pakled_engineer

Since Cloudflare has full China access the goal would be to take over the local streaming market I guess, sell Xiaomi or MS phones with streaming packages that likely MS will provide or lease out.

Can also just script shell commands and create levels of abstraction to suit whatever simple layer of abstraction suits you. This is what things like Nautilus File Manager do to manipulate files with a mouse.

Then scrubbed traffic is passed to Snort (or use Suricata), with a ruleset to look for attack signatures. You can update rulesets from mailing lists https://lists.emergingthreats.net/mailman/listinfo/emerging-... and make your own by following whoever on Twitter is involved in Android/iOS security like @pof (Pau Oliva). There are specific mobile "emerging threat" rulesets too https://lists.emergingthreats.net/pipermail/emerging-sigs/20...

Now you can install Ublock Origin on your phone browser and most of the work it has to do is already done saving memory and bandwidth. Here you can experiment with custom rulesets for how pages get displayed, whitelist certain objects you may wish to look at and not blindly block. To further go down the rabbit hole you can build your own mobile version of FF on your VM, ripping out all these harmful things: https://sites.google.com/a/chromium.org/dev/Home/chromium-se...

You can also set up a script on the VM to update Android on AWS. If say there's a new web views critical bug, and a patch is released your VM script (Ansible/Chef) can start an AWS instance, get the latest patch(s) and completely build a new system.img automatically. This can all be done with a custom app you write with the backend hosted on your VM, or with Termux or KBOX, and automate/abstract away all the ssh key logins and tasks with a script. Open your app see all available new Android patches, then click "Build" to automate your new system.img with your own signatures.

Of course you don't have to use any of these tools, you could learn about their innards then roll your own software. If you are a javascript developer have the pf firewall dump it into your custom interpreter on the VM, that can look for unusual behaviour and just pass scrubbed js to your browser on the phone.

The only solution I could come up with for Android/iOS was to run a remote digital ocean firewall to block all ads at the network level, and connect to it with a VPN. Everything else I've tried or implemented on the devices themselves ate up too much resouces or had to be dangerously elevated in privilege (NDK) just to stop the damn ads. A bonus of this method is you can also experiment with filtering known Android bugs before they reach your device if for whatever reason you can't update your system.img

Speaking of Prof. Zeldovich he's releasing this traffic analysis resistant messenging scheme with some grad students in October http://people.csail.mit.edu/nickolai/papers/vandenhooff-vuvu...

For example this course on Elliptic Curves http://ocw.mit.edu/courses/mathematics/18-783-elliptic-curve... I decided to take after going through djb IETF working group mailing list posts which are so detailed I wanted to understand the basic math involved. Every post he writes is so thorough it's typically almost a class in itself in modern security analysis http://www.ietf.org/mail-archive/web/cfrg/current/msg07335.h...

Also, I originally learned "real development" (my decade of hacking around C willy nilly modifying programs doesn't really count) from Sussman's "Adventures in Advanced Symbolic Programming" where you read chapters out of SICP and then work on assignments, with mini lectures built into them in just plain text http://ocw.mit.edu/courses/electrical-engineering-and-comput...

The manufactured pop has never been good, the difference is now I'm no longer a prisoner to MTV/Radio like I was in 1990, I can actually source and stream music worldwide and bypass major label pushed junk. A lot of music I used to mail order in the early 90s was all confiscated by border guards for either "obscene" album art or banned lyrics. Just happy the musical dark ages are over.

Or follow independent labels you like, let it be their F/T job to find artists. I follow Warp, Asian Man Records, Mint Recs, few others.

I thought Facebook was going to die out too then they became defacto telecoms in the developing world through WhatsApp/Internet.Org, and now have a billion users.

Just logically separating administrative VMs with credentials from email VMs would have been good enough to thwart this. We can always fork Qubes and play around with whatever other VM templates such as OpenBSD, seL4 x86/genode port or experimental encrypted overlay kernel.org kernels

Obfuscation won't slow down data scientists. To see this in action open your gmail account and notice there's (likely) no spam in your primary inbox. Those spammers spend considerable resources to obfuscate themselves from Google's filters yet still fail.

More info http://undeadly.org/cgi?action=article&sid=20140915064856 it provides hostnamed, localed, timedated, and logind to packages that have this as a hard dependency.

http://daserste.ndr.de/panorama/aktuell/nsa230_page-1.html

The act of just searching/visiting Tails homepage gets you tasked into XKEYSCORE. Get generic linux live CD, apply sunglasses, obtain wifi then get the Tor Browser Bundle and go nuts (after about:config disable javascript).^^

https://www.edx.org/course/introduction-functional-programmi...! is a MOOC in Haskell

>Set in the near future, huge megacorporations control and dominate entire economies. Their wealth and competitive advantage reside in the human capital of their employees and the intellectual property they produce. Corporations jealously guard their most valuable employees and go to great expense to keep them safe and happily productive. There is little point in traditional corporate espionage as new products are developed at a lightning pace; there is no time to capitalize on the intelligence acquired from a rival firm, it will be obsolete before it can be used. Companies now hire extraction agents to steal each other's top productive employees.

Does this mean that the CPC can now have 2 factor censorship? If they get past the great firewall they now have to get past Cloudflare too "We're sorry, this content is not available in your country as per request of Ministry of Public Security".

After you write/run a lot of tests to make sure the app does what it's supposed to (there's paid services for this kind of testing too) http://googletesting.blogspot.ca/2013/08/how-google-team-tes...

This React abstraction can use Chrome Developer Tools for debugging though, that's pretty awesome.

But again no massive ecosystem of libraries to simply plug in so unsure if 'secret weapon'. Also I have experienced the nightmare of trying to port non typed libraries to typed Clojure and falling into a rabbit hole of errors propagating. Haven't had the same problem with Racket but ecosystem is not even close to Clojure so anecdotes worthless.