July 2018 - cypherpunks-legacy

[Dewayne-Net] Can Tracking Phone Calls Ferret Out Terrorists?
by Dewayne Hendricks 06 Jul '18

06 Jul '18

[Note: This item comes from reader Matt Oristano. DLH]

1 0

Re: [cryptography] US Appeals Court upholds right not to decrypt a drive
by James A. Donald 06 Jul '18

06 Jul '18

Truecrypt supports an inner and outer encrypted volume, encryption hidden inside encryption, the intended usage being that you reveal the outer encrypted volume, and refuse to admit the existence of the inner hidden volume. To summarize the judgment: Plausibile deniability, or even not very plausible deniability, means you don't have to produce the key for the inner volume. The government first has to *prove* that the inner volume exists, and contains something hot. Only then can it demand the key for the inner volume. Defendant revealed, or forensics discovered, the outer volume, which was completely empty. (Bad idea - you should have something there for plausible deniability, such as legal but mildly embarrassing pornography, and a complete operating system for managing your private business documents, protected by a password that forensics can crack with a dictionary attack) Forensics felt that with FIVE TERABYTES of seemingly empty truecrypt drives, there had to be an inner volume, but a strong odor of rat is no substitute for proof. (Does there exist FIVE TERABYTES of child pornography in the entire world?) Despite forensics suspicions, no one, except the defendant, knows whether there is an inner volume or not, and so the Judge invoked the following precedent. http://www.ca11.uscourts.gov/opinions/ops/201112268.pdf That producing the key is protected if "conceding the existence, possession, and control of the documents tended to incriminate" the defendant. The Judge concluded that in order to compel production of the key, the government has to first prove that specific identified documents exist, and are in the possession and control of the defendant, for example the government would have to prove that the encrypted inner volume existed, was controlled by the defendant, and that he had stored on it a movie called "Lolita does LA", which the police department wanted to watch. _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Important Information about IETF 76 Meeting Registration
by Alexa Morris 06 Jul '18

06 Jul '18

Registration for IETF 76 will open in the next several days and we want to alert you to some exciting changes coming your way. 1) New Meeting Registration System We have moved to a new meeting registration system. The first time you use the new system (called ARO) you will need to create an account. Your account will be password protected and only you will have access to it. Your contact information will be saved, making registration in the future much simpler, and you will be able to update your contact data, registration information, etc at any time. 2) RFID Tagging Experiment at IETF 76 The hosts for IETF 76 are organizing a RFID tag experiment for the meeting. The tag will be affixed to the underside of your meeting badge, as a sticker, and will contain only your full name and any listed affiliation. The experiment will allow us to explore the possibility of electronic blue sheets (though we are still using paper blue sheets as the official blue sheets of record). We also hope that the RFID tag will improve the experience for remote participants, since speakers will be identified through the RFID tags. While you will be given the option to "opt out" of this experiment when you register for the meeting, we sincerely hope you will participate. 3) One-day Guest Pass Experiment For IETF 76 we are also offering a one-day guest pass for $200. If you only plan to attend one day of meetings, you now have the option to select which day (Mon, Tues, Weds, Thurs or Fri) when you register. After the meeting, we will solicit your feedback on the one-day pass option and evaluate to see if it makes sense to offer at future meetings. Please contact me if you have any comments or questions. And I look forward to seeing you at IETF 76 in Japan! Regards, Alexa ----------- Alexa Morris / Executive Director / IETF 48377 Fremont Blvd., Suite 117, Fremont, CA 94538 Phone: +1.510.492.4089 / Fax: +1.510.492.4001 Email: amorris(a)amsl.com Managed by Association Management Solutions (AMS) Forum Management, Meeting and Event Planning www.amsl.com <http://www.amsl.com/> _______________________________________________ IETF-Announce mailing list IETF-Announce(a)ietf.org https://www.ietf.org/mailman/listinfo/ietf-announce

1 0

Important Information about IETF 76 Meeting Registration
by Alexa Morris 06 Jul '18

