Re: [liberationtech] Pro-democracy activist living under authoritarian regime seeks communication solutions

2018-12-28 Thread ITechGeek
Here is a good starter guide:  https://ssd.eff.org/en

VPNs and other activities can sometimes be blocked.

To get around being blocked (like by say China), the Tor folks have
bridges which they can provide people
(https://www.torproject.org/docs/bridges).

And remember while it might slow things down, these options aren't
exclusive, for example using Tor to hide where you on the Internet and
then use Signal or OTR to communicate securely w/ friends/allies.

---
-ITG (ITechGeek)  |  i...@itechgeek.com
https://keybase.io/itechgeek  |  https://itg.nu/
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net

On Fri, Dec 28, 2018 at 2:18 PM Andrés Leopoldo Pacheco Sanfuentes
 wrote:
>
> Yeah I finally started using signal it’s cool
>
> Regards / Saludos / Grato
>
> Andrés Leopoldo Pacheco Sanfuentes
>
> On Dec 28, 2018, at 11:29 AM, Yosem Companys  wrote:
>
> Hey All,
>
> A pro-democracy activist living in a country with an authoritarian regime 
> sends the following questions anonymously to our list:
>
> Our country's communication system is under constant surveillance. What's the 
> best way to circumvent this system?
> What do you think of Hotspot Shield VPN (and all other VPNs for that matter)?
> The activist also asks about the security and privacy of Signal, Wicker, 
> Riot, Tor, and so on, and whether these solutions can be used in any country 
> or whether they're country-specific.
>
> We have discussed these questions extensively over the years, but regimes and 
> activists are constantly adapting and new solutions are continuously being 
> developed. So an updated discussion is likely warranted.
>
> Looking to the future, I'm wondering whether we should set up a wiki (should 
> it not exist already) with the answers to the aforementioned questions and 
> update it regularly so that the information is readily available to anyone 
> without having to go through hoops to ask us.
>
> In the meantime, please feel free to answer the questions publicly (with the 
> list as a whole) or privately (with me).
>
> Thanks,
> Yosem
>
> --
> Liberationtech is public & archives are searchable from any major commercial 
> search engine. Violations of list guidelines will get you moderated: 
> https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
> change to digest mode, or change password by emailing 
> liberationtech-ow...@lists.stanford.edu.
>
> --
> Liberationtech is public & archives are searchable from any major commercial 
> search engine. Violations of list guidelines will get you moderated: 
> https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
> change to digest mode, or change password by emailing 
> liberationtech-ow...@lists.stanford.edu.
-- 
Liberationtech is public & archives are searchable from any major commercial 
search engine. Violations of list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest mode, or change password by emailing 
liberationtech-ow...@lists.stanford.edu.

Re: [liberationtech] secure voice options for china?

2015-02-17 Thread ITechGeek
While we have no consensus, most of these options are using similar stuff
at the encrypted layers.  Realistically as long as the encryption is good,
the Chinese gov't can only block stuff by host/IP/protocol, I think all the
VPN providers listed are taking active steps to change IPs and obscure
their protocol as needed.

My pref of VPN is you aren't limited to just a voice communications
services.



---
-ITG (ITechGeek)
i...@itechgeek.com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net

On Tue, Feb 17, 2015 at 7:17 PM, Seth David Schoen sch...@eff.org wrote:

 Tim Libert writes:

  thanks all for the many good suggestions!  however, in absence of a
 clear consensus, I will advise my friend to avoid voice and stick to
 encrypted email.  my understanding is that the new leadership in china
 isn’t f#cking around, so the risk/reward equation here suggests heightened
 caution - especially as I cannot make assumptions on technical know-how of
 parties involved.

 A countervailing point is that encrypted e-mail with the mainstream
 technologies used for that purpose never provides forward secrecy, while
 most voice encryption techniques do.  So with the use of encrypted e-mail,
 there is an ongoing risk into the future (assuming that a recipient's
 private key still exists somewhere), while with the voice encryption,
 the risk may be time-limited -- assuming that the implementations were
 correct enough, and that the key exchange was based on a mathematical
 problem that will remain hard for an attacker.

 As a simple analogy, sometimes people prefer to have a phone call about
 sensitive matters because it doesn't create records, while writing a
 letters would make a paper trail.  The technical reasons behind the
 analogy don't transfer at all, but there might still be something to the
 intuition that the encrypted phone call can be more ephemeral than the
 encrypted mail.

