- cypherpunks - lists.cpunks.org

For the relevant foreign powers
by Ryan Carboni 19 Nov '18

19 Nov '18

The US government controls nearly all aspects of my life, and assigns people to meet with me every day.

2 1

Cryptocurrency: Yawn
by grarpamp 19 Nov '18

19 Nov '18

https://i.redd.it/05vwyvyj8az11.png

1 0

public Freenet webGUI
by damiengray＠tutanota.com 18 Nov '18

18 Nov '18

Ever wonder what's on Freenet? If you're curious, there's a public FProxy webGUI at http://gel2bzjxrvcmqpji.onion:8888 <http://gel2bzjxrvcmqpji.onion:8888/>. It's part of a darknet on the Tor OnionCat IPv6 overlay network. The other 20 peers are listed here: http://zerobinqmdqd236y.onion/?ceffbd4a36f954e0#UTW52y4tvML8B0Wwu9i3Wl2BhbG… <http://zerobinqmdqd236y.onion/?ceffbd4a36f954e0#UTW52y4tvML8B0Wwu9i3Wl2BhbG…>. It runs in a Debain 8.11 Docker container, which is hosted in a Debain 9.6.0 KVM domain, and that in turn is hosted on a Ubuntu 18.10 KVM VPS. Iptables rules at VPS and KVM domain levels block all Internet access except through Tor and OnionCat.I'll check it periodically. If someone has broken it, I'll restart the Docker container. If someone has managed to break the KVM domain, I'll restore that from backup. And if someone has gone the extra mile to break the VPS, I'll restore that from backup. This may seem bizarre to privacy lovers. I mean, I could be logging everything! But the point is providing easy-to-use access to Freenet that's secured from third parties. If you decide that it's worth the hassle, I recommend running your own node, connecting through OnionCat IPv6 peers. Or through I2P GarlicCat peers, if you like. While I could be logging everything, that's arguably more-or-less irrelevant, because Tor renders you and the node mutually anonymous. Not perfectly anonymous, true. But there's arguably little risk, unless you and/or the node have been targeted. Just be prudent. Especially be prudent about downloading files from the node. I recommend using Whonix, on a machine with full-disk encryption. Or Tails, with encrypted USB storage.

2 1

X86 dispatch contention vulnerability
by Ryan Carboni 17 Nov '18

17 Nov '18

While many x86 implementation vulnerabilities in the past involve either electromagnetic emissions or cache timing attacks, I have not read anything about instruction dispatch contention. According to anger fog’s research, Intel’s implementation of the x86 instruction set does not dispatch more than three of a single instruction, and it has been so for a long time. Irregardless of their design decisions for instruction dispatch, this provides a side channel in which two cooperating processes operating on the same core can conduct half-duplex communication at the rate of 2 bits per cycle by one process attempting to compete with another process for the same capacity for dispatches over a single instruction (0, 1, 2, 3). While I do not have the resources to know how x86 processors handles dispatch contention issues, if it is handled in a regular and non-random manner, it would reach that theoretical level of severity. This violates certain access controls assumed to be imposed by the kernel. I suppose I can’t collect my quarter million dollar prize if I publish this to the world?

4 11

Redefining the Kilogram
by jim bell 17 Nov '18

17 Nov '18

https://www.engadget.com/2018/11/16/kilogram-officially-redefined/ Today, scientists voted to change the definition of the kilogram as well as three other units of measurement -- the ampere, the kelvin and the mole. The vote took place at the General Conference on Weights and Measures in Versailles, France and the new definitions will be based on "what we call the fundamental constants of nature," as Estefanía de Mirandés of the International Bureau of Weights and Measures (BIPM) told Science News, instead of the less precise definitions these measurements are currently tied to. The kilogram, for example, is defined by a physical cylinder known as Le Grand K that's stored in a vault outside of Paris. These redefinitions have been in the works for some time. "This is the most important decision that the BIPM has made in maybe 100 years, which may be a slight exaggeration, but at least since 1960 when they adopted the International System of Units," Terry Quinn, emeritus director of the BIPM, told Engadget last year. And while the changes won't necessarily be reflected in your day to day life, they'll help scientists make more accurate measurements going forward. [end of quote] Jim Bell

1 0

Re: X86 dispatch contention vulnerability CRM:0461068385
by Ryan Carboni 17 Nov '18

