[liberationtech] current best advice for secure blogging

Fabio Pietrosanti (naif) lists at infosecurity.ch
Thu Feb 23 05:45:56 PST 2012


On 2/22/12 3:08 PM, Moritz Bartl wrote:
> On 21.02.2012 21:42, Michael Rogers wrote:
>> True, that would be possible, but I'm not sure the guide should advise
>> someone to create two accounts when they only need one.
>>
>> Thanks for the reminder about AOL, which I forgot to look into. It
>> doesn't appear to be possible to sign up for an AOL email account
>> through the Tor Browser Bundle.
>>
>> Cheers,
>> Michael
> 
> I've had good experience with safe-mail.net. They allow to turn off "IP
> security" (detection of changed IPs during sessions) and offer a simple
> static interface that requires no scripting and is fast over
> low-bandwidth networks.

Personally i don't trust much safe-mail.net as it doesn't appear to have
a clear and transparent history.

It's an historical Israeli run anonymous email services for which doing
a little bit of OSINT doesn't provide me a lot of trust about it.

First of all you must know that doing "strong-crypto" business in Israel
is extremely limited in the capabilities that a company have in
providing it's own "strong encrypted" product/service without having to
tell to the MOD (Ministry of Defense) every 3 months the full list of
your users/customers/distributors.

In safe-mail *all* the servers are placed in Israel and this *IS NOT* a
good practice from privacy point of view due to strict regulation on
cryptography and high monitoring capabilities of Israeli Government.

The story is that Safe-Mail it's plenty of "opacity", plenty of
different offshore companies.

The ownership of the companies changed along with particular swap of IPR
with a lot of new newcos during time.

Below a quick and unorganized OSINT analysis that would be very nice to
complete in a collaborative way to  understand "who is now behind
Safe-Mail" and why there has been so many "ownership" transfers.


- The domain name registrant is a Japanese company that doesn't have
"any hit" or "any information" on the internet:
almond systerms international Ltd.
   2-26-23-701 Minami-Otsuka,Toshima-ku
   Tokyo 170-0005
   JP

- The Japanese resident company is not a Japanese company but a UK
company owning the isralian domain www.almond.co.il .

- The domain name contact are those Israelian guy "Amiram Ofir" that
represent two different companies
 - Safe-mail Ltd
 - Galiad Computers Limited

      Ofir, Amiram		Amiram at Safe-mail.net
      Safe-mail Ltd.
      P.O.Box 39001
      Givat-Ram
      Jerusalem 91390
      IL
      +972 2 648 0066 fax: +972 2 648 0180

   Ofir, Amiram		Amiram at SAFe-mail.net
      Galiad Computers Limited
      P.O.Box 39001
      Givat-Ram
      Jerusalem 91390
      IL
      +972-2-648-0066 fax: +972-2-648-0180

- Galiad Computers Limited (galiad.co.il) doesn't even have a website,
so it behave like being a shield company (not a real company doing real
businesses requiring to have an internet website to do it's job)

- Galiad Computer Limited own patents on safe-mail system
  - http://ip.com/patapp/CA2347834A1

Trace of some person working in Galiad Computer System reside from '91
up to '95 http://www.linkedin.com/pub/eitan-mizrotsky/2/924/ab0 .

- Galiad made some kind of IPR agreement with VSUS technology
  http://www.secinfo.com/dsvrn.zHq.a.htm
  http://www.secinfo.com/dsvrn.zHq.8.htm

- Safe-Mail was sold to VSUS Secured Services (Delaware) that owned
everything
  http://www.linksv.com/compSummary/co/67571/VSUSTechnologies

- VSUS technology that's a delaware corporation, had Ofir Amiram as CEO
  http://consusgroup.com/previews/1875871/

- Mr. Amiram blog here sometime
  http://www.olmert0.com/wordpress/he/author/amiram/

Companies related to safe-mail are
- Almond systerms international Ltd. (UK)
- Safe-Mail Ltd (Israel)
- Safe Mail Development Ltd (Israel)
- Safe Mail International Ltd (British Virgin Island)
- ViVaVu Systems Ltd (Israel)
- VSUS Secured Services (Delaware, USA)
- Tetraktys ltd (???)

- In 2005 Mr. Amiram sold his VSUS share (and share of his wife) to Eli
Kissos, create a new Israeli company (ViVaVu) that made an agreement to
allow use of Safe-Mail IPR to VSUS
http://sec.edgar-online.com/vsus-technologies-inc/8-k-current-report-filing/2005/02/03/Section2.aspx

"The right, title and interest to certain of our assets, including,
without limitation, our Internet Web site www.safe-mail.net, and the
corporate name and trademark "SAF-email," were transferred and assigned
to ViVaVu Systems,Ltd., a new company organized by Mr. Ofir ("ViVaVu"),
and, accordingly, we agreed to change Safe Mail's corporate name.


Other domains part of Galiad
- safearena.com
- safe-bank.net
- www.almond.co.il

-naif



More information about the liberationtech mailing list