July 2012 - cypherpunks-legacy

Продаются квартиры в Хамовниках
by "элитные квартиры" 31 Jul '12

31 Jul '12

Продаются элитные квартиры в Хамовниках в близи Новодевичьего монастыря www.дом-хамовники.рф

1 0

Former NSA Official Disputes Claims by NSA Chief
by Eugen Leitl 31 Jul '12

31 Jul '12

http://www.wired.com/threatlevel/2012/07/binney-on-alexander-and-nsa/ Former NSA Official Disputes Claims by NSA Chief By Kim Zetter July 29, 2012 | 2:25 pm | Categories: National Security, NSA, privacy, Surveillance Follow @KimZetter Gen. Keith Alexander, head of the NSA and U.S. Cyber Command appearing at the 2012 DefCon hacker conference in Las Vegas on Friday. Photo: Kim Zetter/Wired LAS VEGAS b A former NSA official has accused the NSAbs director of deception during a speech he gave at the DefCon hacker conference on Friday when he asserted that the agency does not collect files on Americans. William Binney, a former technical director at the NSA, said during a panel discussion that NSA Director Gen. Keith Alexander was playing a b word gameb and that the NSA was indeed collecting e-mails, Twitter writings, internet searches and other data belonging to Americans and indexing it. b Unfortunately, once the software takes in data, it will build profiles on everyone in that data,b he said. b You can simply call it up by the attributes of anyone you want and itbs in place for people to look at.b He said the NSA began building its data collection system to spy on Americans prior to 9/11, and then used the terrorist attacks that occurred that year as the excuse to launch the data collection project. b It started in February 2001 when they started asking telecoms for data,b Binney said. b That to me tells me that the real plan was to spy on Americans from the beginning.b Binney is referring to assertions that former Qwest CEO James Nacchio made in court documents in 2007 that the NSA had asked Qwest, AT&T, Verizon and Bellsouth in early 2001 for customer calling records and that all of the other companies complied with the request, but Nacchio declined to participate until served with a proper legal order. b The reason I left the NSA was because they started spying on everybody in the country. Thatbs the reason I left,b said Binney, who resigned from the agency in late 2001. Binney was contradicting statements made on Friday by Alexander, who told the crowd of hackers and security professionals that his agency b absolutelyb does not maintain files on Americans. b And anybody who would tell you that webre keeping files or dossiers on the American people,b Alexander continued, b knows thatbs not true.b Alexander also told the audience that the NSA targets only foreign entities and that if it b incidentallyb picked up the data of Americans in the process, the agency was required to b minimizeb the data, b which means nobody else can see it unless therebs a crime thatbs been committed.b Minimization refers to legal restrictions under the United states Signals Intelligence Directive 18 on how data pertaining to U.S. citizens can be handled, distributed or retained. Following the panel discussion, a former attorney for the NSA elaborated on this to Threat Level. b Youbre looking at a data stream that originates in a foreign country. It just happens to be transiting the United States,b said Richard Marshall, former associate general counsel for information assurance at the NSA. b Youbre authorized by law to collect that data and to analyze that data. Even though it was captured on U.S. soil, itbs against a foreign target. Now in the process of doing that, yes, there is a possibility, more than a possibility I guess, that there will be some U.S. person who is involved in a conversation with a foreign entity, a foreign person. So what? If youbre not collecting data against that U.S. person, whatbs the harm?b But ACLU staff attorney Alex Abdo, who was also on the panel, noted that a gaping loophole in the laws governing the NSA allows the agency to do dragnet surveillance of non-Americans and, in the process sweep up the data of Americans they may be communicating with, and hold onto that data even though the Americans arenbt the target. The NSA can then b target [the Americans] after-the-fact.b If, for example, new information came to light involving an American whose information is in the database, the NSA can sift through the b minimizedb data and at that point b get the info that they couldnbt target from the outset.b Earlier this month, the Office of the Director of National Intelligence admitted in a letter sent to Senator Ron Wyden that on at least one occasion the NSA had violated the Constitutional prohibitions on unlawful search and seizure. According to the letter, the Foreign Intelligence Surveillance Court found that b minimization proceduresb used by the government while it was collecting intelligence were b unreasonable under the Fourth Amendment.b Author James Bamford, speaking with Abdo and Binney, said that the NSA could also get around the law against targeting Americans by targeting a call center for a U.S. company that is based overseas, perhaps in India. When Americans then called the center to obtain information about their bank account or some other transaction, the NSA would be able to pick up that communication. Finally, Binney contradicted Alexanderbs earlier claims that the agency could not violate the law even if it wanted to do so because the NSA is monitored by Congress, both intel committees and their congressional members and their staffs. b So everything we do is auditable by them, by the FISA court b& and by the administration. And everything we do is accountable to themb&. We are overseen by everybody,b Alexander had said. But these assertions are disingenuous since, Binney said, b all the oversight is totally dependent on what the NSA tells them. They have no way of knowing what [the NSA is] really doing unless theybre told.b Kim Zetter Kim Zetter is a senior reporter at Wired covering cybercrime, privacy, security and civil liberties.

1 0

10 рассылок за 10 000 рублей +хостинг на месяц в ПОДАРОК
by "Реклама по е-почте" 31 Jul '12

31 Jul '12

10 рассылок за 10 000 рублей + хостинг на месяц в ПОДАРОК (для указания вашего сайта в письме) - По вашему графику - Без ограничений по срокам - Возможно менять макеты все 10 раз !!! - Подготовка макетов бесплатно АКЦИИ: Месяц 44(46) рассылок - 2 раза в день - 5 раз в неделю - 20 000 рублей Под акцию попадают базы: Вся Россия - 23 млн адресов - из них 4 млн ЮР. Вся Москва - 8 млн адресов - из них 1,7 млн ЮР. Вся Украина - 4 млн адресов - из них 1 млн ЮР. и др. Тел: (495) 585-79-04 ICQ: 286 926 971

1 0

Продается дом в альпийском стиле в 42км от Москвы, у горнолыжного курорта
by "Продается дом" 31 Jul '12

31 Jul '12

Продается здесь www.купи-дом-здесь.рф

1 0

Re: [tor-relays] Call for discussion: turning funding into more exit relays
by John Young 30 Jul '12

30 Jul '12

Andrew Lewman, not Newman.

1 0

Re: [tor-relays] Call for discussion: turning funding into more exit relays
by Eugen Leitl 30 Jul '12

30 Jul '12

----- Forwarded message from Moritz Bartl <moritz(a)torservers.net> -----

2 1

Продается НОВЫЙ КОТТЕДЖ
by "НОВЫЙ КОТТЕДЖ" 30 Jul '12

30 Jul '12

Продается НОВЫЙ КОТТЕДЖ Коттедж, 200 м2 Участок: 12 сот. Киевское шоссе, Боровск Газ, вода, Электрика, Канализация, все заведено в дом и функционирует Под чистовую отделку ТРЕБУЕТСЯ ТОЛЬКО ФИНИШНАЯ ОТДЕЛКА. немецкие технологии 6,7 млн. руб www.продам-дом-тут.рф

