Re: [liberationtech] Ostel: encrypted phone calls

2013-06-06 Thread Michael Carbone
Now is a great time to push OStel further out, as clear evidence that the
NSA is scooping up all noncontent cellphone data (including
domestic-domestic) is hitting the news:
http://www.guardian.co.uk/world/2013/jun/06/nsa-phone-records-verizon-court-order

Michael
On Jun 5, 2013 6:03 PM, Nathan of Guardian nat...@guardianproject.info
wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On 06/05/2013 02:25 PM, Mark Belinsky wrote:
  When we initially developed ostel.me it used freeswitch but we've
  moved away from it to allow for better federation. Ostel.co is a
  new implementation of the open secure telephony network (ostn)
  standard

 If you want to track the open-source project behind OStel, you can
 find on the project tracker[0] and post questions on the guardian-dev
 list [1]. As Mark mentioned, this is our second go around at creating
 an Open Secure/Source/Standards Telephony Network [2] service, this
 time based on the popular+powerful Kamalio [3] SIP server.

 Soon, we will have all the information posted on how to run your own
 instance too. We previously documented how to do this with our v1
 Freeswitch-based cookbook [4].

 After all, we still believe in things like standards, federation and
 the ability to run your own servers, because, well, that is what the
 Internet is made of.

 +n

 [0] OStel Project Tracker: https://dev.guardianproject.info/projects/ostel

 [1] Guardian-dev Mailing List:
 https://lists.mayfirst.org/mailman/admin/guardian-dev

 [2] OSTN Project Overview: https://guardianproject.info/wiki/OSTN

 [3] Kamailio: http://www.kamailio.org/w/

 [4] DEPRECATED: Run your own OSTN node:
 https://guardianproject.info/wiki/OSTN_cookbook

 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.11 (GNU/Linux)
 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

 iQIcBAEBAgAGBQJRr7WdAAoJEKgBGD5ps3qpOswP/RuA6id38QvnUUVxiSpncUxc
 uwmPo/DtytirKakI+ZZSeAcN0NFTaExIemye/+QLZUBhGr03O3dwG3KlRYt4ztI3
 yHk8knWK6CUH3vZqluZdB4dX9EWPET0rh+Makf8Qxhzv7F9zIVMk+2CgoPSex078
 MEwXPY7+d7rq3XwwAQHLpjMXxU3J9FXdljRiULr9XyEcTwH7i7T2JzHDx3B9BHE2
 5Mqrsaylm9RkkKUuIBLwrOpp8vxGT3Y5qwHQSo0LWIwMi8zm60ScG61eB7xpVmS6
 wXrqwb2Gs/ay66yexgJ9A05GYiodE3KDvIUB3Aa9Eu34zzQ0vyS9EGJhKWpEyaqm
 YsLy9MezpmC3hkVLFHOawoN9BjRivX4KTnyvdPjDV621HoJO5r8qmnbrZKha7jio
 tNiYLq+bwFabU2DSP4f1k67S2CG0t5IktuLAg2Ckfrg0g3NxfnDT4Q2CANr6h7SC
 Pryx5+BAebpu4J/Pv1iiBTx7uefrwXYltx2jxF6YoAHnnu6jiJjzvIfAwrvuXNq9
 bnsO8TvYFzzPA+i2237WiUvSvOQxjQQQEM4OROJ75VZ9V41ONVy2ndZq8AJmH9dL
 RhaKJNfr5sXdY3yOSWr3ohUH58hDWR0glaUyt8n6Z47uJVWHJr/whnyAD7YCTvf2
 zyJLnld3E5C+/aajioma
 =NqX3
 -END PGP SIGNATURE-
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

[liberationtech] Airline Shutdown Because of Loss of Internet Service?

2013-06-06 Thread michael gurstein
This is probably not a Liberation issue directly but I'm not sure where else
to address it...

Sunday I was flying (Porter Airlines--small short hop Canadian carrier) from
NYC to Ottawa, ON with a plane change in Toronto. When we arrived in Toronto
we were informed that because the Internet was down planes were not able
to land or depart.  The company's service was completely shut down for
roughly 4 hours until the Internet service was restored (presumably by
their ISP).

I understand that other airlines have had similar experiences recently.  

My question... how exactly is Internet service so intertwined with flight
operations that service can function only if the Internet is operational?
(And I guess the Liberation angle... if this is now pervasive for all
airlines what is the hackable element of all this and where are the points
of vulnerability etc.etc.?

M



--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Airline Shutdown Because of Loss of Internet Service? MICHAEL GURSTEIN AND YOSSEM

2013-06-06 Thread Sheila Parks

I would like to post this on my FB wall

Would that be all right?

Seems to me to be very important, with all the horrible talk going on 
in favor of internet voting


I await your response

Thank you,

Sheila

At 03:45 AM 6/6/2013, you wrote:

This is probably not a Liberation issue directly but I'm not sure where else
to address it...

Sunday I was flying (Porter Airlines--small short hop Canadian carrier) from
NYC to Ottawa, ON with a plane change in Toronto. When we arrived in Toronto
we were informed that because the Internet was down planes were not able
to land or depart.  The company's service was completely shut down for
roughly 4 hours until the Internet service was restored (presumably by
their ISP).

I understand that other airlines have had similar experiences recently.

My question... how exactly is Internet service so intertwined with flight
operations that service can function only if the Internet is operational?
(And I guess the Liberation angle... if this is now pervasive for all
airlines what is the hackable element of all this and where are the points
of vulnerability etc.etc.?

M



--
Too many emails? Unsubscribe, change to digest, or change password 
by emailing moderator at compa...@stanford.edu or changing your 
settings at https://mailman.stanford.edu/mailman/listinfo/liberationtech


Sheila Parks, Ed.D.
Founder
Center for Hand-Counted Paper Ballots
Watertown, MA  02472
617 744 6020
DEMOCRACY IN OUR HANDS
www.handcountedpaperballots.org
she...@handcountedpaperballots.org

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Airline Shutdown Because of Loss of Internet Service? MICHAEL GURSTEIN AND YOSSEM

2013-06-06 Thread michael gurstein
Not a problem Sheila... (good suggestion I'll do it as well :)

Best,

Mike

-Original Message-
From: liberationtech-boun...@lists.stanford.edu
[mailto:liberationtech-boun...@lists.stanford.edu] On Behalf Of Sheila Parks
Sent: Thursday, June 06, 2013 4:17 AM
To: liberationtech
Subject: Re: [liberationtech] Airline Shutdown Because of Loss of Internet
Service? MICHAEL GURSTEIN AND YOSSEM
Importance: High

I would like to post this on my FB wall

Would that be all right?

Seems to me to be very important, with all the horrible talk going on in
favor of internet voting

I await your response

Thank you,

Sheila

At 03:45 AM 6/6/2013, you wrote:
This is probably not a Liberation issue directly but I'm not sure where 
else to address it...

Sunday I was flying (Porter Airlines--small short hop Canadian carrier) 
from NYC to Ottawa, ON with a plane change in Toronto. When we arrived 
in Toronto we were informed that because the Internet was down planes 
were not able to land or depart.  The company's service was completely 
shut down for roughly 4 hours until the Internet service was restored 
(presumably by their ISP).

I understand that other airlines have had similar experiences recently.

My question... how exactly is Internet service so intertwined with 
flight operations that service can function only if the Internet is
operational?
(And I guess the Liberation angle... if this is now pervasive for all 
airlines what is the hackable element of all this and where are the 
points of vulnerability etc.etc.?

M



--
Too many emails? Unsubscribe, change to digest, or change password by 
emailing moderator at compa...@stanford.edu or changing your settings 
at https://mailman.stanford.edu/mailman/listinfo/liberationtech

Sheila Parks, Ed.D.
Founder
Center for Hand-Counted Paper Ballots
Watertown, MA  02472
617 744 6020
DEMOCRACY IN OUR HANDS
www.handcountedpaperballots.org
she...@handcountedpaperballots.org

--
Too many emails? Unsubscribe, change to digest, or change password by
emailing moderator at compa...@stanford.edu or changing your settings at
https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


[liberationtech] Subject: Hoping to learn more about the 2009 Iran Green Movement

2013-06-06 Thread Laurent Giacobino
Hi Zak,

As far as I know, it is hard to have a thorough picture of what was used by
whom and when. Also, I am not too sure there is a common acknowledgement of
when the Green Movement went dim, or if the current opposition is still
somehow it or something that should be called differently.
Anyway, I think you will find very interesting bits and pieces in the list
below:

   - The Agonistic Social Media: Cyberspace in the Formation of Dissent and
   Consolidation of State Power in Postelection Iran (2011), Babak Rahimi
   http://www.tandfonline.com/doi/abs/10.1080/10714421.2011.597240#preview
   - Blogistan: The Internet and Politics in Iran, A. Sreberny, G. Khiabany
   (2010), particularly, Chapter 8, “The Summer of 2009”

   
http://www.amazon.com/Blogistan-Internet-Politics-International-Library/dp/1845116062
   - UNESCO's Freedom of Expression, Freedom of Connection, p. 38 Box 4.5b
   Twitter in the Iranian 2009 Election Protests

   
http://www.unesco.org/new/en/communication-and-information/resources/publications-and-communication-materials/publications/full-list/freedom-of-connection-freedom-of-expression-the-changing-legal-and-regulatory-ecology-shaping-the-internet/
   - (probably the most thorough) After the Green Movement, ONI

   
http://opennet.net/blog/2013/02/after-green-movement-internet-controls-iran-2009-2012
   - Freedom House's Freedom on the Net 2012
   http://www.freedomhouse.org/report/freedom-net/2012/iran#_ftn29
   - if you want to look at the current developments of the situation, you
   should also follow the policy and infrastructure reports from Small Media
   http://smallmedia.org.uk/content/78
   http://smallmedia.org.uk/content/82
   http://smallmedia.org.uk/content/88
   - and a more up to date picture of the user profiles:
   Abadpour/Anderson's Fights, Adapts, Accepts: Archetypes of Iranian
   Internet Use
   http://iranmediaresearch.com/en/research/pdffile/1287

That's about it at my end :).
That might cover more than what you want to look at, but you should find
relevant things in these works.

Hope that helps.
Cheers
Laurent
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Ostel: encrypted phone calls

2013-06-06 Thread Raven Jiang CX
The article mentioned that the order for the dragnet came from the FISA
court. Doesn't electronic surveillance of agents that do not belong to
foreign entities exceed the legal jurisdiction of the FISA court?


On 6 June 2013 00:02, Michael Carbone mich...@accessnow.org wrote:

 Now is a great time to push OStel further out, as clear evidence that the
 NSA is scooping up all noncontent cellphone data (including
 domestic-domestic) is hitting the news:
 http://www.guardian.co.uk/world/2013/jun/06/nsa-phone-records-verizon-court-order

 Michael
 On Jun 5, 2013 6:03 PM, Nathan of Guardian nat...@guardianproject.info
 wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On 06/05/2013 02:25 PM, Mark Belinsky wrote:
  When we initially developed ostel.me it used freeswitch but we've
  moved away from it to allow for better federation. Ostel.co is a
  new implementation of the open secure telephony network (ostn)
  standard

 If you want to track the open-source project behind OStel, you can
 find on the project tracker[0] and post questions on the guardian-dev
 list [1]. As Mark mentioned, this is our second go around at creating
 an Open Secure/Source/Standards Telephony Network [2] service, this
 time based on the popular+powerful Kamalio [3] SIP server.

