Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #199831 > unrolled thread
| Started by | Grzegorz Sójka <pld@sojka.co> |
|---|---|
| First post | 2018-09-06 14:00 +0200 |
| Last post | 2018-09-10 22:30 +0200 |
| Articles | 20 on this page of 24 — 13 participants |
Back to article view | Back to linux.debian.user
Sid: pulseaudio & xfce4 Grzegorz Sójka <pld@sojka.co> - 2018-09-06 14:00 +0200
Encrypted e-mails? "Torben Schou Jensen" <tsj@swampthing.dk> - 2018-09-06 16:10 +0200
Re: Encrypted e-mails? Dan Purgert <dan@djph.net> - 2018-09-06 17:00 +0200
Re: Encrypted e-mails? John Hasler <jhasler@newsguy.com> - 2018-09-06 17:50 +0200
Re: Encrypted e-mails? Dave Sherohman <dave@sherohman.org> - 2018-09-07 15:20 +0200
Re: Encrypted e-mails? Dan Purgert <dan@djph.net> - 2018-09-07 15:50 +0200
Re: Encrypted e-mails? <tomas@tuxteam.de> - 2018-09-07 15:50 +0200
Re: Encrypted e-mails? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-09-07 16:00 +0200
Re: Encrypted e-mails? <tomas@tuxteam.de> - 2018-09-07 17:00 +0200
Re: Encrypted e-mails? Dan Purgert <dan@djph.net> - 2018-09-07 22:10 +0200
[OT] Was: Encrypted e-mails? John Hasler <jhasler@newsguy.com> - 2018-09-07 22:40 +0200
Re: [OT] Was: Encrypted e-mails? Dan Purgert <dan@djph.net> - 2018-09-07 23:50 +0200
Re: Encrypted e-mails? Martin Smith <tech@smithproductions.co.uk> - 2018-09-08 16:00 +0200
Re: Encrypted e-mails? mick crane <mick.crane@gmail.com> - 2018-09-08 21:10 +0200
Re: Encrypted e-mails? "Torben Schou Jensen" <tsj@swampthing.dk> - 2018-09-07 16:00 +0200
Re: Encrypted e-mails? John Hasler <jhasler@newsguy.com> - 2018-09-07 17:10 +0200
Re: Encrypted e-mails? <tomas@tuxteam.de> - 2018-09-07 17:10 +0200
Re: Encrypted e-mails? Gene Heskett <gheskett@shentel.net> - 2018-09-07 17:20 +0200
Re: Encrypted e-mails? Gene Heskett <gheskett@shentel.net> - 2018-09-07 17:10 +0200
Re: Encrypted e-mails? John Hasler <jhasler@newsguy.com> - 2018-09-07 18:00 +0200
Re: Encrypted e-mails? Default User <hunguponcontent@gmail.com> - 2018-09-07 18:30 +0200
Re: Encrypted e-mails? Gene Heskett <gheskett@shentel.net> - 2018-09-08 01:30 +0200
Re: Encrypted e-mails? pjw <lists.debian@pjw.xsmail.com> - 2018-09-10 21:40 +0200
PGP & Protonmail (Was: Encrypted e-mails?) Bob Bernstein <poobah@ruptured-duck.com> - 2018-09-10 22:30 +0200
Page 1 of 2 [1] 2 Next page →
| From | Grzegorz Sójka <pld@sojka.co> |
|---|---|
| Date | 2018-09-06 14:00 +0200 |
| Subject | Sid: pulseaudio & xfce4 |
| Message-ID | <wv173-3jY-1@gated-at.bofh.it> |
Hi there, I figured out that I do not have sound in some applications because pulseadio is not running. To fix the problem it's enough to open terminal and issue pulseaudio command. I'm using xfce4. What is the proper way of automatically start pulseaudio? Should I add a new item to the Application Autostart?? Is there any package responsible for starting pulseaudio? -- Pozdrawiam Grzesiek Wysłane z kompa wolnego od wirusów Billa Gatesa.
