July 2018 - cypherpunks-legacy

[drone-list] Montgomery Cty drone crashes during test
by Gregory Foster 06 Jul '18

06 Jul '18

@sUASnews (Mar 5) - "Drone crashes into SWAT team tank during police test near Houston" [1]http://www.suasnews.com/2012/03/12711/drone-crashes-into-swat-team-t ank-during-police-test-near-houston/ gf -- Gregory Foster || [2]gfoster(a)entersection.org @gregoryfoster <> [3]http://entersection.com/ References 1. http://www.suasnews.com/2012/03/12711/drone-crashes-into-swat-team-tank-dur… 2. mailto:gfoster@entersection.org 3. http://entersection.com/ _______________________________________________ drone-list mailing list drone-list(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/drone-list If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tor-talk] Tor and HTTPS graphic
by The23rd Raccoon 06 Jul '18

06 Jul '18

On Wed, Mar 7, 2012 at 12:20 AM, Seth David Schoen <schoen(a)eff.org> wrote: > andrew(a)torproject.is writes: > > I was concerned that the graphic should not make people think that > _no one_ can ever associate them with their browsing when they use > Tor. I've been taught to think of the GPA threat (and other traffic > correlation threats) as real, so I thought people should have some > indication of those threats. Now bear in mind that I'm just a Raccoon, but some time ago I scrawled a proof out that showed that the correlation accuracy of a "dragnet GPA" goes down in proportion to the square of the number of concurrent users using an anonymization service: http://archives.seul.org/or/dev/Sep-2008/msg00016.html The belief that you can test a correlation system independent of a population size is called the Base Rate Fallacy, and I believe much of the PETS timing attack literature suffers from it. In that post I demonstrated the effect the Fallacy has on dragnet correlation. I also gave some example calculations for how accuracy changes from different points of network surveillance with respect to population size and correlation accuracy. With end-to-end encryption and proper Tor cell size choice, the NSAs odds of watching everyone all the time (Example 1 in my post) and getting the correlation right are low and do clearly drop as more people use Tor. Therefore, I think the most accurate representation would be to put a question mark next to the data link between the two NSA dudes in your graphic, because they aren't exactly sharing perfectly; they are consulting each other, correlating observed traffic patterns with some error rate, and rolling the dice. A question mark captures this well. Putting "Capabilities Uncertain" underneath the question mark or as a footnote might be even better, if we already have newspaper articles citing the graphic as proof Tor is broken... P.S. To the list administrators, it looks like the new archives have truncated my proof at the new archive: https://lists.torproject.org/pipermail/tor-dev/2008-September/002493.html _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [ZS] Bitcoin, Empire of void*
by R|diger Koch 06 Jul '18

06 Jul '18

2012/6/30 Lodewijk andri de la porte <l(a)odewijk.nl> > I can't help but plug my e-wallet, bitvau.lt. And about time! Don't keep us oblivious about your progress. > It's going to get a lot more work the next half year but it does what the > reference wallet does already (balance/history/transact/addressmange). > > I intent to offer much more usability oriented services. I don't really > see the value of an online but javascript and encrypted wallet, why not use > a deterministic wallet and seed it with full name, place and date of birth, > etc. and a normal password? You'd get much more security, which is what you > wanted right? > I agree - I actually tried to convince Thomas (author of Electrum) to do it that way. Name, birthplace.... is not really a password, but it's a salt that chages the situation of an attacker. Instead of trying out a passphrase and checking if *any* address matches, he needs to target specifically you. But Thomas doesn't see the difference. Prefixing a good password with an unknown, but guessable salt "R|diger Koch - Anu - Haidelberga - 19121965" is making life of an attacker really miserable - particularly if you add deliberate spelling errors in. The beauty of JS from your POV is that you can shift the responsibility 100% to the user. And there is no point to hack your server, because you hold no user data on your server if the wallet is re-created from the passphrase every time the user "logs in". So you don't need to back-up anything and you can't be taken legally responsible for data loss. -Anu -- Zero State mailing list: http://groups.google.com/group/DoctrineZero ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [ZS] Bitcoin, Empire of void*
by R|diger Koch 06 Jul '18

