August 2022 - cypherpunks - lists.cpunks.org

Nomad bridge “hacked” for ~$190million
by professor rat 03 Aug '22

03 Aug '22

>>> Dipping my toe in the list - seems pretty fucking toxic, ya? Cheers, John N <<< You should have been here yesterday ( No Avalanche chain was harmed during the making of this post )

1 0

Vicious beatings, possibly in retaliation for lawsuits, claimed at Oregon’s federal prison
by jim bell 03 Aug '22

03 Aug '22

Jim Bell's comment:. I spent about 1.5 years here. June 2010-March 12, 2012================================== Vicious beatings, possibly in retaliation for lawsuits, claimed at Oregon’s federal prison https://share.newsbreak.com/1j2kzqbb Vicious beatings, possibly in retaliation for lawsuits, claimed at Oregon’s federal prison Jefferson Public Radio | By Conrad Wilson / OPBPublished August 1, 2022 at 6:01 PM PDT - Facebook - Twitter - LinkedIn - Email The Federal Correctional Institution in Sheridan, Ore.Ericka Cruz Guevarra “I could see the blood dripping off his head onto the ground,” one witness inside the prison told the federal public defender’s office. A growing number of people incarcerated at the Sheridan Federal Correctional Institution sent urgent notes to their attorneys last week complaining of guards from other federal facilities coming in to toss their cells and indiscriminately beat people. Several sources complained of food taken, papers torn up and brutal beatings. “We were extracted the other day by [Special Operation and Response Teams] from across the nation and told that ‘we did this’ and ‘this is your own damn fault,’” wrote one unnamed person in custody at the facility, whose account was one of several included in court documents filed by the federal public defender, Lisa Hay, on Sunday. A number of the people who were allegedly targeted have previously filed lawsuits over conditions inside the facility, according to Hay’s latest filing. “So we are being RETALIATED against for filing this petition against the prison for mistreatment and excessive Lockdowns?” the person wrote to Hay. The accounts from inside the prison, which is located in Yamhill County, detail allegations of teams of prison staff wearing “stab-vests” (a kind of body armor) and shirts that read “Sheridan Disruption Unit,” engaging in unit-by-unit, cell-by-cell violence during the last two weeks in July. Oregon’s federal public defender’s office filed an emergency

3 2

Re: The New Way Police Could Use Your Google Searches Against You
by Rooty 03 Aug '22

03 Aug '22

Sent with duckduckgo encrypted mail ------- Original Message ------- On Tuesday, August 2nd, 2022 at 1:31 PM, Rooty <arpspoof(a)protonmail.com> wrote: > Thanks Gym! > > Sent with duckduckgo encrypted mail > > ------- Original Message ------- > On Tuesday, August 2nd, 2022 at 9:43 AM, jim bell <jdb10987(a)yahoo.com> wrote: > >> The New Way Police Could Use Your Google Searches Against You >> https://share.newsbreak.com/1j23z8tj >> >> For millennia, we’ve been told that asking questions was the path to enlightenment. But in the surveillance age, it might land you in jail. That’s the danger of a new search tactic that police are increasingly turning to in their constant campaign to transform our phones and devices into evidence against us: keyword warrants. One Denver court may soon rule on whether they can continue as a policing tactic—and in the post-Roe era, the wrong decision could put abortion seekers in unprecedented danger >> >> Police have used web browser history and search engine data in their investigations for about as long as the data has existed, but keyword warrants are different—a digital dragnet to find every user who searches for a specific person, place or thing. We don’t know how often they are used, but we the number of publicly known examples is only growing. And soon a Denver judge will provide one of the first decisions on their constitutionality. >> >> As far back as 2009, police would ask Google for a user’s search history for use in investigations, viewing a single account at a time. Where there was probable cause that someone had committed an offense, officers could compel Google to provide a list of every search a user had entered. And when individuals weren’t logged into Google, they could still search by their individual IP address, the unique identifier every internet-connected computer uses to communicate with servers at companies like Google.

1 0

who is grancrap - grarpamp@gmail.com
by punk 03 Aug '22

03 Aug '22

it's funny how agent grancrap, US nazi and jewmail user, hides behind his jewmail account while 'doxing' people here. it's hard to be a bigger, cowardly piece of shit and coward =) then again, we're talking about US jewnazis here.... Show some balls, turd, tell us your real name.

