Re: [liberationtech] [ Spotfluxx what about it? ]

2013-03-19 Thread Rich Kulawiec
On Mon, Mar 18, 2013 at 12:59:48PM +0100, Giuseppe Calamita wrote: Hello, I wonder if application such as Spotflux: http://www.spotflux.com/ in security general terms and agency proof strength. At first glance it appears to be a closed-source app which allegedly solves certain security/privacy

[liberationtech] Resources on Threat Modeling and Risk Assessment

2013-03-19 Thread Lindsay Beck
Hi All, NDItech is looking to collect a set of the best-of-the-best resources on threat modeling and risk assessment, particularly on information security pertaining to creating, storing, and sharing information. I'd love to hear from the list on what tools/resources you use, and will re-share an

Re: [liberationtech] Allout.org requires email address in anonymous LGBT survey

2013-03-19 Thread Uncle Zzzen
The latest news at https://aopriv.jottit.com/ is that allout.org have deleted the problematic survey. The interesting thing is that Andre Banks from AllOut says: I just heard about the potential security issue you wrote about below through an advisor who is on the LibTech list So thanks to

Re: [liberationtech] Allout.org requires email address in anonymous LGBT survey

2013-03-19 Thread Shava Nerad
As a social engineer, one wonders about the agenda of an organization that calls itself all out doing this kind of BS so...coyly. What an unfortunate mistake on their part! Imagine if someone had set such a thing up as a honeypot. Indeed. Some people believe we should be all out...it would be

Re: [liberationtech] A Different Technology Query

2013-03-19 Thread Eleanor Saitta
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 2013.03.10 04.28, Bruce Potter wrote: Apologies if this is too far afield, but a friend in a small island needs assistance with an unexploded ordinance problem. Is there a list or other resource I can refer him to? While this is at best

Re: [liberationtech] Resources on Threat Modeling and Risk Assessment

2013-03-19 Thread Joseph Lorenzo Hall
best, Joe -- Joseph Lorenzo Hall Senior Staff Technologist Center for Democracy Technology https://www.cdt.org/ On Mar 19, 2013, at 16:18, Eleanor Saitta e...@dymaxion.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 2013.03.19 15.02, Lindsay Beck wrote: Hi All, NDItech

[liberationtech] list reply-all

2013-03-19 Thread Joseph Lorenzo Hall
Has the possibility of reconfiguring libtech to not reply-all by default been broached? Maybe I'm the only one that trips over it so often. best, Joe On Mar 19, 2013, at 19:06, Joseph Lorenzo Hall j...@cdt.org wrote: best, Joe -- Joseph Lorenzo Hall Senior Staff Technologist Center

Re: [liberationtech] list reply-all

2013-03-19 Thread Rich Kulawiec
On Tue, Mar 19, 2013 at 07:08:48PM -0400, Joseph Lorenzo Hall wrote: Has the possibility of reconfiguring libtech to not reply-all by default been broached? Maybe I'm the only one that trips over it so often. best, Joe This is something that has been debated numerous, and I do mean *numerous*,

Re: [liberationtech] list reply-all

2013-03-19 Thread Yosem Companys
We used to use individual replies rather than reply all, but the list members took a vote to change the default to reply all. If there's enough interest, we could always bring it up for another vote, as the decision was made a year or so ago, and the list has grown a lot since then. Best, Yosem

Re: [liberationtech] New EIFL-PLIP Innovation Award Empowers Women Girls through ICT4D

2013-03-19 Thread Nicholas Merrill
Hey Yosem How have you been ? I sent an email to the libtech list about the NSL story but it didn;t' seem to go through.. could it be stuck in a moderation queue somewhere ? best, Nick -- Too many emails? Unsubscribe, change to digest, or change password by emailing moderator at

Re: [liberationtech] list reply-all

2013-03-19 Thread Julian Oliver
..on Tue, Mar 19, 2013 at 07:24:39PM -0400, Rich Kulawiec wrote: On Tue, Mar 19, 2013 at 07:08:48PM -0400, Joseph Lorenzo Hall wrote: Has the possibility of reconfiguring libtech to not reply-all by default been broached? Maybe I'm the only one that trips over it so often. best, Joe This

Re: [liberationtech] list reply-all

2013-03-19 Thread Joseph Lorenzo Hall
On Mar 19, 2013, at 19:32, Yosem Companys compa...@stanford.edu wrote: We used to use individual replies rather than reply all, but the list members took a vote to change the default to reply all. If there's enough interest, we could always bring it up for another vote, as the decision was

Re: [liberationtech] list reply-all

2013-03-19 Thread Matt Mackall
On Tue, 2013-03-19 at 19:08 -0400, Joseph Lorenzo Hall wrote: Has the possibility of reconfiguring libtech to not reply-all by default been broached? Reply-to-list poses a significant usability risk that can escalate into a security issue, so it's unfortunate that it's being used here of all

Re: [liberationtech] list reply-all

2013-03-19 Thread Michael Allan
Matt said: Reply-to-list poses a significant usability risk that can escalate into a security issue, so it's unfortunate that it's being used here of all places. I agree. Some more information on Reply-To header munging: http://www.gnu.org/software/mailman/mailman-admin/node11.html It's

Re: [liberationtech] list reply-all

2013-03-19 Thread Yosem Companys
Am I right to assume Mike and Matt are asking that the issue be put up for a vote again so that the default is changed back from reply-to-all to reply-to-poster? If so, I will get that survey going. Thanks, Yosem One of the moderators On Tue, Mar 19, 2013 at 6:59 PM, Michael Allan

Re: [liberationtech] list reply-all

2013-03-19 Thread Joseph Lorenzo Hall
Here is a very personal example, in which I learned a valuable general lesson about talking shit: http://six.pairlist.net/pipermail/markdown-discuss/2008-March/001175.html which had a side effect of cementing one of my professional mantras: What would David Wagner do? ::) I can certainly take