May 2015 - cypherpunks - lists.cpunks.org

Surveillance Law
by grarpamp 20 May '15

20 May '15

https://surveillancelaw.org/ Perhaps 2014 is not quite 1984, though. This course explores how American law facilitates electronic surveillance—but also substantially constrains it. You will learn the legal procedures that police and intelligence agencies have at their disposal, as well as the security and privacy safeguards built into those procedures. The material also provides brief, not-too-geeky technical explanations of some common surveillance methods.

7 7

[Bitcoin-development] Virtual Notary.
by Eugen Leitl 20 May '15

20 May '15

----- Forwarded message from Emin Gün Sirer <el33th4x0r(a)gmail.com> ----- Date: Wed, 20 May 2015 06:25:01 -0400 From: Emin Gün Sirer <el33th4x0r(a)gmail.com> To: Bitcoin Dev <bitcoin-development(a)lists.sourceforge.net> Subject: [Bitcoin-development] Virtual Notary. Message-ID: <CAPkFh0tWykVJU-9mCTR95eqUF0B5TO-ZO7B3L0wf_QYAmAuuBA(a)mail.gmail.com> Hi everyone, Given the recent discussions on projects that use the Bitcoin blockchain to record factoids, people on this list might be interested in the Virtual Notary project. Virtual Notary is essentially an online witness (aka attestor) to online factoids. It can provide: * proof of Bitcoin funds (without revealing public addresses or fund location on the blockchain) * proof of Bitcoin address ownership * proof of Tweet * proof of real estate value * proof of DNS ownership * proof of existence * proof of web page contents * proof of weather conditions The factoids can be recorded on the blockchain (if you pay for the transaction with Bitcoin or PayPal), or they can be part of a free attestation chain that we maintain. The website provides a permanent URL to the factoids it generates; it also provides an X.509 certificate that you can download and keep safe in perpetuity, independent of the website. The link to the website is here: http://virtual-notary.org The link to the writeup describing the various factoids and their use cases is here: http://hackingdistributed.com/2013/06/20/virtual-notary-intro/ We are actively looking for people who are interested in developing the service further. Specifically, if you have suggestions for how to extend the service, for new proof/factoid types, or for how to build a business case around the core idea, please let us know. Best, - egs ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ Bitcoin-development mailing list Bitcoin-development(a)lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bitcoin-development ----- End forwarded message -----

1 0

"I don't like IKE!"
by coderman 20 May '15

20 May '15

https://www.altsci.com/ipsec/ : if (iph1->rmconf->proposal->gssid != NULL) { Fuzzers missed this. Hackers missed this. Believe you me, I would have missed it if I wasn't diligent and lucky...

1 0

Worker fired for disabling GPS app that tracked her 24 hours a day | Ars Technica
by L0R3NZ 5Z4B0 19 May '15

19 May '15

Wow!!! ~BizDevCon http://arstechnica.com/tech-policy/2015/05/worker-fired-for-disabling-gps-a… Worker fired for disabling GPS app that tracked her 24 hours a day A Southern California woman claims she was fired after uninstalling an app that her employer required her to run constantly on her mobile phone—an app that tracked her every move 24 hours a day, seven days a week. Plaintiff Myrna Arias, a former Bakersfield sales executive for wire-transfer service Intermex, claims in a state court lawsuit that her boss, John Stubits, fired her shortly after she uninstalled the job-management Xora app that she and her colleagues were required to use. According to her suit (PDF) in Kern County Superior Court: After researching the app and speaking with a trainer from Xora, Plaintiff and her co-workers asked whether Intermex would be monitoring their movements while off duty. Stubits admitted that employees would be monitored while off duty and bragged that he knew how fast she was driving at specific moments ever since she installed the app on her phone. Plaintiff expressed that she had no problem with the app's GPS function during work hours, but she objected to the monitoring of her location during non-work hours and complained to Stubits that this was an invasion of her privacy. She likened the app to a prisoner's ankle bracelet and informed Stubits that his actions were illegal. Stubits replied that she should tolerate the illegal intrusion….. Intermex did not immediately respond for comment. The suit, which claims invasion of privacy, retaliation, unfair business practices, and other allegations, seeks damages in excess of $500,000 and asserts she was monitored on the weekends when she was not working. Arias' boss "scolded" her for uninstalling the app shortly after being required to use it, according to the suit. Her attorneys said the woman made $7,250 per month and that she "met all quotas" during a brief stint with Intermex last year. "This intrusion would be highly offensive to a reasonable person," the filing said.

4 5

Nuclear security
by Lodewijk andré de la porte 19 May '15

19 May '15

https://wikileaks.org/trident-safety/ I'd like to dedicate this moment to all the time you and I have wasted on using a secure process, rather than just not giving a damn. Then ask you "what do you think you could have done with that time instead?", given the knowledge that the primary deterrent is fear - not actual security. See now, *they *are not wasting much of their time on security. Compete. (note: shaming and blackmailing you when the time is right is real, and extremely hard to avoid. Be prepared to have your whole history, in minute details, used against you. Provided there's ever any reason, that is. Until then, though, what can they do?)