 --
 Seth Schoen  sch...@eff.org
 Senior Staff Technologist   https://www.eff.org/
 Electronic Frontier Foundation  https://www.eff.org/join
 815 Eddy Street, San Francisco, CA  94109   +1 415 436 9333 x107
 --
 Liberationtech is public  archives are searchable on Google. Violations
 of list guidelines will get you moderated:
 https://mailman.stanford.edu/mailman/listinfo/liberationtech.
 Unsubscribe, change to digest, or change password by emailing moderator at
 compa...@stanford.edu.

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] secure voice options for china?

2015-02-14 Thread ITechGeek
It looks nice, but I would wait before using it when the people you're
trying to hide from can throw you in jail if found.

I will say I like how they're also making it a plugin for existing IM
clients Pidgin  Adium.

I also can't look at their bugs page cause they have HSTS enabled and the
SSL cert doesn't validate because it is for *.tenderapp.com and the URL is
https://support.libtoxcore.so/

It looks like support.libtoxcore.so is a cname for tox.tenderapp.com and
someone probably just forgot to set-up the SNI cert.


---
-ITG (ITechGeek)
i...@itechgeek.com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net

On Sat, Feb 14, 2015 at 9:55 AM, hellekin helle...@gnu.org wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 On 02/12/2015 01:45 PM, Tim Libert wrote:
 
  to have a secure voice conversation with persons located in mainland
 china
 
 *** Here is something I'm looking at: Tox (https://tox.im/)

 The project is APLHA software aiming at replacing Skype.

 It probably has its burden of bugs and certainly lacks proper security
 at this point.  It would certainly benefit from scrutiny.  On the crypto
 side, they chose NaCL, not a bad choice. ;o)  It also support going
 through Tor.

 The functionality is awesome, especially considering its *alpha* status
 (I repeat to insist on the fact that it's a potential solution, and
 probably one that needs to be audited, because as people discover it,
 they tend to use it).  It provides voice, video (including desktop
 view), file sharing, chat with UTF-8 support.  It runs from the terminal
 with Toxic, or in GUI with qTox and uTox, on GNU/Linux 32 and 64 bit,
 Android, Windows, and MacOSX.  The Windows port is more alpha than the
 *nix ports.

 ==
 hk

 -BEGIN PGP SIGNATURE-
 Version: GnuPG v2

 iQJ8BAEBCgBmBQJU32HWXxSAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
 ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFQ0IyNkIyRTNDNzEyMTc2OUEzNEM4ODU0
 ODA2QzM2M0ZDMTg5ODNEAAoJEEgGw2P8GJg9wFoQALnxMbnXGJAHOqxFEDDskmeN
 ziZGGvLA0EOYx6J0+4jhOpgNE3uedFWv3DuBdPd9f+DHjY0BWb5f4ND4/ajZdMnj
 20IF2qOJgZRccGQ/1LFifZ6dp6ijo/+iPMHmbj9lQcG5Y4UITUytBrQfjToZyZqc
 s4XSK1/FkoQ+C4aH/aWgeTBL3/yLPSDPcutUvcfqzgLj661yH5gHcL2F7FCXTt/t
 YpsRffUcoOsBVLfLNkMQDpEe9d9nKeLufNvhPHnvExEdJ5VW3Rn+D6jFRNFB3ek4
 6XgvLQgQsj67a28U2nWTvXVPxpNhT+TD/u+d12amBpzS9nne9M40ye5R1Rup/Dn4
 GprGdHi6pj5fTU0rVk3vt6iNTVZtmfpq/h+09rIDnxy9dZwmQ2SsIf9WHFFY+1yC
 0YVMAdhAmKIY8nkCLaCsx0KMYA3yg5QNq8FIGROVxIajXdu9SSkbeGMJudrBfGcq
 pKFlzyqcVpQ9bobvt+Rd90hnEuKIB5T+dE1YSTafw8sitOebyFvG08skbAwW3v4V
 pmgEk6MLiB7KYhkjWgne36RkooADVYKOTy/ZCdktMdXx6bzzs/h4swotC5B0t/42
 s2RZKUvylwXReuE6+L76oYrfx1Np6onXbR105fd2v5dWrHBuy/GVR8a2mmV4zpA8
 SSrQcYi4a4qWA6WJaAa/
 =H7be
 -END PGP SIGNATURE-
 --
 Liberationtech is public  archives are searchable on Google. Violations
 of list guidelines will get you moderated:
 https://mailman.stanford.edu/mailman/listinfo/liberationtech.
 Unsubscribe, change to digest, or change password by emailing moderator at
 compa...@stanford.edu.

