March 2015 - cypherpunks - lists.cpunks.org

Re: [Cryptography] "Most Americans Don't Mind Being on Candid Camera"
by grarpamp 27 Mar '15

27 Mar '15

On Wed, Mar 25, 2015 at 2:27 PM, Barney Wolff <barney(a)databus.com> wrote: > So it's ok to declare war on Hezbollah but not on ISIS? If I decide to > build my own WMD I'm a criminal but if Pakistan fails to prosecute the > guy who helps me then I'm an enemy combatant? > > Seems to me the criterion should be the level of the threat, not fine > distinctions on who's making it. Show me any written declaration of war made since WWII. Problem is you've made everything so gray since then that not even you yourself can see straight anymore. That's a real problem. We already know that has created constant global guerrilla grinding of waste, destruction and death. It would be interesting if it spawns an actual war or WWIII... even if only to restore clear vision. WMD? Chem is as irrelavent as a cloudy day. Nuke policing is tricky yet seems to be working and still under state control. But it's the bio's / DNA and knowledge coming out of govt/corp/edu labs that pose the biggest risk to mass humanity. And nobody seems to have any idea how to grasp or manage that.

2 1

Pocan & Massie Introduce Legislation to Repeal PATRIOT Act
by grarpamp 26 Mar '15

26 Mar '15

http://pocan.house.gov/media-center/press-releases/pocan-massie-introduce-l… http://pocan.house.gov/sites/pocan.house.gov/files/wysiwyg_uploaded/Surveil… https://www.congress.gov/bill/114th-congress/house-bill/1466/text http://thinkprogress.org/election/2015/03/24/3638234/house-members-move-rep… http://www.freedomworks.org/content/house-introduces-bill-repeal-patriot-act http://thehill.com/blogs/congress-blog/civil-rights/236641-legislate-agains… http://yro.slashdot.org/story/15/03/25/1213221/new-bill-would-repeal-patrio… http://www.reddit.com/r/politics/comments/306jsr/house_introduces_bill_to_r… https://news.ycombinator.com/item?id=9261650 http://whoismyrepresentative.com/

3 2

ODNI/NRC report on "Bulk Collection of Signals Intelligence"
by Gregory Foster 24 Mar '15

24 Mar '15

The National Academies Press (2015) - "Bulk Collection of Signals Intelligence: Technical Options" http://www.nap.edu/catalog/19414/bulk-collection-of-signals-intelligence-te… > The Bulk Collection of Signals Intelligence: Technical Options study is a result of an activity called for in Presidential Policy Directive 28 (PPD-28), issued by President Obama in January 2014, to evaluate U.S. signals intelligence practices. The directive instructed the Office of the Director of National Intelligence (ODNI) to produce a report within one year "assessing the feasibility of creating software that would allow the intelligence community more easily to conduct targeted information acquisition rather than bulk collection." ODNI asked the National Research Council (NRC) -- the operating arm of the National Academy of Sciences and National Academy of Engineering -- to conduct a study, which began in June 2014, to assist in preparing a response to the President. Over the ensuing months, a committee of experts appointed by the Research Council produced the report. gf -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/

1 0

Re: From [FD]: Wall of Sheep Speaker Workshops at DEF CON 23 CFP Now Open
by Shelley 24 Mar '15

24 Mar '15

On March 24, 2015 11:09:42 AM coderman <coderman(a)gmail.com> wrote: > On 3/23/15, Shelley <shelley(a)misanthropia.org> wrote: > > ... > > The Wall of Sheep would like to announce a call for presentations > > ... The Wall of Sheep will be delivering talks that > > increase security awareness and provide skills that can be immediately > > applied after the conference... > > > wall of pwn, an entire track of specialized focus? > > ... sheep jumped the shark. Yeah, it was just always something we hoped never to end up on, heh. I don't know how this'll work out because newbs are not the DefCon target audience. Thought it was interesting/weird enough to pass on to the list anyway, even if it's only mild schadenfreude entertainment. -S

1 0

From [FD]: Wall of Sheep Speaker Workshops at DEF CON 23 CFP Now Open
by Shelley 24 Mar '15

24 Mar '15

Fyi! ---------- --- Forwarded message --- From: Ming <ming(a)wallofsheep.com> Date: March 23, 2015 2:10:32 PM Subject: [FD] Wall of Sheep Speaker Workshops at DEF CON 23 CFP Now Open To: undisclosed-recipients:; #Overview The Wall of Sheep would like to announce a call for presentations at DEF CON 23 at the Paris and Bally's Hotels in Las Vegas, NV from Friday, August 7th to Sunday, August 9th. The Wall of Sheep will be delivering talks that increase security awareness and provide skills that can be immediately applied after the conference. Our audience ranges from those who are new to security to the most seasoned practitioners in the security industry. Introductory talks are welcome. Topics of interest include: * Tools on network sniffing, intrusion detection and monitoring, forensics * Tools for data collection (e.g., Yara, Cuckoo Sandbox) * Python or Ruby programming for security practitioners * Hardening the enterprise using open source tools * Getting multi-vendor tools working together * Tool/task automation and optimization * Incident response process and procedures This year, all accepted talks will be announced, recorded, and published by DEF CON Communications, Inc (yes, by the conference). The Wall of Sheep will not accept product or vendor related pitches. If your talk is a thinly-veiled advertisement for a product or service your company is offering, please do not apply! #Speaking Format Each presentation slot is 1 hour, including time for Q&A. If we have time and it is in line with our goals mentioned above, then there is a good chance you will be selected. ##To submit a presentation, please provide the following information in the form below to cfp2015[at]wallofsheep[dot]com Primary Speaker Name: Primary Speaker Title and Company (if applicable): Primary Speaker Email Address: Primary Speaker Phone Number (to contact you if necessary during the conference): Primary Speaker Twitter name (if you want it known if you are accepted): Primary Speaker Facebook page (if you want it known if you are accepted): Additional Speakers' name(s), titles, and social information: Additional Email Addresses: Is there a specific day or time you MUST speak by? Name of Presentation: Abstract: Your abstract will be used for the website and printed materials. Summarize what your presentation will cover. Attendees will read this to get an idea of what they should know before your presentation, and what they will learn after. Use this to inform about how technical your talk is. This abstract is the primary way people will be drawn to your session. CFP reviews like to see what tools will be used and what materials you suggest to read in advance to get the most out of your presentation. Equipment Needs & Special Requests: The Wall of Sheep will provide 1 projector feed, and microphones. If you need to use multiple outputs for a demo, please mention this below. Speaker's Bio(s): This text will be used for the website and printed materials and should be written in the third person. Cover any professional history that is relevant to the presentation, including past jobs, tools that you have written, etc. Let people know who you are and why you are qualified to speak on your topic. Presentations that are submitted without biographies will not be considered. Detailed Outline: You must provide a detailed outline containing the main points and navigation through your talk. Show how you intend to begin, where you intend to lead the audience and how you plan to get there. The outline may be provided in a separate attachment and may be as simple as a text file or as detailed as a "bare bones" presentation. The better your outline then the better we are able to best review your presentation against other submissions (and the higher chance you have of being accepted). SUBMISSION NOTE: Presentations that are submitted without abstracts, outlines, or speaker bios (e.g., that have only PDFs, PPTs, or white papers attached or only point to a URL) will not be considered. Supporting File(s): Additional supporting materials such as code, white papers, proof of concept, etc. should be sent along with this email to cfp2015[at]wallofsheep[dot]com. Note that additional files that may help in the selection process should be included. We are not asking for a complete presentation for this initial submission. That will only be required if you are selected for presenting. #Terms and Conditions By submitting you agree to the Terms and Conditions below. Please read and accept these terms by inserting your name in the appropriate area, otherwise your application will be considered incomplete and returned to you. ##Grant of Copyright Use I warrant that the above work has not been previously published elsewhere, or if it has, that I have obtained permission for its publication by DEF CON Communications, Inc. and the Wall of Sheep and that I will promptly supply DEF CON Communications, Inc. and the Wall of Sheep with wording for crediting the original publication and copyright owner. If I am selected for presentation, I hereby give DEF CON Communications, Inc. and the Wall of Sheep permission to duplicate, record and redistribute this presentation, which includes, but is not limited to, the conference proceedings, conference CD, video, audio, and hand-outs to the conference attendees for educational, on-line, and all other purposes. ##Terms of Speaking Requirements 1. I will submit a completed (and possibly updated) presentation and a reference to all of the tool(s), law(s), Web sites and/or publications referenced to at the end of my talk and as described in this CFP submission by noon PST, July 31st, 2015. 2. I will submit a final Abstract and Biography to the Wall of Sheep by noon PST, July 31st, 2015. 3. I will include a detailed bibliography as either a separate document or included within the presentation of all resources cited and/or used in my presentation. 4. I will complete my presentation within the time allocated to me - not running over the time allocation. 5. I understand that the Wall of Sheep will provide 1 LCD projector feed, 2 screens, and microphones. I understand that I am responsible for providing all other necessary equipment, including laptops and machines (with VGA output), to complete my presentation. 6. I understand that I will be responsible for my own hotel and travel expenses, and admissions to the DEF CON Conference. Yes, I, (insert primary speaker name), have read and agree to the Grant of Copyright Use. I, (insert your name here), have read and understand and agree to the terms as detailed in the Agreement to Terms of Speaking Requirements. In the case that a speaker is a child under the age of 13 years old: in compliance with the Children's Online Privacy Protection Act (COPPA) regulations, http://www.coppa.org, any child under age 13 must have parental consent for the collection, use, or disclosure of that child's personal information by a website. Parent/Guardian Consent: I (insert parent/guardian's name here) am the parent or guardian of the minor/s named above. I have read and understand and agree to the terms as detailed in the Agreement to Terms of Speaking Requirements. _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/

