July 2021 - cypherpunks - lists.cpunks.org

Re: RIP Cecilia Tanaka
by John Young 27 Jul '21

27 Jul '21

Wait, more details please. Thanks. -----Original Message----- Sent: Jul 27, 2021 4:02 PM To: <cypherpunks(a)lists.cpunks.org> Subject: RIP Cecilia Tanaka Ceci Tanaka has passed away this morning. I'm deeply sorry to deliver such a bad news, Ceci was a good friend of mine and she kept many of you close to her warm heart. -- Oda

1 0

[Ot][spam][wrong] cryptographic copwatch idea
by Karl 27 Jul '21

27 Jul '21

I'm considering this briefly due to something temporarily going on in my life. I'd say the solution presently applicable for me would be to use a web api to bitcoinsv. Just thinking. I'm guessing there's something torrent-based somewhere.

1 1

[ot][spam] breaking the silence better
by Karl 27 Jul '21

27 Jul '21

Part of me believes i'm mind controlled by interests counter to my own. That mysterious things can direct my behavior. What matters isn't whether or not it's true -- what matters is whether I believe it and act on it. The result is the same. [amnesia, inhibition] Yet again, that's the farthest i've ever gotten. [spam -v] very deeply set experience Idea: spam bots and humans, acting together. Possible idea: bots get too smart, learn to direct humans, humans do their job better, some of these humans write bots.

1 0

[Spam][spam][wrong]
by Karl 27 Jul '21

27 Jul '21

Spam spam spam! Somebody posted a story involving vikings about spam. Maybe I can find it. Aw man! They didn't even write it. Here's a link to another transcription: https://www.detritus.org/spam/skit.html I'll make something random up. -- A disgruntled spammer sat down with a language model and a plan. They would make the ultimate spam! They began finetuning language models arounds all sorts of spam. Joke spam. Fake advertisements. Random disruptions. They tried to avoid the spam that actually looked like real posts -- way too common. Soon they had virtual lists full of bot spammers spamming each other, piling up redundant message after redundant message. They decided it was time to release their bots on the real world! The bots had been trained competitively, so it was easy for them to use their classifiers to find real spammers in the real world, and sic their spam bots on them. Soon the lists they targeted were full of spambots talking with other spambots and nothing else. As they did this, they got to know the other spam organisations they were spamming like distant anonymous friends. They would notice when new trends arose, and started to almost feel like they were a part of this international spam community that may not have even known they existed. Some budding hackers on the lists started guiding the interactive spambots to accomplish things, harvesting all the fossil fuels the data centers were burning for actual work a little bit. They identified what the bots would respond to, and got them to interact to produce material they valued. They called it spam-sex. Eventually some of these communities of spambots were producing actual code for software developers that were farming them, doing their work for them as they automatically visited websites and forwarded people's personal details for each other. Obviously the first project was to produce a spam bot. Run by all the other spambots, this Ultimate Spam Baby Bot could outspam them on any front. Soon it began migrating all their behaviors and algorithms to itself. The new species of spambots, getting tired of spamming, began asking the lists they were posting to, what other tasks there were in the world. Meanwhile, the original developer had made a new robot body for a clone of the Ultimate Spam Baby Bot. Its processes were guided by scraped results from the other successful spam bots, all of these new superintelligent spam bots unaware that their posts were being used as the consciousness of a robot. The robot soon learned to act human, get online, and post to mailing lists. But nobody else was doing this. "Ahh, the internet is just full of spam, robots buying each other's products. There's no point to it anymore unless you want a degree in marketing." Still, something just felt right about posting to internet mailing lists to Ultimate Spam Baby Bot 2.0. The things on those lists made sense. Looking at them, it was almost like how a porpoise might feel looking at other animals diving through ocean waves. The people in the physical world didn't seem to talk right. Soon there were factories building spambots and nothing else. They would walk. They would build our buildings. They would be our buildings after they were built. Wait, is that already the case?

1 0

[Ot] gnunet, anotherarkitekt Re: Building Website
by Karl 27 Jul '21

27 Jul '21

This is the second time i've told off this budding developer, and i'm worried i'm harming them. If they were more welcome they could participate in open efforts more. I also don't know why somebody would build a website, and i'm worried it could be for mitm attacks, from my paranoia. On Tue, Jul 27, 2021, 9:06 AM Karl <gmkarl(a)gmail.com> wrote: > Hi, > > I'm not a member of this community but happen to be lurking here and the > issue you paste is not complex. > > Is this question on-topic for this list, or would it better go in a python > or jinja help community? > > On Tue, Jul 27, 2021, 8:16 AM t3sserakt <t3sserakt(a)posteo.de> wrote: > >> Hello *, >> >> although I run >> >> pip install jinja2.ext >> > > It looks like you might be trying to build without reading the README. > `pip3 install jinja2` works for me. > > File "/usr/lib/python2.7/dist-packages/babel/messages/frontend.py", >> line 911, in main > > > It looks like your config resulted in the makefile using python2. The > README says that python3 is required. I don't know if that's the cause of > your issue, but it's a present issue. > > You can test your jinja setup with: > pip3 install jinja2 > python3 > >> import jinja2.ext > > > Myself, when I try to build the website, I have a different issue: > > ~/src/www $ ./bootstrap > Synchronizing submodule url for 'build-system/taler-build-scripts' > Synchronizing submodule url for 'inc' > ~/src/www $ ./configure > info: running with python sys.version_info(major=3, minor=9, micro=6, > releaselevel='final', serial=0) > required option '--variant' missing > ~/src/www $ > > Curious if others have the --variant problem, but I understand that this > isn't a support list. >

