Re: [liberationtech] uVirtus Linux, encrypted OS for Syria: a security review

2014-02-07 Thread Maxim Kammerer
On Fri, Feb 7, 2014 at 2:37 AM, Sahar Massachi sa...@brandeis.edu wrote: The fact that there's a naked sudo hole is brutal. Forgive me if I misunderstand the problem, but how could *anyone* ship a distribution with a passwordless sudo? That seems like it requires deliberate malice to even set

Re: [liberationtech] uVirtus Linux, encrypted OS for Syria: a security review

2014-02-07 Thread KheOps
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Feb 07, 2014 at 11:25:31AM +0200, Maxim Kammerer wrote: On Fri, Feb 7, 2014 at 2:37 AM, Sahar Massachi sa...@brandeis.edu wrote: The fact that there's a naked sudo hole is brutal. Forgive me if I misunderstand the problem, but how could

[liberationtech] uVirtus Linux, encrypted OS for Syria: a security review

2014-02-06 Thread KheOps
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear all, The uVirtus live distribution was publicized back in September as a secure live OS specifically designed for Syrians. It stems from the idea of having a one-click easy to use VPN client that uses OpenVPN over Obfsproxy. After testing it

Re: [liberationtech] uVirtus Linux, encrypted OS for Syria: a security review

2014-02-06 Thread Sahar Massachi
The fact that there's a naked sudo hole is brutal. Forgive me if I misunderstand the problem, but how could *anyone* ship a distribution with a passwordless sudo? That seems like it requires deliberate malice to even set up. On Thu, Feb 6, 2014 at 2:18 PM, KheOps khe...@ceops.eu wrote:

[liberationtech] uVirtus Linux, encrypted OS for Syria

2013-09-27 Thread Lorenzo Franceschi -Bicchierai
Dlshad Othman, a Syrian hacker and anti-Assad activist (you might remember him for Stephan Faris' piece on the hackers of Damascus on Businessweek) is launching uVirtus Linux today in DC (see event here: https://www.uvirtus.org/?p=139). uVIrtus Linux, according to the project's site (

Re: [liberationtech] uVirtus Linux, encrypted OS for Syria

2013-09-27 Thread Robert Guerra
quick comments from me.. 1. The press should learn from past experiences. A security tool launched by a featured/cool activist should be a warning sign. Far too many such projects have been launched with disastrous effects. coolness breeds a false sense of security 2. The press should do

Re: [liberationtech] uVirtus Linux, encrypted OS for Syria

2013-09-27 Thread intrigeri
Lorenzo Franceschi -Bicchierai wrote (27 Sep 2013 14:23:34 GMT) : What do you guys think about this project? It is hard to think about an OS before we can read the source code and try the product, so what follows should be taken with a grain of salt. Apart of the configuration management (with

Re: [liberationtech] uVirtus Linux, encrypted OS for Syria

2013-09-27 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 27/09/13 15:23, Lorenzo Franceschi -Bicchierai wrote: Thoughts? The update feature of uVirtus's Sanctuary VPN (OpenVPN obfuscated with obfsproxy) is a bit concerning. The source code has been removed from Github, but judging by the description on

Re: [liberationtech] uVirtus Linux, encrypted OS for Syria

2013-09-27 Thread Raed
Quick question on the fly, what does this OS add to exiting projects as: Liberté Linux :http://dee.su/liberte or Tails : https://tails.boum.org/ ?? -- Liberationtech is public archives are searchable on Google. Violations of list guidelines will get you moderated: