July 2018 - cypherpunks-legacy

Re: [liberationtech] FB-like "Twitter-connect" soon. How can we avoid all this tracking?
by Sarah A. Downey 06 Jul '18

06 Jul '18

I'm writing to suggest a tech solution. I'm an attorney and privacy analyst at an online privacy startup in Boston called Abine<http://abine.com/>, and we developed a tracker-blocking browser add-on called DoNotTrackPlus<http://abine.com/dntdetail.php>(DNT+) with unique capabilities around social button tracker blocking. My response contains elements of shameless pluggery, but it's so relevant to the OP's call for a solution that I had to weigh in. DNT+ stops tracking in 3 ways: 1), by blocking Javascript requests; 2), by broadcasting the Do Not Track HTTP header <http://donottrack.us/> (it isn't mandatory that sites actually adhere to the request, although more of them have come out in support of it, like Twitter did last week); and 3), setting opt-out cookies for NAI-member ad networks<http://www.networkadvertising.org/managing/opt_out.asp>. It blocks social button tracking by default by cutting off the Javascript requests that build the buttons themselves, so it's a more aggressive--and also successful--method than simply broadcasting the passive Do Not Track HTTP header and hoping that whatever site you're visiting adheres to it. What really sets DNT+ apart, though, is that it safely rebuilds social buttons with identical placeholders. This means that you'll still see social buttons on web pages like normal, but they won't be tracking you. You can still use them, but your choice to do so necessarily re-enables tracking. It's *your *choice, however, not Twitter's or Facebook's or whatever other social network's. Of course, whatever info you choose to share with social networks is exempt from DNT+'s tracking protection. We're completely dedicated to privacy, so don't collect or track anything when you get DNT+ (unlike some other companies with ties to and funding from advertising companies). It has no ability to collect data about what sites you visit or any other web behavior. The tool can save your personal settings and preferences, but those are stored locally on your computer and are not visible to us. You can verify the fact that DNT+ doesnbt track you by using an app that monitors the requests made for your computer's information throughout the day. One example of an app like this is Live HTTP Headers<https://addons.mozilla.org/en-US/firefox/addon/live-http-headers/>; we have no affiliation with whoever makes it. Our software makes 1 request per day to your computer to ask our servers for updates on new tracker-blocking rules. You will be able to see that one request and what it entails; there is no further communication or transfer of information. You can also see in part A of our privacy policy<http://abine.com/privacypolicy.php>that "Abine will not track, store or transmit to any server or third party, information regarding users' behavioral data (to include web browsing activity), nor will we "deliver or help others deliver any targeted advertising to users" (part C). You can also check out our privacy blog<http://www.abine.com/blog/>(which I write) for more on our pro-privacy standpoints. We have a freemium model. Our mission is to give consumers control back over their private information online. Building tools for consumers that improve privacy is all we do. DNT+ is our free product, and it will always be free. Our focus is to make DNT+ a great product that people love, and by doing so, we hope that some people will like it enough to want to upgrade to paid products that offer additional privacy protection, such as our subscription service, DeleteMe <http://www.abine.com/deletemedetail.php>(and we've even posted a free, DIY set of instructions for that process <http://abine.com/optouts.php>). I hope that you find this useful, and please email me if you have any questions, comments, or suggestions. Happy Friday, -Sarah On Fri, May 25, 2012 at 7:32 AM, <liberationtech(a)lewman.us> wrote: > On Fri, May 25, 2012 at 02:33:06PM +0700, unclezzzen(a)gmail.com wrote 4.1K > bytes in 103 lines about: > : Even if the situation doesn't escalate in the future, like buttons > : are already spying on you /today/ (not on me, because I don't have a > : facebook account, but pretty soon twitter will be on my tail). > > I believe you are being tracked, even without a facebook > account. You are just 'anonymous user the dod' in some distributed > database at facebook. Maybe they aggregate this data, maybe they > throw it away after some period of time (hours, days, weeks, years). See > > http://yro.slashdot.org/story/11/10/18/1429223/facebook-is-building-shadow-… > as an example. Twitter, google, facebook, and others all have the capacity > to do this with ease. > > And just because you clear some cookies and log out of facebook, twitter, > etc, doesn't mean they stop tracking you. Here's the facebook example, > > https://www.eff.org/deeplinks/2011/10/facebook%E2%80%99s-hotel-california-c… > . > > And here's a couple of articles on how to track you without using cookies > or IP addresses, > > http://www.jasonmorrison.net/content/2010/three-ways-sites-can-track-visito… > > http://www.jasonmorrison.net/content/2010/three-ways-sites-can-track-visito… > . > > -- > Andrew > pgp 0x6B4D6475 > _______________________________________________ > liberationtech mailing list > liberationtech(a)lists.stanford.edu > > Should you need to change your subscription options, please go to: > > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > If you would like to receive a daily digest, click "yes" (once you click > above) next to "would you like to receive list mail batched in a daily > digest?" > > You will need the user name and password you receive from the list > moderator in monthly reminders. You may ask for a reminder here: > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > Should you need immediate assistance, please contact the list moderator. > > Please don't forget to follow us on http://twitter.com/#!/Liberationtech > -- *Sarah A. Downey* Privacy Analyst | Attorney Abine, The Online Privacy Company t: @SarahADowney | p: 800.928.1987 _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] FB-like "Twitter-connect" soon. How can we avoid all this tracking?
by Sarah A. Downey 06 Jul '18

