- cypherpunks - lists.cpunks.org

Review appreciated: Golang Crypto/Cert system
by Cathal Garvey 13 Jan '15

13 Jan '15

Hi all, This is intended for use in a larger project but I felt the need to abstract and containerise some of the crypto. It uses ECDSA and NaCl as provided in the Golang libraries, and I've tried to join them in as sensible a way as possible without making too many assumptions. Would appreciate some review to make sure I'm not screwing anything up: https://github.com/cathalgarvey/easykeys Thanks, Cathal

1 0

How come search engines don't crawl the list and I can't find 'robots.txt'?
by Georgi Guninski 13 Jan '15

13 Jan '15

AFAICT the list archives don't show in search engines and in addition don't see /robots.txt. How so?

4 7

Re: What is offtopic and what should be avoided on this list?
by John Young 12 Jan '15

12 Jan '15

At 01:42 PM 1/12/2015, you wrote: >Except it wasn't. Revelations from Snowden and others shows that not >only were the "nonsense" claims correct, they didn't go far enough. > >I don't know about anyone else, but I'm going to be very cautious >before calling anything nonsense. Excellent reminder those who claim to know, don't. Or won't tell all they know, just enough to build a reputation of responsibility. This applies to Snowden's team of "responsible" releases of a tiny fraction of the full dump Snowden says he gave to the public, then was hi-jacked in transit, most of it in private storage to enhance its value of restricted access. Meanwhile, replacment spy tools are being developed in order that Snowden's gift can be dimissed as nonsense -- a process well underway: NSA head now claims that the Snowden material was not as damaging to natsec as first alleged. Could be psyop to hide the damage, or indicates new means and methods are coming along just fine.

3 2

Hohoho, m$ calls google "irresponsible" :))))
by Georgi Guninski 12 Jan '15

12 Jan '15

http://www.theregister.co.uk/2015/01/12/google_microsoft_coordinated_vulner… Microsoft's feels Google's acted irresponsibly because it not only planned a fix for the problem on January 13th but also asked Google not to go public until that day. ----- As i wrote on my blog: Hohohoh, I am enjoying this :)))) Hope they enter a deadly fight on all fronts :)))) Once upon a time the shits used the same words for me.

2 1

Ronen Horowitz on "needles in the haystack" in Israel
by Gregory Foster 12 Jan '15

12 Jan '15

Israel Defense (Jan 3) - '"Quite a few Terrorists lost their lives owing to Big Data"': http://www.israeldefense.com/?CategoryID=484&ArticleID=3288 > An exclusive interview granted to Israel Defense by Ronen Horowitz, the Head of the Information Technology Division of [Israel Security Agency], provides a rare glimpse (at least to the extent that may be revealed) at one of the least familiar aspects of counterintelligence work: advanced information technology methods enabling the mining of significant bits of intelligence from the infinite ocean of information that flows in the present era through countless cellular telephones, computers, wireless communication channels, WhatsApp messages and even encrypted messages exchanged through social networks. > > This is Horowitz's first-ever public interview. He completed his term in office in October 2014. So far, his activity has been taking place only behind the shadows of the national defense system. Even his name was a secret. Horowitz was awarded several prizes during his career, including the Israel Security Prize. Following his retirement he has taken up a position in the private sector as head of technologies at the credit company Visa CAL. gf -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/

1 0

Microsoft patch batch pre-alerts now for paying customers ONLY
by Georgi Guninski 12 Jan '15

12 Jan '15

http://www.theregister.co.uk/2015/01/09/ms_restricts_security_pre_alerts/ Microsoft is facing fierce criticism over its decision to make pre-notification of upcoming patches available only to paid subscribers. The Advance Notification Service (ANS) formerly made information on upcoming software patches available to the public but from now on the information will be restricted to “premier” customers and some other select partners.

2 3

Re: full year 2014 corpus - better concurrent continue
by coderman 12 Jan '15

12 Jan '15

"why this format?" - it is lowest common denominator, in a sense. the rest explained later... but first, a fix. there is an issue with commands that won't continue past the PDF and small file bundles. use fix below to run or more continuation downloaders: ### The gist of a quick continue download: (many can be run in parallel) # # Update torsunget.sh and run dl-fy2014.sh to complete. # # assumes a copy of https://peertech.org/files/fy2014lst.txt # or 84fe6b33e5b6f2478523432514fcb24b844105c4a38635ba97543e9c7152f90e # in current working directory where ./dl-fy2014.sh is run. # # E.g.: curl -x http://127.0.0.1:8778/ -o fy2014lst.txt \ # http://bigsun36arflx75h.onion/shid/84f/e6b/84fe6b33e5b6f247..7543e9c7152f90e # rm -f torsunget.sh >/dev/null 2>&1 curl -x http://127.0.0.1:8778/ -o torsunget.sh \ http://bigsundaawafn36e.onion/torsunget.sh.txt \ && chmod +x torsunget.sh curl -x http://127.0.0.1:8778/ -o dl-fy2014.sh \ http://bigsundaawafn36e.onion/dl-fy2014.sh.txt \ && chmod +x dl-fy2014.sh time ./dl-fy2014.sh

