- cypherpunks - lists.cpunks.org

panoptic archive (urls)
by brian carroll 15 Jan '14

15 Jan '14

-:=/ kollider_function /=:-- A. Reversing the Panopticon http://cartome.org/reverse-panopticon.htm "The reconnaissance capabilities of (San Gimignano's) massive masonry observation towers, with their intelligence-gathering and defensive overview of strategic landscape and crucial traffic, had been supplanted by a more lightweight, mobile structure: a technology of administrative compartmentalization, classification and policing, underpinned by technologies of authoritarian inspection, data collection and databanking." B. [video] MICROWAVE WEAPONRY'S USE ON PEOPLE /via cryptome https://www.youtube.com/watch?v=aMMEQNnSZIo -- observation towers -- a. towers of San Gimignano http://www.contemporarynomad.com/wp-content/uploads/2012/11/san-gimignano.j… b. cellular towers https://www.google.com/search?q=cellular+towers&tbm=isch The ocean's hidden waves show their power / stratification... http://phys.org/news/2014-01-ocean-hidden-power.html [q] Their effect on the surface of the ocean is negligible, producing a rise of just inches that is virtually imperceptible on a turbulent sea. But internal waves, which are hidden entirely within the ocean, can tower hundreds of feet, with profound effects on the Earth's climate and on ocean ecosystems. (...) These waves are potentially "the key mechanism for transferring heat from the upper ocean to the depths," Peacock says, so the focus of the research was to determine exactly how the largest of these waves, as revealed through satellite imagery of the Luzon Strait region, are generated.[/q] ))(()(( food science ()(())(( <sandwich> though my previous discovery of fried baloney & hummus with slice of red onion^1 as being strangely equivalent to an eggsalad sandwich (?!) was as far as it went; though just now realized in a lightly _toasted 7-grain bread, with mayo on one side, then thin sliced hard salami, thin slice of colby-jack, and other piece of bread, that-- (bread/mayo/salami/cheese/bread) the sandwich is so minimal and boring, works best with lettuce (arugula!) and slice of red onion, though without such ingredients, left to ponder on the delicious the crispy thin plain kettle potato chips, and decided to place them then squish them onto/into the sandwich as a new layer, somewhat panini flattened to get the chips to become more level... (bread/mayo/potato-chips/salami/cheese/bread) and oh my goodness is it a delicious sandwich. so figured to do a search and found others who have realized likewise, perhaps due to necessity... Squishing potato chips in your sandwich...anyone else do this? http://chowhound.chow.com/topics/763996 <?sandwich> testing123... sprintf('onward... ^1: (bread/mayo/fried-balony/fresh-hummus/red-onion/bread) Is Your Refrigerator Running? / ~resiliency. via digg http://modernfarmer.com/2014/01/refrigerator-running/ [q] Refrigeration is the invisible backbone on which the world’s food supply depends — and given our climate-changed forecast of more extreme weather events, it may yet prove to be its Achilles’ heel. Currently, 70 percent of America’s food supply is refrigerated at some point in its journey from farm to table, and without refrigeration, meat, chicken, seafood and dairy last just two hours before they’re unsafe to eat. Perishable fruits and vegetables often have only a day or two at room temperature before they turn to mush.[/q] \\----- programming -----// [book review] Period Piece The theory and meaning of our own hieroglyphics. http://www.weeklystandard.com/articles/period-piece_773244.html?nopager=1# [q] Unlike the interrobang, whose conception, creation, rise, and fall were all observable within a decade, the @ symbol has been around for centuries and is now enjoying widespread resurgence thanks to the Internet. While its exact origins are unknown, the earliest recorded use of the @ symbol is in a letter sent from Seville to Rome, dated May 4, 1536. [/q] octothorpe = # pilcrow mark = ¶ interrobang = ‽ manicule = ☞ diple = ‹ guillemets = « » ligatures e.g. = æ dagger = † amphora = @ >>> cartoon <<< http://www.gapingvoid.com/when%20a-listers%20start%20losing%20the%20plot.jpg http://images.sodahead.com/polls/0/0/1/8/5/8/9/2/5/58451459_now_what.jpeg :::=====television=====::: re: POV--> Nobody Needs a New TV Anymore /via digg http://nymag.com/daily/intelligencer/2014/01/nobody-needs-a-new-tv-anymore.… [q] Unless the TV industry can find a way to force obsolescence on its old products — like making new models of devices like the Roku incompatible with TVs made before 2011 — the appeal of new models will be limited to TV addicts and people with too much disposable income.[/q] comments: i think the viewpoint in the above article demonstrates a certain narrowed conceptualization or myopia even, of technological systems as being more than the end-use tools that are interfaced with, say on the screen of a 'smart tv' or its hardware configurations and options. these are indicators of functionality, though they map into larger, extended systems - infrastructures, and various industries and buildings that have been effectively rationalized under an earlier broadcast, then cable model, now importing 'internet' content such as youtube videos and streaming movies (redbox, amazon video, etc) as additional layers or services. [note- still at CRT here, not sure how it functions exactly in these terms.] what is happening is one way to analyze the situation. what could be happening- the *potential* for network-based television, is a larger question and consideration. such a large enigma that Steve Jobs of Apple, Inc. claimed to have cracked the idea of television open, and realized or discovered resolution for a future model of television, likely involving the issue of its content ecosystem in addition to interface. a missing parameter in referencing [tv] without distinguishing past and future conceptual differences is that the cathode-ray-tubes of the past and liquid crystal displays (LCD) of the present HDTVs are of different parameters of functionality. it is not about connecting a CRT display to the global network as if 'Internet TV', another channel to tune into via airwaves. instead it is a television display (LCD) screen that has become a computer, and thus is more like having a personal computer becoming a television, though it can also tune into airwaves and network protocols as its channel spectrum. so while it is true perhaps that there is a limit to innovation in the hardware interfaces due to a limit reached in the given model, within certain constraints -- including content ownership via media conglomerates based on DRM and copyright restrictions, redistribution rights, and royalties -- which is basically the entire media industry, from radio to television to movies to music (and publishing even), this viewpoint is based on the idea that this situation is fixed in its given functioning and cannot be surpassed or radically changed, within those parameters. so part of the larger consideration would be to consider HDTV beyond the local tool or artifact - the television set - and consider the ecosystem it functions within and potentially could function within, interface with. first off: the TV set is recontextualized in the realm of the global computer network, and thus it is at least in