Listan October 2013

listan@lists.dfri.se

21 participants
28 discussions

Intressant tråd på debian-security som berör SSL och Tor

by Niklas Johansson

Jag läser debian-security lite sporadiskt och denna tråden tror jag kanske någon skulle uppskatta. http://lists.debian.org/debian-security/2013/10/msg00027.html Blanda annat om att göra apt-get update över Tor. Bästa hälsningar Niklas

9 years, 7 months

DebianPrivacy (was Ang.: [DFRI-listan] Intressant tråd på debian-security som berör SSL och Tor)

by Erik Josefsson

Diskussionen verkar avspeglad här: https://wiki.debian.org/DebianPrivacy //Erik Erik Josefsson BE GSM: +32484082063 SE GSM: +46707696567 ----- Reply message ----- Från: "Andreas Jonsson" <andreas(a)romab.com> Till: <listan(a)lists.dfri.se> Rubrik: [DFRI-listan] Intressant tråd på debian-security som berör SSL och Tor Datum: tis, okt 29, 2013 19:25 On 2013-10-29 18:40, Linus Nordberg wrote: > > Andreas Jonsson <andreas(a)romab.com> wrote > Tue, 29 Oct 2013 17:50:27 +0100: > > | Jag kan ha fel dock! rätta mig gärna! vi kanske ska tillhandahålla över > | HS ändå? > > HS-adresser (.onion) är "självautenticerande" eftersom dom består av (en > del av) HS:ens publika nyckel. > > Den som har en HS-adress som den vet tillhandahålls av DFRI kan vara > säker på att den får det som DFRI tror är bra och behöver inte bry sig > om komprometterade SSL-cert eller annat SSL/TLS-relaterat. > > Frågan om hur DFRI verifierar sitt repo kvarstår. > sure. värt att notera är att debian-trådstartaren _inte_ pratade om repo:t. sedan har vi det där med att hur nu någon ska få reda på dfri:s hs-address... kanske via vår web som authenticeras genom.... tls? ;> /andreas -- DFRI-listan är öppen för alla. Listan arkiveras och publiceras öppet på internet. http://dir.gmane.org/gmane.org.user-groups.dfri

9 years, 7 months

Re: [DFRI-listan] DFRI har skrivit under ett öppet brev till antivirustillverkarna

by Mats Henricson

Jag hoppas de fixade stavfelen... Mats Linus Nordberg <linus(a)nordberg.se> wrote: >Hej listan! > >Det här har vi missat att berätta om på listan. En del grejer hamnar >bara på Twitter [1], andra bara på IRC (#dfri_se på OFTC.net). > >DFRI har skrivit under ett brev [2] som ställer några frågor till de >stora tillverkarna av antivirusprogramvara [3]: > >--8<---------------cut here---------------start------------->8--- >Experts call upon the vendors of antivirus software for transparency > >An international coalition of more than 25 civil rights organizations >and security experts is concerned about the level of security provided >by antivirus software companies. “The users of this software should be >ably to rely on the security of their systems. We fear this might be a >false feeling of security.” says Ton Siedsma of the Dutch digital rights >organization Bits of Freedom. > >According to the coalition, these companies have a vital position in >providing security and maintaining the trust of internet users engaging >in sensitive activities such as electronic banking. There should be no >doubt that your antivirus software provides the security needed to >maintain this trust. > >In the letter, the coalition asks the antivirus companies for >transparency on whether there have been any requests by governments to >not detect the presence of governmental malware and if so, if they have >granted such a request. They furthermore ask how the companies would >respond to such a request in the future. > >“It has become very clear that governments will do anything to gain >acces to as much information as possible” says Siedsma. “Requests like >these, coming from law enforcement agencies or secret services, lower >the general level of protection of all users of antivirus software. The >software isn’t just used by suspects, but by all of us. This is >something to be very concerned about, so we have asked the antivirus >software vendors for transparancy on this matter.” > >The letter has been sent to the following companies: Agnitum, Ahnlab, >Avira operations, AVG, AVAST, Bullguard, Bitdefender, F-secure, F-Prot, >Kaspersky, McAfee, Microsoft, Nod32, Norton, Panda, Symantec and Trend >Micro. >--8<---------------cut here---------------end--------------->8--- > >[1] https://twitter.com/dfri_se/status/394006370887802880 >[2] https://www.bof.nl/live/wp-content/uploads/Letter-to-antivirus-companies-.p… >[3] https://www.bof.nl/2013/10/25/experts-call-upon-the-vendors-of-antivirus-so… > >-- >DFRI-listan är öppen för alla. >Listan arkiveras och publiceras öppet på internet. >http://dir.gmane.org/gmane.org.user-groups.dfri > TH�+-jz��߭�eh��ڮH�z��i��bq�ڲ�^��z�m��v*��ޢ�?�f�z��ǫ��.��_�

