Re: [liberationtech] Here Come the Encryption Apps

2013-04-18 Thread Katrin Verclas
Unfortunately contradicted by the evidence that shows frequent partial 
(regional or specific lines) or (less frequent) total cell phone shutdowns. 
Happens all the time and clear to those who track this systematically. 

Sent from iPhone thus could have typos.

On Mar 15, 2013, at 19:49, Maxim Kammerer m...@dee.su wrote:

 On Fri, Mar 15, 2013 at 6:22 PM, Rich Kulawiec r...@gsp.org wrote:
 Sixth, and let me encapsulate it as a principle:
 
   If you need a GUI to overthrow your government...
   you're probably not going to overthrow your government.
 
 That's harsh, condescending, snarky...but I think it's probably true.
 
 Not really (and I disagree with nearly everything else you wrote).
 Communication is a critical component (some say the most critical) of
 any military operation, and there is no reason why it would be less
 critical for e.g. a successful civil uprising. Cellphones today
 provide the most viable mobile duplex communication channel for
 civilians, and any third-world government will be most reluctant to
 shut down cellphone communication, since it will cause major
 disruptions for its own military, which heavily relies on using
 cellphones instead of unreliable radios. Risks, including traffic
 analysis, can be mitigated or simply accepted, and even government's
 ability to shutdown the cellular network in case of force majeure is
 not a given, if there is (like usual) some first-world country or
 multinational extremist organization behind / supporting the
 grassroots uprising that can supply the necessary equipment on the
 ground. Your post is condescending for the wrong reasons — Twitter
 drama queens cannot make a revolution with or without smartphones, but
 it does not mean that smartphones, and their relevant applications,
 are not the most suitable communication channel for people on the
 ground who actually do things (good or bad).
 
 -- 
 Maxim Kammerer
 Liberté Linux: http://dee.su/liberte
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Explaining Different Types of Trust?

2013-04-18 Thread L Jean Camp
I share your interest in providing meaningful communication to
non-technical people about the risk they are experiencing on the network.
We are looking at  explaining different types of risk; and using risk
communication ideas from physical risk to do this.

So look at dinner. Imagine you are eating shrimp. You are trusting the
Federal food law enforcement, perhaps, but that is not enforced in China
where the shrimp originates. You are trusting border food inspections,  but
these are quite rare. You are trusting the handling of the frozen food by
the shipping company, the port, the trucking company and the grocer.  Any
one of these could let the food go bad. Is that helpful? Would visualizing
this chain or seeing it for every food purpose be helpful, or are there
indicators you look for?

I think this reifies Jason's point about how this degree of constant
information - complete transparency - is not really helpful.

I love RIck's work. He is doing some additional work on story-telling in
security also that should come out soon.

Here are a couple of papers, one on using open or closed eyeballs to
indicate privacy and one pretty fundamental one risk behaviors. Also one
that you probably do not need, on how trust in computing is often designed
in direct opposition to observed human behavior.

eyeballs:
http://www.csee.usf.edu/~labrador/Share/workshops/papers/p291-benton.pdf

risk biases:
http://ieeexplore.ieee.org/xpl/login.jsp?tp=arnumber=6479448
(let me know if this is behind a pay wall for you, if so I will put it
someone you can get it in the next couple of weeks).

trust:
http://ljean.com/files/Trust.pdf

And the Firefox developer position to work on these issues is closing in
two weeks, if you or someone else is looking for full time work on securing
and communicating risk/trust/security.

I will be focusing on this during the summer if you want to chat then.

thanks-

-- 
Prof. L. Jean Camp
http://www.ljean.com
Net Trust
http://code.google.com/p/nettrust/
Economics of Security
http://www.infosecon.net/
ETHOS
http://ethos.indiana.edu
Congressional Fellow
http://www.ieeeusa.org/policy/govfel/congfel.asp
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Here Come the Encryption Apps

2013-04-18 Thread Maxim Kammerer
On Thu, Apr 18, 2013 at 4:04 PM, Katrin Verclas kat...@mobileactive.org wrote:
 Unfortunately contradicted by the evidence that shows frequent partial 
 (regional or specific lines) or (less frequent) total cell phone shutdowns. 
 Happens all the time and clear to those who track this systematically.

