- cypherpunks - lists.cpunks.org

Re: Demonstration of a tinc network linked through Tor v3 onions
by grarpamp 02 May '19

02 May '19

>> It can be communitied, or forked. > Seems unlikely. Either can work if people want them to, that is the very point of opensource if so merited. >>> Reported bugs have been closed without action. >> What ticket numbers are of interest? > https://trac.torproject.org/projects/tor/ticket/24902 > https://trac.torproject.org/projects/tor/ticket/19966 > https://trac.torproject.org/projects/tor/ticket/24973 > I can't find the one where they explicitly said that it's not worth fixing > v2-specific bugs. Statements always nice to have for reference. Bugs not needing architecture rework should be fixed. >>> Fetches of v2 rendezvous descriptors fail, and so OnionCat services are "unavailable". > Analysis? Not really, just lots of notices logs. Basically the same stuff as > in #19966. Lots of it. Any tickets should be revalidated using current release on unix, then bumped if still valid to get them fixed. The version issues below can be gamed as needed if applicable. > how tinc uses onion circuits vs how OnionCat does. They're just apps bound to onions, no special knowledge of tor. There can be things like layer 2/3/+ keepalive packets, etc going on depending on the app. Circuit timeout settings, etc. See also OnionBalance regarding overall subject. > Or maybe v3 onions work better than v2 onions, either because > they're better designed, or better supported. v2 is still in the code and will be for a long time, even possibly modularized for third parties indefinitely. So if there are v2 problems, ticket them, join together, and get them fixed. > It's also possible that I've tested them differently. With OnionCat, I was > using Freenet. And with tinc, I've used bittorrent. So maybe Freenet and > bittorrent have different enough packet dynamics. Tests should only change one variable at a time. > I initially picked that IPv4 range because of ChaosVPN. But maybe it'd be > better to integrate with dn42, and use IPv6 IPv4 is dead, IPv6 gives much more room for people to play without colliding with each other or other things... lots of people's stacks and private usage treat RFC1918 as their own, not that of some third party apps (which really need to use their own space outside of RFC1918, etc). So you need more space. Overlays can use either 4/6 on clearnet and emulate either 4/6//N-bits for internal use, and can also setup separate instances integrating into each. IPv6 has some space options, and lots of unallocated slack space. But also search "AF_OVERLAY" for a grander more universal overlay interop scheme than even IPv6 can ever provide. > What worries me is that the Tor community will see this Though exit is and should be a priority in tor at the moment given the gamut of todays overlays, tor does not, should not, and won't have exclusive claim to that functionality in both other currently developing and future overlay networks. > as DDoS, and implement blocks. tor-0.3.2.9 was the last version without some statistical blocking changelog 0.3.2.10: "denial-of-service mitigation" > I wonder whether they've done that with OnionCat. No. Tor can't pick out apps like that, only patterns, those can be really hard for an overlay (like tor) to discern, and impeding of many false positive users. Fork tor if tor censors people (they've already tried to censor relay operators and posters for speaking freely). Say to a non-corporate more globally volunteer opensource tor. Or simply support the development of and migrate to better more resistant overlay networks going forward. Diversity in designs, and with more deployed overlay networks in live competition, are important. Anyway, happy hacking :)

3 4

Cryptocurrency: Deconomy 2019
by grarpamp 02 May '19

02 May '19

https://www.youtube.com/channel/UC_HZkGAEXMobMwRtz_3SlFw/videos https://www.youtube.com/channel/UCHTVsdky_U3B3ZpTV4vDHLA/videos

1 0

Cypherpunks nameserver changes will happen Wednesday
by Greg Newby 01 May '19

01 May '19

Dearest colleagues, Riad and I are planning on coordinating some changes to the DNS entries for the cpunks.org domain, sometime during US business hours on May 1. Basically, we will be splitting out lists.cpunks.org (the PGLAF.org server, which I run and is where this list lives) as a subdomain in the DNS, separately from the rest of cpunks.org (which Riad runs, and mostly redirects to lists.cpunks.org anyway). If the change goes well, nothing noticeable will happen and emails to the list will continue to flow. If the change goes poorly, there might be some email messages that bounce or are delayed. I will send an email update to the list when the change is done, to test that things are working. Once things have been working for a few days, I will then make some updates to the DNS records to improve adherence to modern email anti-spam "standards" (DKIM, SPF and DMARC). This should cut down on messages that are quarantined or rejected by many large email providers. Those anti-spam measures are a good topic for discussion. They have some merit in identifying the validity of the servers that messages come from. But they don't help with validating the sender, or non-repudiation, or other features that have existed at least as long as PGP. It's not easy to run your own mail transport agent these days. Here is a little article from some other victims of the behemoth ISPs: https://www.tablix.org/~avian/blog/archives/2019/04/google_is_eating_our_ma… Best wishes for a Happy May Day, to all. - Greg

2 2

Julian Assange Sentenced to 50 Weeks and Still Faces U.S. Charges
by Cecilia Tanaka 01 May '19

01 May '19

https://www.nytimes.com/2019/05/01/world/europe/julian-assange-sentence-uk.… ---------- Loving. Caring. Sharing. Being Excellent To Each Other And To Our Hackerspace. <3 ---------- "Don't let anyone rob you of your imagination, your creativity, or your curiosity. It's your place in the world; it's your life. Go on and do all you can with it, and make it the life you want to live." - Mae Jemison

1 0

useless eaters - oxygen thieves - carbon polluters → useless dirt proliferators - oxygen polluters - carbon thieves
by Zenaan Harkness 01 May '19

01 May '19

What's it like to be a useless eater oxygen thief carbon poll/uter? Or "human ≡ evil"? And what about those carbon thieving, oxygen pollutin' useless dirt proliferators? Seriously, "trees ≡ evil" their leaves turn into dirt, they pollute our world with an abundance of fire promoting oxygen, and these so called "green" trees are stealing so much carbon from the atmosphere it's not funny... Life couldn't just be a matter of perspective, could it? Perhaps, in this thing some folk call reality, we actually live within a symbiotic, perfectly complementary natural wonderland? (Actual etc problems notwithstanding...)

1 0

Fwd: [nncp-devel] [EN] NNCP 4.0 release announcement
by Shawn K. Quinn 01 May '19

01 May '19

ICYMI: -------- Forwarded Message -------- Subject: [nncp-devel] [EN] NNCP 4.0 release announcement Date: Sun, 28 Apr 2019 16:57:24 +0300 From: Sergey Matveev <stargrave(a)stargrave.org> To: nncp-devel(a)lists.cypherpunks.ru I am pleased to announce NNCP 4.0 release availability! NNCP (Node to Node copy) is a collection of utilities simplifying secure store-and-forward files and mail exchanging. This utilities are intended to help build up small size (dozens of nodes) ad-hoc friend-to-friend (F2F) statically routed darknet delay-tolerant networks for fire-and-forget secure reliable files, file requests, Internet mail and commands transmission. All packets are integrity checked, end-to-end encrypted (E2EE), explicitly authenticated by known participants public keys. Onion encryption is applied to relayed packets. Each node acts both as a client and server, can use push and poll behaviour model. Out-of-box offline sneakernet/floppynet, dead drops, sequential and append-only CD-ROM/tape storages, air-gapped computers support. But online TCP daemon with full-duplex resumable data transmission exists. ------------------------ >8 ------------------------ The main improvements for that release are: * *Incompatible* encrypted and eblob packet format change: AEAD encryption mode with 128 KiB blocks is used now, because previously nncp-toss did not verify encrypted packet's MAC before feeding decrypted data to external command. Older versions are not supported. * Available free space checking before copying in nncp-xfer, nncp-daemon, nncp-call(er). * nncp-call has ability only to list packets on remote node, without their transmission. * nncp-call has ability to transfer only specified packets. * Workability of xxrate preference in calls configuration file section. * Dependant libraries are updated. * Minor bugfixes. * Begin using of go.mod subsystem. ------------------------ >8 ------------------------ NNCP's home page is: http://www.nncpgo.org/ Source code and its signature for that version can be found here: http://www.nncpgo.org/download/nncp-4.0.tar.xz (1227 KiB) http://www.nncpgo.org/download/nncp-4.0.tar.xz.sig SHA256 hash: EAFA6272 22E355FC EB772A90 FC6DEA8E AE1F1695 3F48A4A3 57ADA0B4 FF918452 GPG key ID: 0x2B25868E75A1A953 NNCP releases <releases(a)nncpgo.org> Fingerprint: 92C2 F0AE FE73 208E 46BF F3DE 2B25 868E 75A1 A953 Please send questions regarding the use of NNCP, bug reports and patches to mailing list: https://lists.cypherpunks.ru/pipermail/nncp-devel/ -- Sergey Matveev (http://www.stargrave.org/) OpenPGP: CF60 E89A 5923 1E76 E263 6422 AE1A 8109 E498 57EF -- Shawn K. Quinn <skquinn(a)rushpost.com> http://www.rantroulette.com http://www.skqrecordquest.com

1 0

Assange Indictment
by John Young 30 Apr '19

30 Apr '19

https://cryptome.org/2019/04/assange-indictment.pdf

3 3

USA TODAY: Massive data breach exposes ages, addresses, income on 80 million U.S. families
by jim bell 30 Apr '19

30 Apr '19

USA TODAY: Massive data breach exposes ages, addresses, income on 80 million U.S. families. https://www.usatoday.com/story/tech/talkingtech/2019/04/29/unprotected-data…

2 1

Cryptocurrency: Decentralized Deception (Documentary)
by grarpamp 30 Apr '19

30 Apr '19

https://www.youtube.com/watch?v=5KXHgh2rTTw decentralized deception https://www.youtube.com/watch?v=b8JZQrGw3ho one response A random avg joe's take https://www.youtube.com/watch?v=EK9wEF0vTGQ https://www.youtube.com/watch?v=ZIC7MDNgyrg https://www.youtube.com/watch?v=QVk6XH1oYUY Crypto is so much about this... hundreds millions people around the world each researching making their own evaluations and choices in things from philosphy to technical to markets to family, right or wrong, win or lose, talking with each other, learning, sharing ideas, expanding their thinking. Don't discount what the average Jane's around the world think and want. You can find lots of their tubes if you look around, linked herein two random, not even representative, examples. And a few, a *very* few not necessarily shown herein, are actually seeking truth, approaching and doing things responsibly. They are the ones bringing the future. Find and support and hear them out, the few real ones, among the colossal lot of retards, shills, scams, frauds, statists, fools, fooled, metoos, governments, banks, corporations, and the like. It's either fully distributed decentralized worldwide p2p transaction mineable privacy coins, in/out via IRL p2p and DEX and truly openly inspectable exchanges... or Fiat... pick one, or both in some fraction. They are mutually exclusive, there is no middle ground but fakery and witches. That has always been, and always will be, the story of cryptocurrency... DYOR... make the story a good one. It's not easy, but it's possible.

1 0

Re: [liberationtech] Democrats rally around pledge not to use hacked documents (Wash Post)
by grarpamp 30 Apr '19

30 Apr '19

> https://s2.washingtonpost.com/camp-rw/?e=cnJiQGcuY2xlbXNvbi5lZHU%3D&s=5cc6e… https://www.washingtonpost.com/powerpost/will-it-use-hacked-materials-again… https://www.washingtonpost.com/lifestyle/style/journalists-cant-ignore-hack… It's not about upstanding each other for not pledging. Those disavowing it are simply afraid of the truth it contains. Disavowers forging joint compacts are attempting to universally discredit and wage war against the truth. Jointly fudding it is their only defense tactic left. Deny deny deny, and never open up for inspection... it's the oldest game in town. Pledges are also a total lie, no politician would refuse to use fruits in such razor thin and engineered "elections", it would be campaign suicide not to, so they'll just use them secretly. Information seeks to be free, to be its own open market, "National Security" is just another Top Secret FUD attack against the natural state and tide of information, an attempt to put freedom back in the bottle, and keep power out in force. Don't let that happen. 2020 US elections will see many documents "liberated". "Pledge" to curate and keep them freely accessible to the world. Because as you can see in the last link above, the FUD is already having desired effect on media, causing them to second guess themselves, to focus on "'criminal' sources" instead of on the information, etc The fourth estate is hardly as strong, independant, or innocent as people think... in most places of note it's already done in, and getting consistantly worse across the board [1]. But you still have the internet... at least for a little while longer... so really it's up to you now. [1] https://en.wikipedia.org/wiki/Press_Freedom_Index https://rsf.org/en/ranking [2] [2] What sad state of affairs is it that you cannot reach a press freedom site when using freedom tools like Tor. > I don't get it. So, they would not look at the Pentagon > Papers or other evidence of crimes that have been > suppressed? > > It seems to me that the important thing is the information, > not the source. Or am I just ill-informed with regards to > journalism and ethics? > > I get the fruit of a poisoned tree thing for government > prosecutions. But, won't this type of standard make it > easier to suppress whistle-blower information pointing > out government malfeasance?

2 1