August 2018 - cypherpunks - lists.cpunks.org

Defense Distributed 3D Printed Guns
by grarpamp 28 Aug '18

28 Aug '18

http://www.latimes.com/politics/essential/la-pol-ca-essential-politics-may-… https://news.slashdot.org/story/18/08/27/204229/federal-judge-rules-against… California was one of 20 states led by Washington that won the decision from U.S. District Judge Robert S. Lasnik in Seattle. The injunction extends a ruling last month that barred the Trump administration from taking steps that would allow the firm Defense Distributed to disseminate 3-D gun blueprints. WA and CA promenading their second win against Free Speech and Right to Overthrow / Independence. https://en.wikipedia.org/wiki/United_States_Declaration_of_Independence

3 3

Chip Fabrication Game Afoot: GlobalFoundries TSMC Intel Samsung
by grarpamp 28 Aug '18

28 Aug '18

https://www.anandtech.com/show/13277/globalfoundries-stops-all-7nm-developm… https://semiengineering.com/gf-puts-7nm-on-hold/ https://news.ycombinator.com/item?id=17854065 https://news.ycombinator.com/item?id=17854014 What are the political implications of the entire world becoming so reliant on TSMC, with nearly all of its manufacturing concentrated in Taiwan? 1. Why aren't TSMC scattering their fabs across different continents - not only for political, but also to protect against natural disasters etc? 2. How much of the USA protection of Taiwan takes into account semiconductor manufacturing? 3. Who's inserting TOP SECRET backdoor masks?

1 0

Trusting nodes, GPAs, the Game [was tor-relays: servers top exit]
by grarpamp 28 Aug '18

28 Aug '18

>> One might worry more what Mega and Gigacorps are doing, >> secret partner friendly endeavours with Govts against you, >> than what some tiny ISP or whoever is doing with a few boxes. > It's quite true hosting providers might collude with law enforcement. > Tor isn't designed to fight against a global passive adversary > there isn't > enough research on protecting against a such a powerful adversary. Those three are overlapping yet separable depending on what discussion context. There may in fact be enough research to inhibit strict GPAs. GAAs may be a bit harder depending on range of actions, yet might fall at the same time. Tor can't change design to fight such GPA due to inertia, dependance, age, use cases, and other factors including political which can be thought up, investigated, discussed, etc. And if the same community / corporation "Tor" tried to, many would reasonably question the homing of that endeavour. So whatever comms systems end up taking on GPA will likely come from elsewhere, nowhere, everywhere. >> And was posted here many times about creating additional trust >> models and layers for relays, audits metrics and choices for users >> beyond the CIDR/nn and Family game that might go towards >> satisfying some reasonable concerns in that space... but crickets. >> And when you can't trust your CPUs, ISPs, operators, Govts, or >> even your own anonymous overlay networks strength against them... >> it's probably time for strategic rethink. > When it gets to the point you are worried all computers have a hardware > backdoor, maybe computers and the internet are too dangerous for your > thread model and you should consider alternate ways of communication not > involving technology. Those ways are subject to most of the same attacker entities, and are extremely limiting of use cases. Are those remaining cases capable of changing the world in ways you might like, good question. Why many people make negative anti suggestions, putting backdoors as crazy, when they have many positive outlooking ones available to make, investigate, and execute on (thus putting even backdoors as magnitudes harder to pull off under new models) such as #OpenFabs , #OpenHW , #OpenSW , #OpenDev , #OpenBiz #Cryptocurrency : Decentralized + Privacy #GPAResistance #RethinkTheWorld #MuchMore and removing the attackers from power, relavance, existance. Hiding from them is one thing, a fun little side game... yet don't forget, going through or around them, till they're gone... that's why you're in it.

1 0

UN: Capitalism Unsustainable
by grarpamp 28 Aug '18

28 Aug '18

https://motherboard.vice.com/en_us/article/43pek3/scientists-warn-the-un-of… https://news.slashdot.org/story/18/08/27/168240/scientists-warn-the-un-of-c… https://old.reddit.com/r/worldnews/comments/9as5p3/air_pollution_causes_a_h… https://old.reddit.com/r/news/comments/9ao9ry/the_tesla_semi_truck_is_alrea… https://old.reddit.com/r/news/comments/9aryzs/vietnam_demands_monsanto_pays… https://old.reddit.com/r/worldnews/comments/9aovc2/angela_merkel_warns_agai… https://old.reddit.com/r/news/comments/9ao40p/iran_says_it_has_full_control…

2 1

Cryptocurrency: Infowars, Mcafee, Media Censorship, Pop Control, Deplatforming
by grarpamp 27 Aug '18

27 Aug '18

Infowars https://www.youtube.com/watch?v=xYMOFFpCUAA Rekt Podcast https://www.youtube.com/watch?v=hwLQPtigFYk Blockchain Nation https://www.youtube.com/watch?v=honZcL6_7IA Adoption Debate https://www.youtube.com/watch?v=mXzyZLdpaSs Brock Pierce https://www.youtube.com/watch?v=0mpF_bIVxak

1 0

Forced Decrypt: Going Into Overdrive with Compelled Work
by grarpamp 27 Aug '18

27 Aug '18

Lots of articles recently worldwide about Govts trying to lawmake and argue to force companies and individuals to not only perform bitchwork to produce existing records, but to actually perform new physical work to modify their existing products and systems to be invadeable snake oil crypto backdoors realtime data feeds for snooping hackable etc. Compelled work opens path back to abject slavery. Enjoy the Slide. Courtesy: Infocalypse

1 0

Privacy: US and India Invaded by Big Social and Govt Partnerships Against You
by grarpamp 27 Aug '18

27 Aug '18

https://www.huffingtonpost.in/entry/india-aadhuar-tech-companies_us_5b7ebc5… For the past nine years, India has been building the world's biggest biometric database by collecting the fingerprints, iris scans and photos of nearly 1.3 billion people. For U.S. tech companies like Microsoft, Amazon and Facebook, the project, called Aadhaar (which means "proof" or "basis" in Hindi), could be a gold mine. The CEO of Microsoft has repeatedly praised the project, and local media have carried frequent reports on consultations between the Indian government and senior executives from companies like Apple and Google (in addition to South Korean-based Samsung) on how to make tech products Aadhaar-enabled. But when reporters of HuffPost and HuffPost India asked these companies in the past weeks to confirm they were integrating Aadhaar into their products, only one company -- Google -- gave a definitive response. That's because Aadhaar has become deeply controversial, and the subject of a major Supreme Court of India case that will decide the future of the program as early as this month. Launched nine years ago as a simple and revolutionary way to streamline access to welfare programs for India's poor, the database has become Indians' gateway to nearly any type of service -- from food stamps to a passport or a cell phone connection. Practical errors in the system have caused millions of poor Indians to lose out on aid. And the exponential growth of the project has sparked concerns among security researchers and academics that India is the first step toward setting up a surveillance society to rival China. https://www.nytimes.com/2018/08/26/technology/tech-industry-federal-privacy… In recent months, Facebook, Google, IBM, Microsoft and others have aggressively lobbied officials in the Trump administration and elsewhere to start outlining a federal privacy law, according to administration officials and the companies. The law would have a dual purpose, they said: It would overrule the California law and instead put into place a kinder set of rules that would give the companies wide leeway over how personal digital information was handled. "We are committed to being part of the process and a constructive part of the process," said Dean Garfield, president of a leading tech industry lobbying group, the Information Technology Industry Council, which is working on proposals for the federal law. "The best way is to work toward developing our own blueprint." The efforts could set up a big fight with consumer and privacy groups, especially as companies like Facebook face scrutiny for mishandling users' personal data. Many of the internet companies depend on the collection and analysis of such data to help them target the online ads that generate the bulk of their revenue.

1 0

Ghostscript: Multiple arbitrary code execution vulns
by Steve Kinney 26 Aug '18

26 Aug '18

Just when you thought there was a "safe" graphic document format... CERT says: https://www.kb.cert.org/vuls/id/332928 A similar problem in ghostscript, fixed in 2006: http://seclists.org/oss-sec/2016/q4/29 Tech press says: https://threatpost.com/unpatched-ghostscript-flaws-allow-remote-takeover-of… Not sure about the "take total control" part unless a payload can trick the user into entering the root password in a bogus dialog on the desktop: Nothing that uses ghostscript /should/ have administrator privileges. Isn't a family of exploits that can do everything the user can do in a terminal bad enough? So until patch, no u view PDF or PS dox from unknown source, untrusted source, or passed thorough insecure network. No reports of exploits in the wild as yet. :o/

1 0

Re: God Mode Backdoors, AP Crowdfund vs Wikileaks Models
by grarpamp 26 Aug '18

26 Aug '18

On 8/26/18, Mirco Romanato <painlord2k(a)libero.it> wrote: > Il 15/08/2018 08:54, grarpamp ha scritto: >> Anyone who thinks Intel CPU's don't have backdoors... is fucking stupid. >> AMD... same, yet perhaps a slightly lesser form of corporate >> insidiousness. >> Same for all cell phone CPUs and baseband processors. >> >> Publishing the backdoors in Intel's products, and >> all the others... makes a fine AP crowdfund target. >> Because the Wikileaks model so far either didn't get >> or hasn't published the scoop. > What we need is a way to show it exist: > 1) The designs with the backdoor implemented > 2) A way tio exploit the backdoor(s) > > What we need is a way to have a backdoor exploited, showing the backdoor > exist and it is usable. > > The good part about cryptocurrencies is a lot of money is behind > computers and such stuff. So a lot of money can be stolen if the > backdoor is exploited. > And, if it is exploited, we know it is there. > > Put out a wallet on a system where the only way known to steal the > wallet is to use a CPU/GPU/whatever backdoor. > > Mirco > > --- > Questa email è stata esaminata alla ricerca di virus da AVG. > http://www.avg.com Belongs on list, and no one cares what any AVG says.

1 0

at least replace the US Gov administration with normal folks
by Zenaan Harkness 26 Aug '18

26 Aug '18

Hey folks, it's been SUCH a long time since I last emailed - rather than a lotto, which I and others I've asked believe would lead too rapidly into chaos, pick "farmer family folk" to fill ALL the US government administrative positions. Give them a few weeks training - order the existing "administration" employees to train the newcomers - and then replace the existing administration - all the way to the top - with the newcomers. Trump's big problem is that he wants to drain the swamp. Unilaterally disbanding the US government might be appealing, but is, just perhaps, at a wild guess, not quite going to fly right now. But perhaps Trump could find a few 100s of "normal" men and women, young and old, from across the rural and farming areas of America, to fill all the positions of the US government's administration - from the State Department to the Department of Justice and everything inbetween, wholus bolus. That's gotta be better than the utterly farcical shit show the world is watching now where the swamp soldiers on for 2 years ignoring 100s of actual crimes and clinging to the hope they will impeach Trump after midterms for being blackmailed by an ex-girfriend pornography "actor" to pay money to keep her quiet prior to his election. "The Left" has turned America into a violent Machiavellian evil-clown machine which is an utter disgrace to human dignity. Allowing the farce to go on for so long has quite probably been a useful exercise - to draw out and demonstrate to the world the madness that is within the USA administration, "justice" department, etc etc. Good luck world,

1 0