News for hackers. Stuff that matters.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by kunai on Tuesday June 11, 2013 @11:44PM (#5866419)
Just the fact that we have to start websites like these, and march Capitol Hill to make the government realize its mistake is depressing, infuriating, and is gently, gradually tapping at a hot, steaming teapot of rage within every rational individual's psyche.

What is the root cause? How did this get so incredibly bad? Is it the fault of the public? Is it the public's fault we are in an Orwellian state of Soviet-era Germany? Or does Hanlon's Razor apply here?

In any case, there needs to be more action than just bandage measures like petitions and phoning your Congressman. This level of government negligence deserves an uproar, and sadly we're not getting it because many trust government, and are not skeptical in the slightest about it.

We have those animals called "politicians" to blame for that.

So, if people really want to change, lead a march on Capitol Hill. Be attention-seekers, make a change for the better, not for the worse. Let your life have value, and use that value against the worthless individuals sitting at their desks in Washington.

Just do something worthwhile, not sitting behind that sRGB display of yours. Painless encryption, countermeasures, protests, whatever -- we need to do something.

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by mseebach on Wednesday June 12, 2013 @04:15AM (#5867072)
The reason freedom of speech, freedom of assembly, freedom to petition and host of other freedoms are important is that, from time to time, you need to use them.

Democracy isn't a guarantee that everything will be perfect, quite the opposite, but that we have a reasonable chance of rightening a wrong without erecting guillotines on the national mall.

The challenge IMO isn't petitioning Congress, it's petitioning the public to make sure this issue remains on the radar for the upcoming election (Part of that, though, could well be a noisy march on Washington).

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by jared314 on Wednesday June 12, 2013 @04:24AM (#5867091)
That is one reason I wish this leak had happened two years ago, or two years from now, when it could affect the Patriot Act extension vote. The only thing members of congress can do now is try to defund it, because voting to repeal it might be political suicide.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by mseebach on Wednesday June 12, 2013 @04:56AM (#5867175)
> because voting to repeal it might be political suicide.

Then provide political cover.

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by zer0gravity on Wednesday June 12, 2013 @05:29AM (#5867260)
> remains on the radar for the upcoming election

Insanity: doing the same thing over and over again and expecting different results.

Democracy is not about elections, it's about representing yourself.

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by mseebach on Wednesday June 12, 2013 @06:00AM (#5867333)
Democracies have emerged from scandal and abuses of power before, so it not actually insane to believe that it can happen again.

Believing that the outcome will be a perfect fairy-tale land of milk and honey, on the other hand, not so much. It's important to keep in mind that victory in this case probably looks a lot like better constitutional oversight of the FISA courts.

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by zer0gravity on Wednesday June 12, 2013 @03:02AM (#5866900)
Concrete steps that I have made to gain control over my data:

- hosting my DNS server ( bind ) along with my domain

- Made my own RSS reader and blog with openid authentication (server/client)

- Installed ftp server ( vsftpd )

- Installed my own mailserver (nice tutorial here: https://help.ubuntu.com/community/MailServer)

Planning to: - install my own xmpp server

I want to create an integrated, user centered platform, that will provide ( mail, blogging, storage, ftp, feed reader, an openid identity & social networking ) and make it really easy for somebody to install it on a raspberry pi + some external storage and have its own personal micro data center.

Someone could also consider Citadel (http://www.citadel.org/)

If you ask me, I'd say that the personal data center is the future ( the free future )

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by sahirh on Wednesday June 12, 2013 @03:27AM (#5866972)
For XMPP, I recommend checking out Prosody (http://prosody.im). You can get a working system up with Off-the-record instant messaging and internal file transfers in an afternoon, if you're familiar with UNIX system administration.

If you use a client like Jitsi, you can do ZRTP encrypted calls through the server as well. Use your own SSL certificates for SSL.

Ejabberd is also good, however the debug information was pretty inadequate. Also helps to be familiar with erlang.

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by DanBC on Wednesday June 12, 2013 @04:49AM (#5867152)
Hosting your own email server is sub-optimal for several reasons.

Email is still being sent as plain text. Encryption is possible even if you're using someone else's server.

Your deliverability is reliant upon other people's good will. Those people have no idea who Joe Sixpack in Idaho is, and have no reason to extend goodwill. Your deliverability is also subject to wingnuts using a variety of good and not so good blocklists. You may find your time is better spent doing work rather than working around various weird blocklist delisting policies.

Hosting your own email does nothing to prevent traffic analysis.

The only thing it does is to stop your email being held in a big bunch at an email providers servers, but you can do that by wiping it from their servers and holding a local store. (tl;dr use a commercial email provider but keep your email on your machines not theirs; encrypt everything before sending it; consider using tor if you want anonymity.)

