- cypherpunks@lists.ogf.org

Hacking Washington DC (and other Sensys Networks) traffic control systems
by coderman 31 Jul '14

31 Jul '14

http://blog.ioactive.com/2014/07/hacking-washington-dc-traffic-control.html ''' The latest Sensys Networks numbers indicate that approximately 200,000 sensor devices are deployed worldwide. See http://www.trafficsystemsinc.com/newsletter/spring2014.html. Based on a unit cost of approximately $500, approximately $100,000,000 of vulnerable equipment is buried in roads around the world that anyone can hack. I’m also concerned about how much it will cost tax payers to fix and replace the equipment.... ''''

1 0

Identity Intelligence
by coderman 31 Jul '14

31 Jul '14

XKeyScore classifiers for your data exhaust, --- http://fas.org/blogs/secrecy/2014/07/identity-intel/ "Identity Intelligence and Special Operations" - Posted on Jul.30, 2014 by Steven Aftergood "Identity intelligence” is a relatively new intelligence construct that refers to the analysis and use of personal information, including biometric and forensic data among others, to identify intelligence targets of interest and to deny them anonymity. The term began to appear a few years ago and was included, for example, in a 2012 Defense Intelligence Agencybriefing package. Since then it has quickly propagated throughout U.S. military and intelligence operations. ... The new DoD doctrine on Special Operations — Joint Publication 3-05, dated 16 July 2014 — includes further discussion of identity intelligence (I2) in the special operations context: “I2 is the collection, analysis, exploitation, and management of identity attributes and associated technologies and processes. The identification process utilizes biometrics-enabled intelligence (BEI), forensics-enabled intelligence (FEI), information obtained through document and media exploitation (DOMEX), and combat information and intelligence to identify a person or members of a group.” “I2 fuses identity attributes (biological, biographical, behavioral, and reputational information related to individuals) and other information and intelligence associated with those attributes collected across all intelligence disciplines….” “USSOCOM [US Special Operations Command] exploits biometric, forensic, document and media data collections and integrates the data with all-source intelligence to locate and track unattributed identities across multiple or disparate instances. Intelligence collections are processed through the appropriate DOD and interagency databases, exploited to produce intelligence, and then disseminated to deployed SOF and throughout the interagency. I2 products enable real-time decisions in special operations worldwide.” ... “Special operations require unique modes of employment, tactics, techniques, procedures, and equipment. They are often conducted in hostile, denied, or politically and/or diplomatically sensitive environments, and are characterized by one or more of the following: time-sensitivity, clandestine or covert nature, low visibility, work with or through indigenous forces, greater requirements for regional orientation and cultural expertise, and a higher degree of risk,” JP 3-05 says. ...

1 0

DEF CON nostalgia [was: going double cryptome at DEF CON 22]
by coderman 31 Jul '14

