-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Last weekend I gave a talk at HOPE Number 9 called Privacy Tricks for Activist Web Developers. It includes a bunch of snippets of code explaining how to do things which you can see in the slides.
I hope anyone who builds websites that activists use will take this advice and stop including third party resources for everyone who loads their pages, load Twitter feeds server-side instead of using Twitter badges, disable IP address logging or cryptolog IPs, ditch Google Analytics for Piwik, force HTTPS and use it correctly, etc. You can stream it here: https://www.youtube.com/watch?v=q38HdGGWS78 You can torrent it here: http://hattorrents.com/torrents/HOPE%20Number%209%20%282012%29%20-%20Privacy%20Tricks%20for%20Activist%20Web%20Developers%20%5BHT%5D.m4v.torrent Here are the slides: https://www.eff.org/sites/default/files/filenode/hope_privacy_tricks.pdf Here's the description from the HOPE schedule: Do you care about the privacy of your website?s visitors, but also depend on social media to get your message out? Do you want to protect your visitors? anonymity in case you or a third party service you use gets subpoenaed? Do you want to be able to get meaningful and pretty analytics without third parties tracking your visitors? Can some kid in a coffee shop really hijack your users? accounts that easily? Chances are Google, Facebook, and Twitter know as much about your website?s visitors as you do, IP addresses and user agents are sprinkled about your server?s filesystem, Google Analytics is watching everyone?s every move, and some kid in a coffee shop is already pwning your users. But it doesn?t have to be this way! This technical talk will cover tricks that web developers and sysadmins can use to minimize the privacy problems that plague the modern web. - -- Micah Lee https://twitter.com/#!/micahflee -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBAgAGBQJQCI3CAAoJELTSWh6ZmZaXtfgQALQCMAoYEPlcmmrNAaidHJlg 7oEhSWgZ33enDemVHoDkImYCQlNnItP5eZlEEnPF9M93zaju9//m7ZKxE/AdCi8q qpGhptu1Fzb8GF0oRdrHmktjtj49pBCkDgT3meUi+v3KTrVErD05VdmoAq7hmDl/ D6YOqUFk9UfunCxoJHmq41yd08KQSuLIrgTRw+tsH4i8Zj5CldmmvZCvREyxg8/V 5Arwv8IFALU/+DtcIMZ6d1IN8jnnAVdLEBQZfTYmJZKEB6JzmDF+6GREbi+KMzfh HdtvAN6o/rZuITh6uxrkR1X76/eG2bZs/FKckFp1J2itOIxCkqGBma6zoFEdu+Zl Bij4yisMtLh/+c9WiGmuGXQyxHWNwa6DrMdIxBIKhdTujuP67Y/7tef73PPddOWP j6hQ6OTbHSJkDBg9Q05NEs3GvdZznQNI6W6A3hgt4JGyCGYjhNbw2ILZFI9zSpOC IbKZ9Mz0iw3cLNwEgOg1MyJlbV3MoQC1rZ96WjiyXOnZpktyTl9FM+8AKTlMRt1i tg/LC2hl5NgQocSkDNXLYMtSIIrQzb0hvpymwOrDAm4nXQGgfXTUK8tATAEGuztB OP3auP0p5AR+rzvzVX/ugKlDVS5/wSpCbqBiTpvvzrzouXbWR/wrCTtR/IgMu//J wZ1WxAwkMZShk/9G91ud =cm3m -----END PGP SIGNATURE----- _______________________________________________ liberationtech mailing list [email protected] Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech
