July 2018 - cypherpunks-legacy

Re: [tahoe-dev] tahoe-lafs 1.9.1 shipped in the next Debian stable
by Zooko Wilcox-O'Hearn 06 Jul '18

06 Jul '18

Dear Bertagaz: We're almost ready to release Tahoe-LAFS v1.9.2, and I wonder if it is okay to take a couple more days for extra testing or if we should hurry and finalize it so you can package it for Debian? We've fixed all but one of the issues that we intended to fix. You can see the issue tickets here: https://tahoe-lafs.org/trac/tahoe-lafs/milestone/1.9.2 The one serious issue that isn't fixed yet is https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1670# KeyError in mutable retrieve We know of a bug in the code (dict instead of tuple being returned from get_verinfo() of MDMFs), but we're not sure if that bug is causing that failure. There is no unit test currently demonstrating that failure. We prefer not to fix bugs when we don't have a unit test that goes from red to green by that fix, so if it won't make us miss the Debian deadline, I'd like to take a couple more days to figure out how to write a unit test of #1670. Then we'll find out if the dict-instead-of-tuple bug is causing #1670 or not. Also I'm doing an experiment of converting all of the existing unit tests from using SDMFs to using MDMFs as a way to find any bugs in MDMFs. So far I haven't found any more bugs in MDMFs that way. (Because there were already quite a few tests of MDMFs.) Also, it would be great to have some actual users try out 1.9.2 before we finalize it. Users! You can do this right now if you're willing to use darcs to fetch the source. This is actually painless -- you just acquire darcs (http://wiki.darcs.net/Binaries) and then you run darcs get --lazy https://tahoe-lafs.org/source/tahoe-lafs/1.9.2 Then you never have to touch darcs again. That command takes about 60 seconds to run. Oh, but it might fail if the darcs binary you got is incapable of handling HTTPS. In that case, you give up and complain to us and we'll post some tar.gz files for you to try out... Regards, Zooko _______________________________________________ tahoe-dev mailing list tahoe-dev(a)tahoe-lafs.org https://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-dev ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[tor-talk] clockskewer attack
by Webmaster 06 Jul '18

06 Jul '18

Found some interesting news on reddit. I dont know the tech behind it, but is sounds like playing with Clock allows you to get the IP address of the hidden service http://www.reddit.com/r/onions/comments/10usgv/clock_skewing_a_clever_uncon… http://pastebin.com/PfXUm3VQ Is this something to be worried about? _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: interesting recent political news...
by Perry E. Metzger 06 Jul '18

06 Jul '18

"Perry E. Metzger" <perry(a)piermont.com> writes: > 3) DOJ attempts to read Yahoo email accounts without a warrant, Yahoo > resists: > > http://www.salon.com/news/opinion/glenn_greenwald/2010/04/15/doj Alistair Crooks pointed out to me that the DOJ has dropped that fight: http://www.theregister.co.uk/2010/04/17/yahoo_warrantless_email_search_drop… -- Perry E. Metzger perry(a)piermont.com --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: interesting recent political news...
by Perry E. Metzger 06 Jul '18

06 Jul '18

"Perry E. Metzger" <perry(a)piermont.com> writes: > 3) DOJ attempts to read Yahoo email accounts without a warrant, Yahoo > resists: > > http://www.salon.com/news/opinion/glenn_greenwald/2010/04/15/doj Alistair Crooks pointed out to me that the DOJ has dropped that fight: http://www.theregister.co.uk/2010/04/17/yahoo_warrantless_email_search_drop… -- Perry E. Metzger perry(a)piermont.com --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] What I've learned from Cryptocat
by Jacob Appelbaum 06 Jul '18

06 Jul '18

Jillian C. York: > Gotta agree with others who note consensus as a problem...the reason (in my > view) being that risk assessment is imperative and that no single guide can > respond to various risk models. It's interesting because one outcome seems to be that almost everyone agrees that plaintext should not be considered reasonable. That's a great outcome so far - I remember a time when people felt that it was fine, most of the time, to have unencrypted communications as the norm. I look forward to the day when those same people start to get the big picture on general social graph style traffic analysis. All the best, Jake _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tahoe-dev] hello
by Zooko Wilcox-O'Hearn 06 Jul '18

