- cypherpunks - lists.cpunks.org

Sony and Cyberattacks
by MrBiTs 03 Dec '14

03 Dec '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 A bit interesting: http://www.reuters.com/article/2014/12/02/us-sony-cybersecurity-malware-idU… As Sony has her PSN, how playstation owners are vulnerable? CheerS - -- echo 920680245503158263821824753325972325831728150312428342077412537729420364909318736253880971145983128276953696631956862757408858710644955909208239222408534030331747172248238293509539472164571738870818862971439246497991147436431430964603600458631758354381402352368220521740203494788796697543569807851284795072334480481413675418412856581412376640379241258356436205061541557366641602992820546646995466P | dc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJUfuvlAAoJEG7IGPwrPKWruaMH/RXIeroxYXeK/g7chtLtxWdD 4FJiSkK+HjvQM41R+KpeTEAqAc9kyDpY2pGpb7mD734cbh8ZXUOi5R8YV+4LcUY+ iTJB81Mp67j6Q5iKcd226bS8DZc1yjSvzDSwuhUYeE7UJ9RK1jPWD9bz0BS5DdoP LdI2pHWJ7/6N12TFGShzNrZPOE40tqQmbyChaIE3G72yo/H5iVGyY/xT3QwUU03M P6u2PJBF3SUVOn4X+oUI12RwTBN+BaPfMGPBoxO4CzbcAK7jvtLOG9a9SyzjIpMX xt78olEplpJjk7ziIzdAlpIIDFhGxOI8KoCMkTUwfWaVXBVnvkp2eBO1IDJ71aI= =bHcE -----END PGP SIGNATURE-----

1 0

Re: Microsoft Root Certificate Bundle, where?
by grarpamp 03 Dec '14

03 Dec '14

On Fri, Nov 28, 2014 at 6:45 PM, Nabla C0d3 <nabla.c0d3(a)gmail.com> wrote: > Yes I should probably document that in the README. I'm using this project: > https://github.com/kirei/catt Yes, please do. I also asked MS for a URL to their current cert bundle, they never replied. Though it's MS references are much older than Sep 29 2014, I'll still look at catt. Thanks.

1 0

Re: VeraCrypt Trustworthiness?
by Snehan Kekre 03 Dec '14

03 Dec '14

3 2

[qubes-users] First Mention of Qubes in US Court Documents
by Eugen Leitl 02 Dec '14

02 Dec '14

----- Forwarded message from Andrew <kyboren(a)riseup.net> ----- Date: Tue, 02 Dec 2014 14:26:18 +0100 From: Andrew <kyboren(a)riseup.net> To: qubes-users(a)googlegroups.com Subject: [qubes-users] First Mention of Qubes in US Court Documents Message-ID: <547DBDFA.3000206(a)riseup.net> User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 Just FYI, this is the first mention I've seen of Qubes in documents filed in any US court: http://cryptome.org/2014/12/peck-roark-affidavit.pdf (page 7; note that to the best of my knowledge, the context is entirely hypothetical). Affidavit filed in support of this motion: http://cryptome.org/2014/11/roark-087.pdf. This case is likely familiar to many, but those who have not heard of it are likely to find its history very interesting. The docket is partially available here: http://dockets.justia.com/docket/oregon/ordce/6:2012cv01354/108333 -- those with PACER accounts are encouraged to use their $15 free credit to upload these public-domain documents with RECAP (https://www.recapthelaw.org/) so all may enjoy their right to public access. Andrew -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscribe(a)googlegroups.com. To post to this group, send email to qubes-users(a)googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/547DBDFA.3000206%40riseup.net. For more options, visit https://groups.google.com/d/optout. ----- End forwarded message -----

