131–140 of 321 posts
Earlier quoted context omitted.
Explain to me how a PGP web-of-trust can be MITM'd? Presumably you exchange keys in person?
The govt coerces somebody you trust (either directly or through the web of trust) to hand over their private keys and then begins impersonating them.
I guess the next step is a secret law that makes this illegal?
Earlier quoted context omitted.
Explain to me how a PGP web-of-trust can be MITM'd? Presumably you exchange keys in person?
The govt coerces somebody you trust (either directly or through the web of trust) to hand over their private keys and then begins impersonating them.
Consider donating to https://rally.org/lavabit . Lavabit needs at least 250k to continue fighting in the supreme court. See his last update on the rally page.
And our contribution becomes part of our "permanent record" with the NSA? So glad I'm a US citizen and need not fear about such things.
Earlier quoted context omitted.
That just sounds like fearmongering. I can't see any way that helping to fund someone's court case can be considering a crime, even if he were completely in the wrong. I strongly suspect that there are favourable legal precedents, even.
It doesn't have to be illegal for it to be a weapon in the wrong hands. "Are you now, or have you ever been, a member of the Lavabit Party?" [1] "Your Honor, respected members of the jury: In 2013 Mr. Karana donated funds to an organization known to be in collusion with terrorists, as designated by the State Department and the Department of Homeland Security. He is by no means an 'innocent man' as he claims in this t…
Earlier quoted context omitted.
The govt coerces somebody you trust (either directly or through the web of trust) to hand over their private keys and then begins impersonating them.
Well, this was circumvented here, right? The guy revoked his cert. That's what revocation is for. I guess the next step is a secret law that makes this illegal?
Consider donating to https://rally.org/lavabit . Lavabit needs at least 250k to continue fighting in the supreme court. See his last update on the rally page.
And our contribution becomes part of our "permanent record" with the NSA? So glad I'm a US citizen and need not fear about such things.
Into your life it will creep
It starts when you're always afraid
You step out of line, the man come and take you away"
Buffalo Springfield, "for What it's Worth" 1966.
Timeless tune, not written about internet surveillance obviously. Recently that I find that song, and that line in particular coming to mind
linkage if you want a listen: http://www.youtube.com/watch?v=gp5JCrSXkJY
Earlier quoted context omitted.
What if the 3rd party the FBI wanted to intercept via this Cert has now been 1) notified that there is a problem and 2) can no longer be intercepted (unless their browser does no CRL or OCSP checks on the domain's cert)?
Interesting point. AFAIK they requested the key to decrypt previous communications. From security point of view, his move makes perfect sense. If FBI wanted to decrypt future communications, they would probably have specified that in their request. Then he would indeed break court order and could be hold responsible. On the other hand, it would be hard to prove any actual obstruction, since the service was shut down…
Earlier quoted context omitted.
Non-citizens can be turned away at the US border for any reason, or no reason at all. Considering that a person's ability to travel to the US is so professionally important in this industry (for conferences, business meetings, etc.), I do not believe this is fearmongering. Remember the case of the man refused entry after a misinterpreted Tweet about 'destroying America'? [1] It seems clear NSA surveillance informs CB…
If you really believed that kind of fear were justified, why would you post a comment like this? It seems a lot more like you are just making up excuses to support your already-formed decision to not donate.
I posted this comment because:
1) I believe my analysis is sound
2) As I have posted previously, I am a US citizen and therefore cannot be denied entry to the US
I have already donated, and though my speech (through both keyboard and wallet) might bring additional attention from the alphabet-soup agencies, I believe it's important to speak up rather than give in to fear.
Earlier quoted context omitted.
Non-citizens can be turned away at the US border for any reason, or no reason at all. Considering that a person's ability to travel to the US is so professionally important in this industry (for conferences, business meetings, etc.), I do not believe this is fearmongering. Remember the case of the man refused entry after a misinterpreted Tweet about 'destroying America'? [1] It seems clear NSA surveillance informs CB…
If such donations really cause problems at borders, then it will be a sign that the place is FUBAR and you (and everyone else) should avoid traveling there.
I do not think the US is FUBAR: FU, certainly, but not BAR. And although I refuse to be frightened into Appelbaum-esque total exile from my own country, I do take appropriate precautions before crossing the US border (CBP take note before sending me to secondary screening next time...).
Lavabit has revealed something incredibly important. The US Government has no problem with seizing your private keys . It claims the right to impersonate you without your permission. It no longer matters which system you use, Sovereign Keys, PGP web-of-trust, traditional PKI, they're all the same. Services based in the US can be MITM'd without leaving any traces. If this is allowed to continue uncontested there will…
The government already got to seize private keys when they got search warrants and ceased servers. I'd imagine this is the case in all of Western Europe.
I doubt that significant amount (if any) of western European countries are able to force you to keep using compromised private key, and keep you silent about this using a gag order.