Re: [liberationtech] Chaos Communication Congress

[Axel Simon]

Hi,

Actually this year there are some translations into other languages, including 
French. Not all talks will be translated into French (or Spanish, or Russian), 
but some are/will.

axel

On 27 December 2016 16:02:32 CET, Yosem Companys  wrote:
>From: Renata Avila Pinto  via
>fastafr...@lists.riseup.net
>
>The Chaos Communication Congress (largest non corporate gathering of
>computer hackers and digital experts) starts today in Hamburg, the
>program is fascinating, you can watch it online or catch up with the
>talks later.
>
>Sadly only in English.
>
>https://fahrplan.events.ccc.de/congress/2016/Fahrplan/schedule.html
>
>
>All the best and enjoy the holidays.
>
>
>
>
>-- 
>Liberationtech is public & archives are searchable on Google.
>Violations of list guidelines will get you moderated:
>https://mailman.stanford.edu/mailman/listinfo/liberationtech.
>Unsubscribe, change to digest, or change password by emailing moderator
>at compa...@stanford.edu.
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] Mapping out physical surveillance across a city

[Axel Simon]

On 25/06/14 19:03, Blibbet wrote:
 How would one map an entire city's surveillance anyway? Are the
 location of police cameras available? And even if they are, how
 does one map out all the private cameras watching?
 To the OP, Seattle Privacy http://seattleprivacy.org/ has a map of
 Seattle.gov's mesh network, at least parts of it.
(didn't see this message go through, sending it again, sorry if it did
go through the first time!)

Hi everyone,

There have been a few projects in France on this issue, the most active
I know of is www.sous-surveillance.net, which has specific subdomains
for each city (and pretty cool stickers):
http://paris.sous-surveillance.net
http://lyon.sous-surveillance.net
etc.

People can add cameras and different details : location, type, who
operates them, etc.

There is also a similar project on OpenStreetMap and quite a few cameras
are in the OSM database.
http://wiki.openstreetmap.org/wiki/Proposed_features/Key:Surveillance
http://taginfo.openstreetmap.org/keys/surveillance#map

I think in time, the plan was to merge the sous-surveillance data with
the general OSM one, but I have no idea where that plan currently stands.

I also recall seeing a similar project on Berlin a while back, but I
can't find it right now.

One question, when you say physical surveillance, are you thinking of
anything beyond surveillance cameras? Guards?

One last thing, you can sometimes find the location of city/state
cameras in open data programmes. It's the case for Paris.

Cheers

axel

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] A guide to Email Self-Defense, from the Free Software Foundation

[Axel Simon]

On 06/06/14 06:36, Nick wrote:
 Hi Zak,

 Quoth Zak Rogoff: 
 We just released this guide to GnuPG with Enigmail and are quite happy
 with it. Thanks to all of you who gave feedback on the draft. More is
 welcome :).
 This looks really great, good job! I haven't found a guide that's 
 anywhere near this approachable for people scared of technology, and 
 the infographic is also ace.

 One thing that confuses me is that you say your email program 
 without, as far as I can see, mentioning that it's thunderbird 
 specific. If people use outlook, they aren't going to get far.  
 Download and install thunderbird if you don't already have it 
 seems like a reasonable step 0 to me.

 Nick

Hi,

While I really like the idea and find it great to see the FSF doing this
kind of work, I have to say I have a few issues with this guide.

First, it tells you to “set up your email program” as if this was
obvious. Might I remind you that many, many people now only know email
as a webapp?
Also, it tells about Thunderbird but doesn't even link to it. Why?
The least we can do is tell people where to get this fancy software
we're trying to get them to install on their computers.

Section 3 with Adele was confusing to me. Maybe I was simply expecting
the actual address to which the encrypted test email is being sent to be
brought up in the first paragraph, given that I could see where this bit
of the guide was going.
Maybe explain “In this step, we will send a test email to a friendly
robot (adele...@gnupp.de) to check encryption is working properly. This
is a special step that you won't have to do when corresponding with real
people.”

