- cypherpunks-legacy - lists.cpunks.org

Nicolas Hester sent you a message
by Nicolas Hester 12 Dec '12

12 Dec '12

1 0

Re: [liberationtech] Mailvelope: OpenPGP Encryption for Webmail
by Eugen Leitl 12 Dec '12

12 Dec '12

----- Forwarded message from Ali-Reza Anghaie <ali(a)packetknife.com> -----

1 0

Re: [liberationtech] Mailvelope: OpenPGP Encryption for Webmail
by Ulex Europae 11 Dec '12

11 Dec '12

At 04:38 PM 12/11/2012, Karel Bmlek wrote: >hm, we talked about this extension today > >how much is it REALLY safe to use webmail (particularly gmail) with this? > >the thing is... GMail is saving your mail while you type and this >extension is not stopping it in any way. so, google has the data about >your mails - and more importantly, if you are tracked by >fbi/whatever, they can start actively track your keypresses by >javascript. > >to add the salt to the injury, this extension works with chrome >(closed source) only and has problems installing on chromium. That's kinda what I thought. Even if you install it as a plugin, it's still running on a foreign (their) server that can do other things in the background - undetectably by the user who wrongly presumes her email to be one-of and encrypted after sending. So snake oil, IOW. >k > >On 12/11/12, Karel Bmlek <kb(a)karelbilek.com> wrote: > > OK, I just REALLY want to thank you right now. > > > > We will have a small talk when we will want to demonstrate how to > > easily use mail encryption with popular clients > > > > we found out that none of us lecturers even use thunderbird, let alone > > knows how to set up the encryption. all of use use webmails. we > > suppose our audience does, too. > > > > for this, mailvelope is AWESOME. It "just works". > > > > it has one big downside though.... it doesn't support UTF8 in either > > name of key owner OR in the message itself (it totally mangles all > > UTF8 input). if you speak with a language that has diacritics (we > > speak Czech), it sucks a bit. > > > > small downside - it doesn't encrypt attachment and doesn't (AFAIK) > > sign the messages. > > > > but if they catch all these issues, it will be great > > > > On Tue, Dec 11, 2012 at 9:16 AM, Eugen Leitl <eugen(a)leitl.org> wrote: > >> ----- Forwarded message from StealthMonger <StealthMonger(a)nym.mixmin.net> > >> ----- > >> > >> From: StealthMonger <StealthMonger(a)nym.mixmin.net> > >> Date: Mon, 10 Dec 2012 22:07:23 +0000 (GMT) > >> To: liberationtech <liberationtech(a)lists.stanford.edu> > >> Subject: Re: [liberationtech] Mailvelope: OpenPGP Encryption for Webmail > >> Reply-To: liberationtech <liberationtech(a)lists.stanford.edu> > >> > >> -----BEGIN PGP SIGNED MESSAGE----- > >> Hash: SHA1 > >> > >> "Fabio Pietrosanti (naif)" <lists(a)infosecurity.ch> writes: > >> > >>> for whose who has still not see that project, i wanted to send a notice > >>> about MailVelope, OpenPGP encryption for webmail: > >>> http://www.mailvelope.com > >> > >>> It's a client-side, plug-in based (similar to CryptoCat), OpenPGP email > >>> encryption plugin available for Chrome and Firefox. > >> > >> To compare it with CryptoCat is unfair to MailVelope. As I understand > >> things, CryptoCat has an ongoing reliance on server integrity. On the > >> other hand, MailVelope is self-contained once securely installed, thus > >> providing true peer-to-peer confidentiality and authentication > >> (assuming that the correspondents have confirmed keys out-of-band). > >> > >> Please correct this if in error. > >> > >> > >> - -- > >> > >> > >> -- StealthMonger <StealthMonger(a)nym.mixmin.net> > >> Long, random latency is part of the price of Internet anonymity. > >> > >> anonget: Is this anonymous browsing, or what? > >> > >> >http://groups.google.ws/group/alt.privacy.anon-server/msg/073f34abb668df33?d m >ode=source&output=gplain > >> > >> stealthmail: Hide whether you're doing email, or when, or with whom. > >> mailto:stealthsuite@nym.mixmin.net?subject=send%20index.html > >> > >> > >> Key: mailto:stealthsuite@nym.mixmin.net?subject=send%20stealthmonger-key > >> > >> -----BEGIN PGP SIGNATURE----- > >> Version: GnuPG v1.4.10 (GNU/Linux) > >> Comment: Processed by Mailcrypt 3.5.9 <http://mailcrypt.sourceforge.net/> > >> > >> iEYEARECAAYFAlDGTA0ACgkQDkU5rhlDCl4oUgCdGJJIXDNS5c3yIeuKIMzbzHo+ > >> F2gAoLzRcHoro25IaTbezc1fk8imYvyT > >> =PD9O > >> -----END PGP SIGNATURE----- > >> > >> -- > >> Unsubscribe, change to digest, or change password at: > >> https://mailman.stanford.edu/mailman/listinfo/liberationtech > >> > >> ----- End forwarded message ----- > >> -- > >> Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org > >> ______________________________________________________________ > >> ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org > >> 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

2 1

Re: [liberationtech] Mailvelope: OpenPGP Encryption for Webmail
by Eugen Leitl 11 Dec '12

11 Dec '12

----- Forwarded message from StealthMonger <StealthMonger(a)nym.mixmin.net> -----

2 3

Re: Assange-WikiLeaks Crypto Arms Call Triple Cross
by John Young 11 Dec '12

11 Dec '12

Cryptome has published more on Assange and WikiLeaks than any other source except for WikiLeaks itself. Few have examined the initiative's whole body of material and promotional enterprise. Now that Assange has cloaked himself and the three others in the cypherpunks/cryptography mantle I think his shit-storm is coming this way. I agree with putting distance between what has happened in cypherpunks Vegas from what is brewing in DoJ. More of that is probably a good thing. That was the purpose of the screed against Assange's insurance entrapment via weak crypto meant to be cracked with leak-fed access. For edification read the JA-WL behavior in the fuller context of cypherpunks and forget the easily dismissed summary. Assange is playing the cypherpunks card for a purpose that deserves scrutiny if for no other reason than to avoid being sucked into his practice of taking credit for wins and shifting blame to others when the chips are down. That is why he proclaims to be a privileged journalist after years of disparaging the corruption of that crowd. Cypherpunks/cryptography vaunting may be part of a past, present or future plea arrangement or more likely a turning of the coat. Where else has this been better predicted than on cypherpunks, yay, even encouraged to cut the deal of ratting on colleagues. At 02:26 PM 12/10/2012, coderman wrote: >On Thu, Dec 6, 2012 at 5:10 AM, jd.cypherpunks ><jd.cypherpunks(a)gmail.com>wrote: > > > So - imo it's not too hard to understand what's going on. > > First - John isn't insane. > > Second - read again the first statement. > > > > I think you have to re-read his post and try to understand the underlining > > context. > > Try - and try again! > > > > >if the screed rings not of truth and substance, > your mind may be clouded by bias, or > you're asleep at the wheel of life...

2 1

Re: [liberationtech] Mailvelope: OpenPGP Encryption for Webmail
by Eugen Leitl 11 Dec '12

