your system.)
I've been complaining about burnout for months. I'm feeling refreshed and it's only Wednesday, so hopefully this finally gets me out of it, and hopefully it doesn't come back shortly after returning.
I'm not a tinfoil hat person---I don't _need_ to be; there's plenty of legitimate concern out there (https://mikegerwitz.com/talks/sapsf.pdf). I accept their explanation that it was a hardware malfunction on a touch component; it wouldn't make sense for them to intentionally do this type of thing, especially when users can see logs, transcripts, and audio recordings.
The privacy (and security) issue is that this is even possible to begin with. A bug isn't necessary: the firmware can be remotely updated in a targeted attack or compromised by attackers. Audio is being send to remote servers, not being processed on the device.
Mike Gerwitz (mikegerwitz@social.mikegerwitz.com)'s status on Friday, 06-Oct-2017 21:35:00 EDT
Mike GerwitzI can't even remember the last time I used AIM, but it was a program/protocol that served as a social pillar of my childhood---it was the social media of my generation, which I can recall using as young as the age of nine. (I'm turning 28 this month.) MSN Messenger and YIM were in there too. Good fun was had back in the day hacking IRC bots for MSN Chat. (That's actually the only time I've written Perl---an upgrade from mIRC scripting!) MySpace came around at some point, but the real communication happened on AIM/YIM/MSN. And IRC for a select group of friends.
It's an entire world I lost long, long ago. And while I had no intent on trying to go back to it (not that it was an option anyway), the finality of AIM's sunsetting does bring on nostalgia, despite my last use being over a decade ago.
I'm starting to make myself feel old. (Nevermind the 17yo employee at work that didn't know what the modem sound of a fax was. That's the sound I heard when dialing in to chat on AIM!)