Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-23 Thread Nick
On Sat, Sep 21, 2013 at 08:14:08AM -0400, Nathan of Guardian wrote: If you want to make plain old telephone calls through a service like Callcentric, I think you can also find a workeable solution for the NAT issue, but I don't have it documented exactly. The other aspect of this setup is

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-21 Thread Nick
Quoth Nathan of Guardian: I've talked about this before, but the use of a MiFi portable network device providing wifi to a tablet/phablet running VoIP software on a clean ROM, provides the best of all worlds - telephony, portability and security. I lived life this way for awhile in New

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-21 Thread Eugen Leitl
On Sat, Sep 21, 2013 at 12:07:10PM +0100, Nick wrote: Sorry for coming late to the party. This is an interesting idea, that I hadn't thought of before. I also like that it can allow one I'm glad that nobody sees a massive flaw in the scheme. to stop disclosing location data in a way that's

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-21 Thread Nathan of Guardian
Eugen Leitl eu...@leitl.org wrote: Many mobile networks operate with carrier grade NAT, so with MiFi your WLAN devices are already behind two layers of NAT or more. So far stock solution for VoIP has been SIP, but SIP is a terrible protocol to tunnel through NAT. So far the only contender I'm

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-20 Thread John Sullivan
Blibbet blib...@gmail.com writes: I don't think so -- unless you have a laptop flashed with a free software BIOS / boot firmware that you can inspect and modify. There are a handful of dated possibilities out there like that (Thinkpad x60 models that support coreboot, Lemote Yeelongs), but

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-20 Thread Blibbet
(We call the bad version of Secure Boot, where the user does not have the ability to modify the set of trusted keys or disable the system, Restricted Boot.) We have discussed the idea of trying to become a root key holder for Secure Boot, working with OEMs to by default trust GNU/Linux distro

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-20 Thread John Sullivan
Micah Lee mi...@micahflee.com writes: I completely disagree. Ubiquitous end-to-end encryption will help protect against *dragnet* surveillance. The fact that smartphones are imminently pwnable doesn't change this fact. Even if you're using a Carrier IQ-infested/baseband backdoored device,

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-20 Thread Micah Lee
On 09/12/2013 04:14 PM, Erik de Castro Lopo wrote: Bernard Tyers - ei8fdb wrote: Stefan: Why not? For verification, OpenPGP on smartphones is *possibly* ok. For a device used to sign or encrypt smartphones are totally inappropriate regardless of the potential convenience. No such agency and

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-20 Thread John Sullivan
Blibbet blib...@gmail.com writes: (We call the bad version of Secure Boot, where the user does not have the ability to modify the set of trusted keys or disable the system, Restricted Boot.) We have discussed the idea of trying to become a root key holder for Secure Boot, working with OEMs

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-19 Thread Blibbet
I don't think so -- unless you have a laptop flashed with a free software BIOS / boot firmware that you can inspect and modify. There are a handful of dated possibilities out there like that (Thinkpad x60 models that support coreboot, Lemote Yeelongs), but not the vast majority of laptops. The

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-18 Thread John Sullivan
Erik de Castro Lopo mle+l...@mega-nerd.com writes: Compare this with a laptop. If you buy a new laptop and are sufficiently paranoid you can use widely available software tools to monitor all network connections from that laptop to the wider internet. I don't think so -- unless you have a

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread Bernard Tyers
Firstly: I agree with you in principle but these tools need to be available to all. Technology is not used in a sterile, hygienic environment, it is used on the streets, by people who can't write, who use it for their purposes, not necessarily the purpose it was invented for. Hence I

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread Erik de Castro Lopo
Bernard Tyers wrote: Firstly: I agree with you in principle but these tools need to be available to all. Technology is not used in a sterile, hygienic environment, it is used on the streets, by people who can't write, who use it for their purposes, not necessarily the purpose it was

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread Eugen Leitl
On Fri, Sep 13, 2013 at 06:39:35PM +1000, Erik de Castro Lopo wrote: Yes, but Firefox OS and Cryanogenmod only control the user facing part of the smartphone. Loading eg Cryanogenmod onto a android phone leaves the software running the radio part of the phone untouched (otherwise the phone

