AVG + TOR = BARF

[Teddy Smith]

On Fri, 2008-08-22 at 16:22 -0700, scar wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> Grant Heller @ 2008/08/21 23:41:
> > 
> >> On 8/21/08, *John Mosgrove* <mr_john_mosgrove at yahoo.com
> >> <mailto:mr_john_mosgrove at yahoo.com>> wrote:
> >>[snip]
> >> I'm sure that yahoo is hardly a 'safe' place to email
> >>     from/to, do you recommend any other potentially less compromise
> >>     worthy mail clients? That is one that I am less likely to be
> >>     compromised by?
> >>      
> >>     Thanks.
> >> 
> >>  
> > If you're looking for local privacy, gmail's web interface + https
> > works, although I don't know if google snoops what you're sending and
> > receiving.
> > 
> 
> huh? of course they do.  i suggest you read google's privacy policy.
> 
> personally, i think two good free places for e-mail are lavabit.com and
> riseup.net.
> 
> maybe our friend roy lanek knows of other suitable places? ;)
> -----BEGIN PGP SIGNATURE-----
> 
> iD8DBQFIr0o9XhfCJNu98qARCLlkAJwJccRME52VA9Eh3Z2TB0KtPxJaKgCffyD0
> PDz4n/LyzY23DiMNfrllF0s=
> =4CEL
> -----END PGP SIGNATURE-----

Not to sound tinfoil, but I would trust Google _far_ more than I would
trust riseup. With it's political agenda it's most definitely
compromised, and if it isn't now, it will be the instant the FBI can say
some ELF member uses it. Google may log everything, but that means that
google's logging a _lot_, and you won't be drawn under suspicion just by
using it. Good anonymity comes from blending into a crowd, and riseup
won't let you do that.

As always, this won't matter if you only use the account with encrypted
content. However, a lot of activists I've talked to think that the fact
that riseup uses SSL means "the account is encrypted", so I don't think
that'll be popular anytime soon.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20080822/4cccd16c/attachment.pgp>