July 2014 - cypherpunks - lists.cpunks.org

DropItLike
by coderman 13 Aug '14

13 Aug '14

https://github.com/mozilla/DropItLike

3 2

Update your Tors - Tor security advisory: "relay early" traffic confirmation attack
by coderman 11 Aug '14

11 Aug '14

https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-… [see also release notes per below] ''' On July 4 2014 we found a group of relays that we assume were trying to deanonymize users. They appear to have been targeting people who operate or access Tor hidden services. The attack involved modifying Tor protocol headers to do traffic confirmation attacks. The attacking relays joined the network on January 30 2014, and we removed them from the network on July 4. While we don't know when they started doing the attack, users who operated or accessed hidden services from early February through July 4 should assume they were affected. . . . Relays should upgrade to a recent Tor release (0.2.4.23 or 0.2.5.6-alpha), to close the particular protocol vulnerability the attackers used — but remember that preventing traffic confirmation in general remains an open research problem. Clients that upgrade (once new Tor Browser releases are ready) will take another step towards limiting the number of entry guards that are in a position to see their traffic, thus reducing the damage from future attacks like this one. Hidden service operators should consider changing the location of their hidden service.

5 8

Re: [tor-relays] [tor-dev] Hidden service policies
by grarpamp 10 Aug '14

10 Aug '14

On Sun, Jul 20, 2014 at 9:57 PM, Thomas White <thomaswhite(a)riseup.net> wrote: > Mike Hearn, > Simple. If you start filtering anything at all, regardless of what it > is ... then I will > block any connection of your relays to mine > ... > Freedom isn't free unless it is > totally free and a selective reading policy through Tor is not just a > bad idea as stated below, I find it outright insulting to me and > everyone else who cares about the free and open internet. The fact > somebody has the audacity to come to a project like Tor and propose > blacklisting mechanisms is jaw-dropping. > ... > As I recall, you are also the person who raised the idea of coin > tinting or a similar concept in the bitcoin community to identify > "suspect" coins and that backfired spectacularly on you. Yes, that is the person. Though the term is known as 'taint'. One of many discussions from that suggestion is here: https://bitcointalk.org/index.php?topic=333824.0 > so while you are reading this, let me know if you run any relays so I > can avoid them. router riker 207.12.89.16 9001 0 0 fingerprint 8657 6CF6 AA84 496F 62C0 5AFE 9F26 8962 A5F0 B2BD contact Mike Hearn <mike(a)plan99.net> accept *:8333 reject *:* Normally I would thank exits for passing BTC traffic, but now I'm unsure of this one (and a few others), especially given that's the only exit policy of the above node. To identify anon (Tor) coins for marking and tracking?

3 2

archive ssl key expired
by stef 04 Aug '14

04 Aug '14

to whom it may concern: https://cpunks.org//pipermail/ -- otr fp: https://www.ctrlc.hu/~stef/otr.txt

2 1

on anarchy [was: propaganda on "hurdles for law enforcement"]
by coderman 04 Aug '14

04 Aug '14

On Tue, Jul 29, 2014 at 12:57 PM, grarpamp <grarpamp(a)gmail.com> wrote: > ... > Anarchists are interesting... because they have an affinity towards > nothing, they're resistant towards everything, and proposing anything. > Perhaps that is worthy of certain degree of respects. authentic anarchists are not about "nothing"; that would be the nihilists. anarchism is about autonomy, personal responsibility, utmost liberty. delegating what should not be delegated to corrupt(ing) centralized powers is the source of great harm and suffering across humanity. the heart of anarchism is opposing centralized control and power, whether unitary or hierarchical, in all domains of life. anarchism has the potential to be most robust and most just, in the same way that well built fully decentralized systems are robust against classes of faults endemic in centralized structures. rational anarchy, however, does appear to require a higher class of human animal than currently populates the planet... best regards,

