[liberationtech] The status of SMTP security in email communication infrastructures

2013-08-26 Thread Fabio Pietrosanti (naif)
Hi all, following the talk of Eleanor Saitta at Noisy2 (https://noisysquare.com/ethics-and-power-in-the-long-war-eleanor-saitta-dymaxion/), some private discussion with Moritz Blatz and some discussion with activists of autistici regarding the effective privacy of security-enhanced email

Re: [liberationtech] The status of SMTP security in email communication infrastructures

2013-08-26 Thread Moritz Bartl
- which of them offer SMTP/TLS when sending email? - which of them accept SMTP/TLS when receiving email? One of the problems with the current configuration of mail servers (STARTTLS) is that any active attacker can modify the STARTTLS command and turn the session into plaintext without

Re: [liberationtech] Why_can't_email_be_secure

2013-08-26 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 25/08/13 20:14, StealthMonger wrote: Will the other cypherpunks on this list please step forward and help me refute this toxic propaganda? I don't have time to do it all myself. It isn't propaganda. Or at least, it's true. All the problems

[liberationtech] [cryptome] NSA Head: US Cyber Offense Is Best in World

2013-08-26 Thread Eugen Leitl
- Forwarded message from John Young j...@pipeline.com - Date: Mon, 26 Aug 2013 11:38:12 -0400 From: John Young j...@pipeline.com To: cypherpu...@cpunks.org, crypt...@freelists.org, cryptogra...@randombit.net Subject: [cryptome] NSA Head: US Cyber Offense Is Best in World X-Mailer:

Re: [liberationtech] The status of SMTP security in email communication infrastructures

2013-08-26 Thread Moritz Bartl
- which of them offer SMTP/TLS when sending email? - which of them accept SMTP/TLS when receiving email? One of the problems with the current configuration of mail servers (STARTTLS) is that any active attacker can modify the STARTTLS command and turn the session into plaintext without

Re: [liberationtech] Why_can't_email_be_secure

2013-08-26 Thread adrelanos
coderman: **why not instead focus on building low latency protocols that are resistant to traffic analysis and confirmation?** make them datagram based; utilize user space stacks and latest research. solving the low latency datagram anonymity problem enables existing usable private

[liberationtech] Android Developers, Opt-In to Iran Play Store Access.

2013-08-26 Thread Collin Anderson
Developers and friends of developers, Google today is announcing App Store access to Iran, however, participation requires an option to be enabled [1]. If you produce applications please opt in and pass along to your developer friends. Cordially, Collin [1]

Re: [liberationtech] Standalone JS apps vs. browser extensions, which is better?

2013-08-26 Thread Francisco Ruiz
Thanks, Griffin, Eduardo, I haven't gotten a lot of response to this issue, but I've been doing my own thinking, after some more testing of extensions similar to what I want. Here's by $0.01 worth: Extensions are cool, but those I've seen have these huge problems for my application (and probably

[liberationtech] PCDNetwork, a key resource

2013-08-26 Thread Craig Zelizer
Greetings. PCDN has been in existence for almost six years since launching in June of 2007. The network has rapidly grown and become one of the leading sites in conflict, development and international affairs. Site membership is rapidly growing, currently reaching over 30,000 and is attracting

Re: [liberationtech] Standalone JS apps vs. browser extensions, which is better?

2013-08-26 Thread Steve Weis
If delivered as a regular Javascript web app, then Francisco, anyone at Site 44, or anyone at Dropbox can steal PassLok keys and messages anytime they want. I do not think it's realistic to expect every single user to look at the code before [they] execute it for every single page load. As

[liberationtech] [drone-list] How Not to Think About Drones, or Goliath Died for Your Sins

2013-08-26 Thread Eugen Leitl
- Forwarded message from Yosem Companys compa...@stanford.edu - Date: Mon, 26 Aug 2013 11:32:58 -0700 From: Yosem Companys compa...@stanford.edu To: Drones drone-l...@lists.stanford.edu Subject: [drone-list] How Not to Think About Drones, or Goliath Died for Your Sins Reply-To:

Re: [liberationtech] Standalone JS apps vs. browser extensions, which is better?

2013-08-26 Thread Guido Witmond
On 08/26/13 20:44, Francisco Ruiz wrote: 2. Even worse, if they save any data (public keys, in this case), the database remains tied to each particular computer. Forget about going to the library and using it there. Forget about going to the library. The public access computers are a cost

Re: [liberationtech] The status of SMTP security in email communication infrastructures

2013-08-26 Thread staticsafe
On Mon, Aug 26, 2013 at 01:02:26PM +0200, Moritz Bartl wrote: - which of them offer SMTP/TLS when sending email? - which of them accept SMTP/TLS when receiving email? Received: from smtp.stanford.edu (smtp1.Stanford.EDU [171.67.219.81]) (using TLSv1.2 with cipher AECDH-AES256-SHA