- cypherpunks@lists.ogf.org

WikiLeaks bounties for TPP, bountied for ICWATCH
by grarpamp 06 Aug '15

06 Aug '15

https://wikileaks.org/WikiLeaks-issues-call-for-100-000.html https://wikileaks.org/Murderous-spooks-drive-journalism.html

3 2

World’s First ‘Truly Anonymous’ Crypto Exchange Launches on I2P
by Seth 06 Aug '15

06 Aug '15

http://cryptonewsday.com/worlds-first-truly-anonymous-crypto-exchange-launc… World’s First ‘Truly Anonymous’ Crypto Exchange Launches on I2P The Grand Opening of a new cryptocurrency exchange, offering anonymous peer-to-peer trading over the I2P privacy network, was announced yesterday. Exchanged.I2P will offer its users a way to trade between Bitcoin and a range of altcoins, without compromising their financial privacy. Currently, the following altcoins can be traded: Anoncoin ANC Bitcoin BTC Dogecoin DOGE Dogecoindark DOGED Litecoin LTC Peercoin PPC Primecoin XMP Vertcoin VTC Additional coins will be added in the near future. Other exchanges services such as ShapeShift allow their users to exchange between different cryptocurrencies instantly, without creating an account or sharing personal information, but they are centralized services with no direct peer-to-peer trading, and they do not include the extra privacy protecting measures used by Exchanged.I2P. Not only will the exchange refrain from asking its traders for the usual ‘KYC’ information – your name, address and other personal information – it also includes a range of other privacy-protecting features. Users can create accounts and log-in using just a password or PGP key (or both for 2-factor authentication), without even needing to identify themselves with a username. Of course, the use of the I2P network also means that users cannot be identified and tracked using their IP address. I2P is a privacy network, also known as a ‘deep web’ or ‘darknet’, which allows users to create and browse internet services anonymously. It is used in a very similar way to the more popular TOR network. Some users claim that it offers improved security compared to TOR, which has been compromised in the past. TOR has also been the subject of controversy because a large proportion of its funding which comes from the U.S. government, and the technology it is built on was original developed by U.S. naval intelligence. I2P has failed to gain the levels of popularity achieved by TOR, however, largely because it is more difficult to install and use. The Exchanged.I2P project has been backed by the developers of Anoncoin, a privacy-centric cryptocurrency which is designed for use over I2P and Tor deep web services, and which has become one of the leading cryptocurrencies used on I2P dark markets.

3 3

echelon/who was i fighting with on here about the intercepts stupidity?
by Cari Machet 06 Aug '15

06 Aug '15

http://www.theregister.co.uk/2015/08/03/gchq_duncan_campbell/ *Update: Since this piece was published the Intercept have been in touch to > say that it is "deceptive" of the Register to suggest that this is a "joint > publication". We're very happy to confirm that there has never been any > editorial collaboration between the Register and the Intercept.* -- Cari Machet NYC 646-436-7795 carimachet(a)gmail.com AIM carismachet Syria +963-099 277 3243 Amman +962 077 636 9407 Berlin +49 152 11779219 Reykjavik +354 894 8650 Twitter: @carimachet <https://twitter.com/carimachet> 7035 690E 5E47 41D4 B0E5 B3D1 AF90 49D6 BE09 2187 Ruh-roh, this is now necessary: This email is intended only for the addressee(s) and may contain confidential information. If you are not the intended recipient, you are hereby notified that any use of this information, dissemination, distribution, or copying of this email without permission is strictly prohibited.