5 6

Re: [Cryptography] You can't trust any of your hardware
by grarpamp 31 Jul '14

31 Jul '14

On Thu, Jul 31, 2014 at 11:46 AM, Jerry Leichter <leichter(a)lrw.com> wrote: > http://arstechnica.com/security/2014/07/this-thumbdrive-hacks-computers-bad… > The full talk/paper don't seem to be available yet, but they (a) figured out > how to write malware that attacks a system via something plugged into its > USB port (no, it doesn't depend on AUTORUN); (b) flipped that around and > figured out how to replace the firmware on a USB device from the host. I > wouldn't have thought (b) was possible - after all, how many firmware > updates for USB devices have you ever seen? - but I guess it's handy at the > end of manufacturing, and gets left open because ... who would ever think of > attacking it? > > On further reflection, though, I realized that the only thing new here is > that they actually went and built a full-cycle virus. All the rest was done > a couple of years ago: Apple published an update for its (USB) keyboards - > http://support.apple.com/kb/HT4010 - and someone reverse-engineered it and > figured out how to upload any code they liked - > https://www.blackhat.com/presentations/bh-usa-09/CHEN/BHUSA09-Chen-RevApple… > > The fun never ends.... Just like BIOS/HDD firmware APT's, the updateability of firmware on USB controllers is nothing new... even thumbdrives come with firmware 'deleted' or fast formatted off their media, dd(1)... it just took a while to make it fun for the entire family. flashboot.ru phison.com usb mass production tool BadUSB BadBIOS spritesmods.com hddhack

1 1

Hacking Washington DC (and other Sensys Networks) traffic control systems
by coderman 31 Jul '14

31 Jul '14

http://blog.ioactive.com/2014/07/hacking-washington-dc-traffic-control.html ''' The latest Sensys Networks numbers indicate that approximately 200,000 sensor devices are deployed worldwide. See http://www.trafficsystemsinc.com/newsletter/spring2014.html. Based on a unit cost of approximately $500, approximately $100,000,000 of vulnerable equipment is buried in roads around the world that anyone can hack. I’m also concerned about how much it will cost tax payers to fix and replace the equipment.... ''''

1 0

Identity Intelligence
by coderman 31 Jul '14

31 Jul '14

XKeyScore classifiers for your data exhaust, --- http://fas.org/blogs/secrecy/2014/07/identity-intel/ "Identity Intelligence and Special Operations" - Posted on Jul.30, 2014 by Steven Aftergood "Identity intelligence” is a relatively new intelligence construct that refers to the analysis and use of personal information, including biometric and forensic data among others, to identify intelligence targets of interest and to deny them anonymity. The term began to appear a few years ago and was included, for example, in a 2012 Defense Intelligence Agencybriefing package. Since then it has quickly propagated throughout U.S. military and intelligence operations. ... The new DoD doctrine on Special Operations — Joint Publication 3-05, dated 16 July 2014 — includes further discussion of identity intelligence (I2) in the special operations context: “I2 is the collection, analysis, exploitation, and management of identity attributes and associated technologies and processes. The identification process utilizes biometrics-enabled intelligence (BEI), forensics-enabled intelligence (FEI), information obtained through document and media exploitation (DOMEX), and combat information and intelligence to identify a person or members of a group.” “I2 fuses identity attributes (biological, biographical, behavioral, and reputational information related to individuals) and other information and intelligence associated with those attributes collected across all intelligence disciplines….” “USSOCOM [US Special Operations Command] exploits biometric, forensic, document and media data collections and integrates the data with all-source intelligence to locate and track unattributed identities across multiple or disparate instances. Intelligence collections are processed through the appropriate DOD and interagency databases, exploited to produce intelligence, and then disseminated to deployed SOF and throughout the interagency. I2 products enable real-time decisions in special operations worldwide.” ... “Special operations require unique modes of employment, tactics, techniques, procedures, and equipment. They are often conducted in hostile, denied, or politically and/or diplomatically sensitive environments, and are characterized by one or more of the following: time-sensitivity, clandestine or covert nature, low visibility, work with or through indigenous forces, greater requirements for regional orientation and cultural expertise, and a higher degree of risk,” JP 3-05 says. ...

1 0

DEF CON nostalgia [was: going double cryptome at DEF CON 22]
by coderman 31 Jul '14

31 Jul '14

a hollow, decrepit shell of its former self.. ... oh the 0ld days, ;) "We'd appreciate some more ethics." - GOBBLES - https://www.youtube.com/watch?v=DAJSxOzrD1g [ GOBBLES Security - still disappointed in 2014 ... ] ---- regarding the current line up: https://defcon.org/html/defcon-22/dc-22-speakers.html "Detecting Bluetooth Surveillance Systems" - what about RFID? "Dropping Docs on Darknets: How People Got Caught" - see also, EPICFAIL "How to Disclose an Exploit Without Getting in Trouble" - if you thought ice cream had many flavors, welcome to the brave new world of 'responsible disclosure'! "NSA Playset: PCIe" - the lack of any VT-d mention makes for mediocre. TAO tools better include a VM breakout and uCode errata exploitation. (spoiler alert - i don't think this is actually dropping NSA exploits) "The Monkey in the Middle: A pentesters guide to playing in traffic" - this middle perspective, however, is absolutely a tailored favorite. a gift that keeps on giving... "Investigating PowerShell Attacks" - this is now pointless, what with pass the hash dead. IT'S ALL OVER, JUST GO HOME. *sobbing* [c.f. http://www.harmj0y.net/blog/penetesting/pass-the-hash-is-dead-long-live-pas… ] "Screw Becoming A Pentester - When I Grow Up I Want To Be A Bug Bounty Hunter!" - one step further to enlightenment. the industry that should not exist; better yet to become build engineer or test automationer or devops devotee and build security in at unsexy day jobs for not fame and not riches. #hashtagInfosuckprotipyolo "In the forest of knowledge with 1o57" - nothing to say here other than i'm selling 1o57's uber badge for bitcoin to highest bidder. come find me :P~ "RF Penetration Testing, Your Air Stinks" - my discriminator for a delicious sw defined deployment: a) new grc blocks or custom sdr pipeline? b) wideband and full duplex? c) opportunistic and ad-hoc capabilities? - if you answered no to any of the following please try again, with more harder! [c.f. http://www.pervices.com/buy-crimson/ dual 10GigE, 100kHz – 6GHz, <= 800MHz bandwidth, 4 x (16 bit, 370 MSPS ADCs), 2 x (quad channel, 16 bit, 2500 MSPS DAC), 10MHz, 10ppb, reference OCXO] P.P.S. if you want do your own training on "WB Quad System" without travel to FVEY facilities this is how ;) "Panel - Diversity in Information Security" - i was not invited to this panel. credibility lost. "Android Hacker Protection Level 0" - because more fingers in the dike is more fingers. "Blinding The Surveillance State" - i am soliciting donations for premium consulting expertise. i don't think Soghoian's free advice will be instrumental, but Cowboy Alexander has some sweet new shit (you get what you pay for? :) [ c.f. http://www.foreignpolicy.com/articles/2014/07/29/the_crypto_king_of_the_NSA… ] "Summary of Attacks Against BIOS and Secure Boot" - aka, why to coreboot and kill AMT with fire. ok Intel chipsec peeps i got bones to pick SEE YOU IN VEGAS --- how about the talks you want so much but will never see? those billions for your discretion clearly benefiting profitability over pervasive security. best regards,

2 2

Alleged "microkernel mathematically proven to be bug free"
by Georgi Guninski 30 Jul '14

30 Jul '14

news: http://www.theregister.co.uk/2014/07/28/aussie_droneprotecting_hackerdetect… site: http://sel4.systems/ AFAICT they used Isabelle for the proofs. Coq sucks much (not counting its developers).

7 22