April 2022 - cypherpunks - lists.cpunks.org

Imagine a Situation:
by zeynepaydogan 20 Apr '22

20 Apr '22

Imagine a situation: you are an intelligence officer, and your task is to identify a particularly dangerous blackmailing criminal who appears on the network periodically and only for data transmission. For criminal activities, he or she started a separate laptop, from which he or she “cut out” a microphone, speakers and a camera. A smart decision, given that the speakers also know how to listen. He or She uses Tails as an operating system, although Whonix would be worth taking for maximum anonymity. One way or another, all traffic goes through Tor, he does not trust the VPN, or only trusts his VPN, and he still needs Tor to work on the Darknet. He or She uses PGP-encrypted Jabber to communicate, he or she could also install Telegram, but this is the representative of the old school of criminals. Even if you have access to the Jabber server, you can only get encrypted data and Tor IP addresses. This is useless information. The criminal works on the principle of "silence is gold", he will not say too much, he or she will not open links or files. It is only known that he must be in the same country with you. It would seem that there is no chance to establish his identity, but this is an illusion, it is possible to establish his identity despite all the measures he or she takes. The described case is ideal for applying a timing attack on a messenger or a thematic forum. The first thing you need is a program that will track and record all user logins and logouts. He appeared on the network - the system immediately notes the time, left - the system recorded the exit time. Now you have a log of his activity in your hands for several days, it's time to use the ORM (operational-search measures) system. Similar systems are at the disposal of the special services of most countries, in Russia it is SORM. You need to find out who connected to the Tor network during these +/- 5 minutes in your country. We know that the target that needs to be deanonymized connected on 04/11/2022 at 11:07 and disconnected at 12:30. At the same time points (+/- 5 minutes), 3,000 people connected to the Tor network and disconnected from it throughout the country. We take these 3000 and see which of them reconnected at 14:17 and disconnected at 16:54, how many people do you think will remain? So, step by step, the circle narrows, and in the end you will be able to calculate the place where your victim or criminal enters the network. The more often he enters the network and the fewer other users at this time, the faster the timing attack will work. Example: metrics.torproject.org - checks if the IP address was used as a host to send traffic to Tor. check.torproject.org (https://check.torproject.org/cgi-bin/TorBulkExitList.py) github.com/SpiderLabs - will find a list of all Tor exit nodes in the last 16 hours that could contact the IP; ipqualityscore.com/user/proxy-detection-api/lookup - Find out if a person is using a proxy, VPN or TOR. The constant change of access points to the network makes such an attack meaningless. If the target periodically changes the exit points, this may complicate the search, but is a pre-admissible option and is not capable of confusing the system.

3 4

Cryptocurrency: 4/20 NFTs
by grarpamp 20 Apr '22

20 Apr '22

https://www.youtube.com/watch?v=x2pFd0Ikjyc The NFT https://www.youtube.com/watch?v=kqXiFEdSdpY Hoodstarz - Smoking ;)

1 0

[ot][spam] why I am working with coreboot
by Undiscussed Horrific Abuse, One Victim of Many 20 Apr '22

20 Apr '22

hi it's hard to relate around this. everything seems hard in my life, due to a cognitive issue I have where my other behaviors specifically harm everything I try to do. the reason to work with coreboot is roughly to do _anything at all_ with my skillset. yes, I want to do shielding. that is much harder because it is for reasons. coreboot is _just for fun_. ------- actually, karl?, i/you want to make the new system work as a low-end machine learning system. we're also trying to rebuild norms of information security, and do it open source and offline. --- this is true: but it turns out that's highly ineffective. the system doesn't work for this -- I get to port my own bios if I want it to. meanwhile, machine learning is available on colab for free. ------- ok it's confusing. we want to do coreboot _to do anything at all_ _for fun_. _we need to be able to work on something_. it's hard because of two parts, inhibition around relating them. what's relevent is that this project has a lot of short term emotional value for us, and we have invested a lot of money in it. karl never imagined it would be this hard to build a computer from parts according to instructions. his peers in middle school were building computers, and he was top of his class. it's strange to have this breaking over and over. it might make sense to take a break to improve the financial situation a little. this is harder for us. making money or reducing expenses stimulates the issues more strongly than things that have little return. karl is really frustrated to have tasks attacked inside him the ways they are. ---- thank you.

