- cypherpunks - lists.cpunks.org

Re: Investigating the Investigators
by jim bell 06 Apr '14

06 Apr '14

On Tue, Apr 1, 2014, at 08:02 PM, jim bell wrote: > Group of people who burgled the FBI in 1971 > https://movies.yahoo.com/blogs/movie-news/trailer--fbi-whistleblowers-revea… >Thanks for posting this. It's so timely and historically important. >Can't wait to see it. >Hey Jim, what happened with the Yahoo account you were locked out of? >Did you ever get the lost emails and contacts restored? >-Shelley Haven't got back on jamesdbell8(a)yahoo.com. I'm convinced that Yahoo is a bunch of crooks. Bleeding-heart, do-gooder liberal crooks. Anybody who looks at Yahoo's news sees this. Jim Bell

3 4

RAND study on "Markets for Cybercrime Tools and Stolen Data"
by Gregory Foster 06 Apr '14

06 Apr '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 RAND National Security Research Division (2014) - "Markets for Cybercrime Tools and Stolen Data: Hackers' Bazaar" by Lillian Ablon, Martin C. Libicki, Andrea A. Golay: http://www.rand.org/content/dam/rand/pubs/research_reports/RR600/RR610/RAND… HT Cyber Security Law and Policy Blog (Apr 2): http://blog.cybersecuritylaw.us/2014/04/02/rand-corporation-releases-report… gf - -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.19 (Darwin) Comment: GPGTools - http://gpgtools.org iQIcBAEBCgAGBQJTPqwjAAoJEMaAACmjGtgj4z8P/3AD6XfqlqAUKDCJ1fyAqy16 gEHylffMmt7IVjUTahi9onYDDpyI2tVEsPuJCANnqEfu/70LTLSOZimSl7uwNP1x nPMc8JjgztotWoU9jPD/r99PIp5qSmeN0VSaryVYEgihpsmZqit9/oIqKLx8xltf a+wNwn4EFAgzTsZpTxXGt/6Aki29f6MEnU1bZjpzaudN5PwXZ97gX2MZtZXOBM54 OlNW/J0E3VWXAyJ8Sx9Au5gTOOGCS3EebwAJSBeHbqwCvmcHW9rgpB1Fbny1XU8K QiM5GFM9oTEmAzdFeTvOZtwHP7hQ6/gO4dI3y3u9Vc0hgK6wycjU4wlOn8ab0SxP yAD/1UI+iXHGYbGDCHwNFAZFXae+SAJI0DxToaTPVQMVkyjW5CwoM1jlijAXxrg7 41YwZTDOLV3txNBD83MVToeAfpjBoU6MDm43rHKYfowTqykuFkATlCERxrT5igGJ 5N3RFLJMFUgrn/2MxaMRRswynHRGabq/H0T0DPwVN4s74X9A+oI5sOWCtsvgO44W FqkKq9LEOCARbobF87jGNSAph5DXQ6MZmGfUrp+IRQQrMIKLBevo+6oHfpwrjZ+t pL5/2BtPJXErl8wvnjmXRmm1R4JEeC21baTwdUXu7u7QGBTmo7lij9UkjTJk5jC/ r/tw1VwX6Ex9yemiitLV =rLdn -----END PGP SIGNATURE-----

2 1

Re: [tor-talk] How safe is smartphones today?
by grarpamp 06 Apr '14

06 Apr '14

>> For example, I want to talk to political activists, I would like to >> discuss with them, no matter if I share their views or not. This could >> easily make you interesting for certain people. Sometimes just talking >> to certain people could make you suspicious. > > If you are concerned with protecting the social graph of who you are > communicating with, there is *maybe* exactly one communication system > that exists today that can protect this information from a dedicated > adversary with resources on the order of a drug cartel. Excepting that we're in anti-graph tor-talk forum... Why are people so sure to give primary fear to letting our graph be known? Where are the people screaming that content is the worse leak? Maybe you know a lot of Muslim terrist sympathizers, but are really calling to see about dinner plans, maybe you sell pens to all sorts of specialist doctors, and document services to criminal defense attorneys, condoms to whores, and pagers to drug dealers, wearcams to activists, etc. Contact graphs can usually be dual use and rarely used directly against you. Content is usually single use and is often used against you. A link to another secure phone voice/msg app, redphone/textsecure... https://whispersystems.org/‎ Now if we can just have an android phone app/ROM do encrypted voice (by somehow hooking into the mic/speaker codec/pcm/modem path) over the cell voice network (voice minutes plan, usable everywhere) instead of: - the wifi-ip network (free, if you are near an AP, which you usually aren't) - the cell data-ip network (requires a data/ip plan) then I can see a huge number of people installing that app/ROM. I don't know of anyone working on this though :( [The pricing of [un]limited cell minutes/data/sms vs. your usage of same is in some regions more attractive/available without a data plan. Thus making this voice app/ROM more universally useful.] [You still have to trust the integrated baseband processor, till that hardware gets opened up.]

1 0

FAKE Indian Cari Machet Posts RANT by WELL KNOWN Capitalist TC May..
by Anonymous Remailer (austria) 05 Apr '14

05 Apr '14

U have to be the most IGNORANT fake Indian on this list.. TC May is a WELL Known Libertarian Capitalist/Randist.. Cari you are such a fucking soft headed Moron!! what a fucking rube anon time to post more DOX on Cari Machet!!

1 0

Acoustic bugging of computers
by jim bell 05 Apr '14

05 Apr '14

http://phys.org/news/2013-12-trio-rsa-encryption-keys-noise.html#nRlv (Phys.org) —A trio of researchers in Israel has discovered that it is possible to crack 4096-bit RSA encryption keys using a microphone to listen to high-pitch noises generated by internal computer components. Adi Shamir (co-inventor of RSA), Daniel Genkin and Eran Tromer have published a research paper describing the technique on a Tel Aviv University server. Read more at: http://phys.org/news/2013-12-trio-rsa-encryption-keys-noise.html#jCp Computers make noises, the researchers explain, far beyond the whirring of the fan. The CPU, for example, emits a high pitched noise as it operates, fluctuating depending on which operations it is performing—other components do likewise. Suspecting that they might be able to exploit this characteristic of computers, the researchers set about creating software to interpret noise data obtained using simple microphones and very little other equipment. They also focused exclusively on trying to achieve one single feat: deciphering an RSA encryption key. After much trial and effort, the researchers found it could be done without much effort. Listening and detecting the noise made by a computer as it processes a single character in an encryption key would be impossible, of course, so the researchers devised a method that causes the noise to be repeated enough times in a row to enable capture of its signal. And that can only happen if the attacker is able to send a cyphertext to the machine that is to be attacked and have it processed. The cyphertext contains code that causes looping. By listening to how the computer processes the cyphertext, the researchers can map the noises made by the computer as it crunches different characters, thereby allowing encryption keys sent by others to be cracked. What's perhaps most frightening about this method is how easily it can be ported to various machines. The researchers found, for example, that by using a laptop and simple hardware and software they were able to crack encryption keys on a second laptop. Next, they did the same thing using a cell phone as the listening device. They suggest it could also be packaged completely in software and sent out as malware, hacking encryption keys on infected devices and sending them back to the hacker. As a side-note, the researchers also found that low-bandwidth attacks on computers are also possible by measuring the electrical potential of a computer's chassis while the circuitry is busy doing its work. Explore further: Researchers at Toshiba design quantum network for secure communications More information: RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis: www.tau.ac.il/~tromer/papers/acoustic-20131218.pdf Read more at: http://phys.org/news/2013-12-trio-rsa-encryption-keys-noise.html#jCp

3 3

From Phys.org
by jim bell 05 Apr '14

05 Apr '14

http://phys.org/news/2014-04-unbreakable-codes-nature.html#nRlv A revolutionary new method of encrypting confidential information has been patented by scientists at Lancaster University. Read more at: http://phys.org/news/2014-04-unbreakable-codes-nature.html#jCp They have been inspired by their discoveries from human biology, which model how the heart and lungs coordinate their rhythms by passing information between each other. A mathematical model based on the complex interaction between these organs has now been transferred to the world of modern communications. This discovery could transform daily life which is reliant on secure electronic communications for everything from mobiles to sensor networks and the internet. Every device, from your car key to online bank account, contains different identification codes enabling information to be transferred in confidence. But the race to outwit the hackers means there is a continual demand for better encryption methods. Inspiration for the new method of encryption came from interdisciplinary research in the Physics Department (www.physics.lancs.ac.uk/research/nonlinear-and-biomedical-physics) by Dr Tomislav Stankovski, Professor Peter McClintock, and Professor Aneta Stefanovska, and the patent includes Dr Robert Young. Professor McClintock commented that this is a significant discovery. He said: "This promises an encryption scheme that is so nearly unbreakable that it will be equally unwelcome to internet criminals and official eavesdroppers." Professor Stefanovska emphasized the interdisciplinary aspect: "As so often happens with important breakthroughs, this discovery was made right on the boundary between two different subjects – because we were applying physics to biology." Dr Stankovski said: "Here we offer a novel encryption scheme derived from biology, radically different from any earlier procedure. Inspired by the time-varying nature of the cardio-respiratory coupling functions recently discovered in humans, we propose a new encryption scheme that is highly resistant to conventional methods of attack." The advantage of this discovery is that it offers an infinite number of choices for the secret encryption key shared between the sender and receiver. This makes it virtually impossible for hackers and eavesdroppers to crack the code. The new method is exceptionally resistant to interference from the random fluctuations or "noise" which affects all communications systems. It can also transmit several different information streams simultaneously, enabling all the digital devices in the home, for example, to operate on one encryption key instead of dozens of different ones. Explore further: Advancing privacy and security in the cloud More information: Tomislav Stankovski, Peter V. E. McClintock, and Aneta Stefanovska , "Coupling Functions Enable Secure Communications," American Physical Society's journal Physical Review X, journals.aps.org/prx/abstract/10.1103/PhysRevX.4.011026 Journal reference: Physical Review X Provided by Lancaster University Read more at: http://phys.org/news/2014-04-unbreakable-codes-nature.html#jCp

1 0

Re: [cryptography] Tails
by John Young 05 Apr '14

05 Apr '14

Informative tweets on Tails security since the fund-raising announcement: http://cryptome.org/2014/04/tails-security.pdf At 09:09 AM 4/4/2014, you wrote: >Has anyone looked at Tails? > >http://www.salon.com/2014/04/02/crucial_encryption_tool_enabled_nsa_reporti… > > > Crucial encryption tool enabled NSA reporting on shoestring budget > >Big players in Snowden revelations publicly praise Tails, in hope of >gaining much-needed funding for the tool

2 1

TROLL ALERT!!(cari machet our resident soft in the head fake indian leftist)
by Anonymous Remailer (austria) 04 Apr '14

04 Apr '14

Cari Machet is our resident soft in the head fake indian leftist who cant spell!! DONT expect logic or rational thought from this entity.. anon

3 2

Google can grow up to not be evil
by beam 04 Apr '14

04 Apr '14

"By working together with those that harvest value from nature, Google can quickly create a truly non-evil system for all. We suggest that the “there is one way and that way is secure, economically-viable-and-self-extending, anonymous and untraceable” is the policy to adopt, in that order. We are happy to amplify this." Source: http://courtofrecord.co.uk/US/US-Google-cover/

6 5

Re: Geoff Stone, Obama's Review Group
by Softy 03 Apr '14

03 Apr '14

> Have to say it seems more plausible to me that they did a faux-forthright > job of answering questions from this new review process. I mean what else > could they do? Stonewall? > > Adam > > I'll suggest a slightly different scenario. One in which Stone is presenting his honest opinion, and in which what he spoke is accurate. I don't know much about him - I think I'm fairly safe in stating prior to his Review panel he never went close to, let alone through, the Ft. Meade perimeter onto NSA grounds. Doing so is awe inspiring. Not just with heady notions of which agency, and its history, runs the building; but also seeing the scale of the operations. It's a visceral reminder of the power of the United States - both of it's good and bad aspects. So, I suggest Mr. Stone was overwhelmed and genuinely convinced of what he saw: he wanted to see a behemoth of an organization full of sun-glassed covert agents running amok. Rather he saw slightly shabbily dressed day workers interspersed with the occasional suit, all surrounded by uniformed members of the five military branches as well as those of five other countries. Second, I suggest the NSA ( and any other semi-/fully- covert agency ) can easily "expose" all of its bookkeeping for review without exposing anything it doesn't want exposed. They don't need to be secretive - the nature of the organization is so silo'd, looking in from any combination of directions would never give any indication of a compartment unless one knew where and how to request that compartment by name. The result is the Review panel feels they came away with a complete understanding of the Agency, and the individuals came away with a knew understanding of what Power means, and how it is applied into the world. Some of that understanding is valid - some isn't. Lastly, I think taking Mr. Stone's words as only about the NSA is a mistake. He was writing to, and about, the Agency employees. Namely, suggesting to them they might do better in the future to continually re-evaluate their bosses; rather than assuming "father knows best." And this is the best possible oversight - the tens of thousands of employees are as American as anyone, they have it in their own best interest not to tolerate abuses by their bosses. Sadly that type of oversight is insufficient, but that mindset within the majority of employees is crucial and what I think Mr. Stone was trying to enrich. go easy, -daniel

2 1