- cypherpunks - lists.cpunks.org

Three cheers for the NSA!
by jim bell 03 Aug '16

03 Aug '16

http://www.breitbart.com/jerusalem/2016/07/31/exclusive-nsa-architect-agenc… PHILADELPHIA – The National Security Agency (NSA) has “all” of Hillary Clinton’s deleted emails and the FBI could gain access to them if they so desired, William Binney, a former highly placed NSA official, declared in a radio interview broadcast on Sunday. Speaking as an analyst, Binney raised the possibility that the hack of the Democratic National Committee’s server was done not by Russia but by a disgruntled U.S. intelligence worker concerned about Clinton’s compromise of national security secrets via her personal email use. Binney was an architect of the NSA’s surveillance program. He became a famed whistleblower when he resigned on October 31, 2001, after spending more than 30 years with the agency. He was speaking on this reporter’s Sunday radio program, “Aaron Klein Investigative Radio,” broadcast on New York’s AM 970 The Answer and Philadelphia’s NewsTalk 990 AM. Binney referenced testimony before the Senate Judiciary Committee in March 2011 by then-FBI Director Robert S. Mueller in which Meuller spoke of the FBI’s ability to access various secretive databases “to track down known and suspected terrorists.” Stated Binney: “Now what he (Mueller) is talking about is going into the NSA database, which is shown of course in the (Edward) Snowden material released, which shows a direct access into the NSA database by the FBI and the CIA. Which there is no oversight of by the way. So that means that NSA and a number of agencies in the U.S. government also have those emails.” [end of portion quoted] Jim Bell "It's an ill wind that blows no one good" Oboe: "It's an ill woodwind that no one blows good".

1 0

metro
by rysiek 02 Aug '16

02 Aug '16

Hey, apparently this is the best way to get the trolls and discourse poisoners to come out of the woodwork around here. So hell, why not. Here's some code, have funzies: https://git.occrp.org/libre/metro tl;dr setting up IPsec is a pain in the arse, so by the power of way too many lines of Bash it has been made simpler. Comments, pull requests, criticism welcome. -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147

10 27

Re: Scanning the Dark Web with Python (was Re: cypherpunks Digest, Vol 37, Issue 101)
by Cecilia Tanaka 02 Aug '16

02 Aug '16

Hi, Justin! :D Thank you very much for the nice answers! :D Sorry for being late, dear. Dramatic days, full of fury and sound, oh! I needed a dramatic pause for being coherent, haha!! ;) I loved Flipchan's message, but I don't feel secure enough for being creative or audacious when coding yet, sorry. I am so disastrous that, someday, I probably will summon Cthulhu while trying to learn Python decently, uh! Fear! :-/ Thank you again! Take care, keep coding and be happy. And if need something in case of eventual Brazilian crazy doubts or Cthulhu attacks, I'll be here, ok? :) Ceci On Jul 29, 2016 9:57 AM, "Justin Seitz" <justin.seitz(a)gmail.com> wrote: > Hey Ceci! > > No worries at all. > > You could do a multi-threaded curl process for sure, but I wanted to have > everything including the logic of handling newly discovered onions, when to > get a new Tor identity, and storing the data all to be handled so that you > can just run the script and walk away from it. > > Like many things in coding, you can do it a million different ways for > sure! > > Happy to answer any other questions you guys might have :) > > Justin > > On 2016-07-28 7:47 PM, Cecilia Tanaka wrote: > > Whoops, my bad! Wrong email address. Sorry everybody, Justin included! > :P > On Jul 28, 2016 10:34 PM, "Cecilia Tanaka" <cecilia.tanaka(a)gmail.com> > wrote: > >> Hi, Justin! Hope you are doing fine! :) >> >> I liked your project a lot and forwarded the message you had originally >> sent to the list "Data Driven Journalism and Open Data in Journalism" to >> two different lists. >> >> A Brazilian guy wants to talk with you about the project. He contacted >> me and I asked to talk directly to you. And, well, Flipchan sent this cute >> message now: >> >> === >> On Jul 28, 2016 9:45 PM, "Flipchan" <flipchan(a)riseup.net> wrote: >> > >> > Cant u scan tor in a simplier way?like generating .onion addresses then >> curl(ing) them with multiple threads in py?:) >> === >> >> Sorry, my programming is still a shame, even worst than my English. >> Please, may you answer to the questions? I am curious and will forward >> your answer to Python Brazil list too! :) >> >> Thank you very much! Good luck and success! <3 >> >> Ceci >> > > -- > Principal Consultant > Dark River Systems Inc. > Saskatoon, SK Canada > T: (855)-646-7468 > E: justin(a)automatingosint.com > @jms_dot_py <https://www.twitter.com/jms_dot_py> | OSINT Training > <https://register.automatingosint.com> | Hunchly <https://www.hunch.ly> >

