September 2015 - cypherpunks - lists.cpunks.org

Fw: WiFi router networking?
by jim bell 22 Sep '15

22 Sep '15

Has anyone heard of an idea to use individual WiFi routers to communicate in a mesh net? (Or, at least differently than it may have been done before.) If you look at a map of WiFi routers (www.wigle.net) in any given area, you will see that the vast majority of routers are physically close to many other routers, certainly close enough to communicate with each other, and ultimately over a long distance. A crowd-sourced communication system, one that wouldn't necessarily go through the Internet backbone. Conceptually related to the Bittorrent system. I just found this: https://en.wikipedia.org/wiki/Wi-Fi_Direct Jim Bell >From that URL: "Wi-Fi Direct, initially called Wi-Fi P2P, is a Wi-Fi standard enabling devices to easily connect with each other without requiring a wireless access point.[1] It is usable for everything from internet browsing to file transfer,[2][3] and to communicate with more than one device simultaneously at typical Wi-Fi speeds.[4] One advantage of Wi-Fi Direct is the ability to connect devices even if they are from different manufacturers. Only one of the Wi-Fi devices needs to be compliant with Wi-Fi Direct to establish a peer-to-peer connection that transfers data directly between them with greatly reduced setup.[citation needed] Wi-Fi Direct negotiates the link with a Wi-Fi Protected Setup system that assigns each device a limited wireless access point. The "pairing" of Wi-Fi Direct devices can be set up to require the proximity of a near field communication, a Bluetooth signal, or a button press on one or all the devices. Wi-Fi Direct may not only replace the need for routers, but may also replace the need of Bluetooth for applications that do not rely on low energy.[5]"

6 10

Key Compromise Related to Architectural Work Not Cryptome
by John Young 21 Sep '15

21 Sep '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 18 September 2015 Key compromise is related to our architectural work on NYC No. 7 Subway Line Extension, recently opened. Project had hundreds of designers from around the world with access to files. Security of the project is primary and its design is not public. Extent of subway system security and file protection is restricted to need to know. JYA and Cryptome passphrases remain secure. Key revocation done for caution. -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wsFVAwUBVfvtaEkY+k7YfUNsAQjkqw/+I90Q5v4SQcHAELBruCpLxTb0Jf1HgWGO s/s9/OopvG8q/hhVWjG+cuzNgueJcjbHfpdO4SZcBJyQnfcMSuXG0qBat0BKzpOM ZFIRZ2T8pdnOhs5KJZgvzPReIdKzmg33jPfMYnmRtoj3xap/dkf5fhXteuEygUys k/+4khl13VLfdwZMnnGXjRjm67Tw75Mmd9X7KQFK9N5AkZBiassYLtXIC7MjZA5e HFnKVrrIIViA4Q9/3hEGgMkhGFxXEjclcSJiqxdtgZJHChAf/ERAkC4TrK9NvPXL NqvDU/+iYX3PiSx/6UZ8uNyD8JaZN7knlIvOlkdHRz5aqYEfxPNohCTEcBEXw7/I usqhTFe3IiXrgWz/YWVU+GhokpRqObTa07u3fO7XOsK1DobiADhSOKK6IFci+tzt H6LPiC3Wbw8P3Tss7sW64YCrmy8Nslk2yOpof3yy5ru5PAFcVKVQPdSRb5oZX35U vMDljqOMozs0W0741hpnNebGBxSP/DofwteHtcxS+SAFW7Vx4Dk8PYLn0tnyasHT +9CD6qP1KUfJ1i/k51s7Z+P0NTURYkIV0mB5oFNiYJNwssSpnUEU4+a1XN9YMfu+ BuQ9MuHTIK2nIf+CAuOPGmfW3ibrOLrDLkq2NzCwe0E+Z/qEgbJaV6eAsbeHDWOW VjnWs2QRq5s= =b6Ih -----END PGP SIGNATURE-----

