In today's show, I interview James Donaldson, CEO and co-founder of Copperhead, a team of information security researchers, forensic analysts, and software developers who produce a hardened, source-available version of the Android operating system – appropriately named CopperheadOS.   The vulnerabilities of the Android operating system have been known for years, but up to this point, Google has had little incentive to fix them because:  1) most customers don’t seem to care about digital privacy and security; and 2) many of the fixes would impact Google’s business model of gathering lucrative data and providing targeted ads to its customers.   There have been a handful of companies that have sprung up to address the niche market concerned with mobile device security; the most notable of which has been Silent Circle, maker of the Black Phone. But none of these companies have yet to achieve clear commercial success or produced a device that seems likely to be adopted on a large scale.   James Donaldson and Daniel Micay form the two-man, cypher-punk team Copperhead Security, producers of Copperhead OS .   In this interview, James discusses Copperhead’s history, contributions that they have made to improve the stock Android OS, Copperhead OS’s roadmap, the future of digital security, and the difficulties of being an open-source project and a sustainable business.   Overall, it was a great interview from a solid company that is leading the industry on security and transparency. Enjoy!   Today’s Links: CopperheadOS:  https://copperhead.co/android/ Copperhead on Twitter:  https://twitter.com/copperheados Copperhead on Reddit: https://www.reddit.com/r/CopperheadOS/   Today’s Sponsors: ProtonMail:  https://www.cryptotech.solutions/protonmail Webcam Stickers:  http://astore.amazon.com/joecry-20/detail/B01J8UO94U   Tips / Donations: Bitcoin:  1yNUcjgLqgzdGYQYWspJGcnDVHyT4HdmU   Dash:  XjvWzZjZZfibv25H4E289zy9k7gK9pxc8h  

CryptoTech Solutions

17-4-19 Interview with James Donaldson - Copperhead CEO

Hey Gang,   Sorry I’ve been away for so long, but spent the summer moving half-way across the country…literally.  If you’re in the Washington, DC area and you’re interested privacy or cryptocurrencies (like Bitcoin, Dash, or Monero), then contact me at joel@cryptotech.solutions or on Twitter @CrypTecSolution because I’d love to hangout with like-minded people. If you don’t live in DC but you’re interested in these topics and have a question you’d like answered, please feel free to contact me then as well. Today’s guest is Maggie McNeill – author, activist, and sex-worker. I interviewed Maggie all the way back on April 14th about sex worker privacy. Unfortunately, we ran into a slew of technical difficulties. The video chat program that I typically use to record episodes wouldn’t work on Maggie’s computer; so we switched to a different video chat program, but I wasn’t really setup properly to record on that one, and…bottom line… the video was unusable. I just want to apologize to Maggie. She took the time and effort to appear in the video, she was incredibly gracious during all of the technical difficulties, it has taken me months to edit the show when it should have taken days, and now, I’m not even using the video.  Sorry Maggie. That being said, I was able to salvage most of the audio after running it through some post-production analysis software. I had to did edit out some of the worst bits, but thankfully those were mostly during moments of casual conversation and not during Maggie’s actual answers. There are some sections of poor audio quality that I left in because I feel that it’s good enough for you to still follow the conversation, and they were just too important to cut out. The final edit of the interview is about 35 minutes long, and it think you will find it extremely interesting. During that short time, Maggie points out quite a few things about privacy in the sex industry that are not intuitively obvious as well as raising several challenges that sex workers and their customers face regarding digital and financial privacy. To my surprise, Maggie was extremely skeptical that encryption tools or digital currencies, like Bitcoin, could actually help alleviate any of those problems. In her opinion, all the tools available are work-arounds that are either too technically complicated or inconvenient to be effective, and, to a certain point, I agree with her. These solutions are tools to work around the system because the system unjustly limits people’s freedom and choices. That means maintaining your digital privacy does additional effort and requires using a patch-work set of tools that are foreign to most. But this doesn’t mean these tools can be effective, or even easy to use, once you get to know them. So my plan for future episodes is to take each the issues Maggie raises and do a show about a tool that addresses those specific concerns. If you are a sex worker and you’re proficient with digital privacy tools or your really into cryptos like Bitcoin, Monero, or Dash, then please contact me.  I would really like to interview you and get your perspective on how these tools have hopefully made you safer and improved your business. Additionally, before the interview I take a few minutes discuss a timely crypto-project. Eros.Vision is a website that claims it is going to build the perfect tool for the sex work industry – a completely decentralized marketplace built on top of Zeronet and Ethereum technologies. The website bills itself as the “OpenBazaar of Sex,” but I cover 7 reasons to fear that it might just be the latest in a rash of ICO (initial coin offering) scams to defraud investors. Overall, I’m really proud of how this episode turned out, and I think you’re going to love it. If you haven’t already, go check out the real OpenBazaar…because it’s pretty awesome. And of course, don’t forget to visit Maggie’s website and buy her new book, The Form of Things Unknown. Enjoy!   Today’s Links: Maggie’s Website:  https://maggiemcneill.wordpress.com/ Maggie’s Twitter:  https://twitter.com/maggie_mcneill?lang=en Maggie’s books on Amazon:  https://www.amazon.com/Forms-Things-Stories-Maggie-McNeill/dp/1541065182/ OpenBazaar’s Website:  https://www.openbazaar.org/ OpenBazaar’s Twitter:  https://twitter.com/openbazaar?lang=en   Support the Show: Buy Bitcoins:  https://www.cryptotech.solutions/buy-bitcoins/   Tips / Donations: Bitcoin:  1yNUcjgLqgzdGYQYWspJGcnDVHyT4HdmU   Dash:  XjvWzZjZZfibv25H4E289zy9k7gK9pxc8h  

