August 2017 - cypherpunks - lists.cpunks.org

[pfir@pfir.org: [ PFIR ] More on the internal Google doc being widely discussed in the media today]
by Zenaan Harkness 06 Aug '17

06 Aug '17

Lauren genuine concerned about the culture of pretense at Google (see below). We absolutely MUST NOT tolerate alternate political views which seek diversity of alternate political views! Leftist Diversity is an absolute biological necessity almost on the level of species survival (for a Liberal Lefty), where genitals are something you think about and sincerely, seriously, try to resolve your issues, inner conflicts and emotions regarding. Any suggestion that there is a difference between a penis and a vagina, and ESPECIALLY any suggestion that there is no difference between someone who's got one and someone who's not sure but thinks they might want one, MUST NOT BE TOLERATED !!!!!!!! Good, now that we've cleared up these important facts, we're all on the same page with Lauren. :O)D)- (Because smileys are nothing but a social construct.) ----- Forwarded message from "PFFR (People For Finternet Responsibility) Announcement List" <pffr(a)pffr.org> ----- Date: Sat, 5 Aug 2017 14:25:07 -0700 Subject: More on the internal Google doc being widely discussed in the media today More on the internal Google doc being widely discussed in the media today https://plus.google.com/+LaurenWeinstein/posts/j4qsLr7sCua I am very disappointed to learn that the internal Google doc re diversity issues -- apparently an opinion piece by a single author, NOT Google policy -- has been leaked in its entirety. I can't see any valid justification for such a leak regardless of how negatively most Googlers may disagree with its content, and in my view this threatens the culture of internal openness and discussion at Google that is extremely important both to Google and ultimately to Google's users.

1 0

CryptoBadger DGAF
by grarpamp 05 Aug '17

05 Aug '17

2 1

Re: [tor-talk] Tor ban discussion at Russian state Duma
by grarpamp 05 Aug '17

05 Aug '17

On Mon, Jul 31, 2017 at 10:59 PM, krishna e bera <keb(a)cyblings.on.ca> wrote: > Followup: laws passed. > > " > President Putin has signed a law that, as of November 1st, bans > technology which lets you access banned websites, including virtual > private networks and proxies. Internet providers will have to block > websites hosting these tools. > ... > > Accordingly, the President has signed another law requiring that chat > apps identify users through their phone numbers after January 1st, 2018 > " > > https://www.engadget.com/2017/07/30/russian-censorship-law-bans-proxies-and… This is very poor, as the fundamental concepts of society and interpersonal as we know it require to have private comms on various things, this rational extend from in person to over distance. We have no human capability to even imagine nonprivate world, let alone spy world, as is not human. So fuck RU and FVEY... they idea are not human but maniac. Resist. Do crypto. Do political action for human.

2 2

But you knew that right? "Your 'Anonymous' Browsing Data Isn't Actually Anonymous"
by Razer 05 Aug '17

05 Aug '17

> Eckert's first task with the data was to find out if her browsing data > was included in the dataset. To do this, she queried the data for the > URL linked with her company's login page, which generates a unique ID > for each employee. Germany has a population of about 82 million, so > the odds that Eckert herself was in browser data collected from 3 > million Germans was small. Although it turned out her browser history > wasn't in the data set, by querying the data for her company's login > page Eckert discovered that a number of her colleagues were in the > data by matching the unique login IDs from the company's page to the > individuals. > > With this information, Eckert would've been able to see her > colleagues' entire browsing history for the last month. One of the > colleagues included in the dataset was a close friend of hers, and she > reached out to him to let him know that she had his browsing history. > The question she had was which browser plugin was collecting and > selling this data. > > To answer this question, Eckert had her colleague delete one browser > plugin every hour until he disappeared from the live data. On the > seventh plugin, he disappeared. This suggested that the plugin > collecting and selling his browser data was, ironically enough, called > Web of Trust, which offers "free tools for safe search and web browsing." > > The troubling thing about Eckert and Dewes' de-anonymization technique > is that it can be used on anyone who has a public social media > presence. For their report, Eckert and Dewes focused on Twitter and > the German LinkedIn equivalent, Xing, to see if they could use these > public profiles to de-anonymize public figures in the data. > > When you click on your analytics page on Twitter, this brings you to a > URL that includes your public Twitter handle—Xing has a similar > feature. This means that Eckert and Dewes were able to query the > database for these publicly available Twitter URLs for German politicians. > > If the politicians were included in the dataset, the next step was to > visit the Twitter profile of the politician and collect a few of the > links they had recently posted. By using these links, coupled with the > public Twitter URL, Eckert and Dewes were able to pull an individual's > entire month-long browsing history from the anonymous dataset. > > As Dewes pointed out when he and I spoke at Def Con, it requires an > astonishingly small amount of browsing information to identify an > individual out of an anonymous dataset of 3 million people. Since > everyone's browsing habits are unique, it only takes about 10 website > visits to create a "fingerprint" for an individual based on which > websites they are visiting and when. > https://motherboard.vice.com/en_us/article/gygx7y/your-anonymous-browsing-d…

3 4

L4nguage and anonymity
by Georgi Guninski 04 Aug '17

04 Aug '17

L4nguage and anonymity: http://www.theregister.co.uk/2017/08/04/to_preserve_online_anonymity_make_y… https://arxiv.org/pdf/1707.03736.pdf

