- cypherpunks - lists.cpunks.org

help UNSUBSCRIBE
by thomas.fischermann＠zeit.de 06 Apr '15

06 Apr '15

> Am 06.04.2015 um 15:22 schrieb cypherpunks-request(a)cpunks.org: > > Send cypherpunks mailing list submissions to > cypherpunks(a)cpunks.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://cpunks.org/mailman/listinfo/cypherpunks > or, via email, send a message with subject or body 'help' to > cypherpunks-request(a)cpunks.org > > You can reach the person managing the list at > cypherpunks-owner(a)cpunks.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of cypherpunks digest..." > > > Today's Topics: > > 1. Re: Greenwald, Scahill step down from The Intercept (Cari Machet) > 2. Re: Greenwald, Scahill step down from The Intercept (c4p0) > 3. GPAs vs todays anonymous overlay networks (grarpamp) > 4. Re: Fwd: The West's Shame (jim bell) > 5. Re: Greenwald, Scahill step down from The Intercept (Bethany) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 6 Apr 2015 18:59:30 +0200 > From: Cari Machet <carimachet(a)gmail.com> > To: Alexis Wattel <alexiswattel(a)gmail.com> > Cc: cpunks <cypherpunks(a)cpunks.org> > Subject: Re: Greenwald, Scahill step down from The Intercept > Message-ID: > <CAGRDzQWhCiLWPJ7D=Mefskz8_CjkTTv2wHKOokdHX1FeH7phJQ(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > its not a 'claim' watch his film that was up for an academy award > > there is a scene in mogadishu where he is in the morgue there is a dead > body and him in the scene he is standing right next to it - the person was > hit by a drone strike > > no journalist gets filmed with dead bodies it is unethical it never happens > > perhaps if you were a journalist in the field you would understand > > it isnt 'slander' if it is true so maybe you dont know anything about law > either > > just because you have not run across other people criticising the great > perfect white guy jeremy scahill doesnt mean it isnt happening - you seem > to assume a lot and not ask questions just flame out assuming you know > everything i think that is known as narcissism which people go to > psychiatrists to get help working out of as its such a lethal condition but > it isnt easy because narcissists think they are right all the time > > besides even if i was the only one criticising jeremy that doesnt prove me > wrong - prove me wrong > go ahead try... > > also i knew the 'report' was false that you assume i thought it was true > again proves my premise that you are narcissistic > > On Mon, Apr 6, 2015 at 4:03 PM, Alexis Wattel <alexiswattel(a)gmail.com> > wrote: > > > Speaking about facts checking: intrigued by these allegations I looked up > > wiki on Omydiar, and his network association is said to have partnered with > > the CIA, which is not generally all about "philanthropy", although this > > claim lack any reference. > > > > Would someone know why is the Agency mentioned there? > > > > Aside from that, financed projects include "mobile intelligence" for > > prospectors and deploying banks onto mobile phones to make sure everyone > > even in Africa pays his fees to the landlords. They even dare to say it's > > cheaper than cash. I wonder how that is. > > > > > > Anyway... Wild allegations are very entertaining, but seriously what's the > > real meaning of this about Tor? > > Because no technical evidence suggest it is "backdoored" (whatever that > > would mean, this is a trendy word, makes the one who says it sound so l33t > > in journalism circles). > > > > On the other hand, Tor devs are more and more often prone on reminding > > that traffic analysis/correlation is not part of their threat model. The > > problem is that it is nowadays a definitely proven capability of > > adversaries. > > > > I really can't help thinking this is a deliberate desire of keeping Tor at > > government's reach because the eternal argument they oppose do not stand. > > They say that randomized wait times at each relay would make the traffic > > too slow. But I remember using Tor 8 years ago when it took forever to load > > a Web page, and still did I use it in spite of this major extra effort, > > because anonymous surfing was such a blast. > > Today the network is fast enough to be able to swap 25% speed for a > > massive increase of anonymity. > > The other solution, randomized length of packets with dummy padding > > discarded at each relay would impact even less on responsiveness. > > > > I honestly