- cypherpunks - lists.cpunks.org

Former UK ambassador:: I picked up the Clinton emails from a Democrat whistleblower
by Razer 16 Dec '16

16 Dec '16

http://www.dailymail.co.uk/news/article-4034038/Ex-British-ambassador-WikiL… A Wikileaks envoy today claims he personally received Clinton campaign emails in Washington D.C. after they were leaked by 'disgusted' whisteblowers - and not hacked by Russia. Craig Murray, former British ambassador to Uzbekistan and a close associate of Wikileaks founder Julian Assange, told Dailymail.com that he flew to Washington, D.C. for a clandestine hand-off with one of the email sources in September. 'Neither of [the leaks] came from the Russians,' said Murray in an interview with Dailymail.com on Tuesday. 'The source had legal access to the information. The documents came from inside leaks, not hacks.' His account contradicts directly the version of how thousands of Democratic emails were published before the election being advanced by U.S. intelligence. Craig Murray (left), former British ambassador to Uzbekistan and a close associate of Wikileaks founder Julian Assange (right), told the Dailymail.com that he flew to Washington, D.C. for a clandestine hand-off with one of the email sources in September Murray is a controversial figure who was removed from his post as a British ambassador amid allegations of misconduct. He was cleared of those but left the diplomatic service in acrimony. His links to Wikileaks are well known and while his account is likely to be seen as both unprovable and possibly biased, it is also the first intervention by Wikileaks since reports surfaced last week that the CIA believed Russia hacked the Clinton emails to help hand the election to Donald Trump. Murray's claims about the origins of the Clinton campaign emails comes as U.S. intelligence officials are increasingly confident that Russian hackers infiltrated both the Democratic National Committee and the email account of top Clinton aide John Podesta. In Podesta's case, his account appeared to have been compromised through a basic 'phishing' scheme, the New York Times reported on Wednesday. U.S. intelligence officials have reportedly told members of Congress during classified briefings that they believe Russians passed the documents on to Wikileaks as part of an influence operation to swing the election in favor of Donald Trump. But Murray insisted that the DNC and Podesta emails published by Wikileaks did not come from the Russians, and were given to the whistleblowing group by Americans who had authorized access to the information. 'Neither of [the leaks] came from the Russians,' Murray said. 'The source had legal access to the information. The documents came from inside leaks, not hacks.' He said the leakers were motivated by 'disgust at the corruption of the Clinton Foundation and the tilting of the primary election playing field against Bernie Sanders.' Murray said he retrieved the package from a source during a clandestine meeting in a wooded area near American University, in northwest D.C. He said the individual he met with was not the original person who obtained the information, but an intermediary. Murray claims he met with the person who passed the emails over in a Washington, D.C. part near American University His account cannot be independently verified but is in line with previous statements by Wikileaks - which was the organization that published the Podesta and DNC emails. Wikileaks published the DNC messages in July and the Podesta messages in October. The messages revealed efforts by some DNC officials to undermine the presidential campaign of Sen. Bernie Sanders, who was running against Hillary Clinton. Others revealed that Clinton aides were concerned about potential conflicts and mismanagement at the Clinton Foundation. Murray declined to say where the sources worked and how they had access to the information, to shield their identities. He suggested that Podesta's emails might be 'of legitimate interest to the security services' in the U.S., due to his communications with Saudi Arabia lobbyists and foreign officials. Murray said he was speaking out due to claims from intelligence officials that Wikileaks was given the documents by Russian hackers as part of an effort to help Donald Trump win the U.S. presidential election. 'I don't understand why the CIA would say the information came from Russian hackers when they must know that isn't true,' he said. 'Regardless of whether the Russians hacked into the DNC, the documents Wikileaks published did not come from that.' Murray was a vocal critic of human rights abuses in Uzbekistan while serving as ambassador between 2002 and 2004, a stance that pitted him against the UK Foreign Office. He describes himself as a 'close associate' of Julian Assange and has spoken out in support of the Wikileaks founder who has faced rape allegations and is currently confined to the Ecuadorian embassy in London. Assange has similarly disputed that charges that Wikileaks received the leaked emails from Russian sources. 'The Clinton camp has been able to project a neo-McCarthyist hysteria that Russia is responsible for everything,' Assange told John Pilger during an interview in November. 'Hillary Clinton has stated multiple times, falsely, that 17 US intelligence agencies had assessed that Russia was the source of our publications. That's false – we can say that the Russian government is not the source.' Murray suggested that John Podesta's emails might be 'of legitimate interest to the security services' in the U.S., due to his communications with Saudi Arabia lobbyists and foreign officials The Washington Post reported last Friday that U.S. intelligence agencies had 'identified individuals with connections to the Russian government who provided WikiLeaks with thousands of hacked emails.' The paper said U.S. senators were presented with information tying Russia to the leaks during a recent briefing by intelligence officials. 'It is the assessment of the intelligence community that Russia's goal here was to favor one candidate over the other, to help Trump get elected,' a senior U.S. official familiar with the briefing told the Post. 'That's the consensus view.' The paper said U.S. senators were presented with information tying Russia to the leaks during a recent briefing by intelligence officials. 'It is the assessment of the intelligence community that Russia's goal here was to favor one candidate over the other, to help Trump get elected,' a senior U.S. official familiar with the briefing told the Post. 'That's the consensus view.' The Obama administration has been examining Russia's potential role in trying to influence the presidential election. Officials said Russians hacked the Republican National Committee, but did not release that information in a deliberate effort to damage Clinton and protect Donald Trump. Several congressional committees are also looking into the suspected Russian interference. While there is a consensus on Capitol Hill that Russia hacked U.S. political groups and officials, some Republicans say it's not clear whether the motive was to try to swing the election or just to collect intelligence. 'Now whether they intended to interfere to the degree that they were trying to elect a certain candidate, I think that's the subject of investigation,' said Sen. John McCain on CBS Face the Nation. 'But facts are stubborn things, they did hack into this campaign.' President elect Donald Trump raised doubts about the reports and said this was an 'excuse' by Democrats to explain Clinton's November loss. 'It's just another excuse. I don't believe it,' said Trump on Fox News Sunday.