part an issue of an 'internet television' set as HDTV device, interface, functionality, hardware, software, programming, content, display. likely curved screens, touch interfaces, wireless, menus/UI, refresh speed, resolution, these kinds of parameters have tangible effects on functionality, ease of use, enjoyment, if the design is effective. though -what- is accessible is a fundamental issue; and for many, this likely involves a cultural wasteland of commercial content chock full of advertisements , where the experience of seamless channel surfing has become bureaucratized, as IP and broadcast frequencies are different systems, and content exists in multiple formats in several locations (say media server, internet services, movie streaming, over-the-air) and thus begins to be unmanageable at the level of interface, requiring much effort to access and view content that is not preprogrammed and formatted (a guess, reading feedback of others) in that there are multiple systems, formats, menus, issues of having to type or input data, difficulty in doing so, etc. time, energy, frustration, when pre-computer TV was simple. basic. and always worked except for transmission glitches or interruptions. prior to being made obsolete by a new 'digital standard', making old sets no longer functional in the 'new system' which turns out to be CHAOS, a difficult to mediate or resolve cultural question, unless it is not in question- which then only involves extending the existing model, parameters further. and then it is only about dollars, selling units of HDTV, per capita consumption of mass media dressed-up as internet content, via extension of the same systems, one-way media delivery. except- youtube, memes, perhaps TED Conferences, etc. then also, videoteleconferencing. the larger question of infrastructure involves parallel video content that could be made accessible or available to these networked HDTVs. imagine community television, anywhere in the world. or special access to a school video archive of a children's play, requiring private login to view years later. though also, ideas and debates recorded on video, theater and plays as performance videos, music concerts and recitals, educational programming, lectures, etc. this was the earlier model or potential that was passed over, never allowed to develop by the existing rationalization, within its controlling interest and technical parameters. instead such 'civic content' is locked out, or made into a proprietary channel or service, oftentimes content requiring additional payment for access, instead of offering it as a public service, say for sustaining and improving cultural awareness, cultural literacy. instead, the bane of pledge drives for 'public TV' interrupts such content with commercials, advertisements that demand tithing in order to keep the awful content-system moving in the same backwards direction, a charade of educational programming, a heist of 'public airwaves' and spectrum, for what thus amounts to a private ideological approach to mass media, everywhere colonized the same. just consider - and certainly fortunate you are if not familiar with this television content - how destructive a show like "Friends" is to programming behavior of populations who then mimic and extend adult adolescence as 'shared consciousness' via brainwashed young people who congregate and behave similarly, as if adulthood involves preschool for shared groups. as if this dumbing-down is an education in ignorance, condoning and developing it (said show is show cynical perhaps it is covert-based military propaganda even, to promote such decline) so instead of communicating about meaningful ideas via television or video, having debates about ideas, the content is trivial and stupid. demeaning, debasing, idiotic, and formulaic for the very antihuman principles ruling over and oppressing populations in daily environments. what kind of relation does Hollywood have with human citizens exactly? why is mass media programming hostile to ideas of freedom, intelligence, beyond their narrow self-interest? what kind of public trust is that which seeks to eliminate other perspectives, public goals, ideals, principles, and instead actively dismantles, destroys, prevents, censors such views? and everyone who *purchases* their television content, pays or buys into this services. VOTES for it via participating in the onesided delivery model of ungrounded perspective, warped beliefs, antihuman agendas, normalized and standardized as if 'shared culture' and not unshared cult exploiting humans via oneway, entropic expropriation of human power, decision-making, relations, intelligence, via- most likely- endless signed ~legal documents now that is dark humor. so dark that the laugh track and non-funny comediennes provide a diorama-like span of artifice in which to place the malaise of being lost in such false POVs. this one-way formatting of culture in hostile terms and dynamics... then leading to adult preschoolers as the constituency, filling up the void in mass media as its representatives and participants. the state as mass media production, then waging war against terrorists, turning against its own citizenry and constitution. the script turned into a government prescription that then formats and 'owns' the development (and decline) of culture via its representation. political engineering, social engineering, behavioral engineering - marcom & advertising. public issues and interests then are a pay-per-access approach. parallel to this, timepiece, the SPOT watch by Microsoft, which could have indicated an innovative approach to content, except for a monthly or yearly fee to access radio-broadcast content for the 'smart watch', such that to get the weather report required tithing. any blip of news, more dimes and quarters. and thus content-limited, dies out. maximal payment via cellular data services-- requiring payment of full cellphone plan prior to access data or services are extra fees, such that actual *information* and data is rare, unless people live to SMS and that is their lifework the model of content distribution, ownership, approaches to 'profit'- removed of a vital and fundamental civic dimension and component that is absent from these devices and tools. essentially boxed-in by a limited privatized approach that relies on _censoring outside views and content from a given platform or industry or media, because that constraint becomes the basis for moneymaking instead of- i don't know- doing something worthwhile for humanity, in an innovative and ingenious way that still makes money, and does not falsely constrain or limit or confine the device or its future media development out of selfish private interest at the expense of larger human goals and needs. again- i don't know... like knowing when the bus is going to arrive at a bus stop via a watch or PDA or phone- as a public service. and having such data available and accessible for populations - and then developing more based on such public services and infrastructures, including media libraries accessible via HDTVs, schools or university resources and classes as part of public outreach, etc. in a coherent approach and model based on shared goals, principles, incentives, reflecting a value in truth and honoring content as more than private moneymaking ventures that turn