can't see why they legitimately refuse to implement this. > > They seem to think that the need to observe both ends is too hard. Did > > they hear about the BGP routing attack that targeted Iceland? Funny how the > > Silk Road server was found a month later in... Oh shit, Iceland. > > > > When you claim to protect activists with government money, you'd better > > not show dubious intentions if people trust are what you depend on. Because > > that's why Tor was opened at first. The government officials needed to hide > > among civilian traffic. They do need the people to run nodes. > > > > Le 6 avril 2015 15:04:21 CEST, xezha <xezha(a)riseup.net> a écrit : > >> > >> > >> -----BEGIN PGP SIGNED MESSAGE----- > >> Hash: SHA1 > >> > >> I think I may have to leave this list. > >> > >> Can you really not tell the difference between a real article and > >> something made up/joke/propaganda? > >> Please be a little more critical and back up for claims before slandering > >> someones name. Even 5 minutes of research with google will demonstrate that > >> you are the only source of ANY claims about Jeremy Scahills unethical > >> journalism. You seem to have a screw loose. > >> > >> Xe > >> > >> > >> On 06/04/15 02:35, Cari Machet wrote: > >> > thank you!! > >> > > >> > i just want to say that @jeremyscahill took a selfie with a (murdered) > >> dead body which no & i mean no journalist does - no one ... he is a very > >> sick capitalist fascist > >> > > >> > he has done more than this but i wont go on & on > >> > > >> > On Mon, Apr 6, 2015 at 1:58 AM, Juan <juan.g71(a)gmail.com > >> <mailto:juan.g71@gmail.com> <juan.g71(a)gmail.com>> wrote: > >> > > >> > On Sat, 04 Apr 2015 22:29:06 -0700 > >> > Seth <list(a)sysfu.com <mailto:list@sysfu.com> <list(a)sysfu.com>> > >> wrote: > >> > > >> > > It's about damn time ;) > >> > > > >> > > > >> http://chronicle.su/2015/03/07/greenwald-scahill-step-down-from-the-interce… > >> > > > >> > > > >> > > >> > > >> > is this some kind of stupid 'joke' ? > >> > > >> > > >> > > >> > > >> > -- > >> > Cari Machet > >> > NYC 646-436-7795 > >> > carimachet(a)gmail.com <mailto:carimachet@gmail.com> > >> <carimachet(a)gmail.com> > >> > AIM carismachet > >> > Syria +963-099 277 3243 > >> > Amman +962 077 636 9407 > >> > Berlin +49 152 11779219 > >> > Reykjavik +354 894 8650 > >> > Twitter: @carimachet <https://twitter.com/carimachet> > >> <https://twitter.com/carimachet> > >> > > >> > 7035 690E 5E47 41D4 B0E5 B3D1 AF90 49D6 BE09 2187 > >> > > >> > Ruh-roh, this is now necessary: This email is intended only for the > >> > addressee(s) and may contain confidential information. If you are not > >> the > >> > intended recipient, you are hereby notified that any use of this > >> > information, dissemination, distribution, or copying of this email > >> without > >> > permission is strictly prohibited. > >> > > >> > > >> > >> -----BEGIN PGP SIGNATURE----- > >> Version: GnuPG v2.0.22 (GNU/Linux) > >> > >> iQIcBAEBAgAGBQJVIoRQAAoJEBxZWCa0ilYttJAP/2XY5i+2lpUYspwBR/Rw/2et > >> cQkzvtScdeyfjBXubS9LZAuKol9OcKaFj4vww1E2unnoImuHrLfAKsZZs/Ty3yib > >> 2YC1XWgsFtUAEOg7pHFLxxY+N/8XQplAB8vvm1V8+GMllwESmGspPPZxXc7yL4Vw > >> Ks4VIaF+gZlgFAr4jqjN2W8/67PVYYjVWLxibxmPIyl1SfMjnUh2v7qL779dpyC/ > >> c3eEb8oT2pGuK8rJzyVLUCtnghSeRHsSR08EFhaCLJGSuUmir6hEXhWBV4VOKudH > >> 1tMy/RR7ldOBv5ICMdpZ5wNItSzLjg5+Iib2jODdwirvSfI/8Mo6LGFPsufZn0Nr > >> Oq7Nwjafb4w87OqW4R4vFepOqlQA1/G6XNxKVCSoU/cP10A8YHf2KQ5IEvkYa7UC > >> wyKTmFWFaSa6vdqtv9XDJfXVozOjg/JVOI62mrVphXyBKWa9UEvobTSvyZ/EfcFk > >> /QGoOE3knIFQaYyRhtbXIeHw+BGp2+fGxKUW0nIgmPsJvJw3Zt9/WI5iXCYoD5M4 > >> Ivo5nNcYPchSL9gI6Rv0TIcNxPhahjnklav19enEYI2zZfqmwxHlYUiJjsoZU0J/ > >> XseAUt/Z6cVzksWi5/9RLTBLx7pNeDX4TJOeq0JwB6sGL99EH7p1/812ksr3fAF2 > >> 2Xd2B4E6TkgyoDHlZ2cW > >> =Gsmo > >> -----END PGP SIGNATURE----- > >> > >> > > > -- > Cari Machet > NYC 646-436-7795 > carimachet(a)gmail.com > AIM carismachet > Syria +963-099 277 3243 > Amman +962 077 636 9407 > Berlin +49 152 11779219 > Reykjavik +354 894 8650 > Twitter: @carimachet <https://twitter.com/carimachet> > > 7035 690E 5E47 41D4 B0E5 B3D1 AF90 49D6 BE09 2187 > > Ruh-roh, this is now necessary: This email is intended only for the > addressee(s) and may contain confidential information. If you are not the > intended recipient, you are hereby notified that any use of this > information, dissemination, distribution, or copying of this email without > permission is strictly prohibited. >

