Re: [liberationtech] [SPAM:####] [SPAM:###] Mobile MIFI or WIFI for DigiSec Training?

2015-04-05 Thread Andrew Lewis
I love TP-link's MR-3040, it runs OpenWRT, which provides a ton of flexibility to do whatever you need. It doesn't have a built in modem, but has a USB port so tethering a phone or using a USB stick is easy. -Andrew On Apr 5, 2015 11:22 AM, anonymous2...@nym.hush.com wrote: Does anyone

Re: [liberationtech] secure voice options for china?

2015-02-12 Thread Andrew Lewis
From anecdotal experience: Running your own OpenVPN endpoint on a cloud provider like digitalocean* seems to work really well as long as you wrap the OpenVPN connection in something else like obfsproxy or stunnel. Theoretically if a commercial provider implemented something besides pure openvpn

Re: [liberationtech] Question EFF CA Let's Encrypt

2014-11-19 Thread Andrew Lewis
Maybe it requires DNSSEC? But if you can hijack the DNS request between wherever their servers are coming from, then there are much larger issues at play that you need to address. -Andrew On Wed, Nov 19, 2014 at 10:13 AM, Richard Brooks r...@g.clemson.edu wrote: Just looked at this:

Re: [liberationtech] Y! / SSL

2014-10-05 Thread Andrew Lewis
I am also flipping over to HTTPS, and chrome is reporting that the cert is valid, and upon inspection all looks as it should be. The trust chain goes up to a Versign root cert, so my guess is that is a bad cert you are seeing, and if inside china it might just be a plain old mitm. -Andrew On

Re: [liberationtech] gazaDeaths.com

2014-07-15 Thread Andrew Lewis
On Jul 15, 2014, at 1:17 PM, Yishay Mor yish...@gmail.com wrote: - you would track both sides That’s actually an excellent idea, are there any other stats floating around like amount of air strikes and missile launches or interceptions? -Andrew-- Liberationtech is public archives are

Re: [liberationtech] Emergency: Has TrueCrypt.org been Hijacked?

2014-05-28 Thread Andrew Lewis
The new exe is apparently signed with the same cert as the old one, and people say that the only changes so far in comparing diff's is the warning message and turning it into remove-only. (I haven't had a chance to verify myself, but these are claims from the twittersphere) -Andrew On May 28,

Re: [liberationtech] Whiteout OpenPGP.js encrypted mail client (Chrome HML5 App)

2014-01-21 Thread Andrew Lewis
There are other attacks on even chrome apps, as the recent sales of legit extensions to shady groups who use it for malware/adware distribution because Google allows transfers of ownerships and the new owners to update the extensions with anything they want. On a related note can someone who is

Re: [liberationtech] My design to implement PGP in commercial email system

2013-08-09 Thread Andrew Lewis
We have it already. People for some reason don't want to use it. Part of its usability, part of it is laziness. But it can be done. On Aug 10, 2013, at 9:32 AM, Percy Alpha percyal...@gmail.com wrote: In the light of Lavabit, Silent Circle both shut down, someone needs to invent a end to

Re: [liberationtech] Boundless Informant: the NSA's secret tool to track global surveillance data

2013-06-08 Thread Andrew Lewis
I guess the question is still, is it just them using the already existing API's or do they have colocated sniffing tools? -Andrew On Jun 9, 2013, at 3:13 PM, Trevor Timm tre...@eff.org wrote: From the Washington Post, just published: Intelligence community sources said that this

Re: [liberationtech] NSA has direct access to tech giants' systems for user data, secret ppt reveals

2013-06-06 Thread Andrew Lewis
It might be that PRISM is merely the end user tool for use by analysts at the NSA, and that the actual gathering of info falls under another program designation, with a much larger budget. PRISM isn't really even that illegal, as long as they discard communications considered to be American.

Re: [liberationtech] NSA has direct access to tech giants' systems for user data, secret ppt reveals

2013-06-06 Thread Andrew Lewis
There seems to be some confirmation via this statement from the DNI: http://www.dni.gov/index.php/newsroom/press-releases/191-press-releases-2013/869-dni-statement-on-activities-authorized-under-section-702-of-fisa On Jun 7, 2013, at 4:23 PM, x z xhzh...@gmail.com wrote: What surprised me is

Re: [liberationtech] Network surveillance

2013-06-05 Thread Andrew Lewis
Syria uses homegrown forks of squid, bluecoat, brocade, and has at least solicited for Hauwei solutions, all at the carrier level, based on directives passed down from the telecoms/security ministries. I know that the big ISPs have explicit back doors in their firewalls installed so that the

Re: [liberationtech] internet blackout in turkey?