1 0

Jacob Appelbaum rape report
by Revevilgod God 03 Aug '22

03 Aug '22

https://geekfeminism.fandom.com/wiki/Jacob_Appelbaum_rape_report In May 2016, the Tor project blog announced that Jacob Appelbaum was stepping down from the project. Appelbaum, who often uses the handle "ioerror", is a longtime member of the information security community and supporter of Julian Assange. Shortly afterward, multiple Tor developers publicly accused Appelbaum of rape. On May 24, @puellavulnerata tweeted "A precommitment:", followed by a hexadecimal string. [1] On June 2, @puellavulnerata revealed that the previously-tweeted string was the SHA256 hash of the string "It seems one rapist is one rapist too many\n". [2] On May 27, the domain jacobappelbaum.net was registered; at this writing, it contains personal accounts from 5 different people who experienced sexual assault or inappropriate sexual conduct committed by Appelbaum. On June 3, @maradydd tweeted: "[Tor's blog post] is a gross disservice to the Tor community. People deserve to know why Tor evicted its resident sociopath." -- [3] "Jake finally raped enough people that Tor as an organisation couldn't ignore it anymore." -- [4] Responses In a June 6 blog post, Lex Gill wrote: What I’ve learned is that the real test is what happens after the accused makes a statement. One that muddies the waters, takes partial responsibility, questions the stability of his victims, implies ulterior motives. One that exposes a flawed process, or sheds light on true-yet-unflattering internal politics that make things seem “complicated.” He’s been reflecting carefully, you know. On his values. He was going through a tough time, before this. He is “dismayed” and “dishearted” and “troubled” and “ashamed” and “hurt.” If there is truth to these allegations, if that’s what the victims “believe happened” then he wants to make it right with them. His is a politics of ownership. He is an ally. He is kinky. He is sorry for your misunderstanding. In an extended tweet the same day, Appelbaum wrote: ...a calculated and targeted attack has been launched to spread vicious and spurious allegations against me.... Vague rumors and smear campaigns against me are nothing new. As a longtime public advocate for free speech and a secure internet, there have been plenty of attempts to undermine my work over the years. Now, however, these unsubstantiated and unfounded attacks have become so aggressive that I feel it’s necessary to set the record straight. Not only have I been the target of a fake website in my name that has falsely accused me of serious crimes, but I have also received death threats (including a Twitter handle entitled ‘TimeToDieJake’). I think it’s extremely damaging to the community that these character-assassination tactics are being deployed, especially given their ugly history of being used against fellow members of the LGBT community. It pains me to watch the community to which I’ve dedicated so much of my life engage in such self-destructive behavior. Nonetheless, I am prepared to use legal channels, if necessary, to defend my reputation from these libelous accusations. I want to be clear: the accusations of criminal sexual misconduct against me are entirely false. Inevitably, there may have been moments in my professional or private life when I may have inadvertently hurt or offended others’ feelings. Whenever I was aware of these instances, I have, and will continue to, apologize to the friends and colleagues in question and to continually learn how to be a better person. Though the damage to my reputation caused by these allegations alone is impossible to undo, I nonetheless take the concerns of the Tor community seriously.... (Backup copy on on archive.is) >From Wired Magazine's coverage: Andrea Shepard, a Berlin-based developer co-worker of Appelbaum’s at the Tor Project, says the site was created by a “longtime member of the Tor community” whom she knows and trusts. Shepard also says she’s spoken directly with one of Appelbaum’s alleged victims, who told Shepard in February of this year that Appelbaum had raped him or her. “Sadly…I think it’s the damn truth. He’s a charismatic, socially dominant manipulator,” Shepard writes to WIRED. “I absolutely believe the accusers." GEEK FEMINISM WIKI GEEK FEMINISM WIKI Jacob Appelbaum rape report TRIGGER WARNING This article or section, or pages it links to, contains information about sexual assault and/or violence which may be triggering to survivors. In May 2016, the Tor project blog announced that Jacob Appelbaum was stepping down from the project. Appelbaum, who often uses the handle "ioerror", is a longtime member of the information security community and supporter of Julian Assange. Shortly afterward, multiple Tor developers publicly accused Appelbaum of rape. On May 24, @puellavulnerata tweeted "A precommitment:", followed by a hexadecimal string. [1] On June 2, @puellavulnerata revealed that the previously-tweeted string was the SHA256 hash of the string "It seems one rapist is one rapist too many\n". [2] On May 27, the domain jacobappelbaum.net was registered; at this writing, it contains personal accounts from 5 different people who experienced sexual assault or inappropriate sexual conduct committed by Appelbaum. On June 3, @maradydd tweeted: "[Tor's blog post] is a gross disservice to the Tor community. People deserve to know why Tor evicted its resident sociopath." -- [3] "Jake finally raped enough people that Tor as an organisation couldn't ignore it anymore." -- [4] Responses In a June 6 blog post, Lex Gill wrote: What I’ve learned is that the real test is what happens after the accused makes a statement. One that muddies the waters, takes partial responsibility, questions the stability of his victims, implies ulterior motives. One that exposes a flawed process, or sheds light on true-yet-unflattering internal politics that make things seem “complicated.” He’s been reflecting carefully, you know. On his values. He was going through a tough time, before this. He is “dismayed” and “dishearted” and “troubled” and “ashamed” and “hurt.” If there is truth to these allegations, if that’s what the victims “believe happened” then he wants to make it right with them. His is a politics of ownership. He is an ally. He is kinky. He is sorry for your misunderstanding. In an extended tweet the same day, Appelbaum wrote: ...a calculated and targeted attack has been launched to spread vicious and spurious allegations against me.... Vague rumors and smear campaigns against me are nothing new. As a longtime public advocate for free speech and a secure internet, there have been plenty of attempts to undermine my work over the years. Now, however, these unsubstantiated and unfounded attacks have become so aggressive that I feel it’s necessary to set the record straight. Not only have I been the target of a fake website in my name that has falsely accused me of serious crimes, but I have also received death threats (including a Twitter handle entitled ‘TimeToDieJake’). I think it’s extremely damaging to the community that these character-assassination tactics are being deployed, especially given their ugly history of being used against fellow members of the LGBT community. It pains me to watch the community to which I’ve dedicated so much of my life engage in such self-destructive behavior. Nonetheless, I am prepared to use legal channels, if necessary, to defend my reputation from these libelous accusations. I want to be clear: the accusations of criminal sexual misconduct against me are entirely false. Inevitably, there may have been moments in my professional or private life when I may have inadvertently hurt or offended others’ feelings. Whenever I was aware of these instances, I have, and will continue to, apologize to the friends and colleagues in question and to continually learn how to be a better person. Though the damage to my reputation caused by these allegations alone is impossible to undo, I nonetheless take the concerns of the Tor community seriously.... (Backup copy on on archive.is) >From Wired Magazine's coverage: Andrea Shepard, a Berlin-based developer co-worker of Appelbaum’s at the Tor Project, says the site was created by a “longtime member of the Tor community” whom she knows and trusts. Shepard also says she’s spoken directly with one of Appelbaum’s alleged victims, who told Shepard in February of this year that Appelbaum had raped him or her. “Sadly…I think it’s the damn truth. He’s a charismatic, socially dominant manipulator,” Shepard writes to WIRED. “I absolutely believe the accusers." In a June 7 blog post, Leigh Honeywell wrote about her experiences as a survivor of intimate partner violence perpetrated by Appelbaum: There were a number of times I felt afraid and violated during interactions with Jacob. Being involved with him was a steady stream of humiliations small and large as he mistreated me in front of others and over-shared about our intimate interactions with friends who were often also professional colleagues. Two other survivors, Alison Macrina and isis agora lovecruft, also came forward with their experiences with Appelbaum. On June 11 a number of people wrote an open letter in solidarity with Jacob Applebaum on https://ourresponse.org/. Initially it was signed by 12 women who know Jacob Appelbaum: We, the undersigned, are a group of women who have been friends, colleagues, co-workers or partners of Jacob "Jake" Appelbaum over many years. We have decided that we must speak out due to the nature of this coordinated and one-sided attack on his character and work. It has become clear the mainstream media are unwilling to fact-check, and only too willing to persist in spreading uncorroborated and unfalsifiable rumor. This statement is to give our positive experiences with Jake from our first-hand, long-term perspectives, over many public and private situations. […] We stand in solidarity with Jake against the way this is being handled and on the side of justice for all, in hope the truth on all sides will be able to come to light in a rational and constructive manner. In March 2017, Henry de Valence, a former Ph.D student working with Tanja Lange and Dan Bernstein (both faculty at TU Eindhoven and friends of Appelbaum) wrote about his experiences with Appelbaum and leaving graduate school as a result due to Lange and Bernstein's defense of Appelbaum's behavior: On August 31, 2015, I started a Ph.D. in cryptography at TU Eindhoven, working with Tanja Lange and Dan Bernstein. On December 2, 2016, I resigned, due to sexual harassment, bullying, blackmail, and physical harm as a result of their favorite student, Jacob Appelbaum, as well as Tanja and Dan’s total abdication of their responsibility to manage the workplace environment in their research group.... On June 4, Dan sent an email to the entire research group. Dan informed the group that the only appropriate venue for dealing with Jacob’s behaviour is the criminal justice system and that he felt it would be inappropriate for him to take any action before the outcome of a court case. He took the time to emphasize the need to punish “false accusations”, which occur “often” (in reality, between 2% and 8% of the time), and described only two outcomes: a “true” accusation, leading to jail for the accused (in reality, 6 of every 1000 perpetrators are jailed in the United States), or a “false” accusation, leading to punishment for the complainant. According to Dan’s mail, there is no possibility beyond “punish the accused” or “punish the accuser”, or any level of inappropriate conduct below that which is strictly illegal: for instance, Dan did not mention the plagiarism alleged in the tweets he referenced in his own email. When Dan sent this mail, he had already received reports from multiple people that Jacob’s abusive behaviour was not limited to Tor, but also extended into his research group — and I suspect that he knew even more, since Jacob was staying at Dan and Tanja’s apartment at the time that he was attempting to negotiate his exit from the Tor Project.

2 1

Fwd: FBI Laboratory Publishes Major Handwriting Analysis Study | Federal Bureau of Investigation
by Gunnar Larson 03 Aug '22

03 Aug '22

You know how Mr. Trump writes a New York HRC type FBI con job. Brody Larson. ---------- Forwarded message --------- From: FBI <fbi(a)subscriptions.fbi.gov> Date: Mon, Aug 1, 2022, 5:16 PM Subject: FBI Laboratory Publishes Major Handwriting Analysis Study | Federal Bureau of Investigation To: <g(a)xny.io> * National Press Releases * FBI Laboratory Publishes Major Handwriting Analysis Study The FBI’s Laboratory Division, in conjunction with Noblis, Inc., published a major scientific research paper today in the Proceedings of the National Academy of Sciences about the accuracy and reliability of forensic handwriting comparison. Aug. 1, 2022 Full Press Release <https://www.fbi.gov/news/press-releases/press-releases/fbi-laboratory-publi…> ------------------------------ <https://www.facebook.com/FBI> <https://twitter.com/FBI> <https://www.youtube.com/user/FBI> <https://www.fbi.gov/e-mail-updates?utm_campaign=email-Immediate&utm_medium=…> * You have received this message because you are subscribed to one or more of the following categories: National Press Releases * Manage Subscription <https://delivery.fbi.gov/account-reminder> | Unsubscribe <https://delivery.fbi.gov/subscriber/c57956fe9830b3f02d21fe7a2581942df706f0b…> If you have questions about this service, email us at delivery(a)subscriptions.fbi.gov. Help <https://www.fbi.gov/e-mail-updates?utm_campaign=email-Immediate&utm_medium=…> | Privacy Policy <http://www.fbi.gov/privacy_policy?utm_campaign=email-Immediate&utm_medium=e…> | Visit FBI.gov <https://www.fbi.gov/?utm_campaign=email-Immediate&utm_medium=email&utm_sour…>

3 2

Post-quantum encryption contender is taken out by single-core PC and 1 hour
by jim bell 03 Aug '22

03 Aug '22

Post-quantum encryption contender is taken out by single-core PC and 1 hour https://share.newsbreak.com/1j2jwill In the US government's ongoing campaign to protect data in the age of quantum computers, a new and powerful attack that used a single traditional computer to completely break a fourth-round candidate highlights the risks involved in standardizing the next generation of encryption algorithms. Last month, the US Department of Commerce's National Institute of Standards and Technology, or NIST, selected four post-quantum computing encryption algorithms to replace algorithms like RSA, Diffie-Hellman, and elliptic curve Diffie-Hellman, which are unable to withstand attacks from a quantum computer. In the same move, NIST advanced four additional algorithms as potential replacements pending further testing in hopes one or more of them may also be suitable encryption alternatives in a post-quantum world. The new attack breaks SIKE, which is one of the latter four additional algorithms. The attack has no impact on the four PQC algorithms selected by NIST as approved standards, all of which rely on completely different mathematical techniques than SIKE. Getting totally SIKEd SIKE—short for Supersingular Isogeny Key Encapsulation—is now likely out of the running thanks to research that was published over the weekend by researchers from the Computer Security and Industrial Cryptography group at KU Leuven. The paper, titled An Efficient Key Recovery Attack on SIDH (Preliminary Version), described a technique that uses complex mathematics and a single traditional PC to recover the encryption keys protecting the SIKE-protected transactions. The entire process requires only about an hour’s time. The feat makes the researchers, Wouter Castryck and Thomas Decru eligible for a $50,000 reward from NIST. “The newly uncovered weakness is clearly a major blow to SIKE,” David Jao, a professor at the University of Waterloo and co-inventor of SIKE, wrote in an email. “The attack is really unexpected.”

1 0

The New Way Police Could Use Your Google Searches Against You
by jim bell 03 Aug '22

03 Aug '22

The New Way Police Could Use Your Google Searches Against You https://share.newsbreak.com/1j23z8tj For millennia, we’ve been told that asking questions was the path to enlightenment. But in the surveillance age, it might land you in jail. That’s the danger of a new search tactic that police are increasingly turning to in their constant campaign to transform our phones and devices into evidence against us: keyword warrants. One Denver court may soon rule on whether they can continue as a policing tactic—and in the post-Roe era, the wrong decision could put abortion seekers in unprecedented danger Police have used web browser history and search engine data in their investigations for about as long as the data has existed, but keyword warrants are different—a digital dragnet to find every user who searches for a specific person, place or thing. We don’t know how often they are used, but we the number of publicly known examples is only growing. And soon a Denver judge will provide one of the first decisions on their constitutionality. As far back as 2009, police would ask Google for a user’s search history for use in investigations, viewing a single account at a time. Where there was probable cause that someone had committed an offense, officers could compel Google to provide a list of every search a user had entered. And when individuals weren’t logged into Google, they could still search by their individual IP address, the unique identifier every internet-connected computer uses to communicate with servers at companies like Google.

1 0

Nomad bridge “hacked” for ~$190million
by John Newman 03 Aug '22

03 Aug '22

Estimates on loss is somewhere between $150-$190million. https://cryptosaurus.tech/nomad-token-bridge-raided-for-190-million-in-fren… Lol, the relevant bit from the article - Nomad’s developers had accidentally pushed a routine update that told the protocol to process any transaction with the default root hash of “0x00,” where blockchain networks typically require a specific, unique root as proof that the transaction is valid. On a different matter - I normally use my personal mail server, where I’ve stood up all the bits and pieces and feel much better than I do with google, and yea of course my shit is running on various VM providers (or hosted at work - depends on current job situation)…. Anyway, I don’t use AWS or GCP, and that also makes me feel a tiny fucking bit better. I realize it’s mostly an illusion of separation but all the same… in any case, servers are down while I rearchitect everything. Joined cp with one of my gmail accounts for now. Dipping my toe in the list - seems pretty fucking toxic, ya? Cheers, John N

1 0

CNBC: Hacktivist group Anonymous is using six top techniques to 'embarrass' Russia
by jim bell 02 Aug '22

02 Aug '22

CNBC: Hacktivist group Anonymous is using six top techniques to 'embarrass' Russia. https://www.cnbc.com/2022/07/28/how-is-anonymous-attacking-russia-the-top-s… Hacktivist group Anonymous is using six top techniques to 'embarrass' Russia PUBLISHED THU, JUL 28 2022 6:00 PM EDTUPDATED FRI, JUL 29 2022 4:09 AM EDTMonica Buchanan Pitrelli@MONICAPITRELLIWATCH LIVEKEY POINTS - Anonymous uses many strategies in its digital fight against Russia, the most effective being hacking into databases and leaking the information online, according to cybersecurity specialist Jeremiah Fowler. - The size of the leaked data will take years to process. - The hacks have also exposed Russia's cybersecurity defenses to be far weaker than previously believed, say cybersecurity researchers. In this article - NES.N-CHMembers of the loosely connected collective known as Anonymous are known for wearing Guy Fawkes masks in public. Jakub Porzycki | Nurphoto | Getty Images Ongoing efforts by the underground hacktivists known as Anonymous are "embarrassing" Russia and its cybersecurity technology. That's according to Jeremiah Fowler, co-founder of the cybersecurity company Security Discovery, who has been monitoring the hacker collective since it declared a "cyber war" on Russia for invading Ukraine. "Anonymous has made Russia's governmental and civilian cyber defenses appear weak," he told CNBC. "The group has demystified Russia's cyber capabilities and successfully embarrassed Russian companies, government agencies, energy companies and others." "The country may have been the 'Iron Curtain,'" he said, "but with the scale of these attacks by a hacker army online, it appears more to be a 'paper curtain.'" The Russian embassies in Singapore and London did not immediately respond to CNBC's request for comment. Ranking Anonymous' claims Though missile strikes are making more headlines these days, Anonymous and its affiliate groups aren't losing steam, said Fowler, who summarized many of the collective's claims against Russia in a report published Friday. CNBC grouped Anonymous' claims into six categories, which Fowler helped rank in order of effectiveness:

1 0