- cypherpunks - lists.cpunks.org

Re: [Cryptography] [FORGED] Re: Severe flaw in WPA2 protocol leaves Wi-Fi traffic open to eavesdropping
by grarpamp 17 Oct '17

17 Oct '17

On Tue, Oct 17, 2017 at 12:22 AM, Henry Baker <hbaker1(a)pipeline.com> wrote: > Biggest problem IMHO is Android. There doesn't appear to be any way -- short of a class-action lawsuit -- to force the Android phone vendors to supply a firmware upgrade. They're already 12-24 months behind on CVE's. And I doubt that Google is willing to upgrade every Android phone on its own. Google only upgrades its own phones. Other makers only upgrade their own. The problem is the phone and closed hardware manufacturers, not particularly Google Android, other than not forcing them, and themselves, to open up more. Mail, call, and write them, tell them you want #OpenHW or you're not buying their latest crap. > Cyanogen is out of the Android OS business; LineageOS Yes, regardless of manufacturer, provided you have an unlocked or rootable bootloader, you can backup and update Android to the latest available official Google Android version, and in the process wipe out all the bloatware other makers included. Advised to check binary blobs / closed hardware beforehand especially if upgrading major versions. Lineage is the simple way to do similar. https://developer.android.com/ https://lineageos.org/ https://www.xda-developers.com/ https://postmarketos.org/ https://osmocom.org/projects/baseband https://en.wikipedia.org/wiki/List_of_custom_Android_distributions

1 0

Re: jimbellproject.org is looking for volunteers
by Cecilia Tanaka 17 Oct '17

17 Oct '17

On Oct 16, 2017 10:24, "\0xDynamite" <dreamingforward(a)gmail.com> wrote: (That's how wiki works if you don't know -- you're encouraged to change it towards better info. My ability to edit may be limited though as they've banned me on a hacker site for providing activist, engineering, and political info -- apparently they don't know that being a true hacker is a POLITICAL ACT, but hey maybe they're just high-schoolers.) You were banned for only 3 (three) days, Mark. And it occurred after the biggest of your overreactions, full of offenses and curses to all the members of the list. :P Please, consider to begin and use your own repository, dear. I am also thinking about beginning a small repository of Sci-Fi books, movies and comics. I loved when Mirimir, John and others here had discussions about Sci-Fi. In this list, we can find great suggestions of political and anarchist books too. I would like to make a little repository for them too. Take care. Peace.

3 5

Fwd: Essential Reading: Trump, Russia, Facebook & Twitter
by Cecilia Tanaka 17 Oct '17

17 Oct '17

Wish you all a lovely weekend! <3 Ceci PS: - If you like Telegram stickers, there is a recent "Edward Snowden pack" pretty cute. One of the stickers says "From Russia with love" and shows him sending kisses, hihi... <3 ------- "Don't let anyone rob you of your imagination, your creativity, or your curiosity. It's your place in the world; it's your life. Go on and do all you can with it, and make it the life you want to live." - Mae Jemison ---------- Forwarded message ---------- From: Colin Delany <cpd(a)epolitics.com> Hi folks, I've pulled together a list of good stories about two basic subjects, how the Trump campaign used tech/social media to win votes and how the Russians used it to interfere in the elections. Want to know how Russian disinformation ended up on Pinterest and Pokemon Go? Or perhaps a nice history of Russian subversion campaigns over the decades? Either way, I gotcha covered. I figured folks on this list could put it to good use. I'll be updating this list as new stories come out, and please let me know if I miss something. Some light reading for your Friday afternoon -- enjoy. Essential Reading: Trump, Russia, Facebook & Twitter http://www.epolitics.com/2017/10/13/essential-reading-trump-russia-facebook… --cpd Colin Delany Epolitics.com -- digital strategy for politics and advocacy http://www.epolitics.com https://www.facebook.com/epoliticsdotcom/ 202-422-4682 cpd(a)epolitics.com @epolitics

2 3

[MINISTRY] right to self-determination, "Democracy", (ethnic) nationalism --VS.-- Bolshevik internationalism/ globalism
by Zenaan Harkness 17 Oct '17

