[liberationtech] As Internet Freedom Defender, US Keen on Protecting IP Rights

2013-03-08 Thread Yosem Companys
http://www.ip-watch.org/2013/03/08/us-as-defender-of-internet-freedom-keen-on-protecting-ip-rights/


http://www.ip-watch.org/

US As Defender Of Internet Freedom, Keen On Protecting IP Rights

By Catherine Saez, Intellectual Property Watch on 08/03/2013 @ 12:47 am

For the third year in a row, the United States mission to the United
Nations in Geneva brought together human rights activists from
different parts of the world in an effort to promote internet freedom.
At a press briefing, a senior US State Department official described
efforts to address challenges to freedom on the internet, and said
that intellectual property in the context of internet is a complicated
issue.

The Internet Freedom Fellows program [1], whose first round dates back
to 2011, is organising events in Geneva, Washington DC, and Stanford
University (California), from 4-15 March.

The aim of the programme is to bring “human rights activists from
across the globe to Geneva, Washington, and Silicon Valley to meet
with fellow activists, U.S. and international government leaders, and
members of civil society and the private sector engaged in technology
and human rights.,” according to the US mission website.

On 7 March, Alec Ross, senior advisor on innovation to the US
Secretary of State, was at a press briefing on securing human rights
online. “Internet freedom has become a real pillar of US foreign
policy priorities,” he said. Universal rights, freedom of expression,
freedom of association and assembly, and a free press should be
exercised on the internet, he said, adding that unfortunately, over
the years “internet has become an environment not merely competitive
but increasingly conflict ridden.”

“Too many governments around the world view the empowerment of
citizens as coming at their own expense and they fear the loss of
control which comes with connectivity,” Ross said. “In the face of
this, the US stands resolute in favour of an open internet and
protecting the freedoms of expression association and assembly on line
as well as off line,” he added.

Asked about what the US was doing to increase freedom on the internet,
Ross said that over the last four years, about US$100 million was
spent developing technologies to allow people to exercise their
universal rights. Most of about a dozen projects are classified except
for two, he said.

One of the projects is the Commotion (Wireless) programme, he said.
This has been dubbed by as the “internet in a suitcase,” and is a
project run by the Open Technology Initiative at the New America
Foundation. “It is a response to countries as Iran and Egypt, who in
the face of dissent literally turned down or slowed down the internet
and global networks,” he said. The Commotion Wireless [2] is a
technology is described as “an open source ‘device-as-infrastructure’
distributed communications platform that integrates users’ existing
cell phones, WiFi-enabled computers, and other WiFi-capable personal
devices to create a metro-scale peer-to-peer (mesh) communications
network,” on the Open Technology Initiative webpage.

Another project, Ross said, is nicknamed “The panic button” in
response to some situations in which people are arrested, their mobile
phones confiscated, and then they are tortured to obtain all their
passwords, so that their texts, emails, and address book become a
guidebook to resistance. For instance, in Iran in 2009, he said,
mobile phones became a point of “remarkable vulnerability for people
trying to freely express themselves.”

The panic button is “something that if you think you are in the danger
of being arrested … you can key in a code and it wipes and stores your
communications and your address book to the cloud in a way that it
cannot be keyed out,” he said. The protocol also sends a stress signal
to a pre-identified network of individuals to tell them the person has
been arrested, he said.

Kathleen Reen, vice president for global initiatives at Internews [3],
a non-profit organisation aimed at empowering local media, said at the
briefing that it is important that human rights advocates be protected
and so protections should be in place, they should be shared and
affordable. “Most people in the world do not have access to a credit
card and cannot afford the kind of top line services that large media
outlets have to stay safe and secure online,” she said.

IP and Internet Complicated Issue

In the US, nine million Americans got involved in a campaign because
they did not want two legislative bills against online piracy, he
said, because “it would have disrupted the way that the internet
works.” He was referring to the Stop Online Piracy Act (SOPA) and the
Protect IP Act (PIPA), both of which raised a vast campaign against
their introduction that led to the Congress withdrawing them. In that
case, he said, the public played a very influential role determining
how the internet would be governed. He said he thinks the same kind of
dynamic is going to play out in much of 

Re: [liberationtech] recommendation for WP host

2013-03-08 Thread Rich Kulawiec
On Sun, Mar 03, 2013 at 09:10:30PM -0500, Rich Kulawiec wrote:
 On Sun, Mar 03, 2013 at 04:13:26PM -0500, Griffin Boyce wrote:
If the problem is limited to DDoS attacks, you might find that Cloudflare
  offers some relief.  
 
