- cypherpunks-legacy - lists.cpunks.org

[FoRK] The torture memos have been released
by Russell Turpin 06 Jul '18

06 Jul '18

The ACLU is hosting them here: http://www.aclu.org/safefree/general/olc_memos.html Bush's torture policies have been known for some time now, but it's important to shine as much light on this as possible. Gary Greenwald, who has done well at following the extent to which Obama sometimes has and often hasn't lived up to his promises of more transparency and greater respect for civil liberty comments here: http://www.salon.com/opinion/greenwald/radio/2009/04/16/aclu/index.html Kudos to the ACLU for pursuing the legal and political process that led to the release of these memos. _______________________________________________ FoRK mailing list http://xent.com/mailman/listinfo/fork ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[ANNOUNCE] Incognito CD/USB 20070824.2 released
by Pat Double 06 Jul '18

06 Jul '18

The Incognito CD allows you to anonymously use the Internet almost anywhere you go. Incognito is a CD you can boot that has several Internet applications (Firefox, IRC, Mail, etc) pre-configured to use Tor. For most computers everything is automatically configured and you're ready to go. You can even copy the CD to a USB drive. Details: http://www.patdouble.com/index.php?option=com_content&task=blogsection&id=3… Download locations: http://www.patdouble.com/index.php?option=com_content&task=view&id=11&Itemi… Changes: * Full version CD may be run in a virtual PC. For computers that do not allow booting from media this allows Incognito to run on a Windows x86 platform. Note that keystroke recorders may still be able to capture what you type! * Update script that copies to a USB drive to optionally format the drive. (anonym) * On tiny changed back from dhcp to dhcpcd as it is more robust and some cards drop link status after the initial IP address. Full needs to use dhcp because that is what NetworkManager requires * Add video driver fall back to VESA for video cards that are not supported by a card specific driver. * Use cookie authentication with Tor (more secure). Vidalia works again. * Added paranoid settings for the NoScript and CookieSafe Firefox extensions. * Clean up task bar and background. * Upgrade mixminion to 0.0.8 alpha3. * Upgrade Firefox to 2.0.0.7. * Upgrade NoScript Firefox extension to 1.1.7.2. * Upgrade TorK to 0.20. -- Pat Double, pat(a)patdouble.com "Ye must be born again." - John 3:7 ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [Beowulf] propagation velocity in cables
by Lux, Jim (337C) 06 Jul '18

