Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!news-1.dfn.de!news.dfn.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Mike Easter Newsgroups: comp.misc Subject: Re: alt.anonymous.messages Date: Sun, 20 Apr 2014 10:07:12 -0700 Lines: 52 Message-ID: References: <20140416111547.ba81b447.rsw@therandymon.com> Mime-Version: 1.0 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit X-Trace: individual.net bS6lok87DnFEj7maRjFotAEChAJDcXJ8yt9Ri/hRnyz16VirTg Cancel-Lock: sha1:okouOir7CzLQ+h2gD/i06UPN1lA= User-Agent: Mozilla/5.0 (X11; Linux i686; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 In-Reply-To: Xref: csiph.com comp.misc:2433 RS Wood wrote: >> Mike Easter wrote: >>> Actually it has a number of flaws from a security viewpoint. There >>> was a recent in-depth evaluation by Tom Ritter, > Alt.Anonymous.Messages was forged in the heyday of the cypherpunks, and > really, overall, has changed very little in the intervening decade since > it was last shaped in any major way. > > And in that decade, what we have seen is a monumental focus of the > nations spy agencies on not what was thought to be the most critical > piece of information to encrypt ­ the content itself. But instead.... > > Metadata. Well, if we are going to cite elements of the .pdf, I would choose to mention where TR thinks things should be headed which is about pages 106. // But what I keep coming back to is the fact that we have no anonymity network that is high bandwidth, high latency. We have no anonymity network that would have let someone securely share the Collateral Murder video, without Wikileaks being their proxy. You can’t take a video of corruption or police brutality, and post it anonymously. Now I hear you arguing with me in your heads: Use Tor and upload it to Youtube. No, youtube will take it down. Use Tor and upload it to MEGA, or some site that will fight fradulent takedown notices. Okay, but now you’re relying on the good graces of some third party. A third party that is known to host the video, and can be sued. Wikileaks was the last organization that was willing to take on that legal fight, and now they are no longer in the business of hosting content for normal people. And you can say Hidden Service and I’ll point to size-based traffic analysis and confirmation attacks that come with a low-latency network, never mind Ralf-Phillip Weinmen’s amazing work the other month that really killed Hidden Services. We can go on and on like this, but I hope you’ll at least concede the point that what you are coming up with are work-arounds for a problem that we lack a good solution to. // Ritter would like to see -1- fixing of Mixminion and -2- implementation of the design elements of Pynchon's Gate. "So if we like Pynchon Gate, the path forward also involves fixing Mixminion. And mixminion needs love." -- Mike Easter