December 2019 - cypherpunks@lists.ogf.org

tor stinks, take #376029
by Punk-Stasi 2.0 02 Dec '19

02 Dec '19

https://www.freehaven.net/anonbib/cache/active-pet2010.pdf "Suppose the adversary runs just two routers. If we take into account the way Tor chooses circuits, the size of the network ], and the number of users observed on Tor in one day , we expect the adversary to compromise 15 users at least once in that day. If the adversary provides the top two routers by bandwidth, the expected number of compromised users increases to 9464.1 Thus, the system provides poor anonymity against a wide variety of realistic opponents, such as governments, ISPs," that comes directly from supreme scum-master syverson himself. What's really astounding is that at the same time syverson and the rest of tor shitbags advertise tor as a means for people to "protect themselves against traffic analysis". "

2 3

Zerostash: Zero-metadata object store
by grarpamp 02 Dec '19

02 Dec '19

https://github.com/rsdy/zerostash Zerostash is a deduplicated, encrypted data store that provides native versioning capabilities, and was designed to secure all metadata related to the files, including the exact size of the data that is stored in the containers. Use cases Versioned backups in the cloud, or external hard drives Encrypt and store entire workspaces for fast sync between computer Easily sync & wipe data & encryption programs while travelling Storage and sync backend for offsite backups Threat model Protect data confidentiality, integrity and authenticity The exact size of data should not be known Individual user data shouldn't be attributable on shared storage Once a data is shared, it is no longer secure. Deleting data from the storage should be possible Access to only the key and raw data should not be sufficient for full data compromise

1 0

Cryptocurrency: Anonymous to Invest $75M of Crypto to Develop Privacy Coins and Anon Tech
by grarpamp 02 Dec '19

02 Dec '19

> Is there a location at which these proposals have been published? They are not currently publishing the applications by default because they currently view that as harming potential startups. Though you can send them project press releases for publishing to: chris_unknown_fund(a)protonmail.com There are probably no third party locations because most proposals are likely to be from typical "startup" space that is usually trying to secretly extract money from each other and the market, than giving good things to the world. > Has anyone proposed what we propose doing, building > an anonymization network... done-right? Unknown. But if you're serious about doing anything with them you need to get at least some kind of hello application in now because they have a lot of apps in the pipeline, and they say applications are closed. So it'll have to be something good to bypass the rest. As to some recently mentioned ones... 1) A new general purpose secure *PA resistant internet overlay transport network built from good current and new research, including use of pluggable RF module tech. Many apps can ride. And it should be designed to be a factor stronger than tor, i2p, and all the rest are today. 2) An OpenAudited OpenFab building OpenHW (including CPU, GPU, ASIC, RF, Phones), to run all the OpenSW on. 3) There should be an application for strictly a cryptocurrency... distributed, privacy in protocol by default, cpu transaction mined, no 100GB's of blockchain history only a UTXO state db, and strictly serving only the "currency / money / cash" function, fast lightweight hard, no premine, no support for tokens, contracts, data, or any other bloatware at all, just a plain old fashioned single purpose cash. Maybe multisig and timelock for safer holding, but that's it, the less the better will yield recognition as purely money and reach primary goal of cryptocurrency adoption faster therein. It must be capable of running over anonymous overlay networks. 4) And an application for a genuine fully distributed cross-chain DEX (CCDEX) is a remaining tech that is desperately needed to help complete the cryptocurrency function space. It must be capable of running over anonymous overlay networks. Few want to do 1, 3, or 4, because when done right, there's no profit or control over other people for them to have, and that's how it should be. Though 2 can profit once it gets running, it would be better if it spent its profit to seed independant redundant copies of itself and or other needed projects. So far most of the online chatter seems to be about getting yet more pointless shitcoins off the ground than working on fundamental underlying tech the fund, or at least some of us, would like to see. I'd even help review some of the apps but I'm not in that loop. https://www.unknown.fund/ https://twitter.com/fund_unknown anon_fund(a)protonmail.com chris_unknown_fund(a)protonmail.com

3 3

Nextgen G* Traffic Analysis Resistant Overlay Networks (re Tor stinks)
by grarpamp 02 Dec '19

