July 2018 - cypherpunks-legacy

[Politech] Is your domain safe from suspension? Here's a survey of registrars [fs]
by Declan McCullagh 05 Jul '18

05 Jul '18

So the discussion on Politech about the reliability of domain registrars led to this survey, which we published today: http://news.com.com/2100-1025_3-6155614.html Excerpt: "We found that the French registrar Gandi.net and New Orleans-based DirectNIC offered the most extensive guarantees against unnecessary domain name suspension." I've included the survey questions below. Previous Politech messages: http://www.politechbot.com/2007/01/29/jim-davidson-on/ http://www.politechbot.com/2007/01/29/response-to-godaddys/ -Declan --- 1. Under what circumstances will you suspend a customer's domain name based on the content of his or her Web site, in the absence of a court order? 2. How many times a month, on average, do you suspend a customer's domain name based on the content of his or her Web site? 3. What are the most common reasons for suspension? 4. How many domain names do your customers currently have registered through you? 5. GoDaddy last week suspended its customer's domain, seclists.org, because of a complaint from MySpace. Would you have done the same thing in the same way if seclists.org happened to be your customer? 6. If you do suspend domain names in the absence of a court order, what procedures do you have in place to ensure that the customer is notified beforehand and given adequate opportunity to respond? 7. Do you believe that your most important responsibility is to provide technical services to paying customers -- or is it to police the content of their Web sites, FTP sites, and so on? 8. Are you attempting to recruit GoDaddy customers as a result of last week's news about seclists.org? 9. If you do suspend domain names in the absence of a court order, how do your customers go about getting their sites restored? 10. Do you have a dedicated department or person who handles issues related to domain name suspensions? _______________________________________________ Politech mailing list Archived at http://www.politechbot.com/ Moderated by Declan McCullagh (http://www.mccullagh.org/) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[Politech] Will security firms detect police spyware? A survey of 13 of them [priv]
by Declan McCullagh 05 Jul '18

05 Jul '18

Last week I sent out a note wondering about the Feds forcing security companies to whitelist police spyware (either through a court order or old-fashioned coercion): http://www.politechbot.com/2007/07/12/dea-key-logger/ Subsequently, a colleague at CNET and I did a survey asking 13 of the top anti-spyware vendors, including Symantec, McAfee, IBM, and Microsoft, three questions: 1. Have you ever had any discussions with any government agency, not counting conversations related to a lawful court order signed by a judge, about not detecting spyware or keystroke loggers installed by a police or intelligence agency? 2. Is it your policy to alert the user to the presence of any spyware or keystroke logger, even if it is installed by a police or intelligence agency in the absence of a lawful court order signed by a judge? 3. Have you ever received such a court order signed by a judge requiring you to cooperate with law enforcement authorities in terms of not detecting government-installed spyware or delivering government spyware to your users? The short answer is that we received "No" answers from all 13 companies to the second question. But not all would reply to the third. The article with the summary of the survey is here: http://news.com.com/2100-7348_3-6197020.html The actual survey results, verbatim, are here: http://news.com.com/2100-7348_3-6196990.html -Declan _______________________________________________ Politech mailing list Archived at http://www.politechbot.com/ Moderated by Declan McCullagh (http://www.mccullagh.org/) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

National ID bill vote results and more
by Downsizer-Dispatch＠DownsizeDC.org 05 Jul '18

