July 2017 - cypherpunks - lists.cpunks.org

Re: Estimate for the total number of exploitable bugs in large linux distro?
by Ryan Carboni 16 Jul '17

16 Jul '17

https://arstechnica.com/security/2016/09/linux-kernel-security-needs-fixing/ Based on the number of concurrent discovered bugs, at least a few. Statistical techniques won't work when it is only discovered bugs. https://en.wikipedia.org/wiki/Selection_bias But the fact that severe bugs are in a distro for over a year makes it irrelevant how many there is. A systematic effort to search for bugs and to anonymously create honeypots is needed. Arguably the best technique would be to reuse TOR directory server private keys as bitcoin addresses for a crowdsourced bug bounty effort.

1 0

The innumerable connections that various nonprofit organizations have to the national security state
by Ryan Carboni 16 Jul '17

16 Jul '17

I should give some credit to leftist conspiracy twitter, but that might be problematic. Still, the proof is not hard to find, which just makes it all rather depressing. Obviously connection number one is they still are nonprofits. People live at the mercy of the state to a greater degree than they realize. Connection number two is that Morris Ernst was J. Edgar Hoover's close friend, or so he thought. Rather Hoover tasked an FBI agent to reply to correspondence to him, so effectively Hoover had an informant within the ACLU. There has been very little said on this topic. Connection number three is that J.P. Barlow, founder of the EFF was contacted by Robert Steele in 1992 (currently believes there is a child sex slave colony on Mars) to speak at an intelligence conference. https://archive.is/87bXM http://www.forbes.com/asap/2002/1007/042.html (but it was pretty prescient "Nonetheless, I sallied forth, confidently telling the gray throng that power lay not in concealing information but in distributing it, that the Internet would endow small groups of zealots with the capacity to wage credible assaults on nation-states, that young hackers could easily run circles around old spies.") Connection number four is that Morton Halperin negotiated with the CIA to support the passage of Intelligence Identities Protection Act. Morton Halperin was suspected of leaking that the US was bombing Cambodia, although clearly we should've used drones then. Morton Halperin has served a few roles with Open Society Institute. https://pando.com/2015/02/07/how-the-aclu-ron-paul-and-a-former-eff-directo… Page 85 of Secrets: The CIA's War at Home ( https://books.google.com/books?id=67XBXqSP9KgC&lpg=PA85&ots=z5R0N8QnH4&pg=P… ) These are not exceptional or new allegations. https://www.wired.com/1996/02/digitel/ The Electronic Frontier Foundation went to Washington to "reverse-engineer > government, hack politics down to its component parts, and fix it." Then it > helped pass the FBI's loathsome "let's-just-wiretap-everyone" Digital > Telephony Bill. And discovered it was Washington that had > reverse-engineered the EFF, driving it into dissension, debt, disgrace - > and right out of town. . > P.S. interesting in context to the times we live in https://www.schneier.com/blog/archives/2006/03/flying_without.html Flying Without ID According to the TSA, in the 9th Circuit Case of John Gilmore, you are allowed to fly without showing ID -- you'll just have to submit yourself to secondary screening. P.P.S https://news.ycombinator.com/item?id=13182120 this might be related to cloudbleed i have seen a lot of nonsensical explanations for various bugs and issues, including that for those that I am a user of, but I do not think compelled speech exists, so I don't know. P.P.P.S. I am open to the possibility that there is a child sex slave colony on Mars, but unlike that guy who stormed Comet Ping Pong, I can't quite go over there to investigate. (fortunately the failed actor, Edgar Maddison Welch, was not a black man, so he was not shot on sight, as would be typically expected) It does seem clear though that the world is set up to benefit people who realize everything is rigged, and they could rise to a middle-management or equivalent lofty position perpetuating everything. Challenging power is difficult to impossible, one of major difficulties being that most people are just plain dumb. I would prefer it if they proved otherwise and I would prefer not being in the position I am in now. Anyone who thinks my position is advantageous is free to trade places.

1 0

Re: Estimate for the total number of exploitable bugs in large linux distro?
by Ryan Carboni 15 Jul '17

15 Jul '17

https://arstechnica.com/security/2016/09/linux-kernel-security-needs-fixing/ The Linux kernel today faces an unprecedented safety crisis. Much like when Ralph Nader famously told the American public that their cars were "unsafe at any speed" back in 1965, numerous security developers told the 2016 Linux Security Summit in Toronto that the operating system needs a total rethink to keep it fit for purpose. No longer the niche concern of years past, Linux today underpins the server farms that run the cloud, more than a billion Android phones, and not to mention the coming tsunami of grossly insecure devices that will be hitched to the Internet of Things. Today's world runs on Linux, and the security of its kernel is a single point of failure that will affect the safety and well-being of almost every human being on the planet in one way or another. "Cars were designed to run but not to fail," Kees Cook, head of the Linux Kernel Self Protection Project, and a Google employee working on the future of IoT security, said at the summit. "Very comfortable while you're going down the road, but as soon as you crashed, everybody died." --- I do not know what is more spectacular, that everyone is in capable of discussing how to make the current network of privacy non-profits more oriented towards protecting privacy when I first suggested ti months ago, or that no one remembered this article from nearly a year ago.

2 1

Estimate for the total number of exploitable bugs in large linux distro?
by Georgi Guninski 15 Jul '17

15 Jul '17

What is an estimate for the total number of exploitable bugs in large linux distro? Also, does the total number decrease, increase or change in other way over time?

3 3

You'd hope it was The Onion. #NotTheOnion: White House Doxes Citizen Complainers
by Razer 15 Jul '17

15 Jul '17

White House publishes emails received from voters commenting on its Election Integrity Commission. Washington Post ledes: "White House releases sensitive personal information of voters worried about their sensitive personal information" > > > "...Unfortunately for these voters and others who wrote in, the Trump > administration did not redact any of their personal information from > the emails before releasing them to the public. In some cases, the > emails contain not only names, but email addresses, home addresses, > phone numbers and places of employment of people worried about such > information being made available to the public. > > The Washington Post is not publishing any of this information because > in most cases it does not appear that the individuals were aware their > comments would be shared by the White House. " > > https://www.washingtonpost.com/news/wonk/wp/2017/07/14/white-house-releases…

1 0

Welcome To Anarchast!
by grarpamp 15 Jul '17

15 Jul '17

https://www.youtube.com/watch?v=m9SbKkm1PbA https://www.youtube.com/user/TheAnarchast/videos https://anarchast.com/ https://twitter.com/anarchast https://www.facebook.com/Anarchast/ Anarchast is your home for Anarchy on the internet. To us, Anarchy means freedom. The desire to live without a violent, coercive State. Anarchy is peace, love and prosperity. Free markets. And, power to the people. Anarchast is the world's largest anarchist/anarcho-capitalist video podcast in the world with 3 million views on Youtube and millions of audio downloads as well as being broadcast on satellite radio across the world and on more than 40 terrestrial radio stations in the US. Anarchast founded Anarchapulco, the world's first and largest anarcho-capitalist conference held yearly in Acapulco, Mexico. Related... https://www.youtube.com/channel/UCEZJ_6qgnT0gQ754yU5_1zw https://anarchapulco.com/ https://twitter.com/Anarchapulco https://www.facebook.com/anarchapulco https://www.youtube.com/user/TheDollarVigilante https://dollarvigilante.com/ https://www.twitter.com/dollarvigilante https://www.facebook.com/DollarVigilante https://www.youtube.com/user/jberwick9 https://www.facebook.com/jberwick https://en.wikipedia.org/wiki/Jeff_Berwick https://paradiseacapulco.com/

12 48

Re: Welcome to Anarchast
by Rachael 14 Jul '17

14 Jul '17

All this talk of Riseup being anti-capitalist and people being selective about their invites is rather amusing. Maybe people on this listserve are not aware that Riseup.net (along with LEAP) are listed as receiving over $250,000 USD from government funding. And that was only the funding which could be confirmed. The few public records I did receive are full of heavy redactions. Netherlands and Sweden still have classified documents, but refuse to release them. Along with some European governments, the US Department of State was also involved in this funding mechanism. I would really like Riseup.net to publicly say whether or not Riseup.net still receives government funding or support. Hopefully, Riseup.net will publicly disclose the funding it has received. Link to documentation (use search term "riseup") http://piratetimes.net/wp-uploads/news/2015/02/Q1-DDP-2014.pdf

6 6

[WAR] Trump negotiates contract with Russia for "10,000 beautiful MiG-35s" to replace F-35 boondoggle
by Zenaan Harkness 14 Jul '17

14 Jul '17

http://russia-insider.com/en/politics/kgb-sends-trump-his-first-directive-a… Donald "Donat Ivanovich Trollstoyevski" Trumpenfuhrer begins the inevitable naval vtol gazing. KGB is proudski.

1 1

[ PFSR ] Prosecutor Agrees to Drop Sexting Charges Against Iowa Teen
by Zenaan Harkness 14 Jul '17

14 Jul '17

The relentless bullying by the state is quite impressive - madness prevails regardless of morals, ethics, common sense. These cases where the force and power of the state is brought against an under aged teen doing what teens do and attempting to drag them through the "criminal" "justice" system, is astounding, and the lack of empathy, lack of common sense, and lack of anything resembling a moral attitude towards the younger generation, leads me to believe that there are those in power in our "modern" "democracies" who are fundamentally compromised within their own behaviour, conducting themselves in ways that they find themselves to be morally reprehensible, and that they project upon others, including incredibly upon children and teenagers, the evils that are in their own hearts and deeds. Top this off with wide and pervasive cowardice within the general population and the following fight-back event is an extremely rare sight in this day and age. Prosecutors, police, lawyers, judges and politicians (those who conduct yourselves in evil): continue to project your own evil upon children and teenagers at your peril - we will come after you, and your endless attempts to hide your crimes shall be uncovered and exposed! Would be nice to see the parents below preemptively/ proactively pursue this case regardless, to help the next child targetted by the next self-projecting moron wielding the power of the state in such an insane way. Subject: [ PFER ] Prosecutor Agrees to Drop Sexting Charges Against Iowa Teen https://www.usnews.com/news/best-states/iowa/articles/2017-07-13/prosecutor… A county prosecutor in Iowa who threatened to charge a 14-year-old girl with sexual exploitation of a minor after she sent suggestive photos of herself to a boy at school agreed Thursday to drop the case after the girl's family sued him for violating her constitutional rights to free speech and equal protection. ----- End forwarded message -----

1 0

Fwd: Re: Donald Trump: a perfect representative for modern America & a so-called Sharing Economy
by Razer 14 Jul '17

