- cypherpunks - lists.cpunks.org

Re: PayPal and Proton Mail
by grarpamp 03 Jul '14

03 Jul '14

>>> The slumbering cypherpunk spirit has awakened. >> http://entersection.com/posts/1238-charlie-chaplin-on-the-patrimony-of-gree… > [Why this quotation] Machinery, liberty, democracy, torture, humanity, kindess, unity of fight, etc... Perhaps memes of, or thoughts for, the cypherpunk.

2 1

Re: cypherpunks Digest, Vol 13, Issue 4
by Cindy 03 Jul '14

03 Jul '14

cypherpunks-request(a)cpunks.org schrieb: > Send cypherpunks mailing list submissions to > cypherpunks(a)cpunks.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://cpunks.org/mailman/listinfo/cypherpunks > or, via email, send a message with subject or body 'help' to > cypherpunks-request(a)cpunks.org > > You can reach the person managing the list at > cypherpunks-owner(a)cpunks.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of cypherpunks digest..." > > > Today's Topics: > > 1. XKeyscore-Quellcode: more english details requested (coderman) > 2. Re: [tor-talk] XKeyscore-Quellcode: more english details > requested (Jacob Appelbaum) > 3. Re: XKeyscore-Quellcode: more english details requested > (Eugen Leitl) > 4. tools used by intelligence analysts (Eugen Leitl) > 5. Re: tools used by intelligence analysts (Griffin Boyce) > 6. Re: Fwd: [tor-talk] according to leaked XKeyScore source NSA > marks all Tor users as extremists, puts them on a surveillance > list (Seth) > 7. NSA targets the privacy-conscious (Eugen Leitl) > 8. Re: [tor-talk] Tor Exit Operator convicted in Austrian lower > court (Zenaan Harkness) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 3 Jul 2014 04:35:09 -0700 > From: coderman <coderman(a)gmail.com> > To: cpunks <cypherpunks(a)cpunks.org>, tor-talk(a)lists.torproject.org > Subject: XKeyscore-Quellcode: more english details requested > Message-ID: > <CAJVRA1SnFGvCc38Mfma0Se8gkdJUaDLHrHxTfU1VLQC4xLCbMw(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > request for more (english speaking) details on QUELLCODE part of XKeyScore(XKS) > > http://www.bild.de/politik/ausland/nsa/us-geheimdienst-spionierte-deutschen… > > specifically subsequent tasking associated with selected anonyms... > > > ------------------------------ > > Message: 2 > Date: Thu, 3 Jul 2014 12:01:15 +0000 > From: Jacob Appelbaum <jacob(a)appelbaum.net> > To: tor-talk(a)lists.torproject.org > Cc: cpunks <cypherpunks(a)cpunks.org> > Subject: Re: [tor-talk] XKeyscore-Quellcode: more english details > requested > Message-ID: > <CAFggDF0sbtjRnOzM7tyYn8Ks+z5GhdaXUs-7hZsNRqqU1EZJEQ(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Hi, > > On 7/3/14, coderman <coderman(a)gmail.com> wrote: >> request for more (english speaking) details on QUELLCODE part of >> XKeyScore(XKS) >> >> http://www.bild.de/politik/ausland/nsa/us-geheimdienst-spionierte-deutschen… >> >> specifically subsequent tasking associated with selected anonyms... >> -- > More information will be published shortly, including a long technical > English story with source code and a video this evening on German TV. > > Here are the first bits of our story: > > http://www.tagesschau.de/inland/nsa-xkeyscore-100.html > http://www.daserste.de/information/politik-weltgeschehen/morgenmagazin/poli… > http://daserste.ndr.de/panorama/archiv/2014/Quellcode-entschluesselt-Beweis… > > Stay tuned for