- cypherpunks-legacy - lists.cpunks.org

ATTN: MiTH attack against SkyPE, defeates "Findnot.com"
by Anothony Georgeo 06 Jul '18

06 Jul '18

Hello, Here is a quoted section from an article about the US FBI and the next generation of "Carnivore" which will focus on VoIP. The qutoed section deals with a MiTH attack (I think) that has been discussed here before. The attacker adds a packet timing delay and invisable 'tag' to packets of the P2P VoIP software "SkyPE". This MiTH attack defeated the anonymity offered by http://www.findnot.com and as such everyone should concider all other web-based, single-hop and weak [eg. non-Tor ;-) ] anonymizing services to be broken. I don't think this MiTH attack can effect the Tor network but I'm not sure. I think Tor's DH key authentication of nodes and TLS tunnels precludes this attack but I'm not positive. Can an Onion Route II/Tor expert offer assurance this MiTH attack does not effect Tor? -Quoted section- http://news.com.com/Feds+fund+VoIP+tapping+research/2100-7348_3-5825932.htm… part=rss&tag=5825932&subj=news The FBI or any other government agency that's eavesdropping on both ends of the link would see that each person was connected to the anonymizing server--but couldn't know for sure who was talking to whom. The more customers who use the service at once, the more difficult it would be for investigators to connect the dots. Wang discovered he could embed a unique, undetectable signature in Skype packets and then identify that signature when they reached their destination. The technique works in much the same way as a radioactive marker that a patient swallows, permitting doctors to monitor its progress through the digestive system. "It's based on the flow itself," Wang said. "I embed a watermark into the flow itself, the timing of the packets. By adjusting the timing of select packets slightly, it's transparent. There's no overhead in the bandwidth, and it's very subtle. It's mingled with the background noise." (The anonymizing service tested was Findnot.com, which did not immediately respond to a request for comment on Tuesday.) A paper co-authored by Wang and fellow George Mason researchers Shiping Chen and Sushil Jajodia describing their results is scheduled to be presented at a computer security conference in November. An early draft concludes that "tracking anonymous, peer-to-peer VoIP calls on the Internet is feasible" with only 3-millisecond timing alterations as long as the calls are at least 90 seconds long. -End quoted section- Options, comments? __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

Re: US Warships jamming Lebanon Internet
by Martin Millnert 06 Jul '18

06 Jul '18

On Sun, Feb 6, 2011 at 12:00 AM, Joly MacFie <joly(a)punkcast.com> wrote: > Lebanon's Telecom minister is claiming that US Navy radar is blocking the > country's Internet.. > > http://www.naharnet.com/domino/tn/NewsDesk.nsf/0/93A95CA1A4E42178C225782E00… > > "The problem, however, is due to a coordination error related to waves," >> Nahhas told OTV, adding that an investigation was underway to find out >> whether this act is "intentional or not." > > > also at > http://www.naharnet.com/domino/tn/NewsDesk.nsf/Lebanon/EFCEF203B3C315A5C225… Well-known problem with radars and wifi (used to live next to a (military) radar research site): http://en.wikipedia.org/wiki/Radar#Frequency_bands -- Check who uses S and C http://en.wikipedia.org/wiki/S_band Another reason to not rely on radio for your LAN/WAN in times of Aegis cruisers passing by... ;) Regards, Martin ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: US Warships jamming Lebanon Internet
by Martin Millnert 06 Jul '18

06 Jul '18

On Sun, Feb 6, 2011 at 12:00 AM, Joly MacFie <joly(a)punkcast.com> wrote: > Lebanon's Telecom minister is claiming that US Navy radar is blocking the > country's Internet.. > > http://www.naharnet.com/domino/tn/NewsDesk.nsf/0/93A95CA1A4E42178C225782E00… > > "The problem, however, is due to a coordination error related to waves," >> Nahhas told OTV, adding that an investigation was underway to find out >> whether this act is "intentional or not." > > > also at > http://www.naharnet.com/domino/tn/NewsDesk.nsf/Lebanon/EFCEF203B3C315A5C225… Well-known problem with radars and wifi (used to live next to a (military) radar research site): http://en.wikipedia.org/wiki/Radar#Frequency_bands -- Check who uses S and C http://en.wikipedia.org/wiki/S_band Another reason to not rely on radio for your LAN/WAN in times of Aegis cruisers passing by... ;) Regards, Martin ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

public scalable vpn?
by Randy Bush 06 Jul '18

06 Jul '18

academics in ontario are gonna need a scalable vpn service until they find jobs elsewhere. http://www.cautbulletin.ca/en_article.asp?SectionID=1386&SectionName=News&V… i can only handle a dozen or so. anyone running anything at scale? randy ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

