HNHacker News
TopNewBestAskShowJobs

jdp23

7,710 karma · joined June 4, 2010

Strategist, activist, software engineer ...

@jdp23 and http://facebook.com/jdp23 are the best ways to get in touch with me, or leave a comment somewhere on http://talesfromthe.net/jon

submissionscomments
jdp23··on Ex-Reddit CEO on Twitter moderation
Nope. There's been abuse in text-only environments online since forever. And lots of people have left (or rarely post on) HN because of complaints about the enviroment here.
jdp23··on DuckDuckGo for Mac beta now open to the public
Is there a way to block Javascript? I couldn't find it on a quick tour through the preferences.
jdp23··on American Data Privacy and Protection Act
None yet. Big tech companies have pushed various versions of the Bad Washington Privacy Act, which is weaker than CCPA. In 2021 and 2022, civil liberties, civil rights, and immigrant rights groups have supported the People's Privacy Act, which is a lot stronger than CCPA or ADPPA, but tech lobbying kept it from even getting a hearing. We'll see what happens in 2023 ... the Bad Washington Privacy Act's sponsor is retiring from the Senate (and is generally expected to become a full-time lobbyist), so the landscape should be different.
jdp23··on American Data Privacy and Protection Act
Yep. We've fought them off here in Washington ... but they and Amazon just took it to other, more pliable states. Todd Feathers and Albert Ng had a very good article on this in The Markup a few months ago https://themarkup.org/privacy/2022/05/26/tech-industry-group...
jdp23··on American Data Privacy and Protection Act
There's been some good reporting on the lobbying on ADPPA

What Microsoft, IBM and others won as the privacy bill evolved - https://www.protocol.com/newsletters/policy/cloud-enterprise...

Privacy bill triggers lobbying surge by data brokers - Privacy bill triggers lobbying surge by data brokers

jdp23··on American Data Privacy and Protection Act
It's not clear that ADPPA will move forward. The current version preempts California's CCPA/CPRA legislation, and (big surprise) California doesn't like that. But, that's far from the only issue with it. Here's an update from a couple of weeks ago which discusses some of the problems, as well as potential next steps. https://thenexusofprivacy.net/adppa-new-compromise/

And, here's EFF's position: " Americans Deserve More Than The Current American Data Privacy Protection Act" https://www.eff.org/deeplinks/2022/07/americans-deserve-more...

jdp23··on New documents reveal scale of US Government’s cell phone location data tracking
Agreed that this has been going on for years and Congress has done nothing to date. But ...

The Fourth Amendment Is Not For Sale Act, sponsored by Senators Wyden and Paul, has a hearing tomorrow morning -- and may actually have decent chance to pass Congress this session.

If you're in the US, EFF's "Tell Congress: The Fourth Amendment Is Not For Sale" page has a web form to encourage your representatives to support the bill. https://act.eff.org/action/tell-congress-the-fourth-amendmen...

jdp23··on US State Privacy Legislation Tracker
Exactly right. The tech and advertising industries and their allies want weak federal regulations (with no private right of action, and lots of exemptions) that pre-empt stronger state laws. One way to get there is to get multiple states to pass roughly-similar weak regulations and then argue that there's "consensus" so might as well make it a federal standard.

So, an Amazon lobbyist gave the version they were trying to get passed in Washington to a Virgnia state legislator who introduced it there and (since Amazon had just invested a zillion dollars in Virgina) they whisked it through. Then they used that as the basis for Colorado's law. This year when they tried to pass it again in Washington one of the arguments was "it aligns with other states". Sigh.

https://www.reuters.com/investigates/special-report/amazon-p...

jdp23··on Meta is not threatening to leave Europe
Yeah really. In today's polarized political climate, criticizing Facebook is one of the very few things most people agree on!

OK, enough unity, now let's get back to partisan mud-slinging :)

jdp23··on Amazon lobbyists who kill U.S. consumer privacy protections
It's only one data point, but here in Washington state grassroots organizers have stopped Amazon (and Microsoft) from passing the Bad Washington Privacy Act three years in a row now. The key has been the Tech Equity Coalition, a loose coalition group of organizations and individuals (including civil rights, labor, immigrant rights groups). Local progressive activists have also gotten deeply involved, and of course we've gotten help from national groups like EPIC, Consumer Federation of America, and EFF. We also got the King County Council to pass a ban on government use of facial recognition -- and that's Amazon and Microsoft's home turf!

Of course, we still haven't passed strong privacy legislation yet. In the 2021 session Amazon and Microsoft's lobbying was enough to prevent the bill we brought from even getting a hearing. So, we'll see what happens in 2022. But it feels like momentum is on our side.

jdp23··on Rocky Linux: A CentOS replacement by the CentOS founder
That trick never works!
jdp23··on Reddit Claims 52M Daily Users, Revealing a Key Figure for Social-Media Platforms
Excellent point!
jdp23··on Pending Postal Service Changes Could Delay Mail and Deliveries
Many states have requirements that ballots must be received by election day.
jdp23··on Covid-19’s impact on Tor
Stay-Home Orders: Your Rights During the COVID-19 Pandemic (ACLU-Texas): https://www.aclutx.org/en/know-your-rights/stay-home-orders-...