[toc] | [next] | [standalone]
| From | "Torben Schou Jensen" <tsj@swampthing.dk> |
|---|---|
| Date | 2018-09-06 16:10 +0200 |
| Subject | Encrypted e-mails? |
| Message-ID | <wv38R-4IK-5@gated-at.bofh.it> |
| In reply to | #199831 |
We have more focus on Internet security now, than 5-10 years ago. We have smartphones with software from Apple and Google, but we are unsure if they look in our data. We use Facebook and we know they sell info we share to other companies. Each day we use Internet and visit websites, but behind we find trackers that register our visit. It is now more common than before to use HTTPS for a website to protect traffic against data sniffers. But it is still very common to send unencrypted e-mails, open post cards. So why not use OpenPGP to encrypt e-mails, it is free, I am trying to find out how to? With OpenPGP you create a personal keypair, a secret and public key. You send public key to friends, and they can encrypt e-mails to you, but only you can open with secret key. My primary e-mail is based on webmail with SquirrelMail on own private web server. A plugin named G/PGP Encryption is available, but not updated since 2007. Written in PHP, interfacing with GnuPG, I found that it not work on Debian Stable Linux and PHP 7.0. But after hunting bugs, I have been able to fix it to send encrypted e-mails between users within my server, not perfect, but working. Now thinking about coding a new plugin. In case I get it working, then I need friends outside my server to use OpenPGP also. To my knowledge it is not available very many places. You normally get free e-mail without encryption, without encryption easier for microsoft or google to look in your e-mails. A week ago I got mail from google, that they now automatic add appointments from my google e-mail to my google calendar. I had then received copy of a hotel reservation from a friend, and suddenly google added this as my hotel reservation. So google in fact monitor my e-mails, scary, but not easy to have Android smartphone without google account. With https://protonmail.com/ we have webmail with focus on encrypted e-mails, but it require your friends also have account there to make full use of it. We try to be secure on Internet, but still not easy to use secure e-mails??? https://www.openpgp.org/ https://squirrelmail.org/plugin_view.php?id=153
[toc] | [prev] | [next] | [standalone]
| From | Dan Purgert <dan@djph.net> |
|---|---|
| Date | 2018-09-06 17:00 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wv3Vf-4Ym-3@gated-at.bofh.it> |
| In reply to | #199832 |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Torben Schou Jensen wrote: > [...] > But it is still very common to send unencrypted e-mails, open post cards. > So why not use OpenPGP to encrypt e-mails, it is free, I am trying to find > out how to? Thunderbird, plus enigmail (plus gpg, obviously ;) ). > With OpenPGP you create a personal keypair, a secret and public key. > You send public key to friends, and they can encrypt e-mails to you, but > only you can open with secret key. Precisely. > My primary e-mail is based on webmail with SquirrelMail on own private web > server. > A plugin named G/PGP Encryption is available, but not updated since 2007. > Written in PHP, interfacing with GnuPG, I found that it not work on Debian > Stable Linux and PHP 7.0. > > But after hunting bugs, I have been able to fix it to send encrypted > e-mails between users within my server, not perfect, but working. > Now thinking about coding a new plugin. Issue was probably mainly centered around assumptions of GPG 1.x, huh? Good deal that you got it working :) > > In case I get it working, then I need friends outside my server to use > OpenPGP also. Or at least PGP/GPG compliant software of their chosing. > To my knowledge it is not available very many places. > You normally get free e-mail without encryption, without encryption easier > for microsoft or google to look in your e-mails. > > A week ago I got mail from google, that they now automatic add > appointments from my google