navyrain

Despite some well-publicized departures, I'm still bullish on Mozilla. As javascript becomes more capable, Mozilla's open-web mission becomes more attainable. Public awareness of widespread government surveillance increases the demand for trustworthy communication tools. Concretely, FirefoxOS is quietly reaching maturity, and Servo has a great deal of promise.

I think that Mozilla's strange position, being a non-profit that is at various times either in competition or in cooperation with the world's largest tech companies, makes employee departures all that more press-worthy that the typical corporate churn. I wouldn't read too much into it.

7 years at any organization is a long time, and with so few rungs above him on the ladder, it is only reasonable that he'd move on to something else.

I think you're right that UX and good security are often at odds, but I wouldn't go so far as to say that they _must_.

I view the current state of security in applications a a result of two forces: 1) The human dynamics of the roles involved: The disciplines of security and user interface design overlap very infrequently, and very rarely done alongside one another, collaboratively; one always tends to drive the other. For user-friendly and secure communication software to be written in an open source environment, too many stars have to align. 2) The market value of data: Software which can be monitored, and data of its users aggregated, analyzed, acted upon, and sold is more lucrative than making something which is truly secure, even from the authors.

I believe usable encryption is possible, but I don't expect it to come from grassroots open source efforts, nor from the big market players. If anyone, I expect to see it come a collaboration between large non-profits (such as Mozilla, EFF), and universities. In the current environment, they're one of the few with sufficient resources, organization, and motivation to get it done.

Have been using dokku on DigitalOcean since the 0.2.0, for personal projects. After bumping up against the poor quality of database plugins, I found "dokku-alt", which comes with pre-packaged well-functioning plugins for common use-cases, and seems to be good enough for my needs.

When evaluating the ecosystem, I got the impression Flynn has stalled out, and Deis looks to be too large for my modest requirements.

What I'd really like is ElasticBeanstalk or Heroku, but the per-app pricing quickly breaks the bank. My kingdom for a graceful way to host many tiny, low-traffic apps for cheap!

What is omitted from the article is the difference in the _size_ of the tech industry during the last 20 years. In 1995, the year the author romances, he emphasizes that doing anything in tech was hard. Two decades later, the hard problems have not gone away; the industry has broadened such that there are more opportunities across the entire spectrum of "noble challenge". There are more opportunities in making fluff, and more opportunities for even more difficult, admirable, and impactful undertakings than were ever possible before.

The industry has not been overtaken by the get-rich-quick charlatans, it has expanded enough that they can find a place.

When I see videos like this, or read other experiences of LSD, I wonder if I'm not missing out on something. LSD, uniquely amongst mainstream recreational drugs, seems to have the promise of an outright transcendental upside, with supposedly little downside.

It saddens me that there is no safe and legal way for me to try it.

It should be obvious that AT&T's "concerns" are simply a thinly-veiled threat to withhold high-speed access from the citizenry unless they get guarantees that they can manipulate said access with impunity.

The thing is that AT&T and others won't just pack up their broadband monopolies and go home; they'll respond to whatever market conditions the regulatory regime shapes. They can complain all they like, but the citizenry overwhelmingly wants more integrity guarantees for their internet connections.

This sort of threat is akin to a tantrum from a spoiled child.

In addition to the egrigious complaints citizens could make, wouldn't telecoms and cellphone manufacturers have grounds to sue over this? It sounds like these boxes are actively disrupting or reducing cell-phone service reliability by tricking devices to connect to them, despite not being a good tower.

It is a tricky issue, but I can see a good argument for increasing the amount of traffic going through TOR, even if much of it was from users without proper OPSEC.

As with all security, it is an education issue; just as "Private Mode" warns users that they might be tracked by ISPs or other agents, "Super-private mode" would have to warn users that supplying identifying information would jeopardize their privacy.

This sort of this is pretty exciting. Now that users are aware of NSA hijinks, and are familiar with the Privacy modes of their current browsers, I'd like to see Mozilla move towards a "Super Privacy" mode where they route over a built-in Tor client.

Of course, the dream would be to have all Firefox clients run Tor relay nodes out of the box, backed by Mozilla-supported exit nodes.

When a petty law is frequently violated and overlooked, law enforcement officers can use it as a tool to confront a citizen who would be otherwise entirely innocent. Often other underlying suspicions motivate investigation of citizens, and these laws are simply used as a pretense. Sometimes these suspicions have merit, but it seems like officers too often use these enforcements as a basis to act out their own prejudices.

If an arbitrarily-enforced law has fundamental merit, then the enforcement is the problem. As much as I shudder at the thought, it sounds like the solution here is complete enforcement of every law. The hope would be that the ensuing uproar would cause removal or revision to the laws to ease up the resulting oppression.

Until there is open source and deterministic builds, this is just as functionally "secure" as Skype.

The brief, insipid blurb does very little to incentivize me to register to see the rest.

Ruby is the lingua franca of devops; it is an entirely sensible choice for that purpose.