the next two publications which will happen in the next > twelve hours. > > All the best, > Jacob > > > ------------------------------ > > Message: 3 > Date: Thu, 3 Jul 2014 14:46:48 +0200 > From: Eugen Leitl <eugen(a)leitl.org> > To: cypherpunks(a)cpunks.org > Subject: Re: XKeyscore-Quellcode: more english details requested > Message-ID: <20140703124648.GG26986(a)leitl.org> > Content-Type: text/plain; charset=us-ascii > > On Thu, Jul 03, 2014 at 04:35:09AM -0700, coderman wrote: >> request for more (english speaking) details on QUELLCODE part of XKeyScore(XKS) >> >> http://www.bild.de/politik/ausland/nsa/us-geheimdienst-spionierte-deutschen… >> >> specifically subsequent tasking associated with selected anonyms... > According to fefe who's seen the source it's just a selector > http://blog.fefe.de/?ts=ad4bdd72 > > > ------------------------------ > > Message: 4 > Date: Thu, 3 Jul 2014 15:16:13 +0200 > From: Eugen Leitl <eugen(a)leitl.org> > To: cypherpunks(a)cpunks.org > Subject: tools used by intelligence analysts > Message-ID: <20140703131613.GJ26986(a)leitl.org> > Content-Type: text/plain; charset=us-ascii > > > *ORA for network analysis http://www.casos.cs.cmu.edu/projects/ora/ > Pentaho for data transformation http://www.pentaho.com/ > Rapid Miner for data mining http://sourceforge.net/projects/rapidminer/ > Orange for data visualisations and analysis http://orange.biolab.si/ > Maltego for the analysis of networks between people, companies, websites, etc. http://www.paterva.com/web6/products/maltego.php > Apache Hadoop for large-scale, distributed computing and analysis > > Axis Pro http://www.textronsystems.com/products/advanced-information/axis-pro > Starlight http://starlight.pnnl.gov/ > Analyst's Notebook http://www-03.ibm.com/software/products/en/analysts-notebook-family > Palantir http://www.palantir.com/products/ > > XPLR witk Reddit plugin https://pay.reddit.com/r/TheoryOfReddit/comments/1um89b/preddit_a_subreddit… > Tiny Tiny Rss http://tt-rss.org/redmine/projects/tt-rss/wiki > Pligg http://pligg.com/ > Twitter, Reddit, ... > > ARC GIS > CPOF http://en.wikipedia.org/wiki/Command_Post_of_the_Future > > Metasploit > > Oryon http://sourceforge.net/projects/oryon/ (?) > Investigative Dashboard https://investigativedashboard.org/ (?) > > > ------------------------------ > > Message: 5 > Date: Thu, 03 Jul 2014 09:56:07 -0400 > From: Griffin Boyce <griffin(a)cryptolab.net> > To: cypherpunks(a)cpunks.org > Subject: Re: tools used by intelligence analysts > Message-ID: <26ebfd1e9a4edd4756866edf60622452(a)cryptolab.net> > Content-Type: text/plain; charset=UTF-8; format=flowed > > This is very useful, thanks for sharing. I'd also add MATLAB to the > list of tools used -- keep in mind that "intelligence analyst" is > extremely broad as a descriptor. Some of these people are low-level > ex-military 35F types, some have a classical statistics research > background, some are social scientists, some are dataviz experts, some > are linguists. So try to distinguish between these and offer sources > when you can. > > Oh, and Cellebrite devices for mobile data collection. > > best, > Griffin > > > On 2014-07-03 09:16, Eugen Leitl `wrote: >> *ORA for network analysis http://www.casos.cs.cmu.edu/projects/ora/ >> Pentaho for data transformation http://www.pentaho.com/ >> Rapid Miner for data mining