2 2

Misc I2P / Tor
by grarpamp 02 Aug '16

02 Aug '16

https://bits.debian.org/2016/08/debian-and-tor-services-available-as-onion-… https://www.reddit.com/r/TOR/comments/4vifde/does_shari_steeles_husband_wor… https://geti2p.net/en/blog/post/2016/07/02/Summer-Dev-roundup-APIs HOPE XI Onion Uses https://www.youtube.com/watch?v=VmsFxBEN3fc

1 0

libsaxolotl
by stef 01 Aug '16

01 Aug '16

howdy, for those not sabotaging this list with noise, but wanting to hack on/with some crypto you might find this implementation of the axolotl protocol using nacl/libsodium entertaining: https://github.com/stef/libsaxolotl happy hacking,s -- otr fp: https://www.ctrlc.hu/~stef/otr.txt

9 15

Cloudflare reCAPTCHA De-anonymizes Tor Users
by grarpamp 01 Aug '16

01 Aug '16

https://cryptome.org/2016/07/cloudflare-de-anons-tor.htm 18 July 2016 Cloudflare reCAPTCHA De-anonymizes Tor Users A sends: Cloudflare's insistence on solving reCAPTCHA puzzles when visitors are coming from Tor exit nodes to one of the 2 million web sites that Cloudflare 'protects' can be very instrumental for traffic analysis and de-anonymizing of Tor users. This is how: The only non-public prerequisite for the de-anonymizing entity is the ability to monitor traffic between ISPs and Tor entry nodes, and traffic entering Cloudflare servers (no decryption required in either case). There are, of course, no 2 million Cloudflare servers, probably there is no more than few hundred. Each click on one of the images in the puzzle generates a total of about 50 packets between Tor user's computer and the Cloudflare's server (about half are requests and half are real-time responses from the server.) All this happens in less than a second, so eventual jitter introduced in onion mixing is immaterial. The packet group has predictable sizes and patterns, so all the adversary has to do is note the easily detectable signature of the "image click" event, and correlate it with the same on the Cloudflare side. Again, no decryption required. There likely are many simultaneous users (thousands), but they do not solve puzzles at the same time, and they do not click on the puzzle image at the same time. Simple math shows that disambiguating is trivial. If there is some ambiguity left, Cloudflare can conveniently serve few more images to specific users (or even random users, as long as within the same few seconds different users get different amount of 'correct' images.) This obvious opportunity is not the proof, but NSA would have to be utterly incompetent not to be exploiting it. No one is that incompetent.

3 2

Fwd: Re: Trolling the CIA Like a Boss
by Cecilia Tanaka 01 Aug '16

01 Aug '16

Hi, Digitalfolklore! Hope you wanted to send this message to cypherpunks lists, not for me in special. :) I don't know exactly what is happening, but received some strange private messages in different channels about Wikileaks. Err... Why me? Did someone say something or is just my famous oriental charm? :-/ Usually, I love Wikileaks, but I do not support some of their last actions. Everybody knows about strange leaks to manage USA elections, the Turkish leaks and deleted bizarre tweets. These things annoyed me a lot. I wasn't tweeting in the last times, but, few days ago, I admiss I tweeted about <https://ourresponse.org> and retweeted one of Wikileaks' account tweets about Jake. Just it. Only a cordial relationship between an institucional account and a poor unknowed follower, who had lost a lot of friends, contacts and followers in last months. I am only lurking on twitter, avoiding flaming wars and boring people. No much patience for all the drama. It's my usual behaviour in foreign lists too. I only broke my typical pattern because of Jake. I was already an old reader here and on tor-talk list, before being kickbanned. I am very noisy and chaotical, and my English stinks more than someone's... little cat! So, silence is always more comfortable for me, even being a talkative troll. :) Am I guilty of some of their bad leaks and was not informed about it yet? They were noisy and chaotical, but not mine! :) Ah, I always make a lot of strange things, but not personalized panties. If you want Snodew or Assange panties, you can suggest the idea to Wikileaks. Certainly they will be very sexy, but not like the charming "Put in" panties, hihi! :) It would be fun to use Tor Project panties. I still use their stickers in my notebooks and devices, even after all this mess. It's a pity that g-strings have no much area to onions or Schneier facts, hahaha!!! ;D https://www.zerodayclothing.com/schneierfacts.php There are Schneier Facts T-shirts, but cryptography in panties would be awesome, wow!!! Loved the idea!!! Ok, I will consider it just for fun! <3 ---------- Forwarded message ---------- From: "Digitalfolklore" <digitalfolklore(a)protonmail.ch> Date: Jul 30, 2016 2:03 AM Subject: Re: Trolling the CIA Like a Boss To: "Cecilia Tanaka" <cecilia.tanaka(a)gmail.com> waiting for wikileaks to make one with Snowden on it no one mentioning the Turkish leaks with all the women voters names in plain text, phone numbers, addresses? good old wikileaks keeping the innocent safe VH > -------- Original Message -------- > Subject: Re: Trolling the CIA Like a Boss > Local Time: July 16, 2016 2:14 AM > UTC Time: July 15, 2016 4:14 PM > From: cecilia.tanaka(a)gmail.com > To: cypherpunks(a)cpunks.org > > On Jul 15, 2016 12:00 PM, "Rayzer" <rayzer(a)riseup.net> wrote: > > > > He DOES know how to charm the media.... > > Yep, so much charm... ;) > > http://9gag.com/gag/a44bPMA > > And you can use it to avoid rapes too. It certainly will kill any healthy libido, aff... Uglier than elephant underwear for men! (>_<) ugh!!!

2 1

[RUS] Western regime's financial isolation of Russia now all but over
by Zenaan Harkness 31 Jul '16

31 Jul '16

This particular article is by a particularly humble author, but notwithstanding, the information is significant. Russia wins conclusively the Battle of the Eurobond Alexander Mercouris http://theduran.com/russia-wins-conclusively-eurobond-battle/ "Euroclear agrees to provide depository services to the Russian Eurobond, confirming that Russia is now able to raise Eurobond financing as it pleases." ( In other news, Trump continues to hold his line on Russia: http://theduran.com/crimea-rather-russia-ukraine-donald-trump-tells-george-… Bernie Sanders “sold his soul to the devil” http://theduran.com/bernie-sanders-sold-soul-devil-says-donald-trump/ USA regime's blaming Russia for "cyber attacks" must mean the USA has really clean hands in all of this right? FSB finds cyber-spying virus in computer networks of 20 state authorities http://tass.ru/en/politics/891681 ‘US deliberately destroyed CIA black site used for torture’ https://www.rt.com/op-edge/353564-us-destroyed-cia-black-site/ Humans! And, perhaps the efforts to handle in advance any fallout from the public media exposure starting to happen re tactical nuclear weapons. Psychopath Inc., UK edition. Poll: 66% of UK Voters Support a Nuclear Strike That Would Kill 100,000 "We must be willing to use nuclear weapons," said Prime Minister Theresa May boasting about having the courage to kill 100,000 or more people indiscriminately. http://sputniknews.com/military/20160731/1043814688/theresa-may-nuclear-war… Skydiving without a parachute: "US skydiver Luke Aikins, 42, set a free jump record by landing on a special net from a height of 7.6 kilometers (25,000 feet) without a parachute!" http://sputniknews.com/videoclub/20160731/1043806279/luke-aikins-record-sky… Putin: "I am not your friend, I am the President of Russia" http://www.fort-russ.com/2016/07/putin-i-am-not-your-friend-i-am.html )

1 0

worthless scumbag bruce schneier
by juan 31 Jul '16

31 Jul '16

"Real-World Security and the Internet of Things" "Governments need to play a larger role" signed - supreme leader of the 'tor project' corporataion.

4 6

Snowden Curative Censor vs Wikileaks Freedom
by grarpamp 31 Jul '16

31 Jul '16

https://www.washingtonpost.com/news/the-switch/wp/2016/07/28/a-twitter-spat… https://news.ycombinator.com/item?id=12197744 http://cryptome.org/0002/ja-conspiracies.pdf " Two of the biggest names in government data leaks clashed over how to responsibly release information on Twitter on Thursday. It started when Edward Snowden tweeted that WikiLeaks' "hostility to even modest curation" was a mistake. WikiLeaks wasn't happy about the criticism -- and hit Snowden back by accusing him of pandering to Democratic presidential nominee Hillary Clinton. "

1 0