April 2019 - cypherpunks - lists.cpunks.org

Re: Demonstration of a tinc network linked through Tor v3 onions
by grarpamp 02 May '19

02 May '19

>> It can be communitied, or forked. > Seems unlikely. Either can work if people want them to, that is the very point of opensource if so merited. >>> Reported bugs have been closed without action. >> What ticket numbers are of interest? > https://trac.torproject.org/projects/tor/ticket/24902 > https://trac.torproject.org/projects/tor/ticket/19966 > https://trac.torproject.org/projects/tor/ticket/24973 > I can't find the one where they explicitly said that it's not worth fixing > v2-specific bugs. Statements always nice to have for reference. Bugs not needing architecture rework should be fixed. >>> Fetches of v2 rendezvous descriptors fail, and so OnionCat services are "unavailable". > Analysis? Not really, just lots of notices logs. Basically the same stuff as > in #19966. Lots of it. Any tickets should be revalidated using current release on unix, then bumped if still valid to get them fixed. The version issues below can be gamed as needed if applicable. > how tinc uses onion circuits vs how OnionCat does. They're just apps bound to onions, no special knowledge of tor. There can be things like layer 2/3/+ keepalive packets, etc going on depending on the app. Circuit timeout settings, etc. See also OnionBalance regarding overall subject. > Or maybe v3 onions work better than v2 onions, either because > they're better designed, or better supported. v2 is still in the code and will be for a long time, even possibly modularized for third parties indefinitely. So if there are v2 problems, ticket them, join together, and get them fixed. > It's also possible that I've tested them differently. With OnionCat, I was > using Freenet. And with tinc, I've used bittorrent. So maybe Freenet and > bittorrent have different enough packet dynamics. Tests should only change one variable at a time. > I initially picked that IPv4 range because of ChaosVPN. But maybe it'd be > better to integrate with dn42, and use IPv6 IPv4 is dead, IPv6 gives much more room for people to play without colliding with each other or other things... lots of people's stacks and private usage treat RFC1918 as their own, not that of some third party apps (which really need to use their own space outside of RFC1918, etc). So you need more space. Overlays can use either 4/6 on clearnet and emulate either 4/6//N-bits for internal use, and can also setup separate instances integrating into each. IPv6 has some space options, and lots of unallocated slack space. But also search "AF_OVERLAY" for a grander more universal overlay interop scheme than even IPv6 can ever provide. > What worries me is that the Tor community will see this Though exit is and should be a priority in tor at the moment given the gamut of todays overlays, tor does not, should not, and won't have exclusive claim to that functionality in both other currently developing and future overlay networks. > as DDoS, and implement blocks. tor-0.3.2.9 was the last version without some statistical blocking changelog 0.3.2.10: "denial-of-service mitigation" > I wonder whether they've done that with OnionCat. No. Tor can't pick out apps like that, only patterns, those can be really hard for an overlay (like tor) to discern, and impeding of many false positive users. Fork tor if tor censors people (they've already tried to censor relay operators and posters for speaking freely). Say to a non-corporate more globally volunteer opensource tor. Or simply support the development of and migrate to better more resistant overlay networks going forward. Diversity in designs, and with more deployed overlay networks in live competition, are important. Anyway, happy hacking :)

3 4

Assange Indictment
by John Young 30 Apr '19

30 Apr '19

https://cryptome.org/2019/04/assange-indictment.pdf

3 3

USA TODAY: Massive data breach exposes ages, addresses, income on 80 million U.S. families
by jim bell 30 Apr '19

30 Apr '19

USA TODAY: Massive data breach exposes ages, addresses, income on 80 million U.S. families. https://www.usatoday.com/story/tech/talkingtech/2019/04/29/unprotected-data…

2 1

Cryptocurrency: Decentralized Deception (Documentary)
by grarpamp 30 Apr '19

30 Apr '19

https://www.youtube.com/watch?v=5KXHgh2rTTw decentralized deception https://www.youtube.com/watch?v=b8JZQrGw3ho one response A random avg joe's take https://www.youtube.com/watch?v=EK9wEF0vTGQ https://www.youtube.com/watch?v=ZIC7MDNgyrg https://www.youtube.com/watch?v=QVk6XH1oYUY Crypto is so much about this... hundreds millions people around the world each researching making their own evaluations and choices in things from philosphy to technical to markets to family, right or wrong, win or lose, talking with each other, learning, sharing ideas, expanding their thinking. Don't discount what the average Jane's around the world think and want. You can find lots of their tubes if you look around, linked herein two random, not even representative, examples. And a few, a *very* few not necessarily shown herein, are actually seeking truth, approaching and doing things responsibly. They are the ones bringing the future. Find and support and hear them out, the few real ones, among the colossal lot of retards, shills, scams, frauds, statists, fools, fooled, metoos, governments, banks, corporations, and the like. It's either fully distributed decentralized worldwide p2p transaction mineable privacy coins, in/out via IRL p2p and DEX and truly openly inspectable exchanges... or Fiat... pick one, or both in some fraction. They are mutually exclusive, there is no middle ground but fakery and witches. That has always been, and always will be, the story of cryptocurrency... DYOR... make the story a good one. It's not easy, but it's possible.

