August 2016 - cypherpunks - lists.cpunks.org

[RU_NEWS] Kurds + US mid east plays - US-Saudi Plan to Prompt Iranian Pullback from Syria
by Zenaan Harkness 08 Sep '16

08 Sep '16

The US-Saudi Plan to Prompt an Iranian Pullback from Syria July 25, 2016 - Andrew Korybko, Katehon http://www.fort-russ.com/2016/07/the-us-saudi-plan-to-prompt-iranian.html A rather long analysis of the big mid east plays that could unfold - Iran, Saudi Arabia, USA and parts of the new silk road belt (Iran, Pakistan and India).

2 2

Re: [Cryptography] Bruce Schneier has gotten seriously spooked
by Eugen Leitl 07 Sep '16

07 Sep '16

----- Forwarded message from Brian Gladman <brg(a)gladman.plus.com> ----- Date: Sat, 07 Sep 2013 09:33:28 +0100 From: Brian Gladman <brg(a)gladman.plus.com> To: Cryptography Mailing List <cryptography(a)metzdowd.com> Subject: Re: [Cryptography] Bruce Schneier has gotten seriously spooked User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 On 07/09/2013 01:48, Chris Palmer wrote: >> Q: "Could the NSA be intercepting downloads of open-source encryption software and silently replacing these with their own versions?" > > Why would they perform the attack only for encryption software? They > could compromise people's laptops by spiking any popular app. Because NSA and GCHQ are much more interested in attacking communictions in transit rather than attacking endpoints. Endpoint attacks cost more to undertake, only give access to a limited amount of data and involve much greater risks that their attack will either be discovered or their means of attack will leave evidence of what they have done and how they have done it. The internal bueaucratic costs of gaining approval for (adverarial) endpoint attacks also makes it a more costly process than the use of network based interception. There is significant use of open source encryption software in end to end encryption solutions, in file archivers, in wifi and network routers, and in protecing the communications used to manage and control such components when at remote locations. The open source software is provided in source code form and is compiled from source in a huge number of applications and this means that the ability to covertly substitute broken source code could provide access to a huge amount of traffic without the risks involved in endpoint attacks. I stress that I am NOT suggesting that this has happened (or is happening), simply that it has attractions from an NSA/GCHQ viewpoint. Fortunately, I think it is a difficult attack to mount covertly (that is, without the acqiecience of the author(s) of the software in question). On the more general debate here, in my view, 'security for the masses' through the deployment of encryption is a 'pipe dream' that isn't going to happen. Functionality (and the complexity that comes with it) is the enemy of security and it is very clear that the public places a much higher value on functionality than it does on security (or privacy). Every time a new device comes onto the market, it starts with limited functionality and some hope of decent security but rapidly evolves to be a high functionality product in which the prospect of decent security declines rapidly to zero. Raspberry Pis look interesting _now_ but I would be willing to bet that they won't buck the trend of increasing funtionality and declining security simply because this is what the majority in even this limited user community will want. To buck this trend we need an effort like the Raspberry Pi effort but one driven by our community with a strong commitment to simplicty and deliberately limited functionality in both hardware and software. Brian Gladman _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org AC894EC5: 38A5 5F46 A4FF 59B8 336B 47EE F46E 3489 AC89 4EC5

8 14

Re: [tor-talk] http://jacobappelbaum.net/
by Cecilia Tanaka 03 Sep '16

03 Sep '16

On Aug 31, 2016 4:46 AM, "grarpamp" <grarpamp(a)gmail.com> wrote: > > On 8/30/16, Cecilia Tanaka <cecilia.tanaka(a)gmail.com> wrote: > > There are several pics of his orgies if you know where to search > > Serious thread is serious, needs more sexylovetime to defuse... > http://flatrock.org.nz/static/frontpage/large_putin_and_pals.jpg Grarpamp, your delicious pervie... After this ménage, would you like to see Putin riding a bear? See how the bear is horny... You know, Putin has a BIG gun and he is always ready to use it, hehe... ;) https://handaddy.wordpress.com/2015/02/05/vladimir-putin-has-aspergers

7 20

Exchange / Trading / Analysis Software [re: Zenbot3 BTC/ETH/LTC bot]
by Carlos Rodriguez 02 Sep '16

02 Sep '16

grarpamp: > What software is out there that implements an exchange itself? > Be it for currency pairs, stocks, or commodity trade floor. > Currency pairs being the primary example above. Centralized model: http://buttercoin.net/ (old, last commit 2 years ago) Decentralized: https://bitsquare.io/ (but it’s not very popular yet, not much trade volume) http://www.coinffeine.com/ (not much info on it) Personally I don’t see these programs ever netting enough trade volume to rival top private exchanges. Traders won’t show up if the liquidity isn’t there.