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] secure voice options for china?

2015-02-13 Thread ITechGeek
I know a number of VPN providers have a mode for hiding their OpenVPN
connections (the VPN provider I have calls it
Chameleon and says it's proprietary and you have to use their software).

The solution that I personaly think might be better, is using Mumble in
half duplex mode over TOR.

http://www.hacker10.com/computer-security/encrypted-voice-over-ip-chat-mumble-works-with-tor/
https://guardianproject.info/2013/01/31/anonymous-cb-radio-with-mumble-and-tor/

Also if you don't need a full time server, you can take Andrew's suggestion
and use a pay by the hr provider such as Amazon EC2 or Rackspace Cloud
Servers (although I think a number of other VPS providers have started
doing pay by the hour plans) - That should also give the benefit of being
able to change IPs more often and depending on the provider, being able to
change datacenters.



---
-ITG (ITechGeek)
i...@itechgeek.com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net

On Thu, Feb 12, 2015 at 5:57 PM, Brian Behlendorf br...@behlendorf.com
wrote:

 On Thu, 12 Feb 2015, The Doctor wrote:

 On 02/12/2015 01:06 PM, Brian Behlendorf wrote:

  And this is why even people who care about their privacy still use
 Skype.


 Bad actors go to extraordinary, stupid lengths to restrict access and
 put surveillance measures in place.  Hours rivalling that of Silicon
 Valley startups are spent fine tuning each and every last measure to
 make sure that almost nothing sneaks past.  There is no magick wand
 that the other side of the game can wave to bypass them like a gentle
 breeze.  Circumvention and counter-net.surveillance are hard, and if
 the other side doesn't bring its A game to match, it's just not going
 to happen.  We may as well roll over and show our bellies.


 Exactly.  Which is why no one should feel satisfied with the answer that
 was given.

 Brian


 --
 Liberationtech is public  archives are searchable on Google. Violations
 of list guidelines will get you moderated: https://mailman.stanford.edu/
 mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change
 password by emailing moderator at compa...@stanford.edu.

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] mail2tor.com hidden service

2015-01-03 Thread ITechGeek
As Zaki points out, never trust plain text identifying information over tor
(well the transport is good and secure, you never know what the exit nodes
or in this case hidden service are doing w/ the information transgressing
their systems).

I only use any tor email service for website accounts where I have no plans
to connect to the website over anything other than tor and once in a while
I use them for email exchanges w/ individuals, but I generate a GPG key
specific to that account.

What I consider a workaround for people who can't set-up a good install of
GPG is https://www.mailvelope.com/

I would consider that at least semi secure (or at least as secure as your
browser).  I haven't used it in a while, but when I did it was Chrome only
and seemed easy enough (and haven't had too many questions in the past).

If you need one way secure, you can try out
http://s.hanewin.net/contact/en.htm / http://www.hanewin.net/encrypt/ (I've
been meaning to try setting up one of those myself).  Uses the same core as
mailvelope and likewise I wouldn't consider it fully secure.



---
-ITG (ITechGeek)
i...@itechgeek.com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net

On Thu, Jan 1, 2015 at 7:06 PM, z...@manian.org z...@manian.org wrote:

 Plaintext over Tor to email accounts are probably not safe.

 We've seen a major round of this where the Feds seize a hosted anonymous
 email account and then email plain texts appear in indictments. Perhaps the
 most famous is the TorMail  Charlie Shrem case.


 http://www.forbes.com/sites/runasandvik/2014/01/31/the-email-service-the-dark-web-is-actually-using/



 On Thu, Jan 1, 2015 at 12:01 AM, Richard Brooks r...@g.clemson.edu wrote:

 Does anyone have any info about this hidden service?

 I've been using it to set up temporary accounts to
 exchange info as a pgp work-around for people having
 trouble working with pgp keys. I assume the content
 can be read by whoever runs the site, but they won't
 know who I am.

 If the other side uses the hidden service, too. The mails
 can be read but the service won't know who either side is.

 Any faults in this logic?

 --
 Liberationtech is public  archives are searchable on Google. Violations
 of list guidelines will get you moderated:
 https://mailman.stanford.edu/mailman/listinfo/liberationtech.
 Unsubscribe, change to digest, or change password by emailing moderator at
 compa...@stanford.edu.



