- cypherpunks - lists.cpunks.org

Re: 1.1.1.1 Fast Privacy-Last DNS Service
by grarpamp 03 Apr '18

03 Apr '18

On Mon, Apr 2, 2018 at 1:57 PM, Razer <g2s(a)riseup.net> wrote: > I wonder if Clownflare is still hosting those AQ honeypot "chatrooms" to > find useul idiots for the CIA? Why bother with those retarded idiots who can hardly manage to blow themselves up... when they've got you, the oh so smart ones, the revolutionaries, to out yourselves to them for free with your webtv's smartphone's facebook's... in your own damn livingroom's... the formerly most secure chatrooms of all. You fucktards.

2 1

Fwd: [tor-relays] Estimation of bridge traffic / Bridge or relay needed?
by grarpamp 03 Apr '18

03 Apr '18

---------- Forwarded message ---------- From: <jackoreamnos(a)tutanota.com> Date: Tue, Apr 3, 2018 at 4:38 AM Subject: Re: [tor-relays] Estimation of bridge traffic / Bridge or relay needed? To: tor-relays(a)lists.torproject.org Cc: tor-relays(a)lists.torproject.org Want to follow up the discussion on encouraging people to run relays. The powers that be where I live now heavily frowns upon VPN and Tor. And a fair number in our community is sensing further tightening in the air. Today we had a discussion, we had a lot of questions. I try to summarize below and see if we can fact-check and learn more. (1) Advocacy: Background - Someone raised the idea that we should each run a Tor relay in each of our house. Someone said the powers that be cannot put all of us in jail if we get enough people to host Tor. A parent among us said, "I never before had an urge to run a VPN or Tor. But when running encryption and sharing a VPN tunnel with a criminal on the next packet is required to ensure your freedom to read BBC, you feel queasy and you worry what your underage kids might stumble on, things they are too young to deal with on the dark web. But loosing the freedom to read BBC makes me feel beyond queasy, beyond nauseated, and bilious, and sick..." He used a few more adjectives that I cannot spell. There were non technical users who expressed interest to run a non-exit relay, but only if they will be able to run an installer and click the next button and only use default options. And only if they can feel assured they understand the risks. (1.a) Their underage kids will not stumble on the dark web before they are old enough to know they are doing. Underage kids should not be able to stumble on the dark web on the computer the Tor relay is run (and what must be done to assure that). And underage kids should not be able to stumble on the dark web by being on the same WIFI network in the house. (1.b) There are different degrees of fear of risks. Some are brave enough to run a non-relay in the house where they live. We think they need to assume they can be detected. Some were only willing to consider if the non-exit Tor cannot be easily detected. The definition of not easily varies: - as difficult to detect as the obfs4 bridge protocol (but someone said the bridge protocol only works between a Tor client and a Tor relay, but not between a Tor relay and another Tor relay; we have not been able to confirm this by our own efforts) - as difficult as the meek protocol (someone said the idea of meek is to encrypt Tor packets and send it to a unblocked IP/domain, where the traffic is decrypted and copied to a proper Tor network); someone said he is willing to run a meek server to accept incoming connections, but only if the outgoing connections are at least obfs4. Someone said if we have many thousands of these tiny meek nodes hosted at our home address, we offload the official meek proxies run on amazon and azure. And even if we contribute only 1kb/s each, it is going to be more than sharing the cost - the idea is we want a high level of household penetration so that the powers that be find it hard to clamp us down. - as difficult to detect as protected by a VPN. Someone said he would pay for a VPN package, run a relay on a machine which only talks to the world through the VPN. But someone said that works for a Tor client, but not for a relay because a relay would need to have its own IP and listen on certain ports on that IP, and so because you VPN exit point will not let you listen on any port numbers, even if he is willing to pay for a commercial VPN that exits in another country, his tor relay cannot accepts incoming connections. Some people would give up running a non-exit if this cannot be done. The only IP they can access is where they sleep, and they want to be able to sleep well. Not just them, but their wife and their children needs to sleep well too. Is the ability to accept incoming connections a requirement to running a non-exit relay? (2) There is a sentiment that we should get "every household to run a Tor" so that the powers that be will find it much harder to clamp down. Someone said he would install a Tor relay on every single computer he controls, to support journalism and news reporting, if what he contributes ONLY goes towards beating censorship against the media. He said he feels it is a much easier sell if the sole function of that node is to allow people living under censorship to read newspaper. He said if there is a funding campaign to deploy the onion enterprise toolkit for news media, he will want to direct his donation specifically to those. Or if he can run an exit relay ONLY for for the BBC news domain. He said, then running Tor is a much easier sell to his family and friends. If the police brings him in, the back and forth will not be "we observed spams and hacks and viruses and copyright infringements on your IP", but the back and forth will just be "you are reading something you should not read on the web" and we can have a much better chance of advocating for "Tor relay in every home". We know in general Tor supports more network access than reading the news. But compared to countries where the freedom to run Tor exits are protected by law, living where we live we want to make it a much easier sell, and eventually to get a higher penetration so that the penetration itself becomes a barrier for the powers that be to clamp us down. And as we are not experts, and as we run real risks, and as we want our family to sleep well, we have framed our "requirements" or "prerequisites" to run Tor relays almost beyond the reasonable. You might want to call us paranoid. If there is a way for us paranoid people to run relays and to advocate, please help us. Jack 2. Apr 2018 07:36 by arma(a)mit.edu: On Mon, Apr 02, 2018 at 03:32:00AM -0400, grarpamp wrote: > https://www.torproject.org/docs/faq#RelayOrBridge > > "If you have lots of bandwidth, you should definitely run a normal relay. > If you're willing to be an exit, you should definitely run a normal > relay, since we need more exits. If you can't be an exit and only have a > little bit of bandwidth, be a bridge. Thanks for volunteering!" The 'normal's above are ambiguous and conflicting. Replace them with 'non-exit' and 'exit'. Ah, actually no, replace them with "relay" and "relay". In that text, "normal relay" is as opposed to "bridge relay". The FAQ text sure needs some updating. --Roger _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays _______________________________________________ tor-relays mailing list tor-relays(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2 1

