July 2018 - cypherpunks-legacy

Hackers target C-level execs and their families
by Udhay Shankar N 06 Jul '18

06 Jul '18

Hasn't this already been going on a while? I'm only surprised there hasn't been a big public incident yet. Udhay ><http://www.computerworld.com/action/article.do?command=viewArticleBasic&tax…>http://www.computerworld.com/action/article.do?command=viewArticleBasic&tax… > >By Jeremy Kirk >July 02, 2007 >IDG News Service > >Hackers appear to have stepped up their efforts over the past year to >trick corporate executives into downloading malicious software that can >steal company data, according to new data released today. > >MessageLabs Ltd., a security vendor that offers e-mail filtering >services to catch spam and malicious attachments, caught an average of >10 e-mails per day in May targeted at people in senior management >positions, up from just one a day during the previous year, said Mark >Sunner, chief security analyst. > >Those 10 e-mails are a tiny percentage of the 200 million e-mails that >MessageLabs scans every day, but the composition of those messages is >alarming, Sunner said. > >Many of the e-mails contained the name and title of the executive in the >subject line, as well as a malicious Microsoft Word document containing >executable code. The hackers are trying to trick the victims into >thinking the messages come from someone they know, in the hope that the >victim will willingly install, for example, a program that can record >keystrokes. > >MessageLabs won't reveal what companies have been targeted, but it has >contacted executives who have been names in the e-mails and discovered >that the family members of the executives have also received messages on >their own, noncorporate e-mail accounts, Sunner said. > >Those methods suggests that hackers may be researching victims and >culling data from social networking sites such as Linked In, MySpace or >Facebook, Sunner said. > >"If you really want to work out somebody's background ... you can >actually find out a lot," Sunner said. > >Tricking a relative into installing malicious code would offer the >hacker another way to collect sensitive data if an executive decides to >do some work on a home computer, Sunner said. > >In June, MessageLabs picked up more than 500 of these targeted messages, >with some 30% aimed at chief investment officers, a position that can >include handling mergers and acquisitions. Other positions targeted >include directors of research and development, company presidents, CEOs, >chief information officers and chief financial officers. > >Another danger is that the e-mails are often single messages sent to a >single person, rather than a mass spam run. When hackers send out >millions of messages, security companies often either update their >software or change their spam filters to trap the bad messages. > >But single messages have a higher chance of slipping through, although >Sunner said MessageLabs' filtering service catches the messages by >analyzing the e-mail's attachment and determining whether it is >potentially harmful. Other security companies catch malware by updating >their software with indicators, or signatures, to detect harmful code or >block code from running based on what it does on a computer, a >technology called behavioral detection. > >Tracing where the messages come from is difficult because the sender's >name is always fake, Sunner said. The IP addresses from which the >messages were sent indicate that the computers are located around the >world. Hackers often use networks of computers they already control, >called botnets, to send e-mails. > >"Certainly, people need to raise the level of vigilance," Sunner said. -- ((Udhay Shankar N)) ((udhay @ pobox.com)) ((www.digeratus.com)) --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Traffic analysis reveals spy satellite details
by Udhay Shankar N 06 Jul '18

06 Jul '18

http://www.nytimes.com/2008/02/05/science/space/05spotters.html When the government announced last month that a top-secret spy satellite would, in the next few months, come falling out of the sky, American officials said there was little risk to people because satellites fall out of orbit fairly frequently and much of the planet is covered by oceans. But they said precious little about the satellite itself. Such information came instead from Ted Molczan, a hobbyist who tracks satellites from his apartment balcony in Toronto, and fellow satellite spotters around the world. They have grudgingly become accustomed to being seen as b propeller-headed geeksb who b poke their finger in the eyeb of the governmentbs satellite spymasters, Mr. Molczan said, taking no offense. b I have a sense of humor,b he said. Mr. Molczan, a private energy conservation consultant, is the best known of the satellite spotters who, needing little more than a pair of binoculars, a stop watch and star charts, uncover some of the deepest of the governmentbs expensive secrets and share them on the Internet. <snip> -- ((Udhay Shankar N)) ((udhay @ pobox.com)) ((www.digeratus.com)) --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Hackers target C-level execs and their families
by Udhay Shankar N 06 Jul '18

