- cypherpunks - lists.cpunks.org

<nettime> public indifference
by allan siegel 01 Nov '13

01 Nov '13

Excuse me but is public indifference considered to be a new phenomenon is that really what it is? Remember Daniel Ellsberg, the Pentagon Papers? Levels of domestic and international surveillance have intensified logarithmically in the post-war period; just imagine what J. Edgar would have done if he could Hoover up data the way the NSA does. The highest echelons of this behemoth of a security apparatus have taken on a life of its own independent of the governmental controls that are supposed to monitor its activities. Quite presciently Norman Mailer wrote about this ages ago in reference to the CIA; he described how the various entities and fronts that it created began to take on their own economic realities far removed from any governmental controls and now, far beyond what Mailer might have imagined, the government officially and openly sub-contracts security and policing to companies effectively working outside the law. All this just increases daily despite shut-downs and economic crises (after all its sucking up tax dollars just like all the data its accumulating). Indifference is an inaccurate description of what the public is feeling right now. What might be more accurate is a profound sense of cynicism, confusion and fear because the world most of us live in is littered with enormous uncertainties and where survival is high on the daily agenda; and because politicians and government leaders are baffling in terms of their levels of incoherence; and because the omnipresent cloud of some kind of terrorist act lingers in the not far distance (and never mind the kind of atrocities that occur daily enabled by the same systems that govern the surveillance apparatus). So, indifference is not quite appropriate when you start thinking about the future and how it appears or manifests itself stitched into people’s daily routines. This is not to belittle or diminish the importance of what Snowden has done; the impact of his act is hard to quantify as its ramifications will be still felt years from now; the Pentagon Papers had a shock value when they came out also and the NY Times eagerly published them (and the Times then still had journalistic stature). But, indeed now the times they are a’changing. The real indifference lies not with the public but rather with the shamble of what we politely call the Fifth Estate and the obscene level of public discourse… bye for now allan # distributed via <nettime>: no commercial use without permission # <nettime> is a moderated mailing list for net criticism, # collaborative text filtering and cultural politics of the nets # more info: http://mx.kein.org/mailman/listinfo/nettime-l # archive: http://www.nettime.org contact: nettime(a)kein.org

2 1

Re: [Freedombox-discuss] Dumb idea: Alternative to Tor that promotes good behavior
by Melvin Carvalho 01 Nov '13

01 Nov '13

On 27 October 2013 21:07, Bill Cox <waywardgeek(a)gmail.com> wrote: > On 10/27/2013 3:31 PM, Melvin Carvalho wrote: > > > > > On 27 October 2013 18:26, Bill Cox <waywardgeek(a)gmail.com> wrote: > >> I would love feedback on an idea for promoting more internet freedom. >> >> Here's the problem: Tor has little public support, because most Tor >> traffic is wasted on supporting bad behavior. When I ran a Tor node, it >> became clear that most of my bandwidth was being wasted on video >> downloads. People want to promote free speech, not child pornography. >> >> Here's my solution: Build a Tor-like network for routing anonymous data, >> but track behavior of all users' secret identities, and make their >> Internet history public. Allow node operators to choose categories of >> public identities they which to support. >> >> For example, I would choose to promote all forms of non-violent free >> speech. I should be able to contribute my bandwidth to this purpose. >> If a dissident in China goes by the public ID of ChinaCat, and has a >> high reputation for promoting freedom, they are welcome to use my >> bandwidth. If someone just wants access to redtube.com, they can get >> that access from someone else. >> >> There are various technical aspects to this idea. For example, would >> prefer that the social graph between secret identities be public so I >> can use a simple network flow algorithm over trust edges between >> identities to determine how much I trust someone. The entire social >> network should be P2P, like Tor, and it should route a lot of dummy >> traffic to help hide the real traffic. With the considerably lower >> bandwidth that is needed to promote freedom rather than free porn, this >> should be no problem. >> >> What do you guys think? >> > > I like it a lot. But who is going to volunteer to do this work, when > people are already busy (not least in coding up things like freedombox) > > > I am willing to write it myself. P2P algorithms is something I enjoy > coding, and this is one of those applications that may be able to do some > real good for the world. > > > I think you would need an economy to incentivize people to do the > categorization etc. > > Maybe in return for someone helping you route your traffic, you could > keep an encrypted backup of their data or contribute a code patch to their > project etc. > > > We're thinking along the same lines. I would like to add a Ripple based > economy to the public social network, based on trust relationships between > peers as in the original Ripple algorithm. With secret identities in the > social network, it is less important to keep transactions and the trust > network secret, which was a problem in the original Ripple algorithm. I > imagine transactions being done in tiny fractions of a cent, for services > like helping download files faster in a torrent or providing encrypted > storage. > I believe the retroshare project (noted on this list many times) is in the process of implementing a P2P ripple (a la Ryan Fugger's original protocol) system, or have done so already. Dr Bob told me you can plug in other protocols such as GNUNet quite easily. I'm unsure how this would gel with Tor tho. I'm also looking at translating all of the crypto currency work to a web based system. Would be very happy to hear if you make any progress on this. Or perhaps we can discuss off list if some stuff is off topic. My current line of thinking is hacking the economy so that fbx users get their own coins that they can spend with each other, and to give, say, 10% of all new coins to the FSF to help lower hardware costs of plug computers ... > > Bill > > _______________________________________________ > Freedombox-discuss mailing list > Freedombox-discuss(a)lists.alioth.debian.org > http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss > _______________________________________________ Freedombox-discuss mailing list Freedombox-discuss(a)lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss

2 1

Dark Mail Alliance for end-to-end private and secure email
by coderman 01 Nov '13

01 Nov '13

darkmail.info: "end-to-end encrypted protocol and architecture ... [for] private and secure email", presumably a white paper is forthcoming. initial release anticipated in 2014. ... which returns on port 443: "Error 102 (net::ERR_CONNECTION_REFUSED)" (~_~;) --- requirements for end-to-end secure email: - content of messages always protected; ensure authenticity and privacy of content. (plain-text content is not an option) - keys generated and kept on device / user end-point. (no server side generation or storage of private keys on behalf of users; support hardware secured private key and wrapped storage on devices with HSMs) - mail header scrubbing is performed at delivery, in transit, and on receipt to limit metadata exposure. - server-to-server communication enforces STARTTLS with PFC capable cipher suites. - client-to-server communication enforces TLS with PFC capable cipher suites. - service resistant to kleptography and covert channels. (use open and robust protocols, use robust key lengths, use fail-safe rather than fail-vulnerable configurations, ...) - for extra credit, solve the subject line as part of public header metadata problem. (solving the metadata problem for email is super extra credit ;) - what else? is it possible to build such a system without compromising privacy or usability? i remain skeptical...

3 2

Re: Meet ?badBIOS, ? the mysterious Mac and PC malware that jumps airgaps
by John Young 01 Nov '13

01 Nov '13

Every SCIF has a unique identification (UID) based on its full spectrum of construction materials, dimensions and MEP characteristics. Each compromises itself by inadvertent signals, or rather signals not usually or easily intercepted. Same for each building and building site above and below the surface. Conventional SCIF design characteristics which are in the public domain do not cover the full spectrum, typically only the EM. Like CryptoAG and other ruses, SCIFs are quite collectible behind the EM mask. Similarly, TEMPEST characteristics which are in the public domain do not cover the full spectrum of collectible signals and metrics of compromising emanations. Some similarity to lie detection ruses. There are likely other ruses, as customary comsec disinformation hardly restricted to crypto. Now could that be what BadBIOS is up to? A leak of disinfo for those which have limited interception and analysis equipment? Still, it is a fine story about the many levels of comsec onion ot be peeled. At 09:52 AM 11/1/2013, you wrote: > > perhaps i misunderstand it, though must 'resonance' > > be audibly acoustic, and would a SCIF actually defend > > against "vibrations" at all frequencies. > > >the question highlights how ill-suited the 'spy >agencies'ââ are for conducting asymmetric anything. > >Unless they had a Brain inside think of a >mechanism and explain it to an Engineer to >propose to a Facilities Security Manager who >obtained confirmation from a Director, they would be vulnerable. > >For instance, TEMPEST security - every SCIF has >it because inside it was well >documented/implemented. Â SEISMIC security - no >SCIF*** is isolated from seismic vibrations >modulated with data. Â So, to ex-filtrate data, >have those passing circus elephants stomp their >feet in predetermined patterns. Â Or make one of >those "Dune" style thumpers. Â The worms in this case being .... ? > >*** I'm suppose some very few SCIFs are >vibration isolated for various reasons, but not as an exfil channel. > > >-daniel >

