- cypherpunks - lists.cpunks.org

Are you also a Soviet Spy
by TrumpJizz44 11 Jun '17

11 Jun '17

> John Young jya at pipeline.com > Sat Jun 3 06:12:37 PDT 2017 > > To associate only with people you agree with, > pillory those you don't, is a surefire way > to remain ignorant You MAGA now ? > cowardly dictators who promise greatness to > propaganda-addled weaklings. Hope = propaganda. > Crypto the early opioid, Architect. Can't into metaphors. > Trump's MAGA-methadone dispensary Ibogaine, MDMA, Psilocybin are much more effective at reversing severe addictions. Even to (((alcohol))), John. cen.acs.org/articles/94/i13/Psychedelic-compounds-like-ecstasy-just.html > those incapable of remaining sober President Trump is sober.

1 0

Crypto tunes...
by grarpamp 10 Jun '17

10 Jun '17

https://www.youtube.com/watch?v=DZNUMcOGbq4 https://www.youtube.com/watch?v=7gfBP8kPzRA https://www.youtube.com/watch?v=-hlN2nel5HI https://www.youtube.com/watch?v=xWAwK2fHArc :)

1 0

Advocate for Digital Currencies, Call Now :)
by grarpamp 10 Jun '17

10 Jun '17

http://www.article78againstnydfs.com/advocacy.php Ignore location, call and social engineer anyways. https://cointelegraph.com/news/state-of-new-hampshire-governor-signs-bitcoi… Big. http://governor.mt.gov/Newsroom/governor-bullock-announces-11-million-to-he… $400k for a mining op

1 0

Re: [Cryptography] Fwd: stego mechanism used in real life (presumably), then outed
by Zenaan Harkness 10 Jun '17

