- cypherpunks - lists.cpunks.org

Sim Theory
by Magilla 18 Sep '16

18 Sep '16

> xorcist: > intelligent life is the part of the universe that endeavors to understand itself. > We're the Universe's subconscious. You are a part of a super organism that is stretching through time in the form of every generation of everything that has ever lived; a being that has an infinite number of appendeges that represent all living forms of life on Earth. Every living thing is the very end of an interdimensional super intelegent apendage, like organic virtual reality goggles.

1 0

Firefox [Tor] Browser 0day: Anti-Privacy Implantation at Mass Scale
by Ohdaze 18 Sep '16

18 Sep '16

> Fuckers: > BSD All the shit posts about Tor and you talk BSD. You guys are fags.

1 0

US FBI: Was Stupid, Full of Shit, or Both re: iPhone
by grarpamp 18 Sep '16

18 Sep '16

https://apple.slashdot.org/story/16/09/17/0434213/how-the-fbi-mightve-opene… https://arxiv.org/abs/1609.04327 "Remember the San Bernardino killer's iPhone, and how the FBI maintained that they couldn't get the encryption key without Apple providing them with a universal backdoor?" quotes Bruce Schneier: Many of us computer-security experts said that they were wrong, and there were several possible techniques they could use. One of them was manually removing the flash chip from the phone, extracting the memory, and then running a brute-force attack without worrying about the phone deleting the key. The FBI said it was impossible. We all said they were wrong. Now, Sergei Skorobogatov has proved them wrong. Sergei's new paper describes "a real world mirroring attack on the Apple iPhone 5c passcode retry counter under iOS 9." The process does not require any expensive and sophisticated equipment. All needed parts are low cost and were obtained from local electronics distributors. By using the described and successful hardware mirroring process it was possible to bypass the limit on passcode retry attempts... Although the process can be improved, it is still a successful proof-of-concept project.

1 0

What Cryptos Are Up Against...
by grarpamp 18 Sep '16

18 Sep '16

https://en.wikipedia.org/wiki/Bakken_pipeline https://en.wikipedia.org/wiki/Eminent_domain http://www.radioiowa.com/2015/05/11/se-ia-landowner-accuses-pipeline-agent-… ... should they really start to push not merely the existance but the applied crypto envelope...

1 0

Fwd: [cryptome] Wifi Hotspots Must have Users Identity and Password
by Александр 17 Sep '16

17 Sep '16

How nice... Enjoy. > ---------- Forwarded message ---------- > From: douglas rankine <dmarc-noreply(a)freelists.org> > Date: 2016-09-17 13:14 GMT+03:00 > Subject: [cryptome] Wifi Hotspots Must have Users Identity and Password > To: Cryptome Mailing List <cryptome(a)freelists.org> > > see url: https://regmedia.co.uk/2016/09/15/cp160099.pdf > European Court Judgement. Death of Wifi Hotspots. Copyright protection is more important and of a higher priority, than individual privacy, or anonymity. > You vill reveal your identity...the state commands it. Your rights vill be protected. The state vill protect your rights. The state vill love you, hass alvays loved you...and vill continue to love you...and efen more...your information and metadata...

3 4

Firefox [Tor] Browser 0day: Anti-Privacy Implantation at Mass Scale
by grarpamp 17 Sep '16

17 Sep '16

https://hackernoon.com/tor-browser-exposed-anti-privacy-implantation-at-mas… https://blog.torproject.org/blog/tor-browser-605-released Introduction: The combination of chaining the vulnerabilities described below allows a malicious exit node operator or global adversary to conduct a silent remote code execution attack on all platforms of the Tor Browser. This attack is not limited to just being hypothetical in nature and evidence shows that this attack has already been possible for a number of years. The list of vulnerable deployments to this attack includes the native Tor Browser for Windows, Linux, OSX and also includes Tor Browser installations on dedicated operating systems such as Tails and Whonix. The entire security of the Tor Browser ecosystem relies on the integrity of a single TLS certificate that has already been previously compromised. Efforts to mitigate these types of risks through certificate pinning appear to not have been correctly implemented with regard to the extension update process and also appear to provide no protection. This attack enables arbitrary remote code execution against users accessing specific clearnet resources when used in combination with a targeting mechanism; such as by passively monitoring exit node traffic for traffic destined for specific clearnet resources. Additionally this attack enables an attacker to conduct exploitation at a massive scale against all Tor Browser users and to move towards implantation after selected criteria are met (such as an installed language pack, public IP address, DNS cache, stored cookie, stored web history, and etc). Quick financial estimates put the cost to launch such an attack at roughly $100,000 USD for maximum impact. To put in clearer perspective; this attack costs an attacker 0.06 USD per compromised machine given that 1.5 million users operate on Tor at any given time. Ultimately the combination of all vulnerabilities and the resources required to stage such an attack is well within the reach of a nation-state or criminal organization. Responsible Disclosure Attempts: This vulnerability was originally described publicly in concept before the initial confirmation of the feasibility of the attack. Reaction to the theoretical disclosure was mocked as non-credible by Micah Lee and Andrea Shepard (individuals associated with the Tor Project Incorporated).

4 8

US FED Rule 41: We're Gonna Hack Everyone, No Warrants Required
by grarpamp 17 Sep '16

17 Sep '16

https://www.wired.com/2016/09/government-will-soon-able-legally-hack-anyone/ The Feds Will Soon Be Able to Legally Hack Almost Anyone Senator Ron Wyden, Matt Blaze and Susan Landau That’s why it’s so concerning that the Justice Department is planning a vast expansion of government hacking. Under a new set of rules, the FBI would have the authority to secretly use malware to hack into thousands or hundreds of thousands of computers that belong to innocent third parties and even crime victims. The unintended consequences could be staggering. The new plan to drastically expand the government’s hacking and surveillance authorities is known formally as amendments to Rule 41 of the Federal Rules of Criminal Procedure, and the proposal would allow the government to hack a million computers or more with a single warrant. If Congress doesn’t pass legislation blocking this proposal, the new rules go into effect on December 1. With just six work weeks remaining on the Senate schedule and a long Congressional to-do list, time is running out. One possible slippery slope analysis not seen elsewhere... https://lists.cpunks.org/pipermail/cypherpunks/2016-April/012955.html

2 1

flexlibris
by NewTroll 17 Sep '16

17 Sep '16

u doxn juan or what! Hurry it up.

11 49

Fucking comedy of old white guy parasites >>>>
by Cari Machet 16 Sep '16

16 Sep '16

https://www.schneier.com/blog/archives/2016/09/someone_is_lear.html

8 10

Re: [Rotor-general] Status
by grarpamp 16 Sep '16

16 Sep '16

On Thu, Sep 15, 2016 at 7:02 PM, Joshua <joshua2014(a)protonmail.ch> wrote: > These > types of vulnerabilities show why diversity is needed in the anonymous > networking ecosystem. Exactly. So long as on balance your network/app does not present a weaker position overall... different sets and classes of bugs, threat / usage models, and attack surfaces can be appreciated as not a bad thing in that regard. Popularity, marketing / share, bandwagon, and even high quality shouldn't cause people to forget the basics of not all in one basket. Now and then I post on diversity (see pp3)... https://lists.torproject.org/pipermail/tor-relays/2016-August/010082.html And occaisionally mention, inexhaustively as time permits, some examples (in this thread, some tor compatibles)... https://lists.torproject.org/pipermail/tor-relays/2016-August/010112.html https://trac.torproject.org/projects/tor/wiki/doc/ListOfTorImplementations Anonymous overlay networks are still a new science and greenfield with much research to be done and many oppurtunities to both start new projects and see deprecated ones pass to history. Ten years out, I doubt the prevailing network[s] and tech[s] will directly inherit the torspec of today, but rather be an import of any useful ideas from many network projects into a new one.

1 0