May 2021 - cypherpunks - lists.cpunks.org

re: Tor
by Punk-BatSoup-Stasi 2.0 28 May '21

28 May '21

On Fri, 28 May 2021 10:10:29 -0400 Karl <gmkarl(a)gmail.com> wrote: > I'm looking at orbot and seeing it has "circuit padding" now. I don't know > whether this meets the requirements of chaff, and would like to know. according to their docs that padding is supposedly a defense against 'netflow' based analysis. I think 'netflow' is the name of the packet counting system on routers or something like that. there is no reason to believe that such padding achieves much.

1 0

[old] Apertus Protocol
by Karl 28 May '21

28 May '21

Apertus is one of the very first blockchain social network implementations, from around 2014. I found their websites by scanning old block content after I was first targeted and isolated. It's surprising that their git repository has so few contributers, given they are visible in early block content. Apertus has a functional client written in C# for windows machines, and a public web portal to view and share content on. The web portal recently went down for a few years with sketchy surroundings, for me. It is up now at http://bitfossil.com/ . SSL is not working for me, not sure whether that's specific to me. (and of course memo.cash's primary compromised portal is at https://memo.cash/ ) Apertus's logo of the hand with the eye is similar to the Jainism symbol of Ahimsa. It means to prevent all harm and all suffering. https://en.wikipedia.org/wiki/Jain_symbols#Symbol_of_Ahimsa https://github.com/HugPuddle/Apertus/wiki/Technical-Details Apertus Apertus forms a network of authenticated immutable data storage and social networking on top of existing blockchains. It supports any network which uses the the bitcoin core rpc protocol, and comes with configurations for the following networks: Bitcoin Testnet Litecoin Litecoin Testnet Dogecoin Mazacoin Anoncoin Devcoin Potcoin Florincoin Curecoi Namecoin Primecoin Primecoin Testnet Dash Testnet I (xloem) glanced a little through the source code and started composing this page. Improvements are welcome. Transaction format Data is stored in a hierarchy of transactions, built bottom-up. The first layer is the archive data itself. This data is then indexed via ledger transactions, which are themselves indexed in ledgers, ending in a single root ledger transaction which represents the entire archive. Archive transactions Data is split into chunks of size equivalent to the maximum address payload size of the coin in question. Transactions contain these sequential chunks as dummy recipients. If a recipient would be duplicated, or transaction size is exceeded, the transaction is sent and a new one is begun. Transactions which would be entirely duplicate are skipped. Data is terminated by a set of actual transactions sending tips to real recipients, representing in order: keywords (#) recipients (@) vault profile / folder signature Ledger transactions Ledger transactions are archive transactions which store a text file indexing archives. The data content consists of one transaction id per line, in text. The root ledger contains only one transaction. Data Format Example File Format THIS IS A LONG TEST..TXT>00000000000022?THIS IS FILE CONTENTS.################## Example Message Format >000000000000000009*thnk you.########### Current Delimiters \/:*?"><|

