October 2015 - cypherpunks - lists.cpunks.org

The ENTIRE World (Minus Israel, Obviously) Just Voted to Condemn the US Embargo Against Cuba
by Zenaan Harkness 28 Oct '15

28 Oct '15

USA actually considered abstaining for the first time ever. http://russia-insider.com/en/breaking-entire-un-minus-israel-obviously-just… http://bigstory.ap.org/article/bbf65503c10d47558075e427fac988d4/us-says-it-… "The General Assembly voted 191-2 to condemn the commercial, economic and financial embargo against Cuba, the highest number of votes ever for the measure. Only Israel joined the United States in opposing the resolution, and when the vote lit up on the screen many diplomats jumped to their feet in a standing ovation."

1 0

U.S. Congresswoman: CIA Must Stop Illegal, Counterproductive War to Overthrow Assad
by Zenaan Harkness 28 Oct '15

28 Oct '15

U.S. Congresswoman: CIA Must Stop Illegal, Counterproductive War to Overthrow Assad https://www.youtube.com/watch?v=IHkher6ceaA Rare to hear a USA politician talk in this way. The fact she got such air time is another indicator that the fascist military regime running America is having to have a game change.

1 0

The $24B Secret Telco Data Biz
by grarpamp 28 Oct '15

28 Oct '15

http://adage.com/article/datadriven-marketing/24-billion-data-business-telc… SAP's Consumer Insight 365 ingests regularly updated data representing as many as 300 cellphone events per day for each of the 20 million to 25 million mobile subscribers. SAP won't disclose the carriers providing this data. It "tells you where your consumers are coming from, because obviously the mobile operator knows their home location," Us... 10 more, you... fuct.

1 0

US Senate Passes the Cybersecurity Information Sharing Act 74-21
by grarpamp 28 Oct '15

28 Oct '15

The U.S. Senate voted 74-21 in favor of CISA, a controversial cybersecurity bill. All five amendments submitted in an attempt to bolster privacy failed to pass. From The Guardian's coverage: Try asking the bill’s sponsors how the bill will prevent cyberattacks or force companies and governments to improve their defenses. They can’t answer. They will use buzzwords like “info-sharing” yet will conveniently ignore the fact that companies and the government can already share information with each other as is. There were barely any actual cybersecurity experts who were for the bill. A large group of respected computer scientists and engineers were against it. So were cyberlaw professors. Civil liberties groups uniformly opposed (and were appalled by) the bill. So did consumer groups. So did the vast majority of giant tech companies. Yet it still sailed through the Senate, mostly because lawmakers - many of whom can barely operate their own email - know hardly anything about the technology that they’re crafting legislation about. In other words, you're all fucked again... us 10, you ZERO, hahaha! http://www.dailydot.com/politics/cisa-senate-passage-cybersecurity-informat… http://www.dailykos.com/story/2015/10/27/1440874/-Senate-Shoots-Down-Four-A… http://www.theguardian.com/commentisfree/2015/oct/27/senate-ignorant-of-cyb… https://cyberlaw.stanford.edu/blog/2015/04/technologists-oppose-cisainforma… https://www.elon.edu/e-net/Article/122816?cmsapifragment=1283 https://www.aclu.org/broad-coalition-opposes-cybersecurity-information-shar… https://cdt.org/insight/consumer-advocates-letter-to-senate-on-cybersecurit… http://money.cnn.com/2015/10/26/technology/cisa-cybersecurity-bill-senate/

3 2

Fwd: [Cryptography] WhatApp metadata broken; on deck: voice encryption
by grarpamp 28 Oct '15

28 Oct '15

---------- Forwarded message ---------- Date: Tue, Oct 27, 2015 at 10:30 AM Subject: [Cryptography] WhatApp metadata broken; on deck: voice encryption FYI -- The authors seem very optimistic about capturing the voice encryption session keys soon. WhatsApp network forensics: Decrypting and understanding the WhatsApp call signaling messages http://www.fit.vutbr.cz/research/pubs/index.php?file=%2Fpub%2F10979%2FWhats… we were able to acquire the following artifacts from the network traffic: * WhatsApp phone numbers. * WhatsApp phone call establishment metadata and datetime stamps. * WhatsApp phone call termination metadata and datetime stamps. * WhatsApp phone call duration metadata and datetime stamps. * WhatsApp's phone call voice codec (Opus). * WhatsApp's relay server IP addresses used during the calls.

1 0

Fwd: [Cryptography] EFF press release: Wednesday Hearing in NSA Spying Case
by grarpamp 28 Oct '15

28 Oct '15

---------- Forwarded message ---------- From: John Gilmore <gnu(a)toad.com> Date: Tue, Oct 27, 2015 at 2:36 AM Subject: [Cryptography] EFF press release: Wednesday Hearing in NSA Spying Case To: cryptography(a)metzdowd.com, gnu(a)toad.com [The public is invited to watch justice be done or undone. Remember our old cypherpunk dress-up days in the Bernstein case? The judges will notice if a polite, interested crowd shows up, and will probably pay more attention. --gnu] From: "EFF Press" <press(a)eff.org> Subject: EFF: Wednesday Hearing in NSA Spying Case Date: Mon, 26 Oct 2015 08:30:11 -0700 This is a friendly message from the Electronic Frontier Foundation. View it in a web browser [1]. ELECTRONIC FRONTIER FOUNDATION MEDIA ALERT For Immediate Release: Monday, October 26, 2015 Contact: Rebecca Jeschke Media Relations Director and Digital Rights Analyst press(a)eff.org +1 415-436-9333 x177 Wednesday Hearing in NSA Spying Case EFF Battles Against Government Stalling in Jewel v. NSA Pasadena, CA - The Electronic Frontier Foundation (EFF) will urge an appeals court Wednesday to reject the government's attempts to block an appeal in Jewel v. NSA, EFF's long-running lawsuit battling unconstitutional mass surveillance of Internet and phone communications. The hearing is set for 2:00 pm on October 28 before the United States Court of Appeals for the Ninth Circuit in Pasadena, California. At issue in the appeal is the NSA's tapping into the fiber optic cables of America's telecommunications companies--a digital dragnet that subjects millions of ordinary people to government spying on their online activities. A mountain of evidence from whistleblowers and the government itself confirms the Internet backbone spying, yet a district court judge ruled earlier this year that there wasn't enough publicly available information to rule if the program is constitutional. EFF appealed to the Ninth Circuit, but the government claims that the appeal is premature and entwined with other issues that are still being litigated in the lower court. EFF Special Counsel Richard Wiebe will argue Wednesday that the appeals court should reject the government's delay tactics, and finally address whether backbone spying is legal and constitutional. What: Jewel v. NSA [2] Who: EFF Special Counsel Richard Wiebe When: Wednesday, Oct. 28 2:00 pm Where: Richard H. Chambers US Court of Appeals Courtroom 1 125 South Grand Avenue Pasadena, CA 91105 For this release: https://www.eff.org/press/releases/wednesday-hearing-nsa-spying-case [3] About EFF The Electronic Frontier Foundation is the leading organization protecting civil liberties in the digital world. Founded in 1990, we defend free speech online, fight illegal surveillance, promote the rights of digital innovators, and work to ensure that the rights and freedoms we enjoy are enhanced, rather than eroded, as our use of technology grows. EFF is a member-supported organization. Find out more at https://www.eff.org. Electronic Frontier Foundation, 815 Eddy Street, San Francisco, CA 94109 USA Links: ------ [1] https://supporters.eff.org/civicrm/mailing/view?reset=1&id=1227 [2] https://www.eff.org/cases/jewel [3] https://www.eff.org/press/releases/wednesday-hearing-nsa-spying-case For those not in the LA area, it should be livestreamed. Pasadena 9th Circuit courthouse, courtroom 1, 2 pm tomorrow. Before 2, go the court's website, http://www.ca9.uscourts.gov/ The middle column, Live Streaming Oral Arguments, should have a link to the livestream from that courtroom/courthouse.

