- cypherpunks - lists.cpunks.org

Fwd: [tor-talk] "recently-used.xbel" file in TBB directory, stores data on accessed, downloaded files
by Razer 20 Sep '17

20 Sep '17

Big security flaw. Dingleberry downplayed it. Said there was a ticket for it, and requested assistance. -------- Forwarded Message -------- Subject: [tor-talk] "recently-used.xbel" file in TBB directory, stores data on accessed, downloaded files Date: Mon, 18 Sep 2017 13:34:49 -0500 From: Joe Btfsplk <joebtfsplk@[redacted]> Reply-To: tor-talk(a)lists.torproject.org To: tor-talk(a)lists.torproject.org This involves *at least* Linux (Mint 18.1) Tor Browser 7.04 and 7.05, over at least a couple months. This seems like a huge privacy / anonymity issue. Why is there a *"recently-used.xbel"*, file in my Tor Browser installation directory - in path shown and labeled as file TYPE: "XBEL bookmarks" recording ACTUAL local file names, dates, times - they were accessed AND some DOWNLOADED files (like *.pdf) with dates and times? ~/.torbrowser/torbrowser-7.0/tor-browser_en-US/Browser/.local/share/recently-used.xbel. *TBB is installed in home directory: ~/.torbrowser.* For instance, Listed is a downloaded *pdf file, about health issues* and many others. All dates shown in THIS instance of recently-used.xbel seem to be in July and Aug, 2017, but I used the same TBB installation before and after the dates shown in recently-used.xbel . In Linux, there's also a ~/.local/share/recently-used.xbel file - by default, but it is set asimmutable, so nothing written to it. The TBB recently-used.xbel file even shows date and time I downloaded TBB 7.0.4, and a random 6 digit string added after the "visited" time, with 'Z" at the end, such as (I removed actual times & 6 digit string: <bookmark href="~/Downloads/security/tor/tbb7.0.4/tor-browser-linux64-7.0.4_en-US.tar.xz" added="2017-08-ddThh:mm:ssZ" modified="2017-08-ddThh:mm:ssZ" visited="2017-08-ddThh:mm:ss.123456Z"> Each file record shown in "recently-used.xbel" show this: <bookmark href="file:<path and name> added="2017-mm-ddThh-mm-ssZ" modified="<time stamp>Z" visited="<time stamp>Z"> <info> <metadata owner="http://freedesktop.org"> <mime:mime-type type="application/<file type>"/> <bookmark:applications> <bookmark:application name="Firefox" exec="'firefox %u'" modified="<time stamp>Z" count="1"/> </bookmark:applications> </metadata> </info> </bookmark> Also, are files in the path below, with .bin or .toc extensions: ~/.torbrowser/torbrowser-7.0/tor-browser_en-US/Browser/.nv/GLCache/********************************/*******************************1af.bin (very long, random strings, I removed) ~/.torbrowser/torbrowser-7.0/tor-browser_en-US/Browser/.nv/GLCache//********************************/*******************************1af.toc These .bin and .toc files seem ? related to my Nvidia GPU or drivers? Not sure what's in them. The same type files are written to the ~/.nv folder, but I don't see why they're written to a Tor Browser folder. I don't know the meaning of "bookmark" in this context - in the TBB recently-used.xbel file. Tor Browser is supposed to delete / not store any data to disk after it's closed (or not write to disk at all). -- tor-talk mailing list - tor-talk(a)lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

1 0

[GUNS] [MINISTRY] [AUSTRALIAN JUSTICE] - Democracy Gone Mad Now Protects The Criminals Not The People
by Zenaan Harkness 20 Sep '17

20 Sep '17

The alarming disarming and population programming continues - only the mafia (state police, military, and the drug dealers they make money off) are allowed self defence. Z ----- Forwarded message from Gil May <gilmay97(a)gmail.com> ----- From: Gil May <gilmay97(a)gmail.com> To: reader(a)gmail.com Bcc: zenaan(a)gmail.com Date: Wed, 20 Sep 2017 17:30:29 +1000 Subject: Democracy Gone Mad Now Protects The Criminals Not The People SEPTEMBER 15 2017 - 6:30PM Border farmer has guns taken after confronting man armed with a knife at his home - Blair Thomson <http://www.bordermail.com.au/story/4927063/border-farmer-has-guns-taken-aft…> - F <https://www.facebook.com/sharer/sharer.php?u=http://www.bordermail.com.au/s…> A FATHER who armed himself with an unloaded rifle during a home invasion has been left wondering what he could have done differently, after having his guns seized. Police took David Dunstan’s three firearms from his farming property at Bungowannah on Thursday afternoon. A man armed with a knife and piece of wood had knocked on his back door about 3.30am. <http://www.bordermail.com.au/story/4924925/border-resident-pulls-out-rifle-…> Mr Dunstan, who has a gun licence, went to his nearby gun safe and grabbed a .22 rifle after finding the man outside his home. He said he didn’t point the weapon at the offender, and essentially used the gun as a “prop”. The father of three forced the man into his vehicle and drove him towards the Albury police station, and was met by officers nearby. Police seized his guns, which he uses for pest control at his property, later that day. “I just don’t know what I should have done, what would have been the right way to do it,” Mr Dunstan said. “My gun licence is for vermin control. “I suppose, technically, trying to protect yourself is not classed as that. “I’ve always done the right thing, but I feel like I’ve done the wrong thing.” It followed an incident at a property in Splitters Creek three hours earlier where the man allegedly smashed his way into a home and tried to enter a child’s bedroom. That owner had armed himself with a hockey stick. Mr Dunstan's firearms licence will undergo a review following the incident. Police did not want to comment on the development, but had earlier urged people to call Triple-0 during emergencies. The alleged offender has been denied bail and will return to court November 6. ----- End forwarded message -----

1 0

WikiLeaks Spy Files: Russia Docs - SORM, PETER-SERVICE, FSB
by grarpamp 20 Sep '17

20 Sep '17

https://wikileaks.org/spyfiles/russia/ Spy Files Russia This publication continues WikiLeaks' Spy Files series with releases about surveillance contractors in Russia. While the surveillance of communication traffic is a global phenomena, the legal and technological framework of its operation is different for each country. Russia's laws - especially the new Yarovaya Law - make literally no distinction between Lawful Interception and mass surveillance by state intelligence authorities (SIAs) without court orders. Russian communication providers are required by Russian law to install the so-called SORM ( Система Оперативно-Розыскных Мероприятий) components for surveillance provided by the FSB at their own expense. The SORM infrastructure is developed and deployed in Russia with close cooperation between the FSB, the Interior Ministry of Russia and Russian surveillance contractors. PETER-SERVICE 19 September, 2017 English | Русский Today, September 19th 2017, WikiLeaks starts publishing the series "Spy Files Russia" with documents from the Russian company Петер-Сервис (PETER-SERVICE). This release includes 209 documents (34 base documents in different versions) dated between 2007 and 2015. PETER-SERVICE was founded 1992 in St. Petersburg as a provider for billing solutions and soon became the major supplier of software for the mobile telecommunications industry in Russia. Today it has more than 1000 employees in different locations in Russia, and offices in major cities in Russia and Ukraine. The technologies developed and deployed by PETER-SERVICE today go far beyond the classical billing process and extend into the realms of surveillance and control. Although compliance to the strict surveillance laws is mandatory in Russia, rather than being forced to comply PETER-SERVICE appears to be quite actively pursuing partnership and commercial opportunities with the state intelligence apparatus. As a matter of fact PETER-SERVICE is uniquely placed as a surveillance partner due to the remarkable visibility their products provide into the data of Russian subscribers of mobile operators, which expose to PETER-SERVICE valuable metadata, including phone and message records, device identifiers (IMEI, MAC addresses), network identifiers (IP addresses), cell tower information and much more. This enriched and aggregated metadata is of course of interest to Russian authorities, whose access became a core component of the system architecture. [cont]

1 0

[MINISTRY] GAB getting the Godaddy and Google treatment - and bonus: Hitlery Clinton massively funded Antifa
by Zenaan Harkness 19 Sep '17

19 Sep '17

A double whammy, "hole in one" as they might say :) I know, I know, that's an insult to Hitler of course. Importantly, GAB is now getting the GoDaddy and Google treatment - free speech can not be tolerated, and especially free speech platforms (GAB's stated intention, certainly not Google's "do some evil"), whilst Hillery Clinton receives a hole in one for massive funding of Antifa - now at least we know where Razer get's his funding and why he was rabidly pro-Clinton during the recent USA elections... ** War on social media upstart GAB continues. Domain to be seized for promoting free speech http://theduran.com/war-on-social-media-upstart-gab-continues-domain-to-be-… ------------------------------------------------------------ GAB served notice its registrar will seize its domain if not changed. ** Hillary Clinton EXPOSED: Redirected $800K from campaign to ANTIFA http://theduran.com/hillary-clinton-exposed-redirected-800k-from-campaign-t… ------------------------------------------------------------ Hillary moved massive amounts of money from her campaign to help fund ANTIFA.

1 0

[ PFKR ] Netanyahu's son removes anti-Semitic meme from Facebook following outcry
by Zenaan Harkness 19 Sep '17

