- cypherpunks - lists.cpunks.org

[OT] Libreoffice's VBA and cross platform virii
by Georgi Guninski 25 Jun '14

25 Jun '14

http://lwn.net/headlines/newrss Ubuntu has updated libreoffice (14.04 LTS: unexpected VBA macro execution) They might make client virii cross platform, the way java is screwing people.

1 0

Keybase.io
by MrBiTs 25 Jun '14

25 Jun '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hello, guys Keybase.io seems to be a great tool to create a true WoT. Are anybody in there? They are working with invitations. CheerS - -- echo 920680245503158263821824753325972325831728150312428342077412537729420364909318736253880971145983128276953696631956862757408858710644955909208239222408534030331747172248238293509539472164571738870818862971439246497991147436431430964603600458631758354381402352368220521740203494788796697543569807851284795072334480481413675418412856581412376640379241258356436205061541557366641602992820546646995466P | dc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJTpFtOAAoJEG7IGPwrPKWrrmgIAJe2oyJodQtlMmi4cNZ/tCXq vGLnzkOos4PZYiIxM8Vx/gb5LaYZnK30tJ9eXkiUBw9d0OVdMLnBSCDvlPLiGOL0 gww+vzv8Ys005rdK8wfEs5BwZxRJUbA6yQ4BGPsmoWfO8ceUodzwmKi861dwe8sY CRqtHPsLEULO0ChSmNOL+nSDhZITTpFmK27Nu3/3BMxImDb0iCktJ/JGeRnId4pm lmiVgPkJMUlT2c18EZRZuqf3oMNBoN9ce1e5Mbfun+STd33d5/5yxpiPfAnxmtSn rWEY4C+6c8fh/Nf5MvX4nGZlbejBxeCdZUqIIv3ZPIxAaVhCnbnLfrWXp3qRN8g= =s7LH -----END PGP SIGNATURE-----

11 16

NSA aims for absolute surveillance
by grarpamp 25 Jun '14

25 Jun '14

https://www.youtube.com/watch?v=FScSpFZjFf0

1 0

waͣͣͣͣͣͣͣͣͣͣͣͣͣͣͣͣͣͣͣll-of-sheeͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤͤp iͥͥn theater (zürch, jun26-jul7)
by Nathan Andrew Fain 24 Jun '14

24 Jun '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 http://gessnerallee.ch ("begin statistical purification" on 1st and every 5th load) We(*) are putting together a theater show/installation for Festspiele Zürich at the Gessnerallee theater called Anonymous-P. It's a show between us and the cell phones of the audience. Something between Defcons "Wall-of-Sheep" on steroids as well as a game we developed for profiling between audience members. Over top of it all are 3 actors dealing with the topics of privacy and digital fingerprinting in their own way. http://vimeo.com/99041398 It's either going to be epic or a complete disaster. Test runs have proven interesting. It is strange when an actor pulls you aside to help you change your phone so you stop leaking passwords (which 1 in 10 people do). Or when your interaction with the game has made the conclusion that you are most likely to lie. Or when you have to pay the higher price for a beer that's listed between 2 to 7chf just because the barman thinks you are rich (you have an iPhone or data game determined you make over 5000chf). Come see it if you get a chance or know someone interested. * We: myself, another anonymous coder, Chris Kondek, Christiane Kühl, Phil Hayes, Sonja Füsti, Hannes Strobl -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlOpz7AACgkQveagdEkPM4BYrwCeLU7+hWVAUixZFGtYzYx8PBxv rvQAn2ic2nzWn/YkV+j21aAc9WW33EJn =PJZQ -----END PGP SIGNATURE-----

1 0

[drone-list] WH OLC memo re: targeted killings released
by Gregory Foster 23 Jun '14

23 Jun '14

Ars Technica (Jun 23) - '"Civilian casualties" authorized under secret US drone-strike memo': http://arstechnica.com/tech-policy/2014/06/civilian-casualties-authorized-u… > A secret Obama administration memo disclosed Monday outlines the legal justification for the government's drone-targeted killing program, a lethal strategy that authorizes the killing of innocents as collateral damage. US Court of Appeals for the Second Circuit (Jun 23) - "NYT v. United States": http://pdfserver.amlaw.com/nlj/usca2-olc-memo-6232014.pdf OLC memo begins on page 67. gf -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/ -- Want to unsubscribe? Want to receive a weekly digest instead of daily emails? Change your preferences: https://mailman.stanford.edu/mailman/listinfo/drone-list or email companys(a)stanford.edu

1 0

Stealthy Dopant-Level Hardware Trojans
by Eugen Leitl 23 Jun '14

23 Jun '14

http://people.umass.edu/gbecker/BeckerChes13.pdf Stealthy Dopant-Level Hardware Trojans ? Georg T. Becker1 , Francesco Regazzoni2 , Christof Paar1,3 , and Wayne P. Burleson1 1University of Massachusetts Amherst, USA 2TU Delft, The Netherlands and ALaRI - University of Lugano, Switzerland 3Horst ortz Institut for IT-Security, Ruhr-Universiat Bochum, Germany Abstract. In recent years, hardware Trojans have drawn the attention of governments and industry as well as the scientific community. One of the main concerns is that integrated circuits, e.g., for military or critical infrastructure applications, could be maliciously manipulated during the manufacturing process, which often takes place abroad. However, since there have been no reported hardware Trojans in practice yet, little is known about how such a Trojan would look like, and how dicult it would be in practice to implement one. In this paper we propose an extremely stealthy approach for implementing hardware Trojans below the gate level, and we evaluate their impact on the security of the target device. Instead of adding additional circuitry to the target design, we insert our hardware Trojans by changing the dopant polarity of existing transistors. Since the modified circuit appears legitimate on all wiring layers (including all metal and polysilicon), our family of Trojans is resistant to most detection techniques, including fine-grain optical inspection and checking against "golden chips". We demonstrate the ectiveness of our approach by inserting Trojans into two designs | a digital post-processing derived from Intel's cryptographically secure RNG design used in the Ivy Bridge processors and a side-channel resistant SBox implementation and by exploring their detectability and their ects on security. Keywords: Hardware Trojans, malicious hardware, layout modifications, Trojan side-channel

5 4

Re: Cryptome down
by John Young 23 Jun '14

23 Jun '14

NetSol discovered a single corrupt file, which has been removed. Should be active soon. At 01:06 PM 6/23/2014, you wrote: >Cryptome and the mirror down again. > > >On Wed, Jun 11, 2014 at 11:46 PM, Christian Mayer ><<mailto:thefox21at@gmail.com>thefox21at(a)gmail.com> wrote: >Why was it down? > > >On Thu, Jun 12, 2014 at 12:29 AM, coderman ><<mailto:coderman@gmail.com>coderman(a)gmail.com> wrote: >On Tue, Jun 10, 2014 at 1:52 PM, grarpamp ><<mailto:grarpamp@gmail.com>grarpamp(a)gmail.com> wrote: > > 403: Forbidden > > >it's back now. > >... and for future reference, you may check: ><https://twitter.com/Cryptomeorg>https://twitter.com/Cryptomeorg >http://cryptomeorg.siteprotect.net/ > >

1 0

Cryptome down
by grarpamp 23 Jun '14

23 Jun '14

403: Forbidden This error message is generated when the web server is trying to access a file that does not exist or has been configured incorrectly Troubleshooting suggestions: Ensure that you have a valid home page defined in your website directory (example: /htdocs/index.html, /htdocs/index.php). On Unix, this is case sensitive and must be all lower case. In your Account Manager, under Hosting Tools, click to .Reset File Permissions..

4 4

dm-crypt+LUKS
by Jose Damico 21 Jun '14

21 Jun '14

Hey people, Could you give me your impressions about the use (only in Linux) of dm-crypt + LUKS instead of truecrypt? For me there is no need to use my encrypted disks with OSX or Windows, so, due the last movements of truecrypt, I am planning to move my encrypted disks from truecrypt to dm-crypt + LUKS. Did you see is as a bad decision, in terms of possible flaws in dm-crypt? Best Regards yap

5 4

Hackers reverse-engineer NSA spy kit using off-the-shelf parts
by Georgi Guninski 21 Jun '14

21 Jun '14

http://www.theregister.co.uk/2014/06/19/hackers_reverseengineer_nsa_spying_… Hackers reverse-engineer NSA spy kit using off-the-shelf parts Link to http://www.nsaplayset.org/

3 2