August 2022 - cypherpunks - lists.cpunks.org

Post-quantum encryption contender is taken out by single-core PC and 1 hour
by jim bell 02 Aug '22

02 Aug '22

Post-quantum encryption contender is taken out by single-core PC and 1 hour https://share.newsbreak.com/1j2jwill In the US government's ongoing campaign to protect data in the age of quantum computers, a new and powerful attack that used a single traditional computer to completely break a fourth-round candidate highlights the risks involved in standardizing the next generation of encryption algorithms. Last month, the US Department of Commerce's National Institute of Standards and Technology, or NIST, selected four post-quantum computing encryption algorithms to replace algorithms like RSA, Diffie-Hellman, and elliptic curve Diffie-Hellman, which are unable to withstand attacks from a quantum computer. In the same move, NIST advanced four additional algorithms as potential replacements pending further testing in hopes one or more of them may also be suitable encryption alternatives in a post-quantum world. The new attack breaks SIKE, which is one of the latter four additional algorithms. The attack has no impact on the four PQC algorithms selected by NIST as approved standards, all of which rely on completely different mathematical techniques than SIKE. Getting totally SIKEd SIKE—short for Supersingular Isogeny Key Encapsulation—is now likely out of the running thanks to research that was published over the weekend by researchers from the Computer Security and Industrial Cryptography group at KU Leuven. The paper, titled An Efficient Key Recovery Attack on SIDH (Preliminary Version), described a technique that uses complex mathematics and a single traditional PC to recover the encryption keys protecting the SIKE-protected transactions. The entire process requires only about an hour’s time. The feat makes the researchers, Wouter Castryck and Thomas Decru eligible for a $50,000 reward from NIST. “The newly uncovered weakness is clearly a major blow to SIKE,” David Jao, a professor at the University of Waterloo and co-inventor of SIKE, wrote in an email. “The attack is really unexpected.”

1 0

The New Way Police Could Use Your Google Searches Against You
by jim bell 02 Aug '22

02 Aug '22

The New Way Police Could Use Your Google Searches Against You https://share.newsbreak.com/1j23z8tj For millennia, we’ve been told that asking questions was the path to enlightenment. But in the surveillance age, it might land you in jail. That’s the danger of a new search tactic that police are increasingly turning to in their constant campaign to transform our phones and devices into evidence against us: keyword warrants. One Denver court may soon rule on whether they can continue as a policing tactic—and in the post-Roe era, the wrong decision could put abortion seekers in unprecedented danger Police have used web browser history and search engine data in their investigations for about as long as the data has existed, but keyword warrants are different—a digital dragnet to find every user who searches for a specific person, place or thing. We don’t know how often they are used, but we the number of publicly known examples is only growing. And soon a Denver judge will provide one of the first decisions on their constitutionality. As far back as 2009, police would ask Google for a user’s search history for use in investigations, viewing a single account at a time. Where there was probable cause that someone had committed an offense, officers could compel Google to provide a list of every search a user had entered. And when individuals weren’t logged into Google, they could still search by their individual IP address, the unique identifier every internet-connected computer uses to communicate with servers at companies like Google.

1 0

Nomad bridge “hacked” for ~$190million
by John Newman 02 Aug '22

02 Aug '22

Estimates on loss is somewhere between $150-$190million. https://cryptosaurus.tech/nomad-token-bridge-raided-for-190-million-in-fren… Lol, the relevant bit from the article - Nomad’s developers had accidentally pushed a routine update that told the protocol to process any transaction with the default root hash of “0x00,” where blockchain networks typically require a specific, unique root as proof that the transaction is valid. On a different matter - I normally use my personal mail server, where I’ve stood up all the bits and pieces and feel much better than I do with google, and yea of course my shit is running on various VM providers (or hosted at work - depends on current job situation)…. Anyway, I don’t use AWS or GCP, and that also makes me feel a tiny fucking bit better. I realize it’s mostly an illusion of separation but all the same… in any case, servers are down while I rearchitect everything. Joined cp with one of my gmail accounts for now. Dipping my toe in the list - seems pretty fucking toxic, ya? Cheers, John N

1 0

CNBC: Hacktivist group Anonymous is using six top techniques to 'embarrass' Russia
by jim bell 02 Aug '22

