July 2018 - cypherpunks-legacy

[WIKILEAKS] WikiLeaks wins Amnesty 2009 New Media Award
by Wikileaks Press Office 06 Jul '18

06 Jul '18

http://wikileaks.org/wiki/WikiLeaks_wins_Amnesty_International_2009_Media_A… WIKILEAKS PRESS RELEASE - For Immediate Release Wednesday June 3, 2009 "WikiLeaks wins Amnesty International 2009 Media Award" WikiLeaks editor Julian Assange has won the Amnesty 2009 New Media Award for work exposing hundreds of recent extrajudicial assassinations in Kenya. The award was presented last night at a ceremony in London. Four people associated with investigating the killings have themselves been murdered, including noted human rights lawyers Oscar Kingara and John Paul Oulo, who were assassinated driving to an afternoon meeting at the Kenyan National Commission on Human Rights in March this year. WikiLeaks first ran its first story on the killings for a week on its fronpage, beginning November 1, 2008. Eventually the story was picked up by print media, starting with Jon Swain from the Sunday Times. Then, earlier this year the United Nations sent a team to Nairobi, lead by Prof. Alston, to investigate. According to AFP, earlier today a session of the U.N. Human Rights Council was told by the U.N Special Rapporteur on extrajudical killings, Prof. Philip Alston, that Kenya's police were a "major stumbling block" for probes into the killings. Prof. Alston also told that 47 member Human Rights Council on Wednesday that "Attacks on those who document abuses do not absolve a government of its obligation to investigate, prosecute and punish those responsible for extrajudicial executions,". In accepting the award, Mr. Assange stated "It is a reflection of the courage and strength of Kenyan civil society that this injustice was documented. Through the tremendous work of organizations such as the Oscar foundation, the KNHCR, Mars Group Kenya and others we had the primary support we needed to expose these murders to the world. I know that they will not rest, and we will not rest, until justice is done." Source documents * Murder in Nairobi: Wikileaks related human rights lawyers assassinated * Kenya: The Cry of Blood - Report on Extra-Judicial Killings and Disappearances, Sep 2008 * Kenyan assassinations: slain human rights lawyer Oscar Kamau Kingara letter to the International Criminal Court, 1 Jan 2009 * Oscar Foundation - assassinated Kamau Kingara final report - The Veil of Impunity, 9 Oct 2008 * Oscar Foundation letter to Minister for Internal Security over extra-judicial killings in Kenya, 14 Oct 2008 * US Ambassador to Internal Security head over Kenyan assassination Selected reportage * Cooperate with FBI, Raila tells Kenya police * Demonstrators accuse police over disappearance of kin * International Criminal Court will handle politicians but who will tame police * Raila now attacks security agencies * Two Kenyan rights activists shot dead * UN group to probe poll chaos deaths * UN probe indicts Kenya on police killings * UN urges probe into Kenya murders http://wikileaks.org/wiki/WikiLeaks_wins_Amnesty_International_2009_Media_A… +-------------------------------------------------- | Why you receive this mail and what to do with it: | | You are receiving this mail because you were invited to | the Wikileaks Press Release list run by the transparency group Sunshine Press. | | Releases ensure you are aware, before the rest of the world, | of significant geopolitical and other disclosures released | by Wikileaks, an international platform for the first release of | of classified, confidential or censored materials of political, | diplomatic, ethical or historical interest. | | We rely on you to distribute the content of this mail to your | community, industry, press and regulators, to defend us in your | country and to invite people of integrity and commitment via | via https://lists.riseup.net/www/subscribe/wl-press | | Our materials range from secret Guantanamo documents to political | assassinations to confidential reports of children's hospital | corruption, and have spawned tens of thousands of press articles, | many reforms and changed electoral outcomes. | | Releases average one per week but can be higher or lower depending on | events. You can easily set the frequency to monthly or change your | subscription via https://lists.riseup.net/www/sendpasswd/ | | If you know people that have access to sensitive documents of public | interest, tell them about us. We have an unbroken record of protecting | sensitive sources and defeating censorship attacks from all corners of the globe. | See https://secure.wikileaks.org/wiki/Wikileaks:Submissions | | If you are about to release an investigative report or article, we can release the | underlaying source material concurrently to substantiate the allegations, | draw attention away from the true source, deflect legal or censorship | attacks and promote secondary investigations and public awareness. | | Live bank-grade encrypted chat to the office is available via | https://secure.wikileaks.org/chat/irc2.cgi (multiple languages spoken) | | Inquiries for speaking engagements, comment, interventions, | investigations, source-protection and censorship consultations | may be addressed to http://wikileaks.org/wiki/Wikileaks:Contact | | If you are serious about analysis, translation, | legal, coding, network, financial or other contributions, please contact | us via: http://wikileaks.org/wiki/Wikileaks:Contact | | See http://wikileaks.org for all other information and | https://secure.wikileaks.org for secure access. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [OT] Republicons resume attacks on privacy
by zzretro999＠email2me.net 06 Jul '18