1 0

Re: [liberationtech] Democrats rally around pledge not to use hacked documents (Wash Post)
by grarpamp 30 Apr '19

30 Apr '19

> https://s2.washingtonpost.com/camp-rw/?e=cnJiQGcuY2xlbXNvbi5lZHU%3D&s=5cc6e… https://www.washingtonpost.com/powerpost/will-it-use-hacked-materials-again… https://www.washingtonpost.com/lifestyle/style/journalists-cant-ignore-hack… It's not about upstanding each other for not pledging. Those disavowing it are simply afraid of the truth it contains. Disavowers forging joint compacts are attempting to universally discredit and wage war against the truth. Jointly fudding it is their only defense tactic left. Deny deny deny, and never open up for inspection... it's the oldest game in town. Pledges are also a total lie, no politician would refuse to use fruits in such razor thin and engineered "elections", it would be campaign suicide not to, so they'll just use them secretly. Information seeks to be free, to be its own open market, "National Security" is just another Top Secret FUD attack against the natural state and tide of information, an attempt to put freedom back in the bottle, and keep power out in force. Don't let that happen. 2020 US elections will see many documents "liberated". "Pledge" to curate and keep them freely accessible to the world. Because as you can see in the last link above, the FUD is already having desired effect on media, causing them to second guess themselves, to focus on "'criminal' sources" instead of on the information, etc The fourth estate is hardly as strong, independant, or innocent as people think... in most places of note it's already done in, and getting consistantly worse across the board [1]. But you still have the internet... at least for a little while longer... so really it's up to you now. [1] https://en.wikipedia.org/wiki/Press_Freedom_Index https://rsf.org/en/ranking [2] [2] What sad state of affairs is it that you cannot reach a press freedom site when using freedom tools like Tor. > I don't get it. So, they would not look at the Pentagon > Papers or other evidence of crimes that have been > suppressed? > > It seems to me that the important thing is the information, > not the source. Or am I just ill-informed with regards to > journalism and ethics? > > I get the fruit of a poisoned tree thing for government > prosecutions. But, won't this type of standard make it > easier to suppress whistle-blower information pointing > out government malfeasance?

2 1

Cryptocurrency: Craig Wright Talks Back, Flips Off Everyone
by grarpamp 29 Apr '19

29 Apr '19

https://www.youtube.com/watch?v=8_SoIXUBIhw Bashes McAfee, CZ Binance, Ver, OHagan, Assange, Wikileaks, Ulbricht, Wilson, Bitcoin, Monero, Kraken, Shapeshift, Zcash, Marijuana, Privacy coins, Individualism, CryptoAnarchy, P2P, etc. Praises SEC Govt LEA State, Data Surveillance, Spying, Patents, Banks, Alcohol, etc. Doesn't matter who Satoshi was, or how much is in any bags... Cryptocurrency and Blockchain are in the world at large now, their future rests on the strength of ideas, competition, cooperation, adoption, as always... not on the whim of any single entity or person. Wilson Interview https://www.youtube.com/watch?v=c8RjLf0S0q0 More Craig Wright https://www.youtube.com/watch?v=ZoYnZ6CAoAk https://taosecurity.blogspot.com/2010/02/thor-vs-clown.html https://seclists.org/fulldisclosure/2010/Feb/164 All via Crypto Finder https://www.youtube.com/channel/UCKvc0WUB65GCvOTgPVJ9yRA/videos

2 2

oniontinc: tinc via Tor v3 onions with MPTCP
by Ann Brown 29 Apr '19

29 Apr '19

Basically, oniontinc routes tinc via Tor, and uses MPTCP for multipathing and link aggregation. tinc hosts listen for connections to Tor v3 onion services, and they connect to peers using Tor SocksPorts. MPTCP aggregates full-mesh connections between hosts, with a preference for those that have greater bandwidth and lower latency. For Internet hosts with well-peered gigabit uplinks, this permits throughput among peers at 30-50 Mbps for multiple streams. There are bash scripts for almost everything involved in creating full-mesh oniontinc networks, using Debian hosts. The scripts draw on a simple configuration table with required information about all hosts in the network. The scripts specify subnets 10.101.1N.0/24 with N=0-5, which are part of the subnet 10.100.0.0/14 that ChaosVPN has allocated for American and other hackerspaces. But you can use any subnet that you like, such as something in 172.20.0.0/14 for dn42. Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 1

Fear the Man in the Middle? This company wants to sell quantum key distribution – Ars Technica
by jim bell 28 Apr '19

28 Apr '19

https://arstechnica.com/gadgets/2019/04/fear-the-man-in-the-middle-this-com…

1 0

throwing your life away with Chopin, in passion - Peace my brothers ..
by Zenaan Harkness 28 Apr '19

28 Apr '19

19 years old and here for his people. But no longer here, not for a couple decades at least. For the truth. For the conversation. For everything anyone ever valued. For you. To John, ya mad, bloody bastard! Mirrors: https://streamable.com/n44il https://www90.zippyshare.com/v/vhoRGlNE/file.html https://www.load.to/qR9YFjCZot/John_Earnest_Fantasie_Impromptu_op_66_by_Cho… https://openload.co/f/9as-CdHKc14/155640815182935681_John_Earnest_Fantasie_… ~150MB Live, love, and create our world heh? Full Open Letter From Passover Synagogue Shooter John Earnest https://dailystormer.name/full-open-letter-from-passover-synagogue-shooter-…

1 0

Documentary: Mediastan: A Wikileaks Road Movie
by grarpamp 28 Apr '19

28 Apr '19

https://www.youtube.com/watch?v=9n0Yu7bYF9E Mediastan: A Wikileaks Road Movie: Due to the extraordinary circumstances surrounding the arrests of Julian Assange and Chelsea Manning, Sixteen Films and Journeyman Pictures are providing a time-limited free access to the Wikileaks road movie Mediastan. Mediastan is a documentary film directed by Johannes Wahlström and co-produced by Julian Assange, detailing the publication of the very documents for which both Assange and Manning have been incarcerated.

1 0