 Soon, we will have all the information posted on how to run your own
 instance too. We previously documented how to do this with our v1
 Freeswitch-based cookbook [4].

 After all, we still believe in things like standards, federation and
 the ability to run your own servers, because, well, that is what the
 Internet is made of.

 +n

 [0] OStel Project Tracker:
 https://dev.guardianproject.info/projects/ostel

 [1] Guardian-dev Mailing List:
 https://lists.mayfirst.org/mailman/admin/guardian-dev

 [2] OSTN Project Overview: https://guardianproject.info/wiki/OSTN

 [3] Kamailio: http://www.kamailio.org/w/

 [4] DEPRECATED: Run your own OSTN node:
 https://guardianproject.info/wiki/OSTN_cookbook

 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.11 (GNU/Linux)
 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

 iQIcBAEBAgAGBQJRr7WdAAoJEKgBGD5ps3qpOswP/RuA6id38QvnUUVxiSpncUxc
 uwmPo/DtytirKakI+ZZSeAcN0NFTaExIemye/+QLZUBhGr03O3dwG3KlRYt4ztI3
 yHk8knWK6CUH3vZqluZdB4dX9EWPET0rh+Makf8Qxhzv7F9zIVMk+2CgoPSex078
 MEwXPY7+d7rq3XwwAQHLpjMXxU3J9FXdljRiULr9XyEcTwH7i7T2JzHDx3B9BHE2
 5Mqrsaylm9RkkKUuIBLwrOpp8vxGT3Y5qwHQSo0LWIwMi8zm60ScG61eB7xpVmS6
 wXrqwb2Gs/ay66yexgJ9A05GYiodE3KDvIUB3Aa9Eu34zzQ0vyS9EGJhKWpEyaqm
 YsLy9MezpmC3hkVLFHOawoN9BjRivX4KTnyvdPjDV621HoJO5r8qmnbrZKha7jio
 tNiYLq+bwFabU2DSP4f1k67S2CG0t5IktuLAg2Ckfrg0g3NxfnDT4Q2CANr6h7SC
 Pryx5+BAebpu4J/Pv1iiBTx7uefrwXYltx2jxF6YoAHnnu6jiJjzvIfAwrvuXNq9
 bnsO8TvYFzzPA+i2237WiUvSvOQxjQQQEM4OROJ75VZ9V41ONVy2ndZq8AJmH9dL
 RhaKJNfr5sXdY3yOSWr3ohUH58hDWR0glaUyt8n6Z47uJVWHJr/whnyAD7YCTvf2
 zyJLnld3E5C+/aajioma
 =NqX3
 -END PGP SIGNATURE-
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech


 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Airline Shutdown Because of Loss of Internet Service?

2013-06-06 Thread Andrés Leopoldo Pacheco Sanfuentes
One thing that comes to mind right away is that more  more companies are
replacing private-circuit based WANs by Internet-VPNs,  thus, when the
Internet is down, their network is down; even more, if they depend on any
SaaS (from Salesforce.com for CRM to Maximo for Asset management), or, in
general, XaaS (AWS, Rackspace, etc.), for critical business systems, a
fast-growing trend, the Internet is their backbone.
On Jun 6, 2013 2:45 AM, michael gurstein gurst...@gmail.com wrote:

 This is probably not a Liberation issue directly but I'm not sure where
 else
 to address it...

 Sunday I was flying (Porter Airlines--small short hop Canadian carrier)
 from
 NYC to Ottawa, ON with a plane change in Toronto. When we arrived in
 Toronto
 we were informed that because the Internet was down planes were not able
 to land or depart.  The company's service was completely shut down for
 roughly 4 hours until the Internet service was restored (presumably by
 their ISP).

 I understand that other airlines have had similar experiences recently.

 My question... how exactly is Internet service so intertwined with flight
 operations that service can function only if the Internet is operational?
 (And I guess the Liberation angle... if this is now pervasive for all
 airlines what is the hackable element of all this and where are the points
 of vulnerability etc.etc.?

 M



 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

[liberationtech] NSA, FBI, Verizon caught red handed spying on US citizens in the US

2013-06-06 Thread Jacob Appelbaum
Dear Libtech,

We've waited a long time for this kind of FISA court document to leak -
we see clearly evidence that there is still dragnet surveillance that is
ongoing - the current order leaked is still valid as of today, it will
continue to be valid until the middle of July.

This specifically includes Americans without any international or even
inter-city connections!

To quote:
wholly within the United States, including local telephone calls

It specifically says a lot more:

TOP SECRET//SI//NOFORN
Declassify on: 12 April 2038

...

IT IS HEREBY ORDERED that, the Custodian of Records shall produce to the
National Security Agency (NSA) upon service of this Order, and continue
production on an ongoing daily basis thereafter for the duration of this
Order, unless otherwise ordered by the Court, an electronic copy of the
following tangible things: all call detail records or telephony
metadata created by Verizon for communications (i) between the United
States and abroad; or (ii) wholly within the United States, including
local telephone calls. This Order does not require Verizon to produce
telephony metadata for communications wholly originating and terminating
in foreign countries. Telephony metadata includes comprehensive
communications routing information,. including but not limited to
session identifying information (e.g., originating and
terminating telephone number, International Mobile Subscriber Identity
(IMSI) number, International Mobile station Equipment Identity (IMEI)
number, etc.), trunk identifier, telephone calling card numbers, and
time and duration of call. Telephony metadata does not include the
substantive content of any communication, as defined by 18 U.S.C.
§ 2510(8), or the name, address, or financial information of a
subscriber or customer.


The leaked order is here:

  https://s3.amazonaws.com/s3.documentcloud.org/documents/709012/verizon.pdf


The writeup by Glenn Greenwald is worth reading as he broke the story:


http://www.guardian.co.uk/world/2013/jun/06/nsa-phone-records-verizon-court-order

This pretty much settles the dragnet surveillance debate - the FBI, the
NSA, the FISA courts are aware of it - all the way to the top. Thus it
is likely the DoJ are all in on it. This is madness and it is exactly
proof of what we have been saying for years. This time it is undeniable
as it is signed by a FISA judge and it is *currently* happening.

I look forward to the FISA order for full content or the FISA for
targeted based on patterns to leak next!

All the best,
Jacob
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] NSA, FBI, Verizon caught red handed spying on US citizens in the US

2013-06-06 Thread Andrés Leopoldo Pacheco Sanfuentes
OK, so the US government has no business, or rather no moral authority,
chiding other countries about freedom of speech!
On Jun 6, 2013 6:10 AM, Jacob Appelbaum ja...@appelbaum.net wrote:

 Dear Libtech,

 We've waited a long time for this kind of FISA court document to leak -
 we see clearly evidence that there is still dragnet surveillance that is
 ongoing - the current order leaked is still valid as of today, it will
 continue to be valid until the middle of July.

 This specifically includes Americans without any international or even
 inter-city connections!

 To quote:
 wholly within the United States, including local telephone calls

 It specifically says a lot more:

 TOP SECRET//SI//NOFORN
 Declassify on: 12 April 2038

 ...

 IT IS HEREBY ORDERED that, the Custodian of Records shall produce to the
 National Security Agency (NSA) upon service of this Order, and continue
 production on an ongoing daily basis thereafter for the duration of this
 Order, unless otherwise ordered by the Court, an electronic copy of the
 following tangible things: all call detail records or telephony
 metadata created by Verizon for communications (i) between the United
 States and abroad; or (ii) wholly within the United States, including
 local telephone calls. This Order does not require Verizon to produce
 telephony metadata for communications wholly originating and terminating
 in foreign countries. Telephony metadata includes comprehensive
 communications routing information,. including but not limited to
 session identifying information (e.g., originating and
 terminating telephone number, International Mobile Subscriber Identity
 (IMSI) number, International Mobile station Equipment Identity (IMEI)
 number, etc.), trunk identifier, telephone calling card numbers, and
 time and duration of call. Telephony metadata does not include the
 substantive content of any communication, as defined by 18 U.S.C.
 § 2510(8), or the name, address, or financial information of a
 subscriber or customer.


 The leaked order is here:


 https://s3.amazonaws.com/s3.documentcloud.org/documents/709012/verizon.pdf


 The writeup by Glenn Greenwald is worth reading as he broke the story:



 http://www.guardian.co.uk/world/2013/jun/06/nsa-phone-records-verizon-court-order

 This pretty much settles the dragnet surveillance debate - the FBI, the
 NSA, the FISA courts are aware of it - all the way to the top. Thus it
 is likely the DoJ are all in on it. This is madness and it is exactly
 proof of what we have been saying for years. This time it is undeniable
 as it is signed by a FISA judge and it is *currently* happening.

 I look forward to the FISA order for full content or the FISA for
 targeted based on patterns to leak next!

 All the best,
 Jacob
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Airline Shutdown Because of Loss of Internet Service?

2013-06-06 Thread Richard Brooks

On 06/06/2013 03:45 AM, michael gurstein wrote:
 This is probably not a Liberation issue directly but I'm not sure where else
 to address it...
 

 Sunday I was flying (Porter Airlines--small short hop Canadian carrier) from
 NYC to Ottawa, ON with a plane change in Toronto. When we arrived in Toronto
 we were informed that because the Internet was down planes were not able
 to land or depart.  The company's service was completely shut down for
 roughly 4 hours until the Internet service was restored (presumably by
 their ISP).
 
 I understand that other airlines have had similar experiences recently.  
 
 My question... how exactly is Internet service so intertwined with flight
 operations that service can function only if the Internet is operational?
 (And I guess the Liberation angle... if this is now pervasive for all
 airlines what is the hackable element of all this and where are the points
 of vulnerability etc.etc.?
 

This one is easy. Logistics. Airlines have enormous optimization
routines mapping planes, crews and passengers to flights. This
allows them to shave off overhead and make a profit. If the network
is down, they won't know who should fly where.

 M
 
 
 
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
 

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Airline Shutdown Because of Loss of Internet Service?

2013-06-06 Thread michael gurstein
Thanks Richard and this runs on the open Internet?

M

-Original Message-
From: liberationtech-boun...@lists.stanford.edu
[mailto:liberationtech-boun...@lists.stanford.edu] On Behalf Of Richard
Brooks
Sent: Thursday, June 06, 2013 10:00 AM
To: liberationtech
Subject: Re: [liberationtech] Airline Shutdown Because of Loss of Internet
Service?


On 06/06/2013 03:45 AM, michael gurstein wrote:
 This is probably not a Liberation issue directly but I'm not sure 
 where else to address it...
 

 Sunday I was flying (Porter Airlines--small short hop Canadian 
 carrier) from NYC to Ottawa, ON with a plane change in Toronto. When 
 we arrived in Toronto we were informed that because the Internet was 
 down planes were not able to land or depart.  The company's service 
 was completely shut down for roughly 4 hours until the Internet 
 service was restored (presumably by their ISP).
 
 I understand that other airlines have had similar experiences recently.  
 
 My question... how exactly is Internet service so intertwined with 
 flight operations that service can function only if the Internet is
operational?
 (And I guess the Liberation angle... if this is now pervasive for all 
 airlines what is the hackable element of all this and where are the 
 points of vulnerability etc.etc.?
 

This one is easy. Logistics. Airlines have enormous optimization routines
mapping planes, crews and passengers to flights. This allows them to shave
off overhead and make a profit. If the network is down, they won't know who
should fly where.