06 Jul '18

On Tue, Oct 30, 2012 at 9:25 AM, han zheng <z.han0903(a)gmail.com> wrote: > > Is there a way to directly upload a local file to the "tahoe cloud" not using the web server? Tahoe-LAFS doesn't offer any API reachable from other processes (command-line, kernel, or remote-procedure-call) which *doesn't* route through the webapi. The diagram "network-and-reliance-toplogy.svg" 9 shows this architecture. Everything goes through the "Tahoe-LAFS gateway", and the only API that the Tahoe-LAFS gateway exports is the webapi. 9 https://tahoe-lafs.org/trac/tahoe-lafs/browser/docs/network-and-reliance-to… Han Zheng: why do you want to upload a local file to the tahoe grid not using the web server? The way to accomplish that is to write some Python code that runs in the same Python process as the Tahoe-LAFS gateway. The way that I find easiest to do such things is to look at other code that already does it and copy and modify that. So, here is the code that gets run when someone makes a PUT request to the webapi (as described in webapi.rst 2): 2 https://tahoe-lafs.org/trac/tahoe-lafs/browser/git/docs/frontends/webapi.rs… web/root.py parses the HTTP request and decides what sort of upload this is (mutable or immutable): https://tahoe-lafs.org/trac/tahoe-lafs/browser/git/src/allmydata/web/root.p… Then it calls web/unlinked.py which constructs a FileHandle object. That object is provides the interface that the uploader expects, and it has a handle (open file descriptor) to the file on disk from which it will read the data while the data is being uploaded. https://tahoe-lafs.org/trac/tahoe-lafs/browser/git/src/allmydata/web/unlink… Then (after an unnecessary layer of indirection that I'm skipping), immutable/upload.py starts doing some real work: setting the encoding parameters, deciding whether to literalize this immutable file, etc: https://tahoe-lafs.org/trac/tahoe-lafs/browser/git/src/allmydata/immutable/… So, if you write some Python code that invokes immutable/upload.py's "upload()" method, and passes an "uploadable" as the argument (note that in case shown above the "uploadable" is the FileHandle object constructed by web/unlinked.py), then you'll upload a file directly to the grid. Regards, Zooko _______________________________________________ tahoe-dev mailing list tahoe-dev(a)tahoe-lafs.org https://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-dev ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: How to ban many IPs?
by phobos＠rootme.org 06 Jul '18

06 Jul '18

On Thu, Oct 30, 2008 at 09:05:00AM -0700, kitsune.or(a)gmail.com wrote 1.5K bytes in 38 lines about: : Matt LaPlante wrote: : > Personally, I run my tor node as transport only (non-exit). I can't : > risk opening myself up to illegal activities by running an exit node, : > but I figure the least I can do is provide decent transport as the : > middle-man, and let the people running exit nodes concern themselves : > with the legality of the activity. : > : (much snippage) : : I'm the same way; since I'm only a private citizen with limited : resources, I can't risk a potential legal battle - even if I were likely : to win such a battle. It just costs too much. These are called chilling effects. Rather than directly attack something, you create an environment that discourages its existence. I run an exit node with the default policy. I, too, deal with the abuse complaints and DMCA take down notices. A couple of emails with copy and pasted responses to these things is worth it for me to provide the service for others. I've even been known to get on the phone and talk to people. Smart ISPs realize they aren't at risk from Tor nodes. Having an intelligent email, showing them https://www.torproject.org/eff/tor-legal-faq and https://www.torproject.org/eff/tor-dmca-response.html are more than most care to investigate. After 5 years, my node is still online. A while ago, someone on or-talk said that 20% of their traffic was "illegal" in their opinion. My first thought was, "wow, 80% of the traffic is people like me using Tor." The vast majority of Tor users are normal people doing normal things. Much like the larger Internet, bad people exist and will attempt to exploit something for their gain. That's life. The overall usage and existence of Tor is a great thing. Normal people use Tor, https://www.torproject.org/torusers. I believe the legal risks to Tor in the USA are low, given the safe harbor provisions of the DMCA; which covers Tor and the ISP. Other countries, such as Germany, the UK, and possibly Australia, have possible risks approaching. As Roger states, https://blog.torproject.org/blog/tor,-germany,-and-data-retention, Tor is trying to figure out next steps. More help here would be great. -- Andrew ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: How to ban many IPs?
by phobos＠rootme.org 06 Jul '18

06 Jul '18

On Thu, Oct 30, 2008 at 09:05:00AM -0700, kitsune.or(a)gmail.com wrote 1.5K bytes in 38 lines about: : Matt LaPlante wrote: : > Personally, I run my tor node as transport only (non-exit). I can't : > risk opening myself up to illegal activities by running an exit node, : > but I figure the least I can do is provide decent transport as the : > middle-man, and let the people running exit nodes concern themselves : > with the legality of the activity. : > : (much snippage) : : I'm the same way; since I'm only a private citizen with limited : resources, I can't risk a potential legal battle - even if I were likely : to win such a battle. It just costs too much. These are called chilling effects. Rather than directly attack something, you create an environment that discourages its existence. I run an exit node with the default policy. I, too, deal with the abuse complaints and DMCA take down notices. A couple of emails with copy and pasted responses to these things is worth it for me to provide the service for others. I've even been known to get on the phone and talk to people. Smart ISPs realize they aren't at risk from Tor nodes. Having an intelligent email, showing them https://www.torproject.org/eff/tor-legal-faq and https://www.torproject.org/eff/tor-dmca-response.html are more than most care to investigate. After 5 years, my node is still online. A while ago, someone on or-talk said that 20% of their traffic was "illegal" in their opinion. My first thought was, "wow, 80% of the traffic is people like me using Tor." The vast majority of Tor users are normal people doing normal things. Much like the larger Internet, bad people exist and will attempt to exploit something for their gain. That's life. The overall usage and existence of Tor is a great thing. Normal people use Tor, https://www.torproject.org/torusers. I believe the legal risks to Tor in the USA are low, given the safe harbor provisions of the DMCA; which covers Tor and the ISP. Other countries, such as Germany, the UK, and possibly Australia, have possible risks approaching. As Roger states, https://blog.torproject.org/blog/tor,-germany,-and-data-retention, Tor is trying to figure out next steps. More help here would be great. -- Andrew ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [DIYbio] legality of distributing pdfs or hard copy papers?
by Bryan Bishop 06 Jul '18

