- cypherpunks - lists.cpunks.org

Re: [Cryptography] programable computers inside our computers (was: Hasty PRISM proofing considered harmful)
by Sebastian Krahmer 23 Oct '13

23 Oct '13

On Tue, Oct 22, 2013 at 12:29:33PM -0400, Tom Ritter wrote: [...] > On 22 October 2013 05:24, Ruben Pollan <meskio(a)sindominio.net> wrote: > > And to add another, there was a presentation on ARM TrustZone, the OS > inside your CPU, that's seems so designed for backdoors that ARM > actually gives tips for running TrustZone invisible to the normal OS. > https://www.hackinparis.com/sites/hackinparis.com/files/Slidesthomasroth.pdf > > These are increasingly worrying me as well. The Secure Element on > Android can at least (if you root and edit the .xml file) be queried > to learn identifiers of what is installed there, if not directly > interact with them. If you are really worrying about that, you are decades too late. :) ARM-TZ-alike features are already there in other CPU's called SMM, VT-x or SVM, or in your board called IPMI or AMT - or more generic OOB-Management. Or if you worry about phones its called SIM and SIM-toolkit (and this list is far from complete). Yes, if you want a real trustbase and crypto that stands, you have to open-source all of it. Do you know what your keyboard controller is doing? :) http://www.youtube.com/watch?v=tmZ4yXuDSNc Sebastian -- ~ perl self.pl ~ $_='print"\$_=\47$_\47;eval"';eval ~ krahmer(a)suse.de - SuSE Security Team _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

1 0

[drone-list] Arizona military drone operators defraud USG for $1.4M
by Gregory Foster 23 Oct '13

23 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Stars and Stripes (Oct 21) - "21 members of Tucson Air Guard unit indicted on fraud charges": http://www.stripes.com/news/us/21-members-of-tucson-air-guard-unit-indicted… > Many allegedly received more than $100,000 by claiming they lived > in homes outside the Tucson area while on federal active duty > status at various times between November 2007 and September 2010, > officials said. > > “Some of these men and women received benefits in excess of four > and five-times their salaries in temporary duty entitlements,” > Horne said in a news release. "Conversely, our brave men and women > overseas were making pennies on the dollar compared to what this > group was receiving while still going home to their families each > night.” HT @Drone_Wars_UK: https://twitter.com/Drone_Wars_UK/status/392387301965185024 gf - -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.19 (Darwin) Comment: GPGTools - http://gpgtools.org iQIcBAEBCgAGBQJSZ0VhAAoJEMaAACmjGtgj4hUQAJYWels3/jBHneS+e5vI5pa7 ltInMxRaQMp+pFevaMSGp6VMq3jNYQF+OaQG9Gw00m6SaQNKEy7I+mo2PpJXaQP2 MLmmniYWak3tzo6C+p5VVhpa3Z4UAkKrhMIUZFxxA0AjhjkSPOlh/jvfeVCTkgZZ 5QCXvY7PLqbqN6w29Il3rmlH3y7wVuUjM5dXl52VsT2Z2LVD2jB7a27xhQlXrXyQ jNS6IKtwoyE2UgTRQR4m9TFU2wWggmo0yoy4LeEeNyYEksxw2NTJA8JNKyzpkXbA l81XmDdOQXLlpJGoHer66AAgfW6aOqYfGtzm/fHlf/1CJ2n1kdgOhVJmpOb1pfk+ ui3q1BWbUjtI76v1OvBC5epUZKVqeAtLfWvjlU+1ptJWUNTlvtdbeCZo6xLXDHF5 7nAejLPpy3BdmwddD2hhmGsT6ILPQ/DfTSbeTKnktHTWZtpBlpocIn1+mN8Dil3A 2mOJIdGxg/o3GuGw/GFDRqKKhazeytymaQFI4uS6tU45p9DhSwbSwfl+YWGPI+uG qg85wa7H0qybfpBpxJByU4NpDzTMYgqv2A5OEnLjyjX0uqzJx/h46/NMuXWL1I3x VvubfqCBnAYAhymOvuH4kcm7/PWb0d8RqCLBgB7rsaOXqU98m7cH2awjnBbyjc/j R/ExiaAaEBuL6L48Aunu =vNqv -----END PGP SIGNATURE----- -- Want to unsubscribe? Want to receive a weekly digest instead of daily emails? Change your preferences: https://mailman.stanford.edu/mailman/listinfo/drone-list or email companys(a)stanford.edu