e-mail to my google calendar. > I had then received copy of a hotel reservation from a friend, and > suddenly google added this as my hotel reservation. > So google in fact monitor my e-mails, scary, but not easy to have Android > smartphone without google account. Well, you do kind of allow it by virtue of using their service. I mean, sure it's a message "destined(tm)" for you, but it's on *their* servers. Same kind of "invasion of privacy(tm)" happens in most office environments -- all the emails that you send/receive are subject to being read by your IT department if required. > > With https://protonmail.com/ we have webmail with focus on encrypted > e-mails, but it require your friends also have account there to make full > use of it. Meh, never bothered with their service, pgp is easy enough; even through google, etc. > > We try to be secure on Internet, but still not easy to use secure > e-mails??? Mostly because people don't care. They see "mail" in the name, and think it's exactly like reglar mail and no one but the intended recipient is allowed to look at it. -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEBcqaUD8uEzVNxUrujhHd8xJ5ooEFAluRPX0ACgkQjhHd8xJ5 ooHxnAgAgktK7rxQJILraJuSynZqz+/GdtDaaTYpcU5WHNbISz2mbWGnyKBrDsKt P+vbVu/mGAnyGKjWiUT2jLpczNoM6MJ5d1P9v+0x1TkThk/1PcBl4xYB/E722i3s OHZdyZ1RQR6+N/LkDTJZk7Z8JpI7yEwjXQjr34R1FAFiE8Qv5969AxRUUbBhll5B rdJvTBIXdvsIpYNbs6PHEMtQsisjV+6m35pLU1wtgFGDwaiSr3DLUmjYuhy/7NeS 3nlqdWR3nbhcfPh6s1+TjW/tT4lVPkinfyAxYpgXNVTHavyhdfSidulznbtUdpum vVAi4jLM0bPqOGbdIQsOELElTKPnFQ== =vpu1 -----END PGP SIGNATURE----- -- |_|O|_| Registered Linux user #585947 |_|_|O| Github: https://github.com/dpurgert |O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5 4AEE 8E11 DDF3 1279 A281
[toc] | [prev] | [next] | [standalone]
| From | John Hasler <jhasler@newsguy.com> |
|---|---|
| Date | 2018-09-06 17:50 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wv4HE-5sZ-1@gated-at.bofh.it> |
| In reply to | #199832 |
Torben Schou Jensen writes: > A week ago I got mail from google, that they now automatic add > appointments from my google e-mail to my google calendar. I had then > received copy of a hotel reservation from a friend, and suddenly > google added this as my hotel reservation. So google in fact monitor > my e-mails... Did you think Gmail was a charity? It costs them *money*. They offer it free in order to add value to their advertising services, which are their main business. Of course they mine Gmail for data. "Security" can mean protection against fraud: keeping malware off your computer, preventing your passwords from being broken. It can also mean secrecy: preventing anyone other than the intended recipient from reading your messages. Most people aren't saying anything that they can't bear to have Google's software scan. -- John Hasler jhasler@newsguy.com Elmwood, WI USA
[toc] | [prev] | [next] | [standalone]
| From | Dave Sherohman <dave@sherohman.org> |
|---|---|
| Date | 2018-09-07 15:20 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvoQ2-Dr-3@gated-at.bofh.it> |
| In reply to | #199832 |
On Thu, Sep 06, 2018 at 03:44:22PM +0200, Torben Schou Jensen wrote: > We have smartphones with software from Apple and Google, but we are unsure > if they look in our data. Don't be silly. Of course they do. > But it is still very common to send unencrypted e-mails, open post cards. > So why not use OpenPGP to encrypt e-mails, it is free, I am trying to find > out how to? Can't speak for anyone else, but... I don't give a damn. I'm sending this message to a public email list that anyone can subscribe to, and I know that it's archived in many, many places, several of which can be browsed by the general public. It is not private, by design, so why would I bother with encrypting it in transit? If I were transmitting information that I actually wanted to keep secret, I wouldn't put it in the body of an email at all. The current push for enhanced privacy is all well and good, but the crusaders often forget that there's a lot of information out there which is intended to be public or which people simply don't care if it becomes public. There is absolutely no need to encrypt such information, therefore "encrypt everything" is not the moral imperative they make it out to be. (There's an argument to be made for using cryptographic signatures to validate the authenticity and integrity of messages, but that doesn't require encrypting the actual content itself.) -- Dave Sherohman
