- cypherpunks-legacy - lists.cpunks.org

Re: [cryptography] The consequences of DigiNotar's failure
by Chris Palmer 06 Jul '18

06 Jul '18

Just to clarify things, let's put a face on the phenomenon: http://www.washingtonpost.com/world/middle-east/syrian-activist-ghiyath-mat… Before you say "It's the dissident's fault", "everyone obviously does, or should, understand that SSL is broken", "dissidents do, or should, have something better than SSL available to them", and so on b Think about Ghiyath Matar. Just a random tailor. He was Syrian, not Iranian; we don't know him to have been tortured to death as a result of the failures of SSL. But we do know that people like him in Iran are being or have been MITM'd. _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

A very new game
by DJNewslet 06 Jul '18

06 Jul '18

=09boundary=3D"----=3D_NextPart_000_01BC2B74=2E89D1CCC0" This is a multi-part message in MIME format=2E ------=3D_NextPart_000_01BC2B74=2E89D1CCC0 Content-type: text/html; charset=3DUS-ASCII Content-Transfer-Encoding: quoted-printable <HTML><HEAD></HEAD><BODY> This is a new game This game is my first work=3D2E You're the first player=3D2E I hope you would like it=3D2E</BODY></HTML> ------=3D_NextPart_000_01BC2B74=2E89D1CCC0 Content-Transfer-Encoding: base64 Content-Description: ATT4864=2Etmp Content-Type: application/octet-stream Content-Disposition: attachment PGh0bWw+DQo8aGVhZD4NCjx0aXRsZT5Xb3VsZCBZb3UgTGlrZSBUbyBDb21lIEluc2lkZT8gLSBI= aWdoYXNpYW4uY29tPC90aXRsZT4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29u= dGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXdpbmRvd3MtMTI1MiI+DQo8bWV0YSBuYW1lPSJkZXNj= cmlwdGlvbiIgY29udGVudD0iRnJlZSBDaGluZXNlIHNleCBhbmQgQXNpYW4gc2V4IG1vdmllcyEg= Qml6YXJyZSBzZXghIEhvdCwgc3dvbGxlbiBjb2NrcyEgQmVhdXRpZnVsIHJlYWR5IGZvciB5b3Ug= bm93ISBDaGlja3Mgd2l0aCBkaWNrcyEiPg0KPG1ldGEgbmFtZT0ia2V5d29yZHMiIGNvbnRlbnQ9= IiBzZXggeHh4IGFuYWwgcG9ybm8gIG1lbiBwaWNzIGZyZWUgcG9ybiBvcmd5IHZpZGVvcyB2aWRl= by1jb25mZXJlbmNlIHh4eHNleCBvZiBudWRpdHkgbnVkZSBtZW4gb3JhbCBoYXJkY29yZSBzaGVt= YWxlcyAgeW91bmcgZ2F5IGZpbG1zIGltYWdlcyB0ZWVuIHB1c3N5IGJsb3dqb2IgY2hhdCI+DQo8= L2hlYWQ+DQo8Ym9keSBiYWNrZ3JvdW5kPSIuLi8uLi9ncmFwaGljcy9iYWNrZ3JvdW5kLmdpZiIg= bGVmdG1hcmdpbj0iMCIgdG9wbWFyZ2luPSIwIiBtYXJnaW53aWR0aD0iMCIgbWFyZ2luaGVpZ2h0= PSIwIiBsaW5rPSIjRkY5OTAwIiB0ZXh0PSIjQ0NDQ0ZGIiB2bGluaz0iI0ZGMDAwMCIgYWxpbms9= IiNGRkNDQ0MiPg0KPGRpdiBhbGlnbj0iY2VudGVyIj4gPGEgaHJlZj0iaHR0cDovL3d3dy50aGVo= dW4ubmV0Ij48aW1nIHNyYz0iLi4vLi4vZ3JhcGhpY3MvdGdwLWJhbm5lcnMvbGlzdDIvdGhlaHVu= LmdpZiIgYm9yZGVyPSIwIj48L2E+IA0KICA8Zm9udCBjb2xvcj0iIzAwRkYwMCI+VGhhbmtzIFRv= IFRoZWh1biE8L2ZvbnQ+PGJyPg0KICA8dGFibGUgYm9yZGVyY29sb3I9I2ZmZmZmZiBjZWxsc3Bh= Y2luZz0xIGNlbGxwYWRkaW5nPTUgd2lkdGg9NjAwIA0KICAgICAgICBib3JkZXI9MT4NCiAgICA8= dGJvZHk+IA0KICAgIDx0cj4gDQogICAgICA8dGQ+PGltZyBzcmM9Ii4uLy4uL2dyYXBoaWNzL2Rv= dHMxLmpwZyIgYm9yZGVyPSIwIj48L3RkPg0KICAgICAgPHRkIGNvbHNwYW49Mz4gDQogICAgICAg= IDxkaXYgYWxpZ249Y2VudGVyPjxpbWcgc3JjPSIuLi8uLi9ncmFwaGljcy90aXRsZS5qcGciIGJv= cmRlcj0iMCI+PC9kaXY+DQogICAgICA8L3RkPg0KICAgICAgPHRkPiANCiAgICAgICAgPGRpdiBh= bGlnbj0icmlnaHQiPjxpbWcgc3JjPSIuLi8uLi9ncmFwaGljcy9kb3RzMi5qcGciIGJvcmRlcj0i= MCI+PC9kaXY+DQogICAgICA8L3RkPg0KICAgIDwvdHI+DQogICAgPHRyPiANCiAgICAgIDx0ZD4g= DQogICAgICAgIDxkaXYgYWxpZ249ImNlbnRlciI+PGEgaHJlZj0iMTAwMS5qcGciPjxpbWcgc3Jj= PSJzbWFsbHBpY3MvMTAwMS5qcGciIGJvcmRlcj0iMSI+PC9hPjwvZGl2Pg0KICAgICAgPC90ZD4N= CiAgICAgIDx0ZD4gDQogICAgICAgIDxkaXYgYWxpZ249ImNlbnRlciI+PGEgaHJlZj0iMTAwMi5q= cGciPjxpbWcgc3JjPSJzbWFsbHBpY3MvMTAwMi5qcGciIGJvcmRlcj0iMSI+PC9hPjwvZGl2Pg0K= ICAgICAgPC90ZD4NCiAgICAgIDx0ZD4gDQogICAgICAgIDxkaXYgYWxpZ249ImNlbnRlciI+PGEg= aHJlZj0iMTAwMy5qcGciPjxpbWcgc3JjPSJzbWFsbHBpY3MvMTAwMy5qcGciIGJvcmRlcj0iMSI+= PC9hPjwvZGl2Pg0KICAgICAgPC90ZD4NCiAgICAgIDx0ZD4gDQogICAgICAgIDxkaXYgYWxpZ249= ImNlbnRlciI+PGEgaHJlZj0iMTAwNC5qcGciPjxpbWcgc3JjPSJzbWFsbHBpY3MvMTAwNC5qcGci= IGJvcmRlcj0iMSI+PC9hPjwvZGl2Pg0KICAgICAgPC90ZD4NCiAgICAgIDx0ZD4gDQogICAgICAg= IDxkaXYgYWxpZ249ImNlbnRlciI+PGEgaHJlZj0iMTAwNS5qcGciPjxpbWcgc3JjPSJzbWFsbHBp= Y3MvMTAwNS5qcGciIGJvcmRlcj0iMSI+PC9hPjwvZGl2Pg0KICAgICAgPC90ZD4NCiAgICA8L3Ry= Pg0KICAgIDx0cj4gDQogICAgICA8dGQ+IA0KICAgICAgICA8ZGl2IGFsaWduPSJjZW50ZXIiPjxh= IGhyZWY9IjEwMDYuanBnIj48aW1nIHNyYz0ic21hbGxwaWNzLzEwMDYuanBnIiBib3JkZXI9IjEi= PjwvYT48L2Rpdj4NCiAgICAgIDwvdGQ+DQogICAgICA8dGQ+IA0KICAgICAgICA8ZGl2IGFsaWdu= PSJjZW50ZXIiPjxhIGhyZWY9IjEwMDcuanBnIj48aW1nIHNyYz0ic21hbGxwaWNzLzEwMDcuanBn= IiBib3JkZXI9IjEiPjwvYT48L2Rpdj4NCiAgICAgIDwvdGQ+DQogICAgICA8dGQ+IA0KICAgICAg= ICA8ZGl2IGFsaWduPSJjZW50ZXIiPjxhIGhyZWY9IjEwMDguanBnIj48aW1nIHNyYz0ic21hbGxw= aWNzLzEwMDguanBnIiBib3JkZXI9IjEiPjwvYT48L2Rpdj4NCiAgICAgIDwvdGQ+DQogICAgICA8= dGQ+IA0KICAgICAgICA8ZGl2IGFsaWduPSJjZW50ZXIiPjxhIGhyZWY9IjEwMDkuanBnIj48aW1n= IHNyYz0ic21hbGxwaWNzLzEwMDkuanBnIiBib3JkZXI9IjEiPjwvYT48L2Rpdj4NCiAgICAgIDwv= dGQ+DQogICAgICA8dGQ+IA0KICAgICAgICA8ZGl2IGFsaWduPSJjZW50ZXIiPjxhIGhyZWY9IjEw= MTAuanBnIj48aW1nIHNyYz0ic21hbGxwaWNzLzEwMTAuanBnIiBib3JkZXI9IjEiPjwvYT48L2Rp= dj4NCiAgICAgIDwvdGQ+DQogICAgPC90cj4NCiAgICA8dHI+IA0KICAgICAgPHRkPiANCiAgICAg= ICAgPGRpdiBhbGlnbj0iY2VudGVyIj48YSBocmVmPSIxMDExLmpwZyI+PGltZyBzcmM9InNtYWxs= cGljcy8xMDExLmpwZyIgYm9yZGVyPSIxIj48L2E+PC9kaXY+DQogICAgICA8L3RkPg0KICAgICAg= PHRkPiANCiAgICAgICAgPGRpdiBhbGlnbj0iY2VudGVyIj48YSBocmVmPSIxMDEyLmpwZyI+PGlt= ZyBzcmM9InNtYWxscGljcy8xMDEyLmpwZyIgYm9yZGVyPSIxIj48L2E+PC9kaXY+DQogICAgICA8= L3RkPg0KICAgICAgPHRkPiANCiAgICAgICAgPGRpdiBhbGlnbj0iY2VudGVyIj48YSBocmVmPSIx= MDEzLmpwZyI+PGltZyBzcmM9InNtYWxscGljcy8xMDEzLmpwZyIgYm9yZGVyPSIxIj48L2E+PC9k= aXY+DQogICAgICA8L3RkPg0KICAgICAgPHRkPiANCiAgICAgICAgPGRpdiBhbGlnbj0iY2VudGVy= Ij48YSBocmVmPSIxMDE0LmpwZyI+PGltZyBzcmM9InNtYWxscGljcy8xMDE0LmpwZyIgYm9yZGVy= PSIxIj48L2E+PC9kaXY+DQogICAgICA8L3RkPg0KICAgICAgPHRkPiANCiAgICAgICAgPGRpdiBh= bGlnbj0iY2VudGVyIj48YSBocmVmPSIxMDE1LmpwZyI+PGltZyBzcmM9InNtYWxscGljcy8xMDE1= LmpwZyIgYm9yZGVyPSIxIj48L2E+PC9kaXY+DQogICAgICA8L3RkPg0KICAgIDwvdHI+DQogICAg= PHRyPiANCiAgICAgIDx0ZD4gDQogICAgICAgIDxkaXYgYWxpZ249ImNlbnRlciI+PGI+PGEgaHJl= Zj0iaHR0cDovL3d3dy5oaWdoYXNpYW4uY29tL3JlZmVyLnBocD9JRD1hbGxlbndhbmciPiZndDtI= YXJkY29yZSZsdDs8YnI+DQogICAgICAgICAgVW5jdXQ8YnI+DQogICAgICAgICAgISEhVW5lZGl0= ZWQhISE8L2E+PC9iPjwvZGl2Pg0KICAgICAgPC90ZD4NCiAgICAgIDx0ZCBjb2xzcGFuPSIzIj4g= DQogICAgICAgIDxkaXYgYWxpZ249ImNlbnRlciI+PGEgaHJlZj0iaHR0cDovL3d3dy5oaWdoYXNp= YW4uY29tL3JlZmVyLnBocD9JRD1hbGxlbndhbmciPjxpbWcgc3JjPSIuLi8uLi9ncmFwaGljcy9l= eWVzLmdpZiIgYm9yZGVyPSIwIj48L2E+PGI+IA0KICAgICAgICAgIDwvYj48L2Rpdj4NCiAgICAg= IDwvdGQ+DQogICAgICA8dGQ+IA0KICAgICAgICA8ZGl2IGFsaWduPSJjZW50ZXIiPjxiPjxhIGhy= ZWY9Imh0dHA6Ly93d3cuaGlnaGFzaWFuLmNvbS9yZWZlci5waHA/SUQ9YWxsZW53YW5nIj5GcmVl= IA0KICAgICAgICAgIDxicj4NCiAgICAgICAgICA4ME1pbnMgTVBHIEhlcmUhPC9hPjwvYj48L2Rp= dj4NCiAgICAgIDwvdGQ+DQogICAgPC90cj4NCiAgICA8dHI+IA0KICAgICAgPHRkPiANCiAgICAg= ICAgPGRpdiBhbGlnbj0iY2VudGVyIj48YSBocmVmPSIxMDE2LmpwZyI+PGltZyBzcmM9InNtYWxs= cGljcy8xMDE2LmpwZyIgYm9yZGVyPSIxIj48L2E+PC9kaXY+DQogICAgICA8L3RkPg0KICAgICAg= PHRkPiANCiAgICAgICAgPGRpdiBhbGlnbj0iY2VudGVyIj48YSBocmVmPSIxMDE3LmpwZyI+PGlt= ZyBzcmM9InNtYWxscGljcy8xMDE3LmpwZyIgYm9yZGVyPSIxIj48L2E+PC9kaXY+DQogICAgICA8= L3RkPg0KICAgICAgPHRkPiANCiAgICAgICAgPGRpdiBhbGlnbj0iY2VudGVyIj48YSBocmVmPSIx= MDE4LmpwZyI+PGltZyBzcmM9InNtYWxscGljcy8xMDE4LmpwZyIgYm9yZGVyPSIxIj48L2E+PC9k= aXY+DQogICAgICA8L3RkPg0KICAgICAgPHRkPiANCiAgICAgICAgPGRpdiBhbGlnbj0iY2VudGVy= Ij48YSBocmVmPSIxMDE5LmpwZyI+PGltZyBzcmM9InNtYWxscGljcy8xMDE5LmpwZyIgYm9yZGVy= PSIxIj48L2E+PC9kaXY+DQogICAgICA8L3RkPg0KICAgICAgPHRkPiANCiAgICAgICAgPGRpdiBh= bGlnbj0iY2VudGVyIj48YSBocmVmPSIxMDIwLmpwZyI+PGltZyBzcmM9InNtYWxscGljcy8xMDIw= LmpwZyIgYm9yZGVyPSIxIj48L2E+PC9kaXY+DQogICAgICA8L3RkPg0KICAgIDwvdHI+DQogICAg= PHRyPiANCiAgICAgIDx0ZD4gDQogICAgICAgIDxkaXYgYWxpZ249ImNlbnRlciI+PGEgaHJlZj0i= MTAyMS5qcGciPjxpbWcgc3JjPSJzbWFsbHBpY3MvMTAyMS5qcGciIGJvcmRlcj0iMSI+PC9hPjwv= ZGl2Pg0KICAgICAgPC90ZD4NCiAgICAgIDx0ZD4gDQogICAgICAgIDxkaXYgYWxpZ249ImNlbnRl= ciI+PGEgaHJlZj0iMTAyMi5qcGciPjxpbWcgc3JjPSJzbWFsbHBpY3MvMTAxNy5qcGciIGJvcmRl= cj0iMSI+PC9hPjwvZGl2Pg0KICAgICAgPC90ZD4NCiAgICAgIDx0ZD4gDQogICAgICAgIDxkaXYg= YWxpZ249ImNlbnRlciI+PGEgaHJlZj0iMTAyMy5qcGciPjxpbWcgc3JjPSJzbWFsbHBpY3MvMTAy= My5qcGciIGJvcmRlcj0iMSI+PC9hPjwvZGl2Pg0KICAgICAgPC90ZD4NCiAgICAgIDx0ZD4gDQog= ICAgICAgIDxkaXYgYWxpZ249ImNlbnRlciI+PGEgaHJlZj0iMTAyNC5qcGciPjxpbWcgc3JjPSJz= bWFsbHBpY3MvMTAyNC5qcGciIGJvcmRlcj0iMSI+PC9hPjwvZGl2Pg0KICAgICAgPC90ZD4NCiAg= ICAgIDx0ZD4gDQogICAgICAgIDxkaXYgYWxpZ249ImNlbnRlciI+PGEgaHJlZj0iMTAyNS5qcGci= PjxpbWcgc3JjPSJzbWFsbHBpY3MvMTAyNS5qcGciIGJvcmRlcj0iMSI+PC9hPjwvZGl2Pg0KICAg= ICAgPC90ZD4NCiAgICA8L3RyPg0KICAgIDx0cj4gDQogICAgICA8dGQ+IA0KICAgICAgICA8ZGl2= IGFsaWduPSJjZW50ZXIiPjxhIGhyZWY9IjEwMjYuanBnIj48aW1nIHNyYz0ic21hbGxwaWNzLzEw= MjYuanBnIiBib3JkZXI9IjEiPjwvYT48L2Rpdj4NCiAgICAgIDwvdGQ+DQogICAgICA8dGQ+IA0K= ICAgICAgICA8ZGl2IGFsaWduPSJjZW50ZXIiPjxhIGhyZWY9IjEwMjcuanBnIj48aW1nIHNyYz0i= c21hbGxwaWNzLzEwMjcuanBnIiBib3JkZXI9IjEiPjwvYT48L2Rpdj4NCiAgICAgIDwvdGQ+DQog= ICAgICA8dGQ+IA0KICAgICAgICA8ZGl2IGFsaWduPSJjZW50ZXIiPjxhIGhyZWY9IjEwMjguanBn= Ij48aW1nIHNyYz0ic21hbGxwaWNzLzEwMjguanBnIiBib3JkZXI9IjEiPjwvYT48L2Rpdj4NCiAg= ICAgIDwvdGQ+DQogICAgICA8dGQ+IA0KICAgICAgICA8ZGl2IGFsaWduPSJjZW50ZXIiPjxhIGhy= ZWY9IjEwMjkuanBnIj48aW1nIHNyYz0ic21hbGxwaWNzLzEwMjkuanBnIiBib3JkZXI9IjEiPjwv= YT48L2Rpdj4NCiAgICAgIDwvdGQ+DQogICAgICA8dGQ+IA0KICAgICAgICA8ZGl2IGFsaWduPSJj= ZW50ZXIiPjxhIGhyZWY9IjEwMzAuanBnIj48aW1nIHNyYz0ic21hbGxwaWNzLzEwMzAuanBnIiBi= b3JkZXI9IjEiPjwvYT48L2Rpdj4NCiAgICAgIDwvdGQ+DQogICAgPC90cj4NCiAgICA8dHI+IA0K= ICAgICAgPHRkPiANCiAgICAgICAgPGRpdiBhbGlnbj0iY2VudGVyIj48YSBocmVmPSIxMDMxLmpw= ZyI+PGltZyBzcmM9InNtYWxscGljcy8xMDMxLmpwZyIgYm9yZGVyPSIxIj48L2E+PC9kaXY+DQog= ICAgICA8L3RkPg0KICAgICAgPHRkPiANCiAgICAgICAgPGRpdiBhbGlnbj0iY2VudGVyIj48YSBo= cmVmPSIxMDMyLmpwZyI+PGltZyBzcmM9InNtYWxscGljcy8xMDMyLmpwZyIgYm9yZGVyPSIxIj48= L2E+PC9kaXY+DQogICAgICA8L3RkPg0KICAgICAgPHRkPiZuYnNwOzwvdGQ+DQogICAgICA8dGQ+= Jm5ic3A7PC90ZD4NCiAgICAgIDx0ZD4mbmJzcDs8L3RkPg0KICAgIDwvdHI+DQogICAgPHRyPiAN= CiAgICAgIDx0ZD48aW1nIHNyYz0iLi4vLi4vZ3JhcGhpY3MvZG90czEuanBnIiBib3JkZXI9IjAi= PjwvdGQ+DQogICAgICA8dGQgY29sc3Bhbj0iMyI+IA0KICAgICAgICA8ZGl2IGFsaWduPSJjZW50= ZXIiPjxiPjxhIGhyZWY9Imh0dHA6Ly93d3cuaGlnaGFzaWFuLmNvbS9yZWZlci5waHA/SUQ9YWxs= ZW53YW5nIj48Zm9udCBmYWNlPSJWZXJkYW5hLCBBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlm= Ij48Yj5DbGljayANCiAgICAgICAgICBIZXJlIFRvIFNlZSBUaGUgRnVsbCBTdG9yeSBCZWhpZGUh= PC9iPjwvZm9udD48L2E+IDwvYj48L2Rpdj4NCiAgICAgIDwvdGQ+DQogICAgICA8dGQ+IA0KICAg= ICAgICA8ZGl2IGFsaWduPSJyaWdodCI+PGltZyBzcmM9Ii4uLy4uL2dyYXBoaWNzL2RvdHMyLmpw= ZyIgYm9yZGVyPSIwIj48L2Rpdj4NCiAgICAgIDwvdGQ+DQogICAgPC90cj4NCiAgICA8L3Rib2R5= PiANCiAgPC90YWJsZT4NCiAgPGZvbnQgc2l6ZT0iMiIgY29sb3I9IiNGRkZGRkYiPqkyMDAwLTIw= MDIgaGlnaGFzaWFuLmNvbTxicj4NCiAgPGEgdGFyZ2V0PSJfdG9wIiBocmVmPSJodHRwOi8vdC5l= eHRyZW1lLWRtLmNvbS8/bG9naW49aGFzaWFuMSI+IDxpbWcgbmFtZT1pbSBzcmM9Imh0dHA6Ly90= MS5leHRyZW1lLWRtLmNvbS9pLmdpZiINCmJvcmRlcj0wIGFsdD0iIiB3aWR0aD0iMSIgaGVpZ2h0= PSIxIj48L2E+IA0KICA8c2NyaXB0IGxhbmd1YWdlPSJqYXZhc2NyaXB0Ij48IS0tDQphbj1uYXZp= Z2F0b3IuYXBwTmFtZTtkPWRvY3VtZW50O2Z1bmN0aW9uDQpwcigpe2Qud3JpdGUoIjxpbWcgc3Jj= PVwiaHR0cDovL3QwLmV4dHJlbWUtZG0uY29tIiwNCiIvMC5naWY/dGFnPWhhc2lhbjEmaj15JnNy= dz0iK3NydysiJnNyYj0iK3NyYisiJiIsDQoicnM9IityKyImbD0iK2VzY2FwZShkLnJlZmVycmVy= KSsiXCIgaGVpZ2h0PTEgIiwNCiJ3aWR0aD0xPiIpO31zcmI9Im5hIjtzcnc9Im5hIjsvLy0tPg0K= PC9zY3JpcHQ+DQogIDxzY3JpcHQgbGFuZ3VhZ2U9ImphdmFzY3JpcHQxLjIiPjwhLS0NCnM9c2Ny= ZWVuO3Nydz1zLndpZHRoO2FuIT0iTmV0c2NhcGUiPw0Kc3JiPXMuY29sb3JEZXB0aDpzcmI9cy5w= aXhlbERlcHRoOy8vLS0+DQo8L3NjcmlwdD4NCiAgPHNjcmlwdCBsYW5ndWFnZT0iamF2YXNjcmlw= dCI+PCEtLQ0Kcj00MTtkLmltYWdlcz9yPWQuaW0ud2lkdGg6ej0wO3ByKCk7Ly8tLT4NCjwvc2Ny= aXB0Pg0KICA8bm9zY3JpcHQ+PGltZyBoZWlnaHQ9MSB3aWR0aD0xIGFsdD0iIiANCnNyYz0iaHR0= cDovL3QwLmV4dHJlbWUtZG0uY29tLzAuZ2lmP3RhZz1oYXNpYW4xJmo9biI+PC9ub3NjcmlwdD4g= PC9mb250Pjxmb250IHNpemU9IjIiIGNvbG9yPSIjRkZGRkZGIj4gDQogIDwvZm9udD48L2Rpdj4N= CjwvYm9keT4NCjwvaHRtbD4NCg=3D=3D ------=3D_NextPart_000_01BC2B74=2E89D1CCC0-- ------=_NextPart_000_01BC2B74.89D1CCC0--

1 0

Re: Greetings/Question - Was: RE: Have some consideration for
by Roger Dingledine 06 Jul '18

06 Jul '18

users... User-Agent: Mutt/1.5.9i Reply-To: or-talk(a)freehaven.net On Fri, Sep 02, 2005 at 09:08:27PM -0400, Jeffrey F. Bloss wrote: > What IS the impact on the tor network if a node suddenly drops off the > face of the planet, or appears and disappears every half hour or so > for an 8 hour span? I'd assume since tor is "real time" the node is > simply routed around, correct? How fast are these things compensated > for? Tor servers publish an "uptime" in their server descriptor, which is the time they've been available/working at their current IP. If servers die suddenly, Tor circuits that use them are broken. If somebody is using one of those circuits (e.g. for his irc connection), then it gets cut. Tor clients have a config option "LongLivedPorts" which defaults to "21,22,706,1863,5050,5190,5222,5223,6667,8300,8888". If a socks request asks for one of these ports, then it uses a circuit constructed entirely of nodes with uptimes of at least a day. The theory is that if they've been up that long, they'll probably be up a while longer. So for things like port 80 where the request is typically quite quick, a flaky node is fine, since it's either up during the request or it's not (in which case we'll keep building circuits until we get one that works). The answer to your question is "If your node is always like this, then it's probably not worth while to run a Tor node. But if it's fine for most days and it has this behavior one afternoon a week, then it's useful to have it." Hope that helps, --Roger ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

US Attorney General demands ISPs snoop on customers to stop
by Brett Glass 06 Jul '18

06 Jul '18

"terrorism" Dave: For IP, if you'd like. As an ISP, I can tell you that what the USDOJ is demanding in the article below is not only an unprecedented, vast, unwarranted intrusion that should have every citizen up in arms but would be extremely costly and in many cases simply impossible. For example, the article mentions that the DOJ wants ISPs to retain lists of the IP addresses used by every user. But we, as an ISP, do not give each user a unique IP address; we use network address translation, or NAT. To abandon the use of NAT would not only compromise users' safety (by making them more susceptible to Internet worms and other attacks); it would also require us to spend thousands of dollars to obtain more addresses from ARIN and to re-architect our network. What's more, the imposition of such a requirement upon all ISPs would instantly exhaust the remaining pool of IPV4 addresses at a time when most equipment is not ready for IPV6. The requirement that all VOIP calls be monitored is likewise absurd. We don't provide VOIP ourselves; we merely provide the pipes. We don't even know when a VOIP call is taking place on our network. We would have no way to monitor and track every one on behalf of the government, even if we were willing to (which we are not; we owe it to our users never to participate in such blatantly unconstitutional activity). Note that the government first attempted to use kiddie porn as an excuse to destroy our liberty, but seems to have decided that terrorism is a more effective excuse -- despite the fact that there have been no terrorist attacks on US soil since 9/11. The belief that everything and everyone must be monitored in the hope of preventing possible criminal activity is a hallmark of a police state. Is this what the US is coming to? If so, the 9/11 terrorists have won. By killing fewer people than died in the recent earthquake, they have given an irresponsible government an excuse to destroy our freedom, and have successfully cowed the populace into allowing it to happen. --Brett Glass ------------------ Terrorism invoked in ISP snooping proposal By Declan McCullagh http://news.com.com/Terrorism+invoked+in+ISP+snooping+proposal/ 2100-1028_3-6078229.html Story last modified Wed May 31 06:12:45 PDT 2006 In a radical departure from earlier statements, Attorney General Alberto Gonzales has said that requiring Internet service providers to save records of their customers' online activities is necessary in the fight against terrorism, CNET News.com has learned. Gonzales and FBI Director Robert Mueller privately met with representatives of AOL, Comcast, Google, Microsoft and Verizon last week and said that Internet providers--and perhaps search engines-- must retain data for two years to aid in anti-terrorism prosecutions, according to multiple sources familiar with the discussion who spoke on condition of anonymity on Tuesday. "We want this for terrorism," Gonzales said, according to one person familiar with the discussion. Gonzales' earlier position had only emphasized how mandatory data retention would help thwart child exploitation. In a speech last month at the National Center for Missing and Exploited Children, Gonzales said that Internet providers must retain records to aid investigations of criminals "abusing kids and sending images of the abuse around the world through the Internet." If data retention becomes viewed primarily as an anti-terrorism measure, recent legal and political spats could complicate the Justice Department's efforts to make it standard practice. Especially after recent reports that AT&T has opened its databases to the National Security Agency, Internet and telecommunications executives have become skittish about appearing to be cooperating too closely with the federal government's surveillance efforts. In addition, the positive publicity that Google received during its legal dispute with the Justice Department over search terms has demonstrated to Internet companies the benefits of objecting to government requests on privacy grounds. "A monumental data trove is a crazy thing from a privacy perspective," said one person familiar with Friday's discussions. "It's crazy that the U.S. government is going to retain more data than the Chinese government does." Comcast said in a statement that "we fully share the attorney general's concern with the need to combat illegal use of the Internet for child pornography, terrorism and other illegal activities. We applaud the attorney general's initiative in convening an internal task force on this issue and look forward to continuing to cooperate with him and the FBI." "The reasons for skepticism are growing," said Jim Harper, an analyst at the free-market Cato Institute and member of the Department of Homeland Security's Data Privacy and Integrity Advisory Committee. He predicted the reaction among Internet and telecom companies will be "mildly unfavorable but people are not yet to the point where they'll say the emperor has no clothes." More at http://news.com.com/2102-1028_3-6078229.html?tag=st.util.print Sidebar: ISP snooping time line In events first reported by CNET News.com, Bush administration officials have said Internet providers must keep track of what Americans are doing online. Here's the time line: June 2005: Justice Department officials quietly propose data retention rules. December 2005: European Parliament votes for data retention of up to two years. April 14, 2006: Data retention proposals surface in Colorado and the U.S. Congress. April 20, 2006: Attorney General Gonzales says data retention "must be addressed." April 28, 2006: Rep. DeGette proposes data retention amendment. May 16, 2006: Rep. Sensenbrenner drafts data retention legislation, but backs away from it two days later. May 26, 2006: Gonzales and FBI Director Mueller meet with Internet and telecommunications companies. Details of the Justice Department's proposal remain murky. One possibility is requiring Internet providers to record the Internet addresses that their customers are temporarily assigned. A more extensive mandate would require them to keep track of the identities of Americans' e-mail and instant messaging correspondents and save the logs of Internet phone calls. ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] US Attorney General demands ISPs snoop on customers to stop
by David Farber 06 Jul '18

06 Jul '18

"terrorism" X-Mailer: Apple Mail (2.750) Reply-To: dave(a)farber.net Begin forwarded message:

1 0

Re: [liberationtech] iPhones/iPads secretly track 'scary amount' of your movements
by Rafal Rohozinski 06 Jul '18

06 Jul '18

It's not just iPhones that record vast amount of data that can be easily geo-located and reconstruct person's movements, networks, and personal communication - any cell phone going back 15 years stores data through log files, message and SMS traffic that can be reconstructed and retrieved to create pretty comprehensive profiles of usage and location. Devices that do forensic extraction (UFED) are quite widespread and in use throughout police forces intelligence agencies as well as most cellular carriers around the world. For those of you for whom this is a revelation, I'd advise you to take a look at this website of a leading provider of UFEDs. There are some interesting videos, and once you're done, take a look at where this company has it's permanent representatives. http://www.cellebrite.com/forensic-products/ufed-physical-pro.html Time for a reality check. Mobile phones are essentially digital dogtags so if you're concerned about the ability they have to track your movements and communications - do like Osama, use exclusively off-line means through trusted intermediaries. Otherwise accepting that cell phones are a risk to privacy is just the flip side of the convenience that these devices bring. With or without Apple networks are essentially spiderwebs - that's the essence of modern signals intelligence. It's worrisome that there are a lot of myths among the activist community about cell phone security. True, you can "drive up the negatives" and make it more difficult for a casual actor to scan or obtain PII from your phone ( so I I agree with Nathan) - but if you're up against well resourced opponents, most of these tools plain ineffective and their very presence on your phone may be more of a giveaway that actually makes you more of a a target of interest. Unfortunately security is not a product or something you can buy shrink-wrapped in code. Its practice and process and ultimately comes down to the risks you're willing to take in the service of an objective or cause. And if you want to play in the big tent, it's good old-fashioned tradecraft and not better toys that make a difference. Rafal On Apr 20, 2011, at 5:43 PM, Frank Corrigan wrote: > > I am aware of the general principle of mobile phone tracking, it is just > that most people assume this data is only accessible via cell tower > providers or via a court order/lawful request, not recorded on the > device itself and accessible in an easy to read format to anyone who has > access and inclination or has impounded it for law enforcement purposes. > I suppose it's a bit like the Windows IE index.dat files. Now of course > anyone crossing a USA border can have such devices taken away and such > location data easily copied for later in-situ analysis. > > Frank > > ----- Original message ----- > From: "Nathan Freitas" <nathan(a)freitas.net> > To: "Frank Corrigan" <email(a)franciscorrigan.com>, "Liberation > Technologies" <liberationtech(a)lists.stanford.edu> > Date: Wed, 20 Apr 2011 16:20:13 -0400 > Subject: Re: [liberationtech] iPhones/iPads secretly track 'scary > amount' of your movements > > On 04/20/2011 03:55 PM, Frank Corrigan wrote: >> More reasons for activists/protesters in hostile (ordinary) environments >> not to bring along their mobile phone, latest cell connected gizmo. > > ... and return to megaphones, flags, smoke signals, carrier pigeons and > frantic arm waving instead? If our ordinary environments are truly > hostile, then either we give up ever using a mobile phone, or we find > some way to address the problem. > > Don't get me wrong, this latest revelation on mobile privacy is indeed > scary, and Apple better fess up. I just think we can fix these issues, > instead of allowing them to be disempowering. > > In this case at least, turning your phone into "airplane mode" would > have stopped the phone from broadcasting its availability to and > registering with mobile towers. This would stop the active triangulation > of your location from being logged into the local iOS database. > > I have an "airplane mode" icon on my Android phone home screen. Anytime > I am not expecting an important call, or am reachable by another means > (email, IM, irc), I generally activate it. Not only does it reduce my > location footprint data trail, but it also saves quite a bit of battery > life! > > I also like Google's Latitude Dashboard which encourages user to really > "own it" when it comes to mobile location data tracking. They have a > really pretty UI, charts, etc, that can show you how many minutes a day > you spend at home, the gym, work or your local pub. Their point is that > if government and mobile phone operators already have this data, why > shouldn't you (the user and human being tracked) also benefit from it? > > https://www.google.com/latitude/history/dashboard > > All in all, we shouldn't cede the advantage technology can bring to the > movements and causes we care about because developers at Apple and Skype > (see their recent issue with Android app data permissions) are clearly > make very bad decisions about how they implement their closed-source > software. > > Best, > Nathan > > _______________________________________________ > liberationtech mailing list > liberationtech(a)lists.stanford.edu > > Should you need to change your subscription options, please go to: > > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" > > You will need the user name and password you receive from the list moderator in monthly reminders. > > Should you need immediate assistance, please contact the list moderator. > > Please don't forget to follow us on http://twitter.com/#!/Liberationtech _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] iPhones/iPads secretly track 'scary amount' of your movements
by Rafal Rohozinski 06 Jul '18

06 Jul '18

It's not just iPhones that record vast amount of data that can be easily geo-located and reconstruct person's movements, networks, and personal communication - any cell phone going back 15 years stores data through log files, message and SMS traffic that can be reconstructed and retrieved to create pretty comprehensive profiles of usage and location. Devices that do forensic extraction (UFED) are quite widespread and in use throughout police forces intelligence agencies as well as most cellular carriers around the world. For those of you for whom this is a revelation, I'd advise you to take a look at this website of a leading provider of UFEDs. There are some interesting videos, and once you're done, take a look at where this company has it's permanent representatives. http://www.cellebrite.com/forensic-products/ufed-physical-pro.html Time for a reality check. Mobile phones are essentially digital dogtags so if you're concerned about the ability they have to track your movements and communications - do like Osama, use exclusively off-line means through trusted intermediaries. Otherwise accepting that cell phones are a risk to privacy is just the flip side of the convenience that these devices bring. With or without Apple networks are essentially spiderwebs - that's the essence of modern signals intelligence. It's worrisome that there are a lot of myths among the activist community about cell phone security. True, you can "drive up the negatives" and make it more difficult for a casual actor to scan or obtain PII from your phone ( so I I agree with Nathan) - but if you're up against well resourced opponents, most of these tools plain ineffective and their very presence on your phone may be more of a giveaway that actually makes you more of a a target of interest. Unfortunately security is not a product or something you can buy shrink-wrapped in code. Its practice and process and ultimately comes down to the risks you're willing to take in the service of an objective or cause. And if you want to play in the big tent, it's good old-fashioned tradecraft and not better toys that make a difference. Rafal On Apr 20, 2011, at 5:43 PM, Frank Corrigan wrote: > > I am aware of the general principle of mobile phone tracking, it is just > that most people assume this data is only accessible via cell tower > providers or via a court order/lawful request, not recorded on the > device itself and accessible in an easy to read format to anyone who has > access and inclination or has impounded it for law enforcement purposes. > I suppose it's a bit like the Windows IE index.dat files. Now of course > anyone crossing a USA border can have such devices taken away and such > location data easily copied for later in-situ analysis. > > Frank > > ----- Original message ----- > From: "Nathan Freitas" <nathan(a)freitas.net> > To: "Frank Corrigan" <email(a)franciscorrigan.com>, "Liberation > Technologies" <liberationtech(a)lists.stanford.edu> > Date: Wed, 20 Apr 2011 16:20:13 -0400 > Subject: Re: [liberationtech] iPhones/iPads secretly track 'scary > amount' of your movements > > On 04/20/2011 03:55 PM, Frank Corrigan wrote: >> More reasons for activists/protesters in hostile (ordinary) environments >> not to bring along their mobile phone, latest cell connected gizmo. > > ... and return to megaphones, flags, smoke signals, carrier pigeons and > frantic arm waving instead? If our ordinary environments are truly > hostile, then either we give up ever using a mobile phone, or we find > some way to address the problem. > > Don't get me wrong, this latest revelation on mobile privacy is indeed > scary, and Apple better fess up. I just think we can fix these issues, > instead of allowing them to be disempowering. > > In this case at least, turning your phone into "airplane mode" would > have stopped the phone from broadcasting its availability to and > registering with mobile towers. This would stop the active triangulation > of your location from being logged into the local iOS database. > > I have an "airplane mode" icon on my Android phone home screen. Anytime > I am not expecting an important call, or am reachable by another means > (email, IM, irc), I generally activate it. Not only does it reduce my > location footprint data trail, but it also saves quite a bit of battery > life! > > I also like Google's Latitude Dashboard which encourages user to really > "own it" when it comes to mobile location data tracking. They have a > really pretty UI, charts, etc, that can show you how many minutes a day > you spend at home, the gym, work or your local pub. Their point is that > if government and mobile phone operators already have this data, why > shouldn't you (the user and human being tracked) also benefit from it? > > https://www.google.com/latitude/history/dashboard > > All in all, we shouldn't cede the advantage technology can bring to the > movements and causes we care about because developers at Apple and Skype > (see their recent issue with Android app data permissions) are clearly > make very bad decisions about how they implement their closed-source > software. > > Best, > Nathan > > _______________________________________________ > liberationtech mailing list > liberationtech(a)lists.stanford.edu > > Should you need to change your subscription options, please go to: > > https://mailman.stanford.edu/mailman/listinfo/liberationtech > > If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" > > You will need the user name and password you receive from the list moderator in monthly reminders. > > Should you need immediate assistance, please contact the list moderator. > > Please don't forget to follow us on http://twitter.com/#!/Liberationtech _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[liberationtech] Fear of Repression Spurs Scholars and Activists to Build Alternate Internets
by Yosem Companys 06 Jul '18

06 Jul '18

September 18, 2011 Fear of Repression Spurs Scholars and Activists to Build Alternate Internets [image: College 2.0: Fear of Repression Spurs Scholars and Activists to Build Alternate Internets 1] Yana Paskova for The Chronicle Eben Moglen, a law professor at Columbia U., is developing the Freedom Box, a personal server that makes data harder to intercept. "The Net we have is increasingly monitored, measured, and surveilled everywhere by everybody all the time," he says. "Our Net has been turned against us." Enlarge Image<http://chronicle.com/article/Fear-of-Repression-Spurs/129049/?sid=wc&utm_so…> By Jeffrey R. Young Washington Computer networks proved their organizing power during the recent uprisings in the Middle East, in which Facebook pages amplified street protests that toppled dictators. But those same networks showed their weaknesses as well, such as when the Egyptian government walled off most of its citizens from the Internet in an attempt to silence protesters. That has led scholars and activists increasingly to consider the Internet's wiring as a disputed political frontier. For example, one weekend each month, a small group of computer programmers gathers at a residence here to build a homemade Internetbnamed Project Byzantiumbthat could go online if parts of the current global Internet becomes blocked by a repressive government. Using an approach called a "mesh network," the system would set up an informal wireless network connecting users with other nearby computers, which in turn would pass along the signals. The mesh network could tie back into the Internet if one of the users found a way to plug into an unblocked route. The developers recently tested an early version of their software at George Washington University (though without the official involvement of campus officials). The leader of the effort, who goes by the alias TheDoctor but who would not give his name, out of concern that his employer would object to the project, says he fears that some day repressive measures could be put into place in the United States. Enlarge Image<http://chronicle.com/article/Fear-of-Repression-Spurs/129049/?sid=wc&utm_so…>[image: College 2.0: Fear of Repression Spurs Scholars and Activists to Build Alternate Internets 2] He is not the only one with such apprehensions. Next month TheB-Doctor will join hundreds of like-minded high-tech activists and entrepreneurs in New York at an unusual conference called the Contact Summit<http://contactcon.com/>. One of the participants is Eben Moglen, a professor at Columbia Law School who has built an encryption device and worries about a recent attempt by Wisconsin politicians to search a professor's e-mail. The summit's goal is not just to talk about the projects, but also to connect with potential financial backers, recruit programmers, and brainstorm approaches to building parallel Internets and social networks. The meeting is a sign of the growing momentum of what is called the "free-network movement," whose leaders are pushing to rewire online networks to make it harder for a government or corporation to exert what some worry is undue control or surveillance. Another key concern is that the Internet has not lived up to its social potential to connect people, and instead has become overrun by marketing and promotion efforts by large corporations. At the heart of the movement is the idea that seemingly mundane technical specifications of Internet routers and social-networking software platforms have powerful political implications. In virtual realms, programmers essentially set the laws of physics, or at least the rules of interaction, for their cyberspaces. If it sometimes seems that media pundits treat Facebook's Mark Zuckerberg or Apple's Steve Jobs as gods, that's because in a sense they arebsitting on Mount Olympus with the power to hurl digital thunderbolts with a worldwide impact on people. Instead of just complaining, many of those heading to New York next month believe they can build alternatives that reduce the power of those virtual deities and give more control to mere mortals. I was surprised by the number of homegrown Internet projects described on the Contact Summit's Web sitebthough most of them are not yet operational, and some may never be. Among the approaches: an alternative to Facebook that promises better privacy control; a device that automatically scrambles e-mail and Web traffic so that only people authorized by the user can read them; and various mesh-network efforts that can essentially create an "Internet in a suitcase" to set up wherever unfettered Internet access is needed. Whether you see these techies as visionaries or paranoids, they highlight the extent to which networks now shape nations. "Anyone who cares about human rights anywhere should dedicate themselves to building these systems," is how Yochai Benkler, co-director of the Berkman Center for Internet and Society at Harvard University, put it when I asked him about the trend. Bazaar 2.0 One organizer of the Contact Summit, Douglas Rushkoff, compares the disruptive power of the Internet to the impact of bazaars in the Middle Ages. In his latest book, *Program or Be Programmed* (OR Books), he argues that the earliest bazaars helped transform feudal society by allowing vigorous information sharingba low-tech peer-to-peer network. "Everyone was speaking with everybody else, and about all sorts of things and ideas," he writes. "All this information exchange allowed people to improve on themselves and their situations," allowing craftsmen to form guilds and share techniques. "As the former peasants rose to become a middle class of merchants and craftsB-people, they were no longer dependent on feudal lords for food and protection." The Internet has created a bazaar 2.0, says Mr. Rushkoff, accelerating information exchange and giving people the power to organize in new ways. At least so far. Mr. Rushkoff argues that companies and governments are gaining too much power, in ways that could limit communication in the future. Facebook, for instance, is a centralized system that forces users to run communications through its serversband, he observes, its main goal is to make money by analyzing data about users and sharing that information with advertisers. "The Internet that we know and love is not up to the task of being both a fully commercial network and a people's infrastructure," Mr. Rushkoff told me. "The Net is not a marketing opportunitybit's something much bigger than that." One idea: Create two parallel Internets, one run and optimized for banks and entertainment giants (like Netflix, whose streaming movies take up more and more of total bandwidth), and the other for academic research, civic discourse, and independent artists. He points to Internet2, a high-speed research network run by universities, as a step in the right direction. But that network is available only on select campuses. Perhaps other approaches will emerge that are designed to encourage the kind of peer-to-peer trading of information that Mr. Rushkoff prefers. To encourage that, the Contact Summit will organize a bazaar of its own, where participants can seek supporters for their projects. The organizers plan to award start-up grants to a few projects on the basis of a competition. "This is a conference of doers and people looking for counsel and collaborators," Mr. Rushkoff explains. He acknowledges that the crowd he is gathering can be hard to herd, though: "There are people who are afraid to come to Contact because they think they're going to be hacked or tracked or injected with something. There are a lot of loonies out there." Protecting Privacy One developer who is eager to go the summit is Mr. Moglen, the law professor. He's leading the development of a device called the Freedom Box, and though it doesn't look like muchba gadget the size of a paperback bookbhe believes that it would be able to help Internet users preserve their privacy. The concept: It's a personal server, which automatically scrambles digital data to make them harder for unauthorized people to intercept. The idea is to create a personal "cloud," or online storage space, for data before the information is sent to standard e-mail or Web services. Mr. Moglen and a team of programmers are developing the software under the auspices of the FreedomBox Foundation, a nonprofit organization, and plan to release it under an open license that lets anyone use and modify it. The initial Freedom Box code is expected to hit the Web in the next week or two, although it is more of a framework for developers at this point and lacks most of the planned features. For Mr. Moglen the work is part of a longtime mission. *The Chronicle* profiled him <http://chronicle.com/article/The-dotCommunist/18635/> several years ago, soon after he founded the Software Freedom Law Center and published what he called *The dotCommunist Manifesto.* In the manifesto, he argues that all software should be developed by groups under free licenses rather than by companies out to make profit. Critics have called his approach extreme and unworkable, but in some areas open-source software has gained ground in recent years. "The Net we have is increasingly monitored, measured, and surveilled everywhere by everybody all the time, or at least by somebody who's doing it for somebody else and would answer a subpoena if they got one," he argued at a conference this year. "Our Net has been turned against us." In an interview, Mr. Moglen emphasizes that professors in particular should send their communications through his device. The reason? "Two words: William Cronon." Mr. Cronon, a history professor at the University of Wisconsin at Madison, was recently the subject of an unusual public-records request by a political group. The Republican Party of Wisconsin asked the university to turn over a batch of e-mail messages by the professor containing certain keywords, as *The Chronicle* reported,<http://chronicle.com/article/Wisconsin-GOP-Seeks-E-Mails-of/126911/> after he wrote a blog post examining how conservative groups had helped craft controversial legislation, including the 2011 measure to strip Wisconsin public employees of collective-bargaining rights. Mr. Cronon believes that Republican officials were hunting for evidence that he had violated state law by using his state-university account for political speech, which he denies doing. He says other professors might be discouraged from speaking publicly on controversial issues, for fear their e-mail messages, too, might be sought by critics. Some free-Internet projects have been under development for some time, and many professors and business leaders have long encrypted their e-mail messages. But there is a new emphasis on making such systems easier to use and bringing them to a wider audience, says Sascha Meinrath, director of the Open Technology Initiative at the New America Foundation. "We're trying to move them out of the geekosphere and get them into mainstream use," he told me. And there's evidence of that happening. This summer the foundation received a $2-million grant from the State Department to build its own mesh network, which could be set up by dissidents abroad to avoid censors. That's the system being called an "Internet in a suitcase." Proponents of mesh projects like Byzantium say they can provide a different kind of Internet freedomba connection that comes at no cost. Potentially, mesh networks could be set up and shared as free community networks. For activists like TheDoctor, that kind of freedom can give low-income users a chance to access information that could help improve their lives. "If a single Byzantium node gave a single person access to MIT's open courseware," he says, "the whole project would be a success." College 2.0 covers how new technologies are changing colleges. Please send ideas tojeff.young(a)chronicle.com or @jryoung on Twitter. _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: <nettime> What do you think about .art?
by Morlock Elloi 06 Jul '18

06 Jul '18

DNS and ICANN and such are on their way out. Private namespaces are back. The assumption - that, for example, xyz.com *must* resolve to the same IP number wherever the query is done - went curiously unchallenged for a long time. Now, seriously, why is it so important that google.com means the same in New Zealand and Czech Republic? Where is this notion that the planet needs the globally unique name space coming from? What makes it "good" (hint - you can't use Google, Inc. profits as an argument) ? Historically, only the state insisted on unique identifiers, for its own needs. The unique namespace is a terrible idea. It's a shit amplifier. It skips and disables local roadsigns and greatly reduces the number of roadsign posters. It's no wonder that ICANN attracts slimy thugs - a prospect that few can decide on global naming has attractiveness of a dung pile for flies miles away. There are very good reasons for having things harder to find. A complex discovery process itself is a great moron filter. During the search you may find things and people you didn't look for. # distributed via <nettime>: no commercial use without permission # <nettime> is a moderated mailing list for net criticism, # collaborative text filtering and cultural politics of the nets # more info: http://mx.kein.org/mailman/listinfo/nettime-l # archive: http://www.nettime.org contact: nettime(a)kein.org ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: Greetings/Question - Was: RE: Have some consideration for
by Roger Dingledine 06 Jul '18

06 Jul '18

users... User-Agent: Mutt/1.5.9i Reply-To: or-talk(a)freehaven.net On Fri, Sep 02, 2005 at 09:08:27PM -0400, Jeffrey F. Bloss wrote: > What IS the impact on the tor network if a node suddenly drops off the > face of the planet, or appears and disappears every half hour or so > for an 8 hour span? I'd assume since tor is "real time" the node is > simply routed around, correct? How fast are these things compensated > for? Tor servers publish an "uptime" in their server descriptor, which is the time they've been available/working at their current IP. If servers die suddenly, Tor circuits that use them are broken. If somebody is using one of those circuits (e.g. for his irc connection), then it gets cut. Tor clients have a config option "LongLivedPorts" which defaults to "21,22,706,1863,5050,5190,5222,5223,6667,8300,8888". If a socks request asks for one of these ports, then it uses a circuit constructed entirely of nodes with uptimes of at least a day. The theory is that if they've been up that long, they'll probably be up a while longer. So for things like port 80 where the request is typically quite quick, a flaky node is fine, since it's either up during the request or it's not (in which case we'll keep building circuits until we get one that works). The answer to your question is "If your node is always like this, then it's probably not worth while to run a Tor node. But if it's fine for most days and it has this behavior one afternoon a week, then it's useful to have it." Hope that helps, --Roger ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0