 --
 Liberationtech is public  archives are searchable on Google. Violations
 of list guidelines will get you moderated:
 https://mailman.stanford.edu/mailman/listinfo/liberationtech.
 Unsubscribe, change to digest, or change password by emailing moderator at
 compa...@stanford.edu.

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] bulk sms

2015-01-02 Thread ITechGeek
Instead of using an Android gateway, I would go w/ a Raspberry Pi, probably
a little easier for customized development (and you can use this as a
starter):  http://www.raspberrypi.org/raspberry-pi-gsm-gateway/ (Note this
guy's configuration violates most carriers TOS).  Also if you decide to go
this route, some of the US carriers including unlimited text to other
countries, so you might be able to set-up the system here if not sending in
excess of their unlimited definition.
http://multimediacapsule.thomsonone.com/t-mobileusa/blog_it-all-started-with-simple-choice?cm_sp=HP_MQ-_-HPT-_-LEARN%20MORE%20ABOUT%20OUR%20SIMPLE%20CHOICE%20PLAN.
(Chart at bottom)

And if you will be working at a village level and you can get a link into
the village (maybe sat?), you can always look into running your own cell
system.

http://openbts.org/

You can order blank sim cards and a programmer to program your own (I
believe there is a place online you can get them preprogrammed as well) and
only requires a GSM handset that is unlocked.

Hard to run it in the US (You know the whole FCC thing), but every so often
groups will get a special event license for operation.  A friend set-up it
up at HOPE Conference a few yrs back, the largest install of OpenBTS I
think was at Burning Man last yr or the yr before, and I've heard of groups
trying to use them in villages in Africa  Asia where the local cell
service is spotty or non-existent.  At Burning Man they connected to the
rest of the world through voip over a vsat link (And you can do more
complicated systems where you can have msgs queued on either end and only
bring up the sat link a few times of day for msgs leaving the area).

And if you want to get really exotic (like little to no cell coverage),
 Inmarsat has http://www.inmarsat.com/support/isatphone-pro-support/ which
allows free incoming text (from Internet or regular SMS) and Delorme
Inreach (I actually have one of these on order) uses the Iridium sat
network which has plans that include unlimited text (a more expensive
option).  Neither of these would be good for sending msgs to large groups
of people unless your organization has some SERIOUS dough.  Also I haven't
looked at either to see how unlimited text messages are defined.

There are many options depending on your use case.

If you might be willing to provide a use case we might be able to provide
you some information specific to that set-up (if it's of a sensitive
nature, you can always email me directly and my GPG key is listed in my
signature block).

And I'm sure other people on this list have GPG keys available.

---
-ITG (ITechGeek)
i...@itechgeek.com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net

On Fri, Jan 2, 2015 at 10:19 AM, Nathan of Guardian 
nat...@guardianproject.info wrote:



 On Thu, Jan 1, 2015, at 12:58 PM, Nathan of Guardian wrote:
 
 
  On Thu, Jan 1, 2015, at 11:41 AM, Richard Brooks wrote:
   Anyone willing to share experiences on setting up
   (or using) an Internet to SMS interface...
 
  What about using an Android phone as the gateway device/SMS sender?
  There are a lot of solutions out there for that, and experience in this
  community deploying them.
 
  http://smssync.ushahidi.com for example

 Here are a few more examples:

 https://github.com/anjlab/android-sms-gateway
 https://github.com/niryariv/KalSMS

 All in all, if your volume is not crazy high, it is the easiest way to
 support pretty much any network in the world, as long as you have a
 place to keep a phone safe and charged in the local area.


 --
   Nathan of Guardian
   nat...@guardianproject.info
 --
 Liberationtech is public  archives are searchable on Google. Violations
 of list guidelines will get you moderated:
 https://mailman.stanford.edu/mailman/listinfo/liberationtech.
 Unsubscribe, change to digest, or change password by emailing moderator at
 compa...@stanford.edu.

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] bulk sms

2015-01-01 Thread ITechGeek
If anyone wants more help setting something up to send msgs through these
gateways, you can contact me off line.

---
-ITG (ITechGeek)
i...@itechgeek.com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net

On Thu, Jan 1, 2015 at 9:17 PM, ITechGeek i...@itechgeek.com wrote:

 Almost all carriers have a gateway to the effect of phone
 number@carriers domain

 Like to send an email to my phone as an SMS, it would be my cell #@
 tmomail.net (T-Mobile USA), Verizon I believe is cell #@vtext.net and
 ATT I believe is cell #@txt.att.net.

 There are a number of lists on the Internet listing carriers (some are out
 of date).

 Here are a couple of lists:
 http://martinfitzpatrick.name/list-of-email-to-sms-gateways/
 http://www.emailtextmessages.com/
 http://sms-gateway-service.com/?page_id=13
 http://www.sweetnam.eu/index.php/List_of_Internet_to_SMS_gateways
 http://www.opentextingonline.com/emailtotext.aspx

 I would suggest contacting someone using a carrier you want to send to and
 do a test to confirm the gateway is active or search the company's website,
 most company's list it somewhere on their website (although I've seen a few
 carriers not list it on their website).

 Likewise most carriers also allow for outgoing msgs to Internet Email.
 Usually you send the msg to a carrier specific shortcode (I think T-Mobile
 USA is 550), although some carriers allow you to just enter the to address
 in place of the number you are sending to.

 On the Internet side these gateways are free, but remember on the cell
 side the person pays whatever their standard txt rates are.

 Since I have an unlimited text plan, I use this mostly for having alerts
 sent to my phone (things like server outages and alerts from my home
 automation system).

 Also any company that sends a text to your cell phone that the from
 address looks like an email address, they're normally sending through these
 gateways (and they normally asked you who your cell carrier is).


 ---
 -ITG (ITechGeek)
 i...@itechgeek.com
 https://itg.nu/
 GPG Keys: https://itg.nu/contact/gpg-key
 Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
 Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
 http://fb.me/Jbwa.Net

 On Thu, Jan 1, 2015 at 5:03 PM, Richard Brooks r...@g.clemson.edu wrote:

 Which gateways have you used? Of particular interest
 is sending to rather exotic destinations.

 On 1/1/2015 4:15 PM, ITechGeek wrote:
  My preferred method is using email to sms gateways.
 
  On your side that becomes free (depending on how you send the emails).
  Most providers have  a disclaimer of no guarantee of delivery via the
  gateways, but I have yet to lose an email that way.
 
  Is mission critical, I would just use a service like Twilio which will
  charge per msg, but not hard to set-up.
 
 
 
 ---
  -ITG (ITechGeek)
  i...@itechgeek.com
  https://itg.nu/
  GPG Keys: https://itg.nu/contact/gpg-key
  Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A
 DCB1191A
  Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
  http://fb.me/Jbwa.Net
 
  On Thu, Jan 1, 2015 at 11:57 AM, Eduardo Robles Elvira
  edu...@agoravoting.com mailto:edu...@agoravoting.com wrote:
 
  Hello:
 
  I have used multiple services. I currently use esendex as an SMS
  sender provider, which is a spanish company (I'm from Spain). We
 have
  used other services. Some important facts:
  * sending SMS to most of the countries costs the same
  * if you don't care if some messages don't reach their destination
 or
  take hours, then go for the cheapest provider. that's good for
 sending
  publicity for example. In the other hand, if you do care about the
 SMS
  reaching always to the destination, and if you want that to happen
  fast, then find a quality provider. In my experience esendex is good
  (they specialized in that, for example in sending sms
 authentication
  codes), but there are probably other better providers in other
  countries.
  * the providers might be able to send 20-50 sms/second. You could
  scale to do more by using multiple providers at the same time.
 
  There are other services specialised in sending SMS, Amazon for
  example http://docs.aws.amazon.com/sns/latest/dg/SMSMessages.html
  those I haven't used yet.
 
  Regards,
  --
  Eduardo Robles Elvira @edulix skype: edulix2
  http://agoravoting.org   @agoravoting +34 634 571 634
  tel:%2B34%20634%20571%20634

Re: [liberationtech] bulk sms

2015-01-01 Thread ITechGeek
Almost all carriers have a gateway to the effect of phone
number@carriers domain

Like to send an email to my phone as an SMS, it would be my cell #@
tmomail.net (T-Mobile USA), Verizon I believe is cell #@vtext.net and
ATT I believe is cell #@txt.att.net.

There are a number of lists on the Internet listing carriers (some are out
of date).

Here are a couple of lists:
http://martinfitzpatrick.name/list-of-email-to-sms-gateways/
http://www.emailtextmessages.com/
http://sms-gateway-service.com/?page_id=13
http://www.sweetnam.eu/index.php/List_of_Internet_to_SMS_gateways
http://www.opentextingonline.com/emailtotext.aspx

I would suggest contacting someone using a carrier you want to send to and
do a test to confirm the gateway is active or search the company's website,
most company's list it somewhere on their website (although I've seen a few
carriers not list it on their website).

