July 2018 - cypherpunks-legacy

[IP] EFF: Secret Surveillance Evidence Unsealed in AT&T Spying Case
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

Re: [cryptography] Bitmessage
by Natanael 06 Jul '18

06 Jul '18

This is precisely how I2P eepsites work. The true addresses are [52 characters of b32 encoded checksum of public key].b32.i2p while the hosts.txt file is a list of these with their readable [sitename].i2p domains. You can modify your own lists as you wish. I2P Messenger and Bote mail could be combined to do what you suggest. :) - Sent from my tablet Den 17 feb 2013 01:39 skrev "James A. Donald" <jamesd(a)echeque.com>: > > On 2013-02-17 4:49 AM, Jonathan Warren wrote: >> >> >> A primary goal has been to make a clean and simple interface so that the key management, authentication, and encryption is simple even for people who do not understand public-key cryptography. > > ________________________________ > This is of course, the hard problem. > > If I understand correctly what you have done, in the system, true names are long random non memorable bit strings, and introductions are not inherently part of the system, nor are petnames part of the system. > > So no one has anyone to talk to, nor anything to talk about, and if they did, they would have trouble recollecting who they were talking to, since all truenames look like gibberish, thus all truenames look alike. > ________________________________ > > A proposed alternative user interface design: > > Seems to me that you need something like public web pages, and something like a favorites list / bookmarks list, where when you add something or someone to your list, a petname/truename pair is added to your bookmark list. > > Note how Tor's browser thinks it is communicating by http, while in reality communicating by a completely different protocol. > > A link in the webpage would be nickname/truename pair, thus clicking on such a link, you would be guaranteed to go to where the author the web page intended (trusted path) and the destination would be capable of being added to your bookmarks list. The long random gibberish true name would almost always be hidden behind nicknames, petnames, and trusted path links. > > When you click on something in your list, you either find yourself on a webpage(by trusted path), or open a text message window to an individual, by trusted path. If the recipient is not currently dealing with your window, (windows open simultaneously on both machines) messages get saved and are available in an email like interface, so that instant messaging and email are variant user interfaces on the same function. > > > _______________________________________________ > cryptography mailing list > cryptography(a)randombit.net > http://lists.randombit.net/mailman/listinfo/cryptography > _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[tor-dev] Proposal 207: Directory guards
by Nick Mathewson 06 Jul '18

06 Jul '18

Filename: 207-directory-guards.txt Title: Directory guards Author: Nick Mathewson Created: 10-Oct-2012 Status: Open Target: 0.2.4.x Motivation: When we added guard nodes to resist profiling attacks, we made it so that clients won't build general-purpose circuits through just any node. But clients don't use their guard nodes when downloading general-purpose directory information from the Tor network. This allows a directory cache, over time, to learn a large number of IPs for non-bridge-using users of the Tor network. Proposal: In the same way as they currently pick guard nodes as needed, adding more guards as those nodes are down, clients should also pick a small-ish set of directory guard nodes, to persist in Tor's state file. Clients should not pick their own guards as directory guards, or pick their directory guards as regular guards. When downloading a regular directory object (that is, not a hidden service descriptor), clients should prefer their directory guards first. Then they should try more directories from a recent consensus (if they have one) and pick one of those as a new guard if the existing guards are down and a new one is up. Failing that, they should fall back to a directory authority (or a directory source, if those get implemented-- see proposal 206). If a client has only one directory guard running, they should add new guards and try them, and then use their directory guards to fetch multiple descriptors in parallel. Discussion: The rule that the set of guards and the set of directory guards need to be disjoint, and the rule that multiple directory guards need to be providing descriptors, are both attempts to make it harder for a single node to capture a route. Open questions and notes: What properties does a node need to be a suitable directory guard? If we require that it have the Guard flag, we'll lose some nodes: only 74% of the directory caches have it (weighted by bandwidth). We may want to tune the algorithm used to update guards. For future-proofing, we may want to have the DirCache flag from 185 be the one that nodes must have in order to be directory guards. For now, we could have authorities set it to Guard && DirPort!=0, with a better algorithm to follow. Authorities should never get the DirCache flag. _______________________________________________ tor-dev mailing list tor-dev(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: Fw: Hi, I'm from the government and I'm here to screw you
by CJ Knight 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Brian, and happy new year. Thanks for another thought provoking post. A few things you might not be aware of happening over here in Europe, specifically the UK: We have ANPR (Automatic Number Plate Recognition) cameras in place on every motorway junction, plus all major roads. They aren't advertised, they look like plain grey boxes, but people are slowly catching on to what they do, and how much they see. A journey from one end of the country to the other can be tracked in real time. An EU Directive has stated that all new cars must have inbuilt 3G capability "in case of accidents". I personally do not believe this reason, and suspect it's just another form of tracking surveillance. Lastly, our government a few years back came up with an idea to fit "black box" recorders in *all* cars but the public backlash was so huge they shelved the idea. Instead, the insurance industry has adopted the technology, so new drivers and those with a poor accident record can opt to have one of these boxes fitted in return for a discount on their insurance. It is now becoming a norm for young people to take this option; when I ask them why they are prepared to violate their own privacy they just shrug, but I guess privacy means something different to the Facebook generation. Conversely, it is now becoming *more* expensive to insure a car if you do not have a black box; they have tried norming this by penalising the law abiding (but privacy conscious). Anyway, just thought you might like to know. Best, CJ On 02/01/14 18:04, brian carroll wrote: >> Any questions? > > observation: ...<snip>... -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSxeNUAAoJEIRAsFEItJzjLyMH/iXOzH5R8mJi1LYqwU5RgdPj yBxI6T9hhlQOnA1mZOTrTxDfLMDBi4IEWkyJK+C3C3wCoq7/+5sJphEqZ6tikQdP 8cPeR0E6/tlXRW9H78FcDlWwWJgi/xwT+Z2aOwIDdr9xjWl7WJF2rrgbRENC05aX OLtnvbHmm+nPKKjFYx7resXD37e7O8kYd7k1ArkJ5o+h3BuIm5oQMCZU4xUqlfoO IJ2xclzLRKLu70O3xUeYsmTjsF61xaRpMXy1404lWpJkKsW+1wqugOBVDMf9dRxH qnZhM09ToF5hICvUkvch3juV2z0Pg69N8CZS27xrCjYTSVxsr8JUjuQLS5E6kvw= =diAd -----END PGP SIGNATURE-----

1 0

Re: Fw: Hi, I'm from the government and I'm here to screw you
by CJ Knight 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Brian, and happy new year. Thanks for another thought provoking post. A few things you might not be aware of happening over here in Europe, specifically the UK: We have ANPR (Automatic Number Plate Recognition) cameras in place on every motorway junction, plus all major roads. They aren't advertised, they look like plain grey boxes, but people are slowly catching on to what they do, and how much they see. A journey from one end of the country to the other can be tracked in real time. An EU Directive has stated that all new cars must have inbuilt 3G capability "in case of accidents". I personally do not believe this reason, and suspect it's just another form of tracking surveillance. Lastly, our government a few years back came up with an idea to fit "black box" recorders in *all* cars but the public backlash was so huge they shelved the idea. Instead, the insurance industry has adopted the technology, so new drivers and those with a poor accident record can opt to have one of these boxes fitted in return for a discount on their insurance. It is now becoming a norm for young people to take this option; when I ask them why they are prepared to violate their own privacy they just shrug, but I guess privacy means something different to the Facebook generation. Conversely, it is now becoming *more* expensive to insure a car if you do not have a black box; they have tried norming this by penalising the law abiding (but privacy conscious). Anyway, just thought you might like to know. Best, CJ On 02/01/14 18:04, brian carroll wrote: >> Any questions? > > observation: ...<snip>... -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSxeNUAAoJEIRAsFEItJzjLyMH/iXOzH5R8mJi1LYqwU5RgdPj yBxI6T9hhlQOnA1mZOTrTxDfLMDBi4IEWkyJK+C3C3wCoq7/+5sJphEqZ6tikQdP 8cPeR0E6/tlXRW9H78FcDlWwWJgi/xwT+Z2aOwIDdr9xjWl7WJF2rrgbRENC05aX OLtnvbHmm+nPKKjFYx7resXD37e7O8kYd7k1ArkJ5o+h3BuIm5oQMCZU4xUqlfoO IJ2xclzLRKLu70O3xUeYsmTjsF61xaRpMXy1404lWpJkKsW+1wqugOBVDMf9dRxH qnZhM09ToF5hICvUkvch3juV2z0Pg69N8CZS27xrCjYTSVxsr8JUjuQLS5E6kvw= =diAd -----END PGP SIGNATURE-----

1 0

Re: Fw: Hi, I'm from the government and I'm here to screw you
by CJ Knight 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Brian, and happy new year. Thanks for another thought provoking post. A few things you might not be aware of happening over here in Europe, specifically the UK: We have ANPR (Automatic Number Plate Recognition) cameras in place on every motorway junction, plus all major roads. They aren't advertised, they look like plain grey boxes, but people are slowly catching on to what they do, and how much they see. A journey from one end of the country to the other can be tracked in real time. An EU Directive has stated that all new cars must have inbuilt 3G capability "in case of accidents". I personally do not believe this reason, and suspect it's just another form of tracking surveillance. Lastly, our government a few years back came up with an idea to fit "black box" recorders in *all* cars but the public backlash was so huge they shelved the idea. Instead, the insurance industry has adopted the technology, so new drivers and those with a poor accident record can opt to have one of these boxes fitted in return for a discount on their insurance. It is now becoming a norm for young people to take this option; when I ask them why they are prepared to violate their own privacy they just shrug, but I guess privacy means something different to the Facebook generation. Conversely, it is now becoming *more* expensive to insure a car if you do not have a black box; they have tried norming this by penalising the law abiding (but privacy conscious). Anyway, just thought you might like to know. Best, CJ On 02/01/14 18:04, brian carroll wrote: >> Any questions? > > observation: ...<snip>... -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSxeNUAAoJEIRAsFEItJzjLyMH/iXOzH5R8mJi1LYqwU5RgdPj yBxI6T9hhlQOnA1mZOTrTxDfLMDBi4IEWkyJK+C3C3wCoq7/+5sJphEqZ6tikQdP 8cPeR0E6/tlXRW9H78FcDlWwWJgi/xwT+Z2aOwIDdr9xjWl7WJF2rrgbRENC05aX OLtnvbHmm+nPKKjFYx7resXD37e7O8kYd7k1ArkJ5o+h3BuIm5oQMCZU4xUqlfoO IJ2xclzLRKLu70O3xUeYsmTjsF61xaRpMXy1404lWpJkKsW+1wqugOBVDMf9dRxH qnZhM09ToF5hICvUkvch3juV2z0Pg69N8CZS27xrCjYTSVxsr8JUjuQLS5E6kvw= =diAd -----END PGP SIGNATURE-----

1 0

Re: Fw: Hi, I'm from the government and I'm here to screw you
by CJ Knight 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Brian, and happy new year. Thanks for another thought provoking post. A few things you might not be aware of happening over here in Europe, specifically the UK: We have ANPR (Automatic Number Plate Recognition) cameras in place on every motorway junction, plus all major roads. They aren't advertised, they look like plain grey boxes, but people are slowly catching on to what they do, and how much they see. A journey from one end of the country to the other can be tracked in real time. An EU Directive has stated that all new cars must have inbuilt 3G capability "in case of accidents". I personally do not believe this reason, and suspect it's just another form of tracking surveillance. Lastly, our government a few years back came up with an idea to fit "black box" recorders in *all* cars but the public backlash was so huge they shelved the idea. Instead, the insurance industry has adopted the technology, so new drivers and those with a poor accident record can opt to have one of these boxes fitted in return for a discount on their insurance. It is now becoming a norm for young people to take this option; when I ask them why they are prepared to violate their own privacy they just shrug, but I guess privacy means something different to the Facebook generation. Conversely, it is now becoming *more* expensive to insure a car if you do not have a black box; they have tried norming this by penalising the law abiding (but privacy conscious). Anyway, just thought you might like to know. Best, CJ On 02/01/14 18:04, brian carroll wrote: >> Any questions? > > observation: ...<snip>... -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSxeNUAAoJEIRAsFEItJzjLyMH/iXOzH5R8mJi1LYqwU5RgdPj yBxI6T9hhlQOnA1mZOTrTxDfLMDBi4IEWkyJK+C3C3wCoq7/+5sJphEqZ6tikQdP 8cPeR0E6/tlXRW9H78FcDlWwWJgi/xwT+Z2aOwIDdr9xjWl7WJF2rrgbRENC05aX OLtnvbHmm+nPKKjFYx7resXD37e7O8kYd7k1ArkJ5o+h3BuIm5oQMCZU4xUqlfoO IJ2xclzLRKLu70O3xUeYsmTjsF61xaRpMXy1404lWpJkKsW+1wqugOBVDMf9dRxH qnZhM09ToF5hICvUkvch3juV2z0Pg69N8CZS27xrCjYTSVxsr8JUjuQLS5E6kvw= =diAd -----END PGP SIGNATURE-----

1 0

Re: Fw: Hi, I'm from the government and I'm here to screw you
by CJ Knight 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Brian, and happy new year. Thanks for another thought provoking post. A few things you might not be aware of happening over here in Europe, specifically the UK: We have ANPR (Automatic Number Plate Recognition) cameras in place on every motorway junction, plus all major roads. They aren't advertised, they look like plain grey boxes, but people are slowly catching on to what they do, and how much they see. A journey from one end of the country to the other can be tracked in real time. An EU Directive has stated that all new cars must have inbuilt 3G capability "in case of accidents". I personally do not believe this reason, and suspect it's just another form of tracking surveillance. Lastly, our government a few years back came up with an idea to fit "black box" recorders in *all* cars but the public backlash was so huge they shelved the idea. Instead, the insurance industry has adopted the technology, so new drivers and those with a poor accident record can opt to have one of these boxes fitted in return for a discount on their insurance. It is now becoming a norm for young people to take this option; when I ask them why they are prepared to violate their own privacy they just shrug, but I guess privacy means something different to the Facebook generation. Conversely, it is now becoming *more* expensive to insure a car if you do not have a black box; they have tried norming this by penalising the law abiding (but privacy conscious). Anyway, just thought you might like to know. Best, CJ On 02/01/14 18:04, brian carroll wrote: >> Any questions? > > observation: ...<snip>... -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSxeNUAAoJEIRAsFEItJzjLyMH/iXOzH5R8mJi1LYqwU5RgdPj yBxI6T9hhlQOnA1mZOTrTxDfLMDBi4IEWkyJK+C3C3wCoq7/+5sJphEqZ6tikQdP 8cPeR0E6/tlXRW9H78FcDlWwWJgi/xwT+Z2aOwIDdr9xjWl7WJF2rrgbRENC05aX OLtnvbHmm+nPKKjFYx7resXD37e7O8kYd7k1ArkJ5o+h3BuIm5oQMCZU4xUqlfoO IJ2xclzLRKLu70O3xUeYsmTjsF61xaRpMXy1404lWpJkKsW+1wqugOBVDMf9dRxH qnZhM09ToF5hICvUkvch3juV2z0Pg69N8CZS27xrCjYTSVxsr8JUjuQLS5E6kvw= =diAd -----END PGP SIGNATURE-----

