unhush

6 ms·

1.
by unhush 12y ago
Tracking bug for this (in Firefox): https://github.com/EFForg/privacybadgerfirefox/issues/11
2.
by unhush 12y ago
FYI, upgrading to 0.1.1 (released Friday) fixes the bug I mentioned. Subdomains of whitelisted sites are also whitelisted now. https://github.com/EFForg/privacybadgerfirefox/pull/63/files
3.
by unhush 12y ago
Unfortunately not, if you use Incognito by default (other than being able to see who's tracking you and toggle the settings manually). We could add a feature to optionally save data in Privacy Badger between incognito sessions (or use
4.
by unhush 12y ago
There is code in Privacy Badger that checks whether a site has publicly posted a statement of compliance with DNT before blocking it. If they do and then violate that commitment, we have a record of it and can call them out on it.
5.
by unhush 12y ago
Do you have other extensions installed that are already blocking trackers? (NoScript, for instance.) If so, Privacy Badger shows only the ones that they've missed.
6.
by unhush 12y ago
To clarify, those cases where we block cookies but not requests entirely are the sites on this whitelist: https://www.eff.org/files/cookieblocklist.txt This pull request will also apply the whitelisting to subdomains o
7.
by unhush 12y ago
UGH, you're right. Ok, let me explain this. We whitelisted google.com but it was not anticipated that, in the general case, we should really whitelist all subdomains in order not to break sites. Luckily this was a one-line patch: ht
8.
by unhush 12y ago
The reasons for not using a blacklist in Privacy Badger were philosophical, not technical. I agree it would be more convenient to ship with a blacklist but hopefully the learning algorithm works well enough to be almost-equivalent. > Btw
9.
by unhush 12y ago
Perhaps now is a good time to mention that if you want to work on projects like Privacy Badger with EFF, we're hiring for a Staff Technologist: https://www.eff.org/opportunities/jobs/staff-technologist . The r
10.
by unhush 12y ago
Yes, the alpha version (what we just launched) only works on third-party cookies, so the heuristic blocking algorithm doesn't do anything if you block 3rd party cookies entirely. We plan to add detection of other tracking methods (Flas
11.
by unhush 12y ago
We do have a preloaded list of third-party sites to not block because they would cause too much breakage. Note that because PBadger is in alpha, this list is very short right now: https://www.eff.org/files/cookieblockli
12.
by unhush 12y ago
Note that Privacy Badger uses a browser history-dependent algorithm for blocking - when you first install it, it doesn't block anything because it assumes that third-party trackers are innocent until proven guilty. When it sees you bei
13.
by unhush 12y ago
Hi, I'm an EFF staff technologist and wrote most of Privacy Badger Firefox (though I didn't come up with the idea). It's often hard for us to find projects like yours, so we appreciate developers contacting us and telling us
14.
by unhush 12y ago
Hi, I'm the main author of Privacy Badger's Firefox version. You are 100% right; I'll point this out to the text authors. On the other hand, EFF's fanbase is generally very technical compared to the average person and I&
15.
by unhush 12y ago
maybe the hackpad creators will open-source and/or release upstream patches to etherpad! cough
16.
by unhush 12y ago
I'm aware that there's modules you can add to do those things. Are there public instances that have those installed? It's been a while since I used Piratepad et al.
17.
by unhush 12y ago
Hackpad is an Etherpad fork, so you might conclude that someone has already done the work of wrangling Etherpade code and making those patches. ;)
18.
by unhush 12y ago
It is often like that in Firefox.
19.
by unhush 12y ago
They don't do a great job of advertising why they're better, but semi-sensible keybindings (similar to Github markdown) and code syntax highlighting sold it for me. Also doesn't require a Google account to use. Also auto-embe
20.
by unhush 12y ago
My favorite parts of Hackpad were the features that weren't intended to have mass-market appeal (ex: code syntax highlighting, markdown-inspired keybindings, ability to easily create/delete accounts). These will likely be gone in
21.
by unhush 12y ago
Agreed 110%, but I would back up my Hackpad documents now. Claims of being able to sustain a business after acquihire when the parent company has no stated interest in keeping it alive seem extremely fragile.
22.
by unhush 12y ago
Thanks for the feedback! The tech team at EFF is pretty overloaded all of the time; we've hired outside contractors before but this is a project where it seems more efficient (and potentially more fun per person) to crowdsource. The sa
23.
by unhush 12y ago
In the case of the sample described in the post, there was a TLS handshake that was immediately terminated, followed by a client hello and the heartbeats. The client hello and heartbeats were sent in the clear. I conjecture that the TLS han
24.
by unhush 12y ago
For anyone following along at home, we looked into this and it seems to be caused by the fact that you're using an older operating system that doesn't ship with the StartCom CA cert that eff.org uses. So probably not an attack. :)
25.
by unhush 12y ago
Emailing me works. yan at eff dot org.
26.
by unhush 12y ago
Are you joking? If not please report what error you're getting in Chrome.
27.
by unhush 12y ago
I helped write this post. Note that we're very interested in anyone who has been keeping raw packet logs from before the Heartbleed vuln. was public. If you find 18 03 (01 | 02 | 03) 00 03 01 in them, please let me know or post pcap fi
28.
by unhush 12y ago
Is it possible for you to allocate those funds to (specifically) funding a security audit and code refactor of OpenSSL? Cryptography researcher Matthew Green has stated interest in starting a campaign: https://twitter.com/ma
29.
Tips on Heartbleed recovery (other than "Change your password")(zyan.scripts.mit.edu)
1 points by unhush 12y ago|0 comments
30.
by unhush 13y ago
EFF blog post: https://www.eff.org/deeplinks/2013/11/aaron-swartz-hackathon... Freedom of the Press Foundation blog post: https://pressfreedomfoundation.org/blog/2013/11/help-us

More ›