July 2018 - cypherpunks-legacy

Re: [cryptography] [info] The NSA Is Building the Countrybs Biggest Spy Center (Watch What You Say)
by Seth David Schoen 06 Jul '18

06 Jul '18

ianG writes: > On 26/03/12 07:43 AM, Jon Callas wrote: > > >This is precisely the point I've made: the budget way to break crypto is to buy a zero-day. And if you're going to build a huge computer center, you'd be better off building fuzzers than key crackers. > > point of understanding - what do you mean by fuzzers? Automatically trying to make software incur faults with large amounts of randomized (potentially invalid) input. https://en.wikipedia.org/wiki/Fuzz_testing If you get an observable fault you can repeat the process under a debugger and try to understand why it occurred and whether it is an exploitable bug. Here's a pretty detailed overview: https://www.blackhat.com/presentations/bh-usa-07/Amini_and_Portnoy/Whitepap… When it was first invented, fuzzing basically just consisted of feeding random bytes to software, but now it can include sophisticated understanding of the kinds of data that a program expects to see, with some model of the internal state of the program. I believe there are also fuzzers that examine code coverage, so they can give feedback to the tester about whether there are parts of the program that the fuzzer isn't exercising. -- Seth David Schoen <schoen(a)loyalty.org> | No haiku patents http://www.loyalty.org/~schoen/ | means I've no incentive to FD9A6AA28193A9F03D4BF4ADC11B36DC9C7DD150 | -- Don Marti _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Area 51 Guards On Strike
by L. Neil Smith 06 Jul '18

06 Jul '18

But who's going to save the Earth from the scum of the universe? <http://www.lvrj.com/lvrj_home/2001/Dec-11-Tue-2001/news/17638293.html> A group of 70 security guards known as the "camo dudes" walked off their jobs Monday in Las Vegas and at the covert military installation known as Area 51, a place they said they can't talk about. "Use your imagination," union President Vernell Hall said when asked where he worked as he and more than a dozen other striking security officers displayed "On Strike" signs on Haven Street near McCarran International Airport. [...] Hall said the issues include lack of adequate wages and benefits. "There's been too much overtime since Sept. 11. Overtime on top of overtime," Hall said. [...] ========================== L. Neil Smith's latest novel _The American Zone_ is now available at bookstores on and off the Internet. ************************************************************************** Subscribe to Freematt's Alerts: Pro-Individual Rights Issues Send a blank message to: freematt(a)coil.com with the words subscribe FA on the subject line. List is private and moderated (7-30 messages per week) Matthew Gaylor, (614) 313-5722 ICQ: 106212065 Archived at http://groups.yahoo.com/group/fa/ **************************************************************************

1 0

tor-ramdisk MIPS 20090828 released
by basile 06 Jul '18

06 Jul '18

Hi everyone, I want to announce to the list that a new rlease of the MIPS port of tor-ramdisk is out. Tor-ramdisk is uClibc-based micro Linux distribution whose only purpose is to host a Tor server in an environment that maximizes security and privacy. Changelog: This release implements the changes included in the recent i686 release, but for the MIPS architecture: tor was updated to 0.2.1.19, busybox to 1.14.3 and the kernel was reconfigured to provide FILE_LOCKING required by tor's new 0.2.1.x branch. Tor node "mufasa" is running this release in the wild. Homepage: http://opensource.dyc.edu/tor-mips-ramdisk Download: http://opensource.dyc.edu/tor-mips-ramdisk-downloads -- Anthony G. Basile, Ph.D. Chair of Information Technology D'Youville College Buffalo, NY 14201 USA (716) 829-8197 ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Slightly OT: 'Big brother' surveillance makes waves in Sweden
by xiando 06 Jul '18

06 Jul '18

Almost On Topic (related, anyway): http://www.thelocal.se/6619/20070307/ "A far-reaching wiretapping programme proposed by Sweden's government to defend against foreign threats, including monitoring emails and telephone calls, has stirred up a fiery debate in the past few weeks, with critics decrying the creation of a "big brother" state. The new legislation, to be presented to parliament on Thursday, would enable the National Defence Radio Establishment (FRA) to tap all Internet and telephone communication in and out of Sweden." Beware, people of Sweden, and the west in general. Very good reason to use Tor right there. More Slightly Off-Topic: FRA is visiting websites with information about Tor. And they are not using Tor to do it (Yes, I realize the Xiando Total Surveillance Office is evil. But you guys are using Tor, aren't you?) (Please don't reply to this unless you absolutely have to, this isn't immensily Tor-related, only something which makes a very good argument when you're explaining Why You Should Use Tor within Sweden - and the west in general) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