06 Jul '18

2012/6/30 Lodewijk andri de la porte <l(a)odewijk.nl> > I can't help but plug my e-wallet, bitvau.lt. And about time! Don't keep us oblivious about your progress. > It's going to get a lot more work the next half year but it does what the > reference wallet does already (balance/history/transact/addressmange). > > I intent to offer much more usability oriented services. I don't really > see the value of an online but javascript and encrypted wallet, why not use > a deterministic wallet and seed it with full name, place and date of birth, > etc. and a normal password? You'd get much more security, which is what you > wanted right? > I agree - I actually tried to convince Thomas (author of Electrum) to do it that way. Name, birthplace.... is not really a password, but it's a salt that chages the situation of an attacker. Instead of trying out a passphrase and checking if *any* address matches, he needs to target specifically you. But Thomas doesn't see the difference. Prefixing a good password with an unknown, but guessable salt "R|diger Koch - Anu - Haidelberga - 19121965" is making life of an attacker really miserable - particularly if you add deliberate spelling errors in. The beauty of JS from your POV is that you can shift the responsibility 100% to the user. And there is no point to hack your server, because you hold no user data on your server if the wallet is re-created from the passphrase every time the user "logs in". So you don't need to back-up anything and you can't be taken legally responsible for data loss. -Anu -- Zero State mailing list: http://groups.google.com/group/DoctrineZero ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [Freedombox-discuss] Which mail server do people use with FBX?
by William Gardella 06 Jul '18

06 Jul '18

Mike Warren <spam(a)mike-warren.com> writes: > Adam Colligan <adam(a)adamcolligan.net> writes: > >> Is there a potential capability in FreedomBox to transmit >> substantive, asynchronous messages between two or more parties >> directly through the mesh network, or at least within Tor? > > This sounds along precisely those lines: > > https://github.com/agl/pond See also http://dee.su/cables, already included as a component in Liberti Linux. It's essentially a peer-to-peer mail proxy between Tor hidden services; almost a 2012 take on the old UUCP bang paths, by the look of it. -- WGG I use grml (http://grml.org/) _______________________________________________ Freedombox-discuss mailing list Freedombox-discuss(a)lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[x-risk] Meet the billionaire survivalists - Salon.com
by Hughes, James J. 06 Jul '18

06 Jul '18

http://www.salon.com/2013/04/06/meet_the_billionaire_survivalists_partner/ Saturday, Apr 6, 2013 Meet the billionaire survivalists Third-world moguls are prepping for political and economic collapse by buying up property in America's top cities By Lynn Stuart Parramore A recent article from Vanity Fair paints a curious picture of Londonbs well-heeled Knightsbridge, a neighborhood of quaint Victorian houses and elegant hotels serving high tea. Today, a ginormous complex of concrete and metal towers looms above; a development some call the worldbs most exclusive address. Though London has long been a place where the cops donbt even carry guns, security is the watchword at One Hyde Park: high-tech panic rooms, bulletproof glass and b bowler-hatted guards trained by British Special Forcesb offer residents the promise of perfect safety and privacy in luxurious surroundings. Only, nobody really lives there. At night, the building is nearly pitch-dark despite the fact that most of the units have been sold. The story of who bought these apartments and why reveals the complex dynamics of a tectonic economic shift that is creating a bumper crop of billionaires in the Third World as the austerity-strapped First World stagnates. This year, Forbes magazinebs annual list of billionaires included the first recorded in Angola, Nepal, Swaziland and Vietnam. Japan, once second in the number of billionaires, has been left behind by Russia and China. Europe long boasted the most billionaires after the U.S. but the Asia-Pacific region has taken off and may soon leave Europe in the dust. Today it is home to 386 10-figure fortunes (a decade ago, there were only 61). The worldbs wealthiest person is a Mexican telecom mogul, Carlos Slim. Vanity Fair reports that many of the apartments at One Hyde Park are owned by people who donbt want their identities revealed, people who hide behind the names of odd-sounding corporations registered in tax havens like the Cayman Islands. Others are Russian oligarchs, Chinese moguls and a Nigerian telecom tycoon. Rinat Akhmetov, the Ukrainebs 16 Billion Dollar Man, is a typical buyer. Attracted to Londonbs lax regulation and weak enforcement of things financial, these plutocrats are looking to protect their stratospheric fortunes and hedge against unpleasantries that might develop at home. What appears to be a story of real estate is really a tale of offshore financing and a new class of global elites creating the ultimate gated community. As Britain and other First World countries sink into the mire of austerity, a tsunami of unfettered capitalism is spreading over the Third World and the BRIC countries (Brazil, Russia, India and China). Headlong capitalist growth tends to create instability and a growing trend of authoritarianism. Many of the new elites are living under semi-dictatorial regimes, and they need safe havens in the event of a collapsed government or a dictator who decides to give them the boot. They require real estate as insurance against economic catastrophe. You might call them the Billionaire Doomsday Preppers. Preparing for an economic or political collapse of the world as we know it is no longer reserved for paranoids living in flyover states who stockpile canned goods. The new 1 percenters are worried about a day of reckoning, too, and theybre scouring the globe for places to stash cash and putting their trust in First World security in the increasingly likely event of Third World meltdown. Big money has got a bug-out plan. These survivalists are also turning their attention to New York: The daughter of Dmitry Rybolovlev, a Russian potash fertilizer mogul, recently snapped up the penthouse at 15 Central Park West for a jaw-dropping $88 million. Miami is another popular choice, a favorite of Brazilian barons. The New York Times reports that economically distressed First World cities like Milan and Dublin will join the roster of b core European targetsb for the new plutocrats. Political and business elites in the U.K. and the U.S. have helped create global economic instability and continue to push for austerity-driven policies that hold down growth at home. But, as always, itbs the population that gets to live with it. The new wave of 1 percenters are driving up the price of real estate in the most desirable neighborhoods, edging out middle-class and upper-middle-class residents. If you see the price of your favorite restaurant meal in Manhattan going up, you can thank the Ukrainian plutocrat next door. Or wherever he is. The rates for high-end services like personal trainers and housekeepers will likely increase. (Escorts, too, probably.) Whatever the freshly-minted rich want more of, everyone else will pay more for. For the Billionaires Survivalist Club, therebs no place like home, someplace else. _______________________________________________ existential mailing list existential(a)ieet.org https://mailman-mail5.webfaction.com/listinfo/existential ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[liberationtech] Hackerbus: First Tour Dates: Switzerland, France, Spain, Portugal
by Moritz Bartl 06 Jul '18

06 Jul '18

Hi Libtechs, I was asked to keep this list updated every once in a while, and I am happy to do so. Libtech readers are amongst the most important people I want to reach out to. Are you a researcher working on liberation technology in Europe? Human rights activist? Journalist focussing on privacy? I would very much like to meet and chat with you! Please also fill me in about related conferences and other events taking place in Europe. http://www.hackerbus.eu/blog/2012/03/11/first-tour-dates-switzerland-france… I am excited to finally announce the beginning of my tour! As a reminder, the Hackerbus serves as a b frameworkb for documenting modern forms of living and working: It carries professional equipment for high quality movie making, taking pictures, recording interviews b whatever you and me make out of it! There is no way for me to do this alone, and it is unlikely to find someone to tour with me the whole year. While I do have some ideas about what to visit, I donbt want to constrain this tour too much, to be open for all kinds of suggestions and detours. I hope you understand that for this reason I can only give you a very rough schedule. Please contact me if you know people and places I should come visit! * from March 18th, 2012: Switzerland * April 2012: Southern France, Spain * May 2012: Portugal, Northern France Some of the equipment: * Panasonic Lumix GH2 with 14-42mm and 20mm lenses * Rode NTG-2 shotgun microphone * Zoom H4N audio recorder * >10 TB storage * last not least: a van with several spare seats and a bed etc. What do you get from inviting me? Many of you know me as the founder of Torservers.net. Apart from the obvious offer to get your message out on video, I am very interested to talk about communication security (proper use of PGP, Tor etc), apocalyptical thinking as philosophical discipline, and community building. In preparation I was not as organized as I could have been, but hey b webre all in it for the fun! ;-) Please donbt be mad at me if you have already contacted me and never heard back. Ping me again! Stay tuned for more updates soon. Now is a good time to add the RSS feed to your reader and follow me on Twitter. http://www.hackerbus.eu/feed http://www.twitter.com/hackerbus -- Moritz Bartl @gamamb http://www.hackerbus.eu/ https://www.torservers.net/ _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [p2p-hackers] Pirate Pay
by danimoth 06 Jul '18

