- cypherpunks - lists.cpunks.org

Encrypted Git Remote, Undoc Opcodes, Clone Car Keys Digital Lockpicking, PDF Sec, Heist
by grarpamp 08 Mar '20

08 Mar '20

http://ptspts.blogspot.com/2017/10/comparison-of-encrypted-git-remote.html https://github.com/cattius/opcodetester https://news.ycombinator.com/item?id=22505256 https://news.ycombinator.com/item?id=22516496 https://www.gq.com/story/the-great-buenos-aires-bank-heist

1 0

Volcker (the Fed): “The American standard of living must decline” - End the Fed - [MONEY] [PEACE]
by Zenaan Harkness 08 Mar '20

08 Mar '20

Paul Volcker, chairman of the Fed, August 1979 to August 1987: “The American standard of living must decline” And indeed it has, just as the Aussie dollar has been gutted, so too has the US fiat. Paul Adolph Volcker Jr. https://en.wikipedia.org/wiki/Paul_Volcker Rabobank: "The Key Reason We Are In This Mess Is Due To Volcker" https://www.zerohedge.com/markets/rabobank-key-reason-we-are-mess-due-volck… John Maynard Keynes: "There is no subtler, no surer means of overturning the existing basis of society than to debauch the currency. The process engages all the hidden forces of economic law on the side of destruction, and does it in a manner which not one man in a million is able to diagnose." https://www.zerohedge.com/news/2019-12-09/end-epoch-report-8-dec The End of an Epoch, Report 8 Dec A fundamental change: "The Fed has gone from the financial bubble’s hostage to its guardian." https://www.zerohedge.com/markets/trapped-when-will-we-know-they-lost-contr… Trapped (When Will We Know 'They' Lost Control?) "As asset markets have become so large, relative to the real economy, their turbulence determines the economic outlook and not, as is normally the case, the other way around. This is why the Fed has cut interest rates during the trade war, even with unemployment at historic lows. It views the ensuing market turbulence as a threat to the economy. The Fed has gone from the financial bubble’s hostage to its guardian." ... So why would the Fed worry about any "threat to the economy"? Could it be that about half a quintillion fiats of debt, ultimately "owed" to the BIS, via the Fed, is the control mechanism upon the world, used to dictate to parliaments, militaries and the people generally, what systems we are to have - what systems of government, which "regimes" must be overthrown by "our" militaries, and which financial instruments (e.g. debt vs credit paper issuance or "fiat printing") we are allowed to use ('member JFK briefly, just prior to his death, fired up the Greenback 'credit paper' printing press)? Why would the BIS insist that the entire world (minus NK, Iran and Venezuela, surprise surprise) is only allowed to print debt based fiats, and not credit based fiats? Could it be that the BIS and its (((owners))) want to pretend they own the world, and all of us too, and don't want us to have liberty, freedom, all those sorts of good things? If the BIS/Fed had actually managed to subdue NK, Iran and Venezuela, along with Iraq and Libya (remember Saddam and Qaddhafi), then the global hegemonic order might have been considered done, and the USD reset, and issuance of a New World Order debt based fiat, could have proceeded aplan. But Putin was not Saddam'ed, Qadhafi'ed or JFK'ed, and he stood by Syria, and effectively Iran, and has very publicly stated that nations have a right to their sovereignty, and that Russia values her own sovereignty very highly. So now it's a multi polar world and TPTB are jostling for power and control in the aftermath of their epic "all chips on the table" NWO failure. Perhaps this is the underlying economic/power reason that we remain in a kind of limbo? Perhaps TPTB cannot bear to reset the USD fiat system thus hastening the multi polar world, and are just zombie-ing along pitifully? ------ Imagine for moment, entirely hypothetically mind you, that you yourself are Monti Burns gleefully rubbing his hands together about a half a quintillion USD fiats "owed" to you, or rather, to the BIS. Now imagine that instead of real and substantial relationships built up over decades, you'd merely enslaved, bombed into submission, and indebted those 99% of nations that ARE a part of the BIS Federal Reserve system, and so all thinkers / observers in the world, are fundamentally pissed off with the way things are, and are just waiting for the bell to toll on the USD as they issue national currencies and finally shake off the cobwebs of the BIS? Would you not, in this entirely ficticious hypothetical, be a little annoyed that you 500 trillion fiats of debt owed to you, were about to "go up in smoke" the minute this debt based fiat system collapses under its exponential thus mathematically pre-ordained weight? Wouldn't this all be just, slightly annoying? And so perhaps you'd even consider lowering interest rates to less than zero and printing the firetruck out of those USD fiats, just to keep the bubble inflated while you try, vainly and pathetically, to figure out a better exit strategy? Not an enviable position to be in - from a purely "strategic problem space" perspective of course, since you still own all the relevant banks, media houses, corporations, militaries and governments. But still. Half a f@#king quintillion fiat dollars about to go up in smoke! Damn dude! What a decision to have to make?! What would Jesus do? What would you do? -- Seven day challenge muffas :D Put your dignity first, heh? ;)

1 2

Bruce Schneier Whores For CoronaVirus Hysteria
by Razer 08 Mar '20

08 Mar '20

This article is full of independently unverified information and lies about Russian disinformation campaigns. Considering Schneier is a known US intelligence agency asset that's not surprising. The US government is sowing panic and hysteria to cripple China's ability to do business globally, based on vaporware statistics and conjecture regarding the outcome of what basically amounts to a COLD. I mean... You don't REALLY want to have to take out a loan to buy your next pair of sweatpants, or mortgage you house to afford an iPhone, do you? That's what would happen (ok, so it's a bit exaggerated) if the US actually was stupid enough to try standard trade war tactics, so instead it's Hybrid Economic war by that old tried and true INSTITUTIONAL SLANDER, and the US media, seeing a FORTUNE to be made sensationalizing it, followed along like the WHORES they are. How Hackers and Spies Could Sabotage the Coronavirus Fight Intelligence services have a long history of manipulating information on health issues, and an epidemic is especially tempting for interference. Why aren’t we better prepared? https://foreignpolicy.com/2020/02/28/hackers-spies-coronavirus-espionage/

1 0

Coronavirus Fears Are The Crisis
by Razer 08 Mar '20

08 Mar '20

"Here’s how to arm yourself for the health catastrophe caused by public anxiety." "First, you should recognize that media is overwhelmingly incentivized to produce negative and alarmist headlines, without the accompanying historical context and analytical expertise needed for the average person to evaluate the severity of those headlines. This is especially problematic for the new coronavirus, because Americans have significantly poor health literacy relative to their knowledge of other public policy issues. And while some news publications may be responsible and balanced, most are operated on business models that privilege sensationalism and deem positive news and positive trends to be not newsworthy. Meanwhile, as several studies of the Ebola crisis demonstrated, it’s best to stay off of social media unless you want to be misinformed or terrified." Micah Zenko: https://foreignpolicy.com/2020/03/04/coronavirus-fears-national-security-cr…

1 0

An Unfixable Flaw Threatens 5 Years of Intel Chips
by jim bell 08 Mar '20

08 Mar '20

https://www.wired.com/story/unfixable-intel-flaw-j-crew-breach-virgin-media… Jim Bell's comment:. Lovely.

1 0

Energy: 100MW Mini Nuke Plants
by grarpamp 08 Mar '20

08 Mar '20

https://medium.com/@EnergyImpact/saving-the-world-just-got-easier-10a57b45e… https://www.open-100.com/ For when you need cheap, safe, long term, commodity standard, 24h baseload in your backyard. #OpenHW

1 0

WikiLeaks CIA Vault 7 Projects Documents
by John Young 07 Mar '20

07 Mar '20

To supplement the Joshua Schulte trial documentation, a collection of the Vault 7 Projects Documents hosted by WikiLeaks: https://cryptome.org/2020/03/WikiLeaks-CIA-Vault-7-Projects-Documents.zip (149MB) Aggregated from: https://wikileaks.org/vault7/document/ While many are classified Secret,Top Secret, NF, largest batch of (S//NF) is in UCL / Raytheon to exploit popular commercial programs with help from Raytheon.

1 0

UFO 'Bigger Than Earth' Flying Past the Sun 'Spotted' by NASA Observation Mission - Sputnik - Ezekiel's wheels
by Zenaan Harkness 07 Mar '20

07 Mar '20

Does Ezekiel return? Did he ever leave? Given that all UFOs are "just conspiracy theories," we know this can be nothing other than a weather balloon. STEREO "just happened" to stop working just 4s in, and "just happened" to start working again once this object was no longer in view. Sometimes a few seconds slip into the public stream. We live in interesting times... UFO 'Bigger Than Earth' Flying Past the Sun 'Spotted' by NASA Observation Mission https://sputniknews.com/viral/202003061078494363-ufo-bigger-than-earth-flyi… The development comes weeks after a camera at the International Space Station spotted an unknown cone-like object that was flying upward. NASA’s STEREO observation mission has spotted what fans of conspiracy theories said is a gigantic UFO flying past the Sun. The incident itself occurred on 29 February [2020], but the footage of it was posted just recently on the channel “Hidden Underbelly 2.0” dedicated to mysterious events and sightings. According to the host, STEREO’s camera filmed the humongous object for four seconds after which it turned off and began working only after the UFO passed. The "humongous object" appears to be bigger than Mercury, Venus, and the Earth. "You can tell this thing doesn’t look like our space station, no way. It doesn’t look like any satellite that I have seen. To be honest, when I first saw the footage I thought: Ezekiel’s Wheel! It’s very similar – the circle with a cross in it", the host said. The host refers to a saying in the Book of Ezekiel, where the prophet spoke about a flying chariot, which he described as a “wheel in the middle of a wheel”. NASA has not yet issued a response to the issue. youtube-dl http://www.youtube.com/watch?v=0SQFhJ7umFo -F ------->> 20200307@16:17:41 <<------- [youtube] 0SQFhJ7umFo: Downloading webpage [youtube] 0SQFhJ7umFo: Downloading video info webpage WARNING: video doesn't have subtitles [info] Available formats for 0SQFhJ7umFo: format code extension resolution note 249 webm audio only tiny 56k , opus @ 50k (48000Hz), 1.08MiB 250 webm audio only tiny 74k , opus @ 70k (48000Hz), 1.42MiB 140 m4a audio only tiny 130k , m4a_dash container, mp4a.40.2@128k (44100Hz), 2.66MiB 251 webm audio only tiny 147k , opus @160k (48000Hz), 2.81MiB 160 mp4 256x144 144p 80k , avc1.4d400c, 30fps, video only, 1015.07KiB 278 webm 256x144 144p 98k , webm container, vp9, 30fps, video only, 1.73MiB 242 webm 426x240 240p 129k , vp9, 30fps, video only, 1.47MiB 133 mp4 426x240 240p 151k , avc1.4d4015, 30fps, video only, 1.84MiB 243 webm 640x360 360p 250k , vp9, 30fps, video only, 2.71MiB 134 mp4 640x360 360p 394k , avc1.4d401e, 30fps, video only, 4.65MiB 244 webm 854x480 480p 426k , vp9, 30fps, video only, 4.40MiB 135 mp4 854x480 480p 739k , avc1.4d401f, 30fps, video only, 8.68MiB 247 webm 1280x720 720p 800k , vp9, 30fps, video only, 8.15MiB 136 mp4 1280x720 720p 1042k , avc1.4d401f, 30fps, video only, 14.08MiB 248 webm 1920x1080 1080p 1632k , vp9, 30fps, video only, 20.48MiB 137 mp4 1920x1080 1080p 1931k , avc1.640028, 30fps, video only, 24.51MiB 18 mp4 640x360 360p 489k , avc1.42001E, mp4a.40.2@ 96k (44100Hz), 10.04MiB 22 mp4 1280x720 720p 815k , avc1.64001F, mp4a.40.2@192k (44100Hz) (best) youtube-dl http://www.youtube.com/watch?v=0SQFhJ7umFo -f248+251

2 1

Tinfoil Chat
by coderman 07 Mar '20

07 Mar '20

https://github.com/maqp/tfc Tinfoil Chat (TFC) is a [FOSS](https://www.gnu.org/philosophy/free-sw.html)+[FHD](https://www.gnu.or… [peer-to-peer](https://en.wikipedia.org/wiki/Peer-to-peer) messaging system that relies on high assurance hardware architecture to protect users from [passive collection](https://en.wikipedia.org/wiki/Upstream_collection), [MITM attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) and most importantly, [remote key exfiltration](https://www.youtube.com/watch?v=3euYBPlX9LM). TFC is designed for people with one of the most complex threat models: organized crime groups and nation state hackers who bypass end-to-end encryption of traditional secure messaging apps by hacking the endpoint. State-of-the-art cryptography TFC uses [XChaCha20](https://cr.yp.to/chacha/chacha-20080128.pdf)-[Poly1305](https://cr.yp.to/mac/poly1305-20050329.pdf) [end-to-end encryption](https://en.wikipedia.org/wiki/End-to-end_encryption) with [deniable authentication](https://en.wikipedia.org/wiki/Deniable_encryption#Deniable_… to protect all messages and files sent to individual recipients and groups. The symmetric keys are either [pre-shared](https://en.wikipedia.org/wiki/Pre-shared_key), or exchanged using [X448](https://eprint.iacr.org/2015/625.pdf), the base-10 [fingerprints](https://en.wikipedia.org/wiki/Public_key_fingerprint) of which are verified via an out-of-band channel. TFC provides per-message [forward secrecy](https://en.wikipedia.org/wiki/Forward_secrecy) with [BLAKE2b](https://blake2.net/blake2.pdf) based [hash ratchet](https://www.youtube.com/watch?v=9sO2qdTci-s#t=1m34s). All persistent user data is encrypted locally using XChaCha20-Poly1305, the key of which is derived from password and salt using [Argon2id](https://github.com/P-H-C/phc-winner-argon2/blob/master/argon2-spe…, the parameters of which are automatically tuned according to best practices. Key generation of TFC relies on Linux kernel's [getrandom()](https://manpages.debian.org/testing/manpages-dev/getrandom.2.e…, a syscall for its ChaCha20 based [CSPRNG](https://en.wikipedia.org/wiki/Cryptographically_secure_pseudorandom…. Anonymous by design TFC routes all communication exclusively through the [Tor](https://2019.www.torproject.org/about/overview.html.en) anonymity network. It uses the next generation ([v3](https://trac.torproject.org/projects/tor/wiki/doc/NextGenOnions)) [Tor Onion Services](https://2019.www.torproject.org/docs/onion-services) to enable P2P communication that never exits the Tor network. This makes it hard for the users to accidentally deanonymize themselves. It also means that unlike (de)centralized messengers, there's no third party server with access to user metadata such as who is talking to whom, when, and how much. The network architecture means TFC runs exclusively on the user's devices. There are no ads or tracking, and it collects no data whatsoever about the user. All data is always encrypted with keys the user controls, and the databases never leave the user's device. Using Onion Services also means no account registration is needed. During the first launch TFC generates a random TFC account (an Onion Service address) for the user, e.g. 4sci35xrhp2d45gbm3qpta7ogfedonuw2mucmc36jxemucd7fmgzj3ad. By knowing this TFC account, anyone can send the user a contact request and talk to them without ever learning their real life identity, IP-address, or geolocation. Protected geolocation makes physical attacks very difficult because the attacker doesn't know where the device is located on the planet. At the same time it makes the communication censorship resistant: Blocking TFC requires blocking Tor categorically, nation-wide. TFC also features a traffic masking mode that hides the type, quantity, and schedule of communication, even if the network facing device of the user is hacked. To provide even further metadata protection from hackers, the Internet-facing part of TFC can be run on [Tails](https://tails.boum.org/), a privacy and anonymity focused operating system that contains no personal files of the user (which makes it hard to deduce to whom the endpoint belongs to), and that provides [additional layers of protection](https://github.com/Whonix/onion-grater) for their anonymity. First messaging system with endpoint security TFC is designed to be used in hardware configuration that provides strong [endpoint security](https://en.wikipedia.org/wiki/Endpoint_security). This configuration uses three computers per endpoint: Encryption and decryption processes are separated from each other onto two isolated computers, the Source Computer, and the Destination Computer. These two devices are are dedicated for TFC. This split [TCB](https://en.wikipedia.org/wiki/Trusted_computing_base) interacts with the network via the user's daily computer, called the Networked Computer. In TFC data moves from the Source Computer to the Networked Computer, and from the Networked Computer to the Destination Computer, unidirectionally. The unidirectionality of data flow is enforced, as the data is passed from one device to another only through a free hardware design [data diode](https://en.wikipedia.org/wiki/Unidirectional_network), that is connected to the three computers using one USB-cable per device. The Source and Destination Computers are not connected to the Internet, or to any device other than the data diode. https://camo.githubusercontent.com/be91382229596f4ae22250ed86091265e80ff6d7… [TFC data diode](https://www.cs.helsinki.fi/u/oottela/wiki/readme/data_diode.jpg) Optical repeater inside the [optocouplers](https://en.wikipedia.org/wiki/Opto-isolator) of the data diode enforce direction of data transmission with the fundamental laws of physics. This protection is so strong, the certified implementations of data diodes are typically found in critical infrastructure protection and government networks where the classification level of data varies between systems. A data diode might e.g. allow access to a nuclear power plant's safety system readings, while at the same time preventing attackers from exploiting these critical systems. An alternative use case is to allow importing data from less secure systems to ones that contain classified documents that must be protected from exfiltration. In TFC the hardware data diode ensures that neither of the TCB-halves can be accessed bidirectionally. Since the protection relies on physical limitations of the hardware's capabilities, no piece of malware, not even a [zero-day exploit](https://en.wikipedia.org/wiki/Zero-day_(computing)) can bypass the security provided by the data diode. How it works With the hardware in place, all that's left for the users to do is launch the device specific TFC program on each computer. https://camo.githubusercontent.com/fc12f37e9af2ef375c0c55ddf739e8900de383e2… [System overview](https://www.cs.helsinki.fi/u/oottela/wiki/readme/overview.png) In the illustration above, Alice enters messages and commands to Transmitter Program running on her Source Computer. The Transmitter Program encrypts and signs plaintext data and relays the ciphertexts from Source Computer to her Networked Computer through the data diode. Relay Program on Alice's Networked Computer relays commands and copies of outgoing messages to her Destination Computer via the data diode. Receiver Program on Alice's Destination Computer authenticates, decrypts and processes the received message/command. Alice's Relay Program shares messages and files to Bob over a Tor Onion Service. The web client of Bob's Relay Program fetches the ciphertext from Alice's Onion Service and forwards it to his Destination Computer through his data diode. Bob's Receiver Program then authenticates, decrypts and processes the received message/file. When Bob responds, he will type his message to the Transmitter Program on his Source Computer, and after a mirrored process, Alice reads the message from the Receiver Program on her Destination Computer. Why keys and plaintexts cannot be exfiltrated The architecture described above simultaneously utilizes both [the classical and the alternative data diode models](https://en.wikipedia.org/wiki/Unidirectional_network#Applications) to enable bidirectional communication between two users, while at the same time providing hardware enforced endpoint security: - The Destination Computer uses the classical data diode model. This means it can receive data from the insecure Networked Computer, but is unable to send data back to the Networked Computer. The Receiver Program is designed to function under these constraints. However, even though the program authenticates and validates all incoming data, it is not ruled out malware couldn't still infiltrate the Destination Computer. However, in the event that would happen, the malware would be unable to exfiltrate sensitive keys or plaintexts back to the Networked Computer, as the data diode prevents all outbound traffic. - The Source Computer uses the alternative data diode model. This means it can output encrypted data to the insecure Networked Computer without having to worry about being compromised: The data diode protects the Source Computer from all attacks by physically preventing all inbound traffic. The Transmitter Program is also designed to work under the data flow constraints introduced by the data diode; To allow key exchanges, the short elliptic-curve public keys are input manually by the user. - The Networked Computer is designed under the assumption it can be compromised by a remote attacker: All sensitive data that passes through the Relay Program is encrypted and signed with no exceptions. Since the attacker is unable to exfiltrate decryption keys from the Source or Destination Computer, the ciphertexts are of no value to the attacker. https://camo.githubusercontent.com/ae719d8f7c576a880b4d16607608780e2d1eceba… [Exfiltration security](https://www.cs.helsinki.fi/u/oottela/wiki/readme/attacks.png) Qubes-isolated intermediate solution For some users the [APTs](https://en.wikipedia.org/wiki/Advanced_persistent_threat) of the modern world are not part of the threat model, and for others, the requirement of having to build the data diode by themselves is a deal breaker. Yet, for all of them, storing private keys on a networked device is still a security risk. To meet these users' needs, TFC can also be run in three dedicated [Qubes](https://www.qubes-os.org/) virtual machines. With the Qubes configuration, the isolation is provided by the [Xen hypervisor](https://xenproject.org/users/security/), and the unidirectionality of data flow between the VMs is enforced with strict firewall rules. This intermediate isolation mechanism runs on a single computer which means no hardware data diode is needed. Supported Operating Systems Source/Destination Computer - Debian 10 - PureOS 9.0 - *buntu 19.10 - LMDE 4 - Qubes 4 (Debian 10 VM) Networked Computer - Tails 4.0 - Debian 10 - PureOS 9.0 - *buntu 19.10 - LMDE 4 - Qubes 4 (Debian 10 VM) More information [Threat model](https://github.com/maqp/tfc/wiki/Threat-model) [FAQ](https://github.com/maqp/tfc/wiki/FAQ) [Security design](https://github.com/maqp/tfc/wiki/Security-design) Hardware Data Diode [Breadboard version](https://github.com/maqp/tfc/wiki/TTL-Data-Diode-(breadboard)) (Easy) [Perfboard version](https://github.com/maqp/tfc/wiki/TTL-Data-Diode-(perfboard)) (Intermediate) [PCB version](https://github.com/maqp/tfc/wiki/TTL-Data-Diode-(PCB)) (Advanced) How to use [Installation](https://github.com/maqp/tfc/wiki/Installation) [Master password setup](https://github.com/maqp/tfc/wiki/Master-Password) [Local key setup](https://github.com/maqp/tfc/wiki/Local-Key-Setup) [Onion Service setup](https://github.com/maqp/tfc/wiki/Onion-Service-Setup) [X448 key exchange](https://github.com/maqp/tfc/wiki/X448) [Pre-shared keys](https://github.com/maqp/tfc/wiki/PSK) [Commands](https://github.com/maqp/tfc/wiki/Commands) [Update log](https://github.com/maqp/tfc/wiki/Update-Log)

1 0

Re: _oronavirus: _hread
by John Young 07 Mar '20

07 Mar '20

If these words are posted the _FO glimpsed passing the _un will _____. Moreover, ______. _edactions rule over _erbosity, er, _ule. _3. At 10:26 AM 3/7/2020, Cecilia Tanaka wrote: >On Sat, Mar 7, 2020, 10:26 John Young ><<mailto:jya@pipeline.com>jya(a)pipeline.com> wrote: >Do not post anything related to _oronavirus, _OVID-19, -019nCoV, >_ehovah, _od, _evil, _ezzlebub,Â _rump, _eth Rich, _ssange, >_ikiLeaks. _ust _TFU. _hx. > > >Sorry for asking, but why specifically these subjects? > >Thanks in advance!Â Kisses and hugs!Â <3

2 1