 I agree, but: this thread (dating from today) may be of interest:
 
   Cloudflare is down
   http://mailman.nanog.org/pipermail/nanog/2013-March/056564.html

Yes, I'm following up my own message.  The reason is that I think
a particular comment in that thread is worth quoting.  This comment
provides, in my opinion, sufficient reason to immediately rule out
Cloudflare from any further consideration whatsoever.

 From: Constantine A. Murenin muren...@gmail.com
 Date: Mon, 4 Mar 2013 12:33:42 -0800
 Subject: Re: Cloudflare is down
 
 The issue I have is not with their network.
 
 The issue is that they require ALL of their customers to hand over DNS
 control, and completely disregard any kind of situation as what has
 just happened.
 
 * They don't provide any IP-addresses which you can set your A or 
 records to.
 
 * They don't provide any hostnames which you can set a CNAME to.
 (Supposedly, they do offer CNAME support to paid customers, but if you
 look at their help page for CNAME support, it's clearly evident that
 it's highly discouraged and effectively an unsupported option.)
 
 * They don't let you AXFR and mirror the zones, either.
 
 So, the issue here, is that a second point of failure is suddenly
 introduced to your own harmonised network, and introduced in a way as
 to suggest that it's not a big deal, and will make everything better
 anyways.

 [snip]
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


[liberationtech] New details on China TOM-Skype vulnerability

2013-03-08 Thread Graham Webster
Bloomberg Businessweek reports on a researcher who cracked the list of 
sensitive terms that trigger the Chinese TOM-Skype application to send messages 
to a server and sometimes block transmission.

http://www.businessweek.com/articles/2013-03-08/skypes-been-hijacked-in-china-and-microsoft-is-o-dot-k-dot-with-it

Remember 2008? Nart Villeneuve/Citizen Lab reported how this worked, and the 
surveillance barn door was wide open.

http://www.infowar-monitor.net/breachingtrust.pdf

Graham


--
Graham Webster 魏光明
g...@gwbstr.com




--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

[liberationtech] Cryptography Alt-Folk Band Release a New MixTape!

2013-03-08 Thread Nathan of Guardian

(See, I am learning a thing our two about how to get publicity, aren't I?)

Just a quick note to say that Gibberbot, the Guardian Project's free
(bot ways), open-source, standards compliant, secure instant messaging
app for Android, has been updated. It is rare that you have the
opportunity to implement a feature that makes an app more secure AND
more usable at the same time, but we did just that, by supporting Google
OAuth2 for @gmail and @google domain accounts. We also now support
TOFU-POP for SSL verification, which is fun to say, but even more fun to
use.

You can read about this and find all the relevant links here:
https://guardianproject.info/2013/03/08/gibberbot-v11-secure-usable/

HOWEVER, what I would rather you do, is try out a new interactive how
to for Gibberbot, that walks through both options for installation, and
how to set up a secure and verified mobile chat. View it here - I
promise you'll love it:
https://guardianproject.info/howto/chatsecurely/

This how-to is the first of a series we will be releasing for all of the
apps and services we offer. Many thanks to Mark Belinksy for taking this
new effort on for us, and for his very serious focus on making mobile
security a bit more fun.

If you would like to chat with me my nat...@guardianproject.info email
is a valid XMPP jid, so feel free to add me as a buddy, contact,
collaborator or confident, in your XMPP/OTR client of choice.

+Nathan

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] New details on China TOM-Skype vulnerability

2013-03-08 Thread Nick Daly
If you want to jump straight to the data, it's here:

http://cs.unm.edu/~jeffk/tom-skype/


On Fri, Mar 8, 2013 at 7:11 AM, Graham Webster g...@gwbstr.com wrote:

 Bloomberg Businessweek reports on a researcher who cracked the list of
 sensitive terms that trigger the Chinese TOM-Skype application to send
 messages to a server and sometimes block transmission.


 http://www.businessweek.com/articles/2013-03-08/skypes-been-hijacked-in-china-and-microsoft-is-o-dot-k-dot-with-it

 Remember 2008? Nart Villeneuve/Citizen Lab reported how this worked, and
 the surveillance barn door was wide open.

