November 2021 - cypherpunks - lists.cpunks.org

GovCorp conspiracy theory fails again
by professor rat 14 Dec '21

14 Dec '21

Like the Batshit-Crazy fools that still promote such crap “If you had some sort of Washington-corporate alliance that wanted to make Bitcoin a transparent chain, guess what? They would have fought Taproot,” says Alex Gladstein at the Human Rights Foundation, who advocates for Bitcoin as a tool against authoritarian governments. “But there was no organized resistance to Taproot. https://www.coindesk.com/business/2021/11/29/who-sets-the-rules-of-bitcoin-…

7 17

Cypherpunks Vs Marxism. There can be only one.
by professor rat 13 Dec '21

13 Dec '21

1840-s Marx - Gertrude Himmelfarb argued that it cannot be denied that in his essay On the Jewish Question, Marx expressed views that “were part of the classic repertoire of anti-Semitism.” Paul Johnson has argued that “The second part of Marx’s essay is almost a classic anti-Semitic tract, based upon a fantasied Jewish archetype and a conspiracy to corrupt the world.” 1850's Marx - https://www.reddit.com/r/CapitalismVSocialism/comments/7dwc4n/the_russian_l… 1860's - Marx. Capital, Volume One, Part II: The Transformation of Money and Capital CHAPTER FOUR: THE GENERAL FORMULA FOR CAPITAL: "The capitalist knows that all commodities, however scurvy they may look, or however badly they may smell, are in faith and in truth money, inwardly circumcised Jews . . "

2 1

Quick question re TLSA lookup error
by Douglas Lucas 10 Dec '21

10 Dec '21

Twitter keeps giving me "Twitter is over capacity. Please wait a few moments then try again" when I try to DM, so maybe there's a competent person on this list (lol) who can answer: Under the Obama and Trump administrations, the US State Dept had a phone number for journalists to contact. It has since been removed; the website now instructs: email PAPressDuty(a)state.gov. I looked up the old State Dept phone number and called it. The voice recording told me the same thing: email PAPressDuty(a)state.gov. Monday I emailed. Didn't get a reply until yesterday. The reply I got was (among other error message stuff that appears general/unhelpful): "<PAPressDuty(a)state.gov>: TLSA lookup error for stimson.state.gov:25" So I'm wondering if anyone can interpret the technical significance of such an error for me. Predictable paint-by-numbers opinion blatherings by crazed and/or paid losers will be ignored. Doug

3 4

How to isolate/figure out whispers in audio clip?
by Douglas Lucas 10 Dec '21

10 Dec '21

Hey cypherpunks, I have an .MP4 clip of Joe Biden whispering to 13-year-old Maggie Coons before trying to kiss her: https://douglaslucas.com/blog/wp-content/uploads/2021/02/JoeBiden_ChrisCoon… The relevant portion of the clip begins at approx 1:05. Biden whispers: "By the way, if you want to know how important it is, being thirteen" and then I can't make out the rest, I think due to the loud camera shutter. Can anyone suggest an audio program (preferably for Linux) that can help isolate Biden's voice? Computery techniques I could use, or you could use, to help figure out what he's whispering? For reference, the event this clip is from took place on January 6, 2015, and the full video is here: https://www.c-span.org/video/?323601-1/senate-ceremonial-swearing-vice-pres… Doug

7 27

Re: Assange's Case
by professor rat 10 Dec '21

10 Dec '21

"... after 12 years of detention, including seven in the Ecuadorian Embassy in London. He has in the past attempted suicide by slashing his wrists. He suffers from hallucinations and depression, takes antidepressant medication and the antipsychotic quetiapine. After he was observed pacing his cell until he collapsed, punching himself in the face and banging his head against the wall he was transferred for several months to the medical wing of the Belmarsh prison. Prison authorities found “half of a razor blade” hidden under his socks. He has repeatedly called the suicide hotline run by the Samaritans because he thought about killing himself “hundreds of times a day.” END extract. Normally I don't buy anything emanating from Camp Assange. But this actually chimes with his very public, self-destructive trajectory going from self-described ' revolutionary cypherpunk ' to ' autistic-spectrum journalist ' in the last decade. Hopes must now be high for the last days of this Lamo. And selling all his crypto for half-price may have contributed. Hasta luego, loser. Cheats never prosper.