06 Jul '18

Registration for IETF 76 will open in the next several days and we want to alert you to some exciting changes coming your way. 1) New Meeting Registration System We have moved to a new meeting registration system. The first time you use the new system (called ARO) you will need to create an account. Your account will be password protected and only you will have access to it. Your contact information will be saved, making registration in the future much simpler, and you will be able to update your contact data, registration information, etc at any time. 2) RFID Tagging Experiment at IETF 76 The hosts for IETF 76 are organizing a RFID tag experiment for the meeting. The tag will be affixed to the underside of your meeting badge, as a sticker, and will contain only your full name and any listed affiliation. The experiment will allow us to explore the possibility of electronic blue sheets (though we are still using paper blue sheets as the official blue sheets of record). We also hope that the RFID tag will improve the experience for remote participants, since speakers will be identified through the RFID tags. While you will be given the option to "opt out" of this experiment when you register for the meeting, we sincerely hope you will participate. 3) One-day Guest Pass Experiment For IETF 76 we are also offering a one-day guest pass for $200. If you only plan to attend one day of meetings, you now have the option to select which day (Mon, Tues, Weds, Thurs or Fri) when you register. After the meeting, we will solicit your feedback on the one-day pass option and evaluate to see if it makes sense to offer at future meetings. Please contact me if you have any comments or questions. And I look forward to seeing you at IETF 76 in Japan! Regards, Alexa ----------- Alexa Morris / Executive Director / IETF 48377 Fremont Blvd., Suite 117, Fremont, CA 94538 Phone: +1.510.492.4089 / Fax: +1.510.492.4001 Email: amorris(a)amsl.com Managed by Association Management Solutions (AMS) Forum Management, Meeting and Event Planning www.amsl.com <http://www.amsl.com/> _______________________________________________ IETF-Announce mailing list IETF-Announce(a)ietf.org https://www.ietf.org/mailman/listinfo/ietf-announce

1 0

Re: [drone-list] Defense Science Board urges greater autonomy for unmanned systems
by Gregory Foster 06 Jul '18

06 Jul '18

Wired Danger Room (Sep 11) - "The Pentagon Doesn't Trust Its Own Robots": [1]http://www.wired.com/dangerroom/2012/09/robot-autonomy/ Follow up on the DSB report by Spencer Ackerman [ [2]@attackerman ] featuring commentary by Brookings' Peter W. Singer. At Brookings, Singer currently supervises [3]nonresident fellow Noah Shachtman, the editor of Wired's Danger Room blog. gf On 9/6/12 10:40 AM, Gregory Foster wrote: Secrecy News (Sep 6) - "Greater Autonomy for Unmanned Military Systems Urged" (cited in full) [4]http://www.fas.org/blog/secrecy/2012/09/dsb_autonomy.html The Department of Defense should focus on increasing the autonomy of drones and other unmanned military systems, a new report from the Defense Science Board said. DoD should "more aggressively use autonomy in military missions," the Board report said, because currently "autonomy technology is being underutilized." See [5]"The Role of Autonomy in DoD Systems," Defense Science Board, dated July 2012 and released last week. "Autonomy" in this context does not mean "computers making independent decisions and taking uncontrolled action." The Board is not calling for the immediate development of [6]Skynet at this time. Rather, autonomy refers to the automation of a particular function within programmed limits. "It should be made clear that all autonomous systems are supervised by human operators at some level," the [7]report stressed. Increased autonomy for unmanned military systems "can enable humans to delegate those tasks that are more effectively done by computer... thus freeing humans to focus on more complex decision making." "However, the true value of these systems is not to provide a direct human replacement, but rather to extend and complement human capability by providing potentially unlimited persistent capabilities, reducing human exposure to life threatening tasks, and with proper design, reducing the high cognitive load currently placed on operators/supervisors." But all of that is easier said than done. "Current designs of autonomous systems, and current design methods for increasing autonomy, can create brittle platforms" that are subject to irreversible error. There are also "new failure paths associated with more autonomous platforms, which has been seen in friendly fire fatalities.... This brittleness, which is resident in many current designs, has severely retarded the potential benefits that could be obtained by using advances in autonomy." The Defense Science Board [8]report discusses the institutional challenges confronting a move toward increasing autonomy, including the obstacles posed by proprietary software. It offers an extended discussion of conflict scenarios in which the enemy employs its own autonomous systems against U.S. forces. The authors describe China's "alarming" investment in unmanned systems, and encourage particular attention to the relatively neglected topic of the vulnerability of unmanned systems. The [9]report includes some intriguing citations, such as a volume on [10]"Governing Lethal Behavior in Autonomous Robots," and presents numerous incidental observations of interest. For example: "Big data has evolved as a major problem at the National Geospatial Intelligence Agency (NGA). Over 25 million minutes of full motion video are stored at NGA." But new sensors will produce "exponentially more data" than full motion video, and will overwhelm current analytical capabilities. "Today nineteen analysts are required per UAV orbit [i.e. per 24 hour operational cycle]. With the advent of Gorgon Stare, ARGUS, and other Broad Area Sensors, up to 2,000 analysts will be required per orbit." The government "can't hire enough analysts or buy enough equipment to close these gaps." HT [11]@saftergood, gf -- Gregory Foster || [12]gfoster(a)entersection.org @gregoryfoster <> [13]http://entersection.com/ References 1. http://www.wired.com/dangerroom/2012/09/robot-autonomy/ 2. http://twitter.com/attackerman 3. http://www.brookings.edu/experts/shachtmann.aspx 4. http://www.fas.org/blog/secrecy/2012/09/dsb_autonomy.html 5. http://www.fas.org/irp/agency/dod/dsb/autonomy.pdf 6. http://en.wikipedia.org/wiki/Skynet_%28Terminator%29 7. http://www.fas.org/irp/agency/dod/dsb/autonomy.pdf 8. http://www.fas.org/irp/agency/dod/dsb/autonomy.pdf 9. http://www.fas.org/irp/agency/dod/dsb/autonomy.pdf 10. http://books.google.com/books?id=rIsJ_QXDdEUC&printsec=frontcover#v=onepage… 11. http://twitter.com/saftergood 12. mailto:gfoster@entersection.org 13. http://entersection.com/ _______________________________________________ drone-list mailing list drone-list(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/drone-list If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [serval-project-dev] Serval Mesh and ham radio
by Jeremy Lakeman 06 Jul '18

