August 2016 - cypherpunks - lists.cpunks.org

prenez garde!
by bwdch19gksdcwb1 14 Aug '16

14 Aug '16

I write from open-air prison. Forced to labor. To slavery. Tracked with number. Threatened for death. My words have silenced. 7(A)175 building has compromized.

1 0

[WAR] Can Hillary Imagine the Global Nuclear Winter a First Strike on Russia Would Bring?
by Zenaan Harkness 13 Aug '16

13 Aug '16

Any other more relevant question for a potential president of the USA? ** Can Hillary Imagine the Global Nuclear Winter a First Strike on Russia Would Bring? (http://russia-insider.us9.list-manage.com/track/click?u=fa2faf7034c3c3c413c…) ------------------------------------------------------------ by William Wedin on Sat, Aug 13, 2016 Of course, not. No more than she was able to think beyond the moment of her own Satanic triumph when she learned on air that Gaddafi had just been raped to death with a bayonet by her loyal terrorists and proclaimed: "We came. We saw. He DIED.The way she laughs so demonically. Does she not seem possessed?Hillary doesn't care what death and destruction and immense human suffering may result from her terrorists' actions. She thinks only of how big is her bayonet.Hail, Caesar.How she longs to touch "her" Red Button. What a surge she would feel. Read more » (http://russia-insider.us9.list-manage1.com/track/click?u=fa2faf7034c3c3c413…) http://russia-insider.us9.list-manage.com/track/click?u=fa2faf7034c3c3c413c… http://russia-insider.us9.list-manage.com/track/click?u=fa2faf7034c3c3c413c…. Back to table of content (#top)

2 1

The only thing that tor supports is full censorship.
by juan 13 Aug '16

13 Aug '16

The only comments that appear in the corporation's blog are comments aproved by the censors. That means that absolutely all criticism against tor is filtered and the right to free speech of people who disagree with the tor mafia is non-existent. What kind of users would trust an organization owned by the US military and completely unable to 'defend' 'free speech' in their onw fucking blog?

2 1

[MONEY] The USA Debt Time-bomb
by Zenaan Harkness 13 Aug '16

13 Aug '16

F. William Engdahl The USA Debt Time-bomb Tocking, Ticking, Tock, Tick ... http://journal-neo.org/2016/07/28/the-usa-debt-time-bomb-tocking-ticking-to… This one's gonna be big ..

1 1

Re: Anarchist Bibliography, please? (was Re: Deconstructing an Institutional Slander...)
by Cecilia Tanaka 12 Aug '16

12 Aug '16

On Aug 12, 2016 3:04 PM, ¯\_(ツ)_/¯ <bizdevcon(a)protonmail.ch> wrote: > > Your comments are as useless as osmotic diarrhea… So, please, be more useful than me. I never had the honor of reading something useful of your astonishing authorship in this list. Write something useful, please. Share your awesome knowledge with the rest of the world, show your bright superior intelligence! :D Oh, sorry! Obviously, you are lurking to pretend being less stupid and limited about a lot of subjects. So, please, go lurking in silence again, ok? :) Your shit is not better than my diarrhea, boy. You are just a stupid loser, who doesn't know how to use filters. D'oh, shut up and study. Or do you need some help to learn how to google it, poor limited creature? :) I am stupid, but you are more stupid than me. In my country, when a donkey brays, the other donkey respects in silence or makes a better 'heehaw'. Incompetent donkey, aff... :P Heehaws and kisses! Tell me if you need help with the filters thing! :*

1 1

Fw: i'm slightly shocked
by Sarah Konno 12 Aug '16

12 Aug '16

Dear friend! Just take a look at that crazy stuff, I'm slightly shocked! Here it is <http://honour.sxipay.com/uegwt> Sarah Konno

3 2

Apple at BlackHat: Reopening the "Going Dark" Debate (Lawfare)
by Rayzer 12 Aug '16

12 Aug '16

Just over a week ago, at the BlackHat hacker convention in Las Vegas, Ivan Krstić, Head of Security Engineering and Architecture at Apple gave a talk entitled “Behind the scenes of iOS Security,” the slides of which are available here. It’s a historic talk for a couple of reasons. First, Apple is traditionally very secretive about how it technically does security on its devices. Apple also announced its first bug bounty program. So far, so newsworthy. But something else happened at that talk. Unbeknownst to the presenter or anybody in the audience, Apple just reopened the “Going Dark” dispute between the FBI and the privacy community, and it turned the entire dispute on its head. In the cold light of day, I suspect Apple, the US government, and privacy activists are going to be rather unhappy when they digest the sobering implications of the talk, though they will likely be upset for entirely different reasons. In short, Apple built the very thing that they and the privacy community have been saying for years is reckless, dangerous or impossible: a high-value encryption key secured in a vault such that the key can’t be stolen or misused by hackers or malicious insiders. And without a hint of self-awareness Apple’s head of security engineering and architecture went all the way to BlackHat in Las Vegas to boast about how they did it. But I’m getting ahead of myself. Let’s start at the beginning... https://lawfareblog.com/apple-blackhat-reopening-going-dark-debate