06 Jul '18

Hasn't this already been going on a while? I'm only surprised there hasn't been a big public incident yet. Udhay ><http://www.computerworld.com/action/article.do?command=viewArticleBasic&tax…>http://www.computerworld.com/action/article.do?command=viewArticleBasic&tax… > >By Jeremy Kirk >July 02, 2007 >IDG News Service > >Hackers appear to have stepped up their efforts over the past year to >trick corporate executives into downloading malicious software that can >steal company data, according to new data released today. > >MessageLabs Ltd., a security vendor that offers e-mail filtering >services to catch spam and malicious attachments, caught an average of >10 e-mails per day in May targeted at people in senior management >positions, up from just one a day during the previous year, said Mark >Sunner, chief security analyst. > >Those 10 e-mails are a tiny percentage of the 200 million e-mails that >MessageLabs scans every day, but the composition of those messages is >alarming, Sunner said. > >Many of the e-mails contained the name and title of the executive in the >subject line, as well as a malicious Microsoft Word document containing >executable code. The hackers are trying to trick the victims into >thinking the messages come from someone they know, in the hope that the >victim will willingly install, for example, a program that can record >keystrokes. > >MessageLabs won't reveal what companies have been targeted, but it has >contacted executives who have been names in the e-mails and discovered >that the family members of the executives have also received messages on >their own, noncorporate e-mail accounts, Sunner said. > >Those methods suggests that hackers may be researching victims and >culling data from social networking sites such as Linked In, MySpace or >Facebook, Sunner said. > >"If you really want to work out somebody's background ... you can >actually find out a lot," Sunner said. > >Tricking a relative into installing malicious code would offer the >hacker another way to collect sensitive data if an executive decides to >do some work on a home computer, Sunner said. > >In June, MessageLabs picked up more than 500 of these targeted messages, >with some 30% aimed at chief investment officers, a position that can >include handling mergers and acquisitions. Other positions targeted >include directors of research and development, company presidents, CEOs, >chief information officers and chief financial officers. > >Another danger is that the e-mails are often single messages sent to a >single person, rather than a mass spam run. When hackers send out >millions of messages, security companies often either update their >software or change their spam filters to trap the bad messages. > >But single messages have a higher chance of slipping through, although >Sunner said MessageLabs' filtering service catches the messages by >analyzing the e-mail's attachment and determining whether it is >potentially harmful. Other security companies catch malware by updating >their software with indicators, or signatures, to detect harmful code or >block code from running based on what it does on a computer, a >technology called behavioral detection. > >Tracing where the messages come from is difficult because the sender's >name is always fake, Sunner said. The IP addresses from which the >messages were sent indicate that the computers are located around the >world. Hackers often use networks of computers they already control, >called botnets, to send e-mails. > >"Certainly, people need to raise the level of vigilance," Sunner said. -- ((Udhay Shankar N)) ((udhay @ pobox.com)) ((www.digeratus.com)) --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: EFF no longer funding Tor (was Re: ATTN: for-profit Tor
by Roger Dingledine 06 Jul '18

06 Jul '18

operators) User-Agent: Mutt/1.5.9i Reply-To: or-talk(a)freehaven.net On Fri, Dec 23, 2005 at 03:04:42PM -0600, clifnor(a)warpmail.net wrote: > I wish to donate but have had problems with PayPal in the past. Is there > another option--e.g. an address where I can send a check or money order? Good idea. I've added a few more paragraphs to http://tor.eff.org/donate.html.en with details on this, plus other options. Let me know if I've left out anything else that's important. :) Thanks! --Roger ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[liberationtech] Free Network Foundation deploys mesh network for Occupy Austin; Contact Conference
by Moritz Bartl 06 Jul '18

