[01:20.540 --> 01:21.700]  Michael or Mike?
[01:22.520 --> 01:23.260]  Michael.
[01:25.400 --> 01:26.600]  There's my mask.
[01:27.440 --> 01:28.180]  Beep.
[01:28.380 --> 01:30.580]  There's my remote.
[01:32.080 --> 01:32.980]  It's new.
[01:33.200 --> 01:35.460]  It's like a wireless mouse.
[01:36.980 --> 01:37.860]  That's cool.
[01:38.700 --> 01:54.020]  All right,
[02:05.490 --> 02:05.610]  everyone.
[02:06.070 --> 02:08.510]  Last talk for the track for the evening.
[02:09.050 --> 02:11.190]  So, I know you've heard it all before.
[02:11.750 --> 02:13.130]  Thanks for wearing the mask.
[02:13.310 --> 02:13.990]  Keep doing it.
[02:14.590 --> 02:15.530]  Keep hydrated.
[02:15.730 --> 02:18.950]  Not so important now at 9 o'clock at night, 10 o'clock at night.
[02:20.030 --> 02:21.470]  Keep your film muted, please.
[02:22.310 --> 02:23.770]  Audiovisual equipment is super sensitive.
[02:24.710 --> 02:31.910]  On schedule 4th track, if you want to speak, go up to the information desk and they can help you sign up for track time.
[02:32.730 --> 02:36.970]  Karaoke is about to start, so they said they're gonna start in 15 minutes.
[02:37.230 --> 02:39.630]  I think you should stay for this and then go to karaoke.
[02:40.070 --> 02:41.470]  I highly recommend it.
[02:42.330 --> 02:49.750]  Volunteers, if you want to volunteer and eventually get a cool shirt, go down to the help desk or the info desk or room 301 security.
[02:50.830 --> 02:55.490]  And away we go with practical steps to improve privacy from Mike McMahon.
[02:56.150 --> 02:56.710]  Take it away, Mike.
[03:01.810 --> 03:02.470]  Hello, hello.
[03:05.070 --> 03:08.190]  Before we start, I just want to make an announcement.
[03:08.430 --> 03:17.210]  There's... I work at the Free Software Foundation and there's gonna be a little member meet-up tomorrow from 6 to 8 at Amitabha Vegan.
[03:17.930 --> 03:20.610]  So there's a little piece of paper here.
[03:25.600 --> 03:27.040]  It's got directions on all that.
[03:28.800 --> 03:31.280]  So thank you all for coming.
[03:32.140 --> 03:34.120]  It's... isn't it past your bedtime?
[03:34.440 --> 03:35.960]  This is the last talk of the night.
[03:37.500 --> 03:38.260]  Thank you.
[03:39.380 --> 03:50.620]  So this talk is copy left, copyright, Michael McMahon, 2022, Creative Commons Attribution Sharealike, 4.0 International.
[03:53.300 --> 03:56.260]  I'm the web developer at the Free Software Foundation.
[03:57.000 --> 03:59.300]  I've been hacking there since 2019.
[03:59.960 --> 04:05.160]  And some of my co-workers are here, they've got a table in the lobby.
[04:05.340 --> 04:05.780]  Check them out.
[04:06.680 --> 04:07.560]  There's shirts.
[04:07.980 --> 04:11.300]  You can learn about all the cool stuff that we do, which is a lot.
[04:13.740 --> 04:21.220]  I have a varied background in education, manufacturing, hacking, game dev, music.
[04:22.700 --> 04:23.480]  Cool stuff.
[04:23.700 --> 04:24.360]  All the cool stuff.
[04:27.640 --> 04:29.140]  I'm an advocate for privacy.
[04:29.300 --> 04:30.040]  That's what I'm doing right now.
[04:30.780 --> 04:35.300]  I've been doing it for years, but I started doing it publicly, which is a little different.
[04:36.300 --> 04:38.020]  Right now I'm hacking on the Pine phone.
[04:38.580 --> 04:42.300]  It's a cool, not Android, not Apple device.
[04:43.260 --> 04:44.920]  And looking into machine learning.
[04:45.160 --> 04:45.840]  All cool stuff.
[04:46.260 --> 04:48.240]  I'll be talking about some of that later.
[04:49.340 --> 04:53.360]  I'm going to be using free, non-free, and unknown a bit.
[04:53.800 --> 04:59.060]  I want to just define those terms, because that's often not understood.
[04:59.520 --> 05:01.820]  When I'm talking about free, I'm not talking about cost.
[05:02.060 --> 05:03.000]  I don't care how much cost.
[05:03.380 --> 05:04.600]  I'm talking about free as in freedom.
[05:05.320 --> 05:12.360]  If you can run, edit, contribute, and share something, I'm going to refer to that as free.
[05:13.800 --> 05:17.340]  If you can't do these four things, I'm going to call that as non-free.
[05:17.760 --> 05:20.120]  And if you don't really know, I'm going to call it unknown.
[05:23.410 --> 05:28.890]  The scope of this talk is specifically about passive surveillance.
[05:30.250 --> 05:31.870]  You can only control yourself.
[05:33.150 --> 05:35.230]  You can't really control what other people do.
[05:35.630 --> 05:41.490]  So we're going to focus on what you can do to defend against passive surveillance.
[05:41.790 --> 05:43.610]  This is not about targeted surveillance.
[05:43.930 --> 05:49.050]  If you want to know about targeted surveillance, follow these steps and then harden the systems.
[05:49.670 --> 05:50.730]  Increase your OPSEC.
[05:52.530 --> 05:53.950]  Does privacy matter?
[05:55.450 --> 06:07.050]  I'm sure 15 times during this conference you're going to hear about refuting... you know... I have nothing to hide.
[06:07.350 --> 06:09.450]  So I'm not going to get into that or refute it.
[06:09.710 --> 06:10.610]  You'll hear about it.
[06:12.210 --> 06:22.010]  But there is a few recent times where things out of people's control have changed the way that they viewed privacy.
[06:24.210 --> 06:30.410]  In Afghanistan, the United States troops pulled out and then the Taliban was the ruling party.
[06:30.930 --> 06:34.410]  So a whole lot of people were like, oh, I have a bunch of things on social media.
[06:34.630 --> 06:36.010]  I need that all deleted.
[06:36.230 --> 06:37.450]  And social media is like, I don't care.
[06:38.950 --> 06:39.730]  It matters.
[06:40.090 --> 06:41.710]  You never know when it's going to matter.
[06:42.670 --> 06:46.890]  Here in the United States, Roe v. Wade was just overturned.
[06:49.370 --> 06:54.150]  A lot of people now care about things that they have said in the past.
[06:54.870 --> 06:59.550]  So you just kind of have to be mindful and you can't control all the time what other people do.
[07:05.300 --> 07:13.720]  So something that's really driven the direction that I've gone is the Edward Snowden leaks.
[07:14.100 --> 07:15.480]  I'm sure you know about it.
[07:15.800 --> 07:23.160]  But to me, what it's done is all the companies had privacy policies before this.
[07:25.320 --> 07:30.100]  And whatever Snowden showed is that those are just words.
[07:30.600 --> 07:38.100]  And if a company doesn't back that up, they might be sharing it with the government.
[07:38.100 --> 07:45.000]  It might be how they deal with your data on their site.
[07:45.200 --> 07:52.200]  But it doesn't necessarily say whether or not they've been sharing with another third party the entire time.
[07:53.000 --> 08:05.740]  So in order to come to terms with this harsh reality, you need to trust what people say, but verify.
[08:05.740 --> 08:10.380]  And the only way to do that is with free software.
[08:14.900 --> 08:23.200]  The one common thing I see is that proprietary systems are more secure because they are security through obscurity.
[08:25.020 --> 08:33.680]  If you look up this page, there's a very detailed, accurate description of why that's not true.
[08:35.940 --> 08:40.420]  I'm going to talk about two things to back this up.
[08:41.860 --> 08:52.960]  Anom, I'm not sure if you've been following security news the last couple of years, but Anom was a privacy phone and they never released the source code.
[08:53.880 --> 08:58.340]  There were some really cool features to it that I would like to see on privacy phones.
[08:59.120 --> 09:05.340]  But when pressed, they said, oh, it's a fork of GrapheneOS.
[09:06.380 --> 09:10.100]  But they didn't allow anybody to verify this.
[09:10.100 --> 09:21.460]  So what it actually was, was several governments got together and made a honeypot sting operation.
[09:21.940 --> 09:25.020]  So they made this cool phone, said it's a privacy phone.
[09:25.320 --> 09:29.680]  You can use it to message all your criminal buddies and it'll be cool.
[09:29.960 --> 09:31.520]  Everybody's cool, we're cool, you're cool.
[09:32.120 --> 09:33.220]  And it wasn't cool.
[09:33.520 --> 09:34.540]  It wasn't cool at all.
[09:35.020 --> 09:37.900]  It actually had some really cool features, but it wasn't cool.
[09:39.620 --> 09:42.680]  The cool feature was the keypad would scramble.
[09:43.160 --> 09:49.620]  So if somebody was over your shoulder and they saw, oh, you did that combo, it wasn't actually to unlock your phone.
[09:49.780 --> 09:50.740]  You could be scrambled.
[09:51.160 --> 09:52.840]  I want to see that, program it.
[09:55.100 --> 09:56.540]  The other one is Apple.
[09:56.760 --> 09:57.400]  Everybody knows Apple.
[09:59.180 --> 10:00.340]  Just went on a road trip.
[10:00.680 --> 10:02.140]  I saw a billboard.
[10:02.520 --> 10:03.880]  I couldn't take a picture of it because I was driving.
[10:04.160 --> 10:05.840]  But it said, security?
[10:06.580 --> 10:07.460]  That's iPhone.
[10:09.020 --> 10:10.480]  And that always gets me.
[10:11.180 --> 10:12.380]  I laugh a little bit.
[10:13.860 --> 10:14.900]  You know, they did that.
[10:15.400 --> 10:16.560]  We fought the FBI.
[10:17.000 --> 10:18.500]  They wanted to unlock an iPhone.
[10:18.660 --> 10:19.160]  We said, no.
[10:22.060 --> 10:26.320]  But they're asking you to trust them, but you can't verify it.
[10:27.820 --> 10:28.960]  That's a serious problem.
[10:32.640 --> 10:37.320]  So, throughout this talk, I'm going to be talking about different steps you can take.
[10:38.100 --> 10:41.300]  How much of this matters to you personally?
[10:44.220 --> 10:45.260]  Several people here.
[10:45.380 --> 10:46.360]  It's going to differ.
[10:46.360 --> 10:50.540]  So, you have to ask yourself, what are you trying to protect yourself from?
[10:50.840 --> 10:55.120]  I'm not going to be, like, really into threat assessments or whatever.
[10:55.380 --> 10:58.260]  You just have to kind of take it upon yourself.
[10:59.300 --> 11:02.840]  One way that I think about it is with these different levels of protection.
[11:04.300 --> 11:05.560]  Basic is public.
