[liberationtech] China Internet Network Information Center is a trusted root CA

2014-10-28 Thread Percy Alpha
present method to revoke all dubious Chinese CA. Percy Alpha(PGP https://en.greatfire.org/contact#alt) GreatFire.org Team -- Liberationtech is public archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo

[liberationtech] All Google products are now blocked in China

2014-06-01 Thread Percy Alpha
. Percy Alpha(PGP https://en.greatfire.org/contact#alt) GreatFire.org Team -- Liberationtech is public archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change

Re: [liberationtech] All Google products are now blocked in China

2014-06-01 Thread Percy Alpha
@Matt, It's implemented on blocking TCP on certain IP. The list of IP I gave is not blocked but the default IP addresses returned by DNS are blocked. @Tom, GoAgent is still very popular and the author has updated the software to make GoAgent still usable under the current circumstances. --

[liberationtech] Audits on secure communication softwares

2014-04-11 Thread Percy Alpha
The recent news of OpenSSL bug shows no software open source or not can be fully trusted. Do we have audits on secure communication softwares such as gpg4win, gpgtools and recent uprising secure mobile IMs such as wickr, confide, threema and Telegram? Percy Alpha(PGP https://en.greatfire.org

Re: [liberationtech] China

2014-02-12 Thread Percy Alpha
The short answer is no privacy. Gov can access servers at any time without any document. Percy Alpha(PGP https://en.greatfire.org/contact#alt) GreatFire.org Team On Wed, Feb 12, 2014 at 4:17 PM, R. Jason Cronk r...@privacymaverick.comwrote: Is there anybody who can point me to a resource

[liberationtech] iPhone5S Fingerprint and 5th amendment

2013-09-10 Thread Percy Alpha
fingerprint in most cases, could they use the fingerprint in the database to unblock the device and decrypt data? Percy Alpha(PGP https://en.greatfire.org/contact#alt) GreatFire.org Team -- Liberationtech is a public list whose archives are searchable on Google. Violations of list guidelines

Re: [liberationtech] Forcing VPN on Mac OS X

2013-09-02 Thread Percy Alpha
I thought OpenVPN will automatically stop traffic if VPN drops. -- Liberationtech is a public list whose archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or

Re: [liberationtech] Announcing Scramble.io

2013-08-24 Thread Percy Alpha
Wonderful! It's similar to my concept posted earlierhttp://www.mail-archive.com/liberationtech@lists.stanford.edu/msg06342.html. Your hash as email address eliminates the problem in my design to trust the server the first time emailling someone. -- Liberationtech is a public list whose archives

Re: [liberationtech] Is spideroak really zero-knowledge?

2013-08-13 Thread Percy Alpha
@Tony, The secret that keeps your data accessible to you alone is your SpiderOak password, which is never transmitted to SpiderOak in its original form. https://spideroak.com/engineering_matters -- Liberationtech is a public list whose archives are searchable on Google. Violations of list

Re: [liberationtech] Is spideroak really zero-knowledge?

2013-08-13 Thread Percy Alpha
Oh. Yes. I definitely remember reading User Authentication Process a few weeks ago. That's why I feel like they implement the zero-knowledge psw proof. Why did they take it down? NSA on the move already? Percy Alpha(PGP https://en.greatfire.org/contact#alt) GreatFire.org Team On Tue, Aug 13

[liberationtech] Is spideroak really zero-knowledge?

2013-08-12 Thread Percy Alpha
. Then all encrypted data will be retroactively compromised. Percy Alpha(PGP https://en.greatfire.org/contact#alt) GreatFire.org Team -- Liberationtech is a public list whose archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman

Re: [liberationtech] Is spideroak really zero-knowledge?

2013-08-12 Thread Percy Alpha
@Tom, For this amount of time your password is stored in encrypted memory but to actually use the key, the key has to be in plain-text form for sometime, during which it can be (forced to )intercepted. If they can force Lavabit to intercept users' emails, why can't they ask spideroak to secretly

Re: [liberationtech] Is spideroak really zero-knowledge?

2013-08-12 Thread Percy Alpha
@Tony, they claim to use zero-knowledge password proof for desktop client, but not for mobile or website. I wonder why, not accepted by App Store? -- Liberationtech is a public list whose archives are searchable on Google. Violations of list guidelines will get you moderated:

Re: [liberationtech] My design to implement PGP in commercial email system

2013-08-09 Thread Percy Alpha
In the light of Lavabit, Silent Circle both shut down, someone needs to invent a end to end encrypted email soon -- Liberationtech is a public list whose archives are searchable on Google. Persistent violations of list guidelines will get you moderated:

Re: [liberationtech] My design to implement PGP in commercial email system

2013-08-01 Thread Percy Alpha
*I don't see how this scheme would work with contextual based advertisements? Or maybe you are talking about a premium subscription service that does not rely on advertisements for revenue. (?)* From OP, The only downside of this approach is that email providers are not able to filter spam or

Re: [liberationtech] My design to implement PGP in commercial email system

2013-07-30 Thread Percy Alpha
Percy Alpha(PGP https://en.greatfire.org/contact#alt) GreatFire.org Team how does a browser know if this is the first time or the second one? What I mean is: 1) Alice wants to send an mail to Bob. It's the first time, so she retrieves B's key and signs it 2) in a different session (ie

Re: [liberationtech] My design to implement PGP in commercial email system

2013-07-29 Thread Percy Alpha
To boyska, but what if Gmail provides a fake key for B? Why should you automatically trust that key? Also, I miss the point of signatures: A signs B's key, but noone cares about that signature in that scheme. Am I missing something? At first time, B's public key will be downloaded from

Re: [liberationtech] My design to implement PGP in commercial email system

2013-07-29 Thread Percy Alpha
On Mon, Jul 29, 2013 at 10:58 AM, Randolph D. rdohm...@gmail.com wrote: uh? why commercial? http://bitmail.sf.net is open source. Regards Again, I want common people to use PGP. I want every communication to be encrypted. You recommendation is great but a client app(especially an app designed

[liberationtech] My design to implement PGP in commercial email system

2013-07-28 Thread Percy Alpha
is that email providers are not able to filter spam or provide related Ads based on email content. Even this might be solved in the future because of private outsourced computation. Percy Alpha(PGP https://en.greatfire.org/contact#alt) GreatFire.org Team -- Too many emails? Unsubscribe, change to digest