- cypherpunks - lists.cpunks.org

NSA Museum Library has provided "Hagelin M-209 Cryptanalysis from Ciphertext Alone"
by John Young 28 Dec '15

28 Dec '15

NSA Museum Library has provided "Hagelin M-209 Cryptanalysis from Ciphertext Alone," Reeds, Ritchie, Morris, 1978. <https://t.co/MbE5UNMtzb>https://cryptome.org/2015/12/ReedsTheHagelinCipherBellLabs1978.pdf NSA would not release it under FOIA, claiming it was a private paper. Back story: http://bell-labs.com/usr/dmr/www/crypt.html

3 3

Re: surveillance side effects - sometimes with thrill ride included!
by coderman 28 Dec '15

28 Dec '15

On 12/12/15, Shelley <shelley(a)misanthropia.org> wrote: > Greetings coderman, > > Sent off-list intentionally, which I hope you will excuse. I didn't want > to make ASSumptions about your post as I once have in the past :p :P belated reply, as this account is now working again after period of inaccessible. (see below) > Also, if this is a personal anecdote, I didn't want to cause any potential > embarrassment/etc. > > If this isn't a personal anecdote: do you have a link? "so, that happened..." -> https://ello.co/ohj2eevi/post/AcOPfljWjTmfuFEkpc5Pbg > If this is a personal anecdote: do you think it's retaliatory harassment > because of your Muckrock FOIA requests? If so, that's truly fucked up - > but I'm glad you let them know that you know, if it is a personal anecdote, truly fucked up... yeah. you could say that! ---begin-forward--- --- access to this email account is back as of this morning, finally. almost everything on the network inaccessible under "Disruption Strategy" tactics that began last week during this event. this appears to be the request at issue: (or at least the one which pushed a response in turn) https://www.muckrock.com/foi/united-states-of-america-10/kleptokeymgmt-2120… "Procedures, instructions, relevant materials regarding the proper handling of SSL/TLS secret key material obtained pursuant to court order under any authority." Refused as too vague, then I appeal: ''' Per your request for fix of this request, Under the USA PATRIOT Act, Pub. L. No. 107-56 §505(a), 115 Stat. 272, 365 (2001) , including recent revisions; C.f. USA FREEDOM Act of 2015, Pub. L. No. 114-23, 129 Stat. 268, the FBI can issue National Security Letters requesting specific business record information, including SSL/TLS private keys used in Internet communications. See https://peertech.org/files/merrill-v-lynch-unredacted-decision-vacating-gag… for additional information. I am requesting Procedures, Instructions, and any other materials regarding the proper handling of SSL/TLS secret keys obtained via National Security Letters or Court Order under PATRIOT Act, or USA FREEDOM Act authorities as above. Thank you! ''' (quick side note: above you see i linked to a PDF on my server, https://peertech.org/files/merrill-v-lynch-unredacted-decision-vacating-gag…. logs show that only my test requests on Dec 1st retrieved this document, however, it is possible that requests were made that were subsequently erased by the attacker once they obtained private keys giving the ability to MitM connections to the server itself. it is not clear to me if intent to remove evidence was part of this brash compromise.) on the 9th, when reply outbound from agency, a series of events occurrs that results in the compromise of the peertech server and deprecating many keys. this includes all attempts to download taobios-v2.tar.bz2 failing very early in the download - i suspect but cannot prove, that downloads on the 10th, 11th, and 13th were maliciously tampered with, and served to clients by impersonating peertech.org. i have put out a call for copies of these files if anyone kept them from those days. i was able to use Ello and hidden services while under attack. this is the first non-onion service that passed muster under this threat level. thus i wrote about the details there: https://ello.co/ohj2eevi/post/AcOPfljWjTmfuFEkpc5Pbg also, after identifying the FOIA above as contentious, i filed: https://www.muckrock.com/foi/united-states-of-america-10/procpeernotesbye-2… for the processing notes. apologies for any trouble i may have brought your way. i can't believe they're attacking my friends to compromise my systems. (!!!) best regards, and my apologies, martin ---end-forward--- P.S. burning sweet BIOS sploits as per the archive which is back up probably didn't help their mood either. > because [ typing with middle fingers ] fuck them [ /middle fingers ] for > trying to block out the sunlight on their shady goings-on by being even > more shady! this is how to respond properly to intimidation :) > If you choose not to reply, I understand. Know that your efforts are very > much appreciated, and if you are being harassed by retaliatory surveillance > > I hope you will seek assistance from the EFF, EPIC and ACLU. they're pretty out gunned against NSA and NatSec deep state, but i appreciate their efforts. i never understood just how uphill a fight these areas of national security law are to argue before the courts until last few years. truly david and goliath levels of imbalance of power. best regards, P.S. while i am revoking GPG keys out of abundance of caution, only secrets on peertech.org itself were compromised. See list of keys and things to copy copiously at: http://70.85.129.98:443/ http://hackers22mysy6vg.onion/ http://hackers22grhtyvg.onion/ http://hackers23vzyoixr.onion/

4 4

0x962B3498EDF0A585-coder.pub.txt
by coderman 28 Dec '15

28 Dec '15

1 0

Re: [tor-talk] A curious email from Twitter mentioning Tor Project
by Shelley 27 Dec '15

27 Dec '15

On December 26, 2015 2:23:25 PM juan <juan.g71(a)gmail.com> wrote: > > it's the same dumb scam that fukerberg is doing. A while back > the facebook cunts launched the same psy-op. Hey, we have > 'information' that an evil state is 'attacking' you, but that's > all we can say. Of course, it's understood that the attacker is > russian, chinese, or arab terrists, or something like that. > > And captain americuntwitter is saving you! Aren't you glad > that you live in a liberal democracy? > This comment made me smile. It echoes my sentiment perfectly, too. -Shelley (Meant to post this to the list also - sorry, Juan!)

1 0

Re: [tor-talk] A curious email from Twitter mentioning Tor Project
by grarpamp 26 Dec '15

26 Dec '15

On Thu, Dec 24, 2015 at 6:32 AM, kytv <kytv(a)riseup.net> wrote: quote jens: https://twitter.com/qbi/lists/statesponsoredattack2015/members > After a couple of weeks (and finding no more than 46 confirmed "Persons > of Interest (by 'State Actors')", I'm at a loss as to why we received > it. Looking at the list members and our posts, nothing stands out as > being noteworthy. Except for the fact that there are a lot of privacy sphere and opensource contributors there. Various actors would definitely want to attack and infiltrate such things. #opsec y'all.

5 5

WhatsApp blocked by Brazil momentarily
by Ryan Carboni 24 Dec '15

24 Dec '15

I think the best way to avoid censorship is to use DNScrypt and a major CDN.

3 2

A viable option to 'unfriendlies' pwning tor exit nodes?
by Rayzer 23 Dec '15

23 Dec '15

Via @ioerror: http://tor.noisebridge.net/ -- RR "You might want to ask an expert about that - I just fiddled around with mine until it worked..."

1 0

Re: "tinkering" punishable by destruction of property in TPP
by Softy 22 Dec '15

22 Dec '15

> > Of course corp love and lobbied the idea/TPP because then they > don't have publicly shamed products or spend money to fix them > and can let tax sponsored chilling force work for them. > > Which would, then, put "cyber" onto the same LEA principal as doors -- namely, the onus is on oneself to stay honest when passing by an open/unsecured door, knowing full well the riches exposed within are ripe for the "criminal element" to plunder. We readily blame the owner for not securing their home/car/whatever when theft occurs. We don't hear weekly roll-ups of five-finger discounted items, nor of items which may have "fallen off the truck." Change the theft to one based on bits, and it's front page news ... seemingly because it's so much more nefarious but really only because it's still a novelty in the Mind of the Many. Why aren't people indignant about the extra costs associated with theft? Which makes cyber related costs rather trivial. http://money.cnn.com/2010/10/18/news/economy/store_theft_drain_on_your_wall… The point being, inequality will allows foster theft. Prisons will never deter the Desperate nor Ruthless. Since the System clearly benefits overall from the inequality, and by extension the propagation of prisons, this is a condition likely to continue - even probably survive The Revolution: Jail being seen as the barricade against "Them." -daniel

1 0

Apple assures EU its crypto will be user-pleasing protection, with many LE bypasses
by John Young 22 Dec '15

22 Dec '15

Apple assures EU its crypto will be user-pleasing protection, with many LE bypasses. <https://t.co/Fa1PSKbNVh>http://www.nytimes.com/2015/12/22/world/europe/apple-pushes-against-british… Crypto world cheers essential duplicity. Many thanks to Edward Snowden.

1 0

"tinkering" punishable by destruction of property in TPP
by net_kitteh 22 Dec '15

22 Dec '15

http://motherboard.vice.com/read/white-hat-hackers-would-have-their-devices… how the living fuck are they going to enforce this.

5 4