[11:05.820 --> 11:07.220]  What is public information?
[11:08.820 --> 11:11.580]  Next thing is interested individuals.
[11:11.860 --> 11:13.320]  I think of this as, like, nosy neighbors.
[11:15.840 --> 11:17.700]  Beyond that, there's petty criminals.
[11:17.860 --> 11:19.900]  It's like crimes of opportunity.
[11:19.900 --> 11:24.060]  They're not actively trying to steal your credit card or whatever.
[11:24.220 --> 11:26.840]  But if they had the opportunity, would they?
[11:28.640 --> 11:31.780]  Beyond that, you've got criminal organizations, corporations, governments.
[11:32.680 --> 11:34.220]  Those are kind of self-explanatory.
[11:34.380 --> 11:34.860]  And then yourself.
[11:35.720 --> 11:38.760]  If you don't know information, you can't give it up.
[11:39.280 --> 11:39.780]  It's kind of cool.
[11:40.800 --> 11:41.560]  Think about that.
[11:44.080 --> 11:51.430]  So, a new campaign that Greg's been working on.
[11:51.550 --> 11:52.950]  It's called the Freedom Ladder.
[11:52.950 --> 11:57.510]  And this is a new campaign with the FSF.
[11:58.370 --> 12:02.570]  This talk is about this concept, but it's my interpretation of this concept.
[12:02.810 --> 12:04.070]  So, I'm going to use a ladder.
[12:04.790 --> 12:11.210]  And the bottom rung of the ladder is going to be basic things that are available in the store.
[12:11.990 --> 12:16.450]  The top of the ladder is going to be the most secure version of that.
[12:20.110 --> 12:22.230]  This first slide is really heavy.
[12:22.230 --> 12:26.930]  I know it's late, so I'm going to start with this very important one.
[12:27.450 --> 12:29.990]  If you find that you've got to go to sleep.
[12:30.290 --> 12:31.090]  At least you've seen this one.
[12:34.490 --> 12:43.270]  So, there's a sad reality with today in that anything that you can buy in a store is usually not secure.
[12:43.530 --> 12:46.510]  Or in a way it doesn't have your best interests in mind.
[12:47.690 --> 12:49.190]  So, Apple and Android.
[12:49.690 --> 12:53.050]  I'm sure you'll hear people debating, oh, Apple's more secure.
[12:53.250 --> 12:54.210]  Oh, Android's more secure.
[12:54.350 --> 12:54.870]  I don't care.
[12:55.890 --> 13:00.510]  They both are doing things that are not good for the general public.
[13:00.990 --> 13:03.830]  So, what can you do to make that better?
[13:04.030 --> 13:05.670]  What can you do to take back privacy?
[13:07.850 --> 13:08.770]  Install FDroid.
[13:08.770 --> 13:13.550]  It's a free app store that you can load on your phone.
[13:13.670 --> 13:14.570]  You can load on any phone.
[13:15.230 --> 13:16.190]  Follow the instructions.
[13:16.970 --> 13:18.930]  And then use the apps there.
[13:19.470 --> 13:20.210]  There are...
[13:20.210 --> 13:25.070]  I was using a Nexus 5X before I got the Pine phone.
[13:26.330 --> 13:29.770]  And I didn't load any Google apps on there.
[13:29.770 --> 13:31.350]  I just used FDroid.
[13:32.010 --> 13:32.710]  FDroid's great.
[13:34.890 --> 13:39.990]  Beyond that, there's several official Android alternatives.
[13:40.670 --> 13:42.590]  In the lobby, there's one.
[13:44.070 --> 13:49.610]  I used to use Copperhead OS, which turned into Graphene or Calix, depending on who you ask.
[13:50.290 --> 13:52.330]  There's Lineage OS, which I was using for many years.
[13:53.970 --> 13:55.650]  I'll get into more of that later.
[13:56.650 --> 14:02.410]  But you can flash this Google-less Android onto your phone.
[14:02.690 --> 14:06.050]  And then, you can add Google back onto it.
[14:06.410 --> 14:09.810]  Now, some people need to have some Google on there.
[14:10.010 --> 14:17.190]  But I think it's still a step up from just having Android that you get at the store.
[14:17.730 --> 14:19.190]  It doesn't work on every phone.
[14:19.190 --> 14:25.170]  I'll show you a link where there's some places where you can actually find what phones are compatible.
[14:27.690 --> 14:29.070]  What I like to do is...
[14:29.070 --> 14:35.210]  What I like to do is to flash another phone and then not put Google back onto it.
[14:35.330 --> 14:36.410]  I just used FDroid.
[14:37.610 --> 14:40.630]  Not everybody can do that, but it's possible.
[14:40.790 --> 14:41.130]  I was doing it.
[14:42.190 --> 14:43.590]  Beyond that is Replicant.
[14:43.590 --> 14:43.610]  Replicant.
[14:44.390 --> 14:51.870]  Replicant is Android with all the Google parts and non-free software removed.
[14:52.610 --> 14:53.170]  A lot of the...
[14:54.690 --> 14:58.450]  Graphene OS, E, Calyx, Lineage OS.
[14:58.610 --> 15:02.490]  They use non-free drivers just to make it work.
[15:03.350 --> 15:04.910]  Replicant doesn't have any of that.
[15:04.910 --> 15:09.910]  So there's less phones it works on, but you can somewhat trust it.
[15:11.730 --> 15:13.950]  Beyond that is separated modem.
[15:14.510 --> 15:15.630]  I'll get into that later.
[15:16.630 --> 15:17.870]  And beyond that is no phone.
[15:19.830 --> 15:21.290]  I can't do no phone.
[15:21.430 --> 15:22.950]  So I'm not gonna go that high.
[15:23.190 --> 15:27.690]  But I know at least a handful of people that have done it.
[15:27.690 --> 15:28.390]  So it's possible.
[15:28.710 --> 15:29.490]  I'm a dad.
[15:29.750 --> 15:31.450]  So I actually need to receive calls.
[15:33.610 --> 15:36.230]  So let's talk about official Android alternatives.
[15:36.870 --> 15:38.210]  I use Lineage OS.
[15:38.390 --> 15:40.970]  There's a link which devices work with it.
[15:41.810 --> 15:45.790]  Instead of going to a store and buying a phone, I would check a list first.
[15:46.070 --> 15:49.450]  And then buy a phone and then flash it.
[15:50.730 --> 15:53.870]  Graphene OS works on the pixel line.
[15:54.570 --> 15:56.150]  And then there's Replicant.
[15:57.410 --> 16:01.610]  And cool new campaign from Free Software Foundation Europe.
[16:01.930 --> 16:03.610]  It's called Upcycling Android.
[16:04.190 --> 16:06.790]  And they kind of talk about why that's an important thing.
[16:06.970 --> 16:10.930]  And they tell governments, hey, it's a really important thing.
[16:13.470 --> 16:16.650]  Separated modem is new, cooler stuff.
[16:16.910 --> 16:17.870]  Doesn't work for everybody.
[16:19.230 --> 16:21.510]  Right now this falls into the works for me category.
[16:23.330 --> 16:24.930]  Librem 5 if you can get one.
[16:25.190 --> 16:25.670]  It's pretty cool.
[16:26.310 --> 16:26.750]  Gets a little hot.
[16:27.550 --> 16:29.210]  Pine phone is really great.
[16:30.030 --> 16:33.410]  I'm using the Pine phone Pro as my daily driver.
[16:34.490 --> 16:35.450]  It's not perfect.
[16:35.910 --> 16:37.510]  It's for developers and tinkerers.
[16:38.010 --> 16:39.410]  Hey, we're at a hacker conference.
[16:39.650 --> 16:41.150]  So that might be you.
[16:41.950 --> 16:42.670]  Check it out.
[16:42.670 --> 16:42.690]  Yep.
[16:48.170 --> 16:52.610]  Now, what I spend most of the time on is the desktop and the laptop.
[16:55.930 --> 16:59.670]  The things you buy at the store don't have your best interest in mind.
[17:00.090 --> 17:01.710]  Chrome OS, Mac OS, Windows.
[17:03.950 --> 17:11.770]  But you can take most of those computers, not the Chrome OS, but you can take those computers and you can flash new software on them.
[17:12.270 --> 17:19.070]  So, if you even had that and you just added a little bit of free software on it, that's a good start.
[17:19.250 --> 17:23.190]  Getting used to those applications will help you with the next ROM.
[17:24.810 --> 17:28.450]  Third one up is using GNU/Linux.
[17:28.650 --> 17:35.310]  Using free software, operating system, and then using non-free software with it.
[17:35.550 --> 17:40.630]  That's still better than using Mac or Windows with free software.
[17:41.750 --> 17:47.530]  And what we do at work is we use GNU/Linux without any non-free software.
[17:48.610 --> 17:54.130]  Not everybody can do that, but we're an example of we can do it and we do do it.
[17:58.150 --> 18:00.250]  This is a very simplified version of this slide.
[18:00.970 --> 18:08.790]  But from the moment you press the power button on a machine, you're talking about the BIOS with the computer.
[18:11.030 --> 18:14.930]  Whenever you buy a computer from the store, it's got a proprietary BIOS on it.
[18:17.030 --> 18:18.470]  There are alternatives.
[18:19.090 --> 18:20.370]  Core Boot is a popular one.
[18:22.050 --> 18:26.890]  And beyond that is Libra Boot, which has all the binary parts stripped out of it.
[18:27.850 --> 18:34.990]  There's very few motherboards, systems that can run this, but if you look for them, you can get them.
[18:35.250 --> 18:36.090]  You can try it.
[18:40.400 --> 18:53.480]  Now, we are in New York City, and a weird thing is that anywhere you are in New York City, you're probably within distance of four voice assistants.
[18:54.680 --> 18:57.600]  Siri, OK Google, Alexa, Cortana, et cetera, et cetera, et cetera.
[18:57.940 --> 19:01.960]  I don't trust any of those, but they're around all the time.
[19:03.060 --> 19:05.020]  Alexa, buy some beans.
[19:05.860 --> 19:06.760]  Did that work?
[19:10.680 --> 19:11.900]  I always wanted to do that.
[19:14.020 --> 19:14.580]  Mycroft.
[19:15.080 --> 19:16.500]  There's a few alternatives.
[19:16.720 --> 19:17.440]  Mycroft is one.
[19:18.140 --> 19:19.240]  But it uses...
[19:19.240 --> 19:21.100]  By default, it uses the...
[19:21.100 --> 19:22.700]  I want to say OK Google.
[19:23.400 --> 19:25.040]  So it uses like a proxy.
[19:25.260 --> 19:26.760]  You go through Mycroft servers.
[19:27.420 --> 19:31.020]  So you're still talking with OK Google, but through Mycroft.
[19:31.640 --> 19:32.660]  I still don't trust that.
[19:34.020 --> 19:38.560]  But I have been looking into speech-to-text, and Vosk is pretty cool.
[19:38.900 --> 19:44.580]  So if we get Mycroft to work with Vosk, and then you don't use a non-free GPU, I think that would be the...
