- cypherpunks-legacy - lists.cpunks.org

Tor for Android
by Eugen Leitl 06 Jul '18

06 Jul '18

http://www.cl.cam.ac.uk/research/dtg/android/tor/ TorProxy and Shadow Summer placement project, written by Connell Gauld. TorProxy is an Android application that makes it possible to use Internet sites and services anonymously from a mobile device. This is possible thanks to the Tor network and OnionCoffee. TorProxy can be used by many different Android applications to obtain an anonymous Internet application. For example, if you want to browse website anonymously you will need to install a web browser which uses TorProxy such as Shadow (see below). Shadow is an Android application allows you to browse the Web anonymously from your mobile phone. The Shadow browser requires TorProxy (see above) do do this. In addition to using the Tor network to anonymously retrieve information from the Web, Shadow also helps you manage any "cookies" sent to Shadow by Websites to protect your browsing history. The source code of TorProxy and Shadow are available under the GPL v2 license. Please email us for further details. We hope to provide public access to our SVN repository shortly. How to use TorProxy and Shadow 1. Install TorProxy and Shadow by downloading them from the Android Marketplace. 2. Start the TorProxy application. 3. Select a profile for TorProxy: * off b do not connect to the tor network. * on-demand b only connect to the tor network if a program (e.g. Shadow) needs it. This profile is probably the best choice if you only want to make occassional use of an anonymous Internet connection. * always on b maintain an anonymous connection whenever the phone is actively in use. 4. Once a connection to the Tor network is requested, a notification of the state of the connection appears in the notification bar. A countdown will appear with an estimate of the time remaining before an anonymous connection becomes available. This will take approximately one minute in the first instance, and around 35 seconds when reconnecting after the phone has woken up from a sleep state. 5. To browse the Web, start the Shadow web browser. Shadow works in a very similar way to the normal Android Web browser. The Menu button reveals the usual browser options. Typing in a URL will initiate an anonymous connection over the Internet via Tor. Frequently asked questions Why is the Google Website frequently displayed in a foreign language? Google determines the language you want from the internet address of your device. When browsing anonymously, the Tor network may provide an internet address from another country. You can click on the "Google.com in English" link to see the website in English. Source Download The TorProxy and Shadow source code is available through anonymous access to our SVN repository: svn co http://www.cl.cam.ac.uk/research/dtg/code/svn/android-tor We developed and compile this code using Eclipse with Subclipse and the Android developer SDK. Each of the four modules in the above repository should be checked out as separate eclipse projects (each has its own .project file). Compiling TorProxyLib 1. Checkout URL: http://www.cl.cam.ac.uk/research/dtg/code/svn/android-tor/TorProxyLib 2. Build in Eclipse as normal 3. Right click on export-torproxylib.jardesc and choose Create Jar Compiling TorProxy 1. Checkout URL: http://www.cl.cam.ac.uk/research/dtg/code/svn/android-tor/TorProxy Compiling Shadow 1. Checkout URL: http://www.cl.cam.ac.uk/research/dtg/code/svn/android-tor/Shadow Compiling TorProxyExamples 1. Checkout URL: http://www.cl.cam.ac.uk/research/dtg/code/svn/android-tor/TorProxyExamples Documentation for Application Developers Overview In order to anonymize your application's Internet communication: 1. Import TorProxyLib.jar into your project 2. Connect to the TorProxy control service 3. Register for the TorProxy status change broadcast 4. When the Tor connection is available, create your socket and tunnel it through SocksProxy 1. TorProxyLib This library contains everything you need to allow your application to anonymize its sockets. Add TorProxyLib.jar to your build path. 2. Connect to the TorProxy control service The TorProxy service exports an interface which you can use to check the availability of the anonymous connection and register your desire to use it. Example: // Keep track of the control service private ITorProxyControl mControlService = null; private final IntentFilter torStatusFilter = new IntentFilter( TorProxyLib.STATUS_CHANGE_INTENT); // Service connection to TorProxy service private ServiceConnection mSvcConn = new ServiceConnection() { @Override public void onServiceConnected(ComponentName name, IBinder service) { mControlService = ITorProxyControl.Stub.asInterface(service); // Connected to Control Service // Perhaps check Tor status here } @Override public void onServiceDisconnected(ComponentName name) { mControlService = null; // Connection to Control Service lost } }; @Override protected void onResume() { // ... // Register to receive Tor status update broadcasts registerReceiver(mBroadcastReceiver, torStatusFilter); // Bind to the TorProxy control service bindService(new Intent().setComponent(new ComponentName( TorProxyLib.CONTROL_SERVICE_PACKAGE, TorProxyLib.CONTROL_SERVICE_CLASS)), mSvcConn, BIND_AUTO_CREATE); // ... } @Override protected void onPause() { // ... // Registered in onResume so unregister here unregisterReceiver(mBroadcastReceiver); unbindService(mSvcConn); // ... } private BroadcastReceiver mBroadcastReceiver = new BroadcastReceiver() { @Override public void onReceive(Context context, Intent intent) { if (TorProxyLib.STATUS_CHANGE_INTENT.equals(intent.getAction())) { // TorProxy has broadcast a Tor status update // Check Tor status here } } }; Using the control service The control service has a current profile. The anonymous data connection has a current state. The profiles are: * PROFILE_OFF - the anonymous data connection is turned off * PROFILE_ONDEMAND - you may have to register your interest to get an anonymous connection * PROFILE_ON - the anonymous data connection will be made available (automatically) if possible The states are: * STATUS_UNAVAILABLE - the anonymous data connection is currently unavailable * STATUS_REQUIRES_DEMAND - the anonymous data connection is currently off but may be available if you register your demand * STATUS_CONNECTING - the anonymous data connection is being set up * STATUS_ON - the anonymous data connection is available for use You can get the current profile using: mControlService.getProfile() You can get the current status using: mControlService.getStatus() Tunneling a socket through SocksProxy int proxyPort = mControlService.getSOCKSPort(); SocksProxy proxy = new SocksProxy(proxyPort); Socket s = proxy.connectSocksProxy(null, destHost, destPort, 0); // Use s as normal ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Tor 0.0.9.4 is out
by Roger Dingledine 06 Jul '18

06 Jul '18

Tor 0.0.9.4 fixes a server bug that took down most of the network (if you're running a server, please upgrade; or if you're running cvs, please cvs update). It also makes us more robust to running out of file descriptors. http://tor.eff.org/download.html o Bugfixes on 0.0.9: - Fix an assert bug that took down most of our servers: when a server claims to have 1 GB of bandwidthburst, don't freak out. - Don't crash as badly if we have spawned the max allowed number of dnsworkers, or we're out of file descriptors. - Block more file-sharing ports in the default exit policy. - MaxConn is now automatically set to the hard limit of max file descriptors we're allowed (ulimit -n), minus a few for logs, etc. - Give a clearer message when servers need to raise their ulimit -n when they start running out of file descriptors. - SGI Compatibility patches from Jan Schaumann. - Tolerate a corrupt cached directory better. - When a dirserver hasn't approved your server, list which one. - Go into soft hibernation after 95% of the bandwidth is used, not 99%. This is especially important for daily hibernators who have a small accounting max. Hopefully it will result in fewer cut connections when the hard hibernation starts. - Load-balance better when using servers that claim more than 800kB/s of capacity. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

[Diebold] Voting programmer worked for White House Plumbers
by Esther Dyson 06 Jul '18

06 Jul '18

chief amazing and alarming (or perhaps not so amazing these days) (Also, note his wife's firm: Spectrum Print And Mail = SPAM) >X-Spam-Filter: check_local(a)cn-sfo1-mail-sa5.cnet.cnwk by >digitalanswers.org >X-SBRS: 3.8 >X-BrightmailFiltered: true >X-Brightmail-Tracker: AAAAAQAAA+k= >X-IronPort-AV: i="4.01,220,1136188800"; > d="scan'208"; a="93229484:sNHT26351932" >To: edyson(a)edventure.com >Subject: Voting programmer worked for White House Plumbers chief >Reply-To: update(a)blackboxvoting.org >X-Complaints-To: abuse(a)elabs3.com >From: "update(a)blackboxvoting.org" <update(a)blackboxvoting.org> >Date: Thu, 26 Jan 2006 00:30:51 -0800 (PST) >X-Spam-Status: No >X-Spam-Score: 0.6 () MY_DOMAIN_ENDS_NUMS >X-Scanned-By: MIMEDefang 2.49 on 10.16.81.180 >X-OriginalArrivalTime: 26 Jan 2006 08:30:56.0220 (UTC) FILETIME= >[D3C4F1C0:01C62252] > >Contact: Black Box Voting - Bev Harris 206-335-7747 or 425-793-1030 > >Convicted of 23 felonies for computer crimes, Jeffrey Dean >was sent to prison for four years. Shortly after his release >from incarceration, his company was awarded one of the >largest ballot printing contracts in history, and he began >programming voting systems that later became Diebold Election >Systems. > >In a 2003 deposition, Dean states that he was a scapegoat >who was left holding the bag in a series of unapproved payments >from Culp, Guterson & Grader, one of the most politically connected >law firms in Washington state. > >One of this firm's partners at the time was Egil "Bud" Krogh, >who headed the White House "plumbers" unit under Richard Nixon. >Krogh ordered the burglary of Pentagon Papers whistleblower >Daniel Ellsberg. > >Dean claimed that other persons from the firm were involved in >a scheme, and upon discovery of illicit payments (averaging >$14,000/month) he was made to take the blame. Krogh became a >partner at Culp Guterson & Grader in 1984, Dean says he received >illicit payments of approximately $15,000 per month from 1985 - 1987. > >Like Jeffrey Dean, Krogh did time in prison -- four months for >Watergate-related crimes. Krogh was disbarred, but after a fight >from a Culp Guterson & Grader attorney, his credentials were >restored. At the time, the firm was called "Culp Dwyer Guterson >& Grader." > >'He [Krogh] was hired on the merits of his character, intelligence >and skills as a lawyer,'' said William L. Dwyer, the firm's senior >partner, who had represented Mr. Krogh in his disbarment fight. >Dwyer became a U.S. district judge. > >DEAN BECOMES A BALLOT PRINTER > >Shortly after Jeffrey Dean was released from prison on the Culp >Guterson Grader matter, a company owned by his wife (but run >by Jeffrey Dean) was awarded one of the largest ballot-printing >contracts in history, with King County, Washington. In SEC documents, >this company (Spectrum Print & Mail Ltd.) lists assets located in the >Seattle area, British Columbia, San Francisco and in the Norwalk (CA) >location that houses the Los Angeles County Elections Division. > >DEAN DEVELOPS COMPUTERIZED ELECTION SYSTEMS > >According to depositions taken in 2003, Jeffrey Dean programmed >the ballot sorting software used to process incoming and outgoing >mail-in ballots. He also developed the Vote Remote software used >to track and authenticate mail-in ballots. > >"Key logs" from King County Elections show that Jeffrey Dean was >given intimate access to the GEMS server (Diebold central tabulating >software); internal memos from Diebold refer to an ongoing consulting >arrangement with Dean, and document that he had management >involvement in the touch-screens, the 1.96 version of the optical >scan, >the votercard encoder and the Windows CE operating system used in >Diebold voting machines. In addition, during recent litigation Dean >called >Peter G. Martin as a witness, indicating that he had worked closely >with >Martin, who programmed the new upcoming High Speed Central Count >system. > >RECENT DEVELOPMENTS WITH THE DEAN FAMILY > >Black Box Voting has learned that Jeffrey Dean and his wife Deborah >have recently been ordered into Chapter 7 bankruptcy by a trustee >who become fed up with their "gamesmanship" in recent attempts to >obstruct discovery of their assets. > >A 25 YEAR HISTORY OF TROUBLE > >Jeffrey Dean has a 25-year history of financial problems, tax liens >and litigation, going back to a company he formed while working for >Boeing. Though he refers to this company in recent depositions as >"Astec," its real name was Advanced Systems Technology, Inc., >a company run by Dean and partner Michael C. Redman. Dean >represents that this company did aircraft design, and says that >he sold it to Raleigh-Durham Aviation in 1980. Legal documents >show that he had a $700,000 tax lien imposed on him in connection >with the "failed business" in 1984, and several creditors filed civil >suits against him in 1979 and 1980. > >By 1982, Dean was a contractor for Culp, Guterson & Grader. Assets >began accumulating under his wife's names. When Dean divorced >his first wife and married wife #2, Lorimay, she began accumulating >real estate under an entity called "JAL Investments Inc." This entity >and its real estate was transferred to Dean's third wife, Deborah M. >[Pederson] Dean. > >These efforts failed when it was revealed that over $180,000 of >inappropriately received funds were spent on Deborah Dean's house, >and that Deborah had been cashing checks as large as $10,000 at a >time from the illicit funds. > >Although she was involved in litigation over restitution issues, >Deborah Dean was not prosecuted in the thefts from Culp, Guterson >& Grader. > >Jeffrey Dean entered an Alford Plea admitting to 23 felony counts, >and was ordered to appear at the Shelton Correctional facility to >begin his incarceration. Instead, he failed to show up and went to >Oregon, where he apparently lived under a different name. Bench >warrants were issued and he went to prison. > >Meanwhile, wife Deborah began "Spectrum Print & Mail Ltd." >According to depositions, this firm was mostly delivering newspapers >to contract deals like the Washington ferries. > >Shortly after Jeffrey Dean got out of prison, however, Spectrum >Print & Mail got into ballot printing and designing software for >elections. > >This ballot printing plant, using software Dean claims to have >developed, handles ballot printing and mail-ballot processing for >counties like King County (WA) and Los Angeles County, Fresno >County, San Diego County, Alameda County (CA), and for the state >of Georgia and many other locations. > >The Deans were rewarded for Jeffrey Dean's ballot printing and >election software programming work with a $4 million buyout by >Global Election Systems shortly before election 2000. The Deans >became the largest stockholders of Global Election Systems, and >Jeffrey Dean took a position on the board of directors. > >In January 2002, Diebold Inc. purchased Global Election Systems. >Jeffrey Dean says he resigned on the same day Diebold bought the >company. Oddly, in a 2003 deposition, Jeffrey Dean claims that his >contact with Global was always Pat Green -- but Green is a Diebold >employee, not a Global Election Systems employee. Yet Diebold claims >it hasn't worked with Jeffrey Dean. > >The Dean's ballot printing company was acquired by Diebold in the >Global Election Systems acquisition. > >WHY ARE WE DOING THIS? > >The Vote Remote software and the absentee ballot processing >software developed by Jeffrey Dean was never submitted for >certification, has not been examined by anyone, and due to >technicalities >in the certification regulations, is not subject to certification. >Several >counties have recently announced plans to force voters into all >mail-in >voting, including King County, Jeffrey Dean's first elections client. > >Exactly what Jeffrey Dean was doing to the GEMS database >program, what "oversight" he was providing to the touch-screen >technology purchased by Diebold, and what expertise he provided >for the votercard encoder, the optical scan 1.96 series, and the >upcoming High Speed Central Count are not publicly known at this time. >Diebold claims that the software is proprietary and will not allow >public officials or political parties to examine the system. > >DIEBOLD CLAIMS MERIT FURTHER SCRUTINY > >Diebold claims that it did not work with Jeffrey Dean after acquiring >Global Election Systems in Jan. 2002. However, the Dean depositions >reveal that in May and June 2002, during the time a "rob-georgia" >patch was created, Jeffrey Dean was called back to do consulting >for Diebold. > >The Deans have been accused of obstructiveness and >evasion by attorneys seeking to recover funds in a pending bankruptcy >case. Specifically, when asked to identify monies paid by or due from >Diebold Election Systems, they omitted answers. > >YA'LL COME BACK NOW: DOCUMENTATION GOING UP SHORTLY > >Depositions, documents, and supporting documentation will be >posted on the Black Box Voting Web site this week. These documents >include depositions, bankruptcy papers, criminal court records, SEC >documents and civil litigation records for Jeffrey Dean and related >companies. > >Jeffrey Dean prison records: >http://www.bbvforums.org/forums/messages/2197/14323.html > >(by Black Box Voting investigators Bev Harris, Kathleen Wynne, and >Jim March, with assistance from Black Box Voting members Pat Vesely >and John Howard.) > >NEW Citizen research & investigations section now available: >http://www.bbvforums.org/cgi-bin/forums/board-auth.cgi?file=/ >17141/17141.html >(you must register and log in to use this) > >----------------------------------------- > >Black Box Voting is a nonprofit, nonpartisan 501c(3) elections >group, supported entirely by small citizen donations.Black Box Voting > >, > >To unsubscribe, send an email to: unsubscribe-157294(a)elabs3.com >with the address: edyson(a)edventure.com in the subject line. Esther Dyson Always make new mistakes! Editor, Release 1.0 CNET Networks 20th floor - last elevator 104 Fifth Avenue (at 16th Street) New York, NY 10011 USA +1 (212) 924-8800 NOTE: Carlsbad is the new Scottsdale! PC Forum in CARLSBAD, California, March 12 to 14: http:// www.release1-0.com/events/ Flight School, Aspen, June 15-16 current status (with pictures!) at http://www.flickr.com/photos/edyson/ book: Release 2.0 (Broadway Books) ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] Voting programmer worked for White House Plumbers chief
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

