- cypherpunks - lists.cpunks.org

WKD for github.io
by Stefan Claas 08 Jan '21

08 Jan '21

Hi all, for those who use the latest gpg4win or GnuPG I tried to set-up for my GitHub account a github-page, which allows me in the future to host static web-content via GitHub. I noodled a bit around to set-up WKD for GnuPG usage, but unfortunately GnuPG (tested gpg4win and GnuPG under Debian) does not allow yet to fetch pub keys from github.io sites, due to cert erros, but I tested it with an older version of sequoia-pgp and with sq fetching via WKD works! :-) Here is the thread you might like to read (and follow later ...): <https://lists.gnupg.org/pipermail/gnupg-users/2021-January/064567.html> Regards Stefan

1 0

Fudging the State of Humanity
by Karl 08 Jan '21

08 Jan '21

Hey Marxos, Feel free to break in and connect as soon as you disagree about something I say here. I was thinking about how the development of the human body is similar to the shape of our cultures, next to these ideas of government surveillance and artificial intelligence. Looking at how oppression is collecting and moving, including recent surprising shapes, it seems pretty clear a group of people are trying to decide that they are the brains of the earth, and want others to move to their willpower. This is something that is hard for me to hold and believe, because of what I've been through. Since it's a struggle, obviously whoever is most determined about their part in it, hasn't reached their goals yet. We could maybe infer from the booms of global disruption, a little about how those struggles are moving along among the people who want to dominate. Personally I don't believe that there will be a human global dictator, in the long term. I don't have any religious training. What are your thoughts?

2 2

A Side Journey to Titan
by coderman 08 Jan '21

08 Jan '21

https://ninjalab.io/a-side-journey-to-titan/ Abstract The[Google Titan Security Key](https://store.google.com/product/titan_security_key)is a FIDO U2F hardware device proposed by Google (available since July 2018) as a two-factor authentication token to sign in to applications (e.g. your Google account). Our work describes a side-channel attack that targets theGoogle Titan Security Key’s secure element (the NXP A700X chip) by the observation of its local electromagnetic radiations during ECDSA signatures (the core cryptographic operation of the FIDO U2F protocol). In other words, an attacker can create a clone of a legitimateGoogle Titan Security Key. To understand the NXP ECDSA implementation, find a vulnerability and design a key-recovery attack, we had to make a quick stop onRhea(NXP J3D081 JavaCard smartcard). Freely available on the web, this product looks very much like the NXP A700X chip and uses the same cryptographic library.Rhea, as an open JavaCard platform, gives us more control to study the ECDSA engine. We could then show that the electromagnetic side-channel signal bears partial information about the ECDSA ephemeral key. The sensitive information is recovered with a non-supervised machine learning method and plugged into a customized lattice-based attack scheme. Finally, 4000 ECDSA observations were enough to recover the (known) secret key onRheaand validate our attack process. It was then applied on theGoogle Titan Security Keywith success (this time by using 6000 observations) as we were able to extract the long term ECDSA private key linked to a FIDO U2F account created for the experiment. Cautionary Note Two-factor authentication tokens (like FIDO U2F hardware devices) primary goal is to fight phishing attacks. Our attack requires physical access to theGoogle Titan Security Key, expensive equipment, custom software, and technical skills. Thus, as far as our study goes, it is still safer to use yourGoogle Titan Security Keyor other impacted products as FIDO U2F two-factor authentication token to sign in to applications rather than not using one. Nevertheless, this work shows that theGoogle Titan Security Key(and other impacted products) would not avoid unnoticed security breach by attackers willing to put enough effort into it. Users that face such a threat should probably switch to other FIDO U2F hardware security keys, where no vulnerability has yet been discovered. Discovered By Victor lomné (NinjaLab) and Thomas Roche (NinjaLab). with the help of Camille Mutschler (NinjaLab) and Dr. Laurent Imbert (LIRMM, CNRS). List of Impacted Products - Google Titan Security Key (all versions) - Yubico Yubikey Neo - Feitian FIDO NFC USB-A / K9 - Feitian MultiPass FIDO / K13 - Feitian ePass FIDO USB-C / K21 - Feitian FIDO NFC USB-C / K40 - NXP J3D081_M59_DF and variants - NXP J3A081 and variants - NXP J2E081_M64 and variants - NXP J3D145_M59 and variants - NXP J3D081_M59 and variants - NXP J3E145_M64 and variants - NXP J3E081_M64_DF and variants Further Notes 1. The impacted Yubico Yubikey Neo is an old product no more available for sale. All FIDO U2F Yubico Yubikeys currently available on their webstore are based on a newer secure element from Infineon, and are not impacted by our work to our knowledge. 2. The NXP P5 / SmartMX secure microcontroller family and its associated cryptographic library (up to v2.9) impacted by our work is quite old. Since, NXP has released two new generations of secure microcontroller families, the “NXP P60 / SmartMX2” family and now the “NXP P70 / SmartMX3” family. Both are Common Criteria certified (with recent certification process), and are not impacted by our work to our knowledge. CVE We assigned[CVE-2021-3011](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-…

1 0

Shielding Ad Fwd: TS-Lindgren News: Fast Track Project Awarded to ETS-Lindgren
by Karl 08 Jan '21

08 Jan '21

I don't know why I received this, but I like reading about shielding. I visited a test facility once and learned they had needed to increase the shielding in a room ETS-Lindgren had provided, by soldering copper foil over the air vent. ---------- Forwarded message ---------- From: Martha Hallman <martha.hallman(a)ets-lindgren.com> Date: Fri, 08 Jan 2021 10:41:02 -0500 Subject: ETS-Lindgren News: Fast Track Project Awarded to ETS-Lindgren To: gmkarl(a)gmail.com Fast Track Project Awarded to ETS-Lindgren Completion Schedule Key to Award for Six FACT™ 3 EMC Test Chambers CEDAR PARK, Texas – January 8, 2021 – ETS-Lindgren announced receipt of a significant contract award of six (6) FACT 3-2.0 Dual-Range EMC Test Chambers to be installed at a commercial EMC test lab in the bustling Silicon Valley area of Northern California. ETS-Lindgren received the award due to a number of reasons, the most important being our ability to meet the expedited required delivery. ETS-Lindgren committed to the chamber performance specified in ANSI C63.4a (2014) along with a total delivery time for the first two chambers of less than three months from order placement. Another plus: ETS-Lindgren offered one point of contact for the entire project, as the FACT 3 EMC Test Chambers are designed, engineered, manufactured, installed, integrated, and serviced by in-house professional teams. “We understand the challenges the pandemic presents to delivery schedules these days, especially if products need to be shipped overseas,” said Bill Giacone, ETS-Lindgren’s Senior Vice President, Global Sales and Marketing. “Since we manufacture the vast majority of the project components at our facilities in the United States, we were confident that we could commit to the schedule. It was a very aggressive schedule to be sure, but our team was dedicated from day one to meet — and even exceed — our customer’s expectations.” ETS-Lindgren’s vertical integration capabilities nearly eliminate reliance on third parties; this competency reduced the risk of missing the customer’s urgent delivery schedule, since ETS-Lindgren had greater control of the majority of the project components. ETS-Lindgren’s [1]FACT 3 EMC Test Chambers provide compliant radiated emissions and immunity test capabilities for most international EMC regulations. These chambers achieve broadband performance using a unique arrangement of hybrid polystyrene and ferrite tile absorber materials, offering an anechoic environment that supports testing up to 40 GHz. The chambers are constructed of ETS-Lindgren's [2]Series 81 Shielding, a time-proven design with over 25,000 installations worldwide. The Series 81 shielded enclosure consists of shielded modular panel sections assembled with a clamping system into a self-supported structure. While the external overall structure dimensions of standard FACT 3 EMC Test Chambers are approximately 20’H x 30’L x 22’W (6m x 9m x 7m), custom sizes are available. With ETS-Lindgren’s sophisticated chamber performance modeling capabilities, chamber options may be evaluated in advance to achieve the optimal performance objective, taking into account space and/or budget constraints. ETS-Lindgren FACT 3 EMC Test Chambers are frequently lined with [3]DuraSorb™ hybrid broadband absorber materials, Model DSH-600H. DuraSorb is manufactured in-house at ETS-Lindgren under a strict ISO 9001 Quality Management System. It is constructed using substrates with rigid, closed foam cells loaded volumetrically and uniformly throughout each piece of absorber. DuraSorb meets the requirements specified in Space, Automotive, Commercial, Industrial, and Military Standards such as ECSS, MIL-STD-461F, MIL-STD-464C, RTCA-DO-160G, CISPR 16, ANSI C63.4, and IEC 61000-4-3. Each piece of absorber is factory-tested before shipping, and full performance data is provided. Upon completion of each shielded enclosure and prior to absorber installation, ETS-Lindgren performs an RF shield verification test in accordance with the test methods of MIL-STD-285/ IEEE-299 at 1 GHz plane wave field. Following installation of the anechoic absorber material, ETS-Lindgren performs Normalized Site Attenuation (NSA) testing for test ranges per ANSI C63.4 from 30 MHz to 1 GHz. Site Voltage Standing Wave Ratio (SVSWR) testing is also typically performed as specified in CISPR 16-1-4 from 1 to 18 GHz at one (1) 3-meter distance. ETS-Lindgren provided a turnkey project, which was critical to ensure meeting our customer’s aggressive delivery schedule. Did you know [4]ETS-Lindgren is the only true turnkey EMC systems supplier, manufacturing 90% of the components of an EMC test facility? These components include RF shielded enclosures, doors, penetrations, electromagnetic absorbers, power line filters, CCTV monitoring systems, turntables, antenna towers, emission measurement and field generation immunity antennas, field probes, power amplifiers, instrumentation, and measurement software. Following project completion, our customer is assured of continued support by ETS-Lindgren’s six manufacturing factories and team of over 700 employees worldwide. About ETS-Lindgren ETS-Lindgren is an international manufacturer of systems and components that measure, shield, and control electromagnetic and acoustic energy. The company's products are used for electromagnetic compatibility (EMC), microwave and wireless testing, electromagnetic field (EMF) measurement, radio frequency (RF) personal safety monitoring, magnetic resonance imaging (MRI), and control of acoustic environments. Headquartered in Cedar Park, Texas, ETS-Lindgren has manufacturing facilities in North America, Europe, and Asia. The company is a wholly owned subsidiary of ESCO Technologies, a leading supplier of engineered products for growing industrial and commercial markets. ESCO is a New York Stock Exchange listed company (symbol ESE) with headquarters in St. Louis, Missouri. Additional information about ETS-Lindgren is available at [5]www.ets-lindgren.com. Additional information about ESCO and its subsidiaries is available at [6]www.escotechnologies.com. CONTACT: Janet O'Neil Marketing Communications ETS-Lindgren Office: +1 (512) 531-2676 Cell: +1 (425) 443-8106 janet.oneil(a)ets-lindgren.com Join us Online! [7] [8] [9] [61b4a79c63aa2e4130f295a94b06bbdc.jpeg] [10] CONFIDENTIALITY AND PRIVACY NOTICE: You are receiving this email because you requested product or service information from ETS-Lindgren, or you have opted in to receiving ongoing updates emails from ETS-Lindgren on their product and service offerings. View our [11]Privacy Policy and Privacy Notices outlining the guidelines used for protecting your personal information. The information in this communication may be confidential and is intended only for the use of the recipient(s) named above. You are hereby notified that any dissemination, distribution, or copying of this communication, or any of its contents, to any other party, is strictly prohibited. If you have received this communication in error, please return it to the sender immediately and delete the original message and any copy of it from your computer system. If you have any questions concerning this message, please contact the sender. References 1. http://www.ets-lindgren.com/products/chambers/emc-chambers/fact™-chambers/5… 2. http://www.ets-lindgren.com/datasheet/shielding/rf-shielded-enclosures/1100… 3. http://www.ets-lindgren.com/products/absorber/emc-absorbers/polystyrene-hyb… 4. http://www.ets-lindgren.com/sites/etsauthor/General_Brochures/Test_and_Meas… 5. http://www.ets-lindgren.com/ 6. http://www.escotechnologies.com/ 7. https://www.facebook.com/ETSLindgren 8. https://twitter.com/ETSLindgren 9. https://www.linkedin.com/company/ets-lindgren 10. https://www.youtube.com/user/etslindgrenvideo 11. http://www.ets-lindgren.com/Privacy-Policy This message was sent by: martha.hallman(a)ets-lindgren.com, ETS-Lindgren, 1301 Arrow Point Drive, Cedar Park, 78613 Unsubscribe: https://app.icontact.com/icp/mmail-mprofile.php?r=48720767&l=12193&s=21EF&m…

1 0

No-coiner Nazi Morons are over
by professor rat 08 Jan '21

08 Jan '21

Btc now over 41K - so cypherpunks put their money where their mouth is or stand accused of fraud. I'll double the deadpool on Batshit Crazy the minute we hit 50K 2k for his head in an icebox. You know I'm good for it. He's an oxygen thief.

1 0

BEFORE Belling-Cat there was Smelling-Rat
by professor rat 08 Jan '21

08 Jan '21

https://www.mail-archive.com/cypherpunks@minder.net/msg30780.html Companies Like IBM,Ford and guys like Prescott Bush and Robert Menzies are forever tainted by association with totalitarian and murderous regimes. Can firms like the above,SUN,RSA,CISCO and others be far behind?

1 0

Suspects include Holocaust deniers, White supremacists, and conspiracy theorists
by professor rat 08 Jan '21

08 Jan '21

But enough about Zenaan Harkness, Batshit Crazy and Grarpamps... The moral of this story is that Mark Zuckerberg and Jack Dorsey are the most powerful people in America and it's not particularly close. https://stiffs.com/celebrity/markzuckerberg

1 0

Punk-BatSoup-Stasi 2.0 IS A NO-COINER NITWIT!
by professor rat 08 Jan '21

08 Jan '21

No balls - no brains - no bitcoin - no hope. Typical Nazbol loser, probably kicked out of 8-chan. But this list has survived much better spamming Trolls than this. Detweiler and Choate to name just two. I hear Assmange is getting his band back together again in a secured ( coughs *Russia* ) location. Maybe Batshit could become a journalist approved cypherpunk there. Along with his bum-buddy Jake and spitting image, Andy Muller Maggot. Around here he looks as loopy and out-of-place as Zendy and Gramps. FUCK OFF MORON.

1 0

Ars Technica: WhatsApp gives users an ultimatum: Share data with Facebook or stop using the app
by professor rat 08 Jan '21

08 Jan '21

RE nAZBOL Batshit crazy's latest bs "... their NSA servers, their rules. That's an example of the most pure form of US technofascist 'libertarianism' and should be admired by all 'libertarians'. It is also an example of how 'science' is 'inevitably' making people 'free' and 'explaining everything'. .." Here's one really easy way to fight science and technofascism, moron. GET OFF THE INTERNET!

1 0

Gasbag Gramps goes batshit over freedom of speech
by professor rat 08 Jan '21

08 Jan '21

The net treats censorship as damage and routes around it - OG Gilmore Code is speech - OG Mong So whats with this no-coiner nitwit Grarpamps and his ' free speech ' fetish? Part of some fetid religious / conspiracist / racist concoction no doubt. " Fascism is not to be debated. It is to be smashed " - Obi Ben Durruti Fuck off Gramps - you're not a c-punks arsehole.

1 0