[19:44.580 --> 19:46.740]  That would be a voice assistant that I could find.
[19:47.540 --> 19:48.460]  I haven't tried it yet.
[19:50.540 --> 19:51.340]  I don't use it.
[19:52.500 --> 19:56.620]  Televisions are pretty easy, but in being so easy, it's kind of hard.
[19:57.520 --> 20:01.700]  If you go to a store, you get to see a whole line of smart TVs.
[20:02.360 --> 20:05.380]  Smart TVs are like the telescreens from 1984.
[20:05.820 --> 20:08.100]  They're listening, and sometimes they have cameras.
[20:08.740 --> 20:10.060]  And that weirds me out.
[20:10.120 --> 20:10.920]  I have a dumb TV.
[20:11.140 --> 20:13.380]  It just displays stuff that I tell it to.
[20:14.460 --> 20:18.120]  But it's harder and harder to get dumb TVs, so that's a problem.
[20:18.460 --> 20:20.120]  I don't see a solution for that one.
[20:20.120 --> 20:21.300]  So don't buy them.
[20:21.740 --> 20:23.260]  Buy used ones while you can.
[20:24.460 --> 20:25.660]  We're going to be out of luck soon.
[20:27.800 --> 20:28.280]  Servers.
[20:29.540 --> 20:31.980]  FSFE, again, has this cool sticker.
[20:33.560 --> 20:36.160]  There is no cloud, just other people's computers.
[20:37.400 --> 20:39.240]  So self-host if you can.
[20:39.240 --> 20:45.440]  Back to the desktops and laptops screen, you can follow that same kind of trend.
[20:46.340 --> 20:48.100]  The free software foundation we use.
[20:48.300 --> 20:49.240]  The ASUS...
[20:51.720 --> 20:52.360]  KGP...
[20:52.360 --> 20:53.800]  Help me out.
[20:53.900 --> 20:55.600]  What's the D16 motherboard?
[20:57.300 --> 20:57.940]  KGPE.
[20:58.720 --> 20:59.360]  D16.
[20:59.740 --> 21:00.260]  Thank you.
[21:00.740 --> 21:01.840]  It's kind of late.
[21:02.860 --> 21:05.680]  So we use that with LibraBoot and Trisql.
[21:06.440 --> 21:07.700]  It's a pretty good server.
[21:11.720 --> 21:12.960]  With routers.
[21:13.480 --> 21:15.580]  Which you find at the store.
[21:16.320 --> 21:18.320]  Again, it's got like...
[21:18.320 --> 21:19.250]  Some kind of...
[21:19.680 --> 21:21.180]  Who knows what drivers on there.
[21:22.760 --> 21:25.760]  But you can find ones that can flash other operating systems.
[21:25.760 --> 21:27.000]  There's DDWRT.
[21:29.200 --> 21:30.820]  That has the most support.
[21:31.340 --> 21:35.260]  Then you have OpenWRT, which takes some of the non-free drivers out of there.
[21:35.460 --> 21:39.500]  And then you have LibraCMC, which has no non-free drivers on it.
[21:42.860 --> 21:43.660]  The Netgear...
[21:44.360 --> 21:47.140]  One of those models you can get for like $30 online.
[21:48.260 --> 21:50.060]  And then you can flash your own operating system.
[21:50.300 --> 21:51.460]  And then you have a free router.
[21:51.640 --> 21:52.100]  It's kind of cool.
[22:00.990 --> 22:03.610]  I had a lot of coffee, so I'm blazing through this.
[22:04.130 --> 22:05.730]  We'll have plenty of time for questions.
[22:06.070 --> 22:06.370]  It's great.
[22:11.420 --> 22:13.880]  So that's like the hardware part of it.
[22:14.820 --> 22:19.660]  I'm going to talk about how you can secure those things just a little bit.
[22:20.040 --> 22:22.080]  I'm not going to go too far into hardening.
[22:23.680 --> 22:24.520]  Just the basics.
[22:25.380 --> 22:26.740]  Don't reuse passwords.
[22:28.960 --> 22:31.440]  Don't reuse like a formula for passwords.
[22:31.620 --> 22:37.780]  Sometimes you'll see like password dumps and the end is the name of the website.
[22:37.980 --> 22:39.880]  Well, if you see that pattern, then they can guess.
[22:40.200 --> 22:41.380]  So don't reuse passwords.
[22:41.520 --> 22:42.420]  Don't make guessable passwords.
[22:43.060 --> 22:45.660]  Use an offline password manager that you can trust.
[22:46.660 --> 22:48.540]  KeyPassXC is a good one.
[22:48.880 --> 22:49.600]  Check it out.
[22:50.740 --> 22:53.780]  It doesn't store your passwords on the cloud.
[22:54.440 --> 22:55.400]  You store it.
[22:55.580 --> 22:56.040]  It's kind of cool.
[22:57.580 --> 23:03.700]  And another big important tip is to only keep passwords and keys where you need them to be.
[23:05.660 --> 23:13.320]  I have several KeyPassXC databases and I have one master one on a computer I can trust.
[23:13.560 --> 23:18.580]  And then every other computer that doesn't need to have all of them only has the ones that they need.
[23:19.820 --> 23:22.060]  That's an important concept that I haven't heard much.
[23:24.900 --> 23:29.280]  With maps, I only know of one good one and it's OpenStreetMap.
[23:30.600 --> 23:35.000]  I hear a lot of people complaining about, oh, this map wasn't right.
[23:35.180 --> 23:37.980]  I sent a request for them to fix it.
[23:38.080 --> 23:38.680]  They didn't fix it.
[23:39.180 --> 23:40.940]  With OpenStreetMap, you can just fix it.
[23:41.180 --> 23:41.840]  It's kind of cool.
[23:42.260 --> 23:43.100]  And I do that.
[23:43.360 --> 23:43.700]  It's great.
[23:46.360 --> 23:53.520]  StreetComplete is an FDroid app where you can modify things that need fixing near you.
[23:54.000 --> 24:01.220]  So if you're looking for a reason to get out of the house, you're actually doing something instead of playing Pokemon Go.
[24:02.840 --> 24:03.820]  Web browsers.
[24:04.840 --> 24:08.280]  Chrome, Edge, Safari, all the Chrome alternatives.
[24:10.000 --> 24:11.160]  I don't trust those.
[24:12.300 --> 24:13.660]  Firefox is very cool.
[24:13.980 --> 24:15.800]  They're doing things differently.
[24:17.640 --> 24:23.500]  And Abrowser, IceCat, and LibreWolf, I haven't used that last one, are all Firefox.
[24:25.440 --> 24:27.760]  It's a little better for your privacy.
[24:31.170 --> 24:32.310]  Proxies, use a proxy.
[24:33.370 --> 24:36.550]  There's VPNs, OpenVPN, you can run your own, Tor.
[24:39.090 --> 24:43.770]  Browser fingerprinting is a very important thing that I'm still trying to wrap my head around.
[24:45.270 --> 24:51.470]  EFFs, Cover Your Tracks, is a really nice way to kind of wrap your head around this.
[24:52.090 --> 24:54.890]  How unique is your browser settings?
[24:55.370 --> 24:57.370]  And it will say...
[24:58.250 --> 24:59.650]  It will probably say you're unique.
[25:00.890 --> 25:08.450]  The most effective way to blend in with the crowd is to use the Tor browser.
[25:09.150 --> 25:10.430]  Now, not everybody is comfortable with that.
[25:11.350 --> 25:16.070]  So, one of the projects that we've been working on is Jshelter.
[25:16.070 --> 25:17.930]  You've probably not heard of it because it's kind of new.
[25:18.810 --> 25:20.390]  But it's very cool.
[25:20.630 --> 25:21.210]  You should check it out.
[25:21.370 --> 25:25.410]  Jshelter.org works for pretty much every browser.
[25:26.470 --> 25:27.170]  It will...
[25:27.170 --> 25:33.610]  Whenever a website's JavaScript is trying to track you, it will, like, mess with it.
[25:34.370 --> 25:35.190]  I like it.
[25:36.390 --> 25:38.190]  It's getting better, better every day.
[25:40.650 --> 25:45.830]  Ads and trackers are part of this puzzle of fingerprinting.
[25:47.150 --> 25:50.150]  Ublock Origin is a very important extension.
[25:50.530 --> 25:52.230]  You can use it on pretty much everything.
[25:52.370 --> 25:52.990]  I have it on my phone.
[25:55.450 --> 25:58.830]  It just blocks most of the bad stuff right off the bat.
[25:59.870 --> 26:01.890]  But you have to install it on every device.
[26:02.790 --> 26:04.350]  PyHole is a cool project.
[26:04.490 --> 26:05.290]  You can self-host it.
[26:06.210 --> 26:07.990]  It's an easy self-host one.
[26:08.370 --> 26:11.810]  If you want to get into self-hosting, it's like a nice starter project.
[26:13.810 --> 26:16.690]  So it blocks bad things on the network.
[26:16.890 --> 26:18.270]  So I have it set up at home.
[26:18.550 --> 26:19.910]  My router points to it for DNS.
[26:20.290 --> 26:28.150]  And then all the devices in my house check whether they should resolve an address with PyHole first.
[26:28.150 --> 26:32.190]  So it blocks about 30% of the requests on average.
[26:33.210 --> 26:38.390]  And that's 30% of the requests that you don't need.
[26:38.730 --> 26:43.990]  So the Internet traffic that you do want is faster.
[26:44.210 --> 26:44.750]  Pretty cool.
[26:45.290 --> 26:45.530]  Do it.
[26:47.350 --> 26:49.190]  Let's talk about JavaScript a bit.
[26:51.650 --> 26:59.630]  When you're on the Internet, you're running code that you've probably not ever read.
[27:00.350 --> 27:03.650]  Somebody else wrote that code and can you trust it?
[27:06.090 --> 27:06.610]  Sometimes.
[27:07.030 --> 27:08.210]  But not all the time.
[27:10.250 --> 27:15.970]  NoScript, made by Giorgio, is a really great first line of defense.
[27:16.310 --> 27:17.770]  By default, it will block everything.
[27:18.430 --> 27:21.310]  Then you can go through and say, I trust this website.
[27:21.850 --> 27:23.270]  Don't trust this website.
[27:25.170 --> 27:27.110]  Let's refresh and see if the page works.
[27:28.390 --> 27:29.290]  That's pretty good.
[27:29.930 --> 27:33.110]  The FSF makes another project called Libra.js.
[27:33.410 --> 27:38.550]  And it tries to check the license of every piece of JavaScript.
[27:39.010 --> 27:42.110]  If it doesn't pass the license check, it doesn't run it.
[27:44.650 --> 27:46.190]  That will break a lot of websites.
[27:47.490 --> 27:48.950]  But you'll be a little more secure.
[27:49.930 --> 27:52.730]  You can also just disable JavaScript entirely.
[27:53.450 --> 28:02.570]  Even if the license is formulated correctly, it can still be not having your best intentions.
