July 2018 - cypherpunks-legacy

[IP] DC speaking event: Bruce Schneier on "The Future of Privacy"
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

[p2p-research] Never Mind the Policy: Can Filtering Technology Stop p2p?
by Tomas Rawlings 06 Jul '18

06 Jul '18

Source: http://blog.catbot.org/content/never-mind-policy-can-filtering-technology-s… There is another story in the media about the ongoing debate about what (if anything) the government should be doing in response to online piracy; A rift has opened between music's creators and its record labels, with a broad alliance of musicians, songwriters and producers fiercely criticising the business secretary Lord Mandelson's plans to cut off the broadband connections of internet users who illegally download music. What I find interesting about the coverage is that there is little to no discussion about if such measures are possible. By that I mean, is the technology there to accurately stop piracy b so, assuming you had robust legislation giving a clear definition of what was to be done b is the tech there to do it? There is no doubt that some technologies exist, but I suspect that there are serious limits to what it can achieve. For starters, any technology solution would need to have some or all of the following to be practical: * Easy to implement b The network ecology that this technology is coming into is dynamic, thus if the technology takes time to implement, then the conditions may have changed and rendered the tech obsolete. * Low bandwidth b if the process of checking all the traffic is taking too much out of the network, it is going to impact on the service that people will have paid for b as well as penalising all users, regardless of if they are indulging in non-legitimate uses. * Discriminatory - Able to discriminate between legitimate and non-legitimate traffic accurately. If it targets the wrong people, it is going to cost time, money and reputation for the ISPs involved. * Decryptory b There has been marked rise in encrypted p2p technology of late. This means that any system will need to deal with not only encrypted peers, but also encrypted packets of data. Now those are the 'easy' points b the obvious ones that the technology would need. From the p2p research I've been doing, I would suggest that there are a couple of other ones of note too: * 100% Effective b One key thing about internet ecology is that it is very, very easy for users to change p2p software. Users can also communicate virally, so can pass information on about holes in any system rapidly. The exploitation of the loop-holes will also be viral. This means a 99.9% effective system upon implementation will rapidly become a 0% one. * Psychic b The other issues is that once a flag goes up, there will be many, many people trying many many methods to by-pass the system. This will be continuous and will consist of lines of attack from new directions. The system implemented need to anticipate and head-off these attacks to stay in-the-game. I am being a little provocative in the points above, but I feel they are valid. I think you see what I am saying b stopping online piracy is very, very difficult. Some may point to the Great Firewall of China as a successful example of internet control b forgetting that it is backed by an authoritarian state and might not be effective for all we know b became its failings are not going to be publicised either by the government there or the users who've found a way though. - Tomas ----------------------- Tomas Rawlings Development Director, FluffyLogic Development Ltd. web: www.fluffylogic.net tel: 0117 9442233 - Also see: blog on film & interweb: www.plugincinema.com blog on p2p, media ecology & evolution: blog.catbot.org tweet: www.twitter.com/arclightfire _______________________________________________ p2presearch mailing list p2presearch(a)listcultures.org http://listcultures.org/mailman/listinfo/p2presearch_listcultures.org ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [cryptography] Digital cash in the news...
by coderman 06 Jul '18

06 Jul '18

On Fri, Jun 17, 2011 at 4:50 AM, Peter Gutmann <pgut001(a)cs.auckland.ac.nz> wrote: > > Is it a sign that your e-Monopoly-money has arrived when trojans start > targeting it? > > http://www.net-security.org/malware_news.php?id=1752 > > (My guess is that since trojans already steal everything they can, including > lots of stuff with no obvious value, that the authors just added Bitcoin > wallets because they could). i checked this out when it dropped. it was delivered in haste, and not something overly impression (like a pro kit re-tailored for bitcoin wallets.) the day before this dropped wallet encryption was released in the official bitcoin client. the attackers had to rush deployment of this malware before too many potential targets upgraded to encrypted wallets (thus making them less accessible to attacker using this method.) the interesting aspect is how this following a significant crackdown on the bitcoin.org forums and was sent as a mass phish via private message to all the members. i've pasted the content below. note that clicking on the image went to a ....JPG/ directory which in turn sent the screensaver malware payload that is not identified in most browsers as potentially malicious (unlike .EXE or .COM, .BAT, .PDF, etc.) once you click, it rather clumsily traversed the disk looking for the first wallet.dat to deliver via an open relay to a drop box at hotmail. they'd clearly spent more time on the delivery aspects than on the smarts within the wallet stealing code. as said, a rush job due to the client update the day before. waiting for the next trojan to target RPC port on running bitcoind's... --- You have just been sent a personal message by MoonShadow- on Bitcoin Forum. IMPORTANT: Remember, this is just a notification. Please do not reply to this email. The message they sent you was: Hello Statements which should not be generally offensive, be excessively repeated or have bad formatting (spam), contain forbidden advertising or political or religious views, not be non-English when English is required, disclose personal data of others, or support any other rule violation. Proof can be seen at: http://images4u.hostil.pl/DSC00054.jpg One more warning and your account might be banned. Reply to this Personal Message here: http://forum.bitcoin.org/index.php?action=pm;... _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

FC: Democrats' new "bio" bill links police to SABRE, Amtrak systems
by Declan McCullagh 06 Jul '18

06 Jul '18

A more detailed summary of the Bioterrorism Protection Act is available here --- final bill has not been written yet -- though the pages are not sequential, so it's only for the brave: http://vorlon.mit.edu/~declan/biobill/ Excerpts from that summary: * "Evaluate need to vaccinate first responders against smallpox" * "Utilize biometric techniques to identify suicide-biological-bombs" * "Increase surveillance through development of sentinel strain. Create a network of interconnected databases for near-real time integration of threat indicator data" * "Establish a perception management and economic market mitigation plan and resources" * "Ensure isolated, genetically diverse pools of seed and livestock to replenish stocks destroyed in disease containment" * "Assess and harden physical security of water-bottling facilites" * "The handoff between intelligence and law enforcement agencies must be made smoother" * "Use GPS and wireless identification systems to monitor commercial traffic in high-risk and border areas" * "Ensure that private databases (SABRE, Amtrak reservations, etc.) are able to interface with law enforcement information stores immediately" -Declan ******** http://www.wired.com/news/conflict/0,2100,47898,00.html Dems Ready Bioterrorism Bill By Declan McCullagh and Ben Polen 2:00 a.m. Oct. 26, 2001 PDT WASHINGTON -- In an attempt to differentiate themselves from their GOP counterparts, House Democrats are preparing legislation they say will shield America from biological terrorism. As anxieties about anthrax mushroomed on Capitol Hill -- with the deadly bacteria discovered in five congressional office buildings so far -- House Minority Leader Richard Gephardt (D-Missouri) said Thursday that new spending and police powers are necessary to protect the public. At a press conference held in the open air away from any of the polluted buildings, Gephardt said his "Bioterrorism Protection Act" would earmark $7 billion for homeland security -- including $1.4 billion on vaccines and antibiotics -- and provide police with instant access to private databases such as the airline's SABRE system and Amtrak reservations. [...] ******** http://menendez.house.gov/speaks/viewrelease.cfm?id=337 HOMELAND SECURITY TASK FORCE CHAIRMAN MENENDEZ ANNOUNCES BIOTERRORISM LEGISLATION WASHINGTON, DC - Rep. Bob Menendez (D-NJ), Vice Chair of the Democratic Caucus and Chairman of the House Democratic Task Force on Homeland Security, joined by Democratic Leader Richard Gephardt and Members of the Task Force, today announced the Democratic proposal to protect communities throughout America against future bioterrorist threats or attacks. The Democratic Bill, the Bioterrorism Protection Act (BioPAct) of 2001, seeks to eliminate biological threats, secure our borders on land and at sea, protect our food and water, equip our communities with the resources to prevent and respond to bioterrorism, and strengthen our Intelligence through full coordination, using our most advanced technology to fight bioterrorism. Menendez made the following remarks: "I'm Bob Menendez, the Chairman of the House Democratic Task Force on Homeland Security, and I first want to thank the chairs and vice chairs of the working groups that helped write this plan: Bill Pascrell, Sanford Bishop, Bobby Scott, Jane Harman, Ike Skelton, Bob Borski, Lucille Roybal-Allard, Ellen Tauscher, Sheila Jackson-Lee, Mike Honda, Jim Turner, and Jerry Costello - and I want to thank the incredible work of over 80 Members of our Task Force on this bill. These aren't just Members of Congress, they're husbands and wives, mothers and fathers, working to make our country and their communities safe and secure. And I think they've done a great job. "What we've learned in the last few weeks is that no matter what we as a people are confronted with, we will overcome and defeat our adversaries. No attack, no threat, no evil will undermine our resolve and our strength. America stands proud and firm - our country and our people have served as an example to all of humanity. America has reacted to this unspeakable inhumanity with resiliency & humanity - humanity in the face of evil. "We call the Bioterrorism Protection Act "BioPAct" because we know that every American needs to be a part of the fight, part of a pact to protect our Homeland. And if we're asking the public to be 'vigilant', then they need and deserve to be informed in full and given the chance to be a part of a dialogue with the officials who work for them. This bill does that. (more) "BioPAct is a pact between the American people and their government, working together, called to national service, marshaling our vast resources, to keep America safe from bioterrorism. The plan doesn't just draw on government programs, but on the American spirit, intellect & creativity, breaking new frontiers, setting an example the world can follow in this new age. "We're here to tell our fellow citizens that we can beat this foe - and we can protect our Homeland. "The BioPAct will proactively assess the new threats and risks we face, so we make sure we target our funding where it's needed most. It will eliminate biological threats at the source, by helping countries like Russia and the other former Soviet states prevent their biological agents from getting into our enemies' hands. We will secure our borders on land and at sea by adding thousands of new border agents and by putting our most advanced technology at work to screen out terrorists and the weapons they might try to bring with them - whether they try to enter our nation at airports, on ships, by foot, or in a car. And BioPAct will keep our food and water supply safe and secure by putting a comprehensive new inspection protocol in place. "We will make sure our local communities have all the resources they need - from greater hospital capacity, to police and firefighters trained in counter-terrorism. "We can prevent disease outbreaks through early and rapid detection; and can save lives by making sure we have the vaccines and medicines to treat people - and a plan in place to get them where they need to go on a moment's notice. This bill does that. And BioPAct strengthens our Intelligence by ensuring our many government agencies coordinate information and planning. We need one comprehensive strategy - not a dozen different ones. "This bill is a commitment to do all this, and a lot more - because we know there is nothing more important than keeping American families safe. "This is the first in a series of proposals this Task Force and we Democrats in the House are putting forward to address Homeland Security. My colleagues and I look forward to working with the President and the Republicans to get the job done - in fact we met with Director Ridge yesterday, and I'm confident we can work together as one American team. "And as part of that team effort, we also call on the President to use the funding already allocated to fight terrorism to begin a national threat assessment; to help local communities cover the unexpected overtime costs they have already borne in response to the new threat environment since September 11th; and to rapidly dedicate new resources to our Coast Guard, our border security, and our postal service. We can and will protect our Homeland. "I'm now proud to introduce our Democratic Leader, Dick Gephardt, who had the foresight early on to work with our Caucus Chairman, Martin Frost, to create this Task Force - bringing so many Members together to work on an issue that's on the mind of every American. He's been an inspiration to this Congress and to our nation - Ladies and Gentlemen: Dick Gephardt - "Thank you." Executive Summary of the BioPAct: HOUSE DEMOCRATIC CAUCUS HOMELAND SECURITY TASK FORCE THE BIOTERRORISM PROTECTION ACT (BioPAct) of 2001 A $7 Billion Pact with America Public Health Infrastructure and Response to Bioterrorism ($3.5 billion) Improving Community Emergency Response Capacity and Preparedness -- $1 billion Increasing hospital capacity, educating medical personnel, increasing nursing and clinical lab personnel, and providing training to first responders. Ensuring an Adequate Supply of Vaccines and Treatments for All Americans -- $1.4 billion Increasing the national stockpile of anthrax antibiotics, developing and acquiring additional doses of smallpox vaccines, researching and developing new vaccines and antibiotics, training and equipping health professionals to provide antibiotics and vaccines, and expediting FDA approval of new products. Enhancing Community Planning and Intergovernmental Coordination -- $600 million Providing planning grants to local communities and health care providers to develop emergency response plans that meet certain minimum federal guidelines, requiring states to submit medical response plans to the federal government, funding state trauma care systems, and strengthening intergovernmental coordination. Enhancing Surveillance, Improving Communications, and Strengthening Technology Infrastructure -- $500 million Improving state and local surveillance, training health care personnel in the detection of illnesses related to biological attacks, upgrading laboratories, ensuring a 24-hour public health system is available to local providers, improving and expanding CDC surveillance capabilities, building local technology and communication systems, enhancing communications among agencies, and requiring state and federal agencies to share with first responders important information about the potential dangers of an emergency site. Protecting Our Food And Water ($800 million) Keeping Our Food Safe -- $725 million Protecting crops and livestock through increased surveillance and research, strengthening both physical and information security at key agricultural facilities, increasing inspections of imported food shipments with additional inspectors, increasing the inspections of domestic production plants, coordinating and testing federal emergency response plans, and helping states track foodborne agents. Keeping Our Water Supply Safe -- $75 million Reviewing emergency preparedness and vulnerabilities of water systems, providing resources to address deficiencies in security, developing improved monitoring systems to track water quality, improving security of information systems, improving security of water-bottling facilities, and implementing background checks for quality testers at treatment plants and bottling facilities. Enhancing Law Enforcement's Ability to Protect the Nation ($870 million) Providing the right tools to law enforcement agencies -- $275 million Expanding federal authority over biological agents and toxins; establishing new criminal offenses involving the possession and unsafe handling of biological agents; developing and deploying new screening hardware, software, computer infrastructure, and training to support biometric technology; creating new COPS grants to local communities for counter-terrorism training and equipment; giving grants to local governments for strategic planning and intergovernmental coordination related to terrorism preparedness and response; providing funds to eliminate the backlog of convicted offender DNA samples yet to be entered in the FBI database. Securing Our Borders at Land and Sea -- $345 million Increasing the size of the United States Border Patrol Force and the number of INS and Customs Inspectors at ports of entry; implementing biometric scanning techniques at border checkpoints; funding development and deployment of scanning technology capable of detecting explosive devices, biological and chemical contaminants; mandating better INS tracking of visas and integrating visa monitoring with federal watch lists; providing Coast Guard with enhanced training and equipment. Addressing Threats to Mail Delivery Services -- $250 million Developing and deploying faster scanning technologies, implementing improved mail tracking abilities to track suspicious packages to their source, and investigating procedures to treat mail and mitigate threats posed by contaminated mail. Strengthening Our Intelligence Through Full Coordination ($1.1 billion) Improving Organization and Coordination of Intelligence Community -- $270 million Conducting a threat assessment to identify vulnerabilities and provide a basis for a national strategy for homeland security; removing barriers to efficient information sharing between intelligence collection and information use by law enforcement and first responders; conducting a public education campaign to alert Americans to the threat and appropriate responses for biological weapons. Improving Intelligence Capabilities -- $850 million Deploying biological and chemical detectors for site analysis, continual surveillance of fixed sites, and improved identification of foreign biological agent possession; increasing language translation skills and improving usage of language resources across agencies; increasing human intelligence assets. The Military: Preparing, Responding & Assisting Communities ($720 million) Initial Crisis Response and First Responder Support -- $420 million Increasing military domestic crisis response teams, creating and training additional Civil Support Teams, and training and equipping military and civilian emergency responders with interoperable communications equipment. Interagency Crisis and Consequence Management Exercises -- $100 million Implementing a uniform government-wide evaluation system to ensure proficiency and achievement of military domestic crisis response, increasing training of military personnel for response to weapons of mass destruction incidents, and increasing resources for military involvement in consequence and crisis management exercises. Research and Development -- $100 million Accelerating technology development in chemical and biological research (prevention and treatment), advanced sensors, and other promising technologies. Cooperative Threat Reduction (Nunn-Lugar) -- $100 million Securing the supply of biological and chemical weapons-grade material from the former Soviet Union, improving Russian and former Soviet Union border and export controls, and increasing support for the Material Protection, Control and Accounting Program. ### ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. Declan McCullagh's photographs are at http://www.mccullagh.org/ To subscribe to Politech: http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ ------------------------------------------------------------------------- ----- End forwarded message -----

1 0

[p2p-hackers] [Fwd: [Planetlab-users] Announcing: TCP NAT Traversal/Hole-Punching Library]
by Michael Parker 06 Jul '18

06 Jul '18

I just got this by way of the PlanetLab mailing list... Definitely thought it would be of interest! - Mike ---------------------------- Original Message ---------------------------- Subject: [Planetlab-users] Announcing: TCP NAT Traversal/Hole-Punching Library From: "Saikat Guha" <saikat(a)cs.cornell.edu> Date: Wed, September 28, 2005 3:46 am -------------------------------------------------------------------------- Hi all, (apologies if you get multiple copies of this) I am pleased to announce the availability of our open-source TCP NAT Traversal/Hole-Punching library based on our research published in [1]. [1] "Characterization and Measurement of TCP Traversal through NATs and Firewalls", S. Guha and P. Francis. IMC 2005. http://nutss.net/pub/imc05-tcpnat.pdf The key result of the paper is: TCP NAT traversal can work 85%-90% of the time today (without any special assumptions about NATs), and 100% of the time between pairs of certain popular, well-behaved NATs. See [1] for more details. An open-source Java library for TCP NAT Traversal is now available: webpage: http://nutss.net/stunt.php faq: http://nutss.net/jstunt-faq.php library and example: http://nutss.net/jstunt-examples.php The above library has been tested for pair-wise connectivity across 11 brands of NATs from Windows and Linux hosts. NATs tested were Linksys, DLink, Netgear, Belkin, 3Com, Netopia, Allied Telesyn, SMC, Trendnet, USR, Buffalo Tech. Out of the 121 possible pair-wise combinations, 113 connections are successful. The only ones that failed are when both the endpoints are behind the _same_ NAT device that does not support TCP hairpin-behavior yet (see [1]). The java library is released under LGPL; contact me if this does not meet your needs. Feel free to extend it/port it etc. Q: I am a P2P developer/researcher. How does this help me? A: The library adds TCP NAT traversal out-of-the-box. This increases the connectivity in your P2P network since two users behind their NATs can now exchange data without having to go through an intermediary node. You can: - Use this library as is (for development of P2P software, research, small deployments, etc in java) - Study it to provide TCP NAT Traversal in your existing P2P applications in your language of choice. - etc. If you have any questions, comments, suggestions, or problems, do not hesitate to contact me. Cheers, -- Saikat _______________________________________________ Users mailing list: Users(a)lists.planet-lab.org https://lists.planet-lab.org/mailman/listinfo/users ----- End forwarded message ----- _______________________________________________ Gnucla-devel mailing list Gnucla-devel(a)starsky.ee.ucla.edu http://starsky.ee.ucla.edu/cgi-bin/mailman/listinfo/gnucla-devel _______________________________________________ p2p-hackers mailing list p2p-hackers(a)zgp.org http://zgp.org/mailman/listinfo/p2p-hackers _______________________________________________ Here is a web page listing P2P Conferences: http://www.neurogrid.net/twiki/bin/view/Main/PeerToPeerConferences ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

DC speaking event: Bruce Schneier on "The Future of Privacy"
by Stanley, Jay 06 Jul '18

06 Jul '18

Dave, Washington, DC-area IPers may be interested in attending this talk we're sponsoring by Bruce Schneier on "the Future of Privacy" on Tuesday. Our invite is below. Best, Jay ~~~~~~~~~~~ Jay Stanley Public Education Director, Technology and Liberty Project ACLU Bruce Schneier to speak on "The Future of Privacy" Tuesday You are cordially invited to an exciting opportunity to hear the renowned security expert, technologist, cryptographer, author and thinker Bruce Schneier discuss "The Future of Privacy," sponsored by the ACLU. The recent NSA spying scandal is just the latest sign of our times - how rapidly evolving technology is opening up new possibilities for surveillance, and how governments and companies are rushing to exploit them. With his unique background, Bruce Schneier is positioned to offer a fascinating and insightful perspective on the future of privacy in America at a time of churning technological change. This talk and discussion also kicks off of an exciting new ACLU speaking series, The Forum on Technology & the Future, which will feature experts discussing and debating cutting-edge technologies and their implications for the future of civil liberties. Events will be held on a roughly bi-monthly basis in Washington DC (a schedule is available on the ACLU website at www.aclu.org/future) Looking forward to seeing you there, Barry Steinhardt ---------------------------------------------------------- Bruce Schneier, "The Future of Privacy" Sponsored by the ACLU's Forum on Technology and the Future Tuesday, May 23 9:30 AM Coffee and muffins served starting at 9:00 915 15th St. NW, Washington DC, 6th Floor It is requested but not required that you RSVP to futurefreedom(a)aclu.org Bruce Schneier is an internationally renowned security technologist, referred to by The Economist as a "security guru." He is the author of eight books - including the best sellers "Beyond Fear: Thinking Sensibly about Security in an Uncertain World," "Secrets and Lies," and "Applied Cryptography" - and hundreds of academic articles and papers. His influential newsletter, Crypto-Gram, is read by over 120,000 people. Schneier is regularly quoted in the press, and his essays have appeared in national and international publications. He is the CTO and founder of Counterpane Internet Security, Inc., and the author of the popular Blowfish and Twofish encryption algorithms. He is also a frequent guest on television and radio, has testified before Congress, and is a frequent writer and lecturer on issues surrounding security and privacy. ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] DC speaking event: Bruce Schneier on "The Future of Privacy"
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

Re: [cryptography] Digital cash in the news...
by coderman 06 Jul '18

06 Jul '18

On Fri, Jun 17, 2011 at 4:50 AM, Peter Gutmann <pgut001(a)cs.auckland.ac.nz> wrote: > > Is it a sign that your e-Monopoly-money has arrived when trojans start > targeting it? > > http://www.net-security.org/malware_news.php?id=1752 > > (My guess is that since trojans already steal everything they can, including > lots of stuff with no obvious value, that the authors just added Bitcoin > wallets because they could). i checked this out when it dropped. it was delivered in haste, and not something overly impression (like a pro kit re-tailored for bitcoin wallets.) the day before this dropped wallet encryption was released in the official bitcoin client. the attackers had to rush deployment of this malware before too many potential targets upgraded to encrypted wallets (thus making them less accessible to attacker using this method.) the interesting aspect is how this following a significant crackdown on the bitcoin.org forums and was sent as a mass phish via private message to all the members. i've pasted the content below. note that clicking on the image went to a ....JPG/ directory which in turn sent the screensaver malware payload that is not identified in most browsers as potentially malicious (unlike .EXE or .COM, .BAT, .PDF, etc.) once you click, it rather clumsily traversed the disk looking for the first wallet.dat to deliver via an open relay to a drop box at hotmail. they'd clearly spent more time on the delivery aspects than on the smarts within the wallet stealing code. as said, a rush job due to the client update the day before. waiting for the next trojan to target RPC port on running bitcoind's... --- You have just been sent a personal message by MoonShadow- on Bitcoin Forum. IMPORTANT: Remember, this is just a notification. Please do not reply to this email. The message they sent you was: Hello Statements which should not be generally offensive, be excessively repeated or have bad formatting (spam), contain forbidden advertising or political or religious views, not be non-English when English is required, disclose personal data of others, or support any other rule violation. Proof can be seen at: http://images4u.hostil.pl/DSC00054.jpg One more warning and your account might be banned. Reply to this Personal Message here: http://forum.bitcoin.org/index.php?action=pm;... _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[liberationtech] SpyPhone: Pentagon Spooks Want New Tools for Mobile bExploitationb
by frank＠journalistsecurity.net 06 Jul '18

06 Jul '18

This piece is from Wired. http://www.wired.com/dangerroom/2012/12/dia-devices/ SpyPhone: Pentagon Spooks Want New Tools for Mobile bExploitationb BY SPENCER ACKERMAN12.13.122:56 PM A U.S. soldier takes a picture with his cellphone, December 2010. The Pentagonbs spy corps is looking for better tools to collect and sift through data from mobile devices. Photo: U.S. Army The Pentagon wants to upgrade its spy corps. And one of its first jobs will be finding out whatbs on your iPhone. If the Defense Intelligence Agency (DIA) gets its way, itbll send an expanded cadre of spies around the world to scope out threats to the U.S. military. And it wonbt just be a larger spy team, itbll be a geekier one. The DIA wants b technical exploitationb tools that can efficiently access the data of people the military believes to be dangerous once their spies collect it. Thatbs according to a request for information the DIA sent to industry on Wednesday. The agency wants better gear for b triage and automation, advanced technical exploitation of digital media, advanced areas of mobile forensics, software reverse engineering, and hardware exploitation, reverse engineering, and mobile applications development & engineering.b If DIA runs across digitized information, in other words, it wants to make rapid use of it. One of the emphasized cases here is b captured/seized media.b Think, for instance, of all the flash drives, hard drives and CDs that Navy SEALs seized during the raid that killed Osama bin Laden. Flynn wants to understand both the text theybd contain, through b automation support to enable rapid triage,b and their subtexts or metadata, using b steganographyb tools to decipher coded messages and b deep analysis of malicious code/executables.b And thatbs on top of b deep hardware exploitation of complex media with storage capacityb and reverse-engineering tools b to discover firmware artifacts.b As data goes mobile, in peoplebs pockets and backpacks, so goes the DIAbs focus. The agency wants b custom solutions that allo[w] exploitation of mobile devicesb like cellphones and tablets b not commonly seen or devices not supported by commercial kits or tools.b All this is part of an overhaul the DIA is experiencing under the new leadership of Army Lt. Gen. Michael Flynn. Flynn spearheaded a similar push when he was the chief intelligence officer for the Joint Special Operations Command, pushing its operatives to focus as much on snatching a dead terroristbs hard drive as on killing him in the first place. At DIA, Flynnbs part of the creation of an enlarged spy corps called the Defense Clandestine Service, which is supposed to work alongside the CIA to cultivate networks of snitches. Itbs already meeting some resistance. Internally, the DIA is heavily bureaucratic: About half of its 17,500 employees arenbt out in the dangerous parts of the world, theybre based in and around Washington. Flynnbs hired six private security contractors to train his employees in self-defense, rugged living and other necessities of an expeditionary lifestyle, an effort worth $20 million. Just as substantially, Flynnbs congressional overseers are dubious. The Senate version of next yearbs defense bill, approved last week, prohibits the Pentagon from hiring any additional spies until it can b demonstrate that it can improve the management of clandestine HUMINT,b a term for human intelligence. But the technical exploitation tools DIA wants donbt have to wait for any such demonstration. The current Defense spy corps can use them just fine. And in keeping with Flynnbs history of rapidly pushing information from the special operators who collect it to the analysts who make sense of it, the wish list seeks tools to integrate all this data b into local and national databasesb& and made readily available to analysts from the tactical to national levels.b If all of this sounds broad, that may be the point. The wide net DIA is casting pertains to b collection, transmission, prioritization, analysis, and dissemination of collected/captured materiel, and advanced technical exploitation tools application, configuration support, and training functions to units worldwide.b Even if the Pentagon canbt yet hire more spies, it can make the ones itbs already got much geekier. -- Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Mailvelope: OpenPGP Encryption for Webmail
by StealthMonger 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Uncle Zzzen <unclezzzen(a)gmail.com> writes: > [Weighty argument compelling closer study.] So unless and until the Mailvelope author(s) remedy this, support for Mailvelope has to be muted. However, comparison with Cryptocat is still unfitting because Cryptocat does not even pretend to do store-and-forward authenticated email using public key cryptography. In fact, its author asserts [1] 2. Cryptocat does not mean to compete with GPG, it means to replace * plaintext.* [1] Date: Mon, 6 Aug 2012 18:14:33 -0700 Message-ID: <CAOZ60qDZfAdz35XJbWkad1vjtt3ZZKBp-tw2ipQ+sUEuZSkySA(a)mail.gmail.com> - -- -- StealthMonger <StealthMonger(a)nym.mixmin.net> Long, random latency is part of the price of Internet anonymity. anonget: Is this anonymous browsing, or what? http://groups.google.ws/group/alt.privacy.anon-server/msg/073f34abb668df33?… stealthmail: Hide whether you're doing email, or when, or with whom. mailto:stealthsuite@nym.mixmin.net?subject=send%20index.html Key: mailto:stealthsuite@nym.mixmin.net?subject=send%20stealthmonger-key -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.9 <http://mailcrypt.sourceforge.net/> iEYEARECAAYFAlDI34wACgkQDkU5rhlDCl7RugCggOoq0oclCcZ/F2LPjUs3BIb5 AcUAnjeOtCVCLKzyqETqPvU1kFsgPnRk =d7cd -----END PGP SIGNATURE----- -- Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0