- cypherpunks@lists.ogf.org

Hacking Team child porn code
by Douglas Lucas 24 Feb '16

24 Feb '16

@OpDeathEatersUS on Twitter says - https://twitter.com/OpDeathEatersUS/status/619267423749828608 - that Hacking Team sells child porn evidence fabrication tools, and cites this code - https://github.com/hackedteam/rcs-common/blob/master/lib/rcs-common/evidenc… - in support of the claim. Can someone more programming-proficient than I look at the code and tell me 1) what it does overall, and 2) what the highlighted line - which mentions "childporn.avi" and "pedoporno.mpg" - does in particular? Here's some background: http://arstechnica.com/security/2015/07/massive-leak-reveals-hacking-teams-… http://www.wired.com/2015/07/fbi-spent-775k-hacking-teams-spy-tools-since-2… >From the Ars Technica article: === According to one spreadsheet first reported by Wired, the FBI paid Hacking Team more than $773,226.64 since 2011 for services related to the Hacking Team product known as "Remote Control Service," which is also marketed under the name "Galileo." One spreadsheet column listed simply as "Exploit" is marked "yes" for a sale in 2012, an indication Hacking Group may have bundled some sort of attack code that remotely hijacked targets' computers or phones. Previously, the FBI has been known to have wielded a Firefox exploit to decloak child pornography suspects using Tor. Security researchers have also scoured leaked Hacking Team source code for suspicious behavior. Among the findings, the embedding of references to child porn in code related to the Galileo. === Thanks, Douglas

6 8

Goodternets, Badternets, Mediocrinets... [was Re: [Fwd: Multiple Internets]]]
by coderman 24 Feb '16

24 Feb '16

On 2/9/16, Ted Smith <tedks(a)riseup.net> wrote: > In an effort to re-seed discussion about cypherpunk topics I'll be > reposting old threads from the cypherpunks list in a rough "this day in > cpunks" effort. > > In this mail, John Young analyzes the subclasses of "the internet" as a > user might see. while i applaud your efforts, i disagree with your presumption to be able to surmize from the rants of John Young, what John Young was intending to say to an audience, rather than what he was evoking as reaction to the content of the message so presented to same audience. nevertheless, > -------- Forwarded Message -------- >> From: John Young <jya(a)pipeline.com> >> ... >> I agree, but I think it's highlighting an underlying issue that we've >> been letting the wrong sort of people on the internet for a long time. here is the crux of the issue! and i agree whole heartedly. the problem with the internets, is the earth humans let upon it. and in the best of the best of exclusive internets, it is the choice earth humans who make it all worthwhile. best regards, to all earth humans - poor, mediocre, and excellent alike!

1 0

Global Governments To Kill Cash
by grarpamp 24 Feb '16

24 Feb '16

http://yro.slashdot.org/story/16/02/23/0057224/its-time-to-kill-the-100-bil…

1 0

Apple Vs FBI: We tried to help the FBI but someone changed phone's iCloud password
by Rayzer 23 Feb '16

23 Feb '16

Transliteration... The feds tampered with the phone and apparently fucked up their own investigation. > The idea was to force the iPhone 5C to auto-backup to Farookâs > iCloud account. With a legal court order, Apple can and does turn over > iCloud data. For some reason, Farook had not backed up the phone for > roughly six weeks prior to the attack. The executive said Apple does > not know whether the auto-backup was disabled or enabled, but he did > say that the previous iCloud backups, which were handed over to > investigators, were sporadic. > > Apple suggested that the FBI take the iPhone 5C, plug it into a wall, > connect it to a known Wi-Fi network and leave it overnight. The FBI > took the phone to the San Bernardino County Health Department, where > Farook worked prior to the December 2, 2015 attack. > > When that attempt did not work, Apple was mystified, but soon found > out that the Apple ID account password had been changed shortly after > the phone was in the custody of law enforcement, possibly by someone > from the county health department. With no way to enter the new > password on the locked phone, even attempting an auto-backup was > impossible. Had this iCloud auto-backup method actually functioned, > Apple would have been easily able to assist the FBI with its > investigation. > > The executive only revealed this detail to reporters now because it > had thought it was under a confidentiality agreement with the > government. Apple seems to believe this agreement is now void since > the government brought it up in a public court filing. > http://arstechnica.com/tech-policy/2016/02/apple-we-tried-to-help-fbi-terro… -- RR "Through counter-intelligence it should be possible to pinpoint potential trouble-makers ... And neutralize them, neutralize them, neutralize them"

4 5

Apple versus Open Fabs
by grarpamp 23 Feb '16

23 Feb '16

On 2/19/16, Tamzen Cannoy <tamzen(a)cannoy.org> wrote: > http://www.macrumors.com/2016/02/19/apple-government-changed-apple-id-passw… " The executives said the company had been in regular discussions with the government since early January, and that it proposed four different ways to recover the information the government is interested in without building a back door. Apple sent engineers to try that method, the executives said " You don't want your secure hardware provider voluntarily "discussing" "proposing" "recovering" "sending" or "trying" anything in the "interests" of, or with, your adversary. If there was no court order for this... this is very troubling... never talk to the <adversary>, only to your client. Nor do you want your secure hardware provider to be providing you with unverifiable, therefore quite possibly, junk. You need open fabs producing open hardware. Till then the only proof you have is that some adversaries court case failed in its attack or that everyone is still standing. Neither of which are sufficiently complete proofs positive.