culture into a fool's paradise the civic versus commercial footprint, not just for profit or even non-profit, also no-profit, a model of the commons and public human sphere that could be developed outside the given approaches, in parallel to it, and then made accessible via these tools, as another channel or interface, though likely a million times larger and full of all the best resources of culture. and being a citizen provides access, instead of having to pay for it through a third-party always so the issue of this existing development of idiocy as the basis for social relations (antisocial) if not promoting xenophobia via such group dynamics that become standard, 'the measure' by which others are judged, in these devolved terms and conditions. including in thinking, such that the ignorant become the masses who then single out unique individuals are the problem, the very opposite of democratic potentials, that ideas matter, not just shared views and beliefs in a larger louder physically more strong group who are superficial, shallow, and by most indications, incredibly stupid and extremely proud of it- because this ignorance is the very basis for social power, engineering consensus and compliance with such lowered viewpoints as if ideal, enlightened by conformity, by fitting in, submission, cultic bliss. it is difficult to write beyond this condition because it is the culture, it is the televised content, it has taken over 'online programming' and forms the basis for substitute discourse via idiotic memes and 'dialogue' about meaningless events as structure for shared relations and reality, making trivial the everyday, into issues of consumption, co-media/commodities that participation then validates as a process, sustaining and building false perspectives, structures, frameworks that can further be exploited, oppress, via these same means/memes high-brow, high art, intellectualism and theory-speak and social affairs to low brow to the realm of the debased and disgusting, all on the same cultural level, ungrounded, headed in an antihuman direction with an actively hostile agenda, and yet nonsensical or immune from 'reason' beyond opinion, due to loss of logic beyond binary ideology & its quick judgements. in this way mass media - networked or not - becoming channel surfing, there is always yet another choice to tune into, ignore the others, even while it persists, keeps on developing, though these 'other choices' are still the same thing, annihilating all hope of any change in principles and goals and ideals- because they are against human culture, implicitly, by design a question of platforms and tools and devices to access a parallel content system would need to investigate how to establish a framework for what exists as a latent yet unused resource, of video or recordings, and then model a way to integrate this public content into a common model that could scale from local to state to global interconnectivity, then to standardize this and establish a common interface that is of highest use and function and usability versus the oft encountered lowest functionality for such resources, set at odds with basic searches or categorization, for lack of coherent modeling of concepts and ideas, beyond unique strings reading about CES recently, the recent yearly Consumer Electronics Show, a quote from the Sony CEO reminded me of some of the unique potentials built into existing tools for access that could co-exist in traditional models and offer potentially an interface into this world beyond the private-only model, where cultural media resources could someday be accessed. reference: Sony CEO says cloud TV won't compete with cable http://www.theverge.com/2014/1/7/5285310/sony-ceo-kaz-hirai-says-cloud-tv-w… [q] Unlike Microsoft's push, Hirai focused on the installed user base of the PS3, suggesting that when the service does come to customers it will be modular and will allow TV viewing across several of the company's products. "I know Intel was in this space as well, but from my perspective, when you look at the installed base of the PS3 — 25 million in the US — when we're talking to a lot of the broadcasters, it's a compelling number." [/q] the Sony Playstation (PS3/PS4) has its own gaming network and streaming services, though i am not familiar with how these function- it would seem that streaming video games as well as movie content is part of its ecosystem approach, perhaps also external services in some way. though what has intrigued me for years is that the device includes a Blu-Ray disk player as part of its videogame console, and can be used as a dvd player to watch HD movies, which the Blu-Ray disk format exists for- to match higher screen resolution of HDTVs, while earlier DVDs are more the cathode-ray-tube resolutions and screen ratios (4:3 versus 16:9). so there is an interesting overlap or crossover in content and media delivery, interface, interaction with the videogame consoles (presumably Microsoft X-Box One likewise), in that they not only can play videogames with an HDTV device, though can also play movies on disk, matched to that high definition resolution, and also access streaming content from the internet within some framework or given parameters. the potential then, in this particular videogame console as media access platform, is that it could open a portal to the 'public commons' of another world of content, say media archives of hundreds of thousands of films, lectures, videos of events, educational resources, and that if it were coherently organized and presented as public service, could likely be integrated into such a content delivery infrastructure - though connected with a different system of values than those that otherwise dominate what is on offer, as an 'online commons' or 'public space' beyond a realm of juvenilia or existing commercialism that is so highly saturated in the given model that it is like toxic content, as if ideological residue imparts itself from mere proximity to the detritus of the mainstream in its devolved, ungrounded warped worldview so what if the question of television extended into its infrastructure - what services are on offer, in the private model, and what content exists that could potentially be accessed, if it were coherently and effectively organized and accessed via these same tools and devices what if the problem involves information, modeling of a view that is not trapped within a too small consideration of what this involves, and requires a librarian-like cataloging of resources and an information architecture that unifies and scales distributed resources into a common model and intelligible framework, while not existing in the 'same place' or location, or within a central repository except insofar as it can be interfaced and accurately account for content perhaps issues of streaming are too involved and that a large effort and resources would be required to gain access to high definition content or quality media resources, yet the content itself already exists in archives around the world and locally, and would provide an immense value to those newly able to connect with what is otherwise absent and out of bounds within media and culture, if as memory, knowledge, communication, relation, awareness, value what if ideas were debated on the internet, like they were in past eras as part of