[toc] | [prev] | [next] | [standalone]
| From | Dan Purgert <dan@djph.net> |
|---|---|
| Date | 2018-09-07 15:50 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvpj4-MU-7@gated-at.bofh.it> |
| In reply to | #199857 |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Dave Sherohman wrote: > On Thu, Sep 06, 2018 at 03:44:22PM +0200, Torben Schou Jensen wrote: >> So why not use OpenPGP to encrypt e-mails, it is free, I am trying to >> find out how to? > > Can't speak for anyone else, but... > > I don't give a damn. > > I'm sending this message to a public email list that anyone can > subscribe to, and I know that it's archived in many, many places, > several of which can be browsed by the general public. It is not > private, by design, so why would I bother with encrypting it in transit? I believe that Torben's speaking about personal email, e.g. between you And your mom, rather than those messages that you fully intend to be of a public nature. > (There's an argument to be made for using cryptographic signatures to > validate the authenticity and integrity of messages, but that doesn't > require encrypting the actual content itself.) Indeed not, such as on this message :) -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEBcqaUD8uEzVNxUrujhHd8xJ5ooEFAluSft8ACgkQjhHd8xJ5 ooElBwf+P4XrdutCklVnHr8MT6njra/eMS2/X/9Gs7UYWEjWXHPqcfQAVb/sedmj OWwK8IQFlSrI5Rqap9v4BKXEzmKyh1YJzJMlDo0HO8CdApoccz7ZG7yf6+ayqqZR iRXI+3Z/NYzvdzDPbUswkFuEJCnwNZKn5ME0lpYESxpRiIfd/Rmot50gkz6AtLq6 EIjE6vAZUe/r95kqO81ukqSTAm92wnuqz9FZq5tSHWt/fgn2Oe8prPIyFwikhzeu xwyoHZwa/a8cz3dsZ9RJH3PEOAXY0kJyd0fm4F3tyoYAOaQ1qXU5DIcee2nzlrL+ YCQ/EtZDRP760cffupTQv4tftC3xag== =k4kC -----END PGP SIGNATURE----- -- |_|O|_| Registered Linux user #585947 |_|_|O| Github: https://github.com/dpurgert |O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5 4AEE 8E11 DDF3 1279 A281
[toc] | [prev] | [next] | [standalone]
| From | <tomas@tuxteam.de> |
|---|---|
| Date | 2018-09-07 15:50 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvpj4-MU-15@gated-at.bofh.it> |
| In reply to | #199860 |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, Sep 07, 2018 at 01:36:31PM -0000, Dan Purgert wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Dave Sherohman wrote: > > On Thu, Sep 06, 2018 at 03:44:22PM +0200, Torben Schou Jensen wrote: > >> So why not use OpenPGP to encrypt e-mails, it is free, I am trying to > >> find out how to? > > > > Can't speak for anyone else, but... > > > > I don't give a damn. > > > > I'm sending this message to a public email list that anyone can > > subscribe to, and I know that it's archived in many, many places, > > several of which can be browsed by the general public. It is not > > private, by design, so why would I bother with encrypting it in transit? > > I believe that Torben's speaking about personal email, e.g. between you > And your mom, rather than those messages that you fully intend to be of > a public nature. Darn. I was already planning to only send encrypted messages to this list :~0 (SCNR) - -- t -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAluSgXUACgkQBcgs9XrR2kbmLQCeJ3K6Hz17orAEKBEfGASWf3h2 tx8AnRUGLCUwnAIZYBopcl0Zl77CRN7W =NoUl -----END PGP SIGNATURE-----
[toc] | [prev] | [next] | [standalone]
| From | Greg Wooledge <wooledg@eeg.ccf.org> |
|---|---|
| Date | 2018-09-07 16:00 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvpsJ-Q4-7@gated-at.bofh.it> |
| In reply to | #199861 |
On Fri, Sep 07, 2018 at 03:47:33PM +0200, tomas@tuxteam.de wrote: > Darn. I was already planning to only send encrypted messages to this > list :~0 > > (SCNR) on'tday endsay encryptedway ailmay otay ublicpay istslay.