06 Jul '18

I'm writing to suggest a tech solution. I'm an attorney and privacy analyst at an online privacy startup in Boston called Abine<http://abine.com/>, and we developed a tracker-blocking browser add-on called DoNotTrackPlus<http://abine.com/dntdetail.php>(DNT+) with unique capabilities around social button tracker blocking. My response contains elements of shameless pluggery, but it's so relevant to the OP's call for a solution that I had to weigh in. DNT+ stops tracking in 3 ways: 1), by blocking Javascript requests; 2), by broadcasting the Do Not Track HTTP header <http://donottrack.us/> (it isn't mandatory that sites actually adhere to the request, although more of them have come out in support of it, like Twitter did last week); and 3), setting opt-out cookies for NAI-member ad networks<http://www.networkadvertising.org/managing/opt_out.asp>. It blocks social button tracking by default by cutting off the Javascript requests that build the buttons themselves, so it's a more aggressive--and also successful--method than simply broadcasting the passive Do Not Track HTTP header and hoping that whatever site you're visiting adheres to it. What really sets DNT+ apart, though, is that it safely rebuilds social buttons with identical placeholders. This means that you'll still see social buttons on web pages like normal, but they won't be tracking you. You can still use them, but your choice to do so necessarily re-enables tracking. It's *your *choice, however, not Twitter's or Facebook's or whatever other social network's. Of course, whatever info you choose to share with social networks is exempt from DNT+'s tracking protection. We're completely dedicated to privacy, so don't collect or track anything when you get DNT+ (unlike some other companies with ties to and funding from advertising companies). It has no ability to collect data about what sites you visit or any other web behavior. The tool can save your personal settings and preferences, but those are stored locally on your computer and are not visible to us. You can verify the fact that DNT+ doesnbt track you by using an app that monitors the requests made for your computer's information throughout the day. One example of an app like this is Live HTTP Headers<https://addons.mozilla.org/en-US/firefox/addon/live-http-headers/>; we have no affiliation with whoever makes it. Our software makes 1 request per day to your computer to ask our servers for updates on new tracker-blocking rules. You will be able to see that one request and what it entails; there is no further communication or transfer of information. You can also see in part A of our privacy policy<http://abine.com/privacypolicy.php>that "Abine will not track, store or transmit to any server or third party, information regarding users' behavioral data (to include web browsing activity), nor will we "deliver or help others deliver any targeted advertising to users" (part C). You can also check out our privacy blog<http://www.abine.com/blog/>(which I write) for more on our pro-privacy standpoints. We have a freemium model. Our mission is to give consumers control back over their private information online. Building tools for consumers that improve privacy is all we do. DNT+ is our free product, and it will always be free. Our focus is to make DNT+ a great product that people love, and by doing so, we hope that some people will like it enough to want to upgrade to paid products that offer additional privacy protection, such as our subscription service, DeleteMe <http://www.abine.com/deletemedetail.php>(and we've even posted a free, DIY set of instructions for that process <http://abine.com/optouts.php>). I hope that you find this useful, and please email me if you have any questions, comments, or suggestions. Happy Friday, -Sarah On Fri, May 25, 2012 at 7:32 AM, <liberationtech(a)lewman.us> wrote: > On Fri, May 25, 2012 at 02:33:06PM +0700, unclezzzen(a)gmail.com wrote 4.1K > bytes in 103 lines about: > : Even if the situation doesn't escalate in the future, like buttons > : are already spying on you /today/ (not on me, because I don't have a > : facebook account, but pretty soon twitter will be on my tail). > > I believe you are being tracked, even without a facebook > account. You are just 'anonymous user the dod' in some distributed > database at facebook. Maybe they aggregate this data, maybe they > throw it away after some period of time (hours, days, weeks, years). See > > http://yro.slashdot.org/story/11/10/18/1429223/facebook-is-building-shadow-… > as an example. Twitter, google, facebook, and others all have the capacity > to do this with ease. > > And just because you clear some cookies and log out of facebook, twitter, > etc, doesn't mean they stop tracking you. Here's the facebook example, > > https://www.eff.org/deeplinks/2011/10/facebook%E2%80%99s-hotel-california-c… > . > > And here's a couple of articles on how to track you without using cookies > or IP addresses, > > http://www.jasonmorrison.net/content/2010/three-ways-sites-can-track-visito… > > http://www.jasonmorrison.net/content/2010/three-ways-sites-can-track-visito… > . > > -- > Andrew > pgp 0x6B4D6475 > _______________________________________________ > liberationtech mailing list > liberationtech(a)lists.stanford.edu > > Should you need to change your subscription options, please go to: > > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > If you would like to receive a daily digest, click "yes" (once you click > above) next to "would you like to receive list mail batched in a daily > digest?" > > You will need the user name and password you receive from the list > moderator in monthly reminders. You may ask for a reminder here: > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > Should you need immediate assistance, please contact the list moderator. > > Please don't forget to follow us on http://twitter.com/#!/Liberationtech > -- *Sarah A. Downey* Privacy Analyst | Attorney Abine, The Online Privacy Company t: @SarahADowney | p: 800.928.1987 _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[liberationtech] NYT Op-Doc on NSA Whistleblower William Binney
by Gregory Foster 06 Jul '18

