March 2018 - cypherpunks - lists.cpunks.org

Fwd: [Cryptography] Justice Dept. Revives Push to Mandate a Way to Unlock Phones
by grarpamp 25 Mar '18

25 Mar '18

---------- Forwarded message ---------- From: Erik <erik(a)erikgranger.name> Date: Sun, Mar 25, 2018 at 1:38 PM Subject: [Cryptography] Justice Dept. Revives Push to Mandate a Way to Unlock Phones To: cryptography(a)metzdowd.com https://www.nytimes.com/2018/03/24/us/politics/unlock-phones-encryption.html WASHINGTON — Federal law enforcement officials are renewing a push for a legal mandate that tech companies build tools into smartphones and other devices that would allow access to encrypted data in criminal investigations. F.B.I. and Justice Department officials have been quietly meeting with security researchers who have been working on approaches to provide such “extraordinary access” to encrypted devices, according to people familiar with the talks. Based on that research, Justice Department officials are convinced that mechanisms allowing access to the data can be engineered without intolerably weakening the devices’ security against hacking. ... Craig Federighi, the senior vice president of software engineering at Apple, stressed the importance of strengthening — not weakening — security protections for products like the iPhone, saying threats to data security were increasing every day and arguing that it was a question of “security versus security” rather than security versus privacy. “Proposals that involve giving the keys to customers’ device data to anyone but the customer inject new and dangerous weaknesses into product security,” he said in a statement. “Weakening security makes no sense when you consider that customers rely on our products to keep their personal information safe, run their businesses or even manage vital infrastructure like power grids and transportation systems.” What are some possible technological responses that can be utilized to protect against this sort of legislation? I'm curious what people here would do if some legislation of this sort were written into law. _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

1 0

Cryptocurrency, Privacy Coins, and Overlay Networks ie: Tor [was: MONKEYROCKET]
by grarpamp 25 Mar '18

25 Mar '18

> Off topic Not really... Many Tor users use cryptocurrencies. Many cryptocurrency users have little clue as to the extremely limited privacy most cryptocurrencies offer. This makes it an important topic of awareness for Tor users on tor-talk. The continuous attacks and analysis upon the blockchains by dataminers, marketers, lawful and unlawful government agencies including law enforcement, taxation, NSA style GPA / GAA / parallel construction, questionable untested new "laws", corporations, status quo anti-adoption efforts, internet censors, DPI filters, researchers, even other users... all around the world... is at least on the same level as that against anonymous overlays like tor, and even clearnet itself. Most of the cryptocurrencies out there... - don't use TLS, thus their entire networks have zero privacy / auth / integrity over the end to end transport - don't use internal cryptoprivacy to protect transaction info - don't have communities much aware of or using overlay networks, out of band comms, encryption - don't really care much about privacy in the currency itself - don't have clients that directly support, or services that reside on, overlay networks. This includes exchanges, miners and mining pools, relays / nodes, payment gateways, forums, wallets, DAOs, etc. So if you're a tor user for reasons, and want a cryptocurrency that demonstrates similar reasons / capabilities, your choices are limited. And there's a lot of lingering 'cryptocurrency is private' promotion from earlier days left to dispel and to re-evaluate. If you want to follow / try / contribute to some recent developments in stronger cryptocurrency privacy search out - privacy coins - decentralized exchanges - even older forms might be noted / useful such as... coin mixes, blenders, swaps, joinmarket, etc Examples... Zcash ZEC, BitcoinPrivate BTCP, Monero XMR, Zencash ZEN (uses TLS), Bisq exchange, etc Though evaluating them might be off topic, since tor users are likely to have interest in cryptocurrency privacy feel free to list / link more cons / services / evals that you find in this thread for reference. BitcoinCash BCH might adopt something soonish, as may some of the other leading cryptocurrencies, check their respective roadmaps. Bitcoin (Legacy) BTC not likely anytime soon.

