- cypherpunks-legacy - lists.cpunks.org

Re: [tor-talk] [liberationtech] Not another Haystack right?
by Eugen Leitl 03 Dec '11

03 Dec '11

----- Forwarded message from E483FFF6 <gozu(a)xerobank.net> -----

1 0

Re: [cryptography] Introducing DM-Steg: Deniable encryption for Linux
by J.A. Terranson 03 Dec '11

03 Dec '11

On Fri, 2 Dec 2011, Leo Samulis wrote: > Hello folks, > > I'd like to introduce DM-Steg. It's a Linux device mapper module that > provides deniable/steganographic encryption. DM-Steg provides similar > capabilities to Rubberhose (a now defunct project by Julian Assange et > al.) and more advanced deniable encryption than Truecrypt. It's been a very long time since I've heard Rubberhose kicked around these parts, but wasn't it specifically designed to provide deniability through the production of a "false key" which provided an alternative decryption that appeared to be "all the data" via the false key (while leaving the actual secret data unencrypted)? //Alif -- I hate Missouri. Land of the free, home of the perjuriously deranged.

2 1

НДС при совершении операций на внешнем и внутреннем рынках
by НДС 2011 Изменения 03 Dec '11

03 Dec '11

16 декaбря 2011 г. (Лекторы Минфин РФ) НДС при совершении операций на внешнем и внутреннем рынках - новые актуальные вопросы применения. Перспективы 2012 года. ЛЕкторы Минфин РФ Читает программу по внутренним операциям НДС: Cоветник Отдела косвенных налогов департамента налоговой и таможенно-тарифной политики Минфина России. Читает программу по внешним операциям НДС: Ведущий советник Отдела косвенных налогов Департамента налоговой и таможенно-тарифной политики Минфина России. код: (четыре девять пять) Ч45-Ч0\95 ; ЧЧ53968 Программа: 1. Налогоплательщики налога на добавленную стоимость. Операции, признаваемые объектом налогообложения. Операции, не признаваемые объектом налогообложения и освобождаемые от налогообложения. 2. Порядок определения налоговой базы по НДС. Момент определения налоговой базы при реализации товаров (работ, услуг), имущественных прав, в том числе по договорам, в которых обязательство по оплате выражено в иностранной валюте. Особенности определения налоговой базы при изменении стоимости товаров (работ, услуг). 3. Применение НДС при поставках товаров на экспорт. Порядок подтверждения обоснованности применения нулевой ставки НДС. 4. Налоговые вычеты, в том числе: * при осуществлении операций, подлежащих налогообложению по нулевой ставке; * при перечислении предварительной оплаты; * при приобретении товаров (работ, услуг) по договорам, в которых обязательство по оплате выражено в иностранной валюте; * при изменении стоимости товаров (работ, услуг). 5. Особенности применения НДС при выполнении работ (оказании услуг), облагаемых по нулевой ставке, в том числе работ (услуг), связанных с международной перевозкой 6. Порядок отнесения сумм НДС на затраты по производству и реализации товаров (работ, услуг). Порядок ведения раздельного учета, в том числе по ОС и НМА. Восстановление налога, в том числе при недостачах, получении субсидий, по объектам капитального строительства, при проведении модернизации (реконструкции) объектов недвижимости. 7. Применение НДС при возврате товаров 8. Порядок составления счетов-фактур (корректировочных счетов-фактур). Порядок регистрации счетов-фактур (корректировочных счетов-фактур) в книгах покупок и продаж. Декларация по НДС. 9. Определение места реализации работ (услуг) в целях применения НДС. 10. Исполнение обязанности налоговых агентов по НДС. 11. Исчисление НДС при осуществлении посреднических операций по реализации и приобретению товаров (по договорам комиссии, поручения и т.д.) 12. НДС при ввозе товаров на территорию Российской Федерации (определение налоговой базы, уплата НДС в зависимости от избранной таможенной процедуры, вычет уплаченных сумм налога). 13. Особенности применения НДС при осуществлении внешнеторговых операций в рамках Таможенного союза. Стоимость участия: 9000 рублей Вся информация по тел: (Ч95) Ч45\4О_95 <> 7922122

1 0

Best Penis Enlargement Pills from $99. Male extra is the strongest male enhancement and penis enlargement system available
by KittyAdrien 03 Dec '11

03 Dec '11

Best Penis Enlargement Pills from $99 Male extra is the strongest male enhancement and penis enlargement system available. Rock solid, bigger, harder, more intense erections. Free Bonuses with every order! Money Back Guarantee. http://penisprochina.ru

1 0

"Carrier IQ and Facebook pose the least of your privacy threats"
by Gene Wirchenko 02 Dec '11

02 Dec '11

Galen Gruman, *InfoWorld*, 2 Dec 2011 Users are regularly signing up for Big Brother-like tech that could result in the loss of insurance coverage or worse http://www.infoworld.com/t/internet-privacy/carrier-iq-and-facebook-pose-th… selected text: But the worst risk is what people aren't talking about: Big Brother-type technology used to monitor specific individuals and shape their behavior through penalties and rewards. If the government were doing this, we'd have people in the streets, but in the hands of private companies, these seductive methods convince people to naively agree to being controlled. Take, for example, Progressive Insurance's program of offering tracking devices to monitor how you drive. If you drive safely, as determined by Progressive, you get an discount. If you're determined to be unsafe, you pay the "normal" rate. Given insurance companies' business model -- pay out as little as possible, take in as much as possible -- the long-term result is obvious: "Unsafe" drivers will pay more, or they won't be eligible for insurance. It's not just Progressive. There's been a lot of excitement in the health care industry over monitoring devices that can make sure people are taking their medication, eating right, and even exercising. If you do what you're supposed to, you may get a discount, such as on medical insurance, a measure now being considered for employer-sponsored plans. If you don't, you may get nagged, pay more, or be denied coverage. The Orwellian name for such control approaches is "wellness incentives." Here is what one poster had to say about the medical monitoring. That last paragraph is particularly nasty: unbound55: A very good article pointing out activities that are already occurring that will impact people's lives far more than they think. My company has been on the leading edge of the health care tracking that is mentioned in this article. Already offering incentives for providing additional health information, they are now offering incentives for providing detailed health information such as height, weight, cholesterol, etc. The plan has already been announced that in another year that information will be provided to some kind of CSR that will make sure that your numbers either improve, or that you are actively working on improving your numbers...or you lose access to the premium insurance. It is only a half-step further to lose access to all insurance altogether by participating in the program. Unfortunately, most people do not understand the very real problem being started here. They likely will not understand it until they get bit by it. All they see is the discounts being offered. As someone who spent 9 years trying to get doctors to understand that I actually was exercising very well and ate correctly culminating in the discovery of Conn's Syndrome (the actual root cause of my very high hypertension), I shudder to think how I would have to deal with that with some under-educated CSR who would simply report that I clearly was lying about something. ------------------------------

1 0

"Carrier IQ and Facebook pose the least of your privacy threats"
by Gene Wirchenko 02 Dec '11

02 Dec '11

Galen Gruman, *InfoWorld*, 2 Dec 2011 Users are regularly signing up for Big Brother-like tech that could result in the loss of insurance coverage or worse http://www.infoworld.com/t/internet-privacy/carrier-iq-and-facebook-pose-th… selected text: But the worst risk is what people aren't talking about: Big Brother-type technology used to monitor specific individuals and shape their behavior through penalties and rewards. If the government were doing this, we'd have people in the streets, but in the hands of private companies, these seductive methods convince people to naively agree to being controlled. Take, for example, Progressive Insurance's program of offering tracking devices to monitor how you drive. If you drive safely, as determined by Progressive, you get an discount. If you're determined to be unsafe, you pay the "normal" rate. Given insurance companies' business model -- pay out as little as possible, take in as much as possible -- the long-term result is obvious: "Unsafe" drivers will pay more, or they won't be eligible for insurance. It's not just Progressive. There's been a lot of excitement in the health care industry over monitoring devices that can make sure people are taking their medication, eating right, and even exercising. If you do what you're supposed to, you may get a discount, such as on medical insurance, a measure now being considered for employer-sponsored plans. If you don't, you may get nagged, pay more, or be denied coverage. The Orwellian name for such control approaches is "wellness incentives." Here is what one poster had to say about the medical monitoring. That last paragraph is particularly nasty: unbound55: A very good article pointing out activities that are already occurring that will impact people's lives far more than they think. My company has been on the leading edge of the health care tracking that is mentioned in this article. Already offering incentives for providing additional health information, they are now offering incentives for providing detailed health information such as height, weight, cholesterol, etc. The plan has already been announced that in another year that information will be provided to some kind of CSR that will make sure that your numbers either improve, or that you are actively working on improving your numbers...or you lose access to the premium insurance. It is only a half-step further to lose access to all insurance altogether by participating in the program. Unfortunately, most people do not understand the very real problem being started here. They likely will not understand it until they get bit by it. All they see is the discounts being offered. As someone who spent 9 years trying to get doctors to understand that I actually was exercising very well and ate correctly culminating in the discovery of Conn's Syndrome (the actual root cause of my very high hypertension), I shudder to think how I would have to deal with that with some under-educated CSR who would simply report that I clearly was lying about something. ------------------------------

1 0

AT&T, Sprint, T-Mobile admit to using Carrier IQ; Apple says it doesn't anymore (NNSquad)
by Lauren Weinstein 02 Dec '11

