- cypherpunks - lists.cpunks.org

Fwd: [Cryptography] What should I put in notifications to NSA?
by grarpamp 19 Dec '15

19 Dec '15

On Wed, Dec 16, 2015 at 2:55 PM, Bill Cox <waywardgeek(a)gmail.com> wrote: > I don't think requiring registration of open-source crypto violates our > constitutional rights, but I know this is debatable. I'd just comply with > the law and send a simple email. It's unconstitutional in the same way gun laws and surveillance laws and etc laws are. But let's all keep on happily and quietly complying so they can give us more unconstitutional laws and silly paper violations to comply with. Kudos. (Also of note is the difference between laws that compel you to act, punish you for not acting, or punish you for acting in offensive manner such as against persons or property The former two being curiosities.)

1 0

Re: [Cryptography] What should I put in notifications to NSA?
by grarpamp 19 Dec '15

19 Dec '15

On Thu, Dec 17, 2015 at 9:15 AM, Phillip Hallam-Baker <phill(a)hallambaker.com> wrote: >> Seriously?! >> >> How about linking to... >> http://fuckoff.com/ >> >> And if you're still worried, >> develop stuff anonymously, >> in/over anonymous networks. >> >> And if they still care to bother to find you, >> then your country's obviously shit and >> you need a new one. > > > I'm not the type of crypto hacker that develops a strong encryption scheme > just to disable NSA mass surveillance. > > I'm trying to be the type of crypto hacker that develops a strong encryption > scheme to disable NSA mass surveillance and then sells the same scheme to > the NSA to secure all those documents that Snowden and Manning leaked. If you want to support / enable your government in that fashion and purpose, that's your choice. Maybe after thinking more on all the questionable things it is doing under secrecy, you and others might make a different choice.

1 0

Re: The USA Fake Of The Moon Landings
by Razer 19 Dec '15

19 Dec '15

juan: > On Fri, 18 Dec 2015 18:38:52 +0000 > Razer <razer(a)riseup.net> wrote: > >> Don't cherrypick my writings dick. > > I didn't cherrypick anything. I merely highlighted what you > said. Feel free to call people who challenge any official story > nutjobs, but don't expect much sympathy from me... This is 'highhlighting'... Notice the rest of what you said below... > > > ps: your message came from razer@riseup, not rayzer@riseup. I replied > (automatically) to razer@ and the reply bounced... > > 550 5.1.1 <razer(a)riseup.net>: Recipient address rejected: User unknown > Now here's the rest of what I said: > One of the things my dad bequeathed me was an Omega "Moon Watch"... at > least that's the way Omega advertised them. What was unique about the > one I had vs the advertised store variety was the fact that it was an > old fashioned wind-up, as opposed to the retail version, a self-winder. > > Why the difference? As my dad put it "We didn't know if a self-winder > would work in zero-gravity", and they weren't willing to take the risk. > > If the moon landing was a hoax, it was such an intricate one it would > have cost more to execute then actually landing someone on the moon. -- RR "You might want to ask an expert about that - I just fiddled around with mine until it worked..."

5 8

Re: [Cryptography] What should I put in notifications to NSA?
by grarpamp 18 Dec '15

18 Dec '15

On Tue, Dec 15, 2015 at 11:29 PM, Phillip Hallam-Baker <phill(a)hallambaker.com> wrote: > I am working on staging the code for the Mesh on SourceForge. > > https://sourceforge.net/projects/mathematicalmesh/ > > There is this bit to do: > > You must notify BIS and the ENC Encryption Request Coordinator via > e-mail of the Internet location (e.g., URL or Internet address) of the > publicly available encryption source code or provide each of them a > copy of the publicly available encryption source code. If you update > or modify the source code, you must also provide additional copies to > each of them each time the cryptographic functionality of the source > code is updated or modified. In addition, if you posted the source > code on the Internet, you must notify BIS and the ENC Encryption > Request Coordinator each time the Internet location is changed, but > you are not required to notify them of updates or modifications made > to the encryption source code at the previously notified location. In > all instances, submit the notification or copy to crypt(a)bis.doc.gov > and toenc(a)nsa.gov. > > > What do folk normally do here? I was thinking of giving them the URL > of the repository and a statement to the effect that by complying I do > not wave my first amendment rights Seriously?! How about linking to... http://fuckoff.com/ And if you're still worried, develop stuff anonymously, in/over anonymous networks. And if they still care to bother to find you, then your country's obviously shit and you need a new one. cc cpunks due to metzdowd thought police

2 1

America's Top Next Law: Go To Prison... For Reading... WTF?
by grarpamp 17 Dec '15

17 Dec '15

http://tech.slashdot.org/story/15/12/16/130218/go-to-jail-for-visiting-a-we… Eric Posner, the fourth most-cited law professor in the U.S., says the government may need to jail you if you even visit an ISIS site after enough warnings. He says, "Never before in our history have enemies outside the United States been able to propagate genuinely dangerous ideas on American territory in such an effective way—and by this I mean ideas that lead directly to terrorist attacks that kill people. The novelty of this threat calls for new thinking about limits on freedom of speech. The law would provide graduated penalties. After the first violation, a person would receive a warning letter from the government; subsequent violations would result in fines or prison sentences. The idea would be to get out the word that looking at ISIS-related websites, like looking at websites that display child pornography, is strictly forbidden" There would be exemptions for Washington-blessed journalists and others. Whew! Alas, this man isn't Donald Trump — he is a widely respected University of Chicago faculty member writing in Slate. http://www.slate.com/articles/news_and_politics/view_from_chicago/2015/12/i… http://www.teleread.com/ebooks/go-to-jail-for-visiting-a-web-site-or-maybe-… Of course crypto will be labeled a dangerous idea... Can't publish it, can't have it, can't use it, can't read it, can't think it.

3 2

Re: [Cryptography] Satoshi's PGP key.
by grarpamp 17 Dec '15

17 Dec '15

On Wed, Dec 16, 2015 at 5:50 PM, Henry Baker <hbaker1(a)pipeline.com> wrote: > Is there any chance that Satoshi works/worked for the > NSA or equivalent? > > For a huge number of reasons, s/he couldn't publish > under her/his own name, but may have gotten permission > to do this project anyway, so long as s/he didn't make > any personal profit on it. > > I can imagine that the NSA & GCHQ are still hurting > at not getting proper credit for developing "public > key" encryption, and they may not have wanted to see > a long string of bad versions of bitcoins foisted > upon the world when they already had a pretty good > solution. The NSA has proven to not be above doing things that it can exploit / track / manage.

1 0

Yoga class cancelled for "cultural issues" (insufficient awareness by class attendees of yoga origins)
by Zenaan Harkness 17 Dec '15

17 Dec '15

The practices of this yoga regime must be corrected. Zenaan's trigger warnings: contains the following words and phrases: spiritual, oppression, cultural genocide, yoga, cultural issues, Disabilities (I was so sure we weren't allowed to use that word any more), feeling left out, mindful stretching (evidently a taboo phrase as well). http://nypost.com/2015/11/23/pc-police-suspend-yoga-class-at-university-ove… A yoga instructor who teaches at the University of Ottawa says she is fighting to keep her program alive after the school’s student body suspended it over concerns that “cultural issues” relating to the class could offend students. Jennifer Scharf, who has been offering free weekly sessions at the university’s Center for Students with Disabilities since 2008, told the Ottawa Sun that she was informed in September that the program would not come back for the fall semester. ICYMI: Still our hottest story – Free yoga class cancelled over 'cultural issues' https://t.co/GZbUHJ8VRa #ottnews pic.twitter.com/J4F7AZo6Zj — Ottawa Sun (@ottawasuncom) November 23, 2015 In an email exchange between Scharf and a representative of the university’s Student Federation — which was viewed by the newspaper — a student wrote that “while yoga is a really great idea and accessible and great for students… there are cultural issues of implication involved in the practice. “Yoga has been under a lot of controversy lately due to how it is being practiced,” the email continues, and which cultures those practices “are being taken from.” The Student Federation, which operates the center, went on to say that many of those cultures “have experienced oppression, cultural genocide and diasporas due to colonialism and Western supremacy… we need to be mindful of this and how we express ourselves while practicing yoga.” Student Federation Acting President Romeo Ahimakin told the Ottawa Sun that the class has been put on hold until a way can be figured out “to make it better, more accessible and more inclusive to certain groups of people that feel left out in yoga-like spaces. “We are trying to have those sessions done in a way in which students are aware of where the spiritual and cultural aspects come from, so that these sessions are done in a respectful manner,” he added. But Scharf, who instructed about 60 students each week in the program, said, “people are just looking for a reason to be offended by anything they can find.” Scharf says she offered the student body leaders a compromise by suggesting she change the name of the course to “mindful stretching,” but after some debate, they couldn’t reach an agreement. “I guess it was this cultural appropriation issue because yoga originally comes from India,” she told CBC News. “We’re not going through the finer points of Scripture. We’re talking about basic physical awareness and how to stretch so that you feel good.” Scharf added that she is “fighting so hard” to keep the class.

3 2

GNU Taler: Taxable Anonymous Libre Electronic Reserve
by grarpamp 16 Dec '15

16 Dec '15

https://taler.net/ Taler technology: About taxability, change and privacy One of the key goals of Taler is to provide anonymity for citizens buying goods and services, while ensuring that the state can observe incoming transactions to ensure businesses engage only in legal activities and do not evade taxes (such as income tax, sales tax or value-added tax). However, we also want to stay out of the immediate personal domain, so sharing funds within a family or copying coins between devices should not be subject to monitoring by the state. In Taler terminology, we distinguish between transactions where the exclusive ownership of the value of a coin is passed from one entity to another, and sharing whereafter control over a coin is shared by multiple electronic wallets (which may belong to different individuals). In Taler, the receiver of a transaction is visible to the state and thus can be taxed, while sharing is invisible to anyone not involved. Once a coin is shared among different individuals, any one of those can try to spend it, but only the first spender would succeed. Thus, sharing requires a strong trust relationship among the individuals involved, and thus represent interactions in the protected immediate personal domain, and not commercial transactions. When Taler needs to provide change, for example because a customer only has a 5 Euro coin but wants to make a 2 Euro purchase, it needs to create fresh coins (of a total value of 3 Euros) that are unlinkable to the original 5 Euro coin to ensure privacy. To ensure that the resulting refresh operation where the change is converted to fresh coins cannot be used to transfer funds from one entity to another, Taler ensures that any owner of an original coin that was involved in a refresh operation can follow a link to the private information of the fresh coins generated by the operation. As a result of this trick, refresh operations cannot be used to create transfers, as the linkage ensures that the fresh coins are always shared with the owner of the original coin. As a result, Taler does not intrude into the personal economic domain, offers good privacy, taxability for transactions and the ability to give change.

4 4

NSA Attacks on VPN, SSL, TLS, SSH, Tor
by John Young 16 Dec '15

16 Dec '15

Der Spiegel released largest single day number of Snowden docs today, 666 pages, on NSA Attacks on VPN, SSL, TLS, SSH, Tor. http://www.spiegel.de/international/world/nsa-documents-attacks-on-vpn-ssl-… We offer a RAR of the 44 docs: http://cryptome.org/2014/12/nsa-spiegel-14-1228.rar (197MB)

8 9

List: Why Zenaan's volcanos are bad
by grarpamp 16 Dec '15

16 Dec '15

Because they're completely fucking offtopic to anything cypherpunk! You know... crypto, cpunk relevant politics, privacy, crypto apps, law, tech, associated punkery, etc. Quit posting random offtopic shit. "The Cypherpunks mailing list is a mailing list for discussing cryptography and its effect on society."

2 1