http://sourceforge.net/projects/rapidminer/ >> Orange for data visualisations and analysis http://orange.biolab.si/ >> Maltego for the analysis of networks between people, companies, >> websites, etc. http://www.paterva.com/web6/products/maltego.php >> Apache Hadoop for large-scale, distributed computing and analysis >> >> Axis Pro >> http://www.textronsystems.com/products/advanced-information/axis-pro >> Starlight http://starlight.pnnl.gov/ >> Analyst's Notebook >> http://www-03.ibm.com/software/products/en/analysts-notebook-family >> Palantir http://www.palantir.com/products/ >> >> XPLR witk Reddit plugin >> https://pay.reddit.com/r/TheoryOfReddit/comments/1um89b/preddit_a_subreddit… >> Tiny Tiny Rss http://tt-rss.org/redmine/projects/tt-rss/wiki >> Pligg http://pligg.com/ >> Twitter, Reddit, ... >> >> ARC GIS >> CPOF http://en.wikipedia.org/wiki/Command_Post_of_the_Future >> >> Metasploit >> >> Oryon http://sourceforge.net/projects/oryon/ (?) >> Investigative Dashboard https://investigativedashboard.org/ (?) > > ------------------------------ > > Message: 6 > Date: Thu, 03 Jul 2014 08:26:37 -0700 > From: Seth <list(a)sysfu.com> > To: cpunks <cypherpunks(a)cpunks.org>, coderman <coderman(a)gmail.com> > Subject: Re: Fwd: [tor-talk] according to leaked XKeyScore source NSA > marks all Tor users as extremists, puts them on a surveillance list > Message-ID: <op.xifg6nx1bgbjo9(a)work-pc.lan> > Content-Type: text/plain; charset="iso-8859-15"; delsp="yes"; > format="flowed" > > On Thu, 03 Jul 2014 04:11:45 -0700, coderman <coderman(a)gmail.com> wrote: > >> Subject: [tor-talk] according to leaked XKeyScore source NSA marks all >> Tor users as extremists, puts them on a surveillance list > I use Tor for just about all my daily web browsing. > > I also run a Tor relay from home. Even run my own mail server, XMPP and > Friendica nodes from home. > > Guess that makes me an ultra-extremist. > > The irony? I only decided to start using Tor by default for everything > once I became aware of the near total nature of passive surveillance. > > So if using Tor makes me an 'extremist' well, please accept this heartfelt; > _ _____ _____ _ __ __ ____ __ ____ _ _ > _____ _ _ _____ > | | |_ _/ ____| |/ / | \/ \ \ / / | _ \ /\ | | | | / > ____| | \ | |/ ____| /\ > | | | || | | ' / | \ / |\ \_/ / | |_) | / \ | | | | | > (___ | \| | (___ / \ > | | | || | | < | |\/| | \ / | _ < / /\ \ | | | | > \___ \ | . ` |\___ \ / /\ \ > | |____ _| || |____| . \ | | | | | | | |_) / ____ \| |____| |____ > ____) | | |\ |____) / ____ \ > |______|_____\_____|_|\_\ |_| |_| |_| |____/_/ > \_\______|______|_____/ |_| \_|_____/_/ \_\ > > Really there's nothing to lose at this point by encrypting and anonymizing > every bit that leaves every computer you own. > > If NSA wants to own my devices I'll keep cycling them out on a regular > basis with new and used gear I pay for in cash and pick up in person. > >> Conclusion: the world needs way more extremists. If they want cake, they >> should get it in abundance. > I remember reading somewhere that on any given day in the 'United State' > there are a couple hundred thousand active Tor users. We should add > GnuNET, I2P, CJDNS, CurveCP and many more to that list. > > I am Spartacus!!! https://www.piratenpartei.de/2014/07/03/neuer-piraten-geschaeftsfuehrer-sic… Best regards Pirate Party Germany Cindy

1 0

Re: [tor-talk] Tor Exit Operator convicted in Austrian lower court
by Zenaan Harkness 03 Jul '14

03 Jul '14

(Thread start: https://lists.torproject.org/pipermail/tor-talk/2014-July/033573.html ) On 7/3/14, Anders Andersson <pipatron(a)gmail.com> wrote: > On Thu, Jul 3, 2014 at 5:53 AM, Moritz Bartl <moritz(a)torservers.net> wrote: >> On 07/02/2014 11:00 PM, Anders Andersson wrote: >>> Unfortunately he doesn't seem to want to take this further, so the >>> ruling will stand. It's his choice, but it could be a very bad >>> deterrent to other potential exit node operators in Austria. >> >> We are in contact with William, and quite possibly there is the option >> of following this further with another Austrian operator who >> self-reports himself, with our help. Please everyone give us time to >> look into this together with some lawyers. > > Thank you! That's amazing! I'm quite sure that the support you get > from the Tor community when running an exit node really helps in > giving people the courage to do so. Agreed, great news. In hindsight, it is clear that we as a community have an interest to build a resource of amicus curiae briefs - friend of the court briefs. So PLEASE make moves in the direction of contributing and collecting documents which may be relevant to future cases - at the least a simple collection of legal docs. We have an interest in protecting our free-speech networks (Tor, I2P etc), legally as well as technologically and politically. The Torproject.org website does a good job IMHO of presenting the social case for free-speech networks. No matter the circumstances of a particular case (a particular free speech node operator), we the global free-speech promoting and free-speech facilitating community, have an interest to advise the courts regarding matters of technology and free speech, in order to maximise the sanity of the outcomes brought about by our courts (and yes, another operators courts are as good as mine, in terms of global impact). For example a tor-network node operator charged for actual illegal activity, should not cause legal suppression of free-speech networks in general. To kick things off, here's the gist of what I have in mind (this is in no way directly responsive to the case that started this thread, which I know nothing about): " In this matter an individual has been charged with a [criminal] offence. The case of a matter of an individual committing a proven criminal defamation or incitement must not be used by the court to suppress free speech generally by way of the court's power of judicial sanction. Similarly in this case the [Defendant] was the operator of a 'digital communications facility' which facility was a node in a free-speech network, in particular the [Tor|I2P} free speech network; where the operator is found by this court to have committed unlawful acts, then this court must only target those unlawful acts when it makes its determinations, by way of this court's power of judicial sanction exercised according to law; and this court must not reach beyond those unlawful acts in its determinations/ rulings/ sanctions; if the court exercises its power in reaching beyond those unlawful acts then such exercise of judicial power is likely to undermine confidence in the court by all other operators of the free-speech network and by users of the free speech network. A ruling by this court will be seen by many humans around the world, both operators of free speech nodes in the free speech networks, as well as by users and by potential users of free speech networks around the world. In this case, the rulings of this court are visible globally, and shall be watched by many; there is therefore a great burden upon this court in this case, and this court therefore has a special duty of care when it makes its rulings/ determinations, to be conservative and cautious, in particular regarding any general deterrents this court might ordinarily be minded to create by its rulings which deterrents might unintentionally dampen confidence in this court and/ or confidence in the courts generally to protect our human rights including freedom of communication. This court must be especially careful in its rulings in this matter, since the court is in a position to bring about chilling effects upon the liberties of not only those humans within its immediate jurisdictions, but also upon the broader global community. " (A glosary, localisation, much enhancement and other legal polishing would be required of course, along with subroutined/ separate submissions regarding each relevant law, and regarding each relevant precedent in the jurisdiction in question and/ or in jurisdictions relevant (some cases/precedents are so poignant, so timeless, that they apply all over the world, e.g. the Credit River Decision, as well as the trial of William Penn).) Such advice or briefs to the court are ideally tailored to each particular country/jurisdiction. However, even a brief prepared for some country other than the country at issue, is likely to be useful to those attempting to create a brief for a particular case in another country, and may even be directly useful as a filing in its own right, at least if the language is the same :) Regarding the filing of briefs, we need standing to file; that is, we need an interest in the matter which interest is seen by the court. In some countries particular organisations may be ideal for the filing of such briefs, such as the FSF and EFF (USA) and EFA (Australia). In other countries, if there is no directly applicable organisation, then a "designated representative of the Torproject" who is resident in that country, may have standing to make such a filing. Alternatively, a local human-rights-friendly politician may be amenable to making the filing on behalf of their constituent(s) (that's us). Finally, in general any individual should have standing to make such a filing, since we have an interest in our own human rights - free speech is a fundamental human right - so we should also aim for the preparation and collection of briefs file-able by ourselves. Take notice, we HAVE A DUTY OF CARE to each other, and to the broader community, to contact Torproject and/ or others in this community, if ever we find ourselves in a court case involving the operation of any free speech network node (I2P, Tor, exit or relay), in order that those in the community who have an interest, ie the rest of us (at least those of us in the same country), are given the opportunity to make our interest known to the respective court(s) in that jurisdiction, by way of filing appropriate and standardized briefs. Zenaan

1 0

Re: Fwd: [tor-talk] according to leaked XKeyScore source NSA marks all Tor users as extremists, puts them on a surveillance list
by Seth 03 Jul '14

03 Jul '14

On Thu, 03 Jul 2014 04:11:45 -0700, coderman <coderman(a)gmail.com> wrote: > Subject: [tor-talk] according to leaked XKeyScore source NSA marks all > Tor users as extremists, puts them on a surveillance list I use Tor for just about all my daily web browsing. I also run a Tor relay from home. Even run my own mail server, XMPP and Friendica nodes from home. Guess that makes me an ultra-extremist. The irony? I only decided to start using Tor by default for everything once I became aware of the near total nature of passive surveillance. So if using Tor makes me an 'extremist' well, please accept this heartfelt; _ _____ _____ _ __ __ ____ __ ____ _ _ _____ _ _ _____ | | |_ _/ ____| |/ / | \/ \ \ / / | _ \ /\ | | | | / ____| | \ | |/ ____| /\ | | | || | | ' / | \ / |\ \_/ / | |_) | / \ | | | | | (___ | \| | (___ / \ | | | || | | < | |\/| | \ / | _ < / /\ \ | | | | \___ \ | . ` |\___ \ / /\ \ | |____ _| || |____| . \ | | | | | | | |_) / ____ \| |____| |____ ____) | | |\ |____) / ____ \ |______|_____\_____|_|\_\ |_| |_| |_| |____/_/ \_\______|______|_____/ |_| \_|_____/_/ \_\ Really there's nothing to lose at this point by encrypting and anonymizing every bit that leaves every computer you own. If NSA wants to own my devices I'll keep cycling them out on a regular basis with new and used gear I pay for in cash and pick up in person. > Conclusion: the world needs way more extremists. If they want cake, they > should get it in abundance. I remember reading somewhere that on any given day in the 'United State' there are a couple hundred thousand active Tor users. We should add GnuNET, I2P, CJDNS, CurveCP and many more to that list. I am Spartacus!!! -- Seth I <3 nicely trimmed email replies

1 0

XKeyscore-Quellcode: more english details requested
by coderman 03 Jul '14

03 Jul '14

request for more (english speaking) details on QUELLCODE part of XKeyScore(XKS) http://www.bild.de/politik/ausland/nsa/us-geheimdienst-spionierte-deutschen… specifically subsequent tasking associated with selected anonyms...

3 2

Fwd: [tor-talk] according to leaked XKeyScore source NSA marks all Tor users as extremists, puts them on a surveillance list
by coderman 03 Jul '14

03 Jul '14

---------- Forwarded message ---------- From: Eugen Leitl <eugen(a)leitl.org> Date: Thu, Jul 3, 2014 at 2:42 AM Subject: [tor-talk] according to leaked XKeyScore source NSA marks all Tor users as extremists, puts them on a surveillance list http://www.heise.de/newsticker/meldung/XKeyscore-Quellcode-Tor-Nutzer-werde… </kraut> All accesses (several 100 k/day) to Tor directory authorities (at least some IPs hardcoded, Sebastian Hahn one of the targets) intercepted and logged, Tor users are considered extremists (hello, self-fullfilling prophecy at work here, no doubt intended for further justify operation budgets) according to comments in the source and shortlisted for further surveillance (email intercept explicitly mentioned) and attempted deanonymization. Conclusion: the world needs way more extremists. If they want cake, they should get it in abundance. Further suggestion: we need an online database to deanonymize intelligence operatives. We need their faces, their license plates, their home addresses, and any dirt you can get on them. Name them, and shame them.

1 0

REVERSE ENGINEERING NSA SPY ‘RETRO REFLECTOR’ GADGETS WITH THE HACKRF
by Eugen Leitl 03 Jul '14

03 Jul '14

http://www.rtl-sdr.com/reverse-engineering-nsa-spy-retro-reflector-gadgets-… REVERSE ENGINEERING NSA SPY ‘RETRO REFLECTOR’ GADGETS WITH THE HACKRF In 2013 whistleblower Edward Snowden leaked (along with other documents) some information about the American National Security Agencies (NSA) spy tools. One such group of tools named ‘retro reflectors’ has recently been investigated and reverse engineered by Micheal Ossmann, the security researcher behind the recently available for preorder HackRF software defined radio. The HackRF is a SDR similar to the RTL-SDR, but with better performance and transmit capabilities. Newscientist Magazine has written an article about Ossmann’s work here. From their article a retro reflectors are described in the following quote. One reflector, which the NSA called Ragemaster, can be fixed to a computer’s monitor cable to pick up on-screen images. Another, Surlyspawn, sits on the keyboard cable and harvests keystrokes. After a lot of trial and error, Ossmann found these bugs can be remarkably simple devices – little more than a tiny transistor and a 2-centimetre-long wire acting as an antenna. The HackRF comes in to play in the following quote Ossmann found that using the radio [HackRF] to emit a high-power radar signal causes a reflector to wirelessly transmit the data from keystrokes, say, to an attacker. The set-up is akin to a large-scale RFID- chip system. Since the signals returned from the reflectors are noisy and often scattered across different bands, SDR’s versatility is handy, says Robin Heydon at Cambridge Silicon Radio in the UK. Ossmann will present his work at this years Defcon conference in August.

2 1

PayPal and Proton Mail
by Jerry 03 Jul '14

03 Jul '14

Paypal Freezes $275K fundraiser for encrypted mail startup; not sure if encryption is legal. http://www.dailydot.com/politics/paypal-protonmail-freeze/ https://protonmail.ch/

5 6

The next gen P2P secure email solution [paypal/protonmail]
by grarpamp 03 Jul '14

03 Jul '14

On Wed, Jul 2, 2014 at 7:22 PM, rysiek wrote: > Dnia wtorek, 1 lipca 2014 22:20:44 grarpamp pisze: >> I'd rather fund something like... >> "The next gen P2P secure email solution" [1] > You mean like RetroShare? http://retroshare.sourceforge.net/ http://en.wikipedia.org/wiki/Retroshare RetroShare seems geared more to private groups of users doing a variety of things, even if that rides among a larger set of peers. So maybe not designed/optimized for global message delivery at huge scale? I generally meant something similar to what's in the prior thread having this subject [1]. Using completely new/different technology than old email as we know it today (with the exception of your MUA tools that you might still plug into the new tech). RetroShare would qualify as new tech to consider and work forward with, as would any of these and friends... http://en.wikipedia.org/wiki/Bitmessage http://i2pbote.i2p.us/ http://en.wikipedia.org/wiki/I2P#E-mail http://en.wikipedia.org/wiki/TorChat https://freenetproject.org/freemail.html http://dee.su/cables https://github.com/ricochet-im/ricochet https://pond.imperialviolet.org/ ...

1 0

Tor
by Juan 02 Jul '14

02 Jul '14

The tor 'anonimity' network is a project of the US military. As such, it must serve the ends of the US military. If the alleged ends of the tor project do not match the ends of the US military, the alleged tor ends are just a cover lie, or a lame half-truth at best. The real ends of the US military, are, of course, not 'officially' acknowledged though they are widely known, even among half-educated observers. The US military is the biggest criminal organization on the planet and its real purpose is to further the global interests of the US government and US fascist business. To do this they routinely invade countries and murder millions of people. Bear in mind the moral outlook of these people when analyzing their actions. Would the US military create an anonimity network that they can't subvert? Of course not. The tor network can prevent ordinary users A and B from learning their respective locations, but if a third party C (say, US government) can monitor A's and B's traffic, it can 'deanonimize' them. As a side note, tor can be and is routinely blocked, rendering it rather useless. In cases where tor could make people anonymous, at least from the point of view of servers like, say, IRC servers , access is blocked by the servers operators. So much for 'free speech'. Suming up, the first objective of the tor network is to give a 'gratis' and subverted 'tool' to...targets of government surveillance. Pure altruism. Another objective of the tor network is to get around the blocking system of, say, the chinese network. Since china is firewalled, the US military can't easily spy on chinese people. So, what the tor employees (accomplices of the fascist US governemnt) do is 1) pretend that they 'fight' for ' free speech' in china 2) gather information about people in china who, by using tor, signal that they are potentially 'interesting' to the US military. Again, the 'official' motives and the real motives do not match, ------------- So far, I got this far =P - Ill add more stuff later ....

11 18