[28:02.970 --> 28:07.830]  I haven't seen an actual use case of that in a while, but it could happen.
[28:08.470 --> 28:10.010]  So you can just disable it all.
[28:13.610 --> 28:18.770]  The FSF runs a really cool website called emailselfdefense.fsf.org.
[28:18.770 --> 28:24.770]  And it is a tutorial to set up GPG, PGP, on your email.
[28:25.670 --> 28:26.630]  Encrypt your emails.
[28:28.370 --> 28:36.550]  If you encrypt your emails, your email provider that you don't run can't read your emails.
[28:36.730 --> 28:37.150]  Pretty cool.
[28:38.570 --> 28:40.950]  I'll give you my GPG key at the end.
[28:41.170 --> 28:42.990]  You can send me a encrypted email.
[28:46.740 --> 28:49.180]  This slide's a lot, so bear with me.
[28:49.180 --> 28:52.960]  There's a simpler view of this.
[28:53.940 --> 28:59.040]  Free Software Foundation India made a cool chart called Better Than WhatsApp.
[29:01.020 --> 29:02.980]  And let's talk about this.
[29:05.940 --> 29:11.380]  At the bottom of the rung, you've got non-free clients, unknown backends, and centralization.
[29:11.960 --> 29:14.780]  Can anybody come up with an example of this?
[29:15.600 --> 29:17.260]  I've got a few of them.
[29:18.300 --> 29:19.840]  Did I hear a taker?
[29:21.700 --> 29:22.010]  WhatsApp.
[29:23.160 --> 29:23.780]  Correct.
[29:25.020 --> 29:25.640]  Yeah.
[29:27.100 --> 29:28.460]  iMessage is another one.
[29:30.440 --> 29:31.560]  Facebook Messenger.
[29:31.860 --> 29:32.600]  There's a lot of them.
[29:36.140 --> 29:37.200]  Telegram's a little different.
[29:37.400 --> 29:43.020]  Telegram's a free client with an unknown backend and centralization.
[29:43.020 --> 29:43.900]  So that's the next one.
[29:44.140 --> 29:45.620]  And that's the only example I have for that one.
[29:46.660 --> 29:47.020]  So...
[29:47.020 --> 29:47.780]  Way to go.
[29:48.780 --> 29:49.360]  Third one.
[29:49.660 --> 29:53.000]  Free client, free backend, and centralization.
[29:53.460 --> 29:54.580]  I only have one of these, too.
[29:55.000 --> 29:56.040]  Does anyone know what this one is?
[29:56.700 --> 29:57.060]  Signal.
[29:57.320 --> 29:57.420]  Yeah.
[29:57.960 --> 30:01.040]  I hear a lot of security people love Signal.
[30:01.460 --> 30:02.200]  I don't use it.
[30:04.800 --> 30:10.160]  Next up, we've got free client, free backend, federation.
[30:10.820 --> 30:13.960]  Now, you might be using this one at this conference.
[30:15.360 --> 30:16.080]  Matrix.
[30:19.280 --> 30:20.200]  Last one.
[30:20.520 --> 30:22.460]  Free client, peer-to-peer.
[30:26.600 --> 30:27.480]  Canoe, Jamie.
[30:28.040 --> 30:28.600]  Briar.
[30:29.760 --> 30:30.320]  Session.
[30:30.620 --> 30:31.280]  Any others?
[30:45.050 --> 30:46.170]  With translations...
[30:48.670 --> 30:51.250]  Since I made this slide, there's one more that I know of.
[30:52.350 --> 30:54.210]  Google translates what most people use.
[30:54.430 --> 30:59.230]  But then you're sending the content that you want translated to Google.
[30:59.230 --> 31:02.110]  And then they're sending what they think it is back.
[31:03.370 --> 31:11.310]  If you use Argos Translate, you can run it yourself on the command line without communicating with anybody.
[31:11.850 --> 31:15.750]  You can also self-host Argos Translate as Libra Translate.
[31:16.830 --> 31:17.870]  Really cool tech.
[31:18.190 --> 31:19.310]  It's machine learning.
[31:19.910 --> 31:22.050]  The models are like 100 megabytes.
[31:22.190 --> 31:23.810]  You can run it on really, really old tech.
[31:24.170 --> 31:25.010]  Super cool.
[31:30.130 --> 31:32.670]  Now, the really cool remote communication stuff.
[31:32.830 --> 31:34.530]  I've been putting in this list.
[31:34.670 --> 31:35.670]  This is a wiki.
[31:36.270 --> 31:38.830]  Libraplanet.org slash wiki slash remote communication.
[31:39.970 --> 31:41.090]  There's a lot of categories.
[31:41.350 --> 31:41.850]  It's a wiki.
[31:42.010 --> 31:43.830]  So you can add it, add new ones yourself.
[31:44.990 --> 31:45.990]  There's a short link.
[31:46.350 --> 31:47.270]  So you want to type that whole thing.
[31:50.460 --> 31:51.550]  Here's some other examples.
[31:51.760 --> 31:52.660]  Google Docs.
[31:52.660 --> 31:54.340]  You can use Etherpad.
[31:56.900 --> 31:57.500]  Zoom.
[31:58.260 --> 31:59.220]  Microsoft Teams.
[32:00.440 --> 32:02.380]  You can use BigBlueButton or Jitsi.
[32:02.580 --> 32:03.080]  Those are cool.
[32:06.910 --> 32:12.330]  So I just want to say thank you to HOPE and 2600.
[32:12.610 --> 32:16.730]  Thank you to all of the developers that made the tech that I worked on.
[32:16.730 --> 32:26.830]  This stock with Trispol, LibraBoot, Etherpad, Gimp, Libra, Office, Vim, NeoVim, Firefox, A Browser, and all the projects that I talked about.
[32:27.430 --> 32:29.710]  I've used a good number of them.
[32:30.170 --> 32:32.730]  They take some work to make work.
[32:33.630 --> 32:35.470]  But you can do it.
[32:35.670 --> 32:38.170]  Just do one thing at a time.
[32:40.750 --> 32:43.610]  There's a lot of things that I referenced.
[32:45.370 --> 32:46.270]  Let me take a look.
[32:49.720 --> 32:51.360]  Here's my contact information.
[32:51.480 --> 32:52.140]  There's my emails.
[32:52.720 --> 32:53.960]  My GPG fingerprint.
[32:54.200 --> 32:55.780]  You can go to email self-defense.
[32:56.020 --> 32:56.940]  Figure out how that works.
[32:57.180 --> 32:58.060]  Send me an encrypted email.
[32:58.200 --> 32:58.940]  Then only we can read it.
[32:59.020 --> 32:59.400]  It's kind of cool.
[33:00.360 --> 33:01.520]  I'm on IRC.
[33:02.040 --> 33:03.340]  Follow me on Mastodon.
[33:04.520 --> 33:05.940]  Me and my friends self-host that.
[33:06.080 --> 33:06.400]  It's cool.
[33:08.480 --> 33:11.200]  I'm on forges under technology classroom.
[33:12.260 --> 33:13.860]  And I threw a lot of information at you.
[33:14.520 --> 33:16.580]  So it's question and answer time.
[33:16.860 --> 33:17.540]  What you got?
[33:18.220 --> 33:18.620]  A
[33:21.780 --> 33:22.380]  couple questions.
[33:22.660 --> 33:22.880]  Great.
[33:28.140 --> 33:29.880]  I checked that project from time to time.
[33:30.060 --> 33:31.940]  I've been checking that for 10 years now.
[33:32.220 --> 33:33.320]  Is it a bandwagon?
[33:33.540 --> 33:35.920]  Because I'm looking at the supported devices list.
[33:36.160 --> 33:38.700]  I just double checked it again just for my sanity.
[33:39.960 --> 33:45.500]  The most recent device supported on it is the Galaxy S2, which is 11 years old.
[33:45.640 --> 33:47.400]  That's a huge issue.
[33:47.680 --> 33:55.660]  The problem is that a lot of the newer phones don't work without non-free software in some way.
[33:57.300 --> 33:57.900]  So...
[33:57.900 --> 34:00.640]  Is that a recommended solution there?
[34:01.520 --> 34:02.840]  It doesn't work for me.
[34:02.980 --> 34:03.840]  I'll say that.
[34:04.400 --> 34:08.000]  I've known people that have used it, that still use it.
[34:11.020 --> 34:13.360]  But like I said, I'm on the pine phone train.
[34:14.400 --> 34:15.640]  I think this is the future.
[34:17.900 --> 34:19.240]  But it also doesn't work yet.
[34:21.080 --> 34:21.880]  It kind of works.
[34:22.300 --> 34:23.840]  My camera doesn't work, for example.
[34:24.820 --> 34:26.100]  That's why I have this other phone.
[34:26.340 --> 34:26.900]  It's just a camera.
[34:27.720 --> 34:28.040]  How
[34:35.720 --> 34:40.000]  do you think OpenSense and PFSense are going to be for CMC?
[34:40.160 --> 34:42.880]  I know they're like targeting slightly different applications.
[34:43.860 --> 34:44.420]  But...
[34:46.060 --> 34:48.300]  I haven't used them myself.
[34:49.900 --> 34:50.460]  So...
[34:50.460 --> 34:52.480]  I'm not entirely sure.
[34:53.020 --> 34:55.940]  Aren't they programs that can run on...
[34:55.940 --> 34:56.480]  So they're...
[34:56.480 --> 34:57.400]  They're both...
[34:59.140 --> 34:59.800]  Essentially...
[34:59.800 --> 35:02.220]  Built on top of...
[35:03.360 --> 35:04.020]  FreeBSD...
[35:04.020 --> 35:04.580]  Or...
[35:04.580 --> 35:05.340]  OpenBSD...
[35:05.340 --> 35:06.520]  Depending on which ones you're running.
[35:08.900 --> 35:09.560]  But...
[35:09.560 --> 35:09.800]  Yeah.
[35:10.320 --> 35:10.980]  They're...
[35:10.980 --> 35:14.320]  BSD based router software for...
[35:14.320 --> 35:16.840]  X86 computers...
[35:16.840 --> 35:17.220]  Largely.
[35:17.440 --> 35:17.820]  Right.
[35:18.180 --> 35:18.840]  So...
[35:20.340 --> 35:22.040]  These slides are kind of simplified.
[35:23.720 --> 35:24.380]  Comparing...
[35:25.260 --> 35:25.920]  OpenBSD...
[35:25.920 --> 35:27.320]  Without the non-free firmware.
[35:28.860 --> 35:29.120]  And...
[35:30.540 --> 35:31.140]  LibraCMC...
[35:31.140 --> 35:31.600]  And...
[35:33.080 --> 35:33.680]  GNU/Linux...
[35:33.680 --> 35:36.060]  With firewall software running as a router.
[35:37.520 --> 35:39.540]  That's a little more advanced than the stock.
[35:40.080 --> 35:41.800]  You'd have to actually like...
[35:41.800 --> 35:43.220]  Compare those...
[35:43.220 --> 35:45.920]  Three together to see how they...