Likewise most carriers also allow for outgoing msgs to Internet Email.
Usually you send the msg to a carrier specific shortcode (I think T-Mobile
USA is 550), although some carriers allow you to just enter the to address
in place of the number you are sending to.

On the Internet side these gateways are free, but remember on the cell side
the person pays whatever their standard txt rates are.

Since I have an unlimited text plan, I use this mostly for having alerts
sent to my phone (things like server outages and alerts from my home
automation system).

Also any company that sends a text to your cell phone that the from address
looks like an email address, they're normally sending through these
gateways (and they normally asked you who your cell carrier is).

---
-ITG (ITechGeek)
i...@itechgeek.com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net

On Thu, Jan 1, 2015 at 5:03 PM, Richard Brooks r...@g.clemson.edu wrote:

 Which gateways have you used? Of particular interest
 is sending to rather exotic destinations.

 On 1/1/2015 4:15 PM, ITechGeek wrote:
  My preferred method is using email to sms gateways.
 
  On your side that becomes free (depending on how you send the emails).
  Most providers have  a disclaimer of no guarantee of delivery via the
  gateways, but I have yet to lose an email that way.
 
  Is mission critical, I would just use a service like Twilio which will
  charge per msg, but not hard to set-up.
 
 
 
 ---
  -ITG (ITechGeek)
  i...@itechgeek.com
  https://itg.nu/
  GPG Keys: https://itg.nu/contact/gpg-key
  Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
  Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
  http://fb.me/Jbwa.Net
 
  On Thu, Jan 1, 2015 at 11:57 AM, Eduardo Robles Elvira
  edu...@agoravoting.com mailto:edu...@agoravoting.com wrote:
 
  Hello:
 
  I have used multiple services. I currently use esendex as an SMS
  sender provider, which is a spanish company (I'm from Spain). We have
  used other services. Some important facts:
  * sending SMS to most of the countries costs the same
  * if you don't care if some messages don't reach their destination or
  take hours, then go for the cheapest provider. that's good for
 sending
  publicity for example. In the other hand, if you do care about the
 SMS
  reaching always to the destination, and if you want that to happen
  fast, then find a quality provider. In my experience esendex is good
  (they specialized in that, for example in sending sms authentication
  codes), but there are probably other better providers in other
  countries.
  * the providers might be able to send 20-50 sms/second. You could
  scale to do more by using multiple providers at the same time.
 
  There are other services specialised in sending SMS, Amazon for
  example http://docs.aws.amazon.com/sns/latest/dg/SMSMessages.html
  those I haven't used yet.
 
  Regards,
  --
  Eduardo Robles Elvira @edulix skype: edulix2
  http://agoravoting.org   @agoravoting +34 634 571 634
  tel:%2B34%20634%20571%20634
 
 
  On Thu, Jan 1, 2015 at 5:41 PM, Richard Brooks r...@g.clemson.edu
  mailto:r...@g.clemson.edu wrote:
   Anyone willing to share experiences on setting up
   (or using) an Internet to SMS interface...
  
   --
   Liberationtech is public  archives are searchable on Google.
  Violations of list guidelines will get you moderated:
  https://mailman.stanford.edu/mailman/listinfo/liberationtech.
  Unsubscribe, change to digest, or change password by emailing
  moderator at compa...@stanford.edu mailto:compa...@stanford.edu

Re: [liberationtech] bulk sms

2015-01-01 Thread ITechGeek
My preferred method is using email to sms gateways.

On your side that becomes free (depending on how you send the emails).
Most providers have  a disclaimer of no guarantee of delivery via the
gateways, but I have yet to lose an email that way.

Is mission critical, I would just use a service like Twilio which will
charge per msg, but not hard to set-up.


---
-ITG (ITechGeek)
i...@itechgeek.com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net

On Thu, Jan 1, 2015 at 11:57 AM, Eduardo Robles Elvira 
edu...@agoravoting.com wrote:

 Hello:

 I have used multiple services. I currently use esendex as an SMS
 sender provider, which is a spanish company (I'm from Spain). We have
 used other services. Some important facts:
 * sending SMS to most of the countries costs the same
 * if you don't care if some messages don't reach their destination or
 take hours, then go for the cheapest provider. that's good for sending
 publicity for example. In the other hand, if you do care about the SMS
 reaching always to the destination, and if you want that to happen
 fast, then find a quality provider. In my experience esendex is good
 (they specialized in that, for example in sending sms authentication
 codes), but there are probably other better providers in other
 countries.
 * the providers might be able to send 20-50 sms/second. You could
 scale to do more by using multiple providers at the same time.

