May 2016 - cypherpunks - lists.cpunks.org

Re: [Cryptography] Hacking spread spectrum clocking of HW ?
by grarpamp 25 May '16

25 May '16

On 5/25/16, dj(a)deadhat.com <dj(a)deadhat.com> wrote: > It depends on the application. > CAZAC codes for stealth canaries anyone? > Cryptographic spreading codes and wide bandwidths are seen in military > *radiations*. *This*, moar liek this. Imagine noise radiator capable of making your spectrum analyzer look like /dev/urandom across the board. There's no center frequency, no clock, no freq hopping, no spreading, no observables, no off the shelf wireless hardware or reference design... it's not based on that. To any viewer, it's just noise. To you and your peers who hold, say, a shared XOR key for data and a seed for DRBG noise, it looks like data... lots of data ;-) With achievable datarate, error correction, and unjammability governed by the range of spectrum you can generate noise over. You could even mimic within existing spectra if need be. The amplifiers and radiators to cover the spectrum are hardware. Everything else is SDR. There is at least one good paper on this, particularly involving GNURadio style SDR as the enabling basis, but I forgot the magic search terms to find it again. While not the one in mind (and not necessarily from the new SDR guerrilla crowd), these are somewhat relavant... Digital Chaotic Communications https://smartech.gatech.edu/bitstream/handle/1853/34849/michaels_alan_j_200… Synchronization in Cognitive Overlay Systems http://lib.tkk.fi/Dipl/2012/urn100685.pdf Covert Ultrawideband Random Noise papers by Jack Chuang and Ram Narayanan... https://etda.libraries.psu.edu/files/final_submissions/3142

1 0

FBI Black Helicopters Spying And Databasing Everything, Including Your Barbecue
by grarpamp 25 May '16

25 May '16

https://news.slashdot.org/story/16/04/07/1120214/spies-in-the-skies-fbi-pla… Each weekday, dozens of U.S. government aircraft take to the skies and slowly circle over American cities. Piloted by agents of the FBI and the Department of Homeland Security (DHS), the planes are fitted with high-resolution video cameras, often working with "augmented reality" software that can superimpose onto the video images everything from street and business names to the owners of individual homes. At least a few planes have carried devices that can track the cell phones of people below. Most of the aircraft are small, flying a mile or so above ground, and many use exhaust mufflers to mute their engines -- making them hard to detect by the people they're spying on. [...] The government's aerial surveillance programs deserve scrutiny by the Supreme Court, said Adam Bates, a policy analyst with the Cato Institute, a libertarian think tank in Washington, D.C. "It's very difficult to know, because these are very secretive programs, exactly what information they're collecting and what they're doing with it," Bates told BuzzFeed News.

4 4

Re: [Cryptography] Hacking spread spectrum clocking of HW ?
by grarpamp 25 May '16

25 May '16

On 5/24/16, Henry Baker <hbaker1(a)pipeline.com> wrote: > https://www.maximintegrated.com/en/app-notes/index.mvp/id/1995 > > Q: How hard is it to diddle with the spreading codes on these clocking > sources? I'd like to experiment with some longer codes. See their spec sheet... https://datasheets.maximintegrated.com/en/ds/DS1086-DS1086Z.pdf I looking for links to different whitepapers... where dither driving the spread is not pretty triangle frequency and amplitude, but is a random shared key. And it's driving an RF tx/rx capable of extremely wide spread range. Other option is to tx/rx faux wideband noise modulo a random spectrum key. Pointers?

1 0

1st OpenPGP conference, September in Germany
by Blibbet 24 May '16

24 May '16

FYI -------- Forwarded Message -------- Subject: [openpgp] Join us for the first OpenPGP conference Date: Wed, 18 May 2016 16:39:10 +0200 From: Werner Koch <wk(a)gnupg.org> To: openpgp(a)ietf.org Hello! The German Unix User Group (GUUG) is pleased to announce the first public conference on the OpenPGP protocol taking place in Cologne, Germany on September 8+9, 2016. OpenPGP.conf is a conference for users and implementers of the OpenPGP protocol, the popular standard for encrypted email communication and protection of data at rest. That protocol is the foundation of encryption software like PGP, GnuPG, Mailvelope, OpenKeyChain, and others. OpenPGP.conf is a place to meet, discuss, and learn about latest developments of OpenPGP aware applications and what technical measures can be deployed to repel the ever increasing trend to mass surveillance. Topics are: - The OpenPGP protocol and its planned revision - Current status of OpenPGP applications - Interesting use cases - Key discovery and distribution - Ubiquitous end-to-end encryption - Security analysis - User interface studies - Anonymous mail and the spam problem The Call for Presentations is available at: https://gnupg.org/conf/cfp.html More information will be published at the conference site: https://gnupg.org/conf/ Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. /* EFH in Erkrath: https://alt-hochdahl.de/haus */

