TrueCrypt and Reset the Net

I was reading comments at DistroWatch Weekly, which carried a little blurb about TrueCrypt shutting down. There was a comment about speculation that TrueCrypt had received a National Security Letter.

I don't know. It's certainly possible. I tend to doubt it. Their stated purpose in directing people to use BitLocker, to warn people not to use unsupported security software, does ring true. Their reasons for shutting down .... are impenetrably unknown.

That's all speculation. But it brought out a thought for me. The Internet provides any right-thinking surveillance state secret police type administrator the tool of his dreams: a way to get tons of secrets disclosed to his agency without having to depend upon unreliable secret informants.

I don't participate in sedition, or recommend the violent overthrow of our government. But I think that if I did, I would probably use The Amnesiac Incognito Live System, or TAILS Linux, for all clandestine communications -- probably on a device that I never used for anything else. But that may be a bit much at this point. I can readily recommend Reset the Net and the tools they promote for internet privacy and encryption.

Bear in mind, that the more secure and private your communications network is, the more difficult, time-consuming, and unreliable (in the sense of getting all messages through) it becomes, and apply privacy tools to meet your needs.

Marketing the Escape from Software Captivity

Not having gained employment in health information technology, I've gone back to school for business administration. One of the required courses is an introduction to marketing. It is easily the most engaging class I have this semester.

What's one of the first things I got from it? Desktop Linux fails in no small part because of poor marketing and a complete lack of marketing management. To be fair, most of the things which make desktop Linux awesome, by which I mean community and freedom, prevent it from being marketed effectively as a desktop OS.

Linux is an IT pro's playground. If there's anything such a person wants to play with, Linux is just about the best place to go. In some ways, Linux is like Protestantism. Any time any portion of a community is unhappy with how things are going, he (or they) can split off to start another. In Linux, this is not automatically a bad thing. After all, unlike Jesus, Linus Torvalds never prayed that all in his Kingdom would be one. And it leads to all sorts of nifty innovations, like CrunchBang Linux (still one of my favorites), PCMan File Manager and Terminator terminal emulator (both originally one-man projects, and largely they still are). But it does prevent a unified or even coordinated message.

On the other hand, never have the disadvantages of captive software, and entrusting your computer and your information (like what software you install), to the likes of Microsoft's butterfingers been so evident. So what am I asking of the Linux community at large?

Tell people interested in keeping the control of their computers in their own hands to start with a mainstream starter distro with broad support and friendly forums (e.g., Linux Mint, Kubuntu, Lubuntu, Xubuntu, Ubuntu, Mageia, OpenSUSE, Fedora, Korora, Zorin, Sabayon). Assure them that if there's something they really dislike, it can probably be changed. Ask them whether software should be stable and mature or up-to-the-minute. Ask them which version of Windows they liked best, and why. Ask them what applications they absolutely must have, and if the open source alternatives will meet their needs. And apply their answers to the distro you recommend to them -- if any. There are people for whom total escape is not worth the effort. (And yes, I am one of them. I run Win7 to play Need for Speed: World, League of Legends, and Warframe.) Let them keep it.

I am of the opinion that nearly anyone intent on escaping the control that Microsoft has over their computer, and regularly gives to the likes of the RIAA, the MPAA, and the NSA, would do well to use KDE as their desktop environment. This isn't a knock on Unity, GNOME Shell, XFCE, LXDE, or any other UI. It's an opinion, based on my assessment of KDE's usability, maturity, stability, and familiarity to people used to Windows XP and Aero. I would only point them at distros with interfaces that use the start menu, task bar, and desktop paradigm that Windows has used since 95. I think there is absolutely no point in talking with potential new users about Ratpoison (a GUI that does not use the mouse), Fluxbox, or whether GNOME Shell, Unity, Cinnamon, XFCE, or MATE will become the predominant GTK+ 3.x environment. Sure, they're out there, and useful, and interesting, but not to somebody who has only ever used Windows.

Nor does any good come from trying to indoctrinate them to hold your position with regards to vi vs. emacs vs. nano, init vs. SystemV vs. Upstart, or whatever other dispute or controversy you are absolutely sure has only one correct position.

A fair number of popular projects have elitist communities which are actively hostile to newcomers and people who aren't interested in learning a lot about their computers. And it's possible for new projects to spring up with little or no quality control, and/or promise a lot more than they deliver. Either experience will gravely hinder or derail anyone's Linux adoption. No matter how much you may love such a distro or project, don't suggest it to a newcomer.

Another PRISM post

Mozilla has launched an anti-PRISM campaign at StopWatching.Us. I signed their open letter with my real name. And I know that by admitting that, I'm giving the government a double-check means of determining my real identity. But I've always assumed that anything I say here can be traced back to me, given sufficiemt resources.

Claire Wolfe said at the close of the last century that it was too late to reform the US government, but too early to start shooting the bastards. I wonder if she's changed her mind about that latter part, yet.

I've long been critical of the US government, but I've never been seditious or proposed violence. Long before the government could cross any line past which I could have felt justified at opening fire on any of them, I became Catholic, and learned that martyrdom was the better response, both in its morality and in its effectiveness. If you shoot the bastards, they use that as an excuse for escalating their tyranny. If they martyr you, they cannot -- at least, not to themselves.

Good Times in Linux-Land

I'm going to suggest you start using a Linux-based operating system on your computers, rather than Mac OSX or Windows. One reason for switching is because Microsoft is dropping support for Windows XP next April, and you will only be able to get Windows 8 (and then only after a hardware upgrade). If you don't want to buy a new computer, switching to Linux could easily save you from that.

Many Linux variants (called distros) are easy to install, use, and maintain. They do really well what most people do on their computers: surf the web, email, chat on instant messaging clients, manage photos, and word processing. Few of these things are done exactly how they're done in Windows. But that's a feature, not a bug. In a lot of cases, the ways that Windows does these things are kind of lousy, but you're used to the problems. In the meantime, the new way of doing things will seem unnatural and awkward, but it was every bit as awkward and unnatural when you were first learning how to do it in Windows.

Before you consider installing a Linux distro, I urge you to

1. BACK UP YOUR DATA
2. Read their documentation
3. Test that you can restore your data from backup
4. Read their documentation
5. Defragment your hard drive
6. Read their documentation
7. Proceed with download, testing, and installation of your chosen distro

The easiest way for most people to start with Linux is to use Linux Mint 13 (Maya) KDE Edition. The desktop is pretty, quite a bit like Windows 7, and Linux Mint 13 will be supported util April 2017, which means you won't have to reinstall until then. The next version of Linux Mint to have support past that date will be released no sooner than April 2014. Try the live version before installing.

There are other distros that are well-suited for beginners. These include openSUSE, Ubuntu (which has a novel interface called Unity that should also work for smartphones and tablets -- I recommend the LTS version), Kubuntu (again, I recommend LTS), Mageia, PCLinuxOS, and Lubuntu Extra Life Extention. They vary in how often they release new versions, what sort of desktop environment to provide, how long they support old versions, which software they think it is most important to support and update, and how devoted they are to software freedom.

Fedora is quite a bit trickier to make desktop-ready than any of these that I've mentioned. It is heavily supported by Red Hat, which is strongly devoted to free software principles. As a result, Fedora doesn't have a push-button easy way to enable Adobe Flash, many popular (captive) multimedia formats (such as DVDs and MP3s, as well as Adobe Flash), or the nVidia or Radeon proprietary graphics drivers. If installing FlashBlock in your web browser doesn't change anything for you, and you don't play any games with 3-D acceleration, this might not matter. Fedora is also devoted to cutting edge software and rapid release cycles.

Software freedom is one of the major reasons I prefer free software to captive software, like Microsoft Windows and Office, iTunes, Adobe Flash, Kindle, and Nook. They all mean to prevent you from actually controlling copyrighted content, but rather putting control of such content in the hands of others. And if they have to be able to hijack your computer without your say-so to keep that control, then they can. And really, do you deserves that kind of aggravation? Should you have to live with other people controlling your computer, because of so-called "intellectual property rights"? Is it right and just for (say) MGM or Sony Entertainment to delete your legitimate, legal, digital download of a movie or song, because somebody else posted a copy of it on Pirate Bay or MegaUpload or a similar site?

Blogrollin'...and TERRORISM!!

Well, it would appear that my government may well regard me as a terrorist. (Salute to the Pittsford Perennialist for the link.) I have strong political views, I dissent from the policies of the regime, and there are those who may find me intimidating. We've come a long way from the original usage of the word, which was the means the Revolutionary French government of the 18th century tried to intimidate its people into complete and utter submission.