6 8

Is this crypto paper real or fake?
by Georgi Guninski 21 Sep '15

21 Sep '15

Found this from a DJB paper: http://www.scs.carleton.ca/~paulv/papers/JoC97.pdf Parallel Collision Search with Cryptanalytic Applications Paul C. van Oorschot and Michael J. Wiener CHECK THE DATE: 1996 September 23 p.1 The practical significance of the technique is illustrated by giving the design for three $10 million custom machines which could be built with current technology: one finds elliptic curve logarithms in GF(2^155) thereby defeating a proposed elliptic curve cryptosystem in expected time 32 days, the second finds MD5 collisions in expected time 21 days... --- I know the dollar is not what it used to be, but same applies to hardware IMHO Metadata of the PDF is in the future, suggests windows. This is paywalled: http://link.springer.com/article/10.1007%2FPL00003816 Journal of Cryptology January 1999, Volume 12, Issue 1, pp 1-28

3 4

Privacy Respecting Laptops
by Alfie John 21 Sep '15

21 Sep '15

Just saw these this morning: https://www.crowdsupply.com/purism https://puri.sm/ Although a physical switch to kill the webcam and mic seems obvious, this is the first laptop I've seen with them built in. Overall thoughts? Alfie -- Alfie John alfiej(a)fastmail.fm

11 15

Why libressl-2.2.3 and openssl-1.0.1p accept very weak elliptic curves?
by Georgi Guninski 20 Sep '15

20 Sep '15

Summary: libressl-2.2.3 and openssl-1.0.1p appear to accept elliptic curves which might be broken by Pollard's rho DL in O(2^56) or O(2^82) group operations Pollard's rho DL algorithm [1] solves discrete logarithm in O(\sqrt{n}) where n is the group order. Equivalently the complexity is O(2^{(log_2{n})/2}). Both libressl-2.2.3 and openssl-1.0.1p have curves with log_2{n}=112 and NIST curve with log_2{n}=163. Assuming Pollard's rho succeeds, the complexity is O(2^56) and O(2^82) group operations. The first is close to real time on ``nice hardware''. To reproduce: $ ~/inst/openssl-1.0.1p/apps/openssl ecparam -list_curves secp112r1 : SECG/WTLS curve over a 112 bit prime field sect163k1 : NIST/SECG/WTLS curve over a 163 bit binary field $ ~/inst/libressl-2.2.3/apps/openssl ecparam -list_curves|grep -i ' 1' secp112r1 : SECG/WTLS curve over a 112 bit prime field sect163k1 : NIST/SECG/WTLS curve over a 163 bit binary field For reference, http://comments.gmane.org/gmane.comp.security.cypherpunks/6101 Bitcoin networks surpasses 2^80 hashes per week I believe in an Edward model of EC, the group operation on the EC isn't much slower than Bitcoin SHA hash, so someone with such resources might break ...2r1 in nearly real time and ...3k1 in few weeks. This resembles the ``DSA oddity'' of _forcing_ q as low as 160 bits, giving the same level (to ...3k1) of security compared to DSA as shown at [2], search for "160" [1]: https://en.wikipedia.org/w/index.php?title=Pollard%27s_rho_algorithm_for_lo… [2]: https://j.ludost.net/blog/archives/2015/09/05/rfc-2631_fips_186-3_and_opens…

1 0

Hackers Convention, Parallel Polis Congress 2-4.10.2015 in Prague
by wirelesswarrior＠Safe-mail.net 20 Sep '15

20 Sep '15

I am scheduled to speak there on Sunday October 4th http://hcpp.cz/eng/

1 0

The tricky encryption that could stump quantum computers
by Ben Mezger 20 Sep '15

20 Sep '15

http://www.wired.com/2015/09/tricky-encryption-stump-quantum-computers/ + https://docbox.etsi.org/Workshop/2014/201410_CRYPTO/S07_Systems_and_Attacks… http://www.etsi.org/news-events/news/947-2015-03-news-etsi-launches-quantum… https://www.nsa.gov/ia/programs/suiteb_cryptography/ -- Sent with my mu4e

1 0

Re: Darryl W. Perry Calls for Ross Ulbrich to be Pardoned.
by wirelesswarrior＠Safe-mail.net 20 Sep '15

