Re: [OT] Tutanota security/privacy concerns (was: Re: How would you do that ...)

2021-08-27 Thread Ángel
On 2021-08-27 at 18:35 +, Стефан Васильев via Gnupg-users wrote: > Hi, > > I have not checked again, but can tell you from the past that they > check what web browser you are using, because when you use an anti- > fingerprint add on for your browser and it generates a User Agent > string with

Re: [OT] Tutanota security/privacy concerns (was: Re: How would you do that ...)

2021-08-27 Thread Стефан Васильев via Gnupg-users
l0f4r0 wrote: Hi Stefan, all, Oops, I think I wanted to react sooner but didn't visibly... 8 mai 2021, 15:12 de stefan.vasi...@posteo.ru: l0f4r0 wrote: I don't use ProtonMail so I can't say. But otherwise you have Tutanota (no phone number required):

[OT] Tutanota security/privacy concerns (was: Re: How would you do that ...)

2021-08-27 Thread l0f4r0--- via Gnupg-users
Hi Stefan, all, Oops, I think I wanted to react sooner but didn't visibly... 8 mai 2021, 15:12 de stefan.vasi...@posteo.ru: >> l0f4r0 wrote: >> >>> I don't use ProtonMail so I can't say. >>> >>> But otherwise you have Tutanota (no phone number required): >>>

Re: How would you do that ...

2021-05-14 Thread Stefan Vasilev via Gnupg-users
Ryan McGinnis wrote: For what it's worth if you're gung-ho about our heroine using a public library computer or something and you can't stego some info into an image for one of the image boards because you don't have any tech of your own in that country, then using a OTP to publicly post

Re: How would you do that ...

2021-05-13 Thread Ryan McGinnis via Gnupg-users
For what it's worth if you're gung-ho about our heroine using a public library computer or something and you can't stego some info into an image for one of the image boards because you don't have any tech of your own in that country, then using a OTP to publicly post something to a pastebin

Re: How would you do that ...

2021-05-12 Thread Mark via Gnupg-users
This will work too and doesn't care about the type  https://youtu.be/wb3Xa1h_RqM On 5/4/2021 9:47 AM, Robert J. Hansen via Gnupg-users wrote: Modern harddisks don't allow that anymore. Should I assume that "low-level format" in this case means something like dd if=/dev/zero of=/dev/sdX

Re: How would you do that ...

2021-05-11 Thread C.J. Collier
Maybe for i in {1..9} ; do dd if=/dev/zero of=/dev/sdX ; done just to be careful Or /dev/urandom as if= value On Mon, May 3, 2021, 11:14 Johan Wevers wrote: > On 03-05-2021 15:39, Robert J. Hansen via Gnupg-users wrote: > > > and gave her drives a low-level format. > > I remember from the

Re: How would you do that ...

2021-05-11 Thread Stefan Claas via Gnupg-users
On 08.05.2021 15:04, Stefan Vasilev via Gnupg-users wrote: Hi, thanks! I already found a solution by using an .onion based email provider, with clearnet usage support. Super simple registration, where the user only supplies a username and a password. Nothing more. :-) Regards Stefan

Re: How would you do that ...

2021-05-08 Thread Stefan Vasilev via Gnupg-users
Am 08.05.2021 um 15:04 schrieb Stefan Vasilev via Gnupg-users: l0f4r0 wrote: Hi, 8 mai 2021, 00:58 de gnupg-users@gnupg.org: Alice is no complete moron, because she can't register a free ProtonMail account without a phone. Or did she missed there an anonymous registration procedure

Re: How would you do that ...

2021-05-08 Thread Stefan Vasilev via Gnupg-users
l0f4r0 wrote: Hi, 8 mai 2021, 00:58 de gnupg-users@gnupg.org: Alice is no complete moron, because she can't register a free ProtonMail account without a phone. Or did she missed there an anonymous registration procedure which works? I don't use ProtonMail so I can't say. But otherwise

Re: How would you do that ...

2021-05-08 Thread l0f4r0--- via Gnupg-users
Hi, 8 mai 2021, 00:58 de gnupg-users@gnupg.org: > Alice is no complete moron, because she can't register a free ProtonMail > account > > without a phone. Or did she missed there an anonymous registration procedure > > which works? > I don't use ProtonMail so I can't say. But otherwise you have

Re: How would you do that ...

2021-05-07 Thread Ryan McGinnis via Gnupg-users
Protonmail only requires a phone number to send a verification “are you a real human” SMS if the IP you are registering from is a source of previous abuse. So, like, don’t use a VPN when you do it. Or if you’re worried about it, make the account back in your safe country before you travel to

Re: How would you do that ...

2021-05-07 Thread Stefan Vasilev via Gnupg-users
Ryan McGinnis wrote: Alice is an idiot if she’s trying to defeat nation-state adversaries and be a thrifty shopper at the same time, but even so, in most places a laptop isn’t going to be cheaper than a cheap mobile phone. You really want Alice to use some public library computer for some

Re: How would you do that ...

2021-05-07 Thread Ryan McGinnis via Gnupg-users
Alice is an idiot if she’s trying to defeat nation-state adversaries and be a thrifty shopper at the same time, but even so, in most places a laptop isn’t going to be cheaper than a cheap mobile phone. You really want Alice to use some public library computer for some reason, but I am going

Re: How would you do that ...

2021-05-07 Thread Stefan Vasilev via Gnupg-users
Ryan McGinnis wrote: Sounds like you're having to trust some kind of tech from the country you're going to, so with that in mind: Buy burner phone and SIM with cash from some place where normal people buy phones and SIMs with cash. Install Signal. Done For identification, have some code

Re: How would you do that ...

2021-05-07 Thread Ryan McGinnis via Gnupg-users
Sounds like you're having to trust some kind of tech from the country you're going to, so with that in mind: Buy burner phone and SIM with cash from some place where normal people buy phones and SIMs with cash. Install Signal. Done For identification, have some code word that will be the

Re: How would you do that ...

2021-05-04 Thread Robert J. Hansen via Gnupg-users
I have literally never in my life seen any meaningful use case for the OTP after about 1974. It's not part of a sensible discussion. :) On May 4, 2021 4:46:31 PM CDT, vedaal via Gnupg-users wrote: >Or, for the really paranoid ;-)you can have random data on a read-only >mini cdrom,and use it

Re: How would you do that ...

2021-05-04 Thread vedaal via Gnupg-users
Or, for the really paranoid ;-)you can have random data on a read-only mini cdrom,and use it as an OTP, and throw it into a garbage incinerator afterwards. If you are up against adversaries where this is necessary,this methods may ultimately not help ... = On 5/4/2021 at 1:19 PM, "Ingo

Re: How would you do that ...

2021-05-04 Thread Ingo Klöcker
On Dienstag, 4. Mai 2021 18:47:50 CEST Robert J. Hansen via Gnupg-users wrote: > For modern SSDs I generally recommend a single pass with random data: > > dd if=/dev/urandom of=/dev/foo bs=1M > > (Don't forget the blocksize [bs] parameter; it can improve speed > significantly.) > > This is

Re: How would you do that ...

2021-05-04 Thread Robert J. Hansen via Gnupg-users
Modern harddisks don't allow that anymore. Should I assume that "low-level format" in this case means something like dd if=/dev/zero of=/dev/sdX [puts on forensics professional hat] Good question! The tl;dr of it is that the technique to wipe a hard drive will vary according to the kind of

Re: How would you do that ...

2021-05-04 Thread Robert J. Hansen via Gnupg-users
Neal Stephenson's novel Cryptonomicon is excellent. I strongly recommend it to anyone who enjoys reading & is interested in crypto. Part of the plot involves a cipher that operates a bit like RC-4, permuting an array, but the array is a deck of cards. https://www.schneier.com/academic/solitaire/

Re: How would you do that ...

2021-05-04 Thread Stefan Vasilev via Gnupg-users
Sandy Harris wrote: Ralph Seichter via Gnupg-users wrote: * Stefan Vasilev via Gnupg-users: How would you solve this task? With Alice having to rely on cryptography she can do in her head? Some shift cipher and carrier pigeons. :-) Neal Stephenson's novel Cryptonomicon is excellent. I

Re: How would you do that ...

2021-05-04 Thread Sandy Harris via Gnupg-users
Ralph Seichter via Gnupg-users wrote: > > * Stefan Vasilev via Gnupg-users: > > > How would you solve this task? > > With Alice having to rely on cryptography she can do in her head? > Some shift cipher and carrier pigeons. :-) Neal Stephenson's novel Cryptonomicon is excellent. I strongly

Re: How would you do that ...

2021-05-03 Thread Johan Wevers
On 03-05-2021 15:39, Robert J. Hansen via Gnupg-users wrote: > and gave her drives a low-level format. I remember from the stone age (end 1980's begin 90's) that you could low-level format a disk with the DOS command debug by calling some BIOS routine by assembler routines. Modern harddisks

Re: How would you do that ...

2021-05-03 Thread Stefan Vasilev via Gnupg-users
r...@sixdemonbag.org wrote: I have dealt with a similar problem in real life, as a real problem with real people. We created a custom Linux environment, burned it to Blu-Ray, and Alice crossed the border with her Linux environment tucked into her CD player. On the other side she acquired a

Re: How would you do that ...

2021-05-03 Thread Stefan Vasilev via Gnupg-users
Ralph Seichter wrote: * Stefan Vasilev via Gnupg-users: How would you solve this task? With Alice having to rely on cryptography she can do in her head? Well, so to speak, this would be an option in the future. Some shift cipher and carrier pigeons. :-) Ha ha, but she needs to do that

Re: How would you do that ...

2021-05-03 Thread Robert J. Hansen via Gnupg-users
I have dealt with a similar problem in real life, as a real problem with real people. We created a custom Linux environment, burned it to Blu-Ray, and Alice crossed the border with her Linux environment tucked into her CD player. On the other side she acquired a laptop, Blu-Ray drive, and USB

Re: How would you do that ...

2021-05-03 Thread Ralph Seichter via Gnupg-users
* Stefan Vasilev via Gnupg-users: > How would you solve this task? With Alice having to rely on cryptography she can do in her head? Some shift cipher and carrier pigeons. :-) -Ralph ___ Gnupg-users mailing list Gnupg-users@gnupg.org

How would you do that ...

2021-05-03 Thread Stefan Vasilev via Gnupg-users
Hi all, here is a little scenario. Alice and Bob needs to find a way to do encrypted communications globally. The task is the following: Alice needs to travel to a foreign country without any devices (laptop, smartphone etc.). At arrival she needs to communicate daily (no real time