Re: [liberationtech] Tor Project website blocked by many UK ISPs as "adult content"

2014-11-06 Thread Andrew Lewman
On Thu, Nov 06, 2014 at 11:11:00AM -0500, grif...@cryptolab.net wrote 0.8K 
bytes in 0 lines about:
: Apparently allowing unsurveilled/unfiltered speech is considered adult
: content by many UK service providers.

It seems the list has expanded over the years, 
https://blog.torproject.org/blog/tale-new-censors-vodafone-uk-t-mobile-uk-o2-uk-and-t-mobile-usa?amp

-- 
Andrew
http://www.lewman.is/
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] If patients don't care about their privacy, should doctors?

2014-09-23 Thread Andrew Lewman
On Tue, Sep 23, 2014 at 09:15:53PM -0400, katie...@gmail.com wrote 7.3K bytes 
in 0 lines about:

The first thing is patients do care about their records. Saying otherwise
is a false dichotomy.

: charged with rolling out a telehealth (read: Skype) clinical program for

Possibly, Skype is better than how I've seen some places do it now with more
traditional video presence systems (which lack encryption in transit as
a start).

: protect patient data (even thought HIPAA is supposed to protect this data).

Every doctor's office I've visited in the past few years requires me to
sign a HIPAA waiver saying the office can share my data with anyone
they deem necessary for my medical care. When pressed, this includes
my insurance company, any insurance company, and any 3rd party they have
a relationship with for any reason (possibly including the janitorial
contractors). What happens to my records when shared with those
3rd parties is up to each companies' own privacy/HIPAA compliance
policies.

Of course, if I refuse to sign the waiver, they refuse to see/treat me.

: What would you say in this situation?

I agree with your points. Maybe they need to see some solutions and help
making decisions on which way to proceed. The benefits of tele-health
can still be achieved with privacy enhancing technologies and putting
the patient in control of their own data.

Perhaps ask the people quoting you these things for their medical records,
as if they have nothing to hide, then they have nothing to fear by
sharing them. ;)


-- 
Andrew
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.



Re: [liberationtech] economic cost of lost emails.

2014-08-24 Thread Andrew Lewman
On Sun, Aug 24, 2014 at 05:24:49AM +, g...@i2pmail.org wrote 1.1K bytes in 
0 lines about:
: There is a lot of history loss going on, despite backups.  I've had

Sorry you've learned the hard way about the difference between backups
and archiving. Most of us have learned this the same way.

: Are there any software projects are out there to resist an eventuality
: of digital book burning?

Fine places to start are https://archive.org/about/faqs.php#Archive-It
and http://longserver.org/

Or maybe the NSA or GCHQ has it all. ;)

-- 
Andrew
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.



Re: [liberationtech] Google keeps the chat history even you enabled the OTR

2014-05-10 Thread Andrew Lewman
On Thu, May 08, 2014 at 08:31:24PM -0500, anth...@cajuntechie.org wrote 3.0K 
bytes in 0 lines about:
: I see a future where the world, not just the digital world, is divided
: into two camps: those who are technically literate and willing to take
: the sometimes inconvenient steps to protect their privacy and those
: who aren't.  The first group will be in the minority but will enjoy

I've heard this same sentiment for 15 years by friends in the global
financial industries.  They lament that everything you do with currency is
tracked and recorded, bought and sold, and only the minority understand
how to opt-out. Debit cards, credit cards, and the like an Orwellian
plot, financial dystopia is here, etc, etc, etc. The financially
literate understand how to protect their privacy and take the sometimes
inconvenient steps to do so. This group is in the minority. 

Those that care, continue to share, learn, and help those who weren't
aware of the alternatives. Don't give up the fight so quickly.

-- 
Andrew
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] Whitehouse.gov request for inputs on big data and privacy.

