- cypherpunks - lists.cpunks.org

US GA 2018 SB 315 Veto: Cheers of Victory Should Not Blind to Exploits Underneath
by grarpamp 09 May '18

09 May '18

https://www.eff.org/deeplinks/2018/05/victory-georgia-governor-vetoes-short… http://www.legis.ga.gov/legislation/en-US/Display/20172018/SB/315 https://gov.georgia.gov/press-releases/2018-05-08/deal-issues-2018-veto-sta… " Senate Bill 315 proposes to create the crime of unauthorized computer access ... Georgia’s ... technology, particularly the presence of U.S. Army Cyber Command, the state’s Cyber Range ... further ... need for ... debate ... it would be a crime ... the legislation ... led to concerns regarding national security implications ... while intending to protect against online breaches and hacks, SB 315 may ... hinder the ability of government ... to do so ... For the foregoing reasons, I VETO SB 315. -- Gov. N. Deal " The EFF's and Gang of 55's two objection reasons were not explicitly noted in identifiable detail. Yet were two other fishy "national security" reasons injected and "particularly" underlying the veto? Consider the one definition of overloaded term "protect" that makes sense in context is govt's surely claimed power to "defensively" [1], spy, breach and hack you and everyone else on the planet (decency "knows" no authority is granted by either of those). Such actions of course can never be allowed to be a crime, lol. So who really won? The objectors? The particulars, against a future principled prosecutor? [1] Which some might call top secret offense from such SCI facilities, at least until caught, then being oops, not defense. "The work done this session ... provides ... for continued collaboration on this issue." Expect to see bill again, with all sorts of "Deals" carved out for state. "Shall be punished" So they can never find work making cyber actually secure... what a brilliant startup plan for cybersecurity. "sensitive or private information of government" That pesky sunlight...

1 0

Fwd: [tor-relays] Secret Google and Microsoft Blacklists affecting non tor IPs if on same server.
by grarpamp 09 May '18

09 May '18

---------- Forwarded message ---------- From: gustavo <gfa(a)zumbi.xyz> Date: Tue, May 8, 2018 at 10:14 PM Subject: Re: [tor-relays] Secret Google and Microsoft Blacklists affecting non tor IPs if on same server. To: tor-relays(a)lists.torproject.org On Wed, May 09, 2018 at 01:04:35AM +0100, gerard(a)bulger.co.uk wrote: > > I just seen that my abuse email address gets a shower of abuse reports when I send an email to this tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> most mailing lists break spf, they send email on your behalf from an ip that is not in your spf record most mailing lists break dkim because they modify headers, therefore the DKIM-Signature, even the list may add a signature on top of yours ARC helps with that, i dunno if mailman supports it > > The forwarded emails do not come from me so fails DKIM/DMARC when A forwards to B C's email, the from is rewriten to match A, email lists "forward" emails but keep the From intact > > From: tor-relays <tor-relays-bounces(a)lists.torproject.org <mailto:tor-relays-bounces@lists.torproject.org> > On Behalf Of Paul Templeton > Sent: 09 May 2018 00:32 > To: tor-relays(a)lists.torproject.org <mailto:tor-relays@lists.torproject.org> > Subject: Re: [tor-relays] Secret Google and Microsoft Blacklists affecting non tor IPs if on same server. > > > >> Really annoying that my email server IP has never sent anything, no relay, no spam, almost no traffic so what is stated is not true and even their own tools reports nothing. >> Is Google looking at MAC addresses to do this? How can we stop it? I really do not want to run another server just for tor as that costs! MAC addresses are local to your network segment (your provider datacenter) there is no way google knows them. are you sure tor and your smtp aren't using the same IPv6 address/ranges? > > > I don't think its you Tor node - it just google. I note that your DMARC, SPF, etc are set and valid. You mail server is not an open relay. I maintain a few mail servers and run into these types of problems. There is no real reason for them. Microsoft is the worst - no logic what so ever. +1 since this is already off-topic for -relays, i want to spam about an email privacy project: https://autocrypt.org/ -- IRC: gfa GPG: 0X44BB1BA79F6C6333 _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

1 0

raising children - rough-housing - Warren Farrell and Jordan Peterson
by Zenaan Harkness 08 May '18

08 May '18

OK, this is upwards of 2 hrs, so well beyond the attention deficit limit of many, but probably worth while for those with the time: https://www.youtube.com/watch?v=v5O_FLUWYmg The absolute necessity of fathers - Warren Farrell_JB Peterson (default ~650MiB, so perhaps " -f43 " which is roughly a third the size)

1 0

[MINISTRY] (((Western))) oligarch-o-plutocraps “flipping out like a meth addict whose stash just got stolen”
by Zenaan Harkness 07 May '18

07 May '18

Yes, it's quite a time to be alive where the plutocrappygolliwogarchs and their stool-for-brains deep state tools are “flipping out like a meth addict whose stash just got stolen” - you know, the ole "Russia evil, Western governments godly and anything standing in our way is RUSSIA, RUSSIA, BAD BAD BAD‼": https://www.zerohedge.com/news/2018-04-30/uk-deep-state-panics-turns-russia… UK 'Deep State' Panics: Turns Russia-Narrative On Political Left …This is as fascinating as it is infuriating. By attacking literally anything which poses an obstacle to the loose alliance of western plutocrats and secretive government agencies, the social engineers who are fueling this Russia hysteria are actually closer than ever before to openly admitting that the west is truly ruled by those plutocrats and agencies.

2 1

Linux RNG Fail, Facebook Fake Clear, SQL Concurrency
by grarpamp 07 May '18

07 May '18

https://bugs.chromium.org/p/project-zero/issues/detail?id=1559 https://news.ycombinator.com/item?id=16969325 http://www.interdb.jp/pg/pgsql05.html

2 3

Intel Buggered Again
by grarpamp 06 May '18

06 May '18

https://www.heise.de/ct/artikel/Exclusive-Spectre-NG-Multiple-new-Intel-CPU… https://www.guru3d.com/index.php?ct=news&action=file&id=27160 Shit's so bad even poking blindly at closed hardware provides for endless fail. https://www.blackhat.com/docs/us-17/thursday/us-17-Domas-Breaking-The-x86-I… https://news.ycombinator.com/item?id=16938423 https://s21.q4cdn.com/600692695/files/doc_financials/2018/Q1/Q1-2018_Earnin… https://cdn.mos.cms.futurecdn.net/T768R6FxUhKKRzhyQjJVwn-650-80.jpg "We have best *secure* performance" -- Intel lol Jim Keller at Intel https://news.ycombinator.com/item?id=16934007 Power9 https://news.ycombinator.com/item?id=16829593 #OpenFabs , #OpenHW , #OpenSW , #OpenDev

1 0

Cryptocurrency: Asicboost Update, Defensive Patent Licenses
by grarpamp 06 May '18

06 May '18

https://www.asicboost.com/ https://arxiv.org/pdf/1604.00575 https://patents.google.com/patent/CN205121469U/en https://blockchaindpl.org/ https://www.coindesk.com/former-bitmain-chip-designer-seeks-to-revoke-minin… https://blog.bitmex.com/defensive-patent-licence/ https://halongmining.com/blog/2018/03/06/bdpl-offering-announcement/ https://qrfsolutions.com/offering-announcement-for-blockchain-defensive-pat… https://defensivepatentlicense.org/ Opening AsicBoost for Defensive Use March 1, 2018 We are announcing today, that we committing to the Blockchain Defensive Patent License, meaning the AsicBoost patent will be available under these terms once the PCT patent has been granted. We would like to share the thought process that has lead us to this decision. AsicBoost is an innovation that allows more energy efficiency when grinding SHA256 based proof-of-work used in Bitcoin mining. There are two forms of AsicBoost, one that provides optimizations by manipulating the merkle tree, and the other way which ultimately uses two bits from the nVersion field. The merkle method is also known as “covert AsicBoost” because it is difficult to detect. This method has received a lot of bad publicity in recent times because the method is easier to perform with low transaction count, and thus, smaller or empty blocks. Some variants of this merkle grinding also interfere with so called coinbase commitment schemes which negatively impacts protocol changes on Bitcoin. We have strong reason to believe that some manufacturers of mining equipment have been secretly using this covert method to evade detection by the patent holder and gain unfair advantage over others but not revealing what they were doing, and without making it known to the patent holders. Conversely, version-rolling method of AsicBoost is completely transparent in the blockheader of each boosted Bitcoin block. The method has no negative side-effects, like encouraging miners to mine less transactions and thus smaller blocks. A feature of Bitcoin is permissionless participation, and patents are a genuine concern to the Bitcoin community if wielded in a way to stifle competition. This could have a centralizing effect on the protocol and mining, and ultimately impact the security and guarantees afforded by decentralization. There are a number of what we consider, dangerous patents, in the mining space, which could be used to suppress mining competition. Hardware patents are a particular concern because they are agnostic to POW algorithm changes. At the time of writing, the largest mining manufacturer is using a hardware patent against a competing mining manufacturer. While the patent is considered prior art by most, it is a granted patent, and thus backed by state enforcement. We believe this sets a dangerous precedent and could escalate in the future. The patent concerned can be considered an essential patent because it governs how power is efficiently distributed on hash cards (the board which host the mining chips). Defensive Licensing schemes aim to incentivize patent holders to pool their patents in such a way to create a disincentive for patent aggressors. The most famous is the Defensive Patent License. However, on closer investigation, it appears the license scheme is wanting when applied to blockchain technology that required strong guarantees of decentralization. A fantastic analysis was made by BitMEX Research Labs in a recent publication. We believe AsicBoost is such an important an innovative patent that, if licensed defensively, can become a force for good to protect decentralization in Bitcoin. At this point, it is clear that covert AsicBoost does not serve the interests of Bitcoin due to the negative incentives outlined, however, version-rolling AsicBoost has none of these drawbacks, and is additionally more efficient than covert merkle grinding. No matter how efficient a mining machine is made at hardware level, version-rolling AsicBoost will always deliver more efficiency when done correctly. If this method of version-rolling is used by a large portion of the hash-rate, there may be no escaping the need for all mining equipment manufacturers to use it to remain competitive. As such, today, we are offering the AsicBoost patent under the Blockchain Defensive Patent License in the hope that it will both discourage patent aggression in the mining space and encourage others to join the licensing regime. This will create a powerful patent pool and protect the interests of Bitcoin, which is in the best long-term interest of everyone in the ecosystem. Lastly, because we have spent considerable resources on acquiring and opening the patent for the benefit of the Bitcoin community, in return we welcome donations towards our costs. If you would like your contribution to be publicly acknowledged on this page, please contact us on donations(a)asicboost.com. Bitcoin BTC donation address: 3PMR379VLzfnGHck9BLdE1HuhdXUm96JHj. Our BDPL offering announcement can be found here. For more inquiries, please use our contact form. Offering Announcement for Blockchain Defensive Patent License March 1, 2018 This Offering Announcement is issued by Little Dragon Technology LLC, California, USA (“Licensor”). All capitalized terms herein have the meaning as defined in the applicable numbered version of the Blockchain Defensive Patent License. Licensor hereby commits to offer all of its Patents and future patents under the Blockchain Defensive Patent License version 1.0 or greater (“License”) to any BDPL User. The Licensor shall refer to the License for the procedures on granting and accepting such License. Date: March 1, 2018 Licensor’s contact information is: licensing(a)asicboost.com Little Dragon Technology LLC c/o Getech Law LLC attn Jun Ye, Esq. 203 N LaSalle, Suite 2100 Chicago, IL 60601 USA AsicBoost Press Release March 24, 2016 A breakthrough invention in Bitcoin mining named AsicBoost allows to improve the total cost of hashing 20%. The patent-pending invention by Timo Hanke and Sergio Demian Lerner is applicable to any type of chip design for Bitcoin ASICs. AsicBoost is a patent-pending method to improve the efficiency and cost of Bitcoin mining by approximately 20%. Through gate count reduction on the silicon AsicBoost improves two essential Bitcoin mining cost metrics simultaneously and by a similar factor: the energy consumption (Joule per Gh) and the system cost ($ per Gh/s). With the system cost being proportional to the capital expenses of a Bitcoin mine and the energy efficiency being proportional to its operating expenses, AsicBoost reduces the total cost per bitcoin mined by approximately 20%. For the Bitcoin mines of the future AsicBoost will make all the difference between a profitable and an unprofitable mine. The AsicBoost method is based on an ingenious new way to process work items inside and outside of the Bitcoin mining ASIC. It involves a new design of the SHA 256 hash-engines inside the ASIC and an additional pre-processing step as part of the mining software outside the ASIC. AsicBoost’s hash-engine design is compatible with design philosophies such as “rolled cores” and “fully pipelined cores”. The performance gains are achieved on top of all other optimizations that an existing design may have achieved through optimized timing, pipelining, path balancing, custom cells and full-custom design, etc. Inventor Timo Hanke describes the idea behind AsicBoost as follows: “Through clever pre-processing and crafting of the work that is sent to the chip, the ASIC is allowed to re-use about one quarter of the information that would otherwise be created and discarded on a continuous basis internally to the hashing cores. A hashing core adopted for AsicBoost can save up to one quarter of the gates by re-using that information over time or by sharing it with other hashing cores.” More information and a technical description of the AsicBoost method can be found on http://asicboost.com. For licensing inquiries or consulting on the adoption of AsicBoost please contact asicboost(a)gmail.com. About Timo Hanke Timo is a mathematician and cryptocurrency expert. He has been a long-time academic researcher with a PhD in mathematics, a long-time Bitcoin enthusiast and contributor, and has had the role of CTO at a Bitcoin ASIC manufacturer. About Sergio Demian Lerner Sergio is a renowned security and cryptocurrency expert and researcher, inventor, contributor to the Bitcoin core software, the mastermind behind several inventions in Blockchain technology, security advisor to the Bitcoin Foundation, co-founder of RootStock Labs, among many other things.

1 0

Re: [Cryptography] A quicker block chain? ... Thunderella
by grarpamp 06 May '18

06 May '18

On Sat, May 5, 2018 at 2:19 PM, Tom Mitchell <mitch(a)niftyegg.com> wrote: > On Sat, May 5, 2018 at 12:07 AM, grarpamp <grarpamp(a)gmail.com> wrote: >> Per the "arbitrary and capricious whim" of moderator, cryptocurrency >> discussions... those by definition being a fully charter compliant part of >> "the technical, social, political, security, privacy, legal, >> multinational aspects of cryptosystems"... >> further free and fair discourse on same, are banned from this list. >> Posting about cryptocurrency here is chilled and deprecated, thus >> your work is at risk and highly discouraged. You may freely discuss >> all said aspects, and more, of cryptocurrency without censorship >> on the cypherpunks(a)cpunks.org list. >> Including whatever else came from the conference: >> https://cyber.stanford.edu/bpase18 >> Blockchain Protocol Analysis and Security Engineering 2018 >> >> >> 'Messages that use the term "crypto" to refer to currencies will not be >> forwarded by the moderators.' >> >> Now of course more rational people would say that context is everything... >> https://www.youtube.com/watch?v=tQQFA9YXCZ0 >> >> We talkin crypto ;) > Block chain is vastly bigger than a crypto currency. > It is evolving into a distributed ledger system and has potential > in the secure (cryptographicly secure) foundation of supply > chain management and even banking. Yes, obviously. There will quite possibly always be applications independant from the currency chains, but curiously, perhaps they need not be. > It does not need to obfuscate and hide transactions or the identity. Blockchains absolutely must develop various forms of obfuscation / hiding / anonymity, even more properly... fully cryptographically private transactions, and fully decentralized survivable resistant transports, including end to end encryption, overlay networks, out of band possibilities... all enabled deployed and used where and as deemed needed by the users, not anyone else... if they are to fulfill many of the philosophical promises that they were born from in the first place. Further, "supply chain", "banking"... generally "business", are all private by default. Don't believe it, go walk up and ask any player in those sectors to just give you their business records. They'll immediately laugh you straight out their door. They'll have public what they want public, private what they want private, and blockchain tools that fill their needs from one end of that to the other. Turn privacy on or off, use pointless corporate / government owned shitcoins or not, that's up to the user, but *do not* try to claim cryptographic privacy coins / blockchain privacy features are universally invalid. > However reliability and correctness does mater for business systems. Sure, unless fuzzy logic, random outcomes, bitrot, and attacks have benefit therein. Funny that some crypto mining papers suggest possibility of more business profit from acceptable errors. Since the list needs injection of other points of view, such as the need for privacy, debunking crypto antis / FUDsters, etc and more "crypto" and cryptocurrency talk as called for in its charter above, yet such has been documented as being censored from the list... go join cypherpunks list where you can speak freely about *crypto* and cryptocurrencies and even cryptosporidium if you want ;)

1 0

Anarcho Mashups
by grarpamp 05 May '18

05 May '18

https://www.youtube.com/watch?v=XQqZ9b0S0BY https://www.youtube.com/watch?v=Q4zjSeBUTvg

2 2

Blockchain World Conf Jul 2018: Showdown - John Mcafee to Integrate Jamie Dimon Into Crypto
by grarpamp 05 May '18

05 May '18

http://bwcevent.com/ https://www.youtube.com/watch?v=FArEMzvIoIw Published on May 4, 2018 John McAfee, famed 'bad boy of blockchain', rocked the financial establishment earlier this week when he called upon Jamie Dimon, CEO of Morgan Stanley, to accept a scathing invitation and challenge to join him in a live, televised debate, to be held in July, where Mcafee will be headlining the Blockchain World Conference (BWCevent.com) in Atlantic City NJ, directly in Jamie Dimon’s back yard. McAfee, with all of his usual candor, made no bones about how serious a threat the Crypto Currency and Blockchain Movement is not only to Dimon, but also to his financial empire. McAfee, who will be the keynote speaker at The Blockchain World Conference, and will also be receiving a Lifetime Achievement Award at the event, spared no descriptive color in his attempt to entice Dimon to join him on stage in what many are saying would be the single most dramatic showdown between today’s financial establishment leaders and the virtual currency craze that is poised to disrupt it. McAfee, who has been no stranger to controversy over the years, may be ushering in the most controversial era of his career in technology and fintech. Billed widely as the “Clash of The Financial Titans”, the proposed showdown will be televised globally by Live Stream and through all major financial news networks. Word of this potential, history making, showdown has driven speculation that the BWC event will sell out well before it is set to begin at Harrah’s Hotel, Casino, Spa Resort on July 11-13th in Atlantic City, NJ. It is widely reported that the host venue has been forced to ramp up security in the event that this interaction between such influential figures escalates to the point of rocking world markets. https://www.youtube.com/watch?v=W3FvwNPuTSc

1 0