31 Jul '14

a hollow, decrepit shell of its former self.. ... oh the 0ld days, ;) "We'd appreciate some more ethics." - GOBBLES - https://www.youtube.com/watch?v=DAJSxOzrD1g [ GOBBLES Security - still disappointed in 2014 ... ] ---- regarding the current line up: https://defcon.org/html/defcon-22/dc-22-speakers.html "Detecting Bluetooth Surveillance Systems" - what about RFID? "Dropping Docs on Darknets: How People Got Caught" - see also, EPICFAIL "How to Disclose an Exploit Without Getting in Trouble" - if you thought ice cream had many flavors, welcome to the brave new world of 'responsible disclosure'! "NSA Playset: PCIe" - the lack of any VT-d mention makes for mediocre. TAO tools better include a VM breakout and uCode errata exploitation. (spoiler alert - i don't think this is actually dropping NSA exploits) "The Monkey in the Middle: A pentesters guide to playing in traffic" - this middle perspective, however, is absolutely a tailored favorite. a gift that keeps on giving... "Investigating PowerShell Attacks" - this is now pointless, what with pass the hash dead. IT'S ALL OVER, JUST GO HOME. *sobbing* [c.f. http://www.harmj0y.net/blog/penetesting/pass-the-hash-is-dead-long-live-pas… ] "Screw Becoming A Pentester - When I Grow Up I Want To Be A Bug Bounty Hunter!" - one step further to enlightenment. the industry that should not exist; better yet to become build engineer or test automationer or devops devotee and build security in at unsexy day jobs for not fame and not riches. #hashtagInfosuckprotipyolo "In the forest of knowledge with 1o57" - nothing to say here other than i'm selling 1o57's uber badge for bitcoin to highest bidder. come find me :P~ "RF Penetration Testing, Your Air Stinks" - my discriminator for a delicious sw defined deployment: a) new grc blocks or custom sdr pipeline? b) wideband and full duplex? c) opportunistic and ad-hoc capabilities? - if you answered no to any of the following please try again, with more harder! [c.f. http://www.pervices.com/buy-crimson/ dual 10GigE, 100kHz – 6GHz, <= 800MHz bandwidth, 4 x (16 bit, 370 MSPS ADCs), 2 x (quad channel, 16 bit, 2500 MSPS DAC), 10MHz, 10ppb, reference OCXO] P.P.S. if you want do your own training on "WB Quad System" without travel to FVEY facilities this is how ;) "Panel - Diversity in Information Security" - i was not invited to this panel. credibility lost. "Android Hacker Protection Level 0" - because more fingers in the dike is more fingers. "Blinding The Surveillance State" - i am soliciting donations for premium consulting expertise. i don't think Soghoian's free advice will be instrumental, but Cowboy Alexander has some sweet new shit (you get what you pay for? :) [ c.f. http://www.foreignpolicy.com/articles/2014/07/29/the_crypto_king_of_the_NSA… ] "Summary of Attacks Against BIOS and Secure Boot" - aka, why to coreboot and kill AMT with fire. ok Intel chipsec peeps i got bones to pick SEE YOU IN VEGAS --- how about the talks you want so much but will never see? those billions for your discretion clearly benefiting profitability over pervasive security. best regards,

2 2

Alleged "microkernel mathematically proven to be bug free"
by Georgi Guninski 30 Jul '14

30 Jul '14

news: http://www.theregister.co.uk/2014/07/28/aussie_droneprotecting_hackerdetect… site: http://sel4.systems/ AFAICT they used Isabelle for the proofs. Coq sucks much (not counting its developers).

7 22

Re: [Cryptography] propaganda on "hurdles for law enforcement"
by grarpamp 30 Jul '14

30 Jul '14

> I don't see any technical/cryptological way to defeat the > proposed US law; it looks like a political problem that > needs to be dealt with by political means. Proliferation is a political means. Keep on proliferating, proliferate widely, proliferate fast, get all your friends and business on it, get the public on it, remove the capability for legacy plaintext, and embed and entrench crypto deeper than the Marianas. Also, call/visit/write your MP/congresscritter and give them your concerns about backdoors and your freedom/rights, your life being meta'd, recorded, analyzed and stored forever for no good reason (for which an interest in crypto and speech isn't one). Proliferate and speak! On Fri, Jul 25, 2014 at 5:24 PM, John Denker <jsd(a)av8n.com> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Today's Gomorrah Post has a long article in the "National Security" > section: > > Ellen Nakashima > "Proliferation of new online communications services > poses hurdles for law enforcement" > http://www.washingtonpost.com/world/national-security/proliferation-of-new-… > > I see no particular reason to believe a single word of what > it says. Virtually all of the evidence supporting the main > conclusion is "according FBI officials and others" ... which > puts it in the same category as the "stories" Judy Miller > wrote for the New Ys Times in the runup to the Irag war. > http://www.nytimes.com/2002/09/08/international/middleeast/08IRAQ.html?ex=1… > > Positive reasons for disbelieving the main thrust of that > story is that if the authorities want to search somebody's > bedroom, they can still do it; they just (sometimes!) can't > do it quite so cheaply. That can't do it without getting > up from their comfy armchairs. > > The article contradicts Bill Frantz's assumption that all > present-day crypto is ineffective. I tend to disbelieve > both extremes. I reckon any lock can be picked or drilled > out /if somebody wants to badly enough/ ... but this does > not mean that all locks are completely useless. > > > There is a companion article that lets the cat out of the > bag: > > Ellen Nakashima > "The government wants to wiretap online communications > — or in some cases hack them" > http://www.washingtonpost.com/blogs/the-switch/wp/2014/07/25/the-government… > > Both articles appear to be part of a PR campaign to lay > the groundwork for a new CALEA-on-steroids law that would > reportedly require every ISP and every app developer to > provide hooks to enable armchair/pushbutton wiretapping. > > Before you say that such a law is impossible, especially > in the context of open-source software, let me point out > that most people on earth /already/ live under regimes > where use (or even possession) of an unregistered encryption > device is a serious crime. > > I don't see any technical/cryptological way to defeat the > proposed US law; it looks like a political problem that > needs to be dealt with by political means. > > Tangentially related: On 07/24/2014 09:13 PM, Peter Gutmann > wrote: >> [....] should be preserved somewhere as the standard response to the >> Rumpelstiltskin Defence ("you can't prove I'm using crypto/know the >> keys so you'll have to let me go"). This [imprisonment] perfectly >> sums up what will happen to anyone who wants to try the >> Rumpelstiltskin Defence in court. > > I am certainly not an international lawyer, but we can all read > the plain language of the law. Under the otherwise-Draconian > UK RIP law, the Rumpelstiltskin defense is explicitly allowed: > http://www.legislation.gov.uk/ukpga/2000/23/section/53 > > Also note that if such a defense is not possible, you are already > a criminal, because of the encrypted "message" below, which you > have already received. > a) You don't know the decryption key, although nobody can prove > that you don't. > b) You cannot obtain the key from me or anyone else, because > I destroyed the public key /before/ encrypting the message, > although nobody can prove that I did. > c) Furthermore I can tell you that the plaintext consisted of > 512 bytes of high-grade randomness that wasn't seen or recorded, > although nobody can prove that either. > > I encourage you to forward my "message" to all your legislators, > along with lots of similar messages. > > To say the same thing in more constructive terms: This serves > as an example of /cover traffic/. It allows you to say with > complete sincerity that at least "some" of the data you hold > is undecryptable. > > Adversaries will have to consider the hypothesis that I'm > engaging in some bizarre yet effective steganography, hiding > a tree in the front row of the forest. Nobody can prove /or/ > disprove this hypothesis. > > > - -----BEGIN PGP MESSAGE----- > Version: GnuPG v1 > > hQIMA9jh5gIisxa+AQ//T8x3vgxCVqq6cCNln4TW5r8H6JeHqD1txxEy+jOiybvb > mvdcut6uQQqu/eFkV06rK+1K5LoUWemqTpAgz/E7MKtNsvYv4gardebFLRDxgn3v > WW01mc6XKqH+xpDoqabDN+Mc2jeQGhDD+fBBCMCePx/ca8iJ1gjVL93A3L+2AVan > PJFsRsoCx8X/DoUpIQOqCm0XOJrS+anVTrSOdVSo4t/V4QF7yx+51yi4ro26eAz0 > 5vCm+afMQSMIvZcpK54LI+oWUITQGP8ZhD2+B5HsIUh9nmcZjRr5fK+edGe6tS3W > aam0pQHWrkmyyjfKxNVfxK/aujrboHVybF9sP0tN8wUhFh7Tdj8F1e5EtPppXB/p > DoC7O3SQ30HHCCeNSLMErMzsniw+fHmL6zoE/UnkAsQZ1HJvg/9OD/dxJP/BaMwr > RUwG73wKPBp9m5ROs0tRopBNFcRXtM6hg/1i9ZE8IcbZcsgfcGwUdeo4qbYvhtyR > XU1FfQRyIhW7KRXQeWFSmMS1AWYMl0fX6n02qTbTSmUY7bujdEpOH3Dz8ndSKsjK > q0IWmXXcCpc9OGbiwSRhNgbxQBVu2tZ4ntk8vC+deM9itR7CMo94p95gvZQ9H7dU > fTKHb28jel8Y7CL7MYfcXpeO/vZIsj9H5GnJc+pSOuY8ueR/rTauJZux2DlIrwbS > 6QGqzHz6PaJ4NqoeyL7IiMJDNM4panzYqa4/Shfk3fiTol4FDLCdXMtT3V6eiPOn > GKGjjpbZ/3FP9cJrepM5wuHaesWnyoDO96FYTmqNqgw31r3Cg5sn1JrL6hcguN1x > CHc7mu5yTrft98pjk5olWaCyvqco0OqK3aID+IAKVJgfJV/2FWZE8KMpw+NvJosn > g6UwwN4PMUpq+CGgPRyRx12RzyP8iFxp8J8D0nS8H+BMSOA/+E2Mny54zjFrDUsH > amzFM9QlwCIrBQJ50V+OwTDzCnQVXlsbIV9kH6YaZDKo7vFIuyi7myr6mYttbh5o > m6xgSNQMSLDabyvKQ9l1GX9pQGzR0KPQRR/yn/frQDLydz5qhVEWTwprwxwGSBa/ > lVjLWTsYqqwl1SErI/FfTqJuWGSZUWqy2kUOzTmi5DA+tOvbspaghO5Aqxim/emG > Sz0DoRcR74zgUNLAAzUN4aZIBxfsO9HSqIXq9I6fK4cT6VBMYKjaJh23Hf2qOiuA > Z2g5nl+oT5CDzTlzzIMHZmCTkEjtNDAK+lb6SBCp8ScHcjafcm/cO9gNMV4+EBks > PgEm1eutCEpOpGIOHjcsFV1ryZonB8U0VmbpsxqsDE1Y0l1u6bEUKTMeJoHfEeTe > Q4wdo5LxbKt4LGQACopwX4NNdfupdPNT2SyiGCu7Vh+0P78+IEewbpRetW1KpNg3 > MXWd7sWh2tnA9cRzPwYhvUtUsj0L/GXLOKO9bMH8qfivOnsp5lbRnr6KAKoqzn2L > 3g== > =OuR2 > - -----END PGP MESSAGE----- > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1 > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iQIVAwUBU9LLD/O9SFghczXtAQJedA//UoclobLIQI4cKNu2V/bNIxUxEGb71pXr > QCQJJJQgMbK0kAE9pf6uFldur3m3kDOtPeQEx8AUZ4pS7YEPkE8mDrPxeohYi4i0 > S1yp82EX3JEchZrMDgEveP4C8zqgLg38ie0idL72nPQo2o1D5BpfRFElVA72Z8A1 > 0A9ehua+B9f1g+QKo4wMzPqbfRsHIdOIRELkrniJfRfuIxLY6F4MuiIR5F1YLhJR > TlVjsVUqEFduulO8yBF4A/4QZ1x6QzL47bUYigJwft3YNwbKNshrL8YPhMSgbdjB > BQSoPf93h2RasxKczWalawmTbZaev4kIvBy3EV2S11oy85SqRkAHb/G4f0dq1xI3 > Nc5WTWk+L0Im4Zh0+lqXrBucVvstDsrwEvDRztbrkNaey7p4HKWq+0JQ8zGKxZeq > D4eQD/N89uZLnXV+Q0Gut1w0BHSn7jmYm7TiDiXwk9DBy49i88MYaHocjGtWmLUP > tTSdunXAtOVfRPTJyL47mgbxgsDAyAHFN3CfhmN+PcjaUvrPTvlJ7g6ObdCiAGcr > CEiqKU0QoZTQS9bCkXOeV5LhIvbeh/2P5Ft+4acAAG38oE4/VKJZ+ly49Du4HF6v > LEQFDFJ03WbYRysPIX3J1Krgkza0/wm8Oy0Og27RVfSpVrOV+hPzmgCMURRYz0yS > 21uL+NP/O+o= > =spOA > -----END PGP SIGNATURE----- > _______________________________________________ > The cryptography mailing list > cryptography(a)metzdowd.com > http://www.metzdowd.com/mailman/listinfo/cryptography

