Re: [liberationtech] PGP is hard to use and needs stuff installed on your computer. Use PassLok instead.

2013-07-28 Thread Julian Oliver
..on Fri, Jul 26, 2013 at 03:59:34PM -0500, dd...@nulltxt.se wrote: You should use ContentSecurityPolicy to help avoid XSS attacks: http://content-security-policy.com/ https://people.mozilla.com/~bsterne/content-security-policy/ The page appears to be entirely static to me, which I thought was

[liberationtech] Fwd: [jitsi-users] New XMPP Server

2013-07-28 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 For those interested, these two forwarded mails mention two separate secure Jabber servers with no-logging. I cannot vouch for the validity of them. IMO, any alternative to running the now closed (as in no non-GTalk users can talk directly) Google

Re: [liberationtech] Fwd: [jitsi-users] New XMPP Server

2013-07-28 Thread John Perry
On 7/28/2013 6:44 AM, Bernard Tyers - ei8fdb wrote: For those interested, these two forwarded mails mention two separate secure Jabber servers with no-logging. I cannot vouch for the validity of them. IMO, any alternative to running the now closed (as in no non-GTalk users can talk

Re: [liberationtech] Fwd: [jitsi-users] New XMPP Server

2013-07-28 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 28 Jul 2013, at 13:21, John Perry wrote: On 7/28/2013 6:44 AM, Bernard Tyers - ei8fdb wrote: For those interested, these two forwarded mails mention two separate secure Jabber servers with no-logging. I cannot vouch for the validity of them.

Re: [liberationtech] Fwd: [jitsi-users] New XMPP Server

2013-07-28 Thread John Perry
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 7/28/2013 7:38 AM, Bernard Tyers - ei8fdb wrote: On 28 Jul 2013, at 13:21, John Perry wrote: On 7/28/2013 6:44 AM, Bernard Tyers - ei8fdb wrote: For those interested, these two forwarded mails mention two separate secure Jabber servers

[liberationtech] Feds wanting our passwords. Did you all comment on this when it happened and did I miss them?

2013-07-28 Thread Sheila Parks
http://news.cnet.com/8301-13578_3-57595529-38/feds-tell-web-firms-to-turn-over-user-account-passwords/ Did I miss comments on this? I would really like to see them either then or now Thank you so much Sheila Sheila Parks, Ed.D. Founder Center for Hand-Counted Paper Ballots Watertown, MA

[liberationtech] nettime John Naughton: Edward Snowden's not the story. The fate of the

2013-07-28 Thread Eugen Leitl
- Forwarded message from Patrice Riemens patr...@xs4all.nl - Date: Sun, 28 Jul 2013 09:47:11 +0200 From: Patrice Riemens patr...@xs4all.nl To: nettim...@kein.org Subject: nettime John Naughton: Edward Snowden's not the story. The fate of the Reply-To: a moderated mailing list for net

Re: [liberationtech] nettime John Naughton: Edward Snowden's not the story. The fate of the

2013-07-28 Thread Glassman, Michael
Just as a counterpoint to this article, We also know about the NSA spying because of the global freedom of the Internet. For the first time I can remember people are not buying what the establishment press is saying in protecting the national security state. The amount of people who are

Re: [liberationtech] Fwd: [jitsi-users] New XMPP Server

2013-07-28 Thread John Perry
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 7/28/2013 6:44 AM, Bernard Tyers - ei8fdb wrote: For those interested, these two forwarded mails mention two separate secure Jabber servers with no-logging. I cannot vouch for the validity of them. IMO, any alternative to running the now

Re: [liberationtech] Convergence: does anyone use it?

2013-07-28 Thread Patrick Mylund Nielsen
On Sun, Jul 28, 2013 at 1:03 PM, Yan Zhu y...@mit.edu wrote: It seems to be the browser extension http://convergence.io/ that everyone talks about but nobody uses. For one, the original repository isn't actively maintained, and I found at least one unpatched issue that keeps it from working

Re: [liberationtech] PGP is hard to use and needs stuff installed on your computer. Use PassLok instead.