the process of reasoning, and really got into the issues of information and intelligence in a shared model and multiple views. the incapacitation by one-way media prevents this, and a lack of quality in existing online resources, else media archives that remain unshared or still undeveloped, such as video of a dance performance or one act play, bound or limit what is possible now and also what could potentially occur, by neutralizing the possibility by going along with the standard model and approach that does not question or function outside its own parameters in terms of content development in profit-based scenarios what if knowledge was of value. shared awareness. education. insight. clear communication of ideas. debates that shape improved understanding and promotes civic involvement and engagement with the present day and its issues and situations. beyond the one-way panel and the presentations, and into other forms and dynamics of relation, sharing of ideas. this too could populate the content offerings within media devices. it would be interesting to know what the difficulties are, what attempts have been made, by those most engaged in these dynamics and dimensions- and what actually may be possible as human content within networked media devices beyond the WWW model for websites and apps, and TV channels. in this way, what about the media archive and networked library, access to the cultural assemblage of resources, stratigraphic layering, interconnections across frameworks --- quotes from Henry Ford --- http://www.secretsofthefed.com/wp-content/uploads/2013/01/Henry-Ford-Bankin… http://firm-guide.com/wp-content/uploads/2012/10/Quote-of-the-day-Henry-For… .:.:-.-: URLS -:-..::. [experiment] String Crossing -- What do you see? http://www.exo.net/~pauld/activities/perception/stringcrossing.htm [video] George Lucas' First Film ('liberty and political freedom') http://gizmodo.com/freiheit-george-lucas-very-first-very-worst-film-1497187… about: Freiheit (film) 1966 - 3 minutes http://en.wikipedia.org/wiki/Freiheit_%28film%29 // audio interview, tomorrow (1/15/2014) @ noon PST... Quantum Leap: The moment we transform potential into reality http://www.blogtalkradio.com/the-art-of-film-funding/2014/01/15/quantum-lea… [q] Our guest, Fred Alan Wolf Ph.D., “teaches that quantum physics is the most useful, immediate, and relevant kind of science you can learn to profoundly affect your day-to-day life.[/q] New cyber-attack model helps hackers time the next Stuxnet http://phys.org/news/2014-01-cyber-attack-hackers-nextstuxnet.html [q] As Robert Axelrod and Rumen Iliev at the University of Michigan write in a paper just published in the Proceedings of the National Academy of Sciences, "The question of timing is analogous to the question of when to use a double agent to mislead the enemy, where it may be worth waiting for an important event but waiting too long may mean the double agent has been discovered."[/q] Coral chemical warfare: Suppressing a competitor enhances susceptibility to a predator http://phys.org/news/2014-01-coral-chemical-warfare-suppressing-competitor.… [q]The researchers don't know all the factors that may have made the chemically noxious seaweed more palatable to the fish. However, those seaweed portions that had been competing with coral had less effective chemical defenses against fish. When the researchers took extracts from treatment seaweed and control seaweed and applied them to a palatable seaweed species not previously used in the experiment, fish preferred the seaweed coated with extracts from the portions that had been competing with corals, indicating that competition had compromised the seaweed's chemical defenses against herbivores. [/q] ===== outer.limits ===== [video] 'Aliens Exist' Says Canada's Former Defense Minister¹ http://fusion.net/modern_life/story/aliens-exist-canadas-defense-minister-3… ¹/via drudge :::::::::: muzak :::::::::: //cf.bitsets,logic,circuits,nestedsets,dimensions,numberline,aesthetics The Divine Music of Mathematics /via hh http://www.firstthings.com/article/2012/03/the-divine-music-of-mathematics [q] "The various attempts to impose mathematics on music (or music on mathematics) produced, respectively, bad music and bad mathematics." ... "Not until the nineteenth century did mathematicians arrive at a rigorous definition of irrational numbers, as the limit of an infinite converging sequence of rational numbers. [/q] ^ (this could be interdimensional,nested sets,thresholds, as with nested platonic solids, vertices/edges meeting, &c. note also: music seems to have no concept of ~perspective. perhaps why musicology is incoherent if not nonsensical; midi notevalues makes fineprint legalize look like poetry) (note: 'most simple number' (1), infinity can exist between zero & one, in bounded condition,given approach/dynamics) (rel. what is missing/big conceptual gap: laser monochord; analog-digital, modeling+sampling(&classical/quantum), simplest 'vibrating string' instrument to model emp.ideas; harmonics,split,multiplex beams,tuning,ratios,plus signals) (musical frameworks are flat. Timaeus not flat,nested and hierarchy, implicit. problems related to time,metronome- approach,numberline. makes no sense as space-time/order whereby natural rhythm,movement as if artificial,unnatural; ideological snap to fit. framework is conceptually backwards, like rationalizing everything in a given consensus, false-view) [note:the world (15c.onward) this article describes is madness] [also: 1 symbolically equates w/infinity in n-value logic model] (issue:basically,trying to work expanded,fragmented,diluted cosmic bitset back to core truth (1), in multiple frameworks, nested,disconnected permutations full of noise,tiny signals; patterns,circuits,ecology,forms/concepts,archetypes,structures) more... problem with music: model of the world does not accurately map to experience (of reality) thus problem of communication/langue, viewpoints & sharing of false perspective, beliefs, rationalizations. (future: music visualization displays, tracking, order, structure, cf. videogames (rockband,etc), also n-dimensional, geometric space, drumming in virtual reality, inside 12-sided polygon mile wide, &c) --note also, this summarizing quote from the essay... [q] In light of the extraordinary influence of Augustine’s idea, we might think about the problem this way: Even if the ultimate foundations of reality remain hidden from us, we nonetheless possess a creative faculty that gives us insight into the infinite. We employ the same faculty at play in music as we do in probing reality through mathematics. And this faculty whose workings we observe in the laboratory of music offers an intimation of our role as junior partners in creation.[/q] (i think this is dead wrong. there is infinitesimal truth, not maximal in music today, 'junior partners' only if neuro/audio/signal engineering programming audiences via entrainment,hypnosis, brain-wave mods; otherwise this kind of connection is an illusion and a cultural conceit) <---| ¿¿¿ |---> future Google as information bank, leasing data/info or access ----------------------------------------------------------------- [video] The Game of Wiffleball https://www.youtube.com/watch?v=5y_Wa21qjNs ', $nym, $curveball); {educational fair-use of copyright, 2013} 13C/27-C1 112-B2B/57-A2A 613-A2A/54-B2A

