Re: [liberationtech] Matasano Crypto Challenges

2014-08-12 Thread Nadim Kobeissi
These challenges are really great. Another source of similar training is Stanford University's online cryptography classes, taught (for free!) by Dan Boneh. Boneh's classes include practical assignments that are almost identical to the CryptoPals challenges, but it's still worth doing both

[liberationtech] gazaDeaths.com

2014-07-15 Thread Nadim Kobeissi
Dear LiberationTech, I wanted to share with you GazaDeaths.com, a website for keeping track of statistics and names of Palestinian casualties from the current Israeli offensive on Gaza. http://gazadeaths.com/ The website will update automatically with information from Al Jazeera and the Gaza

Re: [liberationtech] Cryptocat: Call for Translators. Please Participate!

2013-08-21 Thread Nadim Kobeissi
, Neil Blazevic neilblaze...@gmail.com wrote: What would be the process to add other languages? I could potentially round up some Swahili translators one day. Neil Sent from a mobile device On 20 Aug 2013 14:42, Nadim Kobeissi na...@nadim.cc wrote: Dear Libtech, Echoing

[liberationtech] Cryptocat: Call for Translators. Please Participate!

2013-08-20 Thread Nadim Kobeissi
Dear Libtech, Echoing Commotion's recent call for translators on this list: Cryptocat is adding cool new features (and modifying some existing ones) over the upcoming weeks, all of which necessitate the translation of various new words and sentences for the user interface. Currently, Cryptocat

Re: [liberationtech] Cryptocat Hackathon, NYC, August 17-18!

2013-08-17 Thread Nadim Kobeissi
Just a last friendly reminder for those planning to attend today/this weekend! :-) We're just about to start! Schedule: https://blog.crypto.cat/2013/08/cryptocat-hackathon-august-17-18-new-york-city/ NK On 2013-08-10, at 11:33 AM, Nadim Kobeissi na...@nadim.cc wrote: Hi everyone, I just

Re: [liberationtech] Google confirms critical Android crypto flaw

2013-08-15 Thread Nadim Kobeissi
On 2013-08-15, at 6:14 AM, Nathan of Guardian nat...@guardianproject.info wrote: Signed PGP part On 08/15/2013 12:07 AM, Nadim Kobeissi wrote: Hot on the heels of last week's Bitcoin wallet for Android heist, Google has confirmed that this was due to a critical crypto flaw in Android

[liberationtech] Google confirms critical Android crypto flaw

2013-08-14 Thread Nadim Kobeissi
Hey Libtech, Hot on the heels of last week's Bitcoin wallet for Android heist, Google has confirmed that this was due to a critical crypto flaw in Android, which could affect security in thousands of apps according to Ars Technica: Google developers have confirmed a cryptographic vulnerability

Re: [liberationtech] Can JavaScript cryptography be trusted? (was: In defense of client-side encryption)

2013-08-13 Thread Nadim Kobeissi
Quickly adding my blog post on the matter to this thread. Would love to hear discussion regarding it: http://log.nadim.cc/?p=33 NK On 2013-08-13, at 1:58 AM, Tony Arcieri basc...@gmail.com wrote: On Mon, Aug 12, 2013 at 3:07 PM, Ali-Reza Anghaie a...@packetknife.com wrote: I'm sorry but

[liberationtech] Snowden: Unencrypted Journalist-Source Communications Unforgivably Reckless

2013-08-13 Thread Nadim Kobeissi
Hey LibTech, In a recently published interview with the New York Times, Edward Snowden called unencrypted communications between journalists and sources unforgivably reckless: I was surprised to realize that there were people in news organizations who didn’t recognize any unencrypted message

Re: [liberationtech] Hayden on 'Internet Freedom' as State Dept. Money Laundering Against US Security Interests

2013-08-12 Thread Nadim Kobeissi
On 2013-08-12, at 8:53 PM, Collin Anderson col...@averysmallbird.com wrote: Libtech, A friend passed along little noticed comments by Gen. Hayden in June, which I would suggest are the most direct elaboration on the differences between the American security apparatus and piracy

Re: [liberationtech] In defense of client-side encryption

2013-08-11 Thread Nadim Kobeissi
On 2013-08-11, at 10:36 PM, danimoth danim...@cryptolab.net wrote: On 11/08/13 at 01:10pm, Francisco Ruiz wrote: Twice again, privacy has taken a hit across the land. Lavabit and Silent Mail are gone, and to quote Phil Zimmermann, “the writing is on the wall” for any other encrypted email

Re: [liberationtech] Bill Gates on Project Loon vs malaria

2013-08-10 Thread Nadim Kobeissi
I actually agree with Bill Gates here. If I had his money, I would make sure people have clean water, toilets, condoms, before even starting to consider working on Internet access. Sure, his comments are below the belt as Andrés says below, but this is only because he is unfairly attacking a

Re: [liberationtech] Cryptocat Hackathon, NYC, August 17-18!