06 Jul '18

-----Original Message----- From: grarpamp <grarpamp(a)gmail.com> To: or-talk(a)freehaven.net Sent: Thu, Jan 27, 2011 2:52 pm Subject: Re: [OT] Republicons resume attacks on privacy > The Republicants are back to pushing data retention legislation. :-( > http://news.cnet.com/8301-31921_3-20029393-281.html http://www.computerworld.com/s/article/9206379/DOJ_seeks_mandatory_data_ret… http://yro.slashdot.org/story/11/01/26/0418200/DOJ-Seeks-Mandatory-Data-Ret… http://yro.slashdot.org/story/11/01/27/0320209/Swedish-ISPs-To-Thwart-EU-Da… Yeah. And two years is ridiculous. Back in the days of source spoofing, internet miscreants were tracked for fun through multiple providers and countries, it took just a few hours if the right people were awake. Everyone had some form of authentication or location data. And pretty much everyone kept it for about a month. The data and subpoenas are there for any real 'exigent' purpose, primarily because providers need it for their own internal business purposes. LEO's just need to get off their duff, and if it's such small potatoes that they don't, well then, by definition, who cares. > I'd rather twist this into free promotion for TOR instead of hoping that > some random goverment will /not/ do something like this. I'd rather people keep writing congresscritters to keep it from happening, for all the good reasons discussed elsewhere on the net. Passage of such a law will promote anonymity networks in its own right. While you're giving in, might as write the draft for them that bans anonymity networks, because that will be next. Torproject did a nice job with their new look and the tor users page. And I know it's politically incorrect for them and hazardous to the project, but in addition to mentioning China all over the site as if it's the only twisted place in the world, the US, EU, etc should get some lip service too by adding another section for normal people that says 'irresponsible governments'... "They protect their communications from irresponsible corporations." Hollow: (intended) In case anyone has forgotten, legislation was passed nearly eliminating the restrictions on cor-perps from spending as much as they wish on political candidates. So, your Congresscritters will soon be (they already have been for decades), the Senator from IBM, DOW, etc. They "no longer" represent you, the citizen. Writing them is like voting. It doesn't work in case you have forgotten the 2000 Pez-dispenser election. It really isn't Republicons or Republicants. OR the Demons from the other party. It's really AmeriCANTS. The only ones really taking any action, who are motivated to take action, are those "taking AmeriCANTS actions away!" Most AmeriCANTS are doing nothing but talking or not talking. Real action is what is needed and that isn't by trying to find new ways and places to hide. Those are running out. Running faster is going nowhere also. Running further is coming to the end. In 2001, I believe they shut the internet down completely in Germany, so Tor wouldn't work anyway. What would is fighting back. Each and every day, in any way each person can find. Find something 'they' can do! Later is too late. Oh, sorry, this is about Tor. Shucks. *********************************************************************** To unsubscribe, send an e-mail to majordomo(a)torproject.org with unsubscribe or-talk in the body. http://archives.seul.org/or/talk/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [OT] Republicons resume attacks on privacy
by zzretro999＠email2me.net 06 Jul '18

06 Jul '18

-----Original Message----- From: grarpamp <grarpamp(a)gmail.com> To: or-talk(a)freehaven.net Sent: Thu, Jan 27, 2011 2:52 pm Subject: Re: [OT] Republicons resume attacks on privacy > The Republicants are back to pushing data retention legislation. :-( > http://news.cnet.com/8301-31921_3-20029393-281.html http://www.computerworld.com/s/article/9206379/DOJ_seeks_mandatory_data_ret… http://yro.slashdot.org/story/11/01/26/0418200/DOJ-Seeks-Mandatory-Data-Ret… http://yro.slashdot.org/story/11/01/27/0320209/Swedish-ISPs-To-Thwart-EU-Da… Yeah. And two years is ridiculous. Back in the days of source spoofing, internet miscreants were tracked for fun through multiple providers and countries, it took just a few hours if the right people were awake. Everyone had some form of authentication or location data. And pretty much everyone kept it for about a month. The data and subpoenas are there for any real 'exigent' purpose, primarily because providers need it for their own internal business purposes. LEO's just need to get off their duff, and if it's such small potatoes that they don't, well then, by definition, who cares. > I'd rather twist this into free promotion for TOR instead of hoping that > some random goverment will /not/ do something like this. I'd rather people keep writing congresscritters to keep it from happening, for all the good reasons discussed elsewhere on the net. Passage of such a law will promote anonymity networks in its own right. While you're giving in, might as write the draft for them that bans anonymity networks, because that will be next. Torproject did a nice job with their new look and the tor users page. And I know it's politically incorrect for them and hazardous to the project, but in addition to mentioning China all over the site as if it's the only twisted place in the world, the US, EU, etc should get some lip service too by adding another section for normal people that says 'irresponsible governments'... "They protect their communications from irresponsible corporations." Hollow: (intended) In case anyone has forgotten, legislation was passed nearly eliminating the restrictions on cor-perps from spending as much as they wish on political candidates. So, your Congresscritters will soon be (they already have been for decades), the Senator from IBM, DOW, etc. They "no longer" represent you, the citizen. Writing them is like voting. It doesn't work in case you have forgotten the 2000 Pez-dispenser election. It really isn't Republicons or Republicants. OR the Demons from the other party. It's really AmeriCANTS. The only ones really taking any action, who are motivated to take action, are those "taking AmeriCANTS actions away!" Most AmeriCANTS are doing nothing but talking or not talking. Real action is what is needed and that isn't by trying to find new ways and places to hide. Those are running out. Running faster is going nowhere also. Running further is coming to the end. In 2001, I believe they shut the internet down completely in Germany, so Tor wouldn't work anyway. What would is fighting back. Each and every day, in any way each person can find. Find something 'they' can do! Later is too late. Oh, sorry, this is about Tor. Shucks. *********************************************************************** To unsubscribe, send an e-mail to majordomo(a)torproject.org with unsubscribe or-talk in the body. http://archives.seul.org/or/talk/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

For IP: Tracking devices required for hassle-free travel?
by Brett Glass 06 Jul '18

