September 2016 - cypherpunks - lists.cpunks.org

Cypher piggie = JY = sea sea
by rooty 25 Sep '16

25 Sep '16

You have been warned -

6 13

Julian Assange on Rubber-hose proof (cryptographically deniable) file-systems (1997)
by John Young 25 Sep '16

25 Sep '16

Date: 6 Dec 1997 05:49:19 -0000 Message-ID: <19971206054919.5142.qmail(a)iq.org> From: Julian Assange <proff(a)iq.org> To: coderpunks(a)toad.com cc: cryptography(a)c2.net, cypherpunks(a)toad.com Subject: Rubber-hose proof (cryptographically deniable) file-systems. Sender: owner-cypherpunks(a)toad.com Precedence: bulk Here's a copy of some correspondence in relation to my implementation of a `rubber hose proof' (cryptographically deniable) file system (actually implimented as a block device on which you can mount any file system). I'm happy with the cryptographic strength of the system (but feel free to comment anyway). That said, I'm not convinced that my avoidance of media (i.e disk surface) analysis attacks (which could potentially show the pre-sense or otherwise of cryptographic file systems other than the "duress" ones) is entirely effective. I'd like some comment from gauss-ridden declassification guru's here :) [...] Here's how I'm implementing `aspects' in Rubberhose/marutukku; `aspect' is the term I'm using to refer to the cryptographically-deniable (i.e rubber-hose-proofed) "portion", of a maru extent i.e it's a different _aspect_ (view) of the same underlying physical block extent. I decided that random split lengths don't add to the security of the scheme - only 2x from my calculations - which isn't enough to warrant the increase in memory use and complexity involved. The extent is simply divided up into n splits (say 1024 or one every 256k, whichever is smaller). Each aspect has an encrypted 32bit block remap list (which is simply a linear array because of the fixed split size). A split avoidance bit-map is created from these per-aspect remap lists on instantiation of the aspects. An individual aspect looks like so (when saved): typedef struct { m_u32 keySum; /* key checksum */ u_char masterKey[MAX_KEY]; u_char latticeCipherType, blockCipherType; u_char pad[MAX_BLOCK - (4 + MAX_KEY + 1 + 1) % MAX_BLOCK]; /* block align */ } maruCycle; typedef struct { maruCycle cycle; u_char keySalt[MAX_PASSPHRASE]; maruLatticeKey latticeKeySalt[2]; u_char blockIV[MAX_FS_BLOCK_SIZE]; u_char latticeSalt[2*MAX_LATTICE_DEPTH*MAX_BLOCK_KEY]; /* must be 64 aligned */ m_u32 remap[MAX_SPLITS]; m_u32 iterations; maruCipher keyCipherType; } maruHeaderAspect; There are an array of (8 by default) of these constructs in a maruHeader. The smap accessor macros are simple: #define SMAP_SET(p, n) (((p))[(n)/(sizeof(maruSmap)*8)] |= (1 << ((n) % (sizeof(maruSmap)*8)))) #define SMAP_CLR(p, n) (((p))[(n)/(sizeof(maruSmap)*8)] &= ~ (1 << ((n) % (sizeof(maruSmap)*8)))) #define SMAP_ISSET(p, n) (((p))[(n)/(sizeof(maruSmap)*8)] & (1 << ((n) % (sizeof(maruSmap)*8)))) By default, each unused maruHeaderAspect struct contains random noise (except for keyCipherType, which defaults to being the same for all aspects) and is of course indistinguishable from a valid maruAspect without the associated key. Instantiation example: Say you have three valid aspects, a1, a2 and a3. Arbitrarily, you have chosen a1 to be the simple duress aspect (i.e ``you expect us to believe you have solitary letter of donation to the Polit Bureau Ball in your entire encrypted file system?! Do you