October 2013 - cypherpunks - lists.cpunks.org

Re: [Freedombox-discuss] Dumb idea: Alternative to Tor that promotes good behavior
by Melvin Carvalho 01 Nov '13

01 Nov '13

On 27 October 2013 21:07, Bill Cox <waywardgeek(a)gmail.com> wrote: > On 10/27/2013 3:31 PM, Melvin Carvalho wrote: > > > > > On 27 October 2013 18:26, Bill Cox <waywardgeek(a)gmail.com> wrote: > >> I would love feedback on an idea for promoting more internet freedom. >> >> Here's the problem: Tor has little public support, because most Tor >> traffic is wasted on supporting bad behavior. When I ran a Tor node, it >> became clear that most of my bandwidth was being wasted on video >> downloads. People want to promote free speech, not child pornography. >> >> Here's my solution: Build a Tor-like network for routing anonymous data, >> but track behavior of all users' secret identities, and make their >> Internet history public. Allow node operators to choose categories of >> public identities they which to support. >> >> For example, I would choose to promote all forms of non-violent free >> speech. I should be able to contribute my bandwidth to this purpose. >> If a dissident in China goes by the public ID of ChinaCat, and has a >> high reputation for promoting freedom, they are welcome to use my >> bandwidth. If someone just wants access to redtube.com, they can get >> that access from someone else. >> >> There are various technical aspects to this idea. For example, would >> prefer that the social graph between secret identities be public so I >> can use a simple network flow algorithm over trust edges between >> identities to determine how much I trust someone. The entire social >> network should be P2P, like Tor, and it should route a lot of dummy >> traffic to help hide the real traffic. With the considerably lower >> bandwidth that is needed to promote freedom rather than free porn, this >> should be no problem. >> >> What do you guys think? >> > > I like it a lot. But who is going to volunteer to do this work, when > people are already busy (not least in coding up things like freedombox) > > > I am willing to write it myself. P2P algorithms is something I enjoy > coding, and this is one of those applications that may be able to do some > real good for the world. > > > I think you would need an economy to incentivize people to do the > categorization etc. > > Maybe in return for someone helping you route your traffic, you could > keep an encrypted backup of their data or contribute a code patch to their > project etc. > > > We're thinking along the same lines. I would like to add a Ripple based > economy to the public social network, based on trust relationships between > peers as in the original Ripple algorithm. With secret identities in the > social network, it is less important to keep transactions and the trust > network secret, which was a problem in the original Ripple algorithm. I > imagine transactions being done in tiny fractions of a cent, for services > like helping download files faster in a torrent or providing encrypted > storage. > I believe the retroshare project (noted on this list many times) is in the process of implementing a P2P ripple (a la Ryan Fugger's original protocol) system, or have done so already. Dr Bob told me you can plug in other protocols such as GNUNet quite easily. I'm unsure how this would gel with Tor tho. I'm also looking at translating all of the crypto currency work to a web based system. Would be very happy to hear if you make any progress on this. Or perhaps we can discuss off list if some stuff is off topic. My current line of thinking is hacking the economy so that fbx users get their own coins that they can spend with each other, and to give, say, 10% of all new coins to the FSF to help lower hardware costs of plug computers ... > > Bill > > _______________________________________________ > Freedombox-discuss mailing list > Freedombox-discuss(a)lists.alioth.debian.org > http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss > _______________________________________________ Freedombox-discuss mailing list Freedombox-discuss(a)lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss

2 1

Dark Mail Alliance for end-to-end private and secure email
by coderman 01 Nov '13

01 Nov '13

darkmail.info: "end-to-end encrypted protocol and architecture ... [for] private and secure email", presumably a white paper is forthcoming. initial release anticipated in 2014. ... which returns on port 443: "Error 102 (net::ERR_CONNECTION_REFUSED)" (~_~;) --- requirements for end-to-end secure email: - content of messages always protected; ensure authenticity and privacy of content. (plain-text content is not an option) - keys generated and kept on device / user end-point. (no server side generation or storage of private keys on behalf of users; support hardware secured private key and wrapped storage on devices with HSMs) - mail header scrubbing is performed at delivery, in transit, and on receipt to limit metadata exposure. - server-to-server communication enforces STARTTLS with PFC capable cipher suites. - client-to-server communication enforces TLS with PFC capable cipher suites. - service resistant to kleptography and covert channels. (use open and robust protocols, use robust key lengths, use fail-safe rather than fail-vulnerable configurations, ...) - for extra credit, solve the subject line as part of public header metadata problem. (solving the metadata problem for email is super extra credit ;) - what else? is it possible to build such a system without compromising privacy or usability? i remain skeptical...