How to Think About the Right to Privacy and Using Location Data to Fight COVID-19 (by Jay Stanley of the ACLU) : https://www.justsecurity.org/69444/how-to-think-about-the-ri...

Apple and Google Announced a Coronavirus Tracking System. How Worried Should We Be?: https://www.aclu.org/news/privacy-technology/apple-and-googl...

ACLU sues federal agencies seeking records of facial-recognition use at airports and U.S. border: https://www.washingtonpost.com/technology/2020/03/12/aclu-su...

jdp23··on Senate leadership pushing a surveillance bill as Americans focused on Covid-19
Good news: due to strong pushback, they've dropped this proposal, and just did a straightforward short-term extension -- https://www.politico.com/news/2020/03/16/senate-short-term-e...
jdp23··on Ask HN: One-person SaaS apps that are profitable?
Great point. Really impressed with how you've approached it!
jdp23··on EverCrypt, a cryptographic library that is provably secure against known attacks
Great perspective ... and, very impressive work!
jdp23··on Tell HN: Google removing Gmail access from IFTTT
Both are true simultaneously:

* professional security is needed, and this is what it costs

* the cost is more of a barrier to smaller companies (and hence provides an advantage to larger companies)

It seems like an inherent tension; I'm not sure how to get around it.

jdp23··on The Intercept Shuts Down Access to Snowden Trove
True. Still, I agree with the GP poster: very little has changed as a result. The USA Freedom Act had some improvements but also made some things worse; FISA Section 702 was renewed without significant changes in early 2018.

Before Snowden, civil liberties activists (including me!) used to say "If people knew the extent of mass surveillance, they'd be up in arms - and we'd see some real changes." But no.

jdp23··on Redis Labs Raises a $60M Series E Round
There was a software tools company in the 1990s that got up to Series AA. I remember thinking "please don't let this ever happen to my startup".
jdp23··on Rappler CEO Maria Ressa Arrested for Cyber Libel
Here's an excellent interview with Maria Ressa (by Kara Swisher) from late last year that gives some context.

https://www.recode.net/2018/11/26/18111859/maria-ressa-rappl...

jdp23··on Opinion: A.I. Could Worsen Health Disparities
Great comment! One thing I'd add:

> until we minimize our personal and systemic biases and disparities, we can't hope to use our fancy mathematical models to minimize them for us.

And as long as technologists are in denial about the extent to which personal and systemic biases influence reality (as we're seeing in this thread), tech will continue to reinforce and magnify these biases.

jdp23··on Opinion: A.I. Could Worsen Health Disparities
Yeah really!

There's plenty of evidence that medicine today has deeply embedded biases. Disparities in Black maternal health outcomes have been thoroughly covered in the literature and even mainstream media.

On the other hand there's plenty of evidence that ML and AI magnify inequality in other areas.

So relying on technology as a magic bullet to solve these societal problems seems ... naive.

jdp23··on Google will shut down Google+ four months early after second data leak
Yikes. A release in November introduced an API bug that was active for about 6 days, impacting 52.5 million users.

* With respect to this API, apps that requested permission to view profile information that a user had added to their Google+ profile—like their name, email address, occupation, age (full list here)—were granted permission to view profile information about that user even when set to not-public.

* In addition, apps with access to a user's Google+ profile data also had access to the profile data that had been shared with the consenting user by another Google+ user but that was not shared publicly.

jdp23··on For Decades, Southern States Saw Thanksgiving as an Act of Northern Aggression
This was a really great response, thanks so much!
jdp23··on Texans say voting machines changing straight-ticket choices
A lot of these machines are ancient, so quite possibly of that vintage. And yeah, in general you're very right not to have any confidence.
jdp23··on Phrack Magazine (1985-2016)
Oh if only there were an alternative C-like language that could guarantee memory safety!
jdp23··on Phrack Magazine (1985-2016)
Right. Nate Lawson has some thoughts on why at https://rdist.root.org/2010/05/03/why-buffer-overflow-exploi... and https://rdist.root.org/2010/05/05/why-buffer-overflow-exploi...
jdp23··on Phrack Magazine (1985-2016)
That's how I remember it too - demystifying an arcane technique.
jdp23··on Phrack Magazine (1985-2016)
Much of the early work on buffer overrun exploitation was published in Phrack. The article Brandon Baker and I did for IEEE Security and Privacy had a sidebar on "Nontraditional literature on buffer overruns" that's got some greatest hits like AlephOne’s Smashing the Stack for Fun and Profit from 1996 [1] and The Advanced return-into-lib(c) Exploits from 2001 [2]. Over the years, a surprising number of people have told me that this was their favorite part of the article!

[1] https://www.phrack.org/show.php?p=49&a=14

[2] https://www.phrack.org/show.php?p=58&a=4

← PreviousPage 2 of 34Next →