05 Jul '18

D o w n s i z e r - D i s p a t c h |*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*| We have two important bits of news to share with you today. One has to do with the House ID Card vote. We have the results, what they mean, and what comes next. The other has to do with a new, hip, pro-liberty radio show now broadcasting on several stations. We want you to know about them. Why? Well, the hosts are DC Downsizers and the program broadcasts our radio spots. Please read on... House approves electronic ID cards Declan McCullagh of CNET News.com reported late yesterday, "The U.S. House of Representatives approved on Thursday a sweeping set of rules aimed at forcing states to issue all adults federally approved electronic ID cards, including driver's licenses. Under the rules, federal employees would reject licenses or identity cards that don't comply, which could curb Americans' access to airplanes, trains, national parks, federal courthouses and other areas controlled by the federal government. The bill was approved by a 261-161 vote." See McCullagh's full report: http://tinyurl.com/586xq McCullagh went on to write, "Thursday's vote mostly fell along party lines. About 95 percent of the House Republicans voted for the bill, which had been prepared by the judiciary committee chairman, F. James Sensenbrenner, a Wisconsin Republican. More than three-fourths of the House Democrats opposed it." So have we lost? NO! These are exactly the same provisions we fought when the House passed HR 10 last Fall. If you recall, the Senate opposed these provisions, and they were dropped from the final bill. The fight will now return to the Senate - where we must win because the President has publicly thrown his weight behind it. The odds are decent that we can stop this bill. In the meantime, you can note how your Representative voted. Did they vote your interests? Check it out for yourself. http://clerk.house.gov/evs/2005/roll031.xml Free Talk Live & Downsize DC Free Talk Live is talk radio unlike any other. In an industry where shows are either pro-republican or pro-democrat, Free Talk Live is unabashedly pro- FREEDOM. Typical talk radio is heavy on call-screening. Some hosts are afraid of certain issues. Free Talk Live is not. The show is called Free Talk Live because listeners are Free to call in and Talk about anything from the political to the personal. You can hear it Live 6 days per week. Who is Free Talk Live? Ian & Manwich, and the other co-hosts are all hard-core DC Downsizers. Free Talk Live has only been syndicated for 2 months. So far, they're on in 4 markets. The complete list is here: http://freetalklive.com/affiliates.php Free Talk Live has been running Downsize DC's radio spots for a long time now - since the days when they were just a local show in Tampa Bay. These days, Downsize DC spots run as "fill" on the show. That means if that if they have unsold inventory, the spots run at least once per hour. Currently, most of the inventory is unsold, and Downsize DC is getting at least 17 airings per week. Imagine the exposure Downsize DC would get if Free Talk Live were on in 20, 50, or 100 markets! It will happen eventually, but it will happen sooner if you would do the following: Help get the show on in your market. This whole process only takes a couple of minutes. 1. Go to http://radio-locator.com. Type in your city and state, and find all the "News/Talk" and "Talk" stations in your area. 2. Call each one, and ask to speak with the Program Director. Tell him that you want to hear Free Talk Live 6 nights (or days depending on your time zone) per week! 3. While you're at it, ask him or her to add Harry Browne on Saturday nights as well. Both shows are broadcast on the Genesis Communications Network (gcnlive.com) And Harry Browne also plays the Downsize DC radio spots. For Liberty, Jim Babka President DownsizeDC.org, Inc. |*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*|*| D o w n s i z e r - D i s p a t c h is the official email list of http://www.DownsizeDC.org. CONTRIBUTE to this project at http://www.downsizedc.org/contribute.shtml http://www.DownsizeDC.org is sponsored by DownsizeDC.org, Inc. -- a non-profit educational organization promoting the ideas of individual liberty, personal responsibility, free markets, and small government. VISIT the Foundation's web site at http://www.DownsizeDC.org UNSUBSCRIBE from this list by sending a text only (no HTML) email to distribution-request(a)DownsizeDC.org with the word unsubscribe on the first line of the body of the message. Please leave the rest of the message blank. SUBSCRIBE to this list by sending a text only (no HTML) email to distribution-request(a)DownsizeDC.org with the word subscribe on the first line of the body of the message. Please leave the rest of the message blank. CHANGE your subscription address by subscribing your new address and unsubscribing your old address. You are encouraged to forward this message to friends and business associates, and permission is hereby granted to reproduce any items herein as long as attribution is provided for articles and the subscription instructions above are included. --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

[Politech] Is your domain safe from suspension? Here's a survey of registrars [fs]
by Declan McCullagh 05 Jul '18

