Bonum Certa Men Certa

Amandine Jambert (cryptie), CNIL, FSFE Financial data breach

posted by Roy Schestowitz on Apr 02, 2024

[Article 1.5 years old]

Reprinted with permission from the Free Software Fellowship.

We already wrote about Amandine "Cryptie" Jambert who is working for the French privacy regulator, CNIL while using a pseudonym to participate in the FSFE.

We mentioned that FSFE covered up the financial data privacy breach.

We want to publish more evidence and show why this is happening.

Amandine 'cryptie' JAMBERT, CNIL, FSFE

FSFE financial statements show they have lots of money. Their budget is €600,000 per year.

Looking at their employee list, they don't employee anybody with real technical competence. The one technical staff member is a social science graduate who is re-training as a "hopeful" developer. All the money goes to the imposters and female interns.

They use volunteers and students to do the sysadmin work. The FSFE jobs page is currently looking for a student sysadmin to work on the minimum wage.

Working time and compensation: The desired working time would be 10 hours per week but can be discussed. You will start working in our Berlin office to get a feeling for the organisation and the faces behind it, but at a later stage, home office is possible. The salary is based on the currently applicable minimum wage in Germany but can be higher depending on your experience. A mandatory requirement is that you are enrolled as a student at a university in Germany.

As a student, the sysadmin won't be available for about 6 weeks each semester while undertaking exams.

Volunteers also discovered FSFE using teenagers, children, child labour - see the YH4F and Outreachy Grooming scandals

Here we publish the full email about the privacy breach.

In this leak, Matthias Kirschner claims that nobody has taken copies of the financial data so there was no obligation to make any warning to the donors.

In fact, many volunteers, former employees, students, interns and maybe even children have copies of data about the FSFE donors. It was 15 year olds in Belfast who hacked the British phone company Talk-Talk. FSFE would be a walk in the park for those kids. We are publishing a copy of the FSFE Berlin mailing list membership to prove that copies exist outside the FSFE and therefore Matthias Kirschner is a liar.

We will remove the list when Matthias Kirschner removes all the defamation from the FSFE web sites, all other free software projects and search results.

Subject: [GA] Report about privacy problem with financial data
Date: Thu, 15 Mar 2018 14:26:10 +0100
From: Matthias Kirschner <mk@fsfe.org>
To: FSFE General Assembly <ga@lists.fsfe.org>, FSFE system hackers <system-hackers@lists.fsfe.org>

The archives of finance@lists.fsfe.org, and thereby all the information including full names, amount, credit card and bank details, were public from 18 December 2017 until 13 March 2018. It is now fixed and nobody outside the FSFE should have had access to them. Please help to check if the archives of your list should be public or not (see below).
On 13 March Reinhard noticed, that finance@lists.fsfe.org has a public archive, he informed me, I directly changed the archive to private and changed the admin password for the list which is currently only available to Heiki and myself. Due to a communication mistake neither Jan and Vincent nor I myself checked finance@lists.fsfe.org when checking the list settings after we were informed about the problems with staff@lists.fsfe.org (which Jonas created on 1 November). I myself forgot to remember that finance@ was also a mailing list, after Jonas migrated the former finance@ alias to a mailman list on 18 December 2017, and Jan and Vincent used the external mailing list listing, instead of the internal list. So we missed the list when checking other mailing lists after the former incident.
As the mailing list had public archives everybody knowing the URL would have had access to information like full name, amount of money for the donation, and the last 4 digits of the credit card number, for bank transfers the whole info BIC + IBAN numbers, contract discussions about the legal workshop, info messages from corporate donors (e.g. Google's Benevity), invoices, internal discussion by our finance team, etc.
I first wanted to inform you about the problem and discuss how to communicate the privacy problem to the effected parties, but Heiki suggested to first check all IP logs to see if they archives were accessed by third parties. Thanks to Albert's work, we can now say that the archives were only accessed this week, and that the IP addresses belonged either to Heiki, Reinhard, or the Berlin office (in comparison with staff@ the mailing list was not advertised on our list server and we were able to confirm.)
Jan, Vincent, and myself did some other checks, and when we wondered if the list should be public asked the people involved if it is ok that their list archive is public. # How you can help
One wish how you can help: if you are part of a mailing list which was not mentioned before, please do one quick check if the archives are publicly available, and if that should be the case. Else either change it yourself, or inform system-hackers@lists.fsfe.org about it. In general if you setup a list with sensitive information, please check how people can subscribe, if the list should be advertised on our list server, if there should be an archive, and make sure that the archive is not public. Best Regards, Matthias
-- Matthias Kirschner - President - Free Software Foundation Europe Schönhauser Allee 6/7, 10119 Berlin, Germany | t +49-30-27595290 Registered at Amtsgericht Hamburg, VR 17030 | (fsfe.org/join) Contact (fsfe.org/about/kirschner) - Weblog (k7r.eu/blog.html) _______________________________________________ GA mailing list GA@lists.fsfe.org https://lists.fsfe.org/mailman/listinfo/ga