Here in particular (and in general), I think this guide needs more
newlines/carriage returns and bullet points as it makes it easier to
follow the steps, ie:
- In your email program's menu, go to OpenPGP → Key Management. You
should see your key in the list that pops up.
- Right click on your key and select Send Public Keys by Email. This
will create a new draft message, as if you had just hit the Write button.
- Address the message to adele...@gnupp.de. Put at least one word
(whatever you want) in the subject and body of the email, then hit send.

Anyway, I'll stop for now, I hope this helps.

Thanks for the work!

Cheers

axel

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] A Digital Random Bit Generator

[Axel Simon]

M Knight mknight@bitmessage.ch wrote:
Sirs,

Please do not automatically assume everyone on the list is male.
Otherwise thanks for sharing, it looks interesting.

axel

I hope this information is useful -

MKRAND - A Quantum Cellular Randomness Well

This is an engineering beta of a non-deterministic Digital Random Bit
Generator.
(…)-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

[liberationtech] From Sotchi with Love: a crypto party for journalists

[Axel Simon]

Hi all,

You might be interested to know that a few activists, journalists and
RSF (Reporters Without Borders) are organizing a short cycle of crypto
parties in Paris billed “Bons Baisers de Sotchi” (From Sotchi with Love)
to help journalists protect themselves when they travel to Russia for
the next Winter Olympics.

http://fr.rsf.org/bons-baisers-de-sotchi-13-11-2013,45448.html

The first one is planned for Saturday 23rd of November.

According to the Guardian[1], “Athletes and spectators attending the
Winter Olympics in Sochi in February will face some of the most invasive
and systematic spying and surveillance in the history of the Games”.
The FSB is keen on not letting any communications escape its
surveillance it seems, and so we will be attempting to share a few good
practices to all those going to Sotchi who are interested.
Several workshops will cover things like using VPNs, encrypting your
data at rest and in transit, (attempting to) secure your smartphone
(spoiler alert, it can't really be done) as well as some OpSec and
general advice (travel with a clean laptop, etc.).

The workshops will be in French, but I'm sure we will happilly welcome
any English speakers too.

I welcome any advice, criticism or warnings about these events as well
as your help in sharing this news with people who need it.


Take care,

axel


1:
http://www.theguardian.com/world/2013/oct/06/russia-monitor-communications-sochi-winter-olympics
-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] ChatSecure (Gibberbot!) v12 for Android is out

[Axel Simon]

On 2013-10-24 12:01, Ben Laurie wrote:

On 24 October 2013 08:01, Nathan of Guardian
nat...@guardianproject.info wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


The Guardian Project’s award-winning open-source app “Gibberbot” 
for
Android, has been rebranded to “ChatSecure” for its version 12 
release,

unifying the branding with the iPhone and iPad apps, while offering
major updates in security from the device through the network.


Can you explain why it needs these permissions:

use accounts on the device
find accounts on the device
view configured accounts
add or remove accounts

?


I believe it is because ChatSecure adds its own account on the device, 
likely to enable linking with people in your usual address book.

But I'll let Nathan answer that in more detail. :)

Great stuff otherwise, congratulations to the Guardian Project!

Any chance it will appear soon in the Guardian Project f-droid repo?
It doesn't seem to be there now: gibberbot-latest.apk 19-Aug-2013 12:33 
4.0M at https://guardianproject.info/repo/


Cheers

axel


--
Axel Simon

--
mail/jabber/gtalk: axelsi...@axelsimon.net
twitter / identi.ca: @AxelSimon
--
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change 
to digest, or change password by emailing moderator at compa...@stanford.edu.

Re: [liberationtech] Meet the 'cowboy' in charge of the NSA

[Axel Simon]

 

Hi, 

Am I the only one for whom the page is hidden behind an
annoying sign up overlay? 

axel 

Le 2013-09-09 05:12, Shava Nerad a
écrit : 

 As far as I am concerned it is not. I might have posted the
link if you had not brought it to our attention. Thank you. 
 
 On
Sun, Sep 8, 2013 at 9:36 PM, Noah Shachtman noah.shacht...@gmail.com
[6] wrote:
 
 All: 
 
 Sorry if this is considered spamming the
list - if it is, it won't happen again. 
 