17 Oct '17

The Ministry is proud of those who have caused certain topics to become taboo, where terrorism is the fnord of our generation used to legislate a multitude of human rights violations, and where certain taboo topics are fnords for terrorism and extremism of another sort - by our own "Democratic" governments against ourselves. When any topic, hypothetical or otherwise, may not even be discussed publicly -regardless- of content, relevance to our current society or otherwise, you know The Ministry is in operation and cowardice and the evil of government-mandated despotism prevails. The Ministry prevails, as so few can overcome their conditioned fnord responses, and in other cases, a desire for personal freedom and sanity in the face of an insane world of very often cowardly humans. Yes fnord is the word of the day, see here: Falkvinge: http://feedproxy.google.com/~r/Falkvingoe-on-Infopolicy/~3/Npac6U8CQVo “Reminder: In government training material, “terrorism” includes peacefully disagreeing with administration policy in public” So yes, most programmed humans will miss the reasoning, the thought processes, insight and applicability to informing our world today based on nothing more than a superficial yet well programmed ("schooled" by school and MSM media), emotional reaction to any old "shock headline". The following is no exception to this rule: Essays If Hitler Had Won World War II We’d Have A Better, More Just World Today Bradford Hanson · January 29, 2017 https://nationalvanguard.org/2017/01/if-hitler-won-world-war-ii-wed-have-a-… notwithstanding any nuggets which might be contained, for a couple random examples: - “in the final analysis, WWII was essentially a war between two competing ideologies: Nationalism vs. internationalism/globalism” - “Adolf Hitler and his allies fought to preserve the concept of nationalism, not just for Germans but for all peoples the world over” This sounds rather like Russia's intentions today, with its usefully catchy "multi-polar world" byline. The revival of Russians back to "traditional Russianism" - i.e. nationalism, Christianity, and now a strong, and collective, denouncement of ideology-fueled Empire, is in fact incredibly impressive to witness from our Russkie brothers and sisters in the face of the journey of despotism they went through - Stalinism, "Communism" and essentially the complete wipe-out of their right to any religious expression at all, for half a century. Today's Russian revival evidences the virtue of the Russian's' inherent (collective) character, to come back from such atrocities as they have (unlike say Cambodia). - “Nationalism really just means the sovereignty of an ethnic people and the right of such ethnic people/nationalists — within their own bordered country — to self-determination.” - “Self-determination just means an ethnic people preserving their unique culture and heritage and pursuing their collective goals as a unique people. This applies to any ethnic peoples: Nigerians, Germans, Swedes, Vietnamese, Mexicans, Tibetans, etc.” (I would add a qualifier here - 'to the extent they, collectively and by the free exercise of their collective will, so choose to do,' - but of course we see very little in the way of actual democracy on the planet today…) And plenty more besides. One may of course disagree with certain premises underlying this essay, yet is it wise to disregard the nuggets of truth embedded therein, those insights implied and explicit? Every war happens because certain humans with authority and influence, intend for that war to happen, and intend for the confront of bullets, bombs, death, atrocity and despotism to occur in a specific (or not so specific) physical region/ area. Without the intention manifested as communications and decisions in all relevant forms, of those bankers - we should probably write (((bankers))) if we wish to communicate more accurately - and war hawks or "neo-cons" or any other noun of the year, then would we have the wars we have? Yes, it's another truism "war would not exist without the actions of those who intend such wars" - yet who amongst the general population actually proceeds to this second step in their mind when they contemplate on the reality of war ongoing - on the TV, in the papers, in our collective consciousness? Good luck pepes,

1 0

′Nazi grandma′ Ursula Haverbeck sent to prison for holocaust denial
by Zenaan Harkness 17 Oct '17

