Re: [liberationtech] Cryptography Leak in Enigmail / GnuPG

2014-06-02 Thread Tom O
As far as I was aware all of these could be turned off as an option in the interface. On Tuesday, June 3, 2014, Tomer Altman taltm...@stanford.edu wrote: Is this really a cryptographic leak? This seems more like metadata to me. Your subject line makes it sound as if the cryptographic

Re: [liberationtech] TrueCrypt Alternatives?

2014-05-29 Thread Tom O
Truecrypt has not properly been audited. The only audit to date is what has been organised by Matthew Green of Johns Hopkins University. I believe there is still more to go on this, but in light of recent events, one wonders of this is worth it. On Thursday, May 29, 2014, carlo von lynX

Re: [liberationtech] TrueCrypt Alternatives?

2014-05-29 Thread Tom O
secure than others. On 29 May 2014 22:37, carlo von lynX l...@time.to.get.psyced.org wrote: On Thu, May 29, 2014 at 08:51:21PM +1000, Tom O wrote: Truecrypt has not properly been audited. The only audit to date is what has been organised by Matthew Green of Johns Hopkins University. I

Re: [liberationtech] TrueCrypt Alternatives?

2014-05-29 Thread Tom O
Sorry the link should be www.istruecryptauditedyet.com On 29 May 2014 22:37, carlo von lynX l...@time.to.get.psyced.org wrote: On Thu, May 29, 2014 at 08:51:21PM +1000, Tom O wrote: Truecrypt has not properly been audited. The only audit to date is what has been organised by Matthew Green

Re: [liberationtech] Emergency: Has TrueCrypt.org been Hijacked?

2014-05-28 Thread Tom O
If your bored https://github.com/warewolf/truecrypt/compare/master...7.2 On Thursday, May 29, 2014, Andrew Lewis m...@andrewlew.is wrote: The new exe is apparently signed with the same cert as the old one, and people say that the only changes so far in comparing diff's is the warning message

Re: [liberationtech] Swedish press question: How does surveillance change the citizen's behavior?

2013-12-12 Thread Tom O
To be honest you are probably asking the wrong crowd. In my experience the way everyday society uses the internet probably hasn't changed. For the most part 99% of the population use it the same as they did before. Confirmation bias is easy to find. The reality is most people haven't changed, as

Re: [liberationtech] Snowden sets OPSEC record straight

2013-10-18 Thread Tom O
I have issues with those responses. 1. NSA won't say what damage has been caused. They still operate in the dark. They'd be stupid to say anything either way. Silence doesn't equate to no damage. 2. From GG has said, Snowden has access to files. Now whether they are in Russia, who knows. To

Re: [liberationtech] Snowden sets OPSEC record straight

2013-10-18 Thread Tom O
Greenwald has stated on twitter that Snowden has access to docs. On Saturday, October 19, 2013, coderman wrote: On Fri, Oct 18, 2013 at 5:43 AM, Tom O winterfi...@gmail.comjavascript:; wrote: ... 1. NSA won't say what damage has been caused. They still operate in the dark. They'd

Re: [liberationtech] Snowden sets OPSEC record straight

2013-10-18 Thread Tom O
I'll try search through his feed and see if I can locate them. On Saturday, October 19, 2013, coderman wrote: On Fri, Oct 18, 2013 at 1:38 PM, Tom O winterfi...@gmail.comjavascript:; wrote: Greenwald has stated on twitter that Snowden has access to docs. do you have links to the tweets

Re: [liberationtech] How Lavabit Melted Down

2013-10-09 Thread Tom O
He seemed pretty ok with handing over user metadata for a rather small amount of cash though. http://www.theguardian.com/technology/2013/oct/09/lavabit-metadata-log-3500-offer On Thursday, October 10, 2013, Eugen Leitl wrote:

Re: [liberationtech] Recommend consultant to discuss pen test?

