Wanted: Help to analyze (backdoored) Omnisec devices

2020-11-26 Thread Hernâni Marques
Dear Cypherpunks

Adrienne Fichter, Journalist of Republik (cf. https://republik.ch/), is
searching for people who hep to analyze (backdoored) Omnisec devices, a
former Zurich-based company which--like Crypto AG--was shown in Swiss
media these days to have sold devices, which were backdoored, too.

* * *

Omnisec was dissolved two years ago; some articles in German:

https://www.republik.ch/2020/11/26/das-innerste-auge-crypto-skandal-omnisec

https://www.woz.ch/2048/geheimdienste/professor-maurer-und-die-nsa

SRF / Swiss Public Broadcaster on it, from yesterday:

https://www.srf.ch/play/tv/rundschau/video/theke-ueli-maurer?urn=urn:srf:video:a8410250-caf9-4b92-b433-281610887e19

* * *

German tweet, with her asking for action:

https://twitter.com/adfichter/status/1331908267803553793


You find her contact details (besides Twitter) here:

https://www.republik.ch/~adriennefichter


Greets & happy hacking! --hernani

-- 
https://vecirex.net


OpenPGP_0xD4255D1853C9182C.asc
Description: application/pgp-keys


OpenPGP_signature
Description: OpenPGP digital signature


Re: Automatic email encryption w/ pretty Easy privacy (p≡p): Android/iOS/Outlook/Thunderbird (so far)

2020-11-13 Thread Hernâni Marques
Heyo!

On 13.11.20 17:24, buggy person using misbehaving tech wrote:

> I downloaded this great open source app and am using it now.  I don't yet see 
> a way to import a key to verify any signatures, but it wouldn't be hard to 
> add if missing ...

Check out the user documentation, where you see which concepts we apply
and also how to import already existing keys:

https://www.pep.security/docs/

On the very general approach of pEp, also this IETF draft might help;
that's somewhat more technical, but still high-level (pointing to more
technical drafts):

https://tools.ietf.org/html/draft-birk-pep-06

Greets --hernani

-- 
https://vecirex.net


Re: Automatic email encryption w/ pretty Easy privacy (p≡p): Android/iOS/Outlook/Thunderbird (so far)

2020-11-13 Thread Hernâni Marques
Hello again!

On 04.09.20 22:19, Hernâni Marques wrote:

> Dear Cypherpunks!
> 
> We just released beta installers for macOS and Windows to engage in
> automatic email encryption with Thunderbird (v68 and v78), with in-band
> key exchange and a mechanism to synchronize own devices [0][1], using
> the same email address.
> 
> => https://pep.software/thunderbird
> 
> (You also find software for Android, iOS and Outlook.)

For Android and iOS, we now removed the price tag--you can download
those apps (p≡p for Android and p≡p for iOS) free of charge:

AppStore: https://apps.apple.com/us/app/p-p/id1375458631
F-Droid: https://f-droid.org/en/packages/security.pEp/
PlayStore: https://play.google.com/store/apps/details?id=security.pEp

Community forum is here:

https://pEp.community/

More software here:

https://pEp.software/ (price tag for p≡p for Outlook stays)

Greets --hernani

-- 
https://vecirex.net


Re: FreeAssange.net action network: copy-paste action formats & supporters wanted!

2020-09-17 Thread Hernâni Marques
Heyo

On 18.09.20 00:52, Punk-BatSoup-Stasi 2.0 wrote:

>> https://www.freeassange.net/press
> 
>   "www.freeassange.net ist durch die Web Application Firewall von cyon 
> geschützt."
> 
>   freeassange.net attemps to run malware from these domains urls/domains
> 
>   https://www.freeassange.net/ungraylistcheck 
> https://www.freeassange.net/captchacheck
> https://www.freeassange.net/.captcha_div 
> https://www.freeassange.net/.big_loader https://www.freeassange.net/.wraper 
> https://www.google.com/recaptcha
> 
>   bootstrapcdn.com, ajax.googleapis.com, and makes unauthorized 
> connections to fonts.googleapis.com
> 
> 
>   in other words, it would be nice if people who say they support assange 
> would refrain from working for google/nsa/the US nazi surveillance state. 
> 
>   It's kinda 'ironic' that person(s) who say that they support assange 
> are trying to run spying malware on the machines of people who visit their 
> site. 

How did you access the site, with a scanner or "manually"? I think you
triggered some "protective" WAF functionality from cyon.ch. A complaint
when out, for now.

The site as is is not set up with Google/NSA/other US Nazi surveillance
state stuff... :)

-- 
https://vecirex.net


0xD4255D1853C9182C.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


FreeAssange.net action network: copy-paste action formats & supporters wanted!

2020-09-17 Thread Hernâni Marques
Dear Cypherpunk folks

From Switzerland, we created an action network to raise awareness about
the Assange Case--and we demand Assange's immediate release!

From the Press Release from Sep 7th; more to follow:

* * *

For 10 years now the USA has been chasing journalist and Wikileaks
founder Julian Assange. In doing so, they are not shy in violating the
rule of law and human rights.

The determination is clear. Every journalist should be discouraged from
reporting facts that may not be convenient for the USA. That is why the
trial, which started again today in London, is not only about the
extradition of Julian Assange. Our free press, and therefore also our
democracy, are in serious dangers, if the USA is not put in its place.

The extradition of Assange is a dangerous precedent. Therefore we demand
#FreeAssange!

At this occasion, the FreeAssange.net action network organized today
before the start of the session a flash mob on the “Bundesplatz” (the
Federal Square) to draw attention to this process, which is highly
dangerous for our democracy.

We call on governments to clearly stand up for fundamental freedoms and
to call for London and Washington to immediately end the hunt against
Julian Assange.

Pictures: https://www.freeassange.net/press

* * *

If you wanna copy-paste formats (see:
https://www.freeassange.net/events/), just do so and tell us about them,
by sending us pictures and the location:

internatio...@freeassange.net (Pubkey:
https://freeassange.net/international@freeassange_net.asc)

If you wanna join as a supporting orga / group, just tell us, too:

https://www.freeassange.net/supporters/

For social media, check Twitter & Mastodon:

https://twitter.com/FreeAssange_net
https://chaos.social/@FreeAssange_net

#FreeAssange NOW!

Greets --hernani

-- 
https://vecirex.net


0xD4255D1853C9182C.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature


Automatic email encryption w/ pretty Easy privacy (p≡p): Android/iOS/Outlook/Thunderbird (so far)

2020-09-04 Thread Hernâni Marques
Dear Cypherpunks!

We just released beta installers for macOS and Windows to engage in
automatic email encryption with Thunderbird (v68 and v78), with in-band
key exchange and a mechanism to synchronize own devices [0][1], using
the same email address.

=> https://pep.software/thunderbird

(You also find software for Android, iOS and Outlook.)

Feedback is very much appreciated, a bug tracker is here:

https://gitea.pep.foundation/pEp.foundation/pEp4Thunderbird_PublicBugTracking

A user forum you find here:

https://pep.community/

Greets --hernani

[0] https://www.pep.security/docs/general_information.html#pp-sync
[1] https://tools.ietf.org/html/draft-pep-keysync-02

-- 
https://vecirex.net


0xD4255D1853C9182C.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature