June 2018 - cypherpunks - lists.cpunks.org

NSA and AT&T: Massive Illegal Surveillance Through Carriers Spy Hubs
by grarpamp 26 Jun '18

26 Jun '18

https://theintercept.com/2018/06/25/att-internet-nsa-spy-hubs/ SAGUARO etc docs in article. The NSA considers AT&T to be one of its most trusted partners and has lauded the company's "extreme willingness to help." It is a collaboration that dates back decades. Little known, however, is that its scope is not restricted to AT&T's customers. According to the NSA's documents, it values AT&T not only because it "has access to information that transits the nation," but also because it maintains unique relationships with other phone and internet providers. The NSA exploits these relationships for surveillance purposes, commandeering AT&T's massive infrastructure and using it as a platform to covertly tap into communications processed by other companies. While network operators would usually prefer to send data through their own networks, often a more direct and cost-efficient path is provided by other providers' infrastructure. If one network in a specific area of the country is overloaded with data traffic, another operator with capacity to spare can sell or exchange bandwidth, reducing the strain on the congested region. This exchange of traffic is called "peering" and is an essential feature of the internet. Because of AT&T's position as one of the U.S.'s leading telecommunications companies, it has a large network that is frequently used by other providers to transport their customers' data. Companies that "peer" with AT&T include the American telecommunications giants Sprint, Cogent Communications, and Level 3, as well as foreign companies such as Sweden's Telia, India's Tata Communications, Italy's Telecom Italia, and Germany's Deutsche Telekom. “It’s eye-opening and ominous the extent to which this is happening right here on American soil,” said Elizabeth Goitein, co-director of the Liberty and National Security Program at the Brennan Center for Justice. “It puts a face on surveillance that we could never think of before in terms of actual buildings and actual facilities in our own cities, in our own backyards.” "he and his colleagues found it strange that they were asked to suddenly reroute all of the traffic, because “there was nothing wrong with the services, no facility problems.“We were getting orders to move backbones … and it just grabbed me,” said Long. “We thought it was government stuff and that they were being intrusive. We thought we were routing our circuits so that they could grab all the data.” During his employment with AT&T, Eslambolchi said he had to take a polygraph test, and he obtained a government security clearance. “I was involved in very, very top, heavy-duty projects for a few of these three-letter agencies,” he said, in an apparent reference to U.S. intelligence agencies. “They all loved me.” “You put a gun to my head,” he said, “I’m not going to tell you.” The company provides “voluntary assistance". The agency appears to primarily collect phone calls, emails, online chats, and data from internet browsing sessions. All Tier-1 Telcos and Internet Providers in on it... and refuse to comment. We're Fucking You All.

1 0

Intel Fail: OpenBSD disables Intel HyperThreading, Lazy FP State Restore
by grarpamp 26 Jun '18

26 Jun '18

https://www.mail-archive.com/source-changes@openbsd.org/msg99141.html https://www.intel.com/content/www/us/en/security-center/default.html Mark Kettenis Tue, 19 Jun 2018 12:30:19 -0700 Log message: SMT (Simultanious Multi Threading) implementations typically share TLBs and L1 caches between threads. This can make cache timing attacks a lot easier and we strongly suspect that this will make several spectre-class bugs exploitable. Especially on Intel's SMT implementation which is better known as Hypter-threading. We really should not run different security domains on different processor threads of the same core. Unfortunately changing our scheduler to take this into account is far from trivial. Since many modern machines no longer provide the ability to disable Hyper-threading in the BIOS setup, provide a way to disable the use of additional processor threads in our scheduler. And since we suspect there are serious risks, we disable them by default. This can be controlled through a new hw.smt sysctl. For now this only works on Intel CPUs when running OpenBSD/amd64. But we're planning to extend this feature to CPUs from other vendors and other hardware architectures. Note that SMT doesn't necessarily have a posive effect on performance; it highly depends on the workload. In all likelyhood it will actually slow down most workloads if you have a CPU with more than two cores. ok deraadt@

3 4

Re: Persecution of Julian Assange Must End
by Ryan Carboni 26 Jun '18

26 Jun '18

This is a principle that is uncontroversial, that the state's actions against citizens must be limited and subject to open and transparent processes, not by a consensus of people selected to form the consensus, and that the government itself is not infallible (exemplified by the omniscient US government thinking Snowden was on a Bolivian plane). Of course Assange is an Ecuadorian citizen, so if they wanted to, they could have him leave the embassy through temporary diplomatic status, particularly since he isn't accused of any crime by the British. Naturally this won't happen, as he is a bargaining chip in the current system.

3 2

Jordan "Don't Make Me Tell You Twice" Peterson to Men: Hit Women Until They Listen
by White Guidocide 25 Jun '18

25 Jun '18

>Zenaan Harkness zen at speedbmps.net >Thu Jun 14 06:28:49 PDT 2018 > >I don't see how Because he shills against "tribalism". Same as shilling against "family". The first step to marxism is destruction of "family" and smaller "tribal" groups. And because leafs can't comprehend "freedom". Pic related.

1 0

Sweet Honey Berliner: Smell Like a Biscuit
by White Guidocide 25 Jun '18

25 Jun '18

>juan juan.g71 at spookmail.com >Thu Jun 14 18:20:07 PDT 2018 > >judeo-christian Why be redundant ? 'jew' is plenty accurate for all abra[ham]ic slave systems. >white >anglo >fascist "White" includes mexican-spanish speaking populations such as yourself. "Anglo" is a ded breed of mixed-race Germanic larpers. "Fascist" means "bundle" or "group", and we all know the only people permitted to organize politically is marxist jews. Ironic that you are shilling against individuals uniting in opposition to religous hegemony, which is what is meant when using those words as an insult. >in the "real world" Confirmed B.O.O.M.E.R. terrosist. Reported. >exploiting their fellows Confirmed never worked with own hands. **fapping don't count** >socialism/nationalism/statism These are not the same things. "Socialism" is bottom-up "Communism". "Nationalism" is family-first "Socialism". "Statism" is top-down "Communism", also called "Marxism". Reminder that "Communism" is "Community-ism". Without it, people would be driving on private roads, reading in private libraries, and shitposting on private internets. Pic related.

1 0

Man waifus bitter ape, has twins...
by White Guidocide 25 Jun '18

25 Jun '18

>Steve Kinney admin at pilobilus.net >Fri Jun 22 16:20:36 PDT 2018 > >learn human behavior >learn This isn't even possible and you know it. >4chan Stop spamming your chink webservices. >regurgitation using pseudorandom word selection >human Pick only one. >parrot >crackers You do know that "insult" isn't one. It means "whip cracker". Unironically using it to describe Europeans is an act of subservience, since it was slaves getting whipped; an act of stupidity, since the Irish and Scot populations were enslaved alongside Africans and also whipped; and because Africans were "slave owners", as well. >white trash >t. Steve "thinks north florida is white" Kinney. Imagine being this jewish. Pic related.

1 0

Observed Diffusion of More Cooler Seasons than Hot Just Penned
by White Guidocide 25 Jun '18

25 Jun '18

>Ben Tasker ben at bentasker.cu.ck >Sat Jun 23 12:45:05 PDT 2018 > >No, no they couldn't. Do you have a license for that opinion mate ?

1 0

Saker interviews Michael Hoffman - definitive JQ author - [MINISTRY] [WAR]
by Zenaan Harkness 24 Jun '18

