IT security student. Programmer of digital duck tape, learning to write digital plumbing. Aspiring cryptographer. Personal research interests include zero-knowledge credentials (to counter online antisocial conduct while protecting privacy) and AV/image non-repudiation (to counter deepfakes).
Anti-exceptionalist egalitarian. Empirical pragmatist: evidence over ideology, results over rationalization. Theory is as good as the least of its falsifiability, its internal consistency, and its withstanding of attempted disproof. It is as useful as one is willing to revise or replace it when it fails.
- 4 Posts
- 4 Comments
David ( deFractal@infosec.exchange ) toPrivacy 👁@fedia.io•Apple ordered to open encrypted user accounts globally to U.K. spying.
2·2 years ago@TechDesk@flipboard.social @theverge This is a #nationalSecurity disaster in the making, and a personal #cybersecurity disaster for hundreds of millions. The moment a server to person with access to keys gets compromised, the data exposure will make the #SaltTyphoon breach seem like one of those times a cop or journalist leaks the gender of a source through a pronoun. The data currently protected by #E2EE is much of the most sensitive data there is.
The assurances provided by iCloud #AdvancedDataProtection have undoubtedly led to its being trusted with data which would harm the UK by falling into MSS/PLA and SVR/GRU hands: and that can’t be prevented if the UK’s imperial global surveillance law is complied with.
#Apple would be better off blocking iCloud access in the UK, and explaining on Apple devicesin the UK why that is necessary, till that Investigative Powers Act amendments are rescinded.
David ( deFractal@infosec.exchange ) OPto
New Democratic Party 🍁 Nouveau Parti Démocratique@lemmy.ca•Essential listening for the before the federal election, if you're not to repeat the Liberals' fatal communications errors:
3·2 years ago@ndp And relatedly, from a fellow pragmatic leftist: How the @ndp could avoid repeating the (US) Democrats’ fatal communications errors. #ndp
And before you prejudge the content, be sure to assess its predictive validity—at least if you want to be elected. To those who’d push back, the results discussed in the second video proves point made in the first. One can either cling to presumed rightness, or put results over rhetoric and hence be effective, but not both.
David ( deFractal@infosec.exchange ) to
Fuck Cars@lemmy.ml•85% Of Car Drivers Break 20mph Speed Limits, Reveals U.K.’s Department For Transport
1·3 years ago@Z_Zed_Zed @TDCN @Showroom7561 2‰ = 0.2%. The per-thousand sign isn’t used often in informal English, but if someone took the effort to select the character, they probably meant it. 🙂

@thenewoil@mastodon.thenewoil.org Dear @mailbox_org@social.mailbox.org, @Tutanota@mastodon.social, and @protonprivacy@mastodon.social,
If you want to collectively take a lot of business from Google and Microsoft:
0. Create, for each of your companies, one or more APIs for SMTP, IMAP, CalDAV, and CardDAV bridges, running on customers’ hardware.
Do this, and not only can I access my Mailbox, Tuta, and/or Proton accounts in the same GUI app as my work email, contacts, and calendars; as my university email, contacts, and calendars; and as my Gmail I use as a bin for promotional content (as from “download our free whitepaper” or “use our guest WiFi”).
More importantly, do this, and I can set up every non-technical client with an equally convenient and familiar way to use one or more of your European privacy-centric services without any disadvantage relative to their current Google and Microsoft accounts.
#privacy