- cypherpunks - lists.cpunks.org

SpyCulture: DisInfoWars Podcast by Tom Secker
by grarpamp 02 Dec '19

02 Dec '19

2 1

Re: Questions to Snowden
by Ryan Carboni 02 Dec '19

02 Dec '19

A dumb bastard used by other dumber bastards to make a hash of everything and call it an accomplishment. No doubt he is enjoying his life. To each his own. But what he did was terrible from many perspectives and was a net negative. Next time when he starts a debate he should learn some skills.

1 0

Low speed, p2p, wireless as a secure alternative to SMS and Signal-like services.
by Steven Schear 02 Dec '19

02 Dec '19

By choosing a different physical transport means a different and, I maintain, better set of security tradeoffs become available. Unlike approaches which invariably depend on the Internet and heavily monitored commercial gateways, I propose using infrastructure-less or non-permissioned commercial, single-hop, relays. It's not the electromagnetic spectrum isn't also monitored but that the efficacy of that monitoring is, unlike the former environment, much more limited by physics, channel conditions, information theory and the proper application of tradecraft by possible targets. Both as a hobbyist and professional I've delved into the practicality of utilizing and building on commonly available, even consumer grade, Software Defined Signal Processing (SDSP, the use of the term SDR is verboten in my world due to its inherent regulatory implications) hardware and open source software. My investigations (some openly shared at Cypherpunk-oriented tech conferences) have led me to believe that even a moderate uptake of these SDSP technologies would effectively neutralize most or all SIGINT against parties who aren't already the subject of individual targeting. These technologies aren't some magical new creation but rather the integration and adoption of ideas already well studied and reported in academia but whose implementations are often not openly available for tailoring and testing, mostly due to unfounded fears of regulatory actions. To be continued...

5 17

Re: Virgil Griffith - Crypto Advocate and Educator Arrested at LAX from DPRK
by John Young 02 Dec '19

02 Dec '19

Virgil Griffith v USG https://www.justice.gov/usao-sdny/press-release/file/1222646/download

4 5

Cryptocurrency: You as Debt Money
by grarpamp 02 Dec '19

02 Dec '19

Sherry Jackson ex-IRS https://www.youtube.com/watch?v=3-5x6AqJ3iU anarchast https://www.youtube.com/watch?v=bFNHqelOcnE anarchapulco https://www.youtube.com/watch?v=s1UT2Ms5E2k part1 https://www.youtube.com/watch?v=F9PSYkWIuIs part2 https://www.youtube.com/results?search_query=birth+certificate+enslavement https://www.youtube.com/results?search_query=birth+certificate+slavery Have fun down the rabbit hole :)

2 1

tor stinks, take #376029
by Punk-Stasi 2.0 02 Dec '19

02 Dec '19

https://www.freehaven.net/anonbib/cache/active-pet2010.pdf "Suppose the adversary runs just two routers. If we take into account the way Tor chooses circuits, the size of the network ], and the number of users observed on Tor in one day , we expect the adversary to compromise 15 users at least once in that day. If the adversary provides the top two routers by bandwidth, the expected number of compromised users increases to 9464.1 Thus, the system provides poor anonymity against a wide variety of realistic opponents, such as governments, ISPs," that comes directly from supreme scum-master syverson himself. What's really astounding is that at the same time syverson and the rest of tor shitbags advertise tor as a means for people to "protect themselves against traffic analysis". "

2 3

Zerostash: Zero-metadata object store
by grarpamp 02 Dec '19

02 Dec '19

https://github.com/rsdy/zerostash Zerostash is a deduplicated, encrypted data store that provides native versioning capabilities, and was designed to secure all metadata related to the files, including the exact size of the data that is stored in the containers. Use cases Versioned backups in the cloud, or external hard drives Encrypt and store entire workspaces for fast sync between computer Easily sync & wipe data & encryption programs while travelling Storage and sync backend for offsite backups Threat model Protect data confidentiality, integrity and authenticity The exact size of data should not be known Individual user data shouldn't be attributable on shared storage Once a data is shared, it is no longer secure. Deleting data from the storage should be possible Access to only the key and raw data should not be sufficient for full data compromise

1 0

Cryptocurrency: Anonymous to Invest $75M of Crypto to Develop Privacy Coins and Anon Tech
by grarpamp 02 Dec '19

