- cypherpunks - lists.cpunks.org

TechRadar: Multiple zero-day vulnerabilities in Tor have been disclosed online
by jim bell 01 Aug '20

01 Aug '20

TechRadar: Multiple zero-day vulnerabilities in Tor have been disclosed online. https://www.techradar.com/news/tor-network-hit-by-two-major-zero-day-attacks

2 1

Ars Technica: IBM completes successful field trials on Fully Homomorphic Encryption
by jim bell 01 Aug '20

01 Aug '20

Ars Technica: IBM completes successful field trials on Fully Homomorphic Encryption. https://arstechnica.com/gadgets/2020/07/ibm-completes-successful-field-tria…

1 0

Mozilla's Firefox can go to hell!
by Zig the N.g 31 Jul '20

31 Jul '20

FireFox's new multi-process "Web Content" process (per tab) is now being forced on Debian Sid users, hitting 70% CPU consistently at all times, even with all plugins disabled and a browser restart. Effing, morons! In time, FireFox will now be replaced. Such stupidity, in this case from Mozilla, must receive a suitable response in the market of browsers. And it shall. A price will be paid, if it takes 10 years or more! And whilst we're ranting, Gnome's "force Apple OSX style UI/ window decorations in all desktops", violating the floss world's multitude of options for "desktop environment", means we now have multiple window styles, one for each "desktop's" apps, e.g. XFCE standard apps, and Gnome's sucky OSX enforced windows for Evince, Epiphany, etc. Opinionated morons everywhere saying "oh, but it's got to have all these features running simultaneously" or "oh but all windows must be consistent so let's force _our_ window style on our apps". Seriously? Morons!

1 0

"We don't control our lives" - smartphones - tinkerphones - debian on smartphones
by Zenaan Harkness 31 Jul '20

31 Jul '20

With respect to "smart" phones, it can be reasonably claimed that we don't control our lives. At the hardware level, the baseband (radio) computer in almost all cases has access to RAM, thus access to your passwords and keys for any open wallet or encrypted filesystem, etc. Notwithstanding, we owe it to ourselves to run an operating system which at least does not deny to us, our right to install and run any software of our choosing. The average Android and iOS Apple phone, is a strict walled garden into which only authorised software may be installed. Software "Apps" which are not authorised (or have been banned) by either Google or Apple respectively, are not available in the respective "Play Store". This is abhorrent, a centralisation of power, a blatant censorship vector, financially burdensome to those of meagre means, and fundamentally unethical in principle wrt the suppression of the basic rights of the end user (refer to Richard Stallman's GNU General Public License for details of fundamental human rights in relation to software/ apps/ computing). Totally random scenario/ example: Some rando punk decides Tor needs improvement, and works diligently for zero pay and little gratitude to bring say (random examples) chaff and UDP transport layer features to Tor. After horrific bugs and even worse security problems in the code are identified / repaired by tragically paranoid other punks, NeoTor takes off, thwarting the deep state's end to end onion route monitoring network, and so an urgent order is made upon Google to cease and decist from distributing such nefarious software. Google of course complies immediately, and almost all users go back to using old Tor. The stranglehold Google and Apple have on not only limiting the average user to approved software only, but to enforce total transparency upon all developers to idetify themselves with 100 points of ID just to TEST their software, and to pay some fiats for the priviledge whilst they're at it, is ... a little less than satisfactory. Having experienced the pain of an Android phone, even after unlocking still being locked into the garden and offered only "Google" or "XiaoMi" when saving every contact (and never "local storage only"), and the pain of finding and installing a rooted OS (_how_ many dozen options? I _still_ have to choose Google or XiaoMi if I want to backup my contact list? there's really _no_ easy option to just dump it to my laptop with an ad hoc wireless?) ... it is evident I would be MORE than happy to pay $50 to make this pain go away by having someone at my local computer club back up my address book and install Debian on my phone. What we need is Debian on the phone. And we need this to be super easy for the average geek to install, and thousands of average geeks need to start getting these donations to install Debian on Android phones. Given how painful it is for someone supposedly "technically literate", this ought be a fantastic business opportunity. So Debian on mobile phones? It's possible. What is needed is a geek-able process whereby the "CyanogenMod" mobile phone operating systems are split into an absolute minimal "bootloader + kernel + drivers etc" for a specific device, and the operating system is a separate install on top of that, and for those who care, Debian as the OS. https://wiki.debian.org/Mobile http://www.tinkerphones.org/ https://lists.goldelico.com/mailman/listinfo.cgi/community https://lists.debian.org/debian-mobile/ https://lists.debian.org/debian-embedded/ https://lists.debian.org/debian-arm/ https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/android-tools-devel https://wiki.debian.org/DebianOnHandhelds

3 2

Re: [Tinkerphones] "We don't control our lives" - smartphones - tinkerphones - debian on smartphones
by Zenaan Harkness 31 Jul '20

31 Jul '20

On Fri, Jul 31, 2020 at 09:51:16AM +0200, rhn wrote: > Regarding both emails, I think there's a shared concept that we have, but it's never explicitly stated, making it really hard to argue for it. > > The value of having an explicit goal is that it can be talked about: different aspects are visible when spelled out, as well as tradeoffs, and people talk past each other less when they have the same idea in front of them. > > We seem to understand that "smartphone" is worrisome, and "laptop" is better. But each of those is made of a large number of technologies. What differences really matter? Let me pose a few questions that can hopefully help find the important aspects. > > 1. Would a phone without a mobile modem be free of the control issues? > 2. Would a phone where the modem can't access RAM be free of the control issues? > 3. Would a phone without Android? > 4. Would a phone without binary blobs? > 5. Would a phone with a mobile modem but one that can't be carried outside of home? > 6. Would a phone with a mobile modem but using a SIP account? > 7. Would a laptop with a modem have the same issues? > 8. Would a laptop with un-emulated Android have the same issues? > > All in all, both a phone and a laptop are computers, and I don't really see much difference between them, apart from size (and how close the modem is to CPU, although that's not universal). Using the words as a catch-all can be useful, but it obscures the actual important things that people care about. > > Maybe another way to consider it is to imagine a tablet, given that they come from both camps, and saying what's good/bad about it. Yes computers exist and many people use them. Including me. I wish to use the computers which are in my possession, to put them to some useful purpose/ use, in my life. I would like to do this in a way where I maximise the control that I have, over each device in my possession. I also see value in working towards making this "personal control" principle, widely accessible "in action" for others in my community, especially those who value freedom ("if my neighbour is bound, it may not be long until I am bound"). Put another way, the more freedom that people in my community _actually experience_ on a daily basis, the healthier our community is. > On Thu, 30 Jul 2020 12:54:34 +0000 > Naqiao <naqiao(a)naqiao.hk> wrote: > > The idea of being able to run Debian on a phone is nice, but I think it misses > > the main point of the problem, this is, that mobile networks and phones are > > basically designed to control people, it's a political issue more than a > > technical one. There are indeed very real problems with some technologies (tracking, invasion of our right to privacy, binary blobs which facilitate these problems and worse, etc), and some of these problems we can fix to some degree, such as writing and deploying floss software to replace unfree software of all forms (including e.g. binary blobs). Some problems we can only solve with better tech, such as using a freedom-respecting phone where e.g. the GPS can be physically turned off when desired, and where the software respects the user's choices ragarding GPS data. Some problems are inherent in certain technology, such as mobile phone towers providing entwork access, exist in a fixed location, and therefore if you use that network, your entry point to that network is known to those who operate that network. > > I think the way to go is just stop using them, at least for a while: "no phone" > > can be better than a "bad phone". There are of course situations where not using anything that might track you, may be life saving (e.g. reporters in 'hostile' locations). There are other situations where a phone's GPS tracking may save your life (e.g. lost, possibly when kidnapped, etc.). Wisdom lies in how a user actually uses any particular tech tool, and how much control they actually have over the tool in their possession. Each tech, is a tool. Tools may be used for good, or for evil. A hammer may be usd to murder someone, and it may be used to fix a roof. Some tools that are sold to us, and that perhaps the majority of people purchase unwittingly, are designed to compromise our control over that tool, and to compromise our freedom to exercise one or more of our human rights, such as our right to privacy of communication, or our right to freely travel anonymously on "public ways" (this is inherent in a communty, and without this, we compromise the whole community, e.g. for just one example, more people living in fear of one another arises from a lack of privacy). Let's create a world where we maximise our control over all the tools we use, and where all tools/tech we use, is designed to maximise our capacity to live our fundamental human rights.

1 0

WIRED: The Age of Mass Surveillance Will Not Last Forever
by jim bell 30 Jul '20

30 Jul '20

WIRED: The Age of Mass Surveillance Will Not Last Forever. https://www.wired.com/story/the-age-of-mass-surveillance-will-not-last-fore…

2 2

The Government Wants Your Crypto Data. And Lots of It.
by jim bell 30 Jul '20

30 Jul '20

https://mises.org/wire/government-wants-your-crypto-data-and-lots-it The Government Wants Your Crypto Data. And Lots of It. 10 COMMENTS TAGS Big GovernmentBitcoinThe Police State 07/29/2020Allan Stevo The Venezuelan government recently announced that its Administrative Service for Identification, Migration and Foreigners (SAIME) is now accepting bitcoin as a payment method for passports. The problem with that is that bitcoin is not anonymous but pseudonymous. To interact with any government using bitcoin is to reveal to them the wallet you are paying from. The blockchain is public. When commentators like Caitlin Johnstone and Stefan Molyneux or organizations such as the Mises Institute or TOR Foundation ask for bitcoin contributions, one can follow the money with a blockchain explorer to see how much comes in and how it is spent. One can also see who gave it to them if a donor hasn't exercised some caution in protecting their privacy. [end of partial quote]

1 0

[dos@dosowisko.net: Re: [Tinkerphones] "We don't control our lives" - smartphones - tinkerphones - debian on smartphones]
by Zenaan Harkness 30 Jul '20

30 Jul '20

fyi ----- Forwarded message from Sebastian Krzyszkowiak <dos(a)dosowisko.net> ----- From: Sebastian Krzyszkowiak <dos(a)dosowisko.net> To: Tinkerphones Community <community(a)tinkerphones.org> Cc: CypherPunks <cypherpunks(a)lists.cpunks.org> Reply-To: Tinkerphones Community <community(a)tinkerphones.org> Date: Wed, 29 Jul 2020 18:46:09 +0200 Subject: Re: [Tinkerphones] "We don't control our lives" - smartphones - tinkerphones - debian on smartphones List-Id: Tinkerphones Community <community.tinkerphones.org> Hi, just for the record - the Debian wiki pages you have linked to are rather outdated and not really relevant anymore. Current efforts around running Debian on mobile phones (such as Librem 5 and PinePhone) are concentrated around DebianOnMobile team, which includes people working on PureOS and Mobian pushing their stuff to Debian upstream. Recent weeks brought massive progress and Purism's Phosh environment is now on its way to Debian Testing. See: https://wiki.debian.org/DebianEvents/internet/2020/MiniDebConfOnline?action… https://salsa.debian.org/DebianOnMobile-team https://lists.debian.org/debian-mobile/2020/05/msg00000.html https://qa.debian.org/developer.php?login=debian-on-mobile-maintainers@alio… https://matrix.to/#/#mobile-debian:matrix.org Cheers, dos On 7/29/20, Zenaan Harkness <zen(a)freedbms.net> wrote: > With respect to "smart" phones, it can be reasonably claimed that we don't > control our lives. > > At the hardware level, the baseband (radio) computer in almost all cases has > access to RAM, thus access to your passwords and keys for any open wallet or > encrypted filesystem, etc. > > Notwithstanding, we owe it to ourselves to run an operating system which at > least does not deny to us, our right to install and run any software of our > choosing. > > The average Android and iOS Apple phone, is a strict walled garden into > which only authorised software may be installed. > > Software "Apps" which are not authorised (or have been banned) by either > Google or Apple respectively, are not available in the respective "Play > Store". > > This is abhorrent, a centralisation of power, a blatant censorship vector, > financially burdensome to those of meagre means, and fundamentally unethical > in principle wrt the suppression of the basic rights of the end user (refer > to Richard Stallman's GNU General Public License for details of fundamental > human rights in relation to software/ apps/ computing). > > > Totally random scenario/ example: > > Some rando punk decides Tor needs improvement, and works diligently for zero > pay and little gratitude to bring say (random examples) chaff and UDP > transport layer features to Tor. > > After horrific bugs and even worse security problems in the code are > identified / repaired by tragically paranoid other punks, NeoTor takes off, > thwarting the deep state's end to end onion route monitoring network, and so > an urgent order is made upon Google to cease and decist from distributing > such nefarious software. > > Google of course complies immediately, and almost all users go back to using > old Tor. > > > The stranglehold Google and Apple have on not only limiting the average user > to approved software only, but to enforce total transparency upon all > developers to idetify themselves with 100 points of ID just to TEST their > software, and to pay some fiats for the priviledge whilst they're at it, is > ... a little less than satisfactory. > > Having experienced the pain of an Android phone, even after unlocking still > being locked into the garden and offered only "Google" or "XiaoMi" when > saving every contact (and never "local storage only"), and the pain of > finding and installing a rooted OS (_how_ many dozen options? I _still_ have > to choose Google or XiaoMi if I want to backup my contact list? there's > really _no_ easy option to just dump it to my laptop with an ad hoc > wireless?) > > ... it is evident I would be MORE than happy to pay $50 to make this pain go > away by having someone at my local computer club back up my address book and > install Debian on my phone. > > What we need is Debian on the phone. > > And we need this to be super easy for the average geek to install, and > thousands of average geeks need to start getting these donations to install > Debian on Android phones. Given how painful it is for someone supposedly > "technically literate", this ought be a fantastic business opportunity. > > > So Debian on mobile phones? It's possible. > > What is needed is a geek-able process whereby the "CyanogenMod" mobile phone > operating systems are split into an absolute minimal "bootloader + kernel + > drivers etc" for a specific device, and the operating system is a separate > install on top of that, and for those who care, Debian as the OS. > > > https://wiki.debian.org/Mobile > > http://www.tinkerphones.org/ > > https://lists.goldelico.com/mailman/listinfo.cgi/community > > https://lists.debian.org/debian-mobile/ > > https://lists.debian.org/debian-embedded/ > > https://lists.debian.org/debian-arm/ > > https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/android-tools-devel > > https://wiki.debian.org/DebianOnHandhelds > > _______________________________________________ > Community mailing list > Community(a)tinkerphones.org > http://lists.goldelico.com/mailman/listinfo.cgi/community > http://www.tinkerphones.org > -- Sebastian Krzyszkowiak dos _______________________________________________ Community mailing list Community(a)tinkerphones.org http://lists.goldelico.com/mailman/listinfo.cgi/community http://www.tinkerphones.org ----- End forwarded message -----

2 1

The Tech Giants Are Dangerous, and Congress Knows It
by jim bell 30 Jul '20

30 Jul '20

The Tech Giants Are Dangerous, and Congress Knows It https://a.msn.com/r/2/BB17lkPH?m=en-us&referrerID=InAppShare Jim Bell's comment:I detest both Congress AND "The Tech Giants".

1 0

Re: www.Tesmanian.com: FCC approves the operation of 'Starlink Router' for SpaceX's internet
by Punk-BatSoup-Stasi 2.0 30 Jul '20

30 Jul '20

On Thu, 30 Jul 2020 11:51:29 +1000 jamesd(a)echeque.com wrote: > On 2020-07-17 05:37, Punk-BatSoup-Stasi 2.0 wrote: > > wow - infinitely hilarious. Hey Jim are you posting that as an example of infinitely idiotic US nazi propaganda? Or do you happen to believe, like a good randroid, that musk is a poor oppressed capitalist fighting for 'freedom'? > > Nah, he is fighting for freedom for smart, wealthy people to get away to > mars. mwahaha! Thanks James. I knew you could outdo your namesake Mr. Bell. This 'mars colonization' thing is infinitely idiotic raised to the cube. Of course, musk's purpose here is to get as much subsidies as possible so 'mars colonization' might be an excuse as good as any other. But in the minds of your typical techno-fascist retards, the heroic cunts are going to waste trillions in 'colonizing' a completely dead desert...in another planet! Yeah, right. Idiocy can't get any more idiotic. > China will be able to censor starlink connections inside China, and > Russia will be able to censor starlink connections inside Russia, but > they are going to have to cut a deal with Musk, and Egypt, Iran, and > probably India are not going to be able to censor. so what does that mean in libertarian terms? Oh wait, libertarianism is something completely beyond your understanding. Disregard my question.

1 0