Viewing profile — SudoNick

Most of the time we do care about (not!) exposing information to third parties. This even applies to generally lower-importance scenarios such as watching YouTube and Netflix video…

I think this is the first time I've heard of NDN, and I've only spent a short while reading about it. My first impression is: 1) It involves addressing chunks of data rather than h…

Wouldn't proper compartmentalization dictate that email providers be explicitly eliminated from the end-to-end encryption process? Apart from being able to inspect email and recogn…

Earlier today, and for the first time I recall, Firefox presented me with a slow startup notification. I had some very demanding programs running at the time and knew to dismiss th…

I noticed that you said that, and expected others to notice as well. I don't really think your post unreasonable. I'm just a little concerned that, even in a case of pure intention…

I think this is the fourth or fifth time, in recent memory, that I've seen someone from Mozilla criticize Adblock Plus and call on its developers to make changes. ABP startup time …

In order to be effective against the numerous tracking techniques that are in use, the extension MUST block requests. If you aren't breaking many popular websites as a result of bl…

FYI: The latest versions of Adblock Plus and Adblock Edge yield to Firefox during startup. Which, it seems, prevents them from having loaded all of their rules by the time Firefox …

If I may suggest a slight rephrase: If you are concerned about RELIABLY destroying your data (which involves being able to verify for yourself that it was thoroughly destroyed when…

Yes! If you don't have a reasonably easy way to inspect and modify what is being sent over the encrypted connections your device makes, you are in very serious trouble. Your device…

It doesn't hurt to dream. Normally ;) BTW, this type of thing might be or become more widespread than I initially thought: http://www.cablewifi.com/

Well, there is Comcast's program to deploy dual-WiFi APs. One side for the subscriber, one side for Comcast to use as it sees fit (public hotspot being a declared use): http://arst…

Lets ask the other question too: why do I not want IPv6? It seems to me that NAT serves a very useful role in terms of helping to hide information about your internal network (the …

Snowden or no Snowden, a security focused developer wouldn't want someone else signing on their behalf or someone else controlling availability and updating. A security focused use…

I think Mozilla may be headed in the same direction. Add-on File Registration System: http://www.ghacks.net/2013/11/01/mozillas-add-file-registrat... Merging of AMO with Firefox Ma…

Given that the business model in question has come to revolve around highly targeted advertising achieved via extensive tracking and profiling of users, it certainly deserves to be…

> We still need servers as rendezvous points, and we can't expect everybody to run their own services. Properly setting up a mail server is hard. What could be done about this? Run…

Some reporting suggested that the NSA and FBI are working together in a way. Perhaps the NSA uses PRISM to spy on foreigners (freely) while the FBI uses PRISM to spy on Americans (…

To your first point, who is the identity provider? In practice, it will almost always be 1) a third party, and 2) an email provider that is unlikely to deviate from the "must be a …

It would seem that developers receiving verified email addresses of users was deemed more important than privacy and supporting scenarios where email addresses aren't required to e…

The threat is from government and collaborators. Some collaborators are probably lobbying to have government surveillance programs expanded because they think it will benefit their…

Based on my server logs, Google will offer STARTTLS and also use STARTTLS when offered. So there can be MTA MTA encryption. Unfortunately, many MTAs don't do one or both, and that …

Have you asked your attorney why he adds that warning, and asked whether attorney-client privilege is waived if email messages and documents are exchanged over an SMTP system which…

It appears to me that in order to run your own Persona Identity Provider you must setup and maintain an SSL capable webserver for your email domain, equipped with a certificate tha…