- cypherpunks - lists.cpunks.org

Florida -is- part of USA right? - Lee County jailed an election fraud whistleblower
by Zenaan Harkness 11 May '16

11 May '16

https://it.slashdot.org/story/16/05/09/1811210/security-expert-jailed-for-r… Information Security Professional David Levin was arrested 3 months after reporting un-patched SQL injection vulnerabilities ( http://www.theregister.co.uk/2016/05/09/researcher_arrested_after_reporting… ) in the Lee County, Florida Elections Office run by Sharon Harrington, the Lee County Supervisor of Elections. Harrington's office has been in the news before for voting systems problems (for example in during the 2012 election, 35 districts in Lee County had to remain open 3 hours past the closing of polls due to long lines and equipment issues ( http://fcir.org/2013/12/11/center-for-american-progress-action-fund-electio… ), wasting $800,000 to $1.6 million of taxpayer money on incompatible iPads for which her office is facing an audit ( http://editions.lib.umn.edu/electionacademy/2015/06/18/floridas-lee-county-… ). Rather than fixing the issues in their systems, they chose to charge the whistleblower with three third-degree felonies. The News Press also has several related interviews ( http://www.news-press.com/story/news/crime/2016/05/04/estero-man-arrested-h… ). --- Seems corruption and mal intent is systemic in America.

3 2

Re:
by John Young 10 May '16

10 May '16

Great, "Greg." Log on to the IP address, click on journal. Prepare to buy new hard disk, hopelessly try to clean out back-ups, avoid for life the suckers you infected. Then try to get out of jail from the phishing gangsters who entrapped you by getting into your TEMPEST-hardened computer setup and threatening to send to your relatives and customers their implanted vile kiddie porn collection as if yours and report to the FBI "Greg's" vast cache of stolen celebrity accounts and hundreds of nyms, Tor logs, USG break-ins, counterfeit Bitcoins, comsec dirty work, rattings to LE, and, listen, hear what's buzzing over your bunker. battering your steel gate. At 10:20 AM 5/10/2016, you wrote: >Most interested in the Journal file. Could someone have a look? >On May 10, 2016 3:53 AM, "John Young" ><<mailto:jya@pipeline.com>jya(a)pipeline.com> wrote: >At 02:13 AM 5/10/2016, Greg Moss imposter phished: ><http://219.234.6.206:8080/>http://219.234.6.206:8080/ > > >Which produces: > >Web attack: Microsoft OleAut32 RCE CVE-2014-6332 > >

2 2

Conscientious ISP "process servers" - charge RIAA mafia for service on customer
by Zenaan Harkness 10 May '16

10 May '16

>From this slashdot article: https://yro.slashdot.org/story/16/05/08/0030230/the-pirate-bay-now-blocked-… (which subject title is deceptive, what's new on slashdot eh) comes this little comment conversation: https://yro.slashdot.org/comments.pl?sid=9079015&cid=52068815 1) " I'd like to elaborate on your good advice: Downloading torrents isn't a crime. It's a civil matter, there is no reason you can't contact police, however the precautions that make a site immune to civil action happen to make them difficult to pursue in criminal cases as well. The argument could be made that their advertising revenues discourage them from displaying malvertisements, however the short lifecycle of a modern torrent site results in little incentive to do anything but maximize revenues before the guillotine drops. So in practice: turn off your javascript and assuming they are using l337 zero-day hacks on your browser's incognito mode... " 2) " Felderal law says you're wrong. https://www.law.cornell.edu/uscode/text/17/506 And https://www.law.cornell.edu/uscode/text/18/2319 I gotta love the "what I do is not illegal!!!" downloaders who can't be bothered to actually check the laws before giving bad, bad, rationalizations for their behavior. " 3) " They send tons of emails to us. We contact them to pay to be their process server and they hang up the phone. Piracy is when someone makes copies and sells them. So far no bottom dwelling copyright spammer has agreed to pay for us to deliver their letter. We have never received a single subpoena. They think we have to do it for free here in the land of the fee. Even if one finally did buck up and pay for us to deliver them they would still be handled as a civil suit. Feel free to shill away how wrong I am but I have real world knowledge about how cheap these bottom feeders are. "

2 1

Trump vs. 21 Million
by grarpamp 10 May '16

10 May '16

https://www.reddit.com/r/Bitcoin/comments/4ik3of/donald_trump_us_will_never… http://www.cnn.com/2016/05/09/politics/donald-trump-national-debt-strategy/…

1 0

What happened to Pond?
by mrnobody＠mail-on.us 08 May '16

08 May '16

First of all I'd like to say hello, since it's the first time I write in this mailing list. Now to the matter at hand. Do you remember the project Pond? https://github.com/agl/pond I actually never used it, but when back in the day I read the design it seemed like a new approach to mail, encrypted and careful with metadata. Now the project sees unmaintained, and it seems Adam Langley deleted the webpage of the project (pond.imperialviolet.org) from its personal webpage (imperialviolet.org) An old post about the project for those who doesn't know it. https://www.imperialviolet.org/2013/11/10/pond.html ------------------------------------------------- ONLY AT VFEmail! - Use our Metadata Mitigator to keep your email out of the NSA's hands! $24.95 ONETIME Lifetime accounts with Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail Options!

1 0

Re: [Cryptography] Proof-of-Satoshi fails Proof-of-Proof.
by Tony Arcieri 07 May '16

07 May '16

On Fri, May 6, 2016 at 12:06 PM, Ron Garret <ron(a)flownet.com> wrote: > > But with all forms of DH based signatures, a random number is generated > and that affects the signature value. In effect, every signature has a salt > value. Interesting sidebar: ECDSA nonces were one of the sources of Bitcoin's transaction malleability. The (massive pile of hacks that is) segregated witness feature being added to Bitcoin has an added side effect of removing signatures from the hash of a transaction, and with it the associated malleability. All that said, if you're designing a new system today, pick Ed25519. -- Tony Arcieri

1 0

Craig Wright suspends campaign to be the 2016 Satoshi Nakamoto
by Rayzer 06 May '16

06 May '16

Aussie entrepreneur Craig Wright backed off from his offer to produce more evidence that he is Bitcoin creator Satoshi Nakamoto. He's also wiped his website, except for a final, rather ominous message. http://boingboing.net/2016/05/05/craig-wright-reneges-on-offer.html

2 1

Cryptome
by Ryan Carboni 03 May '16

03 May '16

What is Cryptome? "Cryptome welcomes documents for publication that are prohibited by governments worldwide, in particular material on freedom of expression, privacy, cryptology, dual-use technologies, national security, intelligence, and secret governance -- open, secret and classified documents -- but not limited to those." A trollish statement saying, "everything in short". Cryptome insinuated that Protonmail is less secure after using an israeli reverse proxy ( https://web.archive.org/web/20160318180805/https://cryptome.org/2015/11/pro… ). How is it less secure? Protonmail's response: https://protonmail.com/support/knowledge-base/protonmail-israel-radware/ It says something if Fox News allowed a favorable AP report on Cryptome on their website: http://www.foxnews.com/us/2013/03/09/older-less-flashy-than-wikileaks-crypt… https://web.archive.org/web/20160329170005/http://www.theregister.co.uk/201… John Young states that Wikileaks is a criminal organization for needing money. Compare and contrast Cryptome and Wikileaks: The Wau Holland Foundation collected $1.2 million for Wikileaks, and later no longer could recieve donations from Paypal, while it's charitable status was challenged and revoked by German authorities. Cryptome is now a non-profit.

5 4

Needs more hardware hacking dox
by Steve Kinney 03 May '16

03 May '16

Annual token on-topic post: Hardware considerations are inherent to the creation and solution of practical crypto problems, because good crypto is best solved by attacking the platforms it runs on. The 'internet of things' creates a massive comms attack surface, also best solved at the platform level i.e. signals discipline. When the scope of a project includes non-attribution by 3rd parties, hit and run network access via tightly controlled hardware is the only thing that can work against a well funded State adversary. I don't see much about hardware hacking on CPunks. I know that folks who have worked on digital circuit design and manufacture are lurking out there, also a bunch of ham radio people. Things they take for granted are utterly mysterious to lesser mortals, including "computer experts" focused on software and networking. Field tested cheat sheets on security oriented, low tech DIY hardware mods are among the most subversive things that can be published on the technical front. CPunks subscribers may or may not personally need those docs for the Nameless Mission or Big Show in our lifetimes, but others do need them now. How many lusers put tape over their laptop camera lens, but neglect to cut the pins on the microphone? How many people even know their shiny new car has a GPS receiver and an IP capable two-way radio enabling remote sabotage, and of these, how many know where the antenna connections are? There's a lot of room to educate a justifiably paranoid public on practical aspects of these and similar matters, if anyone has the time and interest to make that a Thing. :o)

5 9

Re: [Cryptography] Craig Wright is Satoshi Nakamoto
by Robert Hettinga 02 May '16

02 May '16

> On May 2, 2016, at 2:17 PM, Erik Granger <erikgranger(a)gmail.com> wrote: > > I'll believe it when he signs arbitrary messages with satoshis key. No signature, no story. Spend the coins. Pics or it didn’t happen. Cheers, RAH

2 1