cypherpunks

They had to make it the default though. That was unavoidable.

For it to be useful at scale, sure, but reading this it sounds like Chrome's version of it is still "experimental" and opt-in. Hopefully the backlash prevents it from being developed further.

It has come to my attention that many of the people complaining about #Firefox's #PPA experiment don't actually understand what PPA is, what it does, and what Firefox is trying to accomplish with it

The documentation under the "Learn more" link next to the "Allow websites to perform privacy-preserving ad measurement" checkbox in Firefox preferences explains very clearly what it is and how it works. Asserting that people who read that and are indignant about it being enabled by default just... "don't actually understand" it is absurdly insulting and basically gaslighting.

adding all compiled file types including .pyc to .gitignore would fix it

But in this case they didn't accidentally put the token in git; the place where they forgot to put *.pyc was .dockerignore.

It seems to me that switching SIMs provides little privacy benefit, because carriers, data brokers, and the adversaries of privacy-desiring people whom they share data with are obviously able to correlate IMEIs (phones) with IMSIs (SIMs).

What kind of specific privacy threats do you think are mitigated by using different SIMs in the same phone (especially the common practice of using an "anonymous" SIM in a phone where you've previously used a SIM linked to your name)?

At my workplace, we use the string @nocommit to designate code that shouldn’t be checked in

That approach seems useful but it wouldn't have prevented the PyPI incident OP links to: the access token was temporarily entered in a .py python source file, but it was not committed to git. The leak was via .pyc compiled python files which made it into a published docker build.

oldie but goodie

the original tweet (nitter)

this isn’t remotely how this meme is used lol

wikipedia articles about him have been deleted twice:

• https://en.wikipedia.org/wiki/Wikipedia:Articles_for_deletion/John_M._Dougan (2016)
• https://en.wikipedia.org/wiki/Wikipedia:Articles_for_deletion/John_Mark_Dougan (2019)

lol, i just accepted the title tag from the page which the create post form auto-filled 🤡

Redhat, however, found this solution too simple and instead devised their own scheme for assigning network interface names. It fails at solving the problem it was created to solve

I somehow first read "Redhat" as "Reddit" in this sentence, and so was briefly thinking that perhaps this bad idea originated there 😂

Otoh, the Washington Post and their "experts" didn't think any of those civil rights movement direct actions they're celebrating now were reasonable at the time either 🤡

rare meta w