06 Jul '18

On 14/05/12 at 08:36am, Vijay K. Gurbani wrote: > > This looks like Pirate Pay is injecting multiple sybils into the > DHT with node-IDs close to the info-hash of the file, thus making > the sybils responsible for the file. This assures that all queries > are sent to the sybils, allowing the sybils to sent out false > information to the other peers. In 2007 Ingmar Baumgart and Sebastian Mies have released a paper where they try to fix this (and two other) issues [1]. [1] http://doc.tm.uka.de/SKademlia_2007.pdf _______________________________________________ p2p-hackers mailing list p2p-hackers(a)lists.zooko.com http://lists.zooko.com/mailman/listinfo/p2p-hackers ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[liberationtech] Hackerbus: First Tour Dates: Switzerland, France, Spain, Portugal
by Moritz Bartl 06 Jul '18

06 Jul '18

Hi Libtechs, I was asked to keep this list updated every once in a while, and I am happy to do so. Libtech readers are amongst the most important people I want to reach out to. Are you a researcher working on liberation technology in Europe? Human rights activist? Journalist focussing on privacy? I would very much like to meet and chat with you! Please also fill me in about related conferences and other events taking place in Europe. http://www.hackerbus.eu/blog/2012/03/11/first-tour-dates-switzerland-france… I am excited to finally announce the beginning of my tour! As a reminder, the Hackerbus serves as a b frameworkb for documenting modern forms of living and working: It carries professional equipment for high quality movie making, taking pictures, recording interviews b whatever you and me make out of it! There is no way for me to do this alone, and it is unlikely to find someone to tour with me the whole year. While I do have some ideas about what to visit, I donbt want to constrain this tour too much, to be open for all kinds of suggestions and detours. I hope you understand that for this reason I can only give you a very rough schedule. Please contact me if you know people and places I should come visit! * from March 18th, 2012: Switzerland * April 2012: Southern France, Spain * May 2012: Portugal, Northern France Some of the equipment: * Panasonic Lumix GH2 with 14-42mm and 20mm lenses * Rode NTG-2 shotgun microphone * Zoom H4N audio recorder * >10 TB storage * last not least: a van with several spare seats and a bed etc. What do you get from inviting me? Many of you know me as the founder of Torservers.net. Apart from the obvious offer to get your message out on video, I am very interested to talk about communication security (proper use of PGP, Tor etc), apocalyptical thinking as philosophical discipline, and community building. In preparation I was not as organized as I could have been, but hey b webre all in it for the fun! ;-) Please donbt be mad at me if you have already contacted me and never heard back. Ping me again! Stay tuned for more updates soon. Now is a good time to add the RSS feed to your reader and follow me on Twitter. http://www.hackerbus.eu/feed http://www.twitter.com/hackerbus -- Moritz Bartl @gamamb http://www.hackerbus.eu/ https://www.torservers.net/ _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [p2p-hackers] Pirate Pay
by danimoth 06 Jul '18

06 Jul '18

On 14/05/12 at 08:36am, Vijay K. Gurbani wrote: > > This looks like Pirate Pay is injecting multiple sybils into the > DHT with node-IDs close to the info-hash of the file, thus making > the sybils responsible for the file. This assures that all queries > are sent to the sybils, allowing the sybils to sent out false > information to the other peers. In 2007 Ingmar Baumgart and Sebastian Mies have released a paper where they try to fix this (and two other) issues [1]. [1] http://doc.tm.uka.de/SKademlia_2007.pdf _______________________________________________ p2p-hackers mailing list p2p-hackers(a)lists.zooko.com http://lists.zooko.com/mailman/listinfo/p2p-hackers ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0