6 5

How Mt. Gox Debacle Won Over a Bitcoin Convert
by dan＠geer.org 02 Dec '14

02 Dec '14

http://online.wsj.com/articles/how-mt-gox-debacle-won-over-a-bitcoin-conver… How Mt. Gox Debacle Won Over a Bitcoin Convert SAN MATEO, Calif. -- One event that inspired venture capitalist Tim Draper to amass a huge stash of bitcoin was the same one that turned other investors away. The Silicon Valley veteran says that he was so heartened to see bitcoin withstand the failure of Japanese virtual-currency exchange Mt. Gox in February that he decided to bid for nearly 30,000 bitcoin that were auctioned by the U.S. government in June. Continued bitcoin use by merchants and others after investors lost money in Mt. Gox "made me realize that there is a need for this," Mr. Draper said in a recent interview. "It is so important to people that they were willing to put up with that." Mr. Draper won all the bitcoin, making the co-founder of venture-capital firm Draper Fisher Jurvetson one of the world's largest holders of bitcoin. Thursday, Mr. Draper will try to increase his pile by bidding in another government auction of 50,000 bitcoin. The 56-year-old Mr. Draper is one of bitcoin's biggest advocates even though the price is down about 60% in the past year amid concerns about the Mt. Gox collapse, looming regulation and the stigma that the virtual currency is a haven for illicit activity. This week, Mr. Draper's bitcoin pile was worth about $11 million, down from roughly $17 million in June, based on the CoinDesk price index. Like many bitcoin enthusiasts, Mr. Draper compares the current state of the fledgling industry with the early days of the Internet. At Draper, Fisher, Jurvetson, he backed Internet companies from Hotmail and Skype to Paperless Post, an online invitation company Mr. Draper is one of a number of well-known investors who are pouring money into bitcoin, which was originally dominated by technology geeks and libertarians. Other bitcoin investors include Internet pioneer Marc Andreessen ; Virgin Group founder Richard Branson ; and Tyler and Cameron Winklevoss, twins who are best known for battling Mark Zuckerberg over ownership stakes of Facebook Inc. Launched in 2009, bitcoin is an online currency that isnt backed by a central bank or government. It is created on computers; bought, sold and traded on exchanges; and stored in virtual wallets. A growing number of merchants are accepting bitcoin for payment, in part because it helps them avoid fees and other costs associated with credit cards, debit cards, checks or cash. Bitcoin's increased awareness and popularity hasn't resolved price volatility that has roiled the virtual currency over the past year. The price of a bitcoin soared to more than $1,100 last year, but it has been sliding ever since. On Monday, bitcoin was trading at $377.90 on the CoinDesk price index of major exchanges. In an interview, Mr. Draper shrugs off the recent drop in bitcoin prices. He has recently predicted that the price will rise to $10,000 in three years. "I am looking at this as a great long-term opportunity," he says, adding that he checks the price only every two or three weeks. Mr. Draper, working through Bitcoin exchange startup Vaurum, was one of 45 bidders in the auction conducted by the U.S. Marshals Service auction in June. The government seized the bitcoin last year when it raided Silk Road, an online black market. Mr. Draper hasn't disclosed the price of his bid, made when the market price of the virtual currency was roughly $580. "When you win an auction, you have mixed feelings because you know that means you paid the most," he said with a chuckle. Still, he says he is confident with the purchase because he wouldn't have been able to amass such a stash in the open market, which is thinly traded and volatile. That thin market is one of the things that concerns Mark T. Williams, a Boston University finance professor who says the recent bitcoin forays made by big investors such as Mr. Draper aren't enough to make it thrive. "The probability of success is low, but if it does hit, the reward will be very large," he said. Mr. Draper says his interest in virtual currencies goes back 20 years, when a business associate described his sons fascination with an online game that allowed players to buy items for virtual characters with virtual cash. Outside of bitcoin, Mr. Draper has also plowed money into job-hunting startup Jobs Inc., Tesla Motors , and Xpert Financial, an online marketplace for pre-IPO companies. In 2012, Mr. Draper and other investors put a $500,000 investment into CoinLab, a bitcoin business incubator. He made his investment through Draper Associates, an entity that puts money into new ventures. He has also put money into a $6.6 million fund that was recently raised by his son, Adam, to support fledgling bitcoin entrepreneurs. Mr. Draper is particularly interested in using bitcoin to speed payments in less-developed countries. He also sees promise in using bitcoin's underlying technology to create financial contracts that can skirt the traditional fee structure of big banks. "Banks are afraid to embrace bitcoin, but I'm not sure they're as afraid as much as threatened," he says. Mr. Draper spends much of his time building Draper University, an eight-week entrepreneurship program that he launched last year. The school isn't accredited, but students can pay their $9,500 tuition with bitcoin.