FSFE internal forms were captured by search engines

If you try to access the pages today they are demanding a password. It looks like somebody disabled the authentication and left them unprotected long enough for the search engines to take snapshots.

For example, to make an internal order for business cards using the name Adolf Hitler, you can try to use this form.

FSFE, internal forms, unsecured, Matthias Kirschner

Membership list for the Berlin FSFE mailing list

You can use this page to join the list or browse the archives.

0xf10e@fsfe.org
99735@gmx.de
ahmruoff@gmail.com
ajh92@fsfe.org
albert@fsfe.org
alex01at@gmail.com
alex.graichen.ag@gmail.com
alex.sander@fsfe.org
anwalt@rechtsanwalt-stehmann.de
archive@mail-archive.com
arvid@fsfe.org
axel.b.kaiser@fsfe.org
axelmetzger@gmx.de
behrens_lars@gmx.de
benedikt.geissler@mailbox.org
benjamin.wand@web.de
benny@benny.de
bernhard@fsfe.org
bernhard@weitzhofer.org
bettgens@wesel-net.de
bh@intevation.de
birgit.huesken@fsfe.org
blanky0230@gmail.com
blipp@fsfe.org
brucker@spamfence.net
buenger@mytum.de
bussec@fsfe.org
c11f49af@posteo.de
cal@zls.de
carl-daniel.hailfinger@bsi.bund.de
carsten.knoll@posteo.de
cb@christian-bertram.de
cc@cmesh.de
chorse@gnu.org
chris.schabesberger@mailbox.org
christian.bleich.b@outlook.com
christian.imhorst@fsfe.org
christian@leber.de
christian@maxen.de
christian.naehle@posteo.de
christop@physik.tu-berlin.de
comzeradd@fsfe.org
cornelius@fsfe.org
cpoell@web.de
cw@fsfe.org
cybercow@triangulum.uberspace.de
dan.scharon@fsfe.org
denefi@fsfe.org
dennis.kawurek@hotmail.de
derik@fsfe.org
dg-lists@restfarbe.de
dhaen@gmx.de
dnt@gmx.com
dosbart@fsfe.org
dr-faustus@gmx.de
dschreiber@gmx.de
dzemisch@emailaholics.org
eal@fsfe.org
ebner@rosinak.at
edu-ml@unormal.org
egnun@fsfe.org
eht16@fsfe.org
erack@fsfe.org
erik@erlenweg.de
etjen.delilovic@gmail.com
e-user@fsfe.org
ff@chello.at
filla-news@online.de
fixtux@t-online.de
flo@4freax.net
floriansnow@fsfe.org
flx@fsfe.org
fphome@live.de
frank.becker@posteo.de
frank@frank.uvena.de
frank.koormann@intevation.de
frank.zimmermann.berlin@freenet.de
freebsd-listen@fabiankeil.de
fseidl@f9s.eu
fsfe@alteholz.de
fsfe@datentopf.org
fsfe@david-huecking.de
fsfe_dl@yahoo.de
fsfe@mo-online.org
fsferesignations@tuta.io
fsfe@rince.de
fsfe@sebdu.de
fsfeurope-german@lists.infodrom.org
fullstack@gmx.de
fw@deneb.enyo.de
ggiedke@fsfe.org
gian-maria.daffre@giammi.org
gnu-fsfe-de@m.gmane.org
gregor6464hp@posteo.de
greve@fsfe.org
gs@gstange.de
guido@fsfe.org
g.w.kugler@posteo.de
haagch@frickel.club
hannes.mayr@digitalcourage.de
he.ne@gmx.net
henning@jacobs1.de
hjensen@mailbox.org
hweidner-lists@gmx.net
idrost@htwm.de
ilu@fsfe.org
irie@wakeupandlive.de
irmhild.rogalla@institut-pi.de
jaeger@jbb-berlin.de
ja@fsfe.org
jan@dittberner.info
jan@intevation.de
jannis@pinterjann.is
jansson@gmx.net
janwey@fsfe.org
j.avdg@fsfe.org
jens@koch-der-gaertner.de
jj@pr-profi.com
jj.sarton@t-online.de
jlk@fsfe.org
jochen@herr-schmitt.de
joerg.berkel@phbern.ch
johannes@hubertz.de
joris.baum@runbox.com
jotbe@fsfe.org
julian.rueth@gmail.com
jurzik@guug.de
jzarl@fsfe.org
kar.dre.2017@gmail.com
karsten.reincke@telekom.de