02 Aug '22

CNBC: Hacktivist group Anonymous is using six top techniques to 'embarrass' Russia. https://www.cnbc.com/2022/07/28/how-is-anonymous-attacking-russia-the-top-s… Hacktivist group Anonymous is using six top techniques to 'embarrass' Russia PUBLISHED THU, JUL 28 2022 6:00 PM EDTUPDATED FRI, JUL 29 2022 4:09 AM EDTMonica Buchanan Pitrelli@MONICAPITRELLIWATCH LIVEKEY POINTS - Anonymous uses many strategies in its digital fight against Russia, the most effective being hacking into databases and leaking the information online, according to cybersecurity specialist Jeremiah Fowler. - The size of the leaked data will take years to process. - The hacks have also exposed Russia's cybersecurity defenses to be far weaker than previously believed, say cybersecurity researchers. In this article - NES.N-CHMembers of the loosely connected collective known as Anonymous are known for wearing Guy Fawkes masks in public. Jakub Porzycki | Nurphoto | Getty Images Ongoing efforts by the underground hacktivists known as Anonymous are "embarrassing" Russia and its cybersecurity technology. That's according to Jeremiah Fowler, co-founder of the cybersecurity company Security Discovery, who has been monitoring the hacker collective since it declared a "cyber war" on Russia for invading Ukraine. "Anonymous has made Russia's governmental and civilian cyber defenses appear weak," he told CNBC. "The group has demystified Russia's cyber capabilities and successfully embarrassed Russian companies, government agencies, energy companies and others." "The country may have been the 'Iron Curtain,'" he said, "but with the scale of these attacks by a hacker army online, it appears more to be a 'paper curtain.'" The Russian embassies in Singapore and London did not immediately respond to CNBC's request for comment. Ranking Anonymous' claims Though missile strikes are making more headlines these days, Anonymous and its affiliate groups aren't losing steam, said Fowler, who summarized many of the collective's claims against Russia in a report published Friday. CNBC grouped Anonymous' claims into six categories, which Fowler helped rank in order of effectiveness:

1 0

Alex Jones to take the stand in civil case
by professor rat 02 Aug '22

02 Aug '22

Chewing up the scenery " Will you state under oath that you will never eat this judges ass? " ( Alex Jones to take the stand in carnivores trial soon ) It could come out how he ate John Youngs brain. Pass the popcorn.

1 0

Yahoo News: High-risk Colombians say GPS devices only add to dangers
by jim bell 02 Aug '22

02 Aug '22

Yahoo News: High-risk Colombians say GPS devices only add to dangers. https://news.yahoo.com/high-risk-colombians-gps-devices-140636081.html The bulletproof vehicles that Colombia’s government assigns to hundreds of high-risk individuals are supposed to make them safer. But when an investigative reporter discovered they all had GPS trackers, she only felt more vulnerable — and outraged. No one had informed Claudia Julieta Duque — or apparently any of the 3,700-plus journalists, rights activists and labor and indigenous leaders who use the vehicles — that the devices were keeping constant tabs on their whereabouts. In Duque’s case, it happened as often as every 30 seconds. The system could also remotely cut off the SUV's engine. Colombia is among the world’s most dangerous countries for human rights defenders — with more than 500 killed since 2016. It is also a country where right-wing extremists have a track record of infiltrating national security bodies. For Duque, the GPS revelation was chilling: Movements of people already at risk of political assassination were being tracked with technology that bad actors could weaponize against them.It’s something super invasive,” said Duque, who has been a persistent target of rogue security agents. “And the state doesn’t seem to care.” The government agency responsible has said the trackers were installed to help prevent theft, to track the bodyguards who often drive the vehicles and to help respond to dangerous situations. For a decade, Colombia had been installing trackers in the armored vehicles of at-risk individuals as well as VIPs, including presidents, government ministers and senators. The agency's director made that disclosure after Duque learned last year through a public records request that the system was recording her SUV’s location an average of five times an hour.The director dismissed privacy concerns and called the practice “fundamental” to guaranteeing security. Considering the tracker a danger to her and her sources, Duque pressed for details on its exact features. But the National Protection Unit, known as UNP in Spanish, offered little. She then demanded the agency remove the device. It refused. So in February, Duque returned the vehicle, left the country and filed a legal challenge. Now back in Bogotá, she is hoping for satisfaction when Gustavo Petro, Colombia’s first leftist president, takes office Aug. 7. Petro’s domestic security transition team did not respond to questions from The Associated Press on the matter. Whatever action the new administration takes will reflect on its avowed commitment to human rights and its ability to reform a national security establishment long run by bitter political foes. The UNP is a pillar of that establishment. It employs, mostly as bodyguards, dozens of ex-agents of the disgraced DAS domestic security agency, which was dissolved in 2011 after the government of former President Alvaro Uribe abused it to spy on Supreme Court justices, journalists and political opponents. Prominent among them were Petro himself – and Duque. She was surveilled, threatened and bullied by DAS operatives after uncovering evidence that the 1999 assassination of beloved humorist and peace activist Jaime Garzon was a crime of the state. Duque's reporting eventually helped convict a former DAS deputy director in the killing, and three other ex-DAS officials have been convicted of psychological torture for threatening the lives of Duque and her daughter. Trials against eight others are pending. Through it all, threats forced her into temporary exile nearly a dozen times. The questions about the GPS devices added to growing concerns about an agency that once ranked among Latin America’s most effective in human rights protection. Adam Isacson, an analyst with the Washington Office on Latin America, said the UNP became less responsive, more politicized and more penetrated by criminality under the outgoing conservative government. “With social leaders being killed nearly every other day during the past four years, this was the worst time for the unit to fall into disarray,” he said. Right-wing death squad activity spiked following a historic 2016 peace pact with leftist rebels. Duque says she was tipped to the GPS trackers in early 2020 when she learned of a planned attempt on her life, but when she asked about them, the government stonewalled for a year. When she finally got documents with the aid of the InterAmerican Human Rights Commission, they showed her location was recorded 25,183 times over 209 days from February to August of last year alone. A software manual described a panoply of other control options, including remotely operating cameras and door locks managed through vehicles' computers. Duque asked if any such features were active in the government-leased vehicles but said she got no answer. The general manager of the company that provides the GPS software told the AP that it only tracks location and speed and enables engine cutoff. A 2021 contract with the vehicle-leasing company obtained by Duque stipulates that a UNP official must approve any engine cutoff and that collected data be kept a minimum of two years. Nothing in the contract supports the claim made by the UNP that the system tracks bodyguards and enables quick reactions in dangerous situations. UNP officials declined to respond to questions from the AP. There is no evidence the GPS tracking led to any harm to any of the people under protection. Agency officials took offense last year when Duque questioned their intentions. “We don’t persecute or follow anyone illegally,” Director Alfonso Campo tweeted in October. “The information compiled by GPS is private" and only handed over to a judge or judicial authority when required in a case or for security reasons. The AP asked the chief prosecutor's office if had made any requests, but it did not respond. Privacy experts consider the Colombian government's tracking illegal and disproportionate and say it poses an unnecessary hacking risk. Under the country's 2012 privacy law, affected individuals must consent for such data to be retained. But they were never asked, said Emmanuel Vargas, a privacy law expert helping Duque. There is no indication that GPS helped protect the indigenous leader Miller Correa, who was kidnapped and killed in mid-March while driving alone on a rural highway. The tracker served afterward to retrieve his government-issued car, which was not armor-plated. A June 2021 letter from the government to the InterAmerican commission said the UNP took “all measures necessary” to ensure data on protected individuals was “not accessible to (agency) functionaries.” But in a December letter to Duque, the agency indicated it does not directly administer the data-protection efforts. A contractor is responsible. After Duque publicized her findings, several other high-risk Colombians publicly voiced distrust of their government-provided security details. One was investigative journalist Julian Martinez, whose book about the infiltration of DAS by corrupt narco-paramilitaries won a 2017 national journalism award. Martinez’s government-assigned bodyguards didn’t just spy on him after he published articles on alleged drug corruption involving the outgoing government. He accuses them of collecting material for a smear campaign organized by their boss – an outside contractor and former DAS official. In February, Martinez’s armored vehicle was attacked in Bogota by armed men who were reportedly repelled by his bodyguards. He was nearby at the time, and no one was hurt. Martinez doesn’t believe it was a robbery attempt, as investigators have said they suspect. “The protection scheme has become a scheme of control,” he said from Argentina, where he fled last month after denouncing an alleged plot to strip him of protection by claiming he was abusing it. Alberto Yepes, a leading rights activist who assists victims of extrajudicial killings by Colombia’s military, is certain the UNP is being used to spy on him. He suspects cellphone circuitry he discovered in September in his government-provided vehicle could be used to eavesdrop on conversations. Yepes is not sure Petro can succeed in overhauling the protection unit due to the heavy involvement of contractors with military backgrounds. “It will be difficult for the new government to change,” he said. “They’re going to have to negotiaye.

1 0

Wright has already recovered almost £110,000 from McCormack
by professor rat 02 Aug '22

02 Aug '22

Dear oh deer https://coingeek.com/verdict-peter-mccormack-liable-for-defamation-on-all-c… Reposts etc. Double check your sources!

1 0

Juan Garofalo needs killing ( My 2000 sats )
by professor rat 02 Aug '22

02 Aug '22

Help me put this dumb animal out of his misery https://www.mail-archive.com/cypherpunks@cpunks.org/msg02301.html Perp is reportedly located in the Juan-Peron-Pampas nationalist Park where he's busy sucking the dick of Adolph Eichman's bastard son.

1 0

Message to Mirimir and Juan G.
by professor rat 02 Aug '22

02 Aug '22

Take care and do not dare dying before me, please! <3 Ceci https://marc.info/?l=cypherpunks&m=158936208409496&w=4 Repost supplied for predatory hunting purposes only.

1 0

Matthew Shepard and James Byrd Jr. Hate Crimes Prevention Act - Wikipedia
by Gunnar Larson 02 Aug '22

02 Aug '22

https://en.wikipedia.org/wiki/Matthew_Shepard_and_James_Byrd_Jr._Hate_Crime…

1 1