Re: [liberationtech] Scramble.io, Round Two

2013-08-28 Thread Travis McCrea
I think my only complaint (that doesn't seem to be mentioned, though I could have missed it) is that the email address is generated with your key. This means that you have to create a whole new email account every 6 - 12 months for optimal security. I would suggest that you should allow people

Re: [liberationtech] Scramble.io, Round Two

2013-08-28 Thread Maxim Kammerer
On Wed, Aug 28, 2013 at 9:49 AM, Travis McCrea m...@travismccrea.com wrote: I think my only complaint (that doesn't seem to be mentioned, though I could have missed it) is that the email address is generated with your key. This means that you have to create a whole new email account every 6 -

[liberationtech] Request for participants for HCI study into the use of mobile apps

2013-08-28 Thread Bernard Tyers - ei8fdb
Hi all, I'd like to ask list members who are based in London, or *who will be in London anytime during September*, to participate in my research. I am exploring the use of mobile apps by investigative journalists, human rights and NGO workers. - Are you an investigative journalist, NGO or a

Re: [liberationtech] SMS questions

2013-08-28 Thread elijah
On 08/27/2013 09:36 AM, Richard Brooks wrote: I have colleagues living in a small country, far, far away with a history of rigged elections who want to put in place a system for collecting information using SMS. The local government keeps shutting down the systems that they put in place. As

Re: [liberationtech] SMS questions

2013-08-28 Thread Robert Munro
Take the advice *not* to use SMS. I'd also avoid any NGO software that insists it was written for humanitarian purposes: this branding is usually skin deep and they are often less secure than off-the-shelf software. There are exceptions, like much of what Benetech produces, but if you need to ask

Re: [liberationtech] SMS questions

2013-08-28 Thread Charles Haynes
How important is the privacy of people doing the submission? Because the government can always get SMS records from providers. That said, I worked a bit on UReport in Uganda which is an SMS based system that allows (mostly young) Ugandans to respond to surveys on various topics, some of which

Re: [liberationtech] SMS questions

2013-08-28 Thread Sandy Harris
Richard Brooks r...@acm.org wrote: If anyone with an understanding of SMS, SMS web interfaces, and/or related security issues would be willing to point me in the right direction (or discuss potential issues) I (and by extension they) would be grateful. SMS is basically insecure. Others in

Re: [liberationtech] SMS questions

2013-08-28 Thread Andy Isaacson
On Wed, Aug 28, 2013 at 10:47:16PM -0400, Sandy Harris wrote: It gets worse. The US has a Communications Assistance to Law Enforcement Act (CALEA) that basically makes it illegal for anyone to sell phone switches without wiretap capability in the US. As a result nearly all such switches have