tor-ramdisk MIPS 20090828 released
by basile 06 Jul '18

06 Jul '18

Hi everyone, I want to announce to the list that a new rlease of the MIPS port of tor-ramdisk is out. Tor-ramdisk is uClibc-based micro Linux distribution whose only purpose is to host a Tor server in an environment that maximizes security and privacy. Changelog: This release implements the changes included in the recent i686 release, but for the MIPS architecture: tor was updated to 0.2.1.19, busybox to 1.14.3 and the kernel was reconfigured to provide FILE_LOCKING required by tor's new 0.2.1.x branch. Tor node "mufasa" is running this release in the wild. Homepage: http://opensource.dyc.edu/tor-mips-ramdisk Download: http://opensource.dyc.edu/tor-mips-ramdisk-downloads -- Anthony G. Basile, Ph.D. Chair of Information Technology D'Youville College Buffalo, NY 14201 USA (716) 829-8197 ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [cryptography] Bitcoin in endgame
by Jeffrey Walton 06 Jul '18

06 Jul '18

On Wed, Feb 22, 2012 at 9:11 PM, ianG <iang(a)iang.org> wrote: > On the crypto topic that everyone loves to hate, Bitcoin, the expected > attack has begun. > > http://financialcryptography.com/mt/archives/001363.html > > Philipp Guering and I wrote a paper that explains how this will fall out. > > http://iang.org/papers/BitcoinBreachesGreshamsLaw.pdf > > Although in the big picture, this is more about finance not cryptography, > there is an engaging question - can cryptography be used to control this > sort of issue? It didn't work for Bitcoin, but more judicious uses of > crypto can do a lot better, and has done with other designs. The challenge > is to get the balance right. Someone should have given Nancy Pelosi a chunk of BitCoin, or cut the Wall Street bankers in on it. The IPO offering/insider trading to Pelosi by VISA worked wonders when legislation was on the floor to protect consumers. Pelosi happily blocked the legislation, and the value of her stake in IPO skyrocketed [1]. I would also argue the Wall Street Bankers would have been happy to legitmize BitCoin if they got a cut (confer: derivatives). Jeff [1] https://www.google.com/#hl=en&sclient=psy-ab&q=nancy+pelosi+visa+insider+tr… _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Area 51 Guards On Strike
by L. Neil Smith 06 Jul '18

06 Jul '18

But who's going to save the Earth from the scum of the universe? <http://www.lvrj.com/lvrj_home/2001/Dec-11-Tue-2001/news/17638293.html> A group of 70 security guards known as the "camo dudes" walked off their jobs Monday in Las Vegas and at the covert military installation known as Area 51, a place they said they can't talk about. "Use your imagination," union President Vernell Hall said when asked where he worked as he and more than a dozen other striking security officers displayed "On Strike" signs on Haven Street near McCarran International Airport. [...] Hall said the issues include lack of adequate wages and benefits. "There's been too much overtime since Sept. 11. Overtime on top of overtime," Hall said. [...] ========================== L. Neil Smith's latest novel _The American Zone_ is now available at bookstores on and off the Internet. ************************************************************************** Subscribe to Freematt's Alerts: Pro-Individual Rights Issues Send a blank message to: freematt(a)coil.com with the words subscribe FA on the subject line. List is private and moderated (7-30 messages per week) Matthew Gaylor, (614) 313-5722 ICQ: 106212065 Archived at http://groups.yahoo.com/group/fa/ **************************************************************************

1 0

Slightly OT: 'Big brother' surveillance makes waves in Sweden
by xiando 06 Jul '18

06 Jul '18

Almost On Topic (related, anyway): http://www.thelocal.se/6619/20070307/ "A far-reaching wiretapping programme proposed by Sweden's government to defend against foreign threats, including monitoring emails and telephone calls, has stirred up a fiery debate in the past few weeks, with critics decrying the creation of a "big brother" state. The new legislation, to be presented to parliament on Thursday, would enable the National Defence Radio Establishment (FRA) to tap all Internet and telephone communication in and out of Sweden." Beware, people of Sweden, and the west in general. Very good reason to use Tor right there. More Slightly Off-Topic: FRA is visiting websites with information about Tor. And they are not using Tor to do it (Yes, I realize the Xiando Total Surveillance Office is evil. But you guys are using Tor, aren't you?) (Please don't reply to this unless you absolutely have to, this isn't immensily Tor-related, only something which makes a very good argument when you're explaining Why You Should Use Tor within Sweden - and the west in general) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