06 Jul '18

On Tue, Oct 30, 2012 at 2:50 PM, W5SVL <w5svl(a)aol.com> wrote: > Greetings from Texas. I am a ham radio operator and I have been > experimenting with the Serval Mesh by using 2 inexpensive unactivated > Android smartphones. I am attempting to use the Serval Mesh through an > existing HSMM MESH network. HSMM MESH is an experimental ham radio mesh > network that uses the first 6 wifi channels in the 2.4 Ghz band. The radios > used are older versions of the WRT54G router that have been flashed with a > new firmware. There are some awesome communication possibilities here, but > I do not have the networking skills to do this. Maybe my idea is not > possible, but hopefully someone will comment. So after a quick bit of research; - HSMM is a custom radio protocol that exposes a standard IP network interface - olsr is being used to mesh these devices together - other devices may use the network through the LAN interface So you would have a second access point that the serval phone can connect to for internet and mesh traffic? This doesn't sound like a network that serval can transparently co-exist on. Yet. Though we have done some initial work to support serval nodes discovering each other over an olsr network, we haven't built any protocol to exchange reach-ability information for other locally connected serval phones. This is a reasonably large piece of work that we don't have the time to build right now. You could build servald for the mesh routers and run it on every device in the network. Though our routing protocol is not as mature as olsr. > Also as a ham, I can legally use much more power on the 2.4 Ghz band, and I > have found the Serval Mesh to work very well through a bi directional RF > amplifier installed between a router and an external antenna. There is no > internet connection here. I am just using the router as a radio repeater. > Has anyone else tried this? This would not be using the HSMM MESH as I > mentioned above, since only one router would be used. This one router > repeater could really be useful in emergencies. Please give me some > comments on both of these experimental ideas. Perhaps I should consult with > a ham operator who has more networking knowledge than I have. Any help will > be appreciated. So this router is operating as a simple ethernet bridge? > -- > You received this message because you are subscribed to the Google Groups > "Serval Project Developers" group. > To view this discussion on the web visit > https://groups.google.com/d/msg/serval-project-developers/-/QZOyRXnW8M0J. > To post to this group, send email to > serval-project-developers(a)googlegroups.com. > To unsubscribe from this group, send email to > serval-project-developers+unsubscribe(a)googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/serval-project-developers?hl=en. -- You received this message because you are subscribed to the Google Groups "Serval Project Developers" group. To post to this group, send email to serval-project-developers(a)googlegroups.com. To unsubscribe from this group, send email to serval-project-developers+unsubscribe(a)googlegroups.com. For more options, visit this group at http://groups.google.com/group/serval-project-developers?hl=en. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[cryptography] OT: Traffic sensor flaw that could allow driver tracking fixed
by Jeffrey Walton 06 Jul '18