11 Dec '12

----- Forwarded message from malte <malte(a)zeromail.org> -----

1 0

Assange-WikiLeaks Crypto Arms Call Triple Cross
by John Young 10 Dec '12

10 Dec '12

Assange-WikiLeaks Crypto Arms Call Triple Cross Applying cryptography's bag of tricks to Julian Assange's introduction to the new book, Cypherpunks: Freedom and the Future of the Internet, entitled "A Call to Cryptographic Arms," it could be taken as a "A Cryptographic Call to Arms," that is, an encrypted warning contained within the plain text. Assange and WikiLeaks, like cypherpunks, is masterfully wily at practicing the characteristic cryptography feature of duplicity, never revealing what is going on beneath public assurances of trustworthiness. Assange and WikiLeaks, like cypherpunks, invoke open-closed cryptographic duplicity as his personal behavior and as the policy of the WikiLeaks initiative. Concealing, obscuring and diverting his personal affairs while seeking publicity, and concealing, obscuring and diverting the inner affairs of the operation for disclosing documents openly. This is cryptography in action. In the same fashion Assange-WikiLeaks has periodically published encrypted packages as "insurance" against takedown, it has also released the unredacted State Department cables by way of a complicated, presumably, orchestrated, leak. The leak of the password to the cable collection by giving it to journalists to publish is a classic instance of cryptographic dupery. Cryptography formulates threats, ruses, disclosures, ploys, diversions, deceptions, double-crosses, triple-crosses to hide strengths and weaknesses, attacks and defenses, lies and dissimulations, assurances of innocence and candor. Crypto AG is a classic instance of NSA deception, among many, to install a backdoor in a widely adopted encrypted system, then leaked decades later as a warning to those who think they can obtain fully secure communication systems. A recent example if that of open source cryptography promoted as means to verify encryption systems by public disclosure and examination. Its shortcoming, and virtue to the wily, is that far from all cryptographers subscribe to the sharing venture -- notably those associated with governments, corporations and mendacious individual efforts, instead take open source and not reveal what is found of its weaknesses (to be exploited in secret) nor what is done with the gift. US spies have admitted they take open source but do not give back. The same could be said of leak sites, anonymizers, IRC, news and mail groups, social media, Skype, varieties of comsec offerings, and the Internet itself among its many levels of access. Offer services, free, paid, purloined or onioned, for which the take is much greater than the offerings -- the standard asymmetric-warfare model, derived from governance, education, non-profits and history's all-time leader, religion, the latter exceeded only by wily hyenas patrolling the herd to mount novel attacks to take down over-confident herdmasters. Cryptographers do not trust one another. Cypherpunks triple cross as ruse. Consider that the Assange-WikiLeaks book Cypherpunks is a cryptographic ruse which conveys an encrypted body of secrets, additional insurance against the takedown of Assange and WikiLeaks to be declared after the volume is widely distributed in print and e-book form. A modern Lutherian proclamation of open and encrypted dissent against the corruption of closed and secret authority. Further, imagine that Assange-WikiLeaks is planting encrypted bits in all its releases which can be decrypted at a future time, to re-assemble into a larger disclosure. In the world of cryptography this would be expected. Cypherpunks advocate this encrypted concealment, dispersion, distribution and future coalescence. Pre-positioning attacks and defenses well before they are needed is conventional warfare -- as well as political, economic and philosophical enterprise. Cypherpunks, before, during and after WikiLeaks, has pre-positioned encrypted packs of arms demurely clothed in dissent from and opposition to governance, finance and faith. This cryptographic call to arms is a triple-cross under a double-cross planted in roots of trust, openness masquerading for multi-level deception, in short, the essence of heavily-armored cryptography.

6 8

Очень стильные часы с Швейцарскими и Японскими механизмами
by "Часы от 5 999 рублей" 10 Dec '12

10 Dec '12

Высококачественные копии Швейцарских Часов с швейцарсикми и японскими механизмами! От 6 000 рублей. Сегодня скидки! Наш сайт: http://часы-бутик.рф

1 0

Buy Viagra Online Without Prescription!40-120 FREE Viagra Pills We accept VISA MC(PayPal) Payments, 100000 Satisfied Customers! ov5hfkno
by Yvone 10 Dec '12

10 Dec '12

Viagra BUY ONLINE NOW!!from $1.35/100mg Buy Viagra Online Without Prescription!40-120 FREE Viagra Pills We accept VISA MC(PayPal) Payments, 100000 Satisfied Customers! Top Selling 100% Quality & Satisfaction guaranteed http://drugspharmacyrx.ru

1 0

Шикарный подарок для мужчин! Швейцарские часов
by "Часы из Европы от 9 899 руб." 09 Dec '12

09 Dec '12

Наручные Швейцарские часы! Сделанны в Европе, гарантия 25 мес, только швейцарские механизмы. VIP-ref элитных брендов и дизайнов! Цены от 9 989 рублей. Сегодня скидки! http://www.часы-тут.рф

1 0