17 Oct '17

You couldn't make this stuff up in 1984. Ladies and gentlemen, at least we see (attached) a youthful in spirit "woman with ovaries" from Germany. She's not just any woman, she's a true punk, and doing some serious jail time for her unwillingness to surrender to the fact that in Germany certain facts are less equal than other facts, and even when you're 88 years old the (((German leadership))) will slam your 88-year-old arse in jail for DARING to challenge Israel's World War II narrative: Ursula Hedwig Meta Wetzel, aka Ursula Hedwig Meta Haverbeck-Wetzel November 8, 1928 https://en.wikipedia.org/wiki/Ursula_Haverbeck (Well worth reading to fully comprehend the magnitude of the stand this courageous woman is taking in the face of this egregious, unconscionable and immoral deprivation of her personal freedom by the (((German government)))! ) Here's a woman with more guts than many on this list - in the face of not only the tyrrany of years of social and public ostracisation for speaking her mind, she does so in Germany under the threat of jail, and from directly within the German gulag! She's a living fact, confronting the madness of the cotton wool demanding Antifa's screaming "Nazi!!" at every joke they don't like, at the gobsmacking fact-denial of the world renowned Jewish "science" professor loudly proclaiming his "most cited professor in history" status, Mr Noam Chomsky, and every cowardly soul who dares to demand that the world comply with their pathetic cries for safe spaces and the criminalization of simple fact-based speech. Have no doubt folks: To those with agendas, facts, and science, are a threat! and those who wish to talk about certain politically incorrect "less equal" facts shall face the wrath of (((the chosen ones))). If ever an aspiring punk needed inspiration, this one of the best, no less for the fact that this is now, IN YOUR FACE, WORLD!!! which the staunch 88 year old Ursula provides to every single one of us. Thank you Ursula Haverbeck-Wetzel! Thank you for you being an inspiration for your country (to those not yet totally dead in spirit), for your people, and for a future for the children of your people. This is the most succinct, topical, current, confronting to the point of shocking example of the evil steadily pervading our world today folks, so if this be your intention, spread the word that fellow thoughtful and decent souls might join in this understanding of the war we are in, right now. ----- Forwarded message from Jim <jim.sovereign(a)optusnet.com.au> ----- Date: Wed, 30 Aug 2017 14:34:26 +1000 Subject: ′Nazi grandma′ Ursula Haverbeck sent to prison for holocaust denial ------ Forwarded message ------ From: Old Fritz <latter Subject: Re: ′Nazi grandma′ Ursula Haverbeck sent to prison for holocaust denial FRG = Fraudsters Run Germany - BRD = Betrueger Regieren Deutschland - What can someone expect from this despicable gutless boot-licking leadership of International Jewry! MERKEL-FERKEL-PIGDOG-SCHULZ - I know nothing!!!!!!! _____ From: Lavone Darnel <ldarnel(a)telus.net> To: Undisclosed-Recipient@ Sent: Wednesday, 30 August 2017, 8:18 Subject: ′Nazi grandma′ Ursula Haverbeck sent to prison for holocaust denial Dear Rosemarie and Guenter, When I read your forwards that they had sent Ursula to prison my stomach dropped down to my toes. I was looking on the internet for current articles today but none are posted yet. Ingrid Rimland wrote this excellent article on December 24, 2015: https://www.veteranstoday.com/2015/12/24/holocaust-deniers-of-the-world-uni… and this one gives a list of previous sentences in different courts: https://forum.codoh.com/viewtopic.php?t=10800 Lavone ---------- Forwarded message ---------- From: The Last Outpost Date: Tue, Aug 29, 2017 at 1:13 PM Subject: ′Nazi grandma′ Ursula Haverbeck sent to prison for holocaust denial <http://www.ibtimes.co.uk/nazi-grandma-ursula-haverbeck-sent-prison-holocaus…> http://www.ibtimes.co.uk/nazi-grandma-ursula-haverbeck-sent-prison-holocaus… holocausthidingsomething -----

1 1

Infineon "Trusted Platform Module" TPM chips produce insecure RSA keys
by grarpamp 17 Oct '17

