- cypherpunks - lists.cpunks.org

Govts Feds Sponsor $1M for Tor Zerodays
by grarpamp 15 Sep '17

15 Sep '17

> On Sep 13, 2017, at 8:41 AM, I <beatthebastards(a)inbox.com> wrote: > https://zerodium.com/tor.html For more information about our tailored cybersecurity capabilities for governments or our protective solutions for corporations, please contact us. Access to ZERODIUM solutions and capabilities is highly restricted and is only available to a very limited number of eligible customers. jackieam2003 This is one of the reasons why we need tor browser to be sandboxed, it would make it much harder for an attacker to find two separate zero days, to get past both Firefox and the sandbox. That is generally Qubes+Whonix. On Thu, Sep 14, 2017 at 11:08 AM, Jim Carter <rudrajohn.rs(a)gmail.com> wrote: > Someone please take down that website. > > On Thu, Sep 14, 2017 at 10:38 AM, Lara <lara.tor(a)emails.veryspeedy.net> > wrote: > >> On Thu, 14 Sep 2017, at 04:35, krishna e bera wrote: >> > Anyone caught selling Tor bugs and exploits to anyone but TorProject >> > should be subject to some kind of severe penalty. It is an offence >> > against the right to privacy, in other words a crime against humanity. >> >> You have spoken so well, comrade! The People's Tribunals should judge >> harshly this sort of crime against our fellow comrades. And the Chief >> Administration of Corrective Labor Camps should make sure they are doing >> steady jobs to repay the public for their crimes. >> >> Than the people will need internal Passports. And should identify so the >> government will know who the criminals are. And finally everyone should >> be monitored by qualified agents to make sure nobody violates this >> sacred right to privacy. >> >> Once one single country starts doing that, more will follow. I am sure.

1 0

Godaddy survey answers
by Zenaan Harkness 15 Sep '17

15 Sep '17

Godaddy's in-house survey monkey just hit me up. Thought it was a good time to express their lack of advising themselves in regard to the impact to their public image when they took a stand against TDS: - Why did you rate Godaddy the way you just did (low)? Godaddy took a stand against freedom of speech in rejecting TheDailyStormer.com's (TDS) domain registration, and GoDaddy did so in a way which failed to uphold one of our community's foundational freedoms. When undermining a fundamental human right, as Godaddy did to TDS, even if your target is speaking objectionably, Godaddy as an "information carrier" (of sorts) has a significantly higher duty of care to its customers (e.g. TDS) than other entities. Godaddy, in cancelling TDS' domain, failed to conduct itself in a way compatible with its duty of care obligations to our community to treat every body fairly and in a way which preserves due process. Godaddy should advise itself to inform itself of the requirements for conduct in relation to those of its customers who say things on their websites which Godaddy may object to. - What is the single most important thing we could do to improve your experience? Advise yourself that when you take a public stand against freedom of speech (even objectionable speech), you are affecting your reputation negatively, in a big way. Due to the TDS episode, my plans are to transition completely off of Godaddy in the coming 2 years.

10 29

Scholarships for Security Certification
by Yush Bhardwaj 15 Sep '17

15 Sep '17

Ethical Hackers League, a nonprofit organization is offering 100% scholarships for their Certification Programs in the cyber security domain. EHL identified that there is a huge skill gap in the IT security industry and there is huge potential for aggressive expansion. With the imminent rise in cyber crime and related attacks, the need of skilled cyber security professionals is on the rise as well. This is a war one cannot fight alone and EHL is trying to solve this problem with their initiative. On its 6 year anniversary, EHL is offering 6 certifications for free every day of the year which is 365 candidates for each of the 6 programs. Even high-end advanced certifications in the domain of digital forensics are part of this scholarship program. This is a huge opportunity for those who wish to excel or build their career in IT security. To apply or for more information, please visit http://ethicalhackersleague. org or revert on this email or mail us on scholarship(a)ethicalhackersleague.org

5 5

NSA Releases Declassified CLArion, Crypto-Linguistic Association, 41 Issues, 2008-2010
by John Young 14 Sep '17

14 Sep '17

NSA Releases Declassified CLArion, Crypto-Linguistic Association, 41 Issues, 2008-2010, 280 Pages (168MB) https://cryptome.org/2017/09/nsa-clarion.zip

