HTTPS protects more than passwords and credit cards. It prevents censorship by making selective content blocking impossible.
Let’s Encrypt Everything
I’ll admit I was late to the HTTPS party. But post Snowden, and particularly after the result of the last election here in the US, it’s clear that everything on the web should be encrypted by default. Why? 1. You have an inalienable right to privacy, both in
The Tor Project | Privacy & Freedom Online
Defend yourself against tracking and surveillance. Circumvent censorship.
Online Safety Bills Are Fueling a New Wave of Internet Censorship
State and federal bills seek to limit minors’ access to social media, but civil liberties advocates warn that the resulting online censorship threatens constitutional rights without delivering real safety.
The Age-Gated Internet Is Sweeping the US. Activists Are Fighting Back
Half of the country now requires age verification to watch porn or access “harmful” content. Digital rights advocates are pushing back against legislation they say will make the internet less safe.
Using Ads to Sustain Open Source
Why someone who loves Privacy Badger, uses a non-tracking browser, and never cared for ads, is advocating their ethical use for open…
Age-Verification Laws Seek to Erase LGBTQ+ Identity from the Internet
Age-verification laws are weaponized to censor LGBTQ+ and abortion-related content online under the guise of protecting children from porn.
Why Meta is retreating from encryption
In 2019, Mark Zuckerberg called privacy the future of social networking. Not anymore
#cybersafety #ageverification #privacy #minors #ai | Parry Aftab
Internet Age-Verification Causing More Risks than It’s Worth This is not a new issue. Regulators and policymakers have raised it for the last 28 years as the way the keep kids safer online. They compare it to having to flash an ID to purchase regulated content or items (porn, cigarettes, alcohol, restricted medications, age-restricted movies, amusement rides, etc.) But verification online is very different and vastly riskier than flashing an ID in real life. For one, it’s collecting personally-identifiable information about our kids. For two, it puts that information in the too-often untrustworthy digital hands of tech companies. For three, while porn, alcohol and regulated drugs may be a clear-cut case for restricting access to adults, access to the Internet is very different. Yet, regulations begun in the UK and adopted globally have begun a weighted cybersafety approach that, in my humble opinion, prefers excluding young people from digital technology over teaching the cybersafety and digital life skills. That, in my 32 years of work in the fields of cybersafety and protection of minors online, was and remains a mistake. One of my best known quotes, repeated in Congressional and state legislative testimony and in the media is: “The greatest single risk our children face online is being denied access. We have solutions for everything else.” (my testimony before the FTC) Some proponents of age-verification have opted to denying them access unless they give up confirmable personally-identifiable info, such as selfies, feeding AI with PII, and govt or school credentials. I argue that this gives social networks, game providers and digital app operators a wealth of PII to be used for profiling, marketing and collecting far too much. With their privacy at stake, too often incompetent, malicious and greedy producers and mega-tech industry players, can’t and shouldn’t be trusted with the personal info of our most vulnerable - our kids. And AI will now be tasked with collecting everything it can find about our kids to be able to “age-verify.” (It’s ability to age-verify is less reliable with youth as their data-sets are more limited.) I served on a task force appointed by 49 state attorneys general, charged to research and weigh-in on this issue. We concluded that age-verification wasn’t feasible. While this task force was formed many years ago, with the exception of a fortified AI, not much as changed. Our children’s privacy remains, or should remain, paramount. We have robust filtering and blocking technologies. The adult industry has adopted an age-gated model. And parents can restrict access using device-specific tools. And, many well-intentioned age-verification laws were adopted too quickly for thoughtful discourse. Or by governments more prone to censorship/content restrictions. I fear in our quest to protect our kids we have thrown our babies out with the bath water. #cybersafety #ageverification #privacy #minors #AI
Privacy Principles
Privacy is an essential part of the web. This document provides definitions for privacy and related concepts that are applicable worldwide as well as a set of privacy principles that should guide the development of the web as a trustworthy platform. People using the web would benefit from a stronger relationship between technology and policy, and this document is written to work with both.
Privacy Principles
Privacy is an essential part of the web. This document provides definitions for privacy and related concepts that are applicable worldwide as well as a set of privacy principles that should guide the development of the web as a trustworthy platform. People using the web would benefit from a stronger relationship between technology and policy, and this document is written to work with both.
Why privacy is important, and having "nothing to hide" is irrelevant
The governments of Australia, Germany, the UK and the US are destroying your privacy. Some people don't see the problem...
Why privacy is important, and having "nothing to hide" is irrelevant
The governments of Australia, Germany, the UK and the US are destroying your privacy. Some people don't see the problem...
The "Segregate-and-Suppress" Approach to Regulating Child Safety Online
<div> In an effort to protect children online, regulators around the country and the world are enacting laws that compel Internet publishers to age-authenticat
Safety Without Compromising on Privacy
Our approach to safeguards in Tinfoil Chat that keeps your conversations private: model evaluations before hosting, plus safeguard models that run exclusively inside secure enclaves.
TLS Everywhere, not https: URIs - Design Issues
A few years after HTTP appeared, around when W3C was founded in 1994, it was clear that an unencrypted and unauthenticated connection was too much of a liability for a lot of serious stuff, such as e-commerce, which everyone wanted to do on the web. (In those days, mass Deep Packet Inspection was not technically feasible, so the ubiquitous snooping which we have to day was not the main driver.) There were, among the ideas, two secure versions of HTTP proposed, one known as S-HTTP and the other, as HTTP-S. To cut a long story short, HTTP-S prevailed.