[35:46.500 --> 35:47.360]  Handled the load.
[35:49.040 --> 35:49.640]  I...
[35:49.640 --> 35:49.780]  I've...
[35:49.780 --> 35:51.000]  I've known people that have used...
[35:51.580 --> 35:52.120]  Like a...
[35:52.120 --> 35:52.920]  A full server...
[35:53.880 --> 35:54.180]  With...
[35:54.480 --> 35:55.300]  Free software.
[35:56.120 --> 35:56.560]  GNU/Linux...
[35:57.700 --> 35:58.140]  Um...
[35:58.140 --> 35:58.480]  And...
[35:58.480 --> 35:59.140]  Firewall software.
[35:59.900 --> 36:00.340]  So...
[36:00.780 --> 36:01.220]  Um...
[36:01.220 --> 36:02.720]  How do you compare those?
[36:03.000 --> 36:04.420]  A lot of it comes down to the config.
[36:07.000 --> 36:07.440]  Um...
[36:07.440 --> 36:08.620]  As far as I know...
[36:09.540 --> 36:09.980]  They...
[36:09.980 --> 36:10.240]  Basically...
[36:10.240 --> 36:10.840]  Are the same thing.
[36:12.000 --> 36:12.880]  Just different...
[36:12.880 --> 36:13.680]  Ways of doing the same thing.
[36:19.530 --> 36:19.970]  Yeah.
[36:20.110 --> 36:20.830]  So I have...
[36:21.490 --> 36:22.550]  A few other questions.
[36:22.910 --> 36:23.250]  Um...
[36:23.250 --> 36:23.770]  First of all...
[36:23.770 --> 36:24.550]  Thanks again for the talk.
[36:24.910 --> 36:26.170]  It was much appreciated.
[36:26.490 --> 36:26.790]  Um...
[36:26.790 --> 36:27.010]  Thank you.
[36:27.110 --> 36:28.430]  Regarding the TVs...
[36:29.050 --> 36:29.490]  Um...
[36:29.490 --> 36:30.190]  Uh...
[36:30.190 --> 36:31.670]  It's just what I've heard often...
[36:31.670 --> 36:32.250]  Um...
[36:32.250 --> 36:32.470]  But...
[36:32.470 --> 36:34.490]  One extreme solution that some people...
[36:35.070 --> 36:35.450]  Like to do...
[36:35.450 --> 36:37.510]  They actually go out and purchase commercial monitors.
[36:37.790 --> 36:38.010]  You know...
[36:38.010 --> 36:39.170]  For like...
[36:39.170 --> 36:39.790]  Like...
[36:39.790 --> 36:39.990]  You know...
[36:39.990 --> 36:41.970]  Stores or banks or something like that.
[36:42.130 --> 36:44.910]  You can buy monitors which don't have any...
[36:45.450 --> 36:46.830]  Smart capability...
[36:46.830 --> 36:47.130]  At all.
[36:47.290 --> 36:48.410]  They're just dumb screens.
[36:49.010 --> 36:50.150]  Someone don't need to...
[36:50.150 --> 36:50.510]  So...
[36:50.510 --> 36:50.870]  Well...
[36:50.870 --> 36:51.070]  That's...
[36:51.070 --> 36:51.290]  Yeah.
[36:51.730 --> 36:52.870]  That would work.
[36:53.670 --> 36:54.150]  That's...
[36:55.250 --> 36:56.510]  Maybe more expensive.
[36:56.790 --> 36:56.950]  Yeah.
[36:57.130 --> 36:57.610]  But...
[36:57.610 --> 36:58.250]  Um...
[36:58.250 --> 36:58.750]  That would work.
[36:58.790 --> 36:59.370]  Like I said...
[36:59.370 --> 37:00.370]  Extreme solution.
[37:00.810 --> 37:01.110]  Right.
[37:01.130 --> 37:02.610]  I also heard there's like a company...
[37:02.610 --> 37:03.990]  It's called Scepter.
[37:04.230 --> 37:06.210]  They kind of make more lower end TVs.
[37:06.470 --> 37:06.910]  But...
[37:06.910 --> 37:07.670]  Apparently they...
[37:07.670 --> 37:09.870]  They make a couple models that are still like...
[37:09.870 --> 37:10.690]  Dumb TVs.
[37:11.010 --> 37:11.230]  You know...
[37:11.230 --> 37:11.810]  Just like...
[37:11.810 --> 37:12.950]  Regular TVs.
[37:13.330 --> 37:13.570]  And...
[37:13.570 --> 37:15.090]  Some of them are even made in the U.S.
[37:15.470 --> 37:16.550]  So that's...
[37:16.550 --> 37:17.890]  It's a plus if you care about that.
[37:17.890 --> 37:18.130]  Cool.
[37:18.330 --> 37:19.350]  The name was Scepter?
[37:19.510 --> 37:19.930]  Scepter.
[37:20.090 --> 37:20.270]  Cool.
[37:20.570 --> 37:21.150]  So like...
[37:21.150 --> 37:22.270]  Vote with your dollars.
[37:22.590 --> 37:23.130]  If you...
[37:23.130 --> 37:24.510]  Next time you're buying a TV...
[37:24.510 --> 37:25.090]  Buy a dumb one.
[37:25.590 --> 37:26.050]  And then...
[37:26.050 --> 37:27.810]  They'll see that those dumb ones sell.
[37:27.990 --> 37:28.710]  Yeah, that...
[37:31.660 --> 37:32.140]  Um...
[37:32.140 --> 37:33.060]  You know, one more question.
[37:33.240 --> 37:33.500]  Okay.
[37:34.420 --> 37:34.740]  Uh...
[37:34.740 --> 37:35.540]  So you mentioned...
[37:35.540 --> 37:37.320]  Core Booth versus Lieber Booth.
[37:38.200 --> 37:38.680]  So...
[37:39.560 --> 37:40.040]  Um...
[37:40.040 --> 37:40.920]  I remember...
[37:40.920 --> 37:43.260]  Watching a talk about Core Booth...
[37:43.260 --> 37:43.880]  By...
[37:43.880 --> 37:44.420]  Colonel Hudson.
[37:44.880 --> 37:45.360]  You...
[37:46.120 --> 37:47.080]  Could you...
[37:47.080 --> 37:47.920]  Stand upon...
[37:47.920 --> 37:49.340]  What is the difference between...
[37:49.340 --> 37:51.280]  Core Booth and Lieber Booth?
[37:51.420 --> 37:52.760]  Like what is...
[37:52.760 --> 37:53.540]  What is Core Booth lacking?
[37:54.540 --> 37:55.140]  I think...
[37:55.140 --> 37:56.720]  So Core Booth...
[37:57.720 --> 37:58.440]  Um...
[37:58.440 --> 38:00.040]  The whole boot process was free.
[38:00.220 --> 38:00.860]  It's just that they...
[38:00.860 --> 38:02.200]  They disable like...
[38:02.200 --> 38:02.780]  Mostly.
[38:04.880 --> 38:05.600]  Um...
[38:06.620 --> 38:08.300]  They both have...
[38:08.300 --> 38:10.100]  ME disabled as far as I know.
[38:10.580 --> 38:11.300]  But...
[38:11.300 --> 38:15.980]  The Core Boot project has some binary blobs...
[38:15.980 --> 38:16.740]  That...
[38:16.740 --> 38:17.260]  That...
[38:17.260 --> 38:18.460]  You can't compile yourself.
[38:19.160 --> 38:19.320]  Uh...
[38:19.320 --> 38:20.700]  Libra Boot is all...
[38:20.700 --> 38:22.020]  Software that you can compile...
[38:22.020 --> 38:22.260]  Yourself.
[38:22.800 --> 38:24.100]  Non-free binary blobs.
[38:24.300 --> 38:25.660]  Non-free binary blobs.
[38:25.840 --> 38:25.980]  Non-free binary blobs.
[38:25.980 --> 38:26.540]  Thank you.
[38:27.620 --> 38:27.960]  Alright.
[38:28.040 --> 38:28.980]  I saw a few questions...
[38:29.540 --> 38:29.980]  Over there.
[38:30.940 --> 38:31.940]  Red shirt first.
[38:35.160 --> 38:35.680]  Topping...
[38:35.680 --> 38:35.920]  Topping.
[38:36.160 --> 38:36.320]  Okay.
[38:36.500 --> 38:39.250]  Which is low TV.
[38:39.770 --> 38:40.010]  Okay.
[38:40.730 --> 38:41.250]  Namely...
[38:41.250 --> 38:41.610]  Cars.
[38:42.290 --> 38:43.310]  You know...
[38:43.310 --> 38:43.770]  You are right.
[38:44.010 --> 38:44.650]  I think...
[38:44.650 --> 38:45.490]  Cars could actually be like...
[38:45.490 --> 38:46.150]  A whole...
[38:46.150 --> 38:47.370]  Whole nother talk.
[38:47.970 --> 38:48.310]  Um...
[38:48.310 --> 38:49.630]  I've been struggling...
[38:49.630 --> 38:50.130]  With...
[38:50.130 --> 38:52.050]  Freedom of car tech...
[38:52.050 --> 38:52.810]  For so long.
[38:53.230 --> 38:53.910]  And...
[38:53.910 --> 38:54.610]  Um...
[38:55.130 --> 38:56.330]  You're so right.
[38:57.810 --> 38:58.490]  Um...
[38:58.490 --> 38:59.450]  The last...
[38:59.450 --> 38:59.990]  I...
[38:59.990 --> 39:00.890]  I just had like...
[39:00.890 --> 39:02.410]  A few car accidents...
[39:02.410 --> 39:03.610]  Happened in front of my house...
[39:03.610 --> 39:04.790]  That smashed up my cars.
[39:05.150 --> 39:05.430]  So...
[39:05.430 --> 39:05.950]  See...
[39:05.950 --> 39:07.370]  Several car...
[39:07.370 --> 39:07.890]  Uh...
[39:07.890 --> 39:08.850]  Infotainment systems.
[39:09.650 --> 39:10.330]  And...
[39:10.330 --> 39:11.090]  They are getting...
[39:11.090 --> 39:12.190]  Worse and worse and worse.
[39:12.830 --> 39:13.250]  Um...
[39:13.250 --> 39:15.390]  My current car has an LTE modem...
[39:15.390 --> 39:16.130]  That...
[39:16.130 --> 39:17.170]  I can't turn off.
[39:17.770 --> 39:18.210]  And...
[39:18.210 --> 39:18.370]  Uh...
[39:18.370 --> 39:19.010]  That's a problem.
[39:19.410 --> 39:20.890]  The last one before that...
[39:20.890 --> 39:22.010]  Had a Wi-Fi...
[39:22.010 --> 39:22.730]  That I couldn't turn off.
[39:23.050 --> 39:24.230]  And every time...
[39:24.230 --> 39:24.510]  I...
[39:24.510 --> 39:25.530]  I would turn it off.
[39:25.690 --> 39:25.950]  Or...
[39:25.950 --> 39:26.150]  I...
[39:26.150 --> 39:26.950]  I would disconnect it.
