danyork

If you live in Canada, this site provides a way to communicate with your MP about why Bill C-22 threatens the safety, livelihoods, and national security of all Canadians.

@ruthvik947 - Thanks... but now I have the option to either "Create account" or "Sign in". How do I know that I even want to create an account and check it out? It would be great if there was a way to see at least some of the information so that I could decide whether I want to do that step of creating an account.

How do you get into it to see the site? I'm offered the options of signing in with Google or entering my email address. When I enter an email address, it says "Couldn't find your account"

Correct, but the ActivityPub plugin has been available for a long time for open source WordPress. This news today now makes it available to the millions of people who host their sites on WordPress.com - and without them having to install a plugin or anything else. It's just now part of the WP.com hosted platform. And that's rather awesome!

My understanding from reading a number of articles about this "helpful content" update from Google is that they want to get rid of pages like what you describe and instead prioritize pages that get right to the point. So perhaps you'll get what you are asking for.

Good to know. Thanks for providing this viewpoint as a customer.

The Register had an article building off this post with some more conjecture: https://www.theregister.com/2022/07/27/apple_networking_traf...

The list of authors on this paper is rather amazing. Some of the biggest contributors / "names" within the cryptography community.

I find it frustrating to read articles like this. To me, I see encrypted messaging helping keep children safe from having their information intercepted and mis-used by others. I think it's a matter of what you think are the greatest threats.

Best wishes, Brad! Thanks for all you've done from the LiveJournal days on through Go and everything. Looking forward to learning what comes next!

For more information about this transaction, please see this post from one of the Internet Society Board of Trustees members who voted for the sale (as did they all unanimously) - Why I Voted to Sell .ORG - http://www.circleid.com/posts/20191127_why_i_voted_to_sell_o...

I like how this is a very simple way to explain to NON-technical people how much encryption plays a role in their daily lives.

Agreed! I find many of the recommendations useful. (I also use Pocket personally for bookmarking sites.)

Actually, about 16% of all DNS queries in Asia are being validated by DNSSEC, per APNIC Labs: https://stats.labs.apnic.net/dnssec/XD?hc=XD&hx=1&hg=1&hr=1&...

And if you scroll down the page you will see that validation rates are significantly higher in some countries in Asia.

Is there a specific article or announcement about this? The link just takes me to LinkedIn's main page.

DNSCrypt and other solutions typically involve changes to the DNS resolver in the underlying operating system. That's a lot harder to get changed and deployment can take a long time.

DOH can be implemented directly inside of the web browser application, since those browsers are obviously already doing everything over HTTPS. So the browser developers just have to build in a DNS client. From their perspective, I would see that being much simpler. And deployment is as easy as the next browser application update.

Yes, it works quite well to get a sense of the room. The advantage of humming is that people can change the volume to match their level of agreement with the question being asked. If they strongly agree with the question, they can hum very loudly. If they only weakly support it, they can hum quietly. The chairs of thesession can then get an audible sense of the level of agreement (or not).

Often in the sessions I've been in, there may be two hums taken - one for those in support of a question, and one for those opposed. Often there can be a clear distinction - but sometimes the results can be inconclusive if both sides seem to have equal volume. (But that, too, is helpful to the chairs as they can get a sense that the people in the room are divided.)

As of this moment, there are 8,521:

https://www.rfc-editor.org/rfc-index-100d.html

(The RFC Editor site is the official source for RFCs: https://www.rfc-editor.org/ )

What a fun - and educational - post about the full and complete journey from the moment someone starts typing “I love you” on a phone to when it gets read on the other end. That was great!

This post captures so many of the thoughts I've had about how it is NOT a simple answer of "going back to self-publishing on our own websites", because the nature of running websites is no where near as simple as it was. I have continued to write on my own blogs since 2005 ... but with all the ever-present security issues - and the need to do constant updates to my servers/vms, it's hard to keep up. The siren call of simple, centralized systems that take care of all of that for you is indeed a strong call!

I use three tools:

1) Things app on my iPhone/iPad/Mac ( https://culturedcode.com/things/ ) - it's a quick place to jot down quick thoughts or notes when I'm in the middle of doing other things. (I use it for my "to-do" lists - and it syncs beautifully across my other Apple devices.)

