I routinely check youtube for infosec conf videos. I've seen all the important ones. Some of the best ones are the Haroon Meer talks, and of course, TheGrugq. Look out for some @ioerror talks too. All on top of their game.

Blogs are usually mentally taxing and very technical. At least with talks we get the person's own voice which is much more preferable to text, as there are subtleties in the langauge that are usually left out from blogposts

There is no guarantee this will stay for any reasonable amount of time. Look at MySpace - basically a trove of data gone entirely to waste because of greedy opportunists. What you need is IPFS to store that code! (https://github.com/ipfs/ipfs)

ipfs is pretty sick, but like I said on the github page, this isn't really a serious project. :P Just a little fun.

Also should be noted that tweets don't have edit buttons, and the URL is constant. It's why keybase relies on tweets for proof. The modules should be relatively safe unless they're deleted.

To be honest, most of these are surface level traits of an individual. There are deeper traits which go much more personal, and have even been touched on in popular culture in recent times, like in the new James Bond movie (think gait recognition). But even gait, although highly individual, is still touching the surface. I was thinking of 'trimming the bloom filter' to such a degree that we can recognize not only a person on sight, but by cue words, and individual dictionaries alone.

It is no secret that our world is divided by language alone, so then as analysts we can attach certain words to certain behaviors, and this has been proven countless times to expose a person. If I speak English I probably respond in the same way to 'pizza'. Pizza means food, and therefore pizza emotes a pleasure response. But 'bomb' and other words must decide a different response then?

Marketers have copped this early on and frequently use talismanic phrases to elicit positive responses to products, so why not Facebook, and any other tech harvester of data such as Google, et al? Last time I checked it is not a crime to elicit responses using personal, and individualized key-phrases.

Which reminds me of the researcher at Berlin's Humboldt University who ended up in jail because he was the only one at the time who used the word 'gentrification'.

Him, and this left-wing group setting cars on fire.

I think you mean Andrej Holm: https://de.wikipedia.org/wiki/Andrej_Holm (no article on him in the english Wikipedia, sorry).

This surely isn't advertisement. The code is terrible.

Try-catch jungle, ad-hoc URL manipulation, lack of caching, writing/constructing HTML in strange places, weak comparison operators in dangerous places (string vs lunch), etc.

As well as declaring variables in if blocks

if (!undeclaredVariable) { var undeclaredVariable = false; }

Yes. I'm very glad with the addition of 'let' to ES.

Yeah but when visiting in Lynx, it displays fine. Lynx is the yardstick I use to judge a website. There are countless .GOV sites like this made on old Windows 2000 machines with Frontpage installed, but my point is the information is still communicated. It probably doesn't matter about some spagetti JS lumped in. I assume any sensible person will have JS turned off when visiting a URL like that anyway...

:) man have you even met today's web developers? Turning off js is like asking them to work in assembly. Now that Google has gone and built everything the OS does, into the browser the mordern day web dev is programmed to think that they exist to rebuild desktop apps in the browser. Communicating information simply in plain text is the last thing on their minds.

> have you even met today's web developers? Turning off js is like asking them to work in assembly.

To be fair asking them to build apps that don't require JS is like the old man yelling to get off their lawn :)

It's hard maintaining two ways of doing things and it's not always easy to make them both use the same avenue. I'm getting to the point where I honestly don't care either way.

.gov websites are supposed to be ADA Section 508-compliant, so most of them do work in Lynx.

I see. I think it's important to make websites work well for as many clients as possible, including lynx. Ideally, JavaScript should only be used for enhancement of necessary interactivity. But when a choice is made in favor of some technology, I like to see it used properly. In this case maintainability, performance and robustness could benefit from improving this code.

The point here isn't how well it works but the interesting style of code.