5th of July Foundation

Security - Privacy - Liberty

Blog

5July signs the Open Letter Against Apple’s Privacy-Invasive Content Scanning Technology

by

As of today, the 5th of July Foundation is one of the signatories of the open “privacy letter” to Apple.

The letter is a result of Apple’s plans to give an American organisation access to content stored on your own phone or other Apple device.

In signing the letter, the 5th of July Foundation asks that:

  1. Apple Inc.’s deployment of its proposed content monitoring technology is halted immediately.
  2. Apple Inc. issue a statement reaffirming their commitment to end-to-end encryption and to user privacy.

Sign the letter at Appleprivacyletter.com (image from the same site).

Jabber update

by

If you have experienced problem with our Jabber server, they should be fixed now.

The background is that we installed a new SSL certificate on 20 February 2021, but we missed attaching our signature correctly. Today, 26 February 2021, we fixed this problem.

Depending on your platform and settings, your XMPP (Jabber) client might have warned you about problems during this period.

There are no signs of attack attempts. This was simply a miss in our routines, for which we apologise.

Thank you for alerting us about this!

5july ❤️ EFF

by

The 5th of July Foundation has donated 500 USD to the Electronic Frontier Foundation, which will be doubled by fund donors to 1,000 USD in their Power Up campaign. We also became official members.

EFF is an American nonprofit organisation “defending civil liberties in the digital world”.

Today is the last day to have your donation doubled – go ahead and support digital liberty!

5july advises the EU on new internet legislation

by

The European Commission is currently crafting a new legal framework for the internet. The so called Digital Services Act will replace the old Ecommerce directive from the year 2000.

As part of this process, the Commission has initiated a public consultation, in which the 5th of July Foundation has participated. The public consultation ends today.

The 5th of July Foundation has summarised its advice to the EU in three main points:

  1. No censorship prior to publication
  2. No upload filters – especially not for opinions
  3. Mere Conduit for platforms (without curation)

You can read our full statement in this PDF (2 pages).

Read more in Swedish on our news blog Femte juli:

5 juli-stiftelsen söker tekniker!

by

5 juli-stiftelsen söker en tekniker/utvecklare som vill utveckla och underhålla tjänster som ger ökad säkerhet, integritet och frihet för internetanvändare i hela världen, vilket är 5 juli-stiftelsens syfte.

Vår huvudtjänst är Integrity VPN, men vi driver också en jabberserver, en anonym eposttjänst och en tornod på den tekniska sidan, samt nyhetsbloggen Femte juli.

Vi vill nu lansera fler tjänster, och det är där du kommer in. Som en del av vårt utvecklarteam kommer du att ha stort inflytande över vilka tjänster vi sjösätter hur de ska sättas upp. Du kommer bli en del av en liten grupp av dedikerade tekniker som brinner för ett fritt internet. Vi jobbar på distans och fakturerar från egen firma.

Vi har inga formella krav på programspråk och liknande (det kan variera beroende på projekt). Skicka iväg ett mejl och berätta vad du kan och vad du vill göra, och framförallt, varför du vill bli en del av 5 juli-stiftelsens arbete för ett fritt internet!

Mejla (gärna krypterat, fingerprint: 1DC3 5A97 1854 5C89 1B0B 7B8F BD0E 885C 4C4F 7E4D) till karl AT 5july.org.

New XMPP server and security breach

by

We have today officially launched our new XMPP (Jabber) server.

Register an account here:

https://jabber-signup.5july.net/

Our old XMPP (Jabber) server will be has been shut down.

If you used the old server, make sure to use a new password when you register on the new server.

Note that the new server has server address jabber.5july.net (the old one had .org in the end).

Security breach

The immediate reason for the switch to the new server is a security breach that occurred this morning. We think that usernames, hashed passwords, and possibly contacts have been leaked. We are still investigating, but bottom line is that there doesn’t seem to be any security patch for this vulnerability (for the version we are running, see below), which means that similar attacks could happen again. We will therefore shut down this server and start using a new one. We have sent an XMPP message about this to all users of our old server.

The switch to a new XMPP server has been in the works for some time already. Our old XMPP server ran on an older version of Prosody, and we had had problems updating to the newest version, possibly because the database had been corrupted after migrating from ejabberd to Prosody earlier on. After several attempts to update Prosody, we simply decided to start a new XMPP server running on the latest version. We tried migrating all accounts from the old to the new server, but without success. (If you noticed downtime in the last few weeks, this was the reason.) We therefore decided that we would have to ask all of you to register new accounts on the new server. Far from ideal, but doable.

Better XMPP compliance

The good news is that running the latest version of Prosody will make it possible to add various extensions that some of you have asked for. The Conversations’ XMPP compliance tester gives us a score of 80 percent currently, up from 60-something for the old server. We’ll implement more features over the next weeks.