 At Foreign Policy, we
just published what I believe is the first major profile of NSA chief
Keith Alexander. It is not a particularly flattering one. 
 
 One
scooplet among many in Shane Harris' nearly 6,000-word story: Even his
fellow spies consider Keith Alexander to be a cowboy who's barely
concerned with law. 
 
 Anyway, take a look. Let me know what you
think. 
 
 http://www.foreignpolicy.com/ articles/2013/09/08/the_
cowboy_of_the_nsa_keith_ alexander [1]
 
 All the best,
 
 nms

 
 -- 
 Noah Shachtman 
 Executive Editor for News | Foreign
Policy 
 917-690-0716 
 noah.shacht...@gmail.com [2] 

http://www.foreignpolicy.com/author/NoahShachtman [3] 
 
 encrypted
phone: 415-463-4956 
 
 --
 Liberationtech is a public list whose
archives are searchable on Google. Violations of list guidelines will
get you moderated:
https://mailman.stanford.edu/mailman/listinfo/liberationtech [4].
Unsubscribe, change to digest, or change password by emailing moderator
at compa...@stanford.edu [5].
 
 -- 
 
 Shava Nerad 

shav...@gmail.com [7]
 

Links:
--
[1]
http://www.foreignpolicy.com/articles/2013/09/08/the_cowboy_of_the_nsa_keith_alexander
[2]
mailto:noah.shacht...@gmail.com
[3]
http://www.foreignpolicy.com/author/NoahShachtman
[4]
https://mailman.stanford.edu/mailman/listinfo/liberationtech
[5]
mailto:compa...@stanford.edu
[6] mailto:noah.shacht...@gmail.com
[7]
mailto:shav...@gmail.com
-- 
Liberationtech is a public list whose archives are searchable on Google. 
Violations of list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] Heml.is - The Beautiful Secure Messenger

[Axel Simon]

In TextSecure, the password unlocks the local db of encrypted SMS messages.
Lose the password, lose the messages.

Also, the point of TextSecure is that it uses text (SMS) messages as a 
transport, which often work when Internet access (or even plain phone calls) 
do(es)n't.

axel

Wasabee wasabe...@gmail.com wrote:

hi

thank for your answer. what is the role of the password? is it used to 
access the TextSecure app? is it a shared password with the recipient?


On 10/07/2013 15:29, Albert López wrote:

 Hello Wasabee,

 I've used TextSecure but I found that it's like sending encrypted
SMS, 
 therefore you have the consequent cost associated to it. I don't know

 if Heml.is will be a kind of secure whatsapp or if it will have the 
 same approach of TextSecure.

 Correct me if I'm wrong with the SMS stuff. It was what I thought
once 
 I received my bill.






 gpg --keyserver pgp.mit.edu --search-keys EEE5A447
 http://pgp.mit.edu:11371/pks/lookup?search=0xEEE5A447op=vindex





 Date: Wed, 10 Jul 2013 14:31:53 +0100
 From: wasabe...@gmail.com
 To: liberationtech@lists.stanford.edu
 Subject: Re: [liberationtech] Heml.is - The Beautiful  Secure
Messenger

 https://whispersystems.org/ already has an open-source secure 
 messaging, voice and more.
 Has anyone reviewed their code?
 Does anyone use it?
 Why not build on top of it?


 On 10/07/13 14:07, Nick wrote:

 noone said it would be closed source. That's peoples
guess. Like, your guess, I guess.

 According to their twitter account, the answer is maybe:
 https://twitter.com/HemlisMessenger/statuses/354927721337470976

 Peter Sunde (one of the people behind it) said eventually, but
 in my experience promises like that tend to be broken:
 https://twitter.com/brokep/status/354608029242626048

 and the feature 'unlocking' aspect of the project - to be
indication of a
 proprietary code base.

