- cypherpunks - lists.cpunks.org

if only "There is one mode; it is secure." ... maybe one day?
by coderman 31 Mar '14

31 Mar '14

"Negotiated Discrete Log Diffie-Hellman Ephemeral Parameters for TLS" - https://tools.ietf.org/html/draft-gillmor-tls-negotiated-dl-dhe-00 """ dldhe8192 ... Its hexadecimal representation is: XXX ...still calculating... XXX ... """

1 0

DOJ Pushes to Hack Cyber-Criminals (Torizens)
by grarpamp 28 Mar '14

28 Mar '14

http://blogs.wsj.com/law/2014/03/27/doj-pushes-to-expand-hacking-abilities-… http://arstechnica.com/tech-policy/2014/03/feds-want-an-expanded-ability-to… http://news.slashdot.org/story/14/03/28/0242232/doj-pushes-to-expand-hackin… http://yro.slashdot.org/story/14/03/28/195200/cispas-author-has-another-pri… http://edition.cnn.com/2014/03/27/living/student-money-saving-typeface-gara…

1 0

secondrealm.is
by Pavol Luptak 27 Mar '14

27 Mar '14

Hello, together with the artistic group Satori, we have finished and released Visual Digital Freedom Manifesto http://secondrealm.is/, text description is here http://secondrealm.is/manifesto.html It is a realtime visual contemporary-art demo written in _pure_ Javascript with optional WebGL support (it took many people few months to develop it). Original goal was to make a pure company commercial demo (we do IT security), but finally it ended up more like a cryptoanarchistic project. Yesterday we released this demo at NVScene 2014 (the biggest US demo party in San Jose) with the following feedback http://www.pouet.net/prod.php?which=62852 We were inspired by Second Realm (Book on Strategy) http://anarplex.net/hosted/files/secondrealm/secondrealm.html and The Crypto Anarchist Manifesto http://www.activism.net/cypherpunk/crypto-anarchy.html Enjoy 4 minutes of awesome visualizations, Pavol -- _______________________________________________________________ [wilder(a)trip.sk] [http://trip.sk/wilder/] [talker: ttt.sk 5678]

1 0

To Tor or not to Tor?
by rysiek 27 Mar '14

27 Mar '14

Hi there, As I am running a local cryptoparty and do a lot of basic encryption/privacy talks and workshops, I am often recommending Tor as one of the means of protecting one's privacy and yes, even security (for example, by running a hidden service and making it possible for users not to leave the darknet). Of course it's far from being enough, and I make that very clear. But lately I got to wonder if using Tor does more harm than good? If the NSA can impersonate any IP on the planet, they can impersonate any Tor node; tis has two important consequences: 1. they know when you're using Tor, and can flag you accordingly, and (for example) deliver some nastiness when (not "if"!) they get the chance, because "when you have something to hide..." 2. they can guess with high probability whom are you communicating with; they don't have to break encryption, it's enough they listen-in and see that a Tor packet from your IP to Node A is x bytes; a packet from Node A to Node B is x-( header + Tor encryption layer size ) bytes, and so on. So, is using Tor today doing more harm than good? Would ordinary Joe Schmoes be far better of not using Tor? How about more high-profile targets, like activists/hacktivists, etc? -- Pozdr rysiek

10 18

The National Security Agency at the Crossroads (Austin: Apr 3-4)
by Gregory Foster 27 Mar '14

