March 2017 - cypherpunks - lists.cpunks.org

[OT] "Don't use science to justify your bigotry."
by He-Man 10 Mar '17

10 Mar '17

> Cecilia Tanaka cecilia.tanaka at gmail.com > Thu Mar 9 09:57:21 PST 2017 > >> There are more than two sexes because "muh bugs" >> Oh, did you mean humans ? >> There are more than two sexes because "muh nutritional deficiencies" So there are two sexes. One that shoots a load, and one that hosts the parasite, or something like that ... >> but your heart and brain are male My dick is female, since, according to Bill Maher, women can't rape men. > don't use religion to justify your prejudices Don't use politeness to justify your stupidity.

1 0

A debunking of "Racialism": "So, in a nutshell, little sunlight=white skin, much sunlight=black skin"
by Razer 10 Mar '17

10 Mar '17

It's the Vitamin D stoopid! A science teacher explains: https://www.facebook.com/grace.pokela.1/posts/10100443953660160 > > There is even an exception to this rule, and it’s an exception that > PROVES the rule. > > There is one group only of people who have lived with very little > sunlight for a very long time, but who still have brown skin. This > group is the American Inuit (Eskimos.) They live in an area where the > sun shines not at all for a large portion of the year! According to > our vitamin D rule, they should be among the palest of the pale of all > of the Earth’s people. And yet, they are brown. Why? > > They are brown for one very, very simple reason. Inuit eat a lot of > seal and whale meat. And can you guess what vitamin seal and whale > meat contains tons of? > > That’s right- vitamin D!!! > > Inuit have brown skin for the simple reason that they’ve spent > thousands of years getting their vitamin D from their diets, and NOT > from the sun. > > I am so, so sick of living in a world wherein people whose recent > ancestors needed to efficiently conserve folic acid are treated > differently than people whose recent ancestors needed to efficiently > make vitamin D. It is. So. Stupid. H/t Cecilia Tanaka: "[OT] "Don't use science to justify your bigotry." for tipping me to this FB account.

2 1

[OT] "Don't use science to justify your bigotry."
by Cecilia Tanaka 10 Mar '17

10 Mar '17

"Don't use science to justify your bigotry. The world is way too weird for that shit." And, please, don't use religion to justify your prejudices too. :) c. ====== # http://www.huffingtonpost.com/entry/biology-teacher-transphobia_us_58b9cb01… # http://observer.com/2017/03/transgender-facebook-troll-biology-sexuality # https://www.bustle.com/p/science-teacher-grace-pokelas-viral-facebook-post-… # http://www.refinery29.com/2017/03/143902/biology-teacher-transphobia-argume… ====== https://www.facebook.com/grace.pokela.1/posts/10100443442509510 "I just commented this on a transphobic post that was all like, "In a sexual species, females have two X chromosomes and males have an X and a Y, I'm not a bigot it's just science." I'm a science teacher so I responded with this. First of all, in a sexual species, you can have females be XX and males be X (insects), you can have females be ZW and males be ZZ (birds), you can have females be females because they developed in a warm environment and males be males because they developed in a cool environment (reptiles), you can have females be females because they lost a penis sword fighting contest (some flatworms), you can have males be males because they were born female, but changed sexes because the only male in their group died (parrotfish and clownfish), you can have males look and act like females because they are trying to get close enough to actual females to mate with them (cuttlefish, bluegills, others), or you can be one of thousands of sexes (slime mold, some mushrooms.) Oh, did you mean humans? Oh ok then. You can be male because you were born female, but you have 5-alphareductase deficiency and so you grew a penis at age 12. You can be female because you have an X and a Y chromosome but you are insensitive to androgens, and so you have a female body. You can be female because you have an X and a Y chromosome but your Y is missing the SRY gene, and so you have a female body. You can be male because you have two X chromosomes, but one of your X's HAS an SRY gene, and so you have a male body. You can be male because you have two X chromosomes- but also a Y. You can be female because you have only one X chromosome at all. And you can be male because you have two X chromosomes, but your heart and brain are male. And vice - effing - versa. Don't use science to justify your bigotry. The world is way too weird for that shit."

