Re: [liberationtech] DecryptoCat

2013-07-09 Thread Jonathan Wilkes
On 07/09/2013 02:33 PM, Jacob Appelbaum wrote: Jonathan Wilkes: On 07/09/2013 10:29 AM, Jacob Appelbaum wrote: Patrick Mylund Nielsen: On Tue, Jul 9, 2013 at 9:22 AM, Eugen Leitl wrote: On Tue, Jul 09, 2013 at 09:12:21AM -0400, Patrick Mylund Nielsen wrote: If it's so easy, go ahead and pr

Re: [liberationtech] Stability in truly "Democratic" decision systems

2013-07-09 Thread Peter Lindener
Doug C.- You steer the conversation in interesting directions, I take it you meant This: http://worldteacher.faithweb.com/sociocracy.htm The Quakers do seem to have there act together it's interesting that you might want to start there... as the foundation validity of our work is f

[liberationtech] The Tor Project is looking for a Lead Automation Engineer

2013-07-09 Thread Mike Perry
The Tor Project wants to deploy nightly builds and continuous integration for as many of our key software components and platform combinations as possible. Your job would be build and deploy the initial functional versions of a wide range of testing frameworks and continuous integration systems.

[liberationtech] CRS on NSA Surveillance Leaks

2013-07-09 Thread Gregory Foster
Congressional Research Service (Jul 2) - "NSA Surveillance Leaks: Background and Issues for Congress": http://www.fas.org/sgp/crs/intel/R43134.pdf From the Introduction: Recent media stories about National Security Agency (NSA) surveillance address unauthorized disclosures of two different inte

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Guido Witmond
On 10-07-13 00:57, h0ost wrote: > On 07/09/2013 06:25 PM, Petter Ericson wrote: >>> What are the steps for sending Bob a message using Cables? This isn't rhetorical, I'd actually like to know what the steps are. >>> >>> Roughly I think this is correct: >>> >>> 0. Download https://www

Re: [liberationtech] DecryptoCat

2013-07-09 Thread h0ost
On 07/09/2013 06:25 PM, Petter Ericson wrote: >> >>> What are the steps for sending Bob a message using Cables? >>> >>> This isn't rhetorical, I'd actually like to know what the steps are. >> >> Roughly I think this is correct: >> >> 0. Download https://www.dee.su/liberte >> 1. Boot any modern comp

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Petter Ericson
> > > What are the steps for sending Bob a message using Cables? > > > > This isn't rhetorical, I'd actually like to know what the steps are. > > Roughly I think this is correct: > > 0. Download https://www.dee.su/liberte > 1. Boot any modern computer with the usb disk inserted > 2. launch Claw

Re: [liberationtech] Please take me off the list

2013-07-09 Thread Dragana Kaurin
Sweta, at the bottom of each LibTech email there are directions on how to unsubscribe, or change the settings to digest. Best, Dragana On 07/09/2013 04:15 PM, Sweta Sneha wrote: > Please take me off the list! Although there are good discussions and > information on this list, there are days whe

[liberationtech] Please take me off the list

2013-07-09 Thread Sweta Sneha
Please take me off the list! Although there are good discussions and information on this list, there are days when there is a plethora of emails going back and forth. Warm Regards, Sweta Sweta Sneha, PhD Associate Professor of Informatio

Re: [liberationtech] Heml.is - "The Beautiful & Secure Messenger"

2013-07-09 Thread Nadim Kobeissi
This looks awesome! The more alternatives the better. NK On 2013-07-09, at 12:52 PM, Julian Oliver wrote: > > Suprised to see Peter Sunde, Leif Högberg & Linus Olsson push out their > private > messaging for Android and iOS as closed-source unlock-ware: > >https://heml.is/ > > (Warning:

Re: [liberationtech] Heml.is - "The Beautiful & Secure Messenger"

2013-07-09 Thread Marcin de Kaminski
I just asked the Heml.is team to join the list. Marcin 9 jul 2013 kl. 18:52 skrev Julian Oliver : > > Suprised to see Peter Sunde, Leif Högberg & Linus Olsson push out their > private > messaging for Android and iOS as closed-source unlock-ware: > >https://heml.is/ > > (Warning: Self-in

Re: [liberationtech] Urgent! Need a reliable public OpenID provider

2013-07-09 Thread LilBambi
Glad you were able to find some possible alternatives. I hear ya. I look forward to reading your foaming-at-the-mouth post on this. ;) On Mon, Jul 8, 2013 at 7:46 PM, Uncle Zzzen wrote: > Per se, they're not a provider, but https://openid.net/get-an-openid/gives > ideas where you can join. So

Re: [liberationtech] New newsletter on digital rights in the Arab world - Digital Citizen (المواطن الرقمي)

2013-07-09 Thread Jillian C. York
Hi Elham, Not yet, and in fact, Iran is outside of our scope - that said, anything published on Global Voices Advocacy often gets translated into multiple other languages, including Farsi! On Tue, Jul 9, 2013 at 2:04 PM, elham gheytanchi wrote: > Congratulations. > is there a Farsi version too?

