- cypherpunks - lists.cpunks.org

Question about something said about Tor in the Der Spiegel data dump
by Cypher 29 Dec '14

29 Dec '14

First, let me say I'm sorry if this is posted twice. My mail client gave me an error and, since I still haven't seen it hit either list, I'm sending it again. My apologies if this is a duplicate. So I'm looking through the Der Spiegel data dump and noticed the following statement on document 35543: "The client must not be running a Tor router of their own..." That made me thing of a few questions but I'm specifically wondering what they mean here. 1. Do they mean that it is confusing to them if I am connecting to the Tor network from a computer that also runs a relay but I do not have my client configured to use my relay or 2. Do they mean that it is confusing to them if I am connecting to the Tor network through a relay running on my own machine? Perhaps I'm not even asking this question correctly as it 'feels' like the wrong way. But I'm curious. What are your thoughts? Cypher

1 0

crypto from the trenches - #31c3
by coderman 27 Dec '14

27 Dec '14

"I don't have a revocation key or a subkey" - admission of guilt? this is sane practice compared to lesser alternatives of: - using revocations keys or subkeys improperly, leading to vulnerability or loss of access (denial of service) - not using crypto at all, out of frustration. - using non-end-to-end encryption, out of frustration. and in fact, if you have good operational controls and understanding, with defense in depth, this is a reasonable solution. --- one minute ago i mention my contempt for email in general, and my special contempt for encryption over email. (see list archives and threads by others :) VLC works best on SD streams: rtmp://rtmp.stream.c3voc.de:1935/stream/s1_native_sd , rtmp://rtmp.stream.c3voc.de:1935/stream/s2_native_sd , rtmp://rtmp.stream.c3voc.de:1935/stream/s4_native_sd , rtmp://rtmp.stream.c3voc.de:1935/stream/s3_native_sd web view is: http://streaming.media.ccc.de/saal1 http://streaming.media.ccc.de/saal2 http://streaming.media.ccc.de/saal6 http://streaming.media.ccc.de/saalg i watched watching http://ecchacks.cr.yp.to/ on rtmp://rtmp.stream.c3voc.de:1935/stream/s1_native_sd and it was flawless. this stream also flawless so far, on continuous feed over 3G on Android VLC. --- in addition to their report of hour for GPG over Email, i see 15-20 min for Tor Browser and Of-the-Record plugin to Onion XMPP on average. also 20min for Qubes minspec setup: ### Custom CoreBoot Qubes FDE boot: ### Boot command, at grub> prompt, type: configfile (ahci0,msdos1)/grub2/grub.cfg ### At disk passphrase prompt, type: aMiosowahcieFo2aLiewaibidoor4lie wae7ugaiFua5Yeushah3ahV6goowooyo ### When the graphical desktop starts, the user account password is: sunlight ### You will also need this password to unlock the screensaver if idle too long. DONE. You will now be in the Qubes R2 Desktop Environment! --- # Launching Document Editor 1. Open the Qubes Quick Launch Menu at lower left. 2. Select "Domain: editor" for the apps available in this VM. 3. Then click "editor: LibreOff..." to launch Document Editor (Libre Office) # Launching File Browser 1. Open the Qubes Quick Launch Menu at lower left. 2. Select "Domain: editor" for the apps available in this VM. 3. Then click "editor: Files" to launch File Browser. NOTE: The File Browser is also how you can see mounted USB devices and also where to copy files back and forth, or just explore. # USB Storage 1. Plug in the USB device. Ignore the message notifications at lower right. 2. Locate "Qubes VM Manager" Window. If you close by accident, re-launch. 3. In "Qubes VM Manager" Window Menu, select to highlight "editor" VM as row / item. 4. Right-click on editor for VM menu, select -> "Attach/detach block devices" 5. In the "Attach/detach" submenu, you should see your device listed. for example, "Attach: dom0: sdb 1863 GiB ST20000LM003_HN..." 6. Click this option to attach storage. 7. Launch "editor: Files" command, then select attached device at left sidebar. for example, "2.0 TB Volume" DONE! # To Shutdown, you should always shutdown "gracefully" to avoid file system issues. 1. Open the Qubes Quick Launch Menu at lower left. 2. Select "Leave" menu options, then "Shut down" 3. Confirm the shut down prompt, or wait 30 seconds. # Launching the "Qubes VM Manager" 1. Usually started by default, it can be re-started if closed. 2. Locate the System Quick Launch Menu at lower left. It is a blue Qubes icon. 3. Open Launcher menu, then "System Tools" option. 4. From "System Tools" menu, select -> "Qubes VM Manager"

1 0

Russia want completely ban Bitcoin and other cryptocurrencies
by Anton Nesterov 27 Dec '14

27 Dec '14

Ministry of Finance of Russia drafted a bill to ban cryptocurrencies with administrative or criminal penalty for mining and other operation. Also they want to censor bitcoin-related websites. This will come into force in 2015. http://top.rbc.ru/economics/01/08/2014/940521.shtml (in Russian)

7 17

Tribler also means you're an exit node?
by Ryan Carboni 27 Dec '14

27 Dec '14

Tribler also means you're an exit node? http://forum.tribler.org/viewtopic.php?f=2&t=6906 To quote: I received two copyright notices from Comcast while letting Tribler idle. > This is the first and only time I have received these notices. > > 1) I have not downloaded anything at all. Nothing. The test file popped up > to idle. Otherwise, not a movie of any variety, not even a linux ISO to > test. I had subscribed to a few channels. > > 2) These only came up after I installed Tribler and have left it idling. > > 3) I was not seeding anything. > > Infringing Work: The Newsroom > Filename: The.Newsroom.2012.S03E06.HDTV.x264-KILLERS[ettv] > Infringement Date: 2014-12-19 > Infringement Type: BitTorrent > Infringement Method: BitTorrent > IP Address: > Reporting Party: copyright(a)ip-echelon.com > > Infringing Work: Teachers > Filename: Teachers > Infringement Date: 2014-12-19 > Infringement Type: Movie > Infringement Method: P2P > IP Address: > Reporting Party: support(a)cegtek.com

4 3

Re: Tribler also means you're an exit node?
by Ryan Carboni 26 Dec '14

26 Dec '14

> > It is also chock-full of child-porn torrents, based on my limited > testing. So not only are you exposing yourself to copyright infringement > suits.. > downloading "crypto" anything when it is being hyped is a bad idea only because news reporters need to receive training from their sources to do crypto anything.

1 0

Change of email address
by Bluelotus 26 Dec '14

26 Dec '14

Could please change my email address from bluelotus(a)openmailbox.org to badbiosvictim(a)ruggedinbox.com. Thank you.

1 0

little gift
by stef 24 Dec '14

24 Dec '14

https://www.ctrlc.hu/~stef/cognitive_biases_-_layer8_security_advisories.ep… happy festivus. -- otr fp: https://www.ctrlc.hu/~stef/otr.txt

1 0

consent and trust? Oh... but we are ABOVE the law
by Александр 24 Dec '14

24 Dec '14

https://www.schneier.com/blog/archives/2014/12/the_limits_of_p.html - "The next time you call for assistance because the Internet service in > your home is not working, the 'technician' who comes to your door may > actually be an undercover government agent. He will have secretly > disconnected the service, knowing that you will naturally call for help and > -- when he shows up at your door, impersonating a technician -- let him > in. He will walk through each room of your house, claiming to diagnose the > problem. Actually, he will be videotaping everything (and everyone) inside. > He will have no reason to suspect you have broken the law, much less > probable cause to obtain a search warrant. But that makes no difference, > because by letting him in, you will have 'consented' to an intrusive search > of your home" >

4 3

Re: [Cryptography] 78716A
by Ryan Carboni 23 Dec '14

23 Dec '14

That's true. But they do in fact do research into malware, and it is infact my right to request information for "personal noncommercial use" which includes attempting to secure my computer. If the government produced records on how to best design a tree house, I am still allowed to request records on how to build a tree house. I cannot force them to create new records, but for records they have already produced, they have the duty and obligation to make a reasonable search. On Mon, Dec 22, 2014 at 10:48 AM, Jerry Leichter <leichter(a)lrw.com> wrote: > On Dec 18, 2014, at 5:22 PM, Ryan Carboni <ryacko(a)gmail.com> wrote: > > Common Americans are no longer considered worth protecting as part of > national security. > That's a silly conclusion. I would not have expected it ever to be part > of the NSA's mission to protect your home network. It's about like > expecting the Army to provide you with guidance and tools to protect your > home from foreign invaders. > > Let's get real here. There are levels of attack and protection. The Army > is supposed to protect *American society as a whole* against foreign > attacks. The NSA is supposed to primarily protect the communications of > the US government, and secondarily the communications of the Americans in > the aggregate. They haven't been doing much of a job at that - too busy > listening in on everyone - but that at least is arguably their mission. > Protecting you, personally ... no. (And frankly, would you real *want* > them to have that responsibility? With responsibility necessarily comes > power.) > > Hell, it's been confirmed by the courts that municipalities and their > police forces don't even have any specific duty to protect individuals: If > you call the cops to say someone is breaking in to your house but they > don't get there in time to protect you - well, it's sad, but they have no > *particularized* responsibility to protect *you*, and you have no recourse. > > -- Jerry > > >

1 0

Re: [Cryptography] Fwd: 78716A
by Lodewijk andré de la porte 22 Dec '14

22 Dec '14

On Dec 19, 2014 1:03 AM, <dj(a)deadhat.com> wrote: > > > That organization advised that the request, as worded, is overly broad. > > 'Overly broad' is not the limiting factor. > > I made an FOIA request that they tell me where I've traveled (I don't have > records, but I know the government does and they want me to fill in where > I've been on a form). > > It couldn't be less broad. > > I'm still waiting for a response 6 months later. Good request though.

2 1