 M
 
 
 
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings 
 at https://mailman.stanford.edu/mailman/listinfo/liberationtech
 

--
Too many emails? Unsubscribe, change to digest, or change password by
emailing moderator at compa...@stanford.edu or changing your settings at
https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


[liberationtech] An interesting (new?) browser behavior this morning

2013-06-06 Thread Albo P. Fossa

Whever I use my imagination to create a URL in the browser bar, especially 
those with human names (e.g., jessejames.com, joesdining.com — the latter I 
*know* exists) I receive a browser error Safari cannot open the page because 
the server cannot be found. Is this a coincidence due to my odd imagination in 
URL names?

[END]
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Airline Shutdown Because of Loss of Internet Service?

2013-06-06 Thread Kyle Maxwell
You could do it with leased lines, but (a) given cost pressures on
airlines, they might choose other options, and (b) as noted earlier,
the information was likely filtered through some non-technical folks
and this was their understanding of a slightly different problem
(network is down - Internet is down or similar).

On Thu, Jun 6, 2013 at 11:06 AM, Richard Brooks r...@acm.org wrote:
 On 06/06/2013 10:50 AM, michael gurstein wrote:
 Thanks Richard and this runs on the open Internet?

 M

 Don't know the details about how they communicate from the end points
 to the back-end, but it is easy to assume that it relies on Internet
 infrastructure at some point in some way. I would find it hard to
 imagine other configurations.

 -Original Message-
 From: liberationtech-boun...@lists.stanford.edu
 [mailto:liberationtech-boun...@lists.stanford.edu] On Behalf Of Richard
 Brooks
 Sent: Thursday, June 06, 2013 10:00 AM
 To: liberationtech
 Subject: Re: [liberationtech] Airline Shutdown Because of Loss of Internet
 Service?


 On 06/06/2013 03:45 AM, michael gurstein wrote:
 This is probably not a Liberation issue directly but I'm not sure
 where else to address it...


 Sunday I was flying (Porter Airlines--small short hop Canadian
 carrier) from NYC to Ottawa, ON with a plane change in Toronto. When
 we arrived in Toronto we were informed that because the Internet was
 down planes were not able to land or depart.  The company's service
 was completely shut down for roughly 4 hours until the Internet
 service was restored (presumably by their ISP).

 I understand that other airlines have had similar experiences recently.

 My question... how exactly is Internet service so intertwined with
 flight operations that service can function only if the Internet is
 operational?
 (And I guess the Liberation angle... if this is now pervasive for all
 airlines what is the hackable element of all this and where are the
 points of vulnerability etc.etc.?


 This one is easy. Logistics. Airlines have enormous optimization routines
 mapping planes, crews and passengers to flights. This allows them to shave
 off overhead and make a profit. If the network is down, they won't know who
 should fly where.

 M



 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings
 at https://mailman.stanford.edu/mailman/listinfo/liberationtech


 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech



 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] An interesting (new?) browser behavior this morning

2013-06-06 Thread Kyle Maxwell
That sounds more likely to be a bog-standard local DNS or network
issue, depending on where you're connecting from.

On Thu, Jun 6, 2013 at 10:48 AM, Albo P. Fossa a...@apfwebs.com wrote:

 Whever I use my imagination to create a URL in the browser bar, especially 
 those with human names (e.g., jessejames.com, joesdining.com — the latter I 
 *know* exists) I receive a browser error Safari cannot open the page because 
 the server cannot be found. Is this a coincidence due to my odd imagination 
 in URL names?

 [END]
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] NSA, FBI, Verizon caught red handed spying on US citizens in the US

2013-06-06 Thread Kyle Maxwell
No, it's really not - there are parts of the US gov (and VZ - I work
there and I feel the same way about all this as anyone here) that
oppose this type of blanket surveillance of an entire society. And if
you think everyone in the government is monolithic about foreign
policy, well, then there's a lot more reading you should probably do.
I wish it were a little *more* fractured, personally, to avoid some of
the more egregious bits we've seen over the last couple of centuries,
but just because a side wins doesn't mean everyone is on board.

On Thu, Jun 6, 2013 at 12:40 PM, Andrés Leopoldo Pacheco Sanfuentes
alps6...@gmail.com wrote:
 Well, of course!

 I couldn't agree more with the underlying beliefs of Shava Nerad.

 BUT

 Government IS MONOLITHIC when it comes to FOREIGN POLICY ACTIONS, and
 INTERNAL SURVEILLANCE OF ITS OWN CITIZENS.

 There's no grey area in a WAR, there's no grey area in the FISA memo
 leaked, there's no grey area in the NSA and FBI's Directives from
 the Executive Branch. The US Buck stops at Obama, Obama is to blame
 for this crap, in the same fashion, for example, that the Turkish PM
 is to blame for the repressive atrocities in response to peaceful
 protests by turkuaz people.

 That doesn't stop the rest of us to celebrate FESTIVUS and keep on
 pounding at all those individuals and then some more that Shava Nerad
 points out.
 Best Regards | Cordiales Saludos | Grato,

 Andrés L. Pacheco Sanfuentes
 a...@acm.org
 +1 (817) 271-9619


 On Thu, Jun 6, 2013 at 10:15 AM, Shava Nerad shav...@gmail.com wrote:
 The US government -- nor most any government, I imagine (certainly any
 democracy) -- is not monolithic.  It represents a great struggle of policy
 arguments and internally is more like a mass of mating snakes than a
 monolithic front.

 To say that because the NSA is spying on citizens invalidates any voice the
 US may have is a bit odd.

 Jake and I are US citizens, activists, and I am a former State Democratic
 Committee member. Jake's day job is partly government funded by parts of
 .gov that are in fact in open conflict with DHS policies domestically.

 It's no secret that there are conflicts between the policies set by
 different branches of the US government.  WE ARE NOT A DICTATORSHIP. Yet.

 Someone last week told me with some heat that my former position as a
 Democratic Party operative means I am the sort of person (contrary to the
 evidence of his senses) who does not talk to him because it makes me a
 right-leaning (!) ruling elite! (My father was a wobbly organizer as a young
 man, my grandfather a syndicalist -- let's say I am not terribly right
 wing?)

 I think I will frame that one...

 My point being, in a democratic society, we all have power to exert
 influence into the process at various levels, and I expect everyone here is
 on this list because they do or aspire to.

 So the first step might be to abandon the model that the government
 exists, any more than a school of herring exists.  They tend to move as a
 whole, eh?  But there is no solid thing.

 In fact, government is less whole than a school of fish, because a school of
 fish is coded in DNA and neurotransmitters and instinct.  Not so,
 government.

 Government is a slow stubborn thing because it is so large and powerful
 viewed as the forest -- huge inertia!  But the trees are not so hard.
 Elected officials, staff, policies, laws, courts, communications channels,
 media, regulations, contractors, bureaucrats, elections, political parties,
 everywhere there's a place to communicate, exchange influence/money, you can
 insert yourself into the system.

 It is not monolithic.

 In a democracy, by its nature, the citizenry are the rightful rulers.  When
 they aren't cruising kittens on youtube, amiright? ;)

 So I post this story on G+ and most of my fellow citizens won't give a damn
 because they've been sold on the idea that:

 ---
 Government is monolithic, what could I do anyway?

 Politics is dirty.  Only bad people get involved.  I  would not want to be a
 politician, activist, or hactivist, those are all bad, dangerous people.

 I click on internet petitions.  I never have to leave the comfort and safety
 of my ergonomic chair to save the world.  My karma is good and I give money
 to various liberal or conervative appeals and sleep well at night.

 People who ask me to be politically active seem frustrated and uncool.  They
 should take more soma.

 Kittens are kwai!

 ---
 Yes, we are working on it here.  That these documents are leaked and
 published is evidence of that, if you think about it, rather than just
 reacting to it.

 Yrs,
 

 Shava Nerad
 shav...@gmail.com

 On Jun 6, 2013 8:36 AM, Andrés Leopoldo Pacheco Sanfuentes
 alps6...@gmail.com wrote:

 OK, so the US government has no business, or rather no moral authority,
 chiding other countries about freedom of speech!

 On Jun 6, 2013 6:10 AM, Jacob Appelbaum ja...@appelbaum.net wrote:

 Dear Libtech,

 We've waited a long time for 

Re: [liberationtech] NSA, FBI, Verizon caught red handed spying on US citizens in the US

2013-06-06 Thread Andrés Leopoldo Pacheco Sanfuentes
Is there an online catalog of all those technologies?  This is
extremely important for anyone contemplating civil disobedience
actions, or even just being very vocal about stuff that is wrong with
this country and others. I have the feeling that usability experts
are needed to make those techs more palatable, fool-proof, and
user-friendly to use, just like a Mac! :D (I hate saying that, but
what can I say, it's the truth! even though Apple allegedly has
140,000,000,000 in cash (foreign accounts, of course to avoid Uncle
Sam's taxation rules)
Best Regards | Cordiales Saludos | Grato,

Andrés L. Pacheco Sanfuentes
a...@acm.org
+1 (817) 271-9619


On Thu, Jun 6, 2013 at 12:43 PM, Anthony Papillion
anth...@cajuntechie.org wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 On 06/06/2013 06:07 AM, Jacob Appelbaum wrote:
 Dear Libtech,

 We've waited a long time for this kind of FISA court document to
 leak - we see clearly evidence that there is still dragnet
 surveillance that is ongoing - the current order leaked is still
 valid as of today, it will continue to be valid until the middle of
 July.

 This specifically includes Americans without any international or
 even inter-city connections!

 If anyone was still on the fence about this issue, this document shows
 that we simply cannot rely on the courts, secret or otherwise, to
 protect us from an out of control government. It's up to us to protect
 ourselves and, thankfully, we have the technology to do just that.
 It's our use of software like Tor, GnuPG, OTR, and various voice
 conversation encryption technologies that will save us from this kind
 of surveillance, not a court, president, or congress.

 It's time we get militant about using technology to defend ourselves.
 The time for real, concrete, action has long since come.

 Anthony

 - --
 Anthony Papillion
 Phone:   1.918.533.9699
 SIP: sip:cajuntec...@iptel.org
 iNum:+883510008360912
 XMPP:cypherpun...@jit.si

 www.cajuntechie.org


 -BEGIN PGP SIGNATURE-
 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

 iQIcBAEBCgAGBQJRsMpAAAoJEAKK33RTsEsV7s0P/joy0Uh27CZhCTRJWJ+h9X1Z
 3hogBfGRdleA5bgABcbR4aO69bAfnSpodbd/WUEryjdSOdGraMgzg+1otqGS4+kr
 60q2QwQbVNJ6ELy5sWaIImvlqq1r4F3RctpaEokGeSD2bWfl3lEA3lBHWRX3z/AJ
 +sDcWpob03o0otuu4zuooMhIoFMe5qBJR6KWP7bSKcWhXuZZSI9cM1PXoc6OZWzT
 R8tp/SAvHK6YpYj+q0Q0C9N9zBENI/txAq/PiJg7M4+Q4T1xhuwN1XGaD7gjcLfw
 7HSz9MHuvLu6dRGXZzdXtcnzVVdnbo0mBt0yWtm4yqOJtDm1n5pynwfTZdSgZwYk
 CGZJEiyrNg/IDj6nhJbZ6HeOTNHiExmC9vp3b1ST2cdBqWDe0Gdewdbup/NiXw8G
 GOKfLNlF+WpKN9JlW1npSSrGs5IJreuwvXz1uvKGeXxaliXk9zks2y1gZiOio8e3
 iIeCLhF5M2vaz+tMqei1GaLq3PALep1m1C/fz8RcUBlNgu1z1q4KVBTk/VhyHxQK
 opbsQuVXvyj/7RN0COnOKKKN9nohry5hX4vvVTMKUHv1aVnVKU33pmGPsHYqEZLa
 kptAkJ5cLGv7c0nUgudqJGy8S3T0gPW/EijIeAzrtKBR/QBTyaB1dIbyUl5GeHrj
 nCeGmlHHxBwHw+zpUQDD
 =K8ST
 -END PGP SIGNATURE-
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Why Metadata Matters

2013-06-06 Thread Andrés Leopoldo Pacheco Sanfuentes
It is quite believable in court, where it really matters! :D
Best Regards | Cordiales Saludos | Grato,

Andrés L. Pacheco Sanfuentes
a...@acm.org
+1 (817) 271-9619


On Thu, Jun 6, 2013 at 12:44 PM, Griffin Boyce griffinbo...@gmail.com wrote:
   I see a lot of people wondering why metadata matters.  But they
 don't know *what* you're doing there!  So I'll give a short example
 to illustrate how metadata can be used to not only determine who
 someone is talking to, but also to invade their privacy and uncover
 the most intimate details of their life.