 http://www.infowar-monitor.net/breachingtrust.pdf

 Graham


 --
 Graham Webster 魏光明
 g...@gwbstr.com





 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

[liberationtech] Startup Global

2013-03-08 Thread Yosem Companys
http://www.entrepreneurship.org/en/Blogs/Policy-Forum-Blog/2013/February/Startup-Global.aspx

Startup Global

Posted by: Jonathan 
Ortmanshttp://www.entrepreneurship.org/en/Blogs/Policy-Forum-Blog/Author/Jonathan-Ortmans.aspx
 on 
February 25, 2013 Source: Policy Dialogue on Entrepreneurship

 


Thousands of people from 135 countries have already confirmed their 
participation for next month’s week-long Global Entrepreneurship 
Congresshttp://www.gec2013.com/en (GEC) 
and festival in Rio de Janeiro. As chair of the GEC for the past few years, 
I have witnessed the emergence of this global platform for collaboration 
among entrepreneurs, their investors and national leaders held outside the 
United States. So what happens at the GEC?


What is interesting about this event is its reach and scale and the 
evidence it provides of the democratization of entrepreneurship - the 
phenomenon of startups, and the communities that foster them springing up 
in the most unexpected corners of the globe. Governments from all corners 
have been racing to make their nations more attractive to entrepreneurs. 
The list of countries embarrassed into improving “ease of doing business” 
in the latest World Bank rankings lists nations of all economic 
classifications. This is why at the GEC in Rio next month, while Brazilian 
entrepreneurial prowess will be on show, delegates will experience not an 
all Brazilian or American show, but a global one focused on startup cities, 
experiential education, startup legislation, new models for where 
entrepreneurs can get their money, and an array of the most effective 
practical efforts in the world— from the likes of Kauffman and Endeavor—to 
help entrepreneurs scale.


This globalization of entrepreneurship has taken place not vertically but 
mainly horizontally. Over the past few years, the GEC has gathered many 
entrepreneurs and leaders in the startup community who are quick to dismiss 
government as irrelevant to their success. It has also welcomed government 
leaders uninformed about how their existing informal startup communities 
are already out there making things happen. In Rio, Brad Feld, author of 
“Startup Communities,” reminded us that a startup revolution has been and 
should continue to be led by entrepreneurs. At the same time, staff from 
governments that are exploring legislative and regulatory steps to help 
startups reminded us it is government that sets the rules and 
incentives—and that while public sector employees may not look the part, 
entrepreneurs should be careful not to be so dismissive. The GEC in Rio 
next month hopes to bring the two together: to find where top down and 
bottom up meet in developed, emerging and underdeveloped economies.


This annual Congress started in Kansas City in 2009, when the Kauffman 
Foundation convened the very first GEC with the goal of learning from 
entrepreneurship experts from 60 countries, particularly those pioneer 
leaders implementing the Global Entrepreneurship Week 
(GEW)http://www.kauffman.org/sketchbook.aspx?VideoId=1904190838001 initiative 
among their fellow citizens. Since then, the GEC has grown rapidly to a 
gathering that empowers serial and new entrepreneurs, investors, 
researchers and policymakers to work together to bring ideas to life and 
drive economic growth. When the second GEC took place in Dubai, 
entrepreneurship champions from 90 countries convened under the patronage 
of Sheikh Nahayan Mabarek Al Nahayan, the Minister for Higher Education and 
Technology in the UAE. Shanghai hosted the GEC in 2011, gathering 1,000 
leaders from 100 countries and introduced the idea of the world getting a 
thorough introduction to the entrepreneurial ecosystem of the Host country. 
High-ranking Chinese government officials, such as Yan Junqi, the vice 
chairwoman of the standing committee of the National People's Congress of 
China and the country’s Minister for Science and Technology interacted with 
a number of native entrepreneurs and angel investors who had been leading 
the country’s new wave of entrepreneurial activity.


Most recently in 2012, as noted in the 
Economisthttp://www.economist.com/node/21550239, 
Liverpool raised the bar again, adding economic researchers and bright 
personalities to the GEC—including the likes of Richard Branson, founder 
and chairman of the Virgin Group which consists of more than 400 companies. 
As part of Liverpool’s own economic renaissance, the city expanded the 
Congress into a true festival of entrepreneurship with nearly 80 fringe 
events held around the town. Ideas floated among entrepreneurs, 
researchers, investors and government officials from 125 countries about 
everything from seeding startup communities to smarter national policies.