05 Jul '18

So the discussion on Politech about the reliability of domain registrars led to this survey, which we published today: http://news.com.com/2100-1025_3-6155614.html Excerpt: "We found that the French registrar Gandi.net and New Orleans-based DirectNIC offered the most extensive guarantees against unnecessary domain name suspension." I've included the survey questions below. Previous Politech messages: http://www.politechbot.com/2007/01/29/jim-davidson-on/ http://www.politechbot.com/2007/01/29/response-to-godaddys/ -Declan --- 1. Under what circumstances will you suspend a customer's domain name based on the content of his or her Web site, in the absence of a court order? 2. How many times a month, on average, do you suspend a customer's domain name based on the content of his or her Web site? 3. What are the most common reasons for suspension? 4. How many domain names do your customers currently have registered through you? 5. GoDaddy last week suspended its customer's domain, seclists.org, because of a complaint from MySpace. Would you have done the same thing in the same way if seclists.org happened to be your customer? 6. If you do suspend domain names in the absence of a court order, what procedures do you have in place to ensure that the customer is notified beforehand and given adequate opportunity to respond? 7. Do you believe that your most important responsibility is to provide technical services to paying customers -- or is it to police the content of their Web sites, FTP sites, and so on? 8. Are you attempting to recruit GoDaddy customers as a result of last week's news about seclists.org? 9. If you do suspend domain names in the absence of a court order, how do your customers go about getting their sites restored? 10. Do you have a dedicated department or person who handles issues related to domain name suspensions? _______________________________________________ Politech mailing list Archived at http://www.politechbot.com/ Moderated by Declan McCullagh (http://www.mccullagh.org/) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[Politech] Will security firms detect police spyware? A survey of 13 of them [priv]
by Declan McCullagh 05 Jul '18

05 Jul '18

Last week I sent out a note wondering about the Feds forcing security companies to whitelist police spyware (either through a court order or old-fashioned coercion): http://www.politechbot.com/2007/07/12/dea-key-logger/ Subsequently, a colleague at CNET and I did a survey asking 13 of the top anti-spyware vendors, including Symantec, McAfee, IBM, and Microsoft, three questions: 1. Have you ever had any discussions with any government agency, not counting conversations related to a lawful court order signed by a judge, about not detecting spyware or keystroke loggers installed by a police or intelligence agency? 2. Is it your policy to alert the user to the presence of any spyware or keystroke logger, even if it is installed by a police or intelligence agency in the absence of a lawful court order signed by a judge? 3. Have you ever received such a court order signed by a judge requiring you to cooperate with law enforcement authorities in terms of not detecting government-installed spyware or delivering government spyware to your users? The short answer is that we received "No" answers from all 13 companies to the second question. But not all would reply to the third. The article with the summary of the survey is here: http://news.com.com/2100-7348_3-6197020.html The actual survey results, verbatim, are here: http://news.com.com/2100-7348_3-6196990.html -Declan _______________________________________________ Politech mailing list Archived at http://www.politechbot.com/ Moderated by Declan McCullagh (http://www.mccullagh.org/) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Call for hardware researchers/hackers
by Nathan of Guardian 05 Jul '18

05 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 One other project to review. Back in November, one of my students at NYU ITP led the technical effort of a project called the "L Train Notwork", a temporary pirate wifi network with custom LAN-based social apps and content, that ran for a time on the New York City subway. It was a big conceptual success, and people on the train during the hours it was deployed actually used their wifi enabled devices to access content that was not otherwise available on the public internet, out of reach of censors, loggers and filters. The happening itself was widely covered, but what was not shared widely enough, was that the code and design specs for how to build your own were also released. You can find everything you need to know at http://www.boxysean.com/projects/l-train-notwork.html and get in touch with the very talented Sean there. Nathan of Guardian <nathan(a)guardianproject.info> wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA256 > > > >Cyrus Farivar <cfarivar(a)gmail.com> wrote: > >> >>I'm more interested in the kit, the hardware, than software. > >I think I get what you are looking for. Mostly the emerging trend we >are seeing is that the equivalent of $100usd gets you a very decent >smartphone, and while we know it is junk, there is a $30usd tablet >being touted in India. I believe people have posted about the Hauewei >Ideos to this list before, and if you search DealsExtreme or AliExpress >you will find a wide variety of generic Chinese android devices poised >to flood the developing world. > >While you aren't writing about software, it should be known that we >care and even focus on this level of device even more than the latest >4g extreme geniousphone. It is entirely possible to run Tor, secure >chat, encrypted SMS, and gpgemail on a 2.5g edge network from a very >inexpensive mobile device. > >When you start running VoIP servers on one of these, as the Serval >project does, and you combine it with the Commotion suitcase mesh, you >start to get some pretty exciting possibilities that are affordable and >reasonably could happen with easily accessible consumer kit. > >Best, > Nathan > > >- -- >Sent from Kaiten Mail for Android. Please excuse my brevity. >-----BEGIN PGP SIGNATURE----- >Version: APG v1.0.8 > >iJAEAREIADgFAk8q3FgxHE5hdGhhbiBvZiBHdWFyZGlhbiA8bmF0aGFuQGd1YXJk >aWFucHJvamVjdC5pbmZvPgAKCRDSrNIDs3TL0rIOAP9JIXT2lyfFsEY5uieSDtnP >CFiFgFKPuO6TAViuJj82rgD9E5O3Meay1vM2+kiwR3C2NSEIugftltsZufDJnbmj >62g= >=UGbV >-----END PGP SIGNATURE----- - -- Sent from Kaiten Mail for Android. Please excuse my brevity. -----BEGIN PGP SIGNATURE----- Version: APG v1.0.8 iJAEAREIADgFAk8q5P4xHE5hdGhhbiBvZiBHdWFyZGlhbiA8bmF0aGFuQGd1YXJk aWFucHJvamVjdC5pbmZvPgAKCRDSrNIDs3TL0hI3AP9243tO3JqWFbPgzO3M0pbD +6IaIrtBcAKo+kdgmxEftQD+Op6Z6aBv2glcw1U2oxj3W6c/nVpPDbZAA0d9c5VJ xXM= =8J9G -----END PGP SIGNATURE----- _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Ethiopia criminalizes Skype?
by Brian Conley 05 Jul '18

05 Jul '18

That was also my first thought. In Afghanistan, for example, out Iyad illegal to run voice or SMS gateways due to telco restrictions (and probably others). Until last year this made running SMS projects legally very difficult because the telcos didn't have good facilities for interfacing with small contractors, among other things. On Jun 15, 2012 3:16 PM, "Eva Galperin" <eva(a)eff.org> wrote: > Criminalizing VOIP in order to preserve government and crony-held > monopolies on telecommunications is not uncommon. Companies like BiTek > sell VOIP-management tools to governments specifically aimed at > detecting and blocking Skype calls in order to preserve the revenue for > state-run telecoms. > > I would be much more worried about the proclamationsb anti-terrorism and > defamatory laws related provisions. > > > ************************************************ > Eva Galperin > International Freedom of Expression Coordinator > Electronic Frontier Foundation > eva(a)eff.org > (415) 436-9333 ex. 111 > ************************************************ > > On 6/15/12 11:18 AM, David Johnson wrote: > > http://www.techcentral.co.za/ethiopia-criminalises-skype/32723/ > > > > Ethiopiabs state-owned Internet service provider, the Ethiopian > > Telecommunication Corporation (Ethio-Telcom), has begun performing > > deep-packet inspection of all Internet traffic in the country. The > > countrybs government recently ushered in new legislation that > criminalises > > the use of services such as Skype, Google Talk and other forms of > Internet > > phone calling. ... > > > > > > > > > > _______________________________________________ > > liberationtech mailing list > > liberationtech(a)lists.stanford.edu > > > > Should you need to change your subscription options, please go to: > > > > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > > > If you would like to receive a daily digest, click "yes" (once you click > above) next to "would you like to receive list mail batched in a daily > digest?" > > > > You will need the user name and password you receive from the list > moderator in monthly reminders. You may ask for a reminder here: > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > > > Should you need immediate assistance, please contact the list moderator. > > > > Please don't forget to follow us on http://twitter.com/#!/Liberationtech > _______________________________________________ > liberationtech mailing list > liberationtech(a)lists.stanford.edu > > Should you need to change your subscription options, please go to: > > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > If you would like to receive a daily digest, click "yes" (once you click > above) next to "would you like to receive list mail batched in a daily > digest?" > > You will need the user name and password you receive from the list > moderator in monthly reminders. You may ask for a reminder here: > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > Should you need immediate assistance, please contact the list moderator. > > Please don't forget to follow us on http://twitter.com/#!/Liberationtech > _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Call for hardware researchers/hackers
by Nathan of Guardian 05 Jul '18

05 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 One other project to review. Back in November, one of my students at NYU ITP led the technical effort of a project called the "L Train Notwork", a temporary pirate wifi network with custom LAN-based social apps and content, that ran for a time on the New York City subway. It was a big conceptual success, and people on the train during the hours it was deployed actually used their wifi enabled devices to access content that was not otherwise available on the public internet, out of reach of censors, loggers and filters. The happening itself was widely covered, but what was not shared widely enough, was that the code and design specs for how to build your own were also released. You can find everything you need to know at http://www.boxysean.com/projects/l-train-notwork.html and get in touch with the very talented Sean there. Nathan of Guardian <nathan(a)guardianproject.info> wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA256 > > > >Cyrus Farivar <cfarivar(a)gmail.com> wrote: > >> >>I'm more interested in the kit, the hardware, than software. > >I think I get what you are looking for. Mostly the emerging trend we >are seeing is that the equivalent of $100usd gets you a very decent >smartphone, and while we know it is junk, there is a $30usd tablet >being touted in India. I believe people have posted about the Hauewei >Ideos to this list before, and if you search DealsExtreme or AliExpress >you will find a wide variety of generic Chinese android devices poised >to flood the developing world. > >While you aren't writing about software, it should be known that we >care and even focus on this level of device even more than the latest >4g extreme geniousphone. It is entirely possible to run Tor, secure >chat, encrypted SMS, and gpgemail on a 2.5g edge network from a very >inexpensive mobile device. > >When you start running VoIP servers on one of these, as the Serval >project does, and you combine it with the Commotion suitcase mesh, you >start to get some pretty exciting possibilities that are affordable and >reasonably could happen with easily accessible consumer kit. > >Best, > Nathan > > >- -- >Sent from Kaiten Mail for Android. Please excuse my brevity. >-----BEGIN PGP SIGNATURE----- >Version: APG v1.0.8 > >iJAEAREIADgFAk8q3FgxHE5hdGhhbiBvZiBHdWFyZGlhbiA8bmF0aGFuQGd1YXJk >aWFucHJvamVjdC5pbmZvPgAKCRDSrNIDs3TL0rIOAP9JIXT2lyfFsEY5uieSDtnP >CFiFgFKPuO6TAViuJj82rgD9E5O3Meay1vM2+kiwR3C2NSEIugftltsZufDJnbmj >62g= >=UGbV >-----END PGP SIGNATURE----- - -- Sent from Kaiten Mail for Android. Please excuse my brevity. -----BEGIN PGP SIGNATURE----- Version: APG v1.0.8 iJAEAREIADgFAk8q5P4xHE5hdGhhbiBvZiBHdWFyZGlhbiA8bmF0aGFuQGd1YXJk aWFucHJvamVjdC5pbmZvPgAKCRDSrNIDs3TL0hI3AP9243tO3JqWFbPgzO3M0pbD +6IaIrtBcAKo+kdgmxEftQD+Op6Z6aBv2glcw1U2oxj3W6c/nVpPDbZAA0d9c5VJ xXM= =8J9G -----END PGP SIGNATURE----- _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Ethiopia criminalizes Skype?
by Brian Conley 05 Jul '18

05 Jul '18

That was also my first thought. In Afghanistan, for example, out Iyad illegal to run voice or SMS gateways due to telco restrictions (and probably others). Until last year this made running SMS projects legally very difficult because the telcos didn't have good facilities for interfacing with small contractors, among other things. On Jun 15, 2012 3:16 PM, "Eva Galperin" <eva(a)eff.org> wrote: > Criminalizing VOIP in order to preserve government and crony-held > monopolies on telecommunications is not uncommon. Companies like BiTek > sell VOIP-management tools to governments specifically aimed at > detecting and blocking Skype calls in order to preserve the revenue for > state-run telecoms. > > I would be much more worried about the proclamationsb anti-terrorism and > defamatory laws related provisions. > > > ************************************************ > Eva Galperin > International Freedom of Expression Coordinator > Electronic Frontier Foundation > eva(a)eff.org > (415) 436-9333 ex. 111 > ************************************************ > > On 6/15/12 11:18 AM, David Johnson wrote: > > http://www.techcentral.co.za/ethiopia-criminalises-skype/32723/ > > > > Ethiopiabs state-owned Internet service provider, the Ethiopian > > Telecommunication Corporation (Ethio-Telcom), has begun performing > > deep-packet inspection of all Internet traffic in the country. The > > countrybs government recently ushered in new legislation that > criminalises > > the use of services such as Skype, Google Talk and other forms of > Internet > > phone calling. ... > > > > > > > > > > _______________________________________________ > > liberationtech mailing list > > liberationtech(a)lists.stanford.edu > > > > Should you need to change your subscription options, please go to: > > > > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > > > If you would like to receive a daily digest, click "yes" (once you click > above) next to "would you like to receive list mail batched in a daily > digest?" > > > > You will need the user name and password you receive from the list > moderator in monthly reminders. You may ask for a reminder here: > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > > > Should you need immediate assistance, please contact the list moderator. > > > > Please don't forget to follow us on http://twitter.com/#!/Liberationtech > _______________________________________________ > liberationtech mailing list > liberationtech(a)lists.stanford.edu > > Should you need to change your subscription options, please go to: > > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > If you would like to receive a daily digest, click "yes" (once you click > above) next to "would you like to receive list mail batched in a daily > digest?" > > You will need the user name and password you receive from the list > moderator in monthly reminders. You may ask for a reminder here: > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > Should you need immediate assistance, please contact the list moderator. > > Please don't forget to follow us on http://twitter.com/#!/Liberationtech > _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [HacDC:Byzantium] cjdns review
by Caleb James DeLisle 05 Jul '18