Re: [cryptography] Bitcoin in endgame
by Jeffrey Walton 06 Jul '18

06 Jul '18

On Wed, Feb 22, 2012 at 9:11 PM, ianG <iang(a)iang.org> wrote: > On the crypto topic that everyone loves to hate, Bitcoin, the expected > attack has begun. > > http://financialcryptography.com/mt/archives/001363.html > > Philipp Guering and I wrote a paper that explains how this will fall out. > > http://iang.org/papers/BitcoinBreachesGreshamsLaw.pdf > > Although in the big picture, this is more about finance not cryptography, > there is an engaging question - can cryptography be used to control this > sort of issue? It didn't work for Bitcoin, but more judicious uses of > crypto can do a lot better, and has done with other designs. The challenge > is to get the balance right. Someone should have given Nancy Pelosi a chunk of BitCoin, or cut the Wall Street bankers in on it. The IPO offering/insider trading to Pelosi by VISA worked wonders when legislation was on the floor to protect consumers. Pelosi happily blocked the legislation, and the value of her stake in IPO skyrocketed [1]. I would also argue the Wall Street Bankers would have been happy to legitmize BitCoin if they got a cut (confer: derivatives). Jeff [1] https://www.google.com/#hl=en&sclient=psy-ab&q=nancy+pelosi+visa+insider+tr… _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tor-talk] almost success toward complete tor enforcement, need little help now
by adrelanos 06 Jul '18

06 Jul '18

Raviji: > https://cryptoanarchy.org/wiki/Build_your_own_livething That's a bit insufficient and some points clearly outdated, see below. > > obfsproxy issue > ================= > > I have installed tor,pdnsd,ttdnsd,obfsproxy,polipo,vidalia You don't need pdnsd,ttdnsd,polipo. Vidalia is a nice optional graphical user interface. > I have already collected the obfs IP address from a running tor bundle and then placed all those > at /etc/tor/torrc. tor is running with obfs. > > [Q] How can I check online that obfs is functional ? https://check.torproject.org/ simply shows > tor is running, but no obfs related information. Someone else has to answer here. > polipo and firewall > ===================== > > Browsers configured to use polopo ( tor as parent) and the online check is successful (https://check.torproject.org/) > > [Q] Is polipo really fast ? I hardly see any advantage comparing direct tor connection with out polipo. You're on the wrong path. Don't use polipo / Firefox etc. anymore, unless you want to stay out from all other Tor users. Use Tor Browser. Details: https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/WebBrowsers > [Q] What is the iptables rule to redirect all 80 and 443 traffic through polipo 8118 port ? Then no configuration is > required at browser level. You don't need iptables for that. Tor is running on a Gateway. Tor Browser without Tor/Vidalia started (patched startup script) is running on another machine. (Which we call Workstation.) Tor Button SOCKS Host: gateway IP, port: reserve one SocksPort in torrc on Gateway exclusively for Tor Browser. Add some extra SocksPorts for other applications. (stream isolation) > DNS and firewall > ================= > > I am using pdnsd (caching DNS proxy server) and ttdnsd ( udp to tcp converter ) You don't need ttdnsd. I recommend using one SocksPorts per most, if not all applications. If you still want some remaining traffic fallback you can use Tor's excellent Dns- and TransPorts. > > [Q] How can I enforce all udp to go through local DNS port and which one 53 or 8853 ? For a "fetch remaining DNS traffic and route through Tor iptables rule" have a look at https://github.com/adrelanos/Whonix/blob/master/whonix_gateway/usr/local/bi… and search for "dns". > > iptables to route all traffic and blocked all non tor > ====================================================== > > LAN and lo (localhost) don't need to go through tor You probable mess up there figuring out what is lan traffic for real and what not. I strongly recommend the Tor-only box to have no local lan traffic. > port 80/443 should go through poliop port 8118, > all dns query should go through local 53 ( or 8853 ? ) port Like said before, forget about that plan. Don't use polipo. > And the rest of the traffic should go through tor 9050 port, anything left should be dropped. > The example iptables given at tails site is not working for me. Could anyone kindly give such a > rule sets please ? You can do it with virtual machines and/or physical isolation. https://sourceforge.net/p/whonix/wiki/Home/ https://github.com/adrelanos/Whonix/ https://github.com/adrelanos/Whonix/blob/master/whonix_gateway/usr/local/bi… _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0