1 0

Re: full year 2014 corpus - kudos to Cryptome & honor to Aaron
by coderman 11 Jan '15

11 Jan '15

On 1/3/15, coderman <coderman(a)gmail.com> wrote: >... > it is: > 47G, 63504 files, sig attached. > https://peertech.org/files/fy2014lst.txt some interesting details encountered, but it's ready. and in time for Aaron... most complicated distribution process ever? at least speed over Tor is good with this method... *grin* also avail at: http://bigsunt6eqt4tifc.onion/fy2014.txt http://bigsunymgzz5mdo3.onion/fy2014.txt http://bigsunr6tzikxo25.onion/fy2014.txt http://bigsundaawafn36e.onion/fy2014.txt http://bigsunklsutevagb.onion/fy2014.txt http://bigsunz7cmjr3hbd.onion/fy2014.txt http://bigsunkptoygblan.onion/fy2014.txt http://bigsun36arflx75h.onion/fy2014.txt http://bigsunndmif7ac5w.onion/fy2014.txt best regards,

1 0

TrustLeap: provably-secure, "forever unbreakable" security
by 42 11 Jan '15

11 Jan '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The CEO of TrustLeap contacted me recently to boast about his "unbreakable" security, and that 'we' are doing everything wrong and "all open source software is backdoored". Quotes from the website: > TrustLeap can mathematically prove that it has "unbreakable > encryption" against unlimited computing power, forever, and by-design. > As a result, "modern" cryptography (all the algorithms used today, > either standard or custom) is _provably unsafe_. http://twd-industries.com/faq.html#tab3 What do you think about that? There is a challenge: http://twd-industries.com/challenge.html > This is a page for real experts in cryptography ...so I thought I'll share it with you guys. - -- 42 <42(a)enigmabox.net> -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBAgAGBQJUrGnlAAoJELqmW1wGWUSY2aMP/1qGTSdnqZZLRqFH/ZHS1XkY vVwSbR7H8L1vKMFYxxBgQcgMrB3ky+He1xYjX5B/6Pfwi3aFYH/5xgJMdx75fTYP EVIF8SHctbWs49g6+dynLgcdCwHrLtF35BIj3QmIgBo8vYUMtS1JQ7/iwbwLZlw3 3+s7ycMEW2U/ltdhG6dV1xL+oXBHpVv3EeW7LHNL5RvcAN6SFU1YNkvjedfqnKxB so6gh7adcsFf5aij6ofkQKHYyTTdkilGwQa06Xj5Ht3gBWi+NIbglkVsgS/+/Xwx mq8trrlz3MO3eCt/atpseeWwgThfaTf9B/dgnd7JuRQzK+Vmvtrj/d6wjbW2wmQW yCXz3n2Y0WxozipHJSd1yXL2SuumB3YSZ06ZLVUg0RmEluGCXVg7oALri+srEKUs PBLWJmWKpQM/8DsA8cqUEvyELFs1WBjzIQg2Bsg0j1IvMrXZSAApoMxEXxibSf0V oOiqApPUThlfB1V1CCU0jRgW2mYmKvU2eq05iYx1ZyyUid4gQlFt0KsO3Hh2e0VK 57XJjNwFeg7iSbJ7kIGduryVxDulu7SqabLKr7WUpQfCYxP0kTjTqXI44R5fHr00 4D6nb/mzPF3IxSfQ2Wv/SJ4AFeYTe8d1tdVdLqF8z4n6Noo4yExArD6VwVT6wF5r Kyyxt5DAcslRFZbOJA/6 =wU4H -----END PGP SIGNATURE-----

4 3

Firechat's Amazon S3 instance got blocked in Russia
by Anton Nesterov 10 Jan '15

10 Jan '15

So firechat.s3.amazonaws.com with IPs 54.231.13.81, 54.231.13.89, 54.231.2.105, 54.231.32.137, 54.231.8.89, 54.231.9.17, 54.231.96.161 was blocked in Russia by order 27-27-2014/Ид4349-14 of General Prosecutor. That instance was used by Firechat to over-the-internet chats. Firechat became very popular in Russia in last days (it's got to the top of Apple's App Store) because of it's mesh-chat function and because of planned rallies in support of Alexei Navalny. Rally was planned on 15 Jan, but as court yesterday decide to move the date of sentence to 30 Dec, it happened today. Alexei Navalny got 3.5 years of suspended sentence, and his brother, Oleg, was jailed for 3.5 years. This is the first time when some service got blocked that way, before that there was only websites. It's not a big deal because of mesh chat. Both firech.at & opengarden.com/firechat wasn't blocked and still works, downloads from App Store & Google Play are fine too. Due to how ISPs block things (IP blocking mainly), Russian users also got a problems with many services which use S3. https://meduza.io/news/2014/12/30/tehnicheskiy-domen-messendzhera-firechat-… (Russian) http://www.theguardian.com/world/2014/dec/30/kremlin-critic-navalny-given-s… (English) -- https://nesterov.pw GPG key: 0CE8 65F1 9043 2B11 25A5 74A7 1187 6869 67AA 56E4 https://keybase.io/komachi/key.asc

2 3