Researcher: Backdoor mechanism still active in devices using HiSilicon chips | ZDNet

2020-02-04 Thread jim bell
https://www.zdnet.com/article/researcher-backdoor-mechanism-discovered-in-devices-using-hisilicon-chips/



Re: A+ Certification

2020-02-04 Thread rooty
Hey thanks really appreciate. The test was super hard and I study a lot. On to 
N+ next then coding yea

 Original Message 
On Feb 4, 2020, 2:09 PM, other.arkitech wrote:

> What is A+ cert?
> congrats ; )
>
> ‐‐‐ Original Message ‐‐‐
> On Tuesday, February 4, 2020 11:47 AM, rooty  wrote:
>
>> Big shout out to cyberpunks list as I received hundreds if not thousands of 
>> emails and support of encouragement. What a great bunch of punks
>>
>> Regards rooty
>>
>>  Original Message 
>> On Jan 22, 2020, 12:32 PM, rooty < arpsp...@protonmail.com> wrote:
>>
>>> Hey just wanted to share with friends that I got my A+ certification 
>>> yesterday. Next up N+ thanks for all the help and support.
>>>
>>> Rooty

Iowa surprise, Hiltasha Clintonov wins

2020-02-04 Thread Zig the N.g
In a huge surprise at the Iowa DNC caucuses, Hiltasha Clintonov wins.

Details:

  Surprise Candidate Hiltasha Clintonov Declared
  Winner Of Iowa Caucuses
  
https://babylonbee.com/news/dark-horse-candidate-hiltasha-clintonov-declared-winner-of-iowa-caucuses

...
In an unrelated development, all the other candidates have turned
up dead.


In other news,

  Bloomberg Purchases First Supporter For $1.7 Billion
  https://babylonbee.com/news/bloomberg-purchases-first-supporter-for-17-billion

  Study: People Tend To Tune Out By The Fifth Threat To Our Democracy
  Per Day
  
https://babylonbee.com/news/study-people-tend-to-tune-out-by-the-fifth-threat-to-our-democracy-per-day



Re: A+ Certification

2020-02-04 Thread other.arkitech
What is A+ cert?
congrats ; )

‐‐‐ Original Message ‐‐‐
On Tuesday, February 4, 2020 11:47 AM, rooty  wrote:

> Big shout out to cyberpunks list as I received hundreds if not thousands of 
> emails and support of encouragement. What a great bunch of punks
>
> Regards rooty
>
>  Original Message 
> On Jan 22, 2020, 12:32 PM, rooty < arpsp...@protonmail.com> wrote:
>
>> Hey just wanted to share with friends that I got my A+ certification 
>> yesterday. Next up N+ thanks for all the help and support.
>>
>> Rooty

The FAX by mailinglist

2020-02-04 Thread Anonymous Remailer (austria)


Facts are important.  There is an idea that they are becoming bifurcated and 
will soon be obsolete.  I think this is a false idea.  A truth is only as true 
as the ideas surrounding it.

Following are 5 links.  In order of creation and a short description of each.  
They are hosted on Google servers, so they should be safe and work.  Take the 
time and precautions you see fit.  I have.

Disney Disabled Services Letter.pdf  A letter to Disneyland's disabled services:
https://docs.google.com/document/d/1Qc2h_Z5ZYKefjRgJ_Ahfp0uU8r2O5-JV-R_SvbDVf6A/edit?usp=sharing

1fTx0DDN.txt & dontdoanythingaboutthisplease.txt are the same document, a 
letter to CIA Director Haspel:
 
https://docs.google.com/document/d/1DlaL5oONIH0mB_vUamNbcMLrmwsPbhttfzTVILgiNXc/edit?usp=sharing

jiminiproject.pdf  - An AI (patent pending)
https://drive.google.com/file/d/15t_fHDgwa06bB4w0tWKoZZR8kjrJYxeB/view?usp=sharing

Business letter.pdf a letter to Chelsea Manning sent to her jail cell in 
Virginia by mail, with a copy sent to her lawyer via twitter messenger:
https://docs.google.com/document/d/1CsvbTWchuMlaJLIb06iqKfRImG1tC3p6uZVZU0wil0Y/edit?usp=sharing

A list of Fax numbers I have sent these documents to. Sorting by Date or phone 
will give you a good idea of where I was trying to communicate to. The "Done - 
Good" tab at the bottom is only successful faxes with page count confirmations 
as copied from my account:
https://docs.google.com/spreadsheets/d/1bexjO2Q_Zyd3Y15DpuC6xWuD6ViztzWWn0SwSaBtaM0/edit?usp=sharing

There are other facts, but these are some of mine.  Please look into this.