This year in Rio, a new addition will be the national advisory boards 
attending that steer efforts through GEW to build more robust 
entrepreneurial ecosystems in neighborhoods and cities around the world. 
The GEC this year 

[liberationtech] Mechanical Turk is not anonymous

2013-03-08 Thread Yosem Companys
From: Matt Lease m...@ischool.utexas.edu via asis.org

This may be of interest to those in community using Amazon's Mechanical
Turk platform for research, as well as those more generally interested
in how online data can be linked in ways that can be surprising to
people in practice and compromise their privacy in a manner they didn't
expect.

Several collaborators and I have just announced discovery of a
vulnerability on Amazon's Mechanical Turk platform, with potential
implications for IRB governance of human subjects research using AMT at
US universities. In particular, this vulnerability can be exploited to
obtain personally identifying information (PII) and other private
information of some workers, who may have shared this information online
in a way they did not recognize could be linked to their WorkerIDs.

This may impact IRB oversight of research conducted at UT with AMT, as
well as what research is classified as human research and subject to IRB
governance.  I am just starting to follow up on this now with our IRB
coordinator here at UT Austin.

The announcement of our finding is below:

Blog post: http://crowdresearch.org/blog/?p=5177
Paper: http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2228728

We are now trying to get the word out to be AMT workers, as well as
researchers whose might be impacted or who may have posted WorkerIDs
online which could be compromised via this vulnerability. We would
appreciate your help with this.

We are also specifically advocating *against* online posting of
WorkerIDs due to the risk of workers not having realized that
information they have shared could be linked with their worker accounts.
Regardless of the vulnerability, we have also found explicit requests
from workers to not post such uniquely identifying information.

Thanks,
Matt
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Looking for collaborators for free-range voting project

2013-03-08 Thread Michael Allan
An update on this Knight News Challenge submission:

The software company Wadobo has joined with its Agora Voting platform.
We now have two strong service providers for the mirroring network.
We also have the Metagovernment project on board as a neutral
facilitator.

If you're a provider of on-line, open-source voting services and could
use some funding in order to join the mirroring network, please let us
know.  Adding more providers (up to a certain limit) can only help our
chances of winning.  See the submission page for contact details:

https://www.newschallenge.org/open/open-government/submission/free-range-voting/
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


[liberationtech] CfP: Digital Culture Politics

2013-03-08 Thread Yosem Companys
Call for Papers – Digital Culture: Promises and Discomforts
Digital Culture and Communication Section of ECREA Workshop
Bonn, 2-5 October, 2013

The ongoing mediatisation process is subject to social transformations as well 
as technical innovation processes and creative practices. We endorse digital 
technologies with the promises of a better way of life, solving our problems of 
managing the world’s complexity, allowing better participatory policies and 
helping us in our daily life. At the same time, however, we are confronted with 
the fundamental problems of technological structures, such as the problems of 
Internet surveillance, control and the unequal distribution of power on the 
Web. Looking at digital cultures as a driving force of social change, we find 
ourselves confronted with a variety of contradictory images of digital culture 
and its possible futures.

In this workshop we want to critically discuss the promises and discomforts of 
digital culture taking into account the tensions raised by different material 
practices, understandings and social orders around the role of digital media in 
performing social change. Special focus lies on the three aspects of Digital 
Culture:

(1) Digital imaginations and narratives
The images of future are drawn in tecno-scapes, like in science-fiction films, 
artificial intelligence designs, virtual worlds or metaverses. What kinds of 
individuals, societies and environments are imagined through the growing 
pervasiveness of Digital Culture into our lives? How digital imaginaries shape 
our experience and relate to our ways of narrating ourselves and our creative 
practices? What are the role of innovation, creative industries and urbanlabs 
in the design of the future and in the different kinds of social intervention? 
How digital imagination is performing new narrative forms as well as 
transforming knowledge production and sharing?

(2) Digital Neighbourhoods and Citizenship
Among the existing networked digital technologies it is smartphones and tablet 
computers, which are becoming increasingly popular at an extraordinary pace. 
These devices not only make digital media applications truly ubiquitous but 
also create an abundance of digital location-sensitive information, which 
saturates local places, social relations, and the perception and organisation 
of neighbourhoods. The concept of space turns into a mash-up of  material and 
digital places, creating new forms of the social while at the same time 
renegotiating the cultural and political logics of local/global or 
private/public. How does the use of digital media trigger new social phenomena, 
such as altered forms and modes of communication, collaboration, consumption, 
infrastructure, mobility or public service?