06 Jul '18

For more info on the mentioned Freedom Tower, see http://freenetworkfoundation.org/?p=403 even more technical: http://thefnf.org:9001/ro/r.lug5aGlhVVAlXMIm Basically, it is like a wireless Access Point for mesh network routers, such as the FreedomBox, that serves as a gateway to the Internet. Transparency info: I am a research fellow of the FNF. -------- Original Message -------- Subject: [FNF] Contact Tomorrow Date: Wed, 19 Oct 2011 17:04:30 -0400 From: Isaac Wilder <isaac(a)freenetworkmovement.org> To: discuss(a)freenetworkfoundation.org Hello All, Isaac here. Just wanted to give you a brief update on the activity of the Foundation in recent days, and fill you in on the plans for tomorrow. -*- Update -*- In the last two weeks, we have built and shipped two FreedomTowers - one for Occupy Austin, and one for the FNF itself. The FNF Tower is currently deployed in Liberty Park. We also have installed the initial FreedomLink in Kansas City, and built an almost hot-swappable backup facility in Austin. Four more towers are currently in production - LA, Miami, Chicago, and New York. All are funded by General Assemblies of the Occupation. Many more assemblies are working towards the goal of funding towers. We are comitted to making sure that assemblies across the world can communicate and coordinate with one another via secure, encrypted channels. We have put together three tower operations squads - what we call West, Central, and East. West is based in LA, Central is in Austin, and East is in New York. These teams will build and ship towers, along with serving as first-level support for towers in operation. The FNF core will serve as second-level support. -*- Tomorrow -*- Tomorrow is the Contact Conference. This foundation was born of a mailing list surrounding the Contact event. Tomorrow has been a key date for as long as the FNF has been around. We will be participating in the Bazaar, and competing for one of three $10,000 Contact Prizes. It has long been our aspiration to bootstrap this foundation into a realer operational mode using the money and recognition that would come with a win at Contact. I will be on the floor with the FNF Tower, talking my head off. I'm feeling the heat, but also feeling ready, sanguine, calm. I guess this is just to say: wish me luck tomorrow. It's a big day. shoot me an email if you'd like to join one of the tower ops teams, or contribute in some other way, or just say 'hey'. take care, imw _______________________________________________ Discuss mailing list Discuss(a)freenetworkfoundation.org http://freenetworkfoundation.org/mailman/listinfo/discuss_freenetworkfounda… _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Drones are not storytellers or why Syrians need better storytelling was Re: Pirate Bay turns to drones
by The Doctor 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 03/23/2012 01:51 PM, Isaac Wilder wrote: > At 30km up, not much good for recon, but definitely able to > support communications. LOS to a 400+ km radius. Oil companies and > the Air Force have been deploying this stuff for years. So have ham radio operators, and in the past few years hackerspaces have gotten into the act as well. APRS traffic from the HacDC Spaceblimp was picked up several hundred miles away before packets finally hit the APRS network. - -- The Doctor [412/724/301/703] PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F DD89 3BD8 FF2B 807B 17C1 WWW: https://drwho.virtadpt.net/ SEARCH PARTY ATTACKED BY MONSTER -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9wqLoACgkQO9j/K4B7F8FOfwCghGw3VqeZJ9OMBbKQfavWKsU7 eckAoIWCAGy8ye3H5cvzIf5Y9C5GD4Bh =5dvQ -----END PGP SIGNATURE----- _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: EFF no longer funding Tor (was Re: ATTN: for-profit Tor
by Roger Dingledine 06 Jul '18

06 Jul '18

operators) User-Agent: Mutt/1.5.9i Reply-To: or-talk(a)freehaven.net On Fri, Dec 23, 2005 at 03:04:42PM -0600, clifnor(a)warpmail.net wrote: > I wish to donate but have had problems with PayPal in the past. Is there > another option--e.g. an address where I can send a check or money order? Good idea. I've added a few more paragraphs to http://tor.eff.org/donate.html.en with details on this, plus other options. Let me know if I've left out anything else that's important. :) Thanks! --Roger ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[liberationtech] Free Network Foundation deploys mesh network for Occupy Austin; Contact Conference
by Moritz Bartl 06 Jul '18