14 Jul '17

On 07/13/2017 10:33 AM, Joshua Case wrote: >> Ps. I just received an email at this address from a "Mark M" >> <write2mark1(a)gmail.com> requesting an invite for a riseup account, >> because Riseup is no longer accepting applications due to mass abuse by >> lying about the purpose for the account, which is supposed to be social >> activism related. >> >> >> Mark M claims he needs the account b/c: >> >>> I need an invite code for getting a riseup account I am a bit coin and >>> monero contributor >> No. Mark. Just no. >> >> You probably think creating another mythical currency is actually social >> activism. You are deluding yourself. >> >> Rr >> >> >> > > Seems fake. Nobody emailed you. Fuck you and your "/Nobody emailed you/". Email source: Note: Down in the gibberish > > >  > > Someone's collecting invites too. Rr Return-Path: <write2mark1(a)gmail.com> X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on spoonbill.riseup.net X-Spam-Level: X-Spam-Pyzor: Reported 0 times. X-Spam-Status: No, score=-1.3 required=5.0 tests=AM_TRUNCATED,BAYES_00, CK_KARD_SIZE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_ENVFROM_END_DIGIT, FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL,RCVD_IN_SORBS_SPAM,SPF_PASS shortcircuit=no autolearn=disabled version=3.4.1 Delivered-To: g2s(a)riseup.net Received: from mx1.riseup.net (unknown [10.0.1.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.riseup.net", Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK)) by spoonbill.riseup.net (Postfix) with ESMTPS id 331E7D1 for <g2s(a)riseup.net>; Thu, 13 Jul 2017 15:40:16 +0000 (UTC) Received: from mail-oi0-f66.google.com (mail-oi0-f66.google.com [209.85.218.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (not verified)) by mx1.riseup.net (Postfix) with ESMTPS id EFAF21A1E07 for <g2s(a)riseup.net>; Thu, 13 Jul 2017 15:40:15 +0000 (UTC) Authentication-Results: mx1.riseup.net; dkim=pass reason="2048-bit key; unprotected key" header.d=gmail.com header.i=(a)gmail.com header.b=iJAUDp4w; dkim-adsp=pass; dkim-atps=neutral Received: by mail-oi0-f66.google.com with SMTP id f134so7121985oig.0 for <g2s(a)riseup.net>; Thu, 13 Jul 2017 08:40:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:thread-topic:thread-index:date:message-id :content-language:mime-version; bh=b/OpZNDt13r3He2xHPuY/QrXG/CFvNTzCGOMK58Yc/c=; b=iJAUDp4wX8XgMvmdWEVftSWW34yEb1WSPUdOQzceo8jVVvtH/tHyjUll0g7S27G4iM LKLcDp4ydo9lpHl4mRsp1nBax2EFrXyIYb1RJtx4QSGFMXRVzzFPwvmGLSlJeNl3Zp4I Hnc867pw80nDI3aLFbtLcGMcFOL/R0aIYI60fTS5FdukWCYIq112qUQPdc71UAMMMR9i me7Hytkm8FpeAok3l44kQ0AMavMZSGZkFJqmwrQZuFzwSp0dvBKrB3LLOxpNMxs+YuTc LA7Rbpd4+D/YEY6CaO8dFpzGSV5dUlxbHaOp+al6b4x7pv11kbEdx6CCMANVpWUYdW1o Z/nw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:thread-topic:thread-index:date :message-id:content-language:mime-version; bh=b/OpZNDt13r3He2xHPuY/QrXG/CFvNTzCGOMK58Yc/c=; b=rAtpRX14Z4TSwOkNZxroOl/neSZiXk8r4kpZ3UVictmmrthq9ZyFI+lsCgG43Bnh+R FSAZZxsAXzx9teQX5m6B9FcFuPQ8s0eExJq8OZkjbaoSaXwnit+RWCZYoRXWFQjAYIla lQ16NFEM1y0BbQYDngpdeQ3JEnsYjXHG2lotb1viBb7zUC9At2Dlh5F5ED1Zl9/A9e9s TanVBQZ1ccN20+YF13iV1rYP5aeK6vKdLzPJtLcMgK+rdO27P99e61rlTcEUWV+H3Gv7 aSTkHKZXj1IScJksyO6WqqG0KKoeVE5CtougedAG0idxjXhANIgiQehAJBRs0RbuD55r pfqg== X-Gm-Message-State: AIVw111/YoOGlDGBqtLl7neRGBfK3UK6DMaktRi6dDTAbVMSmOf3OjGB NjUqwvS01/NadUlSOuw= X-Received: by 10.202.198.4 with SMTP id w4mr2564398oif.147.1499960414894; Thu, 13 Jul 2017 08:40:14 -0700 (PDT) Received: from CY4PR19MB0920.namprd19.prod.outlook.com ([40.97.149.109]) by smtp.gmail.com with ESMTPSA id a187sm6547349oii.13.2017.07.13.08.40.13 for <g2s(a)riseup.net> (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 13 Jul 2017 08:40:14 -0700 (PDT) From: mark M <write2mark1(a)gmail.com> To: "g2s(a)riseup.net" <g2s(a)riseup.net> Subject: RaZer Thread-Topic: RaZer Thread-Index: AQHS++gEL8Yeex/B/EqdmjIYImUW/Q== X-MS-Exchange-MessageSentRepresentingType: 1 Date: Thu, 13 Jul 2017 14:55:07 +0000 Message-ID: <CY4PR19MB092024CE574EF930A6A60B88F3AC0(a)CY4PR19MB0920.namprd19.prod.outlook.com> Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_CY4PR19MB092024CE574EF930A6A60B88F3AC0CY4PR19MB0920namp_" MIME-Version: 1.0 --_000_CY4PR19MB092024CE574EF930A6A60B88F3AC0CY4PR19MB0920namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I need an invite code for getting a riseup account I am a bit coin and mone= ro contributor --_000_CY4PR19MB092024CE574EF930A6A60B88F3AC0CY4PR19MB0920namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable  <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > </head> <body> <div id=3D"compose-container" style=3D"direction: ltr" itemscope=3D"" itemt= ype=3D"https://schema.org/EmailMessage"> <span itemprop=3D"creator" itemscope=3D"" itemtype=3D"https://schema.org/Or= ganization"><span itemprop=3D"name" content=3D"Outlook Mobile for iOS"></sp= an></span> <div> <div style=3D"direction: ltr;">I need an invite code for getting a riseup a= ccount I am a bit coin and monero  contributor</div> <div><br> </div> <div class=3D"acompli_signature"></div> </div> </div> </body> </html> --_000_CY4PR19MB092024CE574EF930A6A60B88F3AC0CY4PR19MB0920namp_--

5 6