acebarry
acebarry on Hacker News
We have it already. It's called paper or cardboard
It's not because of bicycles.
Jones is a well documented liar and grifter. This is not a difference of opinion.
Yet he is wrong about nearly everything else.
If you want a deep dive on Alex Jones and all his lies and schemes, the podcast Knowledge Fight has been documenting InfoWars for years.
The screenshot is from the person who received the email. It's unlikely an Apple lawyer would screenshot something like this.
It's a terrible idea to route
all your traffic over tor. If you have any expectation of anonymity you'll be disappointed. Since tor does not do any application level filtering, it is easy for exit nodes to track you.
It's a neat idea but has the same problems as network wide tor routers.
A similar project is I2PBote[1]. It uses a similar DHT method for mail, but over I2P[2]. As with Freemail, this is inside of the Bote network only.
If the DHT doesn't suit you, I2P also runs a mail server in their network that can relay out to normal email. Ships with I2P by default.
[1]: http://i2pbote.i2p.us/
[2]: https://geti2p.net/
This is kind of how i2p does it. Currently i2p has like 6 "reseed servers" which bootstrap you into finding some other peers. Once you are connected to the network you then can contact "floodfill" servers, which are essentially a distributed form of the directory authorities. Floodfills are autonomously chosen routers on the network, and distribute other nodes to whoever asks.
> Do current browsers entirely prevent a connection to untrusted certs when HSTS is set?
Yes. HSTS would not do much to prevent active MiTM. HSTS just tells the browser that it should only connect to the site over HTTPS. It does not mention which certificates are trusted.
It seems like you are hinting towards certificate pinning (https://en.wikipedia.org/wiki/Transport_Layer_Security#Certi...). Pinning would prevent rouge CA's from signing bad certificates, but pinning is hard to do on the web. It is mainly used with mobile applications from what I have seen.
Edit: Here is a list of pinned sites in Chrome, if you are curious. (https://src.chromium.org/viewvc/chrome/trunk/src/net/http/tr...)
If they wanted to make a memorable address, they would have to run something like Shallot [1]. This is essentially brute forcing private keys until you find the public key you want. Depending on the name, that could take a very long time.
[1] https://github.com/katmagic/Shallot
Usually when the United States federal government releases anything it defaults into the public domain.
Instawallet always made it clear that no one should keep anything more than spare change there.
Burner bitcoin addresses. When you loaded the site you got a fresh wallet with one address. It would help people stay anonymous.
I had the same problem today around the same time (
http://imgur.com/P7wUmro).
Why would a local address be used?
Edit:
I also use Pidgin, think that could be it?
Are you planning on making it modular? If you made it something similar to what DuckDuckGo (
http://duckduckhack.com/) does that would be very interesting. I would also contribute if that was the case.