1 0

Re: FOIA/PA
by John Young 06 Aug '15

06 Aug '15

I believe FBI was a minor player, if any, it was IRS TAIGA's Jeff Gordon and AUS Attorney Robb London who bird-dogged, planted a vehicle tracker, surveilled, harassed parents and friends, lurked on, sent messages and cherry-picked this mail list to subpoena cpunks and gather evidence for grand juries. https://cryptome.org/jdb-subpoena.htm https://cryptome.org/jya/jdbfiles.htm Indeed, it would be helpful to see the investigative files never introduced in court: some claim only 5% or less of "law enforcement senstive" are publicly released to avoid disclosing means and methods to assure conviction and chill others into lawful obedience, even if the judge remains awake during trial -- which in Mr. Bell's case, did not. Instead Judge Tanner (80+ years old), snoozed and periodically barked "Period." OTOH, some folks say once you see what is in such files, it may be prudent to let sleeping dogs lie. Shit your father, mother, friends, enemies, informants and shop-your-ass-to-save-their-own supporters say about you, reveal about you, lie about you, cover-up their own evildoing, well, now. No doubt, once the partially disclosed and redacted and doctored files are in hand, nothing stops you from culling them, doctoring them, fucking your tormentors by publishing your own version of FOIA/PA as the law and courts encourage official and unofficial liars to do. Admirable that Muckrock provides tutorials on how to do this, with gobs of documentary evidence far exceeding Snowden team's snow job. At 11:18 PM 7/31/2015, you wrote: >hey Jim, > >you know what'd be fun? a FOIA/PA request to FBI for your documents. :) > >if you're so inclined, > see > https://www.muckrock.com/foi/united-states-of-america-10/privacyactdirect-1… > for example wording of interest. > > >best regards, > codermange

6 30

so called onion routing
by Juan 06 Aug '15

06 Aug '15

http://www.onion-router.net/History.html 1995: Initial work on Onion Routing begins, funded by ONR. http://cypherpunks.venona.com/ grep onion cyp-1993.txt # For example, Eric Messick calls his things "onions," suggesting multiple "(For example, Eric Messick calls his things "onions," suggesting multiple layers of "return postage guaranteed" envelopes. This may be a great idea, and even a great name (which we may all be using in 5 years)," Also, the idea of multiple, nested, encrpyted 'envelopes' that contain routing information is routinely mentioned at that time, if I'm not mistaken.

6 10

Delete and migrate your junk off GoogleCode by August 25 !!!
by grarpamp 05 Aug '15

05 Aug '15

It's going away, so if you've got stuff there you want to delete and manage without interacting with their humans and policy/archive wonks, do it now!!! http://google-opensource.blogspot.com/2015/03/farewell-to-google-code.html https://code.google.com/p/support/wiki/ReadOnlyTransition Sourceforge has been acting weird too, but you knew that.