Thank you.& Aloha


-Rob


Juan Guaido declared winner of Iowa Caucus

2020-02-04 Thread Razer
> Due to the immense rigging by the far left Democrat regime in control
> of the American government, the official results are illegitimate.
> Juan Guaido is the true winner of the Iowa Caucus. Congratulations to
> Juan Guaido!

https://telegra.ph/Juan-Guaido-declared-winner-of-Iowa-Caucus-02-04

(and if you think that's funny, check the domain owner)

Ps. Walker Bragman, Paste magazine

"Not great optics here, folks:

- Dems paid company literally called Shadow to create caucus app
- Buttigieg campaign also paid Shadow, FEC records show
- Caucus app fails
- Buttigieg declares himself Iowa winner with no results
9:59 PM · Feb 3, 2020"

https://twitter.com/WalkerBragman/status/1224573131731369994



signature.asc
Description: OpenPGP digital signature


Re: Cryptocurrencies: alpha-11 US-Public System released

2020-02-04 Thread other.arkitech


‐‐‐ Original Message ‐‐‐
On Tuesday, February 4, 2020 12:22 PM, grarpamp  wrote:

> On 1/31/20, other.arkitech other.arkit...@protonmail.com wrote:
>
> > coining the abbreviation USPS
>
> It seems like a coin, coins have tickers.
> It's not much of a good one, sounds too much like
> Postal Services, United Parcel, too much USA.
>
> > Important: SSH only applies to nodes I control because owners voluntarily
> > allowed for development.
>
> > No one else but you enter the box.
>
> If past is right, it was enabled by default in the image and could login
> to all the users machines, and required all users to register their
> IP to you before they could run their nodes.
>
> > There is a reason for using IP4, see below.


I have a ssh access to many of the existing nodes, as people who run them, 
(some I know, some I don't know who is behind), understands I need it for 
development purposes.
This is ok for alpha status and is also low risk while the value is low.



>
> It's invalidated by both easy and inexpensive attack models.
> Especially before masses supercede over Sybil.
> So there is not point to this IPv4, early, or later.
> Unless there is some whitepaper to show different.
>

The whitepaper is in the kitchen, but is a slow cook.
Remember that this system is in late-development stage. It won't be officially 
released until the current alpha-11 evolve to 1.0


> > Users have a linux box with root access protecting their wallet.
>
> No, users have a closed source USPS box that they have
> no idea what it is doing with their funds and their interaction
> with it. There is zero protection there. Users would be insane
> to put funds on closed source remotely accessible box that
> some license and mandatory autoupdates further shove
> centralized counterparty control risk down users throats.
>
> > Software updates are pulled like your OS pulls updates from repositories.
>
> Ask your local FinTech dayjob how scary that is no, no, no.

I bet they all have their operating system automatic updates turned on as they 
ought to do to keep their systems updated.

>
> > You can find a number of devices at your home fitting this model: Router,
> > TV, Windows.
>
> All of those closed devices are untrustable surveillance, attack,
> and propaganda boxes that should be hit with a hammer.
>

USPS this node will be trustable and secure on 1.0
because the dev-tools that are present during alpha will be gone, an the 
software will be released open-source.


> > It is not an irrelevant parallelism. USPS box is debian Linux where you can
> > login as root. Most routers that run proprietary software inside don't let
> > you in as root, but you still run it.
>
> An opensource BSD/linux router that users can hack
> on is an irrelavant nonexample.
>
> Root access to USPS doesn't matter much when USPS users cannot
> hack on and run USPS however they want due to closedsource and
> license. That's a relavant distributed fintech security issue,
>
> > it is a system that cares about your private data.
> > not only financial data, everithing fits, medical records, pics, ...
> > Security is maxed in this project.
>
> Needs a whitepaper to evaluate this.

