Re: [liberationtech] Has LinkedIn launched a borderline Denial of Service attack against Tor?

2014-07-01 Thread Mustafa Al-Bassam
It appears to be caused by a known DoS bug in the Tor Browser Bundle that was patched 4 months ago: https://trac.torproject.org/projects/tor/ticket/10905 https://trac.torproject.org/projects/tor/ticket/9901 Given the method of triggering the bug - when no Content-Type header is specified and

[liberationtech] About Confide

2014-04-26 Thread Mustafa Al-Bassam
So yesterday a very user-friendly mobile application called Confide was released that claims to be your off-the-record messenger[1]. It has been getting a ton of press attention recently and has raised $1.9m in seed funding[2]. It claims with end-to-end encryption and disappearing messages,

Re: [liberationtech] About Confide

2014-04-26 Thread Mustafa Al-Bassam
to open source software? Vulnerabilities in closed source software are still found all the time through black-box testing. Many of them go unreported. Shava Nerad shav...@gmail.com mailto:shav...@gmail.com On Apr 26, 2014 3:51 PM, Mustafa Al-Bassam m...@musalbas.com mailto:m...@musalbas.com

Re: [liberationtech] Another loss for the Internet

2014-02-19 Thread Mustafa Al-Bassam
On 19/02/14 20:56, Mitar wrote: This change effectively allows a website to prevent bookmarklets from working. In essence, content providers can prevent users to execute their own bookmarklets and change how website behaves. It requires users to use extensions and not simple scripts.

Re: [liberationtech] Another loss for the Internet

2014-02-19 Thread Mustafa Al-Bassam
Hi! On 20/02/14 02:03, Mitar wrote: Hi! On Wed, Feb 19, 2014 at 5:24 PM, Mustafa Al-Bassam m...@musalbas.com wrote: Before a bug fix, even Firebug was subject to CSP: http://code.google.com/p/fbug/issues/detail?id=6291 Which bug fix? This is still unfixed in Firefox: https

Re: [liberationtech] New EFF Lawsuit: American Sues Ethiopian Government for Spyware Infection

2014-02-18 Thread Mustafa Al-Bassam
This is great. Would also like to add that yesterday a criminal complaint was filed in the UK for a similar situation: https://www.privacyinternational.org/press-releases/privacy-international-seeking-investigation-into-computer-spying-on-refugee-in-uk Mustafa On 18/02/14 18:16, Nate Cardozo