tao_oat

11 ms·

121.
Email masks: the way to reclaim your email privacy(shroud.email)
2 points by tao_oat 4y ago|4 comments
122.
by tao_oat 5y ago
I agree that this is a challenge! If you want to use the hosted version, it's impossible to avoid the need for that trust. I'm working on making self-hosting easier for this reason. Some other services (like Firefox Relay) will us
123.
by tao_oat 5y ago
I made something similar that I've been using for several months now: https://shroud.email/ The concept is fundamentally the same as Hide My Email or DuckDuckGo's service, but it's libre software and has (IMO
124.
by tao_oat 5y ago
It's great to see all these services catching up to each other, though I've noticed that their privacy guarantees aren't always clear. For example, Firefox Relay just uses AWS SES to receive/send emails, whereas DuckDuck
125.
by tao_oat 5y ago
The article seems to be suffering from the Hacker News effect. Here's a mirror: https://web.archive.org/web/20211218090314/https://marbiano....
126.
by tao_oat 5y ago
I wrote a [similar post]( https://btao.org/2021/09/09/npm-install-is-curl-bash/ ) recently, and I think it's worth sharing this part: > When installing an untrusted package, run `npm install` or `y
127.
by tao_oat 5y ago
If privacy is truly important to you, then you'll manually encrypt messages in your head using a one-time pad. Can't trust any program you didn't write yourself, including the compiler! /s > Security and convenience
128.
by tao_oat 5y ago
> It’s also worth noting that end-to-end encryption is necessarily broken as messages to (and from) WhatsApp, Signal and Telegram pass across the bridge(s). The bridge(s) operates in Element’s trusted EMS environment, with no content sca
129.
by tao_oat 5y ago
Hi HN! I built this tool to quickly view the true source code of npm packages before installing or updating them. You can't always trust what's on GitHub: there's no guarantee that it matches what was actually published to np
130.
Show HN: Audit NPM packages before installing(xray.computer)
1 points by tao_oat 5y ago|1 comments
131.
by tao_oat 5y ago
To be clear, stopped supporting robots.txt noindex a few years ago. Combined with the fact that Google might list your site [based only on third-party links][1], robots.txt isn't an effective way to remove your site from Google'
132.
by tao_oat 5y ago
Hi, author here. Google stopped supporting robots.txt [edit: as a way to fully remove your site] a few years ago, so these meta tags are now the recommended way of keeping their crawler at bay: https://developers.google.com/
133.
by tao_oat 5y ago
The population of the US (328 million) is roughly 55 times that of Denmark (5.8 million). There are an estimated 30 to 35,000 Danes living in the US [1] (not Americans with Danish ancestry, which seems irrelevant). By your own logic re: vot
134.
by tao_oat 6y ago
I find it interesting that the author (and many others that argue in favor of federated systems) refers to Signal's (The Ecosystem is Moving)[1] post where Moxie outlines their reasons for not federating, but without acknowledging any
135.
by tao_oat 6y ago
This website is awfully light on details. Is it open source? Is there a whitepaper on the encryption used? Does it have e.g. forward secrecy? At the moment there's no reason why you might want to use this over e.g. Signal or Wire, both
136.
by tao_oat 6y ago
Encryption in transit / at rest are arguably so common that they're not really worth mentioning as a differentiator. Are there any messengers that don't do this? I'd say the qualitative different to E2EE is quite major.
137.
by tao_oat 6y ago
I believe it means handling moderation yourself rather than relying on platform providers to do it for you. You have to choose your peers that you receive content from carefully rather than rely on platform moderators to filter content.
138.
by tao_oat 6y ago
> Many Telegram users are away of it's quirks and how it operates differently to other IMs That's probably true, but a significant proportion of users are not, and do not realize that their chats are not encrypted. It's no
139.
by tao_oat 6y ago
> I didn’t know Signal was just another scheme to collect private data I think that's quite a misstatement, but it is indeed a centralized service.
140.
by tao_oat 6y ago
> Wire is the better choice if you can sacrifice a tiny bit of usability for better privacy. Do you mean better privacy than Signal? I was under the impression that Signal was significantly ahead of Wire in this regard with features like
141.
by tao_oat 6y ago
What do you think her fears are, and why are they unfounded? I understood her primary point as being about inequality and justice: "I don't wanna make 250k while most people work three jobs"
142.
by tao_oat 6y ago
Just jumping in here to share one example: one unit inside No.10 tried to get the union jack printed on this vaccine (but appears to have been unsuccessful): https://www.huffingtonpost.co.uk/entry/oxford-university-ast.
143.
by tao_oat 6y ago
> The problem is these people don’t need a house, they need a full time caregiver to manage their addictions and mental illnesses Housing may only be one part of the picture, but housing-first policies have proven to be the most cost-eff
144.
by tao_oat 6y ago
This sounds like a nice idea, but I wonder if it's backed up by historical fact? There are plenty counter-examples of countries with stable peace as well as some restrictions on freedom of speech. The discussion in the linked article s
145.
by tao_oat 6y ago
Moxie is just one of several security experts who are fed up with PGP. For a similar article see [What’s the matter with PGP?][1] or [The PGP Problem][2]. [1]: https://blog.cryptographyengineering.com/2014/08/13&#x
146.
by tao_oat 6y ago
I'm a pretty big fan of plain text for many things, but in this case it seems significantly simpler to just use a more full-featured password manager. I'm not sure I really see the benefit of a system like this. This setup (as wel
147.
by tao_oat 6y ago
I decided against using ProtonMail precisely because of the lack of full-text search (you can search across email subjects, but only because [they aren't encrypted][1]). However, there is another zero-knowledge email provider who does
148.
by tao_oat 6y ago
10minutemail.com and anonbox.net are both good. If I need a new service, I look at the list of temporary email services supported by the Bloody Vikings Firefox extension [1]. There are quite a few there. [1]: https://addons.mozil
149.
by tao_oat 6y ago
I love the idea of Vim shortcuts in the browser, but I'm becoming increasingly uncomfortable with the permissions these extensions require. I get why it's necessary for them to work, but giving access to all history/tabs&#x2F
150.
by tao_oat 6y ago
This isn't a study, and scientists have been paying increasing attention to "long COVID" for several months now. See, for example, this feature from The BMJ from July: https://www.bmj.com/content/370&#x2F

More ›