1 0

Re: [cryptography] coderman's keys
by coderman 01 Nov '13

01 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 for the public: regarding what's difficult about this key: it maps to an email address that does not exist. most users of PGP don't know how to encrypt to a key that isn't in the key metadata itself. if you're unable to encrypt to a specific key, your OPSEC capabilities are insufficient to use this technology. </$0.02> best regards, -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iL4EAREKAGYFAlJzM7lfFIAAAAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl bnBncC5maWZ0aGhvcnNlbWFuLm5ldDQxQzEyQjhDMzA3RDdFMjE5OEFBNTc4MTY1 QTg0N0U3QzJCOTM4MEMACgkQZahH58K5OAx6KQEAsGPNK3tDWnpjpaLlbgB1WVIw Ynsp+AwO3oghDvcRxJEA/A0schdXYFxr+YX70uWq3GpLI2JCG/iPlDIcBT/R5CSU =v7g0 -----END PGP SIGNATURE-----

2 1

Re: [cryptography] coderman's keys
by coderman 01 Nov '13

01 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Taral gets a coin for being an authentic cypherpunk :) good to see you! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iL4EAREKAGYFAlJzLP9fFIAAAAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl bnBncC5maWZ0aGhvcnNlbWFuLm5ldDQxQzEyQjhDMzA3RDdFMjE5OEFBNTc4MTY1 QTg0N0U3QzJCOTM4MEMACgkQZahH58K5OAyStQD/X253YAyiwCu43Wwa2qobsdQv UepLjmm7FSaiDqL4GCcA/idCjPn7BGEel5Niqit4oCZEgPD78WGuYywwtNepEJYQ =NPRD -----END PGP SIGNATURE-----

1 0

Re: [Full-disclosure] coderman's keys
by coderman 01 Nov '13

01 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I love sending encrypted email! :) Terry gets a coin for solid effort. This challenge is concluded! best regards, -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iL4EAREKAGYFAlJzLHVfFIAAAAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl bnBncC5maWZ0aGhvcnNlbWFuLm5ldDQxQzEyQjhDMzA3RDdFMjE5OEFBNTc4MTY1 QTg0N0U3QzJCOTM4MEMACgkQZahH58K5OAwx/AEAwTWrvaCGo7Yn8JHhtGLyXRlY 5LMsDyD00d1yaz1uTKoA/3KnSELtxe1nUIQNq+4wkiCtPTUsQEcfNZ0vp/iksh0W =uyHJ -----END PGP SIGNATURE-----

1 0

Re: [cryptography] coderman's keys
by coderman 01 Nov '13

01 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello coderman! Glenn wins it. my hope in humanity restored. please response either publicly or privately with a BTC addr. best regards :) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iL4EAREKAGYFAlJzK9JfFIAAAAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl bnBncC5maWZ0aGhvcnNlbWFuLm5ldDQxQzEyQjhDMzA3RDdFMjE5OEFBNTc4MTY1 QTg0N0U3QzJCOTM4MEMACgkQZahH58K5OAwwDQD/epbovMrwvFmXXKRBqe7L1Nr/ l9hQLHniKy8fDcCmdV4BAK9azS4m95XiIw/YyK835a0254ApLY9i1weE68EeIHFJ =LmTs -----END PGP SIGNATURE-----