know what this is Nikov? <opens trench coat>. THIS is the finest cryptanalytic device known to man. THIS is a RUBBERHOSE! *thwap* *thwunk* *boink*. Now... what's the *real* key Nikov... or should we call you... Nikolay Bukharin?''), a2 to be the limited disclosure aspect ("Dear diary. Nikita, Ivan, Boris and <some more guys I feel like selling down the Lenningrad sewage system> came over today and smoked a *shit load* of hash. Not wanting to offend, I had a toke, but like that capitalist dog ^H^H^H^H^H^H^H^H^H^H^H^H^H illustious leader of the freeworld, was careful not to inhale.") and a3 has your ice-9 formula nicely tucked away. You decide one fine morning that you want to add an ATP pre-cursor as a catalyst to your ice-9 recipe of destruction (ostensibly, you plan to generate this stuff from cultures of genetically modified mouse liver cell mitochondria), and provide the a1, a2 and a3 pass-phrases. a1, a2 and a3 are decrypted. the aspect remap is parsed and used to create the physical block "avoidance" map (checking for conflicts along the way). Joyous about the frozen seas to come, you copy the ATP pre-cursor catalyst into a3 and the file system tries to write a new block - e.g b28 - to a3. b28 is translated through the a3 remap table to b-1 (unallocated). A random block remap number is generated e.g b595 and tested against the avoidance smap. If free, it is marked and chosen to be the new a3 mapping, otherwise the algorithm simply does a circular hunt for the next free entry in the avoidance smap. Naturally, reading only requires the key of the aspect you are interested in (divulging). Writing to one aspect without the keys to the other aspects will randomly trash them as new splits are assigned. Timer remaps, reads and re-writes: This would be the simple end of it, were it not but for magnetic domain leakage/disk surface wear analysis attacks. Theoretically, this sort of attack could used to demonstrate access patterns by the drive head in regions outside those used by the duress aspect blocks. What we want to do here is to make sure the non-data carrying magnetic/other properties of the disk substrate are as close to a Jackson Pollock painting as is possible. i.e totally random :) Three methods are used: 1) every few seconds, we read a random number of blocks within a split in a random location and write it back to that same location with a m-1/m (e.g 9/10) (recursive) chance of an additional write. 2) every-time there is a conventional write, there is a m-1/m chance of a full remap of the split concerned. 3) every n seconds a random full split remap. (maybe not needed given the statistical properties of the above - I need to think about this a lot more. its not simple) All aspects are defined to take up 100% of the marutukku extent from the file-system perspective - this is essential to our deniability scheme. This works fine with most file-systems - e.g UFS, because they only write to a small fraction of their addressable blocks when formatted - i.a few super-blocks and inode, rather than zeroing every block, and so split usage for a given aspect reflects population of the file system that pertains to it. Cheers, Julian. -- Prof. Julian Assange |If you want to build a ship, don't drum up people |together to collect wood and don't assign them tasks proff(a)iq.org |and work, but rather teach them to long for the endless proff(a)gnu.ai.mit.edu |immensity of the sea. -- Antoine de Saint Exupery

2 1

Pike Committee
by Ryan Carboni 25 Sep '16

25 Sep '16

https://www.maryferrell.org/showDoc.html?docId=145022#relPageId=20&tab=page "First it suggests that the NSA is able to monitor virtually every international communication entering or leaving the United States. At present, some 24 million telegrams and 50 million telex (teletype) messages enter, leave, and transit the United States annually,"

2 1

JY vs Sea Sea vs Actual Discussion
by David Smith 24 Sep '16

24 Sep '16

I've been reading the list for a few weeks and, I have to say, I am very disappointed. Cypherpunks used to be a group of individuals who solved problems, discussed solutions, and tackled the hard problems that faced the Internet community. There were flame wars, but they got resolved and the list got in with its business. This current shit surrounding cypher piggie is ridiculous. Who the fuck cares about how rude juan is or if Sea Sea or JY are the same people? It's stupid shit that's distracting the list from real issues that it could be tackling instead of spending endless time arguing with and over an obvious troll. Or maybe that's the whole point. Distraction from real work, real code, real idea discussion. Maybe that's the why. I know it won't do any good, but I appeal to the members of this list who are engaging in these stupid discussions to fucking stop it! Focus on what needs to be done, focus on ideas, focus on getting code written. At last, let me say I'm not jumping into the argument here at all. I'm sure this email will be challenged or someone will say something stupid in response. I won't bother responding to those. But I will engage in serious discussion with anyone who wishes to do so. I don't care about sea sea or juan or John Young or who they 'really' are. I'm here to connect with other REAL cypherpunks who want to get shit done. Not little boy and girl posers who like the idea of tangentially associating themselves with a movement that changed the world. My public key is below should anyone wish to use it to communicate. D -----BEGIN PGP PUBLIC KEY BLOCK----- mQINBFfkVNcBEADFfeLnvegKe/FoKTGT/o5tBfqI0chjoKMEqdrZnqf3SSzteLDy ZbDJ7T9IMJzqF9T+K+KMUswiBqstZ0lxDK1138jWq3QXDXwlAfKtiHG7cTZLEgtf zj0v09gNoLWhsSp0wnTjgV4kdLHAdb5cCLiG+XXhhWmfU+zWfzXZJz5+isLfCQGu H7bPo6embdHFKsfjCGW/07911WM5VpZzrJhJ8pAyxK4nCKOVcKu5fjmOtPu2ZHXQ LDEWzVi+MIJpF9wa6GEcNZTF1qrKuHrlmeIemB0uMgPkf8CdLpXBDLss2WRkXKZc 4lsJ4yssbv5XnStmPxTeKCqLOWo5Gi6bGrqxIeCwL9zkJUwnIEgT/jirbjTLKXKl rjvS61xCdIVj8LDYjcLsbnq7rZKQdiypJ/R6Pb0P18bAhtYCHpUZ/RXVtZ5vmVVD qSFm8c1gb4nRHjrUb+GdWruWrG+onRT8PEnZncsUJdNhGT8IIOwVIfwBsoNwqEG+ jYsm+GDIYX6Bhfmr644PVrbwkWtcxu7BduH2hVqhtjmY3UDwulgJfoPHJvQdbwT1 4y6ZDsrG5jE0jmt/7Na/n3QyqF3L9ifapyVXBaON6UylcqQkOC0djuGDfuRMSljr zQQKvtQ4Yw4G0LkufwQqgukANbjrvIChP+gmbYATiz1MpDm6mbzK6At94QARAQAB tCJEYXZpZCBTbWl0aCA8YW5vbjc0MjdAdHV0YW5vdGEuZGU+iQI/BBMBAgApBQJX 5FTXAhsDBQkB4TOABwsJCAcDAgEGFQgCCQoLBBYCAwECHgECF4AACgkQwpB/ATwg nVhg7hAAjvHLo7i3PBmHjvuk53NFt2shDVbN5PPao/wPYWILcO5TjdC0VtaCZFiQ ee0aMSnCjzuEM5vQpeUjPCkjRLJ3cCmk9xrh+y6OoEQTjohNSMpJhafSp+2+IzAG KTfRCfAOzs7tzlHDdx9XUMMjJF3nNAaDFySG8KCDdoOnhStMW3+wUfCeJLaIr71V 3zA7vJ3to1uyc4gX9Ev5bfWetB+OP/eX9jgv9fDCqAkayAjsXwmMD1CtGxklGFiv RGblz6kZO3TKrK+FjKodTp7OlbuwIffH79B4qH2t2n91w1mccePP8ywngJ97X/Gz +3bU/JAfQyLxV12FNbGs9+R5rjZg2hxYIBRFNa5mHBUDwtzRHY5xRV6r4xHlprIE ZRIRN+tcxvEYSuy8Tza30qEhSrAM52iS3XYGj+Si1p7EvxGUVwLYRpgEWNKS5oa+ MyF/QwgrjcWVvW9zeRqVaMpTHY1ulGainSrK6Pou12TbxIi5mk7PcMe7ZNQOgcjK jodCs9h+r+Sh4h62h9BVeFqVGInMRxbwGM6lzaBVXed5wpUAQ0agmYSSodskpoJf Ut+fpU2igRkVrjNa1FX+1rgF7aJBTREyPzlHO2oINuFkFGXUHfB4PTNBPyrE8/K9 0yREZAb2CjQYvTZEQp8XUgExOvQx+qDo4HaIFcVTl2dkkeh3yOG5Ag0EV+RU1wEQ ANSESHhop5V+2hNKFXbk65XrBOW0rw8eSzZj3//yJOEFkcYe2/BcMR17O877NTnH ehMzDgACTRgxjfODoM7/0h4hziC6UIIKxUo9QcC+aToBtybhXqWfRJnUSaACgrg3 rEqlJGPF/G6f159sdtw24n2FkHoE1wozWbSv1jar+bbGsgkkukADcY7uab2EYzS8 FcsbXuNIPK0DbzfQnt7GAO1GtyGMbEKcIJZ+oRtDrGX23e3WN+tN6hpEs+si68tI B16M6o6w/z5PaKumJmVMNKtYXUEDOnpHhWvMC5oKsp4PT4C4EbsMqpxaDo21U37C o9YMPo3qmEZlDPaeC+4amEHKAu7PCkwPGav+eBCLFH/Xv6kyzBZABIORDujvsRfS NzTgcXl58aOmV02ipJD4EWWMWQwVzYjRxwkonBsR6KCSNXKmFCHxulWNf1WL6isn 43HF+yFMUL1UU+rZxuJs6lZuQ1fKL//CW5R1WWtgy4pYpMueDJ9/mVrXnX/arZDV p+or342EiqGzmIhOX/zJfcEbb+evqQcWjs4oUn+tOimb5AqlCTYdv3w2XcGFmQcE 8HnV4QEzlAYHMwP7DN9e6DoqL+l+oNCDLiPpRQHdH13Q+G5XOro5mepSsOBqkYzF aTGyJyJs4QnpViFhZN/15diCEF/+zgUyhDsyr6caxvChABEBAAGJAiUEGAECAA8F AlfkVNcCGwwFCQHhM4AACgkQwpB/ATwgnVh2Wg//Znrp6qV0EtITKtsh+nQ07D/C omtocd+8Qujq4q93tgeGot++XHE3r9tycLBC5SthzJVtHprVICQBOu3b+qN1LWt6 kiKrlWrLmZyA5k8+2PImPyEGYiwV5shaRlUwMMrBah3yF6gmQuSNjK0u0+BzMARu lRJeIa3CFirrA09Jfk7zb3Ys8FXAzP5Oz0XZqpZKOZDML8XyLo6tQLC8ENXuQE6D 1jrmN781LIDXaz7PppAoSjqn/QV4tfHWdHCsq/4sQD/kPBznOal0P5ahvSEffRH+ ru0Kc6ozKw8cMG9h4W/HI3jSTCSy9EzzINdT9DRpe1c9VlM5ihlZdFq7PhsPAyGf 72FGud4R2JfaeUsEiwE+IWQHW79vdUrDypSlDdQsbhuJMup8Xu+XeBFJtyq+I5Dd Wq29WSxsRwFXyoDnhhVMNfI8OcIx9kMU3Px8EYJKUN2/NbWD/yWL5/JZBjc590cl nnyWDmx6rkLVOBLZgNM52zi+f0ormmMBHfK8PkCDY+cWLYQqS5SEpVK1wHOdrFUQ z3OnCLzefSLosQchnLzkycT/AVZxoFTFYI0dgfG9O2m0hDHQRYCuZ/5kb+VHHbcs X4z8OBIC0yz1d0bQSEEjbnL5kCEfyGL0OaigMwrfL3pYJ/Yb9gVjjwlK5ie95nH9 IIVufvT+PqfMzsaPvfg= =gVFm -----END PGP PUBLIC KEY BLOCK----- D