1 7

[ot][spam][crazy] The Trials of Controlling a Programmer
by Undiscussed Horrific Abuse, One Victim of Many 20 Apr '22

20 Apr '22

I have an LPC flasher (a chip programmer) I've been using to learn coreboot and to try to drop a little life into an old board. After a month or more of use, my programmer just won't program anymore. When I try to flash things flashrom complains that no flash chip was detected. Note: the spacebar on my hardware-keyboard phone is also breaking, so I may be less verbose. Similarly, my raspberry pi won't seem to load gnome, and I still haven't figured out how to get neomutt to download email. The neomutt challenge seems the easiest, but is kind of different. Anyway, the programmer is breadboarded based on a teensy board, and the LPC socket was sometimes showing the issue previously, refusing to find the LPC chip unless I reinserted it a number of times. Long ago I would have been excited to troubleshoot an LPC socket. It would perhaps have been an excuse to build a logic analyser with tiny LPC leads. Nowadays most of my brain refuses to move carefully with intensity comparable to trauma, and for that and other dangerous and unknown reasons, my hands and fingers shake and jerk and my visual perception is quite poor, partly from my eyes doing the same. This coreboot task has been really great. It can be many months between having a project that feels like a doable, productive challenge, where I can often barely control my body let alone my mind. But I need a programmer if I want to keep porting the bios for my motherboard. I used some small jumper wires to try to test some of the leads around an lpc chip once. Unfortunately I didn't verify the chip wasn't one I had burned out, a different issue. Additionally, I wasn't [amnesia shift here, hello! we're describing working on fixing the plcc flasher] sure my jumper wires were touching the chip and not the socket which are very very near. But I did try to gently bend some leads to resolve connection issues, and thinking on that I guess that means I might have a way to consider whether I'm testing the chip leads or socket leads. Anyway, it still didn't work,even with a known-working chip, but I didn't examine it with a known-working chip. Then later, I tested connections from the chip seating all the way to the teensy board, and found a number that were failing due to wear on the breadboard, and adjusted and squeezed these until they conducted. But it still wouldn't detect a known-working chip. I then removed it from the breadboard and wired it up hanging in the air with female jumper wires. This is not working either. I also have two pcbs of this tool I tried to solder, but I have broken the smd pads off on both from being uncareful while doing so. When I try to be careful, it can stimulate my spasms further in various ways, a gently developing frustration of some years now. There used to be sold flashers for LPC chips, but I haven't found any, which is a blessing in some ways, for open hardware and all. I was thinking of buying an arduino, for which flasher code exists. I actually should _have_ arduinos somewhere, unused for years, uncertain where. I was also thinking of porting a flasher to use my raspberry pis gpio pins. But these other flasher board ideas don't seem to have much return right now, when I have reason to believe the problem could be in the socket. I also have a small handful of smd sockets. Hard to solder without a pcb. I could also attempt to desolder the pcb from my breadboardable socket. I think another breadboardable socket is in the mail, but I worry I will forget I am working the task if I stop working it. I'd like to compare the electrical activity at the chip pins to what the device is supposed to send somehow. Maybe I could try to add debug information to flashrom's serprog protocol, although I'm feeling that might be inefficient.

4 72

Caveat Lecter
by professor rat 20 Apr '22

20 Apr '22

As part of the crypto browser project, Opera have included a crypto corner. The Crypto Corner is Opera’s one-stop-shop for all things crypto. You can monitor crypto prices, check out the current Ethereum gas fees, plus keep up to date with the latest blockchain news including a whole bunch of unmitigated Lunar Right Wingnut garbage and toxic waste from degenerate fascist moons. GIGO Its not over morons till the anarchist lady sings.

1 0

Re: oldest trick of the jewnazis - the false flag attack
by jnn 19 Apr '22

19 Apr '22

On April 18, 2022, at 11:26 AM, punk <punks(a)tfwno.gf> wrote: >On Mon, 18 Apr 2022 06:44:07 -0500 >John Newman <jnn(a)cachedout.net> wrote: >> On 15 Apr 2022, at 21:14, Punk-BatSoup-Stasi 2.0 wrote: >> >> > https://en.wikipedia.org/wiki/Panther_21 >> > >> > >> > "The Panther 21 is a group of twenty-one Black Panther members who were arrested and accused of planned coordinated bombing...were acquited after revelations during the trial that police infiltrators played key organising roles." >> >> *GASP! >> >> Police... infiltrators??? >> >> My god, do you realize what this means? ... >It was another nice example of the way the US works today, and has been working since 1776. >> >> It means absolutely fuck all, of course. >It doesn't? Well I suppose I should rephrase: it's nothing new ;) >> It's the way of the world. >Well, at least it's the way of the US and its oligarchy. Bingo. I tend to think something about the way natural selection wired us up goes sideways and turns humanity to a bunch of twats since we came up with the ingenious idea of the state. Shit has been going on since Sargon of Akkad, likely since Eridu and all its little sister Sumerian cities dotted Mesopotamia >By the way John, nice to see you back =) - I've been wondering about your views on the COVID-19 Pandemic! Likewise! Re: covid... Its been nice working from home ;) >Has your blind faith in your US Science been strengthened by the Heroic Achievements of the CDC-Merck 'public-private partnership'? Lol. The only faith I have is in that fundamental human trait, greed. US science is destroying the world. But hey - it's convenient! /me checks iPhone, turns on air conditioner, makes mental note to fill up that 330hp v6 engine I clearly HAD to have, and settles back down at workstation... to read twatter, lol :) >>It is, as they say, "life in the big city - looking grim, and feeling shitty" (particularly if you care about things like freedom, etc). >> >> >> John Newman >> jnn(a)cachedout.net >>

1 0

Engadget: Researchers break world record for quantum-encrypted communications
by jim bell 19 Apr '22

19 Apr '22

Engadget: Researchers break world record for quantum-encrypted communications. https://www.engadget.com/researchers-set-quantum-secure-communication-dista… "Researchers in Beijing have set a new quantum secure direct communication (QSDC) world record of 102.2 km (64 miles), smashing the previous mark of 18 km (11 miles), The Eurasian Times reported. Transmission speeds were extremely slow at 0.54 bits per second, but still good enough for text message and phone call encryption over a distance of 30 km (19 miles), wrote research lead Long Guilu in Nature. The work could eventually lead to hack-proof communication, as any eavesdropping attempt on a quantum line can be instantly detected. "QSDC uses the principal of entanglement to secure networks. Quantum physics dictates that entangled particles are linked, so that if you change the property of one by measuring it, the other will instantly change, too — effectively making hacking impossible. In theory, the particles stay linked even if they're light-years apart, so such systems should work over great distances. "The same research team set the previous fiber record, and devised a "novel design of physical system with a new protocol" to achieve the longer distance. They simplified it by eliminating the "complicated active compensation subsystem" used in the previous model. "This enables an ultra-low quantum bit error rate (QBER) and the long-term stability against environmental noises." "As a result, the system can withstand much more so-called channel loss that makes it impossible to decode encrypted messages. That in turn allowed them to extend the fiber from 28.3km to the record 102.2 km distance. "The experiment shows that intercity quantum secure direct communication through the fiber is feasible with present-day technology," the team wrote in Nature. "Researchers in China previously made a secure quantum-enabled video call by satellite, but fiber poses a different set of challenges. "If we replace parts of the internet today, where more eavesdropping attacks happen, with quantum channels, those parts will have the added ability to sense and prevent eavesdropping, making communication even safer," said Long.

1 0

Ukraine's #buymeafighterjet campaign aims to crowdsource fighter jets
by professor rat 19 Apr '22

19 Apr '22

https://sothebys-com.brightspotcdn.com/8c/8d/9260e9c2466681e1d7d3084dc613/w…

1 0

Now we're getting somewhere
by professor rat 19 Apr '22

19 Apr '22

IMF Says Adoption of Crypto Could Undermine Political Power, Urges ‘Global Standards’ https://dailyhodl.com/2022/04/19/imf-says-adoption-of-crypto-could-undermin… Hang separately or hang together, money-badger don't care

1 0

France and Germany in WMD-grade, Crypto Munitions Arms Race
by professor rat 19 Apr '22

19 Apr '22

Todays headline at ' The Block ' newsletter France is taking a big swing at becoming Europe’s crypto hub. Can it succeed? Previously on crypto-currency news . . . Germany Is the Most Crypto-Friendly Nation (Report) https://cryptopotato.com › Crypto News 3 days ago — According to a study conducted by the digital asset exchange aggregator – Coincub – Germany is the most crypto-friendly country for Q1,2022.

1 0