Re: [liberationtech] W3C WebCrypto Last Call for Comments *today*

2014-05-28 Thread carlo von lynX
Sorry libtech, some of the in-between mails were not forwarded to you. On Wed, May 28, 2014 at 02:21:55PM +0200, Anders Rundgren wrote: Asking for consensus on anything security-ish under these circumstances is simply put impossible. That's because you can't build consensus if some

Re: [liberationtech] W3C WebCrypto Last Call for Comments *today*

2014-05-28 Thread Anders Rundgren
I don't have much to offer regarding the algorithm issues but I believe my 15Y+ with (mainly unsuccessful) security standardization efforts have given me at least a perspective on this. There are no entirely objective and honest persons around. We all have something to defend like professional

[liberationtech] TODAY | Stanford Cryptofolks Summit 2014

2014-05-28 Thread Yosem Companys
From: Anjney Midha anj...@stanford.edu Stanford Cryptofolks Summit 2014 May 28th, Stanford University 6:30 - 8:00 pm Annenberg Auditorium Register at http://www.eventbrite.com/e/cryptofolks-summit-tickets-11612267605 The Cryptofolks Summit brings together Stanford faculty, students, and

Re: [liberationtech] W3C WebCrypto Last Call for Comments *today*

2014-05-28 Thread Anders Rundgren
On 2014-05-28 16:55, Ryan Sleevi wrote: Again removing public-webcrypto-comments. Yes, I forgot to mention that standardization efforts have nothing to do with Democracy, Free speech, Level playing fields, or a Quest for the best possible solution... It is only about playing hard-ball,

[liberationtech] Emergency: Has TrueCrypt.org been Hijacked?

2014-05-28 Thread Brad Beckett
Truecrypt.org now redirects to: http://truecrypt.sourceforge.net/ with a warning to use Bitlocker and not Truecrypt. Something seems off. - Brad -- Liberationtech is public archives are searchable on Google. Violations of list guidelines will get you moderated:

Re: [liberationtech] Emergency: Has TrueCrypt.org been Hijacked?

2014-05-28 Thread KheOps
On Wed, May 28, 2014 at 01:44:12PM -0700, Brad Beckett wrote: Truecrypt.org now redirects to: http://truecrypt.sourceforge.net/ with a warning to use Bitlocker and not Truecrypt. Hard to tell whether it's a hijack or an actual warning message. Does it make sense that TrueCrypt development could

Re: [liberationtech] Emergency: Has TrueCrypt.org been Hijacked?

2014-05-28 Thread Nighat Dad
That warning on TrueCrypt's website has been there since a while. AFAIK, iSEC did a security audit of TrueCrypt and found various weaknesses and issues in it. opencryptoaudit.org/reports/iSec_F… https://t.co/FEXS8JkSnZ On Wed, May 28, 2014 at 10:58 PM, KheOps khe...@ceops.eu wrote: On Wed,

Re: [liberationtech] Emergency: Has TrueCrypt.org been Hijacked?

2014-05-28 Thread Bernard Tyers
Hi Nighat, When you say a while, how long do you mean? There is a thread on the Twitters at the moment about this: https://twitter.com/runasand/status/471740622031032320 - The the signature of the .exe still verifies. - The key seems to be legit:

Re: [liberationtech] Emergency: Has TrueCrypt.org been Hijacked?

2014-05-28 Thread Andrew Lewis
The new exe is apparently signed with the same cert as the old one, and people say that the only changes so far in comparing diff's is the warning message and turning it into remove-only. (I haven't had a chance to verify myself, but these are claims from the twittersphere) -Andrew On May 28,

Re: [liberationtech] Emergency: Has TrueCrypt.org been Hijacked?

2014-05-28 Thread Tom O
If your bored https://github.com/warewolf/truecrypt/compare/master...7.2 On Thursday, May 29, 2014, Andrew Lewis m...@andrewlew.is wrote: The new exe is apparently signed with the same cert as the old one, and people say that the only changes so far in comparing diff's is the warning message

[liberationtech] Reset the Net (tech focused NSA campaign on June 5th)

2014-05-28 Thread Holmes Wilson
Hi everyone— We’re organizing a campaign against mass surveillance for this Thursday, June 5th, the first anniversary of the Snowden leaks: http://resetthenet.org/ The idea is to build a bigger movement around sites securing their connection to users, and around popularizing easy to use

Re: [liberationtech] Not an Emergency: Has TrueCrypt.org been Hijacked?

2014-05-28 Thread Rich Kulawiec
It's probably just been hacked. Since the principals haven't commented yet, I suspect they're probably busy diagnosing and fixing it. I suggest ignoring the yapping on Twitter, having a nice microbrew, and awaiting further developments. And if those further developments amount to it's true,

Re: [liberationtech] W3C WebCrypto Last Call for Comments *today*

2014-05-28 Thread carlo von lynX
On Wed, May 28, 2014 at 09:31:42PM +0200, Anders Rundgren wrote: Yes, I forgot to mention that standardization efforts have nothing to do with Democracy, Free speech, Level playing fields, or a Quest for the best possible solution... It is only about playing hard-ball, hallway lobbying and

[liberationtech] EFF and ARTICLE 19 Urges Governments to Preserve Fundamental Freedoms in, the Age of Mass Surveillance

2014-05-28 Thread Katitza Rodriguez
EFF and ARTICLE 19 Urges Governments to Preserve Fundamental Freedoms in the Age of Mass Surveillance San Francisco and London – As the global debate over the intelligence programs revealed by Edward Snowden approaches its first anniversary, the Electronic Frontier Foundation (EFF) and ARTICLE

Re: [liberationtech] Not an Emergency: Has TrueCrypt.org been Hijacked?

2014-05-28 Thread sam de silva
Hi there, I accessed the truecrpyt site less than 24 hours ago and it went to the true crypt site i have been familiar with. We are about to finalise a dig safety curriculum, so it'll be great to get some feedback from the info-sec community about this as soon as possible. Thanks in

Re: [liberationtech] W3C WebCrypto Last Call for Comments *today*

2014-05-28 Thread Anders Rundgren
PLEASE, NOT FOR WEB CRYPTO LIST On 2014-05-29 02:33, carlo von lynX wrote: On Wed, May 28, 2014 at 09:31:42PM +0200, Anders Rundgren wrote: Yes, I forgot to mention that standardization efforts have nothing to do with Democracy, Free speech, Level playing fields, or a Quest for the best