News for hackers. Stuff that matters.

meskio

Re:Google's end-to-end key distribution proposal on Thursday August 28, 2014 @11:48AM (#8237784)
This is not worst than the key infrastructure right now, that not only reveals all the email address but their relationships.
The key distribution is the actual problem that bitmask try to address (https://leap.se/en/docs/tech/hard-problems), it tries to make transparent the key discovery but keeping it as secure as possible. But this is still a work in progress.
Bitmask actually uses OpenVPN, just makes easy to use it securely. One summer of code has implemented support for obfsproxy (https://www.torproject.org/projects/obfsproxy.html.en), that hopefully will solve the problem in places like China.

Bitmask doesn't want to provide a proper VPN service, for the moment there is a demo service to try it. But the idea is to provide all the software easy to set up for providers, and the providers will charge you for it to sustain themselves. The nice thing of this model is that the provider only provides the service but your client comes from an independent organization, your provider can not put back doors on it.

The trust is a hard problem, we are moving the trust from the ISP to your provider (https://leap.se/en/doc/platform). Your ISP is something that you can not choose much, but on the provider you can choose or set up your own (https://leap.se/en/doc/platform).

Other platform support on working, but this is just a beta.

OpenVPN is hard to use by non-hackers and complicated to configure well, too easy to have DNS or IPv6 leaks. Bitmask makes all that easy.

Re:Surespot app - free and open source encryption for everyone on Monday September 02, 2013 @03:46AM (#6313953)
"Only the person you send the message to can read it. Period."

To use this kind of sentences on new software not reviewed by the comunity is dangerous. There is people that risk their lifes using this kind of app.

The thing that puzzles me is that sentence: "You can delete your message from the receivers phone." I don't see in the 'how it works' any information about it. Do they do that in a cryptographic way somehow that I can not imagine? Or is basically that the application removes the content if the server request it, something we could avoid just with a backup or modifying the code of the app.

The web page of the project: http://rhizomatica.org/
Re:GRUB 2.00 released on Friday June 29, 2012 @04:31AM (#4175772)
After so many years. That's great news.

I remember when I started to use GNU/Linux and they were talking how great will be grub 2.0. It took maybe too much time, but it's a great tool.

TheGlobalSquare: Call for coders

http://wlcentral.org/node/2456

TheGlobalSquare aims to be the first massive decentralized social network in the history of the Internet. We are aware of the difficulties we must overcome, but we believe the Internet Community has reached a point where such an initiative is possible. It is possible because we are more united; censorship and repression have created stronger bonds between those who care about freedom and the...

( Read More... | no comments | 2 points | on HN )
Re:Ask HN: How do you *use* HN? on Saturday September 11, 2010 @08:20AM (#1681431)
I'm right now hacking on the same idea. How did you do it?

In my case I'm configuring canto(http://codezen.org/canto/) to use crm114. It's not working properly yet, but you have my repo here: http://gitorious.org/foobarnews