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Jacob Appelbaum
Jonathan Wilkes: > On 07/09/2013 10:29 AM, Jacob Appelbaum wrote: >> Patrick Mylund Nielsen: >>> On Tue, Jul 9, 2013 at 9:22 AM, Eugen Leitl wrote: >>> On Tue, Jul 09, 2013 at 09:12:21AM -0400, Patrick Mylund Nielsen wrote: > If it's so easy, go ahead and produce a more secure alternative

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Jacob Appelbaum
Nadim Kobeissi: > Hi Jacob, > You've said a lot about Cryptocat's SSL configuration — can you recommend a > better configuration that is similarly compatible? > Hi Nadim, I mentioned this on the cryptography list - I suggest several things. First up - either disable all non-forward secure SSL/

Re: [liberationtech] New newsletter on digital rights in the Arab world - Digital Citizen (المواطن الرقمي)

2013-07-09 Thread elham gheytanchi
Congratulations.is there a Farsi version too? From: r.deib...@utoronto.ca Date: Tue, 9 Jul 2013 14:01:01 -0400 To: liberationt...@mailman.stanford.edu Subject: Re: [liberationtech] New newsletter on digital rights in the Arab world - Digital Citizen (المواطن الرقمي) Congratulations Jill! On 2013

Re: [liberationtech] New newsletter on digital rights in the Arab world - Digital Citizen (المواطن الرقمي)

2013-07-09 Thread Ronald Deibert
Congratulations Jill! On 2013-07-09, at 1:42 PM, Jillian C. York wrote: > Hi friends, > > I just wanted to share a new project, The Digital Citizen (or المواطن الرقمي) > - a monthly newsletter dedicated to covering digital rights issues across the > Arab world, in both Arabic and English. Ou

[liberationtech] New newsletter on digital rights in the Arab world - Digital Citizen (المواطن الرقمي)

2013-07-09 Thread Jillian C. York
Hi friends, I just wanted to share a new project, The Digital Citizen (or المواطن الرقمي) - a monthly newsletter dedicated to covering digital rights issues across the Arab world, in both Arabic and English. Our first edition is due shortly, and you can sign up here: http://eepurl.com/B7Qyn (Of c

Re: [liberationtech] CyberGhost5 VPN beta testing

2013-07-09 Thread Jurre andmore
I seriously hope nobody is going to run this. 2013/7/9 Fabio Pietrosanti (naif) : > Hi, > > please consier that sending link to directly downloadable Windows Executable > over a clear-txt HTTP (easily hijackable) link over a public, high traffic > mailing list is not a safe and responsible idea. >

[liberationtech] Heml.is - "The Beautiful & Secure Messenger"

2013-07-09 Thread Julian Oliver
Suprised to see Peter Sunde, Leif Högberg & Linus Olsson push out their private messaging for Android and iOS as closed-source unlock-ware: https://heml.is/ (Warning: Self-ingratiating video. Fun-guy team shots) Cheers, -- Julian Oliver PGP B6E9FD9A http://julianoliver.com http://critical

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Jonathan Wilkes
On 07/09/2013 10:29 AM, Jacob Appelbaum wrote: Patrick Mylund Nielsen: On Tue, Jul 9, 2013 at 9:22 AM, Eugen Leitl wrote: On Tue, Jul 09, 2013 at 09:12:21AM -0400, Patrick Mylund Nielsen wrote: If it's so easy, go ahead and produce a more secure alternative that people You mean something l

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Patrick Mylund Nielsen
Sorry, when I wrote "scare normal users away from e.g. MSN", I meant "scare normal users away from switching from e.g. MSN" On Tue, Jul 9, 2013 at 12:31 PM, Patrick Mylund Nielsen < cryptogra...@patrickmylund.com> wrote: > > What I hear from you is a common idea: it is the idea is that people >

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Patrick Mylund Nielsen
> What I hear from you is a common idea: it is the idea is that people who don't build those systems don't have a right to voice negative or critical views. Absolutely not. If this is how I came across, I apologize. Let me try to express myself a little more clearly, and not via a phone. Your sec

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Jason Gulledge
Here are more statistics on TLS modes failing back to less secure modes, and a semi-complete listing of affected browsers, published 2 days ago: http://jbp.io/2013/07/07/tls-downgrade/ Best, Jason Gulledge On Jul 9, 2013, at 4:29 PM, Jacob Appelbaum wrote: > Patrick Mylund Nielsen: >> On Tu

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Nadim Kobeissi
On 2013-07-09, at 10:29 AM, Jacob Appelbaum wrote: > Patrick Mylund Nielsen: >> On Tue, Jul 9, 2013 at 9:22 AM, Eugen Leitl wrote: >> >>> On Tue, Jul 09, 2013 at 09:12:21AM -0400, Patrick Mylund Nielsen wrote: If it's so easy, go ahead and produce a more secure alternative that >>> people