1 0

Re: [tor-talk] VOIP and tor
by Matt 23 Oct '13

23 Oct '13

On Tue, 22 Oct 2013 20:18:56 -0600 Mirimir <mirimir(a)riseup.net> wrote: > On 10/22/2013 06:52 PM, Andrew F wrote: > > > Is it the best to use for Voip call on tor? > > I think so. Because it can use UDP through the VPN tunnel, there's > virtually no break-up. Latency is high (1-2 seconds) but that's just a > fact of using Tor. You can set Mumble to TCP mode only and data and voice transmissions will both be sent using TCP. Running my own Mumble server as a hidden service, I got latency that was less than a second on fast circuits. -- tor-talk mailing list - tor-talk(a)lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

1 0

Re: [tor-talk] TBB and tor-relays as a bitcoin wallets
by grarpamp 23 Oct '13

23 Oct '13

On Oct 22, 2013 Joshua Datko <jbdatko(a)gmail.com> TOP POSTED!!! > Also, and I think this was discussed on this list before, offering payment > may actually decrease the number of volunteers [2]. > > I was initially interested in researching a technical way to offer payments > to relays by the clients joining a mining pool and somehow paying the relay > from the pool (something like ring signatures). But there is a lot of While waiting on a capitalist version of Tor, operators can publish their cryptocurrency address in the consensus. Users who wish to donate can write a controller script to match up relays they used with those accepting donations and send off some funds. There are already some addresses present. -- tor-talk mailing list - tor-talk(a)lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

1 0

Re: [tor-talk] VOIP and tor
by Mirimir 23 Oct '13

23 Oct '13

On 10/22/2013 06:52 PM, Andrew F wrote: > Is mumble secure over tor? I've used Mumble, with data transmission in UDP mode, on OpenVPN (in TCP mode) through Tor. Given that you, or someone whom you trust, are running the Mumble server, and that traffic is routed by VPN through Tor, I believe that it's secure. > Is it the best to use for Voip call on tor? I think so. Because it can use UDP through the VPN tunnel, there's virtually no break-up. Latency is high (1-2 seconds) but that's just a fact of using Tor. Voice quality is better than typical cellphone. Mumble was expressly designed for high-latency connections, so it has good interactive tools for optimizing voice quality. > What are the other options? I've heard good things about Jabber. However, all SIP apps depend on third party servers. And SIP servers are much harder to set up than Mumble servers. -- tor-talk mailing list - tor-talk(a)lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

1 0

Re: [Cryptography] programable computers inside our computers
by John Gilmore 23 Oct '13

23 Oct '13

> >> We thought embedded devices were for physical infrastructure > >> engineers to worry about, but now they are proliferating inside > >> our general purpose computers. The next Stuxnet will run on one > >> of the invisible computers inside your computer. It is probably ALREADY running there. With regard to the invisible single-chip computer that sits on every server's motherboard (thanks, you idiots at Intel), I can't say it any better than Dan Farmer: IPMI: Express Train to Hell, v2.0 dan farmer/zen(a)trouble.org http://fish2.com/ipmi/itrain-gz.pdf John _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

1 0

Re: [zfs] [Review] 4185 New hash algorithm support
by Zooko Wilcox-OHearn 23 Oct '13

23 Oct '13

On Tue, Oct 22, 2013 at 6:05 AM, Schlacta, Christ <aarcane(a)aarcane.org> wrote: > > If any weakened algorithm is to be implemented, how can we know how weak is too weak, and how strong is sufficient? Each professional Cryptographer has given different opinions and all those at our immediate disposal have now been biased. A good way to do that is use an algorithm that has attracted interest from a large number of independent cryptographers. If many cryptographers have invested extensive effort trying to find weaknesses in a algorithm, and haven't reported any, then we can feel more confident that it is less likely to harbor undiscovered weaknesses. Among the algorithms we've been talking about in this thread, SHA-256, HMAC-MD5, Skein, Keccak, and BLAKE are all in this category of being well-studied. Cryptographers publish it if they find a weakness in a reduced-round variant of an important algorithm. You can see a summary of the best results against weakened variants of BLAKE in ¹ (Table 1). ¹ http://eprint.iacr.org/2013/467 The rows labeled "perm." and "cf." are attacks on just one component of the hash, not the whole algorithm. The "# Rounds" column shows how many rounds of a reduced-round variant would be vulnerable to that attack. Don't forget to look at the "Complexity" column, too! That shows (roughly) how many calculations would be necessary to implement the attack. Yes, almost all of them are computations that are completely impossible for anyone to actually execute in the forseeable future. But still, they are the best attack that anyone has (publicly) come up with against those weakened variants of BLAKE so they serve as a heuristic indicator of how strong it is. Among the well-studied algorithms listed above, BLAKE is one of the best-studied. It was one of the five finalists in the SHA-3 contest, and in the final report of the contest ², NIST wrote “The cryptanalysis performed on BLAKE […] appears to have a great deal of depth”. Here is a list of research reports that analyzed BLAKE: ³. ² http://dx.doi.org/10.6028/NIST.IR.7896 ³ https://131002.net/blake/#cr Now, BLAKE2 is not necessarily as secure as BLAKE. We could have accidentally introduced weaknesses into BLAKE2 when making tweaks to optimize it. The paper ¹ looked for such weaknesses and reported that they found nothing to make them distrust BLAKE2. We use a stream cipher named ChaCha ⁴,⁵ as the core of BLAKE and BLAKE2, and nobody has found any weakness in ChaCha. Again, that doesn't mean we didn't manage to screw it up somehow, but I think it helps! If anyone found a weakness in ChaCha, it would *probably* also show them a weakness in BLAKE2, and vice versa. ⁴ https://en.wikipedia.org/wiki/ChaCha_%28cipher%29#ChaCha_variant ⁵ https://tools.ietf.org/html/draft-agl-tls-chacha20poly1305-02 In sum, there has been a lot of independent analysis of BLAKE2, BLAKE, and ChaCha, and I hope there will be more in the future. If you use a reduced-round version of BLAKE2, you can look at these results to see whether anyone has published an attack that would break that reduced-round version. Of course, more rounds is safer against future breakthroughs. It was in that context that I recommended that ZFS use the most rounds of BLAKE2 that it can while still being faster than Edon-R. ☺ That will probably be around 5 rounds. Regards, Zooko Wilcox-O'Hearn Founder, CEO, and Customer Support Rep https://LeastAuthority.com Freedom matters. ------------------------------------------- illumos-zfs Archives: https://www.listbox.com/member/archive/182191/=now RSS Feed: https://www.listbox.com/member/archive/rss/182191/22842876-6fe17e6f Modify Your Subscription: https://www.listbox.com/member/?member_id=22842876&id_secret=22842876-a25d3… Powered by Listbox: http://www.listbox.com

1 0

TBB and tor-relays as a bitcoin wallets
by Trigger Happy 22 Oct '13

22 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all, Just an idea. In theory : is it possible to implement bitcoin wallet into tor-relay and TBB 1) ? TBB users could tip tor-relays (f.e. 1 satoshi for guard and middle relay, 3 satoshi for exit-node per circuit). Running tor-relays could be profitable or at least cheaper. 1).I think Cody Wilson is working on a bitcoin wallet in a browser. - -- Trigger Happy jabber: triggerhappy(a)jabber.ccc.de torchat: xruq34bnhbqlkjtn -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJSZo5zAAoJEEtm9wC9fGLFvF0P/3HYQSCcZea4iFeTygEkk1Fi s4Us35LVEMHeUx4fODEEXa4PlHMpHtitpBTa6yHRf+XsQLsvca4Xxvo5n1HMq09N FMK9JFFrItCdQO/T/lYNu9Tj3qLU34gpMlzsiN7u3fE8oALAyvHzyAmX0uaJM4Hk p5UsCU9REs5QBIjd8ZLqVodBPj5JHxRnyfxRhcHLZPb5WrrAluIwSOWeQW7GxhpL 3Hed2lZbcdaGyYGqTTBT6/C2KsMsvG097xTZXJKl+x7yL3521ceE9FW1zL7oTE3L i5PJpopbxjhqA3xH68RrSdw7L0Bbp79p3lRUzi4EC1DamHHhFal/tuRfJldhj3m1 4330nXP5pthqufJBql/lklkd7yG0exijq72I2nb9sb/SQLJG7LvF1ga0TKgoMAXC pKRy5NoMW6+UAHtSlFBmeOMKlxsFEbVRAGRhCBlQrbWOIuK+47VfGm7cDaQMID3T AAusJA5z6h+aZlncwyWiJohk753mnrON6lPBD0y9luHFusZ4eUL2Zzy+cqL27xBp mULJR9ABGKW4vndKBBLoH9/wDQmEm1ejL1+74BYRDZrO9mgBADjD50yc4RZ/sK6s JsX/KB/WOLSmYXdk28eS2k+YK+8ke8Y6kuZSAWqEuePqcHiM2+wyHLEhyE8Y7Shv 0JX2WiE0goClZOQfNRH7 =y5Ga -----END PGP SIGNATURE-----

