October 2015 - cypherpunks - lists.cpunks.org

Cryptome admits they leaked their logs (WAS: [cryptome] Cryptome has been leaking its user logs for over a year)
by Michael Best 09 Oct '15

09 Oct '15

Most up to date version: http://that1archive.neocities.org/subfolder1/cryptome-admits-leak.html Before reading this, I recommend reading my first post raising concerns that the alleged GCHQ Cryptome slide from could be a mockup <http://that1archive.neocities.org/subfolder1/gchq-cryptome-slide.html>, followed by my disclosure of Cryptome's leaked user logs <http://that1archive.neocities.org/subfolder1/cryptome-leaked-logs.html>. After refusing to comment <http://web.archive.org/web/20151009170831/https:/twitter.com/Cryptomeorg/st…>, denying it, accusing it of being disinfo <http://web.archive.org/web/20151009170829/https:/twitter.com/Cryptomeorg/st…>, accusing me of stealing data <http://web.archive.org/web/20151007134316/https:/twitter.com/Cryptomeorg/st…>, accusing me of being a newbie advertising for a spy job <http://web.archive.org/web/20151009170826/https:/twitter.com/Cryptomeorg/st…>, declaring that it was "a campaign" against them <https://cpunks.org/pipermail/cypherpunks/2015-October/009681.html>, accusing me of faking data <http://web.archive.org/web/20151008125804/https:/twitter.com/Cryptomeorg/st…>, declaring that all logs leak and they pay for the internet <http://web.archive.org/web/20151009170824/https:/twitter.com/Cryptomeorg/st…>, and deleting my post <https://twitter.com/NatSecGeek/status/651907692081115137> to the Cryptome mailing list <https://cpunks.org/pipermail/cypherpunks/2015-October/009684.html> alerting them to the leak, Cryptome has acknowledged that the leaked logs I found were legitimate. John Young/Cryptome then thanked me, which is apology enough for all the accusations. Date: Fri, 09 Oct 2015 11:54:05 -0400 To: Michael Best From: John Young Subject: Cartome AWStats *You were right about AWStats data. Not the stats for Cryptome itself but for the Cartome sub-directory, for four months, November 2009-February 2010. Included in a full site restoration by ISP NetSol after a full shutdown in June 2013.The stats have been deleted from the Cryptome archive. Probably best to not expose visitors' data further but then nothing can be fully deleted or hidden.Thanks for discovering and reporting in this.Publish this message if you like.Regards,John* Immediately after receiving his email, I deleted the stat files from my website. They were only published to force verification and public disclosure about the leak. Now that it has been acknowledged, there's no point in continuing to distribute them. If John provides a new cryptographically signed Cryptome archive file without those logs, I will replace the one hosted on Archive.org with the new, sanitized version. Note that .7z may be best to prevent the archive's deriving process (it makes individual files within the zip viewable) from making changes to the .zip file which can cause it to no longer match the hash/cryptographic signature. What does this mean for the slide that seems to show GCHQ spying on Cryptome.org? According to John Young's email, the leak is limited to the Cartome sub-directory which would not include the Eyeball directory. However, the time frame matches up perfectly and does include the time period the slide appears to show. Determining whether or not the leak ever included the Eyeball directory, and why NetSol's glitch only restored those four months of the Cartome's stats to the Cryptome archive while trying to view a random selection of the leaked files on the online server failed, requires more information from NetSol, Cryptome's ISP. Inquiring about those details from NetSol and disclosing them falls entirely to John Young and Deborah Natsios. Presumably, John Young would have disclosed if a similar leak had been found relating to the Eyeball directory, but it remains possible that the information might have been deleted from the Cryptome archive prior to 2014-06-02 <https://thepiratebay.se/torrent/11113511/Cryptome_archive_2014-06-02> without John realizing it had already leaked. More information will be required before those possibilities can be excluded. As of the time of this posting (13:45 Eastern October 9, 2015), John Young has not added anything to his website, twitter account, or mailing lists disclosing the now confirmed leak to his users. He did remove the graphic advising his users that the GCHQ was/is allegedly monitoring them. <http://web.archive.org/web/20151007140432/https:/twitter.com/Cryptomeorg/st…>

2 4

Cryptome flip flops then edits their Wikipedia page. Again. (WAS Re: Cryptome admits they leaked their logs)
by Michael Best 09 Oct '15

09 Oct '15

After denying the leaked logs, then acknowleding them, then denying them again, Cryptome edits their own Wikipedia page. *Again.* https://twitter.com/NatSecGeek/status/652593111881908224 Next time, raise issues on the article's talk page with sources. This isn't the first time and it's a major breach of protocol for Wikipedia. https://en.wikipedia.org/wiki/Wikipedia:Conflict_of_interest This is the first time Wikipedia's watchlist has caught an edit I found interesting. --Mike On Fri, Oct 9, 2015 at 4:51 PM, Michael Best <themikebest(a)gmail.com> wrote: > Here is Cryptome's full set (so far) of post-admission replies. I'm unable > to make anything consistent out of it. > > "Admission of leaked logs" is rather generously overstated of what we > specifically understated. > https://twitter.com/Cryptomeorg/status/652581186036989953 > Me: You understated things? As in, left something(s) out?? > Cryptome: Told what was needed to defuse your exaggeration and resist > your demands to auth visitors. > https://twitter.com/Cryptomeorg/status/652585088912355328 > > Note that Cryptome doesn't dispute the email that I quoted, which was copy > and pasted in it's entirety. > > > Rigged and disinfo remain valid. You overstated the disclosure. Leaking is > press exaggeration. > https://twitter.com/Cryptomeorg/status/652581918215684096 > > Nothing is ever deleted, that is subterfuge to escape culpability. You > ratted Cryptome visitors. Not the first or last. > https://twitter.com/Cryptomeorg/status/652582251805474816 > *Note that Cryptome is definitely NOT using subterfuge to escape > culpability or advising users of the data leak/breach/compromise/whatever > spin word Cryptome wants to use. > > Still refusing to validate what you faked, rigged and released. And will > not, it's your story, run with it. > https://twitter.com/Cryptomeorg/status/652583921352355840 > > Our claims remain valid despite the biased cherry-picking so beloved of > childish argumentum ad hominem -- Cicero's bitch. > https://twitter.com/Cryptomeorg/status/652579919340421120 > > > On Fri, Oct 9, 2015 at 4:45 PM, coderman <coderman(a)gmail.com> wrote: > >> On 10/9/15, Michael Best <themikebest(a)gmail.com> wrote: >> > ... >> > Not sure how I was right AND the info is rigged and disinfo... >> >> QUANTUMSQUIRREL casts suspicion, just like shade, too. >> > >

1 0

Re: The GCHQ Cryptome slide could be a mockup/disinfo
by Michael Best 09 Oct '15

09 Oct '15

I don't know but if I had to guess, it's because they have no reason to get into more specific and lesser charges until/unless it looks like he might be coming to trial. Then again, it's not the first time a slide has been challenged: http://www.reuters.com/article/2014/12/11/us-germany-usa-spying-idUSKBN0JP1… Germany's top public prosecutor said an investigation into suspected > tapping of Chancellor Angela Merkel's mobile phone by U.S. spies had so far > failed to find any concrete evidence. > Revelations by former National Security Agency employee Edward Snowden > that Washington carried out large-scale electronic espionage in Germany > provoked widespread outrage -- particularly the allegation that the NSA had > bugged Merkel's phone. > Harald Range launched an official investigation in June, believing there > was enough preliminary evidence to show unknown U.S. intelligence officers > had tapped the phone, although there was not enough clarity on the issue to > bring charges. > On Wednesday he said however, > *"the document presented in public as proof of an actual tapping of the > mobile phone is not an authentic surveillance order by the NSA. It does not > come from the NSA database."There is no proof at the moment which could > lead to charges that Chancellor Merkel's phone connection data was > collected or her calls tapped."* > Range said neither a reporter for German news magazine Spiegel who > presented the document, nor Germany's BND foreign intelligence agency, nor > Snowden had provided further details to his office. >From the German prosecutor, not an NSA spokesperson. *Plus*, as I said in the post - *Snowden didn't see all the materials he leaked*. If the document was forged and not legitimate or a mockup produced by GCHQ for proposal purposes, etc., it could have been modified or fabricated *after* Snowden gave up his trove. Did you read the entire post, or just decide that "If he's not a Snowden-ite, he's probably a liar or a bad man"?? *Georgi Guninski* guninski(a)guninski.com <guninski%40guninski.com?Subject=Re%3A%20The%20GCHQ%20Cryptome%20slide%20could%20be%20a%20mockup/disinfo&In-Reply-To=%3C20151009134945.GA2643%40sivokote.iziade.m%24%3E> *Fri Oct 9 09:49:45 EDT 2015* > Why they don't charge Snowden for fabricating/photoshoping?

1 0

Snowden on the Twitters
by grarpamp 09 Oct '15

09 Oct '15

https://twitter.com/Snowden

18 98

[cryptome] Re: Cryptome has been leaking its user logs for over a year
by Michael Best 09 Oct '15

09 Oct '15

Done. If only the headache could be find-replaced as easily! ;)*From*: Shelley <shelley@xxxxxxxxxxxxxxxx> - *To*: <cryptome@xxxxxxxxxxxxx> - *Date*: Thu, 08 Oct 2015 22:59:48 -0700 Mike, While you're updating the post, you might want to change the urls to be all lowercase (there are still DNS issues with caps; links aren't working.)

1 0

A Short History of US Bombing of Civilian Facilities
by Zenaan Harkness 09 Oct '15

09 Oct '15

The USA has some serious chickens coming home to roost... http://russia-insider.com/en/politics/short-history-us-bombing-civilian-fac… Just one of many examples, and all of the examples only since 1991: "Red Cross complex, Kabul, Afghanistan (October 16 and October 26, 2001) At the beginning of the U.S-led invasion of Afghanistan, the U.S. attacked the complex housing the International Committee of the Red Cross in Kabul. In an attempt to prevent such incidents in the future, the U.S. conducted detailed discussions with the Red Cross about the location of all of its installations in the country. Then the U.S. bombed the same complex again. The second attack destroyed warehouses containing tons of food and supplies for refugees. “Whoever is responsible will have to come to Geneva for a formal explanation,” said a Red Cross spokesperson. “Firing, shooting, bombing, a warehouse clearly marked with the Red Cross emblem is a very serious incident. … Now we’ve got 55,000 people without that food or blankets, with nothing at all.” "

1 0

Comedy gold (well, may be bronze if we look hard...) - Russia to invade Turkey
by Zenaan Harkness 09 Oct '15

09 Oct '15

http://russia-insider.com/en/media-criticism/ukrainian-tv-russian-military-… "Ukrainian TV: Russian Military Bases in Crimea and Syria Will Be Used to Invade Turkey, Obviously" Straight faces now... this is serious news reporting in Ukraine. HEY! You in the back row, STOP CHUCKLING!!

1 0

The challenge, should you accept it earth humans, is to ... [was: Snowden on the Twitters]
by coderman 09 Oct '15

09 Oct '15

On 10/8/15, Razer <Rayzer(a)riseup.net> wrote: > > Show me the advantage over cooperating with others equilaterally. universal cooperation is global optima - the trick is to pass from crude biological competitive roots into global egalitarianism through universal cooperation. this is also known as solving the Fermi paradox, becoming the first species to pass through paradox proves it. note that designing fully decentralized technology sufficient to support this transition, regardless of the socio-economic difficulties retarding adoption of same, is sufficiently difficult as to be considered "impossible" by sane majorities. --- good luck earth humans! --- "It's never been so easy for so many to injure and kill over so little..."

1 0

ParalelPolis, Hacker's Conference, 2015-10-04
by wirelesswarrior＠Safe-mail.net 08 Oct '15

08 Oct '15

You can download a copy of my covert wireless slides I presented in Prague a few days ago (.pdf) at: http://s000.tinyupload.com/index.php?file_id=03580328025747098705 It an update of the talk I gave at Defcon 23 with lots of corrections and additions (satellite hacking). WW

1 0

juan's vision of free market WAS Snowden on the Twitters
by Georgi Guninski 08 Oct '15

08 Oct '15

>> 1. How do you distribute goods (food, shelter, shiny J-Pads, money? >> etc) >> > free market What is a sound definition of free market? In particular: 1. How does the ``free market'' prevents _cartels_ and stays free? 2. In a stateless free market, what happens to orphans, physically/mentally impaired people and the like? IMHO realworld implementation of ``free market'' is the law of the jungle played with (virtual) money/goods on a Ponzi scheme playground (check the thread about the usa debt).

4 10