- cypherpunks@lists.ogf.org

Warrant Canaries
by Steven Schear 01 Apr '15

01 Apr '15

Looks like Australia has banned use of my idea. http://boingboing.net/2015/03/26/australia-outlaws-warrant-cana.html If its true that a man's status can be measured by his enemies.. then I've taken a position at the top of the cypherpunks heap :) Steve

9 12

Re: Warrant Canaries
by Razer 01 Apr '15

01 Apr '15

On 04/01/2015 01:00 PM, Lodewijk andré de la porte wrote: > You sent that to me alo > Lennon and co did not succeed. Or did you not notice that? Maybe they > did and new problems appeared, I'm too young to know. > > If you do struggle, let it be effective. > Sorry. Should have looked at the address line before hitting Send 61 years old. Been at it all my life from 14 year old anti-vietnam war protester in NY stalked by the NYPD's red squad (using institutional slander and harassment tactics that the NSA is now capable of using on anyone anytime at the push of a PRISM search 'I feel lucky' button) to now. Personally I think the 'powers that be' are too powerful to confront head on except as a diversionary tactic. However, the "Death-of-a-thousand-cuts" approach could conceivably work to change the structure of American government (the only one I'm familiar with) , given a 'critical mass' of 'knife wielders'. But, to paraphrase Thomas Jefferson, If you turn your back on the bastids they're at it again, so the 'struggle' must continue unabated with or without that mass support, or support from the non-affected . (A labor of love really... Revolutionaries are guided by great feelings of love. Che Guevarra said that)

1 0

Re: cypherpunks Digest, Vol 22, Issue 2
by Leslie Nemitoff 01 Apr '15

01 Apr '15

Sent from my iPhone > On Apr 1, 2015, at 9:03 AM, "cypherpunks-request(a)cpunks.org" <cypherpunks-request(a)cpunks.org> wrote:I > > Send cypherpunks mailing list submissions to > cypherpunks(a)cpunks.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://cpunks.org/mailman/listinfo/cypherpunks > or, via email, send a message with subject or body 'help' to > cypherpunks-request(a)cpunks.org > > You can reach the person managing the list at > cypherpunks-owner(a)cpunks.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of cypherpunks digest..." > > > Today's Topics: > > 1. Re: Warrant Canaries (Razer) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 01 Apr 2015 08:48:05 -0700 > From: Razer <Rayzer(a)riseup.net> > To: cypherpunks(a)cpunks.org > Subject: Re: Warrant Canaries > Message-ID: <551C1335.6000008(a)riseup.net> > Content-Type: text/plain; charset="windows-1252" > > > >> On 04/01/2015 05:26 AM, Andrew wrote: >> flouting the law and thereby render it ineffectual > > works... IF EVERYONE cooperates to flaunt, flaut, and disregard it. > > Could you IMAGINE the gubmint trying to take every internet provider and > major website operating in the US to court? > > Shut down Twitter and Yahoo!'s US ops? > > Really! > > Note that in the wake of the Snowden dox quite a few high profile > internet providers and services publicly asked the feds to let them > publish what they knew. That ALONE would be in vi-0-lation, wouldn't it? > >

1 0

Problem browsing https://www.defcon.org/html/links/dc-transparency.html
by Georgi Guninski 01 Apr '15

01 Apr '15

As of Wed Apr 1 11:54:42 UTC 2015 can't browse: https://www.defcon.org/html/links/dc-transparency.html Other people can't too. Is it only us?

3 6

Cryptoanarchist slogan
by Steven Schear 01 Apr '15

01 Apr '15

"Encrypt the state and delete the key" -- smuggler, #agora/anarplex.net

7 7

Fwd: Docuticker, "Cybersecurity: Authoritative Reports and Resources, by Topic"
by Razer 31 Mar '15

31 Mar '15

Cybersecurity: Authoritative Reports and Resources, by Topic Source: Congressional Research Service via Federation of American Scientists Summary: This report provides references to analytical reports on cybersecurity from CRS, other government agencies, trade associations, and interest groups. The reports and related websites are grouped under the following cybersecurity topics: • Policy overview • National Strategy for Trusted Identities in Cyberspace (NSTIC) • Cloud computing and the Federal Risk and Authorization Management Program (FedRAMP) • Critical infrastructure • Cybercrime, data breaches, and data security • National security, cyber espionage, and cyberwar (including Stuxnet) • International efforts • Education/training/workforce • Research and development (R&D) In addition, the report lists selected cybersecurity-related websites for congressional and government agencies; news; international organizations; and other organizations, associations, and institutions. Direct link to document (PDF; 860 KB): http://www.fas.org/sgp/crs/misc/R42507.pdf Docuticker (Docubase) source: http://web.docuticker.com/go/docubase/72401

1 0

Your tax dollars at work: Federal agents steal Bitcoin
by jim bell 31 Mar '15

31 Mar '15

http://finance.yahoo.com/news/federal-agents-stole-bitcoin-silk-road-probe-… Jim Bell