1 0

[Cryptography] Mail Lists In the Post-Snowden Era
by Jerry Leichter 22 Oct '13

22 Oct '13

Perry re-started this mailing list in response to the Snowden revelations about the NSA's attacks on Internet cryptography. He raised the questions of whether we could make a Prism-proof Internet. That's a big problem, and we've been debating small pieces of it ever since. I'd like to suggest a smaller problem, just as a kind of rallying point. This list has certainly attracted NSA interest. Whether by subject, by keyword matching, or because so many of the participants here are clearly "adversaries" of those in the NSA responsible for gaining access to all that crunchy good stuff out there, there's no way anyone here could avoid scrutiny. So ... imagine we don't like that. How could this list be constituted in a "secure" way? The quotes are on "secure" because even the definition of the word isn't clear. Realistically, there's no way to avoid an NSA "plant" joining an open group, so perhaps there's little point in encrypting the messages. Anonymous/pseudonymous posting? Signed messages? (A few members post them; hardly any of us do.) Does that just make messages even more traceable/linkable? We think we know what it means to have secure 1-1 email. Adding a couple of additional participants seems as if it leaves the nature of the problem unchanged, but in fact you very quickly get into trust issues: In a 1-1 conversation, I can decide whether to trust my correspondent. In any multi-party conversation, it's likely that at least one of the participants doesn't know *all* the others, so must make an indirect trust decision: I trust him because the others here seem to trust him. For a mailing list, this problem explodes - while in addition there are all kinds of issue with how exactly to set up key exchanges. A moderated group like this could be looked at as a star configuration: In a way, each participant really only communicates with the moderator. But that seems to miss the point - despite the moderation, this group *feels* like a free-flowing conversation among a group of people. So what would a reasonable security model for the Cryptography list look like? Is it inherently just an open discussion? Or could we come up with something else? If we can do more, what kind of software would be needed to make it as free-flowing and easy to participate in and manage as the current list? -- Jerry _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

3 2

[liberationtech] Google Unveils Tools to Access Web From Repressive Countries | TIME.com
by Yosem Companys 22 Oct '13

22 Oct '13

http://business.time.com/2013/10/21/google-digital-rebels/ Google Ideas, the New York City-based “think/do tank” run by the Internet search giant, is launching several new technologies designed to highlight hacker attacks around the world and help people in repressive regimes access the Internet. The new products, which are being announced Monday at the Google Ideas Summit in New York City, represent the most substantial offerings delivered by the three-year-old Google policy unit and could be a major boon to activists and reformers in the world’s most closed and repressive societies. “There are billions of people around the world living in environments that severely restrict their free expression,” Jared Cohen, Director of Google Ideas, told TIME in an interview on Sunday. “We want to empower them to have access to the same Internet that the rest of us experience. We talk about how we have a responsibility to our users. That also includes people in Iran, North Korea, Cuba, and Syria, where the challenges are so serious.” Cohen, a 31-year-old geopolitical expert, earned undergraduate and graduate degrees from Stanford and Oxford and later worked as a U.S. State Department advisor to Condoleezza Rice and Hillary Clinton before being asked by Google executive chairman Eric Schmidt to launch Google Ideas in 2010. Cohen, who co-authored The New Digital Age with Schmidt in April, said that he was attracted to Google by the “activist spirit” of many of the company’s employees. “This is a company of activists and white-hat hackers,” Cohen says. “When you work at Google and tell these engineers that their skill-set is relevant to somebody in Iran who doesn’t have access to information in their country or the rest of the world, it really inspires them to want to do something about it. There is a genuine altruism that exists at this company, and that’s why I’m here and not anywhere else.” The most ambitious product launch is uProxy, a new Web browser extension that uses peer-to-peer technology to let people around the world provide each other with a trusted Internet connection. This product is designed to protect the Internet connection of users in, say, Iran, from state surveillance or filtering. Google Ideas is providing funding and technical assistance for uProxy, which was developed by researchers at the University of Washington and Brave New Software. “If you look at existing proxy tools today, as soon as they’re effective for dissidents, the government finds out about them and either blocks them or infiltrates them,” says Cohen. “Every dissident we know in every repressive society has friends outside the country whom they know and trust. What if those trusted friends could unblock the access in those repressive societies by sharing their own access? That was the problem we tried to solve.” UProxy allows users in the U.S. to give their trusted friends in Iran—people they might already be emailing or chatting with—access to the open U.S. Internet. “The user in Iran can get unfiltered access to the Internet that’s completely uncensored and will look just like it does in the U.S.,” says Cohen. “It’s completely encrypted and there’s no way for the government to detect what’s happening because it just looks like voice traffic or chat traffic. We wanted to build a proxy service that builds on top of trusted relationships that already exist.” Google Ideas is also launching Project Shield, which is an initiative designed to help human rights activists, non-governmental organizations (NGOs), election monitoring groups, and news organizations better protect their websites from “distributed denial of service” (DDoS) attacks. Several high-profile news organizations, including The New York Times, have recently been targeted by hackers who used DDoS attacks to temporarily shut down websites. ”Google is very good at protecting itself from DDoS attacks,” says Cohen. “But NGOs, independent media outlets, human rights organizations, and election-monitoring organizations don’t have the capacity to protect themselves in the way that we do.” “We believe in human rights, we believe in free expression, we believe in election-monitoring, and we believe in independent media.” Cohen says the goal is to leverage Google’s technology to aid these efforts. Project Shield is currently under development—consistent with Google’s “launch and iterate” product philosophy—and the company is inviting web-masters working in these areas to apply to join its next round of “trusted” testers. For now, the product is free, Cohen says. The third Google Ideas product launch is the Digital Attack Map, which is a live data visualization, built in conjunction with network security firm Arbor Networks, that displays DDoS attacks worldwide in real-time. This online tool shows real-time anonymous traffic data related to DDoS attacks, and also lets users explore historical trends and see related news reports, via Google News, of website outages as they are happening. “What we’ve done for the first time is take all of the DDoS attacks worldwide and show what the state of DDoS activity looks like in real-time, much like you’d check the weather,” says Cohen. “If you think about all of the organizations around the world that use a website as their modern-day office—NGOs, businesses, governments—it’s not OK to have this many digital office raids shutting them down.” Cohen says DDoS attacks are the online equivalent of masked gunmen storming a newsroom and taking a station off the air by force. (MORE: The Internet Doesn’t Hurt People — People Do: ‘The New Digital Age’) Google Ideas is introducing the new products during a conference in New York City called “Conflict in a Connected World,” which the tech giant is sponsoring in conjunction with the Council on Foreign Relations and the Gen Next Foundation. Computer security experts, entrepreneurs, dissidents and journalists from around the world have gathered in lower Manhattan to discuss how technology can be both a liberating force—and a tool for state repression. Given Google’s size and influence in the tech world, it’s only natural that some observers might take a cynical view of the company’s Internet freedom efforts. After all, Google is neither a non-profit group (although it has a philanthropic arm called Google.org) nor a charitable organization. Google is a capitalist juggernaut with a $337 billion market capitalization, $56.5 billion in cash, and a stock price that now exceeds $1000 per share. Put simply, as more people around the world use the Internet, Google is poised to benefit financially. Last quarter, Google said that revenue from outside the U.S. totaled $7.67 billion, representing 56% of the company’s total business, a figure that will only grow as more people around the world get online. In the interview with TIME, Cohen addressed such doubts. “If you think about some of the environments we’re talking about, like North Korea, Iran, Syria, Cuba, and Sudan, all of these countries have sanctions on them,” says Cohen. “So there’s no business interest in these countries. The interest we have is in giving users in every environment the same level of security and unfiltered access that you or I have here in the United States. We care about free expression, and this is an example of us putting our product where our mouth is.” Read more: http://business.time.com/2013/10/21/google-digital-rebels/#ixzz2iNWOHfnF -- Liberationtech is public & archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password by emailing moderator at companys(a)stanford.edu.

4 3