1 0

Re: Request to mailing list cryptography rejected
by grarpamp 25 Mar '18

25 Mar '18

On Fri, Mar 23, 2018 at 6:06 PM, <cryptography-owner(a)metzdowd.com> wrote: > Posting of your message titled "Re: [Cryptography] Blockchain > currencies: The Death of 1000 Cuts" > > Posting of your message titled "Cryptonomics, Digital Trust, Case > of Short Behaviour in the Trading Pit" > > has been rejected by the list moderator. The moderator gave the > following reason for rejecting your request: > > "We're basically holding off on currency discussions." It is hypocritical to allow and approve threads and posts that start, continue, and subthread such discussions per charter, then censor others that do the same thing, especially so when exacted upon those simply countering other posters thoughts and data that were so approved. See archives below. "Cryptography" is a... mailing list devoted to cryptographic technology and its *political impact*. Occasionally... more generally... *security and privacy technology* and its *impact* "On topic" discussion includes technical aspects of cryptosystems, *social repercussions of cryptosystems*, and the *politics* of cryptography such as export controls or *laws* If you want to censor and pare the list down to some purer narrower form of "cryptography tech" talk only, which would surely be a fine resource, feel free, there's a long way to go there... starting with the charter and all the other posters equally. Lots of off topic material here... http://www.metzdowd.com/pipermail/cryptography/ Note there also no *cryptography* or "security" or "privacy" of TLS over, or PKI signatures present on, the archive files either.

5 21

Everybody was Quantum fighting, those computers were fast as lightning ….
by Steven Schear 25 Mar '18

25 Mar '18

https://thehutchreport.com/everybody-was-quantum-fighting-those-computers-w…

1 0

US Banks: Bail-In's Are An Option
by grarpamp 24 Mar '18

24 Mar '18

https://www.stlouisfed.org/publications/central-banker/summer-2013/from-bai… http://www.latimes.com/opinion/readersreact/la-le-1218-thursday-fdic-201412…

2 2

Fwd: Update on Russian-linked activity on Tumblr
by Razer 24 Mar '18

24 Mar '18

-------- Original message --------From: Tumblr <no-reply(a)tumblr.com> Date: 3/23/18 4:27 PM (GMT-08:00) To: RussianStooge(a)kremlin.commieSubject: Update on Russian-linked activity on Tumblr Dear auntieimperial, As part of our commitment to transparency, we want you to know that we uncovered and terminated 84 accounts linked to Internet Research Agency or IRA (a group closely tied to the the Russian government) posing as members of the Tumblr community. The IRA engages in electronic disinformation and propaganda campaigns around the world using phony social media accounts. When we uncovered these accounts, we notified law enforcement, terminated the accounts, and deleted their original posts. While investigating their activity on Tumblr, we discovered that you either followed one of these accounts linked to the IRA, or liked or reblogged one of their posts: 1-800-gloupbest-usa-todayblacktolivecartnsncreal previously known as: feelmydragonballsfedupwithlying previously known as: badgyalforyouhustleinatrap previously known as: thenaturecanpost, tumblercubeinfo-mix previously known as: americanstatistics, crazypolitician, girlsagainst, illegalmom, just-stat, rochelbarrlagonegirlmassivelydopepolicemassmedear previously known as: massblog021mooseblogtimespostingwhileblack previously known as: ghettablasta, heygeraldmartinjohanssen, honestinjun, nativewolveshererebellloudwiththecrowd previously known as: massivelystrangetyrantsumchckn previously known as: blondeinpolitics, blvckcommunity, classylgbthomie, hwuudoin, politixblondieswagintherain previously known as: blacklivesmatterusa, carzwithgirlzthis-truly-brutal-world previously known as: awesomewhitepearl, free-mind-and-soul You aren’t in trouble, and don’t need to take any action if you don’t want to. We deleted the accounts but decided to leave up any reblog chains so that you can curate your own Tumblr to reflect your own personal views and perspectives. Democracy requires transparency and an informed electorate and we take our disclosure responsibility very seriously. We’ll be aggressively watching for disinformation campaigns in the future, take the appropriate action, and make sure you know about it. — Tumblr

