Hi,
I have been looking for a link for a Norwegian documentary on the
Telenor/Azerbaijan surveillance scandal from a few years ago (2-3?), but my
Google foo is weak today.
I wonder if anyone has a link? From memory it was in Norwegian but with English
subtitles. I know it was discussed on
understood…no let’s not
go there..
Couldn’t stick with the ten years, had to piss on it, pardon my crudeness.
Don’t follow.
Bernard
(He who understands follows little)
On Tue, Nov 19, 2013 at 6:17 AM, Bernard Tyers - ei8fdb ei8...@ei8fdb.org
wrote:
It seems a similar stupidly idiotic
It seems a similar stupidly idiotic requirement to the one imposed on Kevin
Mitnick when he was released.
From memory the requirment on him was that he wasn’t allowed to use “computers
or telephony” equipment. It might have been possible in the early 2000’s but
today?
IANAL, but would it be
On 19 Sep 2013, at 04:44, aman1971 aman1...@gmail.com wrote:
Plz put me on the list.
Regards
You're on the list! Congratulations!
--
Bernard / bluboxthief / ei8fdb
IO91XM / www.ei8fdb.org
--
Liberationtech is public archives are searchable on
On Fri, Sep 13, 2013 at 07:58:17AM +0200, Eugen Leitl wrote:
Dropbox is pulling a Skype.
no it's not, it's generating thumbnails. also this is advertising.
Hi,
I don't follow what you mean by advertising.
Thanks,
Bernard
--
Bernard / bluboxthief /
On 13 Sep 2013, at 09:39, Erik de Castro Lopo mle+l...@mega-nerd.com wrote:
Bernard Tyers wrote:
Firstly: I agree with you in principle but these tools need to be
available to all.
Technology is not used in a sterile, hygienic environment, it is used on
the streets, by people who can't
On 13 Sep 2013, at 10:04, Eugen Leitl eu...@leitl.org wrote:
On Fri, Sep 13, 2013 at 06:39:35PM +1000, Erik de Castro Lopo wrote:
Yes, but Firefox OS and Cryanogenmod only control the user facing part
of the smartphone. Loading eg Cryanogenmod onto a android phone leaves
the software
Stefan: Why not?
Fabio, this sounds really interesting. Thanks for sending it. Now I need to go
and sub to another list…
On 12 Sep 2013, at 23:06, Stefan 2...@2904.cc wrote:
But... PGP/GPG on a smartphone? Are you sure, that you want that?
Am 09.09.13 00:56, schrieb Fabio Pietrosanti
This sounds a nice idea.
There was a similar idea (in its early stages) presented at SOUPS 2013
(Symposium on Usable Privacy and Security) earlier this year. [1]
It was called Device Dash: An Educational Computer Security Game presented by
Era Vuksani. Unfortunately the Era's thesis is not
On 9 Sep 2013, at 17:29, Scott Arciszewski kobrasre...@gmail.com wrote:
Hello,
I saw this article on The Guardian[1] and it mentioned a librarian who posted
a sign that looked like this: http://www.librarian.net/pics/antipat4.gif and
would remove it if visited by the FBI. So a naive
As if there weren't enough reasons to not trust Kim.Com.
What is MEGApwn?
MEGApwn is a bookmarklet that runs in your web browser and displays your
supposedly secret MEGA master key, showing that it is not actually encrypted
and can be retrieved by MEGA or anyone else with access to your
Hi all,
I'd like to ask list members who are based in London, or *who will be in London
anytime during September*, to participate in my research.
I am exploring the use of mobile apps by investigative journalists, human
rights and NGO workers.
- Are you an investigative journalist, NGO or a
Hi Richard,
Depending on the information your colleagues want to collect, and depending on
how onerous the control of the telco system is, FrontLine SMS might be useful.
http://www.frontlinesms.com/
http://www.frontlinesms.com/technologies/frontlinesms-overview/
Hope it helps,
Bernard
On 27
On 15 Aug 2013, at 19:09, Kyle Maxwell ky...@xwell.org wrote:
On Wed, Aug 14, 2013 at 5:18 PM, Bernard Tyers - ei8fdb
ei8...@ei8fdb.org wrote:
My issue is with - Hacking is bad when people do it. It's ok when the
government do it.