   Jane is at 16th  L Street for an hour.
   Carla is at 16th  L Street for four hours. She's had a short visit
 previously.
   James is at 16th  L Street for twenty minutes. He comes back at the
 same time every week.
   Kris is at 16th  L Street for ten hours.
   Rick is at 16th  L Street for eight hours every night.
   Samantha has been there for three days and four hours.

 16th  L Street is the address of a Planned Parenthood in Washington, DC.

   Jane is having a physical.
   Carla is having an abortion.
   James receives his medication there. By visit time, location, and
 frequency, he is likely a trans guy. If his appointments were every
 two weeks, the metadata would indicate that James is a trans woman.
   Kris is protesting there.
   Rick works in an office in the same building.
   Samantha dropped her phone in the Farragut West Metro Station and
 has been looking for it ever since.

 And that's just location data. If one calls a physician every day,
 perhaps they have a major medical problem. If a crime happens on the
 other side of town, and you suddenly start calling attorneys... did
 you do it?  There are numerous explanations for either of those
 scenarios, but this kind of metadata in isolation can be used to tell
 almost any story you want.

 Stay safe out there.

 best,
 Griffin Boyce

 --
 Technical Program Associate, Open Technology Institute
 #Foucault / PGP: 0xAE792C97 / OTR: sa...@jabber.ccc.de
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] NSA, FBI, Verizon caught red handed spying on US citizens in the US

2013-06-06 Thread Andrés Leopoldo Pacheco Sanfuentes
When I said MONOLITHIC I wasn't referring to all departments or
agencies inside government, or even less to individuals working
therein, but rather to the effect.

If the US government starts a war, it doesn't matter if 49.99% opposed
it. It's still going on and people get killed. For those people, and
their circles, the US government is MONOLITHIC.

If a person residing in the US, Verizon's customer, gets detained by
the FBI, and subsequently harrassed and disappears, for all affected
the Government is MONOLITHIC.

A single shot, and bang: you're dead (or, worse yet, being killed
however softly they choose)

It's like binary code: either ONE or ZERO. No grey zone.
Best Regards | Cordiales Saludos | Grato,

Andrés L. Pacheco Sanfuentes
a...@acm.org
+1 (817) 271-9619


On Thu, Jun 6, 2013 at 12:49 PM, Andrés Leopoldo Pacheco Sanfuentes
alps6...@gmail.com wrote:
 Is there an online catalog of all those technologies?  This is
 extremely important for anyone contemplating civil disobedience
 actions, or even just being very vocal about stuff that is wrong with
 this country and others. I have the feeling that usability experts
 are needed to make those techs more palatable, fool-proof, and
 user-friendly to use, just like a Mac! :D (I hate saying that, but
 what can I say, it's the truth! even though Apple allegedly has
 140,000,000,000 in cash (foreign accounts, of course to avoid Uncle
 Sam's taxation rules)
 Best Regards | Cordiales Saludos | Grato,

 Andrés L. Pacheco Sanfuentes
 a...@acm.org
 +1 (817) 271-9619


 On Thu, Jun 6, 2013 at 12:43 PM, Anthony Papillion
 anth...@cajuntechie.org wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 On 06/06/2013 06:07 AM, Jacob Appelbaum wrote:
 Dear Libtech,

 We've waited a long time for this kind of FISA court document to
 leak - we see clearly evidence that there is still dragnet
 surveillance that is ongoing - the current order leaked is still
 valid as of today, it will continue to be valid until the middle of
 July.

 This specifically includes Americans without any international or
 even inter-city connections!

 If anyone was still on the fence about this issue, this document shows
 that we simply cannot rely on the courts, secret or otherwise, to
 protect us from an out of control government. It's up to us to protect
 ourselves and, thankfully, we have the technology to do just that.
 It's our use of software like Tor, GnuPG, OTR, and various voice
 conversation encryption technologies that will save us from this kind
 of surveillance, not a court, president, or congress.

 It's time we get militant about using technology to defend ourselves.
 The time for real, concrete, action has long since come.

 Anthony

 - --
 Anthony Papillion
 Phone:   1.918.533.9699
 SIP: sip:cajuntec...@iptel.org
 iNum:+883510008360912
 XMPP:cypherpun...@jit.si

 www.cajuntechie.org


 -BEGIN PGP SIGNATURE-
 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

 iQIcBAEBCgAGBQJRsMpAAAoJEAKK33RTsEsV7s0P/joy0Uh27CZhCTRJWJ+h9X1Z
 3hogBfGRdleA5bgABcbR4aO69bAfnSpodbd/WUEryjdSOdGraMgzg+1otqGS4+kr
 60q2QwQbVNJ6ELy5sWaIImvlqq1r4F3RctpaEokGeSD2bWfl3lEA3lBHWRX3z/AJ
 +sDcWpob03o0otuu4zuooMhIoFMe5qBJR6KWP7bSKcWhXuZZSI9cM1PXoc6OZWzT
 R8tp/SAvHK6YpYj+q0Q0C9N9zBENI/txAq/PiJg7M4+Q4T1xhuwN1XGaD7gjcLfw
 7HSz9MHuvLu6dRGXZzdXtcnzVVdnbo0mBt0yWtm4yqOJtDm1n5pynwfTZdSgZwYk
 CGZJEiyrNg/IDj6nhJbZ6HeOTNHiExmC9vp3b1ST2cdBqWDe0Gdewdbup/NiXw8G
 GOKfLNlF+WpKN9JlW1npSSrGs5IJreuwvXz1uvKGeXxaliXk9zks2y1gZiOio8e3
 iIeCLhF5M2vaz+tMqei1GaLq3PALep1m1C/fz8RcUBlNgu1z1q4KVBTk/VhyHxQK
 opbsQuVXvyj/7RN0COnOKKKN9nohry5hX4vvVTMKUHv1aVnVKU33pmGPsHYqEZLa
 kptAkJ5cLGv7c0nUgudqJGy8S3T0gPW/EijIeAzrtKBR/QBTyaB1dIbyUl5GeHrj
 nCeGmlHHxBwHw+zpUQDD
 =K8ST
 -END PGP SIGNATURE-
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Why Metadata Matters

2013-06-06 Thread Gustaf Björksten
Well if there was no privacy-invading information to be gleaned from the
metadata then the NSA would not go to such lengths to obtain it.
Inherent in the action of obtaining it, is the admission that the
metadata is valuable to the NSA to spy on you. Obvious, innit.

G.

On 06/06/2013 01:44 PM, Griffin Boyce wrote:
   I see a lot of people wondering why metadata matters.  But they
 don't know *what* you're doing there!  So I'll give a short example
 to illustrate how metadata can be used to not only determine who
 someone is talking to, but also to invade their privacy and uncover
 the most intimate details of their life.
 
   Jane is at 16th  L Street for an hour.
   Carla is at 16th  L Street for four hours. She's had a short visit
 previously.
   James is at 16th  L Street for twenty minutes. He comes back at the
 same time every week.
   Kris is at 16th  L Street for ten hours.
   Rick is at 16th  L Street for eight hours every night.
   Samantha has been there for three days and four hours.
 
 16th  L Street is the address of a Planned Parenthood in Washington, DC.
 
   Jane is having a physical.
   Carla is having an abortion.
   James receives his medication there. By visit time, location, and
 frequency, he is likely a trans guy. If his appointments were every
 two weeks, the metadata would indicate that James is a trans woman.
   Kris is protesting there.
   Rick works in an office in the same building.
   Samantha dropped her phone in the Farragut West Metro Station and
 has been looking for it ever since.
 
 And that's just location data. If one calls a physician every day,
 perhaps they have a major medical problem. If a crime happens on the
 other side of town, and you suddenly start calling attorneys... did
 you do it?  There are numerous explanations for either of those
 scenarios, but this kind of metadata in isolation can be used to tell
 almost any story you want.
 
 Stay safe out there.
 
 best,
 Griffin Boyce
 


-- 
Gustaf Björksten
Technology Director
Access Now
اكسس ناو تونس
https://www.accessnow.org
GPG ID: 0xFEB3D12A
GPG Fingerprint: C10F FC31 B92A 3A32 40A0 1A72 43AC A427 FEB3 D12A
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Why Metadata Matters

2013-06-06 Thread Buddhadeb Halder
It is really interesting!
However, I have some basic and silly questions?
1. How does metadata work?
2. Is there any connection among location data, metadata and big dada?
Thanks,
Buddha


On Thu, Jun 6, 2013 at 7:44 PM, Griffin Boyce griffinbo...@gmail.comwrote:

   I see a lot of people wondering why metadata matters.  But they
 don't know *what* you're doing there!  So I'll give a short example
 to illustrate how metadata can be used to not only determine who
 someone is talking to, but also to invade their privacy and uncover
 the most intimate details of their life.

   Jane is at 16th  L Street for an hour.
   Carla is at 16th  L Street for four hours. She's had a short visit
 previously.
   James is at 16th  L Street for twenty minutes. He comes back at the
 same time every week.
   Kris is at 16th  L Street for ten hours.
   Rick is at 16th  L Street for eight hours every night.
   Samantha has been there for three days and four hours.

 16th  L Street is the address of a Planned Parenthood in Washington, DC.

   Jane is having a physical.
   Carla is having an abortion.
   James receives his medication there. By visit time, location, and
 frequency, he is likely a trans guy. If his appointments were every
 two weeks, the metadata would indicate that James is a trans woman.
   Kris is protesting there.
   Rick works in an office in the same building.
   Samantha dropped her phone in the Farragut West Metro Station and
 has been looking for it ever since.

 And that's just location data. If one calls a physician every day,
 perhaps they have a major medical problem. If a crime happens on the
 other side of town, and you suddenly start calling attorneys... did
 you do it?  There are numerous explanations for either of those
 scenarios, but this kind of metadata in isolation can be used to tell
 almost any story you want.

 Stay safe out there.

 best,
 Griffin Boyce

 --
 Technical Program Associate, Open Technology Institute
 #Foucault / PGP: 0xAE792C97 / OTR: sa...@jabber.ccc.de
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Why Metadata Matters

2013-06-06 Thread David Golumbia
while it is literally true that the data accessed by the NSA is formally
metadata--that is, informational data about the calls rather than the
conversations themselves--the distinction is becoming more and more
obfuscatory. The whole direction of so-called big data analytics is to
see through the metadata into what would, until very recently, have been
understood as data. metadata today is both far more informationally rich,
and far more analytically useful, than the data/metadata distinction
suggests.