2 1

Re: [tor-talk] rant - just want a bit of music
by grarpamp 06 Apr '15

06 Apr '15

> Surely solving the ready-access to censored > content problem would be a good start for our freedom lovin' > community? We have at least 2 (maybe even 3-5) anonymous overlay networks that could be utilized to transport the final solution to this problem (absent copyright regime change). Even plain old BT. Yet curiously, no one seems to be building any solution at scale within them. > rant - just want a bit of music See above. Or keep on ranting. At least until you convince certain communities to evolve beyond their simpleminded value/ideal of leech and run, speed first (which can actually be quite acceptable). > We need some sort of bit-torrent for censored youtubes, where those > who've already downloaded a youtube file, can automatically make it > available to others This is no different than BT with search. An engine to map YT-ID to BT-info hashes is largely moot given you'd know the title to search anyway.

1 0

Fwd: A crowdfunding campaign to build a free baseband
by Blibbet 06 Apr '15

06 Apr '15

FYI -------- Forwarded Message -------- Subject: A crowdfunding campaign to build a free baseband Date: Mon, 6 Apr 2015 05:41:54 GMT From: Spacefalcon the Outlaw <falcon(a)ivan.Harhan.ORG> To: replicant(a)lists.osuosl.org Hello free phone lovers, As we all know, the baseband/modem/radio processor is the big bone in our collective throat: it is the most closed and proprietary part of every currently available phone, no matter how free the rest of the phone might be. Well, without beating further around the bush, I just started a crowdfunding campaign on Indiegogo seeking to change this bleak baseband situation: https://www.indiegogo.com/projects/free-software-cellular-baseband My project seeks to solve the problem of the closed and proprietary baseband by producing a GSM modem module that will run 100% free firmware. And furthermore, I seek to produce such a free baseband not by creating it from scratch, but by re-creating one that was already made by someone else some years ago and later discontinued. Please read the campaign page for the full details. Thanks for reading, SF _______________________________________________ Replicant mailing list Replicant(a)lists.osuosl.org http://lists.osuosl.org/mailman/listinfo/replicant

1 0

GPAs vs todays anonymous overlay networks
by grarpamp 06 Apr '15

06 Apr '15

On Mon, Apr 6, 2015 at 10:03 AM, Alexis Wattel <alexiswattel(a)gmail.com> . > https://cpunks.org//pipermail/cypherpunks/2015-April/007186.html > traffic analysis/correlation is not part of their threat model. The problem > is that it is nowadays a definitely proven capability of adversaries. > They say that randomized wait times at each relay would make the traffic too > slow. The delay parameters must be specified before using words like "too slow[ed]" to describe the relative impacts to the full path. Further, relevance to chosen application must be considered. Some users do realtime HS2HS text/voice/video over it. > The other solution, randomized length of packets with dummy padding > discarded at each relay would impact even less on responsiveness. Using a fixed length cell network and keeping links otherwise full of chaff of said length is interesting defense to GPA correlation attack. Random length cells, even if some cars are removed, still form a uniquely identifiable train (particularly at entry/exit). Thus not useful. > deliberate desire of keeping Tor at government's reach [queue usual comments on funding, centralized dirauths, TCP only, etc] It's opensource, fork it.

1 0

How to have your encrypted mail in two places at once
by Mike Ingle 05 Apr '15

05 Apr '15

IMAP and webmail makes it easy to access your mail on two or more machines, and have all your folders stay in sync. Encryption tends to break that: your inbox might work across machines, but your Sent Items and personal folders tend to be stuck on one machine. Confidant Mail 0.24 has a solution for that problem. You can have the same GPG key on two or more machines. Using a secure replication protocol, your sent items, read status of incoming mail, personal folders, and deletions are all automatically copied to the other machines. This provides an IMAP-like experience with encrypted mail. I am looking for advice on how to implement a mobile client: Option A is to re-create the current client functionality for the mobile platforms. That is a lot of work, and I am not experienced in mobile programming. There is a port of gpg to Android, but I don't know how good it is. I know zero about Apple. This has disadvantages: for example, if I receive a 1GB message at home, there is no way for the phone to get only part of that message. It needs the whole message to check the signature. The worst problem, however, is that you are carrying your private key around with you. Phones are not secure and cannot be made secure. The carrier has root on the phone, whether you do or not. Phones are easy to physically take, and do not have trustworthy encryption. I do not want my GPG key on my phone. Option B is three-tier client server. Your PC at home has the private key, and talks to the Confidant Mail server. It also exposes a port which the phone accesses over a secure connection. The phone can request parts of messages, and the PC does the GPG encryption and decryption. This has the advantage that the phone client is smaller, the big message problem is solved, and the exposed key problem is solved. The middleware on the PC could have constraints such as not allowing the whole mailbox to be downloaded, and logging itself out after some number of failed remote access attempts. The downside is you need a PC running, you need to be smart enough to expose a port, and the PC is sitting there unattended, with the private key in memory, waiting for someone to come and grab it. Option C is a mobile web client. Similar to B, but instead of a client-server protocol, it uses HTTPS and generates mobile friendly HTML. Advantages relative to B are that one client supports all the mobile platforms, and there is no mobile code to write. Disadvantage is that the mobile browser is pretty easy to hack, and there is likely plaintext cached in the phone at any given time. Anyone who needs strong security probably should not use a mobile device. However, many people will want access to Confidant Mail on their phones. Do you have an opinion on the right way to provide it? http://www.confidantmail.org/forums/index.php?topic=27.msg47 Mike Ingle <mike(a)confidantmail.org> d2b89e6f95e72e26e0c917d02d1847dfecfcd0c2

5 9

Re: Warrant Canaries
by Softy 05 Apr '15

05 Apr '15

But that is the point of why there is no safety in "everyone flouting the law". Everyone is breaking the law and the persecutors get's to cherry pick who they will target. Most likely a pleasant mix of high profile (with trivial/non-existent penalty) and peon targets (with disproportionate penalty). Consider various Jay Walking, Loitering, Trespassing laws which exist in every town. Do all people always use the crosswalk? Do the persecutors ever ticket people? Not if the Mayor or Business Man Alpha are jay walking, but if I shout to a persecutor driving their armoured patrol car "get off the cell phone" ... you can bet your sweet un-free, psuedo-liberty ass I would be. > On 04/01/2015 05:26 AM, Andrew wrote: > > flouting the law and thereby render it ineffectual > > works... IF EVERYONE cooperates to flaunt, flaut, and disregard it. > > Could you IMAGINE the gubmint trying to take every internet provider and > major website operating in the US to court? > >

2 1

Re: Fwd: Warrant Canaries
by Ryan Carboni 05 Apr '15

05 Apr '15

I am a thousand feet tall platypus-bear, prove me wrong. On Sat, Apr 4, 2015 at 3:33 PM, Lodewijk andré de la porte <l(a)odewijk.nl> wrote: > On Apr 5, 2015 4:29 AM, "Ryan Carboni" <ryacko(a)gmail.com> wrote: > > > > IANAL, but laws are pretty clear. You cannot change your behavior in any > way that a jury could judge would lead to someone being tipped off. > > This could force you to behave in any which way. It's a completely > ridiculous law that expects superhuman feats of deception from every > citizen. Many (all?), for example, cannot help but show it when they lie > (generalized: hide the truth). Being a bad liar is a crime? Ok, wow. > > Having laws dictate what you should do instead of shouldn't do... > absolutely retarded. > > Good luck there. >

1 0

Fwd: Warrant Canaries
by Ryan Carboni 05 Apr '15

05 Apr '15

IANAL, but laws are pretty clear. You cannot change your behavior in any way that a jury could judge would lead to someone being tipped off.

2 1

Fwd: [tor-talk] Hi!
by bbrewer 04 Apr '15

04 Apr '15

Moral outrage from anyone here? Not I, per se, but curious to the politicks on-list. -Benjamin > Begin forwarded message: > > Date: April 4, 2015 at 12:51:55 AM EDT > From: mail4torlist(a)Safe-mail.net > To: tor-talk(a)lists.torproject.org > Subject: Re: [tor-talk] Hi! > Reply-To: tor-talk(a)lists.torproject.org > > Well in short, I used TOR to create and run HYIPs ("investment" programs that offer outrageous returns - Ponzis), various programs during about 8 years. Using e-currency (e-gold, libertyreserve, perfect-money, e-bullion etc). Cashing out e-currency with anonymous debit cards or bank accounts opened online with false scans (documents, photosop!). Net profit about 10 millions bucks. All runing through TOR! > > But this isn't possible so easy now, due to bank controls.. At the good old time, debit cards allowed, in "good" countries, withdrawals of thousands of bucks every day... Ah I remember the bags full of cash, LOL! > > Thank you TOR, thank you e-gold (founders got arrested), libertyreserve (founders got arrested), ebullion (founder got arrested for murder and is now sitting in death row), perfectmoney (still running but they are friends and got a nice percentage in exchange of they close their eyes))) > > Sure that isn't of a high morality level, but look: People decided by themselves to send me money, expecting to get 100% return by month (My average promised rate :) > > As somebody said, one idiot gets born every minute... > > >> I'm writing about Tor for my Ethics module. Do you guys mind if you tell >> me some malicious uses with Tor? Anything will be of great help. Yeah I >> already know of the basic or common use cases. :) > > > mail4torlist(a)safe-mail.net > -- > tor-talk mailing list - tor-talk(a)lists.torproject.org > To unsubscribe or change other settings go to > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

2 1

How I Wish You Were Here...
by grarpamp 03 Apr '15

03 Apr '15

https://www.youtube.com/watch?v=wYa1Wmb2f8Y Musician and bitcoin believer Andrew Kalleeen shows us how to stand up for our rights as sovereign human beings with calmness dignity and grace.

2 1