06 Jul '18

It's amazing where these defects show up. I think Morris was right with his three laws. I also believe this was an direct application of "Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices." The same authors are responsible for the paper, the advisory and the proof of concept against the traffic system. http://www.csoonline.com/article/723229/traffic-sensor-flaw-that-could-allo… Mobile security involves more than just keeping one's personal devices secure from hacks or other exploits. Threats can also come from the technology government uses to track and manage traffic flow. The Department of Homeland Security's (DHS) Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) issued an alert last week over a vulnerability that it said impacts Post Oak Traffic AWAM Bluetooth Reader Systems. The system collects data from drivers who are using Bluetooth equipment, and uses it to calculate their speed and determine traffic conditions on a particular highway or road. The alert said "insufficient entropy," or insecure encryption, in those roadway sensors could allow an attacker to impersonate the device, "obtain the credentials of administrative users and potentially perform a Man-in-the-Middle attack." "This could allow the attacker to gain unauthorized access to the system and read information on the device, as well as inject data compromising the integrity of the data," the alert said. ... _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tor-talk] Server/host for Tor forum in Iceland or Norway?
by andrew＠torproject.is 06 Jul '18

06 Jul '18

On Fri, Mar 30, 2012 at 07:26:56AM -0700, jefheri1(a)yahoo.com wrote 0.9K bytes in 13 lines about: : I am interested in setting up a small Tor centric message board. Due to recent (and not so recent) events in U.S. Congress, E.U., and etc., I want to setup the message board in a country with strong -- and smart -- Internet privacy and security laws. As I understand matters, Iceland or Norway seem to be the best choices; is that correct? (I believe the Tor Project, or a group affiliated with them, uses servers in Iceland, but I could be mistaken) I use servers in Iceland and did before I joined Tor. And yes, torproject.is and tpo.is are both hosted with 1984.is. I also know Mvrpur and Smari from 1984.is. My obvious endorsement is for 1984. They are not the cheapest, but they are great. Hosting relays in Iceland is expensive due to the current monopoly arrangement on bandwidth and connections to Greenland and the UK, see http://www.farice.is/. If planning to host tor relays in Iceland, talk to the provider first. If you do, ISK 50,000+ monthly bills shouldn't shock you. Here is the writeup of my last trip to Iceland for Tor, https://blog.torproject.org/blog/visit-iceland -- Andrew http://tpo.is/contact pgp 0x6B4D6475 _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tor-talk] Server/host for Tor forum in Iceland or Norway?
by andrew＠torproject.is 06 Jul '18

06 Jul '18

On Fri, Mar 30, 2012 at 07:26:56AM -0700, jefheri1(a)yahoo.com wrote 0.9K bytes in 13 lines about: : I am interested in setting up a small Tor centric message board. Due to recent (and not so recent) events in U.S. Congress, E.U., and etc., I want to setup the message board in a country with strong -- and smart -- Internet privacy and security laws. As I understand matters, Iceland or Norway seem to be the best choices; is that correct? (I believe the Tor Project, or a group affiliated with them, uses servers in Iceland, but I could be mistaken) I use servers in Iceland and did before I joined Tor. And yes, torproject.is and tpo.is are both hosted with 1984.is. I also know Mvrpur and Smari from 1984.is. My obvious endorsement is for 1984. They are not the cheapest, but they are great. Hosting relays in Iceland is expensive due to the current monopoly arrangement on bandwidth and connections to Greenland and the UK, see http://www.farice.is/. If planning to host tor relays in Iceland, talk to the provider first. If you do, ISK 50,000+ monthly bills shouldn't shock you. Here is the writeup of my last trip to Iceland for Tor, https://blog.torproject.org/blog/visit-iceland -- Andrew http://tpo.is/contact pgp 0x6B4D6475 _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