kdambiec@fsfe.org
kelvan@ist-total.org
kloschi@subsignal.org
kontakt@do-foss.de
kontakt@freiesoftwareog.org
laabs@dasr.de
leize@leize.de
lemming@henning-thielemann.de
lgradl@posteo.net
linux@7mhz.de
liste3@gmx.de
listen@leena.de
lists@apfelkraut.org
lists@bitkeks.eu
lists@koffeinfrei.org
lists-mm@netcologne.de
lists@realcyber.de
lists@sumpfralle.de
lorenz@vulgrim.de
lorenz.wenner@posteo.de
luc.saffre@gmx.net
mail@florianhaas.net
mailinglist@doczkal.de
mail@michael-weimann.eu
mail@rolandgreim.de
mail@zimmer428.net
majestyx@fsfe.org
mararm@fsfe.org
marcoschlicht@onlinehome.de
maria.w@fsfe.org
mark.gerber.1976@gmail.com
martin@gerwinski.de
martone@fsfe.org
marvin.cohrs@hotmail.de
marvin.kohl@posteo.de
mason.edwards.20@outlook.com
mat@fsfe.org
matthias.kabel@tyche.de
matthias@vorlons.info
maurice@prtrc.net
max.mehl@fsfe.org
mbauer@mailbox.org
mf@fsfe.org
mfritsche@reauktion.de
mgross@junetz.de
michael.wehram@wolfsburg.de
micha@stoecker.me
michele.martone@ipp.mpg.de
mkellner@innnet.de
mk@fsfe.org
ml@mareichelt.com
ml@schoenitzer.de
m.mittler@gmx.net
modlinger@erneuerbare-freiheit.de
moritz@headstrong.de
m_szczawinski@poczta.fm
neal@walfield.org
news@gernot-schulz.com
newsletter@danielklier.com
news@schiermeier-it.de
nick.blackberg@nurfuerspam.de
nidi@fsfe.org
nowakewitz@yahoo.de
ntj@allesjetzt.net
oj@null.at
oliver.horn@gmx.net
olli@sopos.org
ooo@altsys.de
pascalwittmann@gmx.net
paul@fsfe.org
p.beier@t-online.de
peter.hormanns@jalin.de
peter.muehlbauer@gmx.net
pfarrch@gmail.com
phil@hoefer-elze.de
philipp.n@fsfe.org
philipp.schneider@mailbox.org
post@lespocky.de
prawn@fsfe.org
proedie@fsfe.org
radoje.stojisic@posteo.de
r.brusa@gmx.ch
reedts@fsfe.org
reg+fsfe@disroot.org
reinhard@fsfe.org
riepernet@fsfe.org
rmacek@fsfe.org
roland.hummel@student.hu-berlin.de
roland@mxchange.org
ronny-fs@vlugnet.org
sascha@girrulat.de
schiessle@fsfe.org
schult@reneschult.de
schulz@fsfe.org
schwirz.linux-ag@freenet.de
sebastian@dorni.net
sebastian.fedrau@gmail.com
sebastian@feltel.de
sebastian@lubo-net.de
sebsch@geblubber.org
selva@posteo.de
shin@posteo.jp
silvan.heintze@gmx.de
simon.parrer@gmail.com
singer.felix@t-online.de
softmetz@fsfe.org
spam.an.joker@googlemail.com
spikespiegel@gmx.net
stefan.boehringer@posteo.de
stefan@debxwoody.de
stefan.frech@gmx.de
stefan.nagy@posteo.net
stefano.cavallari@posteo.de
steffenfritz@fsfe.org
suhrj@fsfe.org
sus2006@bluewin.ch
su@su2.info
sw@fsfe.org
tblu@autistici.org
tb@makesyoualwaysgorgeous.org
tes@fsfe.org
thb@documentfoundation.org
thomasb-fsfe-de@dawnlink.net
thomas@koch.ro
thomas@leske.biz
thomas@schwinge.name
tiestes@gmx.de
tilljaeger@web.de
till.schaefer@do-foss.de
tks@fsfe.org
tobiasd@mailbox.org
tobias_huttner@mailbox.org
tobias.rothfelder@tum.de
tobias.schrank@fsfe.org
tom@voodoo-arts.net
t.schilde@firetech-online.de
tsctob@web.de
u.volmer@u-v.de
vanitasvitae@riseup.net
vassilis@raccoonia.com
v@njh.eu
volker@ixolution.de
volker@netkladde.de
vschlecht@fsfe.org
vv01f@fsfe.org
weo@weo1.de
wg@fsfe.org
wharms@bfs.de
wicker@posteo.de
wilde@intevation.de
willi.uebelherr@gmx.de
woro@wolfgangromey.de
wromey@fsfe.org
yqxoqjno@umail.furryterror.org
zwiebel444@yahoo.de