02 Dec '19

Various wrote: > "seconds of traffic" refers to the global buffer space > and time required for *PA find a solution within it. > I've wondered whether it's just that they need lots of users for cover > traffic. That _was_ a major factor in opening Tor to the public, instead > of restricting it to government users. But that seems unlikely, now, > given that the NSA etc could easily run enough bots on hacked servers. > My guess is that the main reason for them to get as many users as they can is to justify funding. Hell, maybe they even get a percentage of funding directly proportional to number of users/network size. > The Tor rationale for requiring low latency was to make it more > user-friendly and also thereby increase (innocent) traffic. > Unfortunately that came at the cost of easier traffic analysis, as only > the traffic passed within the last 4-5 seconds need be considered. They > tried to balance that out - more traffic plus greater usability vs > easier analysis > Initially the main reason was to increase traffic, in order to make traffic analysis harder. https://metrics.torproject.org/ Tor doesn't use traffic fill, many seem to talk about that from "omg bandwidth" rather than how it could potentially be used. A net that uses fill doesn't necessarily have to be full of 10k-10M+ whatever many users to achieve TA resistance. And even a fill net of just 100 nodes could work well for whatever users it does or doesn't have. The tor network can be quite sparse with voids of low traffic / users. Tor did traffic weighting probabilities to try to counter some of the single user paths that would obviously otherwise be created by pure random routing through such voids. However adversaries can still describe analysis and attacks against users passing strictly through only the most saturated of nodes, it's a bit harder, with fewer options, but still doable. Interestingly, such a weighting system is a gravity well... "more users" just distribute themselves into its available density slots... thus adding "more users" to the network doesn't necessarily make that type of network more secure, they just increase the physical size of the blackhole. Whether the net has 1k or 1M users, they're all going to be within some standard deviation of density that they themselves create among the well... from 1.0 when links are saturated in the singularity, out to 0.0 in voidspace. Users have no real guarantee they will fall into some feelgood safety slot, say around >=0.85, nor does it matter since as above, adversaries can still attack 1.0. A fill network can more readily use random routing, and its smaller volunteer node operators are happier since they have a more equal chance to carry traffic. Fill or non fill, random or not, your path is still subject to both the worst, and the sum of, all the headroom capacities and latencies it traverses... unless you start getting into distributing signalling for that around the network, which is probably a complex task. Tor allows users to pick empty paths if they don't care about voids. Any next generation network should have some user facing path selection knobs to handle censorship and anti-Sybil subscriptions. Also, if they know their endpoints (a local: chat friend, exit website, hidden server), a fill network might allow users to better play off jurisdictional spy buffers and performance bets by selecting local nodes only... whereas a non fill gravity network might leave voids in their region, that the less advanced adversaries in their region might otherwise more easily exploit, thus prohibiting use of local selections to achieve better latency performance, ie: for messaging during a regional / local protest, or for much faster local / guerrilla links for filesharing, etc. This notion of potentially staying local under a fill network, versus being forced to go path out through the gravity well, may also reduce load over virtual intercontinental paths, ie: the network might begin to naturally emulate backbone tiering but with no additional spy buffer risk due to the entire network fill. The Phantom network had some free thinking into developing for users to make such selections metrics over its node set. Tor still blankets users who ask about selecting nodes... with "no", and they secret up anti-Sybil bad-relay ops under "yep tor has that" "dirauths are trusted" "no worries" advertising that tend to keep independant user based efforts to do such things from starting up.

1 0

As Venezuela’s economy plunges, citizens turn to hacking and cybercrime for easy money
by Steven Schear 02 Dec '19

02 Dec '19

https://www.ehackingnews.com/2019/11/as-venezuelas-economy-plunges-citizens…

9 17

Not Even a $10 Million Reward Can Get Anyone to Come Forward About Cartel Leader's Whereabouts: Absent the AP system, why should they?
by jim bell 02 Dec '19

