July 2018 - cypherpunks-legacy

[Politech] DEA key logger docs in Ecstasy drug case posted online [priv]
by Declan McCullagh 06 Jul '18

06 Jul '18

I've placed two relevant documents from the DEA key logger use here: http://politechbot.com/docs/forrester.alba.dea.investigation.report.070907.… http://politechbot.com/docs/forrester.alba.dea.key.logger.070907.pdf I remember writing this article for Wired in 2001 about how one antivirus company reportedly contacted the FBI and pledged not to detect malicious fedware: http://www.wired.com/politics/law/news/2001/11/48648 It seems that spyware and key loggers are far more advanced and commonplace today than they were six years ago, as are anti-spyware tools. I wonder if the FBI could seek a court order requiring an anti-spyware company not to report fedware (as in, fedware would be whitelisted if detected and the customer would not be alerted). Anyone worried about this could always run free software, where the risk to a user would be lower. (Yes, I know, the compiler could be compromised or a clever and subtle backdoor in the source not detected, but it's still less risky if that's the threat model.) Previous Politech message: http://www.politechbot.com/2007/07/11/dea-key-logger/ -Declan _______________________________________________ Politech mailing list Archived at http://www.politechbot.com/ Moderated by Declan McCullagh (http://www.mccullagh.org/) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tor-talk] [liberationtech] Not another Haystack right?
by E483FFF6 06 Jul '18

06 Jul '18

On 02/12/11 22:47, Andrew wrote: > I've spent a lot of time working on issues with Syria lately, > the universal report is that tor is terrible slow, they can't > use tails because it takes too long to download/ is blocked, > and their data might leak if if they use Tor, so using a VPN > with some precautions taken is much more appetizing. Responding to criticism about cooperating with the US investigation of LulzSec, HideMyAss said: "Regarding censorship bypassing, some have stated it is hypocritical for us to claim we do not allow illegal activity, and then claim our service is used in some countries to bypass censorship illegally. Again we follow UK law, there isnbt a law that prohibits the use of Egyptians gaining access to blocked websites such as Twitter, even if there is one in Egypt b& though there are certainly laws regarding the hacking of government and corporate systems." See http://blog.hidemyass.com/2011/09/23/lulzsec-fiasco/ One precaution might be to choose VPN services in jurisdictions unfriendly to your own. Perhaps Russian VPN services would more likely cooperate with Syria? Would US ones be less likely? _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Alternative Physics - Tom Bearden's site
by Gary Jeffers 06 Jul '18

06 Jul '18

Alternative Physics - Tom Bearden's site My fellow Cypherpunks, I've found a really interesting site based on alternative physics. http://www.cheniere.org - Tom Bearden's site. The site also deals with free energy, zero point energy, scalars, health physics, alternate physics weapons, and mind control physics. Some of Bearden's interesting pages: THE FINAL SECRET OF FREE ENERGY http://www.cheniere.org/techpapers/final%secret%209%20feb%201993/index.html - It may or may not be necessary to replace "%" with blanks. ANNOTATED GLOSSARY BY TOM BEARDEN (of physics) http://www.intalek.com/warpdrive/glossary1.pdf Some teasing bait for physicists: 34 FLAWS IN CLASSICAL EM THEORY http://www.cheniere.org/misc/34flaws.htm A VISUAL TOUR OF WHAT THEY DON'T WANT YOU TO KNOW ABOUT ELECTRICAL CIRCUITS http://www.cheniere.org/briefings/circuitcurrents/index.html If this site is true then "EVERYTHING YOU KNOW IS WRONG!" The quote is from FireSign Theater - a comedy group. Yours Truly, Gary Jeffers Beat State! _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

1 0

[Politech] DEA key logger docs in Ecstasy drug case posted online [priv]
by Declan McCullagh 06 Jul '18