[toc] | [prev] | [next] | [standalone]
| From | <tomas@tuxteam.de> |
|---|---|
| Date | 2018-09-07 17:00 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvqoN-1og-5@gated-at.bofh.it> |
| In reply to | #199863 |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, Sep 07, 2018 at 09:53:08AM -0400, Greg Wooledge wrote: > On Fri, Sep 07, 2018 at 03:47:33PM +0200, tomas@tuxteam.de wrote: > > Darn. I was already planning to only send encrypted messages to this > > list :~0 > > > > (SCNR) > > on'tday endsay encryptedway ailmay otay ublicpay istslay. :-) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAluSkVkACgkQBcgs9XrR2kbT1ACfTWGvGdll/K5IsBm6IQuI5cwy EGYAnROTrWWAa56oZTJsAWEKWaE17tnG =d9Vk -----END PGP SIGNATURE-----
[toc] | [prev] | [next] | [standalone]
| From | Dan Purgert <dan@djph.net> |
|---|---|
| Date | 2018-09-07 22:10 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvveN-4ro-11@gated-at.bofh.it> |
| In reply to | #199867 |
<tomas@tuxteam.de> wrote: > > On Fri, Sep 07, 2018 at 09:53:08AM -0400, Greg Wooledge wrote: >> On Fri, Sep 07, 2018 at 03:47:33PM +0200, tomas@tuxteam.de wrote: >> > Darn. I was already planning to only send encrypted messages to this >> > list :~0 >> > >> > (SCNR) >> >> on'tday endsay encryptedway ailmay otay ublicpay istslay. > > :-) For even more fun, ROT13! ba'gqnl raqfnl rapelcgrqjnl nvyznl bgnl hoyvpcnl vfgfynl ... although, that kinda looks like I'm trying to summon Cthulhu... -- |_|O|_| Registered Linux user #585947 |_|_|O| Github: https://github.com/dpurgert |O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5 4AEE 8E11 DDF3 1279 A281
[toc] | [prev] | [next] | [standalone]
| From | John Hasler <jhasler@newsguy.com> |
|---|---|
| Date | 2018-09-07 22:40 +0200 |
| Subject | [OT] Was: Encrypted e-mails? |
| Message-ID | <wvvHP-4Ag-17@gated-at.bofh.it> |
| In reply to | #199883 |
Dan writes: > For even more fun, ROT13! ROT26 is obviously twice as good. -- John Hasler jhasler@newsguy.com Elmwood, WI USA
[toc] | [prev] | [next] | [standalone]
| From | Dan Purgert <dan@djph.net> |
|---|---|
| Date | 2018-09-07 23:50 +0200 |
| Subject | Re: [OT] Was: Encrypted e-mails? |
| Message-ID | <wvwNz-5b4-3@gated-at.bofh.it> |
| In reply to | #199885 |
John Hasler wrote: > Dan writes: >> For even more fun, ROT13! > > ROT26 is obviously twice as good. For the extremely, secutity-conscious, ROT39. Now, ROT52 on the other hand is just silly :). -- |_|O|_| Registered Linux user #585947 |_|_|O| Github: https://github.com/dpurgert |O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5 4AEE 8E11 DDF3 1279 A281
[toc] | [prev] | [next] | [standalone]
| From | Martin Smith <tech@smithproductions.co.uk> |
|---|---|
| Date | 2018-09-08 16:00 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvLWh-5Wv-5@gated-at.bofh.it> |
| In reply to | #199883 |
On 07/09/2018 20:54, Dan Purgert wrote: > <tomas@tuxteam.de> wrote: >> On Fri, Sep 07, 2018 at 09:53:08AM -0400, Greg Wooledge wrote: >>> On Fri, Sep 07, 2018 at 03:47:33PM +0200, tomas@tuxteam.de wrote: >>>> Darn. I was already planning to only send encrypted messages to this >>>> list :~0 >>>> >>>> (SCNR) >>> on'tday endsay encryptedway ailmay otay ublicpay istslay. >> :-) > For even more fun, ROT13! > ba'gqnl raqfnl rapelcgrqjnl nvyznl bgnl hoyvpcnl vfgfynl > > ... although, that kinda looks like I'm trying to summon Cthulhu... > why I thought that was Vogon poetry :) -- Martin
[toc] | [prev] | [next] | [standalone]
| From | mick crane <mick.crane@gmail.com> |
|---|---|
| Date | 2018-09-08 21:10 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvQMh-wn-5@gated-at.bofh.it> |
| In reply to | #199901 |
On 2018-09-08 14:15, Martin Smith wrote: > On 07/09/2018 20:54, Dan Purgert wrote: >> <tomas@tuxteam.de> wrote: >>> On Fri, Sep 07, 2018 at 09:53:08AM -0400, Greg Wooledge wrote: >>>> On Fri, Sep 07, 2018 at 03:47:33PM +0200, tomas@tuxteam.de wrote: >>>>> Darn. I was already planning to only send encrypted messages to >>>>> this >>>>> list :~0 >>>>> >>>>> (SCNR) >>>> on'tday endsay encryptedway ailmay otay ublicpay istslay. >>> :-) >> For even more fun, ROT13! >> ba'gqnl raqfnl rapelcgrqjnl nvyznl bgnl hoyvpcnl vfgfynl >> >> ... although, that kinda looks like I'm trying to summon Cthulhu... >> > why I thought that was Vogon poetry :) Is there a prize for the longest thread that I don't know about ? mick -- Key ID 4BFEBB31
[toc] | [prev] | [next] | [standalone]
| From | "Torben Schou Jensen" <tsj@swampthing.dk> |
|---|---|
| Date | 2018-09-07 16:00 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvpsJ-Q4-5@gated-at.bofh.it> |
| In reply to | #199860 |
