- cypherpunks@lists.ogf.org

Re: Fwd: [tor-talk] according to leaked XKeyScore source NSA marks all Tor users as extremists, puts them on a surveillance list
by Seth 03 Jul '14

03 Jul '14

On Thu, 03 Jul 2014 04:11:45 -0700, coderman <coderman(a)gmail.com> wrote: > Subject: [tor-talk] according to leaked XKeyScore source NSA marks all > Tor users as extremists, puts them on a surveillance list I use Tor for just about all my daily web browsing. I also run a Tor relay from home. Even run my own mail server, XMPP and Friendica nodes from home. Guess that makes me an ultra-extremist. The irony? I only decided to start using Tor by default for everything once I became aware of the near total nature of passive surveillance. So if using Tor makes me an 'extremist' well, please accept this heartfelt; _ _____ _____ _ __ __ ____ __ ____ _ _ _____ _ _ _____ | | |_ _/ ____| |/ / | \/ \ \ / / | _ \ /\ | | | | / ____| | \ | |/ ____| /\ | | | || | | ' / | \ / |\ \_/ / | |_) | / \ | | | | | (___ | \| | (___ / \ | | | || | | < | |\/| | \ / | _ < / /\ \ | | | | \___ \ | . ` |\___ \ / /\ \ | |____ _| || |____| . \ | | | | | | | |_) / ____ \| |____| |____ ____) | | |\ |____) / ____ \ |______|_____\_____|_|\_\ |_| |_| |_| |____/_/ \_\______|______|_____/ |_| \_|_____/_/ \_\ Really there's nothing to lose at this point by encrypting and anonymizing every bit that leaves every computer you own. If NSA wants to own my devices I'll keep cycling them out on a regular basis with new and used gear I pay for in cash and pick up in person. > Conclusion: the world needs way more extremists. If they want cake, they > should get it in abundance. I remember reading somewhere that on any given day in the 'United State' there are a couple hundred thousand active Tor users. We should add GnuNET, I2P, CJDNS, CurveCP and many more to that list. I am Spartacus!!! -- Seth I <3 nicely trimmed email replies

1 0

XKeyscore-Quellcode: more english details requested
by coderman 03 Jul '14

03 Jul '14

request for more (english speaking) details on QUELLCODE part of XKeyScore(XKS) http://www.bild.de/politik/ausland/nsa/us-geheimdienst-spionierte-deutschen… specifically subsequent tasking associated with selected anonyms...

3 2

Fwd: [tor-talk] according to leaked XKeyScore source NSA marks all Tor users as extremists, puts them on a surveillance list
by coderman 03 Jul '14

03 Jul '14

---------- Forwarded message ---------- From: Eugen Leitl <eugen(a)leitl.org> Date: Thu, Jul 3, 2014 at 2:42 AM Subject: [tor-talk] according to leaked XKeyScore source NSA marks all Tor users as extremists, puts them on a surveillance list http://www.heise.de/newsticker/meldung/XKeyscore-Quellcode-Tor-Nutzer-werde… </kraut> All accesses (several 100 k/day) to Tor directory authorities (at least some IPs hardcoded, Sebastian Hahn one of the targets) intercepted and logged, Tor users are considered extremists (hello, self-fullfilling prophecy at work here, no doubt intended for further justify operation budgets) according to comments in the source and shortlisted for further surveillance (email intercept explicitly mentioned) and attempted deanonymization. Conclusion: the world needs way more extremists. If they want cake, they should get it in abundance. Further suggestion: we need an online database to deanonymize intelligence operatives. We need their faces, their license plates, their home addresses, and any dirt you can get on them. Name them, and shame them.

1 0

REVERSE ENGINEERING NSA SPY ‘RETRO REFLECTOR’ GADGETS WITH THE HACKRF
by Eugen Leitl 03 Jul '14

03 Jul '14

http://www.rtl-sdr.com/reverse-engineering-nsa-spy-retro-reflector-gadgets-… REVERSE ENGINEERING NSA SPY ‘RETRO REFLECTOR’ GADGETS WITH THE HACKRF In 2013 whistleblower Edward Snowden leaked (along with other documents) some information about the American National Security Agencies (NSA) spy tools. One such group of tools named ‘retro reflectors’ has recently been investigated and reverse engineered by Micheal Ossmann, the security researcher behind the recently available for preorder HackRF software defined radio. The HackRF is a SDR similar to the RTL-SDR, but with better performance and transmit capabilities. Newscientist Magazine has written an article about Ossmann’s work here. From their article a retro reflectors are described in the following quote. One reflector, which the NSA called Ragemaster, can be fixed to a computer’s monitor cable to pick up on-screen images. Another, Surlyspawn, sits on the keyboard cable and harvests keystrokes. After a lot of trial and error, Ossmann found these bugs can be remarkably simple devices – little more than a tiny transistor and a 2-centimetre-long wire acting as an antenna. The HackRF comes in to play in the following quote Ossmann found that using the radio [HackRF] to emit a high-power radar signal causes a reflector to wirelessly transmit the data from keystrokes, say, to an attacker. The set-up is akin to a large-scale RFID- chip system. Since the signals returned from the reflectors are noisy and often scattered across different bands, SDR’s versatility is handy, says Robin Heydon at Cambridge Silicon Radio in the UK. Ossmann will present his work at this years Defcon conference in August.

2 1

PayPal and Proton Mail
by Jerry 03 Jul '14

03 Jul '14

Paypal Freezes $275K fundraiser for encrypted mail startup; not sure if encryption is legal. http://www.dailydot.com/politics/paypal-protonmail-freeze/ https://protonmail.ch/

5 6

The next gen P2P secure email solution [paypal/protonmail]
by grarpamp 03 Jul '14

03 Jul '14

On Wed, Jul 2, 2014 at 7:22 PM, rysiek wrote: > Dnia wtorek, 1 lipca 2014 22:20:44 grarpamp pisze: >> I'd rather fund something like... >> "The next gen P2P secure email solution" [1] > You mean like RetroShare? http://retroshare.sourceforge.net/ http://en.wikipedia.org/wiki/Retroshare RetroShare seems geared more to private groups of users doing a variety of things, even if that rides among a larger set of peers. So maybe not designed/optimized for global message delivery at huge scale? I generally meant something similar to what's in the prior thread having this subject [1]. Using completely new/different technology than old email as we know it today (with the exception of your MUA tools that you might still plug into the new tech). RetroShare would qualify as new tech to consider and work forward with, as would any of these and friends... http://en.wikipedia.org/wiki/Bitmessage http://i2pbote.i2p.us/ http://en.wikipedia.org/wiki/I2P#E-mail http://en.wikipedia.org/wiki/TorChat https://freenetproject.org/freemail.html http://dee.su/cables https://github.com/ricochet-im/ricochet https://pond.imperialviolet.org/ ...

1 0

Tor
by Juan 02 Jul '14

02 Jul '14

The tor 'anonimity' network is a project of the US military. As such, it must serve the ends of the US military. If the alleged ends of the tor project do not match the ends of the US military, the alleged tor ends are just a cover lie, or a lame half-truth at best. The real ends of the US military, are, of course, not 'officially' acknowledged though they are widely known, even among half-educated observers. The US military is the biggest criminal organization on the planet and its real purpose is to further the global interests of the US government and US fascist business. To do this they routinely invade countries and murder millions of people. Bear in mind the moral outlook of these people when analyzing their actions. Would the US military create an anonimity network that they can't subvert? Of course not. The tor network can prevent ordinary users A and B from learning their respective locations, but if a third party C (say, US government) can monitor A's and B's traffic, it can 'deanonimize' them. As a side note, tor can be and is routinely blocked, rendering it rather useless. In cases where tor could make people anonymous, at least from the point of view of servers like, say, IRC servers , access is blocked by the servers operators. So much for 'free speech'. Suming up, the first objective of the tor network is to give a 'gratis' and subverted 'tool' to...targets of government surveillance. Pure altruism. Another objective of the tor network is to get around the blocking system of, say, the chinese network. Since china is firewalled, the US military can't easily spy on chinese people. So, what the tor employees (accomplices of the fascist US governemnt) do is 1) pretend that they 'fight' for ' free speech' in china 2) gather information about people in china who, by using tor, signal that they are potentially 'interesting' to the US military. Again, the 'official' motives and the real motives do not match, ------------- So far, I got this far =P - Ill add more stuff later ....

11 18

Court – Official statement part #1
by Eugen Leitl 02 Jul '14

02 Jul '14

Apologies, not sure this has been posted already in the thread, I'm backlogged. https://rdns.im/court-official-statement-part-1 Court – Official statement part #1 Posted on July 2, 2014 by Will As seen possibly here, or here i lost the Tor case and was sentenced to 3 years probation (instead of 3 months jail) and all fees (court and experts, Assumption ~30000EUR, not less than 20k for sure). The sentence is based on §12 which allows for anyone to be dealt with as perpetrator (which is a pretty dictatorial law IMO) and this is based on that i knew it *could* possibly be used for criminal activity (in this case child pornography). I won’t write much more yet before i have the written ruling (i do not even know my probation terms yet) but merely want to explain why i won’t appeal this sentence: First would be that I simply can’t afford it anymore, donations covered a lot of lawyer fees but i had to use my entire money on this case as well, i’m now bankrupt and the garnishment (a rare word, DE: Pfändung) of my income (to pay the 20k+ costs) does not help with it either. I have high medical costs as well besides which are more important. I’m not really interested in more external funding due to taxation issues with larger amounts (and i do not want *another* crime on me). – Second is that i just want to be done with this, i had now years of “issues” (i would write “harassment” but then i get sued again for sure) (Ex: Citing my boss to the police for questioning (x3); physically monitoring my boss in Vienna; citing friends to the police for questioning (x2); confiscation of bank transaction data; Polish extradiction threats for hacking cases there (x2); citing me for useless questioning causing lawyer costs (x5+) etc. etc.) – It’s now finally over and besides the cost i CAN live with this sentence, it does not show up in police registers and won’t be an issue for work and alike in the future. – Third is the mental component, this years of “horror” changed a lot up to me being hospitalized (x3…) with paranoid schizophrenia (which was a wrong diagnosis, but still it’s not helpful if you HAVE to assume permanent monitoring of everything), PTSD (among other issues) and now taking medication – It took it’s toll, including me getting fired for being in the clinic/sick stay for a long time, i just can’t afford to loose my job or go the clinic again even if i actually should be still there. – Fourth is the attention, media and personal – I don’t really like any attention on myself, especially when others should get it (like some public cause, Pirateparty or alike). – So this is it for now, stay tuned for more in a few days.

1 0

Re: [cryptography] Stealthy Dopant-Level Hardware Trojans
by coderman 02 Jul '14

02 Jul '14

On Sun, Jun 22, 2014 at 2:43 AM, Michael Rogers <michael(a)briarproject.org> wrote: >... > http://www.emsec.rub.de/research/publications/Hardware-Trojans/ > ... > PhD students suck at maintaining their web pages. ah well, :) full URI to PDF for posterity: http://www.emsec.rub.de/media/crypto/veroeffentlichungen/2014/02/20/BeckerC… thanks to al! best regards,

2 2

NSA drone flight
by grarpamp 01 Jul '14

01 Jul '14

http://www.wired.com/2014/06/protestors-launch-a-135-foot-blimp-over-the-ns…

6 6