1 0

Debian/Ubuntu security apt phun
by Georgi Guninski 16 Dec '16

16 Dec '16

Debian/Ubuntu security apt phun https://www.ubuntu.com/usn/usn-3156-1/ 13th December, 2016 An attacker could trick APT into installing altered packages. https://www.debian.org/security/2016/dsa-3733 can take advantage of this flaw to circumvent the signature of the InRelease file, leading to arbitrary code execution. Likely besides the nsa, others enjoyed this too (have seen multi user debian mirror with world writable stuff at /etc) And how do you update apt if it is broken? ;)

6 13

New low for the intercept.
by juan 15 Dec '16

15 Dec '16

https://theintercept.com/2016/12/14/heres-the-public-evidence-russia-hacked… "The website DCLeaks, which began publishing a great number of DNC emails, has some apparent ties to Guccifer and possibly Russia. And then there’s Wikileaks, which after a long, sad slide into paranoia, conspiracy theorizing, and general internet toxicity, has made no attempt to mask its affection for Vladimir Putin and its crazed contempt for Hillary Clinton. (Julian Assange has been stuck indoors for a very, very long time.)"

3 7

Trump endorses Duterte
by Zenaan Harkness 15 Dec '16

15 Dec '16

USAians - when your currency reset happens, suggest you be prepared for the Wild West. If the oligarchy (those who own the Federal Reserve bank) bring on a rapid reset, and disallow Trump executing a soft landing, all hell may well break loose. Good luck, Donald Trump Tells Rody Duterte He Supports His Right-Wing Death Squads! http://bbs.dailystormer.com/t/donald-trump-tells-rody-duterte-he-supports-h… " Abracadabra! And just like that, the diplomatic problem between the United States of America and the Republic of the Philippines vanished. " -- * Certified Deplorable Neo-Nazi Fake News Hunter (TM)(C)(R) * Executive Director of Triggers, Ministry of Winning * Weapons against traditional \/\/European\/\/ values: http://davidduke.com/jewish-professor-boasts-of-jewish-pornography-used-as-… * How Liberal Lefties view the world: http://bbs.dailystormer.com/uploads/default/optimized/3X/0/4/042cb95724339d…

1 0

Cypherpunks Jobs In Government US / Trump
by grarpamp 14 Dec '16

14 Dec '16

Lots of jobs opening up. >From consulting at White House / Cabinet level on down... https://greatagain.gov/ https://apply.ptt.gov/ https://presidentialtransition.usa.gov/ https://www.usajobs.gov/ https://www.cyberscoop.com/nsa-morale-down-keith-alexander-mike-rogers/ https://www.nsa.gov/