> Dave Sherohman wrote: >> On Thu, Sep 06, 2018 at 03:44:22PM +0200, Torben Schou Jensen wrote: >>> So why not use OpenPGP to encrypt e-mails, it is free, I am trying to >>> find out how to? >> Can't speak for anyone else, but... >> I don't give a damn. >> I'm sending this message to a public email list that anyone can >> subscribe to, and I know that it's archived in many, many places, >> several of which can be browsed by the general public. It is not >> private, by design, so why would I bother with encrypting it in transit? Same here, I have no problems with certain public e-mails, like what we write here on mailing lists, anyone can read this, and no secret info within this. In case I would like to share secret info with a friend I could also use my phone to call and give this info. But in case I need to write some private details to a friend, and be sure no one would read this on way, it require my friend have e-mail address and also use OpenPGP. Problem is many friends use public free e-mail solutions, without OpenPGP, and they also not give a damn about security. I also have many friends that use Facebook as some sort of diary. In general IT people should be better to learn non-IT people about better security. Interesting to read feedback on this subject here. Have a good weekend...
[toc] | [prev] | [next] | [standalone]
| From | John Hasler <jhasler@newsguy.com> |
|---|---|
| Date | 2018-09-07 17:10 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvqyt-1GP-3@gated-at.bofh.it> |
| In reply to | #199862 |
Torben writes: > Problem is many friends use public free e-mail solutions, without > OpenPGP, and they also not give a damn about security. Worse, they do so in the apparent belief that they do have secrecy and become enraged and indignant when they find out that they don't. But then they just keep right on doing it. -- John Hasler jhasler@newsguy.com Elmwood, WI USA
[toc] | [prev] | [next] | [standalone]
| From | <tomas@tuxteam.de> |
|---|---|
| Date | 2018-09-07 17:10 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvqyt-1GP-5@gated-at.bofh.it> |
| In reply to | #199862 |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, Sep 07, 2018 at 03:59:01PM +0200, Torben Schou Jensen wrote: [...] > Problem is many friends use public free e-mail solutions, without OpenPGP, > and they also not give a damn about security. We had a related thread here about "good" mail providers. I've had success convincing friends that a "good" mail provider costs (a modest) something, like half a $beverage [1] a month, to be able to treat you as a customer and not as cattle or vegetable. > I also have many friends that use Facebook as some sort of diary. Yeah, that's unfortunate. After explaining to people how that horrible Cambridge Analytica affair went, some take their distance with FB. I count each case as a personal success. But this is something which only works face-to-face, personally, and among friends. > In general IT people should be better to learn non-IT people about better > security. > > Interesting to read feedback on this subject here. Over here we have what we call "crypto parties", where interested people can learn how to set up encryption and/or exchange public keys. My take on it: nothing beats personal contact. Nothing. Cheers - -- t -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAluSlBUACgkQBcgs9XrR2kbZ2ACfcTbVq700nT3slcDffipGh9GL /s0An3KqsnN2m8RMV+m0vX3brR5WGjGJ =kXww -----END PGP SIGNATURE-----
[toc] | [prev] | [next] | [standalone]
| From | Gene Heskett <gheskett@shentel.net> |
|---|---|
| Date | 2018-09-07 17:20 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvqIa-1JI-1@gated-at.bofh.it> |
| In reply to | #199869 |
On Friday 07 September 2018 11:07:01 tomas@tuxteam.de wrote: > On Fri, Sep 07, 2018 at 03:59:01PM +0200, Torben Schou Jensen wrote: > > [...] > > > Problem is many friends use public free e-mail solutions, without > > OpenPGP, and they also not give a damn about security. > > We had a related thread here about "good" mail providers. I've had > success convincing friends that a "good" mail provider costs (a > modest) something, like half a $beverage [1] a month, to be able > to treat you as a customer and not as cattle or vegetable. > > > I also have many friends that use Facebook as some sort of diary. > > Yeah, that's unfortunate. After explaining to people how that > horrible Cambridge Analytica affair went, some take their distance > with FB. I count each case as a personal success. > > But this is something which only works face-to-face, personally, > and among friends. > > > In general IT people should be better to learn non-IT people about > > better security. > > > > Interesting to read feedback on this subject here. > > Over here we have what we call "crypto parties", where interested > people can learn how to set up encryption and/or exchange public > keys. > > My take on it: nothing beats personal contact. Nothing. > > Cheers > -- t +10 Tomas. -- Cheers, Gene Heskett -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) Genes Web page <http://geneslinuxbox.net:6309/gene>