1 0

[old] memo.cash protocol
by Karl 28 May '21

28 May '21

I imagine people are using other chains now, but this protocol is well-known due to a compromised web interface that exists. It works and is in use on the bitcoin variants. I am not presently using it. OP_RETURN is a bitcoin opcode for storing data politely. Older protocols use UTXO outputs for data storage, which is more robust but makes every node keep the data in a live database rather than the transaction archive. These transactions can be generated programmatically the same way any bitcoin transaction is generated. This protocol specification has not changed since 2018 and is still in use. Posting to a public blockchain should be done anonymously. https://memo.cash/protocol <h2>Protocol</h2> <p> Protocol uses P2PKH addresses. Actions are saved using <b>OP_RETURN</b>. </p> <p> Message data is UTF-8 encoded. For example, this action would set your name to "memo": </p> <pre style="font-family:monospace">OP_RETURN 6d01 6d656d6f</pre> <h3>Action Codes</h3> <table class="table"> <thead> <tr> <th>Action</th> <th>Prefix</th> <th>Values</th> <th>Status</th> <th>Example</th> </tr> </thead> <tbody> <tr> <td>Set name</td> <td>0x6d01</td> <td>name(76)</td> <td>Implemented</td> <td> <a class="btn btn-leave" target="_blank" href="https://explorer.bitcoin.com/bch/tx/753e29e81cdea12dc5fa30ca89049ca7d538d40…"> Block Explorer </a> </td> </tr> <tr> <td>Post memo</td> <td>0x6d02</td> <td>message(76)</td> <td>Implemented</td> <td> <a class="btn btn-leave" target="_blank" href="https://explorer.bitcoin.com/bch/tx/c7e91099923a28cf86685c9683c74c8c029c896…"> Block Explorer </a> </td> </tr> <tr> <td>Reply to memo</td> <td>0x6d03</td> <td>txhash(20), message(53)</td> <td>Planned</td> <td></td> </tr> <tr> <td>Like / tip memo</td> <td>0x6d04</td> <td>txhash(20)</td> <td>Implemented</td> <td> <a class="btn btn-leave" target="_blank" href="https://explorer.bitcoin.com/bch/tx/b7b9376659920ecbaad794bfb1cd0a5da095f92…"> Block Explorer </a> </td> </tr> <tr> <td>Set profile text</td> <td>0x6d05</td> <td>message(76)</td> <td>Planned</td> <td></td> </tr> <tr> <td>Follow user</td> <td>0x6d06</td> <td>address(35)</td> <td>Implemented</td> <td> <a class="btn btn-leave" target="_blank" href="https://explorer.bitcoin.com/bch/tx/7958e54680a4ed01316ce99489f54c26234060c…"> Block Explorer </a> </td> </tr> <tr> <td>Unfollow user</td> <td>0x6d07</td> <td>address(35)</td> <td>Implemented</td> <td> <a class="btn btn-leave" target="_blank" href="https://explorer.bitcoin.com/bch/tx/a9987c7643a3d5a033b2630cf7e3603385b7ab6…"> Block Explorer </a> </td> </tr> <tr> <td>Set image base url</td> <td>0x6d08</td> <td>url(76)</td> <td>Planned</td> <td></td> </tr> <tr> <td>Attach picture</td> <td>0x6d09</td> <td>txhash(20), imghash(20), url(34)</td> <td>Planned</td> <td></td> </tr> <tr> <td>Set profile picture</td> <td>0x6d10</td> <td>imghash(16), url(61)</td> <td>Planned</td> <td></td> </tr> <tr> <td>Repost memo</td> <td>0x6d11</td> <td>txhash(20), message(63)</td> <td>Planned</td> <td></td> </tr>  </tbody> </table> <p> Additional actions being considered: </p> <ul> <li>Tagging users in posts</li> <li>Voting</li> <li>Issue and revoke delegated addresses</li> <li>Dislike and/or flag posts/users</li> </ul>