3 2

PART I: Westward the Course of Empire
by coderman 01 Nov '13

01 Nov '13

"Westward the Course of Empire - Part 1" A talk given by Eben Moglen at Columbia Law School on October 9th, 2013 http://snowdenandthefuture.info/PartI.html WebM: https://archive.org/download/20131009SnowdenAndTheFuturePartI_201310/Snowde… mp4: https://vimeo.com/76656494 -- Good afternoon. There is no introduction. After 26 years in this place it feels ridiculous to me to pretend that anyone is especially honored by my presence here. If I am to be frank about it, I invited myself. Not in the way that Edward Snowden invited himself to Sheremetyevo Airport. Nor in the way that Julian Assange invited himself to the Ecuadorian embassy in London. Surely not in the way that Chelsea Manning invited herself to 35 years in Fort Leavenworth. No, law professor-like I have assigned myself no onerous duties. I undertook nothing more than to come here and to tell you the truth. I don't wish to force my ideas on anybody, but the truth is that I feel forced to speak myself. No one will remember much of what I have to say, but of the things about which I came here to speak—both those that have been done and those that remain to be done—I must say that they will never be forgotten. In the third chapter of his History of the Decline and Fall of the Roman Empire, Edward Gibbon gives two reasons why the slavery into which the Romans tumbled under Augustus and his successors left them more wretched than any previous human slavery. In the first place, Gibbon said, the Romans had carried with them into slavery the culture of a free people—their language and their conception of themselves as human beings presupposed freedom. And thus, Gibbons says, oppressed as they were by the weight of their corruption and military violence, the Romans yet preserved for a long time the sentiments, or at least the ideas, of a freeborn people. In the second place, the empire of the Romans filled all the world, and when that empire fell into the hands of a single person, the world was a safe and dreary prison for his enemies. As Gibbon says, to resist was fatal, and it was impossible to fly. The power of that Roman Empire rested in its control of communications. The Mediterranean Sea, which was the transit hub of every western civilization, was their lake. And across their European empire, from Scotland to Syria, they pushed the roads—roads that fifteen centuries later were still primary arteries of European transportation. Down those roads which, as Gibbon says, rendered every corner of the Empire pervious to Roman power, the Emperor marched his armies. But up those roads he gathered his intelligence. Augustus invented the posts: first for signals intelligence, to move couriers and messages at the fastest possible speeds; and then for human intelligence. He created the post-chaises, so that, as Gibbon says, those who were present when dispatches were written could be questioned by the Emperor. Using that infrastructure for control of communications, with respect to everything that involved the administration of power, the Emperor of the Romans made himself the best informed human being in the history of the world. That power eradicated human freedom. "Remember," says Cicero to Marcellus in exile, "wherever you are, you are equally within of the power of conqueror." The empire of the United States, the global empire that followed from victory in the Second World War, also depended upon control of communications. Possibly the greatest military lesson of the Second World War was that he who has access to his adversaries' military communications prevails. At every level, from the tactical artillery duel to the greatest strategic naval confrontations in the Pacific, the new pace of warfare gave victory to the one who knew the other side's plans first. This was all the more obviously crucial in the development of the power to rule the world when, a mere twenty years later, the empire of the United States was locked in a confrontation of nuclear annihilation with the Soviet empire—a war of submarines hidden in the dark below the continents, capable of eradicating human civilization in less than an hour in an imperial confrontation whose rule of engagement was "launch on warning." Thus it was that the Empire of the United States came to have precisely the same view of the effort to render everywhere pervious to American power that had been the view of Emperor Augustus. And our listeners aspired to everything. Now, the structure of listening which came out of the Second World War—the spying on signals, the stealing of signals and the breaking of codes—this was, under everybody's understanding of the new order of power in the world, the crucial center of it all. And, while it has been commonplace to recognize since the end of the Cold War that the United States has spent for decades as much on its military might as all other powers in the world combined, it has not necessarily followed in people's consciousness that we applied to the stealing of signals and the breaking of codes a similar proportion of our diligence. That system of listening, which had at its center the same reality of power, that system which grew up under the National Security Act and its successor legislation in the United States, had a particular systemic form: listening was under military command, controlling large civilian workforces. That structure, of course, presupposed precisely the foreign intelligence nature of the activity. Military control was both a symbol and a guarantee of the nature of the activity being pursued: everybody understood that if you had put such activity domestically under military control you would have violated the fundamental principle of the civilian control of the government of the United States. Instead what we had was a foreign intelligence service regarded as the most important basis of American