[liberationtech] Whonix Project looking for Translations Coordinator

2013-12-13 Thread adrelanos
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Whonix is an anonymous general purpose operating system based on Virtual Box, Debian GNU/Linux and Tor. It has its focus on anonymity, privacy, security and usability. The Whonix project is looking for a volunteer. Your task: - - Join us with

Re: [liberationtech] You can't beat politics with technology, says Pirate Bay cofounder Peter Sunde (Wired UK)

2013-11-20 Thread adrelanos
Sometimes it needs someone to state the obvious. I totally agree with his general message You can't beat politics with technology. -- Liberationtech is public archives are searchable on Google. Violations of list guidelines will get you moderated:

[liberationtech] Can we solve global surveillance issue with technology at all?

2013-11-09 Thread adrelanos
I am not sure we can fix the problem (global surveillance system) with technology at all. Sure, personally I am a big fan of more usable and safer tools to communicate. They make us technology/privacy enthusiasts happy. Do ordinary citizen care about e-mail anymore anyway? I would assume, that

Re: [liberationtech] dark mail alliance

2013-11-08 Thread adrelanos
phree...@yandex.ru: [...Tor...] Both client and service can opt to drop their half of the circuit, which turns it into a more or less direct tcp connection, with nat traversal capabilities. Is dropping half of the circuit really already implemented for client and for server? There is

Re: [liberationtech] dark mail alliance

2013-11-08 Thread adrelanos
phree...@yandex.ru: On Monday, November 04, 2013 01:17:49 PM Jonathan Wilkes wrote: On 11/04/2013 05:28 AM, phree...@yandex.ru wrote: On Sunday, November 03, 2013 04:06:11 PM Bill Woodcock wrote: On Nov 3, 2013, at 3:30, phree...@yandex.ru phree...@yandex.ru wrote: I don't see how pasting

Re: [liberationtech] dark mail alliance

2013-11-03 Thread adrelanos
Are they duplicating efforts? See https://leap.se/email. -- Liberationtech is public archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password by

[liberationtech] Whonix Anonymous Operating System Version 7 Released!

2013-10-12 Thread adrelanos
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity network, Debian GNU/Linux and the principle of security by isolation. DNS leaks are impossible, and not even malware with root privileges can

Re: [liberationtech] 10 reasons not to start using PGP

2013-10-10 Thread adrelanos
Thank you for doing this work! The world needs someone facing the truth, explaining why gpg isn't the solution, advocating positive change. It's a communicative task, a very difficult one. As long there is gpg, most geeks don't see need to create better alternatives. I'd say, gpg's development

[liberationtech] The Whonix Project is looking for a Translations Coordinator

2013-09-20 Thread adrelanos
for the Whonix Developer Mailing List [3] and say hello. Cheers, adrelanos [1] https://www.whonix.org [2] https://www.mediawiki.org/wiki/MediaWiki_Language_Extension_Bundle [3] https://www.whonix.org/wiki/Mailing_Lists#whonix-devel -BEGIN PGP SIGNATURE

Re: [liberationtech] Security Focused Live Linux Distros

2013-09-13 Thread adrelanos
? Cheers, adrelanos (Full disclosure: I am a maintainer of Whonix.) -- Liberationtech is public archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password

Re: [liberationtech] Other distros like Ubuntu Privacy Remix?

2013-09-03 Thread adrelanos
Nick: On Tue, Sep 03, 2013 at 02:10:22PM +0200, Moon Jones wrote: I stumbled upon UPR these last days. It does not work on my machines. But the idea sounds good. Yet I could not find anything like it. Tails comes close, but the network is enabled. I don't know of any other distributions

Re: [liberationtech] Why_can't_email_be_secure

2013-08-26 Thread adrelanos
coderman: **why not instead focus on building low latency protocols that are resistant to traffic analysis and confirmation?** make them datagram based; utilize user space stacks and latest research. solving the low latency datagram anonymity problem enables existing usable private

Re: [liberationtech] rsync.net Warrant Canary

2013-08-12 Thread adrelanos
Moritz Bartl: Nice idea. I would use a trusted timestamp instead of a headline, but anyway. What do you think, should I do this for torservers.net/onion.to? http://www.rsync.net/resources/notices/canary.txt rsync.net will also make available, weekly, a warrant canary in the form of a

Re: [liberationtech] rsync.net Warrant Canary

2013-08-12 Thread adrelanos
Moritz Bartl: Nice idea. I would use a trusted timestamp instead of a headline, but anyway. What do you think, should I do this for torservers.net/onion.to? http://www.rsync.net/resources/notices/canary.txt rsync.net will also make available, weekly, a warrant canary in the form of a

Re: [liberationtech] From Snowden's email provider. NSL???

2013-08-09 Thread adrelanos
Moritz Bartl: On 09.08.2013 13:15, Nadim Kobeissi wrote: Yup, Cryptocat has had build assurance for quite some time. Sorry, not possible to backdoor without people noticing is still a valid line of defence and has been one for a while. You should think about splitting Cryptocat software

Re: [liberationtech] going back to Nadim's original question

2013-08-09 Thread adrelanos
Nadim Kobeissi: Jacob has a problem. For years, I have been abused in private and in public by Jacob regarding my work on Cryptocat, in ways that are so underhanded that if I described them on this list, you would not even believe me. He does this to *many projects*. You obviously have no

Re: [liberationtech] Lavabit, Silent Circle both shut down

2013-08-09 Thread adrelanos
Kyle Maxwell: On Fri, Aug 9, 2013 at 2:41 PM, liberationt...@lewman.us wrote: On Fri, 09 Aug 2013 19:46:10 +0200 Moritz Bartl mor...@torservers.net wrote: Repeat after me: Iceland is *not* a data haven. [citation needed] Shouldn't it be the other way around? If somebody claims that a

Re: [liberationtech] An email service that requires GPG/PGP?

