July 2018 - cypherpunks-legacy

Re: [serval-project-dev] Architecture questions
by Jeremy Lakeman 06 Jul '18

06 Jul '18

Yes we currently default to using BATMAN to generate the route's between nodes on the network. We also support olsr as the underlying mesh routing protocol. And we can run our software with a network of just an access point and its clients, mainly to support clients that don't allow the right wifi modes for mesh networking. And longer term we intend to replace the mesh routing layer with our own protocol layer. Our long term goals also include removing the need for running a full blown asterisk installation, and SIP client, on a phone with effectively only one extension. This would also drastically reduce our installation size. The main pieces of work that will need to be done for any port as I see them; - see if we can connect to, or start, an adhoc wifi network. May be impossible. - compile and run dna for number -> network address resolution. - minimal VOIP server, perhaps with simplified network protocol, to handle in/out call state. Porting asterisk might work, but is overkill. - UI layer for user interaction, dialing, answering and configuration. On Sun, Nov 27, 2011 at 6:21 PM, Ben Hughes <ben(a)benrhughes.com> wrote: > This is my basic understanding of the Serval architecture, please let me > know if it's misguided: > > - BATMAN is the underlying protocol that is used to connect nodes on the > mesh > - DNA is a layer on top of batman that lets you use claimed numbers (and a > public/private key pair) to identify nodes on the batman mesh > - when you make a mesh call, DNA resolves the number to a batman ip, and > then attempts to establish a SIP connection (via asterix) to that address > > I know that there's more to it than that (social verification of claimed > numbers, bridging networks, DID etc) but is that basically correct? > > If so, batman seems as though it's a vital (and complex) component in the > stack. And from what I can tell, it seems pretty tied to *nix. > > If I'm looking to port DNA to WP7, do I first need to port batman? Or put > another way: is there any value in a batman-less DNA? > > Cheers, > > Ben > > -- > You received this message because you are subscribed to the Google Groups > "Serval Project Developers" group. > To post to this group, send email to > serval-project-developers(a)googlegroups.com. > To unsubscribe from this group, send email to > serval-project-developers+unsubscribe(a)googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/serval-project-developers?hl=en. > -- You received this message because you are subscribed to the Google Groups "Serval Project Developers" group. To post to this group, send email to serval-project-developers(a)googlegroups.com. To unsubscribe from this group, send email to serval-project-developers+unsubscribe(a)googlegroups.com. For more options, visit this group at http://groups.google.com/group/serval-project-developers?hl=en. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Police using social media for surveillance? -- send us your thoughts
by Fabio Pietrosanti (naif) 06 Jul '18

06 Jul '18

Have you saw tools such as Maltego [1] and/or Palantir [2] to apply deep OSINT techniques, including social network monitoring and analysis? Those stuff are already widely used by two kind of people: - Marketing - Security (being private/public, democratic or non-democratic) I am sometime curious to see this huge attention to surveillance technologies like if it's "something new", while it always existed, it's there publicly known on the website of surveillance producers and at surveillance trade-expo. There are also very nice tools [3] to handle "group of investigators" doing infiltration in social network using multiple identities, quite nice tools i've evaluated in past. -naif [1] - http://maltego.blogspot.com/2011/10/maltego-and-social-networks-video.html [2] - http://www.palantir.com/labs/social-network-analysis [3] - http://www.terrogence.com/product.php?ID=15 On 2/20/12 5:03 AM, Rami Khater wrote: > Hi all, > > Tomorrow (Monday Feb 20th) The Stream is doing a show on how police use social media. Some say it involves the public in community policing and others raise privacy concerns. > > You can participate in the conversation live at 19:30 GMT (2:30 PM EST) via http://stream.aljazeera.com and via the hashtag #ajstream on twitter anytime. _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

None
by registration＠ifilm.com 06 Jul '18

06 Jul '18

1 0

Re: [cryptography] fyi: Sovereign Keys: an EFF proposal for more secure TLS authentication
by Adam Back 06 Jul '18