1 0

Tick Tick Tick - "Seven Days" (Soft Coup in Progress in US)
by Razer 14 Dec '16

14 Dec '16

Anyone seen any good classic movies lately? Seven Days In May. Recommended by Pepe Escobar (snigger, 'Russian Stooge') The link he provides at Farcebook, 123DOTnet, is Cloudflare, like putlockerDOTac Here's a direct link to the 888mb file, hosted in Belize. 1274x720px, but better viewed a little smaller. http://130.185.254.181/vids/seven_days_in_may_1964.mp4 Escobar quotes Peter Spengler describing a "Soft Coup" in progress in the US: > "THE COUP AGAINST TRUMP > > It takes a brilliant analyst like my friend Peter Spengler to put the > ongoing regime change attempt against Trump in perspective in only a > few words: > > “We ought not to deal with this ‘Russia did it’ induced paranoia as an > intelligence failure, as Trump did, but with a creeping, emerging coup > which the Directorate of Operation [which the CIA basically is] has > been launching in cahoots with a faction in the Pentagon since about > September. > > This silent potential coup is an attempt to get rid of a nuisance > president even before he can become a legitimate president through the > vote of the electoral college, while at the same time building a scene > for a political crossfire in which Trump no longer has even a chance > to address a physical audience, like during the rallies of his > campaign, which leaves the mass of voters and supporters bewildered by > the secondary reality staged by the media. > > I think it serves well to review and smell "Seven Days in May" and > remember why and for what purpose JFK had won Frankenheimer for this > movie project.” > > MUST WATCH "Seven Days in May" is here:" Rr

2 1

FreePress, Filmmakers, and Users: We demand file encryption builtin the camera
by grarpamp 14 Dec '16

14 Dec '16

http://www.zdnet.com/article/photojournalists-and-filmmakers-call-on-camera… https://freedom.press/news/over-150-filmmakers-and-photojournalists-call-ma… https://www.documentcloud.org/documents/3238288-Camera-Encryption-Letter.ht… Some of the world's leading photojournalists and filmmakers are calling on the manufacturers of the cameras they use to add encryption to their products, as the number of threats they face from having their devices seized is "literally too high to count." Over 150 documentary makers and reporters signed an open letter by the Freedom of the Press Foundation, asking for camera makers -- including Nikon, Sony, and Canon -- to ensure that their work is protected while often "attempting to uncover wrongdoing in the interests of justice." "Documentary filmmakers and photojournalists work in some of the most dangerous parts of the world, often risking their lives to get footage of newsworthy events to the public," said Trevor Timm, the foundation's executive director. But, he said, "they face a variety of threats from border security guards, local police, intelligence agents, terrorists, and criminals when attempting to safely return their footage so that it can be edited and published." The filmmakers say that camera security has lagged behind the rest of the industry, leaving their work "dangerously vulnerable."

1 0

Snowden on Your [Meta]Data: You must become Auhoritative Broker and Rightsholder
by grarpamp 14 Dec '16

14 Dec '16

https://www.periscope.tv/PardonSnowden/1vOxwgnXeYLxB https://techcrunch.com/2016/12/13/edward-snowden-says-the-central-problem-o… Twitter CEO Jack Dorsey interviewed Edward Snowden via Periscope about the wide world of technology. The NSA whistleblower "discussed the data that many online companies continue to collect about their users, creating a 'quantified world' -- and more opportunities for government surveillance,". Snowden said, "If you are being tracked, this is something you should agree to, this is something you should understand, this is something you should be aware of and can change at any time." Snowden acknowledged that there's a distinction between collecting the content of your communication (i.e., what you said during a phone call) and the metadata (information like who you called and how long it lasted). For some, surveillance that just collects metadata might seem less alarming, but in Snowden's view, "That metadata is in many cases much more dangerous and much more intrusive, because it can be understood at scale." He added that we currently face unprecedented perils because of all the data that's now available -- in the past, there was no way for the government to get a list of all the magazines you'd read, or every book you'd checked out from the library. "[In the past,] your beliefs, your future, your hopes, your dreams belonged to you," Snowden said. "Increasingly, these things belong to companies, and these companies can share them however they want, without a lot of oversight." He wasn't arguing that companies shouldn't collect user data at all, but rather that "the people who need to be in control of that are the users." "This is the central problem of the future, is how do we return control of our identities to the people themselves?" Snowden said.