(3) Digital Engagement and Social Change
Digital engagement manifests itself in a broad range of digital practices. 
People discursively engage through and with digital media and thus dissolve 
spatial, temporal and social boundaries. Especially a few popular commercial 
social networks, like Facebook and Twitter, are presumed to play a crucial role 
in the process of social change by means of interaction and connectivity. On a 
political dimension, citizens and activists voice their opinions, discuss 
political issues, organize and mobilize for protest in new or alternative 
public spheres. However, it remains unclear, whether and in which 
differentiations digital media engagement affects established power relations 
and thus promotes social change. Which diverse forms of political engagement 
unfold in digital media environments? How can underlying technological and 
power structures of media be rendered visible and to what extent do they affect 
the possibilities and boundaries of digital engagement?

We welcome papers picking up any of the described issues and topics and we will 
also consider contributions related with digital forms of social intervention, 
art projects or urbanlabs proposals. Extended abstracts should be no longer 
than 700 words, written in English and contain a clear outline of the argument, 
the theoretical framework, methodology and results (if applicable).

Participants may submit more than one proposal, but only one paper by the same 
first author might be accepted. Panel and paper proposals from PhD students and 
early career scholars are particularly welcome.

All proposals should be submitted by April 19, 2013 to
ecreadigitalcult...@gmail.com. Notifications of acceptance will be
sent out after June 13, 2013.

Keynote Speakers:
Annette Markham (Umeå University, Sweden)
Jakob Svensson (Karlstad University, Sweden)

Venue:
The workshop will take place at the Department of Media Studies of the 
University of Bonn, Germany, Poppelsdorfer Allee 47, 53115, Bonn. The Workshop 
date is October 2nd – 5th, 2013.

Go to dccecrea2013.uni-bonn.de  for more information on the workshop venue and 
registration.--
Too many emails? Unsubscribe, change to digest, or 

Re: [liberationtech] Fwd: [g...@pryzby.org: Ubuntu, Dash, Shuttleworth and privacy]

2013-03-08 Thread Douglas Lucas
A small but important point people might have overlooked. An opt-out
function for Ubuntu's Dash is less helpful if you're running Ubuntu as a
liveboot. If you're running it as a liveboot, you or your startup script
will have to disable the Dash leaks each and every time you boot up your
computer. It is easy to mistakenly type something sensitive into the
Dash before disabling the leaks -- especially when you boot up your live
machine three, four times a day across hundreds of days. You're drunk or
tired or something -- might sound silly, but that is life -- and you
type a passphrase or something else important into the Dash...bad!

The take-away point is that when you take live systems into account, the
well you can just turn it off argument is weaker.

On 02/22/2013 04:06 PM, Jacob Appelbaum wrote:
 Rich Kulawiec:
 On Tue, Feb 19, 2013 at 04:53:48AM +, Jacob Appelbaum wrote:
 Sounds like someone should upload a package that fixes all of the
 privacy problems, eh?

 I've thought about this for a couple of days and about 20 miles, and
 although my initial reaction was yes, they should, I'm now going to
 reverse myself and say well...maybe not.  Here's why.

 I think the problem here is not susceptible to patching, because the
 root cause isn't software: it's mindset.  The people who think that this
 is actually a good idea -- and persist in thinking so despite cogent
 (and in my opinion, highly persuasive) arguments to the contrary -- are
 unlikely to shift course.  The course they've embarked on inevitably leads
 to more of the same -- oh, with different technical details and levels of
 impact, of course, but still: more of the same.  I am reminded of one
 of my favorite quotes:

  I could warn you of course, but you would not listen.  I could
  kill you, but someone would take your place.  So I do the only
  thing I can.  I go.

 I don't think the situation is salvageable; I think the effort that could
 be put into trying to do so is better spent elsewhere.

 I think it's time to go.
 
 The Opt-out strategy is useful. The question is - how does it make
 Ubuntu safer or more privacy preserving? For example - what if we were
 able to make a privacy preserving version that was also reasonably
 secure and everyone was happy? Perhaps one where people might even be
 able to opt-out of the privacy enhancements?
 
 I'd be fine with such a choice - I don't feel like it is a lost cause
 either, I think it is, if anything, a lot of work. Who is more likely to
 experiment in this space? It isn't Apple, it isn't Microsoft, it isn't a
 lot of Free Software projects; Ubuntu could really improve on their
 privacy in a way that few others are able to do and in doing so, they'd
 find a privacy preserving way to make a profit with the consent of those
 involved.
 