Fwd: Pursuance's Progress: Updates Galore! 💥
by grarpamp 03 Apr '18

03 Apr '18

---------- Forwarded message ---------- From: Pursuance <team(a)pursuanceproject.org> Date: Tue, Apr 3, 2018 at 4:01 AM Subject: Pursuance's Progress: Updates Galore! 💥 Upcoming RightsCon talks, Kickstarter campaign, Aaron Swartz Day video, Live AMA recording, and more! Pursuance *Democracy bites back* After a stint of radio silence, we're back! For the past few months we've been fully immersed in building Pursuance -- secure, open source software that amplifies the efforts of activists, journalists, and nonprofits, leading ultimately to a vast and formidable ecosystem of opposition to institutionalized injustice. We've made a lot of progress on the platform, we're excited about the future, and we want you to get involved. Here's the rundown. *WHAT'S BEEN HAPPENING* (aka "the haps") 1. Pursuance software development and alpha testing Pursuance Project staff and volunteers have been hard at work on building the Pursuance System. It's reached the stage in its development where the Pursuance team has begun using it to coordinate ourselves internally -- that's right, using Pursuance (the software) to coordinate Pursuance (the nonprofit)! -- helping us to ensure the software is developed to meet real-world needs by using it ourselves and sorting out the kinks as we go. *Want to play around with the platform yourself and help shape its direction?* Schedule a session with our technical lead and project manager Steve Phillips by emailing team(a)pursuanceproject.org with the subject line "Pursuance testing: let's do this" <team(a)pursuanceproject.org?subject=Pursuance%20testing%3A%20let's%20do%20this&body=Hi%20Steve%20and%20the%20rest%20of%20the%20Pursuance%20team%2C%0A%0AWhat%20I'm%20excited%20about%20Pursuance%2Fwhat%20I%20want%20to%20use%20it%20for%3A%20> . (And if you're a Linux-y/sys admin/command line person or developer, check out github.com/PursuanceProject/pursuance <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> ("check out", git it?). We've written a deploy script and some documentation that will make it easier for you to spin up your own instance. Oh, and send us feedback! <team@pursuanceproject.org?subject=Feedback&body=%23%23%20What%20I%20liked%0A%0A%0A%23%23%20What%20I'd%20like%20to%20see%20improved%0A%0A%0A%23%23%20What%20I'd%20like%20to%20see%20added> ) 2. Spreading the message The Pursuance team has traveled far and wide over the past few months, recruiting developers and communicating the greater vision. We performed the first public, live demo of Pursuance <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> at Aaron Swartz Day in San Francisco, right after attending re:publica in Dublin, where we spoke to nonprofits about their software needs, especially related to managing and amplifying the effectiveness of volunteers. In December, project lead Steve Phillips conducted a session on Pursuance at Chaos Communication Congress in Germany, working alongside our Director of Operations Annalise Burkhart and security/programming volunteer AJ Bahnken. We enjoyed showcasing Pursuance and the associated vision, learned a lot from the international crowd, and got some great ideas and feedback during a couple epic brainstorming sessions. (Image: AJ, Steve, and Annalise in Germany at CCC.) 3. Explaining the platform (videos) Just last week, Barrett Brown busted out the ol' whiteboard and his brand-spankin'-new web cam to describe the organizational structures the Pursuance System will support; you can watch that video here <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> . *In case you missed it:* here's the recording of the Live AMA that Barrett and Steve did in September, answering your questions: https://www.youtube.com/watch?v=SOoPyovqk2Q <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> . *WHAT'S COMING UP* 1. We're putting together a Kickstarter campaign! To rapidly accelerate the development of Pursuance, we're designing a Kickstarter campaign that will cover costs for two of our core developers to work on the system full-time! And it's going to include some *killer* (though non-violent) rewards. Be on the lookout for more information about this, and tell all your friends! We'll alert you when it goes live *near the end of May*. 