Re: cryptome-nov2015
Cryptome disavows mirrors of its archive, all of them, due to ease and evidence of tampering with files, hashes, signatures and insertion of implants by the host, platform, route, service or all. The archives should prominently display this disavowal and name the archive "Cryptome-Disavows-This-Corrupt-Archive." At 05:10 PM 11/28/2015, you wrote:
cryptome-nov2015.tar.bz 76GByte Nov 28 05:58 sha256 22572573c0538e09bf554f475f3113fbbd33920e2bf6691f65450ea8e2333edb
[ seeding... plz wait... ]
Content-Type: image/png; name="cryptome-nov2015.png" Content-Disposition: attachment; filename="cryptome-nov2015.png" X-Attachment-Id: f_ihjnir3o0
The archives should prominently display this disavowal and name the archive "Cryptome-Disavows-This-Corrupt-Archive."
Is that how you'll label and name the files when you send them out? Seriously, John, this is getting a little ridiculous. Is it really that easy to fake a hash and sig while making thousands of files appear to be what it's supposed to be and still add up and hash correctly? Sent from my iPhone
On Nov 28, 2015, at 5:49 PM, John Young <jya@pipeline.com> wrote:
Cryptome disavows mirrors of its archive, all of them, due to ease and evidence of tampering with files, hashes, signatures and insertion of implants by the host, platform, route, service or all.
The archives should prominently display this disavowal and name the archive "Cryptome-Disavows-This-Corrupt-Archive."
At 05:10 PM 11/28/2015, you wrote:
cryptome-nov2015.tar.bz 76GByte Nov 28 05:58 sha256 22572573c0538e09bf554f475f3113fbbd33920e2bf6691f65450ea8e2333edb
[ seeding... plz wait... ]
Content-Type: image/png; name="cryptome-nov2015.png" Content-Disposition: attachment; filename="cryptome-nov2015.png" X-Attachment-Id: f_ihjnir3o0
And as a follow-up, will you send WikiLeaks an email asking them to do the same with the version mirrored at Cryptome.wikileaks.org/frontpage ? Course not - because the whole thing is ridiculous. Paranoia is poison when it's out of proportion, and the computing power needed to fake the files, hashes and cryptographic signatures is WAY out of proportion to any gain from it, which is hypothetical at best. Sent from my iPhone
On Nov 28, 2015, at 5:57 PM, Michael Best <themikebest@gmail.com> wrote:
The archives should prominently display this disavowal and name the archive "Cryptome-Disavows-This-Corrupt-Archive."
Is that how you'll label and name the files when you send them out?
Seriously, John, this is getting a little ridiculous. Is it really that easy to fake a hash and sig while making thousands of files appear to be what it's supposed to be and still add up and hash correctly?
Sent from my iPhone
On Nov 28, 2015, at 5:49 PM, John Young <jya@pipeline.com> wrote:
Cryptome disavows mirrors of its archive, all of them, due to ease and evidence of tampering with files, hashes, signatures and insertion of implants by the host, platform, route, service or all.
The archives should prominently display this disavowal and name the archive "Cryptome-Disavows-This-Corrupt-Archive."
At 05:10 PM 11/28/2015, you wrote:
cryptome-nov2015.tar.bz 76GByte Nov 28 05:58 sha256 22572573c0538e09bf554f475f3113fbbd33920e2bf6691f65450ea8e2333edb
[ seeding... plz wait... ]
Content-Type: image/png; name="cryptome-nov2015.png" Content-Disposition: attachment; filename="cryptome-nov2015.png" X-Attachment-Id: f_ihjnir3o0
"Online distribution is likely to be insecure, logged, tracked, spied, and tampered. " - Cryptome.org
On Sat, Nov 28, 2015 at 4:33 PM, coderman <coderman@gmail.com> wrote:
"Online distribution is likely to be insecure, logged, tracked, spied, and tampered. " - Cryptome.org
"This is a trap, witting and unwitting. Do not use it or use at own risk. Source and this host is out to pwon and phuck you in complicity with global Internet authorities. ... Signed Batshit Cryptome and Host, 9 July 2014, 12:16ET." - cypherpunks/2014-July/005020.html, and true for nov2015, too.
An ode to traps: https://m.youtube.com/watch?v=v36B3KRKiME https://m.youtube.com/watch?v=xK9xMMxJpdw ;) Sent from my iPhone
On Nov 28, 2015, at 7:35 PM, coderman <coderman@gmail.com> wrote:
On Sat, Nov 28, 2015 at 4:33 PM, coderman <coderman@gmail.com> wrote: "Online distribution is likely to be insecure, logged, tracked, spied, and tampered. " - Cryptome.org
"This is a trap, witting and unwitting. Do not use it or use at own risk. Source and this host is out to pwon and phuck you in complicity with global Internet authorities. ... Signed Batshit Cryptome and Host, 9 July 2014, 12:16ET." - cypherpunks/2014-July/005020.html, and true for nov2015, too.
participants (3)
-
coderman -
John Young -
Michael Best