- cypherpunks - lists.cpunks.org

Re: [tor-talk] BitMail.sf.net v 0.6 - Secure Encrypting Email Client
by Ulex Europae 15 Nov '13

15 Nov '13

At 09:04 PM 11/13/2013, grarpamp wrote: >On Tue, Nov 5, 2013 at 2:38 AM, <rwest(a)countermail.com> wrote: > > Hello, > > > > can BitMail.sf.net as a p2p email tool for encrypted Email (and > hybrid with IMAP-Email) be regarded as a reference model for > research to create a secure Email Client? as it uses both, gnupg and openssl! > > > > http://bitmail.sourceforge.net/ > > https://sourceforge.net/projects/bitmail/files/BitMail_0.6_2088RC1/ > > > > Does anyone know, if it runs over Tor? > > > > Sincerely, Robert > >So... 'Robert', who do you work for? NSA? Financial crime? >I mean, with the net moving to encrypt everything >we'd expect to see many new and unknown yet seemingly >polished tools being dropped on unsuspecting first time >users just to collect their key material. >Surely someone will have fun with your windows binaries. Hmm, lots of lists I'm not subscribed to on the To: line, bad juju on someone's part for the initial crosspost. Hopefully, those other list maintainers will see and approve my comment, even though I'm not subscribed to all those other lists: I'm replying because, Sourceforge? They fell out of vogue when they started bundling binary downloads with other executables, they deserve to die a quick death for that as users flock to safer environs. 'Robert' should upload his binaries to Github. Along with his source code. Then, if the MD5 checksum on his compiled binaries matches the MD5 checksum on the source code when it is compiled independently, he's golden. That is how that works, how it is supposed to work. Accept no substitutes. --

1 0

<nettime> Google wins book-scanning case: judge finds “fair use,” cites many benefits
by Felix Stalder 14 Nov '13

14 Nov '13

[I'm somewhat conflicted about this. While I'm generally glad to see fair use expanded, I think the judge misunderstood Google's business model when citing in favor of favor of that Google "does not sell the scans" as evidence of its benign character. They clearly wouldn't do it if they were not convinced that making these books searchable is adding to their bottom-line by refining user profiles. Felix] http://gigaom.com/2013/11/14/google-wins-book-scanning-case-judge-finds-fai… Google wins book-scanning case: judge finds “fair use,” cites many benefits By Jeff John Roberts The long-running copyright fight between Google and the Authors Guild is over: Judge Denny Chin issued a resounding ruling in favor of fair use. tweet this Google has won a resounding victory in its eight-year copyright battle with the Authors Guild over the search giant’s controversial decision to scan more than 20 million books from libraries and make them available on the internet. In a ruling (embedded below) issued Thursday morning in New York, US Circuit Judge Denny Chin said the book scanning amounted to fair use because it was “highly transformative” and because it didn’t harm the market for the original work. “Google Books provides significant public benefits,” Chin wrote, describing it as “an essential research tool” and noting that the scanning service has expanded literary access for the blind and helped preserve the text of old books from physical decay. Chin also rejected the theory that Google was depriving authors of income, noting that the company does not sell the scans or make whole copies of books available. He concluded, instead, that Google Books served to help readers discover new books and amounted to “new income from authors.” The ruling is being hailed on Twitter by librarians and scholars, who intervened in the case to urge the court to declare that Google Books was fair use — a four-part test that seeks to balance the rights of authors against broader interests of society. “This has been a long road and we are absolutely delighted with today’s judgement. As we have long said Google Books is in compliance with copyright law and acts like a card catalog for the digital age – giving users the ability to find books to buy or borrow,” Google said in an emailed statement. Author’s Guild Executive Director Paul Aiken said by email that the group would appeal the decision. He added: “We disagree with and are disappointed by the court’s decision today. This case presents a fundamental challenge to copyright that merits review by a higher court. Google made unauthorized digital editions of nearly all of the world’s valuable copyright-protected literature and profits from displaying those works. In our view, such mass digitization and exploitation far exceeds the bounds of the fair use defense.” The decision itself comes as a volte-face for Judge Chin, who expressed major skepticism about the project in a highly-publicized 2010 ruling that blew up a three-part deal between Google, publishers and the Authors Guild that would have created a market for the scanned books. Chin also agreed last year to allow the cases to proceed as a class action — but the U.S. Second Circuit Court of Appeals reversed that decision and ordered Chin to instead rule on the fair use question. Thursday’s ruling is effectively an acknowledgment by Chin that the higher court (on which he now sits) wanted him to find fair use. The ruling is unlikely to sit well with some authors, including Scott Turow, who have decried Google’s scanning as an indignity and a money grab. The latter idea — that Google is profiting off the books at the expense of authors — has been a rallying cry for opponents of the book scanning. Chin’s ruling, however, takes care to reject the notion in detail, and states that Google “does not engage in the direct commercialization of copyrighted works.” <...> Chin’s ruling is also likely to be decisive in a companion case between the Authors Guild and the HathiTrust, a group of university libraries that have created a shared corpus of digital books for scholars and students. The HathiTrust case is on appeal, but the group’s victory at the lower court stage may have paved the way for today’s decision: The HathiTrust case really clinched this. "If there is no liability… on the libraries' part, there can be no liability on Google's part."— Tim Carmody (@tcarmody) November 14, 2013 The ruling is below with key portions underlined. For more perspective, see Mathew Ingram’s “Whatever you think of Google, the book-scanning decision is the right one.” (For more background, see my ebook The Battle for the Books: Inside Google’s Gambit to Create the World’s Biggest Library.) -- ||||||||||||||||||||||||||||||||| http://felix.openflows.com |OPEN PGP: 056C E7D3 9B25 CAE1 336D 6D2F 0BBB 5B95 0C9F F2AC # distributed via <nettime>: no commercial use without permission # <nettime> is a moderated mailing list for net criticism, # collaborative text filtering and cultural politics of the nets # more info: http://mx.kein.org/mailman/listinfo/nettime-l # archive: http://www.nettime.org contact: nettime(a)kein.org

1 0

superconductivity (urls)
by brian carroll 14 Nov '13

14 Nov '13

// what about indoor light pollution from little LEDs on various equipment // that create an ambient glow everywhere. dark skies initiative for indoors! Computers and phones in children's bedrooms 'can cause anxiety and sleep loss' (via drudgereport) http://www.telegraph.co.uk/education/educationnews/10448123/Computers-and-p… "The paper’s lead author, psychologist Dr Jennifer Vriend, of Dalhousie University in Canada, said: “One of the biggest culprits for inadequate and disturbed sleep is technology. " Dark-sky movement http://en.wikipedia.org/wiki/Dark-sky_movement // presumably like dams, wave power could also have ecosystem // consequences for marine life, likewise underwater comms, sonar // as potentially related to mass beachings of whales, dolphins, etc. Solar Panels Frying Birds Along Major Migration Path (via drudge) http://www.breitbart.com/Big-Government/2013/11/12/Oops-Solar-Energy-Plants… [Birds dying in two ways... crashing into mirage-like 'areas of water' and having feathers torched via reflected sunlight] Accidental discovery dramatically improves electrical conductivity http://phys.org/news/2013-11-accidental-discovery-electrical.html "Quite by accident, Washington State University researchers have achieved a 400-fold increase in the electrical conductivity of a crystal simply by exposing it to light. The effect, which lasted for days after the light was turned off, could dramatically improve the performance of devices like computer chips." ... re: holographic memory, data storage inside crystal vs. on surface [&] Electrons with a "split personality" // anisotropy, metal, & lifetimes http://phys.org/news/2013-11-electrons-personality.html "Conventional or unconventional – depending on momentum" " Up until now, the interaction of the electrons has generally been assumed to be isotropic. " "In terms of electrons, resistivity corresponds to the mean free path of the electrons, i.e. the distance an average electron covers before bumping into something – the shorter the mean free path, the higher the resistivity. Generally, the higher the temperature the higher the resistivity because the particles the electrons can collide with are moving faster at higher temperatures which makes collisions more likely." {what is metal} // amateur astronomy is in need of a massive technological upgrade, // this tied to light pollution, environmental & urban planning issues. How a Superconducting Camera Could Revolutionize Astrophysics http://gizmodo.com/how-a-superconducting-camera-could-revolutionize-astrop-… film --> semiconductors --> hyperspectral superconductors "Mazin's imaging device... dubbed the ARray Camera for Optical to Near-infrared (IR) Spectrophotometry (ARCONS), sees all of the wavelengths all of the times. It is literally the first imaging device to ever actually see in color. It is also the first imaging device to utilize Microwave Kinetic Inductance Detectors (MKIDs), a superconducting photon detector used to measure energy across the electromagnetic spectrum." [also waiting for this tech in consumer digital & video cameras, going beyond visual parameters, using IR and UV imaging vs. stylized filters- why not multispectral wavelength options. hell, what if there was an 'electromagnetic signals' setting, to visualize EM signaling in space as if kirlian photography] Evelyn Glennie: How to truly listen (video) http://www.ted.com/talks/evelyn_glennie_shows_how_to_listen.html description: In this soaring demonstration, deaf percussionist Evelyn Glennie illustrates how listening to music involves much more than simply letting sound waves hit your eardrums. "... Allow your body is open up, to allow your body to be this resonating chamber..." "... please take note of the life of the sound after the initial strike..." [bio] Evelyn Glennie http://en.wikipedia.org/wiki/Evelyn_Glennie // in approaching music independently i enjoyed this documentary a lot. // her approach is unique, educational, instructive, and inspirational... // about tuning into events, learning to ~listen with all the senses Touch the Sound documentary http://www.touch-the-sound.com/ Battle Cry -- from the album: Shadow Behind The Iron Sun https://myspace.com/variousartists-45950709/music/song/battle-cry-28420027-… // if only geometry could be taught through these techniques, // including origami tesslations, platonic solids, into music... The Handheld Mathematics of Geometer Ron Resch (video) http://gizmodo.com/the-handheld-mathematics-of-geometer-ron-resch-1463859152 "testing out posed solutions..." [bio] http://en.wikipedia.org/wiki/Ron_Resch note: the expandable structures seem ideal both for satellite or spacecraft and also lunar habits or robotic missions, such as a small format expandable base camp tent, etc. likewise, emergency tents or shelters, perhaps even windtunnel testing of the dome to consider if anchored structures could short-circuit hurricane winds via acting more like ground vs walls; for instance, with certain hi-tech fabrics perhaps flexibility and deformity is a strength. also, potential antennas, collapsible or not, or even portable radio telescope/telemetry arrays. how to fix any computer - The Oatmeal http://theoatmeal.com/blog/fix_computer ∰ ≉ ⊊

1 0

[IP] My blog today on "Permissionless Innovation"
by Eugen Leitl 14 Nov '13

14 Nov '13

----- Forwarded message from Dave Farber <dave(a)farber.net> ----- Date: Thu, 14 Nov 2013 11:28:48 -0500 From: Dave Farber <dave(a)farber.net> To: ip <ip(a)listbox.com> Subject: [IP] My blog today on "Permissionless Innovation" Message-ID: <CAKx4triMv4zeA6mV_POaLfyosZk_1qumW7m+=1Fw37zVs9mC_A(a)mail.gmail.com> Reply-To: dave(a)farber.net ---------- Forwarded message ---------- From: *Young, David E* Date: Thursday, November 14, 2013 Subject: My blog today on "Permissionless Innovation" To: "Dave Farber (dave(a)farber.net)" <dave(a)farber.net> Dave, Perhaps of interest… http://publicpolicy.verizon.com/blog/entry/permissionless-innovation-on-the… Permissionless Innovation On the Internet *David Young <http://publicpolicy.verizon.com/experts/david-young>* Nov 14 | David Young <http://publicpolicy.verizon.com/experts/david-young> In a story posted yesterday – A Remedy to Clueless Tech Lawyers<http://venturebeat.com/2013/11/13/a-remedy-to-clueless-tech-lawyers/>– my old friend Jonathan Askin describes some work he did as a young lawyer for another good friend of mine, tech innovator Jeff Pulver<https://twitter.com/jeffpulver>. In the mid-90s, Jeff was trying to create a peer-to-peer communications service called Free World Dial-Up (FWD)<https://en.wikipedia.org/wiki/Free_World_Dialup> . Jonathan beats himself up in his essay because, as Jeff’s lawyer (or “wartime consigliere <http://www.fundraisers.com/ideas/charitypoker.html>” as he called himself), he “put the reins on FWD” and advised Jeff to ask the FCC for permission “to launch FWD free of regulatory constraints.” Jonathan rightly understood that the FCC could decide to regulate FWD as a *telephone service*, and sought to protect his client from that risk. “Permissionless Innovation<http://techliberation.com/2013/03/04/who-really-believes-in-permissionless-…>” may be one of the key features of the Internet, but as Jonathan rightly understood, regulated companies and service providers too often have to ask permission from their regulators before innovating, or else face potential consequences. After more than a year, the FCC agreed that FWD was an “information service” not subject to common carrier telephone regulation. Unfortunately for Jeff Pulver, the many months it took to get permission from the FCC allowed a non-US company <http://en.wikipedia.org/wiki/Skype> to innovate freely and capture the market opportunity. In 2013, you may not have ever heard of Free World Dial-Up, but you’ve certainly heard of Skype. In retrospect, perhaps Jonathan would have advised his client to “just do it,” as the delay waiting for permission was indeed a very bad thing for FWD. However, the eventual FCC decision – the “Pulver Order<http://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-04-27A1.pdf/>” - was a critically important precedent. Jeff’s sacrifice helped pave the way for innovators everywhere to offer new services in the US (and we owe him our heartfelt thanks!). As a young phone company engineer trying to get into broadband and VOIP in the 90s, I experienced firsthand the problem of needing regulatory permission to try new, innovative things that don’t fit into the existing regulatory buckets. That is why decisions like the Pulver Order that protect some new services like FWD from common carrier regulation, the “Vonage Order <http://www.techlawjournal.com/topstories/2004/20041109.asp>” protecting VoIP services from state telephone regulators, the FCC actions protecting cable modem broadband service from regulation by 30,000 local franchise authorities <http://www.techlawjournal.com/telecom/19990616.htm>, and the FCC orders confirming that traditional common carriage regulation doesn’t apply to broadband<http://www.techlawjournal.com/topstories/2005/20050805a.asp>services, were so important to enabling innovation without the regulatory overhang that early innovators like Pulver and Askin faced. Permissionless innovation shouldn’t be reserved for just certain types of innovators (like software developers) and not others. Given the dynamism, innovation and competition that are the hallmarks of today’s Internet ecosystem, the ability to innovate without having to seek permission from regulators at every step along the way is critical to the continued success of the Internet, and must be preserved. ------------------------------------------- Archives: https://www.listbox.com/member/archive/247/=now RSS Feed: https://www.listbox.com/member/archive/rss/247/25094221-ddf8422b Powered by Listbox: http://www.listbox.com ----- End forwarded message -----

1 0

(Times of Israel) Stuxnet, gone rogue, hit Russian nuke plant, space station (fwd)
by Tomasz Rola 14 Nov '13

14 Nov '13

Hi, I guess this is news? They say it happened few years ago, but I see it being reported right now. Regards, Tomasz Rola -- ** A C programmer asked whether computer had Buddha's nature. ** ** As the answer, master did "rm -rif" on the programmer's home ** ** directory. And then the C programmer became enlightened... ** ** ** ** Tomasz Rola mailto:tomasz_rola@bigfoot.com ** ---------- Forwarded message ---------- Date: Tue, 12 Nov 2013 20:30:11 +0100 (CET) From: Tomasz Rola <rtomek(a)ceti.pl> To: <info(a)postbiota.org>, Transhuman Tech <tt(a)postbiota.org> Cc: Tomasz Rola <rtomek(a)ceti.pl> Subject: (Times of Israel) Stuxnet, gone rogue, hit Russian nuke plant, space station [ http://www.timesofisrael.com/stuxnet-gone-rogue-hit-russian-nuke-plant-spac… ] (... links deleted all the way down ...) * Tuesday, November 12, 2013 * Kislev 9, 5774 * 12:43 am IST * Site updated 2 minutes ago Stuxnet, gone rogue, hit Russian nuke plant, space station A cyber-security expert says several ostensibly secure facilities became victims of the virus that struck Iran's nuclear program By [30]David Shamah November 11, 2013, 4:21 pm [36]Eugene Kaspersky (Photo credit: Courtesy Tel Aviv University) Eugene Kaspersky (Photo credit: Courtesy Tel Aviv University) A Russian nuclear power plant was reportedly "badly infected" by the rogue Stuxnet virus, the same malware that reportedly disrupted Iran's nuclear program several years ago. The virus then spread to the International Space Station via a Stuxnet-infected USB stick transported by Russian cosmonauts. Speaking to journalists in Canberra, Australia, last week, Eugene Kaspersky, head of the anti-virus and cyber protection firm that bears his name, said he had been tipped off about the damage by a friend who works at the Russian plant. Kaspersky did not say when the attacks took place, but implied that they occurred around the same time the Iranian infection was reported. He also did not comment on the impact of the infections on either the nuclear plant or the space station, but did say that the latter facility had been attacked several times. The revelation came during a question-and-answer period after a presentation on cyber-security. The point, Kaspersky told reporters at Australia's National Press Club last week, was that not being connected to the Internet -- the public web cannot be accessed at either the nuclear plant or on the ISS -- is a guarantee that systems will remain safe. The identity of the entity that released Stuxnet into the "wild" is still unknown (although media speculation insists it was developed by Israel and the United States), but those who think they can control a released virus are mistaken, Kaspersky warned. "What goes around comes around," Kaspersky said. "Everything you do will boomerang." The Stuxnet virus came to light in 2010, having attacked Iranian nuclear facilities by hitting the programmable logic control automation systems that control them. The PLC system, manufactured by German conglomerate Siemens, runs the centrifuges used to enrich uranium at Iran's Natanz facility. Variants of Stuxnet have affected the facility's centrifuges in various ways, mostly by changing the activity of valves controlled by the PLC software that feed the uranium to centrifuges at a specific rate required for enrichment, Kaspersky said in several presentations last year. It's not known when Stuxnet began its activities, but researchers at anti-virus company Symantec said that they had gathered evidence that earlier versions of the code were already seen "in the wild" in 2005, although it wasn't yet operational as a virus. Stuxnet, said Symantec, was the first virus known to attack national infrastructure projects, and according to the company, the groups behind Stuxnet were already seeking to compromise Iran's nuclear program in 2007 -- the year Iran's Natanz nuclear facility, where much of the country's uranium enrichment is taking place, went online. Now that the plague has been unleashed, said Kaspersky, no one is immune -- and that includes its originators, who are no longer in control of it. "There are no borders" in cyberspace, and no one should be surprised at any reports of a virus attack, no matter how ostensibly secure the facility, he said. (... links deleted ...) Š 2013 The Times of Israel, All rights reserved. Concept, design & development by [188]RGB Media Powered by [189]Salamandra Quantcast References (... all deleted, ouch ...)

6 8

re: passwords
by Joseph Tag 14 Nov '13

14 Nov '13

I prefer old liscencd plates; maybe repeated. I.e.: ZIGZAG9NYzigzag9ny . Also zip codes: zip02134ma . -- Sent from Gmail Mobile

2 1

Re: expanded security model (was passwords! (p2) deux)
by brian carroll 14 Nov '13

14 Nov '13

attempt to clarify an overlapping conceptualization........ (pseudo-truth 2 (truth N)) <===> ((pT 2) truth N) [pT <---> T] [pT <---> T] ...these are the more accurate dynamics, though even moreso: (pseudo-truth 2 (truth N)) <===> ((pT 2) truth N) [pT.binary <---> t.N) [pT.binary <---> t.N) skipped a step in the diagram above, meant to correlate how pT & binarism are symbiotic and often correlate with ideology and 'closed' rationalizations, though the original approach referenced 'machine 2' that suddenly morphed into representing a 2-value or binary relation, viz. symmetry with machine N. (such frameworks probably need to be broken down into 2 or 3x more detail to actually get into the mechanisms, so these are only abstract sketches, though could be further described as structures or 'additional variables'...) though the appearance may indicate otherwise, from a biased perspective. > truth would be moving throughout this system, and the emulation of it > {its *mimicking* via pseudo-truth} would likewise be transferred, yet > only one version is accurate at the level of verification as truth, > while the other validates and relies upon its [signage] instead. > this is the fundamental issue of patterns and their connection > with truth, in a security context, as related to "information" > and quasi-entropy, entropy-as-sign and entropy-as-truth. (note: wrote mask for some reason above, i think that was inadvertent bullshit because it makes no sense, stills do not have the words to describe what is going on, abstraction level too high, too confusing the overlapping frameworks of multiple meaning, though wanted to to attempt to make a correction via the diagram that follows..) forgot to diagram the 'information' transfer via the exchange, as the differing models migrate toward their associated models. in this way... (pT 2 (truth N)) <=:=> ((pT 2) truth N) : pT <--------:-------- [pT = pT] : [T = T] --------:--------> T : such that: (pT 2 (truth N)) <=:=> ((pT 2) truth N) : [pT = pT] : [T = T] : -ungrounded- -grounded- relation relation also of potential relevance with regard to information as it relates to entropy, is the proposition that 'truth' precedes falsity and establishes the means to evaluate it. this is something i have concluded after years of thinking about the dynamics though have not formalized it as of yet though it just seems self-evident, especially in terms of the cosmos, everything relates in truth, and the variance within that structure (mutations, anomalies, errors) that is already established in a foundation built within and upon shared truth as framework- literally, ~continuum as truth relates to circuitry, informational scaffolding. this easily gets into Sartre or Heidegger metaphysics, of being and non-being (then related to nothing), as it also involves truth and not-truth in relation to falsity, though this is likewise ambiguous, with /unknowns/ and other fundamental concepts like partial-truth, pseudo-truth (one in the same, in some cases, depending upon if it is distinguished and-or purified as truth, removed of error or structurally reliant upon it for a given view or relation). snooker, eight ball, trickshot

1 0

Re: [tor-talk] BitMail.sf.net v 0.6 - Secure Encrypting Email Client
by grarpamp 14 Nov '13

14 Nov '13

On Tue, Nov 5, 2013 at 2:38 AM, <rwest(a)countermail.com> wrote: > Hello, > > can BitMail.sf.net as a p2p email tool for encrypted Email (and hybrid with IMAP-Email) be regarded as a reference model for research to create a secure Email Client? as it uses both, gnupg and openssl! > > http://bitmail.sourceforge.net/ > https://sourceforge.net/projects/bitmail/files/BitMail_0.6_2088RC1/ > > Does anyone know, if it runs over Tor? > > Sincerely, Robert So... 'Robert', who do you work for? NSA? Financial crime? I mean, with the net moving to encrypt everything we'd expect to see many new and unknown yet seemingly polished tools being dropped on unsuspecting first time users just to collect their key material. Surely someone will have fun with your windows binaries.

1 0

Re: Brazil and Germany issue joint UN resolution on Digital Privacy
by John Young 14 Nov '13

14 Nov '13

Yes: http://cryptome.org/2013/11/br-de-dig-priv.pdf

1 0

Brazil and Germany issue joint UN resolution on Digital Privacy
by Griffin Boyce 14 Nov '13

14 Nov '13

In it, they state that they are "deeply concerned" at human rights violations resulting from digital surveillance and the overall trend away from privacy. It's a great read, and I *highly* recommend sharing it with your friends. http://daccess-dds-ny.un.org/doc/UNDOC/GEN/N13/544/07/PDF/N1354407.pdf best, Griffin (please excuse double post, if any) -- Be kind, for everyone you meet is fighting a hard battle. PGP: 0xD9D4CADEE3B67E7AB2C05717E331FD29AE792C97 OTR: saint(a)jabber.ccc.de

4 5