- cypherpunks - lists.cpunks.org

According to www.virustotal.com, lists.debian.org are hosting attachment .DOC virus
by Georgi Guninski 05 Mar '16

05 Mar '16

According to www.virustotal.com, lists.debian.org are hosting attachment .DOC virus. Would someone confirm or deny this? Warning: DO NOT OPEN THE .DOC! Discalimer: Nothing personal against Debian https://lists.debian.org/debian-consultants/2016/01/msg00000.html links to: https://lists.debian.org/debian-consultants/2016/01/docyrW4BlUhzH.doc Submitting the last .doc URL at: https://www.virustotal.com and then going to: Go to downloaded file analysis gives: https://www.virustotal.com/en/file/c7210dc26e00a0d9f9bf8fb3b4850d52b62bb583… SHA256: c7210dc26e00a0d9f9bf8fb3b4850d52b62bb5836a7fa34bb669fc1b1553005e File name: docyrW4BlUhzH.doc Detection ratio: 17 / 54 the first few results are: AVG W97M/Downloader 20160303 AVware Trojan-Downloader.O97M.Adnel.n (v) 20160303 AegisLab W97M.Gen!c 20160303 Arcabit HEUR.VBA.Trojan.e 20160303 Avast VBA:Downloader-ABC [Trj] 20160303 ESET-NOD32 VBA/TrojanDownloader.Agent.AOM 20160303 and some report it as clean. The .doc is downloadable with the same checksum.

2 3

USG v. Apple - Amici Applications Through 3 March 2016
by John Young 04 Mar '16

04 Mar '16

https://cryptome.org/2016/03/usg-apple-025-049.pdf (179 pp, 20MB) Few of the applications have been ordered by the court. Thumbnail descriptions provide rationale for each case. Most are lazy, thin and repetitious in argument, not much that's new from previous battles. Faintheatedness suggests riskless PR is the intent, or worse, fear of antagonizing the biggest customer for crypto, govs, reduxing all crypto strutting, mock battles, gov-com-org business conducted in secrecy, public left to believe duplicitous comsec mandated by natsec, or not, usually not.

1 0

Research Paper on The Eternal Life of Cryptocurrencies.
by Chris Magistrado 04 Mar '16

04 Mar '16

I've been reading this mailing list for quite some time now, and usually don't message or write here much. Maybe one other time. I'm writing a paper on the vitality of Cryptocurrencies. My argument is that they are here to stay, and will only continue to rise as our technology becomes better. Some of the statistics I plan to use are the growth in market value, not only in BTC, but in Altcoins as well, the pros of BTC and how altcoins can do what BTC cannot, and lastly the versatility of exchanging coins via places like Shapeshift.io. Any suggestions on data or stats that might be useful? Shamir just said at RSA, "Yet to see a use case for blockchain that can't be solved with an existing simpler technology" I simply disagree. I believe the use of Cryptocurrencies are not only a statement against government control, but also a currency used by people whom want to remain private. (obviously, again, better coins than btc).

3 2

Re: [Cryptography] More Apple news
by grarpamp 04 Mar '16

04 Mar '16

On 3/3/16, Viktor Dukhovni <cryptography(a)dukhovni.org> wrote: > > http://arstechnica.com/tech-policy/2016/03/san-bernardino-da-says-seized-ip… > > "The iPhone is a county owned telephone that may have connected to > the San Bernardino County computer network. The seized iPhone may > contain evidence that can only be found on the seized phone that > it was used as a weapon to introduce a lying dormant cyber pathogen > that endangers San Bernardino's infrastructure," according to a court > filing (PDF) by Michael Ramos, the San Bernardino County District > Attorney. > > This seems so far beyond remotely plausible that one wonders whether > the responsible lawyers can be disbarred for blatant fabrication... If these 31337 criminals wanted to pathogenically jack the county systems they would have jacked in their own USB firmware sploits to fubar the systems starting with any workstations in reach. This lawyers own kids and himself have probably messed with and installed so much shit on his issued iphone to consider it compromised and warranting search. LOL totally made my day.

1 0

Crypto Individualism Required For Civilization To Reach The Stars?
by grarpamp 04 Mar '16

04 Mar '16

> Embedding crypto to, for, and in conscience of society as > a private and personal tool... is a race condition. > And one you want to win. > So do it... nao !!! Will humanity be able to advance and even reach the stars unless they are able to cryptographically securely extend and embed some portion of both the private and computational function of their brains... in the same private way brains function today... into devices and systems both large and small? bitcoin:16xRaqrjBwckR7HiqVKdKEmRDpb3dnJmSb Because... philosophy.

1 0

Re: [Cryptography] Two more Apple amicus briefs
by grarpamp 04 Mar '16

04 Mar '16

On 3/3/16, Allen <allenpmd(a)gmail.com> wrote: > On Thu, Mar 3, 2016 at 9:19 PM, Henry Baker <hbaker1(a)pipeline.com> wrote: >> https://assets.documentcloud.org/documents/2746620/Apple-Amicus-Brief-by-Ai… >> https://assets.documentcloud.org/documents/2746626/Apple-Amicus-Brief-From-… >> >> > Someone should file an amicus brief that basically says the FBI violated > federal contracting rules by not putting the hacking work out to > competitive bid through the RFP process, and therefore it's request to > force Apple to do this work violates federal law and should be struck down > as against public policy. I'm not actually familiar enough with the > federal contracting process to know if that is true or not, but it seems > plausible, and it also seems there are many companies that would like to > have a crack at doing this work instead of being forced to do it. At > minimum, the FBI would find out through the RFP process if what it seeks > might be available through another channel and therefore Apple's assistance > is not required. And in the meantime RFP and results are out in the open giving makers more time to roll out and get embedded in society per and for customer interest, impenetrable crypto schemes. Embedding crypto to, for, and in conscience of society as a private and personal tool... is a race condition. And one you want to win. So do it... nao !!!

1 0

Two more Apple amicus briefs
by grarpamp 04 Mar '16

04 Mar '16

---------- Forwarded message ---------- From: Henry Baker <hbaker1(a)pipeline.com> Date: Thu, 03 Mar 2016 18:19:23 -0800 Subject: [Cryptography] Two more Apple amicus briefs To: cryptography(a)metzdowd.com -- a whole bunch of tech companies: https://assets.documentcloud.org/documents/2746620/Apple-Amicus-Brief-by-Ai… -- ATT: https://assets.documentcloud.org/documents/2746626/Apple-Amicus-Brief-From-… _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

1 1

Fwd: Returned post for oss-security@lists.openwall.com
by Georgi Guninski 03 Mar '16

03 Mar '16

----- Forwarded message from oss-security-admin(a)lists.openwall.com ----- Date: 3 Mar 2016 13:49:09 -0000 From: oss-security-admin(a)lists.openwall.com To: guninski(a)guninski.com Subject: Returned post for oss-security(a)lists.openwall.com us-ascii Hi! This is the ezmlm program. I'm managing the oss-security(a)lists.openwall.com mailing list. I'm working for my owner, who can be reached at oss-security-owner at lists.openwall.com. I'm sorry, your message (enclosed) was not accepted by the moderator. If the moderator has made any comments, they are shown below. >>>>> -------------------- >>>>> If you ever have anything valuable to share, like software bugs you used to find 10+ years ago, please feel free. Other than that, please consider the kind of content you've been posting lately unwelcome on oss-security. We also have a policy to discourage CC'ing other lists on oss-security postings (because this attracts less-relevant postings from other lists), but of course you didn't know nor care. (And the CC's were not particularly bad in this case, I admit. It's worse when someone CC's LKML.) /sd <<<<< ----------------- On Thu, Mar 03, 2016 at 10:28:09AM +0000, Cord Beermann wrote: > Hallo! Du (Adam D. Barratt) hast geschrieben: > > > If you want an answer from those who deal with lists, you have to ask them. > > debian-legal@ is just another mailing list. > > The file has been removed. > > Yours, > Cord, Debian Listmaster of the day Many thanks. You fixed the _entire_ messy issue with a single `rm`. btw, didn't your marketoid debian overlords taught you to hypocritically say `thanks' in issues like this? Goodbye oss-security-unsubscribe@ and debia ----- End forwarded message -----

1 0

Re: [oss-security] According to www.virustotal.com, lists.debian.org are hosting attachment .DOC virus
by Georgi Guninski 03 Mar '16

03 Mar '16

On Thu, Mar 03, 2016 at 10:28:09AM +0000, Cord Beermann wrote: > Hallo! Du (Adam D. Barratt) hast geschrieben: > > > If you want an answer from those who deal with lists, you have to ask them. > > debian-legal@ is just another mailing list. > > The file has been removed. > > Yours, > Cord, Debian Listmaster of the day Many thanks. You fixed the _entire_ messy issue with a single `rm`. btw, didn't your marketoid debian overlords taught you to hypocritically say `thanks' in issues like this? Goodbye oss-security-unsubscribe@ and debian-legal@

1 0

Re: [Cryptography] LibreSSL unaffected by DROWN
by grarpamp 03 Mar '16

03 Mar '16

On 3/2/16, Viktor Dukhovni <cryptography(a)dukhovni.org> wrote: > OpenSSL 1.1.0 (days away from beta), which does break compatibility > with 1.0.x, also removes SSLv2, and has many improvements that > LibreSSL does not. Neither is strictly better, there are surely > things that are better in LibreSSL than in OpenSSL 1.1.0. > > Theo is an avid marketer, the reality is a bit more complex. So then where is the link to an independant website which stays current and puts say Libre 2.2.[x] and Open 1.0.2[x] side by side in a feature / protocol / api review table?

2 1