02 Dec '19

> Is there a location at which these proposals have been published? They are not currently publishing the applications by default because they currently view that as harming potential startups. Though you can send them project press releases for publishing to: chris_unknown_fund(a)protonmail.com There are probably no third party locations because most proposals are likely to be from typical "startup" space that is usually trying to secretly extract money from each other and the market, than giving good things to the world. > Has anyone proposed what we propose doing, building > an anonymization network... done-right? Unknown. But if you're serious about doing anything with them you need to get at least some kind of hello application in now because they have a lot of apps in the pipeline, and they say applications are closed. So it'll have to be something good to bypass the rest. As to some recently mentioned ones... 1) A new general purpose secure *PA resistant internet overlay transport network built from good current and new research, including use of pluggable RF module tech. Many apps can ride. And it should be designed to be a factor stronger than tor, i2p, and all the rest are today. 2) An OpenAudited OpenFab building OpenHW (including CPU, GPU, ASIC, RF, Phones), to run all the OpenSW on. 3) There should be an application for strictly a cryptocurrency... distributed, privacy in protocol by default, cpu transaction mined, no 100GB's of blockchain history only a UTXO state db, and strictly serving only the "currency / money / cash" function, fast lightweight hard, no premine, no support for tokens, contracts, data, or any other bloatware at all, just a plain old fashioned single purpose cash. Maybe multisig and timelock for safer holding, but that's it, the less the better will yield recognition as purely money and reach primary goal of cryptocurrency adoption faster therein. It must be capable of running over anonymous overlay networks. 4) And an application for a genuine fully distributed cross-chain DEX (CCDEX) is a remaining tech that is desperately needed to help complete the cryptocurrency function space. It must be capable of running over anonymous overlay networks. Few want to do 1, 3, or 4, because when done right, there's no profit or control over other people for them to have, and that's how it should be. Though 2 can profit once it gets running, it would be better if it spent its profit to seed independant redundant copies of itself and or other needed projects. So far most of the online chatter seems to be about getting yet more pointless shitcoins off the ground than working on fundamental underlying tech the fund, or at least some of us, would like to see. I'd even help review some of the apps but I'm not in that loop. https://www.unknown.fund/ https://twitter.com/fund_unknown anon_fund(a)protonmail.com chris_unknown_fund(a)protonmail.com

3 3

Nextgen G* Traffic Analysis Resistant Overlay Networks (re Tor stinks)
by grarpamp 02 Dec '19

02 Dec '19

Various wrote: > "seconds of traffic" refers to the global buffer space > and time required for *PA find a solution within it. > I've wondered whether it's just that they need lots of users for cover > traffic. That _was_ a major factor in opening Tor to the public, instead > of restricting it to government users. But that seems unlikely, now, > given that the NSA etc could easily run enough bots on hacked servers. > My guess is that the main reason for them to get as many users as they can is to justify funding. Hell, maybe they even get a percentage of funding directly proportional to number of users/network size. > The Tor rationale for requiring low latency was to make it more > user-friendly and also thereby increase (innocent) traffic. > Unfortunately that came at the cost of easier traffic analysis, as only > the traffic passed within the last 4-5 seconds need be considered. They > tried to balance that out - more traffic plus greater usability vs > easier analysis > Initially the main reason was to increase traffic, in order to make traffic analysis harder. https://metrics.torproject.org/ Tor doesn't use traffic fill, many seem to talk about that from "omg bandwidth" rather than how it could potentially be used. A net that uses fill doesn't necessarily have to be full of 10k-10M+ whatever many users to achieve TA resistance. And even a fill net of just 100 nodes could work well for whatever users it does or doesn't have. The tor network can be quite sparse with voids of low traffic / users. Tor did traffic weighting probabilities to try to counter some of the single user paths that would obviously otherwise be created by pure random routing through such voids. However adversaries can still describe analysis and attacks against users passing strictly through only the most saturated of nodes, it's a bit harder, with fewer options, but still doable. Interestingly, such a weighting system is a gravity well... "more users" just distribute themselves into its available density slots... thus adding "more users" to the network doesn't necessarily make that type of network more secure, they just increase the physical size of the blackhole. Whether the net has 1k or 1M users, they're all going to be within some standard deviation of density that they themselves create among the well... from 1.0 when links are saturated in the singularity, out to 0.0 in voidspace. Users have no real guarantee they will fall into some feelgood safety slot, say around >=0.85, nor does it matter since as above, adversaries can still attack 1.0. A fill network can more readily use random routing, and its smaller volunteer node operators are happier since they have a more equal chance to carry traffic. Fill or non fill, random or not, your path is still subject to both the worst, and the sum of, all the headroom capacities and latencies it traverses... unless you start getting into distributing signalling for that around the network, which is probably a complex task. Tor allows users to pick empty paths if they don't care about voids. Any next generation network should have some user facing path selection knobs to handle censorship and anti-Sybil subscriptions. Also, if they know their endpoints (a local: chat friend, exit website, hidden server), a fill network might allow users to better play off jurisdictional spy buffers and performance bets by selecting local nodes only... whereas a non fill gravity network might leave voids in their region, that the less advanced adversaries in their region might otherwise more easily exploit, thus prohibiting use of local selections to achieve better latency performance, ie: for messaging during a regional / local protest, or for much faster local / guerrilla links for filesharing, etc. This notion of potentially staying local under a fill network, versus being forced to go path out through the gravity well, may also reduce load over virtual intercontinental paths, ie: the network might begin to naturally emulate backbone tiering but with no additional spy buffer risk due to the entire network fill. The Phantom network had some free thinking into developing for users to make such selections metrics over its node set. Tor still blankets users who ask about selecting nodes... with "no", and they secret up anti-Sybil bad-relay ops under "yep tor has that" "dirauths are trusted" "no worries" advertising that tend to keep independant user based efforts to do such things from starting up.

1 0

As Venezuela’s economy plunges, citizens turn to hacking and cybercrime for easy money
by Steven Schear 02 Dec '19

02 Dec '19

https://www.ehackingnews.com/2019/11/as-venezuelas-economy-plunges-citizens…

9 17