19 Sep '17

Nice to see humour making a comeback - might be the only thing that can wake people up to the war against our right to free speech that Lauren "Kangz FTW!" Kangztein is so passionate about. PS: Note that the below is NOT a parody, even though literal names such as "Kangztein" have been used, although one could be forgiven for noticing a slight self-parody going on in respect of all parties involved in this "comedy sketch" - the fallout, as usual, is funnier than the original meme since important people continue to really grok how the Streizzkang effect never works on them. ----- Forwarded message from "PFKR (People For kangz (lowercase "k") Responsibility) Announcement List" <pfkr(a)kangz.org> ----- To: pfkr-list(a)kangz.org Reply-To: "PFKangz" Date: Sun, 10 Sep 2017 18:12:19 -0700 Subject: [ PFKR ] Netanyahu's son removes anti-Semitic meme from Facebook following outcry Netanyahu's son removes anti-Semitic meme from Facebook following outcry https://www.washingtonpost.com/news/worldviews/wp/2017/09/10/netanyahus-son… The image, posted by Yair Netanyahu on Friday, appeared to be a local take on a classic anti-Semitic cartoon suggesting that Jews control the United States. It has appeared widely on extreme alt-right websites. In this instance, it depicted his father's perceived foes: American Jewish billionaire philanthropist and investor George Soros, outspoken former Israeli prime minister Ehud Barak, activist Eldad Yaniv, and Meni Naftali, a former housekeeper for the Netanyahus who successfully sued them for mistreatment. Yair Netanyahu, who goes by the name "Yair Hun" on Facebook, had captioned the meme "the food chain." Over the weekend, his actions drew praise from neo-Nazi groups in the United States as well as from Holocaust denier David Duke, a former grand wizard of the Ku Klux Klan. "Yair Netanyahu is a total bro," wrote Andrew Anglin in the neo-Nazi Daily Stormer. "Next he's going to call for gassings." - - - Vile criminals -- with the Netanyahus, it's the family business - I'm just pissed I wasn't invited to the partay. --Lauren-- Lauren Kangztein (lauren(a)kangz.com) https://www.kangz.com/laurenkang Lauren's Blog: https://lauren.kangz.com Google Issues Mailing List: https://kangz.com/google-loves-kangz Founder: Network Neutrality Squad: https://www.nnsquad.org Co-Founder: People For Kangz Yo: https://www.kangz.org/kangz Member: AKM Committee on Kangz and Public Kangz Google+: https://google.com/+LaurenKangztein Twitter: https://twitter.com/laurenkangztein Tel: +1 800 KANGZ --- Impeach Trump, cuz Life Wad Bedder Wid Kangz --- _______________________________________________ pfkr mailing list https://lists.kangz.org/mailman/listinfo/kangz ----- End forwarded message -----

5 11

Nazi-Punching Meme of the Week (image, 236k)
by Hollow Domer 19 Sep '17

19 Sep '17

> Hollow Domer shediedfrombeingtoof at redchan.it > Tue Sep 19 11:05:00 PDT 2017 > > Pic related. > Here is the thread if any LEanons want to join in on jailing the assailant, or if any of you ancomms want to make the task more challenging: 8ch [dot] net/pol/res/10627752 [dot] html

1 0

Nazi-Punching Meme of the Week (image, 236k)
by Hollow Domer 19 Sep '17

19 Sep '17

> Razer g2s at riseup.net > Tue Sep 19 09:23:41 PDT 2017 > > Be like 'Great Uncle Carl'. > You mean be like Americans of German, Austrian, and Polish decent who traveled back to their ancient homelands to slaughter their brothers and sisters for Greater Isnotreal ? Your calls to IRL aktion are unlawful incitements to violence; cpunks is a board of peace. You have been reported. Pic related is what edgynameanon's image is referring to. Poorly drawn sash worn on wrong arm by low-t cooljacket anon. Sad.

1 0

Have Google and Facebook been hacked yet?
by Ryan Carboni 19 Sep '17

19 Sep '17

https://www.theguardian.com/technology/2017/apr/28/facebook-google-conned-1… Probably. Well, not technically hacked but if they can't keep track of payments going out and hardware going in, it makes you wonder if they haven't also gotten extra shipments of compromised hardware. (did we order this? who cares, not my department, just plug it into the network) Eh. Oh well.

3 3

Nazi-Punching Meme of the Week (image, 236k)
by Razer 19 Sep '17

19 Sep '17

Be like 'Great Uncle Carl'. https://t.co/feFrOWwrOU

1 0

[Fwd: Re: Why I can't sleep soundly with blockchain, being the cypherpunk]
by b0z0＠sdf.org 19 Sep '17

19 Sep '17

---------------------------- Original Message ---------------------------- Subject: Re: Why I can't sleep soundly with blockchain, being the cypherpunk From: b0z0(a)sdf.org Date: Sun, September 17, 2017 9:47 pm To: "juan" <juan.g71(a)gmail.com> -------------------------------------------------------------------------- Dash is the most democratic and anonymous tech you are ever likely to see. As you rightly brought up there was briefly a time where mining was favoring the earliest miners which was a one off unlike fractional reserve banking, anyway this has been addressed more times than i care to mention and if people are so concerned, then lets compare it to our current arrangment. fiat currency = Zero accountability in regards to production of money, or much else as far as i can see (Masons may preach - Checks and balances - erughh!) crypto currency = Transparency. Usually. In terms of amount in circulation. Thats what im talking about! . > On Sun, 17 Sep 2017 18:58:24 +0000 (UTC) > b0z0(a)SDF.ORG wrote: > >> >> >> >> dash.org hasthe most anonymous tech will will ever see in your life. >> >> not run by blues > > > you mean, run by scammers who issued a few million coins to > themselves in a few hours? > >

5 4