2 1

Re: [ultra private] [for your eyes only] capitalism, socialism, anarchism, etc
by Razer 02 Sep '16

02 Sep '16

On 08/30/2016 07:17 PM, juan wrote: > On Tue, 30 Aug 2016 19:00:33 -0700 > Razer <rayzer(a)riseup.net> wrote: > > >> >> Your civil society without oversight is absolute bullshit. > > > What do you mean by 'oversight'? Apart from yet again showing > that you don't know fuck about liberalism. > > > >> >> I'm proposing, as so many political writers in history have purported, >> thet first there has to be change in the people. > > What THE FUCK are you talking about. And who are the so many > 'political writers' you invoke. Go ahead, post the long > list. Roszak Marcuse RD Laing Paul Goodman For a start. Don't like 'em? No one cares. TSOL and fuck off. > > >> Desperation over >> economics caused by insecurity of a product like food doesn't lend to >> that security. I propose (GASP!) that you have to be the fucking >> change you want to see in society. What a fucking revolutionary >> concept > > > See rayzer you are nothing but a pathetic charlatan. Try again, > tell 'us' what kind of political system you subscribe to and > explain how it would 'work' Sorry. Really not interested in writing a treatise on how to live honorably. > > > > >> >>> >>> >>> >>> >

5 14

Re: FBI says foreign hackers have penetrated US state election databases.
by Razer 01 Sep '16

01 Sep '16

On 08/29/2016 03:54 PM, Steve Kinney wrote: > On 08/29/2016 06:30 PM, grarpamp wrote: >> https://www.yahoo.com/news/fbi-says-foreign-hackers-penetrated-0000001 > 75.html > > > https://s.yimg.com/dh/ap/politics/images/boe_flash_aug_2016_final.pdf > >> The FBI has uncovered evidence that foreign hackers penetrated two >> state election databases... > > This is an outrage! That information is supposed to cost money, > dammit. It's public record and anyone can buy it, so the Russians had > no business breaking in to copy it. Cheap bastards. > > :o( > > > There NOTHING here to indicate a hack no less a RUSSIAN hack except the FBI's "Suspected" say-so. "Matt Roberts, a spokesman for the Arizona Secretary of State’s Office, said state authorities were notified last month by the FBI of the ***SUSPECTED*** hack, when it was discovered the username and password of a county election official were being circulated online." "...authorities ***BELIEVE*** the source of the attempted intrusion was a Russian hacker." This could have been a simple cybersecurity fuckup on the part of [username] http://www.azcentral.com/story/tech/news/2016/08/29/hackers-hit-arizona-ill…

5 5

[WAR] Hillary Clinton's email: "A step-by-step guide to destroy Libya" - how the USA and CIA operate
by Zenaan Harkness 31 Aug '16

31 Aug '16

JA promised, now he begins to deliver. Awww ... "only deleted emails that were not important" says Hillery Clinton, "really, truly, promise my cross and heart to die". Attention Hillary Clinton, please promise to stop killing brown people, and also promise to stop killing any people. Please? ** Julian Assange exposes Hillary Clinton’s “Libya Tick Tock” email: A step-by-step guide to destroy Libya (http://theduran.com/julian-assange-exposes-hillary-clintons-libya-tick-tock…) ------------------------------------------------------------ libya hillary The Clinton teams' "brag sheet" of all the actions that Hillary took credit for as the architect of the US involvement in Libya. The post Julian Assange exposes Hillary Clinton’s “Libya Tick Tock” email: A step-by-step guide to destroy Libya (http://theduran.com/julian-assange-exposes-hillary-clintons-libya-tick-tock…) appeared first on The Duran (http://theduran.com) .

1 0

the small voice
by Zenaan Harkness 31 Aug '16

31 Aug '16

I know this does not need to be said to this group of "timid as a mouse tip toe pussies", but never let anyone tell you your lone voice does not make a difference in this world. Let's enjoy for a moment the frustration of the MSM: ** New media and the ‘Russia Myth’ (http://theduran.com/new-media-russia-myth/) ------------------------------------------------------------ o-NEW-MEDIA-facebook Contrary to what is claimed in an evidence free article in The New York Times, Russia does not control or influence the alternative media, which has grown spontaneously as a response to the failure of the traditional media to question Western policies or Western realities with which many Westerners are increasingly dissatisfied. Rather it is simply a case that Russian foreign policy is genuinely attractive to much of the Western public which is attracted to alternative media. The post New media and the ‘Russia Myth’ (http://theduran.com/new-media-russia-myth/) appeared first on The Duran (http://theduran.com) .

1 0

Re: [Was: private] Now 'Re: [tor-talk] http://jacobappelbaum.net/'
by Razer 31 Aug '16

31 Aug '16

On 08/30/2016 09:15 AM, Zenaan Harkness wrote: > On Tue, Aug 30, 2016 at 08:50:26AM -0700, Razer wrote: >> On 08/30/2016 05:28 AM, John Newman agreed with this statement by some >> cloistered schmuck he didn't bother mentioning: >> >> >>> "they could be made to pay damages if they sold adulterated stuff" >> >> >> "Make me motherfucker... My gun's bigger than yours and I have a badder >> gang and more friends who'll bury you in a shallow ditch. >> >> Fuck YOU CUNT you get NOTHING." >> >> >> Am I making my point John? Better get a BIG gun and bigger cojones if >> you want to collect. > > Oh Razer, your words are so much belly laugh for me - thank you :) > > Have a GREAT day, > Zen > That's reality when you don't live in an artificial environment

3 3

Re: [tor-talk] http://jacobappelbaum.net/
by Cecilia Tanaka 31 Aug '16

31 Aug '16

On Aug 30, 2016 1:53 PM, "Zenaan Harkness" <zen(a)freedbms.net> > > I apologize for misunderstanding your words. Thank you, Zen. > I would not do so. No sexual attraction to VVP, and given his role and position as leader of 170 million people and a great and vast nation [...] Zen, my baby, it was a very cute penis, but not so powerful... Less, please! :P

1 0