Other Recent Techrights' Posts

Jurgen Gaeremyn on Software Freedom Day
"today the event is more important than ever in the movement to further Software Freedom."
 
Tomorrow It's British (UK) General Election, Cybershow Has a New Episode Exploring the Tech Angle
There are about 4 people involved in this episode
GNU/Linux and ChromeOS Rising in Zambia, Android Rises Above 72%, and Windows Down to Only 7%
Windows is down, Android is surging, and even GNU/Linux is doing reasonable well
Free Software Foundation (FSF) on Track to Meet Fundraising Goal
There are over 17 left
Links 02/07/2024: Summer Plans, Unit of Selection, and Debian
Links for the day
In Northern Mariana Islands (and Saipan) Android Replaces Microsoft Windows as Dominant Platform
Android finally exceeded Windows in terms of market share in Northern Mariana Islands
It's Julian Assange's Birthday, His Fundraiser Still 30,000 Pounds Short
20 days are left and it's one way to give a "birthday gift"
Luc Zimmerman (Geneva city council, Le Centre political party) advised Software Freedom Institute on trademark registration
Reprinted with permission from Daniel Pocock
This Month Colombia Has Exceeded the 4% Milestone for GNU/Linux
Colombia is more than twice the size of France
Even the News/Articles About Debian Are Slop and Spam Now
linuxsecurity.com is trying to destroy Linux news on the Web for SEO purposes (selling its proprietary junk)
Windows Measured at 1.6% in Central African Republic This Month
If we're meant to think Microsoft is worth "trillion of dollars", what is that valuation based on?
This Article is Freeware
Microsoft AI CEO mentions "freeware"
Steady Increases for GNU/Linux in Israel This Year
Windows is down to a quarter
An Own Goal: Filing Legal Cases in the UK When You Don't Even Live in the UK and Weren't Born In the UK
It'll just be expensive, tedious, and fruitless
Brazil's GNU/Linux Community Growing (a New High)
It's a new all-time high
Speaking to Sources (or People Outside One's Country) is Not Crime and Not Seditious
serious ramifications for publishers
GNU/Linux Above 6% in Hong Kong, Windows Falls to New Lows
Many choose to walk away from Windows
Android (Linux) Blasting Past Windows in France, Highest Desktop Share Since Winter for GNU/Linux
while Windows down
Stella Assange and Kristinn Hrafnsson Recorded This a Week Before Julian Was Freed (Knowing He Would Fly Out Soon)
What happened last week shows that even in notorious and stacked courts there's some hope
statCounter: GNU/Linux Starts July at Over 4%, Steam Survey Shows GNU/Linux at Over 2%
More to come, over time...
The Truth Will Always Win (Eventually)
RMS et al
CIA Whistleblower Jeffrey Sterling on Julian Assange and the Espionage Act
Some people don't survive and get out of there at all
Jen Robinson Explains How the Case of Evan Gershkovich Contributed to the Case for Release of Julian Assange
Robinson is an excellent counsel
Links 02/07/2024: DMA Violations and CSA Regulation
Links for the day
LibrePlanet 2024: Roberto Innocenti on the Latest Buzzword and Typically Misnomer ("AI")
It's about the latest "hot" buzzword
IBM: We Killed CentOS, Now Start Paying Us
The M in IBM is marketing
Links 02/07/2024: Jennifer Robinson Turns to Free Press in Hong Kong, Calls for an Assange Pardon
Links for the day
Gemini Links 02/07/2024: Project Crossroads and Reloading Packet Filter Tables
Links for the day
Seth Patterson on Git-based Workflow and Free Software for Literature and Storytelling
"We can create a storytelling community that allows cross-pollination between creators and disciplines (e.g., novels, songs, and video games) and changes us from consumers to creators."