ATTN: MiTH attack against SkyPE, defeates "Findnot.com"
by Anothony Georgeo 06 Jul '18

06 Jul '18

Hello, Here is a quoted section from an article about the US FBI and the next generation of "Carnivore" which will focus on VoIP. The qutoed section deals with a MiTH attack (I think) that has been discussed here before. The attacker adds a packet timing delay and invisable 'tag' to packets of the P2P VoIP software "SkyPE". This MiTH attack defeated the anonymity offered by http://www.findnot.com and as such everyone should concider all other web-based, single-hop and weak [eg. non-Tor ;-) ] anonymizing services to be broken. I don't think this MiTH attack can effect the Tor network but I'm not sure. I think Tor's DH key authentication of nodes and TLS tunnels precludes this attack but I'm not positive. Can an Onion Route II/Tor expert offer assurance this MiTH attack does not effect Tor? -Quoted section- http://news.com.com/Feds+fund+VoIP+tapping+research/2100-7348_3-5825932.htm… part=rss&tag=5825932&subj=news The FBI or any other government agency that's eavesdropping on both ends of the link would see that each person was connected to the anonymizing server--but couldn't know for sure who was talking to whom. The more customers who use the service at once, the more difficult it would be for investigators to connect the dots. Wang discovered he could embed a unique, undetectable signature in Skype packets and then identify that signature when they reached their destination. The technique works in much the same way as a radioactive marker that a patient swallows, permitting doctors to monitor its progress through the digestive system. "It's based on the flow itself," Wang said. "I embed a watermark into the flow itself, the timing of the packets. By adjusting the timing of select packets slightly, it's transparent. There's no overhead in the bandwidth, and it's very subtle. It's mingled with the background noise." (The anonymizing service tested was Findnot.com, which did not immediately respond to a request for comment on Tuesday.) A paper co-authored by Wang and fellow George Mason researchers Shiping Chen and Sushil Jajodia describing their results is scheduled to be presented at a computer security conference in November. An early draft concludes that "tracking anonymous, peer-to-peer VoIP calls on the Internet is feasible" with only 3-millisecond timing alterations as long as the calls are at least 90 seconds long. -End quoted section- Options, comments? __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

public scalable vpn?
by Randy Bush 06 Jul '18

06 Jul '18

academics in ontario are gonna need a scalable vpn service until they find jobs elsewhere. http://www.cautbulletin.ca/en_article.asp?SectionID=1386&SectionName=News&V… i can only handle a dozen or so. anyone running anything at scale? randy ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[bitcoin-list] Critical denial-of-service vulnerability
by Gavin Andresen 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2012-2459: Critical Vulnerability A denial-of-service vulnerability that affects all versions of bitcoind and Bitcoin-Qt has been reported and fixed. An attacker could isolate a victim's node and cause the creation of blockchain forks. Because this bug could be exploited to severely disrupt the Bitcoin network we consider this a critical vulnerability, and encourage everybody to upgrade to the latest version: 0.6.2. Backports for older releases (0.5.5 and 0.4.6) are also available if you cannot upgrade to version 0.6.2. Full technical details are being withheld to give people the opportunity to upgrade. Thanks to Forrest Voight for discovering and reporting the vulnerability. Questions that might be frequently asked: How would I know if I am the victim of this attack? Your bitcoin process would stop processing blocks and would have a different block count from the rest of the network (you can see the current block count at websites like blockexplorer.com or blockchain.info). Eventually it would display the message: "WARNING: Displayed transactions may not be correct! You may need to upgrade, or other nodes may need to upgrade." (note that this message is displayed whenever your bitcoin process detects that the rest of the network seems to have a different block count, which can happen for several reasons unrelated to this vulnerability). Could this bug be used to steal my wallet? No. Could this bug be used to install malware on my system? No. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) iQIcBAEBCgAGBQJPsTpaAAoJECnZ7msfxzDB76cQALBqcEb40dQOtopbsk7vHDuL FL4xd56B1/s3idyHGeCuwJX5bgxGD9b3svayXhDiLo9O+5E3sxsLY1HehTXnU8KV BGpIQ7I+XLDcmarGYrDLMNMDLFOp/1hTipi08X3cr6oHNdYOxGbdtqCQR8xxtdfh Mmo07ReYYWamlF+QbwoXIJQOEka2UVeWWgmk1C+WW1phI3P3Of5EvWvkmOurZsY1 zew7G3sk0Lu8glxSt8qq1SKlDXOaSqTBPxs+2FtgkUplNrAIyufu0vCTsnC44oie ndJD6XZAaG6cYr3adGQKmUjRR+oyZarMtBdDHBvYHkrQI4uQclL1aS7DhkLtH8kp fBRHdqmbBJpmpWOcs+OZeaQCzrArKihuVVZqP4HYbHgGHLV3Ls1bebyWm5eLZH6Z C5l3B4Hz/lp50gJpVsIZI291l3KWfoBW2qGyQv51U4uByLU8tPzgr5bdyo6YCo4N XQZHveNInMDI8jSimGyHg7WNm0YjkSAM8PEIJhQuL+RaHKgN/ghLPR+1K1YZnMjq BPdJZVDpP2bgClyj6P+UkhAplEoenxZUsjyRmcs9EWjHZo3UUI9MLZW96vkR0Wlv UBgq0/jSNQ6s3U3YwKM8CDFJ4OB7Mu1Ln6sn+Tu5sl3xtPyapARA5K67FYSpvqVX GNIME8aiNjICQmtIFiuX =9L8G -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ bitcoin-list mailing list bitcoin-list(a)lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bitcoin-list ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[bitcoin-list] Critical denial-of-service vulnerability
by Gavin Andresen 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2012-2459: Critical Vulnerability A denial-of-service vulnerability that affects all versions of bitcoind and Bitcoin-Qt has been reported and fixed. An attacker could isolate a victim's node and cause the creation of blockchain forks. Because this bug could be exploited to severely disrupt the Bitcoin network we consider this a critical vulnerability, and encourage everybody to upgrade to the latest version: 0.6.2. Backports for older releases (0.5.5 and 0.4.6) are also available if you cannot upgrade to version 0.6.2. Full technical details are being withheld to give people the opportunity to upgrade. Thanks to Forrest Voight for discovering and reporting the vulnerability. Questions that might be frequently asked: How would I know if I am the victim of this attack? Your bitcoin process would stop processing blocks and would have a different block count from the rest of the network (you can see the current block count at websites like blockexplorer.com or blockchain.info). Eventually it would display the message: "WARNING: Displayed transactions may not be correct! You may need to upgrade, or other nodes may need to upgrade." (note that this message is displayed whenever your bitcoin process detects that the rest of the network seems to have a different block count, which can happen for several reasons unrelated to this vulnerability). Could this bug be used to steal my wallet? No. Could this bug be used to install malware on my system? No. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) iQIcBAEBCgAGBQJPsTpaAAoJECnZ7msfxzDB76cQALBqcEb40dQOtopbsk7vHDuL FL4xd56B1/s3idyHGeCuwJX5bgxGD9b3svayXhDiLo9O+5E3sxsLY1HehTXnU8KV BGpIQ7I+XLDcmarGYrDLMNMDLFOp/1hTipi08X3cr6oHNdYOxGbdtqCQR8xxtdfh Mmo07ReYYWamlF+QbwoXIJQOEka2UVeWWgmk1C+WW1phI3P3Of5EvWvkmOurZsY1 zew7G3sk0Lu8glxSt8qq1SKlDXOaSqTBPxs+2FtgkUplNrAIyufu0vCTsnC44oie ndJD6XZAaG6cYr3adGQKmUjRR+oyZarMtBdDHBvYHkrQI4uQclL1aS7DhkLtH8kp fBRHdqmbBJpmpWOcs+OZeaQCzrArKihuVVZqP4HYbHgGHLV3Ls1bebyWm5eLZH6Z C5l3B4Hz/lp50gJpVsIZI291l3KWfoBW2qGyQv51U4uByLU8tPzgr5bdyo6YCo4N XQZHveNInMDI8jSimGyHg7WNm0YjkSAM8PEIJhQuL+RaHKgN/ghLPR+1K1YZnMjq BPdJZVDpP2bgClyj6P+UkhAplEoenxZUsjyRmcs9EWjHZo3UUI9MLZW96vkR0Wlv UBgq0/jSNQ6s3U3YwKM8CDFJ4OB7Mu1Ln6sn+Tu5sl3xtPyapARA5K67FYSpvqVX GNIME8aiNjICQmtIFiuX =9L8G -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ bitcoin-list mailing list bitcoin-list(a)lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bitcoin-list ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

FC: Singapore orders political websites to register with government
by Declan McCullagh 06 Jul '18

