July 2018 - cypherpunks-legacy

[IP] Surveillance UK: why this revolution is only the start
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

[Piraten Bayern Intern] Pirate Party International (PPI) coreteam founded
by Thilo Schumann 06 Jul '18

06 Jul '18

Ahoi, Als kleine Randnotiz zur Weiterverbreitung. Gru_ Thilo --- * Announcement for immediate release * * Pirate Party International (PPI) coreteam founded * We are happy to announce that in succession of PPI coordinator Andrew Norton we founded a team of 6 persons called "PPI coreteam". Those 6 people are namely Samir Allioui / Coretx from PP-NL (co-presidency) Patrick Mdchler / Valio from PP-CH (co-presidency) Laurent Le Besnerais / Cwicket from PP-FR Ralph Hinterleitner / Pertain from PP-DE and from PP-AT Thilo Schumann / Pingu from PP-DE David Xanatos / DavidXanatos from PP-AT As a sidenote: We are currently looking to support our team by a spanish and a portuguese speaking person. Please contact us in case of interest. On August 18th we organized an IRC meeting to discuss the organization of the team and the immediate tasks we want to tackle (decision summary http://lists.pirateweb.net/pipermail/ pp.international.general/2009-August/003948.html). Once the coreteam has finished laying down an improved foundation and infrastructure of a strong and firm PPI, we would like to see one member of each party having the same democratic rights in defining the lead of PPI. Until that time, we will avoid speaking out political issues, and focus on infrastructure, collaboration and the sharing of resources. We look forward to the future of our international ship and hope to find good support in our crew, namely all pirate party members around the globe. :) with pirately greetings Coretx & Valio _______________________________________________ Intern mailing list Intern(a)lists.piratenpartei-bayern.de http://www.piratenpartei-bayern.de/mailman/listinfo/intern ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [i2p] I2P vs. Tor
by Matthew P. Cashdollar 06 Jul '18

06 Jul '18

Daniel Burton wrote: >I was wondering if someone in the know could explain the principal >differences between I2P and Tor to me, in both maturity level and >connection methodology. http://www.i2p.net/how_networkcomparisons (Although I find it hard to imagine how Java rather than C is a /benefit/ :) _______________________________________________ i2p mailing list i2p(a)i2p.net http://i2p.dnsalias.net/mailman/listinfo/i2p ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

Re: [roy@rant-central.com: Re: [arma@mit.edu: Re: Wikipedia & Tor]]
by cyphrpunk 06 Jul '18

06 Jul '18

One of the problems with the idea of a pseudonym service distinguishing between "good" and 'bad" users is that it has no way on its own of telling the difference. The service manages pseudonyms, which are intended to be used out on the web in some way. But the service can't tell if people are playing nicely or not. The only way this could happen is if the service receives *complaints*. This is the only feedback mechanism possible. I gather that Tor does in fact send out complaints about people who misbehave. Perhaps blog services do so as well. One problem is that these complaints generally don't arrive in real time. It takes time for a human being to notice that some vandalism has occured and register a complaint. If the pseudonym service is going to be able to respond, it has to know which pseudonym was active at the time the bad actions occured. Jimmy Wales very accurately describes the problem with pseudonyms at the web-server level. If Wikipedia or blog comments require the use of pseudonyms, these can be linked after the fact. I am very sensitive to this problem myself. The implied solution is that the pseudonym service would maintain the pseudonyms, but would not reveal them to the web service. Rather, it would only provide a certificate that the pseudonym is currently in good standing, i.e. it has not received (too many) complaints. This implies that the pseudonym service must maintain a record of recently used pseudonyms, and have some way of mapping them to what the web services (which issue the complaints, services like Wikipedia) would have seen. This mapping might be by IP address, or if Wikipedia and other services are willing to do more, it could perhaps be an opaque identifier which the pseudonym service provided at the time the web service (Wikipedia) asked whether this pseudonym was a "good guy" or not. As a specific example, the pseudonym service might have replied, to a query from Wikipedia, "Yes, this user is a good guy, and the sequence number of this reply is #1493002." Then later if abuse occured, Wikipedia (or the blog service, or other victim of vandalism) comes back and said "we had a problem with the user who was certified with sequence number #1493002". The pseudonym server would map this back to the pseudonym in use at that time, and invalidate the pseudonym (or at least give it a bad mark, with enough such marks killing the nym). The main problems with this solution are first, it requires considerable manual work on the part of the pseudonym server, similar to the work necessary at an ISP to resolve complaints about users. It could be a full time job. And second, it requires custom software at Wikipedia and other web services that might be willing to work to implement such a solution. The second problem could be alleviated by the use of a related service, a web proxy that is only for "good" pseudonyms. The web proxy would provide transparent pass-through similar to anonymizer.com, but only for users who were able to provide the kind of certification described above, from the pseudonym server. In this way, the outgoing IP addresses belonging to the web proxy would be "good" from the POV of Wikipedia and other web services. Those services could continue to use IP blocking as one of their main tools for handling misuse, treating the web proxy service as being like an ISP. The web proxy service could be bundled with the pseudonym service, or they could exist independently. CP ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

