The Tor Project is Hiring a Developer for OONI!

I am so glad you've been able to find the funds to do this!

So many urgent things need to be addressed, but this is certainly one of the most important. I hope this will ultimately help endangered people/journalists everywhere.

Huge item of meta-news, of particular interest to people in Brazil who need to read what the Snowden trove reveals about the cynical and outrageous USG manipulation of political/economic events in their country:

https://theintercept.com/2016/05/16/the-intercept-is-broadening-access-…
The Intercept Is Broadening Access to the Snowden Archive. Here’s Why
Glenn Greenwald
16 May 2016

> From the time we began reporting on the archive provided to us in Hong Kong by NSA whistleblower Edward Snowden, we sought to fulfill his two principal requests for how the materials should be handled: that they be released in conjunction with careful reporting that puts the documents in context and makes them digestible to the public, and that the welfare and reputations of innocent people be safeguarded. As time has gone on, The Intercept has sought out new ways to get documents from the archive into the hands of the public, consistent with the public interest as originally conceived.
>
> Today, The Intercept is announcing two innovations in how we report on and publish these materials. Both measures are designed to ensure that reporting on the archive continues in as expeditious and informative a manner as possible, in accordance with the agreements we entered into with our source about how these materials would be disclosed, a framework that he, and we, have publicly described on numerous occasions.
>
> The first measure involves the publication of large batches of documents.
> ...
> The other innovation is our ability to invite outside journalists, including from foreign media outlets, to work with us to explore the full Snowden archive.

Great example of the kind of news which must not censored by any government, and should be read by people everywhere, because it's that important to their understanding of their personal situation.

Thanks , thats Great !

Irony strikes again: Tor apparently blocked from indexoncensorship.org

One more striking example of why everyone needs to use Tor as much as possible:

https://www.eff.org/deeplinks/2016/05/when-surveillance-chills-speech-n…
Surveillance Chills Speech—As New Studies Show—And Free Association Suffers
Karen Gullo
19 May 2016

> ... Government surveillance has that chilling effect—on our activities, choices and communications—and carries serious consequences. We argue in our lawsuit First Unitarian Church of Los Angeles, et al v. NSA that the government’s collection of phone records violates the First Amendment rights of our clients—churches and civil and human rights organizations—by discouraging members and constituents from associating and communicating with them for fear of being spied on.
> ...
> The Wikipedia study, to be published in an upcoming issue of the Berkeley Technology Law Journal, found a dramatic fall in monthly traffic to Wikipedia articles about terror groups and their techniques after the June 2013 disclosures of the NSA PRISM surveillance program by whistleblower Edward Snowden. The study looked at 48 Wikipedia articles that contained terrorism-related keywords tracked by the Department of Homeland Security, such as “suicide attack” and “dirty bomb.”
>
> Article views dropped 30 percent after June 2013, which supports “the existence of an immediate and substantial chilling effect,” wrote author Jonathon Penney. He also found that monthly views continued to fall, suggesting that the chilling effects of NSA surveillance are long term. The study, he says, has “implications for the health of democratic deliberation among citizens” and the broader health of society.

The correct solution is of course not to stop reading uncensored in order to learn things you need to know for your own safety, but to use Tor.

> These studies provide evidence of what we have long argued—our freedom to read what we choose online and communicate and associate with others privately is profoundly affected by the prospect of the government looking over our shoulder. It’s changed our behavior, whether that means not commenting on a Facebook post about terrorism, avoiding a Wikipedia page, or steering clear of certain organizations.

Exactly!

What Cy Vance and James Comey really want is to ensure that governments (or rather their AI governance bots) to make all the big decisions about the lives of individual citizens. God forbid citizens should think for themselves, much less decide how they want their own lives to unfold!

Truly, the USG has gone off the rails:

http://sputniknews.com
Developer of Online Anonymity Tool Tor Flees US to Escape FBI ‘Harassment’
Mandel Ngan
18 May 2016

> The Federal Bureau of Investigations may be looking to break into Tor, the Internet browser that hides user’s locations, by trying to subpoena one of Tor’s primary software developers, and instead of complying, she has fled the country.
>
> The FBI wants the cryptographer, who goes by Isis Agora Lovecruft, to testify in a criminal hacking investigation, but privacy advocates — as well as Lovecruft herself — believe the Bureau will attempt to coerce her into helping them crack the system.
>
> The Electronic Frontier Foundation (EFF), the leading nonprofit organization defending electronic civil liberties, has also taken on the case.
>
> “The FBI needs to open up and tell Isis what it is they want before she can decide if she will meet with them,” EFF Senior Staff Attorney Nate Cardozo told Sputnik. “They've said she isn't under investigation, but there are still too many unanswered questions. Isis has a right to know what's going on instead of playing this strange guessing game as she's pursued by federal agents.”

Perilous times indeed.

Remember when Medium hosted the Sarawak Report, a detailed, sourced, well-researched expose of political corruption in Malaysia?

Predictably, the government blocked access to Medium.com. And they didn't stop there. You can no doubt guess their next move:

https://www.techdirt.com/
Free Speech
Mike Masnick
19 May 2016

> the government [of Malaysia] is now pushing a new law that gives the MCMC much more power to silence criticism online. And a big part of this is removing the intermediary liability protections that service providers have. This is a topic that we've discussed an awful lot -- especially with regards to things like Section 230 of the CDA in the US, which makes websites immune from liability for actions of their users. Many people try to attack these protections, claiming that they're just protecting big companies, but they're actually very much about protecting the public's ability to speak freely -- and the situation in Malaysia is a perfect example.
>
> Without strong intermediary liability protections, websites will now have very strong incentive to immediately block or take down any content that might displease the government, for fear that leaving it up will lead to legal consequences. This is also why we're so concerned about the recent lawsuits in France claiming that Twitter, Facebook and YouTube didn't take down offensive comments fast enough. Expecting service providers to police and monitor content is a path to widespread censorship.
>
> In Malaysia, a coalition of civil society/public interest groups are fighting back against this new law, and trying to spread the word about its possible impact.

