November 2013 - cypherpunks - lists.cpunks.org

cypherlinks （網址）
by brian carroll 01 Nov '13

01 Nov '13

// hacking the interstate and road system... (via digg) Meet The Guy Who Drove Across The U.S. In A Record 28 Hours 50 Minutes http://jalopnik.com/meet-the-guy-who-drove-across-the-u-s-in-a-record-28-h-… "After Alex Roy set the transcontinental driving record, he waited a year to come forward – until the statute of limitations expired on every single illegal act he committed. Ed and Dave waited less than three weeks." (a great story involving strategic preparation, musical flow... risky, daring, record-breaking in mass surveillance context) // everything electronic potentially bugged and networked? // wat if this is the unaccounted for norm instead of exception DON'T BREW THAT CUPPA! Your kettle could be a SPAMBOT (via drudge) Russian report says Chinese appliances hide Wifi slurping spam-spreaders http://www.theregister.co.uk/2013/10/29/dont_brew_that_cuppa_your_kettle_co… // security from solar flare & solar wind protection, CME EMP-like. // also moves into metaphysics, 'reading the signs' a Rorschach test... 28 solar flares in the last seven days -- video (via drudge) http://www.latimes.com/science/sciencenow/la-sci-sn-solar-flare-20131031,0,… 'A sunspot is an area of the sun where the magnetic fields have gotten all twisted up. "You get a tangled bunch of magnetic fields, and they get too tangled and too stressed, they end up erupting," said Holly Gilbert, a solar physicist at NASA Goddard Space Flight Center.' // excellent site to learn language of sun signs... // varying patterns akin to observing man on moon photographs and videos via solar telescope http://www.flickr.com/photos/alexandra4/ (also, consider Van Gogh's sunflowers in this context) https://www.google.com/search?q=Van+Gogh+sunflowers+original&tbm=isch This is how you blow up a planet, according to Neil deGrasse Tyson http://sploid.gizmodo.com/astrostud-neil-degrasse-tyson-explains-how-to-blo… Left Or Right Tail Wags Elicit Different Emotional Responses From Dogs http://news.nationalgeographic.com/news/left-or-right-tail-wags-elicit-diff… (via digg) '"Where this paper is a step forward is to show that those [brain hemisphere] side biases are actually read or interpreted by another member of the species," she said. "We have very little if any other evidence of that."' Designing an acoustic diode // metamaterial http://phys.org/news/2013-11-acoustic-diode.html "How the Acoustic Diode Would Work: Sound waves easily flow in two directions. Yet in nature, total reflection of sound in one direction is known to occur at the air-water interface. This gave investigators the idea that an acoustical diode could be constructed by transmitting acoustic waves using an asymmetric prism to create total unidirectional reflection." ¶ ½ Ü

1 0

INDECT: Intelligent Information System Supporting Observation, Searching and Detection for Security of Citizens in Urban Environment
by Eugen Leitl 01 Nov '13

01 Nov '13

http://www.openaire.eu/en/component/openaire/project_info/default/619?id=21… Project: INDECT Title: Intelligent Information System Supporting Observation, Searching and Detection for Security of Citizens in Urban Environment Call: FP7-SEC-2007-1 Grant agreement number: 218086 Start date: 01/01/2009 End date: 31/12/2013 Special clause 39: no Scientific area: Security Programme: SP1-Cooperation Detailed project information (CORDIS) Publications Use of the bio-inspired algorithms to find global minimum in force directed layout algorithms DoS attacks targeting SIP server and improvements of robustness Impact of network Jitter on effective equipment impairment factor Video files recording and playback with VoiceXML Objective assessment of IP video calls with Asterisk Delay model of RTP flows in accordance with M/D/1 and M/D/2 Kendall's notation Monitoring the quality of speech in the communication system BESIP Remote control of asterisk via web services E-model modification for case of cascade codecs arrangement Methodology of the direct measurement of the switching latency Performance analysis of virtualized real-time applications SIP end to end performance metrics Improvement of network efficiency on the grounds of change communication protocol Software designed 64-QAM demodulator of OFDM signal implemented into FPGA elements Fundamental frequency extraction method using central clipping and its importance for the classification of emotional state The interactions of SOAP-based web services for recording and replaying video files Malicious traffic monitoring and its evaluation in VoIP infrastructure Automated speech quality monitoring tool based on perceptual evaluation Approach to stress tests in SIP environment based on marginal analysis Applied multiprotocol routing in IP telephony Advanced concept of voice communication server on embedded platform SIP registration stress test Delay variation model for RTP flows in network with priority queueing E-model improvement for speech quality evaluation including codecs tandeming Jitter buffer loss estimate for effective equipment impairment factor Overview of the security components of INDECT project VoIP based system for the message distribution Security infrastructures: towards the INDECT system security Mathematical model of subscriber extension line Performance evaluation of INACT - INDECT advanced image cataloguing tool Influence of atmospheric parameters on speech quality in GSM/UMTS Danger alert communication system Development of a speech quality monitoring tool based on ITU-T P.862 IP telephony based danger alert communication system and its implementation Multimedia services in Asterisk based on VoiceXML Impact of emotions on fundamental speech signal frequency Speech quality monitoring in czech national research network Delay variation model with RTP flows behavior in accordance with M/D/1 Kendall's notation SIP threats detection system Interactive VoiceXML module into SIP-based warning distribution system Web-based IP telephony penetration system evaluating level of protection from attacks and threats Non-intrusive speech quality assessment in simplified e-model Replication-Based Information Sharing in Multi-Agent System for Monitoring the Internet Feature selection for acoustic events detection M-JPEG Robust Video Watermarking Based on DPCM and Transform Coding Traffic Danger Ontology for Citizen Safety Web System How to Build an Objective Model for Packet Loss Effect on High Definition Content Based on SSIM and Subjective Experiments Web-Based Knowledge Acquisition and Management System Supporting Collaboration for Improving Safety in Urban Environment A New Method for Automatic Generation of Animated Motion A no reference metric for the quality assessment of videos affected by exposure distortion On Occlusion-Handling for People Detection Fusion in Multi-camera Networks Agent-based Modelling of Social Organisations Content protection in grayscale and color images based on robust digital watermarking Anchor-Free Localization Algorithm with Low-Complexity Method for Node Distance Estimation Enhancement Using ToA Analysis of privacy vulnerabilities in single sign-on mechanisms for multimedia websites Scenario-Driven System for Open Source Intelligence Correction Trees as an Alternative to Turbo Codes and Low Density Parity Check Codes Prototypes of a Web System for Citizen Provided Information, Automatic Knowledge Extraction, Knowledge Management and GIS Integration Recent advances in multimedia networking INDECT Security Architecture LDA for Face Profile Detection Audio-Visual Surveillance System for Application in Bank Operating Room Software Implementation of New Symmetric Block Cipher Malicious traffic monitoring and its evaluation in VoIP infrastructure Approach to stress tests in SIP environment based on marginal analysis Graph-Based Relation Mining Detection and Localization of Selected Acoustic Events in 3D Acoustic Field for Smart Surveillance Applications Distributed Framework for Visual Event Detection in Parking Lot Area Object Detection and Measurement Using Stereo Images Semantic Structure Matching Recommendation Algorithm Acoustic Events Detection Using MFCC and MPEG-7 Descriptors Quality Assessment for a Licence Plate Recognition Task Based on a Video Streamed in Limited Networking Conditions Automatic quality control of digital image content reconstruction schemes Broadcast news audio classification using SVM binary trees Analysis of Particular Iris Recognition Stages Determining image quality requirements for recognition tasks in generalized public safety video applications: Definitions, testing, standardization, and current trends INSTREET - Application for Urban Photograph Localization Quantum cryptography - The analysis of security requirements Implementation of the New Integration Model of Security and QoS for MANET to the OPNET A new approach to high-capacity annotation watermarking based on digital fountain codes A Novel JPEG Steganography Method Based on Modulus Function with Histogram Analysis Hierarchical Multi-Agent System for Heterogeneous Data Integration INCR — INDECT Multimedia Crawler Performance of Basic Spectral Descriptors and MRMR Algorithm to the Detection of Acoustic Events Towards Hardware Implementation of INDECT Block Cipher Multi-camera Vehicle Tracking Using Local Image Features and Neural Networks Video Watermarking Based on DPCM and Transformcoding Using Permutation Spectrum and QIM Camera Angle Invariant Shape Recognition in Surveillance Systems A Statistical Blind Image Steganalysis Based on Image Multi-classification Integrating Applications Developed for Heterogeneous Platforms: Building an Environment for Criminal Analysts A new symmetric block cipher based on key-dependent S-boxes INACT — INDECT Advanced Image Cataloguing Tool QoE as a Function of Frame Rate and Resolution Changes Monitoring the quality of speech in the communication system BESIP Brightness Correction and Stereovision Impression Based Methods of Perceived Quality Improvement of CCTV Video Sequences Performance Measurements of Real Time Video Transmission from Car Patrol Multiple Sound Sources Localization in Real Time Using Acoustic Vector Sensor Vehicle Classification Based on Soft Computing Algorithms Quality Assessment in Video Surveillance Performance Evaluation of the Parallel Codebook Algorithm for Background Subtraction in Video Stream A High-Capacity Annotation Watermarking Scheme Fast Face Localisation Using AdaBoost Algorithm and Identification with Matrix Decomposition Methods Detection of Moving Objects in Images Combined from Video and Thermal Cameras A novel approach to adaptive image authentication Recent Progress in Development of Language Model for Slovak LVCSR Automated qualitative assessment of multi-modal distortions in digital images based on GLZ Assessing Task-Based Video Quality — A Journey from Subjective Psycho-Physical Experiments to Objective Quality Models Extensible Web Crawler – Towards Multimedia Material Analysis Efficient Method for Content Reconstruction With Self-Embedding Face Detection using Color based Skin Localization and Facial Features Extraction Security Infrastructures: Towards the INDECT System Security Verification of the Parameterization Methods in the Context of Automatic Recognition of Sounds Related to Danger Resolving Conflicts in Object Tracking in Video Stream Employing Key Point Matching One Approach of Using Key-Dependent S-BOXes in AES >From Algorithm to Agent Quantum Cryptography Protocol Simulator A novel method of image steganography in DWT domain A scheme for censorship of sensitive image content with high-quality reconstruction ability Detecting Predatory Behaviour from Online Textual Chats Classification of video sequences into specified Generalized Use Classes of target size and lighting level SIP Registration Burst Load Test Comparison of Different Feature Types for Acoustic Event Detection System Multicriteria Metadata Mechanisms for Fast and Reliable Searching of People Using Databases with Unreliable Records Evolutionary Tuning of Compound Image Analysis Systems for Effective License Plate Recognition Redefining ITU-T P.912 Recommendation Requirements for Subjects of Quality Assessments in Recognition Tasks Analysis of Malware Network Activity

