WTF?

It has to do with a DDOS attack that spawns from Cyberbunker being added to a blacklist.  Cyberbunker DDOS’s the hell outta some DNS servers if the Times News article is anywhere close.

Here is a quote from the article:  “The attacks are becoming increasingly powerful, and computer security experts worry that if they continue to escalate people may not be able to reach basic Internet services, like e-mail and online banking.”

The guys that write this shit suck.  People are pulled into it too.  Computer security experts are ‘worried’.  About fucking what?  Email and online banking?  Netflix?  Who cares if you cant access your shitty Netflix.  OMG I NEED TO KNOW HOW MUCH MONEY I HAVE IN THE BANK NOW.  I WONDER IF GMA GOT MY EMAIL ABOUT THOSE COOKIES?  First world problems.

Another quote:  “These things are essentially like nuclear bombs,” said Matthew Prince, chief executive of CloudFlare. “It’s so easy to cause so much damage.  Matthew Prince.  Matthew fucking Prince…using 1950s sensationalism related to nuclear weapons to describe a fucking DDOS attack.  This guy is a real winner.  Its more like a giant traffic jam.  Deal with it.  The prince of sensationalism and is just glad to get his company in the headlines.  You should sign up for his services.

The so-called distributed denial of service, or DDoS, attacks have reached previously unknown magnitudes, growing to a data stream of 300 billion bits per second.

OMG.  BILLION?!!?!  Thats like a lot right?

I like how John Markoff (The genius that wrote this glorious piece) finds a quote from Dan Kaminsky and adds it in:

“The No. 1 rule of the Internet is that it has to work,” said Dan Kaminsky, a security researcher who years ago pointed out the inherent vulnerabilities of the Domain Name System. “You can’t stop a DNS flood by shutting down those servers because those machines have to be open and public by default. The only way to deal with this problem is to find the people doing it and arrest them.”

I remember hearing Dan talk at Defcon and if he said this it was not because he wanted to be the only solution.  Considering the guy is so heavy into DNS and actual computer security I am sure he has another solution.  He may have even been talking or inferring about another solution in the same paragraph.

More crap written buy another jerk at Times News that is read by the millions of morons who support any solution to make them safer.  I wish these idiots would stop referring to DDOS attacks as anything more then what they are.

I am down to my last little bit of messing around. I have been working towards involving myself into a group project. Something opensource and something that needs done. I think it will gear me up for the future to come. I have my own external resources for publishing and have now internal resources for record. I do not know what I am going to get into next but when I decide I will let you know. Hopefully gone are the days of putting all this time in and never seeing even one observer comment.

I recently visited Fablab in Tacoma. They are a young hacker space with a bright future if they do it right.

You could use this to compress data.  I have a feeling that it would work with quantum computer systems also.  That is, in the end, this will apply entirely or partly to a quantum system.  Calculations.

One could even create a equation that would output the data.

Model infinite numbers via shapes.

Model finite number via shape

Match shape inside infinite number.  Start by matching only part of finite set to finite set.

Would work better if infinite number was predicable at distances.

Checksums may work.

Having a standard model for finite data would help visualization.  IE all data fits pyramid shape.  Now find right pyramid.

Output of finite data = Estimate Index Location (A place to start a search within an infinite number)

Infinite number can be predictable?  Repeats but grows forever.

Skip Sets.

1000000101010110010

-char length/data size
-checksum (nv)

Describe the data and find the answer.

Something physical could help also.  A device or selected input.

I will have a better update soon.

Web….

I added google ads to my site just to figure out how to do it.  You can always use Adblock for chrome or Firefox to block them.

We will see.

Web

Videos can be found here:

http://www.dailymotion.com/video/xs8zd7_william-binney-hope-9-keynote-part1_tech

http://www.dailymotion.com/video/xs8zl4_william-binney-hope-9-keynote-part2_tech

Here is an article:

http://www.truthdig.com/report/item/truthdigger_of_the_week_william_binney_20120714/

It is a suggested watch if you have questions about the how tracking and profiling systems could be implemented across the world and in the US.  It describes a reverse social network that assigns actions to people and uses these actions to predict the future of other actions.

John and Sue do this.   This means that Al is going to do this.  They have this in a town and this will cause X.  Al has done this X amount of times along with doing it here.  This means that Al is going to bla.

