[liberationtech] Privacy Tricks for Activist Web Developers

[Micah Lee]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Last weekend I gave a talk at HOPE Number 9 called Privacy Tricks for
Activist Web Developers. It includes a bunch of snippets of code
explaining how to do things which you can see in the slides.

I hope anyone who builds websites that activists use will take this
advice and stop including third party resources for everyone who loads
their pages, load Twitter feeds server-side instead of using Twitter
badges, disable IP address logging or cryptolog IPs, ditch Google
Analytics for Piwik, force HTTPS and use it correctly, etc.

You can stream it here:
https://www.youtube.com/watch?v=q38HdGGWS78

You can torrent it here:
http://hattorrents.com/torrents/HOPE%20Number%209%20%282012%29%20-%20Privacy%20Tricks%20for%20Activist%20Web%20Developers%20%5BHT%5D.m4v.torrent

Here are the slides:
https://www.eff.org/sites/default/files/filenode/hope_privacy_tricks.pdf

Here's the description from the HOPE schedule:

Do you care about the privacy of your website?s visitors, but also
depend on social media to get your message out? Do you want to protect
your visitors? anonymity in case you or a third party service you use
gets subpoenaed? Do you want to be able to get meaningful and pretty
analytics without third parties tracking your visitors? Can some kid
in a coffee shop really hijack your users? accounts that easily?

Chances are Google, Facebook, and Twitter know as much about your
website?s visitors as you do, IP addresses and user agents are
sprinkled about your server?s filesystem, Google Analytics is watching
everyone?s every move, and some kid in a coffee shop is already pwning
your users. But it doesn?t have to be this way! This technical talk
will cover tricks that web developers and sysadmins can use to
minimize the privacy problems that plague the modern web.

- -- 
Micah Lee
https://twitter.com/#!/micahflee
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=cm3m
-----END PGP SIGNATURE-----