02 Dec '19

https://www.nbcbayarea.com/news/california/cartel-dea-10-Million-Reward-Eff… "A reward of up to $10 million for information that results in the arrest of the leader of Mexico's most violent and largest drug cartel has so far gone unclaimed, according to the U.S. Drug Enforcement Administration's Los Angeles Division.Nemesio Oseguera-Cervantes of the Cartel de Jalisco Nueva Generacion was indicted on federal drug trafficking charges in 2014 and again in 2017, said Nicole Nishida of the DEA. "This is the largest reward ever approved for the Narcotics Rewards Program," Nishida said. Oseguera-Cervantes, also known as "El Mencho," in his mid-50s, 5 feet 7 inches tall, weighs about 150 pounds, and has black hair and brown eyes." Jim Bell's comments follow: Do they understand WHY nobody has stepped forward with this information? Could it be that those with this information fear beging identified and killed if they identified themselves? Ask yourself: If you had this information, and were given two options: 1. A reward of $10 million, with the strong likelihood that you would be identified, and later killed. OR 2. A reward of $1 million, but with perfect secrecy, so that nobody other than yourself would know who provided the information. Which would you choose? I think most people would choose the latter. Most people don't want to quickly die, Nearly 25 years ago, I began writing the AP essay, https://cryptome.org/ap.htm. I described a possible future where people are rewarded for "predicting" the date of death of hated people, primarily (initially) government employees. I anticipated, and explained, that such a system would work much better if such predictors could make those predictions in such a way so as to be completely guaranteed anonymity. Nobody, including the taxman, would be any wiser about such a payment. Yet, all donors would be guaranteed that their donations would go to the actual predictor, and nobody else. If the US Government is inclined to offer $10 million for such information, wouldn't you think that they'd have anticipated the usefulness, and even the need, for such a system to allow people to provide such information in an anonymous fashion, guaranteed that they would never be identified, even to the US Government itself? As we all imagine, such information would almost certainly leak, and the provider of that information will likely be killed. If such a system were available, they'd be able to offer much smaller rewards, because the informants wouldn't have to trust the government to keep their identities secret. Worse, consider what would happen if someone with that information contacted the US Government, and provided that information. Would the USG actually pay the reward? It might if the world was eventually going to find out that the USG welshed on its offer, but is that likely to happen? How would the information-provider prove, to the public, that he was responsible for the information leaked? And how would he prove that, without identifying himself, and thus essentially destroying the anonymity that he logically wanted to have? Would the public ever learn what had actually happened? The USG could simply refuse to pay, secure in the knowledge that nobody would find out, for sure, that the information was given by that specific person, and that the USG didn't pay what it promised. In 2003, the USG began to promote a proposed system, "PAM", which was quickly dubbed by the clueless and biased news media as being "terrorism futures". Google ' "pam" "prediction" "terrorism futures" '. One result: https://www.jstor.org/stable/30026644?seq=1 by Robin Hansen. When that proposal was made, I was in USP Atwater prison, Apparently the fellow prisoners knew enough of my history to know about AP, and before I'd even become aware of PAM, some of they approached me, saying things like, 'It looks like the government is implementing your system, Bell!!'. Not exactly, of course, but close enough so that many chuckles were heard. I was surprised, on many levels. I was surprised that they would dare to implement a system that would actually WORK. It would certainly do what they intended to accomplish, but it would also prove that my AP idea was convincing, and practical, and effective. Why would they risk that? Not surprisingly, however, the PAM idea died within about a day, being dubbed "terrorism futures". How clueless the news media was! So, why would they even bother paying the informant? If future potential informants didn't know that this specific informant got stiffed, wouldn't they proceed as expected, and provide more information? Or, much more likely, they would see that nobody really knows if that informant actually was rewarded, and therefore conclude that without such proof, they shouldn't expect to see any money. I concluded the latter. That is precisely why I decided, when I wrote my AP essay, that there ought to be included a mechanism to ensure that everyone participating in that system, whether as mere 'donor', 'predictor', or merely a member of the public, is guaranteed that the system 'plays fair', and that anyone who participates gets whatever rewards he was offered. He is guaranteed that if he makes a donation, it would certainly be paid to the person who correctly predicted the date of death of the target, and would not be paid if that prediction never arrived. Jim Bell

2 3

Re: Virgil Griffith - Crypto Advocate and Educator Arrested at LAX from DPRK
by grarpamp 02 Dec '19

02 Dec '19

> no case number yet, will check SDNY PACER at end of day... Case Number: 19-mj-10987

3 3

Not Even a $10 Million Reward Can Get Anyone to Come Forward About Cartel Leader's Whereabouts
by Ryan Carboni 02 Dec '19

02 Dec '19

9/11 was being planned for a very long time. The best form of terrorism futures is shorting airlines prior to a terrorist attack. Some of which was from a "single U.S.-based institutional investor with no conceivable ties to al Qaeda." That is a very good declaration of innocence.

1 0

NSA can't break tor (roaring laughter as background)
by Punk-Stasi 2.0 01 Dec '19

01 Dec '19

https://www.freehaven.net/anonbib/cache/raptor-sec2015.pdf "Among others, the NSA has a program called Marina which stores meta information about user communications for up to a year [15], while the GCHQ has a program called Tempora that stores meta-information for 30 days and buffers data for three days [36]. Also, and maybe more importantly, it has been shown that Tor was targeted by such adversaries in collusion with ASes [10, 12, 11]. In this paper, we present Raptor, a suite of novel traffic analysis attacks that deanonymize Tor users more effectively than previously thought possible. To do so, and unlike previous studies on AS-level adversaries [28, 26,40], Raptor leverages the dynamic aspects of the Internet routing protocol, i.e. the Border Gateway Protocol (BGP)."