Binney also spoke of pursuing information and using it to find out information that is unrelated.  The formula or idea that he spoke of would be the equivalent of measuring two closed systems one within the other.  The closed system on the outside if measured fully would tell you everything about the other closed system inside.

It was interesting.  Binney also spoke of the US governments posture on monitoring its citizens and that he thought it was wrong.  He spoke of working at the NSA and moving away from the legacy system that was setup and making something new only to have it ripped away from him because the NSA needed the problem he solved to keep making money.

He also spoke about be harassed by the FBI, etc.

Another video:  http://www.infowars.com/whistleblower-binney-says-the-nsa-has-dossiers-on-nearly-every-us-citizen/

He states that in 2001 active collection of transaction information was high and he assumes that it is even higher now.

He was also concerned with the Whitehouse initiative on ‘big data’ and that government agencies are pooling their money to finish a system that is already in place.

A hacker conference in New York you say?  What an interesting prospect.  You know, when I attended my first conference, I was in.  That is, I knew that these people around me were people like myself.  Coming from a small town and searching for people I could hack with was a joke.  I am still young to the con life so I have much to learn in the ways of networking with my peers, but I know I no longer need to search for a venue.

I never could afford anything when I was younger.  I had big ideas and every situation that I seemed to find myself in was a general failure.  Not that I did not learn anything from the friends that I did find, but it was more that they did not have the same dedication to the skills that I had.  It was de-motivational.  I have found, in a way, that hacker cons give me the motivation I need to continue on my own.  Eventually I just need to take it to the next step and ramp things up with some group projects.  These are the prefect places to get people engaged in world changing projects.

Whatever.  It will happen.  Someday :p

I have met a few people that run some cons and they always point out that the con is never all about the talks and I think I have captured some of that reason above.  I think another reason to add is the locations that they are hosted in.  The opportunity to travel and experience the cities around the cons.  So far I think that HOPE takes the cake in this area.  Defcon and Las Vegas seemed to move aside in my mind as I started tours of New York city and really started to explore around.  I have heard a few statements from fellow hackers at this con (talking to friends on their cell phones) about how it may be unsafe or whatever to leave the hotel.  How can these people be afraid to journey out into one of the greatest cities on the planet but not be afraid to journey out into the digital domain?

I was afraid once too.  I was not always afraid but I found myself unable to push myself to new topics and domains fast enough.  The fear of being a noob or not knowing.  The fear of failure.  So much experience in this mind of mine and all it has done is made me more cautious to move to the next thing.  I have broken down those walls years ago but the borders are still fought over in my mind today.

Generally with smaller conferences (not that HOPE is) you find people who are willing to go the extra mile and do full disclosure or talk about the things that other groups will not.  As I attend the talks at Hope and listen to the mantra I start to see a young child with a giant middle finger.

Young because they hold their own inner ideals to be pure.  They try and stand for things that they think are right because, really, they are right.  Free speech, free people, consequences for the powerful, imagination without limits, and an inner will to support all this.  A middle finger because fuck you.  You the oppressor.  You the one trying to inhibit the pure path that they travel on.  Nothing will get in the way.

This group does not ignore reality though.  Take the examples shown from the keynote talk about the Yes Men.  These guys capture everything that I have spoken about above and inject it strait into the publics reality.  The methods they use are efficient and powerful.  A way to do things that many either never thought of or never had the will to try.

I know a large part of this attitude is due to the hacker culture itself but still, @hope…you see and feel it more.  It may be the raids that the presenters went through and mention to the audience.  It may be the things that 2600 and EFF stand for.  It is like a high and I am sure that everyone experiences it differently.

Things to Note about NY so Far:

The guy sitting in front of Hotel PA is either a really bad drug dealer or a crappy undercover cop.  -His best saying:  “Whatever HACKER.”

(I think he is gone)

Learn to use the subway.  The thing is f*cking fast.

Do not.  I repeat, do not walk across the dam street when traffic is moving.  They will just hold down their horns and almost run you over.  You better start with staring at the walk lights until they turn white.

This place is expensive and generally a rip off.  Something I can get at home generally costs 2x more.  100$ for a 50$ meal at the same chain restaurant.  The Broadway comedy club was still cool.  The guy will sell you tickets for 15$ a piece instead of 20.  I bet you can get him to lower the prices even more.

