- cypherpunks - lists.cpunks.org

The challenge, should you accept it earth humans, is to ... [was: Snowden on the Twitters]
by coderman 09 Oct '15

09 Oct '15

On 10/8/15, Razer <Rayzer(a)riseup.net> wrote: > > Show me the advantage over cooperating with others equilaterally. universal cooperation is global optima - the trick is to pass from crude biological competitive roots into global egalitarianism through universal cooperation. this is also known as solving the Fermi paradox, becoming the first species to pass through paradox proves it. note that designing fully decentralized technology sufficient to support this transition, regardless of the socio-economic difficulties retarding adoption of same, is sufficiently difficult as to be considered "impossible" by sane majorities. --- good luck earth humans! --- "It's never been so easy for so many to injure and kill over so little..."

1 0

ParalelPolis, Hacker's Conference, 2015-10-04
by wirelesswarrior＠Safe-mail.net 08 Oct '15

08 Oct '15

You can download a copy of my covert wireless slides I presented in Prague a few days ago (.pdf) at: http://s000.tinyupload.com/index.php?file_id=03580328025747098705 It an update of the talk I gave at Defcon 23 with lots of corrections and additions (satellite hacking). WW

1 0

juan's vision of free market WAS Snowden on the Twitters
by Georgi Guninski 08 Oct '15

08 Oct '15

>> 1. How do you distribute goods (food, shelter, shiny J-Pads, money? >> etc) >> > free market What is a sound definition of free market? In particular: 1. How does the ``free market'' prevents _cartels_ and stays free? 2. In a stateless free market, what happens to orphans, physically/mentally impaired people and the like? IMHO realworld implementation of ``free market'' is the law of the jungle played with (virtual) money/goods on a Ponzi scheme playground (check the thread about the usa debt).

4 10

Re: President Vladimir Putin Tells USA Journalist How The USA Is Supporting ISIS.
by Zenaan Harkness 08 Oct '15