1 0

Cryptocurrency: Malta Says Yes, Binance Moves In
by grarpamp 24 Mar '18

24 Mar '18

https://www.reddit.com/r/Bitcoin/comments/86jm48/maltas_prime_minister_is_p… https://www.reddit.com/r/CryptoCurrency/comments/86jhge/binance_is_moving_t… https://www.reddit.com/r/CryptoCurrency/comments/846iwa/binance_will_launch… https://www.reddit.com/r/ethtrader/comments/84utbq/binance_announces_100000… Though if you can sue it, it's not decentralized.

2 2

The Books and Science of Edgar Allan Poe and His Amazing Dark Libraries
by grarpamp 24 Mar '18

24 Mar '18

>> (hopefully it's legal, but I won't give the URL in case it isn't). > absurd copyright laws >> didn't want to mistakenly drop our moderator into it. Here are some illegal URL's... brought to you in part by the laws of crypto munitions and free speech... http://uj3wazyk5u4hnvtk.onion/ http://rutrackerripnext.onion/ http://libgen.io/ http://gen.lib.rus.ec/ https://genofond.org/ http://b-ok.org/ http://bookfi.net/ http://libgen.pw/ http://u76v7ha6j4jmtz3k2lseaso5qy36lxs77klhovmptufwcodovatq.b32.i2p/ http://sci-hub.tw/ https://m.vk.com/sci_hub http://scihub22266oqcxt.onion/ https://sci-bay.org/ http://librusec.ucoz.de/forum/26 http://dreadecomdopooda.onion/ https://www.reddit.com/r/piracy/ https://www.reddit.com/r/libgen/ https://www.reddit.com/r/scihub/ https://www.reddit.com/r/datahoarder/ https://www.reddit.com/r/scholar/ http://custodians.online/

1 0

Re: Request to mailing list cryptography rejected
by g2s 23 Mar '18

23 Mar '18

-------- Original message --------From: g2s <g2s(a)riseup.net> Date: 3/23/18 5:07 PM (GMT-08:00) To: grarpamp <grarpamp(a)gmail.com>, cryptography-owner(a)metzdowd.com Subject: Re: Request to mailing list cryptography rejected Good on 'em. It would be nice if your digital money scam disappeared from the history of computing entirely. Rr When I replied originally it went to the originator and the cryptography list but not cypherpunks. Good goin' ace. Rr

1 0

CNN, for that offer you just can't refuse :D
by Zenaan Harkness 23 Mar '18

23 Mar '18

CNN, having been body slammed by no less than the POTUS his self: https://www.youtube.com/watch?v=4wwbII15JQ8 (Tucker Carlson's version straight outta Kekistan) , has decided (that's CNN has decided) that "main stream media news outlets making 'offers you can't refuse' to basement dwelling deplorable meme creators struggling for a life", is somehow a wise thing to do: http://theduran.com/cnn-turns-evil-literally-evil/ CONFIRMED: CNN threatens to put US citizen’s life in danger for revenge This rock bottom for the very Fake News Network and the Mainstream Intimidators. And watching some of Trump's past WWE vids reminds us that Idiocracy is not so far from the truth. At least the ratings are high: http://theduran.com/cnn-sees-its-tv-viewers-in-june-collapse-after-having-i… and so soon the crowds will roar with a scream of "WINNER" - thankfully with memes, at least SOME of the credit will go to basement dwelling deplorable meme creators struggling for a life. Nice to see a little citizen's coordination on the MSM body slams: http://www.projectveritasaction.com/category/news/ Moral of this story - when you meme, go hard, go proud and go public, or make damn sure your opsec is reasonable. Memes .. not child's play ... too dangerous for most, so watch your back and patience kekette, patience!

9 22