06 Jul '18

I've placed two relevant documents from the DEA key logger use here: http://politechbot.com/docs/forrester.alba.dea.investigation.report.070907.… http://politechbot.com/docs/forrester.alba.dea.key.logger.070907.pdf I remember writing this article for Wired in 2001 about how one antivirus company reportedly contacted the FBI and pledged not to detect malicious fedware: http://www.wired.com/politics/law/news/2001/11/48648 It seems that spyware and key loggers are far more advanced and commonplace today than they were six years ago, as are anti-spyware tools. I wonder if the FBI could seek a court order requiring an anti-spyware company not to report fedware (as in, fedware would be whitelisted if detected and the customer would not be alerted). Anyone worried about this could always run free software, where the risk to a user would be lower. (Yes, I know, the compiler could be compromised or a clever and subtle backdoor in the source not detected, but it's still less risky if that's the threat model.) Previous Politech message: http://www.politechbot.com/2007/07/11/dea-key-logger/ -Declan _______________________________________________ Politech mailing list Archived at http://www.politechbot.com/ Moderated by Declan McCullagh (http://www.mccullagh.org/) ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [tor-talk] [liberationtech] Not another Haystack right?
by E483FFF6 06 Jul '18

06 Jul '18

On 02/12/11 22:47, Andrew wrote: > I've spent a lot of time working on issues with Syria lately, > the universal report is that tor is terrible slow, they can't > use tails because it takes too long to download/ is blocked, > and their data might leak if if they use Tor, so using a VPN > with some precautions taken is much more appetizing. Responding to criticism about cooperating with the US investigation of LulzSec, HideMyAss said: "Regarding censorship bypassing, some have stated it is hypocritical for us to claim we do not allow illegal activity, and then claim our service is used in some countries to bypass censorship illegally. Again we follow UK law, there isnbt a law that prohibits the use of Egyptians gaining access to blocked websites such as Twitter, even if there is one in Egypt b& though there are certainly laws regarding the hacking of government and corporate systems." See http://blog.hidemyass.com/2011/09/23/lulzsec-fiasco/ One precaution might be to choose VPN services in jurisdictions unfriendly to your own. Perhaps Russian VPN services would more likely cooperate with Syria? Would US ones be less likely? _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [Freedombox-discuss] FreedomBox and Bitcoin (and the petition)
by Melvin Carvalho 06 Jul '18

06 Jul '18

On 12 November 2012 09:32, Daniel Pocock <daniel(a)pocock.com.au> wrote: > > > I'm just wondering if anybody has done any analysis of the suitability > of Bitcoin for FreedomBox? > Bitcoin is quite resource intensive, the block chain is large and growing, so to set it up takes time. On a small plug computer this is quite a bit of work and may be tricky (i dont know if you could renice it). Then you need to open a few ports, and also you'll become a target for people wanting to steal your wallet.dat (either from the web or your own house!). If those hurdles can be overcome, there could be a good match. > > For example, Bitcoin provides a certain amount of anonymity, but not > complete privacy. In other words, anybody can create an anonymous > Bitcoin account, but anyone else can trace the movements of Bitcoins > through that account. Does this lack of 100% privacy make it awkward > for FreedomBox to include Bitcoin? > The block chain is public, but you can have a new key for each transaction. > > What Bitcoin does excel at is providing an alternative money supply. In > previous eras of bank failure (e.g. over 9,000 US banks went pop in the > 1930s) people reverted to gold and silver. Nowadays, so many of us are > involved in businesses that rely on ecommerce and distant clients paying > for virtual/intangible services. Most trade relies on electronic > payment by bank transfer or credit card, not a physical meeting with > cash. Iceland's banks went pop and it's been speculated that Greek > banks will go the same way when they leave the Euro. It seems like > fertile ground for a solution like Bitcoin deployed on a convenient > platform like FreedomBox. > There's over 200 alternative money supplies and more growing. One possibility is to focus on one of them (bitcoin is probably the poster child) another is to stitch many together in exchanges etc. > > There is also the diversity of businesses supported by Bitcoin - it can > be very difficult for a business to start accepting credit card > payments, banks often insist that the business already has capital or > real estate. But any start-up business can accept Bitcoin payment > without such discrimination. > This is a system that goes back 100s of years to the time of horse and cart, it wont be replaced overnight. There's over 1000 bitcoin merchants now and many exchanges. I think what would be extremely valuable would be a freedombox economy where people get credits for helping each other out. e.g. with valuable services such as VPN, storage, encrypted backup, routing ... all the stuff that Amazon EC2 offers (which fbx could securely replace). This paradigm works well in, for example, private torrent networks. Once you can offer value, either for free or as a service, the feasibility of a currency becomes more valid. I'd love to see freedombox plans where you get the hardware cheaply and can pay for it by offering cloud storage to the community, for example. Then roll out the hardware to a large population, making the network stronger and more resilient. > > Back to the original question though: do these potential social benefits > outweigh the lack of 100% privacy in Bitcoin? Is there a `privacy > threshold' for something to be included in FreedomBox? > Freedombox can have its own currency, there's a few systems such as opentransactions that provide anonymity. Ben Laurie has written a paper saying that you can operate a lottery instead of using huge amounts of electricity to generate coins. > > Also, somebody has started a petition to ask the ISO to provide a > three-letter symbol for Bitcoin (BTC is not officially recognised yet): > > > > http://www.change.org/petitions/six-interbank-clearing-include-a-symbol-for… > ISO is unlikely to bite here. But why would you want to? Dont think in terms of legacy currencies, just use a URL for currencies and you have the freedom of the whole web, without gatekeepers. > > > _______________________________________________ > Freedombox-discuss mailing list > Freedombox-discuss(a)lists.alioth.debian.org > http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss > _______________________________________________ Freedombox-discuss mailing list Freedombox-discuss(a)lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[FoRK] Does the web have a public timestamper?
by Russell Turpin 06 Jul '18

06 Jul '18

Long ago, I thought some site -- maybe a certificate source like Thawte? -- should provide a provable timestamping service over the web. The basic idea is that when an application wants to timestamp some item, such as an entry in QuickBooks or an executed PDF or whatever, it would (1) generate a signature of the item, using SHA1 or the favorite hash function du jour, (2) then post a request to the timestamp site with the signature, (3) in the hope of receiving (a) a global timestamp and (b) a validation signature of the timestamp and item signature. The website also would maintain a globally accessible log, by time, of what validation signatures it had generated. These provide independent proof if ever needed that the item was indeed timestamped -- and hence, existed -- when claimed. It seems to me that this would be useful for a broad range of applications, from bookkeepping to facility monitoring. I can imagine all sorts of reasons for wanting a verified timestamp, from the legal to the mundane. Is anyone doing this? _______________________________________________ FoRK mailing list http://xent.com/mailman/listinfo/fork ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] Military Expands Intelligence Role in U.S. - New York Times
by David Farber 06 Jul '18

06 Jul '18

[1]http://www.nytimes.com/2007/01/14/washington/14spy.html?ei=5094&en= 203bd3d1f0cd9644&hp=&ex=1168750800&partner=homepage&pagewanted=print January 14, 2007 Military Expands Intelligence Role in U.S. By [2]ERIC LICHTBLAU and [3]MARK MAZZETTI WASHINGTON, Jan. 13 The Pentagon has been using a little-known power to obtain banking and credit records of hundreds of Americans and others suspected of terrorism or espionage inside the United States, part of an aggressive expansion by the military into domestic intelligence gathering. The [4]C.I.A. has also been issuing what are known as national security letters to gain access to financial records from American companies, though it has done so only rarely, intelligence officials say. Banks, credit card companies and other financial institutions receiving the letters usually have turned over documents voluntarily, allowing investigators to examine the financial assets and transactions of American military personnel and civilians, officials say. <snip> _________________________________________________________________ _________________________________________________________________ You are subscribed as eugen(a)leitl.org To manage your subscription, go to [5]http://v2.listbox.com/member/?listname=ip Archives at: [6]Archives | [7]Modify Your Subscription | [8]Unsubscribe [9]Listbox Email Marketing References Visible links 1. http://www.nytimes.com/2007/01/14/washington/14spy.html?ei=5094&en=203bd3d1… cd9644&hp=&ex=1168750800&partner=homepage&pagewanted=print 2. http://topics.nytimes.com/top/reference/timestopics/people/l/eric_lichtblau… ndex.html?inline=nyt-per 3. http://topics.nytimes.com/top/reference/timestopics/people/m/mark_mazzetti/… dex.html?inline=nyt-per 4. http://topics.nytimes.com/top/reference/timestopics/organizations/c/central… ntelligence_agency/index.html?inline=nyt-org 5. http://v2.listbox.com/member/?listname=ip 6. http://archives.listbox.com/247/ 7. http://v2.listbox.com/member/?member_id=125019&user_secret=59fc1126 8. http://v2.listbox.com/unsubscribe/?id=125019-59fc1126-rddgusqk 9. http://www.listbox.com/ Hidden links: 10. http://www.interesting-people.org/archives/intere</p><tableborder= ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[FoRK] Does the web have a public timestamper?
by Russell Turpin 06 Jul '18

