Benjamin Cook [email protected]

Feminismus und Gleichheit

Hier noch mal auf die Idee von @(: aNNa :) blume hin. :-)





















Tags: #feminismus #feminism #egalitarism #gleichheit #emanzipation #comic #comicstrip #ravenbird #2016-07-26

We, the Debian project and the Tor project are enabling Tor onion services for several of our sites. These sites can now be reached without leaving the Tor network, providing a new option for securely connecting to resources provided by Debian and Tor.

The freedom to use open source software may be compromised when access to that software is monitored, logged, limited, prevented, or prohibited. As a community, we acknowledge that users should not feel that their every action is trackable or observable by others. Consequently, we are pleased to announce that we have started making several of the various web services provided by both Debian and Tor available via onion services.

While onion services can be used to conceal the network location of the machine providing the service, this is not the goal here. Instead, we employ onion services because they provide end-to-end integrity and confidentiality, and they authenticate the onion service end point.

For instance, when users connect to the onion service running at http://sejnfjrq6szgca7v.onion/, using a Tor-enabled browser such as the TorBrowser, they can be certain that their connection to the Debian website cannot be read or modified by third parties, and that the website that they are visiting is indeed the Debian website. In a sense, this is similar to what using HTTPS provides. However, crucially, onion services do not rely on third-party certification authorities (CAs). Instead, the onion service name cryptographically authenticates its cryptographic key.

In addition to the Tor and Debian websites, the Debian FTP and the Debian Security archives are available from .onion addresses, enabling Debian users to update their systems using only Tor connections. With the apt-transport-tor package installed, the following entries can replace the normal debian mirror entries in the apt configuration file (/etc/apt/sources.list):

  deb  tor+http://vwakviie2ienjx6t.onion/debian          jessie            main
  deb  tor+http://vwakviie2ienjx6t.onion/debian          jessie-updates    main
  deb  tor+http://sgvtcaew4bxjd7ln.onion/debian-security jessie/updates    main

Likewise, Tor's Debian package repository is available from an onion service :

  deb tor+http://sdscoq7snqtznauu.onion/torproject.org   jessie    main

Where appropriate, we provide services redundantly from several backend machines using OnionBalance. The Debian OnionBalance package is available from the Debian backports repository.

Lists of several other new onion services offered by Debian and Tor are available from https://onion.debian.org and https://onion.torproject.org respectively. We expect to expand these lists in the near future to cover even more of Debian's and Tor's services.

Excellent write up on the problems with CloudFlare: http://cryto.net/~joepie91/blog/2016/07/14/cloudflare-we-have-a-problem/ 

I've heard hand sanitizer is key to not getting sick

I guess I'm going to promote a bunch of hollywood stuff, but I feel like though I don't like promoting proprietary films, there's some other good stuff going here, so I'm going to blather anyway.

So, Morgan and I saw the new Ghostbusters movie last night. It's a "reboot movie", and I'm not normally a huge fan of that, but I have to say, that's the most fun I've had in some time. It's a great movie that does a stellar job of giving a nod to the original series while taking things in a new direction. And while the original was a comedy, this one is even more of a comedy. (It's also a bit more action heavy than the original in some parts.)

I'd also argue that this is probably the most gender-progressive scifi-ish (it's not hard science fiction, obviously) film around, or at least that I've seen. It does a good job of having a team of all women heroes who hold their own and do their own things. It passes the Bechdel test by a lot, for sure. But it's more than that... you don't see women in these roles. And I like the way it was handled: it wasn't just a "replace the male roles with women and we're done"; much of the humor was in the style of recent prominent women comedians (similar stuff to in the movie Spy, if you've seen that), while not losing track of its main focus.

The main villain is also pretty much a "Men's Rights Activist" type character. There's a nice scene (minor spoiler) where he's complaining, "you don't understand, I was bullied and nobody liked me" and the heroines are like "yeah but... we were too, we do understand" and the villain just shuts them down with "nope, you can't" and ends that conversation. In some ways, the recent Star Wars film was claimed to have a similar villain, and in some ways yes, but I think it's more direct here. But again, it doesn't become so focused on it that it loses track of what's happening in the film.

There's one way in which the film falls short on social progressiveness: the black woman in the film is like "You all are scientists, but I'm street smart", and much has been said already (correctly) on, why play that trope? Why can't the black woman be a scientist too? It's a fair criticism; while the film received a gender reversal from the original film, the racial problems from the original film returned. Though! I do think the film is a little bit better than the original (though you wouldn't guess it by watching the trailer), because in the original film the person of color shows up at the end of the film as basically muscle and has no chance to play any formative role (or develop any serious character), whereas here that character manages to play a pivotal role in developing the team and has much more character development than in the original (and joins the team by her own agency, not just because "it's just a job").

Here are two final anecdotes about watching the film (and not the film itself). We were sitting in some reclining chairs, and there was an kid next to me who must have been about eight or nine. He clearly had seen all the ghostbusters films and was so excited at one point that he reclined his shair so he could lay in reverse, propping his head up at the end of the foot part of his chair, and he was calling out excitedly all the nods they made to the originals, and getting excited about all the action. That kid wasn't upset about the new film "destroying his childhood"... he was in his childhood, and the other films had already played a role, but he seemed excited to have this experience as well. There's a lot of angry people on the internet saying "they ruined the tradition" by including a bunch of women in the roles of the Ghostbusters, but that doesn't make a lick of sense... the original Ghostbusters movie had already "ruined the tradition", if you consider the prior movie of Ghost Busters (though it's unclear how much inspiration it played) as its predecessor. And Morgan said it well: "I feel like this movie was for me. When I was a kid, I always wanted to be a Ghostbuster, but felt like I wasn't allowed to be." So, while some might be claiming it ruined their childhood for pretty silly reasons, there's good reasons for it to be a nice improvement on the experiences of someone else's.

Anyway, it's "just a movie", but if you're looking for some low-brain-activity entertainment, I'd recommend it.

Considering Facebook which is part of the Prism system still sees all the who talked to who for how long data

and that It's tied to phone #'s and thus totally non-anonymous,

and that authentication is optional and not well indicated

and that data is storred unencrypted and then backed up to the cloud

and that the client is closed source so could easily be instructed to silently drop encryption and know one would know...

It's really kinda hard to call it "secure". or even "better then plain text"

So for me not secure, and not verifiable (closed source).

A false sense of security is worse then no secuirty at all.

Back in March, I introduced a new project, AkariXB, which is a bot for the decentralized jabber/XMPP network, and today I'm releasing version 0.4!

The main changes for this release include:

• New Keyword (dictionary-like) command type.
• New Alias command type.
• Basic variable replacement in replies. If a command reply contains {a|b|c}, one of the three characters will replace the whole thing, at random.
• Basic activity handling.
• Option to reply to commands always in private.
• Support for password-protected MUCs.
• Configurable popup notifications.
• Configurable XMPP keepalive timeout.

The source code for this release can be downloaded from linux-apps.com, part of the opendesktop.org network.

They're in the middle of a big migration/renovation, so if the "Download" button doesn't work for you, scroll down to the "Files" section and get it from there ;)

Development repository is at gitlab.com/akarixb/akarixb-dev. At this time, using the development version is probably better.

The main dependencies are Qt and the QXmpp library. Qt 5.x is preferred. Building with Qt 4.8 still works at this time, but it's not officially supported. Most GNU distributions have QXmpp built for Qt 5 anyway.

I hope this can be included in some GNU distributions soon, but for now, you'll need to build it yourself ;)

UPDATE: It's already in Mageia 6's repositories \o/

Cheers! o/

https://jancoding.wordpress.com/2016/06/27/akarixb-v0-4-a-jabberxmpp-bot-released/

Browsing to: https://www.similarweb.com/blog/social-media-usage

and got this:

JavaScript Disabled

This website is using a security service to protect itself from online attacks.
The service requires full JavaScript support in order to view the website.
Please enable Javascript on your browser and try again. 

Reference ID: 49599d410354a0fc5973a143fcf8e334

Really.. a Security thing that you run on MY machine to protect your server? Aside from smelling of total BS. I can't see how runnig JS on my machine would protect their server Since 99% of attacks on websites are NOT done in a browser. And hey What about MY security you guys? Not even a nod to that? no, "We understand that you might want to disable JS because..."?

And what about failing gracefully.. Want to protect yourself. Anyone coming in that looks suspicious throw them over to a non-iteractive flat HTML version of your site thus removing all chance of XXS or PHP code insertion, SQL injection, etc. But No you'd rather just blame the user with a warning that makes no sense.

I'm gonna follow up on this one and actually ask WTF!

Hmmmmm.. ok, seems the message shoud read "Sorry we hate Tor".

As a first stage of testing I went with no JS but no Tor.. Worked fine.. Very intersting..

So does it work with Tor and JS?

that results in:

Cookies disabled

This website is using a security service to protect itself from online attacks.
The service requires full cookie support in order to view the website.
Please enable Cookies on your browser and try again. 

Reference ID: 4357306db8905c61e8cdbfa6fce0057e

Seems that works.. kinda as I'm still routed through privoxy and third party or non session cookies get crunched. as well as adds and other annoyances....

Looking at the src of the page that was finally served up:

• Usual tracker BS (GA,Yoast,Piwik,FB,etc)
• Clearly a WP site (no wonder they are nervous.)

Ok, so we have a Wordpress site, that allows access from Tor given the right conditions (cookies set), And this is gonna keep them safe.. So not the case. I see WP attacks thrown at my non-WP site all the time and none of then try to load a main page. And if this is somethig in their reverse proxy then the attack script only needs to get the right cookies and then it can waltz right through.

This statement could be the leitmotiv of the Free Software Foundation (FSF) about the LibrePlanet conference.

"Make it better every year."

As an FSF intern during the winter and spring of 2016, I had the opportunity to be around FSF's tech team during LibrePlanet preparation, and we spent a lot of time making the streaming and recording work as well as possible so that people who were not in each talk could still watch it (all the recordings are already up on media.libreplanet.org). https://u.fsf.org/1sn