1 0

coderman's keys
by coderman 01 Nov '13

01 Nov '13

my contempt for email is well known and reinforced by choice of provider. there are myriad rebuttals to email as private channel, of which i agree fully. however, if you pass muster, i can be reached via secure email. yes your default client will balk. this is a feature not a bug... "you must be this high to ride..." -----BEGIN PGP PUBLIC KEY BLOCK----- mQStBAAAcjURDADr+BmpnhH+3n2ZNsrInvXMQL4pyFkysD0h9uhVKScUaQu5WoYT TSbgP0MINjjba7hq8j6bFfMZgaRfJU4O6w8BO9ugjjre8RopBptpgabCdXNzZS6Q 3YqBxb723pnYOj35Ie0fXMGDZZeNseSv76ATr+GuVtQ4VuDr8XmEkreS/Jikkuot r2VeII/7GmJ6tdEHF3yIPFXhOzp32fEyzc2ZaKmyR5wo7CT9GR4oFhSdnzXhw3CZ DqSqQx3eRLGX8gGgEiye3CluekcRmD7V2m4fWZsnD1ohdxBAx/8TWf/rF5H9lp5O 1dWNE03MK9Iuzfnc+kcsUhQHcRIR1fzeYGtHL9cEXckxOuvZpxGqPr9vg6jxVD+/ VhEkcHHVzSj1gidj4BdSzMsfBc9yS+aYGX8O9GLcYk2+ry3VZOkb2QnDlrgd8o3H LBSleqxxoXpn+m5obatK0kkxzvD4LCuMHlvel/Fq5/5I37l7zL0drQ2j3XLSJjpW gFT7p/PQTBnt1nsBAM+ZbY4kaX+O15NzYcoNzr1GwnQKn6T49c/Tv8hNR0EpDADf bMFJrTfQKtK4/1F/ERUzygPa8wYzMZDCO5Tfjhx6x3ctHSj/7nT/vqYoutip7KXi LZ+2D/UqXDqj7WycJ1NBpqKvnvzjbcrXYHV+MSWZRIMS2bKRbq9Dmck8Rc3rVoRN p49/M5zLfyWA9CLj/A15zOjqI0y53tExogFVdykXoJmfy/zvm4wme+4X6h2BAmQv tZP5Z+aYmYCtPxkqzaTrkTw4QRVdz/Iykw5rPn7bzi5Rw1jHPNl+9L2+wGfSeJNl hCmiwdZWddKV0rHBfo7tegd82Oi8BS4dZFsDCPbXBiHFMWvtgR0b+2+V8THIc9k3 0ZvpxWHjreVvl/9ikGyfpZTenrbKjKO6hKrgwG9/Ev/FSQhyiqFeO7ysUEfGzsXu oNEeN95MlgVPdeOvClq11MYaRXZ2pjuoMiOM7bZzxz79CgA5i8ebraVAbUZLbDLM cmLkKFv2JpiBlJtahZe6jIij7XOFlKjWlxbVxMOmfqoY6p2xZQ+QIuYJyEaoVq8L 9RYy8LF29QsCfMRF+X8VGFU8FQYoJDvpJRNgX4urBtZltMpsLFFREDVUrScXoXmZ KgUgkcttWMIDOWg0ZHzTuvNmMwvO3c/C3i+48Xoge+JXY+KHH8HY4vcJ7M7Bggfq 4U2Fp6f1mBv61iFu3cet1xHcCt1IVYZSXh/DLWQcRDM//tPoDcaDs9r4L2IlPGL/ 1iC6uz2X4ZOHQLYHMYi10yirXNce3GVZplB2HUuW5gjgqcG/5S3g9MJLnY2UXlRG uiNFmzuxqFQKYK13noMCwTxNr7hOrgf2isc/ILsXJ0a1NEmCgfg5DUldkm0VURfs u572h83WIj5lglExvvXC85bHckczDNeObt5mL3cd4XQvDzgQ2RtfjsqFdmkMA/7W yqkhT+E1yIk23qmSrasS5u3uz0zw9kFOiGa6HNGjwskSNhoEmK+pPELla8IwXIzV L/6iOODXuSM9MHNfmUFTxiD6oLN02DILrMqvn7qQ5I+KxjGpNGQtI+NYZMj+chTp tI5oaWRkZW5AZG90Lm9uaW9uICgiYm9ybiBvbiBKYW51YXJ5IDMxIDE5NzkgLi4g YWxsIHByaW1lIG51bWJlcnMgLi4gSSB3b3VsZCBzaXQgb24gdGhlIGZsb29yIGlu IG15IGJlZHJvb20gYW5kIGp1c3QgY291bnQuIikgPGhpZGRlbkBkb3Qub25pb24+ iHkEExEIACEFAgAAcjUCGwMFCwkIBwMFFQoJCAsFFgMCAQACHgECF4AACgkQZahH 58K5OAw/QwD9EJaiCtFysCYeCuQfABa+Np68FkIlq9xunDqpxO8JtmwBAKchQFu9 +bHa2tXJZeTwR4SR3oiyBN3tzRP3f4c4zCL6uQMNBAAAcjUQDAC5x2Igm4sw/3ch fBwptsTV3MLd4z1q9vaxcegQXMsAT9+zBlVdzdTWaWKPZwn65QJx472vDSnIdC/O SOj9rp2+uBTuXkE47UNYxgc0lLdG13fafS5SQR86bwmvcvaqAqDxcwzELNPFV2UG 13BgOeiDWAjTHEN33MzV4lAyK7qUTcK10vMYmdvi793W7EjtaVigzzCTxWEEaIli OtURb46C6g65F5oVt6Nihhnlb1Al4LsTfqA0y1aw9CSCQdYritANvF+ekWYcxeGb 9qRSjAdFWLH8fxv7nteCzBDvsmR7aXvzZ2GkXVMmCAt9XvxajI329CArU1LixMrW 1/xSr6n3tU7ezLwZ8CxrjsZKYTYYzcrJ3vGlZ06Ez1T4QdUiFHxSAU7OADiRUNAu tW6cxgZs5hNtpNoU9HRlShaMO9xqhrWQkiwSCmVuRWwPqHFVnMrh/GROJUgMj82B RlS0YVp8ZgQHwRmi0womzSqJ4j+fCbzgtDpLZoGpCMyeLS/WOLMAAwUL/A2uMgOG 9dADx6MKMdpWor9l6WgG34AN6sbUkEaetxpFPKCd0LRyebvlueJJirFOhNheUqns 1rixVO7yaMqrY1wYYUoGMspQQ/QhGlTckxKIaygjjbq9843P3bFOUutgo7V8Wm/E N53MxD7kE/f/IcvkH9W84/aLUsjO4xStP7fTq7B/d5Cx5HbLiRVMFykRB1PjrPRF ojO26I2O7h9zIH5PXqD+DbJ3i4FsZqSvOFOkt0H70cyDZse22vniS4YnL/yPcjqH DZoGz99k5sLf14RP0W+8QgnXRqTaReFnGU7o7cQmozomocKTlQ4nQInaJeiFiZCS vLjq4RWN/vhHgm1Zt8D5ihvo0v/ztEM4EILIJ5M47Vhg9lFPKUambTd7qf+k28nA FAusEhf7U9s8S9TMJIAYPBwsoYoH5vzJZNaEZKEKflYVhgHbx137OpHCXtLo/iuT Xy23fBl5zeZlGNiq6PWlIOd/zc8qrudXnvBBbE1/F34K/ipENDWi1YO/EohhBBgR CAAJBQIAAHI1AhsMAAoJEGWoR+fCuTgM3Q4BAMzZ6XcvyqVe/IkbqwxvtEwQ+DbX tXJofbiwx8RL1MpAAP44ZMisc8+A7W0UPa/NWB8VQvKWX8ONw/sPtGc2CB4EYw== =H0Fx -----END PGP PUBLIC KEY BLOCK-----

1 1

TIA started in the late 90's [was Re: PART II: Oh, Freedom]
by coderman 01 Nov '13

01 Nov '13

On Thu, Oct 31, 2013 at 7:47 PM, coderman <coderman(a)gmail.com> wrote: > ... One does not > need access to classified documents to see—including in records we > will be making public as part of our effort in "Snowden and the > Future" over the next two weeks—how the military and strategic > thinkers in the United States adapted to the end of the Cold War by > planning pervasive surveillance of the world's societies. > > In the early 1990's, in documents that are in no way secret, the US > strategic and military planners made clear in a range of fora—from the > think tanks, the Pentagon, in research reports and conference > proceedings—that they foresaw, as indeed we now observe, a world in > which the United States had no significant state adversary, and would > be instead engaged in a series of "asymmetric conflicts." That was the > phrase, meaning "guerrilla wars." > > ... after the first World Trade Center bombing, after the > Africa embassy bombings, after the Cole. The whole pervasive > surveillance system, not just the Patriot Act but all the pieces that > we now understand surrounded it in the secret world's understanding, > were constantly advocated for at the end of the 20th century, and as > constantly rebuffed. > > And then, as we saw last time, at the opening of the 21st century a US > Administration which will go down in history infamous for its tendency > to think last and shoot first bought—hook, line, and sinker—the entire > "denying sanctuary," pervasive surveillance, "total information > awareness" scheme. Within a very short time after January 2002, mostly > in secret, they put it all together. let me state this as plain as possible: total informative awareness, as strategic and policy objective, began years before 9/11. the terrorist attacks merely provided cover for "the greater good" of which those who promote it believe TIA to be.

1 0