Re: [liberationtech] Cryptography super-group creates unbreakable encryption

2013-02-07 Thread Christopher Soghoian
An entire article's worth of lip service? “I’m agnostic about this,” he says, “I don’t really care if Silent Circle captures this market, just as long as somebody does.” I spent the entire interview with the Verge writer complaining about the crappy security delivered by the wireless carriers,

Re: [liberationtech] Cryptography super-group creates unbreakable encryption

2013-02-07 Thread Christopher Soghoian
/silent_circle_mike_janke_s_iphone_app_makes_encryption_easy_governments.single.html Christopher Soghoian, principal technologist at the ACLU's Speech Privacy and Technology Project, said he was excited to see a company like Silent Circle visibly competing on privacy and security but that he was waiting for it to go open source and be audited by independent security experts

Re: [liberationtech] Cryptography super-group creates unbreakable encryption

2013-02-07 Thread Christopher Soghoian
See Inline On Thu, Feb 7, 2013 at 12:15 PM, Andy Isaacson a...@hexapodia.org wrote: Silent Circle may be an excellent privacy app. It might not have any significant security problems. It might even do a good job of mitigating important platform-based attacks and supporting important new

Re: [liberationtech] Skype Open Letter: CALL FOR SIGNATORIES

2013-01-18 Thread Christopher Soghoian
into consideration. NK On Thu, Jan 17, 2013 at 1:58 AM, Christopher Soghoian ch...@soghoian.net wrote: You may want to consider rewriting your law enforcement/government surveillance section: As a result of the service being acquired by Microsoft in 2011, it may now be required to comply

Re: [liberationtech] Skype Open Letter: CALL FOR SIGNATORIES

2013-01-18 Thread Christopher Soghoian
I think your section on law enforcement stuff could still use some work. I really think you should get rid of some of the text in the references. Specifically, delete this text: As a result of the service being acquired by Microsoft in 2011, it may now be required to comply with CALEA due to the

Re: [liberationtech] Skype Open Letter: CALL FOR SIGNATORIES

2013-01-16 Thread Christopher Soghoian
You may want to consider rewriting your law enforcement/government surveillance section: As a result of the service being acquired by Microsoft in 2011, it may now be required to comply with CALEA due to the company being headquartered in Redmond, Washington. Furthermore, as a US-based

Re: [liberationtech] Silent Circle to publish source code?

2012-10-11 Thread Christopher Soghoian
Hi Nadim, You didn't directly respond to Ryan's question. Have you actually spoken to anyone at Silent Circle? The Silent Circle App isn't available for download to the general public yet. As such, I think the company can be forgiven for not having source code available just yet. Why not wait

Re: [liberationtech] Silent Circle Dangerous to Cryptography Software Development

2012-10-11 Thread Christopher Soghoian
Hi all, When considering the threat of legally compelled assistance, I think it is useful to spell out the specific threats. The two big ones, IMHO, are 1. Compelled disclosure of data retained about users. 2. Compelled insertion of backdoors into the product. Now, folks on this list are