20 Sep '15

Lyn Ulbrich, Ross' mom, will be speaking at the Prague Hacker's Conference in early October http://hcpp.cz/eng/#section2 -------- Original Message -------- From: jim bell <jdb10987(a)yahoo.com> Apparently from: cypherpunks-bounces(a)cpunks.org To: Cpunks List <cypherpunks(a)cpunks.org> Subject: Darryl W. Perry Calls for Ross Ulbrich to be Pardoned. Date: Fri, 29 May 2015 19:20:42 +0000 (UTC) > > > > From: http://www.independentpoliticalreport.com/2015/05/darryl-w-perry-calls-for-… > > > > > Darryl W. Perry Calls for Ross Ulbricht to Be Pardoned > > > Ross Ulbricht > > From Darryl W. Perry’s 2016 presidential campaign website: > > In 2013 Ross Ulbricht was arrested for allegedly operating the black market website Silk Road. In early 2015 he was found convicted in what was essentially a kangaroo trial, where his attorney was prevented from presenting evidence of government corruption in the case, because of an ongoing investigation. Two of the federal agents investigating the case have since been arrested for fraud and money laundering. > Ulbricht’s lead defense attorney Joshua Dratel wrote in a court filing, “In contrast to the government’s portrayal of the Silk Road web site as a more dangerous version of a traditional drug marketplace, in fact the Silk Road web site was in many respects the most responsible such marketplace in history, and consciously and deliberately included recognized harm reduction measures, including access to physician counseling. In addition, transactions on the Silk Road web site were significantly safer than traditional illegal drug purchases, and included quality control and accountability features that made purchasers substantially safer than they were when purchasing drugs in a conventional manner.” > Meghan Ralston, a former harm reduction manager for the Drug Policy Alliance says Silk Roadwas “a peaceable alternative to the often deadly violence so commonly associated with the global drug war, and street drug transactions, in particular.” > Despite the improprieties in the investigation and the trial, and despite the fact that Ross Ulbricht actually made the black market safer, he will be in prison for a minimum of 20 years. The Ulbricht family has said they plan to appeal the conviction, however they shouldn’t need to do so. Ross Ulbricht should be pardoned, as should all non-violent drug offenders! > [end of quote] > > > > > > > > >

2 1

Fwd: Waking up
by Zenaan Harkness 20 Sep '15

20 Sep '15

Here's the full (20min, 60MB interview) youtube link from the bottom of the article below, which is kind of needed since then you can hear the full interview (the questioner and the other side): https://www.youtube.com/watch?v=KmQw6CryE9M USAGov/CIA lies - back then (August 2013) as we see in this interview team USA was saying 'We don't want regime change - we just want a limited (100 frigate-based missiles) strike against key Syria targets to send a message that chemical warfare is not ok', whilst: a) the leaked emails from a few days before the interview already showed that it was not Assad government, but 'terrorist' chemical warfare actions (not Assad govt) which also were a false flag done by CIA, and b) today we see team USA saying 'Assad must go, regime change is required to protect human rights' So team USA says what it wants, when it wants, in order to fuel more war, which in turn funds Lockheed, Raytheon etc. See here: http://www.usatoday.com/story/money/business/2013/03/10/10-companies-profit… "The business of war is profitable. In 2011, the 100 largest contractors sold $410 billion in arms and military services. Just 10 of those companies sold over $208 billion... These companies have benefited tremendously from the growth in military spending in the U.S., ... in 2000 $312 billion ... 2011 $712 billion ... #1 Lockheed Martin notched $36.3 billion in sales in 2011 " Them missiles are expensive, highly profitable. Zenaan ---------- Forwarded message ---------- Date: Thu, 17 Sep 2015 11:53:46 +0000 Subject: Fwd: Waking up Subject: Waking up http://beforeitsnews.com/alternative/2015/09/must-watch-ex-marine-goes-craz… "Ken O’ Keefe is a former US Marine turned anti-war campaigner who appeared on a Press TV debate called Syria: War of Deception, and absolutely owned his opponent in such an awesome way that you’ll be cheering at his every comment. Recorded in August 2013, this interview is now two years old, but in light of the current European refugee crisis it’s more relevant today than ever before. Passionate, articulate and knowledgeable about the subject matter, O’Keefe is the perfect guy to step up and tell these home truths...

4 4

How much/what hardware does the rowhammer DRAM bug affects?
by Georgi Guninski 19 Sep '15

19 Sep '15

This is old, but haven't seen it here. https://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bu… --- Rowhammer” is a problem with some recent DRAM devices in which repeatedly accessing a row of memory can cause bit flips in adjacent rows. It was able to use this to gain write access to its own page table, and hence gain read-write access to all of physical memory. --- There is POC. Variant via javascript: https://github.com/IAIK/rowhammerjs How much/what hardware does this bug affect?

6 22