1 0

request for slides and transcript: "44Con 2014: GreedyBTS - Hacking Adventures in GSM"
by coderman 02 Dec '14

02 Dec '14

http://blog.mdsec.co.uk/2014/11/44con-2014-greedybts-hacking-adventures.html ''' ... GreedyBTS can be used to assist security researchers and analysts performing assessments of mobile connectivity in environments, as well as highlighting risks to organisations who may transfer potentially sensitive information over wireless devices. An increasing number of embedded systems have turned to GSM as a management channel, such as alarm panels, street lighting, safety systems and more, which could all be susceptible to man-in-the-middle and rogue BTS attacks. The current state of baseband security means that it is difficult to detect and determine if you or your devices are being targeted by malicious BTS environments. The tools that do exist are aimed at power users which makes wider adoption by business or consumers an increasingly difficult task. By sharing information that can assist security researchers we hope to increase the overall security of mobile devices and cause people to re-think how they handle sensitive information over GSM environments... '''

1 0

VeraCrypt Trustworthiness?
by Fabio Pietrosanti (naif) - lists 01 Dec '14

01 Dec '14

Yo, a friendly human rights lawyer just asked me for an opinion on VeraCrypt's Trustworthiness. I never heard about such project: https://veracrypt.codeplex.com/ Does the community have some critics or favorable opinion about that, in place of truecrypt? -- Fabio Pietrosanti (naif) HERMES - Center for Transparency and Digital Human Rights http://logioshermes.org - https://globaleaks.org - https://tor2web.org - https://ahmia.fi

3 2

RU Sirius on Cypherpunks (2013)
by Gregory Foster 30 Nov '14

30 Nov '14

The Verge (Mar 7, 2013) - "Cypherpunk rising: WikiLeaks, encryption, and the coming surveillance dystopia" by @StealThisSingul: http://www.theverge.com/2013/3/7/4036040/cypherpunks-julian-assange-wikilea… > EARLY CYPHERPUNK IN FACT AND FICTION > CYPHERPUNK WAS BOTH AN EXCITING NEW VISION FOR SOCIAL CHANGE AND A FUN SUBCULTURE DEDICATED TO MAKING IT HAPPEN > > Flashback: Berkeley, California 1992. I pick up the ringing phone. My writing partner, St. Jude Milhon, is shouting down the line: "I’ve got it! Cypherpunk!" gf -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/

1 0

Encryption Experts and Snake Oilers Quacking Like Governments
by John Young 30 Nov '14

30 Nov '14

Capitalizing on the comsec frenzy, several sites, probably many, are offering to encrypt for those who do not want install programs or find them too difficult to use. All appear to promise that no records, private and public keys, email addresses or content will be kept. Trust them. For example, here's one used to send encrypted messages: https://www.igolder.com/pgp/encryption/ This approach suggests that the renewed crypto wars have again bred a new round of opportunities to beguile those who yearn for comsec but do not know how to get it, nor how to evaluate the offerings, in particular those provided by US producers which they doubt are free of government manipulation. But they also doubt that any cryptosystem is free of that, thanks to the NSA revelations of global cooperation among nations to do what NSA does, and the failure of crypto experts and firms to fully disclose their aid to governments, before and after Snowden's revelations. So the downside of Snowden's revelations is that there is considerable suspicion that all crypto is compromised, and, worse, that snake oil is not really different from the good stuff for the ordinary user who lacks the technical skills to distinguish them. And that comsec experts are in league with authorities to dupe the public by excessive warning of snake oil to peddle their own offerings, that is, experts and snake oilers are doing what governments do. Trust Snowden, trust experts, trust governments, but distrust snake oil. Wait, users say, how can we tell the difference when they all quack like ducks.

1 0

POTUS jammin'
by coderman 30 Nov '14

30 Nov '14

https://twitter.com/mattblaze/status/529055344191111169 Fired up a spectrum analyzer as POTUS motorcade went by. Definitely wideband jamming from lead WHCA vehicle. (& it unpaired my BT headset) I had been skeptical of reports that they routinely use jammers, but there was strong wideband noise from abt 700mhz to beyond 2.5 GHz. VHF was quite clean, which is where most sec svc traffic is. ... it seemed to be about half a block. --- ultra-wide-band SDR to the rescue? (60Ghz MIMO or bust!)

10 18