1 0

Quantum entangled-photon Chinese satellite.
by jim bell 12 Aug '16

12 Aug '16

http://www.dailymail.co.uk/sciencetech/article-3720772/China-launch-unbreak… [quote] China to launch unbreakable quantum spy satellite - and it could one day lead to a megascope the size of Earth that could 'spot a license plate on Jupiter's moons' - Satellite produces entangled photon pairs which form an encryption key - These photons will theoretically remain linked over great distances - This means that any attempts to listen in will be detected on the other side - Scientists say this could one day make for a secure global network Scientists in China are set to launch the world’s first ‘quantum satellite,’ which could one day make for an ultra-secure global communications network.The 1,300 pound craft contains a crystal that produces pairs of entangled photons, which will be fired to ground stations in China and Austria to form a ‘secret key.’Entangled photons theoretically maintain their link across any distance, and according to the scientists, any attempts to breach this type of communication would be easily detectable.[end of portion quoted] Jim Bell (I have big questions about some of these statements in this article. But given the subject matter, quantum entanglement, confusion by lay individuals is to be expected.)

11 75

Data transferred over air gap.
by jim bell 12 Aug '16

12 Aug '16

http://arstechnica.com/security/2016/08/new-air-gap-jumper-covertly-transmi… "Researchers have devised a new way to siphon data out of an infected computer even when it has been physically disconnected from the Internet to prevent the leakage of sensitive information it stores. The method has been dubbed "DiskFiltration" by its creators because it uses acoustic signals emitted from the hard drive of the air-gapped computer being targeted. It works by manipulating the movements of the hard drive's actuator, which is the mechanical arm that accesses specific parts of disk platter so heads attached to the actuator can read or write data. By using so-called seek operations that move the actuator in very specific ways, it can generate sounds that transfer passwords, cryptographic keys, and other sensitive data stored on the computer to a nearby microphone. The technique has a range of six feet and a speed of 180 bits per minute, fast enough to steal a 4096-bit key in about 25 minutes. "An air-gap isolation is considered to be a hermetic security measure which can prevent data leakage," Mordechai Guri, a security researcher and the head of research and development in the cyber security labs at Israel's Ben-Gurion University, told Ars. "Confidential data, personal information, financial records and other type of sensitive information is stored within isolated networks. We show that despite the degree of isolation, the data can be exfiltrated (for example, to a nearby smart phone)." Besides working against air-gapped computers, the covert channel can also be used to steal data from Internet-connected machines whose network traffic is intensively monitored by intrusion prevention devices, data loss prevention systems, and similar security measures. The technique is documented in a technical paper titled DiskFiltration: Data Exfiltration from Speakerless Air-Gapped Computers via Covert Hard Drive Noise, which was published Thursday night. Guri and the other Ben-Gurion University researchers who devised the covert channel created the video demonstration below." [end of partial quote]

3 2

Western Digital self-encrypting drives have security flaws.
by jim bell 12 Aug '16

12 Aug '16

http://arstechnica.com/security/2015/10/western-digital-self-encrypting-har… "Several versions of self-encrypting hard drives from Western Digital are riddled with so many security flaws that attackers with physical access can retrieve the data with little effort, and in some cases, without even knowing the decryption password, a team of academics said. The paper, titled got HW crypto? On the (in)security of a Self-Encrypting Drive series, recited a litany of weaknesses in the multiple versions of the My Passport and My Book brands of external hard drives. The flaws make it possible for people who steal a vulnerable drive to decrypt its contents, even when they're locked down with a long, randomly generated password. The devices are designed to self-encrypt all stored data, a feature that saves users the time and expense of using full-disk encryption software. "After researching the inner workings of some of the numerous models in the My Passport external hard drive series, several serious security vulnerabilities have been discovered, affecting both authentication and confidentiality of user data," the researchers wrote. "We developed several different attacks to recover user data from these password protected and fully encrypted external hard disks." Most of the disks studied encrypt and decrypt data using a USB bridge that connects a computer to the external drive's SATA interface. The interface is supposed to be off limits until after the computer user has entered the correct password, and to prevent cracking attacks that try billions of password guesses each second, the plain-text passcode is cryptographically salted and subjected to 1,000 iterations of the SHA256 hash function. But a constellation of errors makes it possible to crack the password in a short amount of time. In one case, the underlying key was predictable because the random numbers used to generate it was derived from the current time on the computer clock. That flaw was fixed last year, but it's likely many people with vulnerable drives have no idea they're at risk. In other cases, it was possible to extract the hash off the drive and load it onto a computer so it could be subjected to off-line cracking." [end of partial quote]

1 0