- cypherpunks - lists.cpunks.org

"I don't like IKE!"
by coderman 20 May '15

20 May '15

https://www.altsci.com/ipsec/ : if (iph1->rmconf->proposal->gssid != NULL) { Fuzzers missed this. Hackers missed this. Believe you me, I would have missed it if I wasn't diligent and lucky...

1 0

Worker fired for disabling GPS app that tracked her 24 hours a day | Ars Technica
by L0R3NZ 5Z4B0 19 May '15

19 May '15

Wow!!! ~BizDevCon http://arstechnica.com/tech-policy/2015/05/worker-fired-for-disabling-gps-a… Worker fired for disabling GPS app that tracked her 24 hours a day A Southern California woman claims she was fired after uninstalling an app that her employer required her to run constantly on her mobile phone—an app that tracked her every move 24 hours a day, seven days a week. Plaintiff Myrna Arias, a former Bakersfield sales executive for wire-transfer service Intermex, claims in a state court lawsuit that her boss, John Stubits, fired her shortly after she uninstalled the job-management Xora app that she and her colleagues were required to use. According to her suit (PDF) in Kern County Superior Court: After researching the app and speaking with a trainer from Xora, Plaintiff and her co-workers asked whether Intermex would be monitoring their movements while off duty. Stubits admitted that employees would be monitored while off duty and bragged that he knew how fast she was driving at specific moments ever since she installed the app on her phone. Plaintiff expressed that she had no problem with the app's GPS function during work hours, but she objected to the monitoring of her location during non-work hours and complained to Stubits that this was an invasion of her privacy. She likened the app to a prisoner's ankle bracelet and informed Stubits that his actions were illegal. Stubits replied that she should tolerate the illegal intrusion….. Intermex did not immediately respond for comment. The suit, which claims invasion of privacy, retaliation, unfair business practices, and other allegations, seeks damages in excess of $500,000 and asserts she was monitored on the weekends when she was not working. Arias' boss "scolded" her for uninstalling the app shortly after being required to use it, according to the suit. Her attorneys said the woman made $7,250 per month and that she "met all quotas" during a brief stint with Intermex last year. "This intrusion would be highly offensive to a reasonable person," the filing said.

4 5

Nuclear security
by Lodewijk andré de la porte 19 May '15

19 May '15

https://wikileaks.org/trident-safety/ I'd like to dedicate this moment to all the time you and I have wasted on using a secure process, rather than just not giving a damn. Then ask you "what do you think you could have done with that time instead?", given the knowledge that the primary deterrent is fear - not actual security. See now, *they *are not wasting much of their time on security. Compete. (note: shaming and blackmailing you when the time is right is real, and extremely hard to avoid. Be prepared to have your whole history, in minute details, used against you. Provided there's ever any reason, that is. Until then, though, what can they do?)

5 5

NYT on Nick Szabo and Bitcoin
by John Young 18 May '15

18 May '15

<http://t.co/2zgTpKDPaa>nytimes.com/2015/05/17/business/decoding-the-enigma-of-satoshi-nakamoto-and… Those around cypherpunks 1993-1998 will recall Szabo's emails on bitcoin early precursors along with Adam Back, Hal Finney, Tim May, Wei Dai, Lucky Green, Hettinga, many more burgeoning F-Cs. NYT piece credits cpunks as subversive birther, now being hyper-monetized by arch-cryptoanarchist Goldman Sachs and many more centralists. Szabo denies being Satoshi, but ... others rush to fill the gap

2 1

noscript is 10 years!
by stef 17 May '15

17 May '15

happy bday! also i like this quote: > 08/06/2008, "I'd love to see it in there." (Window Snyder, "Chief Security > Something-or-Other" at Mozilla Corp., interviewed by ZDNet about "adding > NoScript functionality into the core browser"). how utterly depressing that we still don't have this, but have drm and rounded fucking tabs, features that require you to disable grsec/pax protections, and other goddamn useless crap. anyway, happy bday noscript! -- otr fp: https://www.ctrlc.hu/~stef/otr.txt

6 7

Watching the watchers: spook database
by Bethany 16 May '15

16 May '15

This is good clean fun. Watch: https://www.youtube.com/watch?v=xipI-0HU010 Kurzthese: Secret surveillance programs have metadata too. The same people and companies that operate secret surveillance programs also publish details about their work on the open internet. We can use this data to watch the watchers. Beschreibung: “Proficient in Microsoft Word and Xkeyscore” and similar phrases are surprisingly common on LinkedIn profiles. NSA contractors, military, and others involved in the surveillance state post seemingly coded and harmless details about their work in job listings, social media, and other open websites. But this information provides useful metadata that can be used to understand the function of secret programs and map the surveillance state. Transparency Toolkit has been building open source tools to collect and analyze this open source intelligence. This talk discusses how we can use these data sources and tools to build a sousveillance state that holds the surveillance state accountable.

7 8

Fwd: Rare Historical Film: 1932. US military attacks demonstrating American War Veterans.
by Zenaan Harkness 14 May '15

14 May '15

----- Original Message ----- Subject: Fwd: Rare Historical Film - of a very sad time This is exactly how our country treats us, as slaves. Has always been this way - especially the western cartel. ----- Forwarded Message ----- Date: Mon, 11 May 2015 23:18:47 -0500 Subject: FW: Rare Historical Film - of a very sad time Come on, vets. Watch this!! It is only 6 to 7 minutes long! This shows you just what Washington DC (today, Tel Aviv West) will do to American patriots!! And this assault on American citizens (VETERANS of WW1!!) should awaken you to the fact that you are NOT safe from the Federal Government. If McArthur, Eisenhower, and most of all – Patton – attack and kill veterans, WHERE is safety??? Answer – there is none! Too bad the people involved in this protest were not armed to the teeth. They were fighting men, so they undoubtedly could have slaughtered the politically-correct troops of the Establishment. If you think things are different today – think again. DC is directed NOT by representatives of WE, THE PEOPLE, but by those who toe the line to “multiculturalism” and political correctness. Right or wrong does NOT matter. Truth is no defense. It is whatever the big-boy capitalists and their blood-brothers, the communists, want. Suck it up and go back to sleep. __________ Hi, I know and don't need to see the video. Maybe you know, too. The background is this: World War I veterans were promised certain benefits to be paid during their lifetimes. In the midst of the long Depression, for relief of extreme need, they asked for lump sum payments. President Hoover refused. Thousands of veterans gathered in Washington, D.C. to press their cause. They pitched a tent city in Arlington. Hoover ordered in troops to disperse the settlement. MacArthur led. Everything burned, many killed. V. US military attacks demonstrating American War Veterans FANTASTIC NEWS VIDEO: 1932 - young Patton, young Eisenhower, young MacArthur, President Hoover - Walter Winchell reporting. I don't recall this from any history classes. Do you think our military, acting on orders from a broken federal gov't, will NOT march against our own citizens?? Think what you want to, but THIS DID HAPPEN only a couple of generations ago. http://www.youtube.com/watch_popup?feature=player_embedded&v=sNOsIB5VMSQ "Loyalty to country ALWAYS. Loyalty to government, when it deserves it." -- Mark Twain

2 1

Subject: Re: Watching the watchers: spook database
by Softy 14 May '15

14 May '15

Specifically job hunters/HR department types. They lack the opsec training. And, inspite of never having had a clearance or working in an agency (mostly), they usually learn of coverterms/project names which managers are hiring from because even thouse with training often slip or don't know. Then the HR people use those terms for attention getting of possible candidate - and everyone wants to appear "in the know" as to be credible. > Beschreibung: > “Proficient in Microsoft Word and Xkeyscore” and similar phrases are > surprisingly common on LinkedIn profiles. NSA contractors, military, and > others involved in the surveillance state post seemingly coded and > harmless details about their work in job listings,

5 6

Keeping your car keys in the refrigerator (to keep them fresh?)
by jim bell 11 May '15

11 May '15

http://www.usatoday.com/story/money/cars/2015/05/07/technology-car-break-in… Brief explanation: Sophisticated thieves are amplifying signals emitted from cars that are received by their corresponding car keys; the amplified signal travels potentially over hundreds of feet; the key's returned signals are (I would suspect; the article doesn't say) also amplified. Thus, a car lock can be opened even if the car's key is 'safely' in an owner's house or apartment. The article suggests keeping the keys in a refrigerator or microwave oven to shield it from those signals. One possible re-design solution, I think, would be for the key fob to retransmit a portion of the car-emitted signal instantly; the car would detect the timing of its emitted signal compared to the key-returned signal. Thus, the car would know how far away the key is from the car, foiling this system, by setting a maximum distance between the car and the key. This actually isn't a new idea: Supermarkets have microwave-detection door openers, and I suspect that their active range is determined by rapidly sweeping the frequency of the transmitter, and then mixing (non-linear mixing; not to be confused with linear mixing, done to audio) the returned signal. The further the target is, away from the transmitter, the higher the detected frequency. This makes the trigger point precisely dependent on the distance, not simply the amplitude of the returned signal. Jim Bell

1 0

Re: FOIPA adventures
by Softy 11 May '15

11 May '15

"- Sell our culture" "- autonomy" haha, that's a good one. Only a job recruiter could smile while spouting nonsense like that. -daniel That already exists (clearancejobs.com and others). There are actually > tons of ads all over DC for these services, most notably the "Life of a > Secret Squirrel" series. Really: > https://www.flickr.com/photos/clearancejobs/8634488049/in/photostream/ > > DC is a weird place sometimes. > >

1 0