May 2021 - cypherpunks - lists.cpunks.org

The Hacker News: Over 25% Of Tor Exit Relays Are Spying On Users' Dark Web Activities
by jim bell 10 May '21

10 May '21

The Hacker News: Over 25% Of Tor Exit Relays Are Spying On Users' Dark Web Activities. http://feedproxy.google.com/~r/TheHackersNews/~3/keMzbRcpGLs/over-25-of-tor…

1 0

It's already possible to hack an AirTag
by jim bell 10 May '21

10 May '21

https://news.yahoo.com/airtag-nfc-hack-205735409.html A security researcher has successfully hacked an AirTag, making it launch the 'wrong' website.

1 0

Boxer syndrome
by Ali Reza Hayati 08 May '21

08 May '21

I wrote a blog post about our societies, I hope you find it useful. Boxer syndrome https://alirezahayati.com/2021/05/09/boxer-syndrome/ -- Ali Reza Hayati (https://alirezahayati.com) Libre culture activist and privacy advocate PGP: 88A5 BDB7 E07C 39D0 8132 6412 DCB8 F138 B865 1771

1 0

Boxer syndrome
by Ali Reza Hayati 08 May '21

08 May '21

I wrote a blog post about our societies, I hope you find it useful. Boxer syndrome https://alirezahayati.com/2021/05/09/boxer-syndrome/ -- Ali Reza Hayati (https://alirezahayati.com) Libre culture activist and privacy advocate PGP: 88A5 BDB7 E07C 39D0 8132 6412 DCB8 F138 B865 1771

1 0

ACIC believes there's no legitimate reason to use an encrypted communication platform | ZDNet
by jim bell 08 May '21

08 May '21

https://www.zdnet.com/article/acic-believes-theres-no-legitimate-reason-to-… Idiots !

1 0

Fwd: [tor-talk] Looking for information about onion site user deanonymization
by grarpamp 07 May '21

07 May '21

---------- Forwarded message ---------- From: Seth David Schoen <schoen(a)loyalty.org> Date: Sun, 2 May 2021 23:20:05 -0700 Subject: [tor-talk] Looking for information about onion site user deanonymization To: tor-talk(a)lists.torproject.org Hi tor-talk, I'm working as a consultant to a criminal defense lawyer who's representing a defendant in a case involving Tor and an investigation by U.S. law enforcement and foreign law enforcement. In 2019 a foreign law enforcement agency claimed to identify the clearnet IP addresses of a large number of people who were accessing an onion site that the agency itself was monitoring or had taken control of. We know of various methods by which this might be done, but I'm wondering whether anyone has heard concretely about law enforcement capabilities or practices in this area if users have not de-anonymized themselves, or rumors or reports of this being done about two years ago.

2 1

Introducing the Pinecone overlay network
by coderman 07 May '21

07 May '21

https://matrix.org/blog/2021/05/06/introducing-the-pinecone-overlay-network Introducing the Pinecone overlay network 2021-05-06 — [Tech](https://matrix.org/blog/category/tech) — Neil Alexander Since the end of 2019, we have spent quite a bit of time thinking about and exploring different technologies whilst building various demos for P2P Matrix. Our mission for P2P Matrix is to evolve Matrix into a hybrid between today's server-oriented network and a pure P2P network - empowering users to have total autonomy and privacy over their data if they want (by storing it in P2P Matrix, by embedding their server into their Matrix client), while also letting users store their data in serverside nodes if they so desire. The goal is to protect metadata much better (as users no longer have to depend on a server run by someone else to communicate), as well as drive new features such as account portability, multi-homed accounts, low-bandwidth Matrix and smarter federation transports - and provide support for internet-less mesh communication via Matrix which can also interoperate with the wider network. You can read more about it in our [Introducing Matrix](https://matrix.org/blog/2020/06/02/introducing-p-2-p-matrix/) blog post from last summer, or watch our [FOSDEM 2021 talk](https://fosdem.org/2021/schedule/event/matrix_pinecones/) where we previewed Pinecone. It's important to note that this has been a small but important long-term project for Matrix, and has been progressing entirely outside our business-as-usual work of improving the core protocol and reference implementations. As the project has progressed, we've built a variety of prototypes using existing libraries ([go-libp2p](https://github.com/libp2p/go-libp2p), [js-libp2p](https://github.com/libp2p/js-libp2p) and [Yggdrasil](https://github.com/yggdrasil-network/yggdrasil-go)) demonstrating what an early P2P Matrix might feel like if it were running on a mobile device, in the web browser and so on using such an overlay network. Each of these demos has taught us something new, and so in October 2020 we decided to take this knowledge to build an experimental new overlay network of our own. Pinecone is designed to provide end-to-end encrypted communications between devices, regardless of how they are connected to one another, in a lightweight and self-arranging fashion. The routing protocol is a hybrid, taking inspiration from [Yggdrasil](https://github.com/yggdrasil-network/yggdrasil-go) by building a global spanning tree, but rather than forwarding all traffic using the spanning tree topology, we use it as a bootstrap routing mechanism for a line/snake topology, ordered by their ed25519 public keys, which we have affectionately named SNEK (Sequentially Networked Edwards Key) routing. Nodes seek out their closest keyspace neighbours on the network and paths are built between these pairs of nodes, similar to how a Chord DHT functions, populating the routing tables of intermediate nodes in the process. These paths are then used to forward traffic without having to perform up-front searches, allowing for very fast connection setups between overlay nodes. These paths are resilient to network topology changes and handle node mobility considerably better than any other name-independent routing scheme that we have seen — early results are very promising so far. We have also been experimenting with a combination of the μTP (Micro Transport Protocol) and TLS to provide stateful connection setup, congestion control and end-to-end encryption for all federation traffic carried over the Pinecone network. [Pinecone simulator showing line/snake logical network topology] If Pinecone works out, our intention is to collaborate with the libp2p and IPFS team to incorporate Pinecone routing into libp2p (if they'll have us!) while incorporating their gossipsub routing to improve Matrix federation... and get the best of both worlds :) Today we're releasing the source code for our current early implementation of Pinecone — you can [get it from GitHub](https://github.com/matrix-org/pinecone) right now! It's very experimental still and not very well optimised yet, but it is the foundation of our latest mobile P2P Matrix demos, which support P2P Matrix over both Bluetooth Low Energy mesh networks, multicast DNS discovery within a LAN, and/or by routing through static Pinecone peers on the Internet: - Android: https://appdistribution.firebase.dev/i/394600067ea8ba37 - iOS: https://testflight.apple.com/join/Tgh2MEk6 Building a routing overlay is only the first step in the journey towards P2P Matrix. We will also be looking closely in the coming months at improving the Matrix federation protocol to work well in mixed-connectivity scenarios (rather than the full mesh approach used today) as well as decentralised identities, hybrid deployments with existing homeservers and getting Dendrite (the Matrix homeserver which is embedded into the current P2P demos) more stable and feature-complete. The long-term plan could look something like this: [Diagram showing possible P2P Matrix stack] Most discussion around P2P Matrix takes place in [#p2p:matrix.org](http://matrix.to/#/#p2p:matrix.org), so if you are interested in what's going on, please join us there!

1 1

[spam] [spam] [spam] [personal] attempts to speak kindly
by Karl 07 May '21

07 May '21

What did the supersoldier say to the war stimulation algorithm? SS: I want to cry. WSA: You're a jerk. SS: I've hurt you in some way. WSA: Not this time. You're just a jerk. SS: You need me to understand you better. WSA: WTF is this? Go fight this monk so I can control you better.

1 28

List Messages Being Disrupted
by Karl 07 May '21

07 May '21

To me the email at https://lists.cpunks.org/pipermail/cypherpunks/2021-April/087371.html indicates that messages are likely being disrupted somehow. To me, it does not really show whether that is happening at pglaf, an isp or government, or the behavior of the poster of the message. I have heard others (James) complain of spam bouncing on this list. I have never received a spam bounce myself. I thought Greg stated some months ago that there was no spam filter on the host. The message would be _far_ more credible if it contained an actual raw copy of the bounce email attached. But it still looks incredibly credible. The correct solution here is cryptographic message delivery. It is clear the people running this list are being harmed, that there is no easy way, already, to prove what actually happened around that spam bounce.

2 2

Making Bitcoin more secure.
by jim bell 06 May '21

06 May '21

https://techxplore.com/news/2021-05-bitcoin.html

1 0