The ‘tour’ they give you at the Empire state building brings up some wtfs? but it is still fun.  They try to make you let them take a picture of you in front of a green screen then sell it to you for 30$ later.  When you try to take a picture of the picture.  They get pissed.  You can still pull it off.

I will write more later in a separate post.

You must be doing too good because you decide to change your business model and take a giant dump on so many people.

Who in their right mind decided that subscribing people people to a service where a company gets to manage their internet equipment and potentially and easily access their personal information was a good idea?

Hold on.  I have my social security number, address, and mapped DNA for everyone to share too.

Cisco should have just said that they wanted to create a massive controllable botnet for their own use.  They should had stated, before the upgrade, that they wanted to make it so they can access your family pictures, your written work, and bank accounts too.

What Cisco did has to be illegal as they just took over how many devices and are now under control of equipment that they do not own.

Unbelievable.  I suppose it make sense as the same people that own the movie and music content also own these ISPs.  I hope we can pull our heads out our asses and make sure someday we show these idiots what the internet is and what it was really meant for.  I love when people get paid off to help run propaganda campaigns for corrupt and evil groups.

I picture a free future and I say most other people do too.  They have limited our bandwidth on our residential connections while business users get to use as much as they want (Comcast does this).  Now they are telling us what to do with them?  How much money do these people really deserve?

All the complaints and proof that the organizations that work for the RIAA and MPAA are launching false claims and generally corrupt and heads of ISPs still want to give them more power?

They just get to fire off reports about your IP and you get educational notices in the mail.  I think the only education that people are going to get out of this is how to use a VPN and where to purchase a Seedbox.  If users in other countries are learning to bypass government censors how easy do you think it will be fore Americans to bypass these guys?

This battle has been being fought since they introduced cable modems in the US. It really kicked off when Napster hit the streets and music artists did not have enough cash to wipe their asses with.  Fuck them.  I turn on every radio station and hear shit.  I turn on my Netflix and most of all the movies I want to see are missing.

How many years later and they are still fighting the war on consumers. What a crappy business model.  It is insulting.  What a giant shame that these guys even get to think about how Americas internet should be when they have not a clue about how it should be.  ISPs hear these guys grumble and they instantly agree because it means larger profit margins for them.

How much more money will they save when you are afraid to watch your TV on-line because you may go over a bandwidth cap? You also better forget helping the community and sharing out that new Debian ISO for fear of the big bad ISP. Wtf. The internet was built on the shoulders of great individuals and these morons just continue to destroy it. How the hell did we let this happen?

The answer is that we did not. The sheep let it happen. The sheep who check their email everyday, browse AOL, and that is about it. They pay full price for super fast internet thinking it will speed up the spyware infected computer that they use.

To be honest with you these ISPs should not even have a clue what we are doing with our internet connections. They do not need to know a majority of the things they know to keep the network running. The reality is that they need information to use against a user when they need proof so they can slow s users connection down.  They need to slow that users connection down because they cheeped out and did not put enough fiber lines in for the neighbourhood they are trying to feed.

And we are letting them get away with it. I am letting them get away with it. You are letting them get away with it. Where is the dam competition?  Where are the 100mbit up and down connections to the house linking the world together in ways we cannot imagine?  They can do it.  Google is doing it.

It can be done.  We have the technology to support 100Mbits and more.

With emerging technologies they should be able to shoot super-fast internet into my dam brain. Now instead of that wonderful and glorious idea I have to deal with some asshole constrained and edited version of the internet.  What happens if I want to download 2 terabytes of random internet? I can not do it because the man will kick me in the ass for it.

This is a war on the human mind. Why should a normal person have access to that much information? They may get too smart. They are lonely peasants on the path to normalcy and servitude and they do not deserve to know that much. I may be stretching it to far. I may be. I do not think that I am in a way.

I do not think that I am because every decision that the people that run these companies make looks more and more like the decisions made and methods used buy oppressive groups since information through communication existed. Are you poor? You are not allowed to read or write.  We are not going to teach you and it is illegal for you to own books. You can also eat after the rest of us aristocrats get our grub on first. Fuck that. I want my food now.  I am hungry.

Who cares about video streaming?  You think video is going to remain the dominant bandwidth hog over the next century?  It may be but not the type of content that these copyright groups target.  Video conferencing, live video streams from the Google glasses project, so much information that is about to come bursting over these backbones and we are too busy listening to these content industries bitching about something they they themselves should have fixed over 10 years ago.  We should be forcing these corporations to step up and deliver our content they way we want it.  If only Americans were not so hopelessly addicted to reality TV and really bad movies.

Internet technology is going to change massively in the next 10 years.  Eventually even, fully encrypted connections will outplay application level sniffing and control.  We are making useless laws and the guys that design file sharing technologies are 1000 steps ahead of us.

Somewhere in the future we are going to be looking back and wishing we would have prepared for the future instead of fighting it every step of the way.  That time may be soon or that time may be far away.  I just watch the world play.

This would be inpersieviable in all but one dimension. 

From wikipedia:

New Zealand authorities were cooperating with the United States’ FBI and Justice Department, Hong Kong Customs and the Hong Kong Department of Justice, the Netherlands Police Agency and the Public Prosecutor’s Office for Serious Fraud and Environmental Crime in Rotterdam, London’s Metropolitan Police Service, Germany’s Bundeskriminalamt and the German Public Prosecutors, the Royal Canadian Mounted Police and the Canadian Department of Justice in the investigation preceding the arrests.

I guess this is great but why do we have different countries with different laws if we have people thinking that laws around the world should still be the same?

The worst part about all of this is how the US is being reflected on the internet over this.  The future of cloud storage in the US is at risk now because we had to go seize a bunch of movies and whatever.  People are not going to want to put any data in the US.  Why host your data in the US when it is just going to be seized?  Someone could intentionally infect your data with something illegal and then the FBI comes and takes it.  It may just be talk on the internet now but people are actually thinking about this stuff somewhere.  Making decisions where to put their data.

I have heard that in this case though many legal take downs where tried…but who really knows.  Many legal take downs are tried all the time everywhere.  If one user in some city shares a file on some p2p network do we take down the entire internet in the city to find this one user?  No.

I really wonder how many of those files are legit and how many people they upset by taking this data.  In the case that they are going to pursue against this gentlemen and others this is going to be a factor.  It may be that large amounts of data may be legit.  Quote from that link:  “Counting only Web-based file-sharing, then, Megaupload accounted for more than a quarter of corporate traffic.”

This is HUGE and the impacts that this case and the actions that the FBI takes are going to be important.  The future of the security of our nation and our economy will be effected by this case.  We may be making things more difficult.

Remember this is not the first time that the FBI or a gov agency has taken a massive amount of sites or files down before.  Remember the time they took down something like a million blogs because of a few bad nuts?  That was miniscule compared to the amount of data and servers Megaupload had.  Quotes like “Megaupload, the popular Storage and Back-Up Service which accounts for roughly 1% of total traffic on fixed access networks in North America.”

Here are some graphs and tables:

Stop pissing people off.  Better ways exist to do the same thing that they are doing.  How difficult would it have been to throw up read only copies of the data?  For 1 more week the world could have stood Megaupload existing so honest people can keep their honest data.

They were talking here about how long it is taking to clone some data.  10 days to copy 26 terabytes?  That is either a lie or it is embarrassing.  I can clone 150 TB of data in a day with the right hardware.  So can anyone.

Clone the dam hard drives and give them back or give them the clones.  Stop delaying.

Dotcom is a moron.  How the heck you have 150TB of data and not have that stuff backed up somewhere? (I get that it could have been backed up on megaupload servers but still…somewhere else)  This is standard IT, act of god type stuff.  The people that only hosted there data on mega-upload are suckers too.  This is a good education in cloud hosting for everyone.

Megaupload was used to share pirated material and everyone knows this.  But I bet Amazon EC2 is.  Softlayer is.  Any of the large data providers.  That server you have your VPS on…I bet you someone with another VPS on the same server is hosting something copyrighted.  When they find illegal data in the Amazon cloud you think they go in and take a whole rack of data?  No.

If seizures keep going the way they are going hopefully people will realize what the ‘cloud’ is really for.  Not that it is some type of magic layer of the internet that is safe and secure.  It is a volatile layer of complex hardware and software that can have massive cascading failures.

I may not be educated in the global complexities of copyright law but even I can see that something is strange here and that we are doing it wrong.

I am not arguing for Dotcom or the FBI because I do not know enough, but from the news that I am reading…something is amiss.

This is a test.

http://www.timeanddate.com/astronomy/venus-transit.html

I have the paper glasses that they use at eclipse events.  Right now where I am at it is cloudy.  I plan to hand the glasses out but it would be nice to know the time that I should be looking for the transit.

The simple maps that they have online say visible at sunset…

Here is a video that is going to have the entire transit:  http://www.exploratorium.edu/venus/  It is going to be from an observatory in Hawaii.  The transit there will start at about 22:00 Universal Time.  Which is about 1800 Eastern time (6pm).

NASA has some Universal Time tables that one can reference:  http://eclipse.gsfc.nasa.gov/transit/venus/city12-2.html

Here is a display of UT vs other times: http://tycho.usno.navy.mil/cgi-bin/timer.pl

I am on the east coast near Rochester, NY.  It should start at 6:03:44PM EST and end at 06:21:23pm EST. I hope the sky is clearn.

I was also able to use a transit calculator (http://xjubier.free.fr/en/site_pages/VenusTransitCalculator.html) to get some accurate times.  I compared the accurate times of my location to some others and sunset times and they did not match.  The transit has nothing to do(really) with sunset rather it has to do with when Venus is between you and the sun.

Here is some more information from Exploratorium:

“The transit starts at about 22:09 Universal time (Greenwich mean time) on June 5 and ends at about 4:49 UT on June 6. NASA/Goddard Space Flight Center has prepared Circumstances for Cities tables so you can look up the transit times for particular locations. The times are in Universal time; you can convert to local time by using the World Clock—Time Zone Converter. (You may notice that the date given for the transit on the tables is “2012 June 06″ rather than June 5–6. That’s because the date is for Greenwich, England. Greenwich is at the prime meridian—0° 0′ longitude—and is the starting point of all the world’s time zones.)” (http://www.exploratorium.edu/venus/question3.html)

http://files.hackspherelabs.com/?download=papers%2Fboyd.pdf

Summary:

The document discusses sources of information for sensitive information but at the same time mentions reasons not to disclose sensitive information.  The document violates its own recommendations.  The document discusses 3 main types of information:  Vulnerabilities, Scenarios, and Research.  It states that some type of attitude of coming together should be shared by the people of different communities, and that this attitude should be one of protecting information.  It describes different groups of evil people and the things that they can do with information.  It also focuses on classified vs. sensitive information and describes the difference.  The author also talk about how even common information can be sensitive in the wrong hands.  The author talks of self restraint as a civic duty.  The author shows how information transfer has changed with the changing of technology.   Much concern was given to terrorists and how publicizing a lot of information helps them and helps us, but that it was bad when it helped them.

Opinion:

I have read books that were created over 100 years ago that have more information in them then the modern science book.  How to make compounds, etc.  It is amazing how much information is already left out of any modern work already for various reasons.  Reasons ranging from competitiveness to audience estimation to whatever one can imagine.  Knowledge is power and most of us know this.  Knowledge is truth though too.  I feel the author is right but deeply wrong in the recommendation that we become a society that feels they should hide knowledge.  We cannot let evil things and ideas win and instead should never give up trying to build what we want in the end.  If we make compromises protecting ourselves today how horrible are we going to be tomorrow when we forgot that it was a compromise.  The next generation will think that it was just always acceptable that we were not supposed to talk about such and such a subject.  The next generation will be weaker than the first.  We should be able to handle this but the public cannot.  If the power goes out they panic.  If something bad happens they panic.  Where does this panic come from?  Instead of investing the effort into training the public to whisper I think we would be better to train the public to not panic when something crazy happens.  Sure as with vulnerability disclosure things should be fixed before information about it was released, but what happens when the group that needs to fix it does not?  They need pushed just like some software and hardware vendors do sometimes.  Also how are people supposed to know what not to talk about if no one can talk about it?  Closed circle discussion?  Where you trained to identify every scientist in the room?  We need more information published and we need to adapt faster instead of slowing information down because we are slow.

I would just disable auto update of java in the control panel and distribute updates like this.

http://wiki.hackspherelabs.com/index.php?title=Java_Install_Silent

When I built the first one I had specific requirements.  I wanted the device to be small but have a huge amount of space on it.  I wanted it to support OpenIndiana etc.  This second NAS server that I am building is quick and fast.  The only reason I wanted it was to backup my primary unit.  Down the road I may do something with it but for now this is my only purpose.

I bought the hardware in a hurry.  I had some things picked out from some research before.  This is what I picked out:

• RAIDMAX Seiran ATX-902WW White Steel / Plastic ATX Mid Tower Computer Case
• ASUS M5A78L-M LX PLUS AM3+ AMD 760G Micro ATX AMD Motherboard
• LOGISYS Computer PS480D2 480W ATX12V Power Supply
• AMD Sempron 130 Sargas 2.6GHz Socket AM3 45W Single-Core Desktop Processor SDX130HBK12GM – OEM
• Crucial 4GB (2 x 2GB) 240-Pin DDR3 SDRAM DDR3 1333 (PC3 10600) Dual Channel Kit Desktop Memory Model CT2KIT25664BA1339

I got all of this for $200 which is way below what I paid for the hardware in the other unit.  I did not purchase any hard drives because I have what I need laying around to backup the amount of data I need to backup.  I can always expand later.

I did a bit of checking with the hardware to see if it was compatible with Linux, BSD, and OpenIndiana.  I think I found reports of the AMD 760G chipset working with all 3. (SATA, NIC)  I will report in the end what I use.  I really want something that I can scoop up if I need to.  That is I can pull the drives from the unit and run.  This is in case of fire or whatnot.  I also want to be able to plug those drives into any system and get data off them.  ZFS seems to now work on Linux and BSD now so I may consider that.

Take a look at the pics:

What a waste of political time.

We have massive problems in all countries and our leaders are concerned with all the internet hub dub.  Snooping bills and such.  I find it ironic that if any of these policies do get implemented that our security stance will actually get worse.  It will get worse because the same people whose freedoms will be taken away from by these bills will strike back and adapt.

I am not talking about some anonymous (“group”) attacks or some other random group or whatnot.  I am talking about the security community.  For snooping organizations right now one can assume that right now their job is somewhat easy compared to the future shitfest that is coming.  The individuals that have slaved over the Internet’s current operative code know how weak and not private it is.

Can you imagine what will happen when they are forced to change it?  It is already happening with privacy network/protocols being implemented by different coding.  From ip network improvement with cjdns and anonymity networks such as tor we have small examples of where the future of the internet is heading.  The public and business just have yet to really catch on.  It is how it works though.

Widespread encryption everywhere.  Encryption export laws null because as the global modernization of lower world societies begin to join the technology race so will they join the base of program creation.  The US and other first world are not the ‘leaders’ of the internet and the non tech minded need to get this through their heads.  This is not a bad thing but it should change the way that these political geniuses take a look at this massive system of connected networks.

It is uncontrollable.  The only sense of security that one will get by writing legislation controlling the internet is a false sense of security.  The giant beast can only be monitored and developed to be more secure.  Our future as an interconnected society depends on it.  I mean this because of evolution.  Not immediate evolution but the evolution of ourselves that we create through the control of our own fate.

As an American I believe in freedom and whatever sacrifices come with it.  How many people have died and sacrificed to be where we are today?  Why is it so easy to let these people destroy our free fate?  Fear.  Money.  Greed.  All enemies of freedom.  We need to remember our past and what happens when you herd a group of people together and tell them how to think and what to do.  They revolt.  It is how our country was started and it is built into the fibre of every American citizen.

I do not speak of anything short term.  Instead again I refer to the evolution of our future society.  At any point in time the future of America is changed by every decision our leaders make.  It is surprising that these figures are called to serve and fail to see past themselves.  Media and technology is enabling us to complain and we need more complainers.

Demand progress etc.  Stand up for your right to live by using these services.   Raise your children to be free.  Believe in changing our system of value and rule within the limits of our current control and you shall see how easy it is to get others on board with a plan.  The plan.

I am an individual in a group that can see a part of the plan because of the amount of my life that I have invested into technology.  Every socialite evolution has its technological ladders.  Inventions and things that fast forward and develop a race to an even greater perfection.  This group of individuals can see the future because they are a part of the future.  They write the same code that improves the present.  They have the ideas that other will latch onto and like.

Simple ideas like Facebook change the way an entire generation communicates.  This same technology also locks the generation into a guided communication box.  This is an example of technological guided human evolution.  We see this and I personally hold a great distaste towards it.  I see a group of people being sucked into this Facebook reality and drinking the Facebook koolaid.  I also see my group revolting by joining together and using technologies like Diaspora.  This is what we need.

We as the creators we need to band together and guide our non-technical brothers and sisters to a true shared freedom.  Knowledge is power and we have a responsibility to use it to improve the world around us.  If you are not improving the world around us with your knowledge you are as useless as a rock on the bottom of the ocean.  A non moving object that has little or no influence on the future of our human race.

I have a giant list of technological innovations that I have thought up over the years.  I am assuming a few other people have many of the same ideas as I have seen many of them implemented over my years consuming and reacting to internet content.

America has the society to do it.  We are a first world country and can easily acquire the basic necessities that others in other countries spend their entire lives perusing.  But instead of using this to our advantage we mimic the same pursuit that our disadvantaged friends do.  We pursue the basic necessities until we are the evil created by those things.  Fat from overeating, jaded by the over entertainment, and overworked by the pursuit of these same things and more.

I have asked myself many times what someone like Einstein would have been like if born in our current time period.  While, one can never know it has brought up many interesting thoughts.  Would he have been caught in the same web of crap that most of us are caught in?  Would his great theories have been uncovered if he was working at Mcdonalds?  If he was too busying watching some crap TV show?

What would have happened if he would have been guided towards a life of improvement and self decision in our current time period?  How much easier would it have been for him to release and communicate his information?  Would we have gotten more great information out of his mind?

Take these questions and compare them to the decisions that are being made about the future limitations that should be placed on our absorption of internet content and output of the same.  Sure during his time he had to rise above many censors and such.  They where different though.

We need to live up to our past and start moving the future in the right direction…

–WebDawg

I supposed it worked because I no longer have all the shit that was on my mind when I decided to forget it all.  I am not trying to figure out what direction to go with my many varied tech interests.  Where to start and focus my efforts is the greater question.

For about another week I can think about this as right now I am in the middle of moving.  After that I should have the space and the internet I need to get something rolling.

While complex technology does not bother me or any advanced user a lot of my time is spent reinventing the configuration and customization wheel.  It gets really tasking sometimes.  Setting things up over and over again.  Things should be easier and more modular.  Simple commands, etc.

I can do anything on a system.  Its all about the learning curve though.  I can think up incredible ideas and do.  I just have a lot of them.  I need to narrow down this list and put some energy into a project/idea/etc.  Something big.  Something soon.  This project has to be for more then just myself.  I have done enough of those to hone my own skills.  I have done enough of those period.

So many new ideas and projects are alive on the internet and across the world.  So much is happening and sites/process have sprung up to enable people and organizations to successfully create new things.

On that same note it is sad that the same forces that are supposed to protect innovation are enabling companies like Apple to corner the market and stem innovation.  Instead of companies competing to make the newest and best tech they now have the power to hold back and wait till they make more then enough money off their products.

To the laymen the toys that they purchase are magic and incredible to people like you and me we know that they are just proprietary limited junk and could be 1000% better.  We spend a majority of our lives getting this shit that they build and sell to do what we want.  They fight us at every corner and every bridge.

The only people that will help us is us.  This is why social media and communication technologies are so empowering.  Facebook is crap.  It is made for the laymen user and designed to employ their time and generate profit.  It is insecure and built to collect information for advertisement and profiling.

The ‘cloud’ is crap.  Something like:  “lets put all our important private data on super computers which can crack our shit encryption”.  Bleh.  Past the buzzwords and sales ‘engineers’ is the truth.

The truth is that it is our job to build and design simple technologies that are secure and reliable.  Simple to build and customize.  Simple to realize and change with adaptable code that can run on anything and do anything.  Linux and open source software is the key and those of us that use it know this.

So many programming languages.  So many hacks built into one OS.  The most adaptable OS on the planet.  What is stopping its propagation on every desktop?  The software built for Windows and Mac.  Adobe, Office, Etc.  Money and patents changing our bright future into a dim pile of non sense.

It is not that we are lazy, its is not that we are not trying hard.  It is the external forces that influence everything we do.  When we group together  and build our own custom external forces we give ourselves and everyone around us new self guided direction.
Web…

How does this happen?  Lack of oversight and standards?  Who knows.

I am posting about this because of the recent news that concerns how our processed foods are made and the things that are put in them.

One study talks about how how BPA dramatically shifts the metabolism of animals and such:  http://www.theatlantic.com/health/archive/2012/03/whats-really-making-us-fat/254087/2/?single_page=true

I recently read something along the lines of how nano particles in food erode the intestinal track.