06 Jul '18

The electrons move very slowly.. much more slowly than the electromagnetic wave propagates. (I'm thinking a few mm/sec for some reason.. it's real slow, in any case) Undersea cables these days are all fiber optic. So about 2/3 free space. Microwave terrestrial links are at a variety of frequencies. You trade it off between antenna gain (higher frequency has higher gain for a given size antenna) and atmospheric losses (rain, mostly). There are bands everywhere from 2.6 GHz on up to 110 GHz and higher. Long haul tends to be lower frequency, short haul is higher. Yes, there are laser comm systems, but generally used only for short distances (<10km) like between two buildings. Advantage is that you don't need much power, it's really wide bandwidth (Gbps is no problem) and it's difficult to snoop on (beams are very narrow with minimal spillover). OTOH, you also have to have active pointing, typically.. the building sway in the wind is enough to break the link. And, of course rain is a problem. (there are long range laser comm systems used for things like, oh, satellite to submarine, at very low data rates.. all you have to do is send a few bits: "Launch Missiles to target N") Jim Lux -----Original Message----- From: beowulf-bounces(a)beowulf.org [mailto:beowulf-bounces@beowulf.org] On Behalf Of Vincent Diepeveen Sent: Wednesday, September 05, 2012 4:44 PM To: Beowulf Mailing List Subject: Re: [Beowulf] propagation velocity in cables hi Jim, Thanks for a more technical explanation. Difficult to interpret for me though. The 1/3 speed someone gave to me some years ago. Litterally quote : "electrons move at 1/3 of the lightspeed through copper" Maybe signal speed is not the same like electron speed? Would be very interesting if he said that wrong, as he has a degree here, Phd cum laude in Natural Science and he improved something or better disproved something that has to do with quantum mechanics or something, basically he calculates everything about particles such as 'electrons' (my words), so i didn't verify all this, yet assumed what he said. The most important question: what is the effective speed of signals through ocean cables? We can safely assume they use fastest speed for this. When i drove past that financial industry bunker in Land's End it seemed pretty solid to me. The interesting question is that big satellite disk on the roof as well. Microwave is simply civil allowed frequency i was told. Around 2800Mhz or so? How fast is such communication? Using a powerful laser would it somehow be possible to rival speeds of these cables? On Sep 6, 2012, at 1:18 AM, Lux, Jim (337C) wrote: > Propagation speed in copper is not 1/3 freespace. More like 2/3 or > 80%, depending on the effective permittivity of the dielectric. (c = > c0/sqrt(epsilonr)) Cat 5 is typically about 68% of free space. > Foam dielectric coaxial cable is typically 81% LMR-400 coaxial cable > is 85%. There are air filled coax which get up to 90-92%, and open > wire line (like old telephone cables on poles) is around 95% > > For single mode optical fiber, n=1.62 for the core (1.52 for > cladding), so propagation speed is c0/1.62 or about 62% free space. > > Note that copper is faster than optical. > > People are setting up freespace microwave links for just this reason. > > Jim Lux > > > > C = 300k kilometers an hour. > > 300k / 3.6 meters a second > 300 / 3.6 meters a millisecond > 0.3 / 3.6 meters a microsecond > 12 meters a microsecond > > Now i don't know whether signals travel through fiber at the full > lightspeed, as that's pretty important. > > In Copper it's roughly 1/3 lightspeed or so, so that's out of the > question to use. > > So saving some distance knowing 12 meters is a microsecond, that's > worth it. > > _______________________________________________ Beowulf mailing list, Beowulf(a)beowulf.org sponsored by Penguin Computing To change your subscription (digest mode or unsubscribe) visit http://www.beowulf.org/mailman/listinfo/beowulf _______________________________________________ Beowulf mailing list, Beowulf(a)beowulf.org sponsored by Penguin Computing To change your subscription (digest mode or unsubscribe) visit http://www.beowulf.org/mailman/listinfo/beowulf ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[drone-list] EFF and MuckRock partner to find out about US drone use
by Trevor Timm 06 Jul '18

06 Jul '18

Hey folks, We just launched a new facet of our campaign to find out how local US police agencies are using drones. We are partnering with MuckRock to file public records requests with every police agency already on the drone authorization list we got from the FAA via our Freedom of Information Act lawsuit. MuckRock also has an easy-to-use system where users can also file their own requests with their local agencies that aren't on the list, but which may be in the process of acquiring drones. Our post announcing the project is here: https://www.eff.org/deeplinks/2012/07/eff-and-muckrock-partner-see-how-your… And MuckRock's announcement is here: https://www.muckrock.com/news/archives/2012/jul/03/drone-watch-help-eff-and… Hope you enjoy. Best, Trevor -- Trevor Timm Activist Electronic Frontier Foundation trevor(a)eff.org 415.436.9333 ext. 104 www.eff.org 454 Shotwell Street San Francisco, CA 94110 Defending your civil liberties in the digital world. _______________________________________________ drone-list mailing list drone-list(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/drone-list If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[Mycolleagues] MUSIC'08 CFP
by Yu Chen 06 Jul '18