[39:27.110 --> 39:28.070]  And then every time...
[39:28.070 --> 39:29.330]  I would drive past the dealership...
[39:29.330 --> 39:29.890]  It would reconnect.
[39:30.850 --> 39:31.290]  Um...
[39:31.290 --> 39:32.930]  And then it would try to update the software...
[39:32.930 --> 39:33.250]  And be like...
[39:33.250 --> 39:33.590]  Hey...
[39:33.590 --> 39:33.910]  Whoa...
[39:33.910 --> 39:34.190]  Oh...
[39:34.190 --> 39:34.630]  Stop that.
[39:35.590 --> 39:36.070]  Gotcha!
[39:37.830 --> 39:38.310]  Um...
[39:38.310 --> 39:39.330]  It's a huge issue...
[39:39.330 --> 39:40.310]  And it needs to be addressed.
[39:40.870 --> 39:41.250]  So...
[39:41.250 --> 39:42.130]  Thank you for bringing that up.
[39:42.550 --> 39:42.850]  Um...
[39:42.850 --> 39:43.790]  I don't see a solution.
[39:45.390 --> 39:45.870]  Um...
[39:45.870 --> 39:47.610]  You could like strip out the...
[39:47.610 --> 39:48.330]  The...
[39:48.330 --> 39:48.430]  The...
[39:48.430 --> 39:50.230]  Car stereo, but...
[39:50.230 --> 39:52.850]  Now it's tied to everything in the car's diagnostic.
[39:53.190 --> 39:53.650]  So...
[39:53.650 --> 39:54.070]  It's...
[39:54.070 --> 39:55.470]  It's a big issue and...
[39:55.470 --> 39:56.610]  I don't know how to fix it.
[39:56.810 --> 39:57.830]  But it needs to get fixed.
[40:01.330 --> 40:01.910]  Um...
[40:01.910 --> 40:02.630]  Behind...
[40:02.630 --> 40:02.930]  Red shirt.
[40:04.050 --> 40:04.630]  So...
[40:04.630 --> 40:05.170]  I think...
[40:05.170 --> 40:06.390]  Part of the reason why we have...
[40:06.390 --> 40:07.270]  Non-free...
[40:07.270 --> 40:09.350]  Parallelware for so many phones and laptops now...
[40:09.350 --> 40:10.890]  Is that there are no components that...
[40:10.890 --> 40:12.570]  That can run free...
[40:12.570 --> 40:12.690]  Parallelware.
[40:12.830 --> 40:13.830]  Like no Wi-Fi components.
[40:14.010 --> 40:15.010]  Is there any...
[40:15.010 --> 40:15.670]  Hope of getting...
[40:15.670 --> 40:16.650]  Wi-Fi chips...
[40:16.650 --> 40:17.470]  That's modern...
[40:17.470 --> 40:18.330]  That runs free...
[40:18.330 --> 40:18.550]  Parallelware.
[40:19.330 --> 40:20.930]  There are some...
[40:20.930 --> 40:21.970]  Free...
[40:21.970 --> 40:23.550]  Wi-Fi chips.
[40:23.550 --> 40:24.810]  They're just...
[40:24.810 --> 40:25.390]  Not the...
[40:25.390 --> 40:26.290]  The hyper-cheap ones.
[40:26.730 --> 40:27.250]  So...
[40:27.250 --> 40:27.950]  When...
[40:28.810 --> 40:29.330]  Um...
[40:29.330 --> 40:32.910]  A company is trying to make something as cheap as possible...
[40:32.910 --> 40:34.330]  They'll often times not use those.
[40:36.690 --> 40:37.210]  Um...
[40:37.210 --> 40:40.470]  Is it gonna be like the brand new latest...
[40:40.470 --> 40:41.270]  Letter?
[40:41.550 --> 40:41.790]  You know?
[40:41.970 --> 40:42.530]  Probably not.
[40:42.790 --> 40:43.130]  But...
[40:43.130 --> 40:43.830]  There...
[40:43.830 --> 40:45.370]  There are free...
[40:46.030 --> 40:46.550]  Wireless...
[40:46.550 --> 40:47.110]  Cards.
[40:47.650 --> 40:50.790]  Your default BIOS might not allow you to boot with it...
[40:50.790 --> 40:51.070]  In there.
[40:51.270 --> 40:51.690]  But...
[40:52.850 --> 40:55.010]  You can flash that and...
[40:55.010 --> 40:55.210]  Fix that.
[40:58.450 --> 41:01.110]  I was surprised that you didn't mention the Brave browser.
[41:01.310 --> 41:01.890]  Are you familiar?
[41:02.390 --> 41:03.370]  So, uh...
[41:03.370 --> 41:04.330]  I kind of...
[41:04.990 --> 41:05.650]  Mentioned it.
[41:05.890 --> 41:08.330]  I mentioned Chrome-based browsers.
[41:08.870 --> 41:10.090]  Missing from the slides.
[41:10.250 --> 41:10.490]  Yeah.
[41:11.970 --> 41:12.530]  Um...
[41:12.530 --> 41:13.250]  I could say that.
[41:13.710 --> 41:14.770]  I didn't.
[41:17.350 --> 41:18.190]  Categories here.
[41:18.350 --> 41:18.610]  Right.
[41:18.850 --> 41:19.290]  So, um...
[41:19.290 --> 41:21.390]  Jshelter project I work on...
[41:22.350 --> 41:24.590]  Sees a lot of the things that Brave is doing.
[41:25.370 --> 41:28.330]  And tries to implement it as an extension.
[41:29.350 --> 41:29.670]  Uh...
[41:29.670 --> 41:30.410]  That works on Firefox.
[41:31.010 --> 41:31.310]  And Chrome.
[41:31.630 --> 41:33.630]  Extensions are certainly limited.
[41:34.150 --> 41:34.870]  It's true.
[41:35.150 --> 41:39.650]  And they're getting more limited with Manifest V3.
[41:40.090 --> 41:41.210]  So, it's an issue.
[41:42.090 --> 41:42.610]  Um...
[41:42.610 --> 41:45.050]  Still, there are things that you can only do in native Go.
[41:45.370 --> 41:45.630]  Right.
[41:47.810 --> 41:48.330]  And...
[41:48.330 --> 41:49.050]  There's a...
[41:49.050 --> 41:49.410]  There's a...
[41:49.950 --> 41:53.470]  Within the free software community, there's a big, uh...
[41:53.470 --> 41:54.930]  Discussion about Chrome...
[41:54.930 --> 41:55.370]  Chromium.
[41:56.050 --> 41:56.390]  And the...
[41:56.730 --> 41:57.030]  The...
[41:57.790 --> 41:58.670]  Freedom of it.
[41:58.890 --> 41:59.290]  And it's...
[42:00.710 --> 42:01.230]  Uh...
[42:01.230 --> 42:02.150]  I'm not gonna get into it.
[42:02.230 --> 42:03.210]  But it's an issue.
[42:04.010 --> 42:04.530]  Um...
[42:04.530 --> 42:08.230]  It covers all the categories mentioned before things you can do with it.
[42:11.310 --> 42:11.790]  Uh...
[42:11.790 --> 42:11.910]  It...
[42:11.910 --> 42:12.710]  It's a complicated issue.
[42:14.210 --> 42:14.690]  Okay.
[42:15.130 --> 42:15.490]  Uh...
[42:15.490 --> 42:15.730]  Sorry.
[42:16.130 --> 42:16.730]  Just one more thing.
[42:16.950 --> 42:17.130]  Uh...
[42:17.130 --> 42:17.590]  For search.
[42:18.010 --> 42:18.570]  Like web search.
[42:18.750 --> 42:19.130]  Search.
[42:19.270 --> 42:21.010]  Do you have any opinions there?
[42:22.090 --> 42:22.570]  Um...
[42:22.570 --> 42:22.950]  I do.
[42:24.890 --> 42:25.370]  Um...
[42:28.450 --> 42:29.710]  I don't have a good one, though.
[42:30.030 --> 42:30.350]  Uh...
[42:30.350 --> 42:31.690]  You can self-host some.
[42:32.310 --> 42:32.810]  There's a...
[42:33.350 --> 42:33.570]  Yaki.
[42:33.890 --> 42:35.090]  I don't know if I'm saying that right.
[42:35.310 --> 42:36.590]  Y-A-C-A...
[42:36.590 --> 42:36.710]  No.
[42:36.890 --> 42:38.350]  Y-A-C-Y.
[42:41.830 --> 42:42.270]  Um...
[42:42.270 --> 42:45.070]  There's another one you can self-host that I forget the name of because it's late.
[42:46.890 --> 42:47.330]  Um...
[42:47.330 --> 42:51.370]  There's, like, proxy ones that use Google but you're not using Google.
[42:51.830 --> 42:52.230]  Uh...
[42:52.230 --> 42:52.810]  StartPage is one.
[42:54.790 --> 42:55.230]  Um...
[42:55.230 --> 42:58.230]  But then you're trusting that StartPage is doing what you...
[42:59.250 --> 42:59.610]  Yeah.
[43:00.630 --> 43:00.710]  Uh...
[43:00.710 --> 43:01.470]  There's DuckDuckGo.
[43:05.170 --> 43:05.530]  Um...
[43:05.530 --> 43:07.190]  Well, I have one more suggestion.
[43:07.590 --> 43:08.030]  Right, sir.
[43:10.750 --> 43:11.310]  Look it up.
[43:11.570 --> 43:11.830]  Uh...
[43:11.830 --> 43:12.490]  I haven't used that one.
[43:13.310 --> 43:13.730]  All right.
[43:13.930 --> 43:15.450]  I saw another hand in the ears.
[43:17.030 --> 43:17.390]  Uh...
[43:17.390 --> 43:18.130]  What is my question?
[43:18.370 --> 43:18.710]  Oh, yeah.
[43:19.750 --> 43:20.110]  Um...
[43:20.110 --> 43:24.470]  So, I think one of the things, you know, if you brought them into privacy and they get into it...
[43:24.470 --> 43:24.810]  Uh...
[43:24.810 --> 43:25.690]  And especially more so...
[43:25.690 --> 43:27.990]  Software does start turning a whack-a-mole game to all.
[43:28.130 --> 43:31.330]  So you fix one thing, break another thing, and start, like...
[43:31.330 --> 43:45.090]  And I think part of this, too, is, I mean, in the crowd here, like, we're very much about it, but, you know, the minute I talk to my partner about privacy and, like, some practical things to do, it can escalate very quickly.
[43:45.610 --> 43:51.630]  And I feel like we have a pretty large population, and that's one of the things we need to hurt in some way.
[43:52.350 --> 44:07.930]  And I guess the question is, you know, like, what would you recommend as the best practical advice, one, on how to communicate, and two, like, what might be those things for the rest of people who are not going to necessarily jump into open sports, by the way?
[44:08.050 --> 44:09.670]  Or how do we make it more accessible in this?
[44:09.670 --> 44:12.570]  You know, and that might be another problem, of course, not making it accessible.