Update: Torbutton 1.0.1
by Scott Squires 06 Jul '18

06 Jul '18

Announcing Torbutton 1.0.1 http://zargon.hobbesnet.org/~squires/torbutton/torbutton-1.0.1.xpi * bugfix: toolbar button tooltips now display the correct status * bugfix: set socks5 proxy to tor port (9050) instead of privoxy (8118) * bugfix: allow user to change proxy exclusion list ("no proxy for") * new: added compatibility with firefox 1.0 and 0.9 * new: use socks_remote_dns on firefox versions that have it * new: added update functionality through the extensions manager * new: added preference: display statusbar panel (yes/no) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[Piraten Bayern Intern] Pirate Party International (PPI) coreteam founded
by Thilo Schumann 06 Jul '18

06 Jul '18

Ahoi, Als kleine Randnotiz zur Weiterverbreitung. Gru_ Thilo --- * Announcement for immediate release * * Pirate Party International (PPI) coreteam founded * We are happy to announce that in succession of PPI coordinator Andrew Norton we founded a team of 6 persons called "PPI coreteam". Those 6 people are namely Samir Allioui / Coretx from PP-NL (co-presidency) Patrick Mdchler / Valio from PP-CH (co-presidency) Laurent Le Besnerais / Cwicket from PP-FR Ralph Hinterleitner / Pertain from PP-DE and from PP-AT Thilo Schumann / Pingu from PP-DE David Xanatos / DavidXanatos from PP-AT As a sidenote: We are currently looking to support our team by a spanish and a portuguese speaking person. Please contact us in case of interest. On August 18th we organized an IRC meeting to discuss the organization of the team and the immediate tasks we want to tackle (decision summary http://lists.pirateweb.net/pipermail/ pp.international.general/2009-August/003948.html). Once the coreteam has finished laying down an improved foundation and infrastructure of a strong and firm PPI, we would like to see one member of each party having the same democratic rights in defining the lead of PPI. Until that time, we will avoid speaking out political issues, and focus on infrastructure, collaboration and the sharing of resources. We look forward to the future of our international ship and hope to find good support in our crew, namely all pirate party members around the globe. :) with pirately greetings Coretx & Valio _______________________________________________ Intern mailing list Intern(a)lists.piratenpartei-bayern.de http://www.piratenpartei-bayern.de/mailman/listinfo/intern ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[tor-talk] US Senators Seek to Crackdown on Bitcoin
by Christopher A. Lindsey 06 Jul '18

06 Jul '18

>From the article as it applies to Tor: "Senators Charles Schumer (D, New York) and Joe Manchin (D, West Virginia) have written to Attorney General Eric Holder and the DEA asking that action be taken to crackdown on the Silk Road. Silk Road is an online exchange that deals in drugs and Bitcoins. Since the Bitcoin transactions are anonymous, and Silk Road is accessed through Tor, authorities have no way to track down users buying drugs." Original article here: http://www.maximumpc.com/article/news/us_senators_seek_crackdown_bitcoin A more verbose version here: http://www.rawstory.com/rs/2011/06/09/senators-call-for-crackdown-on-bitcoi… Since it appears they're going to be targeting a Hidden Service, it will be an interesting test of Tor's resilience given the resources available to the US government. Take care, Chris -- Christopher A. Lindsey <CLindsey(a)GarudaLLC.com> Garuda, LLC _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [i2p] I2P vs. Tor
by Matthew P. Cashdollar 06 Jul '18