1 0

Оффшоры, налоговые схемы и Кипр
by Семинар 30 Jul '12

30 Jul '12

10 Августа 2012 г. Оффшорный бизнес: о чем молчат другие? (код Москвы) 7Ч2-9I98 и 8 Моск. код: 7922I22 Цель: Отличительной особенностью данного курса является практическая направленность и отсутствие лишних теоретических и исторических отступлений. курс строится в форме интерактивного практического занятия при постоянном взаимодействии с аудиторией с разбором большого количества примеров и подробным описанием налоговых, финансовых и правовых последствий или рисков. Для участия в курсе мы приглашаем как специалистов с многолетним опытом работы в сфере международного налогового планирования, стремящихся расширить область своих знаний, так и слушателей, еще не сталкивавшихся с иностранными юрисдикциями. Насыщенность материала конкретными примерами, взятыми из жизни, решение нестандартных и частных задач в ходе занятия, а также доступность объяснений относятся к неоспоримым достоинствам данного курса. Важно отметить, что ведущий курса имеет не только многолетний опыт разработки и курирования крупных консалтинговых проектов, но также многократного участия в их реализации "под ключ" с последующим сопровождением. Это позволяет наполнить курс уникальным материалом, посвященным не только схемам оптимизации налогов, но и многочисленными практическими комментариями и описанием проблем, с которыми сталкивается бизнес, даже при выборе "правильных и выверенных" схем. По ходу и после окончания курса будет предусмотрено время для индивидуальных вопросов как по заявленным темам, так и по вопросам, которые не предусматривала программа курса. Оффшоры, Кипр и другие иностранные юрисдикции не являются налоговой панацеей, и в некоторых случаях их использование принесет лишь новые финансовые издержки и бессмысленные риски конфликтов с налоговыми органами. К счастью, таких случаев пока меньшинство. Программа: БЛОК 1. ОФФШОРЫ, НИЗКОНАЛОГОВЫЕ И ПРЕСТИЖНЫЕ ЕВРОПЕЙСКИЕ ЮРИСДИКЦИИ: КРИТЕРИИ ВЫБОРА. * Сравнение популярных оффшорных юрисдикций (Британские Виргинские острова, Белиз, Сейшелы, Панама и т.д.) – от каких стоит отказаться и почему? * Гонконг как инструмент работы с азиатским рынком * Зачем использовать низконалоговые юрисдикции, если есть полностью безналоговые? * Использование престижных юрисдикций: Швейцария, Люксембург, Нидерланды и т.д. – когда это обоснованно? * "Черные списки" ФАТФ, ОЭСР, Минфина, ЦБ РФ – кому о них можно забыть? БЛОК 2. ПРАКТИКА ИСПОЛЬЗОВАНИЯ КИПРСКИХ КОМПАНИЙ * Особенности работы с кипрским администратором: как не дать себя обмануть? ** налог на прибыль (Corporate Income Tax), сбор на оборону (Defence Contribution Tax), НДС и применение “reverse charge” * Изменения кипрского законодательства 2012 и тенденции 2013. * Ратификация Протокола к Соглашению между РФ и Кипром: кто понесет убытки, а кому удастся на этом заработать? * Почему Кипр редко используют при экспорте/импорте товаров? * Кипр как инструмент работы с ценными бумагами БЛОК 3.СХЕМЫ, ПРИМЕНЯЕМЫЕ В МЕЖДУНАРОДНОМ НАЛОГОВОМ ПЛАНИРОВАНИИ * Внешнеторговые операции (экспорт/импорт): ** схемы с использованием оффшоров и Гонконга; ** схемы с использование английских LTD и партнерств LLP; ** эстонские, чешские, датские, нидерландские компании в торговых схемах. * Холдинговые структуры ** выплаты дивидендов и построение холдинговых структур; ** займы как оптимальный путь финансирования; ** (суб)лицензионные договоры и выплаты роялти за использование прав интеллектуальной собственности; ** анализ сложностей и рисков, расчет предельных величин отчислений по займам и роялти. * Владение и сдача в аренду недвижимости с использованием нерезидентов БЛОК 4. КОНФИДЕНЦИАЛЬНОСТЬ И НОМИНАЛЬНОЕ ВЛАДЕНИЕ * Номинальный сервис: ** инструменты контроля номинальных директоров и номинальных акционеров; ** лица, которым будут известны имена бенефициаров; * Какие данные о компании хранятся в публичных реестрах Кипра и оффшоров, и кто имеет к ним доступ? * Обмен информацией – в каких случаях государственные органы РФ могут получить информацию о владельцах? * Изменения в Гражданском Кодексе: бенефициар должен раскрыть себя сам. * Трасты и семейные фонды – когда их использование оправдано? * "Подводные камни" при использовании номинального сервиса и трастов/фондов. БЛОК 5. ОТКРЫТИЕ СЧЕТОВ НА ИНОСТРАННЫЕ КОМПАНИИ * Надежность, оперативность работы, лояльность – какой банк выбрать? * Какие банки не делятся информацией с российскими спецслужбами? * Раскрытие банковской тайны – факты и выводы * Пути снятия средств со счета иностранного банка в России * Росфинмониторинг: когда можно не опасаться? БЛОК 6. ЧАСТО ЗАДАВАЕМЫЕ ВОПРОСЫ, СИТУАЦИИ ИЗ ПРАКТИКИ, ОБЗОР СУДОВ И ПИСЕМ МИНФИНА. * Насколько международная структура владения защищает от рейдерских захватов? * Как часто нужно предоставлять сертификат налогового резидентства и нужно ли проходить аудит для его выпуска? * Ведет ли использование доверенностей с широким кругом полномочий к возникновению постоянного представительства? Официальная позиция. * Дает ли регистрация компании в ЕС возможность на привлечение кредитов и получение гражданства? * Если компания не нужна: нужно ликвидировать или можно "бросить"? * и т.д. Стоимость участия: 9 000 рублей Информацию можно получить по телефонам: 8 Моск. код: 7922I_22 и код (499) - 445-4О95