Please note that cell network shutdowns is only one aspect of my reply
above. I am mainly concerned with dismissing smartphone (an extremely
useful and capable communication device) as a tool for civil
engagement. I don't view cell phone shutdowns as a serious obstacle to
such engagement. If anything, I would expect a boost in use of
circumvention methods (such as mesh networks) in places where such
shutdowns do become an obstacle.

--
Maxim Kammerer
Liberté Linux: http://dee.su/liberte
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Fwd: SafeGDocs: encrypted documents in Google Drive

2013-04-18 Thread Carmela Troncoso
Hi Steve,

thanks so much for your feedback. We will change the AES implementation
asap, and Stanford's JS Crypto is a perfect candidate. Thanks for
pointing it out.

We have looked at the SecureDocs project, but the code at their web only
works with old Firefox version. Do you know whether the authors plan to
release a new version according to the SPCC 2012 paper?

Kind regards,
Carmela


On 14/04/2013 1:09, Steve Weis wrote:
 Hi. SafeGDocs appears to use a unsafe implementation of AES-CTR mode
 from here:
 http://www.movable-type.co.uk/scripts/aes.html

 Two problems with this library:
 - It generates a predictable CTR mode IV using time of day.
 - There is apparently no authentication of the ciphertext, which in
 CTR mode means you can trivially modify messages.

 The SafeGDocs overlay.js that calls the Movable Type AES library has
 been minified for no apparent reason. I didn't bother to unminify it
 to look at it.

 This similar project, SecureDocs, happens to use the same library, but
 only for a key derivation function. They're using Stanford's JS Crypto
 for the actual encryption: http://www.mightbeevil.com/securedocs/

 I haven't looked at SecureDocs in depth, but Nate Lawson gave it a
 thumbs up:
 http://rdist.root.org/2011/05/09/encrypted-google-docs-done-well/


 On Sat, Apr 13, 2013 at 8:12 AM, Michael Rogers
 mich...@briarproject.org mailto:mich...@briarproject.org wrote:

  Original Message 
 Date:   Mon, 08 Apr 2013 11:03:51 +0200
 From:   Carmela Troncoso ctronc...@gradiant.org
 mailto:ctronc...@gradiant.org
 To: p...@lists.links.org mailto:p...@lists.links.org

 Hello everybody,

 in the last year we have been developing at Gradiant
 (http://www.gradiant.org/en.html) a Firefox addon that allows users to
 easily encrypt and share documents in Google Drive in such a way that
 data is not accessible to the service provider. We are now releasing a
 version and would love to have the feedback of the community both
 about
 its usability and security.

 You can download the addon here:
 http://www.safegdocs.com/en/home.html

 and find the associated academic papers here:
 
 http://www.gradiant.org/images/stories/2010_cloudviews_googledocsprivacy.pdf
 
 http://www.gradiant.org/images/stories/sharing_secure_documents_in_the_cloud.pdf


--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

[liberationtech] Personal Data Protection project in Kosovo

2013-04-18 Thread Teresa Crawford
Greetings folks -

I have been a lurker on the list for the last few months but I know a few
old friends are on this list as well.

Two of my colleagues (in Kosovo and Serbia) are putting together a small
consortium to bid on a new EU program to promote personal data protection
in Kosovo.  It includes helping the GoK Office of Data Protection to
formulate regulations and policies, train staff, raise awareness of the law
with business, government and citizens.

The EU bidding requirement is for a consortium to be led by an organization
in an EU or IPA country with an annual budget of at least 2.5 million
Euros.  My colleagues organizations are too small so they are looking for a
consortium lead with technical expertise to offer as well.  The Serbian
group has been the lead on the development and promulgation of the law in
Serbia and the Kosovo group has also worked extensively with the government
to draft laws.

Given the topic of the list and the diverse membership I thought this list
would be a good place to post and see if anyone can recommend an
organization or works for an organization which might be a good partner.
 Remember size and location matters!

Contact me off list if you are interested in being connected with the folks
in the region.

Teresa


-- 
Teresa Crawford | skype: crawte00 | cell: +1 917-873-6397 | e-mail: teresa_@
_speakeasy.net
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Kiobel Ruling on Alien Tort Statute and Censorship Tech

2013-04-18 Thread Jillian C. York
That's a rather odd position for someone who works for a human rights group
to take.


On Wed, Apr 17, 2013 at 2:26 PM, Peter Micek pe...@accessnow.org wrote:

 Hey Collin,

 It looks like the Supreme Court set a very high bar to overcoming the
 presumption of territoriality in ATS cases.

 That US laws should apply only to traditional spaces of US jurisdiction is
 presumed unless congress specifically says otherwise. Since the Filartiga v
 Peña case in 1989, the US has experimented with applying the ATS (passed as
 part of the *1789* Judiciary Act), to torts committed elsewhere.

 The ATS and other domestic attempts at asserting universal jurisdiction,
 like Spain has experimented with, highlight the need for some adjudication
 where in cases none is likely, or feasible. Spain, for example, recently
 used it to target Pinochet and those responsible for El Salvador's
 massacres in the 1980s.

 Courts asserting universal jurisdiction claim the right to judge crimes
 regardless of where they were committed. See
 http://www.globalpolicy.org/international-justice/universal-jurisdiction-6-31.html
  Some international treaties actually mandate that states account for
 egregious rights abuses when they are not brought to justice domestically.

 This post highlights some legal and policy solutions in the U.S. that go
 survive today's ruling:
 http://opiniojuris.org/2013/04/17/human-rights-will-survive-kiobel

 The Foreign Corrupt Practices Act, the proposed State Department Reporting
 Requirements on US companies operating in Burma, and other measures are
 taking the actions of US corps abroad seriously. And the SEC has been able
 to seize funds of bad actors.

 There are strong reasons to oppose universal jurisdiction here. Domestic
 courts are not necessarily the best equipped to issue swift justice in huge
 transnational cases. The time and cost on ordinary plaintiffs are
 prohibitive (http://papers.ssrn.com/sol3/papers.cfm?abstract_id=1953190).

 The International Criminal Court has assumed jurisdiction over four
 egregious crimes committed worldwide. Corporations don't face any
 transnational court like that. But the process of creating norms (and then
 international law) will continue without universal jurisdiction, and
 companies probably fear angry investors more than many national courts.

 Plus, look at the flip side -- do we want torts occurring between US
 entities and citizens, on US soil, adjudicated in foreign domestic courts?
 It's not a perfect analogy, but not likely.

 Happy to continue the conversation,
 Peter



 On Wed, Apr 17, 2013 at 4:05 PM, Collin Anderson 
 col...@averysmallbird.com wrote:

 Libtech,


 Today the Supreme Court handed down a ruling that seriously limited the
 scope of the Alien Tort Statute on human rights cases. ATS was the grounds
 that Iranians attempted to sue Nokia Siemens Networks for their sale of
 lawful intercept, claims of liabilities for selling surveillance to China,
 and the Turkcell v. MTN case was waiting on the decision[3], so this should
 matter to many on the list. I was hoping that perhaps we could pull out
 some comments from our colleagues in CSR and legal communities.

 Cordially,
 Collin

 [1]
 http://www.dw.de/nokia-siemens-lawsuit-dropped-by-iranian-plaintiffs/a-6240017
 [2] http://www.economist.com/node/18986482
 [3]
 http://blogs.wsj.com/corruption-currents/2012/10/12/judge-stays-turkcell-lawsuit-citing-supreme-court-case/
  --
 *Collin David Anderson*
 averysmallbird.com | @cda | Washington, D.C.

 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech




 --
 Policy Counsel | Access
 www.accessnow.org
 www.rightscon.org
 Ph: +1-646-255-4963 | S: peter-r-m | PGP: 22510994

 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech




-- 
US: +1-857-891-4244 | NL: +31-657086088
site:  jilliancyork.com http://jilliancyork.com/* | *
twitter: @jilliancyork* *

We must not be afraid of dreaming the seemingly impossible if we want the
seemingly impossible to become a reality - *Vaclav Havel*
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Kiobel Ruling on Alien Tort Statute and Censorship Tech

2013-04-18 Thread jon penney
Agreed.

This is a bad decision. The ATS is, as Chip wrote earlier, a jurisdictional
statute.  And, quite frankly, its text and historical context strongly
suggests it captures extraterritoriality activities.

In 1789, the United States was a young republic, attempting to normalize
international relations.  The ATS was likely enacted with that aim in mind,
that is, to allow foreign plaintiffs— such as merchants and ambassadors—
the right to sue Americans in U.S. courts for certain international law
violations causing injury to person or property (though defendants are not
limited by the ATS to American citizens).  Such violations at the time
would have been understood to include extraterritorial acts, like violating
neutrality on the high seas and piracy.  Under the law of nations if you
did not provide such domestic redress (ie with a statute like ATS) then the
state itself would be liable (and would also cause friction with other
states).  Presumably today, foreign subsidiaries of American corporations--
which under the Kiobel majority's reasoning would not overcome the
presumption against extra-territorial application-- likewise could cause
friction for the U.S. among foreign states, for acts abroad committed in
violation of international legal norms.

IMHO, in light of its text and history, the Court should not have used a
rule of statutory interpretation to gut the ATS, when Congress is free to
legislate.  If lawmakers have a problem with the Founding Era statute's
extraterritorial application, they should have the guts to repeal or amend
it.

best, jwp


On Thu, Apr 18, 2013 at 1:33 PM, Jillian C. York jilliancy...@gmail.comwrote:

 That's a rather odd position for someone who works for a human rights
 group to take.


 On Wed, Apr 17, 2013 at 2:26 PM, Peter Micek pe...@accessnow.org wrote:

 Hey Collin,

 It looks like the Supreme Court set a very high bar to overcoming the
 presumption of territoriality in ATS cases.

 That US laws should apply only to traditional spaces of US jurisdiction
 is presumed unless congress specifically says otherwise. Since the
 Filartiga v Peña case in 1989, the US has experimented with applying the
 ATS (passed as part of the *1789* Judiciary Act), to torts committed
 elsewhere.

 The ATS and other domestic attempts at asserting universal jurisdiction,
 like Spain has experimented with, highlight the need for some adjudication
 where in cases none is likely, or feasible. Spain, for example, recently
 used it to target Pinochet and those responsible for El Salvador's
 massacres in the 1980s.

 Courts asserting universal jurisdiction claim the right to judge crimes
 regardless of where they were committed. See
 http://www.globalpolicy.org/international-justice/universal-jurisdiction-6-31.html
  Some international treaties actually mandate that states account for
 egregious rights abuses when they are not brought to justice domestically.

 This post highlights some legal and policy solutions in the U.S. that go
 survive today's ruling:
 http://opiniojuris.org/2013/04/17/human-rights-will-survive-kiobel

 The Foreign Corrupt Practices Act, the proposed State Department
 Reporting Requirements on US companies operating in Burma, and other
 measures are taking the actions of US corps abroad seriously. And the SEC
 has been able to seize funds of bad actors.

 There are strong reasons to oppose universal jurisdiction here. Domestic
 courts are not necessarily the best equipped to issue swift justice in huge
 transnational cases. The time and cost on ordinary plaintiffs are
 prohibitive (http://papers.ssrn.com/sol3/papers.cfm?abstract_id=1953190).

 The International Criminal Court has assumed jurisdiction over four
 egregious crimes committed worldwide. Corporations don't face any
 transnational court like that. But the process of creating norms (and then
 international law) will continue without universal jurisdiction, and
 companies probably fear angry investors more than many national courts.

 Plus, look at the flip side -- do we want torts occurring between US
 entities and citizens, on US soil, adjudicated in foreign domestic courts?
 It's not a perfect analogy, but not likely.

 Happy to continue the conversation,
 Peter



 On Wed, Apr 17, 2013 at 4:05 PM, Collin Anderson 
 col...@averysmallbird.com wrote:

 Libtech,


 Today the Supreme Court handed down a ruling that seriously limited the
 scope of the Alien Tort Statute on human rights cases. ATS was the grounds
 that Iranians attempted to sue Nokia Siemens Networks for their sale of
 lawful intercept, claims of liabilities for selling surveillance to China,
 and the Turkcell v. MTN case was waiting on the decision[3], so this should
 matter to many on the list. I was hoping that perhaps we could pull out
 some comments from our colleagues in CSR and legal communities.

 Cordially,
 Collin

 [1]
 http://www.dw.de/nokia-siemens-lawsuit-dropped-by-iranian-plaintiffs/a-6240017
 [2] 

[liberationtech] Secure, inexpensive hosting of activist sites

2013-04-18 Thread Hisham
Hi all,

Activists whose sites come under attack struggle to find cheap solutions to
keep their websites safely guarded. Many of them are looking for
secure, inexpensive hosting. I've come across many such cases, from
Senegal, to Zambia to Egypt to Morocco. Some of them ask for temporary hosting
to be able to stay online until they can stand on their feet again.

I'd be grateful if someone could help with this one. Are there secure and
inexpensive solutions out there?

Best,

-- 
Hisham Almiraat
almiraat.com http://www.almiraat.com/

Director, Global Voices Advocacy http://advocacy.globalvoicesonline.org/
Co-founder, Mamfakinch.com http://www.mamfakinch.com/
@almiraat https://twitter.com/almiraat | @advoxhttps://twitter.com/Advox
hisham_almiraat on Skype
Phone: +212662078778
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Secure, inexpensive hosting of activist sites

2013-04-18 Thread Nadim Kobeissi
While not technically a hosting solution, CloudFlare can definitely help
secure websites against many common attacks. It's free and works with
almost any hosting provider.

https://www.cloudflare.com/


NK


On Thu, Apr 18, 2013 at 4:45 PM, Hisham almiraatb...@gmail.com wrote:

 Hi all,

 Activists whose sites come under attack struggle to find cheap solutions
 to keep their websites safely guarded. Many of them are looking for
 secure, inexpensive hosting. I've come across many such cases, from
 Senegal, to Zambia to Egypt to Morocco. Some of them ask for temporary hosting
 to be able to stay online until they can stand on their feet again.

 I'd be grateful if someone could help with this one. Are there secure and
 inexpensive solutions out there?

 Best,

 --
 Hisham Almiraat
 almiraat.com http://www.almiraat.com/

 Director, Global Voices Advocacy http://advocacy.globalvoicesonline.org/
 Co-founder, Mamfakinch.com http://www.mamfakinch.com/
 @almiraat https://twitter.com/almiraat | @advoxhttps://twitter.com/Advox
 hisham_almiraat on Skype
 Phone: +212662078778

 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Secure, inexpensive hosting of activist sites

2013-04-18 Thread Andreas Bader
Hisham:
 Hi all,
 
 Activists whose sites come under attack struggle to find cheap solutions to
 keep their websites safely guarded. Many of them are looking for
 secure, inexpensive hosting. I've come across many such cases, from
 Senegal, to Zambia to Egypt to Morocco. Some of them ask for temporary hosting
 to be able to stay online until they can stand on their feet again.
 
 I'd be grateful if someone could help with this one. Are there secure and
 inexpensive solutions out there?
 
 Best,
 
 
 
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
 
Hetzner Germany is pretty good.
We use it since years and never had problems with it.

Andreas
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Secure, inexpensive hosting of activist sites

2013-04-18 Thread Griffin Boyce
Nadim Kobeissi na...@nadim.cc wrote:

 While not technically a hosting solution, CloudFlare can definitely help
 secure websites against many common attacks. It's free and works with
 almost any hosting provider.

 https://www.cloudflare.com/


  Seconded.  It also helps hide one's hosting provider.  One project I know
of was hosted somewhere in Kyrgyzstan, and used CloudFlare to keep their
host from getting attacked.

best,
Griffin

-- 
Please note that I do not have PGP access at this time.
OTR: sa...@jabber.ccc.de / fonta...@jabber.ccc.de
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Secure, inexpensive hosting of activist sites

2013-04-18 Thread xek3149
The problem with Cloudflare is that it is difficult to connect to sites
using Tor. Either they (Cloudflare) are blocking Tor outright or they are
restricting the number of connections per IP address.

() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org - against proprietary attachments
On Apr 18, 2013 3:49 PM, Nadim Kobeissi na...@nadim.cc wrote:

 While not technically a hosting solution, CloudFlare can definitely help
 secure websites against many common attacks. It's free and works with
 almost any hosting provider.

 https://www.cloudflare.com/


 NK


 On Thu, Apr 18, 2013 at 4:45 PM, Hisham almiraatb...@gmail.com wrote:

 Hi all,

 Activists whose sites come under attack struggle to find cheap solutions
 to keep their websites safely guarded. Many of them are looking for
 secure, inexpensive hosting. I've come across many such cases, from
 Senegal, to Zambia to Egypt to Morocco. Some of them ask for temporary 
 hosting
 to be able to stay online until they can stand on their feet again.

 I'd be grateful if someone could help with this one. Are there secure and
 inexpensive solutions out there?

 Best,

 --
 Hisham Almiraat
 almiraat.com http://www.almiraat.com/

 Director, Global Voices Advocacyhttp://advocacy.globalvoicesonline.org/
 Co-founder, Mamfakinch.com http://www.mamfakinch.com/
 @almiraat https://twitter.com/almiraat | @advoxhttps://twitter.com/Advox
 hisham_almiraat on Skype
 Phone: +212662078778

 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech



 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Secure, inexpensive hosting of activist sites

2013-04-18 Thread Nadim Kobeissi
On Thu, Apr 18, 2013 at 4:56 PM, xek3149 xek3...@gmail.com wrote:

 The problem with Cloudflare is that it is difficult to connect to sites
 using Tor. Either they (Cloudflare) are blocking Tor outright or they are
 restricting the number of connections per IP address.

Are there any references regarding this? I've always been able to access
Cloudflare-protected websites through Tor.


 () ascii ribbon campaign - against html e-mail
 /\ www.asciiribbon.org - against proprietary attachments
 On Apr 18, 2013 3:49 PM, Nadim Kobeissi na...@nadim.cc wrote:

 While not technically a hosting solution, CloudFlare can definitely help
 secure websites against many common attacks. It's free and works with
 almost any hosting provider.

 https://www.cloudflare.com/


 NK


 On Thu, Apr 18, 2013 at 4:45 PM, Hisham almiraatb...@gmail.com wrote:

 Hi all,

 Activists whose sites come under attack struggle to find cheap
 solutions to keep their websites safely guarded. Many of them are looking
 for secure, inexpensive hosting. I've come across many such cases, from
 Senegal, to Zambia to Egypt to Morocco. Some of them ask for temporary 
 hosting
 to be able to stay online until they can stand on their feet again.

 I'd be grateful if someone could help with this one. Are there secure
 and inexpensive solutions out there?

 Best,

 --
 Hisham Almiraat
 almiraat.com http://www.almiraat.com/

 Director, Global Voices Advocacyhttp://advocacy.globalvoicesonline.org/
 Co-founder, Mamfakinch.com http://www.mamfakinch.com/
 @almiraat https://twitter.com/almiraat | @advoxhttps://twitter.com/Advox
 hisham_almiraat on Skype
 Phone: +212662078778

 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings
 at https://mailman.stanford.edu/mailman/listinfo/liberationtech



 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech


 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Secure, inexpensive hosting of activist sites

2013-04-18 Thread Griffin Boyce
Nadim Kobeissi na...@nadim.cc wrote:

 On Thu, Apr 18, 2013 at 4:56 PM, xek3149 xek3...@gmail.com wrote:

 The problem with Cloudflare is that it is difficult to connect to sites
 using Tor. Either they (Cloudflare) are blocking Tor outright or they are
 restricting the number of connections per IP address.

 Are there any references regarding this? I've always been able to access
 Cloudflare-protected websites through Tor.


  As have I.  There's an ongoing discussion in the tor-talk list about it.
 Looks like they throttle connections from Tor exits based on abuse (etc),
but don't block entirely.

~Griffin
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] And right on cue, the flush our civil liberties down the toilet boys rear their ugly heads

2013-04-18 Thread Shava Nerad
I was fascinated today to see Mother Jones and many others reposting,
entirely without reflection or comment, what seemed to me to be not
crowdsourced images but second story surveillance camera shots of the FBI
suspects.  (Who, in addition, are being howled after as guilty until proven
innocent in this digital manhunt - and thank God the NYPost exonerated
their suspects before that turned into something ugly...)

Well, yes, the FBI is doing their job with the tools available, and as I
live in metro Boston I would most healthily STFU...  But if this incident
had happened in London, I can't help but think MJ et al might have engaged
a moment of reflection and spine in the middle of that process, perhaps?

Interesting times...



Shava Nerad
shav...@gmail.com
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] And right on cue, the flush our civil liberties down the toilet boys rear their ugly heads

2013-04-18 Thread Shava Nerad
Earlier today, btw, I predicted that this is why CISPA had a chance of
passing the Senate, unless Leahy or some other eloquent champion spends
considerable political and social capital smacking it down.

Awful timing.

The House had been planning cybersecurity week for this week for months.
I am not quite enough of a paranoid hippie to suspect these events were
engineered to promote the cybersecurity bills and budget lines.  That would
be insane.  However, the events of this week will be used for that precise
purpose.   It's a very grim gift horse

Sigh...



Shava Nerad
shav...@gmail.com
On Apr 18, 2013 8:28 PM, Yosem Companys compa...@stanford.edu wrote:

 From: Lauren Weinstein lau...@vortex.com

 And right on cue, the flush our civil liberties down the toilet boys
 rear their ugly heads

 We Need More Cameras, and We Need Them Now

 http://j.mp/14A4fY1  (Slate)

Cities under the threat of terrorist attack should install networks of
 cameras to monitor everything that happens at vulnerable urban
 installations. Yes, you don't like to be watched. Neither do I. But of
 all the measures we might consider to improve security in an age of
 terrorism, installing surveillance cameras everywhere may be the best
 choice. They're cheap, less intrusive than many physical security
 systems, and-as will hopefully be the case with the Boston
 bombing-they can be extremely effective at solving crimes.

  - - -

 This kind of misguided and factually vacuous proposal is more
 dangerous to freedom than all the terrorism on the planet.

 --Lauren--
 Lauren Weinstein (lau...@vortex.com): http://www.vortex.com/lauren
 Co-Founder: People For Internet Responsibility:
 http://www.pfir.org/pfir-info
 Founder:
  - Network Neutrality Squad: http://www.nnsquad.org
  - PRIVACY Forum: http://www.vortex.com/privacy-info
  - Data Wisdom Explorers League: http://www.dwel.org
  - Global Coalition for Transparent Internet Performance:
 http://www.gctip.org
 Member: ACM Committee on Computers and Public Policy
 Lauren's Blog: http://lauren.vortex.com
 Google+: http://vortex.com/g+lauren / Twitter: http://vortex.com/t-lauren
 Tel: +1 (818) 225-2800 / Skype: vortex.com
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] And right on cue, the flush our civil liberties down the toilet boys rear their ugly heads

2013-04-18 Thread Julian Oliver
..on Thu, Apr 18, 2013 at 05:27:35PM -0700, Yosem Companys wrote:
 From: Lauren Weinstein lau...@vortex.com
 
 And right on cue, the flush our civil liberties down the toilet boys
 rear their ugly heads
 
 We Need More Cameras, and We Need Them Now
 
 http://j.mp/14A4fY1  (Slate)
 
Cities under the threat of terrorist attack should install networks of
 cameras to monitor everything that happens at vulnerable urban
 installations. Yes, you don't like to be watched. Neither do I. But of
 all the measures we might consider to improve security in an age of
 terrorism, installing surveillance cameras everywhere may be the best
 choice. They're cheap, less intrusive than many physical security
 systems, and-as will hopefully be the case with the Boston
 bombing-they can be extremely effective at solving crimes.
 
  - - -
 
 This kind of misguided and factually vacuous proposal is more
 dangerous to freedom than all the terrorism on the planet.
 

... and at worst breeds violent frustration at home, as people feel increasingly
unable to engage elected civil administrators in transformative conversation
about these issues. People /feel/ threatened by impositions such as these for a
reason - I've had two conversations of the sort here in Buffalo within as many
days of arrival.  These locals feel their own government no longer defends their
basic human right to privacy (as if today's CISPA vote wasn't harsh enough).

Regardless, it's worth noting the U.S has seen steady decline of terrorism on
home soil since 1970. Curious that the general opinion is that terrorism is on
the rise here:


http://www.nytimes.com/interactive/2013/04/16/us/Decades-of-Decline-in-Attacks.html?ref=us_r=0

Who knows how long that will last, given the increasing conscription to Al
Qaeda, or any armed resistance, as direct result of drone attacks on sovereign
soil abroad.  

Here's the case of Yemen alone, a country that (like Pakistan and Somalia) the
U.S isn't actually at war with: 

“These attacks are making people say, ‘We believe now that al-Qaeda is on the
right side,’ ” said businessman Salim al-Barakani, adding that his two brothers
— one a teacher, the other a cellphone repairman — were killed in a U.S. strike
in March.


http://articles.washingtonpost.com/2012-05-29/world/35456187_1_aqap-drone-strikes-qaeda

You can call the Yemeni tribesmen referenced in the article 'terrorists' as a
result of their conscription. You can also call them very frustrated and
desperate people whose children are terrified of the U.S and can't sleep due to
the buzzing - and statistically inaccurate - killing machines flying above their
homes.

Cheers,

-- 
Julian Oliver
http://julianoliver.com
http://criticalengineering.org
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech