I suppose SSH is easier to use on machines you don't own, but the best practice would be to set up a VPN tunnel. 6 - 1/2 dozen.

Why is a VPN better practice?

Only I've been using sshuttle to make ad-hoc tunnels and it's exceedingly easy - there's details at http://alicious.com/digitalocean-free-credit/ (if you'll forgive the rather mercenary promotional slant in that post).

In short "$ sshuttle --dns -r root@X.X.X.X 0/0 --exclude 192.168.0.0/9 # start sshuttle" tunnels everything but my local network over a server with SSH on it [I've not checked for myself with Wireshark yet, do your due diligence].

When setting up I found [Open]VPN a bit protracted in comparison.

VPN and SSH are only partially overlapping in their features. Are you suggesting that SSH only allows local connections, and your VPN is what allows you local network access?

Wait, in GamerGate it was the activist journalists who were writing skewed articles that were the bad actors, wasn't it?

if you consider debatably 'skewed articles' as more considerable evidence of 'bad actors' than harassment campaigns, then yes

I don't have the knowledge to support or contest anything except your last sentence. yum's UI is the only thing I like more than apt-get. But yum doesn't have the concept of depends vs. recommends, so installing nginx, for example, REQUIRES pulling down geo-IP libraries that are entirely unnecessary.

RPM 4.12.0 brought in support for weak dependencies, which implements the tags Recommends, Suggests, Supplements and Enhances, which provides analog functionality from apt > http://rpm.org/wiki/Releases/4.12.0

This is in Fedora 21, so should be in RHEL 8.

Newest version of RPM 4.13 will implemented logical dependencies, e.g. Require: foo IF bar , Require: foo OR bar OR baz, which are far more usable than soft dependencies.

Entirely agree with you. That is the singular area that dpkg used to beat rpm as a format. That isn't a feature of apt-get or yum, but of the underlying package format.

However, it is supported in a very new release of rpm:

http://www.rpm.org/wiki/Releases/4.12.0#Generalbugfixesanden...

""" New --recommends, --suggests, --supplements and --enhances query aliases for querying weak dependencies """

So it is coming along :)

I have several issues with your post.

1) Public places /used/ to be private! In practice, anyway, because CCTV wasn't ubiquitous, and constant recording by every passerby wasn't the norm. It's a public space, but 24/7 recording by a dozen private parties at a time is NOT the norm historically.

2) If most of our surveillance online is "by consent" but no one reads the EULA or signs anything, is it really consent? Just because people are ignorant to the problems, or do not feel immediate impact of online surveillance, doesn't make it right or consensual.

oncall and support are instant turnaways? How do you get employed in IT?

By working at a place that recognises a need for these tasks and hires specifically for them!

So you're saying a company should have full time workers who ONLY monitor a specific system, separate from its day-to-day maintenance?

Regardless of my potential issues with tptacek, I stopped reading at

>The cheaters deserve to be outed.

Same way the Mercury Seven were "founding astronauts": the first class, the inaugural group, etc.

Look. Seriously. Like, totally.

Not everyone interested in Tor is educated enough to reinstall an OS. Or they need Windows for something else they do. Or 50 other things. Or maybe we're concerned about VPN leakage, or any other thing than tor that we might use to obfuscate traffic.

As if Oracle's practices shouldn't have already warned you away. If this is what set you off...

I guarantee you don't need the "middle" pack for a two-dev shop. Either use their hosted solution, host your own CE, or spend $390 a year to get the EE code with minimal support.