1 0

Re: [liberationtech] Finfisher Spy Kit Revealed in Bahrain
by Eugen Leitl 29 Jul '12

29 Jul '12

----- Forwarded message from "Fabio Pietrosanti (naif)" <lists(a)infosecurity.ch> -----

1 0

cryptocat mentioned on wired.com recently...
by b. brewer 28 Jul '12

28 Jul '12

This Cute Chat Site Could Save Your Life and Help Overthrow Your Government By Quinn NortonEmail Author July 27, 2012 | 12:15 pm | Categories: Conferences, Crypto Nadim Kobeissi, creator of Cryptocat, spoke in mid-July at the HOPE conference, held at New Yorks Hotel Pennsylvania every two years. Credit: Quinn Norton/Wired Twenty-one-year-old college student Nadim Kobeissi is from Canada, Lebanon and the internet. He is the creator of Cryptocat, a project to combine my love of cryptography and cats, he explained to an overflowing audience of hackers at the HOPE conference on Saturday, July 14. The site, crypto.cat, has a chunky, 8-bit sensibility, with a big-eyed binary cat in the corner. The visitor has the option to name, then enter a chat. Theres some explanatory text, but little else. Its deceptively simple for a web app that can save lives, subvert governments and frustrate marketers. But as little as two years ago such a site was considered to be likely impossible to code. Cryptocat is an encrypted web-based chat. Its the first chat client in the browser to allow anyone to use end-to-end encryption to communicate without the problems of SSL, the standard way browsers do crypto, or mucking about with downloading and installing other software. For Kobeissi, that means non-technical people anywhere in the world can talk without fear of online snooping from corporations, criminals or governments. The fact that you dont have to install anything, the fact that it works instantly, this increases security, he explained, sitting down with Wired at HOPE 9 to talk about Cryptocat, activism and getting through American airports. To create Cryptocat Kobeissi had to deal with controversies in computer security, usability and geo-politics. When he flies through the US, hes generally had the notorious SSSS printed on his boarding pass, marking him for searches and interrogations which Kobeissi says have focused on his development of the chat client. Online privacy doesnt have a lot of corporate or governmental fans these days, but Kobeissi has faced controversy before. During 2010 and 2011 I was a defender of WikiLeaks and the free press in general, and I thought Collateral Murder (the WikiLeaks publication of a controversial helicopter assault video) was a highly significant piece of journalism, he said. He mirrored WikiLeaks content and organized a march in support of the organization during the period in late 2010 when WikiLeaks found itself thrown off of Amazons hosting service and blocked by credit card companies. I know for certain that its contributed to other defenders of WikiLeaks and Bradley Manning being harassed, so its somewhat likely that I could also be targeted. Still, Kobeissi points out that hes never been questioned about WikiLeaks, only about Cryptocat. His SSSSs can mean hours of waiting, and Kobeissi says he has been searched, questioned, had his bags and even his passport taken away and returned later. But hes kept his sense of humor about the experience, even joking from the airport on his Twitter account. Nadim Kobeissi @kaepora WHAT AN SSSS FOR THE FIFTH TIME IN A ROW HOW COULD THIS HAPPEN I AM SO SURPRISED THIS IS SO SURPRISING pic.twitter.com/ooM1L0I7 17 Jun 12 Reply Retweet Favorite The young and cheerfully sarcastic Kobeissi is somewhat baffled by the border attention. Kobeissi said that in one of his last U.S. trips through Charlotte, NC, In total I was searched either three or four times, in a single visit. Why? Do bombs materialize? I dont understand, he continued. If the searches, delays, and interrogations about Cryptocat are an intimidation tactic, they havent worked. Dear US Government, Im from Lebanon, Kobeissi said, laughing. You dont scare me, you dont understand. My friends were killed in 2008, my house was bombed and my neighborhood ruined. My father was killed in 2006. You dont scare me at all. If you want to scare me, send me for