Re: Where's a human-like randomizer?

2014-09-23 Thread Anthony Martin
I think you could generate truly random passwords first, then corrupt them
into less random passwords with a few regex passes

On Monday, September 22, 2014, Douglas Lucas d...@riseup.net wrote:

 I've an odd question. Is there a program that will generate passwords
 that imitate the badness with which humans armed with pen and paper only
 would generate randomness? No, not a program that spits out password
 over and over, that contemptible most frequently used password; I'm
 imagining an English speaker of above average intelligence who has some
 familiarity with best practices for coming up with passwords, but who's
 no mathematical crypto wizard or anything.

 Imagine a human who wants to generate an alphanumeric passphrase with
 both upper- and lowercase, and he's in a jail cell with just pen and
 paper. So he has a set of 62 characters to work with, and he tries to
 write out a truly random password. But maybe he puts M in the password
 too often for it to be truly random, because his name is Mario, so he
 thinks about M unusually often; or maybe his writing surface is shaped
 such that it incentivizes long downstrokes, so he pens the letter l
 too often for true randomness.

 Now, has anyone created a computer program to MIMIC what that human
 would come up with? Is such a thing possible? Obviously I could simply
 do it myself as a human being by, you know, qrMt8x3, but I want a
 program that will create that for an x-long, say, 80,000 character-long,
 string.








Re: GoldBug SF projects [was: Bittorrent Bleep]

2014-09-23 Thread grarpamp
Additional links, threads and updates...

No replies came to me except for:
- One further note of no particular substance from Bernd.
- One thank you for exposing things further. Thanks :)


On tor-talk: TPO/TBB clone on SourceForge, use of TPO name
https://lists.torproject.org/pipermail/tor-talk/2014-September/034930.html
https://trac.torproject.org/projects/tor/ticket/11515
https://docs.google.com/spreadsheet/ccc?key=0AqtQ4kKC2rLzdEVjWkxTcUVTTWxmdnh4VWFDY25zTHc

On Wikipedia:
http://en.wikipedia.org/wiki/User_talk:MarcoSU
http://en.wikipedia.org/wiki/Special:Contributions/MarcoSU

Attn czarkoff: Background threads for reference in your wikipedia work
https://cpunks.org/pipermail/cypherpunks/2014-September/thread.html
https://cpunks.org/pipermail/cypherpunks/2014-September/005505.html

keywords: goldbug messenger, firefloo communicator, lib spot-on, echo
protocol, cassiopeia bitmail, dooble web browser, interface social
network


Re: GoldBug SF projects [was: Bittorrent Bleep]

2014-09-23 Thread rysiek
Dnia wtorek, 23 wrzeĊ›nia 2014 16:19:18 grarpamp pisze:
 Additional links, threads and updates...
 
 No replies came to me except for:
 - One further note of no particular substance from Bernd.
 - One thank you for exposing things further. Thanks :)

Here's another one of these: thanks a lot. The whole thread is very 
informative.

 (...)
 
 keywords: goldbug messenger, firefloo communicator, lib spot-on, echo
 protocol, cassiopeia bitmail, dooble web browser, interface social
 network

Whoa, some nice bullshit bingo right there! ;)

-- 
Pozdr
rysiek

signature.asc
Description: This is a digitally signed message part.


Re: GoldBug SF projects [was: Bittorrent Bleep]

2014-09-23 Thread grarpamp
On Tue, Sep 23, 2014 at 4:50 PM, Dmitrij D. Czarkoff czark...@gmail.com wrote:
 Hi!

 Attn czarkoff: Background threads for reference in your wikipedia work
 https://cpunks.org/pipermail/cypherpunks/2014-September/thread.html
 https://cpunks.org/pipermail/cypherpunks/2014-September/005505.html

 keywords: goldbug messenger, firefloo communicator, lib spot-on, echo
 protocol, cassiopeia bitmail, dooble web browser, interface social
 network

 I am not sure how I can help here.

In those threads and links following from the above are people
showing that these 'goldbug' related projects have serious trust
issues and may be some form of malware/crapware. Read the
linked threads for more info.

If you search around wikipedia for these projects and
look at their edit, talk and contributor histories you can
find their edit trails there. Bogus listings is their way of
free advertising and luring gullible users to them.

I don't know much about how these things are handled within
wikipedia community. But I have seen articles that have
'Controversy' sections in them.

So if I were an editor I'd add exactly such a controversy section
to all the pages... that some people see big issues with these
projects. And back it up with links out to these threads on the
cpunks, gnupg, and tor lists. At least that way it's on wikipedia
history for people to see.

http://en.wikipedia.org/wiki/Wikipedia:Articles_for_deletion/GoldBug_(software)
http://en.wikipedia.org/wiki/Draft:GoldBug_(software)
http://en.wikipedia.org/wiki/GoldBug_(Instant_Messenger)
http://en.wikipedia.org/wiki/Echo_(communications_protocol)

Saw your arguments on the deletion page and figured
you would like to be aware of these issues as well.