06 Jul '18

10-minutes, well done. http://www.nytimes.com/2012/08/23/opinion/the-national-security-agencys-dom… On a related note, #CryptoParty <https://twitter.com/#%21/search/%23cryptoparty>. gf -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/ -- Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Microsoft Press Release On Digital Signatures
by None 06 Jul '18

06 Jul '18

Microsoft announced today that all future press releases will be signed with PGP digital signatures so that readers can verify that they're reading genuine Microsoft press releases, not forgeries from hackers trying to manipulate the stock price. Microsoft's corporate PGP key 0xB9C8B513 is on the Network Associates keyservers, and you can verify the signatures there. Microsoft's public relations department also announced that plans for World Domination 2.0 are ahead of schedule, and declined to comment on Bill Gates's muttered reference to the antitrust prosecutors as a major-league %^%*&@. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBObaOltwjGL65yLUTEQIfNACgrmbcIwqX+u3wWmDRAShF+ydjpiYAoLwS WZoHfvvlHEd2/0rCVSrXL60G =g+G7 -----END PGP SIGNATURE-----

1 0

Microsoft Press Release On Digital Signatures
by None 06 Jul '18

06 Jul '18

Microsoft announced today that all future press releases will be signed with PGP digital signatures so that readers can verify that they're reading genuine Microsoft press releases, not forgeries from hackers trying to manipulate the stock price. Microsoft's corporate PGP key 0xB9C8B513 is on the Network Associates keyservers, and you can verify the signatures there. Microsoft's public relations department also announced that plans for World Domination 2.0 are ahead of schedule, and declined to comment on Bill Gates's muttered reference to the antitrust prosecutors as a major-league %^%*&@. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBObaOltwjGL65yLUTEQIfNACgrmbcIwqX+u3wWmDRAShF+ydjpiYAoLwS WZoHfvvlHEd2/0rCVSrXL60G =g+G7 -----END PGP SIGNATURE-----

1 0

Microsoft Press Release On Digital Signatures
by None 06 Jul '18

06 Jul '18

Microsoft announced today that all future press releases will be signed with PGP digital signatures so that readers can verify that they're reading genuine Microsoft press releases, not forgeries from hackers trying to manipulate the stock price. Microsoft's corporate PGP key 0xB9C8B513 is on the Network Associates keyservers, and you can verify the signatures there. Microsoft's public relations department also announced that plans for World Domination 2.0 are ahead of schedule, and declined to comment on Bill Gates's muttered reference to the antitrust prosecutors as a major-league %^%*&@. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBObaOltwjGL65yLUTEQIfNACgrmbcIwqX+u3wWmDRAShF+ydjpiYAoLwS WZoHfvvlHEd2/0rCVSrXL60G =g+G7 -----END PGP SIGNATURE-----

1 0

Microsoft Press Release On Digital Signatures
by None 06 Jul '18

06 Jul '18

Microsoft announced today that all future press releases will be signed with PGP digital signatures so that readers can verify that they're reading genuine Microsoft press releases, not forgeries from hackers trying to manipulate the stock price. Microsoft's corporate PGP key 0xB9C8B513 is on the Network Associates keyservers, and you can verify the signatures there. Microsoft's public relations department also announced that plans for World Domination 2.0 are ahead of schedule, and declined to comment on Bill Gates's muttered reference to the antitrust prosecutors as a major-league %^%*&@. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBObaOltwjGL65yLUTEQIfNACgrmbcIwqX+u3wWmDRAShF+ydjpiYAoLwS WZoHfvvlHEd2/0rCVSrXL60G =g+G7 -----END PGP SIGNATURE-----

1 0

Microsoft Press Release On Digital Signatures
by None 06 Jul '18

06 Jul '18

Microsoft announced today that all future press releases will be signed with PGP digital signatures so that readers can verify that they're reading genuine Microsoft press releases, not forgeries from hackers trying to manipulate the stock price. Microsoft's corporate PGP key 0xB9C8B513 is on the Network Associates keyservers, and you can verify the signatures there. Microsoft's public relations department also announced that plans for World Domination 2.0 are ahead of schedule, and declined to comment on Bill Gates's muttered reference to the antitrust prosecutors as a major-league %^%*&@. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBObaOltwjGL65yLUTEQIfNACgrmbcIwqX+u3wWmDRAShF+ydjpiYAoLwS WZoHfvvlHEd2/0rCVSrXL60G =g+G7 -----END PGP SIGNATURE-----

1 0

Microsoft Press Release On Digital Signatures
by None 06 Jul '18

06 Jul '18

Microsoft announced today that all future press releases will be signed with PGP digital signatures so that readers can verify that they're reading genuine Microsoft press releases, not forgeries from hackers trying to manipulate the stock price. Microsoft's corporate PGP key 0xB9C8B513 is on the Network Associates keyservers, and you can verify the signatures there. Microsoft's public relations department also announced that plans for World Domination 2.0 are ahead of schedule, and declined to comment on Bill Gates's muttered reference to the antitrust prosecutors as a major-league %^%*&@. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBObaOltwjGL65yLUTEQIfNACgrmbcIwqX+u3wWmDRAShF+ydjpiYAoLwS WZoHfvvlHEd2/0rCVSrXL60G =g+G7 -----END PGP SIGNATURE-----

1 0

Microsoft Press Release On Digital Signatures
by None 06 Jul '18

06 Jul '18

Microsoft announced today that all future press releases will be signed with PGP digital signatures so that readers can verify that they're reading genuine Microsoft press releases, not forgeries from hackers trying to manipulate the stock price. Microsoft's corporate PGP key 0xB9C8B513 is on the Network Associates keyservers, and you can verify the signatures there. Microsoft's public relations department also announced that plans for World Domination 2.0 are ahead of schedule, and declined to comment on Bill Gates's muttered reference to the antitrust prosecutors as a major-league %^%*&@. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBObaOltwjGL65yLUTEQIfNACgrmbcIwqX+u3wWmDRAShF+ydjpiYAoLwS WZoHfvvlHEd2/0rCVSrXL60G =g+G7 -----END PGP SIGNATURE-----

1 0