1 0

list sans smtp spillage
by coderman 27 Oct '15

27 Oct '15

http://pastebin.com/Wy98Q3TJ --- Email filter update. This is a list with trolls, troublemakers and other nuts mostly on the security mailing lists. Since I filter those the discussion is much more civil. And with far less conspiracies. mk(a)dee.su nadim(a)nadim.cc adrelanos(a)riseup.net l(a)odewijk.nl rysiek(a)hackerspace.pl @koplitz.net jerzyma(a)interia.eu theusernameiwantistaken(a)gmail.com eugen(a)leitl.org ruiz(a)iit.edu anonymous.coward(a)posteo.de njloof(a)gmail.com vladimir.teplouhov(a)gmail.com joebtfsplk(a)gmx.com silentswede2(a)gmail.com elrippo(a)elrippoisland.net electromagnetize(a)gmail.com coderman(a)gmail.com data(a)kuketz.de joseph(a)josephholsten.com an0n102968(a)gmail.com torance.ca(a)gmail.com risko(a)csl.sri.com jamesdbell8(a)yahoo.com jamesd(a)echeque.com author(a)anonymousbitcoinbook.com ricardcolorado(a)gmail.com kattitov(a)yandex.com themindwaregroup(a)gmail.com dahal.saurav(a)gmail.com maimun.rizal(a)googlemail.com muhammed_gokce(a)hotmail.com unknown(a)pgpru.com juan.g71(a)gmail.com mark.mccarron(a)live.co.uk crypto(a)jpunix.net waywardgeek(a)gmail.com ideasbuenas(a)gmail.com zen(a)freedbms.net scott(a)arciszewski.me K.Chambers(a)openmailbox.org blade.vp2020(a)gmail.com davidvargas1(a)mac.com lakbk89(a)gmail.com maestro(a)openmailbox.org riley(a)openmailbox.org shiretoko(a)web.de adfeno(a)openmailbox.org amenex(a)amenex.com calmstorm(a)openmailbox.org chaosesqueteam(a)yahoo.com christian(a)priest.com davesamcdxv(a)openmailbox.org gary02121993(a)openmailbox.org golyn(a)openmailbox.org jabjabs(a)fastmail.com.au janosch.adams(a)runbox.com lakbk89(a)openmailbox.org lcerf(a)dcc.ufmg.br mail(a)jadedfs.net marioxcc.MT(a)yandex.com myself600(a)opmbx.org noordinaryspider(a)gmail.com onpon4(a)riseup.net rafi.panoyan(a)hotmail.fr rainteller(a)eemajine.com t8mf4nu6lizp(a)canaglie.net thunderstormpolska(a)o2.pl tomlukeywood(a)fastmail.co.uk a1716479(a)trbvm.com cyrus_the_great(a)riseup.net gnorcie(a)umail.iu.edu kevinsisco61784(a)gmail.com whonixqubes(a)riseup.net afalex169(a)gmail.com andre76(a)fastmail.fm a.krey(a)gmx.de komachi(a)openmailbox.org ATorUser(a)mail2tor.com vitteaymeric(a)gmail.com art.istom(a)yandex.ru list(a)sysfu.com patrick-mailinglists(a)whonix.org mike(a)confidantmail.org martink(a)posteo.de luisg(a)riseup.net lynX(a)time.to.get.psyced.org tor(a)tengu.ch dewaj(a)garlic.com grarpamp(a)gmail.com burdges(a)gmail.com KevinB(a)ruggedinbox.com ter.one.leeboi(a)hush.com lpwzi9i84(a)use.startmail.com adrienj(a)adrienj.com domenico.andreoli(a)linux.com isacdaavid(a)gmail.com leemalek(a)Safe-mail.net mbm(a)rlogin.net mirimir(a)riseup.net tlbean(a)tlbean.com tbiehn(a)gmail.com torbirdyfoo(a)ruggedinbox.com aiwanski(a)cox.net zolar1(a)hush.com twim(a)riseup.net hha4491(a)web.de watau(a)t-online.de tim(a)teamsammut.com when2plus2is5(a)riseup.net schoen(a)eff.org mraboqht(a)gmail.com iznogoud(a)neomailbox.ch akademiker1(a)googlemail.com alexiswattel(a)gmail.com 123bltc(a)gmail.com barberb(a)barberb.com ben(a)bentasker.co.uk blobby(a)openmailbox.org BM-2cUqBqHFVDHuY34ZcpL3PNgkpLUEEer8ev(a)bitmessage.ch cinaed.simson(a)gmail.com darlingsuzy444(a)gmail.com domi3821(a)gmail.com drhardy84(a)gmail.com micaroni(a)gmail.com jgoltz(a)mail.nih.gov goofyzrnssm(a)vfemail.net beatthebastards(a)inbox.com jancsika(a)yahoo.com JS733NknRj6J(a)protonmail.com libertas(a)mykolab.com marcoskehl(a)hotmail.com max.o.bond(a)gmail.com michaelballriseup(a)gmail.com nasunorahl(a)gmail.com naz(a)gassiep.com paul(a)crable.us paul.syverson(a)nrl.navy.mil rekha13102(a)iiitd.ac.in rishabn.uci(a)gmail.com social(a)sponsor-privacy.com teor2345(a)gmail.com thomaswhite(a)riseup.net ---end-cut--- [ this encountered through paste crawlers searching for email addrs; not always indicative of a spill it turns out! ] best regards,

17 54

Russian Ships Near Data Cables
by grarpamp 27 Oct '15

27 Oct '15

http://www.nytimes.com/2015/10/26/world/europe/russian-presence-near-unders… The locations of the cables are hardly secret. "Undersea cables tend to follow the similar path since they were laid in the 1860s,"... The exceptions are special cables, with secret locations, that have been commissioned by the United States for military operations; they do not show up on widely available maps, and it is possible the Russians are hunting for those, officials said. http://edition.cnn.com/2015/07/09/politics/russian-bombers-u-s-intercept-ju… http://subseaworldnews.com/tag/yantar/ http://subseaworldnews.com/2012/12/06/oceanographic-ship-yantar-launched-in… http://www.marinetraffic.com/ais/details/ships/shipid:1215053/mmsi:27354652… http://sputniknews.com/russia/20150523/1022493017.html http://freebeacon.com/national-security/u-s-shadowing-russian-ship-in-atlan… http://freebeacon.com/national-security/russian-spy-ship-makes-port-call-in… http://subseaworldnews.com/2015/05/25/russian-navy-takes-delivery-of-rv-yan… http://electrospaces.blogspot.nl/ http://www.svengrahn.pp.se/histind/Recces/Recces.htm

4 3

Obfuscation: how leaving a trail of confusion can beat online surveillance
by Eugen Leitl 27 Oct '15