06 Jul '18

(Apologies for multiple copies. Appreciated if you can forward to potentially interested persons) ============================================ 2008 International Workshop on Multimedia Security in Communication (MUSIC'08) In Conjunction with ChinaCom'08 Beijing, China, August 25 - 27, 2008 http://home.simula.no/~yanzhang/MUSIC/ ================================================ The rapid development of communication techniques allows us to transmit more than text/binary data in real time. Due to unique characteristics of multimedia content, such as large data volumes, interactive operations, and requires real-time responses, the problems multimedia security need to address are different from text/binary data security. Furthermore, multimedia security is highly services- dependable. Different services require different methods for content transmission or distribution, paying, interaction, etc. This workshop aims to bring together research work covering various aspects of multimedia security in emerging services. The services may work in the following environment: Internet, mobile TV, IPTV, IMS, VoIP, P2P, sensor network, network convergence, etc. The paper may focus on architecture construction, algorithm designing or hardware implementation. Both review paper and technical paper are expected. This workshop solicits papers reporting recent unpublished works in the general area of multimedia security. The topics include but not limited to: Security threats to multimedia content in new services Security model for new services Lightweight multimedia encryption for services Information hiding in multimedia content Multimedia forensics Secure multimedia adaptation Multimedia copy tracking Multimedia content authentication Multimedia content filtering Secure payment for services Key management/distribution User authentication in services Biometric Security Intrusion detection/prevention Network filtering Secure set-top box Secure Smart Cards Secure SIM card Secure telecom/broadcast convergence Secure mobile/Internet convergence Interoperable DRM systems Conditional access systems Security protocols or standards Denial-of-Service (DoS) attacks in multimedia application Submission ================================= The submission should be done according to the guidelines on http://www.chinacom.org/ . The revised or extended versions of the accepted and presented papers will be published in the special issue of International Journal of Security and Communication Network (SCN) http://www3.interscience.wiley.com/journal/114299116/home or International Journal of Universal Computer Science (JUCS) (pending) http://www.jucs.org/jucs_info/aims. Important Dates =================================== Submission deadline: March 31, 2008 Notification date: May 15, 2008 Camera-ready due: May 31, 2008 Conference dates: August 25-27, 2008 Organizing Committee ===================================== General Chair: Dr. Stefanos Gritzalis University of the Aegean, Greece Email: sgritz(a)aegean.gr General Co-Chair: Dr. Yan Zhang Simula Research Laboratory, Norway Email: yanzhang(a)ieee.org TPC Chair: Dr. Shiguo Lian France Telecom R&D Beijing Center, China Email: shiguo.lian(a)orange-ftgroup.com TPC Co-Chair: Dr. Yu Chen SUNY - Binghamton, USA Email: ychen(a)binghamton.edu Technical Committee ================================= Sasan Adibi, University of Waterloo, CA Khalil El-Khatib, University of Ontario Institute of Technology, CA Jiankun Hu, RMIT University, Australia Yuan Dong, Beijing University of Posts and Telecommunications, China Ala Al-Fuqaha, Western Michigan University, USA Weifeng Chen, California University of Pennsylvania, USA El-Sayed El-Alfy, King Fahd University of Petroleum and Minerals, Saudi Arabia Jiwu Huang, Sun Yat-Sen University, China Zhiquan Wang, Nanjing University of Science and Technology, China Giovanni Bodini, University of Rome Tor Vergata, Italy Noureddine BOUDRIGA, University of the 7th of November at Carthage, Tunisia Andreas U. Schmidt, Fraunhofer-Institute for Secure Information Technology (SIT), Germany Zhili Sun, University of Surrey, UK Frank Y. Shih, New Jersey Institute of Technology, USA Mark Stamp, San Jose State University, USA Xin Wang, ContentGuard, Inc., USA Chun-Shien Lu, Academia Sinica, Taiwan Peter Reiher, University of California, Los Angeles, USA Tarek BEJAOUI, University of Carthage, Tunisia Jianhong Zhang, North China University of Technology, China Xiamu Niu, Harbin Institute of Technology (HIT), China Esther Palomar, Carlos III University, Spain Theodore Stergiou, KPMG Advisors AE, Greece Paris Kitsos, Hellenic Open University (HOU), Greece Hsiao-Hwa Chen, National Sun Yat-Sen University, Taiwan Zheng Yan, Nokia Research Center, Finland Raouf Boutaba, University of Waterloo, Canada Sajal Das, University Texas at Arlington, USA George Kambourakis, University of the Aegean, Greece Tom Karygiannis, NIST, USA Igor Kotenko, SPIIRAS Russian Academy of Science, Russia Costas Lambrinoudakis, University of the Aegean, Greece Peter Mueller, IBM Zurich Research Lab, Switzerland Jong Hyuk Park, Kyungnam University, Korea Jianying Zhou, Institute for Infocomm Research I2R, Singapore Selma Boumerdassi, CNAM CEDRIC Laboratory, France Eric Renault, GET/INT, France Shuiming Ye, EPFL, Switzerland Benamar KADRI, University of Tlemcien, DZ, Algeria Zhou Su, Waseda University, Japan Wei-Shinn Ku, Auburn University, USA Javier Lopez, University of Malaga, Spain -- ---------------------------------------------------- Yu Chen, Ph.D. Assistant Professor Dept. of Electrical & Computer Engineering State University of New York - Binghamton Binghamton, NY 13902 Tel: (607) 777 - 6133 Fax:(607) 777 - 4464 Email: ychen AT binghamton DOT edu URL: http://bingweb.binghamton.edu/~ychen/ ------------------------------------------------------- _______________________________________________ Mycolleagues mailing list Mycolleagues(a)grid.lrg.ufsc.br http://grid.lrg.ufsc.br/mailman/listinfo/mycolleagues

