Jean Hertel @jlhertel@mastodon.technology

App privacy labels show stark contrasts among messaging apps https://9to5mac.com/2021/01/04/app-privacy-labels-messaging-apps/

TL;DR:

Signal - perfect!

iMessage - very good (and defensible).

WhatsApp - huh, that's starting to seem a little sus.

Facebook Messenger: oh hell no.

Dear web developers and admins,
please stop embedding Google's hideous #ReCaptcha into your websites. Its algorithm is faulty, forcing regular users to click dozens or even hundreds of fire hydrants, bicycles, or traffic lights each day. It puts a 'suspicious activity' flag on users who won't obey to Google's business model - such as people who don't sign into Chrome, use anonymity VPNs, or use browser extensions to suppress common tracking mechanisms. Enough is enough. Stop it.

It seems the FSFE is not a good organization to support, as they abuse, harass, and discriminate against their female employees.

https://write.as/malinagalina/i-took-fsfe-to-court

“A female colleague and [I] had dared to discuss wage transparency and gender pay gap in the office … Unfortunately we miscalculated – our boss Matthias was beyond furious. After that office meeting, he told my colleague ‘there will be consequences.’ … I want to expose the hypocrisy and double standards in FSFE leadership. How the organisation ‘promoting’ transparency, equality and inclusivity treats employees and more specifically women.”

https://write.as/malinagalina/i-took-fsfe-to-court

https://mobile.twitter.com/malinagalina/status/1340627582434291714

The way that the Juice Media cuts through the bullshit to communicate complicated #climatechange policy in #Australia is very impressive.

Note - this video uses #NSFW language

You guys know I like to bash Go, but... FUCK!

"The Go security team has determined that the root causes of the vulnerabilities cannot be reliably addressed."

Ok, your language design has some serious flaw that can't be fixed, so they are basically saying "Yup, a core library is going to be vulnerable for a long time".

Also, this is going since August 2020, according to the related post. Project Zero works way fast (30 days) to disclose issues on every other project, but on a project from their own company, 4 months.

Google surely cares about the well-being of the internet, sure.

Link: https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/

"Your Smart TV is probably ignoring your PiHole"

https://labzilla.io/blog/force-dns-pihole

#iot #smarttv #security #privacy

Remote fitness instructor

Microsoft versucht mal wieder bestehende Gesetze & Regelungen als Feature zu verkaufen - es würde ja schon genügen, wenn sich Microsoft einfach mal an die DSGVO halten würde...

Bild: Max Schrems

I’m told that many Germans are stockpiling cheese and sausages in anticipation of a COVID lockdown — planning, in other words, for a Wurst-Käse scenario

https://nitter.net/c0dehard/status/1327718161848872960

You’ve heard of serverless cloud architecture

Now, get ready for… 🥁🥁🥁

Cloudless server architecture

We’re offering features you thought you could only dream of:

Hardened database security: Databases don’t have to be exposed to the network thanks to the wonders of On-System Databases™ and Unix Sockets™, hardening security tenfold!
Latency-free database connections: As if that wasn’t good enough, On-System Databases™ allow you to dramatically reduce latency by bypassing the need for pesky network connections!
On-Demand Web Worker Process Spawning™ using the Common Gateway Interface™
Bare-Metal Access™ to On-Server Storage™ for unparalleled Read™ and Write™ speeds
Predictable costs: No more surprise bills. Pay only for what you specify! Our patent-pending Hardware Limitations™ automatically throttles your cloudless server if you reach capacity
Documentation: tired of trying to navigate through the jungle of outdated and incorrect Azure or AWS documentation? Don’t fret! Operating systems are documented by the most dedicated gangs of nerds you can find on freenode!

OMG, am dying!!!

Someone used the bug GitHub refused to fix, that allows you to add a commit to a repo you don’t control... to upload YouTube-dl to the DMCA request repo on GitHub.

https://github.com/github/dmca/tree/416da574ec0df3388f652e44f7fe71b1e3a4701f

⁣

@mva If Apple (or Google or Facebook or Microsoft) hadn't collected this data in the first place, it wouldn't have attracted the alphabet agencies to reap those spoils.

So the first to blame here are really the corporations. Yes, FBIs, CIAs, FSBs and SBUs of the world are famous power-hungry assholes. But the corps are great enablers of that.

@cassidyjames

RT @KiwiEV@twitter.com

Now, if this isn't the coolest thing you've seen today then you need to close the refrigerator. It's an animation of how bridges were built in Central Europe in the middle-ages.

🐦🔗: https://twitter.com/KiwiEV/status/1316493212605911040

This is the most #Russian thing I have heard of this week. Perhaps even this month.
https://tass.com/science/1212465

> Russian cosmonauts trace air leak aboard orbital outpost with tea bag
> The tea bag’s sway in zero gravity conditions towards the air leak was registered by cameras

Difficult/dangerous issue? ✅
Space exploration involved? ✅
Simple, effective solution? ✅ ✅
Tea involved? ✅ ✅

(two check marks for 🍵 because you can bet your бабушка they had celebratory tea afterwards)