27 Oct '15

http://www.theguardian.com/technology/2015/oct/24/obfuscation-users-guide-f… Obfuscation: how leaving a trail of confusion can beat online surveillance The art of obfuscation has a grand history, from ‘I’m Spartacus!’ to ghost radar in WWII. Could the same blurred approach give us more freedom online? Analog television with white noise Obfuscation, say Brunton and Nissenbaum, is the ‘addition of ambiguous, confusing, or misleading information to interfere with surveillance and data collection projects’ to ‘ buy time, gain cover, and hide in a crowd of signals’. Photograph: Jon Helgason/Alamy Julia Powles Saturday 24 October 2015 09.00 BST Last modified on Sunday 25 October 2015 20.32 GMT At the heart of Cambridge University, there’s a library tower filled with 200,000 forgotten books. Rumoured by generations of students to hold the campus collection of porn, Sir Gilbert Scott’s tower is, in fact, filled with pocket books. Guides, manuals, tales and pamphlets for everyday life, deemed insufficiently scholarly for the ordinary collection, they stand preserved as an extraordinary relic of past preoccupations. One new guide in the handbook tradition – and one that is decidedly on point for 2015 – is the slim, black, cloth-bound volume, Obfuscation: A User’s Guide for Privacy and Protest, published by MIT Press. A collaboration between technologist Finn Brunton and philosopher Helen Nissenbaum, both of New York University, Obfuscation packs utility, charm and conviction into its tightly-composed 100-page core. This is a thin book, but its ambition is vast. Brunton and Nissenbaum aim to start a “big little revolution” in the data-mining and surveillance business, by “throwing some sand in the gears, kicking up dust and making some noise”. Specifically, the authors champion the titular term, obfuscation, or “the addition of ambiguous, confusing, or misleading information to interfere with surveillance and data collection projects”. The objective of such measures is to thwart profiling, “to buy time, gain cover, and hide in a crowd of signals”. >From poker to CacheCloak More than 30 colourful examples – instructive vignettes in their own right – are used to build the case. Roughly a third are analogue, and the images stick. War-era choppers generating radar chaff. False tells in poker. Iconic movie scenes, like the switching briefcases in The Thomas Crown Affair, or the powerful “I am Spartacus” moment in Kubrick’s 1960 epic. The authors bring in orb-making spiders, sim-card shuffles, loyalty-card swap meets, “babble tapes” (a digital file played in the background of a conversation in order to obscure it – all examples where the individual merges with the tribe; where false signals muddy the genuine; where noise and quick feet offer “weapons of the weak”. ‘I’m Spartacus!’ – obfuscation on film Shifting to digital, noise can be destructive or productive, and it can scale dramatically. This is the landscape that a 21st-century handbook must confront. Platforms and channels can be swamped by code that mimics and distorts human communication – bots, like-farmers, decoys and hydras. Other tools, like the anonymous Tor browser, the Guardian’s SecureDrop, or stylometric obfuscation (to disguise authorship), can be mission-critical for dissidents. And there is an ever growing demand for consumer-focused privacy-preserving apps, like CacheCloak, which hides your mobile location in a spaghetti map of plausible trails, or FaceCloak, which gives a layer of control over personal data within Facebook. We are naked, exposed and eminently traceable, now and into the future, by an increasing range of data-hungry agents Most of us, most of the time, use immensely popular technologies without masks or noise. We post in what you might call corruptible silence. On Facebook, Instagram, Twitter and Google, we document our personal spaces, our frailties, our desires, questions and answers. We are naked, exposed and eminently traceable, now and into the future, by an ever-increasing range of data-hungry agents. To concerned citizens living this reality, and to thoughtful designers of technology, what Brunton and Nissenbaum offer is a compelling moral defence and some ready-to-hand tools for a small, distributed revolution of resistance. Stunt tech, silence and saviours Core to the book’s perspective is the authors’ experience in building practical tech – what they describe as “tools among other tools for the construction and defence of privacy”. Nissenbaum has been the steward of two major projects, both with programmer Daniel C Howe: TrackMeNot, a search-history obfuscator that spontaneously generates clouds of possible queries; and AdNauseam, which “clicks all the ads, so you don’t have to”. TrackMeNot was developed in 2006, in conjunction with developer Vincent Toubiana, while AdNauseam is new, and currently operates in conjunction with AdBlock Plus, running in the background to click every ad on a given page. Discussing the latter platform in Berlin, team-member and designer Mushon Zer-Aviv described it as, presently, more art project than mass-rollout tech. AdNauseam is currently in public beta in Firefox, but the team is working hard to bring it to Google Chrome. As Zer-Aviv described, with a hint of daring, Google will either take it down, to save ad revenue, which would be a great stunt; or it won’t take it down, which would also be great. One of Google’s data centres Facebook Twitter Pinterest One of Google’s data centres, part of the web’s back-end. Photograph: KeystoneUSA-ZUMA / Rex Features “We see these obfuscating apps and systems as moves in a bigger picture,” says Nissenbaum. “None, we think, will offer what we really need, which is comprehensive attention to the picture. Not only the big fuss about government but all the large data collectors. But they allow people to visibly signal their disgruntlement – for privacy and protest.” So how does obfuscation play into the current ad-blocking wars? “It is a devilish move by ad networks to conflate the massive back-end of tracking, aggregation, mining and profiling with advertising itself,” says Nissenbaum. “Our effort, both with TrackMeNot and AdNauseam, has been targeted at the former. I don’t love advertising but I can tolerate it. When supporters of the current structures of behavioural advertising say this will be the end of all the innovation and free stuff on the web, our response is: no. Although this might happen if advertising itself goes away, it does not require the back-end tracking for survival.” The worrying back-end of the web Advertising does not require back-end tracking for survival. Helen Nissenbaum Nissenbaum is right to separate advertising and its current digital back-end. In the case of newspapers, for example, a great Faustian pact has operated between ads and content for some 300 years. It more or less works, as long as there’s not too much of one or the other. The fact that this bargain is threatened by overreaching data collection and surveillance, from search engines to content-providers to third-party leeches to governments, is a measure of the urgency of our contemporary challenge and the necessity for a creative response. Obfuscation is part of that response. There is something compelling in being persuaded of the ethical imperative of digital troublemaking by a couple of righteous academics. Obfuscation is not an academic tome, and it doesn’t delve into conceptual analyses on its core principles, such as anonymity in crowds following David Chaum, or linkability following Andreas Pfitzmann. But the book has been justifiably selective to capture broad appeal. The lucid, authoritative, accessible and thought-provoking text that results is a pleasure to read. Obfuscation is ultimately a tiny shop in the digital realm. To that extent, it has nothing against the might of big tech. But what it does have is the potential to fight to keep the preserve of human agency and autonomy uniquely human. The big hope is that when our bot descendants find this handbook stuffed in a tower in 100 years, it is unchecked surveillance – not digital disobedience – that seems antiquated.

2 1

Re: list sans smtp spillage
by Ulex Europae 27 Oct '15

27 Oct '15

At 09:25 PM 10/26/2015, Cari Machet wrote: >I do agree with steve that the use of the word fuck is a >exploitation or degradation of sex/love which is not that great Fuck that. Now, did I say something exploitative or degrading about sex/love or was it merely a coarse rejection of a notional assertion? >The dutch stated using fuck was degrading to love > >The new yorker stated using cunt was degrading to women > >The dutch said degrading love was far worse than degrading women Word meanings change over time. To not acknowledge and take this into consideration reveals an agenda. Watch while I now make some vacuous claim about something else: <insert vacuous claim here> --ue

2 1