The Word Spy for 05/01/2003 -- ethnomathematics
by Paul McFedries 06 Jul '18

06 Jul '18

ethnomathematics (ETH.noh.math.uh.mat.iks; th as in thin) n. Mathematics as practiced by non-Western ethnic groups and marginalized groups within Western society. Also: ethno-mathematics. --ethnomathematical adj. --ethnomathematician n. Example Citation --------------------------------- Starting in 1993, he traveled across Africa on a Fulbright scholarship to investigate evidence of fractals in windscreens, carvings and textiles. He explored villages -- once leaning precariously out of a small airplane to take pictures of layout patterns. His resulting book, "African Fractals," argues for a mathematical intelligence in African design more complex than generally appreciated. Eglash's research fits in squarely with "ethnomathematics," a term coined in the '80s and usually used to describe the mathematical practices of smaller or indigenous cultural groups. While ethnomathematicians have studied Mayan calendars and even boomerang flights, a unifying theme is an emphasis on mathematical accomplishments outside the Western canon. Advocates see ethnomathematics as a useful way to make math more expansive and relevant to students from different backgrounds. Critics characterize it as a diversion from numbers that could lead to softer standards. --Michael Hill, "In hair and Latin beats, professor creates math lessons," The Associated Press, April 29, 2003 Example Citation #2 --------------------------------- Ethnomathematics -- the general name mathematician Ubiratan D'Ambrosio of Brazil coined for this study of the concepts, practices, and artifacts through which we discover mathematical elements among peoples living outside or on the margins of Western culture -- teaches us to look at "exotic" forms of mathematics as an intrinsic element of the civilizations in which they have flourished, well worth studying for their own sake. --Dirk J. Struik, "Everybody counts," Technology Review, August 1995 Earliest Citation --------------------------------- Native American Mathematics appears at a time when interest in ethnomathematics is on the increase. Educational projects devoted to developing mathematics materials relevant to the Native American heritage, style of learning, and economic environment are currently under way at Northern Arizona University, Oklahoma State University, and the Fort Ojibway School in Minnesota, to name but a few. An International Study Group on Ethnomathematics has been established, a newsletter on the subject is being published, and international meetings have been scheduled. --Charles G. Moore, "Native American Mathematics (book review), Science, May 22, 1987 First Use --------------------------------- Ethnomathematics [is] the maths practised among cultural groups such as national-tribal societies, labour groups, children of a certain age bracket, professional classes and so on. --Ubiratan D'Ambrosio, "Ethnomathematics and Its Place in the History and Pedagogy of Mathematics," For the Learning of Mathematics: An International Journal of Mathematics Education, February 1985 See Also --------------------------------- design ethnographer: http://www.wordspy.com/words/designethnographer.asp edubabble: http://www.wordspy.com/words/edubabble.asp equity education: http://www.wordspy.com/words/equityeducation.asp fuzzy math: http://www.wordspy.com/words/fuzzymath.asp J curve: http://www.wordspy.com/words/Jcurve.asp mathlete: http://www.wordspy.com/words/mathlete.asp Words About Words --------------------------------- Mathematics may be defined as the subject in which we never know what we are talking about, nor whether what we are saying is true. --Bertrand Russell, Welsh mathematician, philosopher, and essayist, _Mysticism and Logic_, 1917 Miscellanea --------------------------------- The WordSpy mailing list is available in an HTML version that bears an uncanny resemblance to the pages on the Word Spy Web site (see the address below). If you'd like to try it out, send a note to listmanager(a)logophilia.com and include only the command "html wordspy" (without the quotation marks) in the Subject line. For more Word Spy words, see the Word Spy Archives: http://www.wordspy.com/ You are currently subscribed as rah(a)shipwright.com. To drop this address from the list, you have two choices: Send a message to listmanager(a)logophilia.com and include only the command "leave wordspy" (without the quotation marks) in the Subject line. Or, Use the following Web address: http://www.wordspy.com/list/remove.asp?Email=rah@shipwright.com&ID=26169 ======================================================== --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0