08 Oct '15

Putin is nothing if not consistent - great to see :) Z On 10/8/15, Jim <jim.sovereign(a)optusnet.com.au> wrote: > > ----- Original Message ----- > From: Kenneth Barrett > To: undisclosed-recipients: > Sent: Thursday, October 08, 2015 3:57 AM > Subject: President Vladimir Putin Tells USA Journalist How The USA Is > Supporting ISIS. > > > TUESDAY, OCTOBER 6, 2015 > President Vladimir Putin Tells USA Journalist How The USA Is Supporting > ISIS > > UPDATED OCTOBER 3, 2015 > > In a press conference at the Valdai Discussion Club 2014 in answer to a > question to a United States Journalist, President Vladimir Putin addressed > his concerns regarding the US and their role in the middle east and ISIS. > Although the film footage of the press conference has been banned, Live > leaks released a copy of the press conference to the public. The words of > Putin are transcribed below word for word from the video originally provided > by Inessa S. > > The press and mainstream news has been avoiding this information. It is a > scathing , diplomatic account of Russia’s position on the politic behavior > and actions in the middle east regarding Syria and ISIS, as well as a > reprimand to our press who have failed to do their job. > > Putin’s complete oration to the US Journalists: > > First point. I never said that I view the US as a threat to our national > security. President Obama, as you said, views Russia as a threat, but I > don’t feel the same way about the US. What I do feel is that the politics of > those in the circles of power, if I may use those terms, the politics of > those in power is erroneous. It not only contradicts our national interests, > it undermines any trust we had in the United States. And in that way it > actually harms the United states as well. > > Undermined trust, with the understanding that they are one of the global > leaders in politics and in matters of the economy. > > I can stay silent on many things, but as I always say, and Dominic here has > mentioned it, “one sided actions” in the continuous search for the next > “alliance” and coalitions which are predetermined – this is not a method > that seeks to discus and agree on mutual grounds of understanding. These are > one sided actions. They are carried out all the time. They lead to crises. > > I’ve said this before, another threat that President Obama mentioned was > ISIS. Well who on earth armed them? Who armed the Syrians that were fighting > with Assad? Who created the necessary political information and climate that > facilitated this situation? > > Who pushed for the delivery of arms to the area? Do you really not > understand who is fighting in Syria? > > They are mercenaries mostly. Do you understand they are paid money? > Mercenaries fight for which ever side pays more. So they arm them and pay > them a certain amount. I even know what these amounts are. So they fight. > They have the arms. You can’t get them to return the weapons of course, at > the end. > > Then they discover elsewhere pays a little more…so they go fight there. Then > they occupy the oil fields. > > Where ever in Iraq, Syria, they start extracting the oil and this oil is > purchased by somebody. Where are the sanctions on the parties purchasing > this oil? > > Do you believe the US does not know who is buying it? Is it not their allies > that are buying oil from Isis? Do you not think the US has the power to > influence their allies? Or is the point that they indeed do not wish to > influence them? > > Then why bomb ISIS? In areas they started extracting oil and paying > mercenaries more in theose areas the rebels from “civilized” Syrian > opposition forces immediately join ISIS, because they pay more. I consider > this absolutely unprofessional politics. It is not grounded on facts, in the > real world. > > We must support civilized, democratic opposition in Syria. So you support, > arm them, and then tomorrow they join ISIS. Can they not think a step ahead? > We don’t stand for this kind of politics of the US. We consider it to be > wrong. It harms all parties, including you (USA). > > When it comes to the consideration of our national interests I would really > like it if people like you (US journalists) who posed the questions, would > one day head your government. Maybe then we can somehow reverse the > situation. > > If that doesn’t happen, I will at least ask you to deliver my messages to > your government. To the President of the United States, the Vice President, > and all other relevant people. Tell them that we do not want or look for any > confrontation whatsoever. When you start to consider our national interests > in your actions, any other disagreements we may have they will > self-regulate. This needs to be done, not just talked about. You must > consider the interests of others, and you must respect other people. > > You cannot “squeeze” others having considered only the benefits that you > require from whatever… in economies, in your military activities, in > everything. Look at Iraq the situation is terrible. Look at Libya and what > you did there, that got your ambassador murdered. > > Was it us that did this? > > You even had a security council decision to establish a no fly zone. What > for? It was so that Gaddafi’s air force couldn’t fly over and bomb the > rebels. This wasn’t the smartest decision, but okay… what did you proceed to > do yourselves? You started bombing the territory. This is in clear > contravention of the security council resolution. It is even outright > aggression over a state. Was it us that did this? You did this with your > bare hands. > > And it ended with the murder of your Ambassador. Who’s fault is it? It is > your fault. Is it a good result that your Ambassador was murdered? It is > actually a terrible catastrophe. > > But do not look around for somebody to blame when it is you making these > mistakes. You must do the opposite; rise above the endless desire to > dominate. You must stop acting out of imperialistic ambitions. Do not poison > the consciousness of millions of people like there can be no other way but > imperialistic politics. > > We will never forget our relationship when we supported the US in the war of > independence (civil war). We will never forget that we collaborated in both > world wars as allies. I personally believe that the geo strategic interests > of Russia and the US are essentially the same. We must focus on this > interrelationship. > > Written by Dianne Marshall > > The following video was translated by Inessa S . A grateful thank you to > Inessa S. for all her effort to get this news out to the people. > > https://jhaines6a.wordpress.com/2015/10/06/putin-exposes-obamas-paid-isis-m… > Posted by enerchi at 10/06/2015 08:09:00 PM Reactions: > > Labels: Government Corruption, New World Order, World News Headlines

2 1

The GCHQ Cryptome slide could be a mockup/disinfo
by Michael Best 08 Oct '15

08 Oct '15

For the latest version: http://that1archive.neocities.org/subfolder1/gchq-cryptome-slide.html A few days ago, a new Snowden slide <https://theintercept.com/2015/09/25/gchq-radio-porn-spies-track-web-users-o…> was released that appeared to show that the GCHQ was monitoring Cryptome in near-real-time by examining the browsing data of one of the websites' visitors. John and Deborah of Cryptome later verified that the information in their slides matched their logs, seemingly verifying the legitimacy of the slide itself and the information presented about KARMA POLICE. However, after examining the slide and all the information available, I realized that it was possible to create the slide (or one like it) with accurate data without any of the sources cited/assumed/alleged. To demonstrate this, I put together some comparable information. To respect the privacy of visitors to Cryptome, the end of each IP address is redacted and I've provided only a little information about several users instead of focusing on one user to provide detailed information about. A few notes before getting into the data: 1. I didn't receive this information from anyone in law enforcement or the intelligence, nor stolen through malicious hacking, social engineering, or electronic intrusion. Neither is it the result of surveillance directed against Cryptome or its users, or of any other illegal action. It was compiled from my legitimate archives. 2. I have confirmed that the information was available to others by locating pre-existing sources online. 3. This is not meant to accuse any one of forging a document, simply pointing out that it can't necessarily be verified by confirming the information with Cryptome's server logs. 4. If the slide *is* a mockup, it could be an internal mockup produced by GCHQ, a deliberate piece of disinformation from within or without GCHQ, a document altered by Snowden, his friends/"friends" in Russia, or anyone else in the chain of custody. Given that Snowden didn't review all of the documents he handed over, he might not recognize if one had been altered, embellished, forged, or taken out of context prior to publication. Or it could be genuine - proving that something could be a fake isn't quite the same as proving it's a fake. 5. If the document was forged, the only group I have reason to suspect are the chekist security agencies who have access to both the documents and to Snowden. 6. This was the result of a few rushed hours of work in a single afternoon, and thus may contain minor mistakes. 7. The times should be Eastern/US, but this is an unverified assumption. 8. These comments are unrelated to my debunking <https://cpunks.org/pipermail/cypherpunks/2015-October/009565.html> of the MITM attack against Cryptome which was seemingly implied <https://cryptome.org/2015/09/gchq-illegal-spying-us.htm> by this slide. Visitor IP correlated with page, time and date *IP: *212.48.158.* *Date: *2010-02-10 *Time: *23:06:15 *URL: *http://cryptome.org/cartome/foucault.htm Note that I manually translated the time and date from a time code, so it may be slightly incorrect. The original timestamp was 20100210230615. Twelve Days of Cryptomas In case I mistranslated the timestamp or anyone thinks that it was a fluke, here are twelve time and dates along with the redacted IP address that visited Cryptome at that time. These time and dates were originally rendered in a human readable format, so there is no danger that I mistranslated them. - December 25 2009 16:22 - 74.208.77.* - December 26 2009 18:19 - 65.98.224.* - December 27 2009 22:23 - 208.80.193.* - December 28 2009 21:51 - 69.113.197.* - December 29 2009 18:28 - 76.92.164.* - December 30 2009 03:30 - 88.80.205.* - December 31 2009 23:59 - 210.107.62.* - January 01 2010 00:13 - 71.56.6.* - January 02 2010 14:14 - 91.98.9.* - January 03 2010 01:23 - 88.87.4.* - January 04 2010 23:22 - 79.224.172.* - January 05 2010 06:16 - 65.55.110.*Internet search strings used to find Cryptome Finally, a semi-obscure phrase from the that was put into a search engine - complete with the original typo. "architectural engineering in miidle east" - it may appear in the logs as "architectural+engineering+in+miidle+east" Conclusion All of this information should be readily verifiable by John and Deborah at Cryptome, demonstrating that each of the pieces of the slide could have been created without the benefit of a surveillance program or large budget. In other words, the guilty knowledge implied by the accuracy of the slide can imply things other than being guilt of surveillance.

4 4

Introduce randommess in keypress timings
by Michael Nelson 08 Oct '15

08 Oct '15

Alternatively all keystrokes could be done with fixed timing. The point is that no individual pattern should be discernable. There are more subtle aspects, such as jitter from perfectly regular timing, which could identify the machine/browser being used. With added randomness, such jitter would be harder to discern. Also, you would ideally not want eavesdroppers to know that you are obfuscating your keystrokes, and obfuscating via randomness, as opposed to fixed timing, would help with that. There are quite a few companies selling keystroke dynamics products as an authentication factor. There are also various efforts, such as one started at Stanford a few years ago, to monitor all aspects of a person's input, for continuous background authentication. Not sure how that one's going. Keystroke dynamics normally works on a short chosen phrase. The latter stuff is more ambitious and extends that to arbitrarily long text, along with grammatical patterns, etc. There is nothing new here. After evaluating several products for a company I worked for, I built a keystroke dynamics product myself -- it was less work than going through the pain of registering for a trial of their software! It was never used, for the same reason that kd is not used much -- it's more trouble than it's worth. It worked as well as any of the products being sold. Though a key down or key up event from the Windows operating system has a timestamp in it (the OS will not give you more than a certain accuracy, but it's adequate), that timestamp is discarded and not available in Javascript. My Javascript solution calls for a new Date as soon as it captures a key event. People selling this stuff say that as there is too much potential lag between the key event and the time thus associated, Javascript is not good. The best thing is something like an ActiveX plugin or a native client in C that can capture the timestamp from the OS. The next best thing was touted as Flash. However, mine worked very well. If anyone is interested I will describe in simple terms how one tests the keystroke vectors, and some of the challenges. mn

7 14

US: The World's Silliest Empire
by Zenaan Harkness 08 Oct '15

08 Oct '15

A lighter side of the story - at least if you're not too precious about "America's exceptional"ism. It's impossible to disagree with the byline though, "It would be humorous if people weren't dying because of it". Regards Z http://russia-insider.com/en/politics/us-worlds-silliest-empire/ri10350

2 1

Re: Cryptome has been leaking its user logs for over a year
by Michael Best 08 Oct '15

08 Oct '15

John Young deleted my post to the Cryptome freelist ( http://www.freelists.org/list/cryptome http://www.freelists.org/archive/cryptome/10-2015) rather than let the readers look at the data and judge for themselves. Because transparency??

3 2

Cryptome has been leaking its user logs for over a year
by Michael Best 08 Oct '15

08 Oct '15

That was it, that the slide might not be authentic or could have been an internal GCHQ mockup. I thought that was worthy of discussion and exploration, but then John accused me of faking the data <https://twitter.com/Cryptomeorg/status/651777707873837056>. > *Juan* juan.g71(a)gmail.com > > <juan.g71%40gmail.com?Subject=Re%3A%20Cryptome%20has%20been%20leaking%20its%20user%20logs%20for%20over%20a%20year&In-Reply-To=%3C56166710.4237370a.4285d.552d%40mx.google.com%3E>*Thu > Oct 8 08:58:03 EDT 2015* > On Wed, 7 Oct 2015 17:26:51 -0400 > Michael Best <themikebest(a)gmail.com> wrote: >* In summary, I showed that > the information on the slide could have *>* been mocked up, depsite > matching the logs for Cryptome.org. * Supposing it was true that you > proved that *maybe* the > slide isn't authentic, what then? Are you trying to make a more general > point? Amd that point > is...?

1 0

How to buy a root CA certificate?
by Georgi Guninski 08 Oct '15

08 Oct '15

Interested in how much money is necessary to buy CA cert chaining up to a trusted root and besides money is something else necessary. globalsign advertise this: https://www.globalsign.com/en/certificate-authority-root-signing/ ===== GlobalSign’s Trusted Root Signing service allows suitably qualified organizations to capitalize on their investments in PKI or CA software to issue digital certificates which chain up to GlobalSign’s publicly trusted Root Certificate. =====

3 2