2 1

Constitutionality of tracking cell phones.
by jim bell 05 Aug '15

05 Aug '15

http://news.yahoo.com/constitution-check-does-cellphone-privacy-owner-wande… Constitution Check: Does cellphone privacy follow its owner’s wanderings? Lyle Denniston, the National Constitution Center’s constitutional literacy adviser, examines a case that has just arrived at the Supreme Court about police access to cellphone location data stored on cellphone towers. View photo.THE STATEMENT AT ISSUE: “As technology advances, location information from cellphones (and, of course, smartphones) will undoubtedly become more precise and easier to obtain, and if there is no expectation of privacy here, I have some concerns about the government being able to conduct 24/7 electronic tracking (live or historical) in the years to come without an appropriate judicial order. And I do not think I am alone in this respect.” – Excerpt from an opinion by a federal judge, Adalberto Jordan of the U.S. Court of Appeals for the Eleventh Circuit, limiting his support for a ruling by that court rejecting a Florida man’s Fourth Amendment challenge to federal investigators’ monitoring of the places where he used a cellphone over a continuous span of more than two months. That individual has now filed an appeal at the Supreme Court. WE CHECKED THE CONSTITUTION, AND… For nearly a half-century, it has been true that a private individual carries around as a kind of personal constitutional shield a right of privacy. As the Supreme Court put it in a famous decision in 1967, “wherever a man may be, he is entitled to know that he will remain free from unreasonable searches and seizures.” All that is necessary to have that shield available as that individual moves about, the court said then, is that he or she is doing something that they personally regard as private, and that society in general would agree that it should be private. In technical constitutional terms, that decision in Katz v. United States – extending protection to what an individual said while using a public telephone booth – was the origin of the idea that the Fourth Amendment protects “a reasonable expectation of privacy.” That amendment, the court said, “protects people, not places.” In the case of the telephone booth, the caller may have been entirely visible through the glass doors, but was still expecting that the actual messages spoken into the telephone were meant to be heard only by the person on the other end. It is too much to say, however, that the individual never loses that privacy once the activity moves outside the enclave of the home into the larger world. The catch is that part of the test that says society must share the perception that the activity does deserve to remain private. Even in that 1967 ruling, the court was careful to say that “what a person knowingly exposes to the public, even in his own home or office, is not a subject of Fourth Amendment protection.” That, of course, makes the protection of that amendment depend in part on the specific action the individual takes to show that the activity was meant to be private – such as closing the door on the telephone booth. Complicating the constitutional question, however, is the situation when an individual tries to keep something private, but strangers (“third parties,” in the language of law) learn of that activity. That was the scenario that the Supreme Court encountered in 1979, when it allowed law enforcement officers to obtain from a telephone company the numbers that a user had dialed. That, the Justices ruled in the case of Smith v. Maryland, was not even a search under the Fourth Amendment, because the individual gave up the privacy about those numbers merely by dialing; that allowed a record to be made in the files of the company. Besides, the court added, the officers did not learn much from that data; they could not even be sure that any call actually had connected. Lately, though, that part of Fourth Amendment law is being reexamined in the courts, as changes in technology make it far more likely that a person’s activities in public can be tracked much more closely, and thus more intrusively. Three years ago, the Supreme Court for the first time examined what it means to privacy that police can use a tracking device, linked to globe-circling satellites, to trace the movement of a suspect’s car, and thus some of the activities of the car’s driver. The decision in Jones v. United States was limited, based on a theory that installation of the device was a “trespass,” but it has come to stand for two larger principles: first, that officers should get a warrant before they do such monitoring, and, second, that technology can definitely change the Fourth Amendment equation about what is private. Last year, the court went further in this examination, concluding that police should get a warrant before they check out the stored contents of a cellphone that police take away from an individual they have arrested. What is logged on a cellphone, the Justices said, can include a vast amount of intensely personal data, and police access to that should only be allowed if a judge has found a good reason to issue a search warrant to get at it. The next step in this constitutional evolution has just arrived in an appeal to the Supreme Court, in the case of Davis v. United States. It is a test of the privacy – or lack of it – of the information that police may gather by checking stored data on cellphone towers located around a community. The majority of the U.S. Court of Appeals for the Eleventh Circuit decided that this did not even implicate the Fourth Amendment, because an individual has no “reasonable expectation of privacy” in the location data; that is a record kept by the tower operator, the telephone company, and the individual whose calls were logged gave it up merely by using his cellphone. The data, covering 67 continuous days of use on that cellphone, was technically so refined and detailed that it actually placed the user – Quartavius Davis – at the scene of a series of robberies of local businesses in the Miami, Fla., area. Davis’s lawyers have calculated that the towers yielded more than 11,000 bits of data about where he was when he made or got a call. The data was used to convict him of a series of federal crimes, and his lawyers failed to get that excluded from his case on a theory that it invaded his right of privacy in his movements, so should have been barred unless police had a search warrant. Taking that case on to the Supreme Court, his attorneys argued that the Justices needed to step in now “to ensure that the Fourth Amendment does not become a dead letter as police accelerate their warrantless access to rich troves of sensitive personal location data.” The court is expected to act on the case early in the next term.

2 1

getting firmware vulnerability info into hardware reviews
by Blibbet 03 Aug '15

03 Aug '15

Hi, I'm trying to get computer reviews to include more useful information, mainly about checking about known firmware vulnerabilities using Intel CHIPSEC (or MITRE/LegbaCore Copernicus for Windows). http://firmwaresecurity.com/2015/08/03/new-hardware-reviewers-please-post-c… If you know of anyone that does reviews for a living, please forward it to them. I need help with that, I don't have any contacts at review sites. If you've recently bought a new Intel-based system , and it fails CHIPSEC, please let others know about it, so other consumers can avoid that broken hardware. If you work at a company where your purchases have more influence to OEMs than a single citizen, please help by demanding CHIPSEC results before purchase, to help make OEMs deliver better systems. Thanks very much! Lee RSS: http://firmwaresecurity.com/feed

2 2

FOIA/PA
by coderman 01 Aug '15

01 Aug '15

hey Jim, you know what'd be fun? a FOIA/PA request to FBI for your documents. :) if you're so inclined, see https://www.muckrock.com/foi/united-states-of-america-10/privacyactdirect-1… for example wording of interest. best regards, codermange

4 3

Obama heads level "material support" at crypto purveyors
by grarpamp 01 Aug '15

01 Aug '15

https://firstlook.org/theintercept/2015/07/30/obama-administration-war-appl… The Obama administration’s central strategy against strong encryption seems to be waging war on the companies that are providing and popularizing it: most notably Apple and Google. The intimidation campaign got a boost Thursday when a blog that frequently promotes the interests of the national security establishment raised the prospect of Apple being found liable for providing material support to a terrorist.

2 1