- cypherpunks - lists.cpunks.org

Proxy / VPN before Tor in Qubes: Tor bootstrap stops at 80%
by grarpamp 25 May '16

25 May '16

On 5/25/16, katerimmel(a)sigaint.org <katerimmel(a)sigaint.org> wrote: >> Try turning up debugging. > Debugging shows me that results are all OK until Tor socksport reachability > I'm using JonDo ip changer > What do you means about pointing tor at tor? Tor provides a SOCKS5 interface on the front that is presumably written correctly and not third party, to eliminate jondo and at least test tor at/over tor. ./tor --socks5proxy (-->) ./tor --socksport (-->) internet You may also like to please consider supporting this feature... # Provide a socks5 server port for user apps to use https://community.openvpn.net/openvpn/ticket/577 ... which would then make this an interesting narrow portal to route specific apps through (and things like p2p where you cannot predict / program the far end host to route to) without gratuitously grabbing the entire 0.0.0.0/0 routing table of the host... ./openvpn --config c.ovpn --verb 4 --socks-proxy 127.0.0.1 9050 --route-noexec --route-up /usr/bin/env --script-security 2 This may also be of related use to some users... # MAPADDRESS for IP ranges (CIDR, etc) https://trac.torproject.org/projects/tor/ticket/3982 Gmail breaks thread to add VPN subject, sorry.

1 0

Re: [Cryptography] Hacking spread spectrum clocking of HW ?
by grarpamp 25 May '16

25 May '16

On 5/25/16, dj(a)deadhat.com <dj(a)deadhat.com> wrote: > It depends on the application. > CAZAC codes for stealth canaries anyone? > Cryptographic spreading codes and wide bandwidths are seen in military > *radiations*. *This*, moar liek this. Imagine noise radiator capable of making your spectrum analyzer look like /dev/urandom across the board. There's no center frequency, no clock, no freq hopping, no spreading, no observables, no off the shelf wireless hardware or reference design... it's not based on that. To any viewer, it's just noise. To you and your peers who hold, say, a shared XOR key for data and a seed for DRBG noise, it looks like data... lots of data ;-) With achievable datarate, error correction, and unjammability governed by the range of spectrum you can generate noise over. You could even mimic within existing spectra if need be. The amplifiers and radiators to cover the spectrum are hardware. Everything else is SDR. There is at least one good paper on this, particularly involving GNURadio style SDR as the enabling basis, but I forgot the magic search terms to find it again. While not the one in mind (and not necessarily from the new SDR guerrilla crowd), these are somewhat relavant... Digital Chaotic Communications https://smartech.gatech.edu/bitstream/handle/1853/34849/michaels_alan_j_200… Synchronization in Cognitive Overlay Systems http://lib.tkk.fi/Dipl/2012/urn100685.pdf Covert Ultrawideband Random Noise papers by Jack Chuang and Ram Narayanan... https://etda.libraries.psu.edu/files/final_submissions/3142

1 0

FBI Black Helicopters Spying And Databasing Everything, Including Your Barbecue
by grarpamp 25 May '16

25 May '16

https://news.slashdot.org/story/16/04/07/1120214/spies-in-the-skies-fbi-pla… Each weekday, dozens of U.S. government aircraft take to the skies and slowly circle over American cities. Piloted by agents of the FBI and the Department of Homeland Security (DHS), the planes are fitted with high-resolution video cameras, often working with "augmented reality" software that can superimpose onto the video images everything from street and business names to the owners of individual homes. At least a few planes have carried devices that can track the cell phones of people below. Most of the aircraft are small, flying a mile or so above ground, and many use exhaust mufflers to mute their engines -- making them hard to detect by the people they're spying on. [...] The government's aerial surveillance programs deserve scrutiny by the Supreme Court, said Adam Bates, a policy analyst with the Cato Institute, a libertarian think tank in Washington, D.C. "It's very difficult to know, because these are very secretive programs, exactly what information they're collecting and what they're doing with it," Bates told BuzzFeed News.