17-4-14 Sex Worker Privacy: Encryption & Bitcoin w/ Maggie McNeill

In today's show, I interview CEO/founder Todd Weaver about his computer company Purism and how they were fixing Vault 7 exploits before it was cool.   As anyone watching this show probably already knows, Vault 7 is an archive of documents released by WiliLeaks that prove the CIA recently lost control of a suite of hacking tools, including malware, viruses, trojans, and un-patched “zero day” exploits, which allow an attacker to subvert most common operating systems and take control of the target’s device.    Unfortunately, many of the vulnerabilities “exposed” in Vault 7 have been known to the privacy and security community for a number of years, but device and software manufactures have not addressed these exploits because:  1) up to this point, most customers don’t seem to care about digital privacy and security; and 2) fixing many of them would reduce the manufacturing company’s own ability to gather lucrative data on its customers.   Thankfully not all companies think this way – Enter Purism.  For the last three years, Purism has been producing high-quality privacy, security, and freedom focused computers and software.   In this interview, Todd discuss how the privacy, security, and freedom philosophy influences Purism’s hardware design choices (Purism is the first company to introduce physical kill switches for device microphones, cameras, and transmitters – which should be an industry standard in my opinion), software development, and even the corporate structure of the company.   During the interview, Todd also gave us a look behind the curtain on Purism’s development of a privacy and security focused mobile phone, which goes on pre-order in 3Q2017 and is set to be released in 2Q2018!   Overall, it was a great interview from a solid company that is leading the industry on privacy, security, and freedom. Enjoy!   Today’s Links: WiliLeaks Vault 7 Archive:  https://wikileaks.org/ciav7p1/ Todd Weaver’s post on Vault 7:  https://puri.sm/posts/what-the-cia-vault-7-documents-mean/ Purism philosophy on digital privacy, security, and freedom: https://puri.sm/why-purism/ Purism’s Core Team: https://puri.sm/about/team/ Purism’s Privacy, Security, and OpenSource Advisory Board: https://puri.sm/about/advisory-board/   Today’s Sponsors: ProtonMail:  https://www.cryptotech.solutions/protonmail Webcam Stickers:  http://astore.amazon.com/joecry-20/detail/B01J8UO94U   Tips / Donations: Bitcoin:  1yNUcjgLqgzdGYQYWspJGcnDVHyT4HdmU   Dash:  XjvWzZjZZfibv25H4E289zy9k7gK9pxc8h  

