moxie

29 ms·

211.
by moxie 13y ago
Here is the video clip from General Alexander's congressional testimony three days ago, where he stated this was not happening: http://youtu.be/ZmBAxEWxDFs?t=1h29m50s It's not clear to me whether they were sworn i
212.
by moxie 13y ago
The problem is that before these leaks, the Director of National Intelligence was asked point-blank in a congressional hearing whether or not the NSA was conducting surveillance on Americans, and he unequivocally said no. Given that histor
213.
by moxie 13y ago
This is exactly the scenario I was trying to describe. In a world where we're all technically violating the law at some point, and where we're all being monitored intensively, then it's essentially up to those in power to &qu
214.
by moxie 13y ago
On the contrary, the bulk of this article is attempting to explore how the ability to break the law is valuable for society. However, when I talk about selective enforcement, what I mean is that in a world where we're all technically v
215.
by moxie 13y ago
This is perhaps a bad example then. I was referencing James Duane, a law professor, who's quote was: "People have been convicted in federal court for violating this statute because they brought back a 'boney fish' from
216.
Like privacy enhancing technology? How to get involved at Open Whisper Systems.(whispersystems.me)
3 points by moxie 13y ago|0 comments
217.
by moxie 13y ago
We don't distribute our apps on f-droid because we feel it's insecure, and because it doesn't provide the features we need to develop stable and secure software. However, we are willing to distribute our apps outside of the P
218.
by moxie 13y ago
iOS versions of RedPhone and TextSecure are currently in development.
219.
by moxie 13y ago
You might be interested in TACK: http://tack.io
220.
by moxie 13y ago
I'm sure there are plenty of PhDs that are good developers, but in my experience that is in spite of rather than as a result of their degree. After having interviewed thousands of candidates over 15 years, if I see a tilde in your URL on yo
221.
by moxie 13y ago
I think the best developers are often the ones that simply have a detailed understanding of their domain's fundamentals. These are the people that could spend an hour answering a simple question like "What happens when you type 'ls' in a t
222.
by moxie 13y ago
Totally. I think one of the most pernicious things about ineffective but reaffirming processes like voting is that it's easy to conclude that if we don't change things, we must not have wanted them to change. Hypothetically, we believe in
223.
by moxie 13y ago
Many of the structures that make up our society (jails, taxes, laws, rulers) were not "our" creation, but the creation of kings. When those kings were deposed, rather than abolishing the structures those kings had created, they were instead
224.
Solitary in Iran Nearly Broke Me. Then I Went Inside America's Prisons(motherjones.com)
332 points by moxie 13y ago|246 comments
225.
by moxie 13y ago
No need to setup a clone website or to obtain a valid SSL certificate. If I'm in a position to observe a notecrypt users's communication (the reason encryption is necessary), I can just run sslstrip (no SSL certificate required). It will tr
226.
by moxie 13y ago
You posted the link like this: "...I wanted to see how easy it was to fail in practice so I built a simple app: notecrypt.appspot.com" If you copy and paste that into your browser, your browser will make an HTTP request. Your webapp will s
227.
by moxie 13y ago
I haven't had very good luck with Nexmo and deliverability. I wanted to migrate all my traffic there, but had to stop after a few %-tests resulted in increased failure rate. I do still use them for some areas/networks they seem to do bet
228.
by moxie 13y ago
Duo is for two factor authentication, where my impression is that this is for signup verification. Consider mobile apps like WhatsApp, which use your existing mobile number as your identifier. This makes a lot of sense for a bunch of reaso
229.
by moxie 13y ago
But the target customers are developers. If this is simply a productized Twilio API, then it's not a huge time savings for a developer. If you need to verify users, it means your app is structured such that there's already a back end, and
230.
by moxie 13y ago
This is one of the biggest headaches I have as a developer of two mobile apps that require number verification. But the headache isn't because the twilio/nexmo/clickatell/etc APIs are too complex, or because I don't want to deal with addin
231.
by moxie 13y ago
It's not that "bad people" are the ones drawn to become cops and prison guards, but the inverse: working as a cop or a prison guard changes you to behave a certain way. The "Stanford Prison Experiment" is a good example of this phenomenon:
232.
by moxie 13y ago
I keep expecting to see more research into side channel attacks for encrypted video. A fair amount of work has been done for similar attacks on audio streams with VBR codecs. Secure encrypted voice requires using a codec in CBR mode, but t
233.
by moxie 13y ago
Do you have further documentation of this? There doesn't seem to be anything other than hearsay which demonstrates that they do end-to-end encryption, and some anecdotal evidence that they don't (a new device brought online will receive mes
234.
by moxie 13y ago
We're working on this for text messages with TextSecure ( http://www.whispersystems.org ). If you've got the time and interest to help contribute, please check it out.
235.
by moxie 13y ago
In that case, I would generally recommend that you create your own trust root and validate against it, rather than using pinning?
236.
by moxie 13y ago
What's "pinned" isn't the site's certificate, but rather the CA's certificate. Or more accurately, the CA's public key. This is the problem with public key pinning. The site is still vulnerable to a compromise from its own CA, and many si
237.
by moxie 13y ago
Basically all of the software that I write for projects like this is GPL by default, but I generally include a note (as in this case) that developers should contact me if the license doesn't work for them. I find this to be a good balance:
238.
by moxie 13y ago
Perhaps the way to phrase it is that the soviet surveillance apparatus was an expression of power, just as the modern technological surveillance apparatus is an expression of modern power. I think that this stuff matters, to the extent
239.
by moxie 13y ago
iOS versions are in the works!
240.
by moxie 13y ago
WhatsApp doesn't use TLS, and their protocol has a fairly long history of criticism.

More ›