3 7

going double cryptome at DEF CON 22
by coderman 30 Jul '14

30 Jul '14

per hddupe some many days hence, [0] requesting public mirrors post-con of copied volumes for Cryptome and other archives, also to be mirrored on Cryptome and other non-affiliated onions. the five deep cryptome'ing petabytes future metropolis mesh near at hand!.... clogging signals directorate capacities like darth cheney's arterial plaque butter, . . . 0. "DEF CON media hard drive duping station - six 1:11 duplication towers / 3 x 4TB mirror tracks (BLUE, GREEN, ORANGE)" - https://defcon.org/html/defcon-22/dc-22-news.html#dc22hddupe

1 0

Help me test Alpha?
by Crypto 30 Jul '14

30 Jul '14

Hello Everyone! If you would like to help test alpha.jpunix.net I'd be willing to set up a FREE email account for you. Please note that the account is NOT anonymous unless you take the necessary precautions! Just contact me directly if you are interested. Features: * SSL 4096 RSA/SHA512 certificate with PFS enabled. Please note this is a self-signed certificate that is for encryption only. * POP3/IMAP supported - same caveats as above. * SpamAssassin learning SPAM filter * Optional YubiKey Authentication * Optional Google Authenticator 2FA authentication * Roundcube web interface If you have any questions or comments please let me know. As I said this is *NOT* anonymous! It's up to you to take the necessary precautions! -- Crypto https://www.digitalocean.com/?refcode=b90b690ca5bb

2 3

Re: [Cryptography] propaganda on "hurdles for law enforcement"
by grarpamp 29 Jul '14

29 Jul '14

On Mon, Jul 28, 2014 at 12:07 PM, John Kelsey <crypto.jmk(a)gmail.com> wrote: > On the other hand, mass surveillance is one of those issues that > gets a very strong consensus among the people at the top, regardless > of their political party--even if the public as a whole doesn't > like the idea This is because they are in fear of the people. So they feel the need to mass surveil them in order to stay on top of potential issues with their position that could lead to, ultimately, revolt. Why are they in fear? Because they are doing wrong, if not for their own individual selves, for the collective power at the top. Any true servant of the people will have no such fear or need because no one can point any finger at them... they serve, they do not rule. > if both big parties' leadership supports it, who are you going > to vote for, to register your disagreement? You will never, ever, under any circumstance, vote for (in the US) either of the two parties so long as they continually play into an effective one party system. You will only vote for other third and further parties, and rarely choose incumbents among such, unless they are shown to serve the people. You will not fail to vote such thirds unless there is no third candidate. A vote for Dem/Rep (in US) is an obviously wasted vote supporting maintenance of power, the effective 'one party' system... not servants. >> Here in the USA people are convinced that dangerous >> criminals are lurking behind every corner > I don't think this is quite right. Media focus on fear and outrage > because they sell papers and draw eyeballs, and they're easy to do. It is exactly right. Only reason media focus wins is because sheep eyeballs believe and flock to it. It is self reinforcing. Media is especially guilty of choosing to profiteer from these sheep rather than pursue real journalism. You must break that bullshit feedback loop. Hope and Change... lol.

1 0

NSA Systems Abroad Query
by John Young 28 Jul '14

28 Jul '14

What is NSA "WB Quad System" for GCHQ, Amberwind (PL), TIGERFIRE (IN), IBIS (AU, JP), GCSB SSO Site (NZ): <http://t.co/AoBG9jyuAY>http://cryptome.org/2014/07/nsa-fy13-semiannual-report.pdf This is an NSA travel expenses report. Via Jason Leopold.

2 1

Russia open procurement for report on deanonymization of Tor users
by Anton Nesterov 28 Jul '14

28 Jul '14

It's tender by "Special equipment and communication of Ministry of Internal Affairs". Title fully says "Study the possibility of obtaining technical information about users (user equipment) on anonymous network Tor, codename TOR (navy)" ~$111500 (3 900 000 roubles) http://zakupki.gov.ru/epz/order/notice/zkk44/view/common-info.html?regNumbe…

4 3