[44:13.570 --> 44:14.010]  Right.
[44:14.230 --> 44:18.970]  So the number one way to make something accessible is to have things that you can buy.
[44:19.210 --> 44:27.770]  You know, if you go to a big box store, there's nothing that you can buy off the shelf that fits into these higher-rung ladders.
[44:29.750 --> 44:34.330]  So we need more people making those things that are accessible.
[44:35.350 --> 44:42.370]  So the beginning of that question is how can you approach the subject with, like, significant others and things?
[44:42.610 --> 44:45.250]  I know I struggle with this quite a bit.
[44:45.730 --> 44:49.130]  But you know those people better than I do.
[44:49.410 --> 44:56.590]  So in general, you've got to, like, find their interests and lead them to follow their interests.
[44:56.590 --> 45:09.090]  So if they're, you know, musicians, show them some cool musician software that you can have the four freedoms with.
[45:12.790 --> 45:14.750]  And that can go with any category.
[45:15.270 --> 45:18.670]  Artists, there's Krita you can do cool stuff with.
[45:20.830 --> 45:23.270]  Name something, there's plenty of software out there.
[45:24.090 --> 45:29.630]  Like, whether, like, they're going to get to the top rung of all these ladders, you know, probably not.
[45:30.690 --> 45:31.630]  Am I going to?
[45:31.730 --> 45:31.930]  No.
[45:32.430 --> 45:32.570]  You know?
[45:33.810 --> 45:37.890]  But you just got to kind of follow their interests and make suggestions.
[45:38.190 --> 45:39.010]  Maybe try something out.
[45:39.170 --> 45:40.370]  Maybe build something for them.
[45:43.460 --> 45:44.700]  Oh, oh, didn't see you.
[45:44.980 --> 45:46.120]  It's a wide room.
[45:46.280 --> 45:46.760]  Sorry, sorry, sorry.
[45:46.820 --> 45:47.220]  No worries.
[45:48.100 --> 45:51.120]  Yeah, I'm just wondering, like, what the privacy implication...
[45:51.120 --> 45:59.800]  I know it's, you know, non-free backend, but, you know, free front-head support, non-free backend, like knitter, bibliogram, new pipe, stuff like that.
[46:00.160 --> 46:01.360]  Like, what's the...
[46:01.360 --> 46:04.440]  I'm glad you brought up those, because those are all really cool projects.
[46:04.580 --> 46:04.940]  I love them.
[46:06.640 --> 46:15.500]  So, when people communicate, sometimes you have to read what they wrote somewhere that you aren't.
[46:16.340 --> 46:23.320]  So, Knitter, it allows you to read Twitter without telling Twitter that you read Twitter.
[46:24.500 --> 46:26.300]  It's cool, and you can self-host it.
[46:26.580 --> 46:27.080]  That's really great.
[46:27.300 --> 46:33.860]  NewPipe is a FDroid app that is better than the proprietary YouTube app.
[46:33.860 --> 46:37.900]  You can download YouTube videos.
[46:38.080 --> 46:38.800]  You can download audio.
[46:39.080 --> 46:43.600]  You can listen to things with the phone turned off.
[46:43.760 --> 46:45.660]  That's, like, an advanced feature that you've got to pay for.
[46:45.780 --> 46:46.240]  That's ridiculous.
[46:46.960 --> 46:47.700]  NewPipe's great.
[46:50.060 --> 46:50.720]  What else?
[46:50.840 --> 46:54.320]  Bibliogram is Instagram without Instagram.
[46:55.980 --> 46:57.400]  It's cool stuff.
[46:57.640 --> 46:58.880]  But, you know, it's...
[46:59.640 --> 47:03.720]  If you compare it to that chat slide, you know, it's free software.
[47:04.200 --> 47:07.200]  Free client with a non-free backend.
[47:08.120 --> 47:11.340]  So, how much you participate is up to you at that point.
[47:12.160 --> 47:16.800]  But, it's at least giving you the option to not share data that you don't want to share.
[47:17.700 --> 47:22.100]  So, it's cool that it puts some of that data control in your...
[47:22.100 --> 47:22.700]  Control.
[47:25.000 --> 47:25.880]  Did I...
[47:25.880 --> 47:28.040]  You threw a lot of front ends at me.
[47:28.140 --> 47:28.980]  Did I cover them all?
[47:30.280 --> 47:31.160]  Knitter, bibliogram...
[47:31.160 --> 47:31.920]  NewPipe.
[47:32.640 --> 47:35.460]  I don't know.
[47:36.040 --> 47:38.700]  There's a scribe rip, which is one from Medium.
[47:39.000 --> 47:39.460]  It's pretty cool.
[47:39.700 --> 47:44.780]  There's a browser extension that you can automatically, like, rewrite the URLs to those.
[47:44.780 --> 47:45.680]  It's pretty cool.
[47:48.120 --> 47:48.960]  Good question.
[47:50.180 --> 47:50.620]  All right.
[47:52.940 --> 47:55.780]  I was wondering if you could mention two geeky things.
[47:56.360 --> 48:00.660]  One is a geeky thing that's very cool, and one is a geeky thing that's very bad.
[48:01.400 --> 48:04.260]  Those two things are Discord and Gemini.
[48:06.700 --> 48:08.920]  I would love to talk about Discord in Gemini.
[48:10.340 --> 48:23.060]  So, Discord is an aggressive, non-free client with unknown backend and some terms of service where you can't make a free client for it.
[48:23.240 --> 48:27.280]  Now, I was using a free client for it on the command line, and it was awesome.
[48:27.640 --> 48:29.940]  But then that became an abandoned project.
[48:30.120 --> 48:30.780]  I forget the name of it.
[48:30.940 --> 48:31.860]  It was written in Golang.
[48:31.860 --> 48:32.440]  It was pretty cool.
[48:32.940 --> 48:34.120]  But it doesn't work anymore.
[48:41.870 --> 48:48.250]  I wasn't banned, but it was so good for a little while.
[48:51.190 --> 48:57.110]  So, I do have a lot of friends on Discord, and I use the web client, which isn't...
[48:57.110 --> 48:58.870]  It's, like, non-free JavaScript.
[48:58.870 --> 48:59.670]  I don't like it.
[48:59.670 --> 49:01.730]  I would love a solution.
[49:01.950 --> 49:03.150]  If you find a solution, email me.
[49:06.450 --> 49:06.950]  Gopher.
[49:07.130 --> 49:09.630]  Gopher is, like, the small, small web.
[49:10.610 --> 49:11.950]  S-M-O-L.
[49:13.650 --> 49:19.030]  It's, like, a re-envisioning of web pages without all the HTML and CSS.
[49:19.390 --> 49:21.470]  It's, like, super limited.
[49:22.350 --> 49:39.370]  I think it's a cool idea, but when you take out all the interactivity of the web, you're going to lose out on shopping and pictures, GIFs, videos, like, sharing video.
[49:39.370 --> 49:47.330]  There's a lot of cool stuff on the web that you can do that you have to have all this cool tech that we've built.
[49:48.630 --> 49:56.490]  So, I think it's going to be, like, a cool geeky thing that's not going to have much use.
[49:56.850 --> 49:57.010]  Right.
[49:57.190 --> 49:59.810]  A hope-friendly thing, but not a New York City-friendly thing.
[50:06.890 --> 50:08.670]  Just repeating it back for the mic.
[50:18.480 --> 50:20.420]  So, I have not used it.
[50:20.740 --> 50:22.440]  I've read about it.
[50:22.940 --> 50:26.020]  And there's some really cool stuff with it.
[50:27.740 --> 50:28.900]  It has...
[50:32.570 --> 50:37.770]  Referring to these slides, it's, like, free software with non-free drivers.
[50:38.390 --> 50:41.050]  So, that it works on, like, a lot of hardware.
[50:41.450 --> 50:44.010]  So, it's got that working against it.
[50:44.150 --> 50:51.010]  But then, a lot of the design of it is that you can run things that you don't trust on your system.
[50:52.550 --> 50:56.010]  A lot of what I've been talking about is running things that you do trust.
[50:58.490 --> 51:00.250]  But I have...
[51:01.350 --> 51:04.470]  I have heard a cool use case for it.
[51:04.830 --> 51:07.170]  Or at least that type of tech.
[51:07.410 --> 51:09.270]  You could apply it to whatever other system.
[51:09.610 --> 51:13.070]  Say you get a PDF, and you don't trust the PDF.
[51:13.330 --> 51:14.430]  You want to open the PDF.
[51:14.910 --> 51:23.910]  You could open up a container, open up that PDF, view the PDF, and hope that it wasn't malware that can escape the container.
[51:26.050 --> 51:27.750]  But we're at a hacker convention.
[51:27.970 --> 51:31.210]  So, like, maybe we'll see some PDFs that escape containers this weekend.
[51:31.210 --> 51:31.530]  A
[51:35.730 --> 51:48.850]  lot of us have to make concessions about either, like, running free software that is bugging and unmaintained, but we can't maintain it, or running proprietary software.
[51:49.210 --> 52:00.230]  And it's the only solution I've come across where I can actually run software that I don't entirely trust or can't trust without knowing for sure that I'm being owned.
[52:02.050 --> 52:02.430]  Right.
[52:02.910 --> 52:03.290]  Actually,
[52:06.800 --> 52:16.900]  like, there's a way to manage that and, like, you know, okay, well, this software is delicious, but I can still do something to deal with that so I can interface with the people that I need to.
[52:18.120 --> 52:18.500]  Right.
[52:18.780 --> 52:25.980]  And at the end of the day, it kind of comes down to how much are you comfortable with yourself.
[52:27.040 --> 52:30.000]  And everybody's threat assessments are going to be different.
[52:32.260 --> 52:36.100]  How high everybody's going to climb up each ladder is going to be different.
[52:37.360 --> 52:38.080]  So...
[52:57.360 --> 53:00.600]  ...we're running a regular Linux distribution.
[53:01.460 --> 53:16.300]  Just because the regular Linux distribution, well, those open things, yes, the bugs get patched, but there are a lot of, there are a lot of things that are zero days that do get exploited.
[53:18.440 --> 53:32.320]  And QSOS has a layer of mitigation that I personally feel deals with that in a way that other operations don't know, even if I have to give up some of that freedom.
[53:32.640 --> 53:34.480]  So I wanted to hear your opinion.
[53:34.700 --> 53:35.080]  Right.
[53:35.620 --> 53:36.140]  So...
[53:36.140 --> 53:40.260]  One thing I would like to see is a lot of these, like, top tier things...
[53:40.800 --> 53:45.040]  A lot of these top tier options are piggybacking off the work of others.
[53:45.820 --> 53:50.900]  So, Trisql is an operating system made by a friend of mine, Ruben Rodriguez.
[53:51.780 --> 53:54.440]  And it's Ubuntu.
[53:54.900 --> 53:55.980]  You know Ubuntu.
[53:56.380 --> 53:59.180]  But it's Ubuntu without all the non-free software.
