- cypherpunks - lists.cpunks.org

Snowden and Publisher Sued by USGov over FreeSpeech of Book: Permanent Record
by grarpamp 17 Sep '19

17 Sep '19

https://www.justice.gov/usao-edva/pr/united-states-files-civil-lawsuit-agai… https://www.justice.gov/usao-edva/press-release/file/1203231/download https://www.aclu.org/press-releases/aclu-comment-edward-snowden-lawsuit https://www.aclu.org/press-releases/aclu-and-knight-institute-challenge-con… https://twitter.com/Snowden/status/1174024719072468996 The government of the United States has just announced a lawsuit over my memoir, which was just released today worldwide. This is the book the government does not want you to read. https://static.macmillan.com/static/holt/permanent-record-edward-snowden/us… Snowden says he never took an oath of secrecy, he took an oath to defend the Constitution "from all enemies, foreign and domestic." "I'm not asking for a parade. I'm not asking for a pardon, I'm not asking for a pass. What I'm asking for is a fair trial. And this is the bottom line that any American should require." "They want the jury strictly to consider whether these actions were lawful or unlawful, not whether they were right or wrong, And I'm sorry, but that defeats the purpose of a jury trial."

1 0

Trivial to fingerprint through V8 if only time was used
by Ryan Carboni 17 Sep '19

17 Sep '19

V8 uses a linear PRNG, depending on the precision of system time fed, V8 is vulnerable to the same attacks PHP was regarding a weak seed: it could be derived through a brute force search or by reversing the outputs. Given that now that time stamps in browsers use reduced precision, it could be argued that using math.random, V8 is still vulnerable to spectre Never mind that this bug report was closed as working as intended long ago: https://bugs.chromium.org/p/v8/issues/detail?id=2905 Personally I think a reduced round cryptographic function in OFB or something similar would be best. Sent from ProtonMail Mobile

1 0

US or Europe
by Yush Bhardwaj 17 Sep '19

17 Sep '19

Yesterday I had a debate that US is Worst or Europe when it comes to monitoring and tracking. For tracking Europe is best but when it comes to monitoring, noone can beat US because government spies on their citizens as well. Anyone give me any resources where I can read or know more about it. I was told to watch Snowden movie, except that anything any of you know?

1 0

Milton's steganography
by jim bell 17 Sep '19

17 Sep '19

Scholar discovers a hidden message in Milton's 'Paradise Lost' https://mol.im/a/7468455 via http://dailym.ai/android

1 0

Troll Factory game teaches you how fake news is spread & why
by grarpamp 17 Sep '19

17 Sep '19

---------- Forwarded message ---------- From: Jarno Mikael Koponen <jarno.koponen(a)gmail.com> We have here at Yle developed an online game Troll Factory that turns people into professional online trolls in order to help them learn about information wars. You can play the game here: https://trollfactory.yle.fi/ TechCrunch just wrote about the game: This game uses troll tactics to teach critical thinking https://techcrunch.com/2019/09/13/this-game-uses-troll-tactics-to-teach-cri… And: https://twitter.com/ilparone/status/1172491208821788673?s=20 Feel free to share! And would love to hear your thoughts! -Jarno M. Jarno M. Koponen Head of AI & Personalization, Yle News Lab E: jarno.koponen(a)yle.fi W: +358401290074 L: https://fi.linkedin.com/in/jarnokoponen T: https://twitter.com/ilparone

4 3

Jim Bell says: "I got stuck in prison for 13 years and Pamela Anderson didn't visit me ONCE!!!"
by jim bell 16 Sep '19

16 Sep '19

https://abcnews.go.com/Entertainment/pamela-anderson-julian-assanges-health… Actress and model Pamela Anderson told "The View" co-hosts on Friday that WikiLeaksfounder Julian Assange is physically "not so good" as he serves his 11-month sentence at a high security British prison.The long-time confidante of the whistleblower expressed concern about Assange's well-being as he still faces possible extradition to the U.S. "His health is really deteriorating. He has lost about 30 pounds I think since I saw him, and he was thin at that point," Anderson told "The View" co-hosts Whoopi Goldberg, Abby Huntsman, Joy Behar, Sunny Hostin and Meghan McCain. Anderson noted that because Assange "wanted to look good" for her, he wore two pairs of sweat pants in an effort to mask his weight loss. "He feels like people won't fight for people if they’re not resilient, and he is the most resilient person I’ve ever met," she said. MORE: ANALYSIS: Making sense of the WikiLeaks CIA hacking exposé Assange skipped bail in 2012 to avoid extradition to Sweden, where he was wanted on sexual assault allegations, which he denied. The charges were subsequently dropped, but Swedish authorities announced they were reopening their investigation in May. After seven years of hiding at the Ecuadorian Embassy in London, Assange was arrested by United Kingdom authorities in April. Nearly one month later in May 1, Assange was sentenced to 50 weeks in prison at Southwark Crown Court in central London. He read a letter to the court apologizing to those who "consider I have disrespected them," adding that he had struggled in difficult circumstances. Following the London arrest, federal U.S. prosecutors unsealed an indictment against him, charging him for allegedly conspiring with former intelligence officer Chelsea Manning in an effort to unlawfully gain access to a government computer in 2010. The breach is considered one of the largest thefts of classified government information in American history. Assange as well as his supporters have claimed he had no role in hacking Democratic documents or harvesting other government secrets, maintaining that he functioned as a journalist and publisher. The charges against Assange continue to raise concerns about the ripple effects it will have on press freedom.

6 13

Git/Mtn for FreeBSD, PGP WoT Sigs, Merkel Hash Tree Based
by grarpamp 16 Sep '19

16 Sep '19

For consideration... SVN really may not offer much in the way of native internal self authenticating repo to cryptographic levels of security against bitrot, transit corruption and repo ops, external physical editing, have much signing options, etc. Similar to blockchain and ZFS hash merkle-ization, signing the repo init and later points tags commits, along with full verification toolset, is useful function. https://www.monotone.ca/ https://en.wikipedia.org/wiki/Monotone_(software) https://git-scm.com/ https://en.wikipedia.org/wiki/Git Maintaining the kernel's web of trust https://lwn.net/Articles/798230/ Distributing kernel developer PGP keys via pgpkeys.git https://lkml.org/lkml/2019/8/30/597 Signing patch flow https://lwn.net/Articles/737093/ Compromised security happens https://lwn.net/Articles/464233/ https://security.stackexchange.com/questions/67920/how-safe-are-signed-git-… https://stackoverflow.com/questions/28792784/why-does-git-use-a-cryptograph… http://fossil-scm.org/index.html/doc/trunk/www/hashpolicy.wiki https://ericsink.com/vcbe/html/cryptographic_hashes.html https://svn.haxx.se/dev/archive-2015-06/0052.shtml http://git.661346.n2.nabble.com/Verifying-the-whole-repository-td1368311.ht… https://shattered.io/ https://www.youtube.com/watch?v=G8wQ88d85s4 https://en.wikipedia.org/wiki/Data_degradation https://git-scm.com/docs/git-fsck https://marc.info/?l=git&m=118143549107708 https://en.wikipedia.org/wiki/Comparison_of_version-control_software https://en.wikipedia.org/wiki/Deterministic_compilation https://www.monotone.ca/monotone.html#Trust-Evaluation-Hooks How does one know their entire copy of repo obtained on DVD, "mirror", or elsewhere cryptographically matches the authoritative repo... that any commits were actually signed off on... or that any reproducible builds are even reproducing the main repo... etc... cannot be done without secure crypto infrastructure at the very core. "User also knows that even if someone should break into the shared hosting server and tamper with the database, they won’t be able to inject malicious code into the project, because all revisions are signed by the team members, and he has set his Trust Evaluation Hooks so he doesn’t trust the server key for signing revisions. In monotone, the important trust consideration is on the signed content, rather than on the replication path by which that content arrived in your database." Note also CVS, which some BSD's still use (ahem: Open, Net), is even worse than SVN with zero protection at all in any component regarding this subject. It really time to migrate repo tech to year 2020.

1 0

Libertarian Party
by grarpamp 16 Sep '19

16 Sep '19

Before the other two parties take your home for themselves too... https://www.youtube.com/watch?v=WjnrgGjqLzo https://www.youtube.com/watch?v=n6h7fL22WCE https://www.youtube.com/watch?v=yw3RiMdS7sE https://www.youtube.com/watch?v=rYJjB3EYqxo

4 7

Libertarian: UnZoning Architecture in TX
by grarpamp 15 Sep '19

15 Sep '19

https://www.youtube.com/watch?v=n-zESacteu4

1 0

Cody Wilson probation, Joshua Yabut not guilty insanity
by grarpamp 15 Sep '19

15 Sep '19

On 9/14/19, Steven Schear <schear.steve(a)gmail.com> wrote: > https://www.theverge.com/2019/9/12/20862993/cody-wilson-defense-distributed… In addition to the lying sugardaddy whore who was never tried, it was also about mommy fud and rats plainly post event hating on firearms, freedom, anarchy, philosophy *after* they figured out who the guy she sold to was (read their statement carefully), and nevermind the charges revolved only around age of the lying whore, apparently not on any theme of rape consent violence gun force play etc... https://arstechnica.com/tech-policy/2019/09/victims-mother-excoriates-cody-… https://cdn.arstechnica.net/wp-content/uploads/2019/01/WilsonIndictmentDec2… Hopefully the whole story will come out someday. And Cody will find voice again. Regardless, activists and everyone else both men and women, playing with traps of all sorts is just begging for trouble. Joshua Yabut https://www.nbc12.com/2019/08/19/man-accused-stealing-armored-vehicle-found…

1 0