To play devil's advocate for a moment: isn't that true
On 14 Aug 2013, at 22:01, Web Admin webad...@cpj.org wrote:
Are either of these servics a more secure alternative to 3rd party
services like DropBox? My reasonng is that a hacker would first need to
know you host your own cloud in a articular way to attack it. Is my
thinking too simplistic?
Hah, we all must have read the same article.. ;)
On 14 Aug 2013, at 22:42, elijah eli...@riseup.net wrote:
On 08/14/2013 02:01 PM, Web Admin wrote:
It would be good to be able to advise folks on more secure alternatives, if
they exist.
free software:
* http://seafile.com
*
On 14 Aug 2013, at 22:47, mark burdett mfburd...@gmail.com wrote:
I finally tried Bittorrent Sync this week and it seems to work quite nicely
for serverless file-sharing (mostly, as there is a server fallback to get
around firewalls). Too bad it's not FLOSS so I can't actually recommend it
On 14 Aug 2013, at 20:42, The Doctor dr...@virtadpt.net wrote:
Signed PGP part
On 08/13/2013 05:37 PM, Bernard Tyers - ei8fdb wrote:
Haven't hackers always been portrayed in a way to scare people? *
If it's not dDoSing script kiddies, its zombie network owning
Latvian mafias
On 15 Aug 2013, at 00:01, Tom Ritter t...@ritter.vg wrote:
On 14 August 2013 18:29, Bernard Tyers b...@runningwithbulls.com wrote:
I came across this article outlining historical operation of Lavabit's
services.
On 15 Aug 2013, at 00:20, Tom Ritter t...@ritter.vg wrote:
On 14 August 2013 19:11, Bernard Tyers - ei8fdb ei8...@ei8fdb.org wrote:
Yes, you're right. My mistake. But is my second question not still valid? If
SSL was compromised would the user not then be compromised?
Is:
…we generate
Haven't hackers always been portrayed in a way to scare people? * If it's not
dDoSing script kiddies, its zombie network owning Latvian mafias..
If this *is* the case, how can General Alexander go to Blackhat 2013 and say
(paraphrasing) we (CIA) use the same tools as you do. Help us protect
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,
I'd like to ask advice of people working in human rights, civil rights,
investigative journalism communities.
I am doing my MSc in human-computer interaction, focusing on mobile Privacy
Enhancing Technology tools, a lot of which are discussed
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Firstly: this is not a anti-Tor/pro-anything/anti-developer comment. If
anything it's pro-have_some_understanding_for_people point-of-view. I
contribute to Tor as I believe it can do a lot of good.
As I understand it, the issue was: a compromise
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Is this true?
http://arstechnica.com/tech-policy/2013/08/researchers-say-tor-targeted-malware-phoned-home-to-nsa/
Initial investigations traced the address to defense contractor SAIC, which
provides a wide range of information technology and C4ISR
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 5 Aug 2013, at 21:08, Al Billings wrote:
You realize Tor didn't know this vuln was an issue until two days ago?
I presume thats directed at Griffin.
The Tor Browser Bundle is based off of Firefox ESR releases. All the high
profile security
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Zimbabwean telcos are battling rumours that they have been both blocking
signals to obscure election transparency and sending pro-ZANU PF messages.
Interested to hear anything to this effect from others in Zimbabwe.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 29 Jul 2013, at 15:26, Richard Brooks wrote:
New law in Gambia makes using the Internet to incite
dissatisfaction with the government punishable by
up to 15 years in jail and $100,00 fine:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
For those interested, these two forwarded mails mention two separate secure
Jabber servers with no-logging. I cannot vouch for the validity of them.
