- cypherpunks - lists.cpunks.org

hey grarpamp, got a quote from your friend perry metzeer.
by juan 18 May '18

18 May '18

"I don't give a shit about the power structure -- I just think that anyone telling me what I can and cannot see, what I can and cannot write, and what I can and cannot sell, is my enemy." that's an interesting quote of course cause metzger is the same asshole who tells people what they can or cannot write in 'his' mailing list. a form of fascist censorship that you coincidentally support, right?

3 3

EFail - OpenPGP S/MIME Vulnerability
by grarpamp 17 May '18

17 May '18

https://efail.de/ https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060315.html https://efail.de/efail-attack-paper.pdf https://twitter.com/matthew_d_green/status/995989254143606789 https://news.ycombinator.com/item?id=17064129 https://www.eff.org/deeplinks/2018/05/attention-pgp-users-new-vulnerabiliti… https://arstechnica.com/information-technology/2018/05/critical-pgp-and-smi… The EFAIL attacks break PGP and S/MIME email encryption by coercing clients into sending the full plaintext of the emails to the attacker. In a nutshell, EFAIL abuses active content of HTML emails, for example externally loaded images or styles, to exfiltrate plaintext through requested URLs. To create these exfiltration channels, the attacker first needs access to the encrypted emails, for example, by eavesdropping on network traffic, compromising email accounts, email servers, backup systems or client computers. The emails could even have been collected years ago.

6 11

Tor Project Picks New Executive Director, Old One Joins Board
by grarpamp 17 May '18

17 May '18

https://blog.torproject.org/announcing-tors-next-executive-director-isabela… April 23, 2018 Shari announced her retirement from the Tor Project at the end of February, and the search for our next Executive Director is already over. We're thrilled to announce our next ED, Isabela Bagueros. Isa joined the Tor Project as Project Manager in 2015 and has led teams in collaborative strategy building and roadmapping unprecedented at the organization. She also leads Tor’s UX team in implementing critical usability improvements and is leading an overhaul of Tor’s website. “Isa’s contributions to Tor are too many to name here,” said Shari Steele, Tor’s current Executive Director who was brought on in 2015 to make the organization more operationally sound. “She brings global experience and perspective to privacy and censorship issues, and I could not be more confident in her ability to lead the organization into its next phase of growth and sustainability.” Thinking of the user first has always been a priority for Isa, and during her three years with the organization, the scope of her vision for Tor has expanded to include the health of the organization and network. “I think any person on the planet should have access to the Tor network and enjoy the privacy and security it provides,” said Isa. “That means we need a healthy and scalable network and a strong and diverse organization to support that. I’m looking forward to seeing Tor gain global recognition for the privacy protections and censorship circumvention it provides.” Now in a transition phase, Isabela will officially begin her position as Executive Director after she hires her replacement Project Manager and gets up to speed on the requirements of the job. Shari will continue as Executive Director until Isabela transitions and then plans to move into a consulting role through the end of the year. Shari will join the Tor Project Board of Directors beginning January 2019. ________________________________ About Isabela Bagueros Isabela Bagueros joined the Tor Project as Project Manager in 2015, after working as Product Manager for International and Growth at Twitter for four years. Isabela has been part of the free software community since the late 90s, and in 2007 she co-founded and worked as Latin America Project Manager for North by South, a startup from San Francisco focused on free software projects. Isabela was also part of Brazil’s Federal Government Free Software initiative, working in 2005 on the Ministry of Communications digital inclusion project and participating in 2006 on a project to migrate the IT of the Presidential Palace of Brazil to free software. Isa will give the keynote address at CryptoRave, May 4th in São Paulo, Brazil. About Shari Steele Shari Steele has been the Executive Director of the Tor Project since December 2015, coming to Tor after serving as Executive Director of the Electronic Frontier Foundation (EFF) for 15 years. Prior to the ED role, Shari was EFF’s legal director from 1992 to 2000, where she spoke widely about civil liberties law in newly emerging technologies. A graduate of Widener University School of Law, Shari later served as a teaching fellow at Georgetown University Law Center, where she earned an LL.M. degree in Advocacy. Shari has been on EFF’s Board of Directors since 2000 and will join the Tor Project Board of Directors in January 2019. About the Tor Project The Tor Project, Inc., is a 501(c)(3) organization headquartered in Seattle with paid staff and contractors of around 35 engineers and operational support people, plus many volunteers all over the world. Tor develops free and open source software for privacy and freedom online, protecting people from tracking, surveillance, and censorship. The Tor Project’s mission is to advance human rights and freedoms by creating and deploying free and open source anonymity and privacy technologies, support their unrestricted availability and use, and further their scientific and popular understanding.

3 2

Eyeballing North Korea, Spanking Trump
by grarpamp 16 May '18

16 May '18

http://www.nkleadershipwatch.org/ https://www.38north.org/ https://www.uskoreainstitute.org/ https://twitter.com/JChengWSJ/status/996586112222052353 https://www.reddit.com/r/worldnews/comments/8jrirc/nkorea_official_says_cou… https://www.independent.co.uk/news/uk/politics/eu-president-donald-trump-tu… https://www.reddit.com/r/worldnews/comments/8jv1dy/eu_president_tears_into_…

1 0

Cryptocurrency: Mining vs Fiat - Estimating GigaWats, Shrinking NanoMeters
by grarpamp 16 May '18

16 May '18

https://motherboard.vice.com/en_us/article/7xmvbq/bitcoin-energy-science-wo… https://www.cell.com/joule/fulltext/S2542-4351(18)30177-6 https://digiconomist.net/ http://blog.zorinaq.com/bitcoin-electricity-consumption/ https://hardware.slashdot.org/story/18/05/16/1713243/nobody-knows-how-much-…

1 0

Cell Carriers Selling and Giving Your Data Out, Breach Expose
by grarpamp 16 May '18

16 May '18

https://motherboard.vice.com/en_us/article/gykgv9/securus-phone-tracking-co… https://www.zdnet.com/article/us-cell-carriers-selling-access-to-real-time-… https://www.nytimes.com/2018/05/10/technology/cellphone-tracking-law-enforc… https://www.zdnet.com/article/securus-police-cell-phones-warrantless-tracki… https://news.ycombinator.com/item?id=17081684 https://www.locationsmart.com/try/ Cell carriers are selling access to your real-time phone location data The company embroiled in a privacy row has "direct connections" to all major US wireless carriers, including AT&T, Verizon, T-Mobile, and Sprint -- and Canadian cell networks, too. Kevin Bankston, director of New America's Open Technology Institute, explained in a phone call that the Electronic Communications Privacy Act only restricts telecom companies from disclosing data to the government. It doesn't restrict disclosure to other companies, who then may disclose that same data to the government. He called that loophole "one of the biggest gaps in US privacy law." SIM Card Baseband Secrets https://www.youtube.com/watch?v=31D94QOo2gY

1 0

Julian Assange / WikiLeaks: Surveilled and Arbitrarily Detained
by grarpamp 16 May '18

16 May '18

https://www.theguardian.com/media/julian-assange https://www.theguardian.com/world/2018/may/15/revealed-ecuador-spent-millio… https://www.theverge.com/2018/5/15/17357112/ecuador-embassy-julian-assange-…

1 0

RightsCon 2018: Live Activism and Pursuance Project Panels w/ Brown Drake Jonsdottir et al - via Access Now
by grarpamp 16 May '18

16 May '18

Pursuance Democracy bites back Activists, journalists, and nonprofits of the world -- unite! Here is the URL to our panel's livestream, which is live now! https://www.youtube.com/watch?v=GAe-PeEgv8w In general you can find our livestreams at https://www.youtube.com/c/PursuanceProject Our Tech Lead, Steve Phillips, is giving a talk that we're also livestreaming at youtube.com/c/PursuanceProject , at 2:15pm PT / 5:15pm ET today as well! The Background: We're at RightsCon! RightsCon is an international tech and human rights conference, organized by the digital rights NGO Access Now. RightsCon 2018 will take place May 16-18 in Toronto, Canada. Members of the Pursuance team have been invited to speak at not one, but two sessions! Technical lead and project manager Steve Phillips will be presenting a live demo of the Pursuance platform, and Barrett Brown will speak as part of a truly all-star panel covering lessons learned from past activism, plus their visions for 21st century activism. The other panelists include Naomi Colvin (Courage Foundation), Birgitta Jónsdóttir (poetician, spokesperson for the International Modern Media Institute (IMMI), and prominent member of the Pirate Party in Iceland), Jesselyn Radack (whistleblower, attorney representing many whistleblowers, and heads the Whistleblower and Source Protection Program (WHISPeR) at ExposeFacts), Diani Barreto (journalist and researcher on whistleblowing at ExposeFacts and Courage Foundation), and Thomas Drake (NSA whistleblower). Here is the URL to our livestream, which is live now! https://www.youtube.com/watch?v=GAe-PeEgv8w In general you can find our livestreams at https://www.youtube.com/c/PursuanceProject We'll keep you updated on Pursuance's developments and the team's activities in the coming weeks and months. Thanks again for your support! Sincerely, The Pursuance Team

1 0

OT is there place on earth where the sun doesn't rise from near east?
by Georgi Guninski 16 May '18

16 May '18

is there place on earth where the sun doesn't rise from near east? counterexample will be near the poles. there are two kinds of poles: geographic pole and magnetic pole. it appears to depend how they are placed: the middle of the line between them is a good candidate -- in this case exchanging them will swap directions.

3 4

extremely stealthy hardware Trojans - existing transistor dopant polarity changes
by Zenaan Harkness 16 May '18

16 May '18

Holy firetruck, Punkman, sh1rts gettin' real: Georg T. Becker, Francesco Regazzoni, Christof Paar, and Wayne P. Burleson in the abstract of a paper [PDF] https://link.springer.com/article/10.1007/s13389-013-0068-0 In recent years, hardware Trojans have drawn the attention of governments and industry as well as the scientific community. One of the main concerns is that integrated circuits, e.g., for military or critical-infrastructure applications, could be maliciously manipulated during the manufacturing process, which often takes place abroad. However, since there have been no reported hardware Trojans in practice yet, little is known about how such a Trojan would look like and how difficult it would be in practice to implement one. In this paper we propose an extremely stealthy approach for implementing hardware Trojans below the gate level, and we evaluate their impact on the security of the target device. Instead of adding additional circuitry to the target design, we insert our hardware Trojans by changing the dopant polarity of existing transistors. Since the modified circuit appears legitimate on all wiring layers (including all metal and polysilicon), our family of Trojans is resistant to most detection techniques, including fine-grain optical inspection and checking against "golden chips". We demonstrate the effectiveness of our approach by inserting Trojans into two designs—a digital post-processing derived from Intel's cryptographically secure RNG design used in the Ivy Bridge processors and a side-channel resistant SBox implementation—and by exploring their detectability and their effects on security. (From LWN Briefs: https://lwn.net/Articles/749980/ )

1 0