06 Jul '18

Dave: I'm in Manhattan this morning, where -- due to the Federal government's extremely vague claims of increased terrorist risk -- the police are out in force during the morning commute. They're diverting traffic from some normal commuter routes (such as the upper deck of the Queensboro Bridge) and are requiring vehicles to slow down at checkpoints along others (such as the approach to the Queens-Midtown Tunnel). We've seen such checkpoints at Denver International Airport in the past, and have observed that they appear to have little effect other than slowing traffic and inconveniencing travelers. What they could possibly expect to be able to detect, during a second's glance at a moving vehicle, is unclear. What's particularly disturbing about the measures we saw today, however, is that authorities appeared to be pulling over, and singling out for more thorough inspection, vehicles which were not equipped with New York's electronic "E-Z Pass" -- an electronic device which allows vehicle owners to be charged automatically for tolls and parking. Your Interesting People list has, in the past, featured articles describing the increasingly widespread use of E-Z Pass records to track unfaithful spouses, employees, etc. We've seen examples of this sort of invasive "mission creep" before -- in particular, in the increasingly widespread use of the Social Security number for identification purposes of all kinds. But this is something new: It appears that now, when the Federal Government declares an "orange" terror alert, an electronic tracking device has become a requirement for hassle-free travel. One can only wonder if this is the start of an era in which one is detained, harassed, or otherwise branded as a suspected terrorist if at any time one pays via anonymous cash or is unwilling to have his or her movements continually traced and recorded. --Brett Glass [Just like the lack of a frequent flyer number will get you looked at hard at airports djf] ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 0.97c removed an attachment of type application/pgp-signature]

1 0

[IP] Tracking devices required for hassle-free travel?
by Dave Farber 06 Jul '18

06 Jul '18

1 0

Re: RPOW - Reusable Proofs of Work
by hal＠finney.org 06 Jul '18

06 Jul '18

A couple of quick responses to the questions on RPOW, as I am at Crypto this week. Taral asked about the attestation. It is based on a root key published in Appendix C of IBM's "IBM 4758 PCI Cryptographic Coprocessor Custom Software Interface Reference", available from http://www.ibm.com/security/cryptocards/html/library.shtml. It is also published on IBM's web page at http://www.ibm.com/security/cryptocards/html/faqcopvalidity.shtml This tells you that the attestation refers to a valid IBM 4758. Further, the attestation contains within it both a hash of the RPOW program, and a set of keys generated by that program. Using the methods described on the rpow.net web site, it is possible to take the RPOW source code and generate a hash which matches that reported in the attestation. This tells you that you have access to the actual source code running on the RPOW server. By studying the source you can confirm that the program never exposes its private keys or allows them to leave the board. This tells you that if you send a message encrypted to the RPOW communications key and get a meaningful response (messages are protected with HMAC), you are talking to the program described in the attestation. Lynn Wheeler mentions the IBM 4758 break by Mike Bond and Richard Clayton described at http://www.cl.cam.ac.uk/~rnc1/descrack/. This was not actually a break of the 4758 but an exploit of a cryptographic weakness in the application running on the board, which was IBM's CCA support software. RPOW does not use CCA and is not vulnerable to that attack, and IBM has since fixed the CCA. Of course it is possible that RPOW may have vulnerabilities and errors of its own, being my own work and far from perfect. I welcome review and comment on the RPOW source code which is open source and available from rpow.net. Hal Finney --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

with penetration. Some of the more common aversive stimuli are traumatic sexual
by cypherpunks＠algebra.com 06 Jul '18

06 Jul '18

1 0

[Politech] Justice Department's new data retention target: image-sharing sites
by Declan McCullagh 06 Jul '18

06 Jul '18

Once upon a time, the concept of mandatory data retention seemed almost reasonable. What's the big difference between an ISP keeping data on users for a year instead of six months? Rep. Diana DeGette & co spent a large portion of last year talking about babies being raped thanks to the Internet and how that could be prevented by data retention -- and if they're right, who could be against the idea? Well, it turns out that the Bush administration wants far more than just that. In a private meeting with industry groups last week, Assistant Attorney General Rachel Brand and other officials said they wanted to target Web sites that let users upload images or video: http://news.com.com/2100-1028_3-6163679.html This is consistent with a Politech post from January, in which I said that search engines, domain registrars, and Web hosting services have also been talked about as data retention targets: http://www.politechbot.com/2007/01/24/not-just-isps/ Unfortunately, we don't know exactly what the Justice Department has in mind. (A real problem is that discussions on this topic have been both vague and secretive. No language has been circulated, at least as of last week, so we can only speculate.) -Declan _______________________________________________ Politech mailing list Archived at http://www.politechbot.com/ Moderated by Declan McCullagh (http://www.mccullagh.org/) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[Politech] Justice Department's new data retention target: image-sharing sites
by Declan McCullagh 06 Jul '18