06 Jul '18

Daniel Burton wrote: >I was wondering if someone in the know could explain the principal >differences between I2P and Tor to me, in both maturity level and >connection methodology. http://www.i2p.net/how_networkcomparisons (Although I find it hard to imagine how Java rather than C is a /benefit/ :) _______________________________________________ i2p mailing list i2p(a)i2p.net http://i2p.dnsalias.net/mailman/listinfo/i2p ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

Re: [roy@rant-central.com: Re: [arma@mit.edu: Re: Wikipedia & Tor]]
by cyphrpunk 06 Jul '18

06 Jul '18

One of the problems with the idea of a pseudonym service distinguishing between "good" and 'bad" users is that it has no way on its own of telling the difference. The service manages pseudonyms, which are intended to be used out on the web in some way. But the service can't tell if people are playing nicely or not. The only way this could happen is if the service receives *complaints*. This is the only feedback mechanism possible. I gather that Tor does in fact send out complaints about people who misbehave. Perhaps blog services do so as well. One problem is that these complaints generally don't arrive in real time. It takes time for a human being to notice that some vandalism has occured and register a complaint. If the pseudonym service is going to be able to respond, it has to know which pseudonym was active at the time the bad actions occured. Jimmy Wales very accurately describes the problem with pseudonyms at the web-server level. If Wikipedia or blog comments require the use of pseudonyms, these can be linked after the fact. I am very sensitive to this problem myself. The implied solution is that the pseudonym service would maintain the pseudonyms, but would not reveal them to the web service. Rather, it would only provide a certificate that the pseudonym is currently in good standing, i.e. it has not received (too many) complaints. This implies that the pseudonym service must maintain a record of recently used pseudonyms, and have some way of mapping them to what the web services (which issue the complaints, services like Wikipedia) would have seen. This mapping might be by IP address, or if Wikipedia and other services are willing to do more, it could perhaps be an opaque identifier which the pseudonym service provided at the time the web service (Wikipedia) asked whether this pseudonym was a "good guy" or not. As a specific example, the pseudonym service might have replied, to a query from Wikipedia, "Yes, this user is a good guy, and the sequence number of this reply is #1493002." Then later if abuse occured, Wikipedia (or the blog service, or other victim of vandalism) comes back and said "we had a problem with the user who was certified with sequence number #1493002". The pseudonym server would map this back to the pseudonym in use at that time, and invalidate the pseudonym (or at least give it a bad mark, with enough such marks killing the nym). The main problems with this solution are first, it requires considerable manual work on the part of the pseudonym server, similar to the work necessary at an ISP to resolve complaints about users. It could be a full time job. And second, it requires custom software at Wikipedia and other web services that might be willing to work to implement such a solution. The second problem could be alleviated by the use of a related service, a web proxy that is only for "good" pseudonyms. The web proxy would provide transparent pass-through similar to anonymizer.com, but only for users who were able to provide the kind of certification described above, from the pseudonym server. In this way, the outgoing IP addresses belonging to the web proxy would be "good" from the POV of Wikipedia and other web services. Those services could continue to use IP blocking as one of their main tools for handling misuse, treating the web proxy service as being like an ISP. The web proxy service could be bundled with the pseudonym service, or they could exist independently. CP ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

Update: Torbutton 1.0.1
by Scott Squires 06 Jul '18

06 Jul '18

Announcing Torbutton 1.0.1 http://zargon.hobbesnet.org/~squires/torbutton/torbutton-1.0.1.xpi * bugfix: toolbar button tooltips now display the correct status * bugfix: set socks5 proxy to tor port (9050) instead of privoxy (8118) * bugfix: allow user to change proxy exclusion list ("no proxy for") * new: added compatibility with firefox 1.0 and 0.9 * new: use socks_remote_dns on firefox versions that have it * new: added update functionality through the extensions manager * new: added preference: display statusbar panel (yes/no) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0