- cypherpunks - lists.cpunks.org

Android Ups the Mobile Security Ante with Default TLS Encryption
by jim bell 04 Dec '19

04 Dec '19

https://threatpost.com/android-mobile-security-tls-encryption/150760/ More than 90 percent of Android apps running on the latest OS encrypt their traffic by default. A full 80 percent of Android apps are encrypting their traffic by default, according to a Transport Layer Security (TLS) adoption update from Google. That percentage is even greater for apps targeting Android 9 and higher, with 90 percent of those encrypting traffic by default, the tech giant said on Tuesday. TLS is a cryptographic protocol standard ratified by the Internet Engineering Task Force that provides end-to-end communications security over networks by scrambling data in transit, preventing hackers from reading it, intercepting it or tampering with it. TLS can be enabled for any internet communication or online transaction, such as a connection between a mobile shopping website and a user’s mobile browser, or between a banking app and the bank’s backend servers. The security of those connections is then verified via secure TLS certificates. As of October 2019, a third (33 percent) of Android devices run Android 9 (Pie), the latest version of the operating system. That makes it the most popular Android version. According to Google, apps targeting Android 9 or higher automatically have a policy set by default that prevents unencrypted traffic for every domain; and, since November 1, all apps on Google Play must target at least Android 9. [end of long quote]

1 0

What a bunch of spineless idiots at Twitter
by Ryan Carboni 04 Dec '19

04 Dec '19

https://twitter.com/en/tos >If you are a federal, state, or local government entity in the United States using the >Services in your official capacity and legally unable to accept the controlling law, >jurisdiction or venue clauses above, then those clauses do not apply to you. For such >U.S. federal government entities, these Terms and any action related thereto will be >governed by the laws of the United States of America (without reference to conflict of >laws) and, in the absence of federal law and to the extent permitted under federal law, >the laws of the State of California (excluding choice of law). I've never read such vacillating nonsense in my life. It can't be a legally binding agreement if within the agreement if it says it is up to Twitter to interpret laws. As I'm not a lawyer, I think I will end up blocking twitter's domains sometime this month, as I certainly do not agree to the terms, find it unequal, and am beginning to believe only the exposure of wrongdoing and systemic collapse is the only viable option at this point.

1 0

Re: [2600-AU] Apple cannot be trusted - violation of Australian federal Data Protection/Electronic Crime Law
by Zenaan Harkness 04 Dec '19

04 Dec '19

Thank you for those pointers. Yes, VCAT/NCAT etc often have a "state clearly and briefly what happened" section on their "application forms", usually also with a suggestion to "attach an additional sheet if you can't fit it in this box" type of thing. My personal (IANAL) preference is to present my own matters, even in the higher courts (I am in the Vic Supreme Court at the moment on the "right to be heard in my own defence, when I am caused to appear in court" basic human right). As to your assertion that "An affidavit can't be used in a Magistrates Court" - this is simply not true, and is IMEHO, an egregious suggestion to those who might choose to self represent. Many times I have filed affidavits into the Magistrates' Courts of both Victoria and New South Wales, and on one occasion only (when I believed it was in my interest to do so) did I file a Statement (self signed, not even a statutory declaration). Further, I have spoken personally with/ seen, acquaintances who began with a court case in the Magistrates' Court, and proceed on some sort of appeal into the Supreme Court, have to re-do their statement or stat dec, and file it as an affidavit (the only form the Supreme Court accepts). I was even supporting a self represented VCAT defendant, who actually filed an affidavit to lay out his version of events - VCAT accepted that affidavit, and he relied on it during the hearing. So if you have some authority to back up -why- it is that you say "An affidavit can't be used in a Magistrates Court", then I would very much appreciate a link or copy of the document, so that I can read that authority (law, regulation, section or other document) which you are referring to. Especially given that you say you "work for the cyber police", any insight into such laws or regulations would likely be useful for humble folks such as myself - so thank you in advance. On Wed, Dec 04, 2019 at 02:42:57PM +1100, Sid E wrote: > An affidavit can't be used in a Magistrates Court, and I don't believe they > hold much weight under a Tribunal (VCAT for example), if you are > representing yourself, and VCAT doesn't allow you to be represented by a > legal professional automatically, you have to apply to be allowed to. > > There is some exceptions to this and considering its Apple they will be > sending a full team of overpaid legal thugs to quickly stomp out anyone who > dare slander the cult of scientology *cough* sorry Apple. > > The rest of your legal advice seems pretty solid though, collect evidence > and data. > > Trust me, I work for the cyber police > > -- > -- > ------------------------------------------------------------ > You received this message because you are subscribed to the "2600 Australia" group. > To post, send email to: 2600-australia(a)googlegroups.com > To subscribe, send email to: 2600-australia+subscribe(a)googlegroups.com > For 2600 monthly meetings, visit http://www.2600.org.au > For more options, visit this group at http://groups.google.com/group/2600-australia > To unsubscribe, send email to: 2600-australia+unsubscribe(a)googlegroups.com > Disclaimer: Comments to this mailing list are owned by the poster > ------------------------------------------------------------ > > --- > You received this message because you are subscribed to the Google Groups "2600 Australia" group. > To unsubscribe from this group and stop receiving emails from it, send an email to 2600-australia+unsubscribe(a)googlegroups.com. > To view this discussion on the web visit https://groups.google.com/d/msgid/2600-australia/CAMP2cBKB_A%2Bi%2BA%3DrXyx….

1 0

Libgen Sci-Hub: Got any terabytes?
by grarpamp 04 Dec '19

04 Dec '19

> https://old.reddit.com/r/seedboxes/comments/e129yi/charitable_seeding_for_n… > https://old.reddit.com/r/libgen/ > https://old.reddit.com/r/scihub/ > https://the-eye.eu/ > https://www.vice.com/en_us/article/pa7jxb/archivists-are-trying-to-make-sur… > https://torrentfreak.com/sci-hub-libgen-blocked-by-austrian-isps-following-… https://news.ycombinator.com/item?id=21692222 https://old.reddit.com/r/datahoarder/ https://old.reddit.com/r/DataHoarder/comments/e0sb8b/theeyeeu_we_now_host_t… Lots of data archive and distribution tools mentioned in above threads. New AMD systems, entire lineup, now flying off the shelves... https://wccftech.com/amd-ryzen-9-3950x-entire-inventory-outsold-japan-world… https://news.ycombinator.com/item?id=21679470 https://old.reddit.com/r/amd/

1 0

Co-op Guerrilla Meshnets
by grarpamp 04 Dec '19

04 Dec '19

https://www.newyorker.com/tech/annals-of-technology/the-one-traffic-light-t… Not an example of distributed DIY co-op, but a story anyway... McKee, an Appalachian town of about twelve hundred tucked into the Pigeon Roost Creek valley, is the seat of Jackson County, one of the poorest counties in the country. There’s a sit-down restaurant, Opal’s, that serves the weekday breakfast-and-lunch crowd, one traffic light, a library, a few health clinics, eight churches, a Dairy Queen, a pair of dollar stores, and some of the fastest Internet in the United States. Subscribers to Peoples Rural Telephone Cooperative (P.R.T.C.), which covers all of Jackson County and the adjacent Owsley County, can get speeds of up to one gigabit per second, and the coöperative is planning to upgrade the system to ten gigabits. (By contrast, where I live, in the mountains above Lake Champlain, we are lucky to get three megabytes.) For nearly fifteen million Americans living in sparsely populated communities, there is no broadband Internet service at all. Fibre-optic cables strung above a home in Jackson County, Kentucky, one of the poorest counties in the country. High-speed broadband has been used to bring Internet-based jobs to the region. Before Shani Hays began providing tech support for Apple from her home, in McKee, Kentucky, she worked at a prison as a corrections officer assigned to male sex offenders, making nine dollars an hour. After less than a year, she switched to working nights on an assembly line at a car-parts factory, where she felt safer. More recently, Hays, who is fifty-four, was an aide at a nursing home, putting in a full workweek in a single weekend and driving eighty-five miles to get there. Then her son-in-law, who was married to Hays’s oldest daughter, got addicted to crystal meth and became physically abusive. Hays’s daughter started using, too. The son-in-law went to jail. Their kids were placed in foster care. Then Hays’s stepmother got cancer. “There was a lot going on,” Hays told me. “I was just trying to keep it all together.” She began working from home last summer, which has allowed her to gain custody of her three grandchildren. (Her daughter has since completed treatment for her addiction.) During Hays’s half-hour lunch break, she makes supper. “I wouldn’t be able to do this without the Internet we have here,” she said.

2 1

Facialized: US will Follow UN CN by Adopting Facials for SIM Cards and Internet
by grarpamp 04 Dec '19

04 Dec '19

https://www.technologyreview.com/f/614781/all-new-cellphone-users-in-china-… https://www.ft.com/content/c3555a3c-0d3e-11ea-b2d6-9bf4d1957a67 Your demands, coming to you since 1984... A report from MIT Technology Review: Customers in China who buy SIM cards or register new mobile-phone services must have their faces scanned under a new law that came into effect yesterday. China's government says the new rule, which was passed into law back in September, will "protect the legitimate rights and interest of citizens in cyberspace." It can be seen as part of an ongoing push by China's government to make sure that people use services on the internet under their real names, thus helping to reduce fraud and boost cybersecurity. On the other hand, it also looks like part of a drive to make sure every member of the population can be surveilled. The Financial Times reported yesterday that tech companies in China are helping to create influential United Nations standards for the facial recognition technology, which will help shape rules on how facial recognition is used around the world.

1 0

Re: [2600-AU] Apple cannot be trusted - violation of Australian federal Data Protection/Electronic Crime Law
by Zenaan Harkness 04 Dec '19

04 Dec '19

Thank you for taking the time to write this up, appreciated. Also, to all Crapple users, "You get what you firetrucking deserve." As one might say, "dance with the devil, suffer the devil". Everyone who supports, promotes, or otherwise tacitly consents to, proprietary walled gardens such as Apple, Google, Microsoft etc, are contributing to the evident and abundant compromise of our basic human rights. The Purism Librem 5 phone is slowly rolling out, and is the only phone (or computer of any mainstream sort) today, which is designed from the ground up to separate the (proprietary, closed) baseband cpu from the user's primary cpu and RAM etc.: https://puri.sm/products/librem-5/ Create your world, On Wed, Dec 04, 2019 at 11:03:02AM +1100, admin(a)reviews.wox.org wrote: > Here is something you probably wont see in the news. > > Considering it just happened to someone close to me who is now borderline > suicidal as a result (pity lawyers are expensive..) thus as an emotive topic > it may colour my opinions here. > TLDR; Do not use any Apple device for anything important with respect to > photos or videos. They care nothing for your data integrity and will not > hesitate to delete it to punish you. > > Under certain conditions (typically if you remove and bank or credit card > payment details from your apple account because common sense) if you use Apple > products connected to their icloud service - Apple can and will randomly > delete photos and videos from your device and cloud storage. Considering > this violates Australian law with regard to unauthorised > insertion/deletion/modification of data, they probably shouldn't be doing > this. > > Here are the conditions that led to it in this case - > > 1. Device running low on storage (~ 1000 family photos and > short videos going back years including the now deceased > - sounds like a lot but most videos were under 4 seconds > except 2 or 3) > 2. Enabled icloud to move them to cloud. > 3. Cloud advises you may need more storage, demands payment > details. > 4. Payment details added > 5. cloud sync throws an error and appears to fail. > 6. end of month rolls around few weeks later, cloud still > not working but we discover Apple bills them anyway, > user rage ensues > 7. User annoyed that cloud backup didn't work, and getting > charged for this crap removes payment details, and > cancels the unused additional storage > 8. Cloud gives some unintelligible error and warning about > removing payment detail (give us payment details or else > basically) > 9. end of next month rolls around > 10. suddenly all the items that failed to be moved to cloud > (which incidentally were still in the device, and had > failed to sync leading to cancellation) start randomly > deleting themselves, as daughter of owner is watching in > horror, she was literally looking in an album she > created, and the photos started disappearing as she > watched. This was after a day with no wifi - so getting > back online triggered this. > 11. Frantically checks recently deleted items folder, and > logs into icloud website to check as well. No sign of > any of them anywhere, no explanation. Just gone. > 12. nothing in icloud but a handful of entirely random > images (~300) and videos (~60) maybe 2 gb tops. Over > 900 videos and 1000 photos vanish into thin air. The > items kept or removed seem to have no pattern and > nothing in common, ranging from old to new stuff. > > You can imagine the devastating effect this had on the morale of the ipad > users. > > > As a computer repairer I have also seen another scenario - > If you are stupid enough to enable a pin security lock screen on your Apple > device, but you don't use icloud at all, especially if your device was setup > prior to icloud - and for whatever reason (accidental pocket button pressing, > child playing with screen etc) your pin is entered several times incorrectly > you will be double screwed. > > 1. The apple device will lock itself from having the pin > entered again (often for absurd timeouts like a year or > more, or forever) - this can apparently also cause the > device to "burn/delete its data" under the assumption > the device has been stolen. There is no way to recover > the data in this scenario even if the device has an old > enough IOS the memory hasn't been "burned" (in addition > not upgrading the IOS will also punish you in several > other ways I wont go into) needless to say the data is > now gone. > 2. As an additional F-U if you don't remember the login > details of the original itunes account used when the > device was originally purchased (a very common scenario > where people only used it as an actual phone, and > sometimes a camera - like normal people would), OR if > the account is so old is has been disabled(frequently > happens if you didn't add payment details to itunes, and > had no internet or net was disabled for a year or more), > or none of the recovery info is current any more for > whatever reason (phone numbers change, and ISPs care > nothing for your old email addresses) - it will also not > be possible to ever use the device again either, it will > again revert to the assumption the device is stolen, and > demand you connect it to an "authorised" pc running > itunes, even if it has never been plugged into a PC. > Even then if you attempt a last resort "DFU" mode > recovery it will fail, as you will be unable to progress > past the "log into original icloud/itunes account to > proceed" screen once you factory restore it. > Sometimes if you had a really old IOS it will let you > in, but any recent (~2 years) IOS will for all practical > purposes brick you at the login screen. > > <begin ranty venting> > Basically I feel only an idiot, terrorist, kiddie porn scumbag or an Apple > fanboi who needs to hide their sick shit (at this point all the same thing > IMO) should use an Apple device anymore. > </end ranty venting> > > > -- > New and improved 2600... well.. > ..we drew on some flames and > polished it a bit.. > -- > Google - making sure, life is no more, than 1984... > -- > > -- > -- > ------------------------------------------------------------ > You received this message because you are subscribed to the "2600 Australia" group. > To post, send email to: 2600-australia(a)googlegroups.com > To subscribe, send email to: 2600-australia+subscribe(a)googlegroups.com > For 2600 monthly meetings, visit http://www.2600.org.au > For more options, visit this group at http://groups.google.com/group/2600-australia > To unsubscribe, send email to: 2600-australia+unsubscribe(a)googlegroups.com > Disclaimer: Comments to this mailing list are owned by the poster > ------------------------------------------------------------ > > --- You received this message because you are subscribed to the Google Groups > "2600 Australia" group. > To unsubscribe from this group and stop receiving emails from it, send an email to 2600-australia+unsubscribe(a)googlegroups.com. > To view this discussion on the web visit https://groups.google.com/d/msgid/2600-australia/c68781d5-3f21-660e-bd53-56….

1 2

Re: Amazon Braket – Get Started with Quantum Computing
by Ryan Carboni 04 Dec '19

04 Dec '19

>But surely no overlap between NSA and CIA staff - the NSA are clean >skins and would have nothing to do with the CIA's orphanages for >blackmail program. What is everyone's reactions to all this? "Wow, this disinformation campaign is really detailed, they control our orphanages, they control Epstein's staff (most of them have nothing good to say about him), his house, his finances, any sex slaves in any basements of his, they control the finances of other people with their above market rate contracts..." Moral preening is no substitute for good governance. Anyway, for producing thousands of hours of videos, it doesn't have a dollar value. Hollywood movies are expensive because of scarcity over quality. What can one expect, these are the same people who couldn't predict Soviet collapse from worsening shortages. I think people familiar with an industrial economy would be capable of understanding tooling times, some things have a labor cost, and the absence of such a large number of skilled artisans would be observable. Epstein's egg shaped penis is a poorly kept secret. Dershowitz: "If a person like me can be accused, how can any decent man protect themselves?" There seems to be some confusion about orgies and restricting decisionmaking to orgy networks, and child molestation and people ordering child molesters to make decisions over the economy and society in exchange for slaves. Saying it isn't possible doesn't make it so. Pedophile is not code for orgy participant, so people should stop acting like it.

3 3

Cryptocurrency: SEC Reconsidering ETF Rules, Open For Your Comments
by grarpamp 03 Dec '19

03 Dec '19

https://www.coindesk.com/the-sec-is-reviewing-the-bitwise-bitcoin-etf-rejec… For those seeking to trojan distributed cryptocurrencies into the traditional markets structures, and as Grayscale and others have many offerings, and as other countries have ETFs and other vehicles, and other reasons and articulable support... links to comment instructions in article above. The SEC Is Reviewing the Bitwise Bitcoin ETF Rejection Nov 18, 2019 The U.S. Securities and Exchange Commission (SEC) is taking a second look at the rejection of a recent bitcoin exchange-traded fund (ETF) proposal. Overturning the rejection would clear the way for potentially the first bitcoin ETF in the U.S., following years of anticipation of a mainstream-ready investment product. According to a notice published in the Federal Register over the weekend and dated Nov. 18, the SEC’s five commissioners will review the bitcoin ETF put forth by Bitwise Asset Management. Bitwise did not request the review, said Matt Hougan, the company’s global head of research. “We do, however, welcome the opportunity to submit comments and continue the dialogue with the SEC,” he said in an email. The rejection was written by the agency’s Division of Trading and Markets on Oct. 9. The Nov. 18 notice actually references a letter from the SEC’s commissioners dated Oct. 15. It is not clear what triggered the SEC’s review. Under current federal law, the commissioners can grant a review at their discretion, or following the filing of a petition. The order rejecting the proposal will remain in effect until the review has concluded, the notice said, with the commissioners either upholding the staff rejection or overturning it. As part of the review, the general public can comment on the rejection through Dec. 18, 2019. Groundhog day Unlike the SEC’s formal approval or disapproval process, there are no set deadlines for the review of a decision. The Commission has previously reviewed the rejection of a bitcoin ETF proposal filed by the family office of Tyler and Cameron Winklevoss, ultimately upholding the decision after more than a year. It is possible that an SEC commissioner may have called for the Bitwise review. Famously, Commissioner Hester Peirce – dubbed “Crypto Mom” by the community – announced the review of nine rejected bitcoin ETF applications in 2018. Peirce also dissented from the SEC’s second rejection of the Winklevoss ETF. The ETF applications, filed in late 2017 and early 2018 by GraniteShares, ProShares and Direxion, were rejected in August 2018, with Peirce announcing their review the next day. However, it remains unclear what the status of this review is, or whether any of these decisions will be overturned. Neither Peirce nor an SEC spokesperson immediately responded to emailed requests for comment. ProShares declined to comment, and a request for comment to Direxion was not returned by press time. GraniteShares CEO Will Rhind told CoinDesk in a phone call that nothing had come of the SEC’s review so far, and he did not expect this to change in the near future. “I think [SEC Chairman Jay Clayton] has spoken publicly about the ETF applications and … he’s made it clear at least from the top that the market has to mature a little bit before there’ll be an approval,” he said.

1 0

Sasha writes...
by grarpamp 03 Dec '19

03 Dec '19

http://www.lucifer.com/~sasha/org.html http://www.lucifer.com/~sasha/lists.txt

1 0