10 Jun '17

On Fri, Jun 09, 2017 at 07:24:01AM +0200, iang wrote: > On 09/06/2017 03:12, Zenaan Harkness wrote: > > >What "iang" is perhaps trying to come to grips with here is the > >concept of tacit consent. > > I prefer to think about what's really going on rather than layers > of deception. This way we can design a system that meets needs, > not strike hidden icebergs. > > Western society does not tacitly consent to spying on self. > What they do is trust the spies to follow the rules. And the spies change the rules to suit them, and yes, even break their own changed rules. Actions like these university counter-spy studies/ analysis etc, is active opposition, and breaks the cycle that has been named as tacit consent. Although technically correct when you say "people expect their spies to follow the rules, this is not tacit consent", you might find it hard to deny that most humans are entirely blasé about their security and privacy in communications (to pick a random example) - click every doc file, open every zip attachment, go to every website with full scripting and the rest to enjoy a bouncing unicorn. Here's the summary: Humans, in general, are taken to be affirmative in their non-action or non-support of their own privacy. This affirmative non-action is witnessed in voting, lack of self discovery of salient current problems, and lack of support for the few who make a stand. But, thankfully, this is now changing, as you highlight in a way which is quite refreshing. "The entitled (university) class has become active in their research of pathways to opposition of the spying against society as a whole. And this is being done publicly." This is succinctly put, and a breath of fresh air. I hope it continues and builds momentum. Technical/ procedural analysis and technical tools for opposition, is a great start. "Political" activity requires, in our current "democratic" states, vast numbers and so is hard to achieve it seems. Legal actions in this direction may also bear fruit, though not when there are blatant conflicts of interest of course, such as the hopelessly and cynically agenda driven (((SPLC))). > But there is a flaw with that arrangement - secrecy. The spies > have to do all in secrecy, and in such level of secrecy they don't > know themselves what they are doing. Yes, compartmentalisation is used very effectively to "absolve" the majority (those with weak personal ethics foundation) from personal "guilt". > This makes it easy to capture > - by themselves, by outside elements, sometimes by the enemy. > > It also makes it easy for them to cross the line without informing > the public. To cross the line and put up window dressing or > emperor's new clothing. > > As we've now seen countless times, accelerated with Snowden but by > no means unique, the western intel agencies (and others) have > frequently crossed the line of the law, and have dressed it up > somehow. When that dressing is ripped off, and the public sees > what is really going on, changes are made. It is a good thing we have seen a bit of this in the last few years. "Even Comey leaked." :D > For example, to drag the cyberpolitik back to *crypto*: when we > discovered that NSA was collecting all the Internet with watchers > in every node, that was clearly illegal. (We desperately need e2e > and tcpinc, where is it?) The "dress" they put on the emperor at > the time was that they weren't collecting because they weren't > looking. Once the lie was exposed to the public it was clearly > illegal. There are I hear court cases advancing. There are two main views of this: 1) Decades of violation is really bad (violation of rights). 2) The depth of the wrong/evil is is the only thing with a chance to jolt some of 'the majority' into awareness, and therefore is a really good thing. > That is not tacit consent. That's illegal behaviour, and society > failing to see it isn't in any way tacit consent. Those who are active in their opposition to wrongs, are evidently not consenting. I agree with that. And that's good to see. But look at things this way: 9/11 "anti-terror" legislation (in reality, anti-rights), has been 'on the books' now for 15 years. CIA has been violating fundamental laws now for how many decades? What about the NSA? Is the FISA court even lawful in the "righteous" sense of lawful, or is it a modern day star chamber? The fact of the time frames involved for even the beginnings of a correction, means that the majority in society are indeed tacitly consenting to bad laws, illegal laws, illegal actions. When one individual "leaves it up to others", that individual is tacitly consenting, since they are failing to actively oppose. OK, if they actually have no knowledge whatsoever, they can be argued to be ignorant. But as soon as someone becomes aware of a wrong, they are tacitly consenting for as long as they fail to act in opposition. The wrong-doers in power, get away with their wrongs for really long periods of time, due primarily to the failure of the majority to actively oppose said wrongs in a way which is effective (e.g. "leaving it up to others - someone will fix it" is not active opposition), and is almost the definition of tacit consent. > As a further thing: what the agencies do *all the time* is > manipulate the victim into believing that the victim somehow > allowed this to happen. It's your fault! Tacit consent is > something the agencies will sell to the public. "Yes, but > terrorism, danger, fear.... you know we have to do this, and you > agree." I agree with the principle you are expressing here. Tacit consent, if it be tacit consent, is still tacit consent, regardless of who calls it. Perhaps a better way to express this particular "don't blame the victim" sentiment is that tacit consent does not make an illegal or wrong act either legal nor righteous, and does not make the victim of spying directly responsible for the spying done against him. Of course I completely agree - any decent human who is both aware of and in alignment with right and opposed to wrong, would of course agree. And to the extent we can provide support, and awareness, and facilities to those who live in an abusive relationship, to act to get out of that abusive relationship, we should do so. But at some point in time, the victim of a crime has a duty to act in respect of the crime done to him - when he becomes aware, and knows that he ought do something about the crime, then at that point, if he does nothing, he is thereafter tacitly consenting to the continuation of the crime. Prior to this point in time, the victim is not responsible in any way. After this point in time, the victim is not directly responsible, yet is to some degree, tacitly consenting. Again, this is the definition of tacit consent - we must not take objectivity the wrong way (as a blame upon the victim) but merely as an analysis of that which is actually occurring, and consequently as guidance for further positive actions; this should go without saying. > So, no - don't be fooled. The agencies tell you to tacitly > consent. Say no. I agree, do not tacitly consent. Once you become aware, act in opposition to the wrongs, the crimes, the evils perpetrated upon you and others you hopefully care about in this world. > What is of interest is, once we figure it out, why don't we fix the > problem? This is pure power. Absolutely yes, fix the problem. Totally agree (of course). And different folk have different skillsets they can bring to bear to help fix the problem. Great to see "the entitled class" stepping in to help :) > The government fights fiercely to defend itself, as all cornered > animals do. Now, if the government fights and wins, e.g. quotes > "state secret" doctrine so we can't enforce society's values, we > lose. The government winning one battle, is not the failure of the way, just a temporary setback. The war only ends when the participants stop fighting. And whilst the aggressors and perpetrators of evils continue to oppress, spy, suppress, and predate upon the rest of us, it is in our interests to work for something better. > Again, what's that? We lost. But, the agencies will then come > back around and say "look, see, the courts said it was OK, you've > agreed, you've given tacit consent." Let's not conflate concepts. Authority of legal ruling, is quite different to implied authority assumed as and consequent to, tacit consent. Great to hear a certain passion for rights, freedom and individual sovereignty, which must be the foundation for any collective sanity. Regards, Zenaan

