- cypherpunks - lists.cpunks.org

Re: [cryptome] Re: U.S. Hacked Into Iranâ€™s Critical Civilian Infrastr ucture For Massive Cyberattack
by Michael Best 17 Feb '16

17 Feb '16

If being "gov-friendly" is by itself enough to cast suspicion of bias, then the same should be assumed of all "gov-unfriendly" outlets. That's why it's important to look at the data. The source shouldn't be ignored, but analysis shouldn't begin and end with that. See also: https://en.wikipedia.org/wiki/Ad_hominem https://en.wikipedia.org/wiki/Poisoning_the_well On Tue, Feb 16, 2016 at 8:22 AM, John Young <jya(a)pipeline.com> wrote: > Maybe, maybe more cyberwar milking pretense. > > Gibney is a gov-friendly outlet. So is James Ball. > > > At 08:04 AM 2/16/2016, you wrote: > >> < >> http://www.buzzfeed.com/jamesball/us-hacked-into-irans-critical-civilian-in… >> > >> http://www.buzzfeed.com/jamesball/us-hacked-into-irans-critical-civilian-in… >> > > > >

3 2

FBI Exploits Tor vulnerabilities with NITS [Fwd: Posts from Just Security for 02/16/2016]
by Rayzer 17 Feb '16

17 Feb '16

-------- Forwarded Message -------- Today on Just Security for 02/16/2016 View this email in your browser (http://us7.campaign-archive2. com/?u=96b766fb1c8a55bbe9b0cdc21&id=03238ecdef&e=b84e639eaa) ** Law Enforcement Online: Innovative Doesn’t Mean Illegal (https://www.justsecurity.org/29364/law-enforcement-online-innovative-doesnt…) ------------------------------------------------------------ https://www.justsecurity.org/author/germanojudith/ Judith Germano (https://www.justsecurity.org/author/germanojudith/) Even the Wild West needed a sheriff. And today’s law enforcement agents, to be effective, need more than a Colt .45 and a gold star. Criminal actors have an increasing ability to commit serious crimes remotely via computers, while concealing their identity and location through the use of various means, including Tor hidden service protocols. To effectively identify and apprehend these criminals, law enforcement must be nimble and technologically savvy, and must employ regularly updated investigative tools. These tools include Network Investigative Techniques (NITs), which enable law enforcement (pursuant to court-authorized warrants) to identify the real IP address of web users, regardless of proxy settings. Some NITs also reveal users’ operating systems, CPU architecture, and session identification, and others (pursuant to a Title III or FISA warrant) can allow real-time, full-system monitoring. There has been some level of controversy recently regarding the FBI’s use of NITs. But as criminals evolve and become increasingly sophisticated through the use of Tor and encryption techniques, so too must law enforcement’s investigative measures evolve, provided they are employed in accordance with lawful procedures and adequate constitutional safeguards. It was through a NIT that the FBI, in 2015, was able to successfully take down one of the largest dark web child exploitation sites in the world, to apprehend child predators. The site, disturbingly named “Playpen,” provided thousands of pedophiles (http://www.scmagazine.com/staten-island-man-arrested-for-allegedly-possessi…) with images of horrifying sexual abuse of children, as well as guidance on how the molesters could avoid being detected. The Playpen site is reported to have had as many as 215,000 accounts within the first year, and an average of 11,000 unique visitors per week. The FBI, pursuant to a court order (http://arstechnica.com/tech-policy/2015/07/feds-bust-through-huge-tor-hidde…) , seized the web host server in North Carolina and, rather than shutting it down immediately, ran it under FBI control for a limited, two-week period. During that time, the FBI used a NIT, which exploited a security vulnerability in the Tor Browser Bundle, to identify more than 1,300 true IP addresses. More, see link at top.

