November 2016 - cypherpunks - lists.cpunks.org

moving on
by Riad S. Wahby 06 Dec '16

06 Dec '16

Folks, After 15+ years running a cypherpunks node, it's quitting time for me. I plan to delete the mailman aliases on September 30th. If anyone is interested in migrating the list to his or her machine before then, that would be great; let's discuss on-list. -=rsw

23 73

Hi, Boyce! (was Fwd: tor-talk subscription update)
by Cecilia Tanaka 05 Dec '16

05 Dec '16

Lovely sweet guy. Hope he is honest enough to expose exactly who were the people banned in tor-talk list. Boyce, please, just pro-Jake people were banned or it was just a lovely coincidence? How about a bit of transparency, please? Thanks in advance! Cecilia ---------- Forwarded message ---------- From: "Griffin Boyce" <griffin(a)cryptolab.net> Date: Jun 22, 2016 4:46 PM Subject: tor-talk subscription update To: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 To whom it may concern, You have been removed from the tor-talk mailing list for persistent off-topic posts and I encourage you to spend your time elsewhere. Do not re-subscribe to the list. best of luck, Griffin - -- “We have to create; it is the only thing louder than destruction.” ~ Andrea Gibson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJXaup/AAoJEAPPSgqzx5pjRBAH/jtlRw70yVDL9d62mgHPA3uo fiab3QDDjw04tKMbEGqwGEEHpOKn3nP6bynxGiwUi2Xsp7f3HHi1UD7c79n9cFsp RHqRNpYvLP81eABIpcany0Z2mmI9uVZs0ccirVMcq3YK10ADtG7zYujl6KBgCDWl M6FGWnmLEFa8vw24ia+6lEukARJ2nXTIFMrDisfbQ7bkJFSHaGGsenuy66yde2zS uECH1C/98f5RtZDv7NJJtTebbAPZMSnBQVYU3//ossTG7OFI60EPYAPH3xPdpS3/ zuocWagHiL1KYvqkoxCm3qWv7k9c7CvUhEJXgy4dhGQEljDdu3UsVsV8PPheDcM= =lKWK -----END PGP SIGNATURE-----

10 48

Fwd: Re: [tor-talk] Javascript exploit
by Mirimir 05 Dec '16

05 Dec '16

FYI -------- Forwarded Message -------- Subject: Re: [tor-talk] Javascript exploit Date: Wed, 30 Nov 2016 14:28:52 -0500 From: Roger Dingledine <arma(a)mit.edu> Reply-To: tor-talk(a)lists.torproject.org To: tor-talk(a)lists.torproject.org On Wed, Nov 30, 2016 at 12:08:00PM +0000, Georg Koppen wrote: > FWIW: We plan to release 6.0.7 with the patch Mozilla developed in a > couple of hours. Updates to the alpha and hardened series will we > provided as well thereafter. Update: * The blog post about the 6.0.7 Tor Browser update will go up any moment. I see that the Tor Browser team has already put the packages in https://dist.torproject.org/torbrowser/6.0.7/ * It looks like the vulnerability was in Firefox's SVG animation, so the exploit does not work unless you have both svg and javascript enabled. The "high" setting of Tor Browser's security slider disables both of these pieces of the browser. * It looks like the exploit code went up on pastebin on Monday morning, and Mozilla worked on a patch yesterday, and updates to Firefox and Tor Browser and Tails are coming out today. The exploit only worked on Windows, but the vulnerability exists for Windows, OS X, and Linux. In the meantime, if you slide your security slider to high, you won't be vulnerable to this issue. --Roger -- tor-talk mailing list - tor-talk(a)lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

3 2

Are there crypto discussions on this forum
by Igor Chudov 02 Dec '16

02 Dec '16

Hi, I am Igor Chudov, a great while ago I was involved in running this mailing list via my proposal of a distributed list. Then junk messages became too time consuming and I got busy. I decided to subscribe to take a peek recently, and wanted to ask if this mailing list has bona fide discussions of cryptography, its role in the modern economy, finance and politics, etc. Thanks

14 39

Fwd: Re: [tor-talk] Javascript exploit
by Mirimir 01 Dec '16

01 Dec '16

FYI -------- Forwarded Message -------- Subject: Re: [tor-talk] Javascript exploit Date: Wed, 30 Nov 2016 14:39:26 -0500 From: Roger Dingledine <arma(a)mit.edu> Reply-To: tor-talk(a)lists.torproject.org To: tor-talk(a)lists.torproject.org On Wed, Nov 30, 2016 at 02:28:52PM -0500, Roger Dingledine wrote: > * The blog post about the 6.0.7 Tor Browser update will go up any > moment. I see that the Tor Browser team has already put the packages in > https://dist.torproject.org/torbrowser/6.0.7/ And there it is: https://blog.torproject.org/blog/tor-browser-607-released --Roger -- tor-talk mailing list - tor-talk(a)lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

2 1

New Firefox/TorBrowser 0day in the wild
by Ben Mezger 01 Dec '16

01 Dec '16

"This is an Javascript exploit actively used against TorBrowser NOW. It consists of one HTML and one CSS file, both pasted below and also de-obscured. The exact functionality is unknown but it's getting access to "VirtualAlloc" in "kernel32.dll" and goes from there. Please fix ASAP. I had to break the "thecode" line in two in order to post, remove ' + ' in the middle to restore it." https://lists.torproject.org/pipermail/tor-talk/2016-November/042639.html -- Kind regards, Ben Mezger

5 5

CCs being stripped from some list messages - policy?
by Zenaan Harkness 01 Dec '16

01 Dec '16

Anyone know whos CCs get through, and whos don't? Evidently some (or all) of mine do not come through, such as my CC to Mirimir on the email below. Riad, what's the status (I've also CCed you on this email)? Thanks, Zenaan On Wed, Nov 30, 2016 at 12:57:06PM +1100, Zenaan Harkness wrote: > On Tue, Nov 29, 2016 at 06:52:59PM -0700, Mirimir wrote: > > On 11/29/2016 05:38 PM, Cecilia Tanaka wrote: > > > On Tue, Nov 29, 2016 at 4:48 PM, Mirimir <mirimir(a)riseup.net> wrote: > > > > > >> On 11/29/2016 10:26 AM, John Newman wrote: > > >>> BLAH BLAH BLAH > > >>> > > >>> TL Did not fucking read > > >> > > >> Yes, he is totally full of shit. I wish that people wouldn't reply to > > >> him. Then I wouldn't even know that it was there ;) > > >> > > > > > > I created a lovely, gorgeous, supercalifragilisticexpialidocious > > > > > > filter to send Zzz's garbage directly to my trash, but all the times when > > > someone replies to him, my poor inbox feels sad... Snif, snif! :( > > > > I'm filtering now on both From and Body :) > > How? Can this be done with procmail? > > -- > Certified (R) Deplorable (TM) Fake News (TM) Which Hunter (C) > Executive Director of Vice, Ministry of Winning > Shilling for buxom Russian swastika clad minxes since 1488 -- Certified (R) Deplorable (TM) Fake News (TM) Which Hunter (C) Executive Director of Vice, Ministry of Winning Shilling for buxom Russian swastika clad minxes since 1488

4 3

Rising carbon dioxide is greening the Earth - but it's not all good news
by xorcist at sigaint.org 30 Nov '16

30 Nov '16

> John Newman: > read the links you sent? They ar as Zordon suggested "Zwallys team calculated that the mass gain from the thickening of East Antarctica remained steady from 1992 to 2008 at 200 billion tons per year, while the ice losses from the coastal regions of West Antarctica and the Antarctic Peninsula increased by 65 billion tons per year" "They also used information on snow accumulation for tens of thousands of years, derived by other scientists from ice cores, to conclude that East Antarctica has been thickening for a very long time" > full of shit Like when say oposight of what is said, lol

6 10

free speech champignons, Charlie Hebdo launches German language edition
by Zenaan Harkness 30 Nov '16

30 Nov '16

The right to mock, satire and poke fun at everything is one of the great litmus tests of our right of free speech. Charlie Hebdo hit the headlines for the wrong right reasons last year, sadly, and so the continuation and internationalization of this bastion is a great day indeed. Hopefully we will see some more insanity from the German government in the weeks to come, as Charlie Hebdo takes on Sultan Erdogan. One hopes they will do an English language print version also, for me - so that I can read it. Because you know winners like me are the most important pople in the world, especially lauded in my humility classes - to which you might as well sign up now :-D Charlie Hebdo Launches German Edition, Merkel Front Cover http://www.breitbart.com/london/2016/11/29/charlie-hebdo-launches-german-ed… https://charliehebdo.fr/ https://charliehebdo.fr/en/ -- Certified (R) Deplorable (TM) Fake News (TM) Which Hunter (C) Executive Director.Vice, Ministry of Winning Shilling for buxom Russian swastika clad minxes (C) 1988

1 0

Neutralize ME firmware on SandyBridge and IvyBridge platforms
by qubenix 30 Nov '16

30 Nov '16

Hello, I'm new to the list. Here is my first contribution. Neutralize ME firmware on SandyBridge and IvyBridge platforms - http://hardenedlinux.org/firmware/2016/11/17/neutralize_ME_firmware_on_sand… "... The Intel Management Engine with its proprietary firmware has complete access to and control over the PC: it can power on or shut down the PC, read all open files, examine all running applications, track all keys pressed and mouse movements, and even capture or display images on the screen. And it has a network interface that is demonstrably insecure, which can allow an attacker on the network to inject rootkits that completely compromise the PC and can report to the attacker all activities performed on the PC. It is a threat to freedom, security, and privacy that can’t be ignored. ..." Https is also working, but cert is for Github and needs an exception. I guess the site is hosted from github.io or something. Anyway I don't like to promote the blind acceptance of warned certs, and I have no way to verify the fingerprint. So at your own risk... -- qubenix GPG: B536812904D455B491DCDCDD04BE1E61A3C2E500

2 1