4 7

US: "Abandon the Uniform of the Oppressor"
by grarpamp 24 Sep '16

24 Sep '16

https://theintercept.com/2016/09/23/we-want-the-tapes-charlotte-protesters-… https://theintercept.com/2016/09/22/charlotte-police-chief-refuses-to-relea… https://theintercept.com/2016/09/21/27-u-s-senators-rebel-against-arming-sa… USA... perhaps not completely forgone...

2 1

[RUS] Ukraine - the amazing change
by Zenaan Harkness 22 Sep '16

22 Sep '16

For anyone following major geopolitical events in the last three years, the following is an amazing shift - from the floor of the parliament of Ukraine. I do feel sad for the people of Ukraine who have suffered immensely as a result of this particular Soros-lead "regime change operation". ** Julia Timoshenko to Victor Yanukovich: 'Come Back, My Tormentor!' (http://russia-insider.us9.list-manage1.com/track/click?u=fa2faf7034c3c3c413…) ------------------------------------------------------------ by Alexei Pankin on Thu, Sep 22, 2016 History seems to be going in circles.Back in the 1970s - early 1980s - the vast majority of Soviet citizens were ashamed to live in their country, ruled by Leonid Brezhnev, a senile asthmatic pronouncing endless inaudible speeches, basking in praise, bending under the weight of decorations awarded to him by his Politburo peers or leaders of ‘friendly’, or ’brotherly’ countries.Brezhnev died in 1982 and in 1985 a youthful and energetic Gorbachev came to power, leading the Soviet Union to choose a European market democracy — civilization, in other words. Read more » (http://russia-insider.us9.list-manage.com/track/click?u=fa2faf7034c3c3c413c…) (Other news: ** Did the UN Just Admit That Russia Isn't Responsible For Attack on Syria Aid Convoy? (http://russia-insider.us9.list-manage2.com/track/click?u=fa2faf7034c3c3c413…) ------------------------------------------------------------ by Matthew Allen on Wed, Sep 21, 2016 We knew we were in for a real treat when the United States announced that Russia had bombed a U.N. aid convoy in Syria. What a terrible crime against humanity, timed perfectly to distract from the fact that, for lack of a better term, the U.S. was caught giving air support to ISIS. As always, Russia is guilty until proven deserving of more sanctions. Read more » (http://russia-insider.us9.list-manage2.com/track/click?u=fa2faf7034c3c3c413…)

1 0

group ("tribe") authority, and The State legitimacy
by Zenaan Harkness 22 Sep '16

22 Sep '16

In the mind of the middle of the bell curve, the state has legitimacy in the exercise of its authority, to a fair degree. This perceived legitimacy arises from the group: - the perceived consent of the group/ majority - the input/vote by the "governed" or "controlled" The state loses legitimacy due to - exercise of power beyond moral foundation - abuse of power by officers of the authority - duopoly: two parties both funded by the same oligarchs The legitimacy of any social order/ system arises from the shared, implied / tacit and or explicit, consent of the "governed". Consent can be: - implicit/ tacit - the people don't protest / object - the people vote at elections, and the rest is taken as a "mandate" for the winning party - explicit vote on every issue - like Switzerland - direct democracy style Possible foundations / principles / thought hooks: - delegated power and authority, by people, to an external authority - duration of delegation of any authority (duration of a parliament until the next election, vs duration as voted on by the people) - every activity is lawful except that a supermajority votes against it - every activity on the commons is unlawful except that a law voted by a supermajority allows it - When must a majority be merely a majority (50%+), - when must it be a supermajority (50%+ across all sub groups, or e.g. 60% or 75% across all voters)? Divisions of power and authority: - individual - family, small group - large group, corporation, state - geographic vs intention/ agreement to group - home level, street level, suburb, city, state, nation No authority except by consent of he who shall be imposed upon. Any change will require a concensus - speak your hierarchy of principles in a way Joe Sixpack can hear you. Choose a grand goal, but carefully consider the steps between now, and the end goal, and how to obtain agreement or mutual consent in conversation with Joe to a ladder of principles which ultimately achieves desired end goal.

2 1

In solidarity with Library Genesis and Sci-Hub [was: Sim Theory]
by grarpamp 22 Sep '16

22 Sep '16

On Wed, Sep 21, 2016 at 6:15 AM, John Newman <jnn(a)synfin.org> wrote: > I don't > suppose anyone has an ePub they could > shoot me? Continued secrecy of private knowledge. > Or is it worth $30 for a 1995 > paperback, maybe so... For this small price of love, you could grant it it's freedom, for everyone, forever... http://custodians.online/

4 5

Fw: Activist DESTROYS 19 Red Light Cameras and Turns Himself In
by Zenaan Harkness 22 Sep '16

22 Sep '16

Hawaii's red light and fixed "speeding" cameras had to be decomissioned not so long after launch - this is where Australia's first batch of traffic cameras came from, the ex-Hawaii cams :/ In America, the ability to just shoot out a traffic camera is easier in general since carrying firearms is quite a bit more common than in Australia. ----- Forwarded message from Jim <jim.sovereign(a)optusnet.com.au> ----- Subject: Activist DESTROYS 19 Red Light Cameras and Turns Himself In He deserves 'Hero of the People' status. http://www.activistpost.com/2016/09/activist-destroys-19-red-light-cameras-…

1 0

Re: [From xorcist offlist] Cloudflare & NoDAPL again w/ a ROTF
by juan 22 Sep '16

22 Sep '16

On Wed, 21 Sep 2016 23:10:27 -0000 xorcist(a)sigaint.org wrote: > > However the idea that a professional seller of jewelry is > > going to make a big sale like that, without even COUNTING the bills > > because he had been chatted up with some nonsense about the > > subway system is...not plausible. > > It's all about misdirection, and subtle cues. Yes, but there isn't anything extraordinary about it. He's simply trying to distract his target. There isn't any profound scientific principle or insight behind that. Or, the insight may be that you better double check facts and evidence. That would be a useful teaching, but not a sound case against rationalism. > I haven't seen Derren's > explanation of this particular example, but from what I know of the > subject, here is my take: > > The chat about the subway is misdirection. > ...etc > It's conceivable he stages some things, too. Like any magician. In that same video he fails to scam a guy who sells hotdogs - as a matter of fact the hotdog guy is rather pissed off. But then he sucessfuly steals $4500 from a jewelry store? Not believable at all, not even as staged entertainment. > > > I do think that Darren is socially engineering people. The > > people who watch their videos, IF they think are real... > > But if you believe a talented magician never manages to fool people > successfully, you're naive. Yes, they'll stage stuff too, but that is > hardly the point. The point is that you are advancing an anti rationalistic view of human nature, and apparently presenting as evidence stuff that...isn't convincing. > The skills of illusion, and "mentalism" are quite real.. and if you > watch more of his stuff, especially the longer videos or full > episodes where he breaks down the hows and whys of it working, > perhaps you'll be less likely to say its fake. It's easy to dismiss a > magic trick as "camera edits" when you just have a 3 minute video. > It's a bit harder when the magician explains the whole thing to you. Magic tricks don't have much to do with this. Magic tricks rely on exploiting shortcomings of perception, "the hand is quicker than the eye", that sort of thing. But indeed nobody believes that those magic tricks are 'real' magic. If anything they prove that people are rational and know that magicians can't make rabbits dissapear - they know it's 'illusion'. If on the other hand Derren is 'staging' the jewelry store video, that means he and the guy at the shop are playing a part and the video isn't even 'illusion', it's outright fake. > > In the videos I linked to, he uses a lot of body language mirroring. > Whatever movements the subject makes, he mirrors with his own body > language. Then, when he feels like he has the person, he'll move away > as a test and do other movements to see if they have begun mirroring > him, in return. > > Then he handed them the water bottle, while asking for something in > return. They continue to mirror, they have received, so they'll give. > This is doubly effective, since there is a subconscious desire for > reciprocity. OK, so maybe handing the bottle of water makes it more likely that they other guy would hand something in return. A neat trick, which might work. Sometimes. Still, this is no sound philosophical principle. > > And then yes, they realize it. Their rational mind kicks back in, and > they'll realize it. But the fact that the rational mind can be so > easily subverted, should give one pause. So he failed 50 times and then tricked one guy for 10 seconds. Is that evidence against rationalism? > > He uses a lot of techniques, but "neuro-linguistic programming" (NLP) > is the bread-and-butter. > > I have some familiarity with the techniques.. book learning, > basically. I've never employed them, at least not consciously, but I > can say that I see a lot of this stuff in advertisements and > politicians speeches. > > Seems to me there is something to it, As in you can trick some people under some special circumstances for a short period? Yes. But I don't think there are wider implications. > whether Derren is 100% above > board, or not. >

4 5