1 0

[RUS] [WAR] [Illegal Comedy Banned on Cypherpunks] How Russia hacked the British election
by Zenaan Harkness 09 Jun '17

09 Jun '17

I know, I know, comedy is verboten for all cypherpunks threads, especially sarcasm and satire - so consider this a trigger warning to those who are, for want of a better word, triggered by the personal confront arising within their personal space when reading a line of text that doesn't quite match original expectations for the said forum, thereby oppressing the minority's said personal space in a politically very incorrect way which requires a lot of expensive pharmaceuticals to calm and much even more expensive psychowhatsicomedical treatment thereafter, to even begin to recreate that personal fluffy cotton soft bubble of safe space. With a cookie. And a glass of milk. And mummy to tuck in the sheety sheets. And no more lulz for those nasty, nasty comediciassassins! So. You've been reading no further, of course, since lame humour is not your thing, you must have stopped right there, a few lines above. Glad you're not still reading. And for all those who like their comedy served Vodkaski (even if a bit lame)... ** How Russia hacked the British election http://russiafeed.com/how-russia-hacked-the-british-election/ ------------------------------------------------------------ Last month, acting Russian Envoy to the United Nations Vladimir Safronkov slammed Britain’s Ambassador to the UN for lying about the realities in Syria, insulting Russia and deviously scheming to create deadlock between the US and Russia after the election of well known Putin agent Donald Trump of the Autonomous Oblast of Manhattan. Today, Russia extracted […]

1 0

Demons: Intel ME/AMT/FSP , AMD PSP/IMC/SMU/AGESA , Firmware/Microcode/BIOS, HDD/SSD/USB
by grarpamp 09 Jun '17

09 Jun '17

In Short... You're Fucked, Intentionally, By Design, By Demons... https://events.ccc.de/congress/2014/Fahrplan/system/attachments/2503/origin… https://github.com/corna/me_cleaner/wiki/How-does-it-work%3F https://01.org/linuxgraphics/downloads/firmware https://coreboot.org/ http://librecore.info/ https://libreboot.org/faq.html Why is the latest Intel hardware unsupported in libreboot? It is unlikely that any post-2008 Intel hardware will ever be supported in libreboot, due to severe security and freedom issues; so severe, that the libreboot project recommends avoiding all modern Intel hardware. If you have an Intel based system affected by the problems described below, then you should get rid of it as soon as possible. The main issues are as follows... Why is the latest AMD hardware unsupported in libreboot? It is extremely unlikely that any post-2013 AMD hardware will ever be supported in libreboot, due to severe security and freedom issues; so severe, that the libreboot project recommends avoiding all modern AMD hardware. If you have an AMD based system affected by the problems described below, then you should get rid of it as soon as possible. The main issues are as follows... HDDs and SSDs are quite complex, and these days contain quite complex hardware which is even capable of running an entire operating system (by this, we mean that the drive itself is capable of running its own embedded OS), even GNU+Linux or BusyBox/Linux. SSDs and HDDs are a special case, since they are persistent storage devices as well as computers. Example attack that malicious firmware could do: substitute your SSH keys, allowing unauthorized remote access by an unknown adversary. Or maybe substitute your GPG keys. SATA drives can also have DMA (through the controller), which means that they could read from system memory; the drive can have its own hidden storage, theoretically, where it could read your LUKS keys and store them unencrypted for future retrieval by an adversary. Billions of undocumented transistors... Summary: Given the current state of Intel hardware with the Management Engine, it is our opinion that all performant x86 hardware newer than the AMD Family 15h CPUs (on AMD’s side) or anything post-2009 on Intel’s side is defective by design and cannot safely be used to store, transmit, or process sensitive data. Sensitive data is any data in which a data breach would cause significant economic harm to the entity which created or was responsible for storing said data, so this would include banks, credit card companies, or retailers (customer account records), in addition to the “usual” engineering and software development firms. This also affects whistleblowers, or anyone who needs actual privacy and security. Unless you do something about it...... https://libreboot.org/amd-libre.html We call on AMD to release source code and specs for Ryzen platform Recently in the Libreboot project, we’ve been informed about the new Ryzen platforms being released and sold by AMD. They are currently taking input from the community. Here are ways you can contact AMD to tell them that you demand libre hardware: https://www.reddit.com/r/Amd/comments/5x4hxu/we_are_amd_creators_of_athlon_… https://twitter.com/amd?lang=en https://www.facebook.com/AMD/ https://community.amd.com/places?filterID=all%7Eobjecttype%7Espace https://www.amd.com/en-us/who-we-are/contact (has contact links for multiple countries) AMD’s CEO, Lisa Su, can be contacted directly via email. Tell her that you demand libre hardware: lisa.su(a)amd.com Libreboot aims to provide fully free software initialization firmware on Intel, AMD, ARM, POWER and RISC-V platforms, and already does so on some older platforms. As documented in the Libreboot FAQ section, AMD is currently uncooperative in the libre software movement. Specifically, it releases non-free binary-only firmware for its platforms, along with tyrant technologies like the AMD Platform Security Processor. We in the Libreboot project call on AMD to release source code and start cooperating with our upstream, coreboot (and librecore) for its new Ryzen platform and existing Zen platforms. This includes source code for all initialization firmware (typically referred to as the BIOS or UEFI firmware, by some members of the community), and in particular, the AMD Platform Security Processor, to allow the free/libre software community to use AMD hardware that is entirely freedom-respecting. If it’s not too much to ask, we also would like source code and signing keys, including for the PSP and microcode for the CPU. We would also like to have board design guides, datasheets and footprints for CPUs/southbridges and so on. We especially need the signing keys to be released, for those components which are signed (PSP, CPU microcode, SMU, etc). This will make utilising any released source code possible (at present, some components will not run unless the firmware is signed by a certain signature, usually under lock and key by the hardware manufacturer). We in the community need freedom-respecting hardware! We call on AMD to work with us in the Libreboot, Coreboot and Librecore projects on bringing about a world where computing technology is no longer under lock and key from the manufacturer, and instead in the control and ownership of users. This has several benefits for AMD. There is currently a huge demand in the market for libre hardware. At present, the only companies providing it are ones like libreboot suppliers where systems are sold with entirely free software, including the boot firmware and operating system, without any signed firmware for which no keys are available to the public. The problem? These companies are selling much older systems that are made libre mostly through reverse engineering. At present, the systems sold by such companies are using older hardware designs from 5-10 years ago, which means that most people who wish to use all libre software cannot do so, due to practicality concerns. There are some people who will use these older systems, but that is not without a huge sacrifice to their convenience since they end up using older, obsolete hardware and certain tasks (especially serious software development) becomes impractical for a lot of people. AMD has the power to reverse this trend, and there is a potential for a great amount of profit to be made. The free/libre and open source software communities would jump head over heels to support such a move. In other words, AMD can make money from investing in the libre software community. There is even a precedent already set. AMD previously did release source code for all of their newer platforms, to the coreboot project, but then they stopped. We’re calling for this to resume, and to expand further than before. Here are some examples of popular campaigns, some of which were successful: https://www.crowdsupply.com/sutajio-kosagi/novena https://www.crowdsupply.com/eoma68/micro-desktop https://www.crowdsupply.com/raptor-computing-systems/talos-secure-workstati… In all of these cases, the campaigns were popular and this was despite the hardware either being low-end and unsuitable for most people, or too expensive for most people to afford. Then look at the popularity of the Libreboot project. Just imagine what would happen if AMD started to produce cheap, affordable libre hardware, to the point where Libreboot could start supporting newer systems from AMD. The possibilities are endless! People would jump towards AMD and AMD’s sales would go through the roof, while we in the libre hardware community would finally have systems from a manufacturer that cares for our freedoms to use our computers without proprietary software. Even low-end hardware like the BeagleBone or Raspberry Pi (which can be liberated) shows that libre technology is profitable, and desired by the community. Then look at the Google Chromebooks. These devices come with coreboot preinstalled by default! There are even some ARM chromebooks that we support in Libreboot, which are still produced and sold brand new by resellers (e.g. Amazon, Newegg, etc). These devices are sold in the millions! This just shows that it’s not only possible, but profitable, for AMD to start releasing systems which respect the freedom of users. It’s not just commercial benefits that are made possible. There are all kinds of possibilities for scientific research if systems are libre at the hardware/firmware level. For instance, at present, universities do not teach BIOS / boot firmware development in their computer science courses, because this technology is currently restricted by manufacturers and available only to a privileged few. AMD has the power to do the right thing. We in Libreboot call on AMD to work with us in building a world where users of technology can use their computers without relying on any proprietary software. We want - need - a world of highly secure, libre, owner-controlled hardware, from companies that care about software freedom. We in the Libreboot project are available to contact, using the details on the homepage. We look forward to working with AMD :)