On Thu, Jun 6, 2013 at 1:44 PM, Griffin Boyce griffinbo...@gmail.comwrote:

   I see a lot of people wondering why metadata matters.  But they
 don't know *what* you're doing there!  So I'll give a short example
 to illustrate how metadata can be used to not only determine who
 someone is talking to, but also to invade their privacy and uncover
 the most intimate details of their life.

   Jane is at 16th  L Street for an hour.
   Carla is at 16th  L Street for four hours. She's had a short visit
 previously.
   James is at 16th  L Street for twenty minutes. He comes back at the
 same time every week.
   Kris is at 16th  L Street for ten hours.
   Rick is at 16th  L Street for eight hours every night.
   Samantha has been there for three days and four hours.

 16th  L Street is the address of a Planned Parenthood in Washington, DC.

   Jane is having a physical.
   Carla is having an abortion.
   James receives his medication there. By visit time, location, and
 frequency, he is likely a trans guy. If his appointments were every
 two weeks, the metadata would indicate that James is a trans woman.
   Kris is protesting there.
   Rick works in an office in the same building.
   Samantha dropped her phone in the Farragut West Metro Station and
 has been looking for it ever since.

 And that's just location data. If one calls a physician every day,
 perhaps they have a major medical problem. If a crime happens on the
 other side of town, and you suddenly start calling attorneys... did
 you do it?  There are numerous explanations for either of those
 scenarios, but this kind of metadata in isolation can be used to tell
 almost any story you want.

 Stay safe out there.

 best,
 Griffin Boyce

 --
 Technical Program Associate, Open Technology Institute
 #Foucault / PGP: 0xAE792C97 / OTR: sa...@jabber.ccc.de
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech




-- 
David Golumbia
dgolum...@gmail.com
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Why Metadata Matters

2013-06-06 Thread Anthony Papillion
On 06/06/2013 01:39 PM, Buddhadeb Halder wrote:
 It is really interesting!
 However, I have some basic and silly questions?
 1. How does metadata work?
 2. Is there any connection among location data, metadata and big dada?

Buddha:

1. Metadata is the information associated with, say, a call, a tweet, a
post, whatever. It includes location data, IP address, network names,
etc. It's information 'about' the communication but not the contents
'of' the communication.

2. Yes. Government can use metadata to build relationship models, track
peoples whereabouts, confirm locations, and a variety of other things.

HTH,
Anthony


-- 
Anthony Papillion
Phone:   1.918.533.9699
SIP: sip:cajuntec...@iptel.org
iNum:+883510008360912
XMPP:cypherpun...@jit.si

www.cajuntechie.org
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Why Metadata Matters

2013-06-06 Thread Katitza Rodriguez
Even the UN Special Rapporteur on Freedom of Expression made clear why 
metadata matters in his latest report.


Here is my take on his report.
https://www.eff.org/deeplinks/2013/06/internet-and-surveillance-UN-makes-the-connection

The report is cited in the article
http://www.ohchr.org/Documents/HRBodies/HRCouncil/RegularSession/Session23/A.HRC.23.40_EN.pdf

On 6/6/13 1:44 PM, Griffin Boyce wrote:

   I see a lot of people wondering why metadata matters.  But they
don't know *what* you're doing there!  So I'll give a short example
to illustrate how metadata can be used to not only determine who
someone is talking to, but also to invade their privacy and uncover
the most intimate details of their life.

   Jane is at 16th  L Street for an hour.
   Carla is at 16th  L Street for four hours. She's had a short visit
previously.
   James is at 16th  L Street for twenty minutes. He comes back at the
same time every week.
   Kris is at 16th  L Street for ten hours.
   Rick is at 16th  L Street for eight hours every night.
   Samantha has been there for three days and four hours.

16th  L Street is the address of a Planned Parenthood in Washington, DC.

   Jane is having a physical.
   Carla is having an abortion.
   James receives his medication there. By visit time, location, and
frequency, he is likely a trans guy. If his appointments were every
two weeks, the metadata would indicate that James is a trans woman.
   Kris is protesting there.
   Rick works in an office in the same building.
   Samantha dropped her phone in the Farragut West Metro Station and
has been looking for it ever since.

And that's just location data. If one calls a physician every day,
perhaps they have a major medical problem. If a crime happens on the
other side of town, and you suddenly start calling attorneys... did
you do it?  There are numerous explanations for either of those
scenarios, but this kind of metadata in isolation can be used to tell
almost any story you want.

Stay safe out there.

best,
Griffin Boyce




--
Katitza Rodriguez
International Rights Director
Electronic Frontier Foundation
kati...@eff.org
kati...@datos-personales.org (personal email)

Please support EFF - Working to protect your digital rights and freedom of 
speech since 1990

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Why Metadata Matters

2013-06-06 Thread Bruce Potter at IRF
The other point worth keeping in mind is that NSA can keep this data forever 
(hence the humoungous cyber farm NSA is building in Utah) --

So a decade from now they can check the metadata to see if it fits some theory 
a paranoid analyst thinks might have happened half a lifetime ago.

bp


On Jun 6, 2013, at 1:44 PM, Griffin Boyce griffinbo...@gmail.com wrote:

  I see a lot of people wondering why metadata matters.  But they
 don't know *what* you're doing there!  So I'll give a short example
 to illustrate how metadata can be used to not only determine who
 someone is talking to, but also to invade their privacy and uncover
 the most intimate details of their life.
 
  Jane is at 16th  L Street for an hour.
  Carla is at 16th  L Street for four hours. She's had a short visit
 previously.
  James is at 16th  L Street for twenty minutes. He comes back at the
 same time every week.
  Kris is at 16th  L Street for ten hours.
  Rick is at 16th  L Street for eight hours every night.
  Samantha has been there for three days and four hours.
 
 16th  L Street is the address of a Planned Parenthood in Washington, DC.
 
  Jane is having a physical.
  Carla is having an abortion.
  James receives his medication there. By visit time, location, and
 frequency, he is likely a trans guy. If his appointments were every
 two weeks, the metadata would indicate that James is a trans woman.
  Kris is protesting there.
  Rick works in an office in the same building.
  Samantha dropped her phone in the Farragut West Metro Station and
 has been looking for it ever since.
 
 And that's just location data. If one calls a physician every day,
 perhaps they have a major medical problem. If a crime happens on the
 other side of town, and you suddenly start calling attorneys... did
 you do it?  There are numerous explanations for either of those
 scenarios, but this kind of metadata in isolation can be used to tell
 almost any story you want.
 
 Stay safe out there.
 
 best,
 Griffin Boyce
 
 -- 
 Technical Program Associate, Open Technology Institute
 #Foucault / PGP: 0xAE792C97 / OTR: sa...@jabber.ccc.de
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator atcompa...@stanford.edu or changing your settings 
 athttps://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Why Metadata Matters

2013-06-06 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


I'm glad someone brought up the NSA datacentre. I was thinking is there any 
connection to this? How far is it to being finished? Is that public 
knowledge/possible to find out?

It wouldn't warrant this amount of data, which I would expect is pretty small 
in comparison to the capabilities of this NSA datacentre?

Probably too far fetched an idea...

On 6 Jun 2013, at 22:27, Bruce Potter at IRF wrote:

 The other point worth keeping in mind is that NSA can keep this data forever 
 (hence the humoungous cyber farm NSA is building in Utah) --
 
 So a decade from now they can check the metadata to see if it fits some 
 theory a paranoid analyst thinks might have happened half a lifetime ago.
 
 bp
 
 
 On Jun 6, 2013, at 1:44 PM, Griffin Boyce griffinbo...@gmail.com wrote:
 
  I see a lot of people wondering why metadata matters.  But they
 don't know *what* you're doing there!  So I'll give a short example
 to illustrate how metadata can be used to not only determine who
 someone is talking to, but also to invade their privacy and uncover
 the most intimate details of their life.
 
  Jane is at 16th  L Street for an hour.
  Carla is at 16th  L Street for four hours. She's had a short visit
 previously.
  James is at 16th  L Street for twenty minutes. He comes back at the
 same time every week.
  Kris is at 16th  L Street for ten hours.
  Rick is at 16th  L Street for eight hours every night.
  Samantha has been there for three days and four hours.
 
 16th  L Street is the address of a Planned Parenthood in Washington, DC.
 
  Jane is having a physical.
  Carla is having an abortion.
  James receives his medication there. By visit time, location, and
 frequency, he is likely a trans guy. If his appointments were every
 two weeks, the metadata would indicate that James is a trans woman.
  Kris is protesting there.
  Rick works in an office in the same building.
  Samantha dropped her phone in the Farragut West Metro Station and
 has been looking for it ever since.
 
 And that's just location data. If one calls a physician every day,
 perhaps they have a major medical problem. If a crime happens on the
 other side of town, and you suddenly start calling attorneys... did
 you do it?  There are numerous explanations for either of those
 scenarios, but this kind of metadata in isolation can be used to tell
 almost any story you want.
 
 Stay safe out there.
 
 best,
 Griffin Boyce
 
 -- 
 Technical Program Associate, Open Technology Institute
 #Foucault / PGP: 0xAE792C97 / OTR: sa...@jabber.ccc.de
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator atcompa...@stanford.edu or changing your settings 
 athttps://mailman.stanford.edu/mailman/listinfo/liberationtech
 
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJRsQByAAoJENsz1IO7MIrrtAoIAM1H67FVvGHcrlw4PyLXf98z
gYr67C3tvIsN1N8knasQjwdeJ7zLtGaoLUYjgQ7JdhdZfaJwWL4ashgBO+KCMbyZ
o239wW/m61A3DkhOdq0GLTEGKTBL70EKwX0mAHWrbYkI1hhRfGsGj7QiNqNl1G6f
9IPj8av0IHSMp5VuCKNX4zPuBBgpx/gs+Kiw4Na4JhFcdYIcko2BFa8NgxLYVHiZ
FXesc14gWtmbY8tLgjy6k0QzHg6LXmqbpNlKJ5d5rvQYvx6ZoL055lIaLAEI+8JT
0xkuaClw37dUW/63tNjD1LxgsCJQFj0Otuuj+k4CWuB5dssHwN1VMvp07N7txb4=
=ojaX
-END PGP SIGNATURE-
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Airline Shutdown Because of Loss of Internet Service?

2013-06-06 Thread michael gurstein
Is this kind of event an argument against net neutrality?

 

M

 

From: liberationtech-boun...@lists.stanford.edu
[mailto:liberationtech-boun...@lists.stanford.edu] On Behalf Of Andrés
Leopoldo Pacheco Sanfuentes
Sent: Thursday, June 06, 2013 6:05 AM
To: liberationtech
Subject: Re: [liberationtech] Airline Shutdown Because of Loss of Internet
Service?

 

One thing that comes to mind right away is that more  more companies are
replacing private-circuit based WANs by Internet-VPNs,  thus, when the
Internet is down, their network is down; even more, if they depend on any
SaaS (from Salesforce.com for CRM to Maximo for Asset management), or, in
general, XaaS (AWS, Rackspace, etc.), for critical business systems, a
fast-growing trend, the Internet is their backbone.

On Jun 6, 2013 2:45 AM, michael gurstein gurst...@gmail.com wrote:

This is probably not a Liberation issue directly but I'm not sure where else
to address it...

Sunday I was flying (Porter Airlines--small short hop Canadian carrier) from
NYC to Ottawa, ON with a plane change in Toronto. When we arrived in Toronto
we were informed that because the Internet was down planes were not able
to land or depart.  The company's service was completely shut down for
roughly 4 hours until the Internet service was restored (presumably by
their ISP).