2013-08-10 Thread Nadim Kobeissi
On 2013-08-07, at 11:36 PM, Kyle Maxwell ky...@xwell.org wrote: https://github.com/cryptocat/cryptocat naturally! :D On Wed, Aug 7, 2013 at 3:09 PM, Anthony Papillion anth...@cajuntechie.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 08/07/2013 12:10 PM, Nadim Kobeissi wrote

Re: [liberationtech] From Snowden's email provider. NSL???

2013-08-09 Thread Nadim Kobeissi
On 2013-08-08, at 11:53 PM, Mike Perry mikepe...@torproject.org wrote: It is profoundly encouraging to see that people of such courage and integrity as the Lavabit staff exist, and are willing to put everything on the line to stand up against this madness. +1. For what it's worth, and even

Re: [liberationtech] From Snowden's email provider. NSL???

2013-08-09 Thread Nadim Kobeissi
On 2013-08-09, at 11:31 AM, Ali-Reza Anghaie a...@packetknife.com wrote: On Fri, Aug 9, 2013 at 4:26 AM, Nadim Kobeissi na...@nadim.cc wrote: For what it's worth, and even though I think it's pretty unlikely that Cryptocat will receive such an order, *snip* You're right but that should

Re: [liberationtech] From Snowden's email provider. NSL???

2013-08-09 Thread Nadim Kobeissi
On 2013-08-09, at 11:59 AM, Julien Rabier tazi...@flexiden.org wrote: Le 09 août - 11:48, Nadim Kobeissi a écrit : On 2013-08-09, at 11:31 AM, Ali-Reza Anghaie a...@packetknife.com wrote: On Fri, Aug 9, 2013 at 4:26 AM, Nadim Kobeissi na...@nadim.cc wrote: For what it's worth, and even

Re: [liberationtech] From Snowden's email provider. NSL???

2013-08-09 Thread Nadim Kobeissi
On 2013-08-09, at 1:24 PM, Nick liberationt...@njw.me.uk wrote: On Fri, Aug 09, 2013 at 11:26:21AM +0300, Nadim Kobeissi wrote: On 2013-08-08, at 11:53 PM, Mike Perry mikepe...@torproject.org wrote: It is profoundly encouraging to see that people of such courage and integrity as the Lavabit

Re: [liberationtech] From Snowden's email provider. NSL??? (Recipe for Secure Audio, Video, Chat, File Transfer)

2013-08-09 Thread Nadim Kobeissi
On 2013-08-09, at 1:55 PM, Fabio Pietrosanti (naif) li...@infosecurity.ch wrote: Il 8/9/13 10:59 AM, Julien Rabier ha scritto: Le 09 août - 11:48, Nadim Kobeissi a écrit : On 2013-08-09, at 11:31 AM, Ali-Reza Anghaie a...@packetknife.com wrote: On Fri, Aug 9, 2013 at 4:26 AM, Nadim

Re: [liberationtech] New CryptoCat bug

2013-08-08 Thread Nadim Kobeissi
On 2013-08-08, at 12:25 PM, Jillian C. York jilliancy...@gmail.com wrote: Dear LibTech, I would like to express my concern that the CatFacts function of CryptoCat is not operating. This is a Very Important Function to ensure the physical, mental and spiritual health of cryptocat users

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-07 Thread Nadim Kobeissi
On 2013-08-07, at 12:44 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Bbrewer: We're understaffed, so we tend to pick the few things we might accomplish and writing such advisory emails is weird unless there is an exceptional event. Firefox bugs and corresponding updates are not

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-07 Thread Nadim Kobeissi
On 2013-08-07, at 12:58 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Nadim Kobeissi: On 2013-08-07, at 12:44 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Bbrewer: We're understaffed, so we tend to pick the few things we might accomplish and writing such advisory emails is weird

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-07 Thread Nadim Kobeissi
On 2013-08-07, at 1:05 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Nadim Kobeissi: On 2013-08-07, at 12:58 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Nadim Kobeissi: On 2013-08-07, at 12:44 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Bbrewer: We're understaffed, so we

[liberationtech] Cryptocat Hackathon, NYC, August 17-18!

2013-08-07 Thread Nadim Kobeissi
(Moving on from my very, very expensively made point…) Dear Libtech, Cryptocat, in collaboration with OpenITP, will be hosting the very first Cryptocat Hackathon weekend in New York City, on the weekend of the 17th and 18th of August 2013! We're going to have a coding track as well as a

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-06 Thread Nadim Kobeissi
On 2013-08-06, at 3:19 AM, Jacob Appelbaum ja...@appelbaum.net wrote: Griffin Boyce: Al, We may have to disagree as to the way forward. I hate to be contentious, but it seems unlikely that Tor applied a patch without reading firefox's changelog. Two days ago I presented a talk which

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-06 Thread Nadim Kobeissi
, Nadim Kobeissi wrote: On 2013-08-06, at 3:19 AM, Jacob Appelbaum ja...@appelbaum.net wrote: Griffin Boyce: Al, We may have to disagree as to the way forward. I hate to be contentious, but it seems unlikely that Tor applied a patch without reading firefox's changelog. Two days ago I

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-06 Thread Nadim Kobeissi
On 2013-08-06, at 12:55 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Nadim Kobeissi: On 2013-08-06, at 11:46 AM, Al Billings alb...@openbuddha.com wrote: Nadim you seem confused by how this works. Tor doesn't need to issue advisories for Firefox issues. We, at Mozilla, already issue

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-06 Thread Nadim Kobeissi
On 2013-08-06, at 1:23 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Nadim Kobeissi: On 2013-08-06, at 12:55 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Nadim Kobeissi: On 2013-08-06, at 11:46 AM, Al Billings alb...@openbuddha.com wrote: Nadim you seem confused by how

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-06 Thread Nadim Kobeissi
On 2013-08-06, at 4:49 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Nadim Kobeissi: On 2013-08-06, at 1:23 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Nadim Kobeissi: On 2013-08-06, at 12:55 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Nadim Kobeissi: On 2013-08-06, at 11

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-05 Thread Nadim Kobeissi
Forgive me, but I'd like to ask a question here. Tor is a tool that is undeniably, directly marketed toward activists in high-risk environments. Tor's presentations at conferences centre around how Tor obtains increased usage in Arab Spring countries that matches the timeline of revolutionary

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-05 Thread Nadim Kobeissi
On 2013-08-05, at 10:46 AM, Georg Koppen g.kop...@jondos.de wrote: On 05.08.2013 10:15, Nadim Kobeissi wrote: Now, we find out that the FBI has been sitting on an exploit since an unknown amount of time that can compromise the Tor Browser Bundle is that really so? See: https

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-05 Thread Nadim Kobeissi
On 2013-08-05, at 11:04 AM, Michael Owen mich...@theramparts.com wrote: On Mon, Aug 5, 2013 at 9:46 AM, Nadim Kobeissi na...@nadim.cc wrote: Hmm. So it's more of a 38-day. Perhaps there should have been a Tor Browser security advisory in that case. I'm not sure how long the Tor bundle

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-05 Thread Nadim Kobeissi
On 2013-08-05, at 4:19 PM, liberationt...@lewman.us wrote: On Mon, 5 Aug 2013 10:15:20 +0200 Nadim Kobeissi na...@nadim.cc wrote: Now, we find out that the FBI has been sitting on an exploit since an unknown amount of time that can compromise the Tor Browser Bundle, which is currently

Re: [liberationtech] Freedom Hosting, Tormail Compromised // OnionCloud

2013-08-05 Thread Nadim Kobeissi
On 2013-08-05, at 6:38 PM, Roger Dingledine a...@mit.edu wrote: On Mon, Aug 05, 2013 at 04:54:00AM -0400, Roger Dingledine wrote: Specifically, it would appear that the TBB updates we put out on June 26 addressed this vulnerability:

[liberationtech] My Cryptocat talk 24 hours after the latest vulnerability

2013-07-23 Thread Nadim Kobeissi
Libtech, I urge everyone interested in the latest Decryptocat issue to watch the talk and 70-minute (!) QA that followed it. I gave this talk the day right after the bug. The talk and the QA sessions really serve to explain my position on the project and I think they will clarify a lot of

Re: [liberationtech] DecryptoCat

2013-07-11 Thread Nadim Kobeissi
On 2013-07-11, at 12:38 PM, Maxim Kammerer m...@dee.su wrote: On Tue, Jul 9, 2013 at 4:57 PM, Jacob Appelbaum ja...@appelbaum.net wrote: While I think Maxim is viewed as exceedingly harsh in how he writes, I think that your response is really the wrong way to deal with him. We should

[liberationtech] How Microsoft handed the NSA access to encrypted messages

2013-07-11 Thread Nadim Kobeissi
A brand new scoop by Glenn Greenwald: http://www.guardian.co.uk/world/2013/jul/11/microsoft-nsa-collaboration-user-data Microsoft has collaborated closely with US intelligence services to allow users' communications to be intercepted, including helping the National Security Agency to circumvent

Re: [liberationtech] DecryptoCat

2013-07-11 Thread Nadim Kobeissi
On 2013-07-11, at 2:08 PM, Maxim Kammerer m...@dee.su wrote: On Thu, Jul 11, 2013 at 9:04 PM, Jonathan Wilkes jancs...@yahoo.com wrote: I think the upshot of that is to steer whatever funds Cryptocat has toward the form of peer review that did work, which is the bug hunt (as well as look

Re: [liberationtech] Heml.is - The Beautiful Secure Messenger

2013-07-11 Thread Nadim Kobeissi
On 2013-07-11, at 4:32 PM, Andy Isaacson a...@hexapodia.org wrote: On Thu, Jul 11, 2013 at 12:23:25PM -0700, Mitar wrote: BTW. Even Tor has centralized directory servers. It's incredibly misleading to imply that the Tor DA design provides a similar threat to a server-hosted-crypto

Re: [liberationtech] Heml.is - The Beautiful Secure Messenger

2013-07-10 Thread Nadim Kobeissi
Hemlis have posted the answer to whether they will open source their app: Will it be Open Source? We have all intentions of opening up the source as much as possible for scrutiny and help! What we really want people to understand however, is that Open Source in itself does not guarantee any

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Nadim Kobeissi
On 2013-07-09, at 12:34 AM, Jonathan Wilkes jancs...@yahoo.com wrote: On 07/08/2013 07:07 AM, Nadim Kobeissi wrote: On 2013-07-08, at 3:34 AM, Tom Ritter t...@ritter.vg wrote: On 7 July 2013 17:20, Maxim Kammerer m...@dee.su wrote: This thread started off with discussion of peer review, so

Re: [liberationtech] DecryptoCat

2013-07-09 Thread Nadim Kobeissi
On 2013-07-09, at 10:29 AM, Jacob Appelbaum ja...@appelbaum.net wrote: Patrick Mylund Nielsen: On Tue, Jul 9, 2013 at 9:22 AM, Eugen Leitl eu...@leitl.org wrote: On Tue, Jul 09, 2013 at 09:12:21AM -0400, Patrick Mylund Nielsen wrote: If it's so easy, go ahead and produce a more secure

Re: [liberationtech] Heml.is - The Beautiful Secure Messenger

2013-07-09 Thread Nadim Kobeissi
This looks awesome! The more alternatives the better. NK On 2013-07-09, at 12:52 PM, Julian Oliver jul...@julianoliver.com wrote: Suprised to see Peter Sunde, Leif Högberg Linus Olsson push out their private messaging for Android and iOS as closed-source unlock-ware:

Re: [liberationtech] DecryptoCat

2013-07-08 Thread Nadim Kobeissi
On 2013-07-08, at 12:13 PM, Ralph Holz h...@net.in.tum.de wrote: Hi Tom, If you think this bug could never happen to you or your favorite pet project; if you think there's nothing you can learn from this incident - you haven't thought hard enough about ways it could have been prevented,

Re: [liberationtech] DecryptoCat

2013-07-08 Thread Nadim Kobeissi
On 2013-07-08, at 3:34 AM, Tom Ritter t...@ritter.vg wrote: On 7 July 2013 17:20, Maxim Kammerer m...@dee.su wrote: This thread started off with discussion of peer review, so I have shown that even expensive, well-qualified peer review (and I am sure that Veracode people are qualified)

Re: [liberationtech] DecryptoCat

2013-07-08 Thread Nadim Kobeissi
On 2013-07-08, at 2:00 PM, David Goulet dgou...@ev0ke.net wrote: Hi everyone, Very good post Tom! :) I would like to point out something here, no bashing, but rather possible improvements from my point of view. As Tom stated, basically if you don't do code, you'll have no bugs so in

[liberationtech] Anatomy of a Cryptocat bug

2013-07-08 Thread Nadim Kobeissi
Check out this very well-written post-mortem of a related bug that was fixed recently in Cryptocat: http://nakedsecurity.sophos.com/2013/07/09/anatomy-of-a-pseudorandom-number-generator-visualising-cryptocats-buggy-prng/ NK -- Too many emails? Unsubscribe, change to digest, or change password by

Re: [liberationtech] DecryptoCat

2013-07-07 Thread Nadim Kobeissi
On 2013-07-07, at 2:25 PM, CodesInChaos codesinch...@gmail.com wrote: So introductory-level programming course mistakes are right out. In my experience it's quite often a really simple mistake that gets you, even when you're an experienced programmer. I'm quite afraid of simple

Re: [liberationtech] DecryptoCat

2013-07-04 Thread Nadim Kobeissi
Hello everyone, I urge you to read our response at the Cryptocat Development Blog, which strongly clarifies the situation: https://blog.crypto.cat/2013/07/new-critical-vulnerability-in-cryptocat-details/ Thank you, NK On 2013-07-04, at 12:18 PM, Jens Christian Hillerup j...@hillerup.net wrote:

Re: [liberationtech] Open Solicitation for Concept Notes: Open Technology Fund

2013-07-02 Thread Nadim Kobeissi
On 2013-07-02, at 3:07 PM, Griffin Boyce griffinbo...@gmail.com wrote: Nadim Kobeissi na...@nadim.cc wrote: Frederick did not call OTF a tool of US oppression, but a tool for aiding U.S. foreign policy. I am very pleased that my project is supported by the excellent people at OTF, but let

Re: [liberationtech] Terry Winograd and Evgeny Morozov

2013-07-02 Thread Nadim Kobeissi
On 2013-07-02, at 3:06 PM, Glassman, Michael glassman...@osu.edu wrote: I think I really disagree with this. I find Morozov's arguments philosophically thin and part of what Stephen Pepper referred to as mindless skepticism. The fact that he is attempting to communicate to a more general

[liberationtech] Multiple vulnerabilities in Silent Circle

2013-06-27 Thread Nadim Kobeissi
Thanks to Arturo Filastò for pointing this out: https://github.com/SilentCircle/silent-phone-base/issues/5 Many remotely executable overflows in the ZRTP library used by Silent Circle. NK -- Too many emails? Unsubscribe, change to digest, or change password by emailing moderator at

[liberationtech] Cryptocat: Adopting Accessibility and Ease of Use as Security Properties

2013-06-24 Thread Nadim Kobeissi
Today, with Cryptocat nearing 65,000 regular users, the Cryptocat project releases “Cryptocat: Adopting Accessibility and Ease of Use as Security Properties,” a working draft which brings together the past year of Cryptocat research and development. We document the challenges we have faced,

Re: [liberationtech] Help test the new Tor Browser!

2013-06-24 Thread Nadim Kobeissi
On 2013-06-24, at 3:43 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Brian Conley: Thanks Dragana, But wouldn't that mean there is no new browser bundle for recent macs as only 32 is specified at Jacob's link? Hi Brian, So a few things - one is that if you go into About this mac you

Re: [liberationtech] Call for Participants @ Noisy Square - Putting the Resistance back in OHM

2013-06-24 Thread Nadim Kobeissi
On 2013-06-24, at 6:23 PM, Griffin Boyce griffinbo...@gmail.com wrote: Not only am I going to be presenting three talks at OHM, I will be presenting talks that are (in many ways) totally dead conversations in the US. It's interesting how much of the debate centers around the

Re: [liberationtech] Help test the new Tor Browser!

2013-06-24 Thread Nadim Kobeissi
I'd just like to add that I'm a DuckDuckGo user myself and that I can definitely vouch for the service. NK On 2013-06-24, at 6:50 PM, Mike Perry mikepe...@torproject.org wrote: Jacob Appelbaum: Jillian C. York: +1 On Mon, Jun 24, 2013 at 2:38 PM, Cooper Quintin

Re: [liberationtech] DuckDuckGo vs Startpage [was: Help test Tor Browser]

2013-06-24 Thread Nadim Kobeissi
On 2013-06-24, at 8:20 PM, Mike Perry mikepe...@torproject.org wrote: Nadim Kobeissi: I'd just like to add that I'm a DuckDuckGo user myself and that I can definitely vouch for the service. I've had a number of people tell me that they vouch for DuckDuckGo. What does this even mean

Re: [liberationtech] Any thoughts on this?

2013-06-22 Thread Nadim Kobeissi
Yeah, this is completely nuts. You're sending the service's owner(s) your password and plaintext in the clear. The person(s) operating this service get(s) all the passwords, all the plaintext, and even which IP address is sending/receiving plain texts at what time with each password. It's

Re: [liberationtech] Brazilian Activists automatically being banned from Facebook

2013-06-22 Thread Nadim Kobeissi
Hello Andre, For what it's worth, I tried sending this message on my Facebook (I am in Canada) and nothing happened. So the blocking, if factual, is probably limited to a certain number of accounts. From personal experience, I don't recall hearing about this sort of thing happening in the

Re: [liberationtech] Brazilian Activists automatically being banned from Facebook

2013-06-22 Thread Nadim Kobeissi
On 2013-06-22, at 7:58 PM, André Costa andredmco...@gmail.com wrote: Hello guys Just to let you all know, we have found it possibly was a well-organized deceit. Apparently someone has spammed many messages with words related to the military, and then started to spread a rumor that there

Re: [liberationtech] to encrypt or not to encrypt?

2013-06-21 Thread Nadim Kobeissi
The solution to this is to make encryption more and more widely used. By increasing the number of people with access to encryption technology for their communications, we dilute this threat. NK On 2013-06-21, at 11:52 AM, Michael Rogers mich...@briarproject.org wrote: Signed PGP part It's

[liberationtech] PRISM Op-ed for NewInt

2013-06-21 Thread Nadim Kobeissi
I wanted to share this small piece I wrote for the The New Internationalist on PRISM: http://newint.org/blog/2013/06/21/prism-surveillance-nsa-software/ Feedback welcome! :-) ___ Thursday 6 June, the day the PRISM story broke, was a good day to be a cryptographer. The

Re: [liberationtech] Help test the new Tor Browser!

2013-06-18 Thread Nadim Kobeissi
This is a really awesome improvement. I tried the new Tor Browser yesterday (OS X) and loved it. Did not encounter any problems. Really glad to see such drastic usability improvements for Tor. NK On 2013-06-17, at 9:45 AM, Jacob Appelbaum ja...@appelbaum.net wrote: Hi, I'm really excited

Re: [liberationtech] Guardian reporter delayed e-mailing NSA source because crypto is a pain

2013-06-12 Thread Nadim Kobeissi
On 2013-06-12, at 6:20 AM, Eugen Leitl eu...@leitl.org wrote: On Wed, Jun 12, 2013 at 06:15:30AM -0400, Sheila Parks wrote: Why not use her instead of his? Using his in 2013 is, indeed, misogyny List moderator, please control this before it completely goes out of hand. +1 NK People

Re: [liberationtech] Cryptocat: Translation Volunteers Needed

2013-06-11 Thread Nadim Kobeissi
On 2013-06-10, at 8:21 PM, Catherine Roy ecr...@catherine-roy.net wrote: On 10/06/2013 6:18 PM, Nadim Kobeissi wrote: Catherine, Opera is not shut out. It's simply difficult to develop for Opera due to its limited browser extension API. Your email made it sound as if Cryptocat had

Re: [liberationtech] Cryptocat: Translation Volunteers Needed

2013-06-11 Thread Nadim Kobeissi
On 2013-06-11, at 7:31 AM, Eugen Leitl eu...@leitl.org wrote: On Mon, Jun 10, 2013 at 08:21:40PM -0400, Catherine Roy wrote: On 10/06/2013 7:37 PM, Travis McCrea wrote: Opera is being released now on Webkit, though I am sure you will still have legacy opera users... I think you could put

Re: [liberationtech] Cryptocat: Translation Volunteers Needed

2013-06-11 Thread Nadim Kobeissi
I would sincerely like to apologize to the LibTech community for this incredibly embarrassing episode. NK On 2013-06-11, at 6:56 PM, Catherine Roy ecr...@catherine-roy.net wrote: On 11/06/2013 5:54 PM, Andy Isaacson wrote: The amount of work you're demanding (and yes, your first public post

[liberationtech] Guardian reporter delayed e-mailing NSA source because crypto is a pain

2013-06-11 Thread Nadim Kobeissi
This story really solidifies why I believe that we need to make privacy technologies accessible to journalists, instead of simply focusing on the other way around. Glenn Greenwald had to substantially delay his communications with Edward Snowden due to how inaccessible a lot of privacy and

[liberationtech] Canadian phone and Internet surveillance program revealed

2013-06-10 Thread Nadim Kobeissi
Some news in Canada similar to the NSA revelations in the US: Defence Minister Peter MacKay approved a secret electronic eavesdropping program that scours global telephone records and Internet data trails – including those of Canadians – for patterns of suspicious activity. Mr. MacKay signed a

Re: [liberationtech] Cryptocat: Translation Volunteers Needed

2013-06-10 Thread Nadim Kobeissi
On 2013-05-24, at 10:23 PM, Buddhadeb Halder bhalder...@gmail.com wrote: Hi Nadim, I have done with the Bengali translation. Thanks, Buddha On Fri, May 24, 2013 at 6:36 PM, Nadim Kobeissi na...@nadim.cc wrote: Hi everyone, An entire Cryptocat translation is less than 300 words. You

Re: [liberationtech] Cryptocat: Translation Volunteers Needed

2013-06-10 Thread Nadim Kobeissi
? Best, Catherine -- Catherine Roy http://www.catherine-roy.net On 2013-06-10 17:44, Nadim Kobeissi wrote: Thanks so much to everyone who helped! The translations are now all up to date. I'd like to extend special thanks to Dragana Kaurin from OpenITP. OpenITP is launching

Re: [liberationtech] Boundless Informant: the NSA's secret tool to track global surveillance data

2013-06-10 Thread Nadim Kobeissi
On 2013-06-10, at 6:09 PM, Jacob Appelbaum ja...@appelbaum.net wrote: x z: @Jacob, I agree with your points regarding American exceptionalism. @Eugen, to prepare for the worst scenario is one thing, to advocate some shady rumor as fact is another. @Rich, those are good movie scripts :-).

Re: [liberationtech] Boundless Informant: the NSA's secret tool to track global surveillance data

2013-06-10 Thread Nadim Kobeissi
On 2013-06-10, at 6:26 PM, Yosem Companys compa...@stanford.edu wrote: The distinction between direct or indirect access is semantic, not substantive, and likely irrelevant to most Americans. What Americans want to know is whether there is access to their personal data, and I would bet

Re: [liberationtech] Boundless Informant: the NSA's secret tool to track global surveillance data

2013-06-09 Thread Nadim Kobeissi
Jake, I don't agree with x z (and rather agree with you), but I'm really tired of just how aggressive and rude you always are on Libtech. And it doesn't appear to just be towards me. I'm not the only person who feels like this. Even if you're right, tone your ego knob down already. Be nice. I

Re: [liberationtech] Boundless Informant: the NSA's secret tool to track global surveillance data

2013-06-09 Thread Nadim Kobeissi
On 2013-06-09, at 10:08 AM, Rich Kulawiec r...@gsp.org wrote: On Sun, Jun 09, 2013 at 09:45:31AM -0400, Nadim Kobeissi wrote: I don't agree with x z (and rather agree with you), but I'm really tired of just how aggressive and rude you always are on Libtech. First: you've got to be kidding

Re: [liberationtech] Boundless Informant: the NSA's secret tool to track global surveillance data

2013-06-09 Thread Nadim Kobeissi
...@gsp.org wrote: On Sun, Jun 09, 2013 at 09:45:31AM -0400, Nadim Kobeissi wrote: I don't agree with x z (and rather agree with you), but I'm really tired of just how aggressive and rude you always are on Libtech. First: you've got to be kidding. I've never seen a single message

Re: [liberationtech] Boundless Informant: the NSA's secret tool to track global surveillance data

2013-06-09 Thread Nadim Kobeissi
On 2013-06-09, at 1:02 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Nadim Kobeissi: Jake, I don't agree with x z (and rather agree with you), but I'm really tired of just how aggressive and rude you always are on Libtech. And it doesn't appear to just be towards me. I'm not the only

Re: [liberationtech] PRISM: NSA/FBI Internet data mining project

2013-06-09 Thread Nadim Kobeissi
A new slide has just been leaked from the PRISM powerpoint. It's very interesting, check it out: http://www.theverge.com/2013/6/8/4410358/leaked-slide-from-prism-presentation-supports-directly-collecting-data NK On 2013-06-07, at 4:01 PM, Kyle Maxwell ky...@xwell.org wrote: FWIW, Google has

Re: [liberationtech] Boundless Informant: the NSA's secret tool to track global surveillance data

2013-06-09 Thread Nadim Kobeissi
It seems Europe isn't safe either from data mining, due to overreach: http://www.zdnet.com/blog/igeneration/google-admits-patriot-act-requests-handed-over-european-data-to-u-s-authorities/12191 NK On 2013-06-09, at 1:22 PM, Jacob Appelbaum ja...@appelbaum.net wrote: Nadim Kobeissi: On 2013

Re: [liberationtech] NSA whistleblower revealed

2013-06-09 Thread Nadim Kobeissi
Wow. NK On 2013-06-09, at 5:14 PM, Kate Krauss ka...@critpath.org wrote: I had been looking for leaders, but I realised that leadership is about being the first to act. - Edward Snowden This is the moment to show this person big public support. And keep showing it. Katie Krauss AIDS

Re: [liberationtech] NSA whistleblower revealed

2013-06-09 Thread Nadim Kobeissi
Check out this screenshot of the front page of the New York Times right now. Unbelievable: https://twitter.com/kaepora/status/343888967554457600 NK On 2013-06-09, at 8:17 PM, Matt Johnson railm...@gmail.com wrote: Snowden says he wants asylum in Iceland. Why not go there directly? Going

Re: [liberationtech] NSA whistleblower revealed

2013-06-09 Thread Nadim Kobeissi
On 2013-06-09, at 8:40 PM, Raven Jiang CX j...@stanford.edu wrote: He did work in the intelligence community so maybe he has a better idea than us. My guess is that asylum in Iceland is ideal if everything worked out, but he doesn't think it is strong enough to resist U.S. pressure. Hong

[liberationtech] OSS Devs: Talk about metadata!

2013-06-08 Thread Nadim Kobeissi
I want to encourage all the open source, communication and security software developers on this list to start talking about metadata. 1. Start raising awareness on what metadata is given to your software and how it's handled. 2. Don't limit your privacy policy to content but also clarify what's

Re: [liberationtech] Stop promoting Skype

2013-06-07 Thread Nadim Kobeissi
STOP PROMOTING THE INTERNET NK On 2013-06-07, at 3:16 AM, Eduardo Robles Elvira edu...@gmail.com wrote: Stop promoting google hangout and hotmail, yahoo, gmail, outlook.com... =) On Fri, Jun 7, 2013 at 8:17 AM, Jacob Appelbaum ja...@appelbaum.net wrote: Hi, Top secret PRISM program

Re: [liberationtech] Stop promoting Skype

2013-06-07 Thread Nadim Kobeissi
On 2013-06-07, at 8:31 AM, Yishay Mor yish...@gmail.com wrote: If all this already exists, why isn’t everybody doing it? Well, simply because there is no integration at all among all those objects. No. we don't need no software bundles. we don't need no sleek installers. How long does it

Re: [liberationtech] Question about otr.js

2013-06-07 Thread Nadim Kobeissi
On 2013-06-07, at 1:09 PM, Anthony Papillion anth...@cajuntechie.org wrote: On 06/06/2013 07:00 PM, Nadim Kobeissi wrote: Speaking as the lead developer for Cryptocat: OTR.js actually has had some vetting. We're keeping it experimental simply due to the experimental nature of web

Re: [liberationtech] Cryptocat Seeking Estonian, Tibetan, Uighur and Latvian Translations

2013-06-07 Thread Nadim Kobeissi
:39 PM, Nadim Kobeissi na...@nadim.cc wrote: Dear LibTech, We're on the verge of releasing a major update to Cryptocat, but we still need four translations finished. All four translations are very much complete but only lack one or two sentences each. You can contribute towards

Re: [liberationtech] Question about otr.js

2013-06-06 Thread Nadim Kobeissi
Speaking as the lead developer for Cryptocat: OTR.js actually has had some vetting. We're keeping it experimental simply due to the experimental nature of web cryptography as a whole. It's a handy library that has had a lot of consideration put into it, but it really depends on your use case

[liberationtech] Montreal Journalists: Privacy and Security Workshop

2013-06-06 Thread Nadim Kobeissi
Dear LibTech, In case there are any Montreal-based journalists on the list: I just wanted to quickly share that I'm hosting a privacy and operational security workshop for journalists here in Montreal, sponsored by The Link newspaper. https://www.facebook.com/events/167915566718007/ It's all

[liberationtech] Cryptocat Seeking Estonian, Tibetan, Uighur and Latvian Translations

2013-06-05 Thread Nadim Kobeissi
Dear LibTech, We're on the verge of releasing a major update to Cryptocat, but we still need four translations finished. All four translations are very much complete but only lack one or two sentences each. You can contribute towards the translations here: Estonian:

[liberationtech] Cryptocat Hackathon: August 17-18 in NYC

2013-05-30 Thread Nadim Kobeissi
Cryptocat, in collaboration with OpenITP, will be hosting the very first Cryptocat Hackathon weekend in New York City, on the weekend of the 17th and 18th of August 2013. Join us on August 17-18 for the Cryptocat Hackathon and help empower activists worldwide by improving useful tools and

Re: [liberationtech] Major Security Flaws in Tor Components

2013-05-24 Thread Nadim Kobeissi
Hi Moritz, My subject is hardly sensationalist. The paper purports to de-anonymize hidden services, which is a big deal. Thanks for pointing to areas of discussion — the vulnerabilities published in the paper are still major with regards to Tor Hidden Services. :/ NK On Fri, May 24, 2013 at

[liberationtech] Cryptocat: Translation Volunteers Needed

2013-05-23 Thread Nadim Kobeissi
Dear LibTech, We're working on a couple of new Cryptocat features (encrypted file sharing over OTR/video chat) and we're wondering if you could help us translate those features into the 35+ languages in which Cryptocat is available. You can begin translating right now, right here! ---

Re: [liberationtech] Cryptocat: Translation Volunteers Needed

2013-05-23 Thread Nadim Kobeissi
Thanks so much, Amin! :D NK On Thu, May 23, 2013 at 12:41 PM, Amin Sabeti aminsab...@gmail.com wrote: I've done the Persian language. Amin On 23 May 2013 10:29, Nadim Kobeissi na...@nadim.cc wrote: Dear LibTech, We're working on a couple of new Cryptocat features (encrypted file

Re: [liberationtech] Cryptocat: Translation Volunteers Needed

2013-05-23 Thread Nadim Kobeissi
Thanks very much for your help, everyone. We now have only 10 languages to go: - Catalan - Czech - Estonian - Urdu - Tibetan - Khmer - Uighur - Chinese (Hong Kong) - Bengali - Latvian NK On Thu, May 23, 2013 at 3:00 PM, Andreas Bader

Re: [liberationtech] New Yorker debut's Aaron Swartz's 'Strongbox.'

2013-05-16 Thread Nadim Kobeissi
The technical aspects aside, I find the fact that they're using Aaron Swartz as a marketing asset to be morally problematic. :/ NK On Thu, May 16, 2013 at 6:04 AM, Jacob Appelbaum ja...@appelbaum.netwrote: Sarah Lai Stirland:

Re: [liberationtech] New Yorker debut's Aaron Swartz's 'Strongbox.'

2013-05-16 Thread Nadim Kobeissi
On Thu, May 16, 2013 at 10:21 AM, Griffin Boyce griffinbo...@gmail.comwrote: Nadim Kobeissi na...@nadim.cc wrote: The technical aspects aside, I find the fact that they're using Aaron Swartz as a marketing asset to be morally problematic. :/ NK I was originally conflicted

Re: [liberationtech] Internet off in Syria?

2013-05-08 Thread Nadim Kobeissi
As someone with experience in the area, I can attest that loss of power is a likely cause or contributor. NK On Wed, May 8, 2013 at 8:21 PM, Andrew Lewis m...@andrewlew.is wrote: I'd say loss of power or something similar. I don't think they have reliable generators. Wasn't Damascus without

Re: [liberationtech] Important Iranian Filternet Changes

2013-05-05 Thread Nadim Kobeissi
I just wanted to say thank you to Collin for this very informative and interesting stuff. There's a lot more being posted on his Twitter feed for those who care. NK On Sun, May 5, 2013 at 7:37 AM, Griffin Boyce griffinbo...@gmail.comwrote: Do you think it's practical for circumvention tools

Re: [liberationtech] Android Full-Disk Encryption Cracked

2013-04-29 Thread Nadim Kobeissi
Keep in mind this is just brute-force. It's pretty fast but this has always been possible, if slower. NK On Mon, Apr 29, 2013 at 2:46 PM, Griffin Boyce griffinbo...@gmail.comwrote: Hashkill can now determine the master password for Android's full-disk encryption scheme. image showing the

Re: [liberationtech] BlackBerry and CALEA-II

2013-04-29 Thread Nadim Kobeissi
NK On Mon, Apr 29, 2013 at 9:23 PM, Jacob Appelbaum ja...@appelbaum.netwrote: Griffin Boyce: Jacob Appelbaum ja...@appelbaum.net wrote: You already know this, but for the benefit of the list snip Unless these are on a BES server - it's all insecure - if it is on a BES server, it

  1   2   3   >