06 Jul '18

On Tue, Apr 23, 2013 at 1:48 PM, Avery louie wrote: > What is the deal with printing or distributing electronic copies of papers > that are obtained from school (university) subscriptions to journals? I > could be a source of these things for my group, but I don't want to have to > foot the bill for any copyright charges. Manuscripts published in the United States prior to 1923 are in the public domain, so those can be shared without wondering. Also, in the past 10 years there has been the growing trend of publications licensed permissively with a choice license from Creative Commons. These tend to be very explicitly okay with all sorts of sharing and remixing. Most publishers will send you a notification (or even a DMCA takedown request) if they think you are infringing on their rights. That's a good time to talk with them to work out how they believe you are infringing, and how the situation could be resolved to mutual satisfaction. Honestly, if you are worried about a publisher tracking you down for partaking in science, then I would (with bias) recommend pdfparanoia to strip out watermarks: https://github.com/kanzure/pdfparanoia IIRC, you sometimes have people pay to attend BOSSlab ? I would be cautious about distributing papers in that context. You have to be especially vigilant in situations where money is changing hands. I think publishers use sites like copyright.com to calculate how much you owe them per distribution in a commercial/business/non-profit context. I am not entirely sure about what goes down if you are an unaffiliated individual. It would be a huge violation of the trust that science has placed in publishers if they were to go around suing readers for reading science. IANAL. No implied warranty or implied fitness for a particular purpose. - Bryan http://heybryan.org/ 1 512 203 0507 -- -- You received this message because you are subscribed to the Google Groups DIYbio group. To post to this group, send email to diybio(a)googlegroups.com. To unsubscribe from this group, send email to diybio+unsubscribe(a)googlegroups.com. For more options, visit this group at https://groups.google.com/d/forum/diybio?hl=en Learn more at www.diybio.org --- You received this message because you are subscribed to the Google Groups "DIYbio" group. To unsubscribe from this group and stop receiving emails from it, send an email to diybio+unsubscribe(a)googlegroups.com. To post to this group, send email to diybio(a)googlegroups.com. Visit this group at http://groups.google.com/group/diybio?hl=en. For more options, visit https://groups.google.com/groups/opt_out. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

TUNNEL CONNECTION BETWEEN DIVING TANK AND DEEP DIVING SIMULATOR I N CHINA-DSIGN & BUILD PROJECT
by TRICOSAL 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear Sir, We are working on a very interesting project as per captioned one. We take liberty to ask you whether you are interested to take part in this particular project because you are a submarine builder. We are seeking your technical comment whether you are interest and able to DESIGN AND BUILD a CONNECTION TUNNEL SECTION for the captioned project. We have to design and build this section between the DIVING TANK and DEEP DIVE SIMULATOR. The diving tank is 8 Meter deep. The Deep Diving Simulator is for training professional divers in different water depths. It can hold a team up to 8 divers with full diving equipment. There will a hatch door at the Tank and another one at the Simulator in the connection tunnel. The 1-2 M diameter x 8 M length connection tunnel may be made of heavy duty stainless steel or other stronger material. Our work will be including this connection tunnel and the connecting/jointing systems at both ends. The whole unit can be made and approval tested in your country by an independent institute and ship to us for on site installation. If you are interested, please give us a check list of questions and information that you would like to have at this preliminary stage. Then we will obtain them from the Architect and Owner. If you would like to meet and discuss this project in details, we can meet each other either in your country or HK as you wish. We are working closely with the architect on this project and they require a preliminary proposal from us very shortly. We can manage to design and build the connecting system between the tunnel and the concrete wall opening at the diving tank. The opening detail of the Simulator will be given by the supplier later. However we have no experience to design and build the tunnel section itself that is subjected to high water pressure internally. I think you may be able to use your submarine technique to design and build this SECTION. Thank you and looking forward to your positive and reply soonest. I will be in China the next whole week, you may reach me at my GSM in China at + 86 1390 22 33 134. For your information, we are a specialist agent representing products like under water side scan, multi-cable-transit and Linkseal for pipe for off shore and inland. Regards James Wong Manager TRICOSAL LIMITED 4/F COMMERCIAL BUILDING 397 CHATHAM ROAD NORTH KOWLOON, HONG KONG, CHINA. GSM in HK: +852 9283 9030 Tel: +852 2773 6663 Fax: +852 2333 7894 -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBOiVYLkAhpS53eUNhEQL8lgCeIKVmCIJrZtWRaEZaA8W0fe5i0KsAnjys EBnAtkiWVzHuxWxKi0rDEBSe =Tkox -----END PGP SIGNATURE----- ------_=_NextPart_000_01C05A7B.A206856C--

1 0