- cypherpunks - lists.cpunks.org

Privacy Enforced [was: Comsec as Public Utility Beyond Illusory Privacy]
by coderman 13 Mar '14

13 Mar '14

On Thu, Mar 13, 2014 at 6:59 AM, John Young <jya(a)pipeline.com> wrote: > Snowden may have raised the prospect of comsec as a public utility > like power, water, gas, sewage, air quality, environmental protection > and telecommunications... > > Comsec as a right for human discourse rather than a commercial > service could enforce privacy beyond easy violation for official > and commercial purposes... > > The problem will be as ever the commercial and governmental > exploiters aiming to protect their interests against that of > the public. i suggest changing the balance of power in favor of the public. four distinct efforts would do: 1) Blanket Legal Invulnerability Remove all criminal and civil liability for "hacking", computer trespass, and all related activities performed over data networks; establish proactive "shield" legislation to protect and encourage unrestricted security research of any subject on any network. extend to international agreements for blanket protection in all jurisdictions. 2) Educational Support Everywhere Establish lock picking, computing, and hacking curriculum in pre school through grade school with subsidized access to technical resources including mobile, tablet, laptop test equipment, grid/cloud computing on-demand, software defined radios with full receive/transmit, and gigabit internet service or faster. 3) Collaborative Competitions Organize a program of blue and red teaming challenges for educational and public participation at the district, regional, and national level cultivating expertise and rewarding it with hacking toys, access, and monies. 4) Privileged Positioning Direct and unrestricted backbone access to various individuals or groups who demonstrate competence in either the educational or competitive realms, in order for them to mount additional attack strategies against any reach-able target. this access must consist of both passive taps of backbone traffic as well as injection taps for raw packet transmission at core rates. this should be available on the Internet backbone at internet exchanges, private fiber through public right of way, and core networks of operators of licensed wireless spectrum. 0) end result / strong attractor: Open software and hardware widely in use in post-privacy-protection-purge future will invert power structure to defender with near unassailable advantage in "cyber domain". Any attacker required to compete against the global, collaborative, massive, iterative-crowd-hardened systems publicly in use. (good luck!)

1 0

TAO QUANTUMINSERT Bonanza
by John Young 13 Mar '14

13 Mar '14

If NSA and GCHQ were, are, doing these alleged operations as surmised with slightest evidence greatly amplified, cherry-picked and moshed like a Tom Clancy hot seller, it is likely the Devil's Duo are meticulously tracking, siphoning and implanting: 1. Those reporting, editing, checking, formatting and posting these stories and documents from various countries and those spying all these from inside and outside. 2. The hosting and keyservers of The Intercept, First Look and interconnections and those spying all these from inside and outside. 3. The transceivals among the media staff, lawyers, bankers, bedmates and those spying all these from inside and outside. 4. The comsec wizards being consulted and those they are leaking stuff to and those spying all these from inside and outside. 5. The officials being asked for comment and their roladexes of insiders and those spying all these from inside and outside. 6. The multiple-agencies counter-counter-intel agents double-checking everyone involved and those spying all these from inside and outside. 7. The thousands necessarily swept up in the spiderwebs of linkages for immediate or distant actionable operations and those spying all these from inside and outside. 8. The other national spies working the same territories of gullible targets armored with the world's greatest comsec protection, no matter what ex-spies and ex-contractors claim is absolutely dependable means to assure nobody is swiping and siphoning and those spying all these from inside and outside. Months, years to come, there will be even more gushings about what has been dribbled out with insufficient context to understand what is media hyperbole and what is worth worrying about and those spying all these from inside and outside standards orgs, FOI racketeering, crypto entrepreneurs of com, edu, org and open source treacheries. Recap: About 1,333 Snowden documents have been released by commercial media, none for free. Greenwald has said he gets about $1,500 per story in which he gets a byline. Excluding the $1M signing bonus he has allegedly got from Omidyar, he has made at least another million. Gellman, Poitras perhaps the same (Poitras may have gotten a similar signing bonus). Other dozens of reporters were paid a percentage of that. So it might be estimated the gang of reporters have garnered some $4-5M so far. Media outlets have probably earned 10 times that in sales and ads. The USG, allies and enemies have probably received similar amounts to respond to Snowden, some $50-100M. So call it a $200-500M affair to date. If the USG and other govs work the bonanza as predicted, over 10-20 years the operation will generate, conservatively, a $1-5T boost for comsec religionists and exploiters of media, spies, universities, telcos, web operators, program peddlers, AV magicians, games designers, not counting SM and SEOs and spammers and botnets. Black markets could match that amount, or multiples of it. Meanwhile the comsec industry -- gov, mil, com, edu, org -- will continue reaping the rewards of faith-based sin and salvation. Thanks, Ed. At 01:57 AM 3/13/2014, coderman wrote: >https://s3.amazonaws.com/s3.documentcloud.org/documents/1076891/there-is-mo… > >"TAO implants were deployed via QUANTUMINSERT to targets that were >un-exploitable by _any_ other means." > >if you were on this short list of 300 - you were doing something right! > > >--- > > >Snowden Gatekeepers (TM): > what were these 300 like? > what can we learn?

