- cypherpunks - lists.cpunks.org

An intro to coding for Cypherpunk kidz
by Razer 28 Apr '15

28 Apr '15

In case the 'adults' here can't find it, the control 'console' is U-Left, with whirlygig on top. http://barclayscodeplayground.co.uk/

6 8

Re: cypherpunks Digest, Vol 22, Issue 38
by tigrutigru＠gmail.com 26 Apr '15

26 Apr '15

RE: Cypherpunk Kidz @Travis Such a good point about "yellow submarine graphics". I didn't want to reply to the whole list, just wanted to say that it's a really spot on remark. Kids are not idiots. I'd rather come to a Minecraft server as a kid and as an adult. There are some good MC projects for learning code. Nothing with security twist though I came across. Barclays is cool, ok, but, I wasn't sure what it has to do with Cypherpunk Kidz - it's not so much about security and encryption? We're up for setting up a Minecraft server for this purpose - learn code & security. Let me know if anyone would be interested to join: I can chat about it in detail in separate thread. @Rysiek - any thoughts? Also - multiplayers so make good live streams. Sent from my iPhone > On 25 Apr 2015, at 6:00 pm, cypherpunks-request(a)cpunks.org wrote: > > Send cypherpunks mailing list submissions to > cypherpunks(a)cpunks.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://cpunks.org/mailman/listinfo/cypherpunks > or, via email, send a message with subject or body 'help' to > cypherpunks-request(a)cpunks.org > > You can reach the person managing the list at > cypherpunks-owner(a)cpunks.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of cypherpunks digest..." > > > Today's Topics: > > 1. Re: An intro to coding for Cypherpunk kidz (Georgi Guninski) > 2. Re: An intro to coding for Cypherpunk kidz (Travis Biehn) > 3. Re: An intro to coding for Cypherpunk kidz (Razer) > 4. Re: An intro to coding for Cypherpunk kidz (Shelley) > 5. Re: An intro to coding for Cypherpunk kidz (Juan) > 6. Re: An intro to coding for Cypherpunk kidz (Razer) > 7. Re: An intro to coding for Cypherpunk kidz (Razer) > 8. Re: [cryptography] Shamir Reveals Sisyphus Algorithm (John Young) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 24 Apr 2015 19:53:28 +0300 > From: Georgi Guninski <guninski(a)guninski.com> > To: cypherpunks(a)cpunks.org > Subject: Re: An intro to coding for Cypherpunk kidz > Message-ID: <20150424165328.GA2620(a)sivokote.iziade.m$> > Content-Type: text/plain; charset=us-ascii > >> On Fri, Apr 24, 2015 at 08:54:42AM -0700, Razer wrote: >> >> In case the 'adults' here can't find it, the control 'console' is >> U-Left, with whirlygig on top. >> >> http://barclayscodeplayground.co.uk/ > > this appears unusable without javascript and/or cookies. > > not to mention it uses google analytics for spam. > > > ------------------------------ > > Message: 2 > Date: Fri, 24 Apr 2015 13:48:49 -0400 > From: Travis Biehn <tbiehn(a)gmail.com> > To: Georgi Guninski <guninski(a)guninski.com> > Cc: "cypherpunks(a)cpunks.org" <cypherpunks(a)cpunks.org> > Subject: Re: An intro to coding for Cypherpunk kidz > Message-ID: > <CAKtE3zcX9e6d0ghYRJkZSnYDOd6C4s5Hj24suB=d7YCDmMUX5A(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > We're left to guess at what the point is but I doubt that Barclay's use of > javascript, cookies and analytics platforms are what Razer is pointing out. > I presume that Razer is miffed at the obvious indoctrination play that > comes off as a bit creepy. Perhaps Razer would like to see a Cpunks themed > playground where opsec is taught to toddlers? > > "If you*re aged 7- 17 > and enjoyed Barclays Code Playground, > we’d love you to > come along to a > coding session in branch. > > <There*llThere'll be tips, > ch@llengeschallenges > and many more things to code. > >> Our trained Digital Eagles > will be there > to help you take your > coding skills > <to the next level." > > Barclay's bank, you know they're cool because they use the wrong symbols > for punctuation and substitute letters for look-alike glyphs. > > -Travis > > On Fri, Apr 24, 2015 at 12:53 PM, Georgi Guninski <guninski(a)guninski.com> > wrote: > >>> On Fri, Apr 24, 2015 at 08:54:42AM -0700, Razer wrote: >>> >>> In case the 'adults' here can't find it, the control 'console' is >>> U-Left, with whirlygig on top. >>> >>> http://barclayscodeplayground.co.uk/ >> >> this appears unusable without javascript and/or cookies. >> >> not to mention it uses google analytics for spam. > > > > -- > Twitter <https://twitter.com/tbiehn> | LinkedIn > <http://www.linkedin.com/in/travisbiehn> | GitHub <http://github.com/tbiehn> > | TravisBiehn.com <http://www.travisbiehn.com> | Google Plus > <https://plus.google.com/+TravisBiehn> >

2 1

Re: [cryptography] Shamir Reveals Sisyphus Algorithm
by John Young 25 Apr '15

25 Apr '15

Indeed. Inherent leakiness of digital technology is a gift of Olympus, aka James Bidzos aka RSA. Never enough fault-rich crypto. Digitalization might be the quintessential foolhardiness, or comsec opportunism, which had led to endless apologies, apologias, apoplexies. And hurrahs among investors, urging hackers and insiders to spill secrets sufficient to assure comsec-panicky buyers. Bug bounties hilariously, assuredly, self-defeating as backdoor warnings. At 09:49 AM 4/25/2015, Ben Laurie wrote: >On 22 April 2015 at 17:24, John Young <jya(a)pipeline.com> wrote: > > Futility of trying to eliminate every single vulnerability in a given piece > > of software. > >The name of the game is to protect the secrets despite bugs. And I >don't mean with cryptography.