2 2

Re: [Cryptography] Boing Boing pushing an RSA Conference boycott
by John Young 15 Jan '14

15 Jan '14

If courageous, Rivest, Shamir and Adelson can be burnt in effigy. Their initials once were rightly world famous, and to smear these distinguished gentlemen by vulgar opportunistic protest instigated by noobs with less than zero comprehension of cryptography should be condemned not debated. James Bidzos raped the three once, twice, thrice, then hid his corporatorizing crime under skirts of EMC. Don't ravage his victims. Protest, sure, but demonstrate what to protest for effectiveness, not idiotic sloganeering of a logo. Hell, long-time duplicitous IBM deserves deeper anger than RSA. DES and much more. Go big and really bold. Protest the Waasenaar Arrangement, the greatest rigging of the dual-use technology market ever, and the world's greatest gang of cheaters, bribers, underhanded dealers of contraband, most of it lethal, far deadlier than crypto. Greenwald blogs there are cryptographers and comsec experts reviewing Snowden's material for future releases. Presumably the highly ethical reviewers have a clear shot at avoiding release of their own names and firms. They will cheat, that's certain.

2 1

using Curve p25519 cryptography for type 2(Mixmaster) and type 3(mixminion) remailer blocks
by gwen hastings 15 Jan '14

15 Jan '14

So it seems because we are using a decades old technology(email) that another 2 decade old technology is still useful for anonymous dissent where email based lists are concerned. I am looking at resurrecting mixmaster, mixminion and nym.alias.net nymserver designs from the various code wastebaskets and retrofit them with some newer encryption technology based on curve25519 and poly-1305 libsodium based algorithms and routines. Do these ideas sound interesting and viable to the coders on the list and of course worthwhile? or are they best left to the trashbin of history being mostly used by trolls and those damn pesky voices of dissent? gh -- Tentacle #99 ecc public key curve p25519(pcp 0.15) 1l0$WoM5C8z=yeZG7?$]f^Uu8.g>4rf#t^6mfW9(rr910 Governments are instituted among men, deriving their just powers from the consent of the governed, that whenever any form of government becomes destructive of these ends, it is the right of the people to alter or abolish it, and to institute new government, laying its foundation on such principles, and organizing its powers in such form, as to them shall seem most likely to effect their safety and happiness.’ https://github.com/TLINDEN/pcp.git to get pcp(curve25519 cli) https://github.com/stef/pbp.git (curve 25519 python based cli)

3 4

BitCoin Stealth Addresses
by Rich Jones 15 Jan '14

15 Jan '14

In response to the earlier chatter about BitCoin privacy.. http://sourceforge.net/mailarchive/message.php?msg_id=31813471 Apparently gaining some traction, implementation running on the testbed. Haven't looked over the details, but it at least seems like a small improvement. I don't know if it will actually defend against BitIodine type clustering analysis. R Full text: * Abstract A Stealth Address is a new type of Bitcoin address and related scriptPubKey/transaction generation scheme that allowers payees to publish a single, fixed, address that payors can send funds efficiently, privately, reliably and non-interactively. Payors do not learn what other payments have been made to the stealth address, and third-parties learn nothing at all. (both subject to an adjustable anonymity set) * Acknowledgments Credit goes to ByteCoin for the original idea.(1) Gregory Maxwell, Adam Back, and others on #bitcoin-wizards contributed valuable input on the implementation. Finally thanks goes to Amir Taaki for input on the general idea of stealth addresses and use-cases. * Background Viewed generally a Bitcoin address is a mechanism by which a payee instructs a payor to create a transaction such that the payee can spend one or more of the transaction outputs. Of course, typically the address is simply the hash of a pubkey, and the mechanism by which the funds are made available to the payee is to simply create a scriptPubKey of the following form: DUP HASH160 <pubKeyHash> EQUALVERIFY CHECKSIG The problem however is address reuse: it is convenient for payees to give one or more payor a single address and use it multiple times for various purposes. This results in all those payments becoming trivially linkable to each other by an attacker - a threat not only to the privacy of the user, but also to all users of Bitcoin.(2) BIP32 hierarchical deterministic wallets are frequently proposed as a solution. Now an address is a chain code and the mechanism by which a scriptPubKey is generated is to derive a one-time-use pubkey from that chain code and some index i. However, this quickly runs into two main problems: 1) Lack of privacy: While someone not in possession of the address can't link payments together, someone who is can. 2) State: If the index is not to be re-used wallets must either maintain per-address state, or somehow query for already used indexes, or somehow generate them in a sufficiently small range that the payee can recover the indexes. All these solutions are problematic. A good example of where the BIP32-derivation solutions fails come up at the Dark Wallet Hackathon where it was suggested by the author that for the purpose of securing person-to-person payments OpenPGP public keys and X.509 certificates be extended with a new user-id field containing a Bitcoin address. Wallet software could then use either certificate system to ensure funds were being sent to the intended recipients - essentially a non-interactive way of solving what the BIP70 payment protocol solves interactively. Of course, without stealth addresses the scheme would likely have little or no privacy. * Requirements 1) Generated scriptPubKey must be globally unique 2) Must be only spendable by payee 3) scriptPubKey and associated transaction must be indistinguishable to third-parties from other transactions in some anonymity set. 4) Method must be fully deterministic and funds recoverable from a wallet seed and blockchain data for both payee and payor. 5) Funds must be efficiently recoverable by payee with reasonable, and configurable, computation and bandwidth costs. 6) Must be compatible with CoinJoin/Must not leak information to payee about what txins were used to pay them. 7) Must be compatible with multisig-protected wallets. 8) Must not make assumptions about txin scriptSig form. 9) Must be possible to prove to third parties that payment was made in accordance to instructions without revealing any other information. ** Payment Reliability Schemes for making payments by transmitting nonces to the recipient through some other medium, such as Bitmessage, were discussed at the Dark Wallet Hackathon. However using any medium but the blockchain itself for the communication means that the reliability of the payment getting to the recipient is less than that of a standard transaction. For instance Bitmessage nodes only keep messages for two weeks. We decided that anything less than reliable atomic transactions was unacceptable. * Applying encryption to payments, simple explanation Using Elliptic curve Diffie-Hellman (ECDH) we can generate a shared secret that the payee can use to recover their funds. Let the payee have keypair Q=dG. The payor generates nonce keypair P=eG and uses ECDH to arrive at shared secret c=H(eQ)=H(dP). This secret could be used to derive a ECC secret key, and from that a scriptPubKey, however that would allow both payor and payee the ability to spend the funds. So instead we use BIP32-style derivation to create Q'=(Q+c)G and associated scriptPubKey. As for the nonce keypair, that is included in the transaction in an additional zero-valued output: RETURN <P> The payee recovers the funds by scanning the blockchain for candiate P's in transactions, regenerating the scriptPubKey, and finally checking if any txouts in the transactions match. Note the close similarity of this technique to how the Bitmessage network functions - an initial implementation of the idea will find the Bitmessage code a suitable starting point. * Trading off anonymity set size for decreased bandwidth/CPU By taking advantage of prefix filters(3) we can choose a tradeoff between anonymity set size and bandwidth/CPU usage if the payee specifies that payments to them are to match some short prefix k. There are a few possibilities for how the prefix is to the applied - the most simple is if per-block indexes of scriptPubKeys are available: RETURN <k> <P> Alternatively if per-block indexes of H(scriptPubKeys) are only available the wallet software can grind the scriptPubKey with nonce i until it matches the specified prefix: RETURN <i> <P> Furthermore as symmetric ciphers are quite cheap we might as well hide the purpose of the OP_RETURN txout and encrypt the pubkey P using H(Q) as a symmetric key. This gives us a slightly larger anonymity set. * Advantages of using a separate output An alternative would be to either re-use a pubkey or signature nonce value from a transaction input, saving about 45 bytes per txout. An absolute minimum sized Bitcoin transaction is 166 bytes(4) so at best we have a 27% savings in tx fees, and more typically around ~15%. (modulo mass-payments from a single txin) However using an explicit prunable OP_RETURN output to store the pubkey rather than re-using one from a txin or txin signature has a number of advantages: 1) The txin's owned by the payor are not revealed to the payee. In fact, they could be held by a third-party who simply makes a transaction with the appropriate txouts on behalf of the payee. 2) Less information about the txouts is leaked. The statistical distribution of txouts remains unchanged - not possible in re-use schemes because they need to grind the payee scriptPubKey's for the sake of the prefix filters. 3) If required the nonce secret can be revealed to prove that a payment was made to a third-party, e.g. for dispute resolution. * Bare CHECK(MULTI)SIG output alternative An alternative with better efficiency could be to use bare OP_CHECK(MULTI)SIG outputs to hold the nonce pubkey - generally a second output is needed anyway for change. The most simple would be to use Jeff Garzik's OP_DROP proposal(5) for the prefix: <prefix> DROP n <pubkey>...<pubkey> m CHECKMULTISIG or <prefix> DROP <pubkey> CHECKSIG The payor pubkey is in the *change* txout, and the payee's ECDH-derived pubkey in the other txout. By setting the prefix to be the same on both txouts and using the same basic scriptPubKey form the relationship of change and payment is still hidden; CoinJoin-using implementations can adopt even more sophisticated approaches. If IsStandard() rules remain the same and using OP_DROP is impractical, we can also grind the change pubkey to match the prefix in a deterministic manner so the wallet can still be recovered from a seed. More costly, but maybe still acceptable for reasonably short prefixes. Either way the result is transactions that are actually smaller and cheaper than standard transactions, although without the advantage of pushing scriptPubKey size payment to the receiver. (a pity we didn't spend the extra time to adopt OP_EVAL) A disadvantage is that revealing the nonce secret to prove a payment was made is more problematic - either the txout needs to be spent first, or we need a CHECKMULTISIG. * Address format To be decided. To support mulisig we probably want the ability to specify n-of-m master pubkeys, using the nonce to generate derived ones. For the single pubkey case the addresses will be a little longer than standard Bitcoin addresses: s9KND3vfXjs3YqfZp86Acce3bM7Mhuptwh6mjeDnThsDei9Z2ZZcU vs. 1LZn91ynrA6BCmoUKwnV3Ygk4FQMfPxLbg 1) ByteCoin, Untraceable transactions which can contain a secure message are inevitable, https://bitcointalk.org/index.php?topic=5965.0 2) Gregory Maxwell, Dark Wallet Certification discussions, also http://snowdenandthefuture.info/PartIII.html 3) Peter Todd, [Bitcoin-development] Privacy and blockchain data, http://www.mail-archive.com/bitcoin-development@...> 4) Bitcoin Wiki, Maximum transaction rate, <http://www.mail-archive.com/bitcoin-development@...>https://en.bitcoin.it/w/index.php?title=Maximum_transaction_rate&oldid=36983 5) Jeff Garzik, Add small-data OP_DROP transactions as standard transactions, https://github.com/bitcoin/bitcoin/pull/1809