I understand that other airlines have had similar experiences recently.

My question... how exactly is Internet service so intertwined with flight
operations that service can function only if the Internet is operational?
(And I guess the Liberation angle... if this is now pervasive for all
airlines what is the hackable element of all this and where are the points
of vulnerability etc.etc.?

M



--
Too many emails? Unsubscribe, change to digest, or change password by
emailing moderator at compa...@stanford.edu or changing your settings at
https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Why Metadata Matters

2013-06-06 Thread David Golumbia
let's just presume that there are parallel arrangements with every other
major provider of not just telephony but other forms of electronic
communication. and a Google-like persistent shadow copy of whatever parts
of the web can be reached. and some neat layers of indexing and
categorization metadata of their own. that should bring the disks up to at
least 5% full.

which definitely leaves no room for a copy of the Bill of Rights (or, for
that matter, the Constitution itself).


On Thu, Jun 6, 2013 at 5:34 PM, Bernard Tyers - ei8fdb ei8...@ei8fdb.orgwrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1


 I'm glad someone brought up the NSA datacentre. I was thinking is there
 any connection to this? How far is it to being finished? Is that public
 knowledge/possible to find out?

 It wouldn't warrant this amount of data, which I would expect is pretty
 small in comparison to the capabilities of this NSA datacentre?

 Probably too far fetched an idea...

 On 6 Jun 2013, at 22:27, Bruce Potter at IRF wrote:

  The other point worth keeping in mind is that NSA can keep this data
 forever (hence the humoungous cyber farm NSA is building in Utah) --
 
  So a decade from now they can check the metadata to see if it fits some
 theory a paranoid analyst thinks might have happened half a lifetime ago.
 
  bp
 
 
  On Jun 6, 2013, at 1:44 PM, Griffin Boyce griffinbo...@gmail.com
 wrote:
 
   I see a lot of people wondering why metadata matters.  But they
  don't know *what* you're doing there!  So I'll give a short example
  to illustrate how metadata can be used to not only determine who
  someone is talking to, but also to invade their privacy and uncover
  the most intimate details of their life.
 
   Jane is at 16th  L Street for an hour.
   Carla is at 16th  L Street for four hours. She's had a short visit
  previously.
   James is at 16th  L Street for twenty minutes. He comes back at the
  same time every week.
   Kris is at 16th  L Street for ten hours.
   Rick is at 16th  L Street for eight hours every night.
   Samantha has been there for three days and four hours.
 
  16th  L Street is the address of a Planned Parenthood in Washington,
 DC.
 
   Jane is having a physical.
   Carla is having an abortion.
   James receives his medication there. By visit time, location, and
  frequency, he is likely a trans guy. If his appointments were every
  two weeks, the metadata would indicate that James is a trans woman.
   Kris is protesting there.
   Rick works in an office in the same building.
   Samantha dropped her phone in the Farragut West Metro Station and
  has been looking for it ever since.
 
  And that's just location data. If one calls a physician every day,
  perhaps they have a major medical problem. If a crime happens on the
  other side of town, and you suddenly start calling attorneys... did
  you do it?  There are numerous explanations for either of those
  scenarios, but this kind of metadata in isolation can be used to tell
  almost any story you want.
 
  Stay safe out there.
 
  best,
  Griffin Boyce
 
  --
  Technical Program Associate, Open Technology Institute
  #Foucault / PGP: 0xAE792C97 / OTR: sa...@jabber.ccc.de
  --
  Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator atcompa...@stanford.edu or changing your settings
 athttps://mailman.stanford.edu/mailman/listinfo/liberationtech
 
  --
  Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

 - --
 Bernard / bluboxthief / ei8fdb

 IO91XM / www.ei8fdb.org

 -BEGIN PGP SIGNATURE-
 Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
 Comment: GPGTools - http://gpgtools.org

 iQEcBAEBAgAGBQJRsQByAAoJENsz1IO7MIrrtAoIAM1H67FVvGHcrlw4PyLXf98z
 gYr67C3tvIsN1N8knasQjwdeJ7zLtGaoLUYjgQ7JdhdZfaJwWL4ashgBO+KCMbyZ
 o239wW/m61A3DkhOdq0GLTEGKTBL70EKwX0mAHWrbYkI1hhRfGsGj7QiNqNl1G6f
 9IPj8av0IHSMp5VuCKNX4zPuBBgpx/gs+Kiw4Na4JhFcdYIcko2BFa8NgxLYVHiZ
 FXesc14gWtmbY8tLgjy6k0QzHg6LXmqbpNlKJ5d5rvQYvx6ZoL055lIaLAEI+8JT
 0xkuaClw37dUW/63tNjD1LxgsCJQFj0Otuuj+k4CWuB5dssHwN1VMvp07N7txb4=
 =ojaX
 -END PGP SIGNATURE-
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech




-- 
David Golumbia
dgolum...@gmail.com
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

[liberationtech] Question about otr.js

2013-06-06 Thread Anthony Papillion
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

I'm thinking about working on a web app that would use otr.js to
enable OTR chat via the way (probably similar to Cryptocat).  Does
anyone know what the security status of otr.js is? Has it been vetted?
If not, what is the recommended (vetted) Javascript way of doing OTR?

Thanks,
Anthony

- -- 
Anthony Papillion
Phone:   1.918.533.9699
SIP: sip:cajuntec...@iptel.org
iNum:+883510008360912
XMPP:cypherpun...@jit.si

www.cajuntechie.org


-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=dBbm
-END PGP SIGNATURE-
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


[liberationtech] NSA has direct access to tech giants' systems for user data, secret ppt reveals

2013-06-06 Thread Michael Carbone
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Guardian:
http://www.guardian.co.uk/world/2013/jun/06/us-tech-giants-nsa-data

WaPo:
http://www.washingtonpost.com/investigations/us-intelligence-mining-data-from-nine-us-internet-companies-in-broad-secret-program/2013/06/06/3a0c0da8-cebf-11e2-8845-d970ccb04497_story_1.html

some of the slides (haven't seen the full ppt drop):
http://www.washingtonpost.com/wp-srv/special/politics/prism-collection-documents/

Participating companies in chronological order: Microsoft, Yahoo,
Google, Facebook, PalTalk, YouTube, Skype, AOL, Apple. Dropbox
apparently next up.

- -- 
Michael Carbone
Manager of Tech Policy  Programs
Access | https://www.accessnow.org
mich...@accessnow.org | PGP: 0x81B7A13E
PGP Fingerprint: 25EC 1D0F 2D44 C4F4 5BEF EF83 C471 AD94 81B7 A13E

-BEGIN PGP SIGNATURE-
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=NvtB
-END PGP SIGNATURE-
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Question about otr.js

2013-06-06 Thread Steve Weis
The status is:
[otr.js] hasn't been properly vetted by security researchers. Do not use
in life and death situations!
https://github.com/arlolra/otr#warning

On Thu, Jun 6, 2013 at 3:14 PM, Anthony Papillion anth...@cajuntechie.org
wrote:
 I'm thinking about working on a web app that would use otr.js to
 enable OTR chat via the way (probably similar to Cryptocat).  Does
 anyone know what the security status of otr.js is? Has it been vetted?
 If not, what is the recommended (vetted) Javascript way of doing OTR?
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Why Metadata Matters

2013-06-06 Thread Griffin Boyce
Kate Krauss ka...@critpath.org wrote:
 Thanks for writing this. Can you quickly post this somewhere I can link to?
 Or I can post it on the APP blog and link to that--

  This is released under a creative commons license, so everyone can
feel free to copy it to their blog or mailing list as long as
attribution is given.  The link to this post on libtech is:
https://mailman.stanford.edu/pipermail/liberationtech/2013-June/008647.html
 (the format is pretty plain though)

best,
Griffin

--
Just another hacker in the City of Spies.
#Foucault / PGP: 0xAE792C97 / OTR: sa...@jabber.ccc.de

My posts, while frequently amusing, are not representative of the
thoughts of my employer.
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] Question about otr.js

2013-06-06 Thread Nadim Kobeissi
Speaking as the lead developer for Cryptocat:
OTR.js actually has had some vetting. We're keeping it experimental simply due 
to the experimental nature of web cryptography as a whole. It's a handy library 
that has had a lot of consideration put into it, but it really depends on your 
use case and threat model. If you want to use it to keep conversations private 
in moderate situations, go ahead. If you want to use it to keep conversations 
private against an authoritarian regime/sprawling surveillance mechanism, think 
twice. Overall I find it really hard to tell whether it's safe enough without 
knowing your threat model. For example, if your threat model includes a 
likelihood of someone backdooring your hardware, pretty much nothing can help 
you.

If you're considering building your own app and using OTR.js as a library, I 
beseech you to be careful regarding code delivery mechanisms and XSS 
considerations. Specifically, please use signed browser plugins as a code 
delivery mechanism and make sure the rest of your app, including outside of 
OTR.js, is audited against XSS, code injection, and so on. Those kind of 
threats tend to be far more common than library bugs.

NK


On 2013-06-06, at 7:49 PM, Steve Weis stevew...@gmail.com wrote:

 The status is:
 [otr.js] hasn't been properly vetted by security researchers. Do not use in 
 life and death situations!
 https://github.com/arlolra/otr#warning
 
 On Thu, Jun 6, 2013 at 3:14 PM, Anthony Papillion anth...@cajuntechie.org 
 wrote:
  I'm thinking about working on a web app that would use otr.js to
  enable OTR chat via the way (probably similar to Cryptocat).  Does
  anyone know what the security status of otr.js is? Has it been vetted?
  If not, what is the recommended (vetted) Javascript way of doing OTR?
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] NSA, FBI, Verizon caught red handed spying on US citizens in the US

2013-06-06 Thread Pavol Luptak
On Thu, Jun 06, 2013 at 12:56:33PM -0500, Andrés Leopoldo Pacheco Sanfuentes 
wrote:
 If the US government starts a war, it doesn't matter if 49.99% opposed
 it. It's still going on and people get killed. For those people, and
 their circles, the US government is MONOLITHIC.

https://fbcdn-sphotos-c-a.akamaihd.net/hphotos-ak-ash3/942400_478286445573487_2110837671_n.jpg
-- 
___
[wil...@trip.sk] [http://trip.sk/wilder/] [talker: ttt.sk 5678]
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] NSA has direct access to tech giants' systems for user data, secret ppt reveals

2013-06-06 Thread Tom Ritter
On Jun 6, 2013 7:28 PM, Eduardo Robles Elvira edu...@gmail.com wrote:

 Hello

 NSA just $20M of budget? The same NSA that is building a data center
 (for processing what? =) for 869 million USD$ in Maryland?


http://hardware.slashdot.org/story/13/06/06/2129249/nsa-building-860-million-data-center-in-maryland

The $20 million figure refers to the budget for the Prism program, not the
whole NSA.

-tom
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] NSA has direct access to tech giants' systems for user data, secret ppt reveals

2013-06-06 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Still that figures seems awfully small. For whats involved. I've seen telco 
projects of a fraction the size of something like this costing £10M.

Unless they've managed to get the companies to foot the majority of the bill?

In that case, why would the companies accept the majority of the costs?

Too many questions and too many possibilities for conspiracy theories..