4 4

Re: [Cryptography] Hacking spread spectrum clocking of HW ?
by grarpamp 25 May '16

25 May '16

On 5/24/16, Henry Baker <hbaker1(a)pipeline.com> wrote: > https://www.maximintegrated.com/en/app-notes/index.mvp/id/1995 > > Q: How hard is it to diddle with the spreading codes on these clocking > sources? I'd like to experiment with some longer codes. See their spec sheet... https://datasheets.maximintegrated.com/en/ds/DS1086-DS1086Z.pdf I looking for links to different whitepapers... where dither driving the spread is not pretty triangle frequency and amplitude, but is a random shared key. And it's driving an RF tx/rx capable of extremely wide spread range. Other option is to tx/rx faux wideband noise modulo a random spectrum key. Pointers?

1 0

1st OpenPGP conference, September in Germany
by Blibbet 24 May '16

24 May '16

FYI -------- Forwarded Message -------- Subject: [openpgp] Join us for the first OpenPGP conference Date: Wed, 18 May 2016 16:39:10 +0200 From: Werner Koch <wk(a)gnupg.org> To: openpgp(a)ietf.org Hello! The German Unix User Group (GUUG) is pleased to announce the first public conference on the OpenPGP protocol taking place in Cologne, Germany on September 8+9, 2016. OpenPGP.conf is a conference for users and implementers of the OpenPGP protocol, the popular standard for encrypted email communication and protection of data at rest. That protocol is the foundation of encryption software like PGP, GnuPG, Mailvelope, OpenKeyChain, and others. OpenPGP.conf is a place to meet, discuss, and learn about latest developments of OpenPGP aware applications and what technical measures can be deployed to repel the ever increasing trend to mass surveillance. Topics are: - The OpenPGP protocol and its planned revision - Current status of OpenPGP applications - Interesting use cases - Key discovery and distribution - Ubiquitous end-to-end encryption - Security analysis - User interface studies - Anonymous mail and the spam problem The Call for Presentations is available at: https://gnupg.org/conf/cfp.html More information will be published at the conference site: https://gnupg.org/conf/ Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. /* EFH in Erkrath: https://alt-hochdahl.de/haus */

2 1

Re: [Cryptography] Text of Burr-Feinstein encryption backdoor bill
by grarpamp 24 May '16

24 May '16

On 4/8/16, Henry Baker <hbaker1(a)pipeline.com> wrote: > https://assets.documentcloud.org/documents/2797124/Burr-Feinstein-Encryptio… > > "Compliance with Court Orders Act of 2016" Current version... https://www.burr.senate.gov/imo/media/doc/BAG16460.pdf

1 0

FBI Gripes About Crypto on Facebook/WhatsApp/Everywhere, People Rebuffing and Accepting "Costs"?
by grarpamp 23 May '16

23 May '16

https://it.slashdot.org/story/16/04/06/1929201/top-fbi-attorney-worried-abo… WhatsApp on Tuesday announced that all types of messages on the latest version of its app are now automatically protected by end-to-end encryption, and the FBI's top attorney is worried some of the platform's more than 1 billion global users will take advantage of the move to hide their crime- or terrorism-related communications. FBI General Counsel James Baker said in Washington on Tuesday that the decision by the Facebook-owned messaging platform to encrypt its global offerings "presents us with a significant problem" because criminals and terrorists could "get ideas." "If the public does nothing, encryption like that will continue to roll out," he said. "It has public safety costs. Folks have to understand that, and figure out how they are going to deal with that. Do they want the public to bear those costs? Do they want the victims of terrorism to bear those costs?"Maybe the government shouldn't have imposed so many surveillance programs on its citizens -- and kept quiet about it for years -- that they now feel the need to use sophisticated security technologies.

2 1

Russia's invasion of Ukraine - finally winding up; Australians nutcase MSM consuming lapdogs as usual
by Zenaan Harkness 23 May '16

23 May '16

The long tail of Ukraine's Western-backed disintegration continues: http://theduran.com/poroshenko-finally-admits-ukraines-military-defeat/ "Thousands of Ukrainian Nationalists Rally, Threaten Coup d'Etat": https://www.rt.com/news/343756-ukraine-nationalists-kiev-parliament/ A reminder of what it would really look like if Russia actually invaded Ukraine: http://russia-insider.com/en/politics/russia-makes-sure-war-will-be-hell-it… For those unsure of what our Western democracy putschists have been fueling, another in depth on the Ukarine Maidan: http://theduran.com/little-little-maidan-truth-surfacing-ukraine-masks-revo… http://russia-insider.com/en/politics/finally-masks-revolution-maidan-docum… Now, in the face of 'the end is close': "Documentary Claiming MH17 Shot Down by Ukrainian Jet to Air on BBC" http://www.express.co.uk/news/world/663787/Ukrainian-fighter-jet-shot-Russi… we see Australian nutcases yet to consume anything but the MSM: http://www.abc.net.au/news/2016-05-22/mh17-australian-families-of-victims-t… At least NATO exhibits rationality: "NATO Talking to Itself: Announces Meeting With Russia Without Informing Russia" http://www.presstv.ir/Detail/2016/05/20/466550/Russia-NATO-meeting

1 0

Re: [Cryptography] USB 3.0 authentication: market power and DRM?
by grarpamp 22 May '16

22 May '16

On 5/2/16, dj(a)deadhat.com <dj(a)deadhat.com> wrote: > The CA that needs to exist would the the USB-IF. Who cares what CA exists. So long as it is *optional* to the user. Remember SecureBoot... You can find many motherboards with SecureBoot that have the Microsoft PK's locked in the BIOS. Best you can do is 'disable' it and not be 'secure' anymore. The Linux crowd went apeshit over it, and rightfully so. Then they dropped to their knees and wrote silly stub loaders and submitted them to their Microsoft Overlord for signing. They are still submitting to this scheme today, even though they don't have to... Because if you look, you can find boards that allow completely deleting the Microsoft keys and installing and managing your own in the BIOS, and opensource tools to sign and authorize your own loaders do exist. Buy those boards instead. Tech can be useful, but you better fight for, select, and maintain your private right and control over it.

2 1

US Govt Reveals Bill Forcing Assistance, Chumping Crypto, Secrets Beget...
by grarpamp 22 May '16

22 May '16

https://yro.slashdot.org/story/16/04/06/2256257/fbi-telling-congress-how-it… According to a new report in National Journal, the FBI has already briefed Senator Diane Feinstein (D-CA) on the methods used to break into the iPhone at the center of Apple's recent legal fight. Senator Richard Burr (R-NC) is also scheduled to be briefed on the topic in the days to come. TOP SECRET briefings to the two most worthless SECRET critters, at the top of the most worthless SECRET committee... is worthless to the people. And that's no SECRET. Yet somehow people continue to treat that as... notice served, all absolved. Don't forget... Torture, Murder, Surveillance, Databasing all supposedly went through that committee of the guilty too. Feinstein and Burr are both working on a new bill to limit the use of encryption in consumer technology, expected to be made public in the weeks to come. Much of the USA, online, even the world seem to be rather pissed with the stance and activities of the US Government against crypto. Cryptos should not just be in their own circles, but educating those they know... random public around them... that do not already know about the crypto / privacy issues, the things that haven't made the nightly news, etc. The battle against the second coming of Clipper is going to get uglier and riskier before it gets better. In part because new lawmaking is at stake, not just interpretation over old. Supposedly an educated populace has more influence over new laws than interpretation... The disclosures come amid widespread calls for the attack to be made public, particularly from privacy and technology groups. However the FBI's new method works, the ability to unlock an iPhone without knowing its passcode represents a significant break in Apple's security measures, one Apple would surely like to protect against.

1 0