1 1

2010 TAO QUANTUMINSERT trial against 300 (hard) targets
by coderman 13 Mar '14

13 Mar '14

https://s3.amazonaws.com/s3.documentcloud.org/documents/1076891/there-is-mo… "TAO implants were deployed via QUANTUMINSERT to targets that were un-exploitable by _any_ other means." if you were on this short list of 300 - you were doing something right! --- Snowden Gatekeepers (TM): what were these 300 like? what can we learn?

2 1

QUANTUMINSERT "wide stack" covert network communication
by coderman 13 Mar '14

13 Mar '14

in the discussion regarding well positioned injection points on the backbone (QUANTUMINSERT) i have not yet seen discussion of using these well positioned injection points for covert network connections. consider that you are eavesdropping on return path for a given un-used, high address space of a third party (a lot of that 15.0.0.0/8 is idle :) consider that you can inject arbitrary packets into the egress for same net block (even if upstream, still sufficient to match route). you can now establish a covert TCP connection appearing to come from the high space of 15.0.0.0/8, of which HP only sees the returning (encrypted) martians. (and this assumes they're even watching!) this "wide stack" approach provides cover via multitudes of idle address spaces of third parties, while the actual communicators are hidden. anxiously awaiting the details on how this is used... *sacrifices chickens to the "Snowden Release Gatekeepers" (TM)*

1 2

Fwd: Satoshi/Newsweek
by Robert Hettinga 13 Mar '14

13 Mar '14

If anyone wants to talk to a reporter about who Satoshi is… Cheers, RAH Begin forwarded message: > From: Rob Wile <rwile(a)businessinsider.com> > Subject: Satoshi/Newsweek > Date: March 11, 2014 at 11:28:55 AM AST > To: hettinga(a)gmail.com > > Hey Bob, > Thanks for your Twitter bumps. So I really only have one question, which is simply what the process will have to be for discovering the identity of Satoshi, assuming Newsweek got it wrong. It seems like the only real way will be for the guy/gal to out himself, but wanted to hear any additional thoughts you had. > > Thanks, > > Rob > > -- > Rob Wile > Economics Reporter > Business Insider > (w): 646-376-6092 > (c): 312-806-6565 > rwile(a)businessinsider.com > @rjwile

13 18

Senator Feinstein, the document leaker
by Gregory Foster 13 Mar '14

13 Mar '14

US Senator Dianne Feinstein (Mar 11) - "Feinstein Statement on Intelligence Committee’s CIA Detention, Interrogation Report": http://www.feinstein.senate.gov/public/index.cfm/press-releases?ID=db84e844… Wherein Senator Feinstein states: > We have no way to determine who made the [CIA's] Internal Panetta Review documents available to the committee. Further, we don’t know whether the documents were provided intentionally by the CIA, unintentionally by the CIA, or intentionally by a whistle-blower. ...and then explains why Senate staffers exfiltrated the documents from the CIA's secure facility: > Unlike the official response, these Panetta Review documents were in agreement with the committee’s findings. That’s what makes them so significant and important to protect. Looks like this information wanted to be free? Quite a story emerging here. gf -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/

2 2

Update on Giving project up on Bitcointalk [abis.io]
by Odinn Cyberguerrilla 11 Mar '14