power, responsible to the chief executive of the United States as commander-in-chief, and based in military control and military integrity. Because, of course, integrity was the other side of this coin. Military control ensured absolute command deference with respect to the fundamental principle which made it all "all right," which was: "No Listening Here." The boundary between home and away was the boundary between absolutely permissible and absolutely impermissible—between the world in which those whose job it is to kill people and break things instead stole signals and broke codes, and the constitutional system of ordered liberty. There's lots to be said—and we will need to say it as our time together goes by—about the morality of that assumption. But I must ask you to keep in mind that it also was accompanied by the reality of communications in the twentieth century, which were hierarchically organized and very often state-controlled. When the United States Government chose to listen to other governments abroad—to their militaries, to their diplomatic communications, to their policy-makers where they could—they were listening in a world of defined targets. As to which they were roughly entitled to their favored assumption, which was that everybody else was listening back at them on those targets pretty much just as hard as they could, which was of course way less hard than we, because we were the Empire. On this basis, we formed fundamental alliances with the other English-speaking societies in the world for a complete cooperation of signals intelligence, based around two fundamental predicates: the listeners in each of the English speaking societies were not listening at home, and they were not spying on one another. Therefore they and we stood back to back in their listening against the world. And on that basis, in the era of the digital computer, we began to be capable of taking everything. "Everything" was defined as all signals in the electromagnetic spectrum and its copper wire accessories. The basic principle was: hack, tap, steal—where the roof of every US embassy, and every American naval asset at sea, and every other place that we could cram antennas held the ones that we wanted to have there. And where every deal that we could make for exchange of signals intelligence among parties committed to listening gave us everything. Thus we could get what we needed, and we felt we needed it all. In the beginning we listened to militaries and their governments. Later we monitored the flow of international trade as far as it engaged American national security interests. But there is this about the weapons of war: In 1937, bombing civilian populations from the air was an innovation in the criminality of war, and Pablo Picasso found it worthy of his work. Less than a decade later, dozens of the greatest cities in the world lay in rubble and United States Government had dropped nuclear weapons on cities in Japan. Now the United States Government considers aerial bombardment to be the cleanest form of war. In the beginning we listened to armies, embassies, diplomats, government officials. Then we listened to the global economy. Now we are being told that spying on entire societies is normal. The regime that we built to defend ourselves against nuclear annihilation, in a world where access to the other fellow's signals is what makes victory, came at the end of the twentieth century under two forms of profound social restructuring. In the first place, the Cold War ended and the Soviet Union dissolved. An entire establishment of national security—which continues to absorb more resources in the United States than in all the rest of the world put together, and I am including the listeners—an entire national security structure re-purposed itself, not to spy upon an empire with twenty-five thousand nuclear weapons pointed down our throats, but at the entire population of the world in order to locate a few thousand people minded to various kinds of mass murder. In the second place, the nature of human communication changed. The system that they built, with all of its arrangements, was dependent as I said upon fixed targets: a circuit, a phone number, a license plate, a locale. The question of capacity was about how many targets you could simultaneously follow in a world where each of them required hack, tap, steal. But what happened at the beginning of the twenty-first century was that we acquired a new way of communicating in the human race—the beginning of the beginning of the beginning of the nervous system we are building in which each human being is a neuron in that great hive-mind called humanity. And from the moment we began to do that, two things began to fail: the simplicity of "one target one circuit" went away, and the difference between inside and outside vanished too. In particular it vanished in the United States, because so much of the intelligence of the brain being built for humanity, for better and for worse, resided here. Therefore the question "do we listen inside?" came to seem like a question about "are we going to lose the ability to listen at all?" About which, of course, fundamental doctrine of national security—whatever "national security" means—had only one acceptable answer. Into this mixture, of the structures of the twentieth-century imperial power and the reality of twenty-first century technology, a vastly imprudent American administration then intervened. Whatever else, history will record of them that they didn't think long before acting. Presented with a national calamity which also constituted a political opportunity, nothing stood between them and all the mistakes that haste can make for history to repent at leisure. And what they did, of course—in secret, with the assistance of judges chosen by a single man operating in secrecy, and with the connivance of many decent people who believed themselves to be doing the only thing that would save the society—was to unchain the listeners from law. Not only had circumstances destroyed the simplicity of "no listening inside," not only had fudging with the Foreign Intelligence Surveillance Act carried them into the land where law no longer provided them with useful landmarks, but they wanted to do it—let's be frank, they wanted to do it. Their view of the nature of human power was Augustan if not august. They wanted what it is forbidden to wise people to take unto themselves. And so they fell, and we fell with them. Our journalists failed. The New York Times allowed the 2004 election not to be informed by things that it knew, having made a decision which, no matter how many Pulitzer prizes it goes on to win, will always be a pain in our recollections (if not elsewhere). We failed collectively to show any outrage, because we were afraid. We did not demand the end at the beginning. And now we're a long way in. We had our Guernica and we paid little attention. And there weren't any limits anymore. They were living in an evolving net, with conscriptable digital brains gathering intelligence on all the human race for mere purposes of bagatelle and capitalism. So they perverted those places. And to the network operators we gave legal immunity in the United States for complicity, thus easing the way further. Then, there began a revolt inside. In Hong Kong, during his brief career as a public thinker and speaker—which I commend to your attention and which we will spend much time talking about in future times together—in his career as a public commentator, Edward Snowden said a very straightforward and useful thing; he said, analysts are not bad people, and they don't want to think of themselves that way, but they came to calculate that if a program produced anything useful, then it was justified. Because, of course, it was not their job to weigh the fundamental morality. Which is too bad, because the people whose job it was to weigh the fundamental morality failed more bitterly than we, and our journalists, and our everybody else. They fell, and we fell with them, because they refused to accept that there is a morality of freedom. And it was the people who worked for them who felt their failure first. So, from the middle of the first decade of the twenty-first century, people began to blow whistles all over the field. Those courageous people sacrificed their careers, frightened themselves, sometimes suffered personal destruction, to say that there was something deeply wrong. Later I shall try and show you both how they came to those conclusions and what they tried to say. But it is sufficient for the moment to say that what happened back was: Rule By Fear. It will be sufficient to say that, in their unwisdom, those who believed in the importance of the listeners and their activities sought to deal with those who blew the whistle by the harshest possible treatment. It is unfortunate to have to dwell on the extent of the failures, once the morality of freedom was no longer part of their world. Mr. Snowden said in Hong Kong that he was sacrificing himself—which he knew he was doing—in order to save the world from a system like this one constrained only by policy documents. Next time we meet we shall think long and hard about the political ideas of Edward Snowden—they are worthy of your respect and your deep consideration. But for now, once again, it will be sufficient to say that he was not exaggerating the nature of the difficulty. Because of Mr. Snowden, we now know that the listeners, in their aggressive effort to maintain the security of the United States by breaking anything that stands in the way of listening, undertook to do what they repeatedly promised respectable opinion in the trade they would never do. Systematically, they attempted what they had once and for all promised many a time in the discreetest but most credible fashion to respectable opinion, which then carried their water for them throughout our world. They always said they would not attempt breaking the crypto which secures the global financial system. That was false. When, on September 6th, the New York Times re-entered the pursuit of journalism in this area so triumphantly, by revealing the existence of Bull Run, publishing Mr. Snowden's various disclosures concerning both the substance of Bull Run and the National Security Agency's discussions of it, we learned that the United States listeners had been systematically and deliberately trying to subvert the crypto that holds the international financial system together, for years. And we learned a good deal more—which we shall spend more time upon on another evening, considering carefully what we learned in this respect—we learned that their efforts had been so far only partially successful. Within hours they had forfeited respectable opinion around the world, which had stood solidly in their corner all the way along. The recklessness of what they had done, and the danger to which it put the people in the world who don't accept danger from the United States Government, was breathtaking. When the morality of freedom is so thoroughly thrown away, it isn't only the "little people" of the world who suffer, but they do. The empire of the United States, the one that secured itself by listening to everything, was the empire of exported liberty. What we had to offer all around the world was freedom—after colonization, after European theft, after the forms of twentieth-century horror we haven't even talked about yet—we offered liberty; we offered freedom. In the twentieth century we were prepared to sacrifice many of the world's great cities, and to accept the sacrifice of tens of millions of human lives, in order to secure our selves against forms of government we called "totalitarianism," in which the State grew so powerful and so invasive that it recognized no longer any border of private life, and brought itself into everything that its subjects did. Where the State listened to every telephone conversation, and kept a list of everybody every troublemaker knew. So let us unfortunately tell the truth as it appeared to the people who worked in the system: When the morality of freedom was withdrawn, our State began fastening the procedures of totalitarianism on the substance of democratic society. There is no historical precedent for the proposition that the procedures of totalitarianism are compatible with the system of enlightened, individual, democratic self-governance. No one has ever previously in the history of the human race evolved an argument—and as I will show next time no argument can be evolved—that would give us any confidence in the ability of the procedures of totalitarianism to coexist with those of constitutional democratic self-governance. It is enough to say for now that omnipresent invasive listening creates fear. And I need not be Justice Brandeis to tell you that fear is the enemy of reasoned, ordered liberty. It is, of course, utterly inconsistent with the American ideal to attempt to fasten the procedures of totalitarianism on American constitutional self-governance. And this summer many of my dear colleagues and comrades in our movement have spent much of time in the United States pointing out that all of this is deeply is inconsistent with some important American right not to be listened to. Which right I too have, with them, and believe in deeply. But which it is not my point primarily to assert just this moment. Partly, as I shall suggest next time, because freedom is merely privilege extended unless enjoyed by one and all. But primarily because there is an even deeper inconsistency between American ideals and the subjection of every other society on earth to the procedures of totalitarianism. Freedom hath been hunted round the globe. Asia and Africa have long expelled her. Europe has been bullied into treating her like a stranger and England would take her into detention at Heathrow should she arrive. The President of the United States has ordered everyone not to receive the fugitive, and to prepare in time an asylum for humankind. You see how it works when you rewrite Tom Paine without the morality of freedom. And so our primary problem right now is that we allowed them to export slavery to the world. All of which, in one form or another, became clear, in one mind after another, within the bowels of the empire and its listeners over the last decade. William Binney—with whom we shall spend some time along the way—said in a public speech "I left the NSA because the systems that I built were turned against you. We had a legitimate charter in foreign intelligence gathering, but then they went and turned those systems against you—I didn't mean it, but they did it." People began to understand within the system that it was being sustained against democratic order, not with it. Because they knew that what had come unmoored had come unmoored in the dark, and was sailing without a flag. They were good people, and they began to break. And when they broke, the system broke them back. In the end, at least so far, until tomorrow, there was Mr. Snowden, who saw everything that happened and watched what happened to the others. He understood, as Chelsea Manning also always understood, that when you wear the uniform you consent to the power. He knew his business very well. Young as he was, as he said in Hong Kong, "I've been a spy all my life," and I believe him. And so he did what you have to have great courage to do, wherever you are, in the presence of what you believe to be radical injustice. He wasn't first, he won't be last, but he sacrificed his life to tell us things we needed to know. Edward Snowden committed espionage on behalf of the human race. Knowing the price, knowing the reason, knowing that it wouldn't be up to him whether sacrificing his life was worth it. So I would think that our most important effort, first, is to understand the message: to understand its context, to understand its purpose, to know its meaning, and to experience the consequences of having received the communication. Others will of course regard the first imperative as being to eliminate the message, and the messenger, and the meaning: to render everything as invisible as possible. Because invisibility is where listeners have to live in order to work. But I think we must let them go about that business. We must let them try to obliterate the message as best they can, and do our work, which is the work of understanding first. It will be difficult to judge, when you come to the moment where you consider yourself either entitled or obliged to begin doing so. The reason that it will be difficult to judge is that there is always much to say on both sides when someone is greatly right too soon. In the United States, those who were "premature anti-fascists" suffered later. It was right to be right when all others were right. And it was wrong to be right when only the people we didn't want to be were already there. I need not explain to you that it is possible to consider a man a terrorist who tried to do too soon what we took four years and 750,000 lives in order to achieve, namely to free the slaves. And I do not need to explain to you why it is that Gibbon considered the master key to the tender respect of Augustus for a free constitution, which he had destroyed, to be his fear. The death of Caesar was always before his eyes, says Gibbon, and this shaped his principles in politics. Augustus was sensible, says Gibbon, that mankind is ruled by names; and he was not deceived in his expectation that the Senate and the Romans would submit to slavery, so long as they were respectfully assured that they kept all their ancient freedom. So there are some pieces that we need to put together in order to understand. In the first