Viewing profile — HerraBRE

This is neat! DoH/DoT over Tor will provide stronger security and privacy guarantees across the board, but a well run .odns (anycast, good caches) could probably provide better per…

To expand on this slightly, and illustrate: I'm going to go out on a limb, and assert that THE most common attack performed against peoples' e-mail, is a jealous person who knows t…

I wrote [most of] Mailpile. I'll check back here now and then and try to answer any questions folks have.

That's an interesting idea. I'd hesitate to implement it though, because of secondary risks. It would need to be thought through very carefully, and there are a whole bunch of abus…

Unless your adversary has a time machine, deleting from the server protects your past e-mails from any server-side compromise. That's not nothing. :-) But you're right there are tr…

This is still a muddled view of things. In pay-for-click, advertisers are paying for advertising which is effective. The click is how that is measured. There are other ways to meas…

Why do you say it was censored and removed? It's dropped down to page two, but that's perfectly normal once something has been on the front page for a while.

Neither of us knows this, so we may as well stop arguing about it. What we do know, is that running the servers and hiring all those engineers costs money, and their revenue is alm…

That is not how Google's business works. Advertisers quite literally pay for clicks. That was part of how Google disrupted the market back in the day; most other advertising networ…

It's still a means to an end. You don't pay with your data, you "pay" by interacting with ads. Consider that Google actually became super profitable well before all the detailed tr…

I actually feel it's misleading and wrong at a very fundamental level; this was the only thing I disagreed with in the whole press release! Consumers "pay" for Google's services by…

This is a legitimate concern. I would not put it past Facebook (or other businesses which are addicted to harvesting user data) to behave badly against networks like this. However,…

If the social contract says "delete things when you see a delete message", then that's useful in a federated environment. Only bad actors will disobey and they will have to modify …

People keep saying that. Lots and lots of species will go extinct before we do. And it will be our fault . Sure, the hunk of rock we call a planet will go on, and life will go on, …

Mostly it meant SREs tended to be older than other engineers at Google (I was an SRE there for a while), I think by an average of nearly a decade. Broad experience, depth on a few …

It's not mentioned in the article, but there is an underlying point that affects hiring for roles like this: you need people who can and will admit they don't know everything and w…

This attitude is harmful. Although new and better protocols is a worthy area of research and development, we should also improve the tools people are already using. Note I said res…

Mailvelope is a much better choice if your goal is to interact with the existing OpenPGP ecosystem; E2E was using ECC keys only if I recall, which makes their crypto incompatible w…

Thank you for injecting some optimism. :-) I'm disappointed and cynical about this.

If this is all that has happened since August, well, the commit speaks for itself: https://github.com/e2email-org/e2email/commit/434f99c66efe49... Hopefully there's more to come! :…

It looks like Google just pulled the plug on this: https://security.googleblog.com/2017/02/e2email-research-pro... HN submission: https://news.ycombinator.com/item?id=13728327 (Gen…

This appears to be a weak attempt to spin as positive the news that Google have abandoned the end-to-end project... mysteriously posted when everyone is busy processing the SHA1 an…

Thank you for sharing your experience, it's enlightening. I'm glad you're in a better place now.