24 Jun '18

** 'Orthodox Judaism Is a Religion of Lying and Deceit' - The Saker Interviews Michael Hoffman http://www.unz.com/tsaker/an-interview-with-michael-a-hoffman-ii/ https://russia-insider.us9.list-manage.com/track/click?u=fa2faf7034c3c3c413… ------------------------------------------------------------ by Michael Hoffman Unz Review (1,109 views) on Fri, Jun 22, 2018 Hoffman is author of the academic work 'Judaism's Strange Gods', amongst other books. Introduction by the Saker: I have always had a passion for theology in general and the studies of religions in general. Several years ago I discovered, quite by chance, a book written by Michael A. Hoffman II entitled Judaism’s Strange Gods https://www.amazon.com/Judaisms-Strange-Gods-Revised-Expanded/dp/0970378483… which I found most interesting and thought provoking. Reading that book, I felt that I wanted to find out much more and I ended up ordering and reading Michael A. Hoffman II’s magnum opus Judaism Discovered: A Study of the Anti-Biblical Religion of Racism, Self-Worship, Superstition and Deceit https://www.amazon.com/Judaism-Discovered-Anti-Biblical-Self-Worship-Supers… which absolutely amazed me: over 1000 pages packed with information, sources and most interesting analyses. Needless to say, the book was also very controversial and elicited all sorts of negative reactions from various reviewers. Here I need to immediately begin by a disclaimer: while the topic of “Rabbinical Phariseism” (modern “Judaism” should be called something like “Rabbinical Phariseism” since all modern Judaic denomination are descendants of the sect of the Pharisees; furthermore, this religion is dramatically different from the religion of Abraham, Isaac and Jacob: it is the religion of Maimonides, Karo, Luria and others) has always fascinated me and while I do have a graduate degree in theology, I am absolutely not qualified to endorse or refute the views of Hoffman. What I can say is that his books are very well written, well researched, fully sourced and that I see no contradictions between what he wrote and the little I personally know about this topic. As for his critique of the religion of the Rabbinical Pharisees (from which all form of modern “Orthodox Judaism” stem from), it is not “racist” in any way: unlike ethnicity, a ---religion is a personal choice and thus a legitimate target for scrutiny and criticism--- and Hoffman’s condemnation of Rabbinical Phariseism is in no way harsher than the writings of Church Fathers like Saint Justin Martyr, Saint John Chrysostome, Saint Cyprian of Carthage or Saint Ephrem the Syrian. Hoffman recently published another amazing book, the 700 pages long “The Occult Renaissance Church of Rome” https://www.amazon.com/Occult-Renaissance-Church-Rome/dp/0990954722/?tag=un… which I began reading (I am about 1/3rd through) with, again, rapt interest. Yet again, here was a very well researched and beautifully controversial book which gave me as strong desire to speak with the author and, luckily for me, Michael A. Hoffman II has kindly agree to replies to my questions to him on his life and research. The following is the full unedited Q&A with I had with him. … Enjoy...

2 2

Communications to EFF is not necessarily confidential
by Ryan Carboni 23 Jun '18

23 Jun '18

I suspect so. https://finance.yahoo.com/news/security-researcher-bypasses-iphone-apos-184…

