- cypherpunks - lists.cpunks.org

NIST To Ban SMS Two-Factor Auth
by grarpamp 26 Jul '16

26 Jul '16

https://pages.nist.gov/800-63-3/sp800-63b.html DRAFT NIST Special Publication 800-63B Digital Authentication Guideline Authentication and Lifecycle Management This document and its companion documents, SP 800-63-3, SP 800-63A, and SP 800-63C, provide technical and procedural guidelines to agencies implementing electronic authentication to choose and implement effective authentication processes based on risk. The recommendation covers remote authentication of users (such as employees, contractors, or private individuals) interacting with government IT systems over open networks. It defines technical requirements for each of the three authenticator assurance levels. If the out of band verification is to be made using a SMS message on a public mobile telephone network, the verifier SHALL verify that the pre-registered telephone number being used is actually associated with a mobile network and not with a VoIP (or other software-based) service. It then sends the SMS message to the pre-registered telephone number. Changing the pre-registered telephone number SHALL NOT be possible without two-factor authentication at the time of the change. OOB using SMS is deprecated, and will no longer be allowed in future releases of this guidance.

1 0

Tech Bashes Trump
by grarpamp 25 Jul '16

25 Jul '16

https://shift.newco.co/an-open-letter-from-technology-sector-leaders-on-don… We are inventors, entrepreneurs, engineers, investors, researchers, and business leaders working in the technology sector. We are proud that American innovation is the envy of the world, a source of widely-shared prosperity, and a hallmark of our global leadership. We believe in an inclusive country that fosters opportunity, creativity and a level playing field. Donald Trump does not. He campaigns on anger, bigotry, fear of new ideas and new people, and a fundamental belief that America is weak and in decline. We have listened to Donald Trump over the past year and we have concluded: Trump would be a disaster for innovation. His vision stands against the open exchange of ideas, free movement of people, and productive engagement with the outside world that is critical to our economy — and that provide the foundation for innovation and growth. ...

3 4

Open Phones
by grarpamp 25 Jul '16

25 Jul '16

"Open"... being relative, yet interesting... https://neo900.org/ Are you tired of all those closed mobile platforms? Do you want to truly own a device that has the ability to do whatever you want, just like your PC? The Neo900 project aims to provide a Fremantle (Maemo™ 5) compatible successor to the N900, with a faster CPU, more RAM and an LTE modem. This is all based on a free, mature and stable platform - the GTA04. We'll provide complete, ready-to-use devices, as well as motherboard replacements for your current devices. Most importantly, the Neo900 is an open platform, carrying on in the tradition of the Openmoko project. Neo900 will support all operating systems available for GTA04 (QtMoko, SHR, Debian, Replicant, ...) and should serve as a great platform for porting systems like Maemo, Ubuntu or Firefox OS - or even for writing your own one! We bring the hardware, you choose the operating system.

5 5

From conspiracy theorists/ factists, to "Putin's useful idiots"
by Zenaan Harkness 25 Jul '16

25 Jul '16

The MSM - drumming home meme after meme: Presenting "Putin's Useful Idiot": Anyone Who Disagrees With The Establishment http://russia-insider.com/en/politics/presenting-putins-useful-idiot-anyone…

2 1

US Bipartisan Defend Fourth Amendment
by grarpamp 25 Jul '16

25 Jul '16

https://www.eff.org/deeplinks/2016/07/bipartisan-caucus-launches-house-defe… On matters implicating privacy, such as mass surveillance or the powers of investigatory agencies, Congress has too often failed to fulfill its responsibilities. By neglecting to examine basic facts, and deferring to executive agencies whose secrets preclude meaningful debate, the body has allowed proposals that undermine constitutional rights to repeatedly become enshrined in law. In last week’s launch of a new bipartisan Fourth Amendment Caucus in the House, however, the Constitution has gained a formidable ally. lol.

