eldridgea

I'll definitely admin that I'm interpreting the data to fit their own political/moral views but the conclusion "10 billion on drug incarceration almost pay for themselves through reductions in health care costs and lost productivity" seems that economically the difference in incarcerating addicts and providing them healthcare is negligible.

If the economic difference is negligible then what reason is there for incarceration over providing healthcare? Crime did drop in the 90s but there's also the reality that those with criminal records are predisposed towards recidivism, a complicated issue on its own, but it seems that incarceration leads itself to staying criminal while healthcare at least has less direct links to criminal recidivism.

Google publishes a lot of their work at https://rework.withgoogle.com/.

Also, Google's former head of people (Lazlo Block) founded a company that is focusing on that area: https://humu.com/.

While I wasn't always a fan of Google People/HR procedures while I was there, I did always appreciate the data-driven/research approach Lazlo and the People team took.

Troy specifically addresses WebAuthn in that post but only as a 2fa mechanism (which is an optional way to use it). He doesn't address it as a standard to replace passwords.

His premise of the post is that passwordless mechanisms are non-standard and difficult to use. WebAuthn can be used easily and implemented by anyone as it is now an open standard.

Trpy's article is great, as always, and I'm not invalidating anything he said. But this particular post of his is intentionally a more short-term look at proprietary solutions, not a longer term view of evolving standards.

In the case of Cloudflare specifically, they support Privacy Pass[0], an extension that allows solving one captcha to allow you through to multiple sites without de-anonymizing or reducing the security properties that tor provides.

[0] https://blog.cloudflare.com/cloudflare-supports-privacy-pass...

AFAIK, there have been several legislation changes (often at the behest of Disney) to extend copyright protection length. It was often done retroactively through several years of content. So many years of material were extended through this specific year instead of works expiring for a particular limit for work (e.g. 75 years).

The US government doesn't need a warrant for emails older than 180 days that are still on the server.

Emails older than that are considered abandoned[0] and treated the same as an abandoned storage unit, due to an old law from the time when email was regularly downloaded and purged from the server by local email clients.

[0] https://www.businessinsider.com/when-can-the-government-read...

Just so you know - I had the same problem but emailed Yubico recently and they said they made some changes because of this defect and sent me a new one for free. It's been at least 2 months and there's been no degradation like my first one.

More from the authoritative DNS servers than the registrar but with DNSSEC enabled, DANE[0] is a pretty good system.

Google deemed the failure rate of ~2% too high but I hold out hope that banks and other high value targets will use DANE in tandem with the traditional HTTPs CAs and use something like HSTS except instead of requiring HTTPS for a particular domain, will require DANE. Maybe something like viewing your account will accpet a CA signed cert, but an actual money transfer goes through a subdomain that required DANE.

[0] https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Na...

I believe this was in response to the SHAttered[0] attack which was a demonstrated SHA-1 collision

[0] https://shattered.io/

As tomcooks said, you can't directly add https to a DNS server address in your settings and have it work.

However some DNS providers support the new standard DNS-over-HTTPS (including Google and Cloudflare). Some also support the alternative new standard DNS-over-TLS (including Cloudflare).

While support for these encryption methods support is offered by some DNS providers, your client devices may or may not support the new encryption methods. Firefox is currently implementing DNS-over-HTTPS so at least Firefox DNS requests will be soon able to use it and Google is currently beginngin to implemen it in Android. The new encryption methods are still in Draft status so expect to see adoption increase as they near completion.

I believe the parenthetical saying "generally unsubstantiated reasons" is referring to the "employment" part, not the "housing" part. Equifax (and their competitors) like to sell their credit data to employers under the guise that those with good credit scores will be good employees, despite basically no data backing up this claim.

This is a common talking point against the FCC retaining Title II classification. While I don't disagree in principle, until Congress acts, Net Neutrality is only achievable in the US via Title II enforcement by the FCC. The FCC reclassifying ISPs as Title I without a corresponding push to have an alternative Net Neutrality plan in place was irresponsible, unethical, and against the will of the constituents of all parties. Ire at Congress for not acting is completely reasonable, but acting as if what the FCC did was in any way acceptable is not.

What do you mean by token offenses?

"Fast lanes" as a general product aren't likely going to be offers on the company home page, they're going to be in the private peering agreements they have with larger companies. This has already happened. [Netflix had to pay Comcast](https://consumerist.com/2014/02/23/netflix-agrees-to-pay-com...), and [Comcast throttled their VoIP competitor Vonage](https://www.wired.com/2006/03/comcast_throttling_vonage_user...). Vonage and Netflix started working again but the why was never made public. It seems likely that paying for fast lanes was involved. These aren't the cold hard facts we'd like to have about what exactly happened, but they're clear violations of Net Neutrality that were resolved ambiguously.

As far as negative effects in general, beyond fast lanes, there's more than a few examples:

* [AT&T blocked FaceTime](https://www.savetheinternet.com/att-facetime) * [Verizon blocked Google Wallet](http://money.cnn.com/2011/12/06/technology/verizon_blocks_go...) * [Verizon throttles video](https://arstechnica.com/tech-policy/2017/07/verizons-throttl...) * And [a lot more](https://www.freepress.net/blog/2017/04/25/net-neutrality-vio...).

The violations are often subtle, and haven't always affected everyone, but the negative effects of the lack of NN are not hypothetical.

If you're signing into a Google app, it'll kick you over to the Google Smart Lock app. https://itunes.apple.com/us/app/google-smart-lock/id11520663...

I don't think it supports things like Safari though.

I use the Brave browser to address this. It's based on Chromium with built in features based on Privacy Badger and HTTPS everywhere. It also replaces "Chrome view" so that if you click a link from an app and it opens up with the app, you're still getting the privacy features. And since it's Chromium based I don't see the sluggishness I do in Firefox for Android.

Those sounds good but I'm shying away from Firefox at the moment for security. I love their open source approach and would prefer my browser to be open source.

However Firefox does not have tab sandboxing, extension sandboxing, or process isolation. These are pretty standard features in most browsers now (except for process isolation which seems to be Chrome only at present).

I'm not sure if this is exactly what you're looking for, but I think this will do that:

https://code.google.com/p/nsscache/

When you updated your info did you update it in Google Wallet? Google Checkout was only very recently completely deprecated so make sure it is updated at http://wallet.google.com.

Also, do you have any communication from when you configured the account? That would be useful.

What may have happened is you set up a Google Apps For Your Domain account (which would have been free at the time of your registration). If that is the case you would need to login into Google Wallet with your Google Apps account - xxxx@calculatedriskblog.com and update the payment information for that account (as opposed to your normal Gmail).

I do a bit of magic (the performance art, not the card game) and attend lectures. Typically it's just a guy with no tech demoing new effects and methods. At the end they always sell lecture notes. It's a detailed overview of everything they did that night and it's usually indexed well so I can jump straight to a particular effect I want to learn.

I really enjoy this approach. It allows my to pay attention without worrying about remembering or note taking during the presentation and still allows me an almost perfect reference.