02 Dec '11

> AT&T, Sprint, T-Mobile admit to using Carrier IQ; Apple says it > doesn't anymore + my comments > http://j.mp/rPycF6 (This message on Google+) - - - > http://j.mp/vVRV3J (Fierce Mobile) > "The controversy over Carrier IQ illegally tracking cell phone users' > activities continues. AT&T Mobility (NYSE:T), Sprint Nextel (NYSE:S) and > T-Mobile USA have come forward, admitting to using Carrier IQ software, > albeit allegedly only to improve their network performance. On the other > end of the spectrum, Apple said it stopped using Carrier IQ's platform in > the latest version of its operating system, iOS 5." As I noted originally, it seems unwise to "pile on" in this situation, given that the facts are not entirely clear. In particular, it apparently has not yet been demonstrated that CIQ is actually *transmitting* specific user data that would be trigger wiretap laws, irrespective of ephemeral data collection on the device to gather service and use statistics that are being sent. My gut feeling is that in this case there may be parties opportunistically attacking ahead of the facts, and that it is quite possible that the failures in this situation are mainly ones of transparency, disclosure, and user control, rather than the much more serious issues of "wiretapping" per se. We shall see. ------------------------------

1 0

AT&T, Sprint, T-Mobile admit to using Carrier IQ; Apple says it doesn't anymore (NNSquad)
by Lauren Weinstein 02 Dec '11

02 Dec '11

> AT&T, Sprint, T-Mobile admit to using Carrier IQ; Apple says it > doesn't anymore + my comments > http://j.mp/rPycF6 (This message on Google+) - - - > http://j.mp/vVRV3J (Fierce Mobile) > "The controversy over Carrier IQ illegally tracking cell phone users' > activities continues. AT&T Mobility (NYSE:T), Sprint Nextel (NYSE:S) and > T-Mobile USA have come forward, admitting to using Carrier IQ software, > albeit allegedly only to improve their network performance. On the other > end of the spectrum, Apple said it stopped using Carrier IQ's platform in > the latest version of its operating system, iOS 5." As I noted originally, it seems unwise to "pile on" in this situation, given that the facts are not entirely clear. In particular, it apparently has not yet been demonstrated that CIQ is actually *transmitting* specific user data that would be trigger wiretap laws, irrespective of ephemeral data collection on the device to gather service and use statistics that are being sent. My gut feeling is that in this case there may be parties opportunistically attacking ahead of the facts, and that it is quite possible that the failures in this situation are mainly ones of transparency, disclosure, and user control, rather than the much more serious issues of "wiretapping" per se. We shall see. ------------------------------

1 0

[cryptography] Introducing DM-Steg: Deniable encryption for Linux
by Eugen Leitl 02 Dec '11

02 Dec '11

----- Forwarded message from Leo Samulis <anagon(a)gmail.com> -----

1 0

Skype flaw reveals users' location, file-downloading habits
by Monty Solomon 02 Dec '11

02 Dec '11

Joan Goodchild, CSO Online, 1 Dec 2011 A team of researchers has uncovered an issue that imperils Skype users' privacy by putting their location and identity up for grabs Researchers have found a flaw in Skype that can expose your location, identity and the content you're downloading. Microsoft, which owns Skype, says they are working on the problem. The issue was uncovered earlier this year by a team of researchers from Polytechnic Institute of New York University (NYU-Poly), MPI-SWS in Germany and INRIA in France and included Keith Ross, Stevens Le Blond, Chao Zhang, Arnaud Legout, and Walid Dabbous. The team presented the research in Berlin recently at the Internet Measurement Conference 2011 in a paper titled "I know where you are and what you are sharing." The researchers found several properties of Skype that can track not only users' locations over time, but also their peer-to-peer (P2P) file-sharing activity, according to a summary of the findings on the NYU-Poly web site. Earlier this year, a German researcher found a cross-site scripting flaw in Skype that could allow someone to change an account password without the user's consent. ... http://www.csoonline.com/article/695631/skype-flaw-reveals-users-location-f… - - - - Somini Sengupta, Skype Can Expose Your Location, Researchers Say, *The New York Times* blogs, 29 Nov 2011 http://bits.blogs.nytimes.com/2011/11/29/skype-can-expose-your-location-res… Remember when a prankster could make himself a general nuisance by calling your home phone and quickly hanging up? The equivalent of a prank call on Skype, the popular voice-over-Internet-Protocol service, can be much more than a nuisance. If you are logged in to Skype, a prankster - or thief or spy - can effectively track where you are and in some circumstances, what you do and even what you download, according to an experiment led by Keith Ross, a computer science professor at the Polytechnic Institute of New York University in Brooklyn. Mr. Ross, along with his collaborators at the French computer research institute, Inria, followed 10,000 randomly selected Skype users over 16 days. ... ------------------------------

1 0