- cypherpunks - lists.cpunks.org

What's App End to End Encryption
by Yush Bhardwaj 05 Apr '16

05 Apr '16

http://www.wired.com/2014/11/whatsapp-encrypted-messaging/ What's is also using AES, HMAC AND Elliptic Curve ? *Yush Bhardwaj*

2 1

NSL AmA with ACLU and CALYX
by grarpamp 05 Apr '16

05 Apr '16

https://www.reddit.com/r/IAmA/comments/4dcm55/we_are_aclu_lawyers_and_nick_…

1 0

Mossak Fonseca's statement
by Ben Mezger 04 Apr '16

04 Apr '16

http://www.scribd.com/doc/306839585/Declaration-de-Mossak-Fonseca-en-anglais "'Our firm, like many firms, provides worldwide regist ered agent services for our professional clients (e.g., lawyers, banks, and trusts) who are intermediaries. As a registered agent we merely help incorporate companies, and before we agree to work with a client in any way, we conduct a thorough due-diligence process, one that in every case meets and quite often exceeds all relevant local rules, regulations and standards to which we and others are bound."" -- Kind Regards, Ben Mezger https://benmezger.nl

1 0

Is it possible to leak huge load of data over onions?
by grarpamp 04 Apr '16

04 Apr '16

On 4/3/16, Griffin Boyce <griffin(a)cryptolab.net> wrote: > How do you transmit an elephant? One byte at a time... > > But on a serious note, it's possible to transfer 2.6TB over Tor in small > pieces (such as file by file or via torrent). Given the size, however, I'd > suspect they mailed hard drives after establishing contact with > journalists. Even on a fairly fast connection, 2.6TB would take quite a > while... That amount of data would take 27 days at 10Mbps. Few would be willing to sit supervising in a hotseat that long when they can physically mail 3TB for $100 and 8TB for $230. Though they might spend 3 days pushing 100Mbps via shells, etc. Overlay networks move data reasonably well, and reliability could be handled by chunking protocols. Available link speeds (thus path speeds) are likely to be limiting factor, ie: 10Mbps limits you to 100GiB a day. Though at 1Mbps, DVD torrenting on say I2P seems to be a thing.

2 1

Warrant canaries appear to be usable by large US companies - Reddit in this case
by Zenaan Harkness 04 Apr '16

04 Apr '16

Here and there someone pokes their illogical head up and says "Warrant canaries can't work" or "warrant canaries will get you introuble with the law" or some variation on the theme. It boggles me fookin marnd, it do. Perhaps this story can help massage some of those mental tensions... https://yro.slashdot.org/story/16/04/01/0321257/reddit-deletes-surveillance… "Reddit Deletes Surveillance 'Warrant Canary' In Transparency Report >From the deductive-reasoning department Arthur Dent '99 writes: Today, Reddit deleted wording in its transparency report that would normally indicate that they had not received any "national security letters" or "other classified requests for user information." Such "national security... " fooking fook!

4 4

solutions for source code take downs due to DMCA?
by Zenaan Harkness 04 Apr '16

04 Apr '16

brief github session: --- python-iview.gitm $ git fetch Username for 'https://github.com': zenaan Password for 'https://zenaan@github.com': remote: Repository unavailable due to DMCA takedown. remote: See the takedown notice for more details: remote: https://github.com/github/dmca/blob/master/2015-10-27-Python-iview.md. fatal: unable to access 'https://github.com/vadmium/python-iview.git/': The requested URL returned error: 503 --- My last change is: caf726732 2015-07-02 (HEAD, master) Humax retired; change to Panasonic feed I had plans to use it, but never quite got a round tuit, but I did grab a clone last year, to make sure I had a copy in case and or when I wanted or needed it. A DMCA takedown has happened since then. Finding alternative repos is not hard, but finding one which is updated is not something I have achieved - it looks like the DMCA ogre has wielded his club and squashed this probject, AFAICT. That's not good. It's not healthy for our (global) community. This feels like a problem we should be able to solve. Further info on this DMCA takedown: https://github.com/vadmium/python-iview https://github.com/github/dmca/blob/master/2015-10-27-Python-iview.md https://theconversation.com/python-iview-copyright-crusader-or-vigilante-op… http://www.mibus.org/2012/09/18/letter-to-the-abc-re-the-takedown-of-python… http://www.mibus.org/2012/09/23/doctor-who-sans-python-iview/ A foundational thought re freedom of information and freedom of culture and freedom to share comes to mind - are there any papers about any form of shock-test resistant hidden server design, e.g. with some number of trusted entry points into the TOR network to hide behind? It seems "we" have yet to design a functional hidden service? Zenaan

5 6

Finally, technology and justice come together
by Zenaan Harkness 03 Apr '16

03 Apr '16

Seems we need our government to issue breeding licenses and car cams to keep a close, and I mean close, eye on everyone. At least someone is finally putting technology to a good use, upholding justice, pricking the conscience and delivering some <ahem>firm, justice. America, that freedom lovin nation we all love to love. God bless America. https://yro.slashdot.org/story/16/04/02/1938216/oklahoma-video-vigilante-us… "Oklahoma Video Vigilante Uses Drone To Wage War Against Prostitutes and Johns HughPickens.com writes: Chris Baraniuk writes at BBC that Brian Bates, known in Oklahoma as the "Video Vigilante," is taking credit for Amanda Zolicoffer's conviction on a lewdness charge after being caught on Bates' drone mounted camera in a sex act in a parked vehicle last year. Zolicoffer was sentenced to a year in state prison for the misdemeanor while the case against her alleged client, who was released following arrest in December, is still pending. "I'm sort of known in the Oklahoma City area," says Bates . "For the last 20 years I've used a video camera to document street-level and forced prostitution, and human trafficking." Bates runs a website where he publishes videos of alleged sex workers and their clients. "I am openly referred to as a video vigilante, I don't really shy away from that," says Bates adding that the two individuals were inside a vehicle and the incident occurred away from other members of the public. The drone dropped to within a few feet of the vehicle where it filmed a 75 year old in the front seat of the white pickup truck. The duo separated after Zolicoffer, who was identified by her tattoo saying "Baby Gangster," saw the drone hovering overhead. "

1 0

nsa taxis
by juan 03 Apr '16

03 Apr '16

so I took a look at 'uber argentina' - as usual the amount of self parody is almost unreal... 1) nsa-uber steals 25% of the driver's earnings. 2) They have all sorts of draconian requirements, including new cars, age requirements, and all kinds of ID shit from the government nazis. Razer would love it. 3) only credit cards accepted - meaning everything is fully tracked and TAXED And all that for the benefit of having your taxi fares monitored by the pentagon and stored in a datacenter forever. Ah yes, when it comes to freedom enhancing 'innovation', the americunts are the masters of the universe.

8 13

nextdoor.com: Privacy and Datamining Nightmare
by grarpamp 03 Apr '16

03 Apr '16

Like Facebook, but worse.

3 2

Re: [tor-relays] I would like to help.
by grarpamp 03 Apr '16

03 Apr '16

Many residential and business ISP's are the same dsl/coax/fiber company. Many of them will provide extra IP's for some tiny fee, so primary clearnet use can remain unaffected. Or you can route tor over vpn. Some do run exits at home. In that case consider contact local LEAs enquiring if they exonorator / informing them your project. Find your cyber / crime defense attorney to inform. And at least consider posting tor-exit-notice on your doors and clearly segregating your project / personal spaces and activities, encrypt / index what datasets you have, offsite backups. Exit issues have become very rare as LEAs have become educated over the years. Preparation is still better. After that, being a punk is half the fun and point.

1 0