1 0

CIA/FBI Throwing Hissie Fit Over WL, Vows Havoc Against All But Self
by grarpamp 10 Mar '17

10 Mar '17

http://edition.cnn.com/2017/03/08/politics/wikileaks-cia-investigation/ The investigation is looking into how the documents came into WikiLeaks' possession and whether they might have been leaked by an employee or contractor. The CIA is also trying to determine if there are other unpublished documents WikiLeaks may have. The documents published so far are largely genuine, officials said, though they are not yet certain if all of them are and whether some of the documents may have been altered. One of the biggest concerns for the federal government is if WikiLeaks publishes critical computer code on how operations are conducted, other hackers could take that code and cause havoc overseas. https://www.eff.org/deeplinks/2017/03/hey-cia-you-held-security-flaw-inform… Cindy Cohn, writing for EFF: The dark side of this story is that the documents confirm that the CIA holds on to security vulnerabilities in software and devices -- including Android phones, iPhones, and Samsung televisions -- that millions of people around the world rely on. The agency appears to have failed to accurately assess the risk of not disclosing vulnerabilities to responsible vendors and failed to follow even the limited Vulnerabilities Equities Process. As these leaks show, we're all made less safe by the CIA's decision to keep -- rather than ensure the patching of -- vulnerabilities. Even spy agencies like the CIA have a responsibility to protect the security and privacy of Americans.

3 2

Bitcoin: NH Moves to Completely Deregulate Cryptocurrencies
by grarpamp 09 Mar '17

09 Mar '17

https://www.reddit.com/r/Bitcoin/comments/5y91i0/were_about_to_completely_d… https://www.youtube.com/watch?v=vxCNeK97_C8

1 0

Tech Oligopoly Harmful, Deja Vu
by grarpamp 09 Mar '17

09 Mar '17

http://www.theverge.com/2017/3/8/14848642/walt-mossberg-tech-gang-of-five-a… What we have now in consumer tech, in 2017, is an oligopoly, at least superficially similar to the old industrial-era American corporate groups that once dominated key industries. I think that their enduring and growing power casts a shadow over the Silicon Valley legend that there are lots of great new consumer tech innovations being incubated right now in garages or dorm rooms somewhere that will be taken all the way to becoming great companies, the way each of the Gang of Five was. What I fear is more likely to happen to any such startup is that, if they're good, they get acquired by a member of the Gang, or that their idea is turned into a feature for one of the Gang's products. And, even if that never happens and a startup thrives, too often it can only thrive by being successful on a platform controlled by one or more Gang members, with the big guy maybe taking a cut. For instance, Snap, the parent company of Snapchat, which went public last week, famously spurned a $3 billion takeover offer from Gang member Facebook in 2013. But it depends for its very operation on the cloud services of Google and on the mobile app platforms of Apple and Google. And plenty of other companies which either presented threats or opportunities to the Gang have been snapped up by them. Each of the five companies actively scoops up numerous smaller companies every year, in many cases just for their talent and / or patents.

1 0

US Law To Let ISPs Sell Your Soul
by grarpamp 09 Mar '17

09 Mar '17

http://www.flake.senate.gov/public/_cache/files/628ce252-7079-4e9a-b76c-d11… http://www.flake.senate.gov/public/index.cfm/press-releases?ID=7B9C373D-449… https://politics.slashdot.org/story/17/03/08/2032228/gop-senators-new-bill-… https://arstechnica.com/tech-policy/2017/03/gop-senators-new-bill-would-let… Yesterday, Sen. Jeff Flake (R-Ariz.) and 23 Republican co-sponsors introduced a resolution that would overturn new privacy rules for internet service providers. "If the Federal Communications Commission rules are eliminated, ISPs would not have to get consumers' explicit consent before selling or sharing web browsing data and other privacy information with advertisers and other third parties," reports Ars Technica. "The measure would use lawmakers' power under the Congressional Review Act to ensure that the FCC rulemaking 'shall have no force or effect.' The resolution would also prevent the FCC from issuing similar regulations in the future." From the report: Flake's announcement said he's trying to "protect consumers from overreaching Internet regulation." Flake also said that the resolution "empowers consumers to make informed choices on if and how their data can be shared," but he did not explain how it will achieve that. The privacy order had several major components. The requirement to get the opt-in consent of consumers before sharing information covered geo-location data, financial and health information, children's information, Social Security numbers, Web browsing history, app usage history, and the content of communications. This requirement is supposed to take effect on December 4, 2017. The rulemaking had a data security component that required ISPs to take "reasonable" steps to protect customers' information from theft and data breaches. This was supposed to take effect on March 2, but the FCC under newly appointed Chairman Ajit Pai halted the rule's implementation. Another set of requirements related to data breach notifications is scheduled to take effect on June 2. Flake's resolution would prevent all of those requirements from being implemented. He said that this "is the first step toward restoring the [Federal Trade Commission's] light-touch, consumer-friendly approach." Giving the FTC authority over Internet service providers would require further FCC or Congressional action because the FTC is not allowed to regulate common carriers, a designation currently applied to ISPs.

1 0

Re: Anarchapulco Presentation
by jim bell 09 Mar '17

09 Mar '17

From: Sangy <sangy(a)riseup.net> >Talk about bougie shit. $245 dollars to listen to pseudolibertarians and share space kid-pissed pool. I had only been in Mexico once before: I spent about 6 hours in Juarez in about 1972 with my father and grandfather, while we were on our way from Kansas to California. Back when Juarez was generally safe to go to. I didn't get enough data to determine the "libertarian-ness" of the typical attendee. It was an excellent hotel. I don't know how many "stars" it rated, but it was called the Mundo Imperial. >> "How to find love in anarchapulco" >ROTFL I found out that I have groupies! I got recognized at taxi pickups and on buses. More of them seem to be male, however. <sigh> >How did it feel to share stage with Lauren Southern? Unfortunately, I was busy preparing my speech, and missed out on her presentation. I will definitely be watching her, and other, presentations when they become available on the Internet in a few days. I did meet, and then later saw the presentation of, Roger Ver, nicknamed "Bitcoin Jesus" for his promotion of Bitcoin and digital currencies in general. I had previously read a lot about him. Amazing work. At the end of his last-day presentation, he called my presentation "the best" at that convention. Naturally, I am very grateful. >Also, what'd you talk about? The obvious: My AP essay, 22 years later. https://cryptome.org/ap.htm Explained for the unitiated what it is all about, the fact that nobody seems to have found a flaw after all this time. Explained that I fixed David Friedman's "Hard Problem", and that he hasn't yet acknowledged this fact, even with the 2014 published third edition of his The Machinery of Freedom book. http://www.daviddfriedman.com/MyTalks/MyRecentTalks.html https://voluntaristicsociety.liberty.me/national-defense-the-hard-problem/ × I really needed about 20 more minutes: They gave each speaker 40 minutes. They should give them 55. There was a suggestion at the end of the conference that they increase the time from 9am to 9 pm, which would allow the extra time. Jim Bell

1 0

CrimethInc Ex-Workers Collective: Do the Vault7 Revelations Mean Encryption Is Useless?
by Razer 09 Mar '17

09 Mar '17

End-to-End Encryption 101 : And do the Vault 7 Revelations Mean Encryption Is Useless? By CrimethInc. Ex-Workers Collective - March 8, 2017 If you’ve used the internet at any point since May 2013, you’ve probably heard that you should use encrypted communications. Edward Snowden’s revelation that the National Security Agency logs all of our calls, texts, and emails sparked a surge in the development and use of encryption apps and services. Only a few years later, encryption is widely used for daily communication. If you use any of these encryption tools, you’ve probably also heard the phrase “end-to-end encryption,” or “E2EE.” The name seems straightforward enough: end-to-end means content is encrypted from one endpoint (generally your phone or computer) to another endpoint (the phone or computer of your message’s intended recipient). But what level of security does this promise for you, the user? Since the start of Trump administration, the US Customs and Border Protection (CBP) has increased its invasion of travelers’ privacy. The CBP has been demanding that both US citizens and visitors log into their phones and laptops and hand them over to the CBP for inspection. They’ve also demanded that travelers provide their passwords or log in their social media accounts. Travelers who don’t comply face the threat of being denied entry. Yesterday, Wikileaks publish a trove of leaked CIA documents including knowledge of security vulnerabilities and exploits that the CIA paid for and kept secret from the general public. Now that this information has leaked, it’s no longer just the CIA that knows these vulnerabilities—it’s everyone. The New York Times and others misreported that the CIA had broken the encryption in apps like Signal and WhatsApp, when in fact what the CIA did was target specific people’s Android devices and compromise them. In short, this revelation confirms the importance of using end-to-end encrypted communications, which hinder state-level actors from performing broad spectrum dragnet surveillance. E2EE is still important. > Many reports around Vault 7 have given the impression that > encrypted apps like Signal have been compromised. In fact, the > compromise is at the device level—at the endpoint. There is no reason > to believe the encryption itself does not work. Limitations: Plaintext Endpoints First, it’s important to understand that if you can read a message, it is plaintext—that is, no longer encrypted. With end-to-end encryption, the weak links in the security chain become you and your device, and your recipient and their device. If your recipient can read your message, anyone with access to their device can also read it. An undercover cop could read your message over your recipient’s shoulder, or the police could confiscate your recipient’s device and crack it open. If there is any risk of either of these unfortunate events taking place, you should think twice before sending anything you wouldn’t want to share with the authorities. This particular limitation is also relevant to the recent “Vault 7” reveals, which demonstrate how apps like Signal, WhatsApp, and Telegram may not be useful if an adversary (like the CIA) gains physical access to your device or your contact’s device and is able to unlock it. Many reports around Vault 7 have been somewhat misleading, giving the impression that the apps themselves have been compromised. In this case, the compromise is at the device level—at the endpoint. The encryption itself is still good. Limitations: Targeted Surveillance Considering that you can’t control the level of security of your message’s recipient, you should consider the risk that any message you send them might be read. While rare, there are cases of state powers targeting people with direct surveillance. In these cases, targets may be working with malware-infected devices intended to log all of their incoming and outgoing communications. This compromise functions at the endpoint level, rendering E2EE useless against these specific adversaries. Because it is difficult to know whether you (or your message recipient) are the target of this type of attack, it is always best to default to not sending overly-sensitive information via digital communications. Currently, such attacks appear to be rare, but one should never take risks needlessly. Limitations: Metadata The third thing you should know about E2EE is that it doesn’t necessarily protect your metadata. Depending on how communications are transmitted, logs may still show the time and size of communication, as well as the sender and recipient. Logs may also show the location of both sender and recipient at the time of communication. While this is not typically enough to land someone in jail on its own, it can be useful in proving associations between people, establishing proximity to crime scenes, and tracking communication patterns. All these pieces of information are useful in establishing larger behavioral patterns in cases of direct surveillance. So… Why? So, if end-to-end encryption doesn’t necessarily protect the content of your communications, and still gives up useful metadata, what’s the point of using it? One of the most important things E2EE does is ensure that your data never hits someone else’s servers in a readable form. Since end-to-end encryption starts from the moment you hit “send” and persists until it hits your recipient’s device, when a company—like Facebook—is subpoenaed for your logged communications, they do not have any plaintext content to give up. This puts the authorities in a position in which if they wish to acquire the content of your communications, they are forced to spend a significant amount of time and resources attempting to break the encryption. In the United States, your right to a speedy trial may render this evidence useless to prosecutors, who may not be able to decrypt it quickly enough to please a judge. Mass Surveillance Another use of E2EE serves is to make dragnet surveillance by the National Security Agency and other law enforcement agencies much more difficult. Since there is no point in the middle at which your unencrypted communications can be grabbed, what is grabbed instead is the same encrypted blocks of text available by subpoena. Dragnet surveillance is generally conducted by collecting any available data and subjecting it to automated sorting rather than individual analysis. The use of encryption prevents algorithmic sifting for content, thus making this process much more difficult and generally not worthwhile. Stingrays In addition to NSA’s data collection, federal and state law enforcement agencies around the country have, and frequently use, cell site simulators known as “IMSI catchers” or “Stingrays.” IMSI catchers pretend to be cell towers in order to trick your phone into giving up identifying information, including your location. Cell site simulators also grab and log your communications. As with other methods of interception, encryption means that what is retrieved is largely useless, unless the law enforcement agency is willing to go to the trouble to decrypt it. Encryption At Rest In addition to using end-to-end encryption to protect the content of your messages while they’re being sent, you can use full-disk encryption to protect your information while it’s stored on your device. Proper full-disk encryption means that all of the information on your device is indecipherable without your encryption key (usually a passphrase), creating a hardened endpoint which is much more difficult to compromise. Although encrypting your endpoints is not necessarily protection against some of the more insidious methods of surveillance, such as malware, it can prevent adversaries who gain possession of your devices from pulling any useful data off of them. End-to-end encryption is by no means a magical shield against surveillance by nation states or malicious individuals, but Vault 7 highlights how using it can help force a procedural shift from dragnet surveillance to resource-intensive targeted attacks. When paired with good sense, encrypted devices, and other security practices, E2EE can be a powerful tool for significantly reducing your attack surface. Consistent, habitual use of end-to-end encryption can nullify many lower-tier threats and may even cause some higher-level adversaries to decide that attacking you is simply not worth the effort. --33-- https://itsgoingdown.org/end-end-encryption-101-vault-7-revelations-mean-en…

1 0

NY Post: WikiLeaks takes another shot at America
by jim bell 09 Mar '17

09 Mar '17

Note:. I, Jim bell, think the content of this editorial is utter nonsense. But, "Know thine enemy" WikiLeaks takes another shot at America http://nyp.st/2n7Robo

1 0