- cypherpunks - lists.cpunks.org

USG-Apple Hearing Vacated, Decrypt Order Stayed
by John Young 22 Mar '16

22 Mar '16

https://cryptome.org/2016/03/usg-apple-199.pdf Quote: The court and counsel conferred regarding the government's Ex Parte Application for a Continuance (docket no. 191). Based on the good cause shown in that application, and based on Apple's nonobjection to vacating the hearing, the court ORDERS: 1. The hearing in this matter set for March 22, 2016 at 1:00 p.m. is VACATED; 2. As there is presently uncertainty surrounding the government's need for Apples's assistance, the court's February 16, 2016 Order Compelling Apple, Inc. to Assist Agents in Search, in case number ED 15-451-M, is hereby stayed, pending further submissions in this case; and 3. The government is ordered to file a status report by April 5, 2016. Unquote Docket No. 191: https://cryptome.org/2016/03/usg-apple-191.pdf

1 0

USG moves to vacate hearing tomorrow due to possible method to unlock iPhone
by John Young 21 Mar '16

21 Mar '16

USG moves to vacate hearing tomorrow due to possible method to unlock iPhone https://cryptome.org/2016/03/usg-apple-191.pdf

2 1

Facebook - champion of free speech (of course, you knew that already)
by Zenaan Harkness 21 Mar '16

21 Mar '16

“Citizens must learn to weigh their words very carefully. That’s a way of teaching them to weigh their very thoughts carefully, internally policing themselves, lest external social-justice police have to be called in. We are told to accept this new, constrained view of free expression because only “bad” thoughts will be suppressed " http://beforeitsnews.com/police-state/2016/03/facebook-launches-a-new-initi… And so, a "solution" is a new website, "seen.life": "it’s high time you readied yourself to switch over to Seen.life. It is a fairly new site that is similar to Facebook but without all the censorship crap. Here are some of the differences you’ll find at Seen.Life: No censorship! Keep in mind they do have a Terms of Service that will need to be followed for things like pornography, copyright violations and defamation. If they receive a complaint, they’ll investigate." No censorship at all. "NO ID required. Facebook is now asking certain people for their ID’s. That’s beyond the pale. You can use whatever name you’d like at Seen and no ID required." Until ID is considered useful for, IDK, perhaps account recovery... "They won’t sell your data, in fact they don’t even collect it (other than your email so you can receive notifications). " Because compulsory email address is part of privacy, see. And about data collection - they have this little thing called a "ucantrustus", although I'm not sure what it's supposed to mean - some sort of talisman I think. "No limit to your account’s friends. If you’re popular enough to get over 5,000 friends, we think that’s great! More power to you!" We --definitely-- need an alternative global relationships map db since Facebook might be seen to be a little tainted. Heave a sigh of relief since this site is still centralised, so it'll fill the gap nicely once FB becomes so hot even sheep start to take notice... "Private and secure chat rooms! These are strongly encrypted and there’s no snooping." They left out one import thing here - "Military grade encryption." because sheep need military protection!! "With the way Facebook is headed it’s not going to be a place you want to stay. Sign up and create an account at Seen.Life and get away from this invasive censorship!" Since here at new site (please join), our censorship is currently minimal (please join), we currently promise to not collect any^B[damn, we're already collecting some] "too much" data (please join), we won't require you to refine your personal network graph for us by limiting your friend count at least for the time being (please join), and we use military grade encryption so you are SAFE. Don't even think about being NOT SAFE, since we use MILITARY GRADE ENCRYPTION that's so powerful even the military could not crack it, until you get to the chat room, and unless they grab a sub key from one of our many friendly certificate providers (please join). By the way, please join. I guess they thought they were using some sophisticated marketing... at least they're not using any free libre open source software (that they're admitting) - Facebook uses PHP so that must be bad, well it probably is but anyway...

3 2

Why bash only Apple?
by Georgi Guninski 21 Mar '16

21 Mar '16

Not following all the Apple show, so this may be wrong. Most people here bash only Apple and USG. If Apple quietly unlocked the phone, likely they would have been bashed even more. Are the other corporations any better? How Apple scores on corporate scumbagness?

1 0

Re: [cryptography] USG-Apple - 3/22/16 Hearing Procedures, Add 3 USGs
by grarpamp 21 Mar '16

21 Mar '16

On 3/18/16, Jeffrey Walton <noloader(a)gmail.com> wrote: > It sounds like its turning into a circus sideshow: > > ... in addition to Courtroom 4, there will be additional overflow > rooms in which the hearing will be shown on video screens. All of > these rooms together can accommodate up to a total of 324 spectators. > Admission tickets for these seats will be distributed outside the > courthouse starting at 7:00 a.m. on March 22, 2016. > > I hope it gets good media coverage, like the OJ Simpson trial. If the With 360 possibly pro Apple seats, odds are someone there is bound to be recording at least audio and will release it anonymously in full immediately that night. > government sides with the government (what a surprise that would be) I > hope the US citizen riot orders of magnitude larger than Rodney King. Could be interesting how the Apple-Customer relationship plays out. Particularly if Apple [has been] conditioning them right.

2 2

Noam Chomsky on the 2016 Republicans: 'I Have Never Seen Such Lunatics in the Political System'
by Georgi Guninski 21 Mar '16

21 Mar '16

Noam Chomsky on the 2016 Republicans: 'I Have Never Seen Such Lunatics in the Political System' http://www.alternet.org/election-2016/noam-chomsky-2016-republicans-i-have-…

3 2

Re: [Cryptography] DoJ/FBI's "nuclear"/Lavabit option
by grarpamp 21 Mar '16

21 Mar '16

On 3/17/16, John Young <jya(a)pipeline.com> wrote: > At 01:05 PM 3/17/2016, you wrote: >>FYI -- >>https://www.techdirt.com/articles/20160316/15292633927/how-apple-could-lose… > >>The court then ordered Levison to provide a more useful electronic >>copy, which then resulted in the $5,000/day fine for failing to live >>up to that, and then the closure of the site. > > An Apple fine commensurate with Lavabit's revenue should end the > daredevilry with investors' stakeholdings. Judges really like to > takedown justice defiers as warning to potential emulators. Try to > wear Levison's boots with a red dot on forehead. > > Apple revenue for Q1 2016 was $75B. A fine of $1B a day should induce > Apple's investors to stampede toward disinvestment, Apple to > bankruptcy minimization, fragmented ATT, entrapped like RSA, > Microsoft and IBM. Before the foot shooting calamity, Tim Cook is > ordered to take a hike with platinum buyout to counsel risk-averse > VCs aboard world-circling craft of detumescent billionaire playboys > enjoying quasi-carnal pleasure in climate change, disease and > population control, retro-2001 space travel, moist-dreaming of POTUS. AAPL's stock price is up about 12+% on moderate volume in the 4+ weeks since the filing, more than enough time to for the news to date to reach price discovery.

1 0

Re: [tor-talk] Traffic shaping attack
by grarpamp 20 Mar '16

20 Mar '16

On 3/20/16, Mike Perry <mikeperry(a)torproject.org> wrote: > It could also be due to the fact that Tor is effectively > single-threaded. If something on the user's guard node, intermediate > node, or hidden service is taking large amounts of CPU time, this will > prevent traffic from flowing while that operation is happening. See: > https://trac.torproject.org/projects/tor/ticket/16585 (though that > ticket could use some help with clarity). Related... why a traffic fill solution may need to reclock and transmit new own random jitter and self limit to processable / expected bandwidth contracts to mask network induced computation and provide for CPU headroom therein. As with [John Gilmore's?] IEEE fill layer suggestion, there should be a group establish outside just Tor calling for participants to look at various crypted network fill models against now known / surmised G[P]A methods.

1 0

Building A Global Network Of Open Source SDR Receivers
by grarpamp 20 Mar '16

20 Mar '16

https://news.slashdot.org/story/16/03/20/0242204/building-a-global-network-… http://www.jks.com/KiwiSDR/ http://beagleboard.org/ A fellow Kiwi is attempting to crowdfund a world-wide network of open-source, software-defined, radio receivers. Once in place, this will allow anybody anywhere in the world to scan the 0 to 30MHz RF spectrum from the comfort of their HTML-5 web browser. Built on top of the Beaglebone, the "KiwiSDR" RF board also includes a GPS receiver front-end, which will allow timing between receivers to be correlated, giving a lot of options for projects like long baseline interferometry and lightning detection. Prototypes are already deployed, and I've been RXing in Sweden, Australia and New Zealand. [The KiwiSDR design has been detailed on JKS.com, where there is a link to the project's Kickstarter page.]

1 0

Re: [tor-talk] Traffic shaping attack
by grarpamp 20 Mar '16

20 Mar '16

On 3/18/16, Oskar Wendel <o.wendel(a)wp.pl> wrote: > Let's set up a service in a way that it will modulate the traffic, so the > download would look like: That's active manipulation in / at one endpoint node. > Then, we monitor traffic flowing into various entry nodes (remember we're > a global adversary, having direct access to infrastructure around the > globe) and spot the traffic that matches our pattern. That's global / regional passive listening, needing be concerned minimally visibility with just any other G/R IP endpoints without needing track entire path. Which, if presumed and likely to be deployed, combine to be nicely effective, whether finding such clients, or services on Tor, I2P, etc. Attack could be made much more difficult quite possibly defeated if all nodes engaged in bucketed reclocked and jittered fill traffic with each other (possibly along some virtual path distance >=1 hop) and enforced peering relationships based upon receipt of same expected and contractually obligated traffic (would you talk to or retransmit for a node that acted sent packets as you say... fuck no).

1 1