2. We're going to RightsCon! RightsCon is an international tech and human rights conference, organized by the digital rights NGO Access Now. RightsCon 2018 will take place May 16-18 in Toronto, Canada. Members of the Pursuance team have been invited to speak at not one, but *two* sessions! Technical lead and project manager Steve Phillips will be presenting a live demo of the Pursuance platform, and Barrett Brown will speak as part of a truly all-star panel covering lessons learned from past activism, plus their visions for 21st century activism. The other panelists include Naomi Colvin (Courage Foundation), Birgitta Jónsdóttir (poetician, spokesperson for the International Modern Media Institute (IMMI), and prominent member of the Pirate Party in Iceland), Jesselyn Radack (whistleblower, attorney representing many whistleblowers, and heads the Whistleblower and Source Protection Program (WHISPeR) at ExposeFacts), Diani Barreto (journalist and researcher on whistleblowing at ExposeFacts and Courage Foundation), and Thomas Drake (NSA whistleblower). Our team will be at RightsCon the entire weekend, so if you'd like to chat, let us know! <team(a)pursuanceproject.org> *HOW YOU CAN GET INVOLVED* 1. Volunteer for user testing As mentioned above, if you’re interested in testing out Pursuance, email us <team(a)pursuanceproject.org>! This is a great way to help us tailor the software to your needs; that, or you just really want to dole out some criticism. Either way, we'd love your feedback. 2. Lend your design/UX skills! With all these recent developments, we’re looking for a lead product designer to join our growing team. Ideally, you would be able to contribute 15 hours/week to perfecting Pursuance's app UX on both desktop and mobile (web). You'll be actively engaged with the rest of the team, and play a critical role. It's helpful if you're located in the Bay Area, but not a requirement; a number of us work remotely. Pursuance is a labor of love; nobody is getting paid to do this (yet). We are looking for an individual who, just like everyone else involved, is willing to volunteer their time and energy for a future they believe in. We have a Kickstarter campaign going live in the near future; if it’s successful, we’ll be able to compensate you for your hard work. Until then, we offer camaraderie and bottomless gratitude. Help us make this great! All interested parties should contact team(a)pursuanceproject.org with "Pursuance UX" in the subject line <team(a)pursuanceproject.org?subject=Pursuance%20UX>. 3. Contribute code Calling all (React) coders! Here's what you need to get started: Tech stack: React, Redux, Bootstrap; Go, Postgres, PostgREST; WebSockets; NaCl and miniLock <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> for crypto. Will later use React Native to build Android and iOS apps, and Electron for the cross-platform desktop app, once the web app and backend APIs have further stabilized. GitHub gist getting you up to speed ASAP: gist.github.com/elimisteve/ 452f68191295362d76cbdfc09543fc01 <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> . Primary GitHub repo: github.com/PursuanceProject/pursuance <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> . See README.md for dev environment setup instructions. Link to our developer chat server (join the "pursuance" channel): bit.ly/cwc-mminvite <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> . 4. Contribute $$$ The funds you donate will enable our programmers to devote more of their time to developing the Pursuance System. We accept various cryptocurrencies <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> and PayPal <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…>. Every bit helps! *GET IN TOUCH* Do you have a question or would like to get involved somehow, but don't know where to start? Just send an email to Annalise Burkhart <annalisejb(a)protonmail.com>, Director of Operations. She has been coordinating outreach, and would love to hear from you. We'll keep you updated on Pursuance's developments and the team's activities in the coming weeks and months. Thanks again for your support! Sincerely, The Pursuance Team *"Political questions are far too serious to be left to the politicians." --Hannah Arendt* <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> <https://pursuanceproject.us15.list-manage.com/track/click?u=0bc58cfb12bee1a…> <team(a)pursuanceproject.org> *Copyright © 2018 Pursuance Project, All rights reserved.* You are receiving this email because you subscribed to updates at PursuanceProject.com. *Our mailing address is:* Pursuance Project 3419 Westminster Avenue #25 <https://maps.google.com/?q=3419+Westminster+Avenue+%2325+Dallas+,++TX+75205…> Dallas <https://maps.google.com/?q=3419+Westminster+Avenue+%2325+Dallas+,++TX+75205…>, TX <https://maps.google.com/?q=3419+Westminster+Avenue+%2325+Dallas+,++TX+75205…> 75205 <https://maps.google.com/?q=3419+Westminster+Avenue+%2325+Dallas+,++TX+75205…> Add us to your address book <//pursuanceproject.us15.list-manage.com/vcard?u=0bc58cfb12bee1ab9397dbea2&id=0f185c84db> Want to change how you receive these emails? You can update your preferences <https://pursuanceproject.us15.list-manage.com/profile?u=0bc58cfb12bee1ab939…> or unsubscribe from this list <https://pursuanceproject.us15.list-manage.com/unsubscribe?u=0bc58cfb12bee1a…> . [image: Email Marketing Powered by MailChimp] <http://www.mailchimp.com/monkey-rewards/?utm_source=freemium_newsletter&utm…>

1 0

Compelled Decrypt, Fake Hardware, Fake Legislation
by grarpamp 03 Apr '18

03 Apr '18

https://www.eff.org/deeplinks/2018/04/fbi-could-have-gotten-san-bernardino-…

1 0

US CRS Reports Now Freed
by grarpamp 03 Apr '18

03 Apr '18

https://www.eff.org/deeplinks/2018/04/you-always-wanted-read-crs-reports-no… https://medium.com/demand-progress/why-i-came-to-believe-crs-reports-should…

1 0

OpenBSD 6.3 Released
by grarpamp 03 Apr '18

03 Apr '18

https://www.openbsd.org/63.html https://marc.info/?l=openbsd-announce&m=152267725618055 https://news.ycombinator.com/item?id=16735978 https://tech.slashdot.org/story/18/04/02/1954220/openbsd-63-released https://www.reddit.com/r/openbsd/comments/88zzk8/openbsd_63_released/ Supposedly the most secure OS available to the general public. Regardless, an interesting flavor..

1 0

1.1.1.1 Fast Privacy-Last DNS Service
by grarpamp 02 Apr '18

02 Apr '18

https://1.1.1.1/ https://blog.cloudflare.com/announcing-1111/ https://labs.apnic.net/?p=1127 " We will never log your IP address (the way other companies identify you). And we’re not just saying that. We’ve retained KPMG to audit our systems annually to ensure that we're doing what we say. " Such gift to an internet full of April's fools, lol. Raw logs purged after analysis. Project handed off to greater abusers after five years of fake-privacy marketing and foolish service entrenchment. Where's the audits? https://www.reddit.com/r/privacy/ https://news.ycombinator.com/item?id=16727869 https://yro.slashdot.org/story/18/04/01/1625202/cloudflare-launches-1111-co… https://www.reddit.com/r/sysadmin/comments/88b7vh/cloudflare_dns_resolver_t… https://www.reddit.com/r/networking/comments/88bz9b/cloudflare_announcing_1… Only the Finest of Swiss Cheese https://www.cloudflare.com/security-policy/ http://labs.apnic.net/privacy.shtml https://www.apnic.net/about-apnic/corporate-documents/documents/corporate/p… More Policy https://news.ycombinator.com/item?id=16728822 DoH https://labs.apnic.net/?p=1074 DANE / Lets Encrypt https://labs.apnic.net/?p=938 RFC7258 https://tools.ietf.org/html/rfc7258

4 3

The Cancer of Postgrads vs Open-ish Progress
by grarpamp 02 Apr '18

02 Apr '18

https://news.slashdot.org/story/18/03/31/1857255/nature-explores-why-so-man… https://science.slashdot.org/story/18/03/31/0124212/two-studies-find-clear-… https://news.slashdot.org/story/18/03/31/0622248/open-source-risc-v-process…

4 5

Nuclear Fusion
by grarpamp 02 Apr '18

02 Apr '18

https://news.ycombinator.com/item?id=16730613 In news lately.

1 0

[MONEY] - it's on folks, China gonna trade Yuan/Oil futures, "fully convertible" to physical gold
by Zenaan Harkness 02 Apr '18

02 Apr '18

No wonder the 'Merrycans are hopping nutcases bent on destroying a century of international law and anything remotely resembling diplomacy :) Seems Trump has delayed the onset of war, and if China gets going in the nick of time, the USA will be unequivocally seen for the absolute firetrucking bullies they are if they do start WW3! Good luck world, http://russia-insider.com/en/politics/game-changer-china-buy-oil-gold-backe… http://russia-insider.com/en/politics/smoke-pours-russian-consulate-secrets… Panic sets in for the Israelis: The Reason For Netanyahu's Panicked Flight to Russia http://russia-insider.com/en/politics/reason-netanyahus-panicked-flight-rus… "Israel has understood that it backed the wrong side in Syria – and it has lost."

1 1