 I think the first step is to design such a thing, encourage people to
 use it and then to show those who are skeptical that the work is done.
 Now, if they say no, yes, I agree - time to consider it a lost cause.
 Such a dialog hasn't happened and as a result, I think it is too early
 to quit.
 
 All the best,
 Jacob
 --
 Unsubscribe, change to digest, or change password at: 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
 
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] cellebrite report

2013-03-08 Thread Douglas Lucas
These alternative passcode systems are really neat. Is there a way,
though, to quantify, for the different systems, how plausibly the
passcode can be 1) remembered or 2) forgotten or 3) forgotten?

On 02/27/2013 09:42 AM, R. Jason Cronk wrote:
 You could play Guitar Hero to get in your phone...
 
 http://bojinov.org/professional/usenixsec2012-rubberhose.pdf
 
 Another option would be to use animal species.  There are some 3-30
 million different species of animals. Even restricting oneself to
 vertebrates, you have about 50,000 species (a five fold increase over a
 4 digit pin).  The user would be presented with a series of reducing
 questions. Question 1) Amphibian, Reptile, Bird, Mammal, Fish, etc 
 The user need only remember how to get to their one animal choice. 
 Additional orders of magnitude could be had by adding invertebrates,
 plants, minerals on the front end or subspecies on the back end.
 
 Jason
 
 
 On Wed, Feb 27, 2013 at 9:06 AM, Tom Ritter t...@ritter.vg
 mailto:t...@ritter.vg wrote:
 
 The Passcode section of the report is blank, I guess indicating the
 user did not have a passcode?
 
 The article does mention passcodes:
 
  All modern smartphones can be locked with a PIN or password, which
 can slow down,
  or in some cases, completely thwart forensic analysis by the
 police (as well as a phone
  thief or a prying partner). Make sure to pick a sufficiently long
 password: a 4 character
  numeric PIN can be cracked in a few minutes, and the pattern-based
 unlock screen
  offered by Android can be bypassed by Google if forced to by the
 government. Finally,
  if your mobile operating system offers a disk encryption option
 (such as with Android
  4.0 and above), it is important to turn it on.
 
 The iPhone has a class of data that is encrypted when the device is
 locked, and decrypted based off a key derived in part by the passcode
 when unlocked.  I think this, combined with separate passwords for FDE
 and screen unlocking would be good classes of improvements we can make
 in all mobile platforms (not just phones).
 
 I'd also love to see some research into alternative, higher entropy
 but simple-to-use screen unlock systems.  At first I was thinking
 something akin to a pattern unlock, but a path through a 3D maze: your
 password is a series of turns, but even presented with five choices
 five times the keyspace is too small.  What keyspaces present a large
 number of easy-to-parse options that fit nicely on a phone screen?
 Maybe a map?  I've seen a few attempts[0,1, and others] but I've not
 been convinced they wind up with an order of magnitude more choices
 that the baseline 1 of a 4-digit passcode.
 
 -tom
 
 [0] http://www.youtube.com/watch?v=kHBjzlFalvA
 [1] http://clam.rutgers.edu/~birget/grPssw/authSueE.pdf
 --
 Too many emails? Unsubscribe, change to digest, or change password
 by emailing moderator at compa...@stanford.edu
 mailto:compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
 
 
 
 
 -- 
 *R. Jason Cronk,* *Esq., CIPP*   
 (828) 4RJCESQ
 r...@privacymaverick.com mailto:r...@privacymaverick.com
 blog.privacymaverick.com http://blog.privacymaverick.com/
 
 
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
 
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


[liberationtech] mHealth projects in Malawi?

2013-03-08 Thread Yosem Companys
From: imaniche...@gmail.com imaniche...@gmail.com

Good morning! My name is Imani Cheers and I'm a multimedia producer
with the PBS NewsHour and a 2013 New Media fellow with the
International Reporting Project. I'm currently beginning a 10 country
tour examining mHealth projects impacting women and girls and my
Malawi contact (FrontlineSMS and St. Gabriel's hospital) fell through.
I'll be in Lilongwe March 21-24. If anyone knows of any projects or
contacts on the groung in Malawi, I would greatly appreciate the
information. Thanks for the support!

Cheers,
~Imani

-- 
Imani M. Cheers, Ph.D.
PBS NewsHour Extra Director
MacNeil/Lehrer Productions
Arlington, VA
http://www.pbs.org/newshour/extra/
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech