Dan Appelquist @torgo

@mala "We're sorry, but something went wrong." 🙁

@Rosencrantz I also think it's a kind of white-washing... The speaker in question's title was "Lead Privacy & Civil Liberties Engineering." Kind of reminds me of large companies I've worked for that have so-called social responsibility departments.

Presentation from Palintir at #wearedevs conference in Vienna last week focused on engineering better user privacy and recommended Federation as one architecture that protects privacy. It was a good talk, but... Palintir? Really? https://mastodon.social/media/TrVUgVV93SUQRddqUoE https://mastodon.social/media/hdQcHVxOQgK59nSjMU0

@sandhawke full support and I think @Edent would support as well.

@onion2k on the other hand... https://arstechnica.com/security/2017/05/thieves-drain-2fa-protected-bank-accounts-by-abusing-ss7-routing-protocol/

@sandhawke @Gargron should it be up to the instance provider to decide whether their instance participates in any global search? That way instances (for example, ones specialising in marginalised communities) can keep their content private?

@onion2k I have experienced some of this myself – I agree it's not 100% and people have to choose the solution that works best for them. Still think that for the majority of people, if we want to get them moved to 2FA for regular services they use, SMS should be the first point-of-call.

@onion2k ... when do you not have phone signal but you do have internet? In most cases you do have (free) SMS receive capability even when roaming. Many people also can receive SMS when they don't have Cellular signal through connected apps (I do so through O2's Tu Go for example). I would counter (regarding authenticator apps): "so you need one specific device with you at all time in order to log in?" On balance I think SMS works better for most people.

@Bobo_PK first of all I would never use such a thing on my physical front door. And yes SMS is not encrypted but it's still an effective 2nd factor IMO. The other advantage is that everyone has it and knows how to use it.

Everything should have at least password + SMS code 2-factor auth in this day and age. Everything.

@jyasskin no those are our meeting minutes. Sone notes from the meetup breakouts were captured here though : https://docs.google.com/document/d/1iS2j_k3hmU503AzqG5sNACx8DE4uK2e0wPSjusvNUt8/mobilebasic.

Japan is great and all but some part of me is glad to be back communing on the Northern Line.

Last morning in Tokyo before heading back to London. Such an amazing city.

OH: "There are two million ways to kill yourself in git."

Really great #html5j @w3c TAG developer meetup hosted by #html5j here in Tokyo. Some very pointed feedback on security & privacy particularly on web payment, permission-requesting APIs and user tracking / personal data. https://mastodon.social/media/Ca5oeAsKp16fwLpgWZM

Day one of @w3c TAG meeting happening in Tokyo: https://github.com/w3ctag/meetings/tree/gh-pages/2017/04-tokyo

That thing when your laptop displays an unfamiliar prompt asking you for your admin password when you're sitting in a conference room in Beijing. :/

Pictures From the #marchforscience https://nyti.ms/2p7pujn ❤️⚛️🔭💉🚀⚡️🌦🔬⚗️🌍

@w3c advisory committee meeting now kicking off in Beijing with an open day.