July 2018 - cypherpunks - lists.cpunks.org

"Too much netflix and youtube syndrome" affecting 'Merican children
by Razer 07 Jul '18

07 Jul '18

A friend of mine about her four year old: "My daughter was doing a little song and dance this morning and was really boogieing down. She paused for a second and said,"I'm buffering" Rr

9 13

Do what you love - the marshmallow test - vistas of possibility for you today - break out of your box
by Zenaan Harkness 07 Jul '18

07 Jul '18

Good advice at any time. Particularly good advice now. Break out of your box and do what you love. Or begin with some small steps towards doing what you love - make time for it, set aside lower priority things, live your most inspired dreams. Put off to tomorrow the small and low priority things, and do today those steps that launch you onto your ideal path in life. Why You Should Stop Caring and Start Doing What You Love https://www.zerohedge.com/news/2018-07-05/why-you-should-stop-caring-and-st…

1 0

Good luck with that
by Steven Schear 07 Jul '18

07 Jul '18

The Petro is no more inherently valuable than the Bolivar. https://www.zerohedge.com/news/2018-07-06/venezuela-fund-housing-homeless-n…

1 0

[WAR] USA deep state wants war in Iran, Iranian oil - prepare for propaganda onslaught - This Is What Modern War Propaganda Looks Like
by Zenaan Harkness 07 Jul '18

07 Jul '18

Prepare for the propaganda onslought from the CIA, the deep state war party, their respective lackeys and ignoramusses in general. ----- Forwarded message from Caitlin Johnstone <donotreply(a)wordpress.com> ----- From: Caitlin Johnstone <donotreply(a)wordpress.com> Date: Thu, 5 Jul 2018 19:09:16 +0000 Subject: [New post] This Is What Modern War Propaganda Looks Like Post : This Is What Modern War Propaganda Looks Like URL : https://caitlinjohnstone.com/2018/07/05/this-is-what-modern-war-propaganda-… Posted : July 5, 2018 at 7:08 pm Author : Caitlin Johnstone Tags : hijab, Iran, propaganda, war, women Categories : Article I've been noticing videos going viral the last few days, some ( https://twitter.com/HeshmatAlavi/status/1013122527361548290 ) with millions of views ( https://www.facebook.com/Vocativ/videos/2039873829358175/ ) , about Muslim women bravely fighting to free themselves from cultural oppression in the Middle East. The videos, curiously, are being shared enthusiastically by many Republicans and pro-Israel hawks ( https://twitter.com/MsJulieLenarz/status/1014470758922416128 ) , who aren't traditionally the sort of crowd you see rallying to support the civil rights of Muslims. What's up with that? Well, you may want to sit down for this shocker, but it turns out that they happen to be women from a nation that the US war machine is currently escalating operations against. They are Iranian. Whenever you see the sudden emergence of an attractive media campaign that is sympathetic to the plight of civilians in a resource-rich nation unaligned with the western empire, you are seeing propaganda. When that nation is surrounded by other nations with similar human rights transgressions and yet those transgressions are ignored by that same media campaign, you are most certainly seeing propaganda. When that nation just so happens to already be the target of starvation sanctions and escalated covert CIA ops ( https://medium.com/@caityjohnstone/why-you-should-be-intensely-skeptical-of… ) , you can bet the farm that you are seeing propaganda. Back in December a memo was leaked from inside the Trump administration showing how then-Secretary of State, DC neophyte Rex Tillerson, was coached on how the US empire uses human rights as a pretense on which to attack and undermine noncompliant governments. Politico reports ( https://www.politico.com/story/2017/12/19/tillerson-state-human-rights-3041… ) : > The May 17 memo ( https://www.politico.com/f/?id=00000160-6c37-da3c-a371-ec3f13380001 ) reads like a crash course for a businessman-turned-diplomat, and its conclusion offers a starkly realist vision: that the U.S. should use human rights as a club against its adversaries, like Iran, China and North Korea, while giving a pass to repressive allies like the Philippines, Egypt and Saudi Arabia. > > “Allies should be treated differently — and better — than adversaries. Otherwise, we end up with more adversaries, and fewer allies,” argued the memo, written by Tillerson’s influential policy aide, Brian Hook. The propaganda machine doesn't operate any differently from the State Department, since they serve the same establishment. US ally Saudi Arabia is celebrated by the mass media for "liberal reform" in allowing women to drive despite hard evidence ( https://twitter.com/LizSly/status/998361860465352705 ) that those "reforms" are barely surface-level cosmetics to present a pretty face to the western world, but Iranian women, who have been able to drive for years ( http://realiran.org/women-driving-in-iran-things-you-need-to-know/ ) , are painted as uniquely oppressed. Iran is condemned by establishment war whores for the flaws in its democratic process, while Saudi Arabia, an actual monarchy, goes completely unscrutinized. This is because the US-centralized power establishment, which has never at any point in its history cared about human rights, plans on effecting regime change ( https://medium.com/@caityjohnstone/stupid-ugly-swamp-monster-pretends-to-ca… ) in Iran by any means necessary. Should those means necessitate a potentially controversial degree of direct military engagement, the empire needs to make sure it retains control of the narrative ( https://medium.com/@caityjohnstone/whoever-controls-the-narrative-controls-… ) . > Women in Iran are recording the abuse they suffer at the hands of men for not wearing religious clothing. May the good people of Iran free themselves from the shackles of the tyrannical mullah theocracy. pic.twitter.com/QWcPI5wylR ( https://t.co/QWcPI5wylR ) > > — Julie Lenarz (@MsJulieLenarz) July 4, 2018 ( https://twitter.com/MsJulieLenarz/status/1014470758922416128?ref_src=twsrc%… ) This is what modern war propaganda looks like. It will never look ugly. It will never directly show you its real intentions. If it did, it wouldn't work. It can't just come right out and say "Hey we need to do horrible, evil things to the people in this country on the other side of the world in your name using your resources, please play along without making a fuss." It will necessarily look fresh and fun and rebellious. It will look appealing. It will look sexy. And it's working. I am currently getting tagged in these videos multiple times a day by Trump supporters who are eager to show me proof that I'm on the wrong side of the Iran issue; the psyop is so well-lubricated with a combination of sleek presentation and confirmation bias that it slides right past their skepticism and becomes accepted as fact, even the one with the Now This pussyhat propaganda logo in the corner. Be less trusting of these monsters, please. The people of Afghanistan haven't benefitted from the interminable military quagmire that has cost tens of thousands of their lives. The invaders of Iraq were never "greeted as liberators" by an oppressed population. The humanitarian intervention in Libya left a humanitarian catastrophe in its wake far more horrific than anything it claimed to be trying to prevent. Saving the children of Syria with western interventionism has left half a million Syrians dead. If the Iranians do in fact wish to change their government, it should happen without crippling sanctions, collaboration with extremist terror cults ( https://medium.com/@caityjohnstone/that-time-hillary-clinton-removed-john-b… ) , or the rapey tentacles of the CIA manipulating the situation. There has never been a US-led regime change in the Middle East that wasn't disastrous. People should be screaming at the US and its allies to cease these interventions, not applauding propaganda that is clearly being manufactured by that same empire. __________________________ Internet censorship is getting pretty bad, so best way to keep seeing the stuff I publish is to get on the mailing list for my website ( http://caitlinjohnstone.com/ ) , so you’ll get an email notification for everything I publish. My articles and podcasts are entirely reader and listener-funded, so if you enjoyed this piece please consider sharing it around, liking me on Facebook ( https://www.facebook.com/CaitlinAJohnstone/ ) , following my antics on Twitter ( https://twitter.com/caitoz ) , checking out my podcast ( https://soundcloud.com/going_rogue ) , throwing some money into my hat onPatreon ( https://www.patreon.com/user?u=4445783 ) or Paypal ( http://paypal.me/caitlinjohnstone ) , or buying my book Woke: A Field Guide for Utopia Preppers ( https://www.amazon.com/Woke-Field-Guide-Utopia-Preppers/dp/064823455X/ref=c… ) . https://steemitimages.com/0x0/https://cdn-images-1.medium.com/max/800/0*-Gn… Bitcoin donations:1Ac7PCQXoQoLA9Sh8fhAgiU3PHA2EX5Zm2 Add a comment to this post: https://caitlinjohnstone.com/2018/07/05/this-is-what-modern-war-propaganda-… -- Manage Subscriptions https://subscribe.wordpress.com/?key=72001ef445c84c22d0b59062f10b7a25&email… Unsubscribe: https://subscribe.wordpress.com/?key=72001ef445c84c22d0b59062f10b7a25&email… ----- End forwarded message -----