This is a project aimed to maximize privacy, the whitepaper will tell the 
details.

>
> > The consensus algorithms do not exchange private data.
> > redundancy of information makes its potential utility unneccesary,
> > man-in-the-middle modifying traffic does not impact in the consensus.
> > TLS comes important only in private P2P trades.
>
> Was a basic analyse the failure modes and breadth of possible attack even 
> done.
> At minimum, every users transaction is spyable... srcIP, dstIP, content,
> as it is broadcast across the network.
> "Private P2P trades" are probably not private because they
> too need to ripple information across the spy network to
> register in consensus crunching pools, etc.
> All the miners mempools or whatever you call them
> will know exactly what IP hops the tx came from.
>

Using encrypted communication is impossible (provably impossible) to determine 
the originating node of a transaction.
Using clear communication, is a not easy problem to deduce the originating 
address of a transaction.

A transaction contains input and output addresses, which are already anonymized.

So it offers pretty good privacy.

The most you can know is that a particular IP address operates a node, 
difficult to breach privacy.
Only "The Man" and your Internet Company could transform IP4 into your personna.



> > TLS does little for security,
> > That's why BTC does not need encryption.
> > Also USPS doesn't need it
>
> Haha, that was the bad joke the NSA police politician propaganda
> played on you :)

I am connected to politics in no way.


> Everything that traverses clearnet needs at least some basic TLS
> mode... TOFU, PSK, oppurtunistic... or other good crypto.
> TLS is free, to refuse to crypt every single connection today, looks even more
> stupid than 

Re: [OBORONA-SPAM] Re: Cryptocurrencies: alpha-11 US-Public System released

2020-02-04 Thread grarpamp
On 2/2/20, other.arkitech  wrote:
> The proposal is to replace current Governments with a low-cost
> distributed machine that would collect inputs and produce outputs

Sure, that is all good and interesting to try.

> not apply filters in people's input.
> The system would be able to let people decide whether if a 'road' is
> convenient or not, and how to fund it.

What if the people decide USPS is inconvenient due to license inability
to hack and fork, or is being too centralized monetized premined controlled
by all these "business investors" and "private invites". People will leave
it with no adoption, and all USPS people names and funds die with it.
Even from old age who going to enforce or care then.
And when people simply reverse engineer or clone around and
make a new better than USPS system.
At least actual opensource distributed forkable as needed
might survives with good reverence and actual freedom.

How can peopel think trying to teach new voluntaryism model of
"letting people decide" without force concerning "whatabout muh roads"...
can be honestly taught using a software application students
will eventually discover is based on non-voluntary license force.
Did not some students rise to destroy this conflicting master.

How to not apply filters to peoples tools.

> Everything is better compared to our current model of participation in the
> society based on ticking a box every 4 or 5 years.

Then don't tick any box.
And write code boxes to bypass them.

Or tick the Libertarian box if you want to see Stasi boy go postal.



Sure maybe there is no problem making private money in some ways,
just that truth should be disclaimed in front.


"spend years of my life
learning to code improvements/modules to particular software
platform, it might as bloody well be something I can continue to do
if I leave my present corporation"


Re: Cryptocurrencies: alpha-11 US-Public System released

2020-02-04 Thread grarpamp
On 1/31/20, other.arkitech  wrote:
> coining the abbreviation USPS

It seems like a coin, coins have tickers.
It's not much of a good one, sounds too much like
Postal Services, United Parcel, too much USA.

> Important: SSH only applies to nodes I control because owners voluntarily
> allowed for development.

> No one else but you enter the box.

If past is right, it was enabled by default in the image and could login
to all the users machines, and required all users to register their
IP to you before they could run their nodes.

> There is a reason for using IP4, see below.

It's invalidated by both easy and inexpensive attack models.
Especially before masses supercede over Sybil.
So there is not point to this IPv4, early, or later.
Unless there is some whitepaper to show different.