1 0

[Mycolleagues] MUSIC'08 CFP
by Yu Chen 06 Jul '18

06 Jul '18

(Apologies for multiple copies. Appreciated if you can forward to potentially interested persons) ============================================ 2008 International Workshop on Multimedia Security in Communication (MUSIC'08) In Conjunction with ChinaCom'08 Beijing, China, August 25 - 27, 2008 http://home.simula.no/~yanzhang/MUSIC/ ================================================ The rapid development of communication techniques allows us to transmit more than text/binary data in real time. Due to unique characteristics of multimedia content, such as large data volumes, interactive operations, and requires real-time responses, the problems multimedia security need to address are different from text/binary data security. Furthermore, multimedia security is highly services- dependable. Different services require different methods for content transmission or distribution, paying, interaction, etc. This workshop aims to bring together research work covering various aspects of multimedia security in emerging services. The services may work in the following environment: Internet, mobile TV, IPTV, IMS, VoIP, P2P, sensor network, network convergence, etc. The paper may focus on architecture construction, algorithm designing or hardware implementation. Both review paper and technical paper are expected. This workshop solicits papers reporting recent unpublished works in the general area of multimedia security. The topics include but not limited to: Security threats to multimedia content in new services Security model for new services Lightweight multimedia encryption for services Information hiding in multimedia content Multimedia forensics Secure multimedia adaptation Multimedia copy tracking Multimedia content authentication Multimedia content filtering Secure payment for services Key management/distribution User authentication in services Biometric Security Intrusion detection/prevention Network filtering Secure set-top box Secure Smart Cards Secure SIM card Secure telecom/broadcast convergence Secure mobile/Internet convergence Interoperable DRM systems Conditional access systems Security protocols or standards Denial-of-Service (DoS) attacks in multimedia application Submission ================================= The submission should be done according to the guidelines on http://www.chinacom.org/ . The revised or extended versions of the accepted and presented papers will be published in the special issue of International Journal of Security and Communication Network (SCN) http://www3.interscience.wiley.com/journal/114299116/home or International Journal of Universal Computer Science (JUCS) (pending) http://www.jucs.org/jucs_info/aims. Important Dates =================================== Submission deadline: March 31, 2008 Notification date: May 15, 2008 Camera-ready due: May 31, 2008 Conference dates: August 25-27, 2008 Organizing Committee ===================================== General Chair: Dr. Stefanos Gritzalis University