11 Mar '14

Hi, Here's an update on the project I've been focusing on. https://bitcointalk.org/index.php?topic=511423.msg5645979 Apart from the stuff mentioned on the bitcointalk post, if you know anyone (yourself included) who is good at video, we are looking to make a new and better video (something short for youtube) to encapsulate the idea that would be visually descriptive of the wallet in use. Please circulate widely. Feel free to e-mail me, also on and off I am available for chat (XMPP, via Pidgin OTR / Adium / Chatsecure) at ABISprotocol(a)dukgo.com Cheers

1 0

Re: [tor-talk] Craigslist...
by grarpamp 11 Mar '14

11 Mar '14

> Based on my experiences with the (terrible) Craigslist spam ghosting > algo, attempting to get help for that over the random junk I was > legitimately trying to sell which got me ghosted, and then doing a lot > of research on similar problems had by other users... > > ...which led me to reading about Craigslist's history of "litigation > over innovation" and the (inevitable and correct) complaining about > how terrible every /other/ part of the site is... > > ...and the attempts to talk to Craigslist about such problems by users > and litigation targets, all lead me to believe that attempting to > communicate with Craigslist in any way is like talking to a > particularly recalcitrant wall. They do not care. Sadly their US > monopoly position makes it easy for them to act like bad netizens, and > they do. Since the classified market is basically free under them, > they're like the Windows monopoly. Nobody else can get a fair shake > to take them down, even though a lot of people dream of it. > > Best of luck. :( I actually think there's lots of oppurtunity here, with many online services actually... to win by doing things better in a way that serves the users, not primarily the company. There's money in that. re CL: Afaik there's no patent or trademark on classifieds or 'community' moderation. You could win simply by doing that, not pissing off your users by ghosting (aka stating why your rejection happened), and say umm not silently dropping in/out bound mail, and not trying to play nanny mail relay. Non agnostic or faulty delivery liability anyone? By the way, did you know CL has and does archive every post (and quite probably every image and email) since inception in MongoDB? Want to know their reason? Supposed regulatory compliance and 'Oh, our users might want to repost an ad'. Really? From a month ago, a year ago, ten years ago? Bullshit. They're needless data whores acting against you. Anyway, that's off Tor topic. But I will restate my request for blocking policy/implementation info, rationale, and discussion, for any internet service really, whether on or off list.

1 0

Re: Jim Bell comes to Cypherpunks?
by Jim Bell 11 Mar '14

11 Mar '14

Twitter for me? My impression is that this is more for issues where seconds, minutes, or hours count. I don't know who I'd want to follow so closely as to monitor Twitter. As for me saying something? Well, I don't know if I have that much to say. It's not like I don't have opinions...I have many of them. But, right now the world is awash in opinions, from blogs to twitter. What would I talk about...uh...other than the obvious? What, in general, would people want ME to talk about? Further, right now my main interest is in promoting and developing my isotope-modified fiber optic invention. http://www.freepatentsonline.com/WO2013101261A1.html Jim Bell ________________________________ From: cypherpunks <cypherpunks(a)riseup.net> To: John Gilmore <gnu(a)toad.com> Cc: "barlow(a)eff.org" <barlow(a)eff.org>; Bell Jim <jamesdbell8(a)yahoo.com>; "cypherpunks(a)riseup.net" <cypherpunks(a)riseup.net> Sent: Wednesday, January 1, 2014 1:45 PM Subject: Re: Jim Bell comes to Cypherpunks? I've no idea if there're any physical cpunks meetings. Living in Europe and visiting some hacker conferences and hackerspaces from time to time. Guess - it would be you Golden State guys to do some. On the other side - Jim, how about open a twitter account and be part of the social media thingy too? :) --Michael Am 01.01.2014 um 20:08 schrieb John Gilmore <gnu(a)toad.com>: > Are there physical cypherpunks meetings these days? I don't know of any. > There are many hackerspaces in various cities that have regular meetings, > but I don't attend any and don't know which ones relate to cypherpunk > topics. > > We (or anybody) could restart such meetings, I suppose... > > John

7 11

journalist + snowden leaks == keep away forever?
by coderman 11 Mar '14

11 Mar '14

"Bart Gellman reveals government officials have warned him he's exposing himself to Espionage Act liability by publishing Snowden documents"

1 1