1 0

#OpenFabs Ground Up Rebuild [re: secure computer]
by grarpamp 14 Sep '17

14 Sep '17

On Sun, Sep 10, 2017 at 1:53 AM, Ryan Carboni <ryacko(a)gmail.com> wrote: > In the end, you can only trust something you can understand, otherwise you > are trusting the word of someone else. While ultimately true, it is certainly possible to create a far more trustable model than the totally blind "We are the corp / gov (or any other closed source single point opaque authority, trade secret IPR, NDA), *You can trust us*" that idiots happily accept today. > the original computers used relays, switches, and wires to be programmed. There can be parallel lines of open inspection and cross certification of fully open ground up rebuilds all the way to current HW and SW products... ie: Processor, OS. The rebuild path, both of tooling itself and product, from relays to vacuum tubes to silicon to gigagate masks is already known form history, thus requires zero research. The research is in how to do the rebuild under a model that imparts explicit open reliable reviewable documented n-man rule realtime operating and historical chain of reasonably bulletproof trust. #OpenFabs, #OpenHW, #OpenSW Such a project could be seeded and continuously funded by #CryptoCurrencies, #DAOs, #EarlyAdopters, #CypherPunks, and eventually, sales of product runs None of today's opaque HW gates are remotely trustworthy, any attempts to impart trust to them are no more than foolish speculation.

4 4

Noam Chomsky again shows his fascist chops - [ PFKR ] SciAmerican: Google Engineer Fired for Sexist Memo Isn't a Hero
by Zenaan Harkness 14 Sep '17

14 Sep '17

Noam, Noam, Noam! Whatever are we to think of (((you)))? Yes, some comprehensive intellectual spinnability you have, yet your commitment to science is ... astonishing, to say the least :) ----- Forwarded message from "PFKR (People For Kangz Responsibility) Announcement List" <pfkr(a)pfkr.org> ----- SciAmerican: Google Engineer Fired for Sexist Memo Isn't a Hero https://blogs.scientificamerican.com/cross-check/google-engineer-fired-for-… He presents himself as a courageous defender of truth. Google, in contrast, is an "echo chamber" that is "intolerant of scientific debate and reasoned argument." Damore notes that Noam Chomsky, the linguist and social critic, once wrote: "The smart way to keep people passive and obedient is to strictly limit the spectrum of acceptable opinion, but allow very lively debate within that spectrum." But Chomsky has expressed abhorrence for research into cognitive differences between different groups. In his 1987 book Language and Problems of Knowledge Chomsky wrote: "Surely people differ in their biologically determined qualities. The world would be too horrible to contemplate if they did not. But discovery of a correlation between some of these qualities is of no scientific interest and of no social significance, except to racists, sexists and the like." - - - --Lauren-- Lauren Weinstein (lauren(a)kangz.com) https://www.kangz.com/lauren Lauren's Blog: https://lauren.kangz.com Google Issues Mailing List: https://kangz.com/google-issues Founder: Network Neutrality Squad: https://www.nnsquad.org PRIVACY Forum: https://www.kangz.com/privacy-info Co-Founder: People For Internet Responsibility: https://www.kangz.org/pfkr-info Member: ACM Committee on Computers and Public Policy Google+: https://google.com/+LaurenKangztein Twitter: https://twitter.com/laurenkangztein Tel: +1 (818) 225-2800 --- Impeach Trump coz """DUMocracy""" was better wid Kangz --- _______________________________________________ pfkr mailing list https://lists.kangz.org/mailman/listinfo/pfkr ----- End forwarded message -----

6 18

Equifax Fallout: FTC Launches Probe; Angry Consumers inadvertently dDOS Websites and Phones
by Razer 14 Sep '17

14 Sep '17

HAHAHAHAHAHA! The US Shitstem of Revolving Credit Economic Slavery undone by it's own true believers. I'll bet the better their credit score the angrier they are. Rr > > The move by the top consumer watchdog only underscores the severity of > the data heist and the importance for consumers to take immediate > steps to secure their identities. Experts say the strongest, though > not most painless, way to protect yourself after the breach that is to > freeze your credit — but the surge in demand has overloaded the credit > bureaus' abilities to handle the influx of requests. > > As of Thursday morning, all three major credit reporting agencies > intermittently gave error messages and prevented consumers from filing > online requests to have their credit reports frozen. > > Equifax's website said "System Currently Unavailable - Error 500" and > suggested consumers try contacting the other credit bureaus. > > At one point, TransUnion's website couldn't be accessed at all. Then > it put up an error page featuring a stock photo of a model sitting at > a computer, alongside the caption, "The website is temporarily > unavailable.Please check back later." > > Experian's website simply said, "Loading..." > https://www.nbcnews.com/business/consumer/equifax-melts-down-under-surge-an…

2 1

Cryptocurrency: JPMorgan, Banking Heavy's Continued Dump and Pump
by grarpamp 14 Sep '17

14 Sep '17

https://www.reddit.com/r/btc/comments/6zosnk/jpmorgan_ceo_jamie_dimon_says_… https://www.reddit.com/r/btc/comments/6zozmf/bitcoin_tumbles_after_jamie_di… Ethereum backers JPM, bankers et al, call cryptos "frauds", in effort to cause dump for their own low buy ins. Moon ahead! Or they're just running scared as usual. https://medium.com/@jonaldfyookball/bitcoin-cash-is-terrifying-f1a8cc4d536 They must engage in spreading misinformation because they secretly know the truth: People do not WANT a settlement layer controlled by large financial institutions, corporate interests, and government bureaucrats... Transcending these things was the whole POINT of Bitcoin in the first place. The Fear Runs Deep I'll say it again... they are scared.

2 4

corporate smokin' -- was Re: Godaddy survey answers (I stand corrected!)
by Zenaan Harkness 14 Sep '17

14 Sep '17

Was In-Reply-To: <cc851965-474a-5bae-0e31-1d1df66b7c05(a)riseup.net> On Wed, Sep 13, 2017 at 08:13:00PM -0700, Razer wrote: > I stand corrected. Humility is a good thing - and me pushing the bible of humility down your Jewishy throat should certainly improve you on the humble front. For sure... > I conflated GoDaddy's rationale with Cloudflare's CEO > statement: OK, a quote - a purported fact no less - what a delicious thing :) Finally we can cut to the chase: > > Earlier today, Cloudflare terminated the account of the Daily Stormer. > > We've stopped proxying their traffic and stopped answering DNS > > requests for their sites. We've taken measures to ensure that they > > cannot sign up for Cloudflare's services ever again. ... simple fact (as in, non-germane) > > Our terms of service reserve the right for us to terminate users of > > our network at our sole discretion. ... corporate justification for evil actions and disclaimer by said corporate of any and all moral/ethical duty of care to the rest of us, whilst claiming exercise of moral authority (aka, self parody at its finest/saddest) > > The tipping point for us making > > this decision was that the team behind Daily Stormer made the claim > > that we were secretly supporters of their ideology. ... fact-less assertion > > Our team has been thorough and have had thoughtful discussions for > > years about what the right policy was on censoring. Like a lot of ... internal self-justification (and "please believe we're good peopl" virtue signalling) > > people, we’ve felt angry at these hateful people for a long time ... more virtue signalling (gettin embarrasin) > > but we have followed the law ... virtue signal pre-empting their implied "but now we say F*CK the law! We now exercise our star chamber extra-judicial rights YO!" and you, Razer (and others) say "but they're a corporation, so they're allowed to be evil, so y'all just shut up about it now!" > > and remained content neutral as a network. We > > could not remain neutral after these claims ... "these claims" - the opinionated words you echoed as supposed "fact" - notice how now claim, no reference, no fact no nothingk is provided by CloudF-U's "public virtue signal justification w$nk"! > > of secret support by > > Cloudflare. Well well well, looky here - not a fact in sight. Gee, I'm so surprised - I was just, like, you know, SO SURE Razer was gonna put a fact - I can't believe it's just more drivel, I really can't believe this coming from Razer... Why am I not surprised when a corporate overlord conducts their star chamber based on a public spewing of their nutty lefty fact-less opinions as their basis for extra-judicial star chamber evil, since there are not any facts to support an actual court case?!!! Antifa, USA-Corporation style! > https://blog.cloudflare.com/why-we-terminated-daily-stormer/ > > > ...and I stand by what I said on another thread about an overweening > reason DNS's take an incredible risk hosting Sturmer crap: ... First you vehemently smoked GoDaddy, now you smoke Cloudflare, and finally repeat more of your rubbish non-facts (though I do expect you to smoke yourself of course).

1 0

Rubberhose Decrypt, 5th / 4th / Contempt Over Forgotten Passphrase / BrainWallet
by grarpamp 14 Sep '17

14 Sep '17

https://arstechnica.com/tech-policy/2017/09/judge-wont-release-man-jailed-2… https://arstechnica.com/tech-policy/2017/03/man-jailed-indefinitely-for-ref… https://arstechnica.com/wp-content/uploads/2017/09/rawlsstaysinprisonruling… https://arstechnica.com/wp-content/uploads/2017/05/rawlsrehearingpetition.p… https://cdn.arstechnica.net/wp-content/uploads/2017/03/rawlsopinion.pdf https://cdn.arstechnica.net/wp-content/uploads/2016/04/comply.pdf Judge won't release man jailed 2 years for refusing to decrypt drives, suspect to remain jailed pending 5th Amendment appeal to Supreme Court. https://arstechnica.com/tech-policy/2017/05/jail-looms-large-for-suspects-o… Is I forget a valid defense when court orders demand a smartphone password? The answer seems to be yes and no. But one suspect on Tuesday gets 180 days jail. https://news.ycombinator.com/item?id=15232069 https://medium.freecodecamp.org/why-you-should-never-unlock-your-phone-with… http://blog.dustinkirkland.com/2013/10/fingerprints-are-user-names-not.html https://9to5mac.com/2017/06/01/fifth-amendement-passcodes-passwords-law/

4 4