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by zer0gravity on Wednesday June 12, 2013 @05:10AM (#5867207)
I just want to start by holding my own data. (While you my be right that big providers allow to wipe your mails, they can make copies). I just don't want for a third party to relay my data in the first place.

While your points are right there are solutions, and in the long run it's worth it

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by DanBC on Wednesday June 12, 2013 @05:22AM (#5867242)
You make a good point, and I had forgotten about the legal requirements for some providers to make and keep copies.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by IgorPartola on Wednesday June 12, 2013 @01:44PM (#5869366)
More than that. Big companies have big backups. Once a piece of information leaves localhost it is logged somewhere permanently. Even if you go and purge all your email now, Google is not going to spool up tape backups and erase all copies.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by tn13 on Wednesday June 12, 2013 @03:33AM (#5866978)
Well, I wonder why cant we create too many false positives for them to make the whole data meaningless ?

Instead of hiding all our private communication we can generate fake communication across the whole internet which might raise flags in NSA's system. (I would have given more concrete examples but I am scared that tomorrow some NSA freak might knock on my door.)

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by freshhawk on Wednesday June 12, 2013 @08:07PM (#5871549)
I do like the fuzzing idea, but you need some incentives in place. Bandwidth is pretty cheap these days but how would you convince people to install some software that just visited random websites and send randomly generated messages around? But how would actual people filter out the junk messages in a way that the NSA couldn't?

I seems unrealistic. Just run a Tor exit node and encourage a lot of other people to do the same, similar benefits and no downsides.

A more realistic and useful one would be for email clients sending mime email (almost all of them) to always send an encrypted version as well no matter the options in the client. No keys set up? Then just send random data that looks right.

Email providers might hate this because of the bandwidth but if you start sending a lot of encrypted data around right now you are going to match a profile you probably don't want to match. I think step one is to make sending encrypted text around a normal thing.

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by zer0gravity on Wednesday June 12, 2013 @03:49AM (#5867009)
What you're proposing is like this:

I want to say a sentence to someone, but in order for an unintended listener not to understand what I'm saying I will say 10 sentences. Five of which will be "I will kill you and everyone you know" and "I will bomb America".

Isn't that just a meaningless waste of energy?

-- The government spies on you because you make it easy for it to do it. Instead, keep your personal data personal, use encryption and there's not much more that it can do, without becoming physical... ( it has no problem doing that either, but at least its intentions will be more obvious that way, and hopefully will wake up all the ignorants that think that some old guys peeking into everyone's lives is justified).

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by TeMPOraL on Wednesday June 12, 2013 @04:41AM (#5867130)
> Isn't that just a meaningless waste of energy?

It is. People suck at being random, so there's a good chance that those "false positives" will actually be trivially filtered out. And even if not immediately, this is an algorithmic problem - they will just throw few dozen kUSD at some math and CS graduates to make it go away.

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by DanBC on Wednesday June 12, 2013 @05:02AM (#5867186)
There are some extensions that generate a lot of extra traffic. They were developed around the time that Phorm[1] was being introduced in the UK.

I agree with you and TemPorAL (apologies for incorrect capitalisation!) that these are probably a waste of time for the user - they don't work.

NSA and GCHQ are very good at math - I'm constantly surprised that people don't appear to get this. Maybe it's because secret government agencies don't publish much?

Just for fun here's one extension: (http://trackmenot.org/) (https://cs.nyu.edu/trackmenot/)

People can probably come up with ways to improve it. But still, these are probably pointless measures.

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by sciurus on Wednesday June 12, 2013 @10:03AM (#5868103)
In addition to Citadel, look at Kolab (http://www.kolab.org).
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by zer0gravity on Wednesday June 12, 2013 @12:27PM (#5868937)
Well I've just learned that the guys from https://www.cozycloud.cc/ have come a long way implementing a user centered platform ( personal cloud ). It really looks promising.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by rickr on Wednesday June 12, 2013 @08:50PM (#5871690)
I have been messing around with this idea for a while with a few friends. I'd love to talk more if you're interested. You can find my contact details in my profile.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by amirmc on Wednesday June 12, 2013 @04:36AM (#5867118)
I'm looking at doing something similar. Are you writing about any of this as you go? Would be interesting to learn about the hurdles.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by zer0gravity on Wednesday June 12, 2013 @05:21AM (#5867235)
Unfortunately no, I'm just pushing to make something usable and stable.

