- cypherpunks - lists.cpunks.org

Replacing corporate search engines with anonymous/decentralized search
by Jesse R. Taylor 18 Jan '14

18 Jan '14

Recently there has been a lot of focus on the importance of developing more secure alternatives to email, instant messaging, browsing, etc. ... but I've seen very little focus on the need for development of alternatives to corporate search engines. Corporate/state control of the Internet involves a three pronged strategy of: mass surveillance, censorship/criminalization of undesirable ideas, and traffic shaping (i.e. directing people away of things you don't want them to see, and towards things you do). Corporate search engines are implicated in all three of these, i.e. they: 1) Monitor what we are searching for 2) Censor websites by removing them from search engine indexes 3) Shape traffic via non-transparent algorithms that can sort search results in a way that grants prominence to certain types of sites (corporate media, etc.), in order to suit the interests of multinational corporations and governments. ... so obviously, developing alternatives to corporate search is every bit as crucial for protecting privacy and free speech as encrypting our emails/chats, and anonymizing our browsing ... But I've seen very little information about practical/simple options that are available for anonymous and decentralized Internet search software. I've only been able to find a few examples like YaCy, but they all seem overly complex and unusable by the vast majority of users. What are the major barriers to creating simple tools (e.g. a plugin for Firefox) that would enable users to perform anonymous, p2p web search (even if it's much slower than centralized search) and break away from using corporate search? Which current efforts to create decentralized search seem most promising to you from a privacy/security standpoint? -- Jesse Taylor

12 22

Fwd: Email is unsecurable - maybe not?
by grarpamp 18 Jan '14

18 Jan '14

More direct junkmail... ---------- Forwarded message ---------- From: Doug McFetters <dmcfetters(a)shazzle.com> Date: Thu, Jan 16, 2014 at 2:06 PM Subject: Email is unsecurable - maybe not? To: grarpamp(a)gmail.com Hello I ran across the Nov 25 blog post on RandomBit.net titled ‘Email is unsecurable.’ I think we have pretty much developed what was imagined here. We identified the same flaws with email and came up with sending p2p tossing aside client/server architecture and using the sender’s smartphone as a server. And, like it was suggested, we don't send until someone comes up on line. App is free for consumers with iOS or Android device. Currently have tools for POP3/SMTP clients or our own slimmed down email client. Would love for you to try it out and let us know what you think. Or happy to hop on a call to discuss in more detail. Here is a link to get started - http://shazzlemail.com/quick-start Thanks Doug Doug McFetters VP, Operations Public: dmcfetters(a)shazzle.com Private & Secure: doug(a)zmail.shazzlemail.com (602) 793-1058 [image: Logo v7 small] ShazzleMail.com <http://www.sparqd.com/> | Visit us on Facebook! This email is only for the use of the intended recipient. Any unauthorized use or distribution is prohibited. If you received this email in error, please reply to the sender and destroy all copies of the email.

1 0

PROFESSIONAL VICTIM CARI MACHET...time for DOXING
by Anonymous Remailer (austria) 18 Jan '14

18 Jan '14

hmm seems like anonymous may have a new project DOXING a fake indian/professional victim and publishing all of her sordid details publicly.. perhaps public shame will cause modification of her behavour.. for one thing though when you choose to announce 5 nations(civilized tribe) blood or membership as a way of winning discussions its like saying your great great grand parents and ALL of their family were awoken in the middle of the night and force marched 2k+ miles without supplies or belonging in an affort to exterminate them deiberately Do that around an actual descendant of the 5 nations and you will get checked out and backgrounded... again.. its not something for idle chitchat... other racial groups that have experience same such as the jewish "racial" grouping also keep track of holocaust survivor member names and descendants for reparation and claims, By a similar token citizenship or kin ship with a member of an indian nation is taken quite seriously by a lot of us as in the case of Cherokee or Seminole band membership an and reservation status may convey serious financial advantage or hardship(depending on which tribe) ie for seminole or cherokee it may mean a share of casino profits and land for choctaw band/nation indians it means getting included as part of Obummers new plantation system (the choctaw nation was called out specifically) for navajo nation bands it means your res is mined for Uranium and thorium and you get to have ALL your water supplies polluted by the white owned company that was given permission to invade and ruin what is essentially a foreign nation by the USG(this is present day) SO a BIG FUCK YOU to CARI MACHET FAKE WHITE BITCH CLAIMING 5 nations membership You and Paula Deen both should compare your makeup REDFACE/BLACKFACE makeup BITCHES AND CUNTS you BOTH are from the white establishment.. NO STUPID YOU DONT LOOK A BIT LIKE a CHEROKEE BAND INDIAN! BITCH