Vive l'Eglise! Vive la Justice! Vive la Liberté!

So-Called "PIPA"

The inoffensive guy in the glasses more or less represents Rep. Lamar Smith. The things he's talking about in the third and fifth panels are provisions of HR 1981, the so-called "Protecting Children from Internet Pornographers Act", aptly nicknamed the "Keep Every Americans' Digital Data for Submission to the Federal Government Without a Warrant Act." (You can sign a petition opposing HR 1981 here.) More information from TechDirt here and here.

The Thinking Behind SOPA

This deserves wider attention:

Some things not addressed by the video:
ANYONE may accuse a site or host of providing pirated content. When this happens, the host has five days to rectify the situation, or their whole site goes down. And there is no due process to determine if the content is legal or infringing IP laws. What's more, there's no penalty for making a false accusation.

Do you see why this is so huge a stick with which to capriciously beat people completely off of the internet that even Microsoft opposes it in its current form? Currently, it might be enforced by removing entries from domain name servers. But when that fails to completely stop piracy, enforcement will require the active blocking of IP addresses. And when that fails to completely stop piracy, it will require deep packet scanning and a complete criminalizing of all encryption not handled by the NSA.

On computing

Most people browse on Windows. I advocate free software, even for Windows users. One problem is that open source licenses allow malicious coders to download the source code, insert malware, compile it, and publish it. To counter this, I suggest looking for your free software at nonags.com, which certifies downloads as malware free and nag free. A second site that is very helpful for this sort of thing is ninite.com, which also has an app to automatically update your downloads when new versions are released. You can also use the H Security Update check to make sure all your windows software is up to date.

In other news, the Electronic Frontier Foundation released a study demonstrating that information provided by default -- namely the combination of your browser, operating system, and plugins, along with their version numbers, uniquely identify 84% to 94% of web surfers, even those who completely disable all cookies. This is one reason why I use Firefox, SRWare Iron, Google Chromium, Midori, Arora, Opera, and w3m browsers with minimal plugins, and three or four different operating systems. I use at least one of these to misrepresent itself, in order to gain access to certain websites that absolutely refuse to grant access when I don't. According to the EFF, the only likely fix is to demand that publishers remove this behavior from browsers.

Advertisers Filter Your Internet

Just in case you haven't seen this yet:


Are you cool with this? If so, why? If not, why not (and what should we do)?

Maybe as this guy suggests?

You Are Being Watched

It is becoming ever more clear that the only time our government cares at all about privacy is when it is ensuring you won't be prosecuted for sexual deviancy, contraception, or abortion. I recently read a description of the internet that certainly seems to apply: a borderless security and surveillance state.

So what has me going on now? I just ran across ZDNet's series on the ever-so-loathesome USA PATRIOT Act. The summary is here, and includes links to the entire four-part series. Another article there quotes Sen. Ron Wyden (D-OR) as saying "We’re getting to a gap between what the public thinks the law says and what the American government secretly thinks the law says," in an article titled "The 'REAL' Patriot Act is Classified." Here's ZDNet's source link. Apparently, the interpretation which the Department of Justice relies upon is classified, and cannot be debated openly in Congress without violating classification rules. And this thing has been passed more or less unchanged.

So who thinks the US government is nothing like a tyranny? Who thinks we are protected from it? Who thinks the Fourth Amendment is a dead letter?

Instead of Googling...

Duck it!

I was reading DWW today, and a screenshot in the OpenIndiana review showed what looked like a search engine I wasn't familiar with: duckduckgo.com . It has just taken the place of Google Advanced in my bookmarks. It may replace Wikipedia in my bookmarks; I can search wikipedia with DDG just by using !w [searchterms] in the search command line. They've got similar shortcuts for hundreds of sites. They also have a privacy policy that is vastly superior to Google's, and their normal search methodology is to find some specialized search engine suited to your query and use that, which I think is creative, clever, and elegant.

I'm going to investigate the command syntax to see how flexible it is. I think I'm even going to make it my firefox home page. If possible, I may make it the default search in Chromium. Much to do, much to learn.

Check thou it out!

Gargantuan Privacy Breach

Watch this video. You will find out how common it is for nearly all types of confidential information to be released without a thought or care by those who are supposed to keep them secure.

edit: that video's gone. Here are some others: