Justin Tracey

Grad student in the @UWCrySP lab.
Right-handed wizard of the left-hand path.

[Justin Tracey @jtga_d]

should've said so earlier, but I've stopped using this account (signal to noise is awful now). If you want to follow me on masto, I'm at:

@[email protected] for mapping stuff
@[email protected] for research
@[email protected] for other stuff

Anti-politics is unlinked, sorry

[Justin Tracey @jtga_d]

@bigfack unfortunately hard not to notice when you daily drive tor lol

[Justin Tracey @jtga_d]

@NOT_INTO_IT also doesn't have to be a cow; I made some of the servers at work alias "pip" to clippy telling you no

[Justin Tracey @jtga_d]

@turtlekiosk https://t.co/Xmbqcos29b

[Justin Tracey @jtga_d]

@PELock perhaps if you read the tweet you'd know: there's a body of basic features missing, stopping snowflake proxies from functioning, so a huge chunk of volunteer proxies would disappear, regardless of what browser snowflake clients use

[Justin Tracey @jtga_d]

@uxMark @Zeitspace does the app have a way of leaving OSM notes? That's probably the fastest/easiest way to get some of these issues fixed

[Justin Tracey @jtga_d]

@turtlekiosk yeah it's vandalism, there's been a tiny spike lately. You can check the underlying data but it's prolly already been reverted, try doing a shift+refresh

[Justin Tracey @jtga_d]

@turtlekiosk yeah I never used it lol

iirc, bookmarks are e2ee in Firefox sync. I use etesync for notes, calendar stuff, etc., which works okay, but your only options are self-hosted or paid, so not viable for widespread use

[Justin Tracey @jtga_d]

@itsamegabeo @yungneocon to be clear, I'm not saying those funds/patches should be turned away, but there's no reason to bury our heads in the sand and pretend FOSS projects exist in some independent utopia. Shit gets funded and written by large corps and govts, and the software that exists reflects that

[Justin Tracey @jtga_d]

@itsamegabeo @yungneocon lol, no. What fraction of the (non-driver portion) of the Linux kernel do you think was written by military contractors? I haven't looked into Wikimedia's finances, but I'd be shocked if there were absolutely no DRL, OTF, DoD, etc. grants

[Justin Tracey @jtga_d]

@yungneocon not quite true, only some are implicit

[Justin Tracey @jtga_d]

"there's no single point of trust or failure!"

yeah?

[Justin Tracey @jtga_d]

distributed systems do not imply mitigated power disparities

[Justin Tracey @jtga_d]

@ZachWeiner I'd figure it's just lack of game design? It's not easy making a fun game, cheats generally change play in a way that wasn't optimized for

[Justin Tracey @jtga_d]

@AlecStapp I know it's not really the point over all, and I certainly have major, fundamental critiques of academia, but those are the wrong venues for side channel research, and rejection was correct. You'd want a top tier security venue, like Oakland or USENIX. They existed back then.

[Justin Tracey @jtga_d]

I guess this is technically true, in that, e.g., in the US, there are more people who might need an abortion today than there were black people when the Dred Scott decision was made, but it seems pretty patently disingenuous to imply this is somehow unprecedented

[President Biden Archived @POTUS46Archive]

Today is a very solemn moment for the United States.

The Supreme Court expressly took away a Constitutional right from the American people that it had already recognized. They simply took it away. That's never been done to a right that is so important to so many Americans.

[Justin Tracey @jtga_d]

@turtlekiosk why's that? Iiuc, most vendors already ship something with the "install apks" permission, so wouldn't need this (I'm not advocating removing that permission to be clear, I like f-droid ;))

[Justin Tracey @jtga_d]

Might be an unpopular take, especially among my fellow google-free android weirdos, but this inclines me to think that there shouldn't be any way to install arbitrary APKs other than via adb

[profdeibert @RonDeibert]

Here's @Google TAG's report:

Spyware vendor targets users in Italy and Kazakhstan @google https://t.co/aqzSrqdD9J

[Justin Tracey @jtga_d]

@turtlekiosk honestly that would be a significant barrier itself IMO, but you also have to enable debug mode on the phone, which is a weird enough process that I suspect most would raise an eyebrow from that

[Justin Tracey @jtga_d]

@RonDeibert @Google Yes, dbd malware can get installed that way too, but tricking a user into enabling hidden debug mode, adb, running an application from a desktop machine, and accepting the warning dialogue seems like it'd catch way fewer people than accepting a single dialogue