17 Oct '17

https://arstechnica.com/information-technology/2017/10/crypto-failure-cripp… https://crocs.fi.muni.cz/public/papers/rsa_ccs17 ---------- Forwarded message ---------- From: John Gilmore <gnu(a)toad.com> Date: Mon, Oct 16, 2017 at 9:25 PM Subject: Re: [Cryptography] Millions of high-security crypto keys crippled by newly discovered flaw To: Tamzen Cannoy <tamzen(a)cannoy.org> Cc: Cryptography <cryptography(a)metzdowd.com> Today's revelation that Infineon "Trusted Platform Module" TPM chips produce insecure RSA keys has a bright side. Those chips were largely created for Internet-based DRM schemes. It means that it should be possible to take a public key generated by such a TPM chip, factor it to produce the matching private key, and then break the DRM by signing or "attesting" to any damn thing the corporate mothership wants to hear. The mothership won't be able to disable all the TPM-created keys, since that would force them to deny service to ALL their customers. Hmm, I wonder if Infineon TPMs contain the broken library burned into ROM or flash, or whether they get the library loaded from the system they are securing. Presumably if the library is loaded from the outside, it's signed, and the signature is checked, so that you can't just load ANY old library into it. Was it signed with a TPM-generated RSA key, perhaps? Shall we find the matching private key? :-) Is this sort of scheme used to force registration of Microsoft OS's, perhaps? Or require that modern x86 tablets can only boot Microsoft OS's? Or secure Blu-Ray drives, maybe? Howabout that turncoat-Tim-Berners-Lee-approved DRM-for-websites that the quislings at Mozilla have already secretly rolled out by having "free software" Firefox quietly download, install and run a secret proprietary binary plugin after you install it? Let's have some fun. John PS: I don't need to point out to THIS audience the irony in the "Trusted" platform module that nobody can actually trust (or verify). We've been complaining about that for a decade or more. PPS: The essence of the test for broken keys is a list of primes and a list of remainder masks. "git clone https://github.com/crocs-muni/roca" and examine roca/roca/detect.py: Here's the test: for i in range(0, len(self.primes)): if (1 << (modulus % self.primes[i])) & self.prints[i] == 0: return False self.primes = [3, 5, 7, 11, 13, 17, 19, 23, 29, 31, 37, 41, 43, 47, 53, 59, 61, 67, 71, 73, 79, 83, 89, 97, 101, 103, 107, 109, 113, 127, 131, 137, 139, 149, 151, 157, 163, 167] self.prints = [6, 30, 126, 1026, 5658, 107286, 199410, 8388606, 536870910, 2147483646, 67109890, 2199023255550, 8796093022206, 140737488355326, 5310023542746834, 576460752303423486, 1455791217086302986, 147573952589676412926, 20052041432995567486, 6041388139249378920330, 207530445072488465666, 9671406556917033397649406, 618970019642690137449562110, 79228162521181866724264247298, 2535301200456458802993406410750, 1760368345969468176824550810518, 50079290986288516948354744811034, 473022961816146413042658758988474, 10384593717069655257060992658440190, 144390480366845522447407333004847678774, 2722258935367507707706996859454145691646, 174224571863520493293247799005065324265470, 696898287454081973172991196020261297061886, 713623846352979940529142984724747568191373310, 1800793591454480341970779146165214289059119882, 126304807362733370595828809000324029340048915994, 11692013098647223345629478661730264157247460343806, 187072209578355573530071658587684226515959365500926] So you divide the RSA public key by this set of small primes, and examine the remainder. If the bit in the matching "prints" number that matches the remainder is on, the key is not vulnerable. If any of the remainders indexes a bit that's zero, the key is vulnerable. All the "prints" numbers are even, i.e. their low order bit is zero: if the remainder when dividing by any small prime is zero, then, ahem, the number is easy to factor! What does this tell us about how the keys were poorly generated, and what does it tell us about how to factor them? (We'll find out in early November, but we might as well think about it.) _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

1 0

BigCorp Incumbent Blockchain Gunning for Sheeple, Routing Around O.G. P2P Crypto
by grarpamp 16 Oct '17

