Re: [liberationtech] TrueCrypt Alternatives?

2014-10-03 Thread Natanael
On Fri, Oct 3, 2014 at 2:50 AM, Greg g...@kinostudios.com wrote: Also, you convince me how to keep providing high quality software and support while simultaneously making Espionage completely free and open source and I will do it in a flash. Call up Red Hat and ask them about how they manage

[liberationtech] Me and My Shadow relaunch

2014-10-03 Thread Anne Roth
Hi, I've been meaning to point you to the relaunched Tactical Tech website *Me and My Shadow* for a while: https://www.myshadow.org/ It's a website that aims to help users understand about the traces they leave online, or rather, the traces about them that can be found online no matter whether

[liberationtech] Gender and Technology Pop-up Institute

2014-10-03 Thread Anne Roth
https://tacticaltech.org/gender-tech-institute Tactical Tech, in collaboration with the Association for Progressive Communications (APC), are organising a *7-day event* for up to 50 women and trans people to learn tools and techniques for increasing their understanding and practice in digital

Re: [liberationtech] TrueCrypt Alternatives?

2014-10-03 Thread Greg
Dear Natanael, Call up Red Hat and ask them about how they manage their open source Linux distribution. Oh, I am very familiar with the Red Hat model, and I respect it greatly, and am in fact pursuing something similar. Red Hat works because it is complicated, technical infrastructure

Re: [liberationtech] TrueCrypt Alternatives?

2014-10-03 Thread Jonathan Wilkes
On 10/03/2014 12:57 PM, Greg wrote: Dear Natanael, Call up Red Hat and ask them about how they manage their open source Linux distribution. Oh, I am very familiar with the Red Hat model, and I respect it greatly, and am in fact pursuing something similar. Red Hat works because it is

Re: [liberationtech] TrueCrypt Alternatives?

2014-10-03 Thread Steve Weis
Hi Greg. The burden of proof is on Espionage to convince people that it is safe. I can't trust it based on marketing claims alone. There is not a sufficiently detailed design document on the website, much less a battle-tested, peer-reviewed design. I don't see any reference to independent

Re: [liberationtech] TrueCrypt Alternatives?

2014-10-03 Thread Greg
On Oct 3, 2014, at 12:04 PM, Steve Weis stevew...@gmail.com wrote: Hi Greg. The burden of proof is on Espionage to convince people that it is safe. I can't trust it based on marketing claims alone. There is not a sufficiently detailed design document on the website, much less a

Re: [liberationtech] TrueCrypt Alternatives?

2014-10-03 Thread Greg
Dear Jonathan, On Oct 3, 2014, at 11:41 AM, Jonathan Wilkes jancs...@yahoo.com wrote: You could also do a 3-clause BSD license for the library (i.e., business logic), then separate out the GUI part and put whatever license you want on the bundle. You could even do deterministic builds of

Re: [liberationtech] TrueCrypt Alternatives?

2014-10-03 Thread Rich Kulawiec
On Thu, Oct 02, 2014 at 05:50:08PM -0700, Greg wrote: K, thanks for the read (I read it but nothing there seems to apply, perhaps some of its points will be addressed below). I'm sorry that you feel that way; I included that link because I think the entire message applies, particularly this

Re: [liberationtech] TrueCrypt Alternatives?

2014-10-03 Thread Jonathan Wilkes
Hi Rich, Your footnote #1 is dubious at best.  The cost of aiming peoples eyes at bugs is _not_ $0.  Until it is, the free software community has a problem with too few resources chasing too many bugs.  Sitting my Debian box next to an XP box that's running Flash certainly doesn't change

Re: [liberationtech] TrueCrypt Alternatives?

2014-10-03 Thread Greg
Dear Rich, I echo Jonathan's reply to your email. At the same time, I do feel a certain empathy and understanding of the feeling behind your words. If there was anything in your email that I came closest to agreeing with, it would be this: You can't have the former without the latter: it's

Re: [liberationtech] TrueCrypt Alternatives?

2014-10-03 Thread Jonathan Wilkes
Well, to be completely honest I wouldn't use security software with a proprietary GUI myself.  But I'm not most people, and it would be better for your business logic to be open source than for the whole thing to be subject to the terms you describe. -Jonathan On Friday, October 3, 2014