1 0

mixminion
by gwen hastings 14 Jan '14

14 Jan '14

Hi ll Anyone know the current status.. any mixminion remailers still running?? seems like 4 servers only at present not near enough and ALL relay only.. adamas:relay (ok) cypher:mbox relay frag (ok) hermetix:mbox relay (ok) khjk:relay (ok) sigh gh - rebuilding the technology of dissent one software package at a time -- Tentacle #99 ecc public key curve p25519(pcp 0.15) 1l0$WoM5C8z=yeZG7?$]f^Uu8.g>4rf#t^6mfW9(rr910 Governments are instituted among men, deriving their just powers from the consent of the governed, that whenever any form of government becomes destructive of these ends, it is the right of the people to alter or abolish it, and to institute new government, laying its foundation on such principles, and organizing its powers in such form, as to them shall seem most likely to effect their safety and happiness.’ https://github.com/TLINDEN/pcp.git to get pcp(curve25519 cli)

1 0

Net Neutrality Ruling, Internet Interprets Censorship as Damage, There are no Captains, Decentralize Everything, etc.
by Odinn Cyberguerrilla 14 Jan '14

14 Jan '14

Hello, As you are probably aware, there has been a net neutrality ruling from US courts and it essentially kills net neutrality. Reference (this is just one of many news outlets announcing this) http://gigaom.com/2014/01/14/breaking-court-strikes-down-fccs-net-neutralit… This is surely no new concept to anyone on this list (the concept that we can't rely upon laws, need to use technical solutions to bypass what passes for government/corporation-state, etc.) but I have to say this net neutrality calls into stark contrast what we are doing with what we could be doing. And by we, I mean anyone using the internet. Many people use AT&T, or Verizon. Many people use Google and Facebook. Or Weibo. Or VK. Or... you get the picture. But rather than harp about any one company (or licensing approach, or ruling, etc) I want to emphasize decentralized systems beyond what many are accustomed to hearing about / using. When people hear "open source" or "p2p" they might think of Ubuntu, or Android (regarding open source OSs) or Bittorrent, or Piratebay (in terms of things that come to mind if an ordinary human is asked what do they thing of as an example of P2P or F2F tech). Given the news about Bitcoin it's a sure bet at least some people if asked on the street might also say 'Bitcoin' (or alternately, "what's P2P?" or "Software!") So you'll get a lot of responses and responses will vary substantially, but this is my sense based on talking to people I know around my (rather small) town. But how often do you hear people talking about what is needed to literally Decentralize Everything? Well, except for posts occasionally on lists like these, or meetings / discussions with like-minded people, or hackerspaces, or development discussions, the answer is Almost Never. Anyway, this recent ruling announcement re. net neutrality (or its death) here in the USA is just one more example of how we cannot rely upon laws, at least in my view. But it also made me think some more about this and realize that if we want decentralized protocols / solutions to spread at all, we have to do a way better job at being good advocates for them and talking about them incessantly to everyone in a way that is easy, simple, and makes sense to people. As this post already exhibits I can be very wordy and windbaggish. Further evidence of that fact is presented amply in my recent post here: https://odinn.cyberguerrilla.org/index.php/2014/01/02/opensourcebuildguide/ As I reflect on this I think about the following. 1) I need to make something shorter that easily introduces people to open source stuff. Something that's even simpler than prism-break (http://prism-break.org/) - an option which is so simple that anyone (at least in primary school levels) can understand it and act on things presented in it within less than a minute. Look. Software. Click (one click, two max!) to get it. Done. 2) What are some ways to Decentralize Everything? To the DNS and beyond? Stuff that comes to mind (remember, there is no one thing, there are no captains, there is no one solution, these are just examples of possible partial solutions being thrown out here): 2)a. https://github.com/bitcoin/bitcoin/ 2)b. https://github.com/namecoin 2)c. https://nameid.org/ 2)d. concepts like this http://torrentfreak.com/how-the-pirate-bay-plans-to-beat-censorship-for-goo… 2)e. Convergence for namecoin https://github.com/JeremyRand/Convergence/tree/namecoin 2)f. Convergence (a different one) https://github.com/moxie0/Convergence 2)g. Tack.io - for pinning (it's my understading that moxie0 prefers this direction, but I haven't been tracking it closely enough to say what is going on with it right now) --> http://tack.io/ 2)g.1. See also the Tack internet draft(!) at http://tack.io/draft.html 2)g.2. See also reference TACK implementations https://github.com/tack So... As I read through this, and similar stuff, I think to myself, something about this needs to be broadcast in a way that it is so easy to do, so simple to accept, that it meets the "everybody sees it (or it's in the news) and they click and download it" I know it's never really that simple. But I am throwing this out there because even more censorship is coming. And there are no captains, and we do need to decentralize everything. We must get A Lot more people on board with decentralization, open source, and as close to p2p as possible, we need to make it so easy to defeat censorship of anything that those who propose allowing it to happen will just throw up their hands in frustration. So the question (one of many!) is how to present this in a way that makes sense to a lot of people. A lot more than currently. OK I am done for now. your thoughts please

3 3

quietnet - near ultrasonic chirp based chat program
by gwen hastings 14 Jan '14

14 Jan '14

Hi All while NOT encrypted.. this sounds apt for some encryption and use in tradecraft(ie 2 spies in a coffeeshop/restaurant what have you.. etc...) https://github.com/Katee/quietnet gh ps in python no less :) -- Tentacle #99 ecc public key curve p25519(pcp 0.15) 1l0$WoM5C8z=yeZG7?$]f^Uu8.g>4rf#t^6mfW9(rr910 Governments are instituted among men, deriving their just powers from the consent of the governed, that whenever any form of government becomes destructive of these ends, it is the right of the people to alter or abolish it, and to institute new government, laying its foundation on such principles, and organizing its powers in such form, as to them shall seem most likely to effect their safety and happiness.’ https://github.com/TLINDEN/pcp.git to get pcp(curve25519 cli)

1 1

Re: [Cryptography] Boing Boing pushing an RSA Conference boycott
by John Young 14 Jan '14

14 Jan '14

Shirley Jackson, The Lottery, sacrificing a victim purges guilt of the guilty. Does anyone really believe RSA is alone in this "betrayal?" And that making an example of RSA will stop the industry practice of forked-tonguedness about working both sides of the imaginary fence of dual-use, dual-hat, duplicity of comsec? "Industry standards" were invented and are sustained for this purpose. No matter NSA, RSA, IETF, NIST, this breast-beating list of the guilty cryptographers pretending they did not know what their best customers and employers are doing. Boing Boing is being played like the crypto promotional wargame is played.

1 0

Re: 'Jury Booty' and Anti-prosecution tactics. (Was Re:)
by Bill Stewart 14 Jan '14

14 Jan '14

At 05:02 PM 1/12/2014, Jim Bell wrote: >... Authorities, no doubt, would want to label this 'jury >tampering'. <http:///>http://en.wikipedia.org/wiki/Jury_tampering > However, it is likely that if no actual 'offer' is made to a >specific juror, and 'everybody' simply KNOWS that these payments >will occur (due to prior advertising and other publicity, and >because other jurors have always been paid in the past), this should >not run afoul of such laws. Of *course* they'd want to label it 'jury tampering', because it *is* jury tampering. It's an offer to bribe the jurors to acquit somebody they might otherwise convict. It directly runs afoul of jury tampering laws, and the only difference from traditional jury tampering is that it *might* be easier not to get caught. I do prefer it to some other traditional kinds of jury tampering, including the one where the government only allows prosecution-friendly jurors, and the one where the payment for acquittal is "not getting your legs broken". (The latter, btw, also has some anonymity built into the payment mechanism, since it's easy to deliver the payment anonymously to jurors who accept.) But they're all perversions of justice.

7 7

fuzzing at scale
by coderman 14 Jan '14

14 Jan '14

or, "keeping the 0day hopper full of candidates to weaponize" (you red or blue team? ;) http://googleonlinesecurity.blogspot.com/2014/01/ffmpeg-and-thousand-fixes.… """ FFmpeg and a thousand fixes Friday, January 10, 2014 9:06 AM Posted by Mateusz Jurczyk and Gynvael Coldwind, Information Security Engineers At Google, security is a top priority - not only for our own products, but across the entire Internet. That’s why members of the Google Security Team and other Googlers frequently perform audits of software and report the resulting findings to the respective vendors or maintainers, as shown in the official “Vulnerabilities - Application Security” list. We also try to employ the extensive computing power of our data centers in order to solve some of the security challenges by performing large-scale automated testing, commonly known as fuzzing. One internal fuzzing effort we have been running continuously for the past two years is the testing process of FFmpeg, a large cross-platform solution to record, convert and stream audio and video written in C. It is used in multiple applications and software libraries such as Google Chrome, MPlayer, VLC or xine. We started relatively small by making use of trivial mutation algorithms, some 500 cores and input media samples gathered from readily available sources such as the samples.mplayerhq.hu sample base and FFmpeg FATE regression testing suite. Later on, we grew to more complex and effective mutation methods, 2000 cores and an input corpus supported by sample files improving the overall code coverage. Following more than two years of work, we are happy to announce that the FFmpeg project has incorporated more than a thousand fixes to bugs (including some security issues) that we have discovered in the project so far: $ git log | grep Jurczyk | grep -c Coldwind 1120 ... we have carried out several dozen fuzzing iterations (each typically resulting in less crashes than the previous ones) over the last two years, identifying bugs of a number of different classes: NULL pointer dereferences, Invalid pointer arithmetic leading to SIGSEGV due to unmapped memory access, Out-of-bounds reads and writes to stack, heap and static-based arrays, Invalid free() calls, Double free() calls over the same pointer, Division errors, Assertion failures, Use of uninitialized memory. We have simultaneously worked with the developers of Libav, an independent fork of FFmpeg, in order to have both projects represent an equal, high level of robustness and security posture. Today, Libav is at 413 fixes and the library is slowly but surely catching up with FFmpeg. """

1 0