51–58 of 58 posts
Clever. We did something similar for a friend getting married. Instead of giving his present directly we created a text file encrypted with his public pgp key. We printed out the ascii-armored cryptotext and handed it over. He had lots of fun typing it back into his computer.
You should have at least hinted at viable OCR solutions.
Upvoted because of the story, but I like NPR less and less these days. So far they've been mainly pro-government than pro-Snowden.
Other wonderful delivery methods: - Baked into cuneiform - Wax tablets. "Oh, sorry, it got hot in my car and they're a little runny..." - In the form of a crossword puzzle. - Knitted into a scarf. "Perl one, skip two..." Best to have hardware from which it is impossible to export a key.
one 4 point character per page, delivered as a stack, but unstapled. Bonus points if the pages are numbered, but are sampled from a psuedo random number generator with large cycles.
This shouldn't present much of a problem to the NSA.
How can you not love this guy? Please donate to his defense fund: http://tinyurl.com/m65n4ko http://lavabit.com/ Lavabit Legal Defense Fund 10387 Main Street, Suite 205 Fairfax, VA 22030 (703) 291-1999
Why conceal the donate link behind a link shortener? And on yet another creepy surveillance related story. I can't be the only one that sees the irony here. TinyURL allows previewing of links by adding 'preview' as a subdomain, like so: http://preview.tinyurl.com/m65n4ko Now we can see where your link really takes us, to a PayPal donate page: https://www.paypal.com/cgi-bin/webscr?cmd=_s- xclick&hosted_button_id=7BCR4…
Other wonderful delivery methods: - Baked into cuneiform - Wax tablets. "Oh, sorry, it got hot in my car and they're a little runny..." - In the form of a crossword puzzle. - Knitted into a scarf. "Perl one, skip two..." Best to have hardware from which it is impossible to export a key.
In all seriousness, is it possible to design a system where it is simply impossible to hand over data to a third party?
Earlier quoted context omitted.
Because, if this article is correct[0], his refusal to obey a court order is the only reason the FBI made him hand over private keys. The story is the FBI asked for Snowden's emails and correspondence. Lavabit said they would not hand over the information(but admitted they had the technical capability ... it was server side encryption after all). Only after that refusal did the FBI start taking more drastic action. T…
> The story is the FBI asked for Snowden's emails and correspondence. That's not the story that you linked. From the article you linked: "The filings show that Lavabit was served on June 28 with a so-called “pen register” order requiring it to record, and provide the government with, the e-mail “from” and “to” lines on every e-mail, as well as the IP address used to access the mailbox. Because they provide only metad…
Then the fed's got an order from a Judge for it. Lavabit still refused.
Finally, the Feds, got a court order to the keys to the kingdom so to speak. At this point Lavabit is willing to implement a pen register. The fed's don't trust them to do it, so they stick with the final order. Lavabit shuts down.
Earlier quoted context omitted.
Because, if this article is correct[0], his refusal to obey a court order is the only reason the FBI made him hand over private keys. The story is the FBI asked for Snowden's emails and correspondence. Lavabit said they would not hand over the information(but admitted they had the technical capability ... it was server side encryption after all). Only after that refusal did the FBI start taking more drastic action. T…
Just because the FBI did not get the specific information they wanted as quickly as they would have liked should not entitle them to gather information on people not included in the original warrant... people who the FBI had no probably cause and no justification for grabbing their data. I just don't understand how that makes sense. "You wouldn't give us Snowden's info so now we get everyone's info!" Why can't the FB…
Now, why is that the outcome and not just forcing Lavabit to hand over select information via say the US Marshal's. Because Lavabit said that would take a while to implement and by this point the Feds think Lavabit is dicking around with them, the Feds decided this option won't work.
The feds obviously don't know the code base and can't implement the requested functionality themselves even if they somehow gained access to the service without taking it down. But they can ask for the SSL keys. That's a tangible piece of information the court can force Lavabit to hand over immediately. It makes sense that the government would request it. And it makes some sense that a federal judge would allow it after Lavabit itself rejected the option that preserved the privacy of the rest of it's users.
How can you not love this guy? Please donate to his defense fund: http://tinyurl.com/m65n4ko http://lavabit.com/ Lavabit Legal Defense Fund 10387 Main Street, Suite 205 Fairfax, VA 22030 (703) 291-1999
Why conceal the donate link behind a link shortener? And on yet another creepy surveillance related story. I can't be the only one that sees the irony here. TinyURL allows previewing of links by adding 'preview' as a subdomain, like so: http://preview.tinyurl.com/m65n4ko Now we can see where your link really takes us, to a PayPal donate page: https://www.paypal.com/cgi-bin/webscr?cmd=_s- xclick&hosted_button_id=7BCR4…