1 0

Fw: <nettime> Sex, onions and CIA
by Zenaan Harkness 25 Jul '16

25 Jul '16

----- Forwarded message from 41x1sy+e6f8r3fbkbc08(a)guerrillamail.com ----- Date: Sun, 26 Jun 2016 18:27:39 +0000 From: 41x1sy+e6f8r3fbkbc08(a)guerrillamail.com To: "nettime-l(a)mail.kein.org" <nettime-l(a)mail.kein.org> Subject: <nettime> Sex, onions and CIA (assuming that most nettimers don't wade in the dark pastebin swamps) (for the related CIA agent inside Tor story, see http://pastebin.com/WPAmqkW8 ) ONLY BACKGROUND. NOT FOR PUBLICATION. I am in the security community and work on Tor. There are number of facts behind the campaign to destroy Jake that I know of. Some are personal. Some are political. Some are cultural. 1) the US government is responsible for the majority of Tor financing. This funding stream was put at risk by Jake's publication of NSA documentation in Der Spiegel and his cooperation with WikiLeaks and the CCC. Jake's constant mention of WikiLeaks and Snowden to use Tor was also an important irritation. 2) Shari's appointment as the Executive Director of Tor; the entrance of Alison Macrina 3) Jake's internal opposition to Tor hiring a CIA contractor last year. This is still not public knowledge 4) The rise of the "micro-aggression/trigger/safe space/victim" American subculture 5) A sexual culture clash between Germany and the United States; the regular use of MDMA in the Berlin scene 6) Jake, although a vulnerable person in broader US society, has "rockstar" social capital in a subculture with scarce resources (women, prestige, finance) 7) The creeping "NGO"ization of Tor 8) Old enemies and rivals of Jake trying to payback; Jake has slept with hundreds of women and men. Some he has not kept good relations with. There are many envious sexually unsuccessful men, angry lovers & their partners and professional & political rivals. Over time, in this small pond and its extended community, they found each other and formed a bloc to "Jake destroy". 9) Jake has an extreme attention seeking, exhibitionist personality; He often uses sexual jokes or sexual swagger to attract attention and leaps on the spotlight. Roger's strategy was to allow Jake to take the light so that others were safe in obscurity. The three main reasons why the US government fund Tor are (1) so people in China and Iran have access to US propaganda sites (2) for its spies to conduct hacking attacks (GCHQ Snowden docs show Tor as part of the GCHQ attack suite (3)to cover the traces of US agents surfing sites. Jake has been a threat to Tor financing for years and is seen as such within Tor and espcially by Shari. His flashy work in Der Spiegel with NSA docs and collaboration with Snowden, WikiLeaks & Poitras drove people mad with fear and jealousy. Jake caused hundreds of thousands of dollars worth of funding problems in past years and financing fears until his resignation. For several years people have looked for a way to get him out. Jacob stayed in the DPRK and Cuba earlier this year, which must have increased concern for Tor funding. Last year Jake internally outed an attempted CIA hiring. This also caused bad blood between Jake and those those who supported the hiring. Nick Farr also was a paid hacking consultant for the CIA. Roger interned at the NSA and his wife has a security clearance and accepted money from DARPA/Pentagon to de-anonymize people. Although it is not considered within Tor that Roger is a risk, he is comfortable with these close links with intelligence power, which is a risk if it is the standard for Tor staff. That the US government is happy for Shari and Roger's spouses to have security clearances is also unsettling. It is publicly known that Shari husband worked for the Pentagon (he is quoted in Forbes as previous tech director for DoD). People in Tor say that he worked for the NSA on the XKeyscore mass interception system. He is now officially a VP at Amazon, but it is said he still advises the government. Andrea has false rape accusations in the past including about a journalist from Pando. She is also an exhibitionist. Meredith Patterson has a campaign to get Jake to commit suicide. She has a long-standing feud with Jake and used it distract from her own role in pushing her husband Len to suicide. Most people in Tor believe that Meredith or Andrea are behind the "@TimeToDieJake" account (which became "@VictimsOfJake"). On June 13, it tweeted "@ioerror Tick tock. Looking forward to the days ahead? We are. But don't worry. There's an easy way out. Just ask Len." Andrea and Meridith are girlfriends / lovers. Andrea was born male must as flashy "side with women" to gain acceptance. Both are exhibitionists. The mad Meredith, cheered by Andrea, took an actual hammer to lunge at Englishman "Sam the Techie" at a 2013 summer camp. The cause was sexual allegation gossip. Then they defamed him together with another heavy exhibitionist griefer "Asher Wolf". They made him a pariah and drove him from the "community". He disappeared in 2014 and was last seen with a lost mind, homeless. They feel untouchable power from this. Isis is jealous of credit for Tor development and angry about Jake's rejection. She is also an ideological player and majored in feminist theory. In Tor it is believed that Isis up the attack site. Alison ("Sam") is the centralizer for "victims". She collects and massages stories. Alison, a new addition to the Tor, is a "female Jake" very promiscuous, socially dominant, sex on the table, and a Tor evangelist. She only had Jake in the way of her becoming Jake. The Texas lawyer who wrote the first so-called "analysis" of Jake's statement is Alison's lover (she admits on Twitter). Many who support the action, if the reasons are not obvious, are the lovers of Alison or others. A fake address, jacobappelbaum(a)yandex.ru was created and pushed the fake website to tor-talk mailing list (the message is still there) during the initial attack launch. Recent reviews for Poitras' "risk" were very flattering to Jacob, driving rivalries. Many people were getting jealous of Jake basking in limelight, especially some of the newer Tor developers who felt he was showered with credit for their hard work. They did not accept Roger's strategy. The media often misreported that Jake was the "lead" Tor developer which angered them; he developed very little. The attack is a serious attempt, abetted by bad media to make Jake look like a serial rapist with language and semantic tricks. They conflate "incidents" of plagiarism, propositioning, telling off-color jokes or violations of privacy with a single incident of alleged "rape" to falsely suggest there is a dozen. There is only one claim where the allegation, if true, can be categorized as any kind of "rape". An anonymous Internet post by "River" claims that Jake had sex with her in front of others when she was intoxicated when she had previously indicated she wanted to have sex, but privately. Nasty gossip about women is spread by the women in the Tor community. Alison had her own affair with Jake so "River" was a rival. Alison and others tried to diminish her sexual social value by spreading gossip that she had sex with Jake in front of others. Sexual competition between the women in the enlarged Tor community is hard and sneaky. While there is an oversupply of men, giving women sexual power and entitlement, there is a severe undersupply of handsome sane men. Globe-trotting charismatic hacker rebels have to no in-group pressure to marry. Freedom is more virtuous than stability. A few months later (as indicated in the post) River came to say that after speaking to others she understood that Jake had "raped" her. This helped to counter the (mostly false) gossip that she was a "slut". The new narrative: that she was the victim of drug and sexual predation. Whatever the truth of the assertions of this incident, it has been proven that those campaigning against Jake have outrageously used this single anonymous claim of conditional consent rape without evidence or witnesses to paint him to be the raper of a dozen. Ironically, it is those with a reputation for promiscuity, like Alison, who are they most aggressive spreaders of sexual gossip. Why? Becuase spreading sexual gossip about a female reduces her social-sexual value (which is still often linked to sexual scarcity). This undermines not only the competition, but also makes life easier for the really promiscuous, because it gives rise to the false impression that female promiscuity is the norm. Women are angry when they manage to track down the source of sexual gossip about them. But the socially manipulative gossips in the Tor comunity, including Allison and Jillian York EFF (also called highly promiscuous and the central player in EFF in this saga) have an extremely disingenuous pretext: "concern". Under the fancy dress of "concern" about successive men, they have reduced the sexual-social value of dozens of women that I know of. It is an evil thing. Despite Jake living three years in exile in Germany, it is Americans that express discomfort. There is an incestuous connection of people between EFF, Tor & FPF; Shari was Executive Director of EFF is now on the board of the EFF and has become the Executive Director of Tor. Tor was an EFF project. Trevor Timm is now FPF Executive Director but was at EFF. York and many other anti-Jake people are at EFF; some have even made public anti-Jake statements. However EFF represents Jake as his lawyers. Incredible. Both Tor and EFF have performed in an extremely unprofessional manner. Their spectacular failure is an expression of a cultural and ideological cul-de-sac, where State Department funding and hi-tech pseudo-anarchists embrace the shifting sexual norms of "safe space" Twitter identity politics. The mixuture? It is in their lungs. It fills the air. They are blind. The cannot see their own cultural imperialism. Sad. ----- End forwarded message -----

2 1

Re: UK gov says new Home Sec will have powers to ban end-to-end encryption
by Peter Fairbrother 25 Jul '16

25 Jul '16

On 17/07/16 12:48, Zenaan Harkness wrote: > Please, if you want to contribute to comprehending this new UK act, you > will need to slow it waaay down, because you are writing conclusions, > assumptions, with minimal quotes from the act, and making assertions > based on these foundation things, and these foundation things are > contradictory, and your conclusions are contradictory. > > Perhaps it's the British way, or perhaps the intention behind the > passing of this Act is so nefarious, that the only way they could pass > it was to be as obtuse, opaque and contradictory as it is, so that, > ultimately, they (the parliament and those behind it - "the Lords > spiritual and the Lords temporal") can wreak their mischief on the > 'unsuspecting' people. Being kind, you might say they put a good face on it. Being more realistic, they try and mostly succeed in slipping it through with the nastier parts unnoticed. That's what they did with RIPA, the previous act. Oh, and afaict there are no contradictions anywhere in what I have said. > Peter, if your intention be genuinely "pro" the people and "pro" human > rights or at least "pro" understanding/comprehending, my assessment is > that so far, you are diving into the trap this Act sets and intends for > you - i.e. that you be "unsuspecting" of evil intentions behind it, > trusting in the government, trusting in those who drafted it, trusting > in your "Lords temporal" - If you think I trust any of them, you are sadly mistaken. The Lords however are slightly better than the Home Office, who write the bills and tell their patsies in the Lords and Commons what to say the bills mean - which is frequently quite different to what they actually mean. However I am expert - repeat expert - in reading the actual damn Bills, and working out what they actually say. Better than the members of the Lords or Commons, better than the politicians who tell the Home Office cunts what to put in the Bills, better than the DPPs who apply them - most of whom don't read the actual Bills, just summaries, because the Bills are so complicated - and I am approaching as good as the people who write the damn things. If I don't go through all the details here it's just because the bills are so obscure and complex it would take megabytes and days of arguments. Then you would have to know the general legal framework behind the wording of a Bill, and the general legal framework of the UK, before knowing what it meant. And even then you might occasionally be surprised by a decision, some Judges just make stuff up as they go along, and not everything which should be appealed is. But you are welcome to read it yourself, it is available at: www.publications.parliament.uk/pa/bills/lbill/2016-2017/0040/17040.pdf Enjoy! -- Peter F

3 2

Religion in images and words
by grarpamp 25 Jul '16

25 Jul '16

On 7/23/16, Rayzer <rayzer(a)riseup.net> wrote: > You never DID get back to me about where you got that perverse > interpolation of some salafist screed about the rules of Goat-Fucking, Many proclaimed followers of any particular religion book are exactly hypocritical. Doesn't help that many religion books are flawed in many different ways, many most key of which is reliance upon the unproveable. Under such circumstances, perverse interpolations should be expected and prevalent. > The basic tenets of the religion of hate analyzed... > https://pbs.twimg.com/media/CoEZh2JWcAAgj7E.jpg:large Mere word count, lacks context, context is everything. > Also see: Open Letter to al-Bagdadi and ISIS by Muslim scholars from > around the world. The best home for religion may be in comparative / religious studies, analyzed and open lettered by those who follow either none or all. https://en.wikipedia.org/wiki/List_of_religions_and_spiritual_traditions Here are some screeds to keep people busy, don't miss your prayer time and thus burn in hell... https://en.wikipedia.org/wiki/Philosophy https://en.wikipedia.org/wiki/Science https://en.wikipedia.org/wiki/Belief https://en.wikipedia.org/wiki/Faith https://en.wikipedia.org/wiki/Religion https://en.wikipedia.org/wiki/Fermi_paradox https://en.wikipedia.org/wiki/Global_catastrophic_risk https://en.wikipedia.org/wiki/Space_colonization https://www.youtube.com/results?q=religion+debunked https://www.youtube.com/results?q=richard+dawkins https://www.youtube.com/results?q=molyneux+religion https://www.youtube.com/watch?v=8r-e2NDSTuE https://www.youtube.com/watch?v=1FJkVEnFW5Q https://www.youtube.com/watch?v=0Rqw4krMOug Then again, the net has lots more... https://www.youtube.com/watch?v=WJTJhsHYDDQ https://www.youtube.com/results?q=richard+dawkins+owned https://www.youtube.com/watch?v=rEfYLBzFwFY https://www.youtube.com/watch?v=DwcLEby4w3M Why did you take such great pains to conceal yourself from us? Which god are you? https://www.youtube.com/watch?v=XbGs_qK2PQA

1 0

Dying BlackBerry Tows Govt Line On Crypto
by grarpamp 25 Jul '16

25 Jul '16

http://www.theinquirer.net/inquirer/news/2465381/blackberry-ceo-disturbed-b… https://apple.slashdot.org/story/16/03/15/2045231/what-apple-can-learn-from… BlackBerry CEO John Chen said he is "disturbed" by Apple's tough approach to encryption and user privacy, warning that the firm's attitude is harmful to society. Earlier this year, Chen said in response to Apple resisting the government's demands to unlock an iPhone belonging to one of the San Bernardino shooters: "We are indeed in a dark place when companies put their reputations above the greater good." During BlackBerry's Security Summit in New York this week, Chen made several more comments about Apple's stance on encryption. "One of our competitors, we call it 'the other fruit company,' has an attitude that it doesn't matter how much it might hurt society, they're not going to help," he said. "I found that disturbing as a citizen. I think BlackBerry, like any company, should have a basic civil responsibility. If the world is in danger, we should be able to help out." He did say there was a lot of "nonsense" being reported about BlackBerry and its approach to how it handles user information. "Of course, there need to be clear guidelines. The guidelines we've adopted require legal assets. A subpoena for certain data. But if you have the data, you should give it to them," he said. "There's some complete nonsense about what we can and can't do. People are mad at us that we let the government have the data. It's absolute garbage. We can't do that." Chen also warned that mandatory back doors aren't a good idea either, hinting at the impending Investigatory Powers Bill. "There's proposed legislation in the U.S., and I'm sure it will come to the EU, that every vendor needs to provide some form of a back door. That is not going to fly at all. It just isn't," he said. It should be noted that blackberry is losing government sales due in part to its lineup of ancient and unsupported phones.

2 1

Comms and Messaging Tools
by grarpamp 25 Jul '16

25 Jul '16

On 7/24/16, Cecilia Tanaka <cecilia.tanaka(a)gmail.com> wrote: > Please, consider using Signal or Telegram instead whatsapp. I will test > Wire this week for fun. Tests are fun but user still must compile wide viewpoint on tools and tool itself before using anything to suit appplication. Random search... https://twitter.com/matthew_d_green/status/582916365750669312 https://twitter.com/alyssarowan/status/582244684216561665 https://eprint.iacr.org/2015/1177.pdf https://ricochet.im/ https://tox.chat/ https://blogs.fsfe.org/h2/2016/05/31/why-privacy-is-more-than-crypto/ https://danielpocock.com/how-many-mobile-phone-accounts-will-be-hijacked-th… > They are not totally secure apps, but certainly are a bit better than > whatsapp. I am a fan of Durov brothers' work, but I am still waiting for > an answer about this security fail for curiosity: > > https://twitter.com/telegram_macos/status/756989757801005057

1 0