QuoteWhy I'm done with Chrome

A few weeks ago Google shipped an update to Chrome that fundamentally changes the sign-in experience. From now on, every time you log into a Google property (for example, Gmail), Chrome will automatically sign the browser into your Google account for you. It'll do this without asking, or even explicitly notifying you.

RSSHub: https://docs.rsshub.app/en/

Looks like some more people are starting to realize that RSS feeds offer a whole lot more than your average SNS.

I was asked for recommendations for enterprise level endpoint protection products so I wanted to ask Th3 Core if anyone had either used or worked in a big operation with a decent Endpoint Protection package. I don't even use AV on most of my systems anymore so I'm a bit out of the loop these days as to what's good.

Right now the organization is looking at

• Palo Alto Traps
• Cylance Advanced Threat Protection
• Carbon Black Defense

Anything to say about these or suggestions to add?

Got hit by a M6.1 quake this morning in Osaka, Japan that has basically stopped transportation in the area. I really hate these things. Fortunately I only ended up with a lot of things knocked off shelves and monitors tipped over. I just hope that this isn't the start of a big quake swarm where the later ones are even bigger.

Have any of The Core bothered setting up DNSSEC for their domains?

I've been reading articles that range from "It's the future of DNS" to "Forget about it". Just wondering if anyone here had experience they could share. Before I invest the time and money I wondered if it was even worth my time for the average site. I could see the benefits if I was running the PayPal site, but I doubt the sites I'm running would be the type that require secure DNS.

Well, I finally followed through on my long-standing threat to get licenced.  Passed both the Technician and General amateur radio exams and am now waiting to show up in the FCC database so I'll officially be a Ham. I still have a lot to learn, but at least I'll have my ticket to operate.

When Google dropped Reader, and the developer of FeedDemon ended the project, I was a bit lost for a good RSS feed reader.  Like a lot of people I jumped on Feedly. I even got in early on the paid Pro version and snagged a lifetime subscription. I'm a heavy RSS user and wanted the most features possible.

Fast forward a few years, and Feedly development doesn't seem to be going anywhere. You can't even make a keyword feed or filter keywords out of a feed. The interface is nice, but they just don't let me fine tune my feeds.

Always looking for an alternative that's better, even if I do have a Pro Feedly account, I came across InoReader. This is a feed reader on steroids. The options menu alone had me hooked. They's got the basics down pat, and have an extensive set of rules and filters so that I can keep all of my thousands of feeds yet only have them show relevant information. Not sure why Feedly couldn't have done this from day 1. I'm finally enjoying curating my RSS feed collection again.

QuoteUngoogled Chromium Strips Away the Privacy-Invading Features from Chromium

Chrome and its open-source variant, Chromium, are great browsers, but there's no denying that Google's got eyes deep inside both to track all kinds of stuff. Ungoogled Chromium is a special build that strips as much of that stuff away as possible.

I've used other stripped down Chromium variants, like SRWare Iron, but they're always just far enough behind the curve of updates that I've abandoned them. Not sure if this one will keep up with the frantic development of Google Chrome, but it's on GitHub and I like their thinking https://github.com/Eloston/ungoogled-chromium

Saw someone mention this host on another forum. This looks too good to be true.  http://www.cloudatcost.com/pricing.php
One time payment and you own the server space for life? There's gotta be a catch. Hosted in Canada.

Anyone heard of this?

They have a huge sale on now. Looks too good to be true.

QuoteTwo years spamming spammers back
https://medium.com/@beweinreich/two-years-spamming-spammers-back-2e734ce9593c#.xogcz78qx

I created a bot to respond to these types of emails...

    Sarah: My husband dead two years ago and the family members wants to kill me and my children and seat on the inheritance he left for us with bank here l am now in a hiding with my kids and the documents of inheritance is with us...

    Bot: Very nice! Where abouts are you located?

I LOL'd

QuotePassword-protect your Wi-Fi hotspots and ask for user details too, rules ECJ
https://nakedsecurity.sophos.com/2016/09/19/password-protect-your-wi-fi-hotspots-and-ask-for-user-details-too-rules-ecj/

Europeans who provide Wi-Fi hotspots aren’t liable for copyright violations by the strangers who use them, according to Europe’s top court.

However, there’s a whopping big “but.”

The European Court of Justice (ECJ) also ruled that the holders of infringed copyrights can demand that those Wi-Fi hotspots be password-protected to deter future violations.

What’s more, users will be required to “reveal their identity to be prevented from acting anonymously.”

What a brilliant plan to stop the spread of open WiFi...

QuoteIPv4 apocalypse means we just can't measure the internet any more

IPv4 address exhaustion is making it harder to measure the size of the Internet, even as IPv6 deployment accelerates.

While IPv6 activity doubled in 2015 (to 400 million addresses by year-end), the vast majority of users are still on IPv4 addresses, mostly via dynamic assignment or behind carrier-grade Network Address Translation (NAT) boxes.