1 0

Isn't this what psychologists call Projection?
by Steven Schear 07 Jul '18

07 Jul '18

https://cointelegraph.com/news/bis-chief-bashes-cryptocurrency-again-in-sca…

3 2

Re: Webmail?
by Zenaan Harkness 06 Jul '18

06 Jul '18

Snake oil to the rescue... ----- Forwarded message from Zenaan Harkness <zenaan(a)freedbms.net> ----- From: Zenaan Harkness <zenaan(a)freedbms.net> To: debian-user(a)lists.debian.org Date: Mon, 2 Jul 2018 11:11:13 +1000 Subject: Re: Webmail? On Sun, Jul 01, 2018 at 10:40:13PM +1200, Richard Hector wrote: > On 01/07/18 21:57, Zenaan Harkness wrote: > >> Oh, use https:// and make sure any security is activated in conf.pl. > > > And with your self-issued snake oil certs, make sure you check and > > confirm the cert on each device you want to use to access your > > webmail server, from your home network, so that if you eventually > > tunnel in or otherwise access it 'on the road', you have already > > verified your own snake oil cert and a MITM should stand out like > > unicorn balls. > > For any server on the internet, I don't see the point in using > self-signed certs any more, now that letsencrypt gives you real ones for > free. Only a -true- Scotsman would self sign and issue his own SSL certs :) I believe it's degrees of snake oil... > It's a bit more of a pain for a server that's only accessed internally, > but still doable, if you can set up a dummy site for verification (there > are ways to do it without a web server, but I haven't needed that yet) It's actually a bit of an open question, but the real question is "what level of security do you actually need or want?" … of course. Consider e.g.: - how to conduct an MITM? - get a copy of private key, issue additional cert - get private key, issue intermediate cert - get intermediate cert key, issue other intermediate certs - is an MITM of concern to you? - I do/don't care if the govt has open access to my certs, and can/can't MITM my users - I do/don't care if Random J Cracker can MITM my telecommuting co-workers Most of us by now will have read at least one article about the CIA and NSA's cornucopia of network cracking tools, bugs, physical network bugs and "rogue" hosts hosted at every host hoster worth his hosting salt - google, amazon, your local ISP, etc - oh, and "by consent, possibly with $ inducement and implied threat of legal sanction for failure to 'co-operate' with said inducement". But again, what level of security do you need? ∙ If you want minimum pain web servers accessible to the public, providing "basic trust level", then LetsEncrypt is likely your best approach. ∙ If you don't have "general public access" as a requirement, and you are willing to double check each device accessing your local network to ensure they've each pre-loaded your internal-only web server cert, then your own PKI and self signed certs may give you higher security (barring catastrophic mistakes on your part), and certainly more control. In this scenario, if you don't need control over the private keys to your electronic kingdom - by all means, use a commercial or free provider, and LetsEncrypt is perhaps about as good as it gets. For those after a higher level of certainty and control however, there is no substitute to offline master key generation and storage, private PKI and total in-house control over all sub-keys/sub-certs, issuances, revocations and per-device key signature double checking. If you want anything even resembling certainty that is... Here's a true fist hand anecdote: A few years ago, I was setting up a VM and some basic web services for a client with a top tier 'reputable' provider - one of the largest in Australia, at least at the time. When connecting via ssh for the first time, the usual "This is a new host, here's the sig, do you confirm this is the correct signature" type message came up. So I check the time and it's well after peak hour (about 11pm), and quickly dial their 24-hour tech support line, asking for someone to please check the host signature (this was virtual hosting, just before VMs took off), so as to preclude any superficial MITM swankery. The tech says to me "Um, I'm not sure about that, I've never been asked that question before," and promptly bumps it up to a deep tech PoC (person of competency), who double checks the host SSH sig hash from their internal network, confirms it's correct, then he too says "you know, as far as I'm aware, in over 15 years, this is the first time, ever, that any client has ever asked us to confirm their end to end encryption/ signature!" I confirmed that he had in fact worked at the company since it began. And most important - if you intend to configure your own PKI for "increased security" purposes, note that you really need to make sure you use certificate pinning for your own org's certs, or disable the other CAs "by default trusted" by your client OS browsers! - The easy way is use a Firefox profile for your company/ internal websites/ VPN/ telecommuters and make sure only your CA is the trusted root in that profile! (and make sure that your internal web sites can only be accessed from that profile) : Are self-signed certificates actually more secure than CA signed certificates now? https://security.stackexchange.com/questions/42409/are-self-signed-certific… See also: 4 fatal problems with PKI https://www.csoonline.com/article/2942072/security/4-fatal-problems-with-pk… SSL certificate revocation and how it is broken in practice https://medium.com/@alexeysamoshkin/how-ssl-certificate-revocation-is-broke… When are self-signed certificates acceptable for businesses? https://www.techrepublic.com/article/when-are-self-signed-certificates-acce… Good luck :) ----- End forwarded message -----