On 7 Jun 2013, at 01:14, Tom Ritter wrote:

 On Jun 6, 2013 7:28 PM, Eduardo Robles Elvira edu...@gmail.com wrote:
 
  Hello
 
  NSA just $20M of budget? The same NSA that is building a data center
  (for processing what? =) for 869 million USD$ in Maryland?
 
  http://hardware.slashdot.org/story/13/06/06/2129249/nsa-building-860-million-data-center-in-maryland
 
 The $20 million figure refers to the budget for the Prism program, not the 
 whole NSA.
 
 -tom
 
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJRsSbLAAoJENsz1IO7MIrrOHgIALc4QgXsSOiUlJeB1YTHDAdI
IH1dITgo8Oo2WzWpTg6ky3zG+G0TykJyFvhWRVJdLH7rBEZocL1/tRHX+p3FuiA5
vTWHiDqy1dgUgXuew7OvTpNVaYtWM8aLOkSLGhPVbtVx2N/hGFQbWY+E5NNoYkm6
VIZHjK03ZTcviUQkiXiQxWfWjr/u8MJdMjgNyd8/Sz3pSMdEztQP986G99WGJQ/u
9Pcl6jqWC5rD7XDOull/erknUglq1IVmz7VH/l1GsC/9Xmi1WdQHvKvPgJqebUWv
0jw3wM+eVe17MZuLmtKf6v9NnMid8WkOXybL7C3HgXhbJmPAMWamr3FgC2Zx9N4=
=BMwp
-END PGP SIGNATURE-
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] NSA has direct access to tech giants' systems for user data, secret ppt reveals

2013-06-06 Thread Andrew Lewis
It might be that PRISM is merely the end user tool for use by analysts at the 
NSA, and that the actual gathering of info falls under another program 
designation, with a much larger budget. 

PRISM isn't really even that illegal, as long as they discard communications 
considered to be American. The NSA has been listening to radio signals from 
all over the world for years, from military bases strategically positioned to 
pickup radio signals of interest, amongst other types of communication data. 
This is really just the extension of similar ideas, to a new form of 
communications, the novel part of the whole thing is that it leverages the fact 
that so many tech companies are located in the US and that a ton of the 
internet backbone is run through America. 

-Andrew

On Jun 7, 2013, at 12:18 PM, Bernard Tyers - ei8fdb ei8...@ei8fdb.org wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Still that figures seems awfully small. For whats involved. I've seen telco 
 projects of a fraction the size of something like this costing £10M.
 
 Unless they've managed to get the companies to foot the majority of the bill?
 
 In that case, why would the companies accept the majority of the costs?
 
 Too many questions and too many possibilities for conspiracy theories..
 
 On 7 Jun 2013, at 01:14, Tom Ritter wrote:
 
 On Jun 6, 2013 7:28 PM, Eduardo Robles Elvira edu...@gmail.com wrote:
 
 Hello
 
 NSA just $20M of budget? The same NSA that is building a data center
 (for processing what? =) for 869 million USD$ in Maryland?
 
 http://hardware.slashdot.org/story/13/06/06/2129249/nsa-building-860-million-data-center-in-maryland
 
 The $20 million figure refers to the budget for the Prism program, not the 
 whole NSA.
 
 -tom
 
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
 
 - --
 Bernard / bluboxthief / ei8fdb
 
 IO91XM / www.ei8fdb.org
 
 -BEGIN PGP SIGNATURE-
 Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
 Comment: GPGTools - http://gpgtools.org
 
 iQEcBAEBAgAGBQJRsSbLAAoJENsz1IO7MIrrOHgIALc4QgXsSOiUlJeB1YTHDAdI
 IH1dITgo8Oo2WzWpTg6ky3zG+G0TykJyFvhWRVJdLH7rBEZocL1/tRHX+p3FuiA5
 vTWHiDqy1dgUgXuew7OvTpNVaYtWM8aLOkSLGhPVbtVx2N/hGFQbWY+E5NNoYkm6
 VIZHjK03ZTcviUQkiXiQxWfWjr/u8MJdMjgNyd8/Sz3pSMdEztQP986G99WGJQ/u
 9Pcl6jqWC5rD7XDOull/erknUglq1IVmz7VH/l1GsC/9Xmi1WdQHvKvPgJqebUWv
 0jw3wM+eVe17MZuLmtKf6v9NnMid8WkOXybL7C3HgXhbJmPAMWamr3FgC2Zx9N4=
 =BMwp
 -END PGP SIGNATURE-
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] NSA has direct access to tech giants' systems for user data, secret ppt reveals

2013-06-06 Thread Peter Eckersley
Of course, I was reading to fast and leaning to heavily on control+f.

Anyway, 20 million annually seems like a very low number by the usual
standards of efficiency in Department of Defense programs.  But the NSA
might already have a data storage, processing and query architecture in
place that is either not included in this budget or only included on a
marginal cost basis.

On 6 June 2013 16:45, Peter Eckersley peter.eckers...@gmail.com wrote:

 Where did you get the $20m budget number from?  I can't find it in any of
 the stories or attached materials.  But I could be missing something.


 On 6 June 2013 16:14, x z xhzh...@gmail.com wrote:

 doesn't seem real to me.  especially the part *direct access to servers*of 
 firms ..., and with an annual budget of measly $20m.


 2013/6/6 Michael Carbone mich...@accessnow.org

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Guardian:
 http://www.guardian.co.uk/world/2013/jun/06/us-tech-giants-nsa-data

 WaPo:

 http://www.washingtonpost.com/investigations/us-intelligence-mining-data-from-nine-us-internet-companies-in-broad-secret-program/2013/06/06/3a0c0da8-cebf-11e2-8845-d970ccb04497_story_1.html

 some of the slides (haven't seen the full ppt drop):

 http://www.washingtonpost.com/wp-srv/special/politics/prism-collection-documents/

 Participating companies in chronological order: Microsoft, Yahoo,
 Google, Facebook, PalTalk, YouTube, Skype, AOL, Apple. Dropbox
 apparently next up.

 - --
 Michael Carbone
 Manager of Tech Policy  Programs
 Access | https://www.accessnow.org
 mich...@accessnow.org | PGP: 0x81B7A13E
 PGP Fingerprint: 25EC 1D0F 2D44 C4F4 5BEF EF83 C471 AD94 81B7 A13E

 -BEGIN PGP SIGNATURE-

 iQIcBAEBAgAGBQJRsQujAAoJEDH9usG3Jz33lFoP/1vRZ6qTJhlvShNtfktlSB9x
 qxlHoFJBu4DV6YzEGPNnshb+hRiTk4iC+bksmBIIvZ5WZVVUUR3japU7QtOMhKtr
 +YAkxlStumySUBPEyx2t83VDv2d2yYhKxPDELVhs4lxeY+IS1pxN7wv3SulkI5qM
 1UciTdL1ok4t9jerWQf/g9wxmWm5GNF7hVHMQu3uI7lYgCIIupoWggj43nGu2dYR
 CUQ6j+e6H7KpusabNx8DlDujCw1/Pfxb/kkvz5tT9tJfZucZ26sMpjJZTDKWHCfs
 TITJAUQg0g7eAoh5ehzxGBamjiPwKwXdfomg2QP9f6Rq4WCh2EBsBL0grbMA6K2e
 Y83J+2oInCdnpxDTvQfk41uFdh2awg7QPrndt9s9XwOY5ShUj+BH4L/6dkGtZG4r
 iadK/JD7YU5cgI+m4HQab7+b/CSB2P4a+57XP4Hfz7aNYfe+jPjBJbEl46Srnbg2
 5xCcgYGJQSoGGvxCDJYLwjZdFo/t7XFspCrfcuIMvKr9njVJgffeW+5qS0czqC9D
 vaNhS5TQ4O6pXsA2jTpbDyqNN/HbLXCupgLyUq9Kh+dYYUeaavwGQj/CwsMD0SKe
 CRykJUW1VTtu0BXbT86et47yAldsdYc/fuhnoONWDCP5WOu9he/SXDfQELeyH/KG
 FRpkJRX7ijLlTySwbbpD
 =NvtB
 -END PGP SIGNATURE-
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings
 at https://mailman.stanford.edu/mailman/listinfo/liberationtech



 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech




 --
 Peter




-- 
Peter
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] NSA has direct access to tech giants' systems for user data, secret ppt reveals

2013-06-06 Thread Peter Eckersley
Where did you get the $20m budget number from?  I can't find it in any of
the stories or attached materials.  But I could be missing something.

On 6 June 2013 16:14, x z xhzh...@gmail.com wrote:

 doesn't seem real to me.  especially the part *direct access to servers*of 
 firms ..., and with an annual budget of measly $20m.


 2013/6/6 Michael Carbone mich...@accessnow.org

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Guardian:
 http://www.guardian.co.uk/world/2013/jun/06/us-tech-giants-nsa-data

 WaPo:

 http://www.washingtonpost.com/investigations/us-intelligence-mining-data-from-nine-us-internet-companies-in-broad-secret-program/2013/06/06/3a0c0da8-cebf-11e2-8845-d970ccb04497_story_1.html

 some of the slides (haven't seen the full ppt drop):

 http://www.washingtonpost.com/wp-srv/special/politics/prism-collection-documents/

 Participating companies in chronological order: Microsoft, Yahoo,
 Google, Facebook, PalTalk, YouTube, Skype, AOL, Apple. Dropbox
 apparently next up.

 - --
 Michael Carbone
 Manager of Tech Policy  Programs
 Access | https://www.accessnow.org
 mich...@accessnow.org | PGP: 0x81B7A13E
 PGP Fingerprint: 25EC 1D0F 2D44 C4F4 5BEF EF83 C471 AD94 81B7 A13E

 -BEGIN PGP SIGNATURE-

 iQIcBAEBAgAGBQJRsQujAAoJEDH9usG3Jz33lFoP/1vRZ6qTJhlvShNtfktlSB9x
 qxlHoFJBu4DV6YzEGPNnshb+hRiTk4iC+bksmBIIvZ5WZVVUUR3japU7QtOMhKtr
 +YAkxlStumySUBPEyx2t83VDv2d2yYhKxPDELVhs4lxeY+IS1pxN7wv3SulkI5qM
 1UciTdL1ok4t9jerWQf/g9wxmWm5GNF7hVHMQu3uI7lYgCIIupoWggj43nGu2dYR
 CUQ6j+e6H7KpusabNx8DlDujCw1/Pfxb/kkvz5tT9tJfZucZ26sMpjJZTDKWHCfs
 TITJAUQg0g7eAoh5ehzxGBamjiPwKwXdfomg2QP9f6Rq4WCh2EBsBL0grbMA6K2e
 Y83J+2oInCdnpxDTvQfk41uFdh2awg7QPrndt9s9XwOY5ShUj+BH4L/6dkGtZG4r
 iadK/JD7YU5cgI+m4HQab7+b/CSB2P4a+57XP4Hfz7aNYfe+jPjBJbEl46Srnbg2
 5xCcgYGJQSoGGvxCDJYLwjZdFo/t7XFspCrfcuIMvKr9njVJgffeW+5qS0czqC9D
 vaNhS5TQ4O6pXsA2jTpbDyqNN/HbLXCupgLyUq9Kh+dYYUeaavwGQj/CwsMD0SKe
 CRykJUW1VTtu0BXbT86et47yAldsdYc/fuhnoONWDCP5WOu9he/SXDfQELeyH/KG
 FRpkJRX7ijLlTySwbbpD
 =NvtB
 -END PGP SIGNATURE-
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech



 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech




-- 
Peter
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Why Metadata Matters

2013-06-06 Thread Matt Johnson
Griffen, your example is flawed. The data being reported by Verizon is
call duration, not how long someone is at a particular place. So
someone with that data could say that Jane made a call from 16th  L,
but not how she stayed there after the call ended.