of the Aegean, Greece Email: sgritz(a)aegean.gr General Co-Chair: Dr. Yan Zhang Simula Research Laboratory, Norway Email: yanzhang(a)ieee.org TPC Chair: Dr. Shiguo Lian France Telecom R&D Beijing Center, China Email: shiguo.lian(a)orange-ftgroup.com TPC Co-Chair: Dr. Yu Chen SUNY - Binghamton, USA Email: ychen(a)binghamton.edu Technical Committee ================================= Sasan Adibi, University of Waterloo, CA Khalil El-Khatib, University of Ontario Institute of Technology, CA Jiankun Hu, RMIT University, Australia Yuan Dong, Beijing University of Posts and Telecommunications, China Ala Al-Fuqaha, Western Michigan University, USA Weifeng Chen, California University of Pennsylvania, USA El-Sayed El-Alfy, King Fahd University of Petroleum and Minerals, Saudi Arabia Jiwu Huang, Sun Yat-Sen University, China Zhiquan Wang, Nanjing University of Science and Technology, China Giovanni Bodini, University of Rome Tor Vergata, Italy Noureddine BOUDRIGA, University of the 7th of November at Carthage, Tunisia Andreas U. Schmidt, Fraunhofer-Institute for Secure Information Technology (SIT), Germany Zhili Sun, University of Surrey, UK Frank Y. Shih, New Jersey Institute of Technology, USA Mark Stamp, San Jose State University, USA Xin Wang, ContentGuard, Inc., USA Chun-Shien Lu, Academia Sinica, Taiwan Peter Reiher, University of California, Los Angeles, USA Tarek BEJAOUI, University of Carthage, Tunisia Jianhong Zhang, North China University of Technology, China Xiamu Niu, Harbin Institute of Technology (HIT), China Esther Palomar, Carlos III University, Spain Theodore Stergiou, KPMG Advisors AE, Greece Paris Kitsos, Hellenic Open University (HOU), Greece Hsiao-Hwa Chen, National Sun Yat-Sen University, Taiwan Zheng Yan, Nokia Research Center, Finland Raouf Boutaba, University of Waterloo, Canada Sajal Das, University Texas at Arlington, USA George Kambourakis, University of the Aegean, Greece Tom Karygiannis, NIST, USA Igor Kotenko, SPIIRAS Russian Academy of Science, Russia Costas Lambrinoudakis, University of the Aegean, Greece Peter Mueller, IBM Zurich Research Lab, Switzerland Jong Hyuk Park, Kyungnam University, Korea Jianying Zhou, Institute for Infocomm Research I2R, Singapore Selma Boumerdassi, CNAM CEDRIC Laboratory, France Eric Renault, GET/INT, France Shuiming Ye, EPFL, Switzerland Benamar KADRI, University of Tlemcien, DZ, Algeria Zhou Su, Waseda University, Japan Wei-Shinn Ku, Auburn University, USA Javier Lopez, University of Malaga, Spain -- ---------------------------------------------------- Yu Chen, Ph.D. Assistant Professor Dept. of Electrical & Computer Engineering State University of New York - Binghamton Binghamton, NY 13902 Tel: (607) 777 - 6133 Fax:(607) 777 - 4464 Email: ychen AT binghamton DOT edu URL: http://bingweb.binghamton.edu/~ychen/ ------------------------------------------------------- _______________________________________________ Mycolleagues mailing list Mycolleagues(a)grid.lrg.ufsc.br http://grid.lrg.ufsc.br/mailman/listinfo/mycolleagues