1 0

Re: [cryptome] Re: [cryptography] Cryptome’s searing critique of Snowden Inc.
by Michael Best 16 Feb '16

16 Feb '16

Uh-oh, you're part of The Cabal now, coderman! On Mon, Feb 15, 2016 at 5:45 PM, coderman <coderman(a)gmail.com> wrote: > On 2/14/16, Malcolm Matalka <mmatalka(a)gmail.com> wrote: > >... > > Can you go into some detail on this? I was always under the impression > > that the Tor code was open source and heavily audited. Is the critique > > that this is not true or something else? > > > clarification in order. > > 1) government funding of Tor means they get dibs on development > priorities. censorship circumvention over dead-easy Tor Routers. > Translations in Tor Browser over endpoint-hardened solutions like > Whonix-Qubes around your Tor Browser. etc, etc. this does not imply > the Tor code itself is made vulnerable. For example, 8 hour patch on > control port vuln, and first to force disable RDRAND-sole-source in > OpenSSL. not the behavior of group at behest of NSA and IC... > > 2) critique of existing hardware and software in terms of strong > security against well resourced attackers. there is serious > vulnerability across the entire spectrum of technology. the assumption > that your malware laden WinXP box can run "Tor Browser" and be secure, > is laughable. we're finding more than ever that personal security, > operational security, and information security are all tied up in > complex interdependence. Tor doesn't even try to address this, because > frankly, no one has! it's the constantly evolving terrain of > specialized experts, long bought over to $Private or $Gov not Public > work. > > 3) Tor made trade-offs for end-user adoption and wide applicability. > we don't have have a fancy UDP Tor with traffic analysis resistance, > and some argue such a thing can't exist. this would be great to get > funded, but even past efforts have yielded detail around how much > remains to be researched, let alone implemented in proof-of-concept. > > > Tor well deserves their reputation for solid development in the public > interest, and their behavior regarding serious vulnerabilities is > exceptional across industry. actions above words, and they walk the > walk. i am also glad to see their first fund raiser to diversify > sources of support haul in hundreds of thousands for use without > strings attached. more of this! > > > best regards, > >

3 2

Re: U.S. Hacked Into Iranâs Critical Civilian Infrastr ucture For Massive Cyberattack
by John Young 16 Feb '16

16 Feb '16

Maybe, maybe more cyberwar milking pretense. Gibney is a gov-friendly outlet. So is James Ball. At 08:04 AM 2/16/2016, you wrote: ><http://www.buzzfeed.com/jamesball/us-hacked-into-irans-critical-civilian-in…>http://www.buzzfeed.com/jamesball/us-hacked-into-irans-critical-civilian-in… >

1 0

Sci-Hub: 'Pirate Bay for scientists'
by Александр 16 Feb '16

16 Feb '16

Sci-Hub: Russian neuroscientist running 'Pirate Bay for scientists' - with 48 million free academic papers - ... to remove all barriers in the way of science By Mary-Ann Russon - February 15, 2016 A website illegally offering academic papers for download is fighting back against a copyright infringement lawsuit in the US and has no intention of giving up Sci-Hub *knowledge to all* *We fight inequality in knowledge access across the world. The scientific knowledge should be available for every person regardless of their income, social status, geographical location and etc.* *Our mission is to remove any barrier which impeding the widest possible distribution of knowledge in human society!* Sci-Hub, a website dubbed the "Pirate Bay for scientists" by offering peer-reviewed academic papers to download for free, is thumbing its nose at copyright holders following an infringement lawsuit battle in the US. Sci-Hub <http://sci-hub.io/> is the brainchild of Alexandra Elbakyan, a neuroscientist from Kazakhstan who is now based in Russia. When she was writing her thesis in 2009, Elbakyan found it difficult to access the research she needed to complete her work, as she needed to download many papers, and each paper retailed for up to $30 (£21) each. To get through her thesis, Elbakyan was forced to download pirated versions of the academic papers for free, and eventually, after being introduced to a website that enabled researchers to share and trade the academic papers they needed with people who had paid for them, she decided to take the idea further and create her own website around 2011 or 2012. Tricking journals with university proxies Today, the Sci-Hub website boasts 48 million academic papers and has now gone viral, because it features technology similar to anonymising proxy websites. Rather than just enabling users to search for and extract the papers they need, the Sci-Hub website is programmed to automatically search for papers on important topics and work out how to download them to its database without spending a penny. Since various universities in the world have paid subscriber access to different premium journal services, the website is able to automatically trawl through different university proxies to trick the relevant journal's website into believing that the user accessing the academic paper has the relevant credentials similar to a paying customer. Once the paper is unlocked, Sci-Hub then downloads the paper to its database and even looks for other missing papers on similar topics to download, so that all the researcher has to do is initiate a search, and the paper will come up, ready to be downloaded for nothing. Apart from using Sci-Hub, the only way for researchers to gain access to research papers without paying for them is to ask people they know, or post on Twitter using the hashtag #Icanhazpdf <http://www.ibtimes.co.uk/i-can-haz-pdf-academics-tweet-secret-code-word-get…> . *Sued for copyright infringement and blocked in the US* At its peak in 2015, the website received 80,000 visitors a day, according to Nature magazine <http://www.nature.com/news/pirate-research-paper-sites-play-hide-and-seek-w…>, and had become so popular that academic publisher Elsevier <https://www.elsevier.com/> brought a copyright lawsuit against the website, claiming that it had lost between $75,000 - $150,000 in revenue due to the piracy. On 28 October 2015, a New York district court found in favour of Elsevier and placed a temporary injunction against Sci-Hub, as well as suspending access to the website's Sci-Hub.org domain, which has caused visitor numbers to drop to 30,000 a day. But other than that, not much else can be done to physically stop Elbakyan as she has no US assets to forfeit nor is she a US citizen, so, just like Pirate Bay's multiple domain names <http://www.ibtimes.co.uk/pirate-bay-seized-by-swedish-prosecutors-like-hydr…>, she quickly moved the website to Sci-Hub.io, where it continues to be freely accessible. "There should be no obstacles to accessing knowledge, I believe," Elbakyan told RT <https://www.rt.com/news/332412-scihub-scientific-articles-pirate/>. "[According to Article 27 of the United Nations Declaration of Human Rights], everyone has the right to freely participate in the cultural life of the community, to enjoy the arts and to share in scientific advancement and its benefits." Moving to the Dark Web Not only that, but Elbakyan has also moved Sci-Hub's servers onto the Dark Web – a section of the internet not discoverable by conventional means, such as through Google or other search engines or by directly entering a website URL. This is where cybercriminals typically list illegal goods and services like drugs, firearms and hackers-for-hire and using the Tor anonymity network <http://www.ibtimes.co.uk/snoopers-charter-why-arent-vpns-tor-mentioned-inve…> as a cloak to protect their real identities. Even better, there are a huge number of scientists in the world actively supporting Sci-Hub and even posting YouTube tutorials on how to download papers for free from <https://www.youtube.com/watch?v=YEDRMMZHjCo> the piracy portal, especially since revolting against Elsevier's high prices in 2012, with even Harvard University telling its staff that it could no longer afford the journal price hikes <https://www.theguardian.com/science/2012/apr/24/harvard-university-journal-…> in the same year. "Even if legal access to [Sci-Hub] is blocked, the user can still get in through the TOR network and immediately gain access to all the articles," said Elbakyan. "However, we intend to fight for free access to all information. After all, using TOR still provides obstacles." Read more about illegal downloading: - I can haz PDF: Academics tweet secret code word to get expensive research papers for free <http://www.ibtimes.co.uk/i-can-haz-pdf-academics-tweet-secret-code-word-get…> - Dallas Buyers Club: Australian judge refuses to unmask 4,726 alleged movie pirates <http://www.ibtimes.co.uk/dallas-buyers-club-australian-judge-refuses-unmask…> - US federal judge: IP address not enough to prove someone downloaded pirated movies <http://www.ibtimes.co.uk/us-federal-judge-ip-address-not-enough-prove-someo…> - People accused of online piracy win $450,000 from Warner Bros and Rightscorp in class action lawsuit <http://www.ibtimes.co.uk/people-accused-online-piracy-win-450000-warner-bro…> - My Little Pony Friendship Is Magic: Hasbro being sued for allegedly pirating brony font Generation B <http://www.ibtimes.co.uk/my-little-pony-friendship-magic-hasbro-being-sued-…>

2 1

U.S. Hacked Into Iran’s Critical Civilian Infrastructure For Massive Cyberattack
by Michael Best 16 Feb '16

16 Feb '16

http://www.buzzfeed.com/jamesball/us-hacked-into-irans-critical-civilian-in… Intro excerpt: A new documentary on “Stuxnet”, the joint U.S.–Israeli attack on Iran’s nuclear program, reveals it was just a small part of a much bigger cyber operation against the nation’s military and civilian infrastructure, under the code name “NITRO ZEUS”. The United States hacked into critical civilian and military infrastructure in Iran to allow its operatives to disable the country with a devastating series of cyberattacks at a moment’s notice, a documentary will claim this week. The targets of the U.S. hacking operations, covered by the code name “NITRO ZEUS”, include power plants, transport infrastructure, and air defenses, the film will state, with agents entering these protected systems nightly to make sure the attacks were still deployable. The film *Zero Days* by Oscar-winning director Alex Gibney, which is set to premiere at the Berlin film festival on Wednesday, will claim that the U.S.–Israel “Stuxnet” worm – which destroyed around 1 in 5 of the centrifuges used in Iran’s nuclear program – was just a small part of a much larger set of offensive capabilities developed against the nation.

1 0

The USA "leading" the world - state sovereignty under attack even on a superficial view
by Zenaan Harkness 16 Feb '16

16 Feb '16

http://russia-insider.com/en/politics/proof-ukraine-and-members-eu-have-giv… " Ukraine and Members of the EU Have Given up Their Sovereignty to the US The US has successfully infiltrated the governments of many European states with its own citizens Allen Baldanza The governors under US influence This is a 9 minute video, although you only have to watch till 7:40 to get the main argument. It seems state sovereignty in the EU has become a thing of the past. Not only does the EU seem to obey every foreign policy decision the US asks it to, but there are many US citizens, educated in the US, who have become important members of government in certain states. In the Baltic States, namely Estonia and Lithuania, even heads of government were US citizens. Under these heads of government, the Baltic states had joined both the EU and NATO. Of course, there is also Ukraine, which, after the coup in 2014, the new government appointed a US citizen to be finance minister. Even more striking is these members of government had retained US citizenship even while "leading" their nations. Why does this matter? It matters because when acquiring US citizenship, like all people obtaining US citizenship, they had to take an oath swearing allegiance to the United States and no other country. You can't help but ask yourself, are they really "leading" their nations, or obeying US orders? This is just a taste of US involvement in many European nations. The video gives even more details of US involvement in the region. One can't help but wonder, when will these nations stand up for their sovereignty? " http://www.youtube.com/watch?v=YRq_ocpmV7c ---- I prefer to watch such vids is on double speed, and pause with the space bar when subtitles go too quick. And BTW, for those who don't want to watch it, there's an easy solution. Towards the end, there's some detail re the bunch of countries that the USA runs its "National Security Initiative for Youth" run by the US dept of state. Quite the eye opener.

2 1

Re: [Cryptography] Cryptome’s searing critique of Snowden Inc.
by grarpamp 16 Feb '16

16 Feb '16

On 2/14/16, Henry Baker <hbaker1(a)pipeline.com> wrote: > Can someone please post a link to the .mp3 or .mp4 of this interview? youtube-dl https://api.soundcloud.com/tracks/246093198 Interview with Cryptome (2016-02-06)-246093198.mp3 sha1: 2cf21291e0190dcc2b6c1fa2587994546311ea0f

3 3

home baked
by juan 16 Feb '16

16 Feb '16

https://www.youtube.com/watch?v=w_znRopGtbE

1 0

50+ FBI files for former FBI employees
by Michael Best 15 Feb '16

15 Feb '16

Just uploaded a few dozen FBI files for their former employees, individual links at http://that1archive.neocities.org/

2 1