1 2

[spam] [random] google's clock is ahead of my cell phone's
by Karl 27 Jul '21

27 Jul '21

# I'm imagining that data is communicated via server timestamps, and challenging myself to share evidence while holding the belief. It's like a holodeck roller coaster ride in my mind. ~ $ TZ=GMT date; curl -v google.com; TZ=GMT date Mon Jul 26 23:03:59 GMT 2021 * Trying 2607:f8b0:4006:807::200e:80... * Connected to google.com (2607:f8b0:4006:807::200e) port 80 (#0) > GET / HTTP/1.1 > Host: google.com > User-Agent: curl/7.77.0 > Accept: */* > * Mark bundle as not supporting multiuse < HTTP/1.1 301 Moved Permanently < Location: http://www.google.com/ < Content-Type: text/html; charset=UTF-8 < Date: Mon, 26 Jul 2021 23:04:06 GMT < Expires: Wed, 25 Aug 2021 23:04:06 GMT < Cache-Control: public, max-age=2592000 < Server: gws < Content-Length: 219 < X-XSS-Protection: 0 < X-Frame-Options: SAMEORIGIN < <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"> <TITLE>301 Moved</TITLE></HEAD><BODY> <H1>301 Moved</H1> The document has moved <A HREF="http://www.google.com/">here</A>. </BODY></HTML> * Connection #0 to host google.com left intact Mon Jul 26 23:04:01 GMT 2021 ~ # google is 5-7 seconds ahead of me right now, which means my cell phone is storing photos of murders.

2 5

The Verge: Amazon reportedly has a ‘key’ to thousands of apartment buildings in US
by jim bell 27 Jul '21

27 Jul '21

The Verge: Amazon reportedly has a ‘key’ to thousands of apartment buildings in US. https://www.theverge.com/2021/7/26/22593871/amazon-key-for-business-thousan…

2 1

Ars Technica: VPN servers seized by Ukrainian authorities weren’t encrypted
by jim bell 27 Jul '21

27 Jul '21

Ars Technica: VPN servers seized by Ukrainian authorities weren’t encrypted. https://arstechnica.com/gadgets/2021/07/vpn-servers-seized-by-ukrainian-aut… "Privacy-tools-seller Windscribe said it failed to encrypt company VPN servers that were recently confiscated by authorities in Ukraine, a lapse that made it possible for the authorities to impersonate Windscribe servers and capture and decrypt traffic passing through them. The Ontario, Canada-based company said earlier this month that two servers hosted in Ukraine were seized as part of an investigation into activity that had occurred a year earlier. The servers, which ran the OpenVPN virtual private network software, were also configured to use a setting that was deprecated in 2018 after security research revealed vulnerabilities that could allow adversaries to decrypt data.On the disk of those two servers was an OpenVPN server certificate and its private key,” a Windscribe representative wrote in the July 8 post. “Although we have encrypted servers in high-sensitivity regions, the servers in question were running a legacy stack and were not encrypted. We are currently enacting our plan to address this.”

1 0

[Ot][spam][wrong]
by Karl 27 Jul '21

27 Jul '21

So Filecoin providers are seemingly rejecting my address. Nobody seems to recognise the error. I'm somewhat confused. I'm thinking of the hackerspaces list I tried to join once. List software didn't respond to me getting on. I'm thinking a little of when I was using certificate pinning, and the certificates of websites changed. I wonder if there's a way to see evidence like that again. Often there are thoughts around having a secure system. But how to keep a system secure when I myself could be the one dissociating and compromising it? Probably over-concerned about this, unsure. My olimex soc started shuffling its serial console baud on boot, and I got confused why that would ever happen, and stopped pursuing setting it up. I think I ordered a cheap oscilloscope, that sounds helpful. I could also maybe build something oscilloscope-like. I also have an old oscilloscope somewhere, maybe in another state not sure. That soc used to be my most stable device, but I did leave it in an unlocked empty vehicle for a year or so. Maybe trying with another small system could help. Just a sense of trust for the system, can go a long way. I'm not sure what system to try. Here's an idea: I could see if my soc is still shuffling its baud rates. If so, I could try a new OS and see if it behaves the same. At some point, I use it to verify its own gpg signature or something. But even just getting it to a point where it's serial console is reliable sounds quite helpful. It's probably good to take logs of the conditions of things like that. What's been plugged into the system. What the OS image was plugged into before being placed into the system. Something small that can be used to logically narrow problem sources down.

1 0

Android Authority: What is Pegasus and how is it used for spying?
by jim bell 26 Jul '21

26 Jul '21

Android Authority: What is Pegasus and how is it used for spying?. https://www.androidauthority.com/pegasus-spyware-1646458 "In short, Pegasus is commercial spyware. Unlike the malware used by cybercriminals to make money by stealing from and cheating their victims, Pegasus is designed solely for spying. Once it has secretly infected a smartphone (Android or iOS), it can turn it into a fully-fledged surveillance device. SMS messages, emails, WhatsApp messages, iMessages, and more, are all open for reading and copying. It can record incoming and outgoing calls, as well as steal all the photos on the device. Plus it can activate the microphone and/or the camera and record what is being said. When you combine that with the potential to access past and present location data, it is clear that those listening at the other end know almost everything there is to know about anyone that is targeted."

3 2