2 1

NZ Full Take Spying Everyone, CIA Infiltrates Aadhaar, Zcash Censure, Dotcom to Supreme
by grarpamp 05 Jul '18

05 Jul '18

https://www.nzherald.co.nz/index.cfm?objectid=12082945 http://gginews.in/cia-spies-access-aadhaar-database/ https://blog.z.cash/zcash-company-response-to-secret-service-recommendation/ https://www.forbes.com/sites/astanley/2018/06/20/u-s-secret-service-action-… https://issuu.com/statement050718/docs/statement-050718 https://twitter.com/rothken/status/1014648362706952192 https://www.youtube.com/watch?v=rMUKW7ifiBo http://www.kim.com/ https://theintercept.com/bigdatacall/

1 0

Zwiebelfreunde Raided related Riseup, Tor
by grarpamp 04 Jul '18

04 Jul '18

https://blog.torservers.net/20180704/coordinated-raids-of-zwiebelfreunde-at… https://www.ccc.de/en/updates/2018/hausdurchsuchungen-bei-vereinsvorstanden… https://netzpolitik.org/2018/zwiebelfreunde-durchsuchungen-wenn-zeugen-wie-… https://www.spiegel.de/netzwelt/web/hausdurchsuchungen-bei-netzaktivisten-c… https://old.reddit.com/r/de/comments/8w0dya/zwiebelfreundedurchsuchungen_we… https://twitter.com/search?q=zwiebelfreunde

2 1

Southern vs Rose: Open Borders, and Voting Harder at FreedomFest
by grarpamp 04 Jul '18

04 Jul '18

Southern vs Rose: Open Borders https://www.youtube.com/watch?v=eCv1glJx5b4 Voting Harder at FreedomFest https://steemit.com/anarchy/@dollarvigilante/vote-harder-they-say-the-great…

1 0

Interview Jordan Peterson, get wrecked. Damn!
by Zenaan Harkness 04 Jul '18

04 Jul '18

Ouch! Enjoy :D Jordan Peterson repeatedly clashes with WEP leader https://www.youtube.com/watch?v=KhQBkb2zkzo ~2:39

1 0