1 0

Not Even a $10 Million Reward Can Get Anyone to Come Forward About Cartel Leader's Whereabouts
by Ryan Carboni 01 Dec '19

01 Dec '19

$10 million for the whereabouts of a cartel leader? Mass surveillance is an amazing thing, all the high value targets are apparently lost in the noise. Besides all the multi-billion dollar contracts that the government gives out for better... services and technical consulting, $10 million seems pretty small. At the end of the day what solves the case is a fake informant and siphoning off the $10 million reward to your own holdings. No matter the technology, some things never change.

1 0

Carnaby vs Maxwell type outcomes
by Ryan Carboni 01 Dec '19

01 Dec '19

Ghislaine Maxwell despite being implicated in numerous crimes, doesn't suffer any consequences for her actions, or even her misjudgements. Roland Carnaby on the other hand... https://search.wikileaks.org/gifiles/emailid/383612 "Dude was a complete fabricator." "He was a nut and not a real former case officer." Apparently if you humiliate the CIA, they will uh. Do nothing. The CIA only does nothing.

1 0

Collateral Murder: Taxi To The Dark Side (2007 Documentary, Alex Gibney)
by grarpamp 01 Dec '19

01 Dec '19

https://www.youtube.com/results?search_query=taxi+to+the+dark+side https://www.youtube.com/watch?v=WX0MPcN08Zc https://www.youtube.com/watch?v=vi-SJ8hc91g https://www.youtube.com/watch?v=3gk-nFrTn5c https://en.wikipedia.org/wiki/Bagram_torture_and_prisoner_abuse Dilawar was a taxi driver and farmer from the small Afghan village of Yakubi. And a prisoner at the "Bagram Collection Point" military detention center. Dilawar's brother received a folded paper with Dilawar's body. He couldn't read because it was in English. It was the death certificate... marked Homicide. Dilawar was survived by his wife and his daughter, Bibi Rashida.

1 0

tor stinks, take #476032
by Punk-Stasi 2.0 01 Dec '19

01 Dec '19

notice that the guy attacking tor users, goldberg, was allegedly at some point a 'cypherpunk' and is now a member of the tor mafia... https://www.freehaven.net/anonbib/cache/websitefingerprinting-pets2016.pdf "We showed that effective website fingerpriting training sets can be small enough for an attacker to naively update all data points in a cycle, keeping it fresh." "Overall, we have overcome a number of previously identified barriers to deploying website fingerpriting in the wild, and demonstrated that even clients using state-of-the-art privacy software like the Tor Browser are subject to snooping by local passive eaves droppers under realistic conditions" "state-of-the-art privacy software"??? AHAHHAH - fucking lying pieces of shit...

1 0

Cryptocurrency: Money As Debt by Paul Grignon
by grarpamp 01 Dec '19

01 Dec '19

2 1

Based AF traction - politicians "being good people, instead of liars and snakes and criminals" - Groypers Rising - [PEACE]
by Zenaan Harkness 01 Dec '19