1 0

<nettime> public indifference
by allan siegel 01 Nov '13

01 Nov '13

Excuse me but is public indifference considered to be a new phenomenon is that really what it is? Remember Daniel Ellsberg, the Pentagon Papers? Levels of domestic and international surveillance have intensified logarithmically in the post-war period; just imagine what J. Edgar would have done if he could Hoover up data the way the NSA does. The highest echelons of this behemoth of a security apparatus have taken on a life of its own independent of the governmental controls that are supposed to monitor its activities. Quite presciently Norman Mailer wrote about this ages ago in reference to the CIA; he described how the various entities and fronts that it created began to take on their own economic realities far removed from any governmental controls and now, far beyond what Mailer might have imagined, the government officially and openly sub-contracts security and policing to companies effectively working outside the law. All this just increases daily despite shut-downs and economic crises (after all its sucking up tax dollars just like all the data its accumulating). Indifference is an inaccurate description of what the public is feeling right now. What might be more accurate is a profound sense of cynicism, confusion and fear because the world most of us live in is littered with enormous uncertainties and where survival is high on the daily agenda; and because politicians and government leaders are baffling in terms of their levels of incoherence; and because the omnipresent cloud of some kind of terrorist act lingers in the not far distance (and never mind the kind of atrocities that occur daily enabled by the same systems that govern the surveillance apparatus). So, indifference is not quite appropriate when you start thinking about the future and how it appears or manifests itself stitched into people’s daily routines. This is not to belittle or diminish the importance of what Snowden has done; the impact of his act is hard to quantify as its ramifications will be still felt years from now; the Pentagon Papers had a shock value when they came out also and the NY Times eagerly published them (and the Times then still had journalistic stature). But, indeed now the times they are a’changing. The real indifference lies not with the public but rather with the shamble of what we politely call the Fifth Estate and the obscene level of public discourse… bye for now allan # distributed via <nettime>: no commercial use without permission # <nettime> is a moderated mailing list for net criticism, # collaborative text filtering and cultural politics of the nets # more info: http://mx.kein.org/mailman/listinfo/nettime-l # archive: http://www.nettime.org contact: nettime(a)kein.org

2 1

Re: [Freedombox-discuss] Dumb idea: Alternative to Tor that promotes good behavior
by Melvin Carvalho 01 Nov '13

01 Nov '13

On 27 October 2013 21:07, Bill Cox <waywardgeek(a)gmail.com> wrote: > On 10/27/2013 3:31 PM, Melvin Carvalho wrote: > > > > > On 27 October 2013 18:26, Bill Cox <waywardgeek(a)gmail.com> wrote: > >> I would love feedback on an idea for promoting more internet freedom. >> >> Here's the problem: Tor has little public support, because most Tor >> traffic is wasted on supporting bad behavior. When I ran a Tor node, it >> became clear that most of my bandwidth was being wasted on video >> downloads. People want to promote free speech, not child pornography. >> >> Here's my solution: Build a Tor-like network for routing anonymous data, >> but track behavior of all users' secret identities, and make their >> Internet history public. Allow node operators to choose categories of >> public identities they which to support. >> >> For example, I would choose to promote all forms of non-violent free >> speech. I should be able to contribute my bandwidth to this purpose. >> If a dissident in China goes by the public ID of ChinaCat, and has a >> high reputation for promoting freedom, they are welcome to use my >> bandwidth. If someone just wants access to redtube.com, they can get >> that access from someone else. >> >> There are various technical aspects to this idea. For example, would >> prefer that the social graph between secret identities be public so I >> can use a simple network flow algorithm over trust edges between >> identities to determine how much I trust someone. The entire social >> network should be P2P, like Tor, and it should route a lot of dummy >> traffic to help hide the real traffic. With the considerably lower >> bandwidth that is needed to promote freedom rather than free porn, this >> should be no problem. >> >> What do you guys think? >> > > I like it a lot. But who is going to volunteer to do this work, when > people are already busy (not least in coding up things like freedombox) > > > I am willing to write it myself. P2P algorithms is something I enjoy > coding, and this is one of those applications that may be able to do some > real good for the world. > > > I think you would need an economy to incentivize people to do the > categorization etc. > > Maybe in return for someone helping you route your traffic, you could > keep an encrypted backup of their data or contribute a code patch to their > project etc. > > > We're thinking along the same lines. I would like to add a Ripple based > economy to the public social network, based on trust relationships between > peers as in the original Ripple algorithm. With secret identities in the > social network, it is less important to keep transactions and the trust > network secret, which was a problem in the original Ripple algorithm. I > imagine transactions being done in tiny fractions of a cent, for services > like helping download files faster in a torrent or providing encrypted > storage. > I believe the retroshare project (noted on this list many times) is in the process of implementing a P2P ripple (a la Ryan Fugger's original protocol) system, or have done so already. Dr Bob told me you can plug in other protocols such as GNUNet quite easily. I'm unsure how this would gel with Tor tho. I'm also looking at translating all of the crypto currency work to a web based system. Would be very happy to hear if you make any progress on this. Or perhaps we can discuss off list if some stuff is off topic. My current line of thinking is hacking the economy so that fbx users get their own coins that they can spend with each other, and to give, say, 10% of all new coins to the FSF to help lower hardware costs of plug computers ... > > Bill > > _______________________________________________ > Freedombox-discuss mailing list > Freedombox-discuss(a)lists.alioth.debian.org > http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss > _______________________________________________ Freedombox-discuss mailing list Freedombox-discuss(a)lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss

2 1

Dark Mail Alliance for end-to-end private and secure email
by coderman 01 Nov '13

01 Nov '13

darkmail.info: "end-to-end encrypted protocol and architecture ... [for] private and secure email", presumably a white paper is forthcoming. initial release anticipated in 2014. ... which returns on port 443: "Error 102 (net::ERR_CONNECTION_REFUSED)" (~_~;) --- requirements for end-to-end secure email: - content of messages always protected; ensure authenticity and privacy of content. (plain-text content is not an option) - keys generated and kept on device / user end-point. (no server side generation or storage of private keys on behalf of users; support hardware secured private key and wrapped storage on devices with HSMs) - mail header scrubbing is performed at delivery, in transit, and on receipt to limit metadata exposure. - server-to-server communication enforces STARTTLS with PFC capable cipher suites. - client-to-server communication enforces TLS with PFC capable cipher suites. - service resistant to kleptography and covert channels. (use open and robust protocols, use robust key lengths, use fail-safe rather than fail-vulnerable configurations, ...) - for extra credit, solve the subject line as part of public header metadata problem. (solving the metadata problem for email is super extra credit ;) - what else? is it possible to build such a system without compromising privacy or usability? i remain skeptical...