[54:00.820 --> 54:05.060]  So what I would like to see is Qubes given the same treatment.
[54:05.300 --> 54:18.620]  I would like to see either Qubes themselves or someone else either make a secondary version of Qubes or a Qubes Libre fork that just solves...
[54:18.620 --> 54:19.860]  I think it's like a small issue.
[54:20.040 --> 54:21.220]  Like, just strip out...
[54:21.220 --> 54:21.980]  Use a different kernel.
[54:22.280 --> 54:23.760]  Use the Linux Libre kernel.
[54:24.100 --> 54:26.400]  And then, like, that pretty much solves everything I'm talking about.
[54:48.100 --> 54:48.540]  Right.
[54:49.760 --> 54:51.340]  But it's all like a matter of trade-off.
[54:52.200 --> 54:52.640]  So...
[54:53.600 --> 54:54.640]  A lot of...
[54:56.360 --> 54:57.900]  A lot of it comes down to convenience.
[54:58.120 --> 55:04.480]  If somebody makes a new distro that gives something as a default, then more people are likely to use that.
[55:06.540 --> 55:09.860]  You can compile whatever kernel you want for whatever distro you want.
[55:10.800 --> 55:13.040]  No one is stopping anybody from doing that.
[55:13.040 --> 55:17.320]  And nobody is stopping anybody from forking a free software project and doing whatever they want with it.
[55:17.520 --> 55:17.820]  So...
[55:18.620 --> 55:20.640]  It's just a matter of, like, volunteer hours.
[55:20.760 --> 55:24.000]  If anybody, like, really wants to see that, then they'll do it.
[55:25.320 --> 55:26.360]  It's the beauty of it.
[55:26.360 --> 55:36.640]  Like, worry, slash wonder, get nervous about, like, smart cities.
[55:38.460 --> 55:39.140]  Yeah.
[55:39.720 --> 55:40.360]  But...
[55:42.320 --> 55:43.960]  You know, there's...
[55:45.140 --> 55:46.800]  You ever played Watch Dogs?
[55:47.140 --> 55:50.740]  It's a proprietary video game that, like, analyzes this exact situation.
[55:50.740 --> 55:53.140]  It's hackers running around in smart cities.
[55:53.980 --> 55:55.680]  It's a problem, you know?
[55:56.100 --> 55:59.600]  And we can mitigate that with laws.
[56:00.560 --> 56:03.760]  Several states have banned facial recognition.
[56:04.320 --> 56:06.040]  That's a good first step.
[56:09.430 --> 56:12.770]  You know, some of it's things that are out of your control.
[56:12.770 --> 56:20.290]  So you can get, like, super into politics and local politics, and you can try to make issues and prevent things before they become a reality.
[56:25.110 --> 56:42.710]  But most of this talk is about focusing on starting with yourself, freeing yourself as much as you can, and hopefully spreading that to others that might be interested in freeing themselves, freeing your city.
[56:43.330 --> 56:47.330]  You know, there's a lot that...
[56:48.250 --> 56:50.930]  There's a lot of, like, city infrastructure that is free.
[56:54.090 --> 56:58.630]  Public transportation, all those, like, kiosks, you know, they're probably run on free software.
[56:59.030 --> 57:01.670]  You know, the API that keeps track of all the times.
[57:03.210 --> 57:05.070]  It's probably free software on the back end, you know?
[57:05.290 --> 57:06.030]  A lot of it is free.
[57:06.030 --> 57:08.270]  It's a really cool part of it.
[57:09.250 --> 57:10.490]  Is it free for you?
[57:10.710 --> 57:11.530]  You know, maybe not.
[57:11.790 --> 57:16.940]  But get active in local politics.
[57:17.260 --> 57:18.040]  You know, make it an issue.
[57:21.880 --> 57:23.220]  You mentioned before,
[57:34.060 --> 57:35.180]  shared with other people.
[57:35.560 --> 57:35.660]  Right.
[57:35.720 --> 57:40.020]  Because if you self-host, then you're still tied to one IP and it's still you.
[57:40.280 --> 57:40.740]  Right.
[57:41.380 --> 57:46.380]  So this leaves the problem of choosing a VPN that's trustworthy.
[57:46.380 --> 57:46.960]  Right.
[57:47.120 --> 57:49.340]  And as far as I know, there's no good way to do it.
[57:49.460 --> 57:51.020]  It's all reputation-based.
[57:51.760 --> 57:54.180]  And there isn't any hard data.
[57:55.840 --> 58:03.600]  There's this ranking by Torrentfreak yearly where VPN providers answer a bunch of questions, which is great.
[58:03.760 --> 58:05.440]  But it's still based on trust.
[58:05.660 --> 58:06.640]  Like, trust us.
[58:06.800 --> 58:07.700]  This is what we do.
[58:08.340 --> 58:08.700]  Right.
[58:08.700 --> 58:12.400]  Do you or the FSF have an answer to this problem?
[58:13.440 --> 58:14.280]  We don't.
[58:15.740 --> 58:17.120]  But we've thought about it.
[58:17.620 --> 58:23.100]  So this kind of goes back to the trust but verify.
[58:25.420 --> 58:28.420]  These VPN providers are coming up with privacy policies.
[58:28.580 --> 58:29.920]  They're answering questionnaires, like you said.
[58:30.820 --> 58:32.640]  And you have to take their word for it.
[58:33.200 --> 58:42.280]  And sometimes you'll see unknown backends that publish code and they say this is our backend code.
[58:43.780 --> 58:47.660]  Can you verify that they are running that code on the server?
[58:48.360 --> 58:51.980]  Now, a lot of the VPNs are probably running OpenVPN, which is free software.
[58:52.320 --> 59:03.960]  But how do you verify that software that someone else is running on their server without SSH-ing into that server and checking it out?
[59:05.020 --> 59:06.440]  It's like a problem.
[59:09.440 --> 59:11.020]  And then you have to trust the auditor.
[59:11.540 --> 59:13.460]  And, like, it's tricky.
[59:13.680 --> 59:14.020]  It's tricky.
[59:15.460 --> 59:15.820]  Right.
[59:15.820 --> 59:17.400]  Oh, auditor's coming.
[59:18.300 --> 59:20.220]  Load up that second image.
[59:20.460 --> 59:20.620]  You know?
[59:21.200 --> 59:21.620]  It's...
[59:21.620 --> 59:22.780]  So this sounds...
[59:22.780 --> 59:24.560]  That's a little more paranoid, you know?
[59:25.140 --> 59:25.780]  But...
[59:26.580 --> 59:27.640]  It's an issue.
[59:27.880 --> 59:28.820]  You can't verify it.
[59:29.700 --> 59:33.500]  By communities that could come together and do it.
[59:33.680 --> 59:33.780]  Right.
[59:33.780 --> 59:35.580]  But that needs some sort of leadership.
[59:36.440 --> 59:39.860]  And, you know, FSF could be such an organization.
[59:41.720 --> 59:42.360]  Maybe.
[59:43.580 --> 59:46.720]  The problem is, FSF is like 14 people.
[59:47.760 --> 59:49.040]  Four of them are in this room.
[59:50.300 --> 59:52.460]  And we are doing so much stuff.
[59:52.720 --> 59:54.140]  We got our hands in so many pots.
[59:56.760 --> 59:59.040]  Every time we come up with a new idea, we run it.
[59:59.320 --> 01:00:02.040]  And all those ideas are going to be badly executed.
[01:00:03.780 --> 01:00:04.780]  So it's an issue.
[01:00:06.960 --> 01:00:10.240]  But you can self-host open VPN.
[01:00:10.900 --> 01:00:19.060]  So if you were the tech savvy person in your group, you could say, I know that trusting VPNs is an issue.
[01:00:19.340 --> 01:00:20.640]  I'm self-hosting it.
[01:00:20.740 --> 01:00:22.100]  Let me show you how I'm doing it.
[01:00:24.060 --> 01:00:27.480]  Help me run the server fees or power costs or whatever.
[01:00:27.820 --> 01:00:32.680]  You still need a lot of people to exit through that VPN to get lost in the crowd.
[01:00:32.980 --> 01:00:33.120]  Right.
[01:00:33.640 --> 01:00:36.520]  And to do that, you essentially have to run a business.
[01:00:37.380 --> 01:00:38.560]  So that's a bit more.
[01:00:38.560 --> 01:00:44.000]  So I do know some people that run a business doing VPNs.
[01:00:44.060 --> 01:00:47.040]  And do I trust them more than other people?
[01:00:47.320 --> 01:00:47.480]  You know?
[01:00:48.220 --> 01:00:48.600]  I don't know.
[01:00:52.020 --> 01:00:53.660]  Anything to recommend?
[01:00:54.120 --> 01:00:55.560]  Then give us a link.
[01:00:56.120 --> 01:00:57.260]  I don't have any names.
[01:00:57.480 --> 01:00:59.200]  I don't have any VPN recommendations.
[01:01:00.060 --> 01:01:00.920]  It's an issue.
[01:01:03.780 --> 01:01:04.640]  It's confidential.
[01:01:12.420 --> 01:01:15.160]  Thanks for the assist there.
[01:01:19.640 --> 01:01:20.700]  Mumble is great.
[01:01:21.020 --> 01:01:21.540]  I love Mumble.
[01:01:21.640 --> 01:01:24.080]  We use Mumble every day.
[01:01:24.740 --> 01:01:24.920]  It's great.
[01:01:25.640 --> 01:01:26.260]  Self-host it.
[01:01:26.540 --> 01:01:27.600]  It's low resources.
[01:01:27.900 --> 01:01:29.280]  You can chat with all your friends.
[01:01:30.060 --> 01:01:30.180]  It's great.
[01:01:30.700 --> 01:01:31.080]  Love it.
[01:01:31.920 --> 01:01:34.960]  It is on the remote communications wiki.
[01:01:35.300 --> 01:01:36.000]  Check it out.
[01:01:38.340 --> 01:01:39.420]  Any other questions?
[01:01:39.420 --> 01:01:41.020]  It's getting real late.
[01:01:42.520 --> 01:01:43.220]  It is.
[01:01:43.360 --> 01:01:43.560]  All right.
[01:01:43.720 --> 01:01:44.200]  Thank you.
[01:01:45.460 --> 01:01:46.180]  Thank you.
[01:01:50.340 --> 01:01:53.020]  So that wraps the last track for today, everyone.
[01:01:53.600 --> 01:01:59.420]  Tomorrow morning at 11, the first track will be in this room, An Engineer's Guide to Linux Kernel.
[01:01:59.600 --> 01:02:00.900]  So if you can make it, come.
[01:02:00.900 --> 01:02:01.060]  For now, let them know maybe you're the bestands of the university or a foreign...
[01:02:01.240 --> 01:02:01.360]  Oops.
[01:02:01.460 --> 01:02:01.720]  You have informed my opinion of this is this is this is type of presenting this about So this one will be going to come.
[01:02:01.720 --> 01:02:01.900]  All right.
[01:02:01.940 --> 01:02:01.960]  Maybe one of our options are people are both gonna come.