2 1

Re: [Cryptography] Text of Burr-Feinstein encryption backdoor bill
by grarpamp 24 May '16

24 May '16

On 4/8/16, Henry Baker <hbaker1(a)pipeline.com> wrote: > https://assets.documentcloud.org/documents/2797124/Burr-Feinstein-Encryptio… > > "Compliance with Court Orders Act of 2016" Current version... https://www.burr.senate.gov/imo/media/doc/BAG16460.pdf

1 0

FBI Gripes About Crypto on Facebook/WhatsApp/Everywhere, People Rebuffing and Accepting "Costs"?
by grarpamp 23 May '16

23 May '16

https://it.slashdot.org/story/16/04/06/1929201/top-fbi-attorney-worried-abo… WhatsApp on Tuesday announced that all types of messages on the latest version of its app are now automatically protected by end-to-end encryption, and the FBI's top attorney is worried some of the platform's more than 1 billion global users will take advantage of the move to hide their crime- or terrorism-related communications. FBI General Counsel James Baker said in Washington on Tuesday that the decision by the Facebook-owned messaging platform to encrypt its global offerings "presents us with a significant problem" because criminals and terrorists could "get ideas." "If the public does nothing, encryption like that will continue to roll out," he said. "It has public safety costs. Folks have to understand that, and figure out how they are going to deal with that. Do they want the public to bear those costs? Do they want the victims of terrorism to bear those costs?"Maybe the government shouldn't have imposed so many surveillance programs on its citizens -- and kept quiet about it for years -- that they now feel the need to use sophisticated security technologies.

2 1

Russia's invasion of Ukraine - finally winding up; Australians nutcase MSM consuming lapdogs as usual
by Zenaan Harkness 23 May '16

23 May '16

The long tail of Ukraine's Western-backed disintegration continues: http://theduran.com/poroshenko-finally-admits-ukraines-military-defeat/ "Thousands of Ukrainian Nationalists Rally, Threaten Coup d'Etat": https://www.rt.com/news/343756-ukraine-nationalists-kiev-parliament/ A reminder of what it would really look like if Russia actually invaded Ukraine: http://russia-insider.com/en/politics/russia-makes-sure-war-will-be-hell-it… For those unsure of what our Western democracy putschists have been fueling, another in depth on the Ukarine Maidan: http://theduran.com/little-little-maidan-truth-surfacing-ukraine-masks-revo… http://russia-insider.com/en/politics/finally-masks-revolution-maidan-docum… Now, in the face of 'the end is close': "Documentary Claiming MH17 Shot Down by Ukrainian Jet to Air on BBC" http://www.express.co.uk/news/world/663787/Ukrainian-fighter-jet-shot-Russi… we see Australian nutcases yet to consume anything but the MSM: http://www.abc.net.au/news/2016-05-22/mh17-australian-families-of-victims-t… At least NATO exhibits rationality: "NATO Talking to Itself: Announces Meeting With Russia Without Informing Russia" http://www.presstv.ir/Detail/2016/05/20/466550/Russia-NATO-meeting

1 0

Re: [Cryptography] USB 3.0 authentication: market power and DRM?
by grarpamp 22 May '16

22 May '16

On 5/2/16, dj(a)deadhat.com <dj(a)deadhat.com> wrote: > The CA that needs to exist would the the USB-IF. Who cares what CA exists. So long as it is *optional* to the user. Remember SecureBoot... You can find many motherboards with SecureBoot that have the Microsoft PK's locked in the BIOS. Best you can do is 'disable' it and not be 'secure' anymore. The Linux crowd went apeshit over it, and rightfully so. Then they dropped to their knees and wrote silly stub loaders and submitted them to their Microsoft Overlord for signing. They are still submitting to this scheme today, even though they don't have to... Because if you look, you can find boards that allow completely deleting the Microsoft keys and installing and managing your own in the BIOS, and opensource tools to sign and authorize your own loaders do exist. Buy those boards instead. Tech can be useful, but you better fight for, select, and maintain your private right and control over it.