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread Fabio Pietrosanti (naif)
Il 9/13/13 10:39 AM, Erik de Castro Lopo ha scritto: Yes, but Firefox OS and Cryanogenmod only control the user facing part of the smartphone. Loading eg Cryanogenmod onto a android phone leaves the software running the radio part of the phone untouched (otherwise the phone would never have

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread Bernard Tyers - ei8fdb
On 13 Sep 2013, at 09:39, Erik de Castro Lopo mle+l...@mega-nerd.com wrote: Bernard Tyers wrote: Firstly: I agree with you in principle but these tools need to be available to all. Technology is not used in a sterile, hygienic environment, it is used on the streets, by people who can't

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread Bernard Tyers - ei8fdb
On 13 Sep 2013, at 10:04, Eugen Leitl eu...@leitl.org wrote: On Fri, Sep 13, 2013 at 06:39:35PM +1000, Erik de Castro Lopo wrote: Yes, but Firefox OS and Cryanogenmod only control the user facing part of the smartphone. Loading eg Cryanogenmod onto a android phone leaves the software

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/09/13 10:04, Eugen Leitl wrote: Baseband processors leave the system wide open to all kind of attacks. Countermeasure would be running the 2G/3G/4G stack in an open source SDR radio, or using an open source VoIP device that connects by WLAN

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread Rich Kulawiec
On Fri, Sep 13, 2013 at 09:14:27AM +1000, Erik de Castro Lopo wrote: No such agency and the like are almost certainly able (with the help of carriers and manufacturers) backdoor and exploit all the major smartphone brands and models [0]. Smartphones are horrendously complex, rely heavily on

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread Nathan of Guardian
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/13/2013 05:56 AM, Michael Rogers wrote: The Samsung Galaxy Player (Samsung Galaxy S WiFi in some countries) is essentially an Android phone without a baseband. I believe you can run CyanogenMod on it. So is the Nexus 7 (non-GSM/LTE) version

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread Nathan of Guardian
On 09/13/2013 01:19 PM, Matt Johnson wrote: I would assume the quality of the voice calls would be pretty bad through this kind of setup. How did that work for you? The reality is we have gotten used to terrible voice quality with our GSM and CDMA voice networks. You would be surprised what is

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread Matt Johnson
I would assume the quality of the voice calls would be pretty bad through this kind of setup. How did that work for you? -- Matt Johnson On Fri, Sep 13, 2013 at 9:51 AM, Nathan of Guardian nat...@guardianproject.info wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/13/2013 05:56

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-13 Thread The Doctor
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/12/2013 06:06 PM, Stefan wrote: But... PGP/GPG on a smartphone? Are you sure, that you want that? There is enough demand for it that Symantec has published some mobile apps (though they require Symantec's encryption infrastructure software to

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-12 Thread Bernard Tyers - ei8fdb
Stefan: Why not? Fabio, this sounds really interesting. Thanks for sending it. Now I need to go and sub to another list… On 12 Sep 2013, at 23:06, Stefan 2...@2904.cc wrote: But... PGP/GPG on a smartphone? Are you sure, that you want that? Am 09.09.13 00:56, schrieb Fabio Pietrosanti

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-12 Thread Stefan
But... PGP/GPG on a smartphone? Are you sure, that you want that? Am 09.09.13 00:56, schrieb Fabio Pietrosanti (naif): I forward this inquiry to Liberation Tech, considering the very good impact it will have in the near future. Fabio Messaggio originale Oggetto:

Re: [liberationtech] Fwd: Firefox OS with built in support for OpenPGP encryption

2013-09-12 Thread Erik de Castro Lopo
Bernard Tyers - ei8fdb wrote: Stefan: Why not? For verification, OpenPGP on smartphones is *possibly* ok. For a device used to sign or encrypt smartphones are totally inappropriate regardless of the potential convenience. No such agency and the like are almost certainly able (with the help of