06 Jul '18

For more info on the mentioned Freedom Tower, see http://freenetworkfoundation.org/?p=403 even more technical: http://thefnf.org:9001/ro/r.lug5aGlhVVAlXMIm Basically, it is like a wireless Access Point for mesh network routers, such as the FreedomBox, that serves as a gateway to the Internet. Transparency info: I am a research fellow of the FNF. -------- Original Message -------- Subject: [FNF] Contact Tomorrow Date: Wed, 19 Oct 2011 17:04:30 -0400 From: Isaac Wilder <isaac(a)freenetworkmovement.org> To: discuss(a)freenetworkfoundation.org Hello All, Isaac here. Just wanted to give you a brief update on the activity of the Foundation in recent days, and fill you in on the plans for tomorrow. -*- Update -*- In the last two weeks, we have built and shipped two FreedomTowers - one for Occupy Austin, and one for the FNF itself. The FNF Tower is currently deployed in Liberty Park. We also have installed the initial FreedomLink in Kansas City, and built an almost hot-swappable backup facility in Austin. Four more towers are currently in production - LA, Miami, Chicago, and New York. All are funded by General Assemblies of the Occupation. Many more assemblies are working towards the goal of funding towers. We are comitted to making sure that assemblies across the world can communicate and coordinate with one another via secure, encrypted channels. We have put together three tower operations squads - what we call West, Central, and East. West is based in LA, Central is in Austin, and East is in New York. These teams will build and ship towers, along with serving as first-level support for towers in operation. The FNF core will serve as second-level support. -*- Tomorrow -*- Tomorrow is the Contact Conference. This foundation was born of a mailing list surrounding the Contact event. Tomorrow has been a key date for as long as the FNF has been around. We will be participating in the Bazaar, and competing for one of three $10,000 Contact Prizes. It has long been our aspiration to bootstrap this foundation into a realer operational mode using the money and recognition that would come with a win at Contact. I will be on the floor with the FNF Tower, talking my head off. I'm feeling the heat, but also feeling ready, sanguine, calm. I guess this is just to say: wish me luck tomorrow. It's a big day. shoot me an email if you'd like to join one of the tower ops teams, or contribute in some other way, or just say 'hey'. take care, imw _______________________________________________ Discuss mailing list Discuss(a)freenetworkfoundation.org http://freenetworkfoundation.org/mailman/listinfo/discuss_freenetworkfounda… _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Drones are not storytellers or why Syrians need better storytelling was Re: Pirate Bay turns to drones
by The Doctor 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 03/23/2012 01:51 PM, Isaac Wilder wrote: > At 30km up, not much good for recon, but definitely able to > support communications. LOS to a 400+ km radius. Oil companies and > the Air Force have been deploying this stuff for years. So have ham radio operators, and in the past few years hackerspaces have gotten into the act as well. APRS traffic from the HacDC Spaceblimp was picked up several hundred miles away before packets finally hit the APRS network. - -- The Doctor [412/724/301/703] PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F DD89 3BD8 FF2B 807B 17C1 WWW: https://drwho.virtadpt.net/ SEARCH PARTY ATTACKED BY MONSTER -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9wqLoACgkQO9j/K4B7F8FOfwCghGw3VqeZJ9OMBbKQfavWKsU7 eckAoIWCAGy8ye3H5cvzIf5Y9C5GD4Bh =5dvQ -----END PGP SIGNATURE----- _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

DHS chief contemplating proactive cyber attacks (Steve Johnson)
by Richard Forno 06 Jul '18

06 Jul '18

Begin forwarded message (via Dave Farber's IP distribution): Steve Johnson, Homeland Security chief contemplating proactive cyber attacks *San Jose Mercury News*, 16 Apr 2012 sjohnson(a)mercurynews.com, Posted: 04/16/2012 07:35:38 PM PDT Updated: 04/16/2012 09:08:36 PM PDT http://www.mercurynews.com/rss/ci_20410915 Homeland Security Secretary Janet Napolitano said Monday she would consider having tech companies participate with the government in "proactive" efforts to combat hackers based in foreign countries. Napolitano, who made the comments during a meeting at the *San Jose Mercury News* with the editorial board and reporters, declined to say what steps corporations and federal agencies might take against foreign cybercrooks, who have been blamed for numerous computerized incursions against the United States. She made the remarks in response to a question, and emphasized the idea is merely one she would consider and that no decisions have been made. In discussing the private partnerships she is promoting to combat cyberattacks, Napolitano was asked if instead of just taking defensive measures, the government and companies should be launching proactive counterattacks against foreign-based culprits. "Should there be some aspect that is in a way proactive instead of reactive?" she responded, and then answered her own question with "yes." She added, "it is not something that we haven't been thinking about," noting someone else had raised the subject with her earlier Monday. However, Napolitano said some restrictions might have to be placed on businesses participating in such cyber activities because "what you are doing is authorizing a private entity to do what might otherwise be construed as an attack on another entity." [Long item truncated for RISKS. PGN] ------------------------------

1 0