> Users have a linux box with root access protecting their wallet.

No, users have a closed source USPS box that they have
no idea what it is doing with their funds and their interaction
with it. There is zero protection there. Users would be insane
to put funds on closed source remotely accessible box that
some license and mandatory autoupdates further shove
centralized counterparty control risk down users throats.

> Software updates are pulled like your OS pulls updates from repositories.

Ask your local FinTech dayjob how scary that is no, no, no.

> You can find a number of devices at your home fitting this model: Router,
> TV, Windows.

All of those closed devices are untrustable surveillance, attack,
and propaganda boxes that should be hit with a hammer.

> It is not an irrelevant parallelism. USPS box is debian Linux where you can
> login as root. Most routers that run proprietary software inside don't let
> you in as root, but you still run it.

An opensource BSD/linux router that users can hack
on is an irrelavant nonexample.

Root access to USPS doesn't matter much when USPS users cannot
hack on and run USPS however they want due to closedsource and
license. That's a relavant distributed fintech security issue,

> it is a system that cares about your private data.
> not only financial data, everithing fits, medical records, pics, ...
> Security is maxed in this project.

Needs a whitepaper to evaluate this.

> The consensus algorithms do not exchange private data.
> redundancy of information makes its potential utility unneccesary,
> man-in-the-middle modifying traffic does not impact in the consensus.
> TLS comes important only in private P2P trades.

Was a basic analyse the failure modes and breadth of possible attack even done.
At minimum, every users transaction is spyable... srcIP, dstIP, content,
as it is broadcast across the network.
"Private P2P trades" are probably not private because they
too need to ripple information across the spy network to
register in consensus crunching pools, etc.
All the miners mempools or whatever you call them
will know exactly what IP hops the tx came from.

> TLS does little for security,
> That's why BTC does not need encryption.
> Also USPS doesn't need it

Haha, that was the bad joke the NSA police politician propaganda
played on you :)
Everything that traverses clearnet needs at least some basic TLS
mode... TOFU, PSK, oppurtunistic... or other good crypto.
TLS is free, to refuse to crypt every single connection today, looks even more
stupid than it did in 2010 and 2000. Regardless even if it only make
it tiny little
harder for adversary, it is non optional today.

>> But auto rolling updates to the users fintech without users
>> permission risks wiping out the entire network, and peoples
>> coins with it.

> That's foolish reasoning because pulling and auto-pulling differs little.

No, auto-pull auto-run is vastly different from manual-pull manual-run.

> You voluntarily allow or disallow your binaries are in sync with the rest of
> the network, one-time setting.

Users should set it to OFF until they can eval and test
and talk about it with others.

> Only when the project gains user base an open source community will be
> started, with reproducible builds of course and ALL code open.
> Not before, there is no point to opensource it before time.
> Honestly, what are you going to do with 40K lines of C++ code? without user
> base you would not review a single file. Pointless at this stage to open
> source.

These ways is not how true opensource projects operate.

> I do share the code with devs for specific patches under NDA.

As before, how exactly are you going to enforce that NDA?
How exactly are you going to enforce your nonfree License / Copyright?
How exactly are you going to stop users plugging it into overlay networks?

Do you think cryptoanarchy cares about those things?

Are you going to beg and vote and pay for the State to go shoot people dead?

> It is fully AGPL only of the software is executed on a licenced mainnet

Then it seems not AGPL, it seems some proprietary license that cannot
use the name AGPL. Good luck...


Re: A+ Certification

2020-02-04 Thread rooty
Big shout out to cyberpunks list as I received hundreds if not thousands of 
emails and support of encouragement. What a great bunch of punks

Regards rooty

 Original Message 
On Jan 22, 2020, 12:32 PM, rooty wrote:

> Hey just wanted to share with friends that I got my A+ certification 
> yesterday. Next up N+ thanks for all the help and support.
>
> Rooty

Schneier was right

2020-02-04 Thread Ryan Carboni
Two years he says?

https://www.schneier.com/blog/archives/2014/12/nsa_hacking_of_.html
Assume that anything we learn about what the NSA does today is a
preview of what cybercriminals are going to do in six months to two
years.