9 years, 7 months

Sverige och FRA i "study" från LIBE

by Linus Nordberg

Hej! Sverige och FRA nämns upprepade gånger i http://www.europarl.europa.eu/RegData/etudes/etudes/join/2013/493032/IPOL-L… -- DFRI-listan är öppen för alla. Listan arkiveras och publiceras öppet på internet. http://dir.gmane.org/gmane.org.user-groups.dfri

9 years, 7 months

DFRI har skrivit under ett öppet brev till antivirustillverkarna

by Linus Nordberg

Hej listan! Det här har vi missat att berätta om på listan. En del grejer hamnar bara på Twitter [1], andra bara på IRC (#dfri_se på OFTC.net). DFRI har skrivit under ett brev [2] som ställer några frågor till de stora tillverkarna av antivirusprogramvara [3]: --8<---------------cut here---------------start------------->8--- Experts call upon the vendors of antivirus software for transparency An international coalition of more than 25 civil rights organizations and security experts is concerned about the level of security provided by antivirus software companies. “The users of this software should be ably to rely on the security of their systems. We fear this might be a false feeling of security.” says Ton Siedsma of the Dutch digital rights organization Bits of Freedom. According to the coalition, these companies have a vital position in providing security and maintaining the trust of internet users engaging in sensitive activities such as electronic banking. There should be no doubt that your antivirus software provides the security needed to maintain this trust. In the letter, the coalition asks the antivirus companies for transparency on whether there have been any requests by governments to not detect the presence of governmental malware and if so, if they have granted such a request. They furthermore ask how the companies would respond to such a request in the future. “It has become very clear that governments will do anything to gain acces to as much information as possible” says Siedsma. “Requests like these, coming from law enforcement agencies or secret services, lower the general level of protection of all users of antivirus software. The software isn’t just used by suspects, but by all of us. This is something to be very concerned about, so we have asked the antivirus software vendors for transparancy on this matter.” The letter has been sent to the following companies: Agnitum, Ahnlab, Avira operations, AVG, AVAST, Bullguard, Bitdefender, F-secure, F-Prot, Kaspersky, McAfee, Microsoft, Nod32, Norton, Panda, Symantec and Trend Micro. --8<---------------cut here---------------end--------------->8--- [1] https://twitter.com/dfri_se/status/394006370887802880 [2] https://www.bof.nl/live/wp-content/uploads/Letter-to-antivirus-companies-.p… [3] https://www.bof.nl/2013/10/25/experts-call-upon-the-vendors-of-antivirus-so… -- DFRI-listan är öppen för alla. Listan arkiveras och publiceras öppet på internet. http://dir.gmane.org/gmane.org.user-groups.dfri

9 years, 7 months

Frihet

by 19x20

Världen är mycket komplicerad men målet är fortfarande enkelt. "Den offentliga makten ska utövas med respekt för alla människors lika värde och för den enskilda människans frihet och värdighet." 1 Kap, 2 §, Svensk författningssamling 1974:152 "alla människor" är rätt tydligt tycker jag och så vitt jag vet finns det ganska precis 50% av kvinnligt kön och 50% av manligt kön. "för alla människors lika värde" det kan vara en start? Det går inte att bygga in hur mycket diskrepanser som helst i ett system. 50% är och kommer alltid att vara 50%. När systemet inte fungerar då blir man tvungen att gå tillbaka tills det att man hittar felet. Jag kan inte se att det är annorlunda nu? /19x20 -- DFRI-listan är öppen för alla. Listan arkiveras och publiceras öppet på internet. http://dir.gmane.org/gmane.org.user-groups.dfri

9 years, 7 months

VB: [iindep-hub] Will the Ombudsman rise to the occassion?