2013-07-28 Thread Francisco Ruiz
@SteveWeis: - How do I communicate a password to Bob? Before I get a crucial bit of information to Bob, I need to first get a crucial bit of information to Bob? Alice should send her Lock (public key) to Bob rather than anything secret. - You assumed a keylogger is installed. If I type the

Re: [liberationtech] PGP is hard to use and needs stuff installed on your computer. Use PassLok instead.

2013-07-28 Thread Francisco Ruiz
@JulianOliver: I've thought about having a more polished interface, including multilevel menus, etc. They've told me all of this would be possible with jquery. But then PassLok would have to call a (large) piece of outside code, which would violate the offline rule. It can probably be done with

Re: [liberationtech] PGP is hard to use and needs stuff installed on your computer. Use PassLok instead.

2013-07-28 Thread Tony Arcieri
On Sun, Jul 28, 2013 at 1:32 PM, Francisco Ruiz r...@iit.edu wrote: - How do I communicate a password to Bob? Before I get a crucial bit of information to Bob, I need to first get a crucial bit of information to Bob? Alice should send her Lock (public key) to Bob rather than anything

Re: [liberationtech] PGP is hard to use and needs stuff installed on your computer. Use PassLok instead.

2013-07-28 Thread Doug Chamberlin
Or the Man in the middle can pose as Alice to Bob and Bob would think all subsequent communication with that person would be going to Alice. On Sun, Jul 28, 2013 at 5:01 PM, Tony Arcieri tony.arci...@gmail.comwrote: On Sun, Jul 28, 2013 at 1:32 PM, Francisco Ruiz r...@iit.edu wrote: - How do

Re: [liberationtech] Convergence: does anyone use it?

2013-07-28 Thread Guido Witmond
On 28-07-13 22:20, Patrick Mylund Nielsen wrote: On Sun, Jul 28, 2013 at 1:03 PM, Yan Zhu y...@mit.edu mailto:y...@mit.edu wrote: It seems to be the browser extension http://convergence.io/ that everyone talks about but nobody uses. For one, the original repository isn't

[liberationtech] Redecentralize podcast on the Cryptosphere

2013-07-28 Thread Tony Arcieri
Ohai various lists. Here's what I've been working on. Hope you like it. If you want to chat and you happen to be coming to DEFCON, hit me up. https://www.youtube.com/watch?v=NjOqYZzWqI0 Links: - Cryptosphere: http://cryptosphere.org - Celluloid: http://celluloid.io/ - Oasis.js:

Re: [liberationtech] Convergence: does anyone use it?

2013-07-28 Thread Tim Dittler
Is anyone running it? Thoughts on whether it's worth forking and patching? There is actually someone working on a fork of Convergence: https://github.com/mk-fg/convergence There is even another branch of Convergence which implements TACK. I think this might be an interesting direction to look

Re: [liberationtech] PGP is hard to use and needs stuff installed on your computer. Use PassLok instead.

2013-07-28 Thread Karl Fogel
Tony Arcieri tony.arci...@gmail.com writes: How? At the very least Alice/Bob need an authenticated/trusted channel for this. If Alice sends Bob her public key over an untrusted channel, it can be intercepted by an MitM posing as Bob who can then intercept all traffic between Alice/Bob In the

[liberationtech] My design to implement PGP in commercial email system

2013-07-28 Thread Percy Alpha
PGP is great for privacy but rather hard to use for common users. I came up with a simple design that can be implement in main-string email system while preserving the usability. Take Gmail for example. First Google should adopt zero-knowledge password proof for its account while asking users to

[liberationtech] Pakathon: A Hackathon for Pakistan

2013-07-28 Thread Samujjal (Shayan) Purkayastha
Hi everyone, This should be of interest to a lot of you. Pakistan presents some unique challenges within the developing world for both ictd and libtech practitioners, students, researchers and enthusiasts and this is a unique opportunity to meet others who are interested in the potential of

Re: [liberationtech] Convergence: does anyone use it?

2013-07-28 Thread Yan Zhu
On Mon, Jul 29, 2013 at 1:16 AM, Tim Dittler ditt...@informatik.hu-berlin.de wrote: Is anyone running it? Thoughts on whether it's worth forking and patching? There is actually someone working on a fork of Convergence: https://github.com/mk-fg/convergence This is more or less what I was