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Kate Krauss
On Tue, Jul 9, 2013 at 9:57 AM, Jacob Appelbaum wrote: > Patrick Mylund Nielsen: > > If it's so easy, go ahead and produce a more secure alternative that > people > > will use. Talking about how exceedingly easy it is in Internet forums > > doesn't contribute much. > > > > I'm not sure if you're

Re: [liberationtech] CyberGhost5 VPN beta testing

2013-07-09 Thread Fabio Pietrosanti (naif)
Hi, please consier that sending link to directly downloadable Windows Executable over a clear-txt HTTP (easily hijackable) link over a public, high traffic mailing list is not a safe and responsible idea. Rather post a link to a web page, explaining what you are speaking about. Regards, --

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Jacob Appelbaum
Patrick Mylund Nielsen: > On Tue, Jul 9, 2013 at 9:22 AM, Eugen Leitl wrote: > >> On Tue, Jul 09, 2013 at 09:12:21AM -0400, Patrick Mylund Nielsen wrote: >>> If it's so easy, go ahead and produce a more secure alternative that >> people >> >> You mean something like http://dee.su/ ? >> >> And htt

[liberationtech] Cables! (was Re: DecryptoCat)

2013-07-09 Thread Nathan of Guardian
On 07/09/2013 09:22 AM, Eugen Leitl wrote: > And http://dee.su/cables ? Glad you brought that up. Cables is one of those things I keep wanting to dig into but never have enough time. What is the state of the project, and is there a good primer to get started on developing around it? My interest

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Jacob Appelbaum
Patrick Mylund Nielsen: > If it's so easy, go ahead and produce a more secure alternative that people > will use. Talking about how exceedingly easy it is in Internet forums > doesn't contribute much. > I'm not sure if you're away but Maxim did exactly this many years ago. He wrote a system calle

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Jacob Appelbaum
Maxim Kammerer: > On Tue, Jul 9, 2013 at 11:39 AM, Michael Rogers > wrote: >> Google and Mozilla wouldn't have to run >> competitions to find holes in their own browsers. There wouldn't be a >> multi-million-dollar 0day black market. > > You are talking about huge projects with complex design, wh

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Patrick Mylund Nielsen
On Tue, Jul 9, 2013 at 9:22 AM, Eugen Leitl wrote: > On Tue, Jul 09, 2013 at 09:12:21AM -0400, Patrick Mylund Nielsen wrote: > > If it's so easy, go ahead and produce a more secure alternative that > people > > You mean something like http://dee.su/ ? > > And http://dee.su/cables ? > > No, I mean

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Eugen Leitl
On Tue, Jul 09, 2013 at 09:12:21AM -0400, Patrick Mylund Nielsen wrote: > If it's so easy, go ahead and produce a more secure alternative that people You mean something like http://dee.su/ ? And http://dee.su/cables ? > will use. Talking about how exceedingly easy it is in Internet forums > does

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Patrick Mylund Nielsen
If it's so easy, go ahead and produce a more secure alternative that people will use. Talking about how exceedingly easy it is in Internet forums doesn't contribute much. On Tue, Jul 9, 2013 at 5:55 AM, Maxim Kammerer wrote: > On Tue, Jul 9, 2013 at 11:39 AM, Michael Rogers > wrote: > > Google

[liberationtech] New Citizen Lab Report

2013-07-09 Thread Ronald Deibert
Dear LibTech I am pleased to announce the latest Citizen Lab publication: Some Devices Wander by Mistake: Planet Blue Coat Redux Morgan Marquis-Boire (project leader), Collin Anderson (lead technical research), Jakub Dalek (lead technical research), Sarah McKune (lead legal research), John Scot

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Maxim Kammerer
On Tue, Jul 9, 2013 at 11:39 AM, Michael Rogers wrote: > Google and Mozilla wouldn't have to run > competitions to find holes in their own browsers. There wouldn't be a > multi-million-dollar 0day black market. You are talking about huge projects with complex design, where the architecture itself

[liberationtech] CyberGhost5 VPN beta testing

2013-07-09 Thread oana.ciobotea
Hey guys, After the discussion we had on Twitter I decided that it would be great if we could share the CyberGhost5 beta link on your lists so a lot more interested people could test it. Here is the link: http://cyberghostvpn.com/download/cg5_Beta.exe We are really keen on finding people’s opin

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/07/13 20:35, Maxim Kammerer wrote: > Writing secure software is relatively easy, and does not rely much > on abstraction layers or whatever OOP ideology is popular at the > moment. You just document each function' input/output, test it > somehow,

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Petter Ericson
On 08 July, 2013 - Nadim Kobeissi wrote: > > On 2013-07-08, at 2:48 PM, Reed Black wrote: > > > On Mon, Jul 8, 2013 at 11:00 AM, David Goulet wrote: > >> > >> Furthermore, looking at those lines of code, there is simply NO comments > >> at all, > >> nothing to help peer review, to explain wh