16 Oct '17

https://www.coindesk.com/ Now routinely roughly 69%, today 11 out of 16 articles, on the frontpage are seemingly about BigCorp developing / copying and applying a number of private / controlled blockchains instead of using any of the already existing leading open cryptocommunity ones. BigCorp is laughing at and routing around the problem of https://coinmarketcap.com/ So much of community is focused on price / trading last years, forgetting to bother going out and teaching and passing on philosophy, dropping wallets and starter coin, etc. This is fail. Step up your marketing and adoption (retail and users) game 10x stronger now to win. Or kiss your mass adoption of free, open, decentral, permissionless, p2p cryptocurrency dreams goodbye. You must get wallets, real nontrivial balances, and usage on the Sheeple's devices, and into AnyCorp's small medium large, before BigCorp, Banks and Facebook start offering them their Shit Private Consortium Cabal Coins.

1 1

KRACK Attacks Break WPA2
by grarpamp 16 Oct '17

16 Oct '17

https://www.krackattacks.com/ https://papers.mathyvanhoef.com/ccs2017.pdf https://www.mathyvanhoef.com/p/publications.html Key Reinstallation Attacks Breaking WPA2 by forcing nonce reuse Discovered by Mathy Vanhoef of imec-DistriNet, KU Leuven We discovered serious weaknesses in WPA2, a protocol that secures all modern protected Wi-Fi networks. An attacker within range of a victim can exploit these weaknesses using key reinstallation attacks (KRACKs). Concretely, attackers can use this novel attack technique to read information that was previously assumed to be safely encrypted. This can be abused to steal sensitive information such as credit card numbers, passwords, chat messages, emails, photos, and so on. The attack works against all modern protected Wi-Fi networks. Depending on the network configuration, it is also possible to inject and manipulate data. For example, an attacker might be able to inject ransomware or other malware into websites. The weaknesses are in the Wi-Fi standard itself, and not in individual products or implementations. Therefore, any correct implementation of WPA2 is likely affected. To prevent the attack, users must update affected products as soon as security updates become available. Note that if your device supports Wi-Fi, it is most likely affected. During our initial research, we discovered ourselves that Android, Linux, Apple, Windows, OpenBSD, MediaTek, Linksys, and others, are all affected by some variant of the attacks. For more information about specific products, consult the database of CERT/CC, or contact your vendor. The research behind the attack will be presented at the Computer and Communications Security (CCS) conference, and at the Black Hat Europe conference. Our detailed research paper can already be downloaded.

1 1

Not assassination politics, but perhaps getting close?
by Sandy Harris 16 Oct '17

16 Oct '17

Reward of $10 million offered for info that will get Trump impeached: http://www.cbc.ca/news/entertainment/flynt-offers-millions-dirt-on-trump-1.…

2 1

Here We Go Again
by grarpamp 16 Oct '17

16 Oct '17

https://www.wired.com/2014/07/morgan-marquis-boire-first-look-media/ https://citizenlab.ca/2017/10/open-letter-sexual-assault/ In 2012, he and researchers at the University of Toronto's Citizen Lab were the first to identify Finfisher, a stealthy collection of spying tools sold by the British firm Gamma Group that they eventually tracked to command-and-control servers in 25 countries. Later that year he helped trace how a piece of software sold by the Italian firm Hacking Team was used by the government of the United Arab Emirates to spy on a political dissident beaten by thugs. Just last month he revealed new findings that showed how that company's tools have evolved to target iPhones, Android devices and other mobile targets. And in early 2013 Marquis-Boire and Citizen Lab researchers mapped the spread of surveillance and censorship tools sold by the Palo Alto, California firm Blue Coat to 61 countries, including Iran. In the detective work required to pin those stealthy spying incidents on repressive governments and Western companies, Marquis-Boire is "extraordinarily talented," says Ron Deibert, a professor of political science at the University of Toronto and Citizen Lab's director. "There are some people who are phenomenally adept at forensics, who have an intuitive sense of how to make connections through different pieces of evidence," he says. "Morgan has those skills...But what I very much appreciate about him is his passion for human rights."

1 0