- cypherpunks-legacy - lists.cpunks.org

[ZS] Re: [liberationtech] Looking for collaborators for free-range voting project at Knight?News Challenge:
by Eugen Leitl 26 Feb '13

26 Feb '13

----- Forwarded message from Eugen Leitl <eugen(a)leitl.org> -----

1 0

[liberationtech] Mexico's most vulnerable reporters lack digital security skills
by Eugen Leitl 26 Feb '13

26 Feb '13

----- Forwarded message from "G.W. Schulz" <gwschulz30(a)gmail.com> -----

1 0

Pharmaceuticals on the Web
by EMELY LIVERS 24 Feb '13

24 Feb '13

USPS - Fast Delivery Shipping 1-4 day PRODUCT QUALITY - 100% Guaranteed * U.S. Licensed Pharmacies * U.S. Licensed Physicians * Discreet Packaging * Confidential Ordering 3500000+ satisfied customers http://gi.zonahealth-pro.ru/?bodyxvuz

1 0

Re: [qubes-devel] please look at Comparison of Whonix, Tails, TBB and Qubes OS TorVM
by coderman 24 Feb '13

24 Feb '13

> On Mon, Feb 11, 2013 at 1:12 PM, Joanna Rutkowska <joanna(a)invisiblethingslab.com> wrote: >> 1) You mention "vm exploit" in a few places. While I understand your >> intention, I think it's not quite fair to compare e.g. a vm exploit >> against Virtual Box with a vm exploit against Qubes. Even comparing >> Virtual Box against Xen would be unfair, and in Qubes we have >> additionally put some more work into further (comparing to Xen) >> minimizing possibility of such attacks, e.g. by moving network backends >> to untrusted netvm by default, by using explicit kernels for PV domains, >> by using our custom GUI virtualization, by refactoring/hardening HVM >> support, and ... On Wed, Feb 20, 2013 at 5:39 PM, adrelanos <adrelanos(a)riseup.net> wrote: > I see. Any suggestion how I could highlight that? Qubes is built with security in mind and a clear intent to minimize attacks surface. this is akin to the proactive defense grsecurity and a hardened distro provides against a generic distribution. compare the opposite approach of VMWare or VirtualBox which focus on features and low level accelerations (kernel driver for network, graphics, USB, acceleration, other extensions) without thought to the added risk these less then hardened components expose the host operating systems and other guests to. for example, but not limited to, networking passive and active attacks on physical and virtual endpoints, local and host privilege escalations, driver level privilege escalations, and many other serious vulnerabilities Qubes prevents outright by design and explicit intent. > [re cold boot attacks] > but they are quite active and it's reasonable, that they will succeed. I > can only give you a bunch of links. Should there be still questions, I > recommend to sign up for the tails-dev mailing lists. They are friendly > and if you read their pages and there are still questions, I am sure > they answer very detailed. Even if there are no questions, I am sure > they enjoy your comments. > > https://tails.boum.org/doc/advanced_topics/cold_boot_attacks/index.en.html > https://tails.boum.org/contribute/design/memory_erasure/ > https://tails.boum.org/bugs/sdmem_does_not_clear_all_memory/ > https://tails.boum.org/todo/protect_against_external_bus_memory_forensics/ > https://tails.boum.org/todo/erase_memory_when_the_USB_stick_is_removed/ > https://tails.boum.org/todo/erase_video_memory_on_shutdown/ > https://tails.boum.org/todo/hugetlb_mem_wipe/ ... all of these protections require zeroization to be performed before physical access; an interesting HCI design detail itself... (at DEF CON there are the usual hack the software attack challenges, and non computing seal and lock based physical attack challenges, but i have not yet seen a hack the running system cold boot attack challenge - perhaps because a real attack would likely be destructive to some or most of the hardware to be tested. i'd still be game for mobile and workstation challenges if anyone else is interested :)

1 0

[drone-list] Drones Beyond Drones
by Eugen Leitl 24 Feb '13

24 Feb '13

----- Forwarded message from John Young <cryptome(a)earthlnk.net> -----

1 0

RE: NYT covers China cyberthreat
by Eugen Leitl 23 Feb '13

23 Feb '13

----- Forwarded message from "Naslund, Steve" <SNaslund(a)medline.com> -----

1 0

I am Julia, 27 y.o. Russia (dating)
by applebury 23 Feb '13

23 Feb '13

Hi - I'm the girl in a pink jacket with the inscription Russia, remember me? http://girlsruonline.ru/?haapozuvl

1 0

[liberationtech] Chinese Hacking, Mandiant & Cyber War
by Eugen Leitl 22 Feb '13

22 Feb '13

----- Forwarded message from Yosem Companys <companys(a)stanford.edu> -----

1 0

Re: NYT covers China cyberthreat
by Eugen Leitl 22 Feb '13

22 Feb '13

----- Forwarded message from Rich Kulawiec <rsk(a)gsp.org> -----

1 0

[drone-list] DHS FOIA on Privacy from Drones
by Eugen Leitl 22 Feb '13

22 Feb '13

----- Forwarded message from Al Mac Wow <macwheel99(a)wowway.com> -----

1 0