- cypherpunks - lists.cpunks.org

Fwd: A message from Open FOIL NY regarding your FOIL request to Division of Homeland Security and Emergency Services
by Gunnar Larson 27 Jun '22

27 Jun '22

Brody Larson is getting on quality software. ---------- Forwarded message --------- From: <DHSESFOIL(a)dhses.ny.gov> Date: Mon, Jun 27, 2022, 4:23 PM Subject: A message from Open FOIL NY regarding your FOIL request to Division of Homeland Security and Emergency Services To: <G(a)xny.io> Attached please find correspondence from Division of Homeland Security and Emergency Services regarding your FOIL Request DHSES-22-06-028. If you have any questions regarding your FOIL request, please contact the Division of Homeland Security and Emergency Services Records Access Office at the address below: Division of Homeland Security and Emergency Services Records Access Office 1220 Washington Ave Building 7A Albany, NY 12226

1 0

Goldman Sachs | McLaren
by Gunnar Larson 27 Jun '22

27 Jun '22

F1 is our sport and ... Well ... McLaren is not leading the pack. https://www.goldmansachs.com/citizenship/sponsorships/goldman-sachs-mclaren/

1 0

Prosecutions against abortion providers could utilize 'mass surveillance,' experts warn
by jim bell 27 Jun '22

27 Jun '22

https://news.yahoo.com/prosecutors-states-where-abortion-now-231745604.html As the U.S. enters an era of diminished reproductive rights following the Supreme Court ruling that overturned Roe v. Wade, a path has been cleared for at least 13 states — those with “trigger laws” — to begin penalizing and prosecuting people who violate abortion bans. Bans are already in effect in Kentucky, Louisiana, South Dakota and Missouri, with at least nine other states expected to follow suit in days. While penalties vary, those states all now have laws that would charge abortion providers with some class of felony, with punishments that include fines, prison time and revocation of medical licenses. Some legal experts fear that prosecutors will use intimate pieces of evidence, such as text messages, internet search history and period tracking apps to build their cases, as well as, perhaps, information gathered from medical professionals. And, though states with abortion bans have focused punishment on the providers and not those seeking or self-managing an abortion, women will still be in the line of fire, said Farah Diaz-Tello, senior counsel and legal director of If/When/How, a reproductive justice group.

1 0

Pros go after people, not tech
by professor rat 27 Jun '22

27 Jun '22

Only amateurs attack machines; professionals target people - Bruce Schneier The ultimate in paranoia is not when everyone is against you but when everything is against you - P.K.Dick Bruce Schneier, founder of United States network monitoring service Counterpane, recommends outsourcing labour-intensive tasks such as vulnerability assessment, network monitoring, consulting and forensics. John Young . And, not to be overlooked in the rush to commercial, institutional grade exploitation, fuck Bruce Schneier for saying PGP will endure for a niche market. What the smell of money will do, slathered with personal envy of the genuine creators outside the world's beltway. Major Variola (ret) As Schneier says, pros go after people, not tech.

1 0

Bruce Schneier - Dead Man Walking
by professor rat 27 Jun '22

27 Jun '22

Anarcho-Capitalist, Libertarian <<< That contingent seems to be slowly shrinking and with a bit of luck will soon drop off. The true meaning of Anarchy has nothing to do with these free market fascists. https://www.mail-archive.com/cypherpunks@minder.net/msg31937.html Juan Peron, Mr Natural Rights GO KILL YOURSELF!

1 0

Bruce Schneier and Tom Rowley still need killing.
by professor rat 27 Jun '22

27 Jun '22

Do I have to do everything myself? https://www.mail-archive.com/cypherpunks@minder.net/msg31515.html Juan Fucking Christie

1 0

John McAfee: Crypto Libertarian Privacy and Love Evangelist, Dead at 75
by professor rat 27 Jun '22

27 Jun '22

>From each according to their gullibility - to each according to their greed https://twitter.com/vmyths/status/1540510441310494723?cxt=HHwWhoC9sbOF_-AqA… The McAfee uninstall problem

1 0

xNY.io - Bank.org, PBC
by Gunnar Larson 27 Jun '22

27 Jun '22

Quality finance is a human right. For all, everywhere.

1 0

Engadget: Google warns internet service providers helped distribute Hermit spyware
by jim bell 27 Jun '22

27 Jun '22

Engadget: Google warns internet service providers helped distribute Hermit spyware. https://www.engadget.com/google-hermit-spyware-204549595.html?src=rss Google is warning of a sophisticated new spyware campaign that has seen malicious actors steal sensitive data from Android and iOS users in Italy and Kazakhstan. On Thursday, the company’s Threat Analysis Group (TAG) shared its findings on RCS Labs, a commercial spyware vendor based out of Italy. On June 16th, security researchers at Lookout linked the firm to Hermit, a spyware program believed to have been first deployed in 2019 by Italian authorities as part of an anti-corruption operation. Lookout describes RCS Labs as an NSO Group-like entity. The firm markets itself as a “lawful intercept” business and claims it only works with government agencies. However, commercial spyware vendors have come under intense scrutiny in recent years, largely thanks to governments using the Pegasus spyware to target activists and journalists. According to Google, Hermit can infect both Android and iOS devices. In some instances, the company’s researchers observed malicious actors work with their target’s internet service provider to disable their data connection. They would then send the target an SMS message with a prompt to download the linked software to restore their internet connection. If that wasn’t an option, the bad actors attempted to disguise the spyware as a legitimate messaging app like WhatsApp or Instagram. What makes Hermit particularly dangerous is that it can gain additional capabilities by downloading modules from a command and control server. Some of the addons Lookout observed allowed the program to steal data from the target’s calendar and address book apps, as well as take pictures with their phone’s camera. One module even gave the spyware the capability to root an Android device. Google believes Hermit never made its way to the Play or App stores. However, the company found evidence that bad actors were able to distribute the spyware on iOS by enrolling in Apple’s Developer Enterprise Program. Apple told The Verge that it has since blocked any accounts or certificates associated with the threat. Meanwhile, Google has notified affected users and rolled out an update to Google Play Protect.

2 1

TechCrunch: Google is notifying Android users targeted by Hermit government-grade spyware
by jim bell 27 Jun '22

27 Jun '22

TechCrunch: Google is notifying Android users targeted by Hermit government-grade spyware. https://techcrunch.com/2022/06/23/hermit-zero-day-android-spyware/ Image Credits: Bryce Durbin / TechCrunch Security researchers at Lookout recently tied a previously unattributed Android mobile spyware, dubbed Hermit, to Italian software house RCS Lab. Now, Google threat researchers have confirmed much of Lookout’s findings and are notifying Android users whose devices were compromised by the spyware. Hermit is a commercial spyware known to be used by governments, with victims in Kazakhstan and Italy, according to Lookout and Google. Lookout says it’s also seen the spyware deployed in northern Syria. The spyware uses various modules, which it downloads from its command and control servers as they are needed, to collect call logs, record ambient audio, redirect phone calls and collect photos, messages, emails and the device’s precise location from a victim’s device. Lookout said in its analysis that Hermit, which works on all Android versions, also tries to root an infected Android device, granting the spyware even deeper access to the victim’s data. Lookout said that targeted victims are sent a malicious link by text message and tricked into downloading and installing the malicious app — which masquerades as a legitimate branded telco or messaging app — from outside of the app store. According to a new blog post published Thursday and shared with TechCrunch ahead of its publication, Google said it found evidence that in some cases the government actors in control of the spyware worked with the target’s internet provider to cut their mobile data connectivity, likely as a lure to trick the target into downloading an telco-themed app under the guise of restoring connectivity.

1 0