2 1

more NTRU fun: Homomorphic AES Evaluation Using NTRU
by coderman 18 Jan '14

18 Jan '14

http://eprint.iacr.org/2014/039.pdf [see pdf for citations / bib] """ ... Fully homomorphic encryption has come a long way in a mere few years since the first plausibly secure construction was introduced by Gentry in 2009. This advance settled an open problem posed by Rivest, and opened the door to many new applications. In a nutshell, by employing FHE one may perform an arbitrary number of computations directly on the encrypted data without revealing the secret key. This feature, makes FHE a powerful tool in multi-party computing and perfectly suited to protect sensitive data in distributed applications including those hosted on semi-trusted cloud servers. The eciency bottleneck that prevents FHE from being deployed in real-life applications is now being bridged with the introduction of numerous new optimizations and related proof-of-concept implementations. The rst implementation of an FHE variant was proposed by Gentry and Halevi. An impressive array of optimizations were proposed with the goals of reducing the size of the public-key and improving the performance of the primitives. Still, encryption of one bit takes more than a second on a high-end Intel Xeon based server, while recrypt primitive takes nearly half a minute for the lowest security setting... a GPU based implementation of the same scheme was developed which managed to reduce the recryption time to a few seconds. Recently more ecient schemes emerged based on the hardness of learning with errors (LWE) problem... Brakerski, Gentry, and Vaikuntanathan (BGV) introduced an LWE based scheme that reduces the need for bootstrapping. Instead the BGV scheme uses a new lightweight method, i.e. modulus switching, to mitigate noise growth in ciphertexts as homomorphic evaluation proceeds. While modulus switching cannot restore the original level of noise as bootstrapping does, it still manages to gain exponentially on depth of the circuits evaluated without aecting the depth of the decryption circuit. Therefore, as long as we can x the depth of the circuit a priori, we can perform evaluations without bootstrapping using a leveled implementation. Smart and Vercauteren presented a number of batching techniques for packing multiple data streams into a single ciphertext. Gentry, Halevi and Smart introduced the ﬁrst evaluation of a complex circuit, i.e. a full AES block evaluation by using a BGV style scheme introduced earlier by the same authors. The scheme makes use of batching, key switching and modulus switching techniques to obtain an eﬃcient leveled implementation. Three batching techniques are used to obtain bit–sliced, byte–sliced and SIMD implementations. With 5 minutes per block evaluation time the byte-sliced implementation is faster, but also requires less memory. The SIMD implementation takes about 40 minutes per block. Alt-L´pez, Tromer and Vaikuntanathan (ATV) presented a leveled FHE scheme based on the modiﬁed NTRU scheme introduced earlier by Stehle and Steinfeld. A unique aspect of the ATV scheme is that it supports homomorphic evaluation of ciphertexts encrypted by using public keys assigned to diﬀerent parties. The authors outline the scheme using a leveled implementation and introduce a technique called relinearization to facilitate key switching during the levels of the evaluation. Modulus switching is also performed after multiplication and addition operations. The security of ATV scheme relies on two assumptions: the ring LWE assumption, and the Decisional Small Polynomial Ratio (DSPR) assumption. The scheme also supports bootstrapping. While the scheme is appears to be eﬃcient, the analysis ... lacks concrete parameters. Very recently Bos et al. presented a leveled implementation based on ATV . The authors modify the proposed scheme in a number of aspects to build up their own fully homomorphic scheme. The semantic security of ATV is based on uniformity of the public key which relies on the DSPR assumption.. the ATV scheme is modiﬁed by adopting a tensor product technique introduced by Brakerski such that the security depends only on standard lattice assumptions. Furthermore, modulus–switching is no longer needed due to the reduced noise growth. Lastly, the authors improve the ﬂexibility of the scheme by splitting the message using the Chinese Remainder Theorem and then encrypting them into separate ciphertexts. This makes integer based arithmetic easier and more eﬃcient with a cost of a reduction in the depth of circuits that can be evaluated with the scheme. Our Contributions. We introduce an implementation of the ATV FHE scheme along with a number of optimizations. More speciﬁcally we: • present a batched, bit-sliced implementation of the ATV scheme. The implementation is generic and is not customized to optimally evaluate any class of circuits (e.g. AES) more eﬃciently than other. • resolve the parameter selection issue in the light of recent theoretical and experimental results in the ﬁeld of lattice reduction. • introduce a specialization of the rings that simpliﬁes modulus reduction and allows us to signiﬁcantly reduce the size of the public key. We show that the impact of this specialization on the key space is negligibly small. Even further, with the specialization key switching is no longer needed. • rigorously analyze the noise growth of the ATV scheme over the levels of computation, and develop a simple formula for estimating the number of bits one needs to cut during the modulus reduction step. • homomorphically evaluate the full 128-bit AES circuit in a bit-sliced implementation to demonstrate the scalability of the introduced technique. Our implementation is 5 times faster than the byte sliced implementation and 43 times faster than the SIMD implementation of [other FHE...]. """

2 1

wld b nice to know what these procedures entail
by Cari Machet 18 Jan '14

18 Jan '14

http://www.theguardian.com/world/interactive/2013/jun/07/obama-cyber-direct… pg 6 > footnote "...electromagnetic or directed energy to control the electromagnetic spectrum or to attack the enemy. Electronic warfare consists of three divisions: electronic attack, electronic protection, and electronic warfare support." -- Cari Machet NYC 646-436-7795 carimachet(a)gmail.com AIM carismachet Syria +963-099 277 3243 Amman +962 077 636 9407 Berlin +49 152 11779219 Twitter: @carimachet <https://twitter.com/carimachet> Ruh-roh, this is now necessary: This email is intended only for the addressee(s) and may contain confidential information. If you are not the intended recipient, you are hereby notified that any use of this information, dissemination, distribution, or copying of this email without permission is strictly prohibited.

2 3

name machet NOT found at http://www.accessgenealogy.com/native/final-rolls.htm
by Anonymous Remailer (austria) 18 Jan '14

18 Jan '14

its real simple I dont like fakes hmm lets see you committed an act of battery against a german police officer while claiming to be be a cherokee american indian/aboriginal, to wit you admitted in a public forum that you committed the act of assault(fighting with a police officer) violating section 113.1 of the German criminal code. "Whosoever, by force or threat of force, offers resistance to or attacks a public official or soldier of the Armed Forces charged with the enforcement of laws, ordinances, judgments, judicial decisions or orders acting in the execution of such official duty shall be liable to imprisonment not exceeding two years or a fine." as the punishment is up to 2 years by american legal standars you have committed a felony and blamed my racial group in doing so.. This in a legal jurisdiction notorius for historically pursuing racial profiling/purity etc and track same in their national police intelligence systems. You are no better that any other white racist in blackface/redface makeup.. except in this case you chose to lie about your descent. Membership in ANY of the indian tribes and familial band that are a registered tribe with the USG is easily checked.. This was all setout by treaty after the american holocaust known as the trail of tears when the nascent USG did their level best to exterminate my family and all of my relations and by lineal descent moi. I will point you to http://www.accessgenealogy.com/native/final-rolls.htm where the familial name machet appears on NONE of the tribes recognized by treaty( which includes 4 seperate lists for the cherokee nation.) SO if you are NOT a obsessive liar Cari machet either supply a familial name and relationship to the tribal rolls or publically apologize to the Cherokee Nation for having defamed same.. or suffer the consequences.. negative exposure in all tha media that a clever cypherpunk can reach in essence Information Warfare Level - 1 reputation capital reduction publication of true and untrue negative statements about the target in question with the intent that these public statement make their way into intelligence files and dossiers kept by national/police/corporate security organization. Also known as "dirtying up someones reputation", technique to get someone investigated by DHS/IRS etc... Paula Deen aint got nothing on you bitch...

5 5

page 8
by Cari Machet 18 Jan '14

18 Jan '14

https://fas.org/irp/offdocs/ppd/ppd-28.pdf "a report assessing the feasibility of creating software that would allow the IC more easily to conduct targeted information acquisition rather than bulk collection." -- Cari Machet NYC 646-436-7795 carimachet(a)gmail.com AIM carismachet Syria +963-099 277 3243 Amman +962 077 636 9407 Berlin +49 152 11779219 Twitter: @carimachet <https://twitter.com/carimachet> Ruh-roh, this is now necessary: This email is intended only for the addressee(s) and may contain confidential information. If you are not the intended recipient, you are hereby notified that any use of this information, dissemination, distribution, or copying of this email without permission is strictly prohibited.

1 0

Call for Papers: LangSec Workshop @ IEEE Security & Privacy 2014
by Bill Scannell 18 Jan '14

18 Jan '14

Hi all, The First Workshop on Language-Theoretic Security (LangSec) at the IEEE CS Security & Privacy Workshops solicits contributions related to the growing area of language-theoretic security. The workshop will be held on May 18, 2014. For more information, visit: http://spw14.langsec.org . The overall goal of the workshop is to bring more clarity and focus to two complementary areas: (1) practical software assurance and (2) vulnerability analysis (identification, characterization, and exploit development). The LangSec community views these activities as related and highly structured engineering disciplines and seeks to provide a forum to explore and develop this relationship. Looking forward to hearing from you, Bill

1 0

Re: "Blackphone" said to be "a super-secure nsa-proof"
by coderman 17 Jan '14

17 Jan '14

"super-secure nsa-proof" phone... this shit is hilarious! will it ever get old? :P~ smartphones our Achilles heel: so convenient, so entirely privacy destroying and inherently vulnerable and insecure (as of existing closed baseband systems, proprietary chipsets, poorly keyed, weakly ciphered, horribly authenticated, geo location and side channel leaking sieves we call handsets today that is...) some have suggested the GTA04[0], which i do like, and also liked the original GTA01 back in the day. however, the ideal platform would be wideband SDR on a coreboot mobile with virtualization support (e.g. mobile Qubes OS with MIMO SDR radios and hardware protected key management) one last comment on smart phones and mobile networks: they do offer myriad and many methods to pollute the upstream; indications are this delays rather than defends, but still interesting and enjoyable none the less *grin* 0. OpenMoko GTA04 handsets [avail since 2011] http://wiki.openmoko.org/wiki/GTA04

1 0

Requesting Removal of CARI MACHET/FAKE INDIAN from cypherpunks..
by Anonymous Remailer (austria) 17 Jan '14

17 Jan '14

subject should remove herself for being softheaded to the point of confusing herself Cari Machet is also believed to be working undercover for the NSA

5 5