Here it is: https://en.wikipedia.org/wiki/Wikipedia:List_of_hoaxes_on_Wi...
The problem with allowing self-signed certificates has always been distinguishing if a site should be signed by a CA or not. Consider the follow situation: Alice sends Bob a link: http://example.com Bob trusts Alice and…
Using something like Namecoin https://en.wikipedia.org/wiki/Namecoin and storing the cert hashes in the blockchain would allow for decentralized verification. In order to be an improvement over the CA model a new system…
I just checked my AT&T phone and I have an X-Acr header too.
Here's a scary thought: How do we know every ISP isn't doing this, it would be undetectable if they only injected these on certain domains e.g. facebook, google. However I don't see how much more tracking ability that…
If you add it to that directory it won't show any warnings. Still, not so good for the average person because it requires root and might not persist between updates.
Did you try adding your CA to /system/etc/security/ ?
Looks like countries need to look into decentralized DNS. https://en.wikipedia.org/wiki/Namecoin
Great job guys! I'm a big fan of what whisper systems is doing. Why is this not called redphone though? Does it have different features? Edit: Looks like the article says it is part of a plan to merge redphone and…
Websites need to start taking more responsibility with HTTPS. Reddit, and a few other popular sites can also have their sessions hijacked.
Are there any phones that currently do this?
I'm really interested in a less-trackable cell phone, but until I read this article, It didn't seem possible. I am really hoping a fully open source phone comes to the market soon. It wouldn't have this ping "feature",…
If you are trying to avoid being tracked by Google I don't recommend using Chrome.
But if a site is self signed the browser could show something like "This site is not authenticated, don't enter any personal info/passwords"
I think I have a good idea to solve this. What if a system similar to HSTS was implemented? https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security important sites (banks) could send a "don't allow self signed…
They are probably using HSTS to keep users from accepting unsafe certs. https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
Do these have an isolated modem? What is the status on running other OSs on this?
Interesting concept, too bad you overide scrolling. I wanted to check out your website but it was too annoying on mobile. Can your target customer not afford browsers that scroll?
ELI5 why companies don't open source drivers. The hardware is proprietary so what do they have to lose?
https://news.ycombinator.com/item?id=7610769
VLC/mplayer live stream pip install livestreamer apt-get install rtmpdump pip install python-librtmp livestreamer ustream.tv/nasahdtv best
Does it frighten you that you have a camera on your head that was made by a company that recives 90% of it's revenue by building a profile about you? Not trying to be a troll I'm actually curious what people's opinions…
In Russia you can buy a blue light bar and they will let you speed.
Can't you set up tor as an HTTP proxy then just use whatever browser you want?
Here's an interesting link. https://en.wikipedia.org/wiki/Micronation
Here it is: https://en.wikipedia.org/wiki/Wikipedia:List_of_hoaxes_on_Wi...
The problem with allowing self-signed certificates has always been distinguishing if a site should be signed by a CA or not. Consider the follow situation: Alice sends Bob a link: http://example.com Bob trusts Alice and…
Using something like Namecoin https://en.wikipedia.org/wiki/Namecoin and storing the cert hashes in the blockchain would allow for decentralized verification. In order to be an improvement over the CA model a new system…
I just checked my AT&T phone and I have an X-Acr header too.
Here's a scary thought: How do we know every ISP isn't doing this, it would be undetectable if they only injected these on certain domains e.g. facebook, google. However I don't see how much more tracking ability that…
If you add it to that directory it won't show any warnings. Still, not so good for the average person because it requires root and might not persist between updates.
Did you try adding your CA to /system/etc/security/ ?
Looks like countries need to look into decentralized DNS. https://en.wikipedia.org/wiki/Namecoin
Great job guys! I'm a big fan of what whisper systems is doing. Why is this not called redphone though? Does it have different features? Edit: Looks like the article says it is part of a plan to merge redphone and…
Websites need to start taking more responsibility with HTTPS. Reddit, and a few other popular sites can also have their sessions hijacked.
Are there any phones that currently do this?
I'm really interested in a less-trackable cell phone, but until I read this article, It didn't seem possible. I am really hoping a fully open source phone comes to the market soon. It wouldn't have this ping "feature",…
If you are trying to avoid being tracked by Google I don't recommend using Chrome.
But if a site is self signed the browser could show something like "This site is not authenticated, don't enter any personal info/passwords"
I think I have a good idea to solve this. What if a system similar to HSTS was implemented? https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security important sites (banks) could send a "don't allow self signed…
They are probably using HSTS to keep users from accepting unsafe certs. https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
Do these have an isolated modem? What is the status on running other OSs on this?
Interesting concept, too bad you overide scrolling. I wanted to check out your website but it was too annoying on mobile. Can your target customer not afford browsers that scroll?
ELI5 why companies don't open source drivers. The hardware is proprietary so what do they have to lose?
https://news.ycombinator.com/item?id=7610769
VLC/mplayer live stream pip install livestreamer apt-get install rtmpdump pip install python-librtmp livestreamer ustream.tv/nasahdtv best
Does it frighten you that you have a camera on your head that was made by a company that recives 90% of it's revenue by building a profile about you? Not trying to be a troll I'm actually curious what people's opinions…
In Russia you can buy a blue light bar and they will let you speed.
Can't you set up tor as an HTTP proxy then just use whatever browser you want?
Here's an interesting link. https://en.wikipedia.org/wiki/Micronation