May 2015 - cypherpunks - lists.cpunks.org

Of secrets, FOIA, history... and bombs
by grarpamp 29 May '15

29 May '15

http://blog.nuclearsecrecy.com/2015/01/09/oppenheimer-unredacted-part-i/

2 2

Who wants to live forever?
by grarpamp 29 May '15

29 May '15

http://science.slashdot.org/story/15/05/28/2252259/ask-slashdot-what-happen… http://science.slashdot.org/story/15/05/28/0036204/scientists-reverse-aging… https://www.youtube.com/watch?v=I_Qe6yDz1HI

1 0

First they came for your multimedia...
by grarpamp 29 May '15

29 May '15

http://torrentfreak.com/high-court-orders-uk-isps-to-block-ebook-sites-1505… http://libgen.org/ http://en.bookfi.org/ http://freshwap.ws/ http://www.freebookspot.es/ http://ebookee.org/ http://bookre.org/ http://avxhome.se/ The multimedia filesharing hubs don't seem to be putting up much of legal fight on principle. So why do they keep popping up to be whack a mole? When will they shift to anonymizing networks like I2P, Gnunet, Phantom, Tor?

3 3

Re: [cryptome] US World Political Jurisdiction
by BizDevCon 29 May '15

29 May '15

The USA is historically chasing companies and individuals laundering money or paying bribes using "US networks for money transfer" aka SWIFT. One of the most prolific cases with SWIFT was the USA versus the Swiss company ABB. If the USA cannot get a handle they will submit the case back to the country of origin's justice department. On the first look of the FIFA case it shows that it is mostly about South American individuals and multi-national companies â all having ties back to the USA. It is a developing story thoughâ¦ â BizDevCon -------- Original Message -------- Subject: Re: [cryptome] US World Political Jurisdiction Time (GMT): May 29 2015 04:47:21 From: afalex169(a)gmail.com To: cryptome(a)freelists.org, cypherpunks(a)cpunks.org http://cryptome.org/2015/05/putin-us-fifa-assange-snowden.htm On the "FIFA CASE", Douglas Rankine wrote some very important words: As international law develops throughout the world, the power of a global arrest warrant will increase and its jurisdiction and extent and use will also increase. One awaits the day when it will be used against Russia, China or India. Switzerland is a small country and although having many rich and powerful institutions, is falling far behind the big players on the world scene. Assange, and wiki leaks and reporters and journalists and whistleblowers all over the world, beware, this doctrine applies not only to terrorists, child molesters and criminals. Big brother is not only watching you, but he is recording your every move, and whenever or wherever you get in his way, he will get you... It relates to many people on this list. Be aware. Or should I say "be careful"? .

1 0

Privacy Centric Naming of Humans
by grarpamp 28 May '15

28 May '15

The common naming triple of First Middle Last may result in more uniqueness than desired... a life sentence imposed upon you by parents unaware of privacy, databasing, freedom to reassociate, and related issues. What of defense of naming with the minimum number of bits required, in the minimum number of fields required? For example, on that root of all human databases, the typical birth certificate. You could be "a j smith" or "t jones", perhaps even "no name", "a b", or simply "a". Perhaps even numbers or any UTF-8 chars. You could expand, change and interpret them in future daily context as desired or useful, such as "t" to "tom", "tony", "terry". There are metrics to be applied such as "a" being the first in sort order, and "t" being the last character with any common frequency. And flexible phonetics that sound like names such as "d" for "dee", "j" for "jay", "l" for "elle". And where your minimum is less than some state or clerk idea of minimum, useful ambiguity can still be injected with things like gender "pat", "morgan", and shorthand "ed (eddie, edward...)", "jane (janel, janelle, janet...)".

2 2

Re: [Cryptography] Dark Web should really be called the Twilight Web
by grarpamp 28 May '15

28 May '15

On Wed, May 27, 2015 at 11:08 PM, Phillip Hallam-Baker <phill(a)hallambaker.com> wrote: > Tor certainly works for some of its intended uses. If you are in a > repressive state and want to get access to CNN or the like, Tor is your > friend. It isn't going to prevent a police state noticing that you might be > up to some sort of unapproved activity but they won't be able to tell the > difference between a dissident and someone surfing for porn etc. So it is > useful and reduces risk in countries like Iran or Russia. But using it in > North Korea would mean risking a death sentence. > > Where I don't see Tor being remotely safe is trying to operate an online > Drug bazar as a hidden service. I mean seriously guys, cryptography isn't > magic and traffic analysis is a very effective tool. Tor is still going to > help your customers keep their identity secret but it isn't going to stop a > determined law enforcement team with pervasive Internet access tracking down > your server. Not when the hidden service is trying to become a consumer > brand with global reach. > > So I think a change in terminology is needed. It is not just that people are > not taking security precautions due to a false sense of security, some > people are ordering up mob hits because they think they are in a permissive > environment that is accountability free. > > Rather than calling it the dark web, the term Twilight Web seems more > appropriate to me. It is possible to hide but only if you know how and only > among the trees. For whatever part of your threat models above includes global passive adversary watching the input and output points of your network of choice and lining up traffic observations... there is little defense to be taken other than filling your unused capacity with fill traffic. No network to date appears to be developing or using that defense. There have been threads on that within the last year, and even one on making such background fill a part of IEEE for fiber and copper physical links.

3 3

Firefox will scan your browsing history to suggest advertiser sites
by stef 28 May '15

28 May '15

i hope the torbrowser will have soon patches to disable this disgrace: http://www.digitaltrends.com/computing/firefox-will-scan-your-browsing-hist… -- otr fp: https://www.ctrlc.hu/~stef/otr.txt

5 5

Re: Apple At-Rest Encryption
by BizDevCon 28 May '15

28 May '15

Polemic question: how do you want to propose default File Vault encryption when I see most people using 0000 as their default iPhone password? Real question: using encryption also forces one to thing about a proper backup strategy. And where will the average user store his FileVault key for each device? I remember one service (not sure which one) which forces you to store and print a backup key. You cannot / could not copy and paste: disabled! (I think it was even some Apple service.) Default File Vault is neat but forget "recovering" stuff when your wife/kid/mom/dog forgets the passcodeâ¦ The recent death of my father also made me think of implementing a "two-level" personal privacy: 1) Things you want others like relatives to have access to in the ultimate scenario of death. 2) Things you want to keep private forever. My dad never thought about such and his social accounts are as much protected as mundane information on insurance information of a shared property. In other words: I have a hard time unbundling everything and I am even thinking of taking a strong magnet and let it do the final task on his iMacâ¦ Long post, short summary: we need to rethink storing personal information before enabling things like File Vault for everyone. â BizDevCon -------- Original Message -------- Subject: Re: Apple At-Rest Encryption Time (GMT): May 28 2015 05:01:13 From: jon(a)callas.org To: anx(a)riseup.net CC: cypherpunks(a)cpunks.org > On May 25, 2015, at 1:11 PM, anx wrote: > > What are some bottlenecks to Apple turning on File Vault by default? I > can only come up with "battery life." You should turn it on. The battery effect on the CPU is negligible; itâs using AES-NI in the processor and thatâs running at less than one clock per byte. But if youâre on a computer that has flash â like any of the Air/Retina machines â the write time and power requirements of NAND flash are much better when you use a whitening function, of which AES makes a great one. But in any event, itâs all going to be not worth worrying about in the costs. You might even benefit. You are also gaining in the security end. We can certainly debate whatever the operational security benefits are from encrypting your disk, but the real benefit comes from when you inevitably decommission that machine and storage. You are vastly, vastly better off with encrypted storage then, and better off for having encrypted it all along. Jon

1 0

Apple At-Rest Encryption
by anx 28 May '15

28 May '15

What are some bottlenecks to Apple turning on File Vault by default? I can only come up with "battery life." --Anx

3 2

Basic income (was) Re: noscript is 10 years!
by Troy Benjegerdes 27 May '15

27 May '15

On Sun, May 17, 2015 at 03:55:23PM -0400, grarpamp wrote: > On Sun, May 17, 2015 at 1:37 PM, John Young <jya(a)pipeline.com> wrote: > > NYT today has book review on gradual replacement of humans > > by robots, a beloved investment of those at the top, so John Deere > > Shame no one properly broke the last 3-5 messages off into a > separate thread when it went off noscript. > > What will happen to the 7000000000 unpaid system redundancies? We don't need the money, the money needs us, and I expect something like 6,999,999,900 redundancies will suddenly find themselves with various forms of basic income guarantees once the money finally figures out it's automating itself out of job, and realizes it needs to start giving the HCF (human confinement farms) money or humans are going to stop spending it, and this, my friends, would be the end of money. What's important for this cypherpunk is to figure out how to make sure we have alternatives and free choice to leave the HCFs and choose among many basic income systems, or make the choice to not use money at all. Are blockchains a reasonable thing to build a basic income system on? How do you ensure a blockchain private key is held or controlled by only one person, so that one cannot simply create many anonymous IDs and collect several hundred basic income guarantees? It seems there must be a human factor, and something that looks a lot like a government, but I can't quite wrap my head around how to make sure each of those 7e9 redunancies can only create 7e9 basic income generating accounts, and do a moderately good job of identifying and stopping those that try to collect, via force, coercion, or deceit, more than their share of basic income.

6 6