 There are other services specialised in sending SMS, Amazon for
 example http://docs.aws.amazon.com/sns/latest/dg/SMSMessages.html
 those I haven't used yet.

 Regards,
 --
 Eduardo Robles Elvira @edulix skype: edulix2
 http://agoravoting.org   @agoravoting +34 634 571 634


 On Thu, Jan 1, 2015 at 5:41 PM, Richard Brooks r...@g.clemson.edu wrote:
  Anyone willing to share experiences on setting up
  (or using) an Internet to SMS interface...
 
  --
  Liberationtech is public  archives are searchable on Google. Violations
 of list guidelines will get you moderated:
 https://mailman.stanford.edu/mailman/listinfo/liberationtech.
 Unsubscribe, change to digest, or change password by emailing moderator at
 compa...@stanford.edu.
 --
 Liberationtech is public  archives are searchable on Google. Violations
 of list guidelines will get you moderated:
 https://mailman.stanford.edu/mailman/listinfo/liberationtech.
 Unsubscribe, change to digest, or change password by emailing moderator at
 compa...@stanford.edu.

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] confused by the Sony hack

2014-12-18 Thread ITechGeek
The rumors I've been hearing from some of my IT Security friends are saying
disgruntled ex employees from either a division of Sony Pictures or a key
partner and Sony Pictures not taking steps to properly store admin
passwords.  Haven't noticed any news reports verifying these rumors.

In my opinion if it was ex employees, it would probably be better for them
if the blame was shifted to N Korea.  Most of the hackivist groups tend to
take some level of credit (although there is a chance this group has
learned from people from other groups getting caught).

At this point the only people who know for sure have been tight lipped (no
good evidence the US or Sony knows yet, N Korea probably loves the
attention, and if non nation-state actors are involved, none have taken
credit).  Depending on how good the hackers were and how well they can keep
a secret, we might never know the true identities of who did this.


---
-ITG (ITechGeek)
i...@itechgeek.com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net

On Thu, Dec 18, 2014 at 1:11 PM, Noah Shachtman noah.shacht...@gmail.com
wrote:

 One the one hand, I see US officials leaking word that the North
 Koreans were involved...


 http://www.nytimes.com/2014/12/18/world/asia/us-links-north-korea-to-sony-hacking.html

 On the other, I see evidence that points to a hacktivist-type outfit...

 http://www.wired.com/2014/12/evidence-of-north-korea-hack-is-thin/

 Any ideas on which narrative (or combination thereof) is right?

 Best,



 nms
 --
 --
 Noah Shachtman
 Executive Editor | The Daily Beast
 917-690-0716
 noah.shacht...@gmail.com

 *new* encrypted phone: 646-681-6791
 --
 Liberationtech is public  archives are searchable on Google. Violations
 of list guidelines will get you moderated:
 https://mailman.stanford.edu/mailman/listinfo/liberationtech.
 Unsubscribe, change to digest, or change password by emailing moderator at
 compa...@stanford.edu.

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] Hammond Banned from using Cryptography

2013-11-15 Thread ITechGeek
Depending on your definition, that means no cell/cordless phone use
(cordlesss phones, GSM,  CDMA are technically encrypted), wifi (other then
open wireless access points), ssl, bluetooth, RFID credit/check cards.

Does cable TV count since that signal is encrypted between the cable
company and your cable box (and in most cases is a two way signal to send
back what channel you are watching).  How about satellite TV (Sat signal is
encrypted)

Transit systems are trying to move away from paper farecards and he
wouldn't be able to use any non-paper farecards

Or how about the remote for your car alarm?