2 1

whisper.sh it
by coderman 24 Mar '15

24 Mar '15

http://www.xipiter.com/musings/a-confederacy-of-privacy-dunces-what-we-foun… ''' ... Vendor contacts Xipiter directly, acknowledges some (but not all) severity of Xipiter's vulnerabilities and offers Xipiter "reward" (which undoubtedly would come with non-disclosure conditions) ... Xipiter, fed up with how long things were taking for the article, just posts everything here. We found many more vulns like this in other apps (and Senrio has many alerts in the queue for us to investigate) and we want to get to them all, but we have to get back to our actual work.. '''

1 0

NSA Pre-Releases 24 William Friedman Docs, 909 pp
by John Young 23 Mar '15

23 Mar '15

NSA Pre-Releases William Friedman Docs 909 pp (PDF, 50MB) <http://cryptome.org/2015/03/nsa-friedman-15-0323.pdf>http://cryptome.org/2015/03/nsa-friedman-15-0323.pdf 24 Papers of 52,000 pp due in April 2015 <https://www.nsa.gov/public_info/declass/friedman_documents/index.shtml>https://www.nsa.gov/public_info/declass/friedman_documents/index.shtml

1 0

For whom the Book Tolls
by Steven Schear 23 Mar '15

23 Mar '15

Jim, Forgot to mention the book title: GrayNet by D.S. Kane http://www.dskane.com/fiction.php Steve

2 1

Re: Firefox 36+ listens on UDP:1900
by Shelley 23 Mar '15

23 Mar '15

On March 23, 2015 7:01:15 AM Georgi Guninski <guninski(a)guninski.com> wrote: > Firefox 36+ listens on UDP:1900, which appears SSDP. > > Search the web or check the fiasco: > https://bugzilla.mozilla.org/show_bug.cgi?id=1111967 > > This well might have privacy and/or security implications. > >>>>> As is probably known, my opinion of Firefox is close to that of exploder.<<<<< Mine too, Georgi. I stopped using it years ago, long before their homophobic employee scandal. (There *were* LGBT boycotts of FF, hence his departure.) -Shelley

2 1

Secret service scandal of March 2015
by Georgi Guninski 23 Mar '15

23 Mar '15

http://www.npr.org/blogs/thetwo-way/2015/03/11/392395433/secret-service-age… <quote> There's another scandal at the Secret Service. The Washington Post is reporting that the administration is looking into claims that two senior agents, including one who is a member of President Obama's detail, drove a government car into security barricades at the White House after drinking at a party on March 4. </quote> Comments: As someone suggested in another thread, it would be funnier if they were on russian vodka or even on bulgarian rakia (in cyrillic "ракия").

2 1