5 5

NYT on Nick Szabo and Bitcoin
by John Young 18 May '15

18 May '15

<http://t.co/2zgTpKDPaa>nytimes.com/2015/05/17/business/decoding-the-enigma-of-satoshi-nakamoto-and… Those around cypherpunks 1993-1998 will recall Szabo's emails on bitcoin early precursors along with Adam Back, Hal Finney, Tim May, Wei Dai, Lucky Green, Hettinga, many more burgeoning F-Cs. NYT piece credits cpunks as subversive birther, now being hyper-monetized by arch-cryptoanarchist Goldman Sachs and many more centralists. Szabo denies being Satoshi, but ... others rush to fill the gap

2 1

noscript is 10 years!
by stef 17 May '15

17 May '15

happy bday! also i like this quote: > 08/06/2008, "I'd love to see it in there." (Window Snyder, "Chief Security > Something-or-Other" at Mozilla Corp., interviewed by ZDNet about "adding > NoScript functionality into the core browser"). how utterly depressing that we still don't have this, but have drm and rounded fucking tabs, features that require you to disable grsec/pax protections, and other goddamn useless crap. anyway, happy bday noscript! -- otr fp: https://www.ctrlc.hu/~stef/otr.txt

6 7

Watching the watchers: spook database
by Bethany 16 May '15

16 May '15

This is good clean fun. Watch: https://www.youtube.com/watch?v=xipI-0HU010 Kurzthese: Secret surveillance programs have metadata too. The same people and companies that operate secret surveillance programs also publish details about their work on the open internet. We can use this data to watch the watchers. Beschreibung: “Proficient in Microsoft Word and Xkeyscore” and similar phrases are surprisingly common on LinkedIn profiles. NSA contractors, military, and others involved in the surveillance state post seemingly coded and harmless details about their work in job listings, social media, and other open websites. But this information provides useful metadata that can be used to understand the function of secret programs and map the surveillance state. Transparency Toolkit has been building open source tools to collect and analyze this open source intelligence. This talk discusses how we can use these data sources and tools to build a sousveillance state that holds the surveillance state accountable.

7 8

Fwd: Rare Historical Film: 1932. US military attacks demonstrating American War Veterans.
by Zenaan Harkness 14 May '15

14 May '15

----- Original Message ----- Subject: Fwd: Rare Historical Film - of a very sad time This is exactly how our country treats us, as slaves. Has always been this way - especially the western cartel. ----- Forwarded Message ----- Date: Mon, 11 May 2015 23:18:47 -0500 Subject: FW: Rare Historical Film - of a very sad time Come on, vets. Watch this!! It is only 6 to 7 minutes long! This shows you just what Washington DC (today, Tel Aviv West) will do to American patriots!! And this assault on American citizens (VETERANS of WW1!!) should awaken you to the fact that you are NOT safe from the Federal Government. If McArthur, Eisenhower, and most of all – Patton – attack and kill veterans, WHERE is safety??? Answer – there is none! Too bad the people involved in this protest were not armed to the teeth. They were fighting men, so they undoubtedly could have slaughtered the politically-correct troops of the Establishment. If you think things are different today – think again. DC is directed NOT by representatives of WE, THE PEOPLE, but by those who toe the line to “multiculturalism” and political correctness. Right or wrong does NOT matter. Truth is no defense. It is whatever the big-boy capitalists and their blood-brothers, the communists, want. Suck it up and go back to sleep. __________ Hi, I know and don't need to see the video. Maybe you know, too. The background is this: World War I veterans were promised certain benefits to be paid during their lifetimes. In the midst of the long Depression, for relief of extreme need, they asked for lump sum payments. President Hoover refused. Thousands of veterans gathered in Washington, D.C. to press their cause. They pitched a tent city in Arlington. Hoover ordered in troops to disperse the settlement. MacArthur led. Everything burned, many killed. V. US military attacks demonstrating American War Veterans FANTASTIC NEWS VIDEO: 1932 - young Patton, young Eisenhower, young MacArthur, President Hoover - Walter Winchell reporting. I don't recall this from any history classes. Do you think our military, acting on orders from a broken federal gov't, will NOT march against our own citizens?? Think what you want to, but THIS DID HAPPEN only a couple of generations ago. http://www.youtube.com/watch_popup?feature=player_embedded&v=sNOsIB5VMSQ "Loyalty to country ALWAYS. Loyalty to government, when it deserves it." -- Mark Twain

2 1

Subject: Re: Watching the watchers: spook database
by Softy 14 May '15

14 May '15

Specifically job hunters/HR department types. They lack the opsec training. And, inspite of never having had a clearance or working in an agency (mostly), they usually learn of coverterms/project names which managers are hiring from because even thouse with training often slip or don't know. Then the HR people use those terms for attention getting of possible candidate - and everyone wants to appear "in the know" as to be credible. > Beschreibung: > “Proficient in Microsoft Word and Xkeyscore” and similar phrases are > surprisingly common on LinkedIn profiles. NSA contractors, military, and > others involved in the surveillance state post seemingly coded and > harmless details about their work in job listings,

5 6