17 Nov '18

Apple is a better company than than Microsoft. I ask you this: how does Microsoft handle wiretap requests? How does Apple handle wiretap requests? Does Microsoft sign any DLLs that is asked of them? It is curious that no journalist talks about common procedure. No doubt this “attacker” is defined the same as according to citizenlab someone acting without “any legal authorization”. You dogs can smirk behind your laws, and overlook those violate those laws in a way pleasing to you, so I ask of the Lord to strike down an Azure datacenter by what cannot be attributed to any other power! On Thursday, November 15, 2018, Microsoft Security Response Center < secure(a)microsoft.com> wrote: > Hello, > > Thank you for contacting the Microsoft Security Response Center (MSRC). In > order to investigate your report I will need a valid proof of concept (POC) > ideally with images or video, the detailed steps to reproduce the problem, > and how an attacker could use it to exploit another user. > > > When ready, submit a new email to secure(a)microsoft.com without a CRM > number in the subject line. Please include: > > - Relevant information previously provided in your initial report > - Detailed steps required to consistently reproduce the issue > - Short explanation on how an attacker could use the information to > exploit another user remotely > - Proof-of-concept (POC), such as a video recording, crash reports, > screenshots, or relevant code samples > > Regards, > > Tina > MSRC > > > > ------------------- Original Message ------------------- > *From:* ryacko(a)gmail.com > *Received:* Wed Nov 14 2018 09:34:48 GMT-0800 (Pacific Standard Time) > *To:* <Microsoft Security Response Center>; Microsoft Security Response > Center; Microsoft Security Response Center > *Cc:* cypherpunks(a)lists.cpunks.org > *Subject:* X86 dispatch contention vulnerability CRM:0461068385 > > While many x86 implementation vulnerabilities in the past involve either > electromagnetic emissions or cache timing attacks, I have not read anything > about instruction dispatch contention. According to anger fog’s research, > Intel’s implementation of the x86 instruction set does not dispatch more > than three of a single instruction, and it has been so for a long time. > Irregardless of their design decisions for instruction dispatch, this > provides a side channel in which two cooperating processes operating on the > same core can conduct half-duplex communication at the rate of 2 bits per > cycle by one process attempting to compete with another process for the > same capacity for dispatches over a single instruction (0, 1, 2, 3). While > I do not have the resources to know > x86 processors handles dispatch contention issues, if it is handled in a > regular and non-random manner, it would reach that theoretical level of > severity. > > This violates certain access controls assumed to be imposed by the kernel. > > I suppose I can’t collect my quarter million dollar prize if I publish > this to the world? >

1 0

Cryptocurrency: Voluntary Japan - Talks with Bitcoin.com re Bitcoin Cash BCH, Voluntaryism
by grarpamp 16 Nov '18

16 Nov '18

>> Ha. coin fucking base is one of the worst if not the worst cancer in the >> 'cryptocurrency space'. > Gemini is also now pumping their own centralized USDT-alike > shitcoin called GUSD that all the retards are rushing in droves to accept. > https://gemini.com/dollar/ Here's references to the Goldman Sachs Circle Coinbase USDC shitcoin scam, along with a few other fake "stablecoin" scams USDT, USDC, GUSD, TUSD, PAX ... https://old.reddit.com/r/CryptoCurrency/search?q=usdc&restrict_sr=on https://old.reddit.com/r/CryptoCurrency/search?q=stablecoin&restrict_sr=on Remember, "stability" in early days is illogical and unexpected, anyone pushing such coins is as gravely suspect as the coins themselves... such coins being centralized, controlled, censored, reported, anti freedom, anti privacy, etc. Note that there are some distributed cryptocurrencies whose consensus protocol tries doing things like encouraging spending, holding, or other "beneficial" behaviours... by timelocking, vaporizing, rewarding, or other mechanisms over users utxo's, contracts, transactions, etc. You can search and post links to those artificial influence coins if you want. There's also category of contract pegs like DAI, general form of which might be considered coin index funds, derivatives, etc. Once you desire beyond a simple digital cash, things get increasingly more complex and likely to fail. Doesn't mean you can't play them for what they're worth.

1 0

Wikileak's Assange Seemingly Indicted
by grarpamp 16 Nov '18

16 Nov '18

https://www.washingtonpost.com/world/national-security/julian-assange-has-b… Democracy Now Coverage https://www.youtube.com/watch?v=QLtK3_JxYKY OP's https://twitter.com/SeamusHughes/status/1063232297674162176 https://pacer-documents.s3.amazonaws.com/179/399086/18919235200.pdf https://www.iamwikileaks.org/ https://justice4assange.com/ https://twitter.com/WikiLeaks https://twitter.com/AssangeDefence (formerly @JulianAssange) https://twitter.com/AssangeLegal https://twitter.com/Unity4J #FreeAssange

1 0

free entertainment!
by juan 15 Nov '18

15 Nov '18

here's a guy called craig wright, also known as 'satoshi nakamoto' (LMAO!!!) https://www.youtube.com/watch?v=MXMCzhwm554 the points he makes are quite interesting : his and the bloomberg-journo-asshole's criticism of the lightning network is that LN users(nodes) would be 'unlicensed money transmitters' and so would be doing 'illegal money laundering'. 'satoshi nakamoto' then rants against even more people who are 'redesigning' bitcoin to be 'illegal', that is have some privacy built in. "I'm going to shut them down with SV". "We are going to take legal action" et cetera. No doubt that the guy is Real Libertarian. It should be mentioned that wright or 'satoshi nakamoto'(LMAO!!!) used to be a buddy of roger ver's but ver has finally disowned him.

1 0

Nigerian 404: Google not found, Internet wobbly
by Steve Kinney 14 Nov '18

14 Nov '18

Nigerian 404: Google not found. https://www.theregister.co.uk/2018/11/14/nigerian_telco_bgp/ Reported day one of same. https://www.theregister.co.uk/2018/11/13/google_russia_routing/ If the network's rockin', don't come knockin' https://www.engadget.com/2017/11/07/comcast-internet-outage-level-3-route-l… I been seeing brief, intermittent outages that play hell with serious data transmission all over my neighborhood for three days now, and user comments seem to indicate that condition occurs all over the map. Don't even tell me a worm armed with the NSA's login credential (reversed from the hard coded hash) is jumping around between Cisco routers... O sunshine take me now away from here, I'm a needle on a spiral in a groove The turntable spins as the last waltz begins, and the weatherman say's someting's on the move... https://www.youtube.com/watch?v=o2rOWVWJmWU Then again, it's probably nothing. :o)

2 1