 Frankly I can't see how they could get the feature unlock
funding
 stuff to work well if it's proper open source. As I'd expect
people
 to fork it to remove such antifeatures. It's a pity, as several
new
 funding models have been successful recently which are compatible
with
 free software, but this doesn't look to be one of them.
 --
 Too many emails? Unsubscribe, change to digest, or change
password by emailing moderator atcompa...@stanford.edu 
mailto:compa...@stanford.edu  or changing your settings
athttps://mailman.stanford.edu/mailman/listinfo/liberationtech



 -- Too many emails? Unsubscribe, change to digest, or change password

 by emailing moderator at compa...@stanford.edu or changing your 
 settings at
https://mailman.stanford.edu/mailman/listinfo/liberationtech


 --
 Too many emails? Unsubscribe, change to digest, or change password by
emailing moderator at compa...@stanford.edu or changing your settings
at https://mailman.stanford.edu/mailman/listinfo/liberationtech





--
Too many emails? Unsubscribe, change to digest, or change password by
emailing moderator at compa...@stanford.edu or changing your settings
at https://mailman.stanford.edu/mailman/listinfo/liberationtech

-- 
Axel Simon
mail / jabber / gtalk: axelsimon@ axelsimon.net
twitter / identi.ca: @axelsimon--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] Crowd steps up to fund 'NSA-proof' app

[Axel Simon]

 

2013-07-12 08:54, Brian Conley: 

 +1 
 On Jul 11, 2013 11:48 PM,
Douglas Lucas d...@riseup.net [2] wrote:
 
 I can't wait until
S̶i̶l̶e̶n̶t̶ ̶C̶i̶r̶c̶l̶e̶ Heml.is is open source!
 
 On 07/12/2013
01:29 AM, phryk wrote:
  On Thu, 11 Jul 2013 23:09:04 -0700
 
Brian Conley bri...@smallworldnews.tv [1] wrote:
 
  If it's
not open source we aren't trusting it, so wait and see.
 
  My
thought exactly. The companies involved in PRISM denied giving the
 
feds access to their data, so why won't some guys I've never even
heard
  of before not do the same?
 
  […]
 
 
 The
Aljazeera post also hails it as the first secure mobile messaging
 
system.. Did I miss something there? What about XMPP+OTR? What about

 Whispers' TextSecure?

Another simple question is: how many of these
secure apps do we need? 

I understand the need for diversity, really,
but when we already have a bunch of different solutions (TextSecure,
XMPP+OTR, mail+PGP), can't we build on something pre-existing rather
than start from scratch everytime? Doesn't that add a risk of baking
more homemade crypto and all the possible errors that come with that?


It's obviously a hard line to tread between diversity and
fragmentation, but it feels like more apps are being announced every
other week. 

The situation gives me this feeling that this is the
moment to sell your new super-privacy-enhanced app now the market is
sensitive to the argument and everyone is coming out of the woods to do
so. 

Or maybe I'm just a bit cynical today. 

 axel 

 




Links:
--
[1] mailto:bri...@smallworldnews.tv
[2]
mailto:d...@riseup.net
--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] DuckDuckGo vs Startpage [was: Help test Tor Browser]

[Axel Simon]

On 27/06/13 01:02, Mike Perry wrote:
 The Doctor:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On 06/24/2013 09:16 PM, Daniel Sieradski wrote:
 Has there ever been any effort to create an open source search
 engine that is entirely transparent in both its software and
 practices? (dmoz.org
 doesn't count!)

 ...YaCY?

 http://yacy.de/
 
 YaCY and other FOSS engines (in a sibling thread someone mentioned
 another that I already forgot) are also something that I will accept
 search plugins for the Omnibox, but their result quality, index depth,
 and crawl frequency are no match for either StartPage or DDG.
 

There's also Seeks.
http://www.seeks-project.info

It's “An Open Decentralized Platform for Collaborative Search, Filtering and
content Curation”.

From what I understand, Seeks tries to do several things at once:
- Provide search results by aggregating them from different sources such as
Google, Bing and other seeks nodes.
To jumpstart the available results and achieve good quality, they decided the
best thing to do was just to grab good results where they were, so by default
nodes will ask Google for results.
But more backends can and are being developed.
- Keep things decentralised. The nodes share results with each other, this is
the basis for the general Seeks network's crawler, if I understand correctly.
- Enable users on a node to express their like or dislike for the result of a
search.
This means over time the node learns and will curate results for a given user.
Dislikes are kept to a node while positive search results are shared between
nodes to build up the general search engine's results.