3 2

Re: [Cryptography] How to find hidden/undocumented instructions
by grarpamp 04 Aug '17

04 Aug '17

On Fri, Aug 4, 2017 at 10:29 AM, Kevin W. Wall <kevin.w.wall(a)gmail.com> wrote: > researchers commitment to full disclosure has now revealed > to Skynet Intel's secret plans to destroy our future AI > overlords using this undocumented, unprivileged "halt and One might expect a set of hard to find random opcodes, or some other trigger, and for Skynet's embeds to already know about most of them. #OpenFabs, #OpenHW

1 0

Re: [Cryptography] How to find hidden/undocumented instructions
by grarpamp 03 Aug '17

03 Aug '17

On Wed, Aug 2, 2017 at 9:17 AM, Henry Baker <hbaker1(a)pipeline.com> wrote: > https://raw.githubusercontent.com/xoreaxeaxeax/sandsifter/master/references… > > Breaking the x86 ISA > Christopher Domas xoreaxeaxeax(a)gmail.com July 27, 2017 > > A processor is not a trusted black box for running code; on the > contrary, modern x86 chips are packed full of secret instructions and > hardware bugs. In this paper, we demonstrate how page fault analysis > and some creative processor fuzzing can be used to exhaustively search > the x86 instruction set and uncover the secrets buried in a chipset. > The approach has revealed critical x86 hardware glitches, previously > unknown machine instructions, ubiquitous software bugs, and flaws in > enterprise hypervisors. "Lastly, a so-called `halt and catch fire' instruction was discovered on an as-yet unnamed x86 processor. This instruction, executed in ring 3 from an unprivileged process, appears to lock the processor entirely. To rule out kernel bugs, the instruction was tested against three Linux kernels and two Windows kernels, yielding the same results. Kernel debugging with serial I/O and interrupt hooks appeared to corroborate the results. At the time of this paper's publishing, the vendor has not been provided sufficient time to respond to the issue." This is nice work. These sort of fuzzers and searchers need a distributed network version to cover more space deeper and faster.

1 0

Strong Crypto Kit [was: Enigma kit]
by grarpamp 03 Aug '17

03 Aug '17

On Wed, Aug 2, 2017 at 5:34 AM, Peter Gutmann <pgut001(a)cs.auckland.ac.nz> wrote: > https://www.tindie.com/products/lpaseen/meinenigma-hybrid-kit/ > > This is an electronic replica of the Enigma crypto machine used during WWII > by the Germans to encrypt all the military communications. It is intended to > be as close to the real one as economically possible. While cool, at the end of the day it implements broken crypto, on relatively closed inauditable core chip. So it's an unusable coffee table conversation piece. Why not put the $300 towards an open discrete implementation of at least some well known secure symmetric cipher, buildable in a year or so of casual hobby time. Or even order it premade so long as full audit and test vector is completable similarly by self. A contract investment by builders in cryptocurrency could pay for the design dev and parts making things basically free. #OpenFabs #OpenHardware Why? Because cryptos should give a fuck... https://bitcointalk.org/index.php?topic=1945661.0

1 0

About Set 8 of Cryptopals Crypto Challenges
by g4z3 03 Aug '17

03 Aug '17

Hi, guys Does anybody know how to the contents of Set 8 in Cryptopals Crypto Challenges? I've accomplished Set 1 through 7, and now it seems I need to send an email to them to get Set 8. However, the given mail address never replied. Regards, -- g4z3 Pub Key: http://keys.gnupg.net/pks/lookup?op=get&search=0x51915C417BFEAB2F

1 0

Bitcoin Blockchain Has Been Forked (New: BitcoinCash UAHF)
by grarpamp 03 Aug '17

03 Aug '17

The longest running most successful blockchain and cryptocurrency in history (Bitcoin BTC/XBT) has finally been forked, for the first known time, at last common block 478558, resulting in the new BitcoinCash UAHF (BCC/BCH). https://bitcoincash.org/ https://github.com/Bitcoin-UAHF https://www.reddit.com/r/Bitcoincash https://twitter.com/search?q=$BCC https://twitter.com/search?q=$BCH "Frontpage: On August 1st 2017, We the People will breathe new life into Bitcoin. A group of miners, developers, investors, and bitcoin users will upgrade the Bitcoin protocol as specified by the User Activated Hard Fork (UAHF). Those who do not want to follow our lead are free to use whichever chain they like. Miners implementing the UAHF will safely split away, creating a new version of Bitcoin called "Bitcoin Cash". All current Bitcoin holders will automatically own Bitcoin Cash. The existing ledger at the time of the split is preserved, thus users retain any balances they had before the split. Bitcoin Cash brings sound money to the world. Merchants and users are empowered with low fees and reliable confirmations. The future shines brightly with unrestricted growth, global adoption, permissionless innovation, and decentralized development. These ideals can be achieved, but it depends on you to succeed. We need the support of miners, investors, and users like you. Join us to help achieve Satoshi's original vision of Bitcoin as Peer-to-Peer Electronic Cash. " https://www.reddit.com/r/Bitcoin+btc+CryptoCurrency+bch++bcc+bcash/ https://medium.com/@johnblocke/bring-on-the-chain-split-8a295a62cee6 https://medium.com/@jgarzik/bitcoin-is-being-hot-wired-for-settlement-a5beb… https://coingeek.com/core-think-bitcoin-cash/ https://coinmarketcap.com/ https://bitcointalk.org/

3 8