IMO, any alternative to running the now closed (as in no non-GTalk users can
talk directly) Google
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 28 Jul 2013, at 13:21, John Perry wrote:
On 7/28/2013 6:44 AM, Bernard Tyers - ei8fdb wrote:
For those interested, these two forwarded mails mention two
separate secure Jabber servers with no-logging. I cannot vouch
for the validity of them
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi there,
Is there any Lib Tech bods at SOUPS 2013 this year?
If so if you want to say hello, let me know on/off-list. Don't forget you're
fan and bottle of water!
regards,
Bernard
- --
Bernard / bluboxthief /
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Bob,
I agree with you on the whole but I'm going to argue some of your points.
On 26 Jun 2013, at 17:03, Yosem Companys wrote:
From: Bob Frankston bob19-0...@bobf.frankston.com
The current implementation of the Internet is hierarchical in
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
This might be of interest to people..
http://www.usatoday.com/story/news/politics/2013/06/16/snowden-whistleblower-nsa-officials-roundtable/2428809/
A round-table discussion with Thomas Drake, William Binney and J. Kirk Wiebe.
I thought these
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Congratulations Tor Project. Well done to Mike Perry and all the contributors.
I've tested it on Mac OS X 10.6.8 and Debian 6.0 Squeeze and I had no technical
issues on either.
First launch (using clear Internet connection) took approx 40-50
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 17 Jun 2013, at 22:23, Richard Brooks wrote:
From Guardian QA with Snowden
http://www.guardian.co.uk/world/2013/jun/17/edward-snowden-nsa-files-whistleblower
Is encrypting my email any good at defeating the NSA survelielance? Id
my data
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
That is interesting. Presumably by sheer coincidence, the docs.palantir.com
sub-domain is not available, but thanks to Google cache, you can see the two
URLs posted in that article here:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
While not as big a player in the identity area as others, below is Mozilla's
Identity group response to a question about legal (or otherwise) requests.
Begin forwarded message:
From: Melvin Carvalho melvincarva...@gmail.com
Date: 8 June 2013
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I'm glad someone brought up the NSA datacentre. I was thinking is there any
connection to this? How far is it to being finished? Is that public
knowledge/possible to find out?
It wouldn't warrant this amount of data, which I would expect is pretty
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Still that figures seems awfully small. For whats involved. I've seen telco
projects of a fraction the size of something like this costing £10M.
Unless they've managed to get the companies to foot the majority of the bill?
In that case, why would
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Richard,
Without going into too much details can you explain why they think its
Chinese or Israeli? Or what country they are talking about? Also why they think
there is network surveillance equipment there at all?
What type of data re you
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Dan,
(NB: This information is specific to GSM networks, it is probably 90% valid for
CDMA networks, but not WiFi.)
The short story is you cannot stop cell phone tracking.
Cellular mobile phone networks require location and identity
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Yosem (and Greg),
Greg: I have read your eval of the TBB from last year. Will this talk be
different, or include other content?
Either way, I would appreciate it very very much if it were possible to record
this talk, audio, video. I am
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello all,
Has anyone come across an encrypted address book / contact list application for
smartphone devices?
Thanks in advance,
Bernard
- --
Bernard / bluboxthief / ei8fdb
IO91XM / www.ei8fdb.org
-BEGIN
,
Bernard
On 6 May 2013, at 20:15, andreas.ba...@nachtpult.de wrote:
How about AIO Solutions like Blackberry?
Diese Nachricht wurde Ihnen von meinem BlackBerry® von 11 gesendet.
Bestellen Sie diesen Service unter www.1und1.de.
-Original Message-
From: Bernard Tyers - ei8fdb ei8
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,
I've been thinking about this for a while, and can't find a logical reason.
Possibly I'm not thinking about it hard enough.
I'm curious as to why Bluecoat seem to be singled out for all this attention
regarding use in countries where the
of another
company's misdeeds, attention will surely turn there.
Is that sufficient logic for you?
On Sat, Apr 6, 2013 at 11:50 AM, Bernard Tyers - ei8fdb ei8...@ei8fdb.org
wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,
I've been thinking about this for a while, and can't
to Bluecoat. When there is evidence of another
company's misdeeds, attention will surely turn there.
Is that sufficient logic for you?