by Erik Josefsson

Apropå att dra slipsten, det här är enligt mig det viktigaste caset det här seklet. Om ombudsmannen fipplar bort detta så fipplas hela meningen med EU bort. Erik Josefsson BE GSM: +32484082063 SE GSM: +46707696567 ----- Forwarded message ----- Från: "Ante Wessels" <ante(a)ffii.org> Till: "iindep info exchange hub" <hub(a)iindep.org> Rubrik: [iindep-hub] Will the Ombudsman rise to the occassion? Datum: ons, okt 23, 2013 18:59 Will the Ombudsman rise to the occassion? http://acta.ffii.org/?p=1956 with links October 23, 2013 By Ante A few weeks ago I filed a complaint with the Ombudsman against the European Parliament over the secrecy of legal advice regarding ACTA. The Ombudsman replied that she didn’t want to investigate the complaint as I already got access to the documents (unofficially released versions). In a letter I ask her to reconsider the decision, as the decision seems not in line with an earlier Ombudsman decision, and, more importantly, an investigation could be of major importance. Key paragraphs: "The secrecy surrounding international negotiations is very problematic. For instance, the secrecy surrounding ACTA (Anti-Counterfeiting Trade Agreement) led to various European Parliament resolutions, two Ombudsman complaints and a Court case. All these cases failed, as the "protection of the public interest as regards international relations" exception to openness has an "absolute" character. Once successfully invoked, the Institution does not have to balance it with the public interest in disclosure. The Parliament even raised this international relations exception, that has such a devastating effect on openness, for legal advice it produced itself after the negotiations. This extends the brute force of the international relations exception beyond reasonable scope. The Parliament uses the international relations exception to negate landmark EU Court of Justice Turco case law on legal advice. In my complaint I challenge this over-extension by arguing that the Parliament erred in law. Challenging this over-extension and defending the landmark Turco case law on legal advice is of major importance. Furthermore, I challenge the "absolute" character of the international relations exception by pointing out it is not compatible with human rights. If this reasoning finds acceptance, it may break the absolute character of the exception. It could lead to more open negotiations of international agreements. This would be of major importance too." The letter (pdf) ___________________________________________________________________________ iindep info hub - hub(a)iindep.org - https://listes.globenet.org/listinfo/hub policy: * do NOT forward mails or non-public information from this list * new subscribers must be approved by a list member * messages from non-members addresses are bounced back list admin is Nil (mailto:hub-owner@iindep.org, he rarely reads the list)

9 years, 7 months

Fwd: [US-EU-TTIP] New online tool to highlight investor-state threat

by Erik Josefsson

TTIP är ett jätte-ACTA som omfattar allt ifrån kyckling till krypton. Jag kollade lite på kartorna igår http://www.citizen.org/TAFTA-investment-map Vet inte riktig vad jag ska göra med det här än. -------- Original Message -------- Subject: [US-EU-TTIP] New online tool to highlight investor-state threat Date: Tue, 22 Oct 2013 23:18:06 +0200 From: Ben Beachy <bbeachy(a)citizen.org> Reply-To: Ben Beachy <bbeachy(a)citizen.org> To: <us-eu-ttip(a)lists.riseup.net> Greetings. We've created a new online tool <http://www.citizen.org/TAFTA-investment-map> that you might find useful to highlight TAFTA/TTIP's investor-state threat. It's a map of the 75,000 foreign-owned firms in the U.S. and EU that would be granted extraordinary investor privileges under the deal (as currently proposed), creating unprecedented exposure for both governments to investor-state attacks on health, environmental, financial and other safeguards. That's 24,000 U.S. subsidiaries of EU-based corporations and 51,000 EU subsidiaries of U.S.-based corporations that would be given greater rights than domestic firms and whose parent companies would be empowered to bypass domestic courts in launching claims against government policies and actions before extrajudicial tribunals. The maps, which are an overlay of Google maps, allow users to zoom in to see the foreign investors in their communities that could take advantage of the deal's investor privileges to demand taxpayer compensation for public interest safeguards. Feel free to use and distribute as you see fit: http://www.citizen.org/TAFTA-investment-map. Cheers, Ben Ben Beachy, Research Director Public Citizen's Global Trade Watch 215 Pennsylvania Ave., SE Washington, DC 20003, USA Phone: 202-454-5127 Blog: www.EyesOnTrade.org <http://www.EyesOnTrade.org> Twitter: @pcgtw

9 years, 7 months

Feelgood-video

by Martin Millnert

Hej, En dag gammal eller så, men denna kan man skicka till vänner: http://www.youtube.com/watch?v=aGmiw_rrNxk /M

9 years, 7 months

Fwd: your request for access to documents - GestDem 2013/4775

by Andreas Jonsson

Hah! så ska en slipsten dras. Det var 1/många. /andreas -------- Original Message -------- Subject: your request for access to documents - GestDem 2013/4775 Date: Mon, 21 Oct 2013 12:40:58 +0000 From: <SJ-ACCES-DOCS(a)ec.europa.eu> To: <andreas(a)romab.com> Dear Mr. Jonsson, I refer to your e-mail of 15 September 2013 to President Barroso renewing the request made by your colleague, Mr. Nordberg, for having a copy of a procedural document of the Court of Justice in case A-1/12, namely the question put by the Court to the Commission. Having regard to the very particular circumstances and after consultation with the Court, we are pleased to send you the requested document, the content of which has already been communicated to you by e-mail of 19 June 2003. We do so without recognising any legal obligation under Regulation 1049/2001 which, as explained earlier, is not applicable in this instance. Yours sincerely, ___________________________ Isabel ITURRITZA Legal Officer European Commission Legal Service BERL 1/107 B-1049 Brussels/Belgium +32 2-295 36 58 Isabel.Iturritza(a)ec.europa.eu<mailto:Isabel.Iturritza@ec.europa.eu>

9 years, 7 months

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Listan October 2013