- cypherpunks - lists.cpunks.org

openPDS - The privacy-preserving Personal Data Store
by Robert Hettinga 10 Aug '14

10 Aug '14

http://openpds.media.mit.edu/#philosophy PUBLICATIONS AND SELECTED PRESS openPDS allows users to collect, store, and give fine-grained access to their data all while protecting their privacy. With the rise of smartphones and their built-in sensors as well as web-apps, an increasing amount of personal data is being silently collected. Personal data–digital information about users’ location, calls, web-searches, and preferences–is undoubtedly the oil of the new economy. However, the lack of access to the data makes it very hard if not impossible for an individual to understand and manage the risks associated with the collected data. Therefore, advancements in using and mining this data have to evolve in parallel with considerations about ownership and privacy. Many of the initial and critical steps towards individuals data ownership are technological. Given the huge number of data sources that a user interacts with on a daily basis, interoperability is not enough. Rather, the user needs to actually own a secured space, a Personal Data Store (PDS) acting as a centralized location where his data live. Owning a PDS would allow the user to view and reason about the data collected. The user can then truly control the flow of data and manage fine-grained authorizations for accessing his data. openPDS: Protecting the Privacy of Metadata through SafeAnswers, PLoS One, 10.1371 (2014) On the Trusted Use of Large-Scale Personal Data, IEEE Data Engineering Bulletin, 35-4 (2012) Big Data Is Opening Doors, but Maybe Too Many, The New-York Times ACLU: AT&T Customer Privacy at Risk, Wall Street Journal - CIO Journal Own your own data, MIT News Big Data : pourquoi nos métadonnées sont-elles plus personnelles que nos empreintes digitales ?, Le Monde Private data gatekeeper stands between you and the NSA, New Scientist MIT Wants You To Own Your Own Data, Not Give It Away, New Scientist MIT-designed system lets you take control of your data, Wired (UK) Getting More Value from Cell-Phone Data, Technology Review openPDS software focuses on control of personal data, Phys.org How to stop the NSA spying on your data, New Scientist Why the collision of big data and privacy will require a new realpolitik, GigaOM 3 Projects Prove Privacy Is Not Dead, Scientific American Reiventing Society in the Wake of Big Data, The Edge New system would allow individuals to pick and choose what data to share with websites, mobile apps, Phys.org A Major ISP Wants to Give Consumers a Cut of the Online Data Market, Vice.com Protecting privacy online, Science Daily Collecte de métadonnées : est-il trop tard pour s’inquiéter?, Radio Canada (FR) Deine Daten gehören dir: Wie ein System namens OpenPDS den Datenschutz revolutionieren könnte, T3N (DE) Visuals openPDS privacy settings (.zip)

2 1

whois hack back
by Digitalfolklore 09 Aug '14

09 Aug '14

1 0

Yahoo To Add PGP Encryption For Email
by grarpamp 09 Aug '14

09 Aug '14

http://tech-beta.slashdot.org/story/14/08/08/1219241/yahoo-to-add-pgp-encry… Unusual to see slashdot pointing out obvious weaknesses in server side/pushed crypto offerings... someone got a clue. Still, more crypto is nice to have out there.

1 0

Re: [tor-talk] [OT] deleting publicly posted content
by grarpamp 08 Aug '14

08 Aug '14

On Fri, Aug 8, 2014 at 10:13 AM, Geoff Down <geoffdown(a)fastmail.net> wrote: > On Fri, Aug 8, 2014, at 01:07 PM, krishna e bera wrote: >> There is no inherent "right to forget" anything that ever happens in >> public, because that would require invading people's minds and archives. >> Court decisions requiring Google to delete correct information from >> search results are misguided - if anything they should require fuller >> search results showing the context and followup events (for example, >> information that may have exonerated the persons in question). >> Archives that are not subject to jurisdictional or changing legal >> currents, are a good use case for Tor hidden services. > We have the right to ephemeral conversation, even in public. > Before mass surveillance and recording became possible, that right was > respected. > The new laws attempt to restore that right. Before, it was a subconscious unthought mode of inter conduct (if not a firmly developed expectation) as outcome of natural limiting circumstances... ie: it wasn't possible to recorde peoples lives, so the context or concept was not thought among people. Just some limited and expensive gov't tax, census, bank type systems.Then cheap computers everywhere hit and the nazis began collecting in mass again. The new laws are a restoration of expectation in the form of an enforceable right, which is now necessary form to do it against the lack of natural limit. The laws are not even close to restoring the formal mode/expectation, and the abuse of imbedding, collection, using and sharing without explicit permission and policy based release from the principal is abhorrent to the former natural way in which they would conduct. Society is slower than data and must exert its control over it and its greed until it has developed to handle such thoughts. Beyond even any reasonable 'need', phone companies maintaining *decades* of CDR's, CC purchases, and CL *not* 'deleting' posts are all equal evils. Turns out phone companies *gave* the metas to govt's and whoever else for whatever use internal and external via chains of weak or strong MOU's, secrets, etc. Now what exactly do you think content mines like CL, your mail, your facebook are doing with your content??? Hint: much worse. It's hugely unethical to the person and society to collect, keep this, let alone process and do whatever with it. It's faster than expectation. There is an inherent ethical right to respect the society and principal person, especially if you are faster. That includes forgetting and not even [ab]using them in the first place. Otherwise you are basically stealing lunch money from retards. That's bad. There's also distinct differences between the service itself doing the (unfortunately now very often) unexpected or contrary to 'delete' recording, and public recording and mining contexts, ethics, etc. Altavista was nice, but did society really need it grown into the GoogleMine? GeoCities --> FaceBookMine? Who will honor your request to delete yourself from old 'non-service-made' public geocities/usenet archives today, from facebook archive 30yr from now? We are still slow and stupid, particularly in hindsight, therefore in a digital age we need now encode that right... just as we had been natural forgotten with time, physically moving, and new associations before then. And to encode not to keep... because we are too slow to make that decision right now.