1 0

Re: [Cryptography] Security model of blockchains ?
by grarpamp 23 Jun '18

23 Jun '18

On Fri, Jun 22, 2018 at 3:44 AM, Ersin Taskin <hersintaskin(a)gmail.com> wrote: > John Levine <johnl(a)iecc.com>, 28 May 2018 Pzt, 23:14 tarihinde şunu yazdı: >> >> Have there been any good papers on the security model of blockchains? >> I'm thinking of stuff like collusion, network partitioning, miners >> losing interest or being bribed, and of course latent software bugs. >> In some cases it's not obvious to me how you'd even tell that an >> attack was happening until much later. > > > I think the boundary of the blockchain security model is drawn by the > super-rational attack, where it is far from trivial to detect the system is > under attack, and there is no defense mechanism due to the anchor-to-iceberg > problem inherent in the design. I summarize below my previous post on the > subject: > > QUOTE > > Assumptions: > > 1. The Establishment (Gov+FED+Banks+Corproteuracy) is under the threat of > disruption by Bitcoin. > > 2. It fights back for survival when this threat becomes serious. > > 3. It has enough power (money) to get more than 50% hash power. > > The attack scenario: > > 1. The attacker (the Establishment) gains the majority hash-power to rule > the longest chain. Deciding what transactions to select from the mempool, > deciding the next block. > > 2. The attacker forms sybil agents. This is trivial. Thanks to > permisionlessness:) Bitcoin indeed recommends everyone to create sybil > agents for each transaction (key pairs/addresses). > > 3. The attacker fuels its sybil agents with a constant (not much) amount of > bitcoins. > > 4. Sybil agents flood the system with valid transaction requests with > transaction fees varying slightly above the average. > > 5. Sybil miners select these valid sybil transactions filling the entire > block space and denying most if not all of the honest transactions. > > 6. Sybil miners send the transaction fees back to the sybil agents through > atomic swap, zero knowledge, etc. pathways escaping tracking. Thanks to > privacy:) > > 7. The feedback loop provides the vicious cycle which helps the attacker > sustain an infinite loop attack with a constant amount of money. We all know > that no one (not even Bitcoin) survives an infinite loop. > > Since Bitcoin is censor-proof, your coin equals mine, all valid transactions > are equal, it is legitimate that transaction fees can determine the choice > from the mempool and that the system is based on dont-trust-the-miners game > theoretical approach; there is no solution to the above attack scenario. > Actually, it would be non-trivial to understand the system is under attack. > I could not find a solution in Bitcoin. I shared it with top technical guys > this weekend at the Bitcoin Ethereum Superconference in Dallas. And none > provided an answer. Some said it is mathematically impossible to find a > solution and admitted that it is a serious problem. One very famous, > legendary developer said that this is not a problem because such an attack > will not happen. He was drunk and I did not take him seriously apart from > the observation that people can become very religious on scientific topics. > I forwarded this observation as a warning to myself. > > The above scenario owes its success to the feedback loop from the miners > back to the sybil agents. Otherwise, we would not bother the cost of 51% > hash-power. Just send valid transaction requests involving higher > transaction fees to flood the system. As long as you do not control the > blockchain you may keep spending transaction fees irreversibly and cannot > guarantee to block the entire chain. Miners (pool managers) aware of the > attack may collaborate to deny your transactions not to lose their business > in the long term. That feedback loop is possible because POW is based on a > scheme based on a fair race against the adversary. This makes it easy for > the attacker to acquire the authoritative power on the system. Amazing > design insisted with the assumption that the powerful target to disrupt will > not attack back for survival! > > There are other less costly, more effective super-rational attack scenarios > involving speculative approaches and it can easily be shown that the > superrational attacker can get the entire cryptocurrency space down easily > through the vicious-cycle scheme described above together with helper > methods. The attacker can use its Exchange in collusion with its sybil > miners to selectively allow rushes from Bitcoin towards the target currency > (say USD). In this scenario, everybody would run to save their precious > money not giving a damn to Bitcoin. > > Long story short: PoW is a bad idea to be used on the processor side. It is > an extremely inefficient way to secure the system. If use PoW (I don’t > recommend at all) use only when you can provide any degree of an unfair race > against the attacker (client side). Even then it has its own issues. > > POS and DPOS are also vulnerable to the above attack because the > super-rational attacker can get the majority of the stake and as we learned > from our democracy practice money gets the votes. At DPOS people vote for > candidates they do not know in person. They vote based on incentives, > lotteries advertised in campaigns. The super-rational attacker with more > money (and gain) would propose more, campaign better to attract more votes. > Secret services (like CIA) have such professional spies and entities that it > will be impossible for us to identify their real identities. They span the > entire space of people from selling hotdog on the street to presidents of > countries. It would be naive to guarantee that DPOS will never allow money > to get majority stake. Indeed, this weekend, I challenged Stan Larimer (the > godfather of Bitshares) face to face in a friendly manner among his fans > with the above attack scenario and he could not provide a solution and said > “let’s forward this to Dan” giving me his email. > > This is what I call the anchor-to-iceberg problem. If you anchor to an > iceberg, the attacker with enough energy can just melt it down. POW, POS, > DPOS all anchor to things that are convertible to money. This allows the > super-rational attacker to gain control of the system provided that it has > enough money to spare. This combined with the game-theoretical, > permisionless, censor-proof, privacy-seeking system dictates the fact that > any crypto-currency system immune to super-rational attack must anchor to > something that gives the hard promise like the sun rising every morning from > the east and going down every evening on the west. A very simple promise. > But a hard one to break. A hard promise that you cannot break with money. > > UNQUOTE Legit users might statistical detect which miners are not mining their lower fee tx and conspire to filter out their tx and node traffic thus forking away from them. Such attackers will have massive non recyclable energy cost, typically required to appear on their public sheets. Attackers will therein also resort to FUD plays easily proven false. And their ASICs broken by nonce changes in algos. Legit p2p webs of in person validated global trust nets will also develop creating new handshake agreements in mining / nodes defense, sybils will not be able to pass inspection up to and including SSBI style, large operations will be suspected and derated in metrics accordingly. Attackers are ultimately frail and cannot continue to forever inflate and sink their fiat into such attacks, citizens will revolt against that. Users will simply migrate and exchange away to more advanced and resistant usable cryptocurrency nets if attackers tx fees and etc begin making make the old unusable. ie: What has happened with downfall of BTC... Cryptocurrency, once established globally in trio of... philosophical mind, enough mechanical knowledge to use confidently, and then used routinely as desired... is wonderfully adaptive to attacks. Each of those three are inevitable and unstoppable, and they continue to increase, leading to eventual victory of cryptocurrency. The "established" will make more by accepting and servicing it than they will by burning resources trying to fight it. bcc cypherpunks because metz list is proven censored, resident anti cryptocurrency established friends / devs / etc of state, etc. Cryptocurrency.... what if....

2 1