On Sat, Apr 6, 2013 at 11:50 AM, Bernard Tyers - ei8fdb ei8...@ei8fdb.org
wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,
I've been thinking
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
(Apologies if I am making an assumption on people's knowledge)
Entropy in disk encryption is the random information collected by an
computers OS or encryption application for use in encrypting a hard disk.
Those with more knowledge in encryption:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Would you like to give some more context on what it is you are trying to do?
remote wipe software for windows.
On 3 Apr 2013, at 18:08, Katy P wrote:
Thanks!
--
Too many emails? Unsubscribe, change to digest, or change password by
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
So the objective Kathy has mentioned is to:
log into and delete the contents of the laptop's hard drive
It would seem the contents of the hard disk is more important than the actual
hardware.
In that case I would go for the encryption option. Yes
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Suggestion 1: Can we trial putting the UNSUBSCRIBE footer (that part of the
e-mail that no-one reads) at the top of the e-mail so everyone sees it?
Suggestion 2: change the wording of the unsubscribe footer to something
shorter:
Too many e-mails?
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hea Doctor,
On 7 Mar 2013, at 16:38, The Doctor wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 03/07/2013 03:02 AM, Eugen Leitl wrote:
The whole ham culture and liberation technologies do not really
mix.
Unfortunately, this
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Eugen,
On 7 Mar 2013, at 08:02, Eugen Leitl wrote:
On Wed, Mar 06, 2013 at 09:36:41PM +, Bernard Tyers - ei8fdb wrote:
I have one answer: Amateur radio. Forget mobile phone networks. Amateur
radio is cheap, very durable
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Howdy AA6AX,
Nice to meet you.
On 6 Mar 2013, at 21:09, Sky (Jim Schuyler) wrote:
Your APRS idea is interesting and I only know it from the positioning side,
not from passing any text, so you may want to continue looking into it. I do
not know
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Wow, who'd have guessed that spammers and scammers operate in the world of
academia too!
http://fakeconference.blogspot.co.uk/
On 5 Mar 2013, at 12:24, Rich Kulawiec wrote:
On Tue, Mar 05, 2013 at 06:13:42AM +, scarp wrote:
I'm kind of
the link.
Any help appreciated!
thanks,
Bernard
On 3 Mar 2013, at 23:55, Andrew Lewis wrote:
Telecomix? Anon? SEA?
Of which I can provide some insight, at least on TCX.
On Mar 4, 2013, at 12:28 PM, Bernard Tyers - ei8fdb ei8...@ei8fdb.org wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
While I support the idea of exposing the internal workings of these pointless
companies, I would expect the poor intern who was successful would be bound
by umpteen NDA's requiring various body parts if they were ever breached!
Is it worth
The approach taken would be: self contained IP-FM transmitter box that can be
detected without any danger to people setting it up.
If there was access to technology I would suggest a multiple of low cost
computing devices (raspberry pi/etc) receiving IP audio stream, connected to a
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 23 Jan 2013, at 12:45, Eugen Leitl wrote:
On Wed, Jan 23, 2013 at 07:40:13AM -0500, bbrewer wrote:
All the money in the world, and still, so many listed problems on this new
service. Malicious intent, or just complete rush to give the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,
For those interested, Manuel Castells (University Professor and Wallis
Annenberg Chair of Communication Technology and Society at the University of
Southern California) is talking at The RSA Wednesday 20 March. Tickets are free.
Talk
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi there,
Is anyone from TSF, Télécoms sans frontières, subscribed to the list?
thanks,
Bernard
- --
Bernard / bluboxthief / ei8fdb
IO91XM / www.ei8fdb.org
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Do all signatories need to be affiliated/part of an organisation?