1 0

Re: Fw: Hi, I'm from the government and I'm here to screw you
by CJ Knight 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Brian, and happy new year. Thanks for another thought provoking post. A few things you might not be aware of happening over here in Europe, specifically the UK: We have ANPR (Automatic Number Plate Recognition) cameras in place on every motorway junction, plus all major roads. They aren't advertised, they look like plain grey boxes, but people are slowly catching on to what they do, and how much they see. A journey from one end of the country to the other can be tracked in real time. An EU Directive has stated that all new cars must have inbuilt 3G capability "in case of accidents". I personally do not believe this reason, and suspect it's just another form of tracking surveillance. Lastly, our government a few years back came up with an idea to fit "black box" recorders in *all* cars but the public backlash was so huge they shelved the idea. Instead, the insurance industry has adopted the technology, so new drivers and those with a poor accident record can opt to have one of these boxes fitted in return for a discount on their insurance. It is now becoming a norm for young people to take this option; when I ask them why they are prepared to violate their own privacy they just shrug, but I guess privacy means something different to the Facebook generation. Conversely, it is now becoming *more* expensive to insure a car if you do not have a black box; they have tried norming this by penalising the law abiding (but privacy conscious). Anyway, just thought you might like to know. Best, CJ On 02/01/14 18:04, brian carroll wrote: >> Any questions? > > observation: ...<snip>... -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSxeNUAAoJEIRAsFEItJzjLyMH/iXOzH5R8mJi1LYqwU5RgdPj yBxI6T9hhlQOnA1mZOTrTxDfLMDBi4IEWkyJK+C3C3wCoq7/+5sJphEqZ6tikQdP 8cPeR0E6/tlXRW9H78FcDlWwWJgi/xwT+Z2aOwIDdr9xjWl7WJF2rrgbRENC05aX OLtnvbHmm+nPKKjFYx7resXD37e7O8kYd7k1ArkJ5o+h3BuIm5oQMCZU4xUqlfoO IJ2xclzLRKLu70O3xUeYsmTjsF61xaRpMXy1404lWpJkKsW+1wqugOBVDMf9dRxH qnZhM09ToF5hICvUkvch3juV2z0Pg69N8CZS27xrCjYTSVxsr8JUjuQLS5E6kvw= =diAd -----END PGP SIGNATURE-----

1 0

Re: Fw: Hi, I'm from the government and I'm here to screw you
by CJ Knight 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Brian, and happy new year. Thanks for another thought provoking post. A few things you might not be aware of happening over here in Europe, specifically the UK: We have ANPR (Automatic Number Plate Recognition) cameras in place on every motorway junction, plus all major roads. They aren't advertised, they look like plain grey boxes, but people are slowly catching on to what they do, and how much they see. A journey from one end of the country to the other can be tracked in real time. An EU Directive has stated that all new cars must have inbuilt 3G capability "in case of accidents". I personally do not believe this reason, and suspect it's just another form of tracking surveillance. Lastly, our government a few years back came up with an idea to fit "black box" recorders in *all* cars but the public backlash was so huge they shelved the idea. Instead, the insurance industry has adopted the technology, so new drivers and those with a poor accident record can opt to have one of these boxes fitted in return for a discount on their insurance. It is now becoming a norm for young people to take this option; when I ask them why they are prepared to violate their own privacy they just shrug, but I guess privacy means something different to the Facebook generation. Conversely, it is now becoming *more* expensive to insure a car if you do not have a black box; they have tried norming this by penalising the law abiding (but privacy conscious). Anyway, just thought you might like to know. Best, CJ On 02/01/14 18:04, brian carroll wrote: >> Any questions? > > observation: ...<snip>... -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSxeNUAAoJEIRAsFEItJzjLyMH/iXOzH5R8mJi1LYqwU5RgdPj yBxI6T9hhlQOnA1mZOTrTxDfLMDBi4IEWkyJK+C3C3wCoq7/+5sJphEqZ6tikQdP 8cPeR0E6/tlXRW9H78FcDlWwWJgi/xwT+Z2aOwIDdr9xjWl7WJF2rrgbRENC05aX OLtnvbHmm+nPKKjFYx7resXD37e7O8kYd7k1ArkJ5o+h3BuIm5oQMCZU4xUqlfoO IJ2xclzLRKLu70O3xUeYsmTjsF61xaRpMXy1404lWpJkKsW+1wqugOBVDMf9dRxH qnZhM09ToF5hICvUkvch3juV2z0Pg69N8CZS27xrCjYTSVxsr8JUjuQLS5E6kvw= =diAd -----END PGP SIGNATURE-----

1 0