1 0

Fwd: [talk] Climate Mirror
by Mirimir 14 Dec '16

14 Dec '16

FYI Some of these datasets are humongous. Many TB. I wonder about alternatives to straight-up mirrors. I mean, a 100TB server is a nontrivial investment. Maybe torrents, IPFS, ...? -------- Forwarded Message -------- Subject: [talk] Climate Mirror Date: Tue, 13 Dec 2016 16:07:09 -0800 From: Pete Wright <pete(a)nomadlogic.org> To: NYCBUG <talk(a)lists.nycbug.org> Not to go super political on this list - but I'm personally pretty keen to preserve climate science related data-sets for future generations (as well as our own). So in that light - wondering if anyone has taken a look at this: http://climatemirror.org/ I'm investigating now to see if there are any datasets I can help mirror - if anyone else on this list is interested let me know, maybe we can make a large scale effort? -pete -- Pete Wright pete(a)nomadlogic.org nomadlogicLA _______________________________________________ talk mailing list talk(a)lists.nycbug.org http://lists.nycbug.org/mailman/listinfo/talk

2 1

AMD Zen: Exploited Before Release
by grarpamp 14 Dec '16

14 Dec '16

https://www.bleepingcomputer.com/news/hardware/researchers-point-out-theore… http://amd-dev.wpengine.netdna-cdn.com/wordpress/media/2013/12/AMD_Memory_E… https://arxiv.org/pdf/1612.01119v1.pdf The security protocol that governs how virtual machines share data on a host system powered by AMD Zen processors has been found to be insecure, at least in theory, according to two German researchers. The technology, called Secure Encrypted Virtualization (SEV), is designed to encrypt parts of the memory shared by different virtual machines on cloud servers. AMD, who plans to ship SEV with its upcoming line of Zen processors, has published the technical documentation for the SEV technology this past April. The German researchers have analyzed the design of SEV, using this public documentation, and said they managed to identify three attack channels, which work, at least in theory. [In a technical paper released over the past weekend, the researchers described their attacks:] "We show how a malicious hypervisor can force the guest to perform arbitrary read and write operations on protected memory. We describe how to completely disable any SEV memory protection configured by the tenant. We implement a replay attack that uses captured login data to gain access to the target system by solely exploiting resource management features of a hypervisor." AMD is scheduled to ship SEV with the Zen processor line in the first quarter of 2017. http://hothardware.com/news/amd-to-attack-performance-desktop-market-with-r… http://hothardware.com/reviews/amd-unveils-additional-zen-processor-details… http://hothardware.com/news/cern-engineer-leaks-amd-zen-architecture-detail… AMD has disclosed that one of the high-end options in the initial RYZEN line-up will feature 8 cores (16 threads with SMT) and at minimum a 3.4 GHz base clock, with higher turbo frequencies. That processor will also be outfitted with 20MB of cache -- 4MB of L2 and 16MB of L3 -- and it will be infused with what AMD is calling SenseMI technology. SenseMI is essentially fancy branding for the updated branch predictor, prefetcher, and power and control logic in Zen. AMD's upcoming AM4 platform for RYZEN will be outfitted with all of the features expected of a modern PC enthusiast platform. AM4 motherboards will use DDR4 memory and feature PCIe Gen 3 connectivity, and support for USB 3.1 Gen 2, NVMe, and SATA Express. Performance demos of RYZEN shown to members of the press pit a stock Intel Core i7-6900K (3.2GHz base, 3.7GHz turbo) with Turbo Boost that was enabled on the 6900K, versus RYZEN with boost disabled running at 3.4GHz flat. In the demo, the RYZEN system outpaced the Core i7-6900K by a few seconds. AMD has been talking about the claimed 40% IPC (Instructions Per Clock) improvement of its forthcoming Zen processor versus the company's existing Excavator core for ages.AMD claims to have achieved that 40 percent IPC uplift with a newly-designed, higher-performance branch prediction and a micro-op cache for more efficient issuing of operations. The instruction schedule windows have been increased by 75% and issue-width and execution resources have been increased by 50%. The end result of these changes is higher single-threaded performance, through better instruction level parallelism. Zen's pre-fetcher is also vastly improved. There is 8MB of shared L3 cache on board now, a unified L2 cache for both instruction and data, and separate, low-latency L1 instruction and data caches. The new archicture offers up to 5x the cache bandwidth to the cores versus previous-gen offerings. However, after all the specsmanship was out of the way, AMD actually showcased a benchmark run of an 8-core Zen Summit Ridge procesor versus Intel's Broadwell-E 8-core chip, both running at 3GHz and processing a Blender rending workload. In the demo, the 8-core Zen CPU actually outpaced Intel's chip by a hair.

1 0