06 Jul '18

Once upon a time, the concept of mandatory data retention seemed almost reasonable. What's the big difference between an ISP keeping data on users for a year instead of six months? Rep. Diana DeGette & co spent a large portion of last year talking about babies being raped thanks to the Internet and how that could be prevented by data retention -- and if they're right, who could be against the idea? Well, it turns out that the Bush administration wants far more than just that. In a private meeting with industry groups last week, Assistant Attorney General Rachel Brand and other officials said they wanted to target Web sites that let users upload images or video: http://news.com.com/2100-1028_3-6163679.html This is consistent with a Politech post from January, in which I said that search engines, domain registrars, and Web hosting services have also been talked about as data retention targets: http://www.politechbot.com/2007/01/24/not-just-isps/ Unfortunately, we don't know exactly what the Justice Department has in mind. (A real problem is that discussions on this topic have been both vague and secretive. No language has been circulated, at least as of last week, so we can only speculate.) -Declan _______________________________________________ Politech mailing list Archived at http://www.politechbot.com/ Moderated by Declan McCullagh (http://www.mccullagh.org/) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

Re: [liberationtech] Google Hangout the new, better skype? Was Re: Skype redux
by liberationtech＠lewman.us 06 Jul '18

06 Jul '18

On Fri, Dec 21, 2012 at 09:03:02AM -0800, brianc(a)smallworldnews.tv wrote 5.5K bytes in 0 lines about: : So I guess I'd say, who is going to fund a competitor to skype built on : jitsi? Without a. Convenient easy to use GUI b. Sexy advocates and adopters : and c. A marketing plan you aren't going to compete with Skype, Google : Hangout, etc. My guess would be the people behind jitsi, http://bluejimp.com/ and their partners, https://jitsi.org/index.php/Main/Partners ippi.fr worked pretty well, until they demanded a copy of my passport to continue service. : If security and privacy experts and developers are serious about broad : adoption of their tools and not just building a closed club of : cryptoexperts shouting "fire!" We have to work this out. I'm pretty busy Conversely, as I continue to work with global law enforcement, a shocking amount of crime still happens over the public telephone network. Even with its lack of encryption, centralized data collection, and lawful intercept, criminal organizations are still successfully coordinating, planning, and growing over this 100+ year old technology and networks. And for all of the fancy tools, analysis, and skills, law enforcement is still one step behind the criminals simply using the public phone networks. It's the 1% of criminals which use things like skype, tor, cryptocat, i2p, google hangouts, etc. And even then, they screw up and get caught because their ego grows larger than their skills. And to take a super-unpopular stance, empirical evidence says use of skype isn't the problem. Take Syria as an example, the problem is OSX and Windows on the laptops because that's what the Syrian state malware attacks. From a resource perspective, the Assad regime is being economically smart. Rather than trying to attack some cryptosystem and glean data from traffic analysis, just attack the end user and get all the data before it enters the cryptosystem. This is likely the same analysis the German's used. Rather than trying to crack skype, they got state-sponsored malware to crack the operating system and get the data before it enters skype. Vietnam approached the skype-problem by using parabolic microphones outside the houses of suspected activists. Solving the analog problem (voice, keystroke sound analysis, electrical grid background noise, etc) and user security weaknesses ("Oh look, an attachment! Let's load it up!") is probably a better place for solutions than yet another crypto-system. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 -- Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0