- cypherpunks@lists.ogf.org

Globel Forum on Cyber Expertise
by rysiek 17 Apr '15

17 Apr '15

Hey, I thought you guys might like it: https://www.youtube.com/watch?v=cKzAdQ1Uc98 Remember to replace each occurence of "cyber" with "bullshit", otherwise it might not make any sense. -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147

1 0

Whonix-like setup using Raspberry Pi 2
by Mirimir 15 Apr '15

15 Apr '15

I've implemented physical isolation of networking (VPN plus Tor) and workspace, using two Raspberry Pi 2 Model B v1.1 ARM-based microcomputers.[0] Missing packages in Raspbian wheezy prevent building Whonix on the Pi, and so I've replicated basic design features. The gateway Pi connects to the Tor network through a VPN service, and then reaches the Internet through Tor. Firewall rules allow outgoing connections on WAN (eth0) only to the VPN servers, Raspbian wheezy repository servers and NTP timeservers. No DNS servers are reachable via WAN (eth0) and so all needed IPs are provided locally. Firewall rules allow outgoing connections on the VPN tunnel interface (tun0) only by the Tor client process. The Tor Browser and other apps on the workspace Pi can reach the Internet only through the Tor client process on the gateway Pi. Both gateway and workspace employ full-disk encryption, using standard Linux dm-crypt/LUKS plus LVM2. The LUKS volume on the gateway Pi can only be unlocked via SSH (dropbear) from the workspace Pi. That protects VPN credentials and any Tor hidden-service keys while the gateway Pi is shutdown. Next steps will include adding apps to the workspace, and hardening. I'm looking at EMF shielding both networking Pi and workspace Pi, and embedding the boards in Arctic Alumina.[1] The gateway Pi will have no exposed USB or HDMI ports, just power and the two ethernet ports. And of course, I'll test for leaks, both networking and EMF side-channel.[2] Firmware flashing is another vulnerability that needs to be addressed. I'd appreciate feedback, criticism and suggestions. [0] http://lwcl5doqq2uzjmom.onion/Raspian-wheezy-VPN-Tor-Gateway-Workspace-r0.h…. [1] http://www.amazon.com/Arctic-Alumina-Thermal-Adhesive-5g/dp/B0009IQ1BU/ref=… [2] http://www.techrepublic.com/article/computer-stored-encryption-keys-are-not…

1 0

lowRISC tagged memory preview release
by Eugen Leitl 14 Apr '15

14 Apr '15

http://www.lowrisc.org/blog/2015/04/lowrisc-tagged-memory-preview-release/ lowRISC tagged memory preview release Monday, April 13, 2015 We’re pleased to announce the first lowRISC preview release, demonstrating support for tagged memory as described in our memo. Our ambition with lowRISC is to provide an open-source System-on-Chip platform for others to build on, along with low-cost development boards featuring a reference implementation. Although there’s more work to be done on the tagged memory implementation, now seemed a good time to document what we’ve done in order for the wider community to take a look. Please see our full tutorial which describes in some detail the changes we’ve made to the Berkeley Rocket core, as well as how you can build and try it out for yourself (either in simulation, or on an FPGA). We’ve gone to some effort to produce this documentation, both to document our work, and to share our experiences building upon the Berkeley RISC-V code releases in the hopes they’ll be useful to other groups. The initial motivation for tagged memory was to prevent control-flow hijacking attacks, though there are a range of other potential uses including fine-grained memory synchronisation, garbage collection, and debug tools. Please note that the instructions used to manipulate tagged memory in this release (ltag and stag) are only temporary and chosen simply because they require minimal changes to the core pipeline. Future work will include exploring better ISA support, collecting performance numbers across a range of tagged memory uses and tuning the tag cache. We are also working on developing an ‘untethered’ version of the SoC with the necessary peripherals integrated for standalone operation. If you’ve visited lowrisc.org before, you’ll have noticed we’ve changed a few things around. Keep an eye on this blog (and its RSS feed) to keep an eye on developments - we expect to be updating at least every couple of weeks. We’re very grateful to the RISC-V team at Berkeley for all their support and guidance. A large portion of the credit for this initial code release goes to Wei Song, who’s been working tirelessly on the HDL implementation.

1 0

Engineers vs Thugs... Building Institutions, Cpunks and Cohesion
by grarpamp 14 Apr '15

14 Apr '15

https://www.youtube.com/watch?v=KybZAEm0stY

2 1

Linux 4.0 released: from Linus "we're all sheep" Torvalds
by Georgi Guninski 13 Apr '15

13 Apr '15

Linux 4.0 released: from Linus "we're all sheep" Torvalds https://lkml.org/lkml/2015/4/12/178 Subject: Linux 4.0 released signature: > Linus "we're all sheep" Torvalds http://en.wikipedia.org/w/index.php?title=List_of_Linux_kernel_names&oldid=… 4.0 Hurr durr I'ma sheep[58] (Internet poll) I hope this is sarchasm I don't get

2 1

Briar
by rysiek 12 Apr '15

12 Apr '15

Hi all, anybody has any info on Briar? https://briarproject.org/ Just came across it. -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147

9 9

Gag law in Spain
by Th3 Und3rt4k3r 12 Apr '15

12 Apr '15

After approval of new gag law, protesters made an holographic demostration in front of Spain's Parliament, physical protests are now forbidden. http://www.gettyimages.com/detail/news-photo/holographic-images-representin…

1 0

Re: Covert wireless (was: A crowdfunding campaign to build a free baseband)
by wirelesswarrior＠Safe-mail.net 11 Apr '15

11 Apr '15

-------- Original Message -------- From: coderman <coderman(a)gmail.com> To: wirelesswarrior(a)safe-mail.net Cc: falcon(a)ivan.harhan.org, cypherpunks(a)cpunks.org Subject: Re: Covert wireless (was: A crowdfunding campaign to build a free baseband) Date: Fri, 10 Apr 2015 16:11:15 -0700 > On 4/10/15, wirelesswarrior(a)safe-mail.net <wirelesswarrior(a)safe-mail.net> wrote: > > ... I delivered a paper last October regarding the reasons such alternatives are > > needed, reviewed recent developments and offered some practical directions > > for future work (some of which I am pursuing): > > > > http://www.paralelnipolis.cz/pp-congress-2014/WWPP.pdf > > > i didn't see mention of MIMO / beam forming systems for both better > throughput and greater privacy. I did not look closely at MIMO due to the lack of inexpensive SDR solutions and their lack of utility at lower bands. > > and as common as HackRF is, there are better kits. why was this unit > in particular chosen? Mainly price and frequency coverage. Since my interest is mainly on apps that require transmitting I did not focus on receviers. Starting at twice the HackRF's cost the USRPs are a best buy at the low end. The HackRF's weakness main weakness is its 8-bit ADC and lack of pre-selector to limit strong out-of-band input signals and reduce out-of-band transmiter spurs. However, it has an internal header to which daughter boards can be added and its CPDL can be reprogrammed for these add-ons and other changes. On the receive side a cheap coax bandstop filter, with acceptable insertion loss, can easily be fabricated to knock down the FM broadcast and pager transmitter signals instead of a pre-selector. What other kits were you thinking of? WW > > hard problems ahead!

2 1

Crypto Projects that Might not Suck
by Seth 11 Apr '15

11 Apr '15

Hat tip to Steve Weis twitter account @sweis https://github.com/sweis/crypto-might-not-suck/blob/master/README.md End User Tool Summary This is a quick summary of tools that are generally recommended for end users. See the Encryption Works guide for more information. GPG: Email encryption TextSecure: Encrypted SMS Messaging RedPhone: Encrypted voice calls OTR: Encrypted instant messaging Tor: Protect from network surveillance

8 15

Joe SixPack - How to respond to Idiocracy? - was Fwd: WARNING: Mobile Phone Virus.
by Zenaan Harkness 11 Apr '15

11 Apr '15

So I got the email below in my inbox. From a well meaning person but to me personally it's just spam - the well-paved road to hell of course. So then I thinks "what might be useful to the other recipients of this well-meaning email sender?" And I almost hit reply-all to whip up something which might actually be useful to folks. But "install CyanogenMod" is probably, may be, just slightly tiny bit too technical for most people. They'd have to figure out how to sync/ backup their contacts, text messages, etc etc, let alone any sort of "anti "dance of the pope" software :) Sorry about my ignorance, perhaps cyanogen does all that via google, I've no idea really - anyway, it's a real issue if I go running about making recommendations to people. So my conclusion is "right now, we have no ready answers for Joe SixPack". Am I wrong? TIA, Zenaan ----- Original Message ----- From: Don Whitaker Sent: Friday, April 10, 2015 7:46 PM Subject: Fwd: On Thursday, April 9, 2015 7:21 AM, David & Rosemarie wrote: M:URGENT: Tell all contacts from your list not to accept a video called the dance of the Pope. It is a virus that formats your mobile. Beware it is very dangerous. They announced it today on the radio. Pass on to as many as you can. It was announced on the radio in USA.

2 1