3-17-17 Purism Vs. Vault 7, Interview with Todd Weaver - Founder/CEO

In today's episode I wanted to cover a blog post I wrote back on Jan 31st titled "Burner Phones Go Black Market in Poland."   The blog post was inspired by an article on Lodzpost.com, and you can find a link to the original article in today's show notes page.   So back at the beginning of this year Poland put a new law into effect requiring retailers there in Poland to record and report the identity of every customers buying "pre-paid" Sim cards, or "Burner Phones" if you want to call them by their more sensational name.  So according to this new law, every customer has to present a government issued ID, and the store has to record their name and national identification number.   I've got a problem with this for a number of reasons, but before I get into that, let's remind people what a SIM card is.  A SIM card is the little, removable chip that allows your phone to talk to your cellular carrier's network. It holds unique information such as your telephone number, but also your personal security keys and network authorization data. And if your real-life identity is registered to that SIM card, then your name is associated with every call that phone makes. But if these SIM cards are purchased with cash, or Bitcoin, and no information is required to activate them, then it can be very difficult to track who is using the phone to make calls.   So it's obvious why governments would want every SIM card to be registered - it makes it easier for them to conduct mass surveillance on everyone's phone calls rather than conduct targeted investigations of persons or cell phone numbers under suspicion of an actual crime. Of course that's not what they're going to tell you; so what's their argument? They say, "only a criminal would need to use a burner phone; so if you have nothing to hide, why would you oppose registering your information?"   Well, first off, and I shouldn't have to say this, but I do, so here I go…Privacy is an inherent human right that needs no justification.  Just like you don't have to justify why you have the right to free speech or justify why you have the right to practice the religion of your choice, you don't have to justify why you need privacy.   Glenn Greenwald has a really great line he uses whenever somebody trots out "I don't care if the government violates my privacy because I have nothing to hide." Usually this is in relation to e-mail so he says, "Oh yeah, well give the username and passwords to every e-mail account you ever used so that I can go back and read every word you've ever written and report on it in my newspaper." Glenn says that, so far, no one has taken him up on it, and the same thing could be said about this cell phone issue. If someone is in the "I have nothing to hide camp," they why don't they just post their full name and cell phone number online. Forget about the tella-marketers, can you imagine the non-stop calls and text messages from all the trolls on the internet.   But of course that argument isn't going to convince everyone; so let's go over my reasons.   My first reason is going to seem thin to a lot of people who aren't freedom and privacy loving wierdos like myself, but what if you don't have a government issued ID? If people really are free, why should they be forced to be tagged and tracked in a government database?  In my opinion, people should be able to completely live their lives and conduct normal daily commerce without being asked "Papers Please" like we live in some fascist state.   My second reason is also going to seem thin to a lot of people, but it shouldn't! My second problem with a policy like this is that it forces the retailer to become an agent of the government, whether they agree with the policy or not, and without compensation.  It may seem trivial, but it is a real cost to retailers to gather this information, store this information, and report this information to government. It will definitely hurt their sales and will likely hurt the relationship with their customers. These retailers aren't slaves to be ordered around, and if the government wants people to register their SIM cards, which is still a bad idea, they should at least gather the information themselves.  Of course, they know that people, if given the choice, like won't register and the policy won't work. So they force the retailer to do it. But since storing and reporting this information puts a real cost on the retailer, it's likely that they won't put a lot of effort into it and won't do it very securely.   Which leads me to my third gripe about this kind of policy, it creates a data security nightmare.  Pretend for just a minute that this was in the US, and we'll talk more about that in a bit but for right now just pretend, can you imagine being at Wal-mart or your grocery store and being asked to give your Social-Security-Number, probably the most sensitive piece of information about you, to the random stranger behind the counter? Identity theft, which is already a huge problem, will go through the roof.  Even if the store employees don't take your information, and some of them definitely will, there is a good chance that the company will sell your information to the highest bidder (lots companies do this all the time), and now you've created a huge honeypot for hackers, and we've seen big retailers get hacked before. Remember the Target hack?   Let's just look at the claim that only criminals purchase pre-paid SIM cards.  According to the technology publication, Arstechnica, 25% of the population in America uses pre-paid mobile phones, and that number jumps to 70% in Western Europe and China, 95% in India, and 99% in Africa. Are you telling me that a vast, vast majority of the world's population are drug dealers and terrorist? Criminals are a drop in the bucket, we're talking 1% or less of the population. The people using pre-paid SIM cards are honest, ordinary people just trying to live their lives.   You want to know who these people are? They are the people who are too poor to buy a $900 iphone or they don't have good enough credit for one of the major carriers to lease them one, which is really the only reason why a carrier needs to gather a bunch of personal information about you - well that and to lock you into an annual contract. And the pre-paid plans, in addition to being more private, are usually much, much more affordable.   That's the people this kind of policy is going to hurt, but it definitely won't be the criminals because the criminals, they'll just switch tactics. They'll start a black market for SIM cards from another country, or they'll use stolen phones, or they'll clone the legit SIM cards of innocent people, or they'll switch entirely to encrypted Voice over IP calls, or they'll switch to some new technology that we haven't even heard of yet.  The point is, they aren't going to stop and they definitely aren't going to just hand over their information and get caught.   So, like most government policies, this will backfire. All Poland has done is create a nice new black market and compromise the private, personal information of most of their citizens.  But this could never happen in the US, right?   Well, one lawmaker has already tried to make it happen.  In March 2016, House Representative Jackie Speier (D-San Francisco/San Mateo) [I probably butchered her name but she's trying to butcher our privacy so I guess we're even] introduced the Pre-Paid Mobile Device Security Gap Act of 2016, which would have required similar identification requirements as the Polish law.  Luckily, the bill didn't go to a vote, but I wouldn't put it past some future Congress to take it up again because these things never die, they have a way of just coming back again and again until they finally pass.   I don't know, what do you guys think.  Are burner phones a basic human right?  Hit me up on Twitter @CrypTecSolution or on Facebook to let me know what you think.   What some legitimate reasons why ordinary people would want to use a temporary, private phone number? I think the reasons can be as trivial as selling a couch on Craigslist to as consequential as trying to hide your conversations with a divorce lawyer from an abusive spouse, but I'm interested to hear what you guys think.   One of the major reasons why I use pre-paid SIM card is to have a dedicated, private phone for buying Bitcoin peer-to-peer.   And one of the best places to buy Bitcoin peer-to-peer over the internet is Paxful.com. With Paxful, you don't have to go through some exchange with KYC, or know your customer regulations, that require you to give up personal information. On Paxful, you get to decide how much information you want to share.  There are over 300 ways to buy Bitcoin. If privacy is not your main concern, you can use your Paypal account or a debit card. And if privacy is important to you, you can buy your Bitcoin for cash by anonymously depositing it at a vendor's local bank branch. Paxful even makes buying Bitcoin so easy, you can use old gift cards. If you're looking to buy Bitcoin, use the link in today's show notes page to helps support CryptoTech Solutions at no additional cost to you.   And that wraps up today's show.  I hope you enjoyed it, and I'm looking forward to hearing from you.  Don't forget to subscribe to the show on Itunes and consider leaving us a review. Thanks for listening and I'll see you again next time.   CTS Amazon Store: http://astore.amazon.com/joecry-20   Paxful:  https://paxful.com/roots/buy-bitcoin?affiliate=bqWkbP3mdAw   Bitcoin Tip Payment Channel:  PM8TJXkG7WMNpSpWCHWyjFVU28fRaKqdtAo9m4XQmUDc5ESuVpg3CTeFoQREqcjyw13LPQ4BTsdYSjLqfhRNMu72BDWbGfCf2Y54dQv4fzYVp64aDF4x E-mail me @: contact@cryptotech.solutions PGP: 0d02 0d5b dedc 9a85 525c 00c6 d4c2 1436 7430 a025 Facebook: https://www.facebook.com/cryptotech.solutions/ Twitter: https://twitter.com/CrypTecSolution Original Article: http://lodzpost.com/polishnews/prepaid-sim-cards-poland-registration-mandatory/   Other Citations: https://arstechnica.com/business/2012/06/prepaid-mobile-phone-users-in-america-hit-record-high/   http://gizmodo.com/house-lawmaker-want-to-require-personal-information-to-1767368371

