August 2017 - cypherpunks@lists.ogf.org

Should Firefox have implemented an insecure sandboxed browser?
by Ryan Carboni 25 Aug '17

25 Aug '17

Should Firefox have implemented an insecure sandboxed browser vs waiting to perfect a browser and then releasing it? It's hard to say. If the decision immediately broke exploits and increased the difficulty by even a single digit percentage, maybe, but Zerodium took time to make decisions on this, so it won't be for months if any decision would be the right one. Regardless: https://www.schneier.com/academic/paperfiles/paper-keylength.pdf Type of Attacker, (Budget), Length Needed for Protection in 1995 Small Business, ($10,000), 55 Corporate Department, ($300K), 60 Big Company ($10M), 70 Intelligence Agency, ($300M), 75 it is safe to say that all consumer products provide only 60 bits of security in 1995 dollars, with the exception of mobile devices. Few know this, but during the Fappening, Hollywood fixers attempted to exhaust the bandwidth of those sharing the photos. Some of those fixers previously hired Pellicano, who engaged in wiretapping to aide one side gain an edge during a dispute. There is plenty of money for cybersecurity. No one went looking.

1 0

Lawfare Cybercrime Roundup: Rehabilitation and Recidivism in Cybercriminals
by Razer 25 Aug '17

25 Aug '17

Don't troll me dudes! > This summer, the cases of two cyber criminals (Mark Vartanyan and > Muneeb Akhtar) posed a stark contrast in rehabilitation and recidivism. https://lawfareblog.com/cybercrime-roundup-rehabilitation-and-recidivism-cy…

1 0

Purism Librem 5: Opensource Crypto Phone
by grarpamp 24 Aug '17

24 Aug '17

https://www.youtube.com/watch?v=QUiYmtGL1EE https://www.youtube.com/watch?v=hwFjWDAyG38 https://news.ycombinator.com/item?id=15090156 https://matrix.org/blog/2017/08/24/the-librem-5-from-purism-a-matrix-native… https://puri.sm/shop/librem-5/

1 0

On BSD
by grarpamp 24 Aug '17

24 Aug '17

https://www.freebsd.org/releases/11.1R/announce.html https://dist.ipfs.io/#go-ipfs https://gitweb.dragonflybsd.org/dragonfly.git/blob_plain/HEAD:/sys/vfs/hamm… https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/zfs.html https://geti2p.net/

1 0

Right To Privacy Ruled a Fundamental Right by Supreme Court (Real-ID)
by grarpamp 24 Aug '17

24 Aug '17

https://thewire.in/170303/supreme-court-aadhaar-right-to-privacy/ http://timesofindia.indiatimes.com/india/right-to-privacy-is-a-fundamental-… https://www.scribd.com/document/357098939/SC-Right-to-Privacy-Judgment https://news.ycombinator.com/item?id=15087831 487 points 187 comments Right to Privacy a Fundamental Right, Says Supreme Court in Unanimous Verdict On Thursday, the bench, led by Chief Justice J.S. Khehar, pronounced a unanimous judgement even if the judges had slightly different arguments as to how privacy is intrinsic to right to life and liberty. The bench comprised Chief Justice Khehar and Justices J. Chelameswar, S.A. Bobde, R.K. Agrawal, Rohinton Nariman, A.M. Sapre, D.Y. Chandrachud, Sanjay Kishan Kaul and S. Abdul Nazeer. In its 547-page judgment that declares privacy to be a fundamental right, the Supreme Court has overruled verdicts given in the M.P. Sharma case in 1958 and the Kharak Singh case in 1961, both of which said that the right to privacy is not protected under the Indian constitution. The judgment includes within it six separate judgments from different judges, though the conclusion is unanimous. The Wire has broken the main judgment into its constituent parts to make it easier to see what the different judges said. (see below) The judgment also included a two-page final order, which states that MP Sharma and Kharak Singh are overruled, and the right to privacy is fundamental. The lead judgment of 265 pages, authored by Justice D.Y. Chandrachud and co-signed by Chief Justice Khehar and Justices Nazeer and Agrawal states the following clear conclusions: ... NEW DELHI: The Supreme Court (SC) on Thursday ruled that privacy is a fundamental right because it is intrinsic to the right to life. "Right to Privacy is an integral part of Right to Life and Personal Liberty guaranteed in Article 21 of the Constitution," the SC's nine-judge bench+ ruled unanimously. It added that the right to privacy is intrinsic to the entire fundamental rights chapter of the Constitution. This judgement is a blow to Aadhaar as the Centre now has to convince SC that forcing citizens to give a sample of their fingerprints and their iris scan does not violate privacy. The SC bench's judgment will touch the lives of 134 crore Indians. It was not meant to decide on the fate of Aadhaar, just on whether privacy of an individual was a part of their inviolable fundamental rights. What this means is a five-judge bench of the SC will test the validity of Aadhaar on the touchstone of privacy as a fundamental right.

1 0

Exploit Signal / WhatsApp / Everything for $500k (Keep Ur Privates FTW)
by grarpamp 24 Aug '17

24 Aug '17

https://news.ycombinator.com/item?id=15084413 https://en.wikipedia.org/wiki/Market_for_zero-day_exploits https://zerodium.com/program.html ZERODIUM pays premium bounties and rewards to security researchers to acquire their original and previously unreported zero-day research affecting major operating systems, software, and devices. While the majority of existing bug bounty programs accept almost any kind of vulnerabilities and PoCs but pay very low rewards, at ZERODIUM we focus on high-risk vulnerabilities with fully functional exploits, and we pay the highest rewards on the market. Payments can also be made using Bitcoins.

1 0

Technological innovations and society: Expectation vs Reality
by Razer 24 Aug '17

24 Aug '17

In a screenshot: https://twitter.com/xxxdretentacion/status/899076829855830016

1 0

https://www.opennic.org/
by juan 24 Aug '17

24 Aug '17

may be useful to deal with DNS censorship?

3 2

Cryptocurrency Payment API's: Needed FTW
by grarpamp 23 Aug '17

23 Aug '17

https://www.reddit.com/r/btc/comments/6uo8oo/bitpay_if_you_are_reading/ Maybe its time you guys added support for other coins (ETH,BCH,LTC?) on payment checkout pages, right now any clients of mine who want to pay are being [forced into btc] your core business is not bitcoin (whatever that means nowadays with what 3 forks?) its making it easy for companies/people to get paid in Cryptocurrencies. Maybe its time to diversify...

1 1

PermitsCensorsBans of Free Speech/Association/Travel Exposes Authority/Force/Censors
by grarpamp 23 Aug '17

23 Aug '17

What Happened To Chris Cantwell and How Government Causes Racism https://www.youtube.com/watch?v=NbBzJDvc7nY Cantwell, Stormer, Tor Project, Cloudflare, etc https://www.youtube.com/results?search_query=cantwell https://www.youtube.com/watch?v=TVmFHoHutdQ https://www.youtube.com/results?search_query=cantwell+banned https://www.youtube.com/results?search_query=cantwell+tor https://www.youtube.com/results?search_query=cantwell+darkweb https://www.youtube.com/results?search_query=cloudflare+stormer http://dstormer6em3i4km.onion/ https://papersplease.org/ https://en.wikipedia.org/wiki/United_States_presidential_debates#Debate_spo… https://en.wikipedia.org/wiki/Commission_on_Presidential_Debates#Criticism Regardless of whether or not you like what's on any given channel, any inability to change it to another due to Authority/Force/Censors, to speak, to associate, to travel, to debate... is a very serious matter.

1 0