place we must see the politics of now, both as Mr. Snowden saw it, thus bringing us the message we must live with, and as we see it in ourselves. We shall consider, next time, the politics of our condition. I shall suggest to you that it lies in this: if we are not doing anything wrong, we have a right to resist. The nature of our freedom is that we lose it because we do not exercise it. And the nature of our freedom is not necessarily the one we find only in the books of law. We shall consider two constitutional traditions in the United States next time. One made by European people running away to be free and one made by African people, forced into slavery, who had to run away, in the United States, in order to be free. Two constitutional traditions of resistance—differently structured and equally in our bones. Now we must consider the relation that we have to the rest of the human race in this, and ask ourselves whether we are seeking privilege or something that belongs to all of humankind. For which it will be necessary to understand the ideas of those who have risked their lives to inform us, not because their ideas are necessarily privileged above our own, but because they have sad experience from which to speak. We must think about the role of all those working people in the systems, both private and public, which constitute spying on humanity. We must ask what they are telling us in their resistance and what our side in their resistance ought to be. That workers were complaining in the Gulf last week was making a question for global football. We might want to be at least equally concerned with what we have learned from the workers inside the matrix all this while. We must ask what it means—both in the private and in the public world of listening and spying and analyzing and concluding—this thing that we're now calling "privacy," in relation to the thing that we used to call freedom. But of course, in the end, all of this would not be worth talking about here, much less your coming to listen to me talk here, unless we were going to talk about what we are actually going to do. If the problem is that we slept too long, then plainly Mr. Snowden did not come but to wake us up. We shall see that there are both legal and political forms of resistance around the world that we must all engage in. And I shall show next time as best I can the possibilities down which we may choose to take ourselves in that regard. But we must also change the way we communicate, so as to restore the balance between what they can and what they can't do. Here lies the secret of Mr. Snowden's enormous sacrifice and their enormous anger. Because the center of what Mr. Snowden has done is to tell us what armor still works. He has spent his life now for us, to tell us what we still have time to do if want to restore to the technology of our communications the morality of freedom. He has been quite precise. He has been quite careful. He has been most thorough. He understands his business. He has spied on injustice for us and he has told us what we needed to know. Despite the efforts continuing every instant all around us, in a world becoming a safe and dreary prison for their enemies, he has told us what we require in order to do the job and get it right. And if we have a responsibility at all, then part of our responsibility is to learn, now, before somebody concludes that learning should be prohibited. Which never happens in a free society. I wish we weren't here. I don't wish that I wasn't here more than I wish you weren't here. I wish us all out of this war. Twelve years—the longest war in history of this society, nowhere concluded, nowhere near finishing, nowhere capable of being defined as done. We went from listening to armies and embassies to listening to global trade and now we are fastening spying on entire societies, with a skill and energy that only a growing empire can still manage. We shall talk about the world where a nation of 1.3 billion people gains a Content Monitoring System in sixteen months, against the ordinary suppositions of every Indian person who thinks, "they can't do that." But, thanks to the new Bechtel, Booz Allen Hamilton—erstwhile employer of one Edward J. Snowden—yes they can. The procedures—mind you only the procedures—of totalitarianism are a leading American export these days. I wish we weren't here. I wish that everything we thought we did in the twentieth century we had accomplished. I wish we had defeated totalitarianism. I wish we had eliminated smallpox. I wish that we were growing the Net that we deserve to have, in which every human brain could learn and every human being could grow, nourished by the knowledge and the support of all the others. There may come a day. But if we have only one more river to cross before we get to freedom, it's a deep one, and it runs fast the other way. And those who want to bring us out are going to be called traitors—they are. And God forbid that they should lift their hands in anger, or they will be slaughtered. And those who do it will feel they have all the right on their side. It is wrong to be right too soon. It's wrong to be right too soon, but it is not too soon to be right now. Because if we're not right now, then they will remember our failure for fifteen centuries. And they will say of us, oppressed by the weight of our corruption, and our fear of terrorist violence, that we were ready to submit so long as we were assured that we possessed our ancient freedoms. And as for everybody else—if not "Civis romanus sum," then who are you? Which is no way for us to be talking. Not now, not ever. We have wandered so far into the dark that we have lost who we are. Like many a tragic figure in history, Mr. Snowden went further out into the dark in the hope that he could lead us back. We had better do our best to learn from him what we can, as we watch his light vanish into the darkness.