Burner Phone Ban

Welcome! CryptoTech.Solutions is my attempt to encourage the use of digital privacy tools and cryptocurrencies by everyone, NOT just techies!  My goal is to create product review and step-by-step tutorial videos, podcast interviews with developers and activists in the digital privacy and cryptocurrency communities, and blog about current events affecting digital privacy. My favorite cryptocurrencies at the moment are: Bitcoin, Dash, and Monero. Today’s Sponsors Are: CryptoTech’s Amazon Store:  We’ve created a small Amazon Shop that sells books and gear related to digital privacy and cryptocurrency. http://astore.amazon.com/joecry-20 ProtonMail:  A completely private and end-to-end encrypted email service. https://protonmail.com/signup?ref=cryptotech Nord VPN:  An easy-to-use, privacy-centered VPN service to protect your web traffic. https://go.nordvpn.net/aff_c?offer_id=15&aff_id=3425 Paxful:  A easy and private way to buy Bitcoin instantly online. https://paxful.com/roots/buy-bitcoin?affiliate=bqWkbP3mdAw Bitcoin Tip Payment Channel:  PM8TJXkG7WMNpSpWCHWyjFVU28fRaKqdtAo9m4XQmUDc5ESuVpg3CTeFoQREqcjyw13LPQ4BTsdYSjLqfhRNMu72BDWbGfCf2Y54dQv4fzYVp64aDF4x E-mail me @: contact@cryptotech.solutions PGP: 0d02 0d5b dedc 9a85 525c 00c6 d4c2 1436 7430 a025 Facebook: https://www.facebook.com/cryptotech.solutions/ Twitter: https://twitter.com/CrypTecSolution

Do you want to take back your privacy?

CryptoTech Solutions is a show dedicated to bringing digital privacy to everyone, not just techies. We cover the day's headlines as well as interviewing developers and activists in the digital privacy and cryptocurrency arenas. Also, check out our YouTube channel for step-by-step tutorials detailing how to use the best digital privacy tools.

hubhopper

CryptoTech Solutions

hubhopper