2013-09-06 Thread Tom O
in their team though and have found them to be very competent operators. On Saturday, September 7, 2013, Maxim Kammerer wrote: On Fri, Sep 6, 2013 at 8:03 AM, Tom O winterfi...@gmail.comjavascript:; wrote: Posting a news article without context or response from Veracode is weak. That was just

Re: [liberationtech] Recommend consultant to discuss pen test?

2013-09-05 Thread Tom O
:48 AM, Tom O winterfi...@gmail.comjavascript:; wrote: Veracode will gladly pwn you. https://blog.crypto.cat/2013/02/cryptocat-passes-security-audit-with-flying-colors/ http://tobtu.com/decryptocat-old.php -- Maxim Kammerer Liberté Linux: http://dee.su/liberte -- Liberationtech

Re: [liberationtech] Recommend consultant to discuss pen test?

2013-09-04 Thread Tom O
Veracode will gladly pwn you. On Thursday, September 5, 2013, Matt Holland wrote: I'm interested in testing the vulnerability to an outside attacker of some of our organization's protected data. I'd like to try not just network-based attacks but also probe for human weaknesses in our security

Re: [liberationtech] NSA Laughs at PCs, Prefers Hacking Routers and Switches

2013-09-04 Thread Tom O
Well their core business is SIGINT. it's only logical for this to be the focus. I don't see how this is surprising. On Thursday, September 5, 2013, Tom Ritter wrote: On Wed, Sep 4, 2013 at 7:33 PM, Robert Guerra rgue...@privaterra.orgjavascript:; wrote: Curious on people's comments on

Re: [liberationtech] Snowden masks for Holloween?

2013-09-03 Thread Tom O
, if precedent holds). And, uh, right, because we don't really care about the law or Snowden's rights, just what we can get away with internationally and in the court of public opinion. Thinking of running for president? ;) SN On Sep 3, 2013 1:52 AM, Tom O winterfi...@gmail.com wrote: Unless

Re: [liberationtech] Snowden masks for Holloween?

2013-09-02 Thread Tom O
Unless he's trademarked his likeness, it's doubtful he'd have any recourse. And if he did, what chance does he have to defend it in Russia? Slim to none On Tuesday, September 3, 2013, Travis McCrea wrote: I actually disagree... his ownership of his likeness is minimal. He is a public figure

Re: [liberationtech] Postdocs in Spain

2013-09-02 Thread Tom O
In light of this http://www.theguardian.com/science/political-science/2013/aug/28/science-policy That's a hard sell... On Tuesday, September 3, 2013, Yosem Companys wrote: From: Gemma Galdon Clavell gemma.gal...@gmail.com javascript:_e({}, 'cvml', 'gemma.gal...@gmail.com'); The Catalan

Re: [liberationtech] what to install on a secure communication device

2013-08-31 Thread Tom O
Is irssi-otr working yet? You could add that. Mixmaster/mixminion? On Saturday, August 31, 2013, Eugen Leitl wrote: I'm looking to build a list for reasonably secure (no snake oil) ways to communicate (search, store, etc.). My ad hoc list so far is: Pidgin/OTR cables Jitsi Tor YaCy

Re: [liberationtech] what to install on a secure communication device

2013-08-31 Thread Tom O
That's good news then On Saturday, August 31, 2013, Ben Laurie wrote: On 31 August 2013 12:43, Tom O winterfi...@gmail.com javascript:_e({}, 'cvml', 'winterfi...@gmail.com'); wrote: Is irssi-otr working yet? irssi-otr has mostly worked for ages. You could add that. Mixmaster

Re: [liberationtech] liberationtech Digest, Vol 169, Issue 1

2013-08-21 Thread Tom O
That would require common sense, which is obviously lacking in this individual. On Wednesday, August 21, 2013, Shelley wrote: So, of course the obvious solution is to make a snotty drama comment and quote an entire digest-- instead of, you know, unsubscibing yourself with the link included in

Re: [liberationtech] How Laura Poitras Helped Snowden Spill His Secrets

2013-08-21 Thread Tom O
So it's now become about the heroism of the journalists and not Snowden and mass govt surveillance. Right. On Thursday, August 22, 2013, Scott Elcomb wrote: On Wed, Aug 21, 2013 at 8:16 AM, Eugen Leitl eu...@leitl.orgjavascript:_e({}, 'cvml', 'eu...@leitl.org'); wrote: (possible dupe)