01 Dec '19

Based AF traction - oh yeah, you know you love it :) Six for six knockouts, muh gritty Grits - in barely a coupla weeks. Crack in the dam wall, 'tis ... simple Q's are knockout questions. Groypers are rising - Charlie Kirk just sank the TP-USA ship and quite possibly took Donald Trump Jr with him. And from Zero Coverage by the MSM (just word of mouth and pod casts for the Groyper army), not only are a few politicians starting to notice, this is the single biggest thing happening in North American politics today. Grass roots. Insanely good. The Guardian even did a reasonably fair write up - MSM noticing: Groyper War: Media Finally Reports on Our Groyper War After Don Jr. Evac! http://dstormer6em3i4km.onion/groyper-war-media-finally-reporters-on-our-gr… ... https://amp.theguardian.com/us-news/2019/nov/11/donald-trump-jr-walks-out-o… Some politicians are now noticing they might get real, actual traction simply by "being good people, instead of liars and snakes and criminals" - a bit of a shift. America First. 24/7/365 #Americafirst pic.twitter.com/JheeliDzrg — Paul Gosar (@DrPaulGosar) November 11, 2019 [Republican Congressman from Arizona] As was stated a few days ago, some will crash and burn, others will rise to the stars, careers are literally being made, and others destroyed <cough> Charlie Dirk Dirk <cough>, before our very eyes. Bitchass Little Faggot Fatboy Matt Gaetz Backs Down and Cucks Out! Other Congressmen Voice Support! http://dstormer6em3i4km.onion/bitchass-little-faggot-fatboy-matt-gaetz-back… If knocking out 6+ shills in less than 2 weeks is a decent start, you ain't seen nuffin yet muffas :D <jiggidy jigit> Ooooh, yeahhhh ! Grand Supreme Groyper Nick Fuentes victory lap: UCLA GROYPENING - featuring Donald Trump Jr. & Charlie Kirk · Nick Fuentes DLive Stream [11.10.19] ~37mins http://www.youtube.com/watch?v=48qiSbDxMiU Extract from the first link at top: It’s extremely encouraging to see that [the MSM] don’t have a narrative – on either side. But we can sort of imagine how they’re going to handle it. It’s very predictable. The rightist media is going to run with using the left’s memes about “racist neo-Nazi anti-Semites.” There is no question about that. And there is no question that they will condemn their own selves by doing so. The leftist media is going to try to divide the MAGA movement, try to get people to not vote for Trump in whichever way they can. One thing is very certain: Soon, every traitor – left or right – will know the name “Nicholas J. Fuentes.” And every one of them will live long enough to wish they’d never heard it. Nick Fuentes is the Leader of the Groyper Uprising and Commander of the Groyper Army http://dstormer6em3i4km.onion/nick-fuentes-is-the-leader-of-the-groyper-upr… As we are coming off of an ultimate victory in Los Angeles and preparing for yet more victories, I want to make sure that everyone in this Groyper War is clear on something: The Groyper Uprising has a leader, and that leader is Nick Fuentes. He is the commander of the Groypers and he has led us to victory after victory, from OSU all the way to UCLA. Understand: this is not about getting credit or feeding an ego or anything of that sort. Obviously it isn’t about that for me, as I am not Nick Fuentes. The fact is that having a leader of a political movement is simply a practical matter. ...

3 2

Re: John Young - The Conversations with Alex Jones
by John Young 01 Dec '19

01 Dec '19

Anonymous sends stash: "I found an obscure YT channel which had all three parts. I put them together here https://archive.org/details/cryptomeonalexjones13 you may find some of the content on the channel interesting.. https://www.youtube.com/watch?v=9wZ6EeWpJUg " At 05:37 AM 12/1/2019, you wrote: > > Why would I want to read an interview with a vitamin supplement > > marketing actor? To find out how he attracts morons? > >John's insight, perspective, and commentary is unique >and thus worth having available for people to see. > >If John doesn't have copies of what was originally posted >on Youtube, maybe someone can ask Alex. Youtube >has some reposted versions, unknown if edited. > > >Vitamin deficiency seems to be causing you to confuse >"reading" with "watching", the hotline numbers where >you can order refills were already posted, call now ;) > >As for reading, here you go... > >https://www.infowars.com/cryptome-founder-john-young-foia-has-become-a-conf…

1 0

John Young - The Conversations with Alex Jones
by grarpamp 01 Dec '19

01 Dec '19

Wikileaks War Logs (2 parts) Cryptome The Internet is a Police State Surveillance Grid (3 parts) WikiLeaks Fog of Infowar and its Ties to The Elite (3 parts) Yahoo Spying on You for Big Brother (2 parts) Telecoms making money over spying on you (2 parts) Microsoft's Evil Partnership with Big Government (3 parts) These conversations were censored off YouTube along with Alex Jones channel. There may be more titles in the series, and the second set of titles may be from downstream editors. Can whoever has these videos please upload them somewhere. Perhaps Cryptome has copies, or can at least supply a complete list of titles and topics scheduled and done with this interviewer? Interview with John Young of Cryptome.org (1 part) by techcafe This one is gone as well.

2 2

Re: Cryptocurrency: Anonymous to Invest $75M of Crypto to Develop Privacy Coins and Anon Tech
by John Young 01 Dec '19

01 Dec '19

Well said. virtually all online initiatives, including the Internet and Web, have this shady appeal and inherent vulnerability. Not that all infrastructure, nay, government and business, are so different. Predators and prey, then reversed, revolution and authoritarism. Billionaires breed genocide. Small-time Cypherpunks invented by well-off to fill up day-dreamy idleness promoting tecnoid supremacy. Privacy and spying invented for promoting insecurity fears. Go too far, go to jail, don't go too far, induce others to do that as believers. >So far most of the online chatter seems to be about >getting yet more pointless shitcoins off the ground than >working on fundamental underlying tech the fund, or at >least some of us, would like to see. > >I'd even help review some of the apps but I'm not in that loop. > > >https://www.unknown.fund/ >https://twitter.com/fund_unknown >anon_fund(a)protonmail.com >chris_unknown_fund(a)protonmail.com

1 0