July 2016 - cypherpunks - lists.cpunks.org

The heart of a Scotsman - George Galloway, The Chilcot Report: What Next?
by Zenaan Harkness 06 Jan '20

06 Jan '20

The wheels of "democracy" when it works, when someone with heart, patience, tenacity and a strong sense of justice (a mighty lot to ask, so we can be very grateful for this man of principal) such as George Galloway, is an event worth witnessing, given how rare such events are. George Galloway you have been vindicated. Thank you for speaking so clearly. "Mr Blair: This Is For Iraq (Video)" http://www.youtube.com/watch?v=VVNmy5-2va8 (Youtube link also here: http://russia-insider.com/en/politics/mr-blair-iraq/ri15485 )

2 7

Russia's "eye-watering" military toys
by Zenaan Harkness 10 Jul '17

10 Jul '17

http://journal-neo.org/2015/11/16/do-we-really-want-a-new-world-war-with-ru… Enjoyable read. Reminds me of that immortal line in the Putin documentary where the Russian navy chief points at a radar screen saying something like 'look at that, I've never seen [a destroyer class battleship] do this figure-8 move before' as the USS Donald Cook first enters then hightails out of Crimean waters. International military sparring at its best :) Z

3 5

Russia bans purchase of foreign non-niche software in Russian state agencies
by Zenaan Harkness 07 Jul '17

07 Jul '17

Import substitution applied to software... http://fortruss.blogspot.ru/2015/11/medvedev-bans-use-of-foreign-made.html Medvedev bans the use of foreign-made software in Russian state agencies Translated by Ollie Richardson for Fort Russ 20th November, 2015 novayagazeta.ru The Prime Minister of Russia, Dmitry Medevdev, has signed a decree prohibiting from 1 January 2016 the purchase of foreign-made software for state needs, reports the press service of the Cabinet. According to the document, customers will now be obliged to buy Russian-produced software. It notes that the initiative is a method of import substitution. The exception is when software has the necessary functional, technical or operational characteristics absent in Russia. To place an order on, for example Microsoft Windows, officials will have to justify the need for this operating system. As reported to "Kommersant" earlier, the official, who asked to remain anonymous, said that a German IT company began to discuss with the Ministry of economic development the possibility of a partial transfer of software production to Russia, in order thus to be able to sell it on government orders. A draft resolution was prepared and submitted by the Ministry of communications and mass communications of the Russian Federation. It was presented to Medvedev earlier in April.

4 6

Hi, Boyce! (was Fwd: tor-talk subscription update)
by Cecilia Tanaka 05 Dec '16

05 Dec '16

Lovely sweet guy. Hope he is honest enough to expose exactly who were the people banned in tor-talk list. Boyce, please, just pro-Jake people were banned or it was just a lovely coincidence? How about a bit of transparency, please? Thanks in advance! Cecilia ---------- Forwarded message ---------- From: "Griffin Boyce" <griffin(a)cryptolab.net> Date: Jun 22, 2016 4:46 PM Subject: tor-talk subscription update To: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 To whom it may concern, You have been removed from the tor-talk mailing list for persistent off-topic posts and I encourage you to spend your time elsewhere. Do not re-subscribe to the list. best of luck, Griffin - -- “We have to create; it is the only thing louder than destruction.” ~ Andrea Gibson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJXaup/AAoJEAPPSgqzx5pjRBAH/jtlRw70yVDL9d62mgHPA3uo fiab3QDDjw04tKMbEGqwGEEHpOKn3nP6bynxGiwUi2Xsp7f3HHi1UD7c79n9cFsp RHqRNpYvLP81eABIpcany0Z2mmI9uVZs0ccirVMcq3YK10ADtG7zYujl6KBgCDWl M6FGWnmLEFa8vw24ia+6lEukARJ2nXTIFMrDisfbQ7bkJFSHaGGsenuy66yde2zS uECH1C/98f5RtZDv7NJJtTebbAPZMSnBQVYU3//ossTG7OFI60EPYAPH3xPdpS3/ zuocWagHiL1KYvqkoxCm3qWv7k9c7CvUhEJXgy4dhGQEljDdu3UsVsV8PPheDcM= =lKWK -----END PGP SIGNATURE-----

10 48

Happy 4 July!!!
by grarpamp 29 Oct '16

29 Oct '16

https://www.youtube.com/watch?v=3kEpZWGgJks Last Week Tonight with John Oliver: Civil Forfeiture (HBO)

