July 2018 - cypherpunks-legacy

[IP] Today is Your Day to Stop Real ID
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

Next news from Germany
by awxcnx＠web.de 06 Jul '18

06 Jul '18

Hi, I am a german TOR admin ("knuffel"). I have running a mixmaster remailer too ("awxcxn"). Both were running on a dedicated root server. Half a year ago I have had my first trouble with the german BKA. The hoster of my server got a letter from the BKA and closed my server without any respect to the law. I contact the press an a few days later the server was back and online. A few month ago I got an anonymous tip, a telecommunication surveillance is/was running against me and I am listed in a "known" database. Over the last months, I tried to figure out, what happens. I contact the data protection official of Germany for help. Like me, he did not get any information because the prosecution denied any information with the reason: "Any information will compromise the security of Germany or one of its parts." ( ' 19 Absatz 6 Bundesdatenschutzgesetz ) I compromise the security of Germany, seems I am a terrorist or something like that. The anti-terrorism-law in Germany is not a joke, nothink I want to feel by myself. I contact a lawyer and he said, this is not a game, it is real! Conclusion: The TOR node "knuffel" is down and will not come back. Please remove it from the directory. All my contact addresses and online identities related to this kind of stuff will be closed next time. I have a german website with some stuff about anonymity. It will go down in 2-3 weeks. May be, some german gay want to download and save some of my work. I will prepare an offline version of the website: http://www.anon-web.de Greetings Karsten N. _______________________________________________________________________ Jetzt neu! Sch|tzen Sie Ihren PC mit McAfee und WEB.DE. 3 Monate kostenlos testen. http://www.pc-sicherheit.web.de/startseite/?mc=022220 ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [cryptography] workaround for length extension attacks (was: Doubts over necessity of SHA-3 cryptography standard)
by Marsh Ray 06 Jul '18

06 Jul '18

On 04/14/2012 06:39 AM, David Adamson wrote: > > NSA designed SHA-2 to stay in libraries for a long time. Length > extension is not an issue for SHA-2 anymore with SHA-512/256. That is > a double-pipe hash function perfectly secure against length-extension > attack. On 64-bit platforms SHA512 and SHA512/256 is almost as fast as > Skein and Blake (one of which will be the next SHA-3), and according > to [1], "Furthermore, even the fastest finalists will probably offer > only a small performance advantage over the current SHA-256 and > SHA-512 implementations." And they seem to be significantly less efficient in hardware than SHA-2. Gee, it's almost as if the NSA knows a thing or two about designing and implementing hash functions! :-) > However, since SHA-2 and (to be SHA-3) are 2, 3 or even 4 times slower > than MD5 or SHA-1, and NIST running the SHA-3 competition changed > their own initial goal SHA-3 to be significantly faster than SHA-2, I > expect in the following period several other influential international > players in the area of standardizing cryptographic primitives to use > that strategic mistake done by NIST, and to push for a hash standard > that will be significantly faster than SHA-2 and SHA-3. > [...] > Now I expect EU to use the opportunity and finally back up a > hash function that industry will prefer. But I see also that Russia, > China and Japan can also use the NIST's screw up with the performance > of SHA-3 and will try to take over the industrial primacy with their > own hash function. Honest question: why should we think they can do it? Everyone was invited to take part in the SHA-3 competition, and many international teams did. In fact, most of the finalists aren't US teams. Of all the hundreds of entrants there are 5 left. It seems that most were weeded out because they were less-that-maximally efficient or had attacks on their security. Beating SHA-2-256 or SHA-2-512/256 is turning out to be harder than anyone expected. > At the end, supremacy in setting up cryptographic > standards is what will bring reputation, trust and strategic > positioning in the world that in the following years will digest > exabytes per hour. No one spends more money on info systems than the US Government. Vendors can implement whatever they want in the own (or extensible) protocols, but if USG requires SHA-3, it's going to be implemented in gear designed for sale in N. America. Still, China is an increasing market too and their rulers are not afraid of "intelligent design". We have them to thank for killing off proprietary incompatible cellphone chargers. They simply mandated that all mobiles charge via mini-USB. > http://en.wikipedia.org/wiki/USB#Mobile_device_charger_standards We may be seeing signs of a fork in data security protocols too. > http://www.nytimes.com/2012/03/27/technology/symantec-dissolves-alliance-wi… > SO: I expect a new hash competition (run by EU, Russia, China or > Japan) where US SHA-3 standard will be a reference point and the goal > will be to design 256 and 512 bits hash function that is 3-4 times > faster than SHA-3. Alternatively, NIST could say "we've learned so much about hash functions over the past few years that we're going to allow designers another round of submissions." - Marsh _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Baku attendees compromised
by Andri Rebentisch 06 Jul '18

