Tag: privacy

Solid summary of privacy-related developments in Safari and Chrome via the EFF:

Starting sometime in 2018, Google’s Chrome browser will begin blocking all ads on websites that do not follow new recommendations laid down by the industry group the Coalition for Better Ads (CBA). Chrome will implement this standard, known as the Better Ads Standard, and ban formats widely regarded as obnoxious such as pop-ups, autoplay videos with audio, and interstitial ads that obscure the whole page. Google and its partners worry that these formats are alienating users and driving the adoption of ad blockers. While we welcome the willingness to tackle annoying ads, the CBA’s criteria do not address a key reason many of us install ad blockers: to protect ourselves against the non-consensual tracking and surveillance that permeates the advertising ecosystem operated by the members of the CBA.

Google’s approach contrasts starkly with Apple’s. Apple’s browser, Safari, will use a method called intelligent tracking prevention to prevent tracking by third parties—that is, sites that are rarely visited intentionally but are incorporated on many other sites for advertising purposes—that use cookies and other techniques to track us as we move through the web. Safari will use machine learning in the browser (which means the data never leaves your computer) to learn which cookies represent a tracking threat and disarm them. This approach is similar to that used in EFF’s Privacy Badger, and we are excited to see it in Safari.

Two-factor authentication (“2FA”) is intended as another layer of security to your online accounts, so if your password is hacked, your account can’t be accessed without a special code. While I clearly understand the value, I’ve been lazy about enabling on various services since… it’s a hassle. I’ve only enabled it when I’ve been required by an external force. This reactive strategy isn’t even a strategy; it’s just a bad idea.

This morning, I went through all the services I’m using and was impressed how many services had 2FA enabled and, more importantly, how trivial it was to enable. Here’s the list. Turn on 2FA now.

• Amazon
• Apple
• Dropbox
• Facebook
• Github
• Google
• Instagram
• Microsoft
• Pinterest
• Slack
• Snapchat
• Tumblr
• Twitter
• WordPress

Two Factor Auth List is a comprehensive online resource that documents two-factor authentication for the bajillion sites I didn’t list above.

Earlier this morning, I tweeted:

Heartbleed == Change every single one of your passwords.

— rands (@rands) April 13, 2014

This is not actually good advice. You shouldn’t be changing your password on a server until the server administrator has confirmed whether their servers were affected and, if so, whether the server has been patched.

Mashable appears has an up-to-date breakdown of the most popular services out there and their disposition relative to Heartbleed.