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, July 01, 2024
IRC logs for Monday, July 01, 2024
Jennifer Robinson on Julian Assange's Birthday Tomorrow (Even the Judge Wished Him an Early Happy Birthday)
we know recordings exist and some people selectively publish these online
It's About Community, About Society, Not Business or Profit
The "rat race" is not for humans
LibrePlanet Talk on Making Movies With Free Software Only
"I can talk about how I made it and what I had to do to manage the project."
Links 01/07/2024: Catchup With Science and War in Ukraine
Links for the day
Gemini Links 01/07/2024: New ICQ and Demise of 'Agile' Cargo Cult
Links for the day
[Meme] IBM's Brand of Diversity and Inclusion: You Can't Install GNU/Linux If You Are Blind
Maybe Wayland is a lot more important to them than Diversity and Inclusion
Wikileaks Actually Helped Save the Planet
Without leaks, we'd not see the coordination of climate science deniers
Anti-Assange Provocations in Our IRC Network
We suspect it is the Microsofters, using a fresh batch of aliases
ChromeOS+GNU/Linux in Europe in First Half of 2024 (Windows Gradually Drowning)
We expect the latest measures to be even higher tomorrow, hopefully above 6%
Elon Musk Killed Not Only the Twitter Bird, He Also Killed the Platform
Today begins the second half of 2024 (2024 H2)
[Meme] Wayland at Every Cost
Fedora DEI and Wayland
RMS: "I am very glad for Assange for being out of prison, but I am alarmed that the danger of being treated similarly will face other journalists and publishers in the future"
what RMS said about the release of Julian Assange
What Richard Stallman (RMS) Thinks of Paying With Cash or 'Cashless Society'
RMS: Don't be tracked
No Discrimination Allowed Against People Who Pay With Cash
City of Philadelphia on cash
Anthony Albanes: Assange's "arrival home ends a long running legal process. [...] We'll have meetings about AUKUS and other arrangements over coming days as well."
Official transcript
4.04 Linux Not Found, No Such Agency (NSA)
The CoCs never failed Microsoft
Julian Assange Turns 53 in a Couple of Days, Give Him the Gift of Freedom From Debt
Julian Assange turns 53 on Wednesday
IBM's Abandonment of Disabled People (Orca and Wayland Incompatibility) Has Basically Killed Their "DEI" Channel (Room)
The "DEI" channel (Matrix room) as been silent for 4 days
[Meme] Just Because You Throw Money at Lawyers Doesn't Mean You'll Win
Welcome to the second half of 2024
Audio: Julian Assange Tells US Judge That Espionage Act and First Amendment Contradict One Another, But Pleads Guilty (to Save His Life)
Have a listen to Julian Assange and the judge in Saipan
How to Help Pay Assange Debt (£520,000 Plane Bill and Beyond)
Budget travel was not permitted
Paulo Henrique Santana (Collabora) on the Debian Brazil Community
There was similar material in DebConf22
Making the Wikileaks Site More Active Again (and Gradually Exiting "X" or Other Social Control Media)
As soon as Assange got kidnapped the Wikileaks Web site reached a near-standstill
Wikipedia Co-Founder (Not Wales) Expresses Support for Wikileaks Founder Julian Assange, Says Assange Will Probably Continue
probably exactly the sort of thing that the US prosecutors did not want
Marco Calegaro on Hacking Art Into a Community
talk by Marco Calegaro
Links 01/07/2024: Chokecherry Leaf and Agile Manifesto
Links for the day
Johannes Åsgård on Making the Raspberry Pi More Free With librerpi
Johannes (also known as dolphinana)
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, June 30, 2024
IRC logs for Sunday, June 30, 2024