QuoteFacebook ads still slipping past Adblock Plus via stripped-down code

The Adblock Plus crowdsourced hacker militia can't keep up with Facebook's disciplined army of engineers.

When Facebook first announced it would circumvent ad blocking software, Adblock Plus (ABP) built a workaround in two days, boasting that "We promised that the open source community would have a solution very soon...This time that community seems to have gotten the better of even a giant like Facebook."

But it's been a month since Facebook broke ABP's last workaround, and the social network's marketing messages are still getting through. Despite the fact that ABP's browser extension gets the final say on what appears on your screen, it can't build filters fast enough when Facebook has total control over the code it serves.

https://about.commonsearch.org/faq

Noticed this search engine project because they just made a Tor node available.
https://about.commonsearch.org/2016/08/state-of-common-search-august-2016/

They are only using publicly available data sets, mostly Common Crawl.

I was asked to make an e-mail address on a new domain, like:  info@example.com

This e-mail address would forward to a bunch of customer service agents. However, none of these customer service agents are members of this domain. They want the ability to reply FROM info@example.com to the customers. (The customer would only see info@example.com when receiving replies from the agents.)

I can't add this address to the domain that the customer service agents use. (Long story)

My first idea was to put the domain on Google Apps. They have a new thing called Collaborative Inbox. It's a fancy Google Groups interface that looked like it would work... but to work correctly these customer service agents would need to be members of this Google Apps account. The company didn't want to pay for multiple Google Apps accounts for this purpose, so I'm looking for another solution.

Any relatively cheap solutions you could suggest?

If you'd like to check out an interesting password manager I came across F-Secure KEY https://www.f-secure.com/en/web/home_global/key

There was someone re-tweeting that they're giving away free premium accounts until June 10.
https://twitter.com/FSecureKEY/status/740110091635068928
KEYDADADA

The premium key lasts 6 months and lets you share passwords between accounts. Not sure what happens after that.

I like the security involved with this app. They don't even ask for your e-mail address when signing up. Everything is encrypted locally. F-Secure only gets an encrypted set of your passwords that they can't read even if they wanted to.

Not sure I'll move to this, but it looks promising in early tests.

http://www.opera.com/blogs/desktop/2016/04/free-vpn-integrated-opera-for-windows-mac/

Opera's new dev version comes with a VPN client that is free to use. In March, Opera bought SurfEasy, a VPN provider that never caught my eye as they are one of those cheap VPNs that retains their logs, so privacy isn't a strong point.  The offer of free, built-in VPN does lend an interesting sales pitch angle for them. I wouldn't rely on it for security or privacy, but it might be good for checking geo-centric SERPs.

QuoteNoScript and other popular Firefox add-ons open millions to new attack
Unlike many browsers, Firefox doesn't always isolate an add-on’s functions.

NoScript, Firebug, and other popular Firefox add-on extensions are opening millions of end users to a new type of attack that can surreptitiously execute malicious code and steal sensitive data, a team of researchers reported.

The attack is made possible by a lack of isolation in Firefox among various add-ons installed by an end user. The underlying weakness has been described as an extension reuse vulnerability because it allows an attacker-developed add-on to conceal its malicious behavior by invoking the capabilities of other add-ons. Instead of directly causing a computer to visit a booby-trapped website or download malicious files, the add-on exploits vulnerabilities in popular third-party add-ons that allow the same nefarious actions to be carried out. Nine of the top 10 most popular Firefox add-ons contain exploitable vulnerabilities. By piggybacking off the capabilities of trusted third-party add-ons, the malicious add-on faces much better odds of not being detected.

FF had better revamp their entire core structure...quick

QuoteForget Apple vs. the FBI: WhatsApp Just Switched on Encryption for a Billion People

This means that if any group of people uses the latest version of WhatsApp—whether that group spans two people or ten—the service will encrypt all messages, phone calls, photos, and videos moving among them. And that's true on any phone that runs the app, from iPhones to Android phones to Windows phones to old school Nokia flip phones. With end-to-end encryption in place, not even WhatsApp's employees can read the data that's sent across its network. In other words, WhatsApp has no way of complying with a court order demanding access to the content of any message, phone call, photo, or video traveling through its service. Like Apple, WhatsApp is, in practice, stonewalling the federal government, but it's doing so on a larger front—one that spans roughly a billion devices.

Most privacy buffs would stay clear of WhatsApp because of its connection to Facebook. However, even Edward Snowden likes Moxie Marlinspike's Signal app for secure communication. Moxie Marlinspike's involvement with WhatsApss's encryption efforts should lend some credence to it.

I'm trying to help someone redo the information architecture of a website that has a few hundred pages. They've been giving me charts made in Excel and it's impossible to move things around or do anything really. I suggested Visio, but they don't want to pay for that. Do you guys know of any good diagramming tools (free preferred) that could handle a task like this?

All I want to do is show pages of the site and their links to help them visualize where content will go, and show them how visitors will navigate the site.