moxie

26 ms·

181.
by moxie 13y ago
See: http://www.crimethinc.com Also, it looks like you're in the Bay Area. You can stop by Bound Together Books in SF, The Long Haul Infoshop in Berkeley, or The Holdout in Oakland. The East Bay Anarchist Conversation and
182.
by moxie 13y ago
We should celebrate Ladar for making the decision to put himself at risk in order to protect his users, but I think we should be careful not to forget that Ladar was forced to make that decision because the security of Lavabit was all a tot
183.
by moxie 13y ago
Yes, absolutely, there are more hurdles. As an extension of this pinning work, Trevor has also been working on a proposal for 3rd party includes that would allow you to specify a hashsum in the include line, as well as a proposal that woul
184.
by moxie 13y ago
We have some large websites on board to deploy it, and Trevor has been working with browser vendors to get it integrated. The latter has been pretty slow going, but there is interest.
185.
by moxie 13y ago
Trevor Perrin and I have been working on a dynamic certificate pinning proposal called TACK to help mitigate these types of attacks: http://tack.io In the current state of the world, we're all dependent on CA signatures fo
186.
Alex Macgillivray, Twitter's General Council, is leaving Twitter(bricoleur.org)
2 points by moxie 13y ago|0 comments
187.
by moxie 13y ago
The documents says they are "... investing in groundbreaking cryptanalytic capabilities to defeat adversarial cryptography and exploit internet traffic." Not that they have achieved groundbreaking cryptanalytic capabilities.
188.
by moxie 13y ago
The Inca were easy to conquer because they had no steel and no horses. The Spanish were so unimaginably horrible that I can't imagine their presence having anything other than a uniting effect. The book "The Last Days Of The Inca
189.
by moxie 13y ago
Metadata is important, but right now TextSecure uses SMS/MMS, so "the server" is your telco. I don't think it's possible for anything we do server side to be worse.
190.
by moxie 13y ago
I think you might be misunderstanding what's happening here. The prekey is nothing but a public signed ECDH message. An attacker would need to compromise that message's corresponding private key in order to decrypt any ciphertex
191.
by moxie 13y ago
We're integrating TextSecure into the CyanogenMod system SMS provider. You'll be able to use any text messaging app you'd like, and outgoing messages will transparently be encrypted when communicating with other TextSecure or
192.
by moxie 13y ago
The prekey messages are signed with the owner's identity key.
193.
by moxie 13y ago
I don't think Mailpile is potentially valuable because it immediately solves the encryption problem, but because it solves the MUA problem. All innovation in the secure email space has been blocked for the past 13 years by one primary
194.
The Lies Your Government Tells You About NSA Surveillance(techdirt.com)
3 points by moxie 13y ago|0 comments
195.
by moxie 13y ago
Here's why I want something like Mailpile: Right now, every single email I receive is encrypted. I have my public GPG key on my mail server, and every incoming email that's not already encrypted is encrypted using that public ke
196.
by moxie 13y ago
First he said this in congressional testimony: https://www.youtube.com/watch?v=ZmBAxEWxDFs&feature=youtu.be... Then this came out later: http://news.cnet.com/8301-13578_3-57589495-38/nsa-spying-fla.
197.
by moxie 13y ago
I speak at one of those universities almost every year, primarily so that I can talk in opposition to the NSA recruiter who is always there giving a talk at the same time. Those young people look strongly to the culture defined in large par
198.
by moxie 13y ago
We shouldn't be criticizing the heckler for not being a good enough or different enough heckler, we should be criticizing everyone else who did nothing at all.
199.
by moxie 13y ago
I'm actually less interested in our external perception than in how we see ourselves. I think the value of being disruptive isn't necessarily to show the world anything, but to define ourselves as a community with a cultural narr
200.
by moxie 13y ago
General Alexander doesn't have to act rude when he has the power of the NSA behind him. The only power we have in a situation like that is to be disruptive and to be rude. Why should we treat him with respect given all the disrespect
201.
by moxie 13y ago
I disagree. This was a situation where a four star general was standing on stage in military uniform, flanked by secret service, with local security also making a visible show of force. It was an intimidating situation amidst a crowd that
202.
Simplifying OTR's cryptographic deniability property(whispersystems.org)
5 points by moxie 13y ago|0 comments
203.
by moxie 13y ago
Basic protocol: 1) Put signatures of your elements into a bloom filter, rather than the elements themselves. 2) Send the client the entire bloom filter. 3) Allow clients to request blind signatures for the elements they'd like to query
204.
by moxie 13y ago
One way to do it would be: 1) Your plaintext password is used to generate two derivative tokens. One for user authentication with Google, and one for encrypting data stored with Google. The authentication password token is PBKDF2(N, passw
205.
by moxie 13y ago
Where Convergence is about changing the way the TLS trust infrastructure works, TACK is about reducing the exposure that a client has to that trust infrastructure. Currently, your browser is dependent on the CA system for every TLS connec
206.
by moxie 13y ago
The detailed explanation is in this BlackHat talk where I introduced Convergence: http://www.youtube.com/watch?v=Z7Wl2FW2TcA
207.
by moxie 13y ago
I'd been wondering when the explosive kickstarter campaign that leverages the NSA news would appear. My feelings about projects like these are always complicated. Even though it's encouraging to see that people are excited about
208.
Eavesdropping a fax machine(lightbluetouchpaper.org)
54 points by moxie 13y ago|7 comments
209.
by moxie 13y ago
I've been hosting my own mail since 1996. It's actually one of the easier services to self-host: 1) SMTP was developed for unreliable environments. If you have problems with uptime, your incoming email will bounce around for 5 d
210.
by moxie 13y ago
Here is my (obviously biased) view of the landscape: 1) ostel.me :: Like many of the Guardian projects, this is an experiment in combining existing OSS libraries to create an app. In this case, CSipSimple, pjsip, and ZORG. It's basic

More ›