Tor for Android
by Eugen Leitl 06 Jul '18

06 Jul '18

http://www.cl.cam.ac.uk/research/dtg/android/tor/ TorProxy and Shadow Summer placement project, written by Connell Gauld. TorProxy is an Android application that makes it possible to use Internet sites and services anonymously from a mobile device. This is possible thanks to the Tor network and OnionCoffee. TorProxy can be used by many different Android applications to obtain an anonymous Internet application. For example, if you want to browse website anonymously you will need to install a web browser which uses TorProxy such as Shadow (see below). Shadow is an Android application allows you to browse the Web anonymously from your mobile phone. The Shadow browser requires TorProxy (see above) do do this. In addition to using the Tor network to anonymously retrieve information from the Web, Shadow also helps you manage any "cookies" sent to Shadow by Websites to protect your browsing history. The source code of TorProxy and Shadow are available under the GPL v2 license. Please email us for further details. We hope to provide public access to our SVN repository shortly. How to use TorProxy and Shadow 1. Install TorProxy and Shadow by downloading them from the Android Marketplace. 2. Start the TorProxy application. 3. Select a profile for TorProxy: * off b do not connect to the tor network. * on-demand b only connect to the tor network if a program (e.g. Shadow) needs it. This profile is probably the best choice if you only want to make occassional use of an anonymous Internet connection. * always on b maintain an anonymous connection whenever the phone is actively in use. 4. Once a connection to the Tor network is requested, a notification of the state of the connection appears in the notification bar. A countdown will appear with an estimate of the time remaining before an anonymous connection becomes available. This will take approximately one minute in the first instance, and around 35 seconds when reconnecting after the phone has woken up from a sleep state. 5. To browse the Web, start the Shadow web browser. Shadow works in a very similar way to the normal Android Web browser. The Menu button reveals the usual browser options. Typing in a URL will initiate an anonymous connection over the Internet via Tor. Frequently asked questions Why is the Google Website frequently displayed in a foreign language? Google determines the language you want from the internet address of your device. When browsing anonymously, the Tor network may provide an internet address from another country. You can click on the "Google.com in English" link to see the website in English. Source Download The TorProxy and Shadow source code is available through anonymous access to our SVN repository: svn co http://www.cl.cam.ac.uk/research/dtg/code/svn/android-tor We developed and compile this code using Eclipse with Subclipse and the Android developer SDK. Each of the four modules in the above repository should be checked out as separate eclipse projects (each has its own .project file). Compiling TorProxyLib 1. Checkout URL: http://www.cl.cam.ac.uk/research/dtg/code/svn/android-tor/TorProxyLib 2. Build in Eclipse as normal 3. Right click on export-torproxylib.jardesc and choose Create Jar Compiling TorProxy 1. Checkout URL: http://www.cl.cam.ac.uk/research/dtg/code/svn/android-tor/TorProxy Compiling Shadow 1. Checkout URL: http://www.cl.cam.ac.uk/research/dtg/code/svn/android-tor/Shadow Compiling TorProxyExamples 1. Checkout URL: http://www.cl.cam.ac.uk/research/dtg/code/svn/android-tor/TorProxyExamples Documentation for Application Developers Overview In order to anonymize your application's Internet communication: 1. Import TorProxyLib.jar into your project 2. Connect to the TorProxy control service 3. Register for the TorProxy status change broadcast 4. When the Tor connection is available, create your socket and tunnel it through SocksProxy 1. TorProxyLib This library contains everything you need to allow your application to anonymize its sockets. Add TorProxyLib.jar to your build path. 2. Connect to the TorProxy control service The TorProxy service exports an interface which you can use to check the availability of the anonymous connection and register your desire to use it. Example: // Keep track of the control service private ITorProxyControl mControlService = null; private final IntentFilter torStatusFilter = new IntentFilter( TorProxyLib.STATUS_CHANGE_INTENT); // Service connection to TorProxy service private ServiceConnection mSvcConn = new ServiceConnection() { @Override public void onServiceConnected(ComponentName name, IBinder service) { mControlService = ITorProxyControl.Stub.asInterface(service); // Connected to Control Service // Perhaps check Tor status here } @Override public void onServiceDisconnected(ComponentName name) { mControlService = null; // Connection to Control Service lost } }; @Override protected void onResume() { // ... // Register to receive Tor status update broadcasts registerReceiver(mBroadcastReceiver, torStatusFilter); // Bind to the TorProxy control service bindService(new Intent().setComponent(new ComponentName( TorProxyLib.CONTROL_SERVICE_PACKAGE, TorProxyLib.CONTROL_SERVICE_CLASS)), mSvcConn, BIND_AUTO_CREATE); // ... } @Override protected void onPause() { // ... // Registered in onResume so unregister here unregisterReceiver(mBroadcastReceiver); unbindService(mSvcConn); // ... } private BroadcastReceiver mBroadcastReceiver = new BroadcastReceiver() { @Override public void onReceive(Context context, Intent intent) { if (TorProxyLib.STATUS_CHANGE_INTENT.equals(intent.getAction())) { // TorProxy has broadcast a Tor status update // Check Tor status here } } }; Using the control service The control service has a current profile. The anonymous data connection has a current state. The profiles are: * PROFILE_OFF - the anonymous data connection is turned off * PROFILE_ONDEMAND - you may have to register your interest to get an anonymous connection * PROFILE_ON - the anonymous data connection will be made available (automatically) if possible The states are: * STATUS_UNAVAILABLE - the anonymous data connection is currently unavailable * STATUS_REQUIRES_DEMAND - the anonymous data connection is currently off but may be available if you register your demand * STATUS_CONNECTING - the anonymous data connection is being set up * STATUS_ON - the anonymous data connection is available for use You can get the current profile using: mControlService.getProfile() You can get the current status using: mControlService.getStatus() Tunneling a socket through SocksProxy int proxyPort = mControlService.getSOCKSPort(); SocksProxy proxy = new SocksProxy(proxyPort); Socket s = proxy.connectSocksProxy(null, destHost, destPort, 0); // Use s as normal ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Tor 0.0.9.4 is out
by Roger Dingledine 06 Jul '18

06 Jul '18

Tor 0.0.9.4 fixes a server bug that took down most of the network (if you're running a server, please upgrade; or if you're running cvs, please cvs update). It also makes us more robust to running out of file descriptors. http://tor.eff.org/download.html o Bugfixes on 0.0.9: - Fix an assert bug that took down most of our servers: when a server claims to have 1 GB of bandwidthburst, don't freak out. - Don't crash as badly if we have spawned the max allowed number of dnsworkers, or we're out of file descriptors. - Block more file-sharing ports in the default exit policy. - MaxConn is now automatically set to the hard limit of max file descriptors we're allowed (ulimit -n), minus a few for logs, etc. - Give a clearer message when servers need to raise their ulimit -n when they start running out of file descriptors. - SGI Compatibility patches from Jan Schaumann. - Tolerate a corrupt cached directory better. - When a dirserver hasn't approved your server, list which one. - Go into soft hibernation after 95% of the bandwidth is used, not 99%. This is especially important for daily hibernators who have a small accounting max. Hopefully it will result in fewer cut connections when the hard hibernation starts. - Load-balance better when using servers that claim more than 800kB/s of capacity. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

[Diebold] Voting programmer worked for White House Plumbers
by Esther Dyson 06 Jul '18

06 Jul '18

chief amazing and alarming (or perhaps not so amazing these days) (Also, note his wife's firm: Spectrum Print And Mail = SPAM) >X-Spam-Filter: check_local(a)cn-sfo1-mail-sa5.cnet.cnwk by >digitalanswers.org >X-SBRS: 3.8 >X-BrightmailFiltered: true >X-Brightmail-Tracker: AAAAAQAAA+k= >X-IronPort-AV: i="4.01,220,1136188800"; > d="scan'208"; a="93229484:sNHT26351932" >To: edyson(a)edventure.com >Subject: Voting programmer worked for White House Plumbers chief >Reply-To: update(a)blackboxvoting.org >X-Complaints-To: abuse(a)elabs3.com >From: "update(a)blackboxvoting.org" <update(a)blackboxvoting.org> >Date: Thu, 26 Jan 2006 00:30:51 -0800 (PST) >X-Spam-Status: No >X-Spam-Score: 0.6 () MY_DOMAIN_ENDS_NUMS >X-Scanned-By: MIMEDefang 2.49 on 10.16.81.180 >X-OriginalArrivalTime: 26 Jan 2006 08:30:56.0220 (UTC) FILETIME= >[D3C4F1C0:01C62252] > >Contact: Black Box Voting - Bev Harris 206-335-7747 or 425-793-1030 > >Convicted of 23 felonies for computer crimes, Jeffrey Dean >was sent to prison for four years. Shortly after his release >from incarceration, his company was awarded one of the >largest ballot printing contracts in history, and he began >programming voting systems that later became Diebold Election >Systems. > >In a 2003 deposition, Dean states that he was a scapegoat >who was left holding the bag in a series of unapproved payments >from Culp, Guterson & Grader, one of the most politically connected >law firms in Washington state. > >One of this firm's partners at the time was Egil "Bud" Krogh, >who headed the White House "plumbers" unit under Richard Nixon. >Krogh ordered the burglary of Pentagon Papers whistleblower >Daniel Ellsberg. > >Dean claimed that other persons from the firm were involved in >a scheme, and upon discovery of illicit payments (averaging >$14,000/month) he was made to take the blame. Krogh became a >partner at Culp Guterson & Grader in 1984, Dean says he received >illicit payments of approximately $15,000 per month from 1985 - 1987. > >Like Jeffrey Dean, Krogh did time in prison -- four months for >Watergate-related crimes. Krogh was disbarred, but after a fight >from a Culp Guterson & Grader attorney, his credentials were >restored. At the time, the firm was called "Culp Dwyer Guterson >& Grader." > >'He [Krogh] was hired on the merits of his character, intelligence >and skills as a lawyer,'' said William L. Dwyer, the firm's senior >partner, who had represented Mr. Krogh in his disbarment fight. >Dwyer became a U.S. district judge. > >DEAN BECOMES A BALLOT PRINTER > >Shortly after Jeffrey Dean was released from prison on the Culp >Guterson Grader matter, a company owned by his wife (but run >by Jeffrey Dean) was awarded one of the largest ballot-printing >contracts in history, with King County, Washington. In SEC documents, >this company (Spectrum Print & Mail Ltd.) lists assets located in the >Seattle area, British Columbia, San Francisco and in the Norwalk (CA) >location that houses the Los Angeles County Elections Division. > >DEAN DEVELOPS COMPUTERIZED ELECTION SYSTEMS > >According to depositions taken in 2003, Jeffrey Dean programmed >the ballot sorting software used to process incoming and outgoing >mail-in ballots. He also developed the Vote Remote software used >to track and authenticate mail-in ballots. > >"Key logs" from King County Elections show that Jeffrey Dean was >given intimate access to the GEMS server (Diebold central tabulating >software); internal memos from Diebold refer to an ongoing consulting >arrangement with Dean, and document that he had management >involvement in the touch-screens, the 1.96 version of the optical >scan, >the votercard encoder and the Windows CE operating system used in >Diebold voting machines. In addition, during recent litigation Dean >called >Peter G. Martin as a witness, indicating that he had worked closely >with >Martin, who programmed the new upcoming High Speed Central Count >system. > >RECENT DEVELOPMENTS WITH THE DEAN FAMILY > >Black Box Voting has learned that Jeffrey Dean and his wife Deborah >have recently been ordered into Chapter 7 bankruptcy by a trustee >who become fed up with their "gamesmanship" in recent attempts to >obstruct discovery of their assets. > >A 25 YEAR HISTORY OF TROUBLE > >Jeffrey Dean has a 25-year history of financial problems, tax liens >and litigation, going back to a company he formed while working for >Boeing. Though he refers to this company in recent depositions as >"Astec," its real name was Advanced Systems Technology, Inc., >a company