- cypherpunks - lists.cpunks.org

Obama gonna crypto your guns, they gonna throw the killswitch on yall
by grarpamp 08 Jan '16

08 Jan '16

Digital smart guns, digital finger photo voice dna retina prints, digital databases and checkpoints, digital connected backdoored clipper chipped things, bigdata on you, legal twisting of former rights, bans on your uses of digits, no analog, no cash, ubiquitous worldwide surveillance, tracking and control... It's all falling into place, from every country and government... the great digital killswitch and enslavement device is coming. Kiss your freedom goodbye.

2 1

Re: [tor-talk] Chaum Fathers Bastard Child To RubberHose ... PrivaTegrity cMix
by grarpamp 08 Jan '16

08 Jan '16

On Fri, Jan 8, 2016 at 4:22 AM, Bryan Ford <brynosaurus(a)gmail.com> wrote: > Andy Isaacson wrote: >> The privaTegrity (PT) backdoor is significantly more malignant than the >> Tor dirauth issue. [Massive snip in from worthwhile tor-talk thread on central points of authority / DHT...] Are there networks where there is an autonomous AI engine within the network itself, a possible distributed execution sandbox, that decides what, likely changing over time, set of nodes will serve elevated roles? And where AI's programmed evaluation metrics may somehow be tied to some kind of consensus wherein like blockchain, major portions of net must agree or risk fork. And how self-adaptive and permanent is the AI?

1 0

Re: FBI Digital Forensic Examination: A Case Study
by Michael Best 08 Jan '16

08 Jan '16

That was the point.

4 4

A Redaction Re-Visited: NSA Targeted “The Two Leading” Encryption Chips
by Rayzer 08 Jan '16

08 Jan '16

Plain text and html... > ..and no, I don't give a fuck about anyone's Greenwald-bashing. AFAICT > he's doing it EXACTLY right. Want Dox dumps? Talk to the Anonymous > children. The ones with more than a 3rd grade vocabulary MIGHT be able > to formulate a coherent sentence on paper. > > Also see this thread at a reddit IAMA that greenwald held regarding > the topic. A number of engineering types [scroll down... 'bardfinn'] > were speculating based on Greenwald's discussion > https://www.reddit.com/r/IAmA/comments/1nisdy/were_glenn_greenwald_and_jani… [...] On September 5, 2013, The Guardian <http://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-codes-secu…>, the /New York Times <http://www.nytimes.com/2013/09/06/us/nsa-foils-much-internet-encryption.htm…>// /and/ProPublica <http://www.propublica.org/article/the-nsas-secret-campaign-to-crack-undermi…> /jointly reported — based on documents provided by whistleblower Edward Snowden — that the National Security Agency had compromised some of the encryption that is most commonly used to secure internet transactions. The /NYT /explained/ /that NSA “has circumvented or cracked much of the encryption, or digital scrambling, that guards global commerce and banking systems, protects sensitive data like trade secrets and medical records, and automatically secures the emails, web searches, internet chats and phone calls of Americans and others around the world.” One 2010 memo described that “for the past decade, NSA has led an aggressive, multipronged effort to break widely used internet encryption technologies.” In support of the reporting, all three papers published redacted portions of documents from the NSA along with its British counterpart, GCHQ. Prior to publication of the story, the NSA vehemently argued that any reporting of any kind on this program would jeopardize national security by alerting terrorists to the fact that encryption products had been successfully compromised. After the stories were published, U.S. officials aggressively attacked <http://www.reuters.com/article/net-us-usa-security-snowden-intelligence-idU…> the newspapers for endangering national security and helping terrorists with these revelations. All three newspapers reporting this story rejected those arguments prior to publication and decided to report the encryption-cracking successes. Then-/NYT/ Executive Editor Jill Abramson described <http://publiceditor.blogs.nytimes.com/2013/09/06/decision-to-publish-agains…> the decision to publish as “not a particularly anguished one” in light of the public interest in knowing about this program, and /ProPublica/ editors published a lengthy explanation <http://www.propublica.org/article/why-we-published-the-decryption-story> along with the story justifying their decision. All three outlets, while reporting the anti-encryption efforts, redacted portions of the documents they published or described. One redaction in particular, found in the /NYT /documents <http://www.nytimes.com/interactive/2013/09/05/us/documents-reveal-nsa-campa…>, from the FY 2013 “black budget,” proved to be especially controversial among tech and security experts, as they believed that the specific identity of compromised encryption standards was being concealed by the redaction. None of the documents in the Snowden archive identify all or even most of the encryption standards that had been targeted, and there was a concern that if an attempt were made to identify one or two of them, it could mislead the public into believing that the others were safe. There also seemed to be a concern among some editors that any attempt to identify specific encryption standards would enable terrorists to know which ones to avoid. One redaction in particular, from the /NYT/, was designed to strike this balance and was the one that became most controversial: The issue of this specific redaction was raised <https://twitter.com/matthew_d_green/status/464044144906600448> again <https://twitter.com/matthew_d_green/status/464015111913369600> by security researchers last month <https://twitter.com/Snowden/status/678573907947966464> in the wake of news <https://forums.juniper.net/t5/Security-Incident-Response/Important-Announce…> of a backdoor found on Juniper systems, followed by /The Intercept/’s reporting <https://theintercept.com/2015/12/23/juniper-firewalls-successfully-targeted…> that the NSA and GCHQ had targeted Juniper. In light of that news, we examined the documents referenced by those 2013 articles with particular attention to that controversial redaction, and decided that it was warranted to un-redact that passage. It reads as follows: <https://prod01-cdn07.cdn.firstlook.org/wp-uploads/sites/1/2016/01/bull.png> The reference to “the two leading encryption chips” provides some hints, but no definitive proof, as to which ones were successfully targeted. Matthew Green, a cryptography expert at Johns Hopkins, declined to speculate on which companies this might reference. But he said that “the damage has already been done. From what I’ve heard, many foreign purchasers have already begun to look at all U.S.-manufactured encryption technology with a much more skeptical eye as a result of what the NSA has done. That’s too bad, because I suspect only a minority of products have been compromised this way.” NSA requested until 5 p.m. today to respond but then failed to do so. (/Update/: The NSA subsequently emailed to say: “It would be accurate to state that NSA declined to comment.”) [...] https://theintercept.com/2016/01/04/a-redaction-re-visited-nsa-targeted-the… -- RR "You might want to ask an expert about that - I just fiddled around with mine until it worked..."

1 1

Electronic Freedom Foundation selective in support of freedom
by Ryan Carboni 07 Jan '16

07 Jan '16

> These occurred five years apart, and only the second one involved an actual > court case. I don't think it's a reasonable comparison. Maybe not. But one must tirelessly question inconsistencies. The amount of harm to Backpage is very indirect, it was a letter to credit card companies. The EFF however is okay with a letter to a printer - the web host - to discontinue service. Comparatively, the harm to wikileaks was far greater than that to Backpage, but the EFF was more willing to support Backpage with a brief, than to volunteer support to Wikileaks. I have no doubt that Glenn Greenwald will never mention this, afterall, he himself is selective in questioning other public figures. He'd never question public figures in a meaningful way. And apparently neither will the EFF. With ineffective dissidents like these, who needs oppression?

4 4

DHS Daily Infrastructure Reports
by Michael Best 07 Jan '16

07 Jan '16

The DHS Daily Open Source Infrastructure Report is collected each business day as a summary of open-source published information concerning significant critical infrastructure issues. Each Daily Report is divided by the critical infrastructure sectors and key assets defined in the National Infrastructure Protection Plan. https://archive.org/details/DHSDailyReports 800 Daily Reports from DHS gathered so far, with FOIA requests pending for more. They'll be uploaded individually as soon as the new batch of sub-collections are created (hooray backlog) Enjoy! --Mike That1Archive.neocities.org

1 0

Re: Electronic Freedom Foundation selective in support of freedom
by Ryan Carboni 06 Jan '16

06 Jan '16

> > Which leads me to ask... Which federal agency do YOU work for? Evidently the one in an appropriations fight with the one controlling the Snowden narrative. Although I am sitting on some damning evidence which shows that the ACLU, The Intercept, Wikileaks, and Vice Media are themselves sitting on evidence which shows some blatant violations of civil rights... on the scale of Netflix's Making A Murderer, but the whole web is pretty circumstantial at the moment. And you know how libel laws work. I'm certain it'll come to something eventually.

1 0

Electronic Freedom Foundation selective in support of freedom
by Ryan Carboni 06 Jan '16

06 Jan '16

http://talkingpointsmemo.com/muckraker/how-lieberman-got-amazon-to-drop-wik… The Electronic Frontier Foundation, a group that advocates for Internet freedom of speech by defending court cases, said the axing certainly doesn't violate the First Amendment. But it is, according to senior staff attorney Kevin Bankston, "disappointing." https://www.eff.org/deeplinks/2015/12/sheriffs-threats-against-credit-card-… As we wrote about last month, we submitted an amicus brief to the Seventh Circuit arguing that government officials such as Sheriff Dart may not use their positions of authority to coerce companies with express or implied threats of legal liability into taking actions that censor speech—whether online or offline. As we all know, escort services are important, not Wikileaks, whose founder makes use of the CIA's escort service with expected results.

3 2

ICYMI They Kill Tech Geeks Too...
by Rayzer 06 Jan '16

06 Jan '16

How dare they treat him like a Black or homeless person! (RR extracts tongue from cheek, mutters the letters ACAB/FTP) A day after an altercation with the San Francisco Police which left him, according to the police report, with “abrasions”, Ian Murdock, founder of the Debian Linux Project, is dead. Here’s his post-incarceration archived tweetstream: https://archive.is/J9lZV -- RR "You might want to ask an expert about that - I just fiddled around with mine until it worked..."

10 22

The product with the most hacker exploitable vulns in 2015
by Rayzer 05 Jan '16

05 Jan '16

Envelope Puh-lease! User-Friendly" Apple Inc. is Number 1 for ‪#‎Hacker‬ exploitable vulnerabilities in 2015! Specifically their two most popular products: Mac OSX and iPhone OS. http://www.ghacks.net/2016/01/04/and-the-product-with-the-most-distinct-vul… -- RR "You might want to ask an expert about that - I just fiddled around with mine until it worked..."

3 2