06 Jul '18

Long ago, I thought some site -- maybe a certificate source like Thawte? -- should provide a provable timestamping service over the web. The basic idea is that when an application wants to timestamp some item, such as an entry in QuickBooks or an executed PDF or whatever, it would (1) generate a signature of the item, using SHA1 or the favorite hash function du jour, (2) then post a request to the timestamp site with the signature, (3) in the hope of receiving (a) a global timestamp and (b) a validation signature of the timestamp and item signature. The website also would maintain a globally accessible log, by time, of what validation signatures it had generated. These provide independent proof if ever needed that the item was indeed timestamped -- and hence, existed -- when claimed. It seems to me that this would be useful for a broad range of applications, from bookkeepping to facility monitoring. I can imagine all sorts of reasons for wanting a verified timestamp, from the legal to the mundane. Is anyone doing this? _______________________________________________ FoRK mailing list http://xent.com/mailman/listinfo/fork ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] Military Expands Intelligence Role in U.S. - New York Times
by David Farber 06 Jul '18

06 Jul '18

[1]http://www.nytimes.com/2007/01/14/washington/14spy.html?ei=5094&en= 203bd3d1f0cd9644&hp=&ex=1168750800&partner=homepage&pagewanted=print January 14, 2007 Military Expands Intelligence Role in U.S. By [2]ERIC LICHTBLAU and [3]MARK MAZZETTI WASHINGTON, Jan. 13 The Pentagon has been using a little-known power to obtain banking and credit records of hundreds of Americans and others suspected of terrorism or espionage inside the United States, part of an aggressive expansion by the military into domestic intelligence gathering. The [4]C.I.A. has also been issuing what are known as national security letters to gain access to financial records from American companies, though it has done so only rarely, intelligence officials say. Banks, credit card companies and other financial institutions receiving the letters usually have turned over documents voluntarily, allowing investigators to examine the financial assets and transactions of American military personnel and civilians, officials say. <snip> _________________________________________________________________ _________________________________________________________________ You are subscribed as eugen(a)leitl.org To manage your subscription, go to [5]http://v2.listbox.com/member/?listname=ip Archives at: [6]Archives | [7]Modify Your Subscription | [8]Unsubscribe [9]Listbox Email Marketing References Visible links 1. http://www.nytimes.com/2007/01/14/washington/14spy.html?ei=5094&en=203bd3d1… cd9644&hp=&ex=1168750800&partner=homepage&pagewanted=print 2. http://topics.nytimes.com/top/reference/timestopics/people/l/eric_lichtblau… ndex.html?inline=nyt-per 3. http://topics.nytimes.com/top/reference/timestopics/people/m/mark_mazzetti/… dex.html?inline=nyt-per 4. http://topics.nytimes.com/top/reference/timestopics/organizations/c/central… ntelligence_agency/index.html?inline=nyt-org 5. http://v2.listbox.com/member/?listname=ip 6. http://archives.listbox.com/247/ 7. http://v2.listbox.com/member/?member_id=125019&user_secret=59fc1126 8. http://v2.listbox.com/unsubscribe/?id=125019-59fc1126-rddgusqk 9. http://www.listbox.com/ Hidden links: 10. http://www.interesting-people.org/archives/intere</p><tableborder= ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0