06 Jul '18

Am 10.11.2012 23:43, schrieb John Scott-Railton: > If this isn't already on your radar, AP and others are reporting that > EU Officials at the Baku conference report being hacked in their hotel. A joint statement of the multipartisan EU delegation during the IGF http://www.eu-un.europa.eu/articles/es/article_12826_es.htm Ryan Heath is the personal spokesperson of Commissioner Kroes. Her comment is as quite explicit as it may get: http://blogs.ec.europa.eu/neelie-kroes/malala-day-power-internet/ Best, Andri -- Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

ids
by None 06 Jul '18

06 Jul '18

Hey i got your email from a message board. But since it seems you know enough about fake ids. I had a question and i was hoping you could answer it for me. I wanted to get a new identity and i was told i could do it two ways. 1 way was to steal a living persons identity, and the other was to steal a dead persons id. write back if you know anything to help me. _______________________________________________________ Say Bye to Slow Internet! http://www.home.com/xinbox/signup.html

1 0

ids
by None 06 Jul '18

06 Jul '18

Hey i got your email from a message board. But since it seems you know enough about fake ids. I had a question and i was hoping you could answer it for me. I wanted to get a new identity and i was told i could do it two ways. 1 way was to steal a living persons identity, and the other was to steal a dead persons id. write back if you know anything to help me. _______________________________________________________ Say Bye to Slow Internet! http://www.home.com/xinbox/signup.html

1 0

ids
by None 06 Jul '18

06 Jul '18

Hey i got your email from a message board. But since it seems you know enough about fake ids. I had a question and i was hoping you could answer it for me. I wanted to get a new identity and i was told i could do it two ways. 1 way was to steal a living persons identity, and the other was to steal a dead persons id. write back if you know anything to help me. _______________________________________________________ Say Bye to Slow Internet! http://www.home.com/xinbox/signup.html

1 0

ids
by None 06 Jul '18

06 Jul '18

Hey i got your email from a message board. But since it seems you know enough about fake ids. I had a question and i was hoping you could answer it for me. I wanted to get a new identity and i was told i could do it two ways. 1 way was to steal a living persons identity, and the other was to steal a dead persons id. write back if you know anything to help me. _______________________________________________________ Say Bye to Slow Internet! http://www.home.com/xinbox/signup.html

1 0

ids
by None 06 Jul '18

06 Jul '18

Hey i got your email from a message board. But since it seems you know enough about fake ids. I had a question and i was hoping you could answer it for me. I wanted to get a new identity and i was told i could do it two ways. 1 way was to steal a living persons identity, and the other was to steal a dead persons id. write back if you know anything to help me. _______________________________________________________ Say Bye to Slow Internet! http://www.home.com/xinbox/signup.html

1 0

ids
by None 06 Jul '18

06 Jul '18

Hey i got your email from a message board. But since it seems you know enough about fake ids. I had a question and i was hoping you could answer it for me. I wanted to get a new identity and i was told i could do it two ways. 1 way was to steal a living persons identity, and the other was to steal a dead persons id. write back if you know anything to help me. _______________________________________________________ Say Bye to Slow Internet! http://www.home.com/xinbox/signup.html

1 0