06 Jul '18

Yes, its the way I would've done it. Actually coincidentally I already did propose doing it exactly that way in around 1999: http://www.cypherspace.org/p2p/auditable-namespace.html (That was about censor resistant DNS->ip mapping with public auditability. And that might still be something to think about with the current us governments habit of seizing domains without legal due process. Anyway the same technique should work for public keys ... map a name to its IP address and the hash of its public key, or its public key. My view is that these mappings are global and even with legal due process, you dont want a local legal authority to be able to override a global view. Global views are conflicting. Even somethings that are forbidden in one area as may not be forbidden in another, or may even be mandatory! Local legal conclusions should be advisory for the local area. Adam On Sun, Nov 27, 2011 at 08:12:00AM +0200, Martin Paljak wrote: > No, they had ecc and I saw no references to hash chains or trees. But that > would be a right/interesting direction. > On Nov 27, 2011 12:42 AM, "Adam Back" <adam(a)cypherspace.org> wrote: > >> I only skimmed the high level but I presume they would be using a merkle >> hash-tree and time-stamp server or something like that so it cant revise >> its >> story later and its current state can be audited by anyone against its >> advertised information. >> >> Adam _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [serval-project-dev] Architecture questions
by Jeremy Lakeman 06 Jul '18

06 Jul '18

Yes we currently default to using BATMAN to generate the route's between nodes on the network. We also support olsr as the underlying mesh routing protocol. And we can run our software with a network of just an access point and its clients, mainly to support clients that don't allow the right wifi modes for mesh networking. And longer term we intend to replace the mesh routing layer with our own protocol layer. Our long term goals also include removing the need for running a full blown asterisk installation, and SIP client, on a phone with effectively only one extension. This would also drastically reduce our installation size. The main pieces of work that will need to be done for any port as I see them; - see if we can connect to, or start, an adhoc wifi network. May be impossible. - compile and run dna for number -> network address resolution. - minimal VOIP server, perhaps with simplified network protocol, to handle in/out call state. Porting asterisk might work, but is overkill. - UI layer for user interaction, dialing, answering and configuration. On Sun, Nov 27, 2011 at 6:21 PM, Ben Hughes <ben(a)benrhughes.com> wrote: > This is my basic understanding of the Serval architecture, please let me > know if it's misguided: > > - BATMAN is the underlying protocol that is used to connect nodes on the > mesh > - DNA is a layer on top of batman that lets you use claimed numbers (and a > public/private key pair) to identify nodes on the batman mesh > - when you make a mesh call, DNA resolves the number to a batman ip, and > then attempts to establish a SIP connection (via asterix) to that address > > I know that there's more to it than that (social verification of claimed > numbers, bridging networks, DID etc) but is that basically correct? > > If so, batman seems as though it's a vital (and complex) component in the > stack. And from what I can tell, it seems pretty tied to *nix. > > If I'm looking to port DNA to WP7, do I first need to port batman? Or put > another way: is there any value in a batman-less DNA? > > Cheers, > > Ben > > -- > You received this message because you are subscribed to the Google Groups > "Serval Project Developers" group. > To post to this group, send email to > serval-project-developers(a)googlegroups.com. > To unsubscribe from this group, send email to > serval-project-developers+unsubscribe(a)googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/serval-project-developers?hl=en. > -- You received this message because you are subscribed to the Google Groups "Serval Project Developers" group. To post to this group, send email to serval-project-developers(a)googlegroups.com. To unsubscribe from this group, send email to serval-project-developers+unsubscribe(a)googlegroups.com. For more options, visit this group at http://groups.google.com/group/serval-project-developers?hl=en. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Former head of NSA calls Bush wiretapping "authorized,"
by Steven M. Bellovin 06 Jul '18

06 Jul '18

http://www.wired.com/news/technology/0,70855-0.html?tw=wn_index_2 NEW YORK -- Former National Security Agency director Bobby Ray Inman lashed out at the Bush administration Monday night over its continued use of warrantless domestic wiretaps, making him one of the highest-ranking former intelligence officials to criticize the program in public, analysts say. This activity is not authorized," Inman said, as part of a panel discussion on eavesdropping that was sponsored by The New York Public Library. The Bush administration "need(s) to get away from the idea that they can continue doing it." As the article goes on to point out, one can hardly accuse Inman of not understanding the value of SIGINT. In fact, he wants this sort of wiretapping to continue -- but only after Congress amends the law. --Steven M. Bellovin, http://www.cs.columbia.edu/~smb ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] Former head of NSA calls Bush wiretapping "authorized,"
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

Re: [IP] Can you be compelled to give a password? [was:
by Lauren Weinstein 06 Jul '18

06 Jul '18

Police Blotter: Laptop border searches OK'd] Dave, the trend is toward laws that penalize refusal to cooperate with demands for decryption keys. This concept can work in various ways. In the border case, for example, a person might be refused entry -- or perhaps suffer confiscation of related property in some cases -- if they declined to provide the keys. In the case of criminal convictions, additional sentence and fine penalties can be imposed for uncooperative attitudes in this regard. Keep in mind that in the eyes of some in government, only people with something to hide would bother using encryption in the first place. From that assumption flows a sea of potential abuses. --Lauren-- Lauren Weinstein lauren(a)vortex.com or lauren(a)pfir.org Tel: +1 (818) 225-2800 http://www.pfir.org/lauren Co-Founder, PFIR - People For Internet Responsibility - http://www.pfir.org Co-Founder, IOIC - International Open Internet Coalition - http://www.ioic.net Moderator, PRIVACY Forum - http://www.vortex.com Member, ACM Committee on Computers and Public Policy Lauren's Blog: http://lauren.vortex.com DayThink: http://daythink.vortex.com - - - > > >Begin forwarded message: > >From: "Patrick W. Gilmore" <patrick(a)ianai.net> >Date: July 28, 2006 2:11:45 PM EDT >To: dave(a)farber.net >Cc: "Patrick W. Gilmore" <patrick(a)ianai.net> >Subject: Can you be compelled to give a password? [was: Police >Blotter: Laptop border searches OK'd] > >On Jul 28, 2006, at 1:32 PM, David Farber wrote: > >>I don't believe it is a crime in any US Federal or State law, or in >>Canadian law, to set passwords and use encryption. In the US, I >>believe that a warrant would be necessary for law enforcement to >>ask for your password, but I don't know if you have to comply. >>IANAL. > >That is a good question - Can you be compelled to give up a >password? Would you mind posting it to IP, I am interested in the >answer. > >Seems there might be some 'self-incriminatory' arguments here. >Perhaps even an "unreasonable search" argument. But IANAL. > >-- >TTFN, >patrick > > >------------------------------------- >You are subscribed as lauren(a)pfir.org >To manage your subscription, go to > http://v2.listbox.com/member/?listname=ip > >Archives at: http://www.interesting-people.org/archives/interesting- >people/ ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] more on Can you be compelled to give a password? [was: Police Blotter: Laptop border searches OK'd]
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

Re: PGP messages getting flagged as spam
by Werner Koch 06 Jul '18

06 Jul '18

On Mon, 15 Oct 2007 13:26, malayter(a)gmail.com said: > The real solution would be for SpamAssasin to check that the PGP > messages are well-formed, and verify signatures on any PGP message > before altering its score. A tad CPU intensive, I think, and it poses FWIW, a few weeks ago I received the first PGP signed spam. The signature was good and I believe that it was sent using a trojan utilizing the local MUA which was configured to sign all outgoing mail. Shalom-Salam, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. _______________________________________________ Gnupg-users mailing list Gnupg-users(a)gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0