2) MindNode ( https://mindnode.com/ ) - if I have a group of thoughts, or if I have a few minutes, I'll often create a quick mind map with MindNode and collect my thoughts there. (It also syncs beautifully across all Apple devices.) I also have a couple of specific mind maps for tracking projects or article ideas, etc. So if my creative thought falls into one of those, I'll open up the mind map and add it there.

3) Evernote - For longer lists or ideas, I'll typically create a note inside of Evernote. I've been using it for years... although with many of the UI changes and general uncertainty about the company's future direction, I'm considering migrating my collection of notes/notebooks to something else (so I've been reading this HN discussion).

I'll note that I'll use these three tools together. Often I'll jot a note into Things... and then later expand upon that into a MindNode mind map or an Evernote entry. So one is more "short term" capture of thoughts, while the other two are for longer term - and longer form - capture.

The challenge of using 3 tools is, of course, that there's no easy way to search across all of them.

P.S. And many times when I'm going to events, speeches, conferences, etc., I'll bring a pen and a notebook as that can be the fastest way to capture ideas.

The challenge with any server-side solution is the huge amount of caching that takes place within the web infrastructure. Many sites sit behind CDNs, but even without CDNs, many ISPs and enterprises run their own caching proxy servers on the edge of their networks. Browsers also have their own caching of recent pages. The result of all the caching is that it is possible that very few of the visitors actually connect to the origin server.

For that reason, most analytics systems use come kind of client-side tracking code that runs within the client web browser. That way it works regardless of whatever caching happens.

Very good analysis. I found myself thinking about this phrase:

> The mobile revolution is and has been by far the most powerful driver of centralization in the last 10-15 years.

Many of us who were active users of Skype in its earlier days (mid-2000s) might remember Skype's first attempt at a mobile client. They took all the distributed P2P goodness of the desktop client and tried to have that run on the mobile environment.

The result was sadly a smartphone app that was slow and rapidly drained your battery. For those of us with many Skype group chats open, the mobile client was basically unusable.

So Microsoft/Skype had to go back and rethink the mobile client. To your points in your reply... they made it a "thin client" with all the power in the centralized servers.

As they did that, it seemed from the outside that they determined over time that maintaining a desktop P2P source code and a mobile thin-client/server source code didn't make sense. And so ultimately the desktop P2P was abandoned and everything became client/server. (Which is the case now - Skype on your desktop is basically a wrapper for a web client.)

And so... the quest for a good mobile user experience wound up being one of the drivers for centralizing one of the original decentralized P2P apps. [1]

Good analysis!

[1] Yes, there were, I'm sure, many other contributing factors, including the issues around the supernodes that led to one of the major outages. And yes, I do realize that Skype, even its earliest form was NOT a completely-decentralized communications app. They did have a centralized mechanism for logins / authentication and also for PSTN gateways and other services.

Similarly, the huge buzz over the past few weeks about Mastodon as a distributed/decentralized micro-blogging service has been positive. People starting to learn more about federation and decentralization. Good to see.

I think these are all key points. The user experience in Slack is so easy, convenient and polished. It takes friction away from communication, allowing effort to be focused on the tasks at hand.

If she's just looking for something to show that she has some level of technical skill, I'd second the suggestion others have made for CompTIA certifications. They are a good base level cert - https://certification.comptia.org/

Depending upon what type of law she is planning to go into:

- A+ is targeted at basic devices and operating systems (think: very basic tech support)

- Network+ is basic networking

- Security+ is basic security

etc.

Probably the best way to start.

You also could run your own DNS resolver on your local device and do the DNSSEC validation there.

One example of this bundled up in a way that is easy to install is DNSSEC-Trigger: https://nlnetlabs.nl/projects/dnssec-trigger/

More info in this blog post from Red Hat: http://developerblog.redhat.com/2015/04/14/writing-an-applic...

Sure, the client application can validate DNSSEC if it is using a DNS library that supports DNSSEC. Examples include:

- getDNS - https://getdnsapi.net/

- ldns - https://nlnetlabs.nl/projects/ldns/

The application simply has to perform the actual validation itself (versus using another resolver).

Correct. And if the local resolver is sufficiently close to your client that there is very low risk of an attacker getting into your local network, then you can have a higher degree of trust in those validated answers from your resolver.

You are not alone. I've been online for over 30 years now, since the mid-1980s, and deeply involved in Internet technology. And yet I still find applications of that technology that are wonderfully magical. (This radio.garden is one of them!)