run by Dean and partner Michael C. Redman. Dean >represents that this company did aircraft design, and says that >he sold it to Raleigh-Durham Aviation in 1980. Legal documents >show that he had a $700,000 tax lien imposed on him in connection >with the "failed business" in 1984, and several creditors filed civil >suits against him in 1979 and 1980. > >By 1982, Dean was a contractor for Culp, Guterson & Grader. Assets >began accumulating under his wife's names. When Dean divorced >his first wife and married wife #2, Lorimay, she began accumulating >real estate under an entity called "JAL Investments Inc." This entity >and its real estate was transferred to Dean's third wife, Deborah M. >[Pederson] Dean. > >These efforts failed when it was revealed that over $180,000 of >inappropriately received funds were spent on Deborah Dean's house, >and that Deborah had been cashing checks as large as $10,000 at a >time from the illicit funds. > >Although she was involved in litigation over restitution issues, >Deborah Dean was not prosecuted in the thefts from Culp, Guterson >& Grader. > >Jeffrey Dean entered an Alford Plea admitting to 23 felony counts, >and was ordered to appear at the Shelton Correctional facility to >begin his incarceration. Instead, he failed to show up and went to >Oregon, where he apparently lived under a different name. Bench >warrants were issued and he went to prison. > >Meanwhile, wife Deborah began "Spectrum Print & Mail Ltd." >According to depositions, this firm was mostly delivering newspapers >to contract deals like the Washington ferries. > >Shortly after Jeffrey Dean got out of prison, however, Spectrum >Print & Mail got into ballot printing and designing software for >elections. > >This ballot printing plant, using software Dean claims to have >developed, handles ballot printing and mail-ballot processing for >counties like King County (WA) and Los Angeles County, Fresno >County, San Diego County, Alameda County (CA), and for the state >of Georgia and many other locations. > >The Deans were rewarded for Jeffrey Dean's ballot printing and >election software programming work with a $4 million buyout by >Global Election Systems shortly before election 2000. The Deans >became the largest stockholders of Global Election Systems, and >Jeffrey Dean took a position on the board of directors. > >In January 2002, Diebold Inc. purchased Global Election Systems. >Jeffrey Dean says he resigned on the same day Diebold bought the >company. Oddly, in a 2003 deposition, Jeffrey Dean claims that his >contact with Global was always Pat Green -- but Green is a Diebold >employee, not a Global Election Systems employee. Yet Diebold claims >it hasn't worked with Jeffrey Dean. > >The Dean's ballot printing company was acquired by Diebold in the >Global Election Systems acquisition. > >WHY ARE WE DOING THIS? > >The Vote Remote software and the absentee ballot processing >software developed by Jeffrey Dean was never submitted for >certification, has not been examined by anyone, and due to >technicalities >in the certification regulations, is not subject to certification. >Several >counties have recently announced plans to force voters into all >mail-in >voting, including King County, Jeffrey Dean's first elections client. > >Exactly what Jeffrey Dean was doing to the GEMS database >program, what "oversight" he was providing to the touch-screen >technology purchased by Diebold, and what expertise he provided >for the votercard encoder, the optical scan 1.96 series, and the >upcoming High Speed Central Count are not publicly known at this time. >Diebold claims that the software is proprietary and will not allow >public officials or political parties to examine the system. > >DIEBOLD CLAIMS MERIT FURTHER SCRUTINY > >Diebold claims that it did not work with Jeffrey Dean after acquiring >Global Election Systems in Jan. 2002. However, the Dean depositions >reveal that in May and June 2002, during the time a "rob-georgia" >patch was created, Jeffrey Dean was called back to do consulting >for Diebold. > >The Deans have been accused of obstructiveness and >evasion by attorneys seeking to recover funds in a pending bankruptcy >case. Specifically, when asked to identify monies paid by or due from >Diebold Election Systems, they omitted answers. > >YA'LL COME BACK NOW: DOCUMENTATION GOING UP SHORTLY > >Depositions, documents, and supporting documentation will be >posted on the Black Box Voting Web site this week. These documents >include depositions, bankruptcy papers, criminal court records, SEC >documents and civil litigation records for Jeffrey Dean and related >companies. > >Jeffrey Dean prison records: >http://www.bbvforums.org/forums/messages/2197/14323.html > >(by Black Box Voting investigators Bev Harris, Kathleen Wynne, and >Jim March, with assistance from Black Box Voting members Pat Vesely >and John Howard.) > >NEW Citizen research & investigations section now available: >http://www.bbvforums.org/cgi-bin/forums/board-auth.cgi?file=/ >17141/17141.html >(you must register and log in to use this) > >----------------------------------------- > >Black Box Voting is a nonprofit, nonpartisan 501c(3) elections >group, supported entirely by small citizen donations.Black Box Voting > >, > >To unsubscribe, send an email to: unsubscribe-157294(a)elabs3.com >with the address: edyson(a)edventure.com in the subject line. Esther Dyson Always make new mistakes! Editor, Release 1.0 CNET Networks 20th floor - last elevator 104 Fifth Avenue (at 16th Street) New York, NY 10011 USA +1 (212) 924-8800 NOTE: Carlsbad is the new Scottsdale! PC Forum in CARLSBAD, California, March 12 to 14: http:// www.release1-0.com/events/ Flight School, Aspen, June 15-16 current status (with pictures!) at http://www.flickr.com/photos/edyson/ book: Release 2.0 (Broadway Books) ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] Voting programmer worked for White House Plumbers chief
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

[drone-list] CRS on integration of drones into NAS
by Gregory Foster 06 Jul '18

06 Jul '18

CRS (Jan 30) - "Integration of Drones into Domestic Airspace: Selected Legal Issues": http://www.fas.org/sgp/crs/natsec/R42940.pdf via Secrecy News (Jan 31) - "Drone Programs Spark Budgetary, Privacy, Legal Concerns": http://www.fas.org/blog/secrecy/2013/01/drone_legal.html gf -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/ _______________________________________________ drone-list mailing list drone-list(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/drone-list If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. Should you need immediate assistance, please contact the list moderator. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

IP: Zero-Knowledge Conference on Privacy Compliance & Business
by Dave Farber 06 Jul '18

06 Jul '18

> > >Zero-Knowledge Systems >Presents > >PRIVACY BY DESIGN > The Future of Privacy Compliance and Business > November 19-21, 2000 > Le Chateau Montebello, Quebec > >Sponsored by IBM, Royal Bank Financial Group, Merrill Lynch, >and PricewaterhouseCoopers > >See http://www.zeroknowledge.com/privacybydesign.html > > >Strong privacy and data protection practices are vitally important >from a legal, economic and ethical perspective. > >You know that you must have a comprehensive privacy strategy in place >to address these issues, and in many cases, comply with national and >international privacy laws. > >The 'Privacy by Design' conference will advise you on how to develop, >execute and market a successful privacy strategy to avoid regulatory >breaches and differentiate yourself in the marketplace with a >demonstrable commitment to privacy. > >Attendees will learn how to: > > - Understand current privacy issues from a theoretical, legal > and technological perspective > - Comply with privacy legislation and codes > - Design and implement effective privacy policies > - Integrate privacy-enhancing technologies and processes into > business operations > - Market privacy protection achievements to foster customer > trust and long-term relationships > - Handle privacy disasters > - Differentiate themselves in the marketplace with a demonstrable > and value-added commitment to privacy protection > >Zero-Knowledge Systems has assembled a group of world-class privacy >experts drawn from the business, privacy and government communities >to share their expertise with participants at a luxurious retreat at >Le Chateau Montebello, Quebec. The two-day plenary sessions cover a >broad range of privacy topics, and will be preceded by parallel >pre-conference workshops. The first is a workshop on the technology >of privacy protection. The second is a comprehensive "how-to" >workshop on how to design and implement a privacy program compliant >with global privacy laws. > >Featured speakers include: > > - Jason Catlett, President & CEO, Junkbusters > - Ann Cavoukian, Information and Privacy, Commissioner for the > Province of Ontario > - Lorrie Faith Cranor, Senior Technical Staff Member, Secure > Systems Research, AT&T Labs-Research > - Carl Ellison, Senior Security Architect, Intel > - Stephanie Perrin, Chief Privacy Officer, Zero-Knowledge Systems > - Jules Polonetsky, Chief Privacy Officer, DoubleClick > - Marc Rotenberg, Executive Director, Electronic Privacy > Information Center > - Mozelle Thompson, Commissioner, US Federal Trade Commission > - Alan Westin, Editor, Privacy and American Business > >Participation is limited to 100 persons. > >For complete information about 'Privacy by Design', visit >http://www.zeroknowledge.com/privacybydesign.html, call >toll-free 1-866-286-6545; or email: conference(a)zeroknowledge.com > > -- Good Privacy is Good Business -- --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0