Notices by Zak Kaufman :1password: (zak@infosec.exchange)

Anyone have a good privacy-respecting weather app for Android recommendation?

The fact that Reddit for iOS insists on being in the “Information and Reading” category instead of “Social” like every other social network drives me up a wall. Same deal for Twitch for iOS insisting that it’s “Photo and Video” instead of “Entertainment” like every other streaming video service.

App Library needs customization.

@aral I kinda sorta agree, but the line here is a thin one. I’d argue that the baseline of deciding what data to share is security, not privacy. If you’ve decided that your data should be yours alone, and then you discover that it isn’t and that someone else has access to it, you have a security issue.

In my mind, privacy is deciding what others can do with your data once you’ve decided to share it.

#Privacy is not “I want to be invisible on the internet.” That’s anonymity. Privacy is control over what others can do with your data. Your rights, your choices, your data ownership.

Find you a partner that passes your initial risk assessment and compels you to update the privacy policy of your heart.

Apple should really rename Launchpad (on macOS) to App Library (like on iOS).

App Library is nuts. Ivory is an enterprise app now?

I’d love for Mastodon to have a native timeline syncing API so that I can pick up where I left off no matter which client I’m using. Unless that already exists, in which case I’d love for clients to actually implement that functionality.

They’re at it again. USB4 v2. At this point I don’t know what’s more confusing: USB specifications, or seasons of the Attack on Titan anime. https://www.phoronix.com/news/Linux-6.5-USB4-v2-Barlow-Ridge

Millions of 60+ year olds are about to try to learn how to use Twitter for the first time to follow Tucker to his new platform. Twitter’s about to be the hottest thing since Nextdoor.

The amount of people who exist on the internet to do nothing except bash things that people have worked hard on never ceases to blow my mind.

I’m so excited for the people who are about to go back and watch Star Wars Rebels for the first time.

Update on Lockdown Mode:

1. I’ve barely noticed anything on macOS or iPadOS. Web browsing is slightly impacted on the iPad, but that’s not a huge deal. It’s basically invisible on the Mac. Connecting accessories requires an extra confirmation, but that’s about it.

2. Things are more complex on the iPhone. Focus modes aren’t shared, including Sleep mode for Do Not Disturb functionality. The indexing of images and text in message history is disabled, so finding anything via search is almost impossible. Web browsing is much more noticeably impacted here, with some website icons and images being replaced with random emoji. A lot of very small things are broken.

Verdict: I’ll keep it enabled on the Mac and the iPad, but I may disable it on my iPhone. Either that, or I’ll leave it enabled and disable it temporarily as needed.

#security #lockdownmode #macos #ios

Here’s a good example of weird web browsing stuff. Booking a Disney World reservation on the web. The calendar forward arrow has been replaced with the beer emoji. And the star used to indicate bonus reservations has been replaced with a speaker.

Friends in #security that use #macOS, are you using Lockdown Mode? Why or why not?

Here's some more #security stuff about #1Password. This time, it's all about Watchtower.

#Watchtower has been around for some time, but new to 1Password 8 is a metered Watchtower score. This score will improve as you adjust to the good habits of using a password manager (or more generally a secrets manager). There might be more to that than you first realize.

Your passwords need to be unique, random, and strong. You'll need to have enabled MFA with logins that permit you to do so. 1Password will also track expiring items (like credit cards and driver's licenses) and ask you to renew them when the time comes. And it'll track any websites that you've saved as less-than-secure HTTP links instead of HTTPS links, but those are becoming less common over time.

As a bonus, it will alert you when your credentials have been involved in a security incident of some sort. Watchtower integrates with @troyhunt's Pwned Passwords, and additionally has its own system for detecting compromised credentials. I am one of the people that helps to maintain that system.

Watchtower will increase your score until you max out at 1200. So, I'd ask who thinks they can beat my score... but you can't. But do your best to match it.