1 0

get_key_info.sh on FinFisher for public key server
by Nathan Andrew Fain 08 Aug '14

08 Aug '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have not checked all files, just a sample. as keys have not been revoked or removed from the public server it would help if someone could execute the following on every gpg'ed file. as individuals revoke their keys, if im not mistaken, we will not be able to document the names of those keys. [get_key_info.sh] #!/bin/bash FILE="$1" for ID in $(gpg -d "$FILE" |& awk '{print $7}' | grep -v 'available'); do #gpg --dry-run --keyserver pgp.mit.edu --recv-keys 0x${ID} echo "ID: 0x$ID" w3m -dump "https://pgp.mit.edu/pks/lookup?search=0x${ID}&op=index" \ | grep pub done LOG: $ ./get_key_info.sh FinIPCatcher.zip.gpg ID: 0x977E9F54 ID: 0x0FC82479 ID: 0x0FEB4CFF ID: 0x6225EAA0 ID: 0x58143658 ID: 0x8E037629 ID: 0x8269976E pub 1024D/66878388 2013-04-17 Alfons Rauscher <alfons.rauscher(a)vervis.de> ID: 0xB03A5EA9 ID: 0xD81082F4 pub 2048R/D81082F4 2012-03-08 Melvin Teoh (Gamma Group) <mt(a)gammmagroup.com> ID: 0xF5946EA8 ID: 0x695D98C9 ID: 0x280AD26F ID: 0xF158ADF2 ID: 0xF166F2CA pub 2048R/3F895273 2013-03-05 Alexander Hagenah <ah(a)primepage.de> ID: 0x7774F144 ID: 0xA7A4AC21 pub 2048R/A7A4AC21 2013-03-05 Hari Purnama (pgp) <hp(a)gammagroup.com> $ ./get_key_info.sh FinIP-Catcher-User-Manual.docx.gpg ID: 0x977E9F54 ID: 0x0FC82479 ID: 0x0FEB4CFF ID: 0x6225EAA0 ID: 0x58143658 ID: 0x8E037629 ID: 0x8269976E pub 1024D/66878388 2013-04-17 Alfons Rauscher <alfons.rauscher(a)vervis.de> ID: 0xB03A5EA9 ID: 0xD81082F4 pub 2048R/D81082F4 2012-03-08 Melvin Teoh (Gamma Group) <mt(a)gammmagroup.com> ID: 0xF5946EA8 ID: 0x695D98C9 ID: 0x280AD26F ID: 0xF158ADF2 ID: 0xF166F2CA pub 2048R/3F895273 2013-03-05 Alexander Hagenah <ah(a)primepage.de> ID: 0x7774F144 ID: 0xA7A4AC21 pub 2048R/A7A4AC21 2013-03-05 Hari Purnama (pgp) <hp(a)gammagroup.com> $ ./get_key_info.sh FinFly-Web-Syllabus.pdf.gpg ID: 0x977E9F54 ID: 0x0FC82479 ID: 0x0FEB4CFF ID: 0x6225EAA0 ID: 0x58143658 ID: 0x8E037629 ID: 0x8269976E pub 1024D/66878388 2013-04-17 Alfons Rauscher <alfons.rauscher(a)vervis.de> ID: 0xB03A5EA9 ID: 0xD81082F4 pub 2048R/D81082F4 2012-03-08 Melvin Teoh (Gamma Group) <mt(a)gammmagroup.com> ID: 0xF5946EA8 ID: 0x695D98C9 ID: 0x280AD26F ID: 0xF158ADF2 ID: 0xF166F2CA pub 2048R/3F895273 2013-03-05 Alexander Hagenah <ah(a)primepage.de> ID: 0x7774F144 ID: 0xA7A4AC21 pub 2048R/A7A4AC21 2013-03-05 Hari Purnama (pgp) <hp(a)gammagroup.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlPkqtYACgkQveagdEkPM4CjfACeKDvcaLarLRepieSXiK1blPj+ E/EAoOoWomhgo4dBs3MBr6oIUZkh0pAZ =PpUm -----END PGP SIGNATURE-----

2 3

Russia want to force all Internet resources install their surveillance system
by Anton Nesterov 08 Aug '14

08 Aug '14

PM Dmitry Medvedev signed a decree about an upgrade to Russian surveillance system targeted to users of websites. It says that "organizer of spreading of the information" must sign a plan with Federal Security Service to install surveillance software/hardware with direct link to Federal Security Service, like it works with ISPs and other communication providers now. The details about installed software and hardware is confidential. It's not clear who will pay for this, but probably it will be resource owners, like it work with ISPs and other communication operators. "Organizer of spreading of the information" is a term introduced by Federal law N 97-FZ of 05.05.2014 (called by media "bloggers law" because it also force bloggers to register in special "bloggers registry"), it means somebody who make works something that send any information over the Internet, basically it's any website, email server or anything. That law also force them to store all logs about user's actions (even for anonymous users) for 6 months. It's not only Federal Security Service who can access that information, it's any authority who has the right to do operative investigate activities. Currently it's near 6 authorities, including Federal Drug Service, Federal Tax Service, Federal Guard Service and others. Federal law N 97-FZ of 05.05.2014 came in force on 1st August. >From the fact that Russian telephone surveillance system called SORM (system for operative investigative activities), SORM-2 for Internet, and SORM-3 for storing logs, this can be named SORM-4. http://publication.pravo.gov.ru/Document/View/0001201408040006 the decree (in Russian) http://graph.document.kremlin.ru/page.aspx?1;3632115 "Bloggers law" (in Russian) http://top.rbc.ru/society/07/08/2014/941618.shtml news report (in Russian)

1 0

of possible interest
by dan＠geer.org 08 Aug '14

08 Aug '14

Given day before yesterday as this year's Black Hat keynote. Cybersecurity as Realpolitik http://geer.tinho.net/geer.blackhat.6viii14.txt While abuse is not sought, it is expected. ;-) --dan

1 0

Re: [tor-talk] Craigslist now blocking all Tor IPs? Template for anyone:
by grarpamp 08 Aug '14

08 Aug '14

On Thu, Aug 7, 2014 at 1:57 PM, Mirimir <mirimir(a)riseup.net> wrote: > Wrote BM-2cTjsegDfZQNGQWUQjSwro6jrWLC9B3MN3: >> The automated messages from Craiglist appear like this: >> This IP has been automatically blocked. If you have questions, please >> email: blocks-b1406984946068001(a)craigslist.org > Craigslist notoriously ignores such messages. ... yet they clearly and directly invite you to ask them about it. I quit believing Craigslist was honorable a long time ago. They are some kind of odd idealogues whose kind obviously doesn't include you. Will they ignore those of you who live in the Bay Area? Craigslist 1381 9th Ave / 222 Sutter St SF, CA, US As their user (perhaps even paying user), you certainly have customary ground to engage them in conversation. I wonder how they treat their paying customers? And what their fee structure is like? Or you could just deploy a better list/meme, steal their eyeballs and run them out of business. They suck pretty hard so there's lots of oppurtunity there. ps. They archive every single post, and likely every single image, email, and phone number... from inception... in perpetuity. Don't take my word, it's in their videos... a fucking privacy shame. In fact, at this very moment, they're probably fapping to your gerbil sex ad that you 'deleted' ten years ago. [Rant aside, people have a right to be forgotten, and those, like CL, who willfully disregard that right, without verbosely or obviously saying so in context (ie: mailing lists obviously have self-run, even public, archives... that you cannot 'delete'), ... need to be exposed.]

1 0

FinFisher hacked
by Eugen Leitl 07 Aug '14

07 Aug '14

http://www.reddit.com/r/Anarchism/comments/2cjlop/gamma_international_leake… 40 GByte torrent https://netzpolitik.org/wp-upload/finfisher.torrent Moar: https://twitter.com/gammagrouppr https://github.com/FinFisher/FinFly-Web

6 5

Re: FinFisher hacked
by -John 06 Aug '14

06 Aug '14

On Aug 6, 2014 12:27 PM, rysiek <rysiek(a)hackerspace.pl> wrote: > > Dnia środa, 6 sierpnia 2014 18:03:47 Eugen Leitl pisze: > > http://www.reddit.com/r/Anarchism/comments/2cjlop/gamma_international_leaked > > / > > > > 40 GByte torrent https://netzpolitik.org/wp-upload/finfisher.torrent > > > > Moar: https://twitter.com/gammagrouppr > > Whoa. > > > https://github.com/FinFisher/FinFly-Web > > GitHub taking this down in 3... 2... 1... > Github already did, but the torrent is everywhere already. > -- > Pozdr > rysiek

1 0