Re: [liberationtech] Bradley Manning's sentence: 35 years for exposing us to the truth

2013-08-21 Thread Tom O
/] Global Voices: [http://globalvoicesonline.org/author/sana-saleem/] The Guardian:[ www.guardian.co.uk/profile/sana-saleem] Blog: http://sanasaleem.com] Twitter: @sanasaleemhttp://twitter.com/sanasaleem @bolobhi http://bolobhi.org/ On Thu, Aug 22, 2013 at 1:11 AM, Tom O winterfi

Re: [liberationtech] Fwd: Avaaz in grave danger due to GMail spam filters

2013-08-19 Thread Tom O
Agree. If you refuse to reciprocate the goodwill, why should anyone bother. Relationships are a two way street On Tuesday, August 20, 2013, Jillian C. York wrote: Key paragraph: So while I am told that you have norms about collaboration and engagement among you, I regret that we can't

Re: [liberationtech] Seeing threats, feds target instructors of polygraph-beating methods

2013-08-19 Thread Tom O
How anyone even uses lie detection tests and deems them useful should be a crime itself. People are naturally nervous in test situations, whether you sit for exams, psych profiles or lie detection. A lie detection test responding to the bodies natural stimulus to nerves and anxiety, and leaving

Re: [liberationtech] verifying SSL certs (was Re: In defense of client-side encryption)

2013-08-19 Thread Tom O
re this has anyone had a look at Tack.io? On Tue, Aug 20, 2013 at 12:42 PM, Darlene Scott darlenescott...@yahoo.comwrote: Has anyone here looked into Namecoin at all? I must admit I've only seen a two line reference about it and meant to follow up but haven't had the time.

Re: [liberationtech] Fwd: Avaaz in grave danger due to GMail spam filters

2013-08-18 Thread Tom O
In an ideal world, decentralise of course. Unfortunately we dont live in an ideal world. We live in a world of whatever is convenient at the time. Most of those supporters that it was mass emailed to signed up once to add their signature to a Save the name your outrage here movement. I bet a

Re: [liberationtech] In defense of client-side encryption

2013-08-12 Thread Tom O
So re Germany bring the bastion of Internet freedom blah blah, are we all forgetting about the Staatstrojaner? Or have we forgiven them for that now? On Tuesday, August 13, 2013, Arjen Kamphuis wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Francisco, On 08/12/2013 10:04 PM,

Re: [liberationtech] Is spideroak really zero-knowledge?

2013-08-12 Thread Tom O
Percy From https://spideroak.com/mobile How Mobile Works with SpiderOak’s Zero Knowledge Policy Here's the deal: when accessing your data via the SpiderOak website or on a mobile device you must enter your password. The password will then exist in the SpiderOak server memory for the duration

Re: [liberationtech] Is spideroak really zero-knowledge?

2013-08-12 Thread Tom O
I'm not saying they cant. I'm saying they acknowledge it, althought the way they do makes it seem as if its a non-issue. I don't think it is. I prefer tahoe-lafs On Tue, Aug 13, 2013 at 3:35 PM, Percy Alpha percyal...@gmail.com wrote: @Tom, For this amount of time your password is stored in

Re: [liberationtech] Bill Gates on Project Loon vs malaria

2013-08-10 Thread Tom O
In fairness to Gates, his main focus is tackling malaria and finding a vaccine for it. This is something where money is, in general, the main requirement for the most part. Famine, clean water, political instability are not easily solved by money. On Sunday, August 11, 2013, h0ost wrote:

Re: [liberationtech] Bill Gates on Project Loon vs malaria

2013-08-09 Thread Tom O
I think project LOON serves Googles purpose well. Whether it's altruistic, I'll wait and see. Certainly disease and famine are a more important and pressing concern in Africa. I will happily stand with Bill Melinda re this. I don't think the two issues are comparable, which is where I think