Then I plan to release it in the wild along with the documentation, as free open source of course

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by amirmc on Wednesday June 12, 2013 @10:08AM (#5868132)
Would you be happy to keep up with our updates? I'm putting together a website and mailing list about the work we're doing. My email is in my profile.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by tlack on Wednesday June 12, 2013 @11:39AM (#5868645)
I wonder if there might be some way to do secure, PK-encrypted, federated message-based services using Tent.io or similar?
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by detcader on Wednesday June 12, 2013 @01:35AM (#5866678)
The root cause? It's always money. Lawrence Lessig makes this clear, in a TED talk no less ( http://www.ted.com/talks/lawrence_lessig_we_the_people_and_t... )
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by adrianbg on Wednesday June 12, 2013 @04:05AM (#5867049)
The root cause is power, of which money is a conveniently quantifiable manifestation. Power-seeking has occurred continually over time since human populations became dense enough to extrude persistent hierarchies.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by arethuza on Wednesday June 12, 2013 @04:46AM (#5867146)
Dominance hierarchies are pretty common amongst animals - so we have probably inherited this bheaviour from our non-human ancestors:

http://en.wikipedia.org/wiki/Dominance_hierarchy

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by RyanMcGreal on Wednesday June 12, 2013 @12:42PM (#5869030)
Constitutional politics to evolutionary psychology in four comments: this is why I keep coming back to HN.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by barret907k on Tuesday June 11, 2013 @11:58PM (#5866468)
Make sure you're marching is very peaceful. Don't want the government to label you a 'terrorist'. You may never seen sunlight again.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by kunai on Wednesday June 12, 2013 @12:01AM (#5866476)
I'm young, foolish, and I honestly don't care if I'm labeled a terrorist.

Although, my ethnicity doesn't particularly help my cause...

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by lepht on Wednesday June 12, 2013 @12:17AM (#5866512)
Interesting sentiment, and I can't help but think this is why the government seems to fear the youth the most/ships them off to wars in other countries.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by pyre on Wednesday June 12, 2013 @02:28AM (#5866811)
Was there a time when wars were only fought by old men?
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by a3n on Wednesday June 12, 2013 @03:34AM (#5866979)
The ones that lasted a long time.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by lepht on Wednesday June 12, 2013 @11:31AM (#5868597)
The question is not the age of the people fighting wars, but what a government chooses to "use" its youth population for.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by nano111 on Wednesday June 12, 2013 @12:17AM (#5866513)
Creating a mesh network using the unused analog TV frequencies probably would be nice and useful
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by bdamm on Wednesday June 12, 2013 @02:31AM (#5866822)
Or a mesh network consisting of wifi nodes might be good too. The trick is in the routing.
Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by notdrunkatall on Wednesday June 12, 2013 @04:36AM (#5867122)
There's something like that already in the works:

http://www.reddit.com/r/darknetplan

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by admax88q on Wednesday June 12, 2013 @09:32AM (#5867939)
A mesh network can't scale.

"We show that for WMNs the throughput of each node decreases as O(1/n), where n is the total number of nodes in the network."

http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=1241089...

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by Nursie on Wednesday June 12, 2013 @05:28AM (#5867259)
Wait, you think a little march and a couple of websites will change anything? Someone still has a some unwarranted faith in humanity!

What will happen is some politicians will make some noises from their face holes, they might promise a few reviews, or to look into a few things. These will be accompanied by rationalisations that seek to marginalise concerns and make it look like these measures are to protect the children and tall buildings.

In a few weeks most of the public will stop caring, partly because of the noise from politicians flapping their gums, partly because of a low attention span. If a review actually takes place, it will report that there was nothing wrong with what's been going on, it's all within the law. A few people will mutter about changing the laws, but most people won't care by this point and the political classes will have a new hot button talking point by then.

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by PavlovsCat on Wednesday June 12, 2013 @06:02AM (#5867336)
Wait, you think a little march and a couple of websites will change anything? Someone still has a some unwarranted faith in humanity!

Organizing and demonstrations can make a big difference.. for those involved in them :P That is to say, it sometimes just plain feels good to see you're not alone with being fed up -- or even better, that you're not alone with the things you're for, either.

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by rickhanlonii on Wednesday June 12, 2013 @01:44PM (#5869369)
Hanlon's razor is my favorite of all razors, and is the principle that keeps me calm in moments like this:

>Never attribute to malice that which is adequately explained by stupidity.

I don't think that the (mostly lawyers) who represent us and run this country are malicious. They're just incompetent. They're simply not qualified to understand and make decions in the fields that they affect. So they call in 'experts' to help , who end up working for or being otherwise paid by a particular group or corporation. Of course these people are paid to bias their groups preference, so the 'expert' advise they give them is tainted, and the representative has no basis to detect the bullshit.

Re:Mozilla, EFF, Reddit And 83 Other Organizations Launch St... by cinquemb on Wednesday June 12, 2013 @02:56AM (#5866883)
As I follow what has been going on in greece and turkey, I wonder when/under which circumstances we will reach our tipping point?

Maybe when MQ9's start patrolling the skys regularly state side, someone will intercept and take control the line of sight feed and send a message to the individuals sitting in their desks in Washington that the chickens have come home to roost…