2 1

US Govt Reveals Bill Forcing Assistance, Chumping Crypto, Secrets Beget...
by grarpamp 22 May '16

22 May '16

https://yro.slashdot.org/story/16/04/06/2256257/fbi-telling-congress-how-it… According to a new report in National Journal, the FBI has already briefed Senator Diane Feinstein (D-CA) on the methods used to break into the iPhone at the center of Apple's recent legal fight. Senator Richard Burr (R-NC) is also scheduled to be briefed on the topic in the days to come. TOP SECRET briefings to the two most worthless SECRET critters, at the top of the most worthless SECRET committee... is worthless to the people. And that's no SECRET. Yet somehow people continue to treat that as... notice served, all absolved. Don't forget... Torture, Murder, Surveillance, Databasing all supposedly went through that committee of the guilty too. Feinstein and Burr are both working on a new bill to limit the use of encryption in consumer technology, expected to be made public in the weeks to come. Much of the USA, online, even the world seem to be rather pissed with the stance and activities of the US Government against crypto. Cryptos should not just be in their own circles, but educating those they know... random public around them... that do not already know about the crypto / privacy issues, the things that haven't made the nightly news, etc. The battle against the second coming of Clipper is going to get uglier and riskier before it gets better. In part because new lawmaking is at stake, not just interpretation over old. Supposedly an educated populace has more influence over new laws than interpretation... The disclosures come amid widespread calls for the attack to be made public, particularly from privacy and technology groups. However the FBI's new method works, the ability to unlock an iPhone without knowing its passcode represents a significant break in Apple's security measures, one Apple would surely like to protect against.

1 0

What Omidyar's been up to...
by Rayzer 22 May '16

22 May '16

Fomenting media about indigenous land rights... Thomson Reuters Foundation launches Place to put land and property rights on global news agenda London (May 16, 2016) – The Thomson Reuters Foundation, the charity arm of the world’s largest news and information provider, today launched Place (Property, Land, Access, Connections, Empowerment), an innovative platform to boost coverage of land and property rights, one of the most under-reported issues worldwide. The new platform has been developed with support from Omidyar Network, the philanthropic investment firm founded by Pierre and Pam Omidyar. Insecurity of land tenure and property rights is a major cause of global poverty and inequality and is strongly linked to the realisation of many development goals, including food security, economic empowerment of women, and climate change mitigation. Place aims to generate and curate trusted news and information on these issues, highlighting some of the complex dynamics related to property rights with the aim of making the subject accessible to a broader audience. Place creates the world’s first global news team dedicated to coverage of land and property rights, and the launch of a new digital platform, featuring original articles, information, analysis and opinion pieces. The Thomson Reuters Foundation team will do reporting and will select and aggregate content, ensuring the site both informs and triggers debate. “The lack of ownership or tenure is one of the world’s most silent crises and one with dramatic ramifications. The denial of such basic rights leads to exploitation and financial instability; it can destroy livelihoods, create inequality and even foment conflict. It particularly affects women who are not allowed to own or even inherit land in many countries,” says Monique Villa, Chief Executive Officer of the Thomson Reuters Foundation. “Through the generous support of Omidyar Network, our news will play a significant role in starting a global conversation on the subject.” “The lack of property rights is not just a concern for developing countries,” says Peter Rabley, Director of the Property Rights initiative of Omidyar Network. “It poses a threat to global security by putting food supplies at risk, fuelling violence in ever-growing slums in major cities, reducing opportunity and economic empowerment, and increasing pressure on the environment. The issues linked to property rights are a concern for everyone, and this innovative project with the Thomson Reuters Foundation aims to address these issues by bringing them into the public domain and sparking a global discussion.” Thomson Reuters Foundation journalists and videographers in Africa, India, Brazil and Britain will work with over 100 freelancers to produce daily news addressing issues such as the lack of land rights and its consequences, corruption, land appropriation, food security and human rights abuses. The team will also produce interviews with frontline thought leaders and compelling micro-documentaries to engage viewers through visually striking investigative stories. The journalists are part of the larger editorial team at the Thomson Reuters Foundation, will report to Belinda Goldsmith, editor-in-chief, and will benefit from editorial guidance, mentorship, facilities and a global distribution network reaching an estimated audience of one billion readers a day. Content generated by the team will be featured on news.trust.org, the Thomson Reuters Foundation’s website, and on place.trust.org, the new platform dedicated to land and property rights. For more information on the project visit place.trust.org

6 10