2 2

FBI/Marshall's social media spying tool...
by Michael Best 23 Feb '16

23 Feb '16

...sucks. At least SocioSpyder <http://www.sociospyder.com/> one does. (I've seen and used better open source and pro but unclassified systems. Classified ones are probably better.) "And all of SocioSpyder's functionality can probably be whipped up with a few elegant Python scripts. " http://motherboard.vice.com/read/sociospyder-the-tool-bought-by-the-fbi-to-… Enjoy laughing at their software and figuring out how the worthwhile code would improve on it in terms of functionality and how you would red team it. (If you want to implement your red team plan then oh no I can't stop you... ^-^ ) -- Veritas aequitas liberabit vos Veri universum vici That 1 Archive <http://that1archive.neocities.org/> @NatSecGeek <https://twitter.com/NatSecGeek> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: SKS 1.1.5 Comment: Hostname: pgp.mit.edu mQINBChG9zoBEADKzALG4UHCjY6L9OFUxWRVGGCW7LY71K2EAK/0jkRh1wPkJ4chPaVJ3vVD nJ0d8HxsyR5R3+y7GH6GCc/tK0IDPJah+xpQnraS1nWUvAlSaaxsBK4hJfuVGyfBg/joQVKU OhpqJLQhRIkUWk30QC94IbOKiCTb6V4pStLYyrLieewjT481vvRIYp/48IS5eiveZW0/IpcA HBON7xJw6P1murC8PNOJSWRCp9FJhcs3wIPG3cFTfsxSZnGcoivMgFLtGAfLbztpZkcHEMOR 4qamVvirzYGHma0UlOzyNr7xpxyLXFsU5kKzQ8Az2nP1GG7vuqXSjPNLIvvHFL+g+gKuCe9W xTa9Ac038RRSiBGdDrvTFpQ/h9h5GWIHP7nsA4TCeZSpL81aqp7Cb0MK3KPQmteTPIujVCnx jXXHrOe9Tj6iYUU8edApISyBEVFZMd+EtfDEDf/ZwDjzSGE85vv1dZ/ck7iJvS8FwM8hsRBG U9huCKiItGs26teUJ2Sum49YaEiDL4QLQhJ+FbsAusxJg+V3GE/4w75K/6/czT0p10Mf66Uo fRFTvYRE7S6CNDxzTI4q7+pnRlxMBduGC33KY4eq4Py/O3LWHBDxZ+LffIa/tWcB/7oZ6yDo bdWleNk5wnJdPGr6lUTHTM4tpDIEcXYpvjzyLcMtg4tFm/Dc0QARAQABtGVNaWNoYWVsIEJl c3QgKFByaXZhdGUsIG5vdCBzZWN1cmUuIEZvciBzZWN1cmUgZW1haWwsIHJlcXVlc3QgYSBv bmUtdGltZSBrZXkuKSA8dGhlbWlrZWJlc3RAZ21haWwuY29tPokCPQQTAQoAJwUCKEb3OgIb AwUJNXc1AAULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRCiYH9hY4dAS3e+D/sFwyJER4/4 ZnHYC/1EzCpHeDikSmULEgsvNgzo73thOV9/Q2I8mCJTlQjsK4rZ2YiDzi4b0CN8kzjpxtVz BsBsxfyPLrdH4VoqeqeBVzbwHxSk7bYUI3vFt+e3gBgpAxbVfPXCnYUnWPRlr9dc/JZoPJH4 p8yRIqktehbAE3Fa3gkfrXJ5e6+/nKlQhikyvo9VuErrLpPMXBzOq4/2LVfurkcOzlp1RBjs hWr6B98EiOXs44ZGLEkINxJiW8koFhw/WDuON8LKi/DtLiqqtBVTjrkqKCuKzSAVncGGcEVO 3Om3aOIOvG0do/wQKYXnpbeGsHwx2PGrJ7H+lb2bIb5KhbZkbG4rMTjsVnuGN+IF4BxBhmGz MYoooWy4VCLL0o8keomU8JPXt+fZDqJ9sNjY/asTsjOa6aE3bIa6w3mWUeefGwA25oXur3Rr L3wmu1pPzCejumfA1X93dS9UZS3xni+7W34g6YbsREuaZ+YBxFLN227JXAx2pEdjLsuVOaqM 9CO7ARHsxDZoE9U7n0s3txnSw/2YYwjEK1wDhdLnHBL3ZzaAcaHnpzsTYQAVW7uXKKHhzeSK GP3O4ByCisM/7WLFvIIpaNNs85jI1PvKH0GutSTl9xXDfWuYMl9rwwbteBB/oGSxlIFe0pqq IDNfAJdR/HjTLqrTES2wdXJS1bkCDQQoRvc6ARAAmltXrhVfpePdIFrfEHCet4nkQvmRI+AX rUgiNlxQDW8M5FzlUfT2xpMXHMWuKehTYpFq7bNbFi+fwBhMajgvgDsTuLInftKSFp+sisbR n8psv7CpGB4jp0Xd4y1Wm/HejV/kga0kcUVVetaqyzgZedn1UnccQRzDBVWW2j2ed+hi/8g0 /d7mbVG81yzJo8tLidM90xFF7JGlijm0dBAqmhD4UgkxSnJQ3PK5onqdjdbx7HkP68RrkeTQ vhWK1978qzdSl9ljJ0jLnoAaDNPs5Dj/TyYCtqoKHUqMbTwU5nIQnJG7geMeSw/7OVnKlypF Rs/JesZzMBooZTRxZJuIB/q0wOfE/MYTwGSwLs2brUwJFJ6bSYmerZ+81S8W/Y4mehJ3o6Vl SabrrVN+LlBfUuRqd5U909WECzk6HVnwnRfL07zD+1y5cLU+e4MQs2227kLriTIxtDZ/umeG hKQgNgFGTAPHJxA96xGvQ8Ovv+XEivlO0jxBNMIiopNSlMDE+k3nigWHuavt9LUUCOd45aw7 0pgKstQQgpFfVAwV98LPpUKxa61q6wQiQHAcP7YxuQG0dsr4nUq2xids5l1IpOLzZJ3nRThM k7alkljBbqphbocV3FsSXOkpcSWns94k1QGmrPzEPLF0FHFBG6whWoaoEySMkdsN1zVu4GMU o2EAEQEAAYkCJQQYAQoADwUCKEb3OgIbDAUJNXc1AAAKCRCiYH9hY4dASzTaEACKXVgc8KmZ xWyYTUQgIwrj3J/re68uIilq0iBBDocgEZZpxyf6lD1V3IKBjAPpWyYHMrrrLY64rFDR+8DE Xyhm1Wv2S6YJuWJtyAlS4bciXjJE6evirIH5GoFq++vzsufRaudAoQ56hJ0+Z3dNMMWZ6YuP zWNNL2tvpdo3Nvd8bqiADWSffFdIPv5Yj/mZsXmaDN+7iWYlAdCrubGyGzFHlCh26Ghu6SS0 /u8x1/Oi7ma7fUMFnEsFiYjwBkD3pQKK1dm7j2f1OMxi8uky8vgBgx40aeJkoUgEvIHWsCIi CWVTyfiGeWIcKbK7tYP5jsjV5fUv+TaQ1pApt++Pyop1aogfQ8icNBQQkdX6E4gNhnPOPTM8 FTl69Tq5Ori5+TM8VM0iPGiydlcAXIAD3OyR4tZM12Ga1AtppKjx31EyDB4SPzUmDWRy5WgG NRH3+RgiK/iXVcvLdFIKj3/AvctSLdbayyaFD8zrE/wcMzLfie+iE231+rG/7gmcR3H1rcYE vxvmWAPikLQKiMUpPBNSvfLPUTrwNSGiZ5ieAAPgOooc3u5nohwZmEW1pg6HirZgIAgAYuyL aLgnikwH70guiQ4Ufsih3gy0ddsUwliUTtbYQyX0OBQoTUyaiXPy0Wu2FJfsxiW8X9Lu9pIH KOwU9K76VKot+UikGqeFQsS/Ig== =M+du -----END PGP PUBLIC KEY BLOCK-----

1 0

Future Leak Facilitatings ... [was: Crypto Beguilement]
by coderman 22 Feb '16

22 Feb '16

On 2/22/16, Zenaan Harkness <zen(a)freedbms.net> wrote: > ... > For all the publicity, actual release of relevant info from Snowden > cache seems to have been quite the failure. > > Do we have a protocol for future leakers? future(current) leakers are building covert duplex channels direct to NSANet & JWICS :P much preferred for tactical sunlight! best regards,

2 3

Cryptomes searing critique of Snowden Inc.
by John Young 22 Feb '16

22 Feb '16

Cryptome's searing critique of Snowden Inc. http://timshorrock.com/?p=2354 https://soundcloud.com/rebootfm/interview-with-cryptome-2016-02-06

6 14

CFP is out for The Eleventh HOPE
by Greg Newby 22 Feb '16

22 Feb '16

Many on the CP list have been presenters in the past. Speaker submissions are open (title, abstract, bio to speakers(a)hope.net) The event is July 22-24 in New York at the HOtel PEnnsylvania: http://xi.hope.net/ http://xi.hope.net/speakers/ It promises to be a good time. - Greg

1 0

[OT] Are the empty subject replies to jya accessible from UI in the web archive?
by Georgi Guninski 22 Feb '16

22 Feb '16

Can't access the empty subject replies to jya's empty subject from UI on the web archive (manually they are accessible). https://cpunks.org/pipermail/cypherpunks/2016-February/date.html The source is: <li><a href="012250.html"> </a> Any browser which can follow links like that from the UI?

3 4