On 16 Jan 2013, at 16:58, Nadim Kobeissi wrote:
Dear Privacy Advocates and Internet Freedom Activists,
I call on you to review the following draft for our Open Letter to Skype
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Free ISP a French ISP with approx. 5M subs has blocked, by default, all web
based advertisements being served to their fixed-line Internet subscribers. [1,
2]
As a consumer, I would be very happy about it. As a Internet neutrality
(whatever you
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
- From memory (anyone knowing the please correct me if I am wrong) but the
London Cryptoparty which was held in the Google Campus also required real names
for health and safety reasons. This didn't stop people from signing-up with
fake e-mail
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
True - it would be useful for a journalist to make some enquiries as to the
outcome of that investigation. My guess would be nothing.
It's also interesting that the article says 14 SG9000s made their way to Syria
- and there are 8 being used in
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
It saddens me that someone who is clearly talented is so delusional, or puts a
price on his personal life. 15% of the company, and hefty salary.
Either way, he seems to be the company fall-guy.
Muench has put himself forward as Gamma’s point man on
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
At a risk of receiving the mentioned spam myself (thankfully my mail provider
also seems to be killing the spam before it gets to me), and at risk of
offering another evidence-less possible scenario -
There was recently a valid e-mail account that
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I attended a talk recently in London titled (Mobile) Money Makes the World Go
Around. [1]
It was attended by people involved in mobile money (M-Pesa, mobile operators,
finance companies, and billing backend people). The conversation was about how
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Is this a case of people (lib tech/security community) trusting people of
up-to-now good security community reputation (Phil Zimmerman and Jon Callas)
combined with public statements (to the affect of we will be releasing the
source code)
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 7 Oct 2012, at 22:35, Brian Conley wrote:
Greg its called orbot and it runs on Android. Secondly I used to agree with
you, but I'm increasingly coming to the conclusion that user education, not
simplification, is the more important piece of
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 3 Oct 2012, at 10:25, Sam de Silva wrote:
Hi there,
Can someone help me out - Is http://www.piratepad.net secure? I thought it
was, but I can't seem to access it via SSL.
It'll also be really useful to know of 'piratepad' type platforms
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi all,
I thought this might be interesting to some people:
http://www.kickstarter.com/projects/bilal/baghdad-community-hackerspace-workshops
See also gemsi.org
Baghdad was a hub of art, science ideas. Inspire that attitude again by
sharing
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi All,
I am currently researching ideas for my masters in human computer systems
thesis. I am a mobile telecoms engineer by profession, but am interested in
HCI, tools that help maintain your security, secure communications, and privacy
concerns.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I had to reread the article and the documents a few times, but I think this
control is *for the short term* very good news. Congrats to PI and all involved
for sticking a well-placed oar in.
In the long term the regulation isn't going to stop
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Some wonderful quotes from Mr. Nyberg:
the company itself could not solve the underlying problem that undemocratic
governments could abuse their legal right to access and shut down telecoms
networks
We need help from national and international
such as this in the future. I also firmly believe that
they need an appeals/escalation process for situations like this.
Best,
Jillian
On Tue, Jul 31, 2012 at 1:24 PM, Bernard Tyers - ei8fdb ei8...@ei8fdb.org
wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Jillian,
Thanks
, however,
is not private: it is available on NBC.com. That's the entire case.
-Jillian
On Tue, Jul 31, 2012 at 1:39 AM, Bernard Tyers - ei8fdb ei8...@ei8fdb.org
wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
(Slightly devil's advocate/contrarian POV)
Interesting story
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi David,
On 18 Jun 2012, at 21:23, David Conrad wrote:
Bernard,
On Jun 18, 2012, at 1:05 PM, ei8...@ei8fdb.org wrote:
I'm not an IPv6 expert, but any technical courses I have done on IPv6 have
promoted the complete trackability and full
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 18 Jun 2012, at 19:55, Parker Higgins wrote:
On 6/18/12 11:44 AM, Bernard Tyers - ei8fdb wrote:
The still being tracked with no battery in my phone story sounds
like a hoax to me.
Yeah, I wouldn't want my answer to be interpreted
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I may have the wrong end of the stick but in my mind, a solution would be:
Use a Site-specific browser/Single-Site Browser (SSB), such as Prism, or Fluid.
An SSB is a software application that is dedicated to accessing pages from a
single source
79 matches
Mail list logo