[toc] | [prev] | [next] | [standalone]
| From | Gene Heskett <gheskett@shentel.net> |
|---|---|
| Date | 2018-09-07 17:10 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvqyu-1GP-21@gated-at.bofh.it> |
| In reply to | #199857 |
On Friday 07 September 2018 09:18:59 Dave Sherohman wrote: > On Thu, Sep 06, 2018 at 03:44:22PM +0200, Torben Schou Jensen wrote: > > We have smartphones with software from Apple and Google, but we are > > unsure if they look in our data. > > Don't be silly. Of course they do. > > > But it is still very common to send unencrypted e-mails, open post > > cards. So why not use OpenPGP to encrypt e-mails, it is free, I am > > trying to find out how to? > > Can't speak for anyone else, but... > > I don't give a damn. > > I'm sending this message to a public email list that anyone can > subscribe to, and I know that it's archived in many, many places, > several of which can be browsed by the general public. It is not > private, by design, so why would I bother with encrypting it in > transit? > > If I were transmitting information that I actually wanted to keep > secret, I wouldn't put it in the body of an email at all. > > The current push for enhanced privacy is all well and good, but the > crusaders often forget that there's a lot of information out there > which is intended to be public or which people simply don't care if it > becomes public. There is absolutely no need to encrypt such > information, therefore "encrypt everything" is not the moral > imperative they make it out to be. Part of that is that if it all becomes encrypted, then the TLA's will spend so much time decrypting our emails containing this drivel at worst that the may give up. IOW, it makes a statement they can see in the power bill and hours effort to read all of it in hopes they'll find a clue. The TLA's occasionally surprise me, but generally you could tape the clue to their butt and they couldn't find it with both hands. As the situation now stands, an encrypted email is a bright red flag in front of the bull in a china shop, so they will expend a lot of cpu cycles to read it because if it didn't contain sensitive data, it wouldn't be encrypted in the first place. The encryption insures that it will be read, then a small maybe that it will be delivered to the addressee. If its a trigger msg, you can bet it will be printed for later perusal by a grand jury and the digital copy will be delivered to /dev/null. > (There's an argument to be made for using cryptographic signatures to > validate the authenticity and integrity of messages, but that doesn't > require encrypting the actual content itself.) -- Cheers, Gene Heskett -- "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) Genes Web page <http://geneslinuxbox.net:6309/gene>
[toc] | [prev] | [next] | [standalone]
| From | John Hasler <jhasler@newsguy.com> |
|---|---|
| Date | 2018-09-07 18:00 +0200 |
| Subject | Re: Encrypted e-mails? |
| Message-ID | <wvrkR-1VQ-3@gated-at.bofh.it> |
| In reply to | #199870 |
Gene writes: > As the situation now stands, an encrypted email is a bright red flag > in front of the bull in a china shop, so they will expend a lot of cpu > cycles to read it because if it didn't contain sensitive data, it > wouldn't be encrypted in the first place. While I find the behavior of the intelligence agencies morally repugnant as a practical matter they are not part of my threat model. > The encryption insures that it will be read... It *may* be scanned by software. A lot more goes into the decision to attempt to decrypt an encrypted message than the mere fact that it is encrypted. Most likely it results in an addition to a database of IPs known to emit encrypted messages. It almost certainly won't be read. > ...then a small maybe that it will be delivered to the > addressee. It will already have been delivered. > If its a trigger msg, you can bet it will be printed for later perusal > by a grand jury and the digital copy will be delivered to /dev/null. It will mark the sender and receiver for investigation. Why would they tell their enemies that they are reading their mail? -- John Hasler jhasler@newsguy.com Elmwood, WI USA
[toc] | [prev] | [next] | [standalone]
Page 1 of 2 [1] 2 Next page →
Back to top | Article view | linux.debian.user
csiph-web