06 Jul '18

[I wrote this article before seeing the mail from the Singapore government to one political site. Note the site, sintercom, is not set up by political candidates -- it is intended for political discussions, much like Politech or Slashdot. See the text below. --Declan] ********* http://www.wired.com/news/culture/0,1284,44866,00.html Slinging Shots at Singapore By Declan McCullagh (declan(a)wired.com) 2:00 a.m. July 9, 2001 PDT SAN MATEO, California -- Singapore's most twisted, droll and insanely popular humor site launched quietly enough last year after one of its editors got dumped from a dying Internet company in the United States. "I was in a failed dot-com, and I was trying to figure out what to do after that," said Singapore expatriate K.K. Cheong, editor of TalkingCock. "A bunch of us got together and started brainstorming and decided that what Singapore really needs is a real humor magazine. Something edgy." One year later, TalkingCock has become the country's equivalent of The Onion or MadCowCulture -- a smart, savvy, and occasionally raunchy humor zine that delights in poking fun at Singaporean culture and politics. Some recent headlines include an undeniably funny mock interview with President Bush, an article entitled "Singapore's Worst Job Revealed: Wanking Elephants," and a report on helpful civil servants offering to impregnate Singaporean wives who have difficulty conceiving a child. [...] The Singapore Straits-Times reported last month that in addition to regulating how political parties may use the Web, the government also wants to enforce "responsible use" of the Internet by news organizations. ... A Singapore government source who is familiar with TalkingCock said on Wednesday it was too soon to tell how worried the site's writers should be. "It would be going after the content and not specific websites," said the source, who did not want to be identified. "It would not be the case that TalkingCock.com by its very nature would be subject to regulation. It would depend on its content." [...] ********* [This letter has been retyped from postal mail and is provided to me by a very reliable source. sintercom.org is not related to talkingcock.com other than they share a similar user base and both openly discuss issues about Singaporean life, making them something of a rarity. (sintercom is more serious and talkingcock is purely satire.) The sintercom editors are now reportedly considering options such as moving the site offshore, saying that an earlier legal exemption still applies, or allowing the Singapore government to censor whatever they like and replacing deleted content with a big "CENSORED BY SBA" logo. --Declan] 7 July 2001 Dear Mr Tan and Ms Goh Registration of Website - Sintercom 1. We note that your website www.sintercom.org engages in the propagation, promotion and discussion of political issues relating to Singapore. 2. Please be informed that under the Singapore Boradcasting Authority (class Licence) Notification 1996, any body of persons engaged in the propagation, promotion or discussion of political issues relating to Singapore on the Internet is required to register with the Authority. 3. Please complete the enclosed registration form B and form B2, and return the completed forms to me within 14 days fromthe date of this letter. 4. Do feel free to call me at 837 9385 should you have any queries. Thank you. Yours sincerely Paglar Yvonne Ann (Ms) Management executive (new media policy) for Chief executive officer SBA [Form B is entitled: Political parties ergistered in Singapre OR individuals/groups/organisations/corporations providing political or religious content] [Form B2 is a declaration: site agrees to accept full responsibility for the content on the abovementioned website, including the content of discussion groups carried on it.] ------------------------------------------------------------------------- POLITECH -- Declan McCullagh's politics and technology mailing list You may redistribute this message freely if you include this notice. To subscribe, visit http://www.politechbot.com/info/subscribe.html This message is archived at http://www.politechbot.com/ ------------------------------------------------------------------------- ----- End forwarded message -----

1 0

US could access EU data retention information
by Richard Forno 06 Jul '18

06 Jul '18

US could access EU data retention information 12.05.2006 - 09:50 CET | By Helena Spongenberg US authorities can get access to EU citizens' data on phone calls, sms' and emails, giving a recent EU data-retention law much wider-reaching consequences than first expected, reports Swedish daily Sydsvenskan. The EU data retention bill, passed in February after much controversy and with implementation tabled for late 2007, obliges telephone operators and internet service providers to store information on who called who and who emailed who for at least six months, aimed at fighting terrorism and organised crime. A week later on 2-3 March, EU and US representatives met in Vienna for an informal high level meeting on freedom, security and justice where the US expressed interest in the future storage of information. The US delegation to the meeting "indicated that it was considering approaching each [EU] member state to ensure that the data collected on the basis of the recently adopted Directive on data retention be accessible to them," according to the notes of the meeting. Representatives from the Austrian EU presidency and from the European Commission said that these data were "accessible like any other data on the basis of the existing ... agreements" the notes said. The EU representatives added that the commission would convene an expert meeting on the issue. Under current agreements, if the FBI, for example, is interested in a group of EU citizens from a member state who are involved in an investigation, the bureau can ask for help with a prosecutor in that member state. The national prosecutor then requests telephone operators and internet service providers for information, which is then passed on to the FBI. This procedure opens the way for US authorities to get access under the EU data-retention law, according to the Swedish newspaper. In the US itself meanwhile, fury has broken out in the US congress after reports revealed that the Bush administration covertly collected domestic phone records of tens of millions of US citizens since the attacks in New York on 11 September 2001. President George Bush did not deny the allegations in a television statement last night, but insisted that his administration had not broken any laws. ) EUobserver.com 2006 Printed from EUobserver.com 14.05.2006 The information may be used for personal and non-commercial use only. This article and related links can be found at: http://euobserver.com/9/21580 ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0