1 0

[ot] [personal] internet and tor
by Karl 28 May '21

28 May '21

My current internet setup is a custom script I made that goes through an android phone. It's a workaround for a number of issues I've had in the past. - for some reason phone tethering is giving me speeds on the order of 0.9 -11 KB/s, which is too slow for cloning multiple large code repositories, archiving logs of insanity, or mirroring distributions with plans of airgapped work. - there's a common app for android called 'easytether' but i've found that app can be a vector for system compromise, and somebody i know experienced it as a channel for network distribution similar to my mysterious speed cap Additionally, - leaving tor running locally for extended time has sometimes been a way to make sure a system has an issue, for me Instead, I've installed orbot on my phone, and I use adb's tcp forwarding to use the phone as a tor client. This is so cool! It reminds me of when the privacy advocates at tor used to recommend connecting your phone to your computer to isolate domains, although the setup is different in a lot of ways. Of course, my adb conneciton cuts on a reliable basis, but now restarting it is as easy as replugging the phone and rerunning a 1-line script to forward the port. Here's my script for forwarding orbot to a connected computer: https://github.com/xloem/xloem-cli-utils/blob/master/adb-tor The command is simply "adb forward tcp:9050 tcp:9050" To run shell scripts without setting tor up transparently, I'm using proxychains4, which is far more reliable than torify and just as easy to use: https://github.com/rofl0r/proxychains-ng I started building adb as a standalone system to handle the disconnection issues and make some work towards an app other people could use. I stopped work on this, but it's just a build system and it's nearly complete. The dependencies are all included as subtrees so only 1 git clone would be needed: https://gitlab.com/xloem/tether The tether repository recommends cloning the repository "shallow", but people could also be aware that git has a new option nowadays referred to as "partial cloning", where objects are downloaded from the server when needed, rather than all at once.

1 2

List brief outage; returned
by Greg Newby 28 May '21

28 May '21

Apologies to everyone who got a bounce notification or message that your subscription to cypherpunks was disabled. In pursuit of the problems reported in the past few days, I had made a change to the email settings that broke a few things. I've now fixed this, I think. I've also reset the Mailman "bounce" score and temporarily turned off bounce processing. So, you do NOT need to worry about "confirming" your subscription if you got a message from Mailman about this, or about otherwise dealing with bounces. Confirming won't hurt anything, though, if you already did. Sorry for disrupting things. In case you are uncertain whether a message you sent was posted, you can check the archives here: https://lists.cpunks.org/pipermail/cypherpunks/2021-May/date.html Best, Greg

1 0

[spam] The list is dead omigod oh no!
by Karl 28 May '21

28 May '21

They put them back with their communities once they believe they have control. The list will come back eventually.

1 1

SPF, gmail, the cpunks list, and SFP
by Karl 27 May '21

27 May '21

I hear it's possible that cypherpunks emails may be being bounced by gmail due to something called SPF. I'm not that familiar with SPF, but there's some discussion of the issue at https://serverfault.com/questions/824132/how-to-properly-configure-a-mailin… Also, if you are hand-building a communication interface for a shielded room, or don't trust your supplier, make sure you get fiberoptic cable that doesn't have the usual metallic sheathing to increase internal reflection, or you'll be putting a big antenna through a wall of your secure environment. (SFP, a mis-spelling of SPF, is an interface for fiberoptics: https://en.wikipedia.org/wiki/Small_form-factor_pluggable_transceiver )

1 0

[duplicate] Leaks: Dumps Datasets Ransomware Kopimi Onions
by Karl 27 May '21

27 May '21

I don't know what this post was about, but it's pretty cool that I never received it and it's full of onion links. I found it in the archive. I'm posting it back. --- Traditions of couriers groups scenes hackers to the present day... https://www.youtube.com/watch?v=ZF7enskIaDM Donnie Ray - Can You Get It, While It's Hot Govt files in recent news... DCPD on Babuk IllinoisAG on Doppel ChicagoPD on ??? blueleaks ipfs QmdUQ2d2PGA5q1L4pDhd9fek1ejzowbZKTMCnAYR2EgViA blueleaks infohash 8cf92b7cd3f022fa5478b84963e89c1dd0af090f http://ransomwr3tsydeii4q43vazm7wofla5ujdajquitomtd47cxjtfgwyyd.onion/ Ransomware Meta List http://fnxasrgjazy7xuzyculkp4rqni6ldiw5uxazzpx3klc4vfufsiwno4ad.onion/ Marketo http://54rdhzjzc4ids4u4wata4zr4ywfon5wpz2ml4q3avelgadpvmdal2vqd.onion/ Darkleakmarket http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion/ AKO / Renzy http://3kp6j22pz3zkv76yutctosa6djpj4yib2icvdqxucdaxxedumhqicpad.onion/ Arvin http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion/ Lvblog http://544corkfh5hwhtn4.onion/ Blackshadow http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/ News http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/ Astro http://avaddongun7rngel.onion/ Avaddon http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/ Conti / Ryuk http://cuba4mp6ximo2zlo.onion/ CUBA http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ Darkside http://darksidedxcftmqa.onion/ Darkside http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/ Happyblog / Revil / Sodinokibi http://egregoranrmzapcv.onion/ http://ekbgzchl6x2ias37.onion/ Cl0p / TA505 http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/ Dopplepaymer http://htcltkjqoitnez5slo7fvhiou5lbno5bwczu7il2hmfpkowwdpj3q2yd.onion/ Conti http://hxt254aygrsziejn.onion/ Netfilim http://ixltdyumdlthrtgx.onion/ http://lockbitkodidilol.onion/ Lockbit http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/ Lorenz http://mobikwikoonux37wauz6oqymshuvebj5u763rutlogc2fb2o3ugcazid.onion/ Mobikwik http://mountnewsokhwilx.onion/ Mount http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ N3tw0rm http://nbzzb6sa6xuura2z.onion/ Suncrypt http://p6o7m73ujalhgkiv.onion/ Ragnar http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion/ Pay2key http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/ Pysa http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/ Everest http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion/ Lvblog http://rgleak7op734elep.onion/ Ragnar http://rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3igtbm3pupc4lyd.onion/ Ragnar http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion/ Netwalker http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/ Ransomexx http://tdoe2fiiamwkiadhx2a4dfq56ztlqhzl2vckgwmjtoanfaya4kqvvvyd.onion/ Leaks http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/ News http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ Babuk http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion/ Ragnarok http://wqmfzni2nvbbpk25.onion/ Pysa http://xfr3txoorcyy7tikjgj5dk3rvo3vsrpyaxnclyohkbfp3h277ap4tiad.onion/ Mazenews http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/ XING http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/ File

1 4

(no subject)
by Karl 27 May '21

27 May '21

> Greg, these complaints seem to fit the disruptive practices of attackers described here: > > https://cryptome.org/2012/07/gent-forum-spies.htm > > Maybe coincidental but not the first to aim at messing with the list. Other lists have been wiped out with endless bitches, accusations, demand for attention. > > Good job you're doing, amazing patience. John: 1. These are real issues I am actually experiencing. 2. Yes, I have a role of list disruption here. Given these two things, what kind of relation could I form to work towards the issues, and _protect_ the list? Is there any way to protect Greg's capacity by working with you guys better? If I were free to, I would simply switch to a different e-mail service than gmail. I do plan to do that eventually.

1 0

[ot] attempting to process list connection
by Karl 27 May '21

27 May '21

gmail's not delivering messages from this list to me, despite a filter I set up. I was never sure why I started posting to this list, anyway. Somebody got spam-filtered recently, and while dissociated, doing my brainwashed habits, I replied with pressure towards them, rather than giving them care. I'm thinking about that while I experience disconnection from the list. But moreso, I'm thinking about why I am connected to this list at all. If I understood why I was here, it would make more sense to act on it. It would be really nice to get lists run by something like blockchains, with open logs. I'm sure that Greg would appreciate having less list burden if anybody implemented that. I'm thinking I'd like to use the pressure around not receiving from the list, to resolve mailing list censorship in general, somehow. I bet gnunet has something. .... <~~confusion~~> ... I don't have any experience with remailers, unfortunately, or usenet. It slightly sounds like a solution that the list members would find familiar and agreeable, might involve existing email systems and software. But I'm so crazy I'm unlikely to complete anything that others even recognise as usable ;p I think that's a nice place for the pressure to go, though. In other news, my first feeling for handling this was to set up a local mail server on a tor hidden service. Makes the delivery chain controllable. That seems like a reasonable next step up from e-mail. Not sure if I'll actually do it, though.

1 0