3 2

Re: all your trusted computing bases
by coderman 30 Mar '15

30 Mar '15

On 3/28/15, Markus Ottela <oottela(a)cs.helsinki.fi> wrote: > A microcontroller as TCB doing OTP with HWRNG-generated keys. Sounds a > lot like the OTP-version of Tinfoil Chat ( github.com/maqp/tfc ). It > doesn't take a spy or terrorist to create something like this: TFC was a > hobby of a CS-student. HSMs for the masses! > Distribution of key material isn't the big problem, keeping the keys > secure from end-point exploitation is... usually keeping keys secure is part of key management, of which distribution also a part. "key management is the problem" perhaps sums it up :P > ... as TAO, ANT-implants, COMMONDEER, > VALIDATOR, QUANTUM w/ UNITEDRAKE/SALVAGERABBIT etc. make it hard. But > even these could be addressed in TFC - enforcing the need for close > access operations, close proximity malware injection or retro reflectors > and other HW implants is the only way to avoid untasked targeting from > becoming the mass surveillance of next generation; It's the sweet spot > of security, as the attack can not be automated, and the cost increases > linearly with the number of targets. eve out of business, then force mallory to burglary! i would like to note, that claims of "this shit so hard they gonna come at you sideways nextdoor and high power before black baggin'" is not the best way to market the security benefits. a fair goal. how far to get there? [ this is your threat model, after all! https://edwardsnowden.com/category/revealed-documents/ ] best regards, P.S. Cisco is now shipping to drop houses for redirects to sensitive customers. not that it would help, but amusing none the less!

1 0

Firefox 36+ listens on UDP:1900
by Georgi Guninski 29 Mar '15

29 Mar '15

Firefox 36+ listens on UDP:1900, which appears SSDP. Search the web or check the fiasco: https://bugzilla.mozilla.org/show_bug.cgi?id=1111967 This well might have privacy and/or security implications. As is probably known, my opinion of Firefox is close to that of exploder. -- georgi

5 14

Re: [Cryptography] "Most Americans Don't Mind Being on Candid Camera"
by grarpamp 28 Mar '15

28 Mar '15

On Wed, Mar 25, 2015 at 12:02 AM, Ray Dillinger <bear(a)sonic.net> wrote: > Privacy as we knew it is a memory. No. this memory... this privacy... is in part defined by what was input and remains in the brain memory of the individual. You walk through a park and on the whole, nothing in particular was ever specifically input, remains in, or is recallable from your memory. What we have now is an applied technological error against humanity occurring faster than the human capacity to process the ramifications. Some would say nuclear weapons fall into this same category. It's that old carnal visceral human control, power, advantage, destruction, against others and innocents thing for which the only real fix is self learning and moderation. There should be no cameras bulk surveilling public spaces, they are offensive to the individual and their memory thus their privacy. The only one who could have one there is the individual for their own purposes... a personal notebook, journalism, research. Not a larger corporation or the government against the privacy/memory of any individual... they both can do no more than record their own front doors. Cameras and databases are an affront to privacy whenever their context can be or does switch from seeing blurry anonymous mass, to the individual. Watching traffic flows is one thing, watching plates is another. Blobby humans moving around vs. doing facialrec on them. Yes, every individual in office of the government should be subject to surveillance by the public during the course of their duties when interacting with other officeholders. LE interacting public should be taped under policy of the public as vested authority accountable. But people need to get off the idea that if everybody watches everbody in one big happy camera pool that all is fair and that that excuses individualizable and individualized surveillance. And most certainly in public or databases where there is no individualized interaction, or permission of individualized recordee, with the recorder. That's incorrect and against humanity. > "Most Americans Don't Mind Being on Candid Camera" [quoting the subject] Bullshit. Ever walk up to someone and stuff a camera in their face? They'll tell you to fuck off and delete that shit, maybe smash your camera, and maybe even smash you. Same as if you try to troll through their purse, wallet, phone, house, car, or computer. It's not that they don't mind, it's that humans don't tend to actively notice and rage against cameras mounted far away. But it does register in their subconscious and builds a silent well of rage that will someday explode singularly or in mass. Why? Because human DNA is a free range animal, not a caged one, and surveillance and databases are a cage. And like nukes, humanity is a bit slow to conciously realize those kinds of errors. The fact that people around the world are even talking about this should tell you that something's gone wrong and brakes need applied. > Several times several thousand counts of murder. > Murder isn't political. It isn't "war" unless it's a > dispute between nations. Random yahoos with some islamic > jihad Terror is a fictional infection of news, politics, and the mind. Rational people would know that, treat it as any crime, accept it as the price of freedom, rebuild and move on. Instead the world chose 15 years of ongoing irrationality. They'll be lucky to ever realize or recover from that error.

4 3