Viewing profile — neerdowell

This is a textbook example of FUD.

> There's no way to know GCHQ/NSA aren't running 90%+ of bridges and exit relays Yes there is. There are currently 857 exit nodes. The Tor Project only has to personally know who r…

> The Tor Browser does not send misinformation; it just blocks. No, it doesn't. TB sends all kinds of misinformation, from the user agent string (always reports itself as being its…

> The Wire guys made very specific claims (where did they get the >$2M figure from ... and why would they simply invent such a figure). Their court filing[0] says the license fee w…

You think more than 50% of the people using Chrome deliberately sought it out and installed it after making an informed decision? Not because it was pushed via bundlware or a Googl…

Most users haven't made a conscious choice to use Chrome. They install it accidentally by not unticking a checkbox[0] or because they are told it will make the Google work better[1…

CCleaner: https://i.imgur.com/LNFjqzd.png The checkbox is pre-selected.

Except they are. The F-Droid devs kept claiming they weren't. Moxie asked them to describe the system and surprise, surprise the keys are stored on a machine that is connected to a…

What? APKs are signed by the developer before they uploaded to the store and the signatures are verified by PackageManagerService which is a part of AOSP.

> By giving NSA the only thing what they want: metadata from Google What metadata does Google get from Signal messages? The time/date you received a message, the size of the messag…

What does Play Services have to do with anything? APKs downloaded from the Play Store are signed by a key the developer holds and validated by Android's PackageManagerService which…

> But ignoring much of the developing countries (see whatsapp), China Moxie says Signal works fine in China: https://github.com/LibreSignal/LibreSignal/issues/37#issueco...

> He decided not to. That's completely his right. He doesn't go into a lot of detail about why he has decided this, but it's completely up to him. He doesn't like how F-Droid uses …

Each device has its own key. Before a message is sent, the client grabs all the keys for each device associated with the account of the recipient, it then encrypts the message sepa…

I'm not seeing your point. A vulnerability was found in OpenSMTPD. That vulnerability could not be exploited on OpenBSD because there was no way to overflow the buffer without smas…

People are testing the mitigations. For example Qualsys' audit of OpenSMTPD[0] noted that a buffer overflow they found was not exploitable on OpenBSD as even a single byte overflow…

> Yet, the mere fact that I see OpenBSD desktops in Google images running shoddy applications shows many OpenBSD users make similar tradeoffs to what you described of Linux camp. A…

You mean libel. Slander is spoken, libel is written. The easy way to remember this distinction is to know that one of the most famous libel cases in history, nicknamed the "McLibel…

It's not that much of a stretch to imagine that the reason the FBI are threatening to abduct her off the street and deny her the right to legal counsel is somehow related to her be…

> I'm curious about the technical reasons. uBlock hasn't been updated in almost a year. uBlock Origin is actively developed. uBlock has effectively had no significant changes or im…

And Google would never break the law or breach a contract. Especially a contract they signed with the UK Government. I mean, other than that time just a few years ago[0] where Goog…

End-to-end encryption for Android to Android conversations has been in place since November 2014: https://whispersystems.org/blog/whatsapp/

>oh please. i trust google far more than my own government for data protection; we're talking about an orginisation who leaves sensitive literally just lying around We're talking a…

> It also bothers me that they didn't just use the GPLv2 Maybe they want people to be able to easily distribute binaries of the software via BitTorrent. Apache allows this, the Vim…