27 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The National Security Agency at the Crossroads (Austin: Apr 3-4) https://strausscenter.org/details/279-privacy-surveillance-and-the-nsa.html If you review the agenda and speaker list, you'll see this event is a pretty big deal. > The Intelligence Studies Project is a joint venture of the Strauss > Center and Clements Center at the University of Texas at Austin, > aiming to encourage policy-relevant academic inquiry into the past, > present, and future of intelligence agencies and the legal, policy, > and technological environments in which they operate. Nothing > better illustrates the need for such inquiry than the events of the > past year surrounding the National Security Agency. As part of a > larger effort to improve public understanding of those events, the > Robert S. Strauss Center for International Security and Law and the > William P. Clements Jr. Center for History, Strategy & Statecraft > are hosting a major interdisciplinary conference focused on the NSA > from April 3rd through 4th. It will cover topics including the > history of the NSA, the role of the media in revealing classified > information about its activities, the legal architecture in which > it operates, the compliance and oversight mechanisms associated > with the NSA, the diplomatic fallout from the recent revelations, > and the prospects for reform. Although open to the public, the event is already waitlisted. I'm aware of at least a few concerned citizens who signed up to attend and plan to document the event through various channels. http://www.eventbrite.com/e/privacy-surveillance-and-the-nsa-tickets-895383… If you have an interest in this event you'd like to discuss, please contact me off list. gf - -- Gregory Foster || gfoster(a)entersection.org @gregoryfoster <> http://entersection.com/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.19 (Darwin) Comment: GPGTools - http://gpgtools.org iQIcBAEBCgAGBQJTM62eAAoJEMaAACmjGtgj8NsP/AxHR2VOTHivwqv7MmnkZ9kS l+kFi9RC9ZB0e80jAljc32FnIRWhhmry1/BOU9dgtWEzmcpfInAQdTHV01droXT1 XlxiEvVfv5Sh7Ln3gE4nv2UgUFTy8GXZAmRoVilr/SCietQd5nOFoWhzLPEsnfGw PYAUE5FHu4Sh2tEcCJDSGPZOe/Rd7QvlU4qd3drTOwnC840X5x0CtylGXVWHxMcl K/nAzuMkhB+Zd3tErka2yR7vw42Ch5PeT6qN3c5TtLywhAVSamqQjzWfeJdx6NMk /F89Q8oJcJ1zLfpePhuj+m4FRCTq3/ONmk+d4NpwRAP5v+BeXk4EyHadibf5GJX2 7IUlR77p1cTi//QvwvkQq0iBnESBDRu+JaUI8fX2bluuIK9PZnS/AJG4A8KE9ujo wciHmFk0uAuxw5GqHNF0VLo8JQjc2DDNcmsHheVXuzE9txMShdgonWPoxVfouXys JetLGAZwFhbxfku5bXpqVYnNLQi5FfMaIEZ6saT8cEWdbuCpbuXKSAsEMSY/LIjK DaITHHO+YiRD7qlM/TakpI934F925k4pQ3rA3Y32ObihacjQHysN2LkOhUPuITY7 RLbUCbww1Dcb0QGUgib7INSRTWnN+vt+fsN07jgTtXr60VfXdGF3pUHAxqZ9d/nX esziR2DQx3s7u+15clcf =Wdx1 -----END PGP SIGNATURE-----

1 0

"Whew, wondered where we'd put those 200,000 BTC!"
by jim bell 25 Mar '14

25 Mar '14

http://www.engadget.com/2014/03/20/mt-gox-apparently-found-200-000-bitcoin-… "In a bit of news that's familiar to anyone who ever put on an old jacket and found $20 in the pocket, embattled Bitcoin exchange Mt. Gox has made a fortuitous discovery. The company announced (PDF) in Japan that it found 200,000 Bitcoin (worth nearly $116 million at the moment) in a wallet from 2011 that it no longer used. That's less than a quarter of the 850,000 Bitcoins CEO Mark Karpeles reported were missing, but at the moment, at least it's something. According to its statement, the coins were moved to online wallets on the 7th, and then to offline wallets on the 14th and 15th. The mystery of what happened to Mt. Gox's funds is still far from solved, but between this news and reports of updated balances for account holders, it seems possible that there's something to be recovered from the shuttered exchange. Next up, removing all of the cushions from the sofa and pulling it away from the wall."

13 39

Documentary to be filmed on the life of the last original Navajo Code Talkers, Chester Nez
by William Knowles 24 Mar '14

24 Mar '14

http://www.infosecnews.org/documentary-to-be-filmed-on-the-life-of-the-last… By William Knowles Senior Editor InfoSec News March 24, 2013 Chester Nez, the last surviving member of the original 29 Navajo Code Talkers, will be the subject of filmmaker David DeJonge's upcoming 30-minute documentary. "Chester is the last link from the Navajo people who forged a secret code that helped win the Second World War. Their code led to the training of 400+ additional Navajo code talkers. To record his story in first hand is critical to American and military history." DeJonge said. DeJonge who is well known for his work with the last WWI veteran Frank Buckles, and also his documentary "Pershing's Last Patriot", began producing the documentary on Nez after a visit to Gallup, New Mexico. Nez served with the United States Marines in the Pacific and helped defeat the Japanese by creating a code, using the Navajo language, that was never broken. Sent to a boarding school as a child, Nez and other Navajo children were discouraged from speaking their native language and instructed to only use English, but that didn't stop them from whispering Navajo to each other in secret. In 1942, Navajo were recruited from boarding schools to join the Marines and use their unique skills to develop an unbreakable code to pass messages. The film will tell Nez's story from childhood through today. [...] -- GPG key on request http://www.c4i.org/erehwon/

1 0

citizen privacy groups?
by Blibbet 23 Mar '14

23 Mar '14

Hi, We're trying to build a list of contacts to (city,county,state,county)-based privacy groups, to see if a multi-city coalition would be helpful. We have private contacts that we're hoping to shortly have a mailing list setup, so they can communicate better. Below is current list I'm aware of. There's many cities that I can't find groups for; are things really that bad? :-( If you have a contact at one of these groups, please contact me off-list! Thanks! Lee ---------- Seattle Privacy https://www.seattleprivacy.org/ Oakland Privacy http://oaklandwiki.org/Oakland_Privacy_Working_Group Los Angeles: Stop LAPD Spying Coalition http://stoplapdspying.org/ Oregon: https://twitter.com/OregonPrivacy Austin, Texas: EFF Austin http://effaustin.org/about/ http://twitter.com/EFFaustin https://www.facebook.com/eff.austin Texas: Texas Electronic Privacy Coalition http://txepc.org/ Texas: Restore the Fourth ATX https://twitter.com/Restore4thATX http://restorethe4th.com/ https://www.facebook.com/RestoreThe4thAustin New York:The Calyx Institute https://calyxinstitute.org/ Germany: list of local AK Vorrat (German Working Group on Data Retention) groups https://wiki.vorratsdatenspeicherung.de/Ortsgruppen Cologne, Germany: http://cologne.stopwatchingus.info/demo-12-april/en.html ----------

2 2

this looks like a fun conference
by Cari Machet 23 Mar '14

23 Mar '14

*The Expo* The exposition will be unclassified and will consist of a two day event as an adjunct to the SIGINT Conference. The conference sessions will be conducted in a classified area in close proximity to the exhibits. *The Conference* This classified conference will focus on the preeminent intelligence issues facing those who are tasked with SIGINT as part of their mission. Over 1500 participants from the US intelligence community and throughout the world will attend this conference. https://www.fbcinc.com/event.aspx/Q6UJ9A00YDM3 -- Cari Machet NYC 646-436-7795 carimachet(a)gmail.com AIM carismachet Syria +963-099 277 3243 Amman +962 077 636 9407 Berlin +49 152 11779219 Reykjavik +354 894 8650 Twitter: @carimachet <https://twitter.com/carimachet> 7035 690E 5E47 41D4 B0E5 B3D1 AF90 49D6 BE09 2187 Ruh-roh, this is now necessary: This email is intended only for the addressee(s) and may contain confidential information. If you are not the intended recipient, you are hereby notified that any use of this information, dissemination, distribution, or copying of this email without permission is strictly prohibited.

2 2

Re: "Whew, wondered where we'd put those 200,000 BTC!"
by tpb-crypto＠laposte.net 23 Mar '14

23 Mar '14

> Message du 23/03/14 04:45 > De : dan(a)geer.org > A : cypherpunks(a)cpunks.org > Copie à : > Objet : Re: "Whew, wondered where we'd put those 200,000 BTC!" > > > It were write that: > > > You are in the same boat of Karpeles and Ulbricht, they also were > > barely able to code some interpreted language and they were overwhelmed > > by the intricacies of the systems they were building. Until they > > finally brought disaster for themselves and everyone that depended > > on them. > > True but inevitable. Humans can design systems more complex than > they can then operate. The financial sector's "flash crashes" are > one, but only one, public proof-by-demonstration of that fact. I > predict that the fifty interlocked insurance exchanges for Obamacare > will be another. It is likely that any cryptocurrency exchange > that is center-free and self-mobile is harder still. The HTTP > Archive says that the average web page now makes out-references to > 16 different domains as well as making 17 Javascript requests per > page, and the Javascript byte count is five times the HTML byte > count. > > Above some threshold of system complexity, it is no longer possible > to test, it is only possible to react to emergent behavior. Even > the lowliest Internet user is involved -- on the top level page for > a major news site, I found 400 out-references to 85 unique domains > each of which is similarly constructed. If you leave those pages > up, then because most such pages have an auto-refresh, moving your > ass to a new subnet signals to every single advertising network > that you have done so. > > --dan > Your comments naturally lead us to think how to make simple systems, yet functional enough for the purpose we are building them. KISS is coming back into vogue. We are up to a revival in self-made purpose-specific web servers. Learning the few needed protocols and building from the ground up using open-source tools seems the way to go. Notwithstanding hardware issues, using things out of intel and amd seems also to become a trend.

1 0