July 2018 - cypherpunks-legacy

Voice Over IP On Wireless Mesh
by brian-slashdotnews＠hyperreal.org 06 Jul '18

06 Jul '18

Link: http://slashdot.org/article.pl?sid=04/04/14/1856224 Posted by: timothy, on 2004-04-14 19:21:00 Topic: wireless, 55 comments from the network-is-the-network dept. infractor writes "ZDNet [1]is reporting that the Linux based [2]LocustWorld Mesh system now has [3]SIP routing at every node. The [4]LocustWorld boxes have been widely used in [5]community broadband projects where DSL is not available, so successfully that they have been [6]seen as a threat to next generation mobile networks. With the addition of VoIP support, these mesh networks can now compete with the telcos on voice as well as data services. [7]More details here." [8]Click Here References 1. http://news.zdnet.co.uk/communications/wireless/0,39020348,39151531,00.htm 2. http://locustworld.com/ 3. http://www.faqs.org/rfcs/rfc2543.html 4. file://slashdot.org/article.pl?sid=02/10/31/2049201&tid=126 5. http://www.muniwireless.com/archives/000201.html 6. http://locustworld.com/media/timesbusiness290104.gif 7. http://locustworld.com/siprouting.php 8. http://ads.osdn.com/?ad_id=2872&alloc_id=7019&site_id=1&request_id=7791007&… =click&page=%2farticle%2epl ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

The Newbie's Guide to Detecting the NSA
by John Bartas 06 Jul '18

06 Jul '18

Dave, This entry from the blog at wired.com might be good for the IP list. The best part is at the end. Good old traceroute! -------------------------------------------------------- The Newbie's Guide to Detecting the NSA http://blog.wired.com/27BStroke6/#1510938 ... "With that in mind, here's the 27B Stroke 6 guide to detecting if your traffic is being funneled into the secret room on San Francisco's Folsom street. If you're a Windows user, fire up an MS-DOS command prompt. Now type tracert followed by the domain name of the website, e-mail host, VoIP switch, or whatever destination you're interested in. Watch as the program spits out your route, line by line. C:\> tracert nsa.gov 1 2 ms 2 ms 2 ms 12.110.110.204 [...] 7 11 ms 14 ms 10 ms as-0-0.bbr2.SanJose1.Level3.net [64.159.0.218] 8 13 12 19 ms ae-23-56.car3.SanJose1.Level3.net [4.68.123.173] 9 18 ms 16 ms 16 ms 192.205.33.17 10 88 ms 92 ms 91 ms tbr2-p012201.sffca.ip.att.net [12.123.13.186] 11 88 ms 90 ms 88 ms tbr1-cl2.sl9mo.ip.att.net [12.122.10.41] 12 89 ms 97 ms 89 ms tbr1-cl4.wswdc.ip.att.net [12.122.10.29] 13 89 ms 88 ms 88 ms ar2-a3120s6.wswdc.ip.att.net [12.123.8.65] 14 102 ms 93 ms 112 ms 12.127.209.214 15 94 ms 94 ms 93 ms 12.110.110.13 16 * * * 17 * * * 18 * * In the above example, my traffic is jumping from Level 3 Communications to AT&T's network in San Francisco, presumably over the OC-48 circuit that AT&T tapped on February 20th, 2003, according to the Klein docs. The magic string you're looking for is sffca.ip.att.net. If it's present immediately above or below a non-att.net entry, then -- by Klein's allegations -- your packets are being copied into room 641A, and from there, illegally, to the NSA. Of course, if Marcus is correct and AT&T has installed these secret rooms all around the country, then any att.net entry in your route is a bad sign. ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] The Newbie's Guide to Detecting the NSA
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

[liberationtech] Secret Government Document Reveals: German Federal Police Plans To Use Gamma FinFisher Spyware
by ilf 06 Jul '18

06 Jul '18

https://netzpolitik.org/2013/secret-government-document-reveals-german-fede… The German Federal Police office has purchased the commercial Spyware toolkit FinFisher of Eleman/Gamma Group. This is revealed by a secret document of the Ministry of the Interior, which we are publishing exclusively. Instead of legitimizing products used by authoritarian regimes for the violation of human rights, the German state should restrict the export of such state malware. In October 2011, German hacker organization Chaos Computer Club (CCC) analyzed a malware used by German government authorities. The product of the German company DigiTask was not just programmed badly and lacking elementary security, it was in breach of German law. In a landmark case, the Federal Constitutional Court of Germany ruled in 2008 that surveillance software targeting telecommunications must be technologically limited to a specific task. Instead, the CCC found that the DigiTask software took over the entire computer and included the option to remotely add features, thereby clearly violating the court ruling. Since then, many German authorities have stopped using DigiTask spyware and started to create their own state malware. For this task, a b Center of Competence for Information Technology Surveillance (CC ITC )b was established, sporting a three million Euro budget and a team of 30 people. Today, the Federal Ministry of the Interior is informing the Federal Parliament Bundestag about the centers progress and work. Members of the Finance Committee of the German Parliament are receiving a classified document, that we are now publishing. (text) According to the document (in German only) dated December 7, the Federal Criminal Police Office plans to finish the development of their own surveillance malware until the end of 2014. There is no word on the progress or even how many developers have applied for the job, which seems to be frowned upon by many German hackers. In the meantime, the Federal Police plans to continue using commercial software. In a b market surveyb, they have assessed b three products as generally suitableb. The result: > The Federal Criminal Police Office has acquired, for the event a use is > necessary, a commercial product of the company Eleman/Gamma. The Gamma Group of Companies, a network of companies linked to offshore secrecy, is behind the infamous FinFisher/FinSpy IT intrusion software kit developed in Germany and used by authoritarian regimes across the world to spy on political activists. The software is highly sophisticated and can completely take over a veriety of devices, including Windows, OS X, Linux, iOS, Android, Symbian, Blackberry and Windows Mobile. A promotional video advertises the ability of b remote intrusionb via fake updates from mobile carriers and Internet providers. The experienced team behind FinFisher/FinSpy is less likely to implement b significant design and implementation flawsb, as the CCC diagnosed for DigiTask. But with strong clues that authoritarian regimes such as Bahrain, United Arab Emirates, Qatar, Ethiopia, Mongolia and Turkmenistan are using those products, the German state is sending a dangerous political message by using exactly the same software itself. In Britain, the Secretary of State put FinSpy software under export restrictions, requiring the Gamma company to acquire a licence to export these tools. In Germany, we are also calling for export restrictions to stop the sale of western surveillance technology to regimes known for their violation of human rights. Besides this fundamental criticism, it also remains unclear if this spyware developed for international customers can meet the high standards set by the Constitutional Court for the use of such software in Germany. As discovered by the CCC, DigiTask was breaking the law by allowing to update installed malware and adding new features from remote. Although Gamma keeps its software secret, current research suggests that the FinFisher/FinSpy toolkit consists of a basic module (the trojan) that can also remotely load additional b feature modulesb, for example a module for recording Skype conversations. Analysts who have looked at FinFisher parts told netzpolitik.org that they have not seen limits on what additional modules can be loaded or even a signature verification of additional modules. If this is indeed the case, this would clearly violate German law. Since the CCC analysis showed that the current German state trojan was able to do more than allowed, it should be obvious that all future spyware must be verified before use. According to the document, both the Federal Commissioner for Data Protection and Freedom of Information and the Federal Office for Information Security are not able to audit the source code of the program to check if it complies with the legal requirements. For this reason, the German part of IT corporation Computer Sciences Corp was tasked with the review, which was supposed to be finished in December. The document does not mention the progress or results of such an audit. There are also no mentions of a amount which the Federal Police is paying to Gamma, the terms of a sale or licensing, or whether German officials have already used the software. Gamma spokesperson and developer Martin J. MC<nch has not answered questions sent by netzpolitik.org. CCC spokesperson Frank Rieger states: > With the purchase of Gamma FinFisher, the Federal Criminal Police > Office has chosen a vendor that has become a symbol for the use of > surveillance technology in oppressive regimes worldwide. FinFisher also > consists of various components, which can be loaded when needed, > thereby allowing the installation of spying capabilities that go far > beyond the already questionable b wiretapping at the sourceb . -- ilf C ber 80 Millionen Deutsche benutzen keine Konsole. Klick dich nicht weg! -- Eine Initiative des Bundesamtes fC<r Tastaturbenutzung -- Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [cryptography] abstract: Air to Ground Quantum Key Distribution
by D. J. Bernstein 06 Jul '18

06 Jul '18

Zack Weinberg writes: > I've seen claims that quantum key agreement lets both parties detect a > man in the middle with no prior communication and no trusted third party. Nope. The security of QKE relies on the parties both knowing a shared secret key to authenticate messages. This begs the questions of (1) how the parties communicated this secret---this doesn't have to be a _prior_ secure channel but it does have to be a separate secure channel; (2) why the parties are bothering to use QKE to generate randomness when they can much more cheaply generate local randomness and send it through the separate secure channel; and (3) why the parties are bothering to generate so much randomness in the first place when they can much more cheaply use the key as an AES key to encrypt and authenticate messages. See http://cr.yp.to/talks/2009.10.06/slides2.pdf for a more detailed cost-benefit analysis. ---D. J. Bernstein Research Professor, Computer Science, University of Illinois at Chicago _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: Verizon FiOS - is BGP an option?
by Owen DeLong 06 Jul '18

06 Jul '18

On Aug 3, 2012, at 12:31 , William Herrin <bill(a)herrin.us> wrote: > On Fri, Aug 3, 2012 at 8:51 AM, Seth Mattinen <sethm(a)rollernet.us> wrote: >> On 8/3/12 8:56 AM, William Herrin wrote: >>> It >>> seems the telcos and cable companies don't consider the commodity >>> Internet part of their equipment to be something which needs >>> electricity during an extended grid outage. Cox. Verizon. I'm looking >>> at you. >> >> Most don't, and for the price being paid on commodity connections I feel >> indifferent about it. > > Back in the day they kept my land line phone on during extended power > outages. And that was when they had to power the phone. Now all they > have to do is power the equipment on their end of the line. My phone's > out because hey, voip. My Sprint cell phone's out because the fools > can't power their towers. It's 105 degrees out and I'm screwed if > someone has a heat stroke because we can't even call 911. > 48vDC battery to power your phone up to 3 ringer equivalences was a pretty light load overall, compared to PON aggregators for all those neighborhoods. Further, as noted above the PON equipment is much more widely distributed than powering your phone. Powering your phone was straight DC down the same copper wire as your service. Powering the PON aggregators, well, unless you've got some magic new technology for powering them via fiber is a bit more involved and quite a bit more amperage per conductor than POTS. > >> The central plant days are mostly gone; there's >> fiber huts everywhere and not enough trucks/manpower (in my area a >> lineman sits in his truck and reads a book while tethered to the power >> kiosk) to run them all if the outage is too widespread for too long. > > They put a quarter million dollars into the fiber hut. They can't put > a $500 gasoline generator in a warehouse 50 miles away and go pick it > up when there's an extended outage? That's a lot of generators and a lot of people to go pull them out and make sure they don't walk off during said extended outage. > I'll give Verizon a little credit. They restored service after about > 12 hours of outage. Cox didn't restore service until 12 hours *after* > my power came back on. > Seems pretty reasonable to me given the scale of the outage. > Could be worse. I could have Pepco instead of Dominion. But it could > be better. And 20 years ago the reliability was. 20 years ago you didn't have a megabit to your home let alone many megabits. 20 years ago, POTS was much simpler than the converged networks we have today. There is something to be said for the simplicity of POTS. If you're that concerned about calling 911 for a heat stroke, why don't you maintain a POTS line? Owen ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Donald Knuth stops paying for errata
by Perry E. Metzger 06 Jul '18

06 Jul '18

It seems that Donald Knuth had his bank accounts attacked not once but three times using his checking account number off of checks he sent out for bounties for flaws in his books and software, and is thus ending a practice of nearly 40 years. Rather sad. I mark this as another milestone in the slow destruction of the idea that it is okay for an account number to be the secret used to effect payment in a transaction system. http://www-cs-faculty.stanford.edu/~knuth/news08.html Perry -- Perry E. Metzger perry(a)piermont.com --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com

1 0

effectively prevent computer radiation
by shenzhen xiongfeng 06 Jul '18

06 Jul '18

In the modern society, the computer has already become an essential tool for the people to live and work. While it brings many conveniences to the people, it also brings some worries and anxieties, especially computer radiation, which does much harm to human body. Through more than one year' study and research, Xiongfeng Technology Cor., Ltd explores the first generation high-tech product -- FANGFUWANG. FANGFUWANG makes full use of its powerful absorption so that it can effectively absorb any kind of electromagnetic wave (radiation) and prevent the disease caused by radiation. The main material of FANGFUWANG is active nanometer bamboo carton. Through Chinese and Japanese experts' many years research and repeatedly proof, the nanometer bamboo carbon has the characteristics of being close and porous, and having strongly absorbable capacity. The characteristics of FANGFUWANG's design are natural, environmental protection, convenient, which is not only taken as the interior decoration, but also used extremely convenient. If you want to know more details, you can open the Xiongfeng Technology's website at www.hkxf.com. In our website, there are our product detailed instructions and test experiment, welcome to watch. Now our company is looking for agents in the world who are interested in our products, and we are looking forward to your sincere cooperation. SHENZHEN XIONGFENG TECHNOLOGY CO.,LTD Add: 2-9F,Shenzhen Wanpan Garden, Nanshan Area, Shenzhen City, Guangdong Province, China. Tel:86-755-26000105 Fax:86-755-26000144 -----

1 0

[i2p] weekly status notes [apr 5]
by jrandom 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi y'all, time for the weekly update * Index 1) 0.5.0.5 2) Bayesian peer profiling 3) Q 4) ??? * 1) 0.5.0.5 Last week's 0.5.0.5 release has had its ups and downs - the major change to address some attacks in the netDb seems to work as expected, but has exposed some long overlooked bugs in the netDb's operation. This has caused some substantial reliability issues, especially for eepsites. The bugs have however been identified and addressed in CVS, and those fixes among a few others will be pushed out as a 0.5.0.6 release within the next day. * 2) Bayesian peer profiling bla has been doing some research into improving our peer profiling by exploiting simple bayesian filtering from the gathered stats [1]. It looks quite promising, though I'm not sure where it stands at the moment - perhaps we can get an update from bla during the meeting? [1] http://forum.i2p.net/viewtopic.php?t=598 http://theland.i2p/nodemon.html * 3) Q There is lots of progress going on with aum's Q app, both in the core functionality and with a few people building various xmlrpc frontends. Rumor has it we might be seeing another Q build out this weekend with a whole slew of goodies described on http://aum.i2p/q/ * 4) ??? Ok, yeah, very brief status notes, as I got the timezones mixed up *again* (actually, I got the days mixed up too, thought it was Monday until a few hours ago). Anyway, there is lots of stuff going on not mentioned above, so swing on by the meeting and see whats up! =jr -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFCUvNtWYfZ3rPnHH0RAlzmAKCAX5PQP8s2wWIxhWnHWG6eeps1nQCffkNC Li2s44HU5EehnMoCMxIOZlc= =WNZp -----END PGP SIGNATURE----- _______________________________________________ i2p mailing list i2p(a)i2p.net http://i2p.dnsalias.net/mailman/listinfo/i2p ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

[IP] Proposed Surveillance Bill Would Sweep NSA Spying Programs Under the Rug
by David Farber 06 Jul '18

06 Jul '18

Electronic Frontier Foundation Media Release For Immediate Release: Friday, July 14, 2006 Contact: Kevin Bankston Staff Attorney Electronic Frontier Foundation bankston(a)eff.org +1 415 436-9333 x126 Kurt Opsahl Staff Attorney Electronic Frontier Foundation kurt(a)eff.org +1 415 436-9333 x106 Lee Tien Senior Staff Attorney Electronic Frontier Foundation tien(a)eff.org +1 415 436-9333 x102 Proposed Surveillance Bill Would Sweep NSA Spying Programs Under the Rug Bill Threatens Future of EFF Case and Other Legal Challenges San Francisco - Senate Judiciary Committee Chairman Arlen Specter said today that he has negotiated a proposed bill with the White House regarding the NSA's illegal spying program. While the final bill is not public, a draft of the bill obtained by the Electronic Frontier Foundation (EFF) is a sham compromise that would cut off meaningful legal review -- sweeping current legal challenges out of the traditional court system and failing to require court review or congressional oversight of any future surveillance programs. "This so-called compromise bill is not a concession from the White House -- it's a rubber stamp for any future spying program dreamed up by the executive," said EFF Staff Attorney Kevin Bankston. "In essence, this bill threatens to make court oversight of electronic surveillance voluntary rather than mandatory." Although the bill creates a process for the executive branch to seek court review of its secret surveillance programs, it doesn't actually require the government to do so. The bill would, however, require that any lawsuit challenging the legality of any classified surveillance program -- including EFF's class-action suit against AT&T -- be transferred, at the government's request, to the FISA Court of Review, a secret court with no procedures for hearing argument from anyone but the government. The bill would further allow the government to prevent the court from disclosing any information about the government's surveillance programs to opposing counsel, regardless of the court's strict security procedures. "When the privacy of millions of Americans is at stake, we deserve more than a closed hearing by a secret court," said EFF Senior Staff Attorney Lee Tien. For the draft of the Specter bill: http://www.eff.org/Privacy/Surveillance/NSA/specter_draftbill_071306.pdf For this release: http://www.eff.org/news/archives/2006_07.php#004824 About EFF The Electronic Frontier Foundation is the leading civil liberties organization working to protect rights in the digital world. Founded in 1990, EFF actively encourages and challenges industry and government to support free expression and privacy online. EFF is a member-supported organization and maintains one of the most linked-to websites in the world at http://www.eff.org/ -end- _______________________________________________ presslist mailing list https://falcon.eff.org/mailman/listinfo/presslist ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0