mysticmarvel
mysticmarvel on Hacker News
That link at the bottom of the email states that they unsubscribe you from the mailing list.
Odd how I always seem to get more spam, but from different companies, after I click one. Almost as though all I've done is confirm that the email address actually exists, and is therefore more valuable to sell on to others.
Then you will never work in finance, education, medicine, or any company where data exfiltration or IP theft is a business risk.
The second party in this instance is the organisation, including the user. The enterprise owns the pipe, the router, the endpoint device, the chair the user sits on, and the time being used by the employee while they are not on a break. They are a representative of the enterprise while they use a workplace computer, and while they do have an expectation of privacy on devices under certain circumstances, that is balanced with my need to protect the enterprise from bad actors. I am
obliged to MitM the significant majority of SSL connections, but I do so after acquiring informed consent from the employee. This is via both workplace policy to which they must agree to remain employed, and via clickthrough notification on logon that SSL is intercepted and use is monitored. In exchange, I will only make use of information collected that is pertinent to such protection activities. For instance, if I see a Bookface post about a party at the weekend posted during a break, that is discarded. If a post is captured that is sending business-confidential information to a competitor, that is collected and used in a formal process.
If you break my ability to monitor the use of my devices, your product is dropped from my network. You'll also find that it is dropped from the entire education sector. That is why Chrome has backed off this change.
As a purely leisure traveler, I can't see why anybody would put themselves through the US border system as the start of their holiday. Talk about starting on a downer.
One does not simply "mess with" an international bank.
The UK already refuses to extradite for criminal proceedings where the death penalty is a possibility. It must specifically be denied as an option for sentence prior to extradition being arranged.
Having said that, what I've heard about the federal prison system makes me think that a coupe of injections and a permanent nap might actually be more humane. /s
This is all totally true.
It is also totally true that you are not squeaky clean in your employment (never been late once? Never missed a deadline?), and that your performance management targets are set by the people against whom you are protesting. You can be performance managed out of a position in months, even if your right to protest is protected and you are literally a Saint in the workplace.
I'm not saying it's right, just that I've seen it done. There is always a way to remove "difficult" employees regardless of protection laws.
This is all totally true.
It is also totally true that you are not squeaky clean in your employment (never been late once? Never missed a deadline?), and that your performance management targets are set by the people against whom you are protesting. You can be performance managed out of a position in months, even if your right to protest is protected and you are literally a Saint in the workplace.
I'm not saying it's right, just that it's true.
Good god... I just Google'd the IWW. Their website looks, at a glance, like a militant extreme left group. From the hard white-and-red on black colour scheme through to a photo of two people in fatigues carrying AK-style weapons next to an advert for a highly politically charged event.
If they want more members, they might want to tone down the "militant" imagery. I'm uncomfortable being associated with that.
Hire a lawyer with a "dead man" instruction to instigate such action if he's not informed otherwise within 48 hours. Keep money for legal fees in escrow for that purpose. Shouldn't be difficult to set up.
Do you have a job or family? How long would the former keep you employed? How long would the latter last without your support? Could you afford legal fees without employment?
It's cool to say these things, but the system is weighted against protest. You must be ready to sacrifice everything for your principles.
You'd also need to create new accounts for all your services each time, or any basic logging of access will trivially link your SIM, data provider's IP, your VPN, and your endpoint services. You only need to mess up once and your "anonymity" is compromised. In this instance it would be the IMEI of your phone, the tracking data used by advertisers and data miners to fingerprint your devices, and whatever services and accounts you use for email or social networking on your device.
Real anonymity is hard, and takes a level of paranoia not many can sustain without suffering mental health issues.
You don't think they give up after one try, do you? Look as us Brits with the IP Bill (Snooper's Charter). May tried to push it through a couple of years ago as Home Secretary and the public backlash stopped her. Four months after she becomes Prime Minister she sneaks it in with barely a whisper.
You want a US version of events? Slipping CISA in its entirety into an Omnibus Bill in late 2015 after it was initially rejected as part of the National Defense Authorisation Act.
It's endemic.
One possible threat here could be access being gained another way (court-order to provide text key), then with the device unlock key known being required to try each finger in sequence to identify if you provided a genuine try to unlock the device. Could be seen as obstruction (IANAL).
My iPhone forces password entry after 5 failed attempts at TouchID unlock. If you can quickly thumb the sensor a few times, you can render fingerprint unlock impossible.
Better to disable anyway, but it's an option.
You must verify your account with a mobile phone if you sign up using Tor. You can use an email address if it's not over Tor.
> I wish I had something important enough to say to be able to put this advice to use!
Do you disagree with the way things are? Do you face persecution of any sort if you publicly express that opinion? You have something important to say and should use this advice to say it.
Those who remain silent are complicit in the success of those who they oppose.
Do you ask for personal information as part of your signup process? First name, last name, email address etc? If you don't encrypt the data or take basic precautions against unauthorised access you're likely breaking Data Protection law.
If you've already implemented a web server with SSL then "weak cyphers" might bother you. As you don't already have it configured, you're no worse off configuring a fully TLS 1.2-compliant web server with SHA256 signed certs and ChaCha20-Poly1305 cypher suite. It's just a configuration option if you're doing it for the first time.
Bin them. Bin Amazon Prime too. Be sure to tell them why you're doing it.
Cable was originally advert-free. It was slipped in gradually over time. They got away with it because people put up with it and didn't call foul and stop subscribing. Expect Amazon, Netflix, everyone to do it. Precedent was set with cable subscriptions. The bar is set very low, and our resistance is known to be pitiful.
How often do you upgrade or purchase a new Apple device? Once per year? I'll take one instance of setting up permissions for stock apps (Many of which I don't use) over granting them unfettered access to my data and device services any day of the year. For instance, under no circumstances do I want Location Services enabled for: "App Store, Camera, Facebook, Messages, Siri, Twitter, HomeKit, Location based Alerts or Ads or Suggestions, WiFi Networking, Frequent Locations, Diagnostics and Usage, or Popular Near Me. I'd be happier if I could disable location access by modem too (GPS, Bluetooth, and WiFi) but it isn't that granular.
How about "compartmentalisation" and "single point of failure" as reasons to use ProtonMail for some contact, a disposable Gmail address for others?
This exploit is not in the original Signal protocol, and was introduced by WhatsApp. Signal discards undelivered messages when the encryption key changes, WhatsApp implemented re-transmission because they think it improves usability. It does do that, and it also introduces this security risk.
It says so right in the article. Stop spreading FUD.