torture in Syria. But you cant anymore, because Syrians are revolting. A U.S. Customs and Border Protection spokesman declined to comment on Kobeissis detentions at the border, saying he was prohibited from doing so by privacy laws, though he maintains that it plays nicely with foreigners. The United States has been and continues to be a welcoming nation. U.S. Customs and Border Protection not only protects U.S. citizens and lawful permanent residents in the country but also wants to ensure the safety of our international travelers who come to visit, study and conduct legitimate business in our country. Our dual mission is to facilitate travel in the United States while we secure our borders, our people and our visitors from those that would do us harm like terrorists and terrorist weapons, criminals, and contraband. CBP officers are charged with enforcing not only immigration and customs laws, but they enforce over 400 laws for 40 other agencies and have stopped thousands of violators of U.S. law. CBP strives to treat all travelers with respect and in a professional manner, while maintaining the focus of our mission to protect all citizens and visitors in the United States. To get Cryptocat to the hands of Syrians resisting their government, or Canadians resisting being profiled by marketers, Kobeissi had to build a crypto tool in a place where no crypto tool has ever flourished your browser. You have to make it just as easily accessible as Facebook Chat or Google Talk, which is what Im trying to do with Cryptocat, he said. Google, Facebook and a infinite variety of other sites are pushing more functionality into the browser to increase the power of web apps, and the browser has become, for many people, the main interface of their computer. But from a security point of view, the browser has always failed to provide for users in no way worse than in cryptography. Encrypting data to keep it away from prying eyes, be they hackers or nations has proved nearly impossible in the browser, which has relied on one standard to do everything: SSL, which is known to be broken. The terrible state of browser security plagued Kobeissi in his work to build Cryptocat. Browsers are huge, complex, multilayered beasts with lots of moving parts, and every last one of them implements at best some dialect of each of the many standards that a modern browser has to support, said Meredith Patterson, a senior research scientist at Red Lambda. Patterson deals with security and cryptography on an architectural level in her research, and has reviewed and commented on Cryptocat. Problems like bad browser sandboxing meant that something in one tab could affect a session in a Cryptocat window. No libraries or standards existed to handle normal encryption functions in Javascript. The biggest problem is that delivery of Javascript code from server to browser could be intercepted and modified by breaking the SSL connection without a user ever knowing they were running malicious code. Kobeissi faced criticism from the security community for even trying, but he persevered. Now more than a year later, Cryptocat has significantly advanced the field of browser crypto, he said with obvious pride. We implemented elliptic curve cryptography, (and) a cryptographically secure random number generator in the browser, along with creating a Cryptocat Chrome app to address the code delivery problem. I dont think Nadim really knew what he was in for when he started this project, but although it got off to a bumpy start, hes risen to the occasion admirably, said Patterson. But Kobeissi also knows that its equally important that Cryptocat be usable and pretty. Kobeissi wants Cryptocat to be something you want to use, not just need to. Encrypted chat tools have existed for years but have largely stayed in the hands of geeks, who usually arent the ones most likely to need strong crypto. Security is not just good crypto. Its very important to have good crypto, and audit it. Security is not possible without (that), but security is equally impossible without making it accessible. Patterson agrees with Kobeissis approach. As much as it drives all of us nerds batshit, J. Random internet user spends