2 2

Bitcoin Dark Wallet project crowdfunding campaign launched!
by Mike Gogulski 31 Oct '13

31 Oct '13

-------- Original Message -------- Subject: Re: [unSYSTEM] The law of the free Date: Thu, 31 Oct 2013 03:05:01 -0500 From: Cody R Wilson <codywilson(a)utexas.edu> To: System undo crew <unsystem(a)lists.dyne.org> Trick or Treat, Western Civilization: http://www.indiegogo.com/projects/bitcoin-dark-wallet/x/5141070 Render your contempt visible, your resistance invisible. /While hitherto all valuations and ideals have been built on ignorance of Bitcoin or in contradiction to it- therefore long live Bitcoin!/

1 0

Signature Track
by Maurice McCarthy 31 Oct '13

31 Oct '13

Hi This is my first post here and I'm not sure if I'm in the right place. Anyhow, I started a free online course the Introduction to Philosophy through coursera.org Now I'm enjoying it so much I decided I want to give something back. The only way to do this to buy a certificate for the course. Even though it is not particularly worth anything this costs 50 to 100 dollars. But then they want to verify who you are and what do they want to do this? A photo from your webcam of yourself, a keyboard finger print to associate with you and a photo of a valid ID document such as a drivers license. The latter they promise to delete once they can see that you are you. Here are 2 screen dumps of the tracking process as they explain it. 1. http://ubuntuone.com/3PBTfO0UENZO8yS8xvVqcF 2. http://ubuntuone.com/55qqbqJQkWXoIokhzVPY31 And from their faq: https://www.coursera.org/signature/course/introphil/970720?utm_source=spark… Q. How does typing pattern recognition work? A.We will ask you to type a short phrase. Then we use the characteristics of your unique typing pattern, such as the time (in milliseconds) between your keystrokes and the duration you press a key down, to confirm your identity. Small typos and minor day-to-day changes in your typing pattern are okay. Somewhat disturbed by this tonight I wrote the follow requests to the them. 1. Gathering the keyboard fingerprint presumable means running some arbitrary piece of code on my computer. This code is clearly a highly refined key-logger and therefore a grave threat to my personal and financial details. I would not submit to Signature Track with out the source code so that I can read, verify and compile it myself. Therefore may I have this code please? 2. How do I know you've deleted the photo of my drivers license? 3. In an age when personal details are saleable what reason do I have to trust the morality of the people behind Coursera and Signature Track? I've posted these questions on the discussion forum of the course itself where the system automatically flagged it as 'unresolved' to the course lecturers and assistants who are, of course, all philosophers. Next week's lecture happens to be about morality. Any one anything to say about this please? Thanks in advance Moss

2 2

Re: design and implementation of "replay prevention windows"
by coderman 31 Oct '13

31 Oct '13

On Thu, Sep 26, 2013 at 4:05 PM, coderman <coderman(a)gmail.com> wrote: > i'm looking for information on the design and implementation of replay > windows in various protocols. oddly enough, this is a surprisingly obtuse subject. it is constrained by: - the encryption and authentication primitives in use - identity and session management concerns. (e.g. key agreement) - and of course, run time resource constraints (memory, CPU, bandwidth, etc.) Syverson's Replay Attack Taxonomy[0] (abridged): - Run external attacks (one run of protocol to attack subsequent runs) - Run internal attacks (using one part of protocol to attack itself in same run) - Classic replay (no contemporaneous or repeated runs needed) - Interleaving attacks (using concurrent runs of a protocol against other runs of the same protocol) provides a foundation for discussing replay attack prevention. so far i've only come across one good reference design and implementation of a replay window: "RFC 4302 - IP Authentication Header - Appendix B: Extended (64-bit) Sequence Numbers" http://tools.ietf.org/html/rfc4302#page-28 and encountered a number of other options for replay prevention in the context of key agreement or transport privacy: - time stamping messages - sequence numbering messages - type tagging messages - identity tagging messages (reflection prevention) - ensuring full information priciple when using hash functions - generating session keys without mutual trust - triple passwords (kerberos) additional resources invited; the journey continues... 0. "A taxonomy of replay attacks [cryptographic protocols]" http://www.dtic.mil/cgi-bin/GetTRDoc?AD=ADA463948

1 0

apologies to Jacob
by coderman 30 Oct '13

30 Oct '13

he sent a thoughtful and classy response to my character assassination. this and other actions show a desire to improve which i applaud. also suggested: post entire content for future clarity to avoid much ado about nothing... a good practice i will consistently employ henceforth. (i for one enjoy continual web rot as a feature, not a bug. transient information more useful as information source itself :) last but not least, it's a small world. those without reputations may be premium people you're just not familiar with... best regards,

1 0

First cryptoparty in Russia, need celebrety
by Mikhail Shirkov 30 Oct '13

30 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, cpunks! https://www.cryptoparty.in/moscow - we're prepare first cryptoparty in Moscow, Russia. We want video foreword or live from some well known media person. Julian Assange, or Edward Snowden will be perfect )) Can someone help in finding the way to communicate with them, or suggest other interesting personality in cypherpunks world. All best, Mikhail -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJScRlgAAoJEE7a0kqv6Bk3X8EH/1N+4F0Zj6AzrSgqsnULD1p0 ztKQL5aCuLrGLd4ZIiiQmXmQ34bNhUfuG87DwiR6sfjsu3DFFy3yDJlA2IlxRi1+ BgSUM3yKKY52bLv/F/R8JZooiPsjBzm4zP0o41NkcmTZvAd7nN6Zhk5G6/NsrIav v4O0F0ziDKYhnKZabUP/hH6XBpFIczHF+vZcmCNlq63+EXBxMd+sJucPGD8kINNt dOGpxcmYhSiAF/nvLjVfNP7oOvU8IqaQkLHur4xYd5LEa/YgSy+nF7vBPGEvTL0k Tyl4pYDIahH2fNNt5lX0HQ7Im4OcThoSs5aHf5U1u/vrv+tgUiH+pmNd7U5hVL8= =9E4U -----END PGP SIGNATURE-----

3 2

[cryptome] After Der Spiegel " revealed that the roof of the embassy in Berlin
by Haim Barak 30 Oct '13

30 Oct '13

After Der Spiegel " revealed that the roof of the embassy in Berlin placed blocks suspicious , it turns out that these additions are also installed in other cities . Evaluation of equipment is listening to the American National Security Agency Amir Rappaport | 29/10/2013 8:38 What's behind the " boxes " uniformity mirror placed on the roofs of the U.S. embassies in major cities around the world and building additions seem " natural ." It seems to be hiding the most sophisticated listening facilities . Researcher Ronen Solomon discovered the testing facilities identical pictures of the roofs of the U.S. embassies in Beijing , Dubai, Berlin , Moscow , Madrid and Tel Aviv. , After comprehensive research published in the German weekly " Der Spiegel " , following revelations about the eavesdropping carried out by the Americans to the top German leadership . according to " citrus Spiegel " , on the roof of the embassy in Berlin built blocks that appear as part of the structure , but in fact it is made of the facilities 'soft' gray or white. material that does not block the absorption from the listening facilities are behind him. U.S. listening devices '' on the roofs of embassies in the world After the discovery Der Spiegel " revealed for the first time , based on the findings of Solomon , that identical facilities on the roofs of embassies are many other cities , including Tel Aviv. In all cases it seemed as if it were part of the building , but we notice that H"kobiot " are , in fact, building additions . If the findings of the " Citrus Spiegel " right , the savers of listening to the American intelligence agency scattered throughout the world. Tel Aviv is no exception : in addition L"kobiot " is also found on the roof of the U.S. embassy in Tel Aviv , like other major cities , Tel Aviv there are other antennas that are hidden , probably because it's not an intelligence listening equipment . Israeli security officials say they are not surprised by exposing eavesdropping in Germany and that they are aware of the American listening mechanism being not only from the roofs of embassies , but also through satellite listening equipment and other means . The assumption in Israel is the U.S. listening to all the conversations that take place in the Middle East as well as Europe , especially if they are not encrypted . U.S. wiretapping saga continues world countries , and today the U.S. ambassador was invited to Spain to talk with accusations that the U.S. had listened to more than 60 million phone calls to Spain during the month. Ambassador called to talk to the Spanish Minister for European Affairs , Inigo Mendez de Vigo , and the meeting between the two lasted 40 minutes . Madrid at the end of the conversation released a message saying : " Spain to the United States emphasized the importance of maintaining a climate of confidence in bilateral relations , and the importance of awareness extent of the actions , if it turns out that they actually took place , are unacceptable between countries that partnership and friendship ." As in the case of Germany and France , published information originally one of the local newspapers , " El Mundo " , and its origin is a document provided to the leak , a U.S. National Security Agency , former Edward Snowden . http://rotter.net/forum/scoops1/57437.shtml Source: http://www.nrg.co.il/online/1/ART2/517/655.html?hp=1&cat=666&loc=1 -- Haim Barak To Serve and Protect Our Community In God We Trust Israel#: 5353... Email: haim357(a)gmail.com http://haim357.wordpress.com/ <http://haim357.files.wordpress.com/2009/11/banner.jpg> This e-mail is intended only for the named recipient(s) and may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. No waiver of privilege, confidence or otherwise is intended by virtue of communication via the Internet. Any unauthorized use, dissemination or copying is strictly prohibited. Thank you.

2 1

PRISM too much trouble? Get MUSCULAR
by Gregory Foster 30 Oct '13

30 Oct '13

WaPo (Oct 30) - "#NSA infiltrates [private] links [between] Yahoo, Google data centers worldwide, #Snowden documents say": http://www.washingtonpost.com/world/national-security/nsa-infiltrates-links… > According to a top secret accounting dated Jan. 9, 2013, NSA’s acquisitions directorate sends millions of records every day from Yahoo and Google internal networks to data warehouses at the agency’s Fort Meade headquarters. In the preceding 30 days, the report said, field collectors had processed and sent back 181,280,466 new records — ranging from “metadata,” which would indicate who sent or received e-mails and when, to content such as text, audio and video. > > The NSA’s principal tool to exploit the data links is a project called MUSCULAR, operated jointly with the agency’s British counterpart, GCHQ. From undisclosed interception points, the NSA and GCHQ are copying entire data flows across fiber-optic cables that carry information between the data centers of the Silicon Valley giants. gf -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/

2 1