1 0

detecting Quantum Insert
by Eugen Leitl 23 Apr '15

23 Apr '15

https://news.ycombinator.com/item?id=9425778

1 0

Shamir Reveals Sisyphus Algorithm
by John Young 23 Apr '15

23 Apr '15

Adi Shamir at RSA Conference: Fully secure systems don't exist now and won't exist in the future. Cryptography won't be broken, it will be bypassed. Futility of trying to eliminate every single vulnerability in a given piece of software. https://threatpost.com/fully-secure-systems-dont-exist/112380#sthash.sKPz03…

3 2

Re: free enterprise within walled gardens
by coderman 23 Apr '15

23 Apr '15

On 4/21/15, Juan <juan.g71(a)gmail.com> wrote: > ... > http://www.wired.com/2015/04/dmca-ownership-john-deere/ happened to my hay guy; error code and no start. only recourse is a certified John Deere (TM)(R) Service Agent (SM)(R)(C). at some point, you piss off the wrong slice of the populace - you're fucking with the livelihood of rugged routine loving folks. perhaps a DVB beam steering obfuscated dead drop in a sunk well to seed all tractor DMCA bypass for great justice results. who knows, (but i do get 93Mbps d/11Mbps up at the barn! :) DMCA infused in your Interweb of Things a special natured dystopia ...

2 1

free enterprise
by Juan 23 Apr '15

23 Apr '15

http://www.wired.com/2015/04/dmca-ownership-john-deere/

2 2

NSA releases 52,000 pages of William F. Friedman Collection
by John Young 23 Apr '15

23 Apr '15

NSA releases 52,000 pages of William F. Friedman Collection, searchable: <https://www.nsa.gov/public_info/declass/friedman_documents/index.shtml>https://www.nsa.gov/public_info/declass/friedman_documents/index.shtml Document index spreadsheet: <https://www.nsa.gov/public_info/_files/friedmanDocuments/Friedman_Collectio…>https://www.nsa.gov/public_info/_files/friedmanDocuments/Friedman_Collectio…

1 0

Invalidity of ODNI Statements
by Wilfred Guerin 22 Apr '15

22 Apr '15

With today's statistics from DNI and last month's "Privacy Statement" PDFs from *some* of the American "IC" (sans DEA, US Marshals Domestic Intelligence), you will notice some glaring exceptions: "experimental research and training" and "Oversight"... ALL NSA and sigint is offloaded to "Civil Liberties Infrastructure" to assure "Oversight" and mutual access to "Global Partners" , and, OIG units all feed FBI OIC "Office of Integrity and Compliance" whitch retains all data for exhaustive analysis with certain military partners without limitation nor "Oversight" -- typical of the mob who took over from Hoover in the 1970s. FBI OIC Kelley is uncle of Petraeus' mistress Jill Kelley, DNI CLPO Alexander Joel is grandson of Clarence Kelley. Oversight = absolute exploitation. Oh, and CIA analytics director Kelley ran Dell Computer Japan. Snowed in with Miranda, right? Nice to run the "Oversight" offices, eh Kelley? X-Ray that. "Experimental" (exhaustive) NSA returns findings to "Official Story" NSA and others.

1 0

Quantum Insert detection for everyone
by David Stainton 22 Apr '15

22 Apr '15

Greetings, Did you all see this Wired article about Quantum Insert detection? https://www.wired.com/2015/04/researchers-uncover-method-detect-nsa-quantum… These TCP injection attacks are used by various entities around the world (not just NSA!) to target individuals for surveillance or perhaps to add their computers to a botnet for other purposes. If you do not use a VPN or Tor you can run "Quantum Insert" detection on your computer and detect when you receive an attack attempt. However be advised that proper sandboxing is important here because intrusion detection and protocol anylsis tools are notoriously insecure and get pwned all the time. If you are a Tor exit relay operator you have the options of running detection software; However you should not publish the results publicly without mixing in some noise or your published data might make it possible for some adversaries to deanonymize Tor users. If your country has strict telecommunications laws then it might only be legal for you to perform this type of detection if you do not perform logging. For the past several months... in my free time I've been slowly developing a very comprehensive TCP injection attack detection tool called HoneyBadger: https://github.com/david415/HoneyBadger Quantum Insert is a NSA codeword for "TCP injection attack", however either of these terms are too vague. During my research I was able to classify 4 different types of TCP injection attack. When I say that HoneytBadger is comprehensive what I mean is that Honeybadger can detect ALL of these types of TCP injection attack types... I describe them briefly here: https://honeybadger.readthedocs.org/en/latest/ Here's the Fox-IT blog post about their Quantum Insert detection software: http://blog.fox-it.com/2015/04/20/deep-dive-into-quantum-insert/ I am going to work on writing a much more comprehensive blog post; it will be filled with gory technical details AND it will include information on how to use HoneyBadger. HoneyBadger has optional (off by default) full-take logging which could enable you to capture a zero-day payload from a TCP attack; you should then responsibly disclose to the software vendor or contact a malware analyst to help out! Sincerely, David Stainton

1 0