most if not all of her time in the browser, and generally doesnt care to install even a separate email client much less a separate chat client, she said. If you dont go where the users live, you dont get users. End of story. Nevertheless, Kobeissi has said repeatedly that Cryptocat is an experiment. Structural flaws in browser security and Javascript still dog the project as it moves toward version 2, scheduled for the end of the year. Cryptocat 2 will be a full Jabber client, allowing for both current style OTR and Multi Party, or mpOTR for group chats. OTR is Off-The-Record messaging, the current gold standard in encrypted chat. (Not to be confused with Google Talks OTR, which is not encrypted at all.) Screenshot of the second version of Cryptocat, a Jabber/xmpp client with full OTR support. He isnt eager to bet his life on his work to date. But in environments like the Arab revolts, he acknowledges that for all of Cryptocats flaws, its better than software many people in Arab countries use right now, which can put them in tremendous danger. If the alternative is Facebook Chat or Google Talk or Skype please use Cryptocat by all means, but its still an experiment. Thus far Cryptocat hasnt penetrated far into the consciousness of the common user, but for some groups in need of secure communications, its already part of the toolkit. High security, simple to use, said an active participant in the internet collective Anonymous, which has faced prosecution and worse the world over. If its a hurry and someone needs something quickly, Cryptocat. Kobeissi himself grew up in Beirut, Lebanon. Besides authoring the secure chat tool and being a security researcher, hes a political science and philosophy major at Concordia University in Montreal, Canada. His post-college job is set hell be developing Cryptocat full time, living on grant money for the project. He emigrated to Canada after a conversation with his mother, when the-then teenager came to realize he might not live very long in Lebanon an situation that informed his software design. Hes vocal about his love of his adopted home in Canada, as well about how the internet and games kept him going through the rough times in the wartorn country of his birth, The happiest things in my childhood were Sega Game Gear and Sega Genesis. Its clear that Cryptocats distinctive 8-bit feel isnt just a gimmick. Nowadays he sees himself as coming from two cultures, North American and Middle Eastern, and it gives him a rare perspective on both the need and usefulness of getting crypto into the hands of everyone. This is something North Americans dont realize. Here were exporting cryptography software. Generally, especially in todays context, the Middle East imports cryptographic software, but its a foreign product. A foreign civilization made it, he said. He believes that by building Cryptocat with more sensitivity to the pleasures of the user, he can help the people that need secure communications most. I want it to be something that has a nice color scheme, that works in your browser, that you can open instantly, thats easily accessible, that has a cat, that has audio notifications, that has desktop notifications, Kobeissi said, Because these are important security features. When faced with the torture of using crypto software or the torture of a repressive government, some dissidents have intentionally or not opted for the latter. I have seen someone who I know knows how to use OTR not use OTR, and get tortured as a result, in Syria OTR is not accessible, its not a pleasure to use. Pages: 1 2 View All Related You Might Like Around the Web Related Links by Contextly WikiLeaks Associates Hit Back Over U.S. Twitter Records Demand U.S. Soldier on 2007 Apache Attack: What I Saw Another Hackers Laptop, Cellphones Searched at Border FBI Drive for Encryption Backdoors Is Dij` Vu for Security Experts Olympics Journalists Urged To Use Crypto, to Thwart Chinese Spying Show More Quinn Norton is a writer and photographer who peripatetically covers net culture, copyright, computer security, intellectual property, body modification, medicine, and biotech. Read more by Quinn Norton Follow @quinnnorton on Twitter.

1 0