Re: The praise of GnuPG @31C3

2015-01-12 Thread Marcio Barbado, Jr.
Hi Nicolai, > So, please watch it completely at: >> http://media.ccc.de/browse/congress/2014/31c3_-_6258_-_en_-_saal_1_-_201412282030_-_reconstructing_narratives_-_jacob_-_laura_poitras.html#video:43:10 It would've been better not to induce to scripts. Video file here: http://c3media.vsos.eth

Re: The praise of GnuPG @31C3 and why it is important (was: Guys please all see)

2015-01-02 Thread Nex6|Bill
watched the video, its amazing how much is broken and that GPG and OTR are not. > On Dec 31, 2014, at 5:20 AM, Nicolai Josuttis wrote: > > OK, > for those who didn't have time to see the talk at 31C3 > as a whole and therefore wondering why this is an important talk, > let me point out and quot

Re: The praise of GnuPG @31C3

2015-01-01 Thread Robert J. Hansen
> What I'm looking for is some sort of concrete information about "When ssh is > configured the NSA can break it." I've seen quite a few sites make > the claim that "zomg, ssh is broken!" but haven't yet seen any specifics. First, my usual reminder: don’t focus on the three-letter Voldemort. T

Re: The praise of GnuPG @31C3

2015-01-01 Thread Doug Barton
On 12/31/2014 06:40 PM, Robert J. Hansen wrote: The protocol was secure: you just had to configure it correctly. Yes, thank you for your tidy summary of "Security 101." :) What I'm looking for is some sort of concrete information about "When ssh is configured the NSA can break it." I've seen

Re: The praise of GnuPG @31C3

2014-12-31 Thread Robert J. Hansen
> Microsoft’s point-to-point tunneling protocol version 1.0 was a miserable > failure. Version 2.0 closed up many of those holes and was widely regarded > as secure, except for a configuration option which was on by default: “Enable > backwards compatibility.” So to exploit a PPTP 2.0 connecti

Re: The praise of GnuPG @31C3

2014-12-31 Thread Robert J. Hansen
> If anyone has a reference ... Not a reference, but some history — Microsoft’s point-to-point tunneling protocol version 1.0 was a miserable failure. Version 2.0 closed up many of those holes and was widely regarded as secure, except for a configuration option which was on by default: “Enable

Re: The praise of GnuPG @31C3

2014-12-31 Thread mark hellewell
On 1 January 2015 at 10:19, Doug Barton wrote: > The death of IPsec has been greatly exaggerated: > > https://nohats.ca/wordpress/blog/2014/12/29/dont-stop-using-ipsec-just-yet/ And the “ssh is broken” remark strikes me as a little dramatic, too. ___

Re: The praise of GnuPG @31C3

2014-12-31 Thread Doug Barton
On 12/31/2014 3:25 PM, mark hellewell wrote: And the “ssh is broken” remark strikes me as a little dramatic, too. Well I've seen vague references to some of the "less secure" settings being vulnerable, but I've yet to see, "everything below this line is vulnerable, everything above this line

Re: The praise of GnuPG @31C3

2014-12-31 Thread Doug Barton
The death of IPsec has been greatly exaggerated: https://nohats.ca/wordpress/blog/2014/12/29/dont-stop-using-ipsec-just-yet/ ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: The praise of GnuPG @31C3

2014-12-31 Thread Markus Reichelt
* Nicolai Josuttis wrote: > For those who didn't have time to see it yet, > there was an important talk at 31C3 > about the social and technical status and consequences of > encryption by Jacob Applebaum and Laura Poitras. > As a side effect it covers GnuPG significantly. > > So, please watch it

The praise of GnuPG @31C3

2014-12-31 Thread Nicolai Josuttis
Disclaimer: Sorry guys, I first wrote these emails as part of another thread. (Not enough sleep over the last days of 31C3 ...) But because IMO this is something important for this list, please allow me to redistribute it as separate thread, again. For those who didn't have time to see it yet, th

The praise of GnuPG @31C3 and why it is important (was: Guys please all see)

2014-12-31 Thread Nicolai Josuttis
OK, for those who didn't have time to see the talk at 31C3 as a whole and therefore wondering why this is an important talk, let me point out and quote some content from >> http://media.ccc.de/browse/congress/2014/31c3_-_6258_-_en_-_saal_1_-_201412282030_-_reconstructing_narratives_-_jacob_-_laura_