[liberationtech] Concerns with new Stanford University security mandate

2014-01-26 Thread Tomer Altman
to the Stanford administration. They replied to a few of my emails, but it left me with more questions than answers. I am asking for advice from the community on whether this kind of encroachment has any precedents. I'm also curious to hear people's thoughts on this matter. Thank you in advance, ~Tomer

[liberationtech] Fwd: Important-regarding data and device attestation

2014-01-29 Thread Tomer Altman
- Forwarded Message - From: Tomer Altman taltm...@stanford.edu To: Christine Scholberg chris.scholb...@stanford.edu Cc: Jack Guo-Qing Zeng gqz...@stanford.edu, Michael Duff michael.d...@stanford.edu Sent: Wednesday, January 29, 2014 7:55:57 PM Subject: Re: Important-regarding data

Re: [liberationtech] need advice on using hashes for preserving PII's utility for disambiguation while protecting sensitive info

2014-02-10 Thread Tomer Altman
I'm not sure if this exactly addresses your needs, but I believe it is relevant: https://en.wikipedia.org/wiki/Differential_privacy HTH, ~T - Original Message - From: Tom Lee t...@sunlightfoundation.com To: liberationtech@lists.stanford.edu, sunlightl...@googlegroups.com Sent:

Re: [liberationtech] A tool for encrypted laptops

2014-05-09 Thread Tomer Altman
A related tool which employs Bluetooth to detect if your laptop from you has been untimely ripped: http://blueproximity.sourceforge.net You can tweak it to do arbitrary things when it gets tripped, so it can be scripted to hiberate. HTH, ~T - Original Message - From: Tom Ritter

[liberationtech] Anonymity / privacy considerations of HTTP 'referer' information

2014-05-14 Thread Tomer Altman
It occurred to me that the HTTP 'referer' header field leaks information about your browsing history. In the flurry of recommendations and tips on how to guard your privacy / stay anonymous online that I have seen over the past year (such as the BestVPN.com list), I don't recall seeing the HTTP

Re: [liberationtech] Anonymity / privacy considerations of HTTP 'referer' information

2014-05-14 Thread Tomer Altman
'referer' information Quoth Tomer Altman: It occurred to me that the HTTP 'referer' header field leaks information about your browsing history. Privoxy also can hide the referrer header (I can't remember if it does by default). I figured that if any project would be sensitive to this kind of leak

Re: [liberationtech] Cryptography Leak in Enigmail / GnuPG

2014-06-02 Thread Tomer Altman
Is this really a cryptographic leak? This seems more like metadata to me. Your subject line makes it sound as if the cryptographic software itself is leaking information about the plain-text. If your concern is providing details that an attacker can use to crack your encryption, then this is

Re: [liberationtech] Cryptography Leak in Enigmail / GnuPG

2014-06-02 Thread Tomer Altman
, June 2, 2014 2:06:16 PM Subject: Re: [liberationtech] Cryptography Leak in Enigmail / GnuPG Il 6/2/14, 6:43 PM, Tomer Altman ha scritto: Can you state precisely the threat model that you are concerned about? You are right, the subject is not directly related to cryptography but to security