3 5

Libertarianism... parties, borders, property, abortion, roads, taxes, guns, death, etc
by grarpamp 08 Dec '21

08 Dec '21

https://en.wikipedia.org/wiki/Libertarianism https://en.wikipedia.org/wiki/Debates_within_libertarianism https://en.wikipedia.org/wiki/List_of_libertarian_political_parties https://en.wikipedia.org/w/index.php?fulltext=1&search=libertarianism Have fun.

2 2

Re: disruption strategies against intelligence community
by coderman 07 Dec '21

07 Dec '21

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 next in our series, observation and detection continued: here's a beautiful fact less discussed - exploits are fragile! perhaps more so than software in general. we can use this to our advantage :P the broad themes of our approach is thus: - - change the landscape, subtly... you want to appear vulnerable while not actually. this is "VM camouflage", "OS Masking", "User Agent Switching", "Browser Fingerprint Forgery", etc., etc. - - rebuild sanitized and minimized. sanitized builds will produce lots of context and abort when stack, heap, concurrency vulnerabilities are encountered. eliminating support for <bloated thing> in <your software> prunes the attack surface, perhaps mitigating an exploit chain at any link. - - anticipatory read-ahead : pre-fix vulnerable fruit. this is a thread for another discussion, but red-teaming your own setup is the best way to become familiar with the usual and unusual behavior of your systems, and become aware of their limitations and weaknesses before they're exploited. - - deploy the honey! this includes honey services, honey tokens, honey pots (classic), honey hardware, and whatever else you can setup to attract attention while you see whose attention you attracted :) one of my favorite techniques is disabling mlocate/updatedb and placing some large source trees on disk. i know that they should never be recursed over, so if all of the sudden i see a strange process doing a dirtree on that forbidden zone i know it's malicious, or at least severely malfunctioning! (this is where you use previous techniques to analyze state and determine one possibility from the other...) relevant resources: https://en.wikipedia.org/wiki/AddressSanitizer https://docs.microsoft.com/en-us/cpp/linux/linux-asan-configuration https://blog.quarkslab.com/clang-hardening-cheat-sheet.html https://cheatsheetseries.owasp.org/cheatsheets/C-Based_Toolchain_Hardening_… https://github.com/ray-lothian/UserAgent-Switcher https://github.com/maximbaz/browser-fingerprint-protector https://en.wikipedia.org/wiki/Deception_technology http://s3.eurecom.fr/docs/csur18_deception.pdf best regards, until next time - build your kit! :) -----BEGIN PGP SIGNATURE----- iNUEAREKAH0WIQRBwSuMMH1+IZiqV4FlqEfnwrk4DAUCYWXyC18UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0NDFD MTJCOEMzMDdEN0UyMTk4QUE1NzgxNjVBODQ3RTdDMkI5MzgwQwAKCRBlqEfnwrk4 DIdDAQClN+iMK6vETD+gfkMBCXeusW8JD8OHKg3AkvtjhFq/1gD/W3b92Df31Zk7 oTp0vZBJOTsGiEuqvGq5ECchByNvrWU= =tdrW -----END PGP SIGNATURE-----

1 1

[personal] dbfbbb89a1b236179c625e8d960ce81867c68169e2a93c5761eb842ffe2ffec9
by Karl 05 Dec '21

05 Dec '21

i've of course been posting about this a lot. saving is more important than reading, i'm afraid. each line is a different transaction, so the stream is timestamped as blocks are mined. https://github.com/xloem/libexcessiveattemptstostorethings present HEAD is 1f454a986359ef98104eee48b8d2ace2a4db268d below was made by running test_flush_stream.py with no arguments. it might be much harder to work on this after posting this email. https://bico.media/dbfbbb89a1b236179c625e8d960ce81867c68169e2a93c5761eb842f… this is posted with a library i have given many names to, always changing as i made it i posted it online, including the private key, so it's possible others have used it, although not many look i've called the library things like 'libdisgustingwaste' 'libdestroyedlives' 'libincineratesitself' i called it these things because it makes it easier for me to make. it appeases parts of me that have been through something horrible, somehow. i desperately yearn to have information that is important to me not be lost. i don't know how to reach this goal, yet. the code here works by reading from stdin, right now, and sending a transaction whenever data is available. so, it's doing it when i press enter, because my terminal is line-buffered, i suppose. there is always more to do. i hope you are well.

2 2

Nasty stench at MIT
by professor rat 03 Dec '21

03 Dec '21

Oh Captain! Mercaptan! Larry, Frank and Seth might need to get out ahead of this businessinsider.com The FAA accidentally disclosed more than 2,000 flight records associated with Jeffrey Epstein’s… Domestic flight records associated with Jeffrey Epstein’s private jets Epstein’s actions have reverberated throughout the US scientific community over the past month after investigations revealed that he supported many top research universities and labs by offering their scientists significant financial support. His targets included several prominent physicists and physical scientists including George Church, Lawrence Krauss, Kip Thorne, Frank Wilczek, as well as the late physicists Murray Gell-Mann and Stephen Hawking. Although there is no indication that the scientists were involved in any dubious activity, Epstein’s connections – apparently intended in part to support his ideas about eugenics and cryogenics – have embarrassed scientists and their institutions. https://physicsworld.com/a/mit-media-lab-boss-quits-over-jeffrey-epstein-li…

2 1

[spam][crazy][wrong][ot] ramblings
by Karl 03 Dec '21

03 Dec '21

whooo! it's 16:15 on 2021-11-24 and i know that well because i just typed a spamlogtiny where i found the broadcast rpc call for libretchingandvomiting and ... then my xorg began misbehaving such that only the menu bar would respond to keyboard and mouse input, no matter what window was focused, and then i wrote a script to dump the memory of my chrome processes, and the visible email content didn't seem to be in the memory i dumped, and then my system ran out of space, and my body froze up and started spasming ... basically when my computer gets a corruption i start thinking aliens are hacking my brain and everything goes wrong. but then i rebooted the system! the email was apparently lost, _but_ i have part of a script started for dumping process ram, so that's progress for future situations. in my imaginary world where i can do free makery stuff, i use a field probe to read the ram directly from its refresh emissions using an sdr. but we are not in this imaginary world so i use /proc/[pid]/mem and /proc/[pid]/maps . it would be good to set the kernel settings that let me use /dev/mem, be super helpful. anyway ! libtotallygrossdestroyedwaste is still seeming fun to pursue. there's also a thing in an hour i'd kinda like to try going to. my new scared habits know to hit 'save draft' over and over and over again to make life make more sense. it's 16:55 and i'm hitting 'save draft'. 16:57 i hit 'save draft' again. and here i go again. i like hitting it. in electrumx, transaction_broadcast() expects a hexadecimal string passed, and it's called in response to 'blockchain.transaction.broadcast' yay! it's 16:58 and i'm hitting 'save draft'. it's 17:00 and ................ the rpc call source reads like it would return the transaction hash after broadcast. i'm hitting save draft! it's 1701 ! 1703. omigod i wrote a broadcast wrapper! it's a 1-line function and it's so hard. i know it won't work yet (because my error density is so high) but here it is: async def broadcast(self, txbytes) -> str: return await self.request(str, 'blockchain.transaction.broadcast', txbytes.hex()) woohoo ! saving draft. and code. ok ummmm i'll use the op_return code to test it. i'll use my mobile phone to send money to a private address. the hardest part will be making the private key because th eop return code uses a local node. maybe i'll just focus on that. it's 1718. hitting 'save draft'. what a nice, friendly button. now it's 1719. anyway i've made a possible opreturn output, pending bugs. the biggest concern around craftin ga transaction is estimating a fee. maybe i'll make a quick fee estimation wrapper. 1719. i better wrap other useful things too like getting utxos. and that will mean identifying an address by its 'hashx', an electrum-specific thing. 1726 how to get a hashx is at https://github.com/spesmilo/electrum/blob/8d7370d897314d8542906aecc6a45cc94… def address_to_scripthash(addr: str) -> str: script = address_to_script(addr) return script_to_scripthash(script) or in electrumx in coin.py class Coin def address_to_hashX(cls, address): '''Return a hashX given a coin address.''' return cls.hashX_from_script(cls.pay_to_address_script(address)) 1728 1732. i guess i'll be going to my event to stay more stable. maybe switchin' gears.

2 10