2013-06-01 Thread Andrew Lewis
I heard rumors, on reddit so take this with a grain of salt, that power was being cut off to neighborhoods with protests. As for the capacity to cutoff Internet, I suspect every country to have a contingency for that. -Andrew On Jun 1, 2013, at 10:51 PM, hc voigt sozw...@gmail.com wrote:

Re: [liberationtech] A Digital Safe Haven for Syria

2013-05-27 Thread Andrew Lewis
Yes technically it's not even that hard, but there are various social and political roadblocks both inside and outside Syria. I still think it can be pulled off, even with the various stumbling blocks. Andrew On May 28, 2013, at 8:17 AM, Eleanor Saitta e...@dymaxion.org wrote: -BEGIN PGP

Re: [liberationtech] A Digital Safe Haven for Syria

2013-05-27 Thread Andrew Lewis
to a Cyber Command network from within Syria the effect of making one's router a part of the battlefield? Again, ymmv - gf On 5/27/13 8:37 PM, Andrew Lewis wrote: I guess the better question is there anyone else out there that would like to look further into this? I know

Re: [liberationtech] Internet off in Syria?

2013-05-08 Thread Andrew Lewis
I'd say loss of power or something similar. I don't think they have reliable generators. Wasn't Damascus without power for most of yesterday? Or it could be an actual technical error within STE, everyone feeds to STE before it heads overseas. Andrew On May 9, 2013, at 3:05 AM, Enrique Piraces

Re: [liberationtech] TomatoVPN

2013-04-12 Thread Andrew Lewis
No I'd argue that it'd be better to have one VPN, that you know is working, rather then 6 different ones. The point Griffin is making is that you will stick out if someone does any sort of traffic analysis, but you'll also stick out if your running 6 separate VPNs. Most likely as your a

Re: [liberationtech] Please Vote on Reply to Question

2013-03-21 Thread Andrew Lewis
Reply to all -- Too many emails? Unsubscribe, change to digest, or change password by emailing moderator at compa...@stanford.edu or changing your settings at https://mailman.stanford.edu/mailman/listinfo/liberationtech

Re: [liberationtech] list reply-all

2013-03-20 Thread Andrew Lewis
I find myself agreeing. While emails that reply to all when the intentioned recipient is a just a specific friend are tragic, the default reply to behavior for most emails on this list(or at least mine) is to the entire list. That's what a mailing list is for? -Andrew On Mar 20, 2013, at 9:52

Re: [liberationtech] Users flock to Japan student's firewall-busting thesis project - Network World

2013-03-15 Thread Andrew Lewis
Not trying to steal Jake or Nadiem's talking points, but why did he roll his own when there are pretty well vetted standards out there? On Mar 15, 2013 10:27 AM, Yosem Companys compa...@stanford.edu wrote: This story appeared on Network World at

Re: [liberationtech] VPNs are blocked in Iran!

2013-03-09 Thread Andrew Lewis
No TOR? On Mar 10, 2013, at 12:17 AM, Amin Sabeti aminsab...@gmail.com wrote: Hi folks, The Iranian government have been blocked all VPNs and the Iranian users cannot connect through them. According to the my sources inside Iran, Ultrasurf, Freegate and Psiphon are the only options that the

Re: [liberationtech] The Pirate Bay moving to North Korea, really ?

2013-03-05 Thread Andrew Lewis
Fake BGP announcements, and/or fake internal ip addressing. Sent from my iPhone On Mar 5, 2013, at 11:30 PM, Olivier Tesquet olivier.tesq...@gmail.com wrote: 2013/3/5 Amin Sabeti aminsab...@gmail.com See the update 3:

Re: [liberationtech] The Pirate Bay moving to North Korea, really ?

2013-03-05 Thread Andrew Lewis
I have no idea where they are physically located, but they seem to be getting inbound transit via AMS-IX, so I suspect that they are in Amsterdam, and most likely the ISP has no idea. On Mar 6, 2013, at 12:53 AM, Alejandro Fernandez sko...@gmail.com wrote: I'm not very clued in to the

Re: [liberationtech] Please help out a student!

2013-03-03 Thread Andrew Lewis
Telecomix? Anon? SEA? Of which I can provide some insight, at least on TCX. On Mar 4, 2013, at 12:28 PM, Bernard Tyers - ei8fdb ei8...@ei8fdb.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, I am doing a data visualisation project as part of an MSc programme. Part of

Re: [liberationtech] Please help out a student!

2013-03-03 Thread Andrew Lewis
, and the retaliation by civilians and the opposition forces. I did find a overview from the NYT a few days ago, but have misplaced the link. Any help appreciated! thanks, Bernard On 3 Mar 2013, at 23:55, Andrew Lewis wrote: Telecomix? Anon? SEA? Of which I can provide some insight, at least

Re: [liberationtech] digital to analog: Syria radio help needed

2013-02-04 Thread Andrew Lewis
I know some folks with telecomix had brainstormed some ideas for comms inside Syria awhile back as well. I'll try and dig that up, but my general advice is to stay off the internal telecom networks. Everything is centered in Damascus and centrally monitored, or can be cut off remotely. Andrew

Re: [liberationtech] Syrian-martyrs.com website probably compromised by virus

2013-01-29 Thread Andrew Lewis
; border=0 frameborder=0 :/ if you are running windows don't even go there!!! Andrew Lewis: I can get to this in 6 hours or so, maybe someone is willing to jump on this before then? -Andrew On Jan 30, 2013, at 11:06 AM, KheOps khe...@ceops.eu wrote: Dear Libtech, We just saw

Re: [liberationtech] Who killed Aaron Swartz?

2013-01-16 Thread Andrew Lewis
Recently I was facing what I felt was a similar situation, and the throughly process I used was not how it would affect my work, but quality of life issues around being confined and then a felon the rest of your life. Andrew On Jan 17, 2013, at 11:03 AM, Shava Nerad shav...@gmail.com wrote:

Re: [liberationtech] Tragic News: Aaron Swartz commits suicide

2013-01-13 Thread Andrew Lewis
So what needs to be done? Sent from my iPhone On Jan 14, 2013, at 10:05 AM, Maxim Kammerer m...@dee.su wrote: On Sun, Jan 13, 2013 at 10:25 PM, Samuel Carlisle samuelcarli...@gmail.com wrote: Please Upload your Academic Papers to the web and tweet the links with #pdftribute This might be

Re: [liberationtech] pdftribute/library.ru

2013-01-13 Thread Andrew Lewis
Anyone have a good interface done up, at least for academics to upload their own stuff for now, besides gdocs? On Jan 14, 2013, at 10:20 AM, Maxim Kammerer m...@dee.su wrote: On Sun, Jan 13, 2013 at 11:09 PM, Andrew Lewis m...@andrewlew.is wrote: So what needs to be done? Um... Didn't I

Re: [liberationtech] Censorship hardware - BLUECOAT IN SYIA

2012-12-02 Thread Andrew Lewis
They use IP networks for phone and cell, hence my bet is an issue at the main DC. On Dec 3, 2012, at 1:38 PM, KheOps khe...@ceops.eu wrote: Le 03/12/2012 01:11, L. Aaron Kaplan a écrit Does anyone have any info on the paths that the fiber cables are taking from Tartus till Damascus? If they

Re: [liberationtech] Censorship hardware - BLUECOAT IN SYIA

2012-12-01 Thread Andrew Lewis
There is another photo that is on a Tarasul/STE Facebook fan page that shows the same rack and some of the rest of the data center, that has been around since this summer. As for the rest of the devices, they are hooked up and functioning, just in a different rack. There is a internal network

Re: [liberationtech] Censorship hardware - BLUECOAT IN SYIA

2012-12-01 Thread Andrew Lewis
Here is a link to the Hauwei diagrams and internal structure of Tarassul. I'll add other stuff as I dig it up. https://docs.google.com/folder/d/0B2zVAXgUsk22Mk9NeHNQLVZ3VFU/edit -Andrew On Dec 2, 2012, at 11:38 AM, Andrew Lewis m...@andrewlew.is wrote: There is another photo

Re: [liberationtech] Censorship hardware - BLUECOAT IN SYIA

2012-12-01 Thread Andrew Lewis
Both are dead now apparently. On Dec 2, 2012, at 12:30 PM, KheOps khe...@ceops.eu wrote: Hi everyone, Le 01/12/2012 20:36, Bernard Tyers a écrit : About the photo: is there any idea where that photo was taken, and what date? Is it possible to get photos of the back of the rack? A

Re: [liberationtech] Syrian Internet Is Off The Air

2012-11-29 Thread Andrew Lewis
From what I remember those networks were never really in use, or at least firewalled from outside the country. -Andrew On Nov 30, 2012, at 10:16 AM, Karin Kosina ky...@kyrah.net wrote: Now, there are a few Syrian networks that are still connected to the Internet, still reachable by

Re: [liberationtech] Large amounts of spam

2012-10-31 Thread Andrew Lewis
Maybe someone is simply scrapping the archives for the sender address? On Oct 31, 2012, at 6:36 PM, Sarah Watts wrote: I am one of the...people it got; my email address was suddenly subscribed to more than thirty lists (Twenty maybe) none of which I subscribed to. I contacted

Re: [liberationtech] Best practices

2012-10-05 Thread Andrew Lewis
I'd at least wipe my phone, if not just get a burner. I suppose encryption is also an option, so that you can preload it with security apps. -Andrew On Oct 5, 2012, at 7:02 AM, Katy P katyca...@gmail.com wrote: Hi LibTech. With a certain event coming up, I'm interesting in creating a best

Re: [liberationtech] Internet/IB Mandates in the Iran Threat Reduction and Syria Human Rights Act of 2012

2012-07-30 Thread Andrew Lewis
Looking at the whole document revels that Syria is included, but only to add more sanctions. Does anyone on list know of any movement to add exceptions similar to the ones for Iran that will allow anti-censorship technologies or aid to go towards Syria? Or am I mistaken and those roadblocks

Re: [liberationtech] Hearing Syria internet cut

2012-07-20 Thread Andrew Lewis
And those prefixes cover the entire commercial Internet space, in effect all of Syria was down. There have also been reports of routing issues all day. I haven't been able to confirm. I honestly think we are headed towards a communication blackout. Andrew On Jul 20, 2012, at 4:54 AM,

[liberationtech] IP addresses linked to Syria

2012-05-17 Thread Andrew Lewis
Hey, If anyone comes across anything online that links back to Syria Government, in particular the Syrian Electric Army, I'd love to know IP addresses or other relevant info. Things I am looking for range from Malware to redirects on hacks, and anything in between. I am collecting this stuff