2014-03-23 Thread Andrew Lewman
On Fri, Mar 21, 2014 at 06:12:56PM -0400, r...@acm.org wrote 1.4K bytes in 0 
lines about:
: Take a moment to tell us what you think about big data, privacy, and
: what it means to you.
: 
: 
http://links.whitehouse.gov/track?type=click&enid=ZWFzPTEmbWFpbGluZ2lkPTIwMTQwMzIxLjMwNDA4MDUxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE0MDMyMS4zMDQwODA1MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE2Nzg5ODE0JmVtYWlsaWQ9cnJiQGFjbS5vcmcmdXNlcmlkPXJyYkBhY20ub3JnJmZsPSZleHRyYT1NdWx0aXZhcmlhdGVJZD0mJiY=&&&100&&&http://www.whitehouse.gov/issues/technology/big-data-review?utm_source=email&utm_medium=email&utm_content=email311-text1&utm_campaign=tech

I couldn't get this pile of goo to work, in case anyone else has this
problem, http://www.whitehouse.gov/issues/technology/big-data-review is
all you need. The rest is just tracking bits.

-- 
Andrew
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] software download over SSL mirrors?

2014-03-09 Thread Andrew Lewman
On Mon, Mar 10, 2014 at 12:09:14AM +, adrela...@riseup.net wrote 2.6K bytes 
in 0 lines about:
: Does anyone know how to set up a mirror network supporting SSL?

I've seen it done two ways. One way distributes bandwidth by letting
people hit each mirror directly. Another way creates a master mirror
which redirects to other mirrors.

1. If you are doing dns load balancing, you get a cert for a domain
name. Give the cert and key to your mirrors. Then sslmirror.whonix.org
works regardless of the mirror.

2. Ask each mirror to get their own cert, and make sslmirror.whonix.org
the master site, which then redirects to a list of ssl mirrors via
webserver rewrite/redirects. Therefore the ssl cert will match the
mirror's name. Such as sslmirror.whonix.org rewrites to
(sslmirror.example.com, website.example.net, download.example.org).

-- 
Andrew
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] US global internet freedom funding - FY 15 President's budget request

2014-03-04 Thread Andrew Lewman
On Tue, Mar 04, 2014 at 09:24:32PM -0500, rgue...@privaterra.org wrote 0.5K 
bytes in 0 lines about:
: What do people on the list think of the internet freedom funding
: levels that were announced today in the (US) President's FY15 budget
: request ?

If I read this right, it's page 111 under "Global Internet Freedom"
heading for "not less than 50,500,000".  Sounds good. We as a whole
sector are still dwarfed by the billions spent on "security" and locking
everything down.

-- 
Andrew
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] Many VPNs and Psiphon are currently blocked in Iran right now

2014-02-25 Thread Andrew Lewman
On Tue, Feb 25, 2014 at 04:18:17PM -0500, grif...@cryptolab.net wrote 1.3K 
bytes in 0 lines about:
: replacement.  This feels like a user education issue.  Users need to
: know that there are multiple options -- eg when Psiphon works but
: Lantern doesn't, or when Tor with a bridge doesn't usually work, but
: with flashproxy does.  People need to be prepared to pivot quickly.

Idle curiosity, what percent of Iranian Internet users use a proxy
(or don't go naked on the Internet)? 1%? 5%? 50%?

I suspect (based on zero data) that awareness these tools exist is
the first problem to solve. Deciding which tool to use is the 26th
problem.

-- 
Andrew
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] Many VPNs and Psiphon are currently blocked in Iran right now

2014-02-25 Thread Andrew Lewman
On Tue, Feb 25, 2014 at 03:41:09PM -0500, a.pritch...@psiphon.ca wrote 7.6K 
bytes in 0 lines about:
: So, yeah, Iran dropped the hammer on us.

Welcome to the club! ;)

-- 
Andrew
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] Many VPNs and Psiphon are currently blocked in Iran right now

2014-02-23 Thread Andrew Lewman
On Sun, Feb 23, 2014 at 02:11:26AM -0500, col...@averysmallbird.com wrote 3.4K 
bytes in 0 lines about:
: download started out reasonably fast, after a few seconds it seems probably
: that my connection was throttled down. Whereas without Tor, my throughput
: averaged 84.81 Kbps, with it is currently 14.66 Kbps and rapidly dropping.
: If anyone doubts that Tor's overhead is that high, at some point I could
: keep tearing down connections and narrow the likelihood of a poorly
: performing bridge. However, factually, Tor is slow.