In terms of pure privacy, this does sound like only half a solution : if you run
the node on your laptop, seeks is just querying Google for you really.

But one can share a node with more people or even use a public node. There are
several listed at:
http://seeks-project.info/wiki/index.php/List_of_Web_Seeks_nodes

In this case, a public seeks node acts like a proxy for new search requests. And
for requests that have already been asked, it will give answers on its own
without querying external engines.
There are also instruction on how to anonymize a Seeks node on the wiki.

The project is really interesting, even if a little less active today than it
was 18 months ago.
But it works and you run it on your server.
You could probably set it up as a hidden tor service too.

I've cc'd Beniz, who runs the project, he probably has far smarter things to say
on the question. :)

Cheers

axel


-- 
Axel Simon

--
mail/jabber/gtalk: axelsi...@axelsimon.net
twitter / identi.ca: @AxelSimon

--
Too many emails? Unsubscribe, change to digest, or change password by emailing 
moderator at compa...@stanford.edu or changing your settings at 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] No Disconnect

[Axel Simon]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi,

Jill, I would imagine people from the European digital rights group are 
attending (I'm talking here about both EDRi per se and European activists such 
as Bits of Freedom, Digitalle Geselschaft and La Quadrature).
You should get in touch with EDRi, they have been following No Disconnect for a 
while.

Cheers,

axel
- --
Axel Simon

- --
mail/Jabber/Gtalk: axelsi...@axelsimon.net
twitter/identi.ca: @AxelSimon

Eric S Johnson cra...@oneotaslopes.org wrote:

Hi Jill,



I'm not sure there'll be any announcement, unless you were one of the
applicants who submitted a concept note in July.



I don't know anything about the workshop. I'll inquire.



Best,

Eric

http://keyserver.pgp.com/vkd/DownloadKey.event?keyid=0xE0F58E0F1AF7E6F2
PGP



From: liberationtech-boun...@lists.stanford.edu
[mailto:liberationtech-boun...@lists.stanford.edu] On Behalf Of Jill
Moss
Sent: Wednesday, 07 November 2012 22:15
To: liberationtech
Subject: Re: [liberationtech] No Disconnect



Thanks Eric.  I'll keep my eyes open for an announcement.  As much, I
wonder
who may be attending the workshop later this month in Brussels?  jill



From: liberationtech-boun...@lists.stanford.edu
[mailto:liberationtech-boun...@lists.stanford.edu] On Behalf Of Eric S
Johnson
Sent: Wednesday, November 07, 2012 1:04 PM
To: 'liberationtech'
Subject: Re: [liberationtech] No Disconnect



Hi Jill,



No Disconnect Strategy is the name for the EC's internet freedom
grants
program (mentioned by Commissioner Kroes at the December 2011 Freedom
Online
conference in Den Haag). This summer the invitation to submit concept
notes was issued in June, deadline mid-July. The EUR3M invitation was
lot
three of the more-or-less annual EIDHR call for proposals. If I had to
guess, I would suppose the ratio will be something like it was for
DRL-~30%
of the concept notes are invited to submit full proposals, and ~30% of
those
get funded. I think the first cut will be announced shortly.



Best,

Eric

http://keyserver.pgp.com/vkd/DownloadKey.event?keyid=0xE0F58E0F1AF7E6F2
PGP



From: liberationtech-boun...@lists.stanford.edu
[mailto:liberationtech-boun...@lists.stanford.edu] On Behalf Of Jill
Moss
Sent: Wednesday, 07 November 2012 19:36
To: Liberation Technologies
Subject: [liberationtech] No Disconnect



All:  Anyone have information about the EU initiative, No Disconnect?


http://www.slate.com/blogs/future_tense/2012/11/06/european_capability_for_s
ituation_awareness_program_to_monitor_internet.html







--
Unsubscribe, change to digest, or change password at:
https://mailman.stanford.edu/mailman/listinfo/liberationtech
-BEGIN PGP SIGNATURE-
Version: APG v1.0.8
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=Tui6
-END PGP SIGNATURE-

--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech