- cypherpunks - lists.cpunks.org

[liberationtech] Nsa-observer: organising nsa leaks by attack vector
by Todd Weiler 29 Jun '14

29 Jun '14

A brilliant site was quietly launched a while back: https://www.nsa-observer.net/ It classifies the recent NSA revelations by Programs, Attack Vectors, and Compartments, even providing the database in JSON format. The dataset could feed some interesting research. Cordially, Todd -- Liberationtech is public & archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password by emailing moderator at companys(a)stanford.edu.

3 2

Re: Jabber
by John Young 29 Jun '14

29 Jun '14

At 10:20 AM 6/29/2014, you wrote: >any add. info on 'compromised jabber'? >Got some hints as well - nothing clear. "Compromised" is the time's opportunistic word for ever more anti-NSA comsec, mom. Cisco Jabber Client (scroll down): http://www.dailykos.com/story/2014/04/11/1291357/-NSA-Kept-You-Unsecure-It-… " Linked In Microsoft Office + Jabber Listed in Spy Program Specialty" (scroll down) https://www.techdirt.com/articles/20130617/13482623512/discovering-names-se… US Secret Service reportedly rigged access to Jabber to take down Silk Road and others. Can't find reference. Allegations also made against Chaos Computer Club being "compromised." No question that all these could be disinfo ops to distrust the services, discourage use and drive users to less trustworthy servcies. However, the post-Snowden rise in "secure drop boxes," "NSA-proof email," and the bountiful other snake oils by the comsec industry and peculiarly opportunistic do-gooders suggests there are willing and unwilling cooperators with the spooks industry, and not least, the thriving anti-spooks industry consulting the spooks on what can be done "without harming national security." Cypherpunks laid the foundation for this, no question, and a few have gone on to do rather well at working both sides of comsec, that is what comsec has always been: duplicitous, sneaky, treacherous, lying, cheating, why not tell it snakily, downright upright-humans raping the planet and beyond the blob, the stars. Examine speaker bureau offerings for who is traveling the blob peddling prime snake fracking.

1 0

readysim prepaid gsm - privacy focused marketing?
by grarpamp 28 Jun '14

28 Jun '14

A curious positioning among phone providers... https://www.readysim.com/who-its-for.html https://www.torproject.org/about/torusers.html.en http://arstechnica.com/business/2013/03/ready-sim-offers-cheap-short-term-a…

3 2

What do you think about it: <<www.unseen.is>> - a service that provides privacy and security for messaging, email and calling
by Александр 27 Jun '14

27 Jun '14

2 1

Research into Law Enforcement surveillance technology
by Morgan Mayhem 26 Jun '14

26 Jun '14

Recently released research on software used by police / intelligence agencies for mobile phone surveillance: https://citizenlab.org/2014/06/backdoor-hacking-teams-tradecraft-android-im… . The piece in Wired piece covering this was particularly well done: http://www.wired.com/2014/06/remote-control-system-phone-surveillance/ Also worth a glance: Associated Press: http://bigstory.ap.org/article/eyes-you-experts-reveal-police-hacking-metho… VICE: http://motherboard.vice.com/read/police-grade-mobile-spyware-is-spreading-t… International Business Times: http://www.ibtimes.co.uk/hacking-team-tools-allow-governments-take-full-con… -- Seek not the favor of the multitude; it is seldom got by honest and lawful means. But seek the testimony of few; and number not voices, but weigh them

1 0

why do you sign your mails?
by stef 26 Jun '14

26 Jun '14

i noticed lots of users pgp-sign their mails to mailing-lists. what exactly is the reason/usecase/attackvector you defend against for that? what exactly is the reason for doing so on public mailing lists? and why does it make sense to sign irrelevant messages like "+1" or "just kidding" - assuming no stego usecase is in play. -- otr fp: https://www.ctrlc.hu/~stef/otr.txt

5 6

List of digital currencies?
by grarpamp 25 Jun '14

25 Jun '14

Any links to a list of digital currencies organized by technology? ie: Bitcoin has countless forks characterized by nothing more than adjusting (or not) the operating parameters of the bitcoin.org code and starting their own genesis. Others may swap out the hash or crypto functions within that. While useful to list them all under the aforesaid parent technology 'Bitcoin', they are all ultimately uninteresting and a waste of time to research. A real list would group all the digital currencies by genuine differences in architecture... those archs thus resulting in their suitability to different applications, capabilities to anonymity, features for centralization/regulation, etc. So now you might have Bitcoin Paypal, Linden Some other various coin designs Currencies that pass serialized 'banknotes' around

4 3

[OT] Libreoffice's VBA and cross platform virii
by Georgi Guninski 25 Jun '14

25 Jun '14

http://lwn.net/headlines/newrss Ubuntu has updated libreoffice (14.04 LTS: unexpected VBA macro execution) They might make client virii cross platform, the way java is screwing people.

1 0

Keybase.io
by MrBiTs 25 Jun '14

25 Jun '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hello, guys Keybase.io seems to be a great tool to create a true WoT. Are anybody in there? They are working with invitations. CheerS - -- echo 920680245503158263821824753325972325831728150312428342077412537729420364909318736253880971145983128276953696631956862757408858710644955909208239222408534030331747172248238293509539472164571738870818862971439246497991147436431430964603600458631758354381402352368220521740203494788796697543569807851284795072334480481413675418412856581412376640379241258356436205061541557366641602992820546646995466P | dc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJTpFtOAAoJEG7IGPwrPKWrrmgIAJe2oyJodQtlMmi4cNZ/tCXq vGLnzkOos4PZYiIxM8Vx/gb5LaYZnK30tJ9eXkiUBw9d0OVdMLnBSCDvlPLiGOL0 gww+vzv8Ys005rdK8wfEs5BwZxRJUbA6yQ4BGPsmoWfO8ceUodzwmKi861dwe8sY CRqtHPsLEULO0ChSmNOL+nSDhZITTpFmK27Nu3/3BMxImDb0iCktJ/JGeRnId4pm lmiVgPkJMUlT2c18EZRZuqf3oMNBoN9ce1e5Mbfun+STd33d5/5yxpiPfAnxmtSn rWEY4C+6c8fh/Nf5MvX4nGZlbejBxeCdZUqIIv3ZPIxAaVhCnbnLfrWXp3qRN8g= =s7LH -----END PGP SIGNATURE-----

11 16

NSA aims for absolute surveillance
by grarpamp 25 Jun '14

25 Jun '14

https://www.youtube.com/watch?v=FScSpFZjFf0

1 0