Thanks for the sample data Collin. Is this throttling true for bridged
tor connections and the pluggable transports bundle?

Another test is if this throttling is true for all encryption-based
proxy/vpns or just some.

-- 
Andrew
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] Many VPNs and Psiphon are currently blocked in Iran right now

2014-02-23 Thread Andrew Lewman
On Sun, Feb 23, 2014 at 08:40:59AM -0600, alps6...@gmail.com wrote 10K bytes in 
0 lines about:
: On the other hand, the Tor web site is a bit too much "smoke and mirrors"
: promoting it as a solution for the masses, when clearly it is not practical
: for that use. Maybe Bill Gates gave them a course on "vaporware marketing!"

Can you be specific about what is smoke and mirrors or vaporware
marketing? Our intent is to do neither, hence the big list
of warnings about what tor does and doesn't do for the user,
https://www.torproject.org/download/download-easy.html.en#warning

-- 
Andrew
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] Many VPNs and Psiphon are currently blocked in Iran right now

2014-02-23 Thread Andrew Lewman
On Sun, Feb 23, 2014 at 01:30:25PM +, aminsab...@gmail.com wrote 6.9K bytes 
in 0 lines about:
: don't care about NSA/ GCHQ surveillance.
: 
: It would be better to think as a general user not someone who is activist
: and support freedom of expression.

There are entire communities of users who use Tor to access facebook
and vkontacte. This community is clearly using Tor to login to a site
which knows a ton of information about them. They're worried about the
local network surveillance knowing what sites they visit, and to bypass
the government-imposed Internet censorship.

This community of users is also know as the "American teenager". I keep
meeting them when I go to schools to talk about Internet privacy and
augmenting their safety online.

-- 
Andrew
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] Call for Tenders SMART 2013/N004 “European Capability for Situational Awareness” (ECSA) - European Federation for cyber-censorship and human rights monitoring

2013-09-23 Thread Andrew Lewman
On Tue, 24 Sep 2013 03:13:30 +
 wrote:

> Dear Andrew,
> 
> This news certainly do not help.
> 
> http://www.welivesecurity.com/2013/07/24/the-rise-of-tor-based-botnets/
> 
> Grateful for your views

Thanks for asking, rather than just assuming poorly written press is
accurate.  Our blog post says it all,
https://blog.torproject.org/blog/how-to-handle-millions-new-tor-clients

They aren't using exit relays, they are only using hidden services.
This means that http://ec.europa.eu wouldn't see bot requests coming
through tor. I bet even by blocking tor, http://ec.europa.eu still sees
endless botnet requests and other attacks.

I'd love to see data relating to what http://ec.europa.eu is
seeing specifically from tor versus non-tor IP addresses (both ipv4 and
ipv6). Something like quantity of attacks from tor vs. non-tor,
breakdown of those requested deemed an attack into their specific type
of attack, and other basic metrics.

-- 
Andrew
http://tpo.is/contact
pgp 0x6B4D6475
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] Call for Tenders SMART 2013/N004 “European Capability for Situational Awareness” (ECSA) - European Federation for cyber-censorship and human rights monitoring

2013-09-03 Thread Andrew Lewman
On Tue, 3 Sep 2013 15:27:19 +
 wrote:
> You will find all the relevant information (invitation to the tender,
> tender specifications and model contract) in the following link:
> 
> http://bit.ly/16E6sfG

It seems your website is blocking access from the very tools you're
trying to fund and create. I just tried access via Tor, ipredator vpn,
and hotspot shield. All received the following message:

"Access Denied

Your request has been denied for security reason."

Perhaps you need a freedom reason to allow access.

-- 
Andrew
http://tpo.is/contact
pgp 0x6B4D6475
-- 
Liberationtech is a public list whose archives are searchable on Google. 
Violations of list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.