---
-ITG (ITechGeek)
i...@itechgeek.com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net


On Fri, Nov 15, 2013 at 8:36 PM, Yosem Companys compa...@stanford.eduwrote:

 From: Privarchy Mee privar...@gmail.com

 Can any of you, most of whom I do not doubt are far more knowledgeable
 about cryptography and how it's conceptualised within the legal
 sphere, offer some insight regarding this?

 https://twitter.com/CyMadD0x/status/401443518612512769

 The claim is that Judge Loretta A. Preska, who sentenced Jeremy
 Hammond today, said that for the three years (post-release) that he
 was to spend under supervision, he will not be able to use encryption
 for communication or storage purposes(!) which is practically a legal
 edict to go and build a cabin by Walden Pond. How can this be
 considered anything but cruel and unusual?
 --
 Liberationtech is public  archives are searchable on Google. Violations
 of list guidelines will get you moderated:
 https://mailman.stanford.edu/mailman/listinfo/liberationtech.
 Unsubscribe, change to digest, or change password by emailing moderator at
 compa...@stanford.edu.

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] Microsoft Accesses Skype Chats

2013-05-14 Thread ITechGeek
Anyone try searching for private links in bing yet?

Sent from my iPad

On May 14, 2013, at 14:41, Tom Ritter t...@ritter.vg wrote:

 Also, it came about two hours after I sent the link to a friend.
 
 -tom
 
 On 14 May 2013 14:39, Tom Ritter t...@ritter.vg wrote:
 Tested it, got the following:
 
 HEAD /this_is_a_test2.html HTTP/1.1 from 65.52.100.214 with no User Agent.
 
 -tom
 
 
 
 On 14 May 2013 11:44, Pranesh Prakash pran...@cis-india.org wrote:
 Heise Security is reporting that Microsoft accesses links sent over Skype
 chat.[1]
 
 Here is the /. lede:
 
 A Microsoft server accesses URLs sent in Skype chat messages, even if they
 are HTTPS URLs and contain account information. A reader of Heise
 publications notified Heise Security (link to German website, Google
 translation[2]). They replicated the observation by sending links via Skype,
 including one to a private file storage account, and found that these URLs
 are shortly after accessed from a Microsoft IP address. When confronted,
 Microsoft claimed that this is part of an effort to detect and filter spam
 and fishing URLs.
 
 [1]:
 http://www.heise.de/newsticker/meldung/Vorsicht-beim-Skypen-Microsoft-liest-mit-1857620.html
 [2]:
 http://translate.google.com/translate?sl=autotl=enjs=nprev=_thl=enie=UTF-8eotf=1u=http%3A%2F%2Fwww.heise.de%2Fnewsticker%2Fmeldung%2FVorsicht-beim-Skypen-Microsoft-liest-mit-1857620.html
 
 ~ Pranesh
 
 --
 Pranesh Prakash
 Policy Director
 Centre for Internet and Society
 T: +91 80 40926283 | W: http://cis-india.org
 PGP ID: 0x1D5C5F07 | Twitter: @pranesh_prakash
 
 
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Can HAM radio be used for communication between health workers in rural areas with no cell connectivity?

2013-03-05 Thread ITechGeek
Depends on what information you might be transmitting and the specific
laws of the local country/countries involved.

HAMs have to be licensed through the local countries licensing
authority (in the case of the US would be the FCC).

Under US you could probably get away with allowing them to coordinate
if it is non-profit in nature, but you would not be able to discuss
any medical information that would allow a third party to possibly
identify the patient.

And some countries are very restrictive on who can get HAM licenses
due to the potential to get around their propaganda controls.  Also
rules can change based on frequencies being used cause lower
frequencies can transmit further.

Can you provide the country or countries involved?

---
-ITG (ITechGeek)
i...@itechgeek.com
https://itg.nu/
GPG Keys: https://itg.nu/contact/gpg-key
Preferred GPG Key: Fingerprint: AB46B7E363DA7E04ABFA57852AA9910A DCB1191A
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net


On Tue, Mar 5, 2013 at 8:07 PM, Yosem Companys compa...@stanford.edu wrote:
 From: Dr. Tusharkanti Dey dr.tusharkanti...@gmail.com

 Dear All,

 I am proposing to set up a ICT based health project in tribal areas with poor 
 infrastructural facilities with poor cell phone connectivity due to unstable 
 signal strengths. i have learnt that HAM radio software from HamSphere is 
 downloadable on android phones.I would like to know whether these android 
 phones with HAM radio software installed can be used for communication used 
 for voice communication between health workers themselves and with head 
 quarter staff. Will it be legally permissible and what technical requirements 
 will be needed to set up such system. The other alternative of setting up of 
 mobile signal boosters or long distance WiFi hubs are currently not 
 affordable to our limited resource organisation

 Thanks,
 Dr.Tusharkanti Dey
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech