- cypherpunks - lists.cpunks.org

Hostages for Sale on Telegram
by Rich Jones 10 Sep '15

10 Sep '15

More for the ISIS-loves-"Secure"-Messaging-Apps folder: "Dabiq 11 released by terror group ISIS. At the end it notes 2 new foreign hostages; 1 Chinese and other Norweigan." https://twitter.com/DrPartizan_/status/641671841380179968 Click through for pictures and Telegram number. R

4 3

Distributed Computing [was: Repbin release v0.0.2]
by grarpamp 10 Sep '15

10 Sep '15

On Wed, Sep 9, 2015 at 5:48 PM, jim bell <jdb10987(a)yahoo.com> wrote: > Has anybody ever considered the idea of doing otherwise-useful CPU work with Plenty of distributed computing efforts out there... BOINC, SetiAtHome, etc. https://en.wikipedia.org/wiki/Distributed_computing > the power currently expended by computing hashes in Bitcoin mining? The > most obvious application would be weather forecasting: It could use a huge > amount of computation, on a continuously ongoing basis, and is valuable to > every nation on earth. Whether it can be lasso'ed into a bitcoin-mining > engine, I don't know. Back when mining was done with GPU's, maybe, utilizing the newly installed base of GPGPU computing therein. https://en.wikipedia.org/wiki/General-purpose_computing_on_graphics_process… Today all relavant mining is done with ASIC's, and all the installed base of them can do is SHA-256, so no. https://en.wikipedia.org/wiki/Bitcoin_network#Bitcoin_mining https://bitcointalk.org/index.php?board=76.0 https://bitcointalk.org/index.php?board=81.0 rysiek wrote: > My dream would be a distributed github replacement (a'la gitchain) where > proof-of-work is somehow related to compilation, running tests, or somesuch. Maybe I just saw some news about a distributed repo. Too much distributed noise lately, so maybe not. Central here, signing off...

1 0

Russia failed to break Tor
by Anton Nesterov 09 Sep '15

09 Sep '15

A company hired by the Russian Interior Ministry to identify users of the Tor network, an anonymous Internet browser, has announced its plans to terminate its state contract without finishing the task. According to the Russian newspaper Kommersant, the Russian Interior Ministry signed a series of contracts in 2013 and in 2014 with a company called “the Central Scientific Institute for Economics, IT and Management Systems” (CSI EIM) to study and to fight online anonymity. The newspaper reports that CSI EIM has now hired lawyers, in order to terminate its four government contracts. Information about the contracts between CSI EIM and the Interior Ministry is classified. According to an investigation conducted by Kommersant, however, one of the agreements, under the code name “TOR (Flot),” involved studying how to retrieve information about Tor users and investigating what technologies Tor uses. CSI EIM was supposed to earn 3.9 million rubles ($57,540) for the work. In addition, CSI EIM won a government contract in 2014 for 20 million rubles ($295,000), known under the code name “Chameleon-2,” involving “the creation of a hardware and software complex for allowing secret and anonymous remote access to strategically important information.” The Interior Ministry has refused to comment. https://meduza.io/en/news/2015/09/09/the-russian-government-hired-people-ha… Tender to crack Tor http://zakupki.gov.ru/epz/order/notice/zkk44/view/common-info.html?regNumbe… Archived version with Tor in description https://archive.is/gCweX Tender that has info on termination of tender to crack Tor http://zakupki.gov.ru/223/purchase/public/purchase/info/common-info.html?no… -- https://nesterov.pw GPG key: 0CE8 65F1 9043 2B11 25A5 74A7 1187 6869 67AA 56E4 https://keybase.io/komachi/key.asc

2 1

Brazil hero homeless man dead after save a woman from gunman
by Felipe Felipe 08 Sep '15

08 Sep '15

https://www.youtube.com/watch?v=4Z3Q6y0dNAY http://www.unilad.co.uk/articles/homeless-man-dies-fighting-gunman-to-save-… Is brazilian security a joke? I'm from brazil and just wonder why things like that still are happening here. Is the cops from here a joke? Yes they are. I 've already been beaten by them without do anything just for walking in the streets, but when good people need them , they nothing do. They have had a chance to shot the man who had the woman, but besides they didn't anything they also let a citizen homeless get close of the killer, and they used to shot more than 30 times in the killer. The killer had been arrested more than 10 times, drug trafficking, attemped tp murder, aggression, resistance and many other things, he had got more than 20 years in jail and was in the streets free and armed. Is that our justice just do, let killers and bad people walk free among the citizens. Both men are homeless people and the killer was always been in walking with the gun in this place. That place that happend this is in the cathedral of Sé in São Paulo, too many foreign use to visit this place, because is the biggest church of Brazil and a historical place, that happend on last friday.

4 5

Re: Script Kiddie Killed in Drone Strike
by Rich Jones 08 Sep '15

08 Sep '15

Update to this: ISIS Twitter claiming this was the result of backdoors the ' Surespot <https://antipolygraph.org/blog/2015/06/07/developers-silence-raises-concern…>' "secure" messaging application. https://twitter.com/p_vanostaeyen/status/639165071072038913 On Wed, Aug 26, 2015 at 2:33 PM, Rich Jones <rich(a)openwatch.net> wrote: > > http://www.mirror.co.uk/news/world-news/junaid-hussain-dead-isis-computer-6… > https://en.wikipedia.org/wiki/Junaid_Hussain > > Apparently one of the TeaMp0isoN founders was just killed by a US drone > strike in Syria. Crazy times. > > According to the.. fairly questionable.. article linked above, he was #3 > on the US kill list, "behind only Jihadi John and ISIS leader Abu Bakr > al-Baghdadi"! Not bad for a guy most famous for SQL injections.. I wonder > who took his place on the list. > > R >

2 1

Hackers spent at least a year spying on Mozilla to discover Firefox security holes – and exploit them
by Georgi Guninski 08 Sep '15

08 Sep '15

Just to change the current boring discussion about fucked RFCs. http://www.theregister.co.uk/2015/09/04/mozilla_firefox_bugzilla_leak/ Hackers spent at least a year spying on Mozilla to discover Firefox security holes – and exploit them Bugzilla infiltrated, private vulns slurped since at least 2014 ==== comments: 2014 appears too high bound for me, might be wrong. Likely the mozilla u$a comrades caught the less skilled attackers, not those with r00t access (having in mind what a mess their code is).

10 17

Re: Hackers spent at least a year spying on Mozilla to discover Firefox security holes – and exploit them
by Ryan Carboni 07 Sep '15

07 Sep '15

No wonder firefox is seemingly more insecure lately. Only choices now are chrome or a text-only browser.

3 3

Can the NSA break 100000 bit RSA assuming they have O(n^6) or O(n^12) factoring algorithm?
by Georgi Guninski 07 Sep '15

07 Sep '15

In 2010 I generated two RSA keys (and certs) of size above 100000 bits: [Full-disclosure] nonsense fun: 100 000 bit rsa key http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0384.html The keys/certs: http://archives.neohapsis.com/archives/fulldisclosure/2010-08/att-0384/gir.… (the certs might have expired but this doesn't matter). The private keys are included too. According to my mail they were generated in "about 30 hours on 1 core" and I used state of the art primality checking "pfgw". n is the size of the modulus in bits. Assume the much loved NSA has factoring algorithms of complexity O(n^6) or O(n^12) running on classical computers. Can the NSA break n=100000 without using owning/torture? Some computations suggest NO, especially for the second: sage: k=100000 sage: RR(k^6).log(2) 99.6578428466209 sage: RR(k^12).log(2) 199.315685693242 Comments about quantum computer that can break them are welcome too.

1 0

Re: [tor-relays] clarification on what Utah State University exit relays store ("360 gigs of log files")
by coderman 03 Sep '15

03 Sep '15

On 9/2/15, Tim Sammut <tim(a)teamsammut.com> wrote: > ... > - Cisco IOS (and likely other platforms) will immediately export flows > if the cache fills to capacity. This will result in flows being > exported in less than inactive timeout,.. there is a second limit here, which is the netflow channel capacity / storage limit, if you introduce simulated flows at a rate beyond this capacity, you may become unobservable (via loss) resulting in failure to correlate. this is why i asked about logical injection via userspace of billions of flows per minute as a resistance measure. (e.g. scapy or other raw inject across a border with cooperating peer, if needed.) best regards,

2 1

Article by me on B. Brown transcript
by Douglas Lucas 03 Sep '15

03 Sep '15

Hi cypherpunks, I obtained the transcript to journalist Barrett Brown's second and final sentencing hearing and wrote an article on it. The lengthy article is all about the right to link. Here's the article: http://revolution-news.com/barrett-brown-vs-the-dept-of-justice-defining-th… Here's the transcript (PDF): http://douglaslucas.com/files/BBLOL_Transcript_January_Sentencing.pdf Thanks, Douglas

1 0