3 3

Recent Numbers Station Activity COLLAPSE (GnuRadio SDR)
by grarpamp 19 Oct '16

19 Oct '16

https://www.reddit.com/r/conspiracy/comments/3oswdt/unusual_happenings_with… On SKYKING (8992 or 11175 kHz USB) a call sign called "COLLAPSE" which has not been heard since 2001 has just broadcasted 4 messages to numbered stations/units in the last few minutes. "FUXEBOX" and "Reykjavik," have also broadcast in the last few days and they haven't been heard since 1991 (collapse of the Soviet Union). "COLLAPSE" has sent 3 messages in the last few minutes. COLLAPSE message one: http://vocaroo.com/i/s1hGyA2GR6HI Collapse message Two: http://vocaroo.com/i/s1ETZ3l9fp0G Collapse message Three: http://vocaroo.com/i/s03ZI6ui70LY Message Four from "FLATTOP!" (ANOTHER STATION NOT HEARD IN YEARS!): http://vocaroo.com/i/s01smhgkyNDL We do not know what these codes mean, but it considered These are alerts to "All Stations" before the codes are sent. I did my best to record all these but missed recording "the alert phrase" where they said "All stations, all stations." This has all happened in the last half hour (0230-0304 EST). I didn't record these or write this up btw, this was a thread from 4chan that popped up on /pol/ Edit: Go here for updates http://www.defconwarningsystem.com/phpBB3/viewtopic.php?f=22&t=3269&start=30

4 4

Re: "Blackphone" said to be "a super-secure nsa-proof"
by Ulex Europae 13 Oct '16

13 Oct '16

At 05:25 AM 1/17/2014, Jim Bell forwarded: ><<http:///>http://www.yahoo.com/tech/startup-launching-a-super-secure-nsa-proof-735110…> It's been long enough, has anyone acquired one of these and tested it? Ulex

10 13

[RUS] USA media meltdown (e.g. "It's Official: Hillary Clinton Is Running Against Vladimir Putin")
by Zenaan Harkness 18 Sep '16

18 Sep '16

US Regime Media in Full Meltdown Mode Over Trump's NATO Remarks http://russia-insider.com/en/us-regime-media-gets-its-panties-bunch-over-tr…

2 2

[RU_NEWS] Kurds + US mid east plays - US-Saudi Plan to Prompt Iranian Pullback from Syria
by Zenaan Harkness 07 Sep '16

07 Sep '16

The US-Saudi Plan to Prompt an Iranian Pullback from Syria July 25, 2016 - Andrew Korybko, Katehon http://www.fort-russ.com/2016/07/the-us-saudi-plan-to-prompt-iranian.html A rather long analysis of the big mid east plays that could unfold - Iran, Saudi Arabia, USA and parts of the new silk road belt (Iran, Pakistan and India).

2 2

Re: [Cryptography] Bruce Schneier has gotten seriously spooked
by Eugen Leitl 06 Sep '16

06 Sep '16

----- Forwarded message from Brian Gladman <brg(a)gladman.plus.com> ----- Date: Sat, 07 Sep 2013 09:33:28 +0100 From: Brian Gladman <brg(a)gladman.plus.com> To: Cryptography Mailing List <cryptography(a)metzdowd.com> Subject: Re: [Cryptography] Bruce Schneier has gotten seriously spooked User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 On 07/09/2013 01:48, Chris Palmer wrote: >> Q: "Could the NSA be intercepting downloads of open-source encryption software and silently replacing these with their own versions?" > > Why would they perform the attack only for encryption software? They > could compromise people's laptops by spiking any popular app. Because NSA and GCHQ are much more interested in attacking communictions in transit rather than attacking endpoints. Endpoint attacks cost more to undertake, only give access to a limited amount of data and involve much greater risks that their attack will either be discovered or their means of attack will leave evidence of what they have done and how they have done it. The internal bueaucratic costs of gaining approval for (adverarial) endpoint attacks also makes it a more costly process than the use of network based interception. There is significant use of open source encryption software in end to end encryption solutions, in file archivers, in wifi and network routers, and in protecing the communications used to manage and control such components when at remote locations. The open source software is provided in source code form and is compiled from source in a huge number of applications and this means that the ability to covertly substitute broken source code could provide access to a huge amount of traffic without the risks involved in endpoint attacks. I stress that I am NOT suggesting that this has happened (or is happening), simply that it has attractions from an NSA/GCHQ viewpoint. Fortunately, I think it is a difficult attack to mount covertly (that is, without the acqiecience of the author(s) of the software in question). On the more general debate here, in my view, 'security for the masses' through the deployment of encryption is a 'pipe dream' that isn't going to happen. Functionality (and the complexity that comes with it) is the enemy of security and it is very clear that the public places a much higher value on functionality than it does on security (or privacy). Every time a new device comes onto the market, it starts with limited functionality and some hope of decent security but rapidly evolves to be a high functionality product in which the prospect of decent security declines rapidly to zero. Raspberry Pis look interesting _now_ but I would be willing to bet that they won't buck the trend of increasing funtionality and declining security simply because this is what the majority in even this limited user community will want. To buck this trend we need an effort like the Raspberry Pi effort but one driven by our community with a strong commitment to simplicty and deliberately limited functionality in both hardware and software. Brian Gladman _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org AC894EC5: 38A5 5F46 A4FF 59B8 336B 47EE F46E 3489 AC89 4EC5

8 14