1 0

[drone-list] EFF and MuckRock partner to find out about US drone use
by Trevor Timm 06 Jul '18

06 Jul '18

Hey folks, We just launched a new facet of our campaign to find out how local US police agencies are using drones. We are partnering with MuckRock to file public records requests with every police agency already on the drone authorization list we got from the FAA via our Freedom of Information Act lawsuit. MuckRock also has an easy-to-use system where users can also file their own requests with their local agencies that aren't on the list, but which may be in the process of acquiring drones. Our post announcing the project is here: https://www.eff.org/deeplinks/2012/07/eff-and-muckrock-partner-see-how-your… And MuckRock's announcement is here: https://www.muckrock.com/news/archives/2012/jul/03/drone-watch-help-eff-and… Hope you enjoy. Best, Trevor -- Trevor Timm Activist Electronic Frontier Foundation trevor(a)eff.org 415.436.9333 ext. 104 www.eff.org 454 Shotwell Street San Francisco, CA 94110 Defending your civil liberties in the digital world. _______________________________________________ drone-list mailing list drone-list(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/drone-list If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Chromebooks for Risky Situations?
by Rich Kulawiec 06 Jul '18

06 Jul '18

On Tue, Feb 05, 2013 at 10:29:49PM -0500, Nadim Kobeissi wrote: > Now, for the obvious (and unfortunate!) downsides: Chromebooks natively > encourage users to store all of their data on Google, leaving the company > with an unbalanced amount of control over these machines, and attracting > itself as a compromise target relevant to Chromebook users. Strongly agreed. As the size of the organization grows, the probability that zero employees are (a) taking payoffs/bribes (b) succumbing to extortion/blackmail and/or (c) otherwise political/socially/economically/personal motivated to do Bad Things decreases. We could debate the shape of the curve, but I think it's darn near certain that there is -- somewhere -- a Google employee doing (a) and a Google employee doing (b) and a Google employee doing (c). Of course there are. There are simply too many of them for this not to be true. The same can be said of every large company and organization. The question is thus not "do they exist?" because I think we already know that they do. The question, or questions rather, become things like "What is their goal?", "What do they have access to?", "What measures exist to prevent them from accessing things they shouldn't?", "What measures exist to detect them trying to access things they shouldn't?", "Will I find out if it happens to be my data?", and so on. My own experience suggests that the answers to those last questions are nearly always "nothing", "not much" and "no" even in places where we would all hope otherwise. So if you (rhetorical and plural you) are becoming an annoyance to whatever government you're antagonizing because you're smart and effective, then why wouldn't they consider dropping $100K in cash on a cloud engineer in return for a USB drive full of everything you've all stored there? Seems like a good investment. Much less tedious than infiltrating your group. Probably cheaper and less risky. Or why wouldn't they plan ahead and start getting their own people in the pipeline for jobs there? They could play the long game and gamble that spending years training some of their own, putting them through school at RIT or Michigan or GaTech and getting them into Rackspace and Google and Twitter will one day pay off, when someone very very loyal to their ideology and politics feeds them timely information. Yes, you can encrypt everything -- if you're all diligent about that. But the logs will still show when and where you were, and possibly who is talking to who, how much information they're exchanging, and when. (And there's the possibility that, in extremis, your communications can be "accidentally" cut off just when you need them most.) My point is that I don't think trusting *any* large organization is a good move. If you're going to store this kind of data anywhere but on systems that you personally control, then pick the smallest, most obscure ones you can find. Better yet: don't build an architecture that relies on centralized communications and thus is vulnerable to centralized compromises; we've discussed Usenet here before and I think that sort of decentralized architecture is a much better model for this application. ---rsk -- Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[liberationtech] Man-in-the-middle attack on GitHub in China
by Martin Johnson 06 Jul '18

06 Jul '18

At around 8pm, on January 26, reports appeared on Weibo and Twitter that users in China trying to access GitHub.com were getting warning messages about invalid SSL certificates. The evidence, listed further down in this post, indicates that this was caused by a man-in-the-middle attack. Full post at https://en.greatfire.org/blog/2013/jan/china-github-and-man-middle One interesting conclusion is that support for HTTP Strict Transport Security in Chrome and Firefox makes a real difference. If man-in-the-middle attacks become more common in China, preventing users from adding exceptions and making the warning messages informative is crucial. We need to find ways to convince users to use browsers that support these safety measures. Currently, around 50% of Internet users in China use either the 360 so-called Safety Browser (which is a very ironic name) or Internet Explorer 6 (yes, it lives on in China). Martin Johnson Founder https://GreatFire.org - Monitoring Online Censorship In China. https://FreeWeibo.com - Uncensored, Anonymous Sina Weibo Search. https://Unblock.cn.com - We Can Unblock Your Website In China. -- Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

More on Nancy Oden
by Glenn Reynolds 06 Jul '18

06 Jul '18

Seems she's got a background of association with ecoterrorism. http://instapundit.blogspot.com/2001_11_04_instapundit_archive.html#6855693 ******* Glenn's above URL says: >NANCY ODEN UPDATE: Turns out there's good reason for Nancy Oden to be >suspected of terrorist links -- ecoterrorist links, that is. See this >item from the Bangor Daily News, pointed out to me by reader Paul >Zrimsek. Oden denied any linkage with the ecoterrorism in question, but >in a very bin Ladenesque "I didn't do it but I approve" kind of way. >Given that ecoterrorism is, in fact, the most prevalent and widespread >form of domestic terrorism, and has continued since 9/11, her presence on >a watch list doesn't seem especially unreasonable in light of heightened >security concerns and fears (though probably wrong) that the anthrax >mailings were masterminded by domestic groups, and her presence on such a >list is likely to be on that basis, and unlikely to have anything to do >with the Green Party's positions on Afghanistan. *******

1 0