Surveillance companies assure us that they employ safeguards to ensure that their customers aren't abusing their products to engage in unlawful or unethical surveillance. And yet, inevitably, these companies abuse their tools THEMSELVES.

1/

I spend a lot of time looking in detail at abusive situations where tech plays a starring role: stalkerware, bossware, remote proctoring, etc. But nothing I'd read really prepared me for the tale of @arisevsinc, an abuser without parallel.

https://t.co/olExnSwEcW

1/

Arise sells itself as a "virtual call center" and boasts of blue-chip clients like Disney, Carnival Cruises, Comcast, Airbnb, Intuit etc. If you've ever called one of these companies, you may have spoken to an Arise worker.

2/

But that "worker" was not an employee. Arise is a pioneer in worker misclassification, and treats all the people who work for it as "independent contractors." So even though these workers are more tightly supervised and managed than any regular employee, they have no rights.

3/

You have to pay Arise for the privilege of working for them. Not just buying your own computer, but also paying to be trained in how to pretend to be an employee of Disney or Airbnb and Arise's other customers.

4/

Execs at these giant corps listen in on your calls while they are in progress or after the fact - and if they detect so much as a squeak from a child, or a noisy neighbor, they can terminate your contract and you lose the money and unpaid labor you spent on training.

5/

It's been twenty years, to the day, since I published my first blog-post.

I'm a blogger.

Blogging - publicly breaking down the things that seem significant, then synthesizing them in longer pieces - is the defining activity of my days.

https://t.co/lksXhU6HKM

1/

Over the years, I've been lauded, threatened, sued (more than once). I've met many people who read my work and have made connections with many more whose work I wrote about. Combing through my old posts every morning is a journey through my intellectual development.

2/

It's been almost exactly a year I left Boing Boing, after 19 years. It wasn't planned, and it wasn't fun, but it was definitely time. I still own a chunk of the business and wish them well. But after 19 years, it was time for a change.

3/

A few weeks after I quit Boing Boing, I started a solo project. It's called Pluralistic: it's a blog that is published simultaneously on Twitter, Mastodon, Tumblr, a newsletter and the web. It's got no tracking or ads. Here's the very first

I don't often do "process posts" but this merits it. Here's how I built Pluralistic and here's how it works today, after nearly a year.

I get up at 5AM and make coffee. Then I sit down on the sofa and open a huge tab-group, and scroll through my RSS feeds using @newsblur.

5/

The Democrats are at least two parties. The progressive wing of the party (which is by no means unified) and the finance wing of the party, which is also the party leadership.

1/

During the leadership race, the progressive wing was represented by @SenSanders and @SenWarren; the former wants to minimize the role of markets in our lives, the latter wants to redeem markets by regulating them. It's a distinction with a difference, but I donated to both.

2/

Both wings of the party have prominent representatives in Congress; Sandersism are most visibly associated with @AOC (whom I donated to) and Warrenism is embodied by @RepKatiePorter (likewise), who was also one of Warren's law school proteges.

3/

Porter is a force of nature. She is infamous - and celebrated - for her brutal, no-holds-barred questioning of both corporate and administration witnesses, using a white-board to pin them down and eviscerating any attempts at bullshittery.

4/

This isn't just about getting facts into the record (though, she is SO GOOD at getting facts into the record!), it's also about effecting change, like when she single-handedly cornered the CDC's chief into guaranteeing universal, free covid

As the Qanon prophecies fail and the cult-members struggle to resolve their cognitive dissonance, it's a good time to revisit the history of paranoid, conspiratorial political movements in American history - the "paranoid style" that has dominated since the Revolution.

1/

After all, the very first skirmishes of the US war of independence were based on a conspiracy theory: that the levy on tea was a prelude to a sellout of the colonists to transnational mercantalist interests. US politics have always been conspiratorial.

2/

I found @zacharykarabell's @politico history of the Know Nothing party especially useful, as it tells the story of what happens when surging, paranoid, fractious political movements

The American Party was a secret 19th century organization founded on a conspiracy theory: that Irish immigrants were secretly planning a takeover of the US on behalf of the Pope.

4/

Singing the Blues:
Taking Down an Insider Threat

"I had all of the advantages. I was already inside the network. No one suspected me. But they found my hack, kicked me off the network...

...and physically hunted me down."

Many pentests start from the outside, wanting to see how the perimeter might be breached.

This pentest started from the inside. My client wanted to assume they had already been breached, and, if breached, how far could an attacker go.

Could they stop me once I was inside?

So they snuck me in. Disguised me as a new employee. Gave me a work computer, an ID badge, an account in their system... hell, I even had a cubicle w/my assumed name on it.

The only person who knew who I really was was their CISO. Everyone else thought I was Jeremy in Marketing.

During most of the first morning, I completed onboarding, made introductions, and completed menial tasks.

But I had to act quick. I only had a week onsite. I had to hack their network while not raising suspicion.

So I set about it.

You have to understand... most "Internal Pentests" are straight forward. The hard part is breaching the network, but once you're inside, it's a target rich environment. End of Life computers, default passwords, everyone a Local Administrator...

It’s underremarked upon that stablecoins accomplish basically all of the original design goals for Bitcoin qua a transactional mechanism (instant free value transfer anywhere), but that nobody cares about this because nobody ever cared about that part of the pitch.

“Why do people care about stablecoins then?”

A mix of “they encourage dollar-denominated liquidity in the cryptocurrency ecosystem and discourage withdrawal of the same” and “they’re good for money laundering.”

“But they make value transfer between exchanges much faster!”

This was a solved problem in traditional finance, too, mostly through the extension of credit. (It doesn’t matter how long settlement takes if there is sufficient trust to enable credit.)

The Bitcoin ecosystem is *positively allergic* to credit, so you have to call it a coin for them to accept it. And after you call it a coin they ignore everything the world has learned about credit, like risk management.

“Stablecoins aren’t credit!”

They’re pretty much exactly credit? A tether is a zero-coupon Bitfinex bond with a non-functioning call option. I

argh chrome updated and it seems they've intentionally broken custom search engines. I have had a keyword search for "foone" which searches my own twitter, so I just type "foone BLAH" and it gives me a twitter search for when I said BLAH, right?

but now I get that option in the titlebar of "search twitter self-search" which is the name of the search"
if I just type "foone blah" now...

it ignores the search I have had defined for years and just googles it.

and this is definitely on purpose because they didn't just break it, they changed it. it's now "fooneblah"

there doesn't seem to be an option to make this stop and get the old behavior back :(