2013-08-09 Thread adrelanos
Why not post messages to usenet alt.anonymous.messages? It can provide great properties for privacy and anonymity. You don't need any servers or to invent any server software. Just use the existing infrastructure. alt.anonymous.messages can be used as a big shared mailbox. And the client

Re: [liberationtech] Successful experiment boosting the number of users using OpenPGP verification for file download

2013-08-01 Thread adrelanos
Werner Koch: On Wed, 31 Jul 2013 19:30, adrela...@riseup.net said: verification is the least secure method, to the download page? (You can see the design here: [3]) A: 1 in ~11 users. Actually [3] is the same URL as [1]. Sorry about that. [1]: www.webcitation.org/6IWk5h4E9 [3]:

[liberationtech] Successful experiment boosting the number of users using OpenPGP verification for file download

2013-07-31 Thread adrelanos
can get some more information and more detailed statistics here: [5] [6] This is also a follow up to: [liberationtech] secure download tool - doesn't exist?!? [4] Cheers, adrelanos Footnotes: [1] http://www.webcitation.org/6IWk5h4E9 [2] Please ignore the Moved to https://www.whonix.org; part

Re: [liberationtech] Traffic Analysis Countermeasures

2013-07-19 Thread adrelanos
The Doctor: On 07/18/2013 11:51 AM, Charles Allhands wrote: Thanks for the link! Is there a reason why mix networks aren't commonly used? I see mixminion hasn't been worked on in years. One possible factor may be that many people are less interested in anonymity of communications (i.e.,

Re: [liberationtech] Traffic Analysis Countermeasures

2013-07-18 Thread adrelanos
Charles Allhands: Thanks for the link! Is there a reason why mix networks aren't commonly used? Thanks for asking this interesting question. See this. Not written by me. Source [1] Roger Dingledine Fri, 27 Apr 2012 00:10:48 -0700 On Thu, Apr 26, 2012 at 04:15:04AM +0100, StealthMonger

[liberationtech] secure download tool | was [Tails-dev] download over http by default?

2013-07-01 Thread adrelanos
Speaking as maintainer of Whonix here. Jacob Appelbaum: When upgrading a tails machine today, I noticed that the default download link is HTTP. This is actually a problem for many (security related) application downloads, not only for Tails. For example, also the gpg4win homepage has no https

Re: [liberationtech] secure download tool - doesn't exist?!?

2013-07-01 Thread adrelanos
Nathan of Guardian: On 07/01/2013 02:03 PM, adrelanos wrote: I think, this kind of tool doesn't exist yet. Could torrents and magnet links address this issue? As far I know they include hash verification. Issues: - you still have to tell the user you must download tool X before you can

Re: [liberationtech] secure download tool - doesn't exist?!?

2013-07-01 Thread adrelanos
Eleanor Saitta: On 2013.07.01 15.15, Julian Oliver wrote: ..on Mon, Jul 01, 2013 at 06:03:01PM +, adrelanos wrote: In response to the tool doesn't exist... apt-get install tor torify wget http://path.to/file And how did you verify the trust path for your initial debian install

Re: [liberationtech] secure download tool - doesn't exist?!?

2013-07-01 Thread adrelanos
Eleanor Saitta: On 2013.07.01 17.28, adrelanos wrote: Eleanor Saitta: On 2013.07.01 15.15, Julian Oliver wrote: ..on Mon, Jul 01, 2013 at 06:03:01PM +, adrelanos wrote: In response to the tool doesn't exist... apt-get install tor torify wget http://path.to/file And how did you verify

Re: [liberationtech] Deterministic builds and software trust [was: Help test Tor Browser!]

2013-06-20 Thread adrelanos
the Debian community (or any other disto) are aware of that threat model yet. I failed explaining the threat model. So I am looking forward to your blog post. More publicity about this little known, yet very serious topic, is important. Best, adrelanos -- Too many emails? Unsubscribe, change

[liberationtech] Whonix ALPHA 0.5.5 - Anonymous Operating System released

2013-03-02 Thread adrelanos
and technical design can be found on it's homepage. Homepage: http://whonix.sf.net/ If you want to read a longer introduction/release message, you can refer the the old one: https://mailman.stanford.edu/pipermail/liberationtech/2013-January/006707.html Cheers, adrelanos -BEGIN PGP SIGNATURE

[liberationtech] Good examples of software documentation?

2013-02-11 Thread adrelanos
of screenshots, videos? Or are there any usability studies what people actually do read and understand? Cheers, adrelanos -- Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Good examples of software documentation?

2013-02-11 Thread adrelanos
danimoth: On 11/02/13 at 10:20am, adrelanos wrote: Hi, since I want to write good documentation for my own project, I thought it may be worth checking how other projects did. Which project/documentation do you personally enjoy? Bonus points for anonymity/privacy/security related projects

Re: [liberationtech] Email privacy

2013-01-29 Thread adrelanos
scarp: If you look at the last 15 or so years you'll notice people consider privacy a magic button on Facebook Yes, I speculate that more then ~70% of people believe if they pressed that button, that no one else, including Facebook can gain access to their data. In my experience, if you talk

[liberationtech] Whonix ALPHA 0.4.5 - Anonymous Operating System

2013-01-27 Thread adrelanos
problems. The principal design is less vulnerable for any kind of leaks. At time of writing (January 2012) I have been working on the theoretical concept and practical implementation for 13 months, the basics have been developed by (at least) three people, adrelanos, smarm and anonymous. [3] [4