Damn straight. It's all of them against all of us, and we all need to fight back.

OT but maybe very good news: a big problem (agreed?) for Tails developers is that the PRNG may not be able to gather enough entropy for strong cryptography soon after you boot from a DVD. The following development is clearly big news--- could it possibly help?

http://www.theregister.co.uk/2016/05/18/boffins_achieve_breakthrough_in…
Boffins achieve 'breakthrough' in random number generation
New method could make it harder for hackers in the future
Katyanna Quach
18 May 2016

> University of Texas computer science professor David Zuckerman and PhD student Eshan Chattopadhyay have found that a "high-quality" random number could be generated by combining two "low-quality" random sources... The new method makes it harder for hackers, as it requires less computational power to spew out random numbers of higher quality. Their paper has caught the attention of other academics worldwide who have described the research as "pulse-quickening" and "a breakthrough in theoretical computer science."

https://threatpost.com/academics-make-theoretical-breakthrough-in-rando…
Academics Make Theoretical Breakthrough in Random Number Generation
Michael Mimoso
May 17, 2016

> Two University of Texas academics have made what some experts believe is a breakthrough in random number generation that could have longstanding implications for cryptography and computer security...“We show that if you have two low-quality random sources—lower quality sources are much easier to come by—two sources that are independent and have no correlations between them, you can combine them in a way to produce a high-quality random number,” Zuckerman said. “People have been trying to do this for quite some time. Previous methods required the low-quality sources to be not that low, but more moderately high quality.
> ...
> In fact, academics worldwide have taken notice. Oded Goldreich, a professor of computer science at the Weizmann Institute of Science in Israel, called it a fantastic result. “It would have been great to see any explicit two-source extractor for min-entropy rate below one half, let alone one that beats Bourgain’s rate of 0.499,” Goldreich said on the Weizmann website. “Handling any constant min-entropy rate would have been a feast (see A Challenge from the mid-1980s), and going beyond that would have justified a night-long party.”

(Bourgain is a Fields Medalist, so beating his bound is pretty impressive. Goldreich is a well known expert in academic cryptography.)

The articles link to the paper and a followup paper from another researcher.

At times, apparent trolling, astroturfing, or other malicious manipulations of social media (possibly sponsored by hostile governments) have become a problem in this blog. An interesting new study from Gary King's group at Harvard claims to uncover 488 million posts by (Chinese government sponsored) "fifty centers":

http://www.theregister.co.uk/2016/05/20/china_caught_astroturfing_polit…
China caught astroturfing social networks
Harvard study blames state groups for 488m comments
Shaun Nichols
20 May 2016

> ... "We estimate that the government fabricates and posts about 488 million social media comments a year. In contrast to prior claims, we show that the Chinese regime's strategy is to avoid arguing with skeptics of the party and the government, and to not even discuss controversial issues," say report authors Gary King, Jennifer Pan, and Margaret Roberts. "We infer that the goal of this massive secretive operation is instead to regularly distract the public and change the subject, as most of the these posts involve cheerleading for China, the revolutionary history of the Communist Party, or other symbols of the regime."

One surprising conclusion:

> ... The researchers believe that the 50 cent Party members are not actually employed full-time to target online discussions, but rather engage in the activities outside of their day-jobs as employees in other government organizations. The findings, the study concludes, contradict previously-held notions that online censorship in China is conducted directly through targeting and removing content that is critical of the state. Rather, the researchers find, the government is using more subtle tactics to undermine those who would criticize its policies. "Distraction is a clever and useful strategy in information control, in that an argument in almost any human discussion is rarely an effective way to put an end to an opposing argument," the researchers note. "Letting an argument die, or changing the subject, usually works much better than picking an argument and getting someone's back up (as new parents recognize fast).

Gary King is the author of the well known R package "Zelig", and has been a tireless champion of Bayesian statistics in the social sciences. One of his earlier papers studied the infamous "hanging chads".

(This comment is not a malicious attempt to "change the subject", and I feel it is not OT in this blog generally, I think, but it is OT in this thread. Wish TP offered a weekly open comment post like Bruce Schneier's "squid" posts.)

Devs who doesn't leave to the FBI huh?

Please take some action to scan tor relays and exits to see if the're run by blacklisted spammers!! I think it may reveal they are taking over! and ruining Tor! Including Krypton and Fire.onion are many blacklisted relays. Thank you. Heads Up!!!

Following up on FBI's harrassment of Tor developers, it seems that the Seattle city government also hates privacy--- and the people at Seattle Privacy Coalition who try to defend it:

http://www.npr.org
When A Dark Web Volunteer Gets Raided By The Police
Heard on All Things Considered
Martin Kaste 2010
4 Apr 2016

https://www.thestranger.com
Judge Who Authorized Police Search of Seattle Privacy Activists Wasn't Told They Operate Tor Network
Ansel Herz
8 Apr 2016

http://www.theregister.co.uk/2016/05/25/seattle_suehawks/
Seattle Suehawks: Smart meter hush-up launched because, er ... terrorism
Security through obscurity, amirite?
Shaun Nichols
25 May 2016

http://www.theregister.co.uk/2016/05/27/phil_mocek_seattle_smart_meters/
As US court bans smart meter blueprints from public, sysadmin tells of fight for security info
He wanted records – and got sued instead amid terror fears
Shaun Nichols
27 May 2016