--
Matt

On Thu, Jun 6, 2013 at 10:44 AM, Griffin Boyce griffinbo...@gmail.com wrote:
   I see a lot of people wondering why metadata matters.  But they
 don't know *what* you're doing there!  So I'll give a short example
 to illustrate how metadata can be used to not only determine who
 someone is talking to, but also to invade their privacy and uncover
 the most intimate details of their life.

   Jane is at 16th  L Street for an hour.
   Carla is at 16th  L Street for four hours. She's had a short visit
 previously.
   James is at 16th  L Street for twenty minutes. He comes back at the
 same time every week.
   Kris is at 16th  L Street for ten hours.
   Rick is at 16th  L Street for eight hours every night.
   Samantha has been there for three days and four hours.

 16th  L Street is the address of a Planned Parenthood in Washington, DC.

   Jane is having a physical.
   Carla is having an abortion.
   James receives his medication there. By visit time, location, and
 frequency, he is likely a trans guy. If his appointments were every
 two weeks, the metadata would indicate that James is a trans woman.
   Kris is protesting there.
   Rick works in an office in the same building.
   Samantha dropped her phone in the Farragut West Metro Station and
 has been looking for it ever since.

 And that's just location data. If one calls a physician every day,
 perhaps they have a major medical problem. If a crime happens on the
 other side of town, and you suddenly start calling attorneys... did
 you do it?  There are numerous explanations for either of those
 scenarios, but this kind of metadata in isolation can be used to tell
 almost any story you want.

 Stay safe out there.

 best,
 Griffin Boyce

 --
 Technical Program Associate, Open Technology Institute
 #Foucault / PGP: 0xAE792C97 / OTR: sa...@jabber.ccc.de
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


[liberationtech] Montreal Journalists: Privacy and Security Workshop

2013-06-06 Thread Nadim Kobeissi
Dear LibTech,
In case there are any Montreal-based journalists on the list:
I just wanted to quickly share that I'm hosting a privacy and operational 
security workshop for journalists here in Montreal, sponsored by The Link 
newspaper.

https://www.facebook.com/events/167915566718007/

It's all for free, I'm just doing it in light of the insane surveillance news 
storm this week.

Please share if you know someone in Montreal who can benefit!

NK
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech


Re: [liberationtech] NSA has direct access to tech giants' systems for user data, secret ppt reveals

2013-06-06 Thread x z
What surprised me is how Guardian and Washington Post cover this story.
The Power Point slides looks laughable to me. Maybe I should interpret
direct access to servers of firms as like when I'm typing this email I am
also having *a direct access* to Gmail's servers.

This either a ploy by some pro-privacy extremist or a prank by somebody
who's tired of these hyperbole privacy outcries.



2013/6/6 Peter Eckersley peter.eckers...@gmail.com

 Of course, I was reading to fast and leaning to heavily on control+f.

 Anyway, 20 million annually seems like a very low number by the usual
 standards of efficiency in Department of Defense programs.  But the NSA
 might already have a data storage, processing and query architecture in
 place that is either not included in this budget or only included on a
 marginal cost basis.


 On 6 June 2013 16:45, Peter Eckersley peter.eckers...@gmail.com wrote:

 Where did you get the $20m budget number from?  I can't find it in any of
 the stories or attached materials.  But I could be missing something.


 On 6 June 2013 16:14, x z xhzh...@gmail.com wrote:

 doesn't seem real to me.  especially the part *direct access to servers
 * of firms ..., and with an annual budget of measly $20m.


 2013/6/6 Michael Carbone mich...@accessnow.org

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Guardian:
 http://www.guardian.co.uk/world/2013/jun/06/us-tech-giants-nsa-data

 WaPo:

 http://www.washingtonpost.com/investigations/us-intelligence-mining-data-from-nine-us-internet-companies-in-broad-secret-program/2013/06/06/3a0c0da8-cebf-11e2-8845-d970ccb04497_story_1.html

 some of the slides (haven't seen the full ppt drop):

 http://www.washingtonpost.com/wp-srv/special/politics/prism-collection-documents/

 Participating companies in chronological order: Microsoft, Yahoo,
 Google, Facebook, PalTalk, YouTube, Skype, AOL, Apple. Dropbox
 apparently next up.

 - --
 Michael Carbone
 Manager of Tech Policy  Programs
 Access | https://www.accessnow.org
 mich...@accessnow.org | PGP: 0x81B7A13E
 PGP Fingerprint: 25EC 1D0F 2D44 C4F4 5BEF EF83 C471 AD94 81B7 A13E

 -BEGIN PGP SIGNATURE-

 iQIcBAEBAgAGBQJRsQujAAoJEDH9usG3Jz33lFoP/1vRZ6qTJhlvShNtfktlSB9x
 qxlHoFJBu4DV6YzEGPNnshb+hRiTk4iC+bksmBIIvZ5WZVVUUR3japU7QtOMhKtr
 +YAkxlStumySUBPEyx2t83VDv2d2yYhKxPDELVhs4lxeY+IS1pxN7wv3SulkI5qM
 1UciTdL1ok4t9jerWQf/g9wxmWm5GNF7hVHMQu3uI7lYgCIIupoWggj43nGu2dYR
 CUQ6j+e6H7KpusabNx8DlDujCw1/Pfxb/kkvz5tT9tJfZucZ26sMpjJZTDKWHCfs
 TITJAUQg0g7eAoh5ehzxGBamjiPwKwXdfomg2QP9f6Rq4WCh2EBsBL0grbMA6K2e
 Y83J+2oInCdnpxDTvQfk41uFdh2awg7QPrndt9s9XwOY5ShUj+BH4L/6dkGtZG4r
 iadK/JD7YU5cgI+m4HQab7+b/CSB2P4a+57XP4Hfz7aNYfe+jPjBJbEl46Srnbg2
 5xCcgYGJQSoGGvxCDJYLwjZdFo/t7XFspCrfcuIMvKr9njVJgffeW+5qS0czqC9D
 vaNhS5TQ4O6pXsA2jTpbDyqNN/HbLXCupgLyUq9Kh+dYYUeaavwGQj/CwsMD0SKe
 CRykJUW1VTtu0BXbT86et47yAldsdYc/fuhnoONWDCP5WOu9he/SXDfQELeyH/KG
 FRpkJRX7ijLlTySwbbpD
 =NvtB
 -END PGP SIGNATURE-
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings
 at https://mailman.stanford.edu/mailman/listinfo/liberationtech



 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings
 at https://mailman.stanford.edu/mailman/listinfo/liberationtech




 --
 Peter




 --
 Peter
 --
 Too many emails? Unsubscribe, change to digest, or change password by
 emailing moderator at compa...@stanford.edu or changing your settings at
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] NSA has direct access to tech giants' systems for user data, secret ppt reveals

2013-06-06 Thread Andrew Lewis
There seems to be some confirmation via this statement from the DNI:

http://www.dni.gov/index.php/newsroom/press-releases/191-press-releases-2013/869-dni-statement-on-activities-authorized-under-section-702-of-fisa

On Jun 7, 2013, at 4:23 PM, x z xhzh...@gmail.com wrote:

 What surprised me is how Guardian and Washington Post cover this story. The 
 Power Point slides looks laughable to me. Maybe I should interpret direct 
 access to servers of firms as like when I'm typing this email I am also 
 having a direct access to Gmail's servers.
 
 This either a ploy by some pro-privacy extremist or a prank by somebody 
 who's tired of these hyperbole privacy outcries.
 
 
 
 2013/6/6 Peter Eckersley peter.eckers...@gmail.com
 Of course, I was reading to fast and leaning to heavily on control+f.
 
 Anyway, 20 million annually seems like a very low number by the usual 
 standards of efficiency in Department of Defense programs.  But the NSA might 
 already have a data storage, processing and query architecture in place that 
 is either not included in this budget or only included on a marginal cost 
 basis.
 
 
 On 6 June 2013 16:45, Peter Eckersley peter.eckers...@gmail.com wrote:
 Where did you get the $20m budget number from?  I can't find it in any of the 
 stories or attached materials.  But I could be missing something.
 
 
 On 6 June 2013 16:14, x z xhzh...@gmail.com wrote:
 doesn't seem real to me.  especially the part direct access to servers of 
 firms ..., and with an annual budget of measly $20m.
 
 
 2013/6/6 Michael Carbone mich...@accessnow.org
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Guardian:
 http://www.guardian.co.uk/world/2013/jun/06/us-tech-giants-nsa-data
 
 WaPo:
 http://www.washingtonpost.com/investigations/us-intelligence-mining-data-from-nine-us-internet-companies-in-broad-secret-program/2013/06/06/3a0c0da8-cebf-11e2-8845-d970ccb04497_story_1.html
 
 some of the slides (haven't seen the full ppt drop):
 http://www.washingtonpost.com/wp-srv/special/politics/prism-collection-documents/
 
 Participating companies in chronological order: Microsoft, Yahoo,
 Google, Facebook, PalTalk, YouTube, Skype, AOL, Apple. Dropbox
 apparently next up.
 
 - --
 Michael Carbone
 Manager of Tech Policy  Programs
 Access | https://www.accessnow.org
 mich...@accessnow.org | PGP: 0x81B7A13E
 PGP Fingerprint: 25EC 1D0F 2D44 C4F4 5BEF EF83 C471 AD94 81B7 A13E
 
 -BEGIN PGP SIGNATURE-
 
 iQIcBAEBAgAGBQJRsQujAAoJEDH9usG3Jz33lFoP/1vRZ6qTJhlvShNtfktlSB9x
 qxlHoFJBu4DV6YzEGPNnshb+hRiTk4iC+bksmBIIvZ5WZVVUUR3japU7QtOMhKtr
 +YAkxlStumySUBPEyx2t83VDv2d2yYhKxPDELVhs4lxeY+IS1pxN7wv3SulkI5qM
 1UciTdL1ok4t9jerWQf/g9wxmWm5GNF7hVHMQu3uI7lYgCIIupoWggj43nGu2dYR
 CUQ6j+e6H7KpusabNx8DlDujCw1/Pfxb/kkvz5tT9tJfZucZ26sMpjJZTDKWHCfs
 TITJAUQg0g7eAoh5ehzxGBamjiPwKwXdfomg2QP9f6Rq4WCh2EBsBL0grbMA6K2e
 Y83J+2oInCdnpxDTvQfk41uFdh2awg7QPrndt9s9XwOY5ShUj+BH4L/6dkGtZG4r
 iadK/JD7YU5cgI+m4HQab7+b/CSB2P4a+57XP4Hfz7aNYfe+jPjBJbEl46Srnbg2
 5xCcgYGJQSoGGvxCDJYLwjZdFo/t7XFspCrfcuIMvKr9njVJgffeW+5qS0czqC9D
 vaNhS5TQ4O6pXsA2jTpbDyqNN/HbLXCupgLyUq9Kh+dYYUeaavwGQj/CwsMD0SKe
 CRykJUW1VTtu0BXbT86et47yAldsdYc/fuhnoONWDCP5WOu9he/SXDfQELeyH/KG
 FRpkJRX7ijLlTySwbbpD
 =NvtB
 -END PGP SIGNATURE-
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
 
 
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
 
 
 
 -- 
 Peter
 
 
 
 -- 
 Peter 
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech
 
 --
 Too many emails? Unsubscribe, change to digest, or change password by 
 emailing moderator at compa...@stanford.edu or changing your settings at 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech