Re: [liberationtech] Google Hangout the new, better skype? Was Re: Skype redux

2012-12-21 Thread Christopher Soghoian
I have asked Google's policy team, repeatedly, about what capabilities they have for intercepting Hangout conversations, and I always get the same vague no comment. Although Google is a clear transparency leader when it comes to reporting aggregate stats on the # of requests that they receive, the

Re: [liberationtech] Skype redux

2012-12-21 Thread Christopher Soghoian
Jake, The section of Skype's privacy policy that describes (with no real detail) the assistance they provide to law enforcement agencies is exactly the same text that was present before Microsoft bought the company. (See, for example: http://web.archive.org/web/20100701074213/http://www.skype.com

Re: [liberationtech] Call for Open Letter on Skype

2012-12-26 Thread Christopher Soghoian
I can't believe that I am saying this, but can we tone down the paranoia a bit please? Large US technology companies are stockpiling patents, left, right and center, primarily because of the costly patent wars that are ravaging the industry. Back in 2011, Microsoft (and a consortium of other compa

Re: [liberationtech] Skype Open Letter: CALL FOR SIGNATORIES

2013-01-16 Thread Christopher Soghoian
You may want to consider rewriting your law enforcement/government surveillance section: As a result of the service being acquired by Microsoft in 2011, it may now be required to comply with CALEA due to the company being headquartered in Redmond, Washington. Furthermore, as a US-based communicati

Re: [liberationtech] Skype Open Letter: CALL FOR SIGNATORIES

2013-01-18 Thread Christopher Soghoian
our expert advice, Chris. We're currently in the process of >> reworking the letter with assistance from the EFF and we'll take what you >> said into consideration. >> >> >> NK >> >> >> On Thu, Jan 17, 2013 at 1:58 AM, Christopher Soghoian > &

Re: [liberationtech] Skype Open Letter: CALL FOR SIGNATORIES

2013-01-18 Thread Christopher Soghoian
I think your section on law enforcement stuff could still use some work. I really think you should get rid of some of the text in the references. Specifically, delete this text: "As a result of the service being acquired by Microsoft in 2011, it may now be required to comply with CALEA due to the

Re: [liberationtech] Cryptography super-group creates unbreakable encryption

2013-02-07 Thread Christopher Soghoian
An entire article's worth of lip service? “I’m agnostic about this,” he says, “I don’t really care if Silent Circle captures this market, just as long as somebody does.” I spent the entire interview with the Verge writer complaining about the crappy security delivered by the wireless carriers, w

Re: [liberationtech] Cryptography super-group creates unbreakable encryption

2013-02-07 Thread Christopher Soghoian
hnology/future_tense/2012/10/silent_circle_mike_janke_s_iphone_app_makes_encryption_easy_governments.single.html Christopher Soghoian, principal technologist at the ACLU's Speech Privacy and Technology Project, said he was excited to see a company like Silent Circle visibly competing on privacy and security but that he was waiting for it to go open source and b

Re: [liberationtech] Cryptography super-group creates unbreakable encryption

2013-02-07 Thread Christopher Soghoian
See Inline On Thu, Feb 7, 2013 at 12:15 PM, Andy Isaacson wrote: > Silent Circle may be an excellent privacy app. It might not have any > significant security problems. It might even do a good job of > mitigating important platform-based attacks and supporting important new > use cases (the "b

Re: [liberationtech] Silent Circle to publish source code?

2012-10-11 Thread Christopher Soghoian
Hi Nadim, You didn't directly respond to Ryan's question. Have you actually spoken to anyone at Silent Circle? The Silent Circle App isn't available for download to the general public yet. As such, I think the company can be forgiven for not having source code available just yet. Why not wait unt

Re: [liberationtech] Silent Circle Dangerous to Cryptography Software Development

2012-10-11 Thread Christopher Soghoian
Hi all, When considering the threat of legally compelled assistance, I think it is useful to spell out the specific threats. The two big ones, IMHO, are 1. Compelled disclosure of data retained about users. 2. Compelled insertion of backdoors into the product. Now, folks on this list are throwin