1 1

Is OpenSource / Crypto Murderable? By who? Why? For how much?
by grarpamp 09 Jun '17

09 Jun '17

https://www.youtube.com/results?search_query=invention+suppression https://ask.slashdot.org/story/17/06/09/0025250/ask-slashdot-what-is-your-v… https://en.wikipedia.org/wiki/Jan_Sloot https://www.youtube.com/watch?v=jLp5gS9h9UI https://www.reddit.com/r/SiliconValleyHBO/comments/3gdxin/sloot_digital_cod… http://www.piedpiper.com/ http://jansloot.telcomsoft.nl/Sources-1/More/CaptainCosmos/Not_Compression.… https://www.youtube.com/results?search_query=secret+patents A Dutch electronics engineer named Jan Sloot spent 20 years of his life trying to compress broadcast quality video down to kilobytes -- not megabytes or gigabytes (the link in this story contains an 11 minute mini-documentary on Sloot). His CODEC, finalized in the late 1990s, consisted of a massive 370Mb decoder engine that likely contained some kind of clever system for procedurally generating just about any video frame or audio sample desired -- fractals or other generative approaches may have been used by Sloot. The "instruction files" that told this decoder what kind of video frames, video motion and audio samples to generate were supposedly only kilobytes in size -- kind of like small MIDI files being able to generate hugely complex orchestral scores when they instruct a DAW software what to play. Jan Sloot died of a heart attack two days before he was due to sign a technology licensing deal with a major electronics company. The Sloot Video Compression system source code went missing after his death and was never recovered, prompting some to speculate that ***Jan Sloot was killed because his ultra-efficient video compression and transmission scheme threatened everyone profiting*** from storing, distributing and transmitting large amounts of digital video data. I found out about Sloot Compression only after watching some internet videos on "invention suppression." So the question is: is it technically possible that Sloot Compression, with its huge decoder file and tiny instruction files, actually worked? According to Reddit user PinGUY, the Sloot Digital Coding System may have been the inspiration for Pied Piper, a fictional data compression algorithm from HBO's Silicon Valley. Here's some more information about the Sloot Digital Coding System for those who are interested.

1 0

Re: bitcoin incorporated
by juan 09 Jun '17

09 Jun '17

more commentary http://falkvinge.net/2017/05/01/blockstream-patents-segwit-makes-pieces-fal…

2 1

Gotlander newspapers: woman declaring "we have not voted for criminals who attack our women sexually" is "fascist" "Nazi"
by Zenaan Harkness 09 Jun '17

09 Jun '17

Politics, propaganda, sleezy media, German guilt complex, and the need for people to exercise their right to have a say in every part of every law they are called upon to obey, is all highlighted in this grotesque example of the shameless main stream media in today's Germany: Swedes Wrangle Over Gang Rape Against Wheelchair-Bound Woman https://sputniknews.com/art_living/201610171046413233-sweden-gotland-rape-p… The notorious gang rape in Visby, Gotland, in which a wheelchair-bound lady in her thirties was raped by people with "non-Swedish" appearance, led to some islanders declaring their interest in multicultural development over. As the five men initially arrested for the crime were set free later, indignation among angry locals has risen even higher. So some of the locals have finally declared they are no longer interested in multi culti crapola? Wonders never cease. But in reality, it seems a lot more crimes against their women is required before folks really stop tacitly consenting - by acting, in their own interests, rather than tacitly going along with what is supposed to be good for the world. What's another gang-raped wheelchair-bound woman between guilt programmed Germans anyway? I mean, Whites are Terrorists by definition as everybody knows? Surely we cannot be allowed to live wholesome lives in accordance with our own individual morals and principles now? Nah, likely never happen... 'Cause we got ta be tolerant, inclusive, submissive, compliant with the statutes, understanding that our rulers know best and all humans, and all religions, are equal and free. Rainbow unicorns will save the world.

1 0

Fwd: [Cryptography] stego mechanism used in real life (presumably), then outed
by grarpamp 09 Jun '17

09 Jun '17

---------- Forwarded message ---------- From: iang <iang(a)iang.org> Date: Thu, Jun 8, 2017 at 3:10 AM Subject: Re: [Cryptography] stego mechanism used in real life (presumably), then outed To: cryptography(a)metzdowd.com On 07/06/2017 12:21, Jerry Leichter wrote: > There's an interesting and significant sidelight to the previous discussion of watermarking, and the message a couple of days ago from "M373" concerning the Seaglass project at U of Washington, which is developing means for detecting IMSI catchers at city-wide scale. In both cases - and there are others - we have legitimate research devoted entirely to discovering, publicly explaining, and perhaps effectively neutralizing, mechanisms that LE has put in place. As far as I can tell, this has little historical precedent. Criminals/revolutionaries/freedom fighters - it all depends on you viewpoint in particular situations - have long conducted exactly this kind of research. But it's been clandestine, done in support of their own activities, and passed around as secret tradecraft. (Of course, state actors have also long targeted each other this way.) > > We've crossed a threshold when entitled members of society feel the need to work to subvert their own society's enforcement mechanisms. (No, university faculty members and EFF researchers and such - while hardly among the big movers in shakers - cannot reasonably be considered the downtrodden in any Western society.) I agree with the observation of the shift, but I take issue with the notion of "society's own enforcement mechanisms". As far as I can see, it isn't society that is putting in wholesale enforcement mechanisms, it's a small subset that are working outside the bounds of society. In long-standing principle, societies have more or less accepted the need for spying on *foreign* enemies but drawn the line at spying on own citizens. This is well tested in history. For local spying you need an investigation, a warrant, a court, a process. The barrier is high. Things like yellow dots, the equity ratio of 10:1 offence to defence at NSA, also the 19 agencies secret sharing and deception to courts, show that the historical defences of civil society are being subverted. And, it is more or less worse in other countries. It used to be the notion in pre-1990s times that the agencies spying on own people was reserved for the evil enemy - the Stazi, McCarthy, KGB, Hoover. But now it seems to be trotted out with regularity that if the terrorists are achieving, of course we'll undermine society to fix that. C.f., May's recent comments about willingness to reduce fundamental rights of 60 million in exchange for 6. So I would prefer to say, what we are seeing is a shift towards society protecting itself against the attacks of agencies that are now out of control of the democratic population. That's just me. I'm not society. But neither am I content when entitled members of society in agencies think society is right and it's ok to go local because we're the good guys. General society didn't need end to end encryption until this shift happened. 40 bit CA-mediated crypto did the job for credit cards nicely enough. Nice to have, but there was no serious privacy threat on the tubes. Now there is a big shift happening - those that are listening are using the information. It's not there yet, but if the trend for open intel sharing continues, society will need end to end encryption just to survive. iang _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

2 1