Re: [liberationtech] Google Unveils Tools to Access Web From Repressive Countries | TIME.com

2013-10-21 Thread Patrick Mylund Nielsen
On Mon, Oct 21, 2013 at 8:00 PM, Jillian C. York jilliancy...@gmail.comwrote: Since I already have more skepticism of Google Ideas and Jared Cohen than I need, let me pose this question: With the understanding that uProxy provides no anonymity protections, *is it providing anything that

Re: [liberationtech] Is Dropbox opening uploaded documents?

2013-09-13 Thread Patrick Mylund Nielsen
On Fri, Sep 13, 2013 at 1:20 PM, Ryan Getz ry...@getzmail.com wrote: On Thursday, September 12, 2013, Joe Szilagyi wrote: Found online: http://www.wncinfosec.com/**dropbox-opening-my-docs/http://www.wncinfosec.com/dropbox-opening-my-docs/ -- Joe Szilagyi Interesting, thanks for

Re: [liberationtech] World's Most Private Search Engine?

2013-08-19 Thread Patrick Mylund Nielsen
If we have learned anything from PRISM it's that words are cheap, and not complying is difficult to impossible (without shutting down your business). You should probably be using Tor regardless of which search engine you're using if you're worried about your privacy. On Aug 19, 2013 9:00 AM,

Re: [liberationtech] Is spideroak really zero-knowledge?

2013-08-12 Thread Patrick Mylund Nielsen
On Tue, Aug 13, 2013 at 1:35 AM, Percy Alpha percyal...@gmail.com wrote: @Tom, For this amount of time your password is stored in encrypted memory but to actually use the key, the key has to be in plain-text form for sometime, during which it can be (forced to )intercepted. If they can force

Re: [liberationtech] And now for some completely different flame... Chrome + password management

2013-08-08 Thread Patrick Mylund Nielsen
at 11:01 AM, Patrick Mylund Nielsen cryptogra...@patrickmylund.com wrote: On Thu, Aug 8, 2013 at 8:56 AM, Kyle Maxwell ky...@xwell.org wrote: Must every app data store reinvent the wheel rather than use operating system functionality? Agree in theory, but do all operating systems have

Re: [liberationtech] And now for some completely different flame... Chrome + password management

2013-08-07 Thread Patrick Mylund Nielsen
Encrypting the passwords with a master passphrase wouldn't be useless. At the very least it makes it harder to extract plaintext passwords from a discarded harddrive. On the other hand, a master passphrase doesn't offer nearly as much security as users think it does when they enable the feature.

Re: [liberationtech] Convergence: does anyone use it?

2013-07-28 Thread Patrick Mylund Nielsen
On Sun, Jul 28, 2013 at 1:03 PM, Yan Zhu y...@mit.edu wrote: It seems to be the browser extension http://convergence.io/ that everyone talks about but nobody uses. For one, the original repository isn't actively maintained, and I found at least one unpatched issue that keeps it from working

Re: [liberationtech] Resources on electronic voting

2013-07-24 Thread Patrick Mylund Nielsen
On Wed, Jul 10, 2013 at 1:36 PM, Marcin de Kaminski mar...@dekaminski.sewrote: Dear all, Sorry to ask such a general question but I need input on the issue of electronic voting. Is there any comprehensive collection of resources or (preferably academic) research already out there? Take a

Re: [liberationtech] Is Most Encryption Cracked?

2013-07-17 Thread Patrick Mylund Nielsen
On Wed, Jul 17, 2013 at 1:54 PM, Collin Anderson col...@averysmallbird.comwrote: Wait, forgive me Libtech for amusing myself at the cost of your collective inboxes but, is it just me or is the security page on what purports to be a security tool empty? https://unsene.com/security.html

Re: [liberationtech] Resources on electronic voting

2013-07-12 Thread Patrick Mylund Nielsen
This file is particularly interesting: https://github.com/vvk-ehk/evalimine/blob/098ff93f9f159c977d60584606a1dabce755f5f1/ivote-server/hes/vote_analyzer.py On Fri, Jul 12, 2013 at 9:37 AM, phryk in...@phryk.net wrote: No clue if it was already covered in this thread, but Estonia just opened

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Patrick Mylund Nielsen
If it's so easy, go ahead and produce a more secure alternative that people will use. Talking about how exceedingly easy it is in Internet forums doesn't contribute much. On Tue, Jul 9, 2013 at 5:55 AM, Maxim Kammerer m...@dee.su wrote: On Tue, Jul 9, 2013 at 11:39 AM, Michael Rogers

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Patrick Mylund Nielsen
Sorry, when I wrote scare normal users away from e.g. MSN, I meant scare normal users away from switching from e.g. MSN On Tue, Jul 9, 2013 at 12:31 PM, Patrick Mylund Nielsen cryptogra...@patrickmylund.com wrote: What I hear from you is a common idea: it is the idea is that people who

Re: [liberationtech] DecryptoCat

2013-07-07 Thread Patrick Mylund Nielsen
I see a ton of people criticizing left and right, conveniently leaving out that this didn't apply to the OTR implementation. I don't see a lot of people producing more secure or as-easy-to-use alternatives, which presumably they're more than capable of. Criticizing is easy. It's okay to feel bad

Re: [liberationtech] secure download tool - doesn't exist?!?

2013-07-01 Thread Patrick Mylund Nielsen
How do you apply to this to pages? Do you hash all their elements, or just the page? If it's the former: in what order do you do it? What if the author of a product decides to release a bug fix version? Your link will stop working, and make the software seem malicious when it's probably not. How

Re: [liberationtech] Secure and Cheap Provider in Sweden or Iceland?

2013-06-13 Thread Patrick Mylund Nielsen
Sweden isn't much better when it comes to wiretapping: https://en.wikipedia.org/wiki/FRA_law. Iceland is probably a good choice. On Thu, Jun 13, 2013 at 2:51 PM, Lorenzo Franceschi Bicchierai lorenzo...@gmail.com wrote: Hey guys, In lieu of the recent NSA leaks, I'm going to transfer my