July 2014 - cypherpunks - lists.cpunks.org

Re: "Blackphone" said to be "a super-secure nsa-proof"
by Ulex Europae 14 Oct '16

14 Oct '16

At 05:25 AM 1/17/2014, Jim Bell forwarded: ><<http:///>http://www.yahoo.com/tech/startup-launching-a-super-secure-nsa-proof-735110…> It's been long enough, has anyone acquired one of these and tested it? Ulex

10 13

Re: [Cryptography] Bruce Schneier has gotten seriously spooked
by Eugen Leitl 07 Sep '16

07 Sep '16

----- Forwarded message from Brian Gladman <brg(a)gladman.plus.com> ----- Date: Sat, 07 Sep 2013 09:33:28 +0100 From: Brian Gladman <brg(a)gladman.plus.com> To: Cryptography Mailing List <cryptography(a)metzdowd.com> Subject: Re: [Cryptography] Bruce Schneier has gotten seriously spooked User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 On 07/09/2013 01:48, Chris Palmer wrote: >> Q: "Could the NSA be intercepting downloads of open-source encryption software and silently replacing these with their own versions?" > > Why would they perform the attack only for encryption software? They > could compromise people's laptops by spiking any popular app. Because NSA and GCHQ are much more interested in attacking communictions in transit rather than attacking endpoints. Endpoint attacks cost more to undertake, only give access to a limited amount of data and involve much greater risks that their attack will either be discovered or their means of attack will leave evidence of what they have done and how they have done it. The internal bueaucratic costs of gaining approval for (adverarial) endpoint attacks also makes it a more costly process than the use of network based interception. There is significant use of open source encryption software in end to end encryption solutions, in file archivers, in wifi and network routers, and in protecing the communications used to manage and control such components when at remote locations. The open source software is provided in source code form and is compiled from source in a huge number of applications and this means that the ability to covertly substitute broken source code could provide access to a huge amount of traffic without the risks involved in endpoint attacks. I stress that I am NOT suggesting that this has happened (or is happening), simply that it has attractions from an NSA/GCHQ viewpoint. Fortunately, I think it is a difficult attack to mount covertly (that is, without the acqiecience of the author(s) of the software in question). On the more general debate here, in my view, 'security for the masses' through the deployment of encryption is a 'pipe dream' that isn't going to happen. Functionality (and the complexity that comes with it) is the enemy of security and it is very clear that the public places a much higher value on functionality than it does on security (or privacy). Every time a new device comes onto the market, it starts with limited functionality and some hope of decent security but rapidly evolves to be a high functionality product in which the prospect of decent security declines rapidly to zero. Raspberry Pis look interesting _now_ but I would be willing to bet that they won't buck the trend of increasing funtionality and declining security simply because this is what the majority in even this limited user community will want. To buck this trend we need an effort like the Raspberry Pi effort but one driven by our community with a strong commitment to simplicty and deliberately limited functionality in both hardware and software. Brian Gladman _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org AC894EC5: 38A5 5F46 A4FF 59B8 336B 47EE F46E 3489 AC89 4EC5

8 14

Re: [liberationtech] Interesting things in keyservers
by Eugen Leitl 17 Aug '16

17 Aug '16

----- Forwarded message from micah <micah(a)riseup.net> ----- Date: Sat, 20 Jul 2013 10:05:42 -0400 From: micah <micah(a)riseup.net> To: Micah Lee <micahflee(a)riseup.net>, 'liberationtech' <liberationtech(a)lists.stanford.edu> Subject: Re: [liberationtech] Interesting things in keyservers User-Agent: Notmuch/0.15.2 (http://notmuchmail.org) Emacs/24.3.1 (x86_64-pc-linux-gnu) Reply-To: liberationtech <liberationtech(a)lists.stanford.edu> Hi Micah! Micah Lee <micahflee(a)riseup.net> writes: > I'm working on a talk for OHM2013 about PGP. Can anyone send me examples > of interesting keys in key servers that you know of? Since you are preparing a talk about the subject, I'm going to be pedantic and correct your usage of "PGP", because it is important to get your terminology straight when giving a talk. I presume you aren't giving a talk about the commercial software, but instead you are actually giving a talk about OpenPGP which is the standard specified by RFC4880 that different programs like GnuPG, Seahorse, MacGPG, and PGP etc. all implement. If that is true, then you should refer to it as OpenPGP, and not PGP. I dont know what your talk will consist of, besides the funny enigmail XSS and goatse.cx stuff (thanks for that! always good to have some goatse early in the morning), but I would like to point out a few things that might be useful to mention. One is a wiki page that I created with some people: https://we.riseup.net/riseuplabs+paow/openpgp-best-practices - it contains some useful hints about using OpenPGP, maintaining a good key and some general good practices that people often dont know about (such as the importance of keeping your keys updated to get critical revocation and expiration extension certifications!) One thing mentioned on that page that I wanted to highlight, because you used pgp.mit.edu links in your original email, is that the keyserver pgp.mit.edu is not a good one to use/promote. Everyone uses it as their 'goto' keyserver, but it is a really bad idea! As a keyserver, it has been broken for years. For a long time it was just dropping revocations, subkey updates and expirations on the floor. That is *really* bad. Eventually, they upgraded their keyserver software, but it is *still* running an older version of SKS, a version that fails to handle 16-digit subkeyid lookups (among other failings). So, please don't rely on pgp.mit.edu for your security, and please don't include them in your slides! If you are looking for one to use, I highly recommend using the SKS pool address (hkp://pool.sks-keyservers.net or http://hkps.pool.sks-keyservers.net/ - or if you want a more close geographical pool, have a look at http://sks-keyservers.net/overview-of-pools.php) Finally, there seems to be some amazing misconceptions about keyservers, keys and the web of trust. In particular this http://cryptome.org/2013/07/mining-pgp-keyservers.htm circulated recently and it pained me to see because it suggested various wreckless conclusions that were dangerously off the mark[0] (and used pgp.mit.edu, hah). While it is true that we've jokingly called the OpenPGP web of trust "the original social network" because of the exposed social relational graphing that can be done by querying keyservers, and it is for this reason that many activists I know do not want to have signatures uploaded to keyservers (and instead use the bulky local-only signature work-around)... ... but for some reason people seem to think that if it is on a keyserver, is true, or it means something that it doesn't. People don't realize critical things, such as the fact that I can create a key with the UID Nadim Kobeissi and upload it to the keyservers[1]. That doesn't mean that is the real Nadim's key (this is what exchanging key fingerprints and doing certifications is for, so you can know, with a certain degree of certainty, that this person is the person who controls that secret key material). Or people think that because I signed your key and that signature is on the keyserver that indicates: I trust you; we met in person at that date; we know each other; we are involved in a criminal conspiracy with each other; or many other wrong assumptions about what that certification means. I can sign Edward Snowden's key and send that to the keyservers[1]. Hell, I can sign Snowden's key with my fake Nadim Kobeissi key[1] and then send it to the keyservers. Does that mean that Nadim and Snowden have met in person?! No, it does not at all. Anyways, I can keep going... but I dont know what the focus of your OHM talk is about, so going on like this isn't particularly useful to you and your talk... however, I'd be happy to provide more feedback about your talk if you would like![2] After all, we Micahs need to stick together, micah 0. "the cryptome article just sounds like impenetrable bullshit from someone with no interest in actually understandning what's happening" - I'm not saying who said this... 1. no, I didn't do that, nor did I upload the edward snowden or bradly manning keys. -- Too many emails? Unsubscribe, change to digest, or change password by emailing moderator at companys(a)stanford.edu or changing your settings at https://mailman.stanford.edu/mailman/listinfo/liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org AC894EC5: 38A5 5F46 A4FF 59B8 336B 47EE F46E 3489 AC89 4EC5

4 3

HavenCo - Rebirth?
by grarpamp 07 Apr '15

07 Apr '15

Highly doubt Ryan, Avi or any cpunks are involved, or that much of anything will actually be in SeaLand. Seems like a news driven oppurtunistic biz to cover tower operation and maintenance costs. Anyone have any facts? Such as who's behind it and why? http://www.sealandgov.org/sealand-news-1/HavenCo http://www.havenco.com/

2 1

Tox.im
by Cathal Garvey 03 Feb '15

03 Feb '15

Anyone looked this over? I only just discovered it, but it seems nice: * P2P * Encrypted * Voice/Video/Chat/Files * GPL'd https://github.com/irungentoo/toxcore It's written mostly in C(++) with a dash of assembly, which worries me security wise.. -- T: @onetruecathal, @IndieBBDNA P: +353876363185 W: http://indiebiotech.com

9 15

How come search engines don't crawl the list and I can't find 'robots.txt'?
by Georgi Guninski 13 Jan '15

13 Jan '15

AFAICT the list archives don't show in search engines and in addition don't see /robots.txt. How so?

4 7

Does a society of sheep deserve a government of wolves?
by Georgi Guninski 06 Dec '14

06 Dec '14

The question is: === Does a society of sheep deserve a government of wolves? === Some rants: Obama is protecting the NSA and is probably claiming "I am elected by the sheep, so the sheep are protecting the NSA". If it weren't Obama only the names will change. The majority of sheep are economically enslaved and/or brainwashed IMO.

10 13

Lois Lerner's conveeeeeeeeeeniently-lost emails.
by jim bell 17 Aug '14

17 Aug '14

Note: I wonder what kind of email system would be: 1. Used by the Federal Government. 2. NOT be regularly backed-up. 3. Would lose up to two (2) years of emails in a crash. Jim Bell [article follows] http://news.yahoo.com/lawmakers-fume-over-lost-emails-irs-probe-080830845--… WASHINGTON (AP) — Congressional investigators are fuming over revelations that the Internal Revenue Service has lost a trove of emails to and from a central figure in the agency's tea party controversy. The IRS said Lois Lerner's computer crashed in 2011, wiping out an untold number of emails that were being sought by congressional investigators. The investigators want to see all of Lerner's emails from 2009 to 2013 as part of their probe into the way agents handled applications for tax-exempt status by tea party and other conservative groups. Lerner headed the IRS division that processes applications for tax-exempt status. The IRS acknowledged last year that agents had improperly scrutinized applications by some conservative groups. "Do they really expect the American people to believe that, after having withheld these emails for a year, they're just now realizing the most critical time period is missing?" said Rep. Darrell Issa, R-Calif., chairman of the House Oversight Committee. "If there wasn't nefarious conduct that went much higher than Lois Lerner in the IRS targeting scandal, why are they playing these games?" The Oversight Committee is one of three congressional committees investigating the IRS over its handling of tea party applications from 2010 to 2012. The Justice Department and the IRS inspector general are also investigating. Congressional investigators have shown that IRS officials in Washington were closely involved in the handling of tea party applications, many of which languished for more than a year without action. But so far, they have not publicly produced evidence that anyone outside the agency directed the targeting or even knew about it. If anyone in the Obama administration outside the agency was involved, investigators were hoping for clues in Lerner's emails. "The fact that I am just learning about this, over a year into the investigation, is completely unacceptable and now calls into question the credibility of the IRS' response to congressional inquiries," said Rep. Dave Camp, R-Mich., chairman of the House Ways and Means Committee. "There needs to be an immediate investigation and forensic audit by Department of Justice as well as the inspector general." The IRS said technicians went to great lengths trying to recover data from Lerner's computer in 2011. In emails provided by the IRS, technicians said they sent the computer to a forensic lab run by the agency's criminal investigations unit. But to no avail. The IRS was able to generate 24,000 Lerner emails from the 2009 to 2011 because Lerner had copied in other IRS employees. The agency said it pieced together the emails from the computers of 82 other IRS employees. But an untold number are gone. Camp's office said the missing emails are mainly ones to and from people outside the IRS, "such as the White House, Treasury, Department of Justice, FEC, or Democrat offices." Anti-tax advocate Grover Norquist called the episode "the worst attempt to blame technology in service of a cover-up since the infamous 18-minute gap" in former President Richard Nixon's Watergate tapes. The IRS said in a statement that more than 250 IRS employees have been working to assist congressional investigations, spending nearly $10 million to produce more than 750,000 documents. Overall, the IRS said it is producing a total of 67,000 emails to and from Lerner, covering the period from 2009 to 2013. "The IRS is committed to working with Congress," the IRS said in a statement. "The IRS has remained focused on being thorough and responding as quickly as possible to the wide-ranging requests from Congress while taking steps to protect underlying taxpayer information." Sen. Orrin Hatch of Utah, the top Republican on the Senate Finance Committee, called Friday's disclosure "an outrageous impediment" to the committee's investigation. "Even more egregious is the fact we are learning about this a full year after our initial request to provide the committee with any and all documents relating to our investigation," Hatch said. Lerner has emerged as a key figure in the tea party probe. In May 2013, she was the first IRS official to publicly acknowledge that agents had improperly scrutinized applications. About two weeks later, Lerner was subpoenaed to testify at a congressional hearing. But after making a brief statement in which she said she had done nothing wrong, Lerner refused to answer questions, invoking her constitutional right against self-incrimination. The IRS placed Lerner on administrative leave shortly after the congressional hearing. She retired last fall. In May, the House voted to hold Lerner in contempt of Congress. Her case has been turned over to the U.S. attorney for the District of Columbia.