05 Jul '18

Not sure if I need to be on that list so I just sent it to you. On 11/26/2012 11:53 AM, Eugen Leitl wrote: > ----- Forwarded message from Ben Mendis <ben.mendis(a)gmail.com> ----- > > From: Ben Mendis <ben.mendis(a)gmail.com> > Date: Mon, 26 Nov 2012 11:42:23 -0500 > To: Byzantium(a)hacdc.org > Subject: Re: [HacDC:Byzantium] cjdns review > Organization: Antenna House > User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Thunderbird/17.0 > Reply-To: Byzantium(a)hacdc.org > > To be specific, I don't think CJDNS is a bad technology. On the > contrary, I think it is interesting and will have a valuable role in > influencing then next few decades of the Internet. However it's not a > replacement for the use cases that Byzantium Linux or Commotion Wireless > try to address. While most of the CJDNS fanboys will try to tell you > that CJDNS can replace Layer-3 routing (and they're not completely > wrong) the problem is that it's not a practical alternative for our > deployment model. > > Creating connections between nodes in CJDNS requires more collusion in > that new nodes must know the correct public key and password to create a > link with another existing node. This is good for security, but not > conducive to the rapid and organic deployment that we're looking for. > Furthermore, as a mobile node roams from one AP to the next, they would > need to re-negotiate the link (and discover key/pw again) with each new AP. This is true for now, I'm working on a patch to connect nodes on the same LAN by beaconing out a key/passwd. The UDP/IP4 connector needs security because otherwise you let the whole internet in. > > If the AP offers up some kind of layer-3 routing to other networks which > have nodes (such as the Internet) then you don't have the re-negotiation > problem. However, in our use case Internet access is not a guarantee. > And what provides for that layer-3 routing anyways? We'll that's exactly > what Byzantium and Commotion try to solve with OSLR or Babel or BATMAN. > > Furthermore, CJDNS doesn't route IPv4 traffic to the IPv4 Internet, at > least not by itself. You would need to do some kind of 4-in-6 tunneling. > Which is yet another layer of overhead and latency, and another "moving > piece" that can fail and disrupt service for users. The switch layer will carry whatever you like with 52 bytes of overhead. IPv4 tunneling over the switch layer is written but unfinished/untested. https://github.com/cjdelisle/cjdns/tree/master/tunnel > > So based on my understanding of CJDNS, it's not a competing technology > in our problem domain, although some of the functionality overlaps. And > in certain cases, they are actually complimentary projects. CJDNS, in > its typical and most practical deployment, is an overlay network. That > means it needs an existing network to run on top of, and that's exactly > what Byzantium or Commotion can provide. > > > A couple of other points of interest I've come across. > > Starting with Wikipedia (I know it's not authoritative and often out of > date). > " The address is generated initially when a node is set up, through a > brute-forced key generation process (keys are repeatedly generated until > the result of double SHA-512 begins with 0xFC). This process is unique, > as it guarantees cryptographically bound addresses (the double SHA-512 > of the public key), sourced from random data (private key is random > data, public key is the scalar multiplication of this data)." > > Two things. First of all, wouldn't brute-forcing the key generation > exhaust the entropy available in /dev/random and force the use of less > random bits from /dev/urandom? Also, don't the public/private keys need > to be based on prime numbers, not just random numbers? The strength of > RSA is the assumption that factorization of large _prime_ numbers is > mathematically a hard problem to solve. This last part is probably just > the Wiki-author's misunderstanding. I'm giving cjd the benefit of the > doubt because he seems like he would know better. Randomness is really weird. For example I can brute force a key by taking one random number then incrementing it by 1 every time after, if the original number is safe every number thereafter is also safe. Cjdns gets it's numbers from the libevent arc4 PRNG which is cloned from the BSD code. I understand this PRNG is also used by TOR. BTW the libevent arc4 PRNG does seed using dev/urandom, I've never heard of any solid research on the whole "less random" thing, as long as the kernel PRNG isn't completely broken, I see no reason why urandom should be measurably less safe. There seems to be an urban myth about these "less random" random sources probably perpetuated by the people selling hardware random generators. The prime thing is not needed because we're not generating RSA keys, these are Curve25519 ECC keys which are only good for Diffie Hellman key agreement and I'm just following the API as specified here: http://nacl.cr.yp.to/secretbox.html > >>From the projectmeshnet wiki. > "While you can technically add as many as 255 peers, more is not better. > The software likes to run with about 3 peers and will work fine even if > only 1 of them is functioning. ~ CJD" > > A limitation of 255 peers seems arbitrary and actually quite low. I'm > sure it would be fine for permanent infrastructure nodes, however it > seems quite restrictive for mobile ad-hoc nodes which might roam in and > out of range with dozens or hundreds of other nodes. Nothing in the protocol prevents it, it's just an implementation limit because nobody has written a number encoding scheme for numbers >255. Other nodes do not care about your encoding method so this is strictly an implementation detail. > > I still think CDJNS is a cool project and I'm keeping an eye on it, just > not for rapid deployment in disaster relief scenarios. The usability I think this is valid for the moment. Lots of unfinished work. The 64k$ question is, does it make more sense to hack on current tech because cjdns isn't there yet or to hack on cjdns because in 3 years, current tech is going to be outdated. My answer to that question is obvious but it's a personal decision for everyone. > cost, while modest compared to alternative overlay networks, is still > quite high in comparison to the solution we have been building. > Hypothetically, we could make CJDNS just as automatic, but in the > process we would be discarding some of the security benefits it's trying > to achieve. > > No one tool is a panacea for the problems facing the Internet. The use > cases we are facing today are so diverse that no single solution can > encompass them all. Projects like CJDNS and Byzantium are successful > because they focus on solving one chunk of the problem space and doing > it as well as possible without getting distracted by every shiny use > case that comes along. We also benefit from adherence to standards and > best practices that allow us to interoperate with the other projects > that are solving other chunks of the problem space. I appreciate the complements, I hope you don't pull punches for my sake. "Throw it out, it all sucks" is kind of the cjdns motto so when something in cjdns is broke ass, I want to know so we can decide if we want to change it and whether that's a protocol break or just an implementation detail which we can punt off till later. Thanks, Caleb > > That's my $0.02. > > Ben the Pyrate > > On 11/26/2012 09:25 AM, Eugen Leitl wrote: >> Guys, can you give me the beef with what you think >> is wrong with cjdns' design? Please make sure to >> look at the latest work, including L2 transport. >> >> I'll forward your comments to cjd. >> > > > > > ----- End forwarded message ----- > ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0