3 2

Re: Meet ?badBIOS, ? the mysterious Mac and PC malware that jumps airgaps
by John Young 01 Nov '13

01 Nov '13

Every SCIF has a unique identification (UID) based on its full spectrum of construction materials, dimensions and MEP characteristics. Each compromises itself by inadvertent signals, or rather signals not usually or easily intercepted. Same for each building and building site above and below the surface. Conventional SCIF design characteristics which are in the public domain do not cover the full spectrum, typically only the EM. Like CryptoAG and other ruses, SCIFs are quite collectible behind the EM mask. Similarly, TEMPEST characteristics which are in the public domain do not cover the full spectrum of collectible signals and metrics of compromising emanations. Some similarity to lie detection ruses. There are likely other ruses, as customary comsec disinformation hardly restricted to crypto. Now could that be what BadBIOS is up to? A leak of disinfo for those which have limited interception and analysis equipment? Still, it is a fine story about the many levels of comsec onion ot be peeled. At 09:52 AM 11/1/2013, you wrote: > > perhaps i misunderstand it, though must 'resonance' > > be audibly acoustic, and would a SCIF actually defend > > against "vibrations" at all frequencies. > > >the question highlights how ill-suited the 'spy >agencies'ââ are for conducting asymmetric anything. > >Unless they had a Brain inside think of a >mechanism and explain it to an Engineer to >propose to a Facilities Security Manager who >obtained confirmation from a Director, they would be vulnerable. > >For instance, TEMPEST security - every SCIF has >it because inside it was well >documented/implemented. Â SEISMIC security - no >SCIF*** is isolated from seismic vibrations >modulated with data. Â So, to ex-filtrate data, >have those passing circus elephants stomp their >feet in predetermined patterns. Â Or make one of >those "Dune" style thumpers. Â The worms in this case being .... ? > >*** I'm suppose some very few SCIFs are >vibration isolated for various reasons, but not as an exfil channel. > > >-daniel >

1 0

Re: [cryptography] coderman's keys
by coderman 01 Nov '13

01 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 for the public: regarding what's difficult about this key: it maps to an email address that does not exist. most users of PGP don't know how to encrypt to a key that isn't in the key metadata itself. if you're unable to encrypt to a specific key, your OPSEC capabilities are insufficient to use this technology. </$0.02> best regards, -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iL4EAREKAGYFAlJzM7lfFIAAAAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl bnBncC5maWZ0aGhvcnNlbWFuLm5ldDQxQzEyQjhDMzA3RDdFMjE5OEFBNTc4MTY1 QTg0N0U3QzJCOTM4MEMACgkQZahH58K5OAx6KQEAsGPNK3tDWnpjpaLlbgB1WVIw Ynsp+AwO3oghDvcRxJEA/A0schdXYFxr+YX70uWq3GpLI2JCG/iPlDIcBT/R5CSU =v7g0 -----END PGP SIGNATURE-----

2 1

Re: [cryptography] coderman's keys
by coderman 01 Nov '13

01 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Taral gets a coin for being an authentic cypherpunk :) good to see you! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iL4EAREKAGYFAlJzLP9fFIAAAAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl bnBncC5maWZ0aGhvcnNlbWFuLm5ldDQxQzEyQjhDMzA3RDdFMjE5OEFBNTc4MTY1 QTg0N0U3QzJCOTM4MEMACgkQZahH58K5OAyStQD/X253YAyiwCu43Wwa2qobsdQv UepLjmm7FSaiDqL4GCcA/idCjPn7BGEel5Niqit4oCZEgPD78WGuYywwtNepEJYQ =NPRD -----END PGP SIGNATURE-----

1 0

Re: [Full-disclosure] coderman's keys
by coderman 01 Nov '13

01 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I love sending encrypted email! :) Terry gets a coin for solid effort. This challenge is concluded! best regards, -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iL4EAREKAGYFAlJzLHVfFIAAAAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl bnBncC5maWZ0aGhvcnNlbWFuLm5ldDQxQzEyQjhDMzA3RDdFMjE5OEFBNTc4MTY1 QTg0N0U3QzJCOTM4MEMACgkQZahH58K5OAwx/AEAwTWrvaCGo7Yn8JHhtGLyXRlY 5LMsDyD00d1yaz1uTKoA/3KnSELtxe1nUIQNq+4wkiCtPTUsQEcfNZ0vp/iksh0W =uyHJ -----END PGP SIGNATURE-----

1 0

Re: [cryptography] coderman's keys
by coderman 01 Nov '13

01 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello coderman! Glenn wins it. my hope in humanity restored. please response either publicly or privately with a BTC addr. best regards :) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iL4EAREKAGYFAlJzK9JfFIAAAAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl bnBncC5maWZ0aGhvcnNlbWFuLm5ldDQxQzEyQjhDMzA3RDdFMjE5OEFBNTc4MTY1 QTg0N0U3QzJCOTM4MEMACgkQZahH58K5OAwwDQD/epbovMrwvFmXXKRBqe7L1Nr/ l9hQLHniKy8fDcCmdV4BAK9azS4m95XiIw/YyK835a0254ApLY9i1weE68EeIHFJ =LmTs -----END PGP SIGNATURE-----

1 0