8 10

Re: shipment interdiction [was: BadBIOS forensics]
by coderman 16 Aug '14

16 Aug '14

On Sat, Jul 19, 2014 at 5:20 PM, Bryan Starbuck <bryan(a)thestarbucks.com> wrote: > I like buying a computer in a surprise visit to an apple store or a store > that sells windows computers. agreed; on site ad-hoc cash purchases the best procurement technique. not infallible by any means, but at least avoids some known problems like this amusing scenario. (shipments from the Seattle Amazon warehouse to Kansas before delivery to Oregon was also funny.) repeat for emphasis: - keep chain of custody of sensitive hardware at all times - never procure or ship through mail. at one point, priority same day air would get a pass, but even this no longer suitable. best regards,

3 3

[Cryptography] miniLock seems pretty interesting
by Eugen Leitl 13 Aug '14

13 Aug '14

----- Forwarded message from Eric Mill <eric(a)konklone.com> ----- Date: Mon, 21 Jul 2014 09:48:32 -0400 From: Eric Mill <eric(a)konklone.com> To: "cryptography(a)metzdowd.com List" <cryptography(a)metzdowd.com> Subject: [Cryptography] miniLock seems pretty interesting Message-ID: <CANBOYLVg=Dndusthy82zbksDwyVupdHU9BaSL1mE6199FbvmYQ(a)mail.gmail.com> I saw this announced at HOPE X this weekend: http://minilock.io/ It uses curve25519 <http://cr.yp.to/ecdh.html>, which requires much smaller keys (32 or 64 bits) to ensure security -- and so it basically just demands a strong passphrase from the user from which can be derived a strong private key. The developer has a video <http://vimeo.com/101237413> and slides <http://minilock.io/files/HOPEX.pdf> to go along with it, and in general focused his energy on persuading the audience that JavaScript crypto is a necessary and achievable part of the future. -- Eric -- konklone.com | @konklone <https://twitter.com/konklone> _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography ----- End forwarded message -----

4 5