You would expect the people that make this food and those that regulate it to step up and be on top of this stuff but since the manufacture of foods and such they have not been.

What really should we be eating?

This gets me thinking about patents and how fucking useless these companies are any more.  Apple suing for rounded corners and getting sued for the name iPad.  What a joke.  Technology should be and can be moving so fast that none of this should matter.  Bla…

If you do not know about hackerspaces and makerspaces yet get to one.  You are missing out.  With my schedule I never get to go as often as I want but really…I should be there more.

Make sure to take a look at my connection/vpn bonding on the wiki.  I am working on bonding multiple cell modems to get better speeds.  Makes me think about the future ‘free’ internet wireless network they are setting up.  It would be nice to try and hook 50 of the free modems together huh?

Obama was in the news about a privacy bill that would further our rights as citizens.  While I like the concept it seems that he should have been pushing this 3 years ago.  Why is this guy not moving quicker?

I am done wasting your time for now.

Web….

I have been using the internet and computers as long as I can remember.  I know what it is like starting out trying to use and create things on the internet.  HackSphereLabs can be and I want it to be for the user.  I want it to be for you.  I want to setup what you need to succeed.  Right now it has what I need to succeed.

If you have an idea and need resources let me know.  If you have an idea and need help let me know.  If you need to let me know everything about me sucks….let me know.

I have seen hundreds of failed collaborations, groups and projects.

I think that the average consumer does not mind this because they are too glad to have a new feature or whatnot. In reality though these features could have been around longer or been introduced earlier they where just being held back for monitory reasons.  The average user is average because the systems they use are built for average use. Even when a system can handle advanced customization or advanced use it is made difficult because manufactures and designers are afraid of a user breaking something, the user is lazy, and the user does not have the time.

If you think about the past when people did more hands on things you think about the level of customization they wanted to be able to do in a product. Things had to be built, like radios and TVs, and the act of building them made them yours. If you wanted to customize them you could because you had the time.

While technology is more advanced very little effort has been made to create a universal system of parts that can integrate. A modular build your own device or user interface type system. You have to be an electronics engineer or a software engineer to accomplish these things.

Companies making these decisions for us is convenient and allows us to move quickly and have a standard of knowledge to share but it removes human ingenuity from the equations. It is an evolution that easily creates wider gaps in knowledge classes.  We now put most of our time into using these devices then actually using time building something.

The makerspace and hackspace movements are creating new crowds dedicated to building and making something your own.  I hope that fast build components and strategies come out of these groups and start giving the decision power back to the person.

The script needed modded but that will come later.

Still its live.  Once again, if you which to join Hacksphere Labs please email me.

More Later,

Web…

I need to remain focused and gather myself internally.  Alot is happening around the world if you watch the news/read journals.  We are approaching an information war on every level.  From political threats to control knowledge and entertainment, to APT attacks on infrastructure.  Large security vendors should relize that full disclosure and patch is the only option.  Their is no excuse.

You cannot control the internet no matter how much you try for when you do it will no longer be the internet.  It will be something different.  It will be what the world used to be before knowledge was free and easy to access.  Baren of truth and light.

I understand why the U.S. wants to control the distrubution of media.  We create and profit off this stuff and alot of these guys who make this stuff have government in their pockets.  These people are too old to understand the future and do not have the ability to adapt to what is.  They want more of what was.  Why has no one asked why they have not put their DRM free media online for sale?  This is the question that we should be asking.  Not if we should modify our life styles to suite them.  I thought business was supposed to adapt to the people, not the people to it.

Do they not relize that this is their only option now?  The world is fucking different.  Adapt and survive.

We need better leaders everywhere.  Leaders who create a future for all that matters and is free and not just for their businesses and personal lives.  Wake Up.  We are all behind. I am not disrespecting the struggle of the past. More I am dedicating myself to the future and the past. Work hard as they did. We have so much simplicity in our lives now and it has created so much time for us. Instead of persuing entertainment in your spare time, persue something .constructive. We need to stop standing on the sholders of the dead and instead build new sholders.

The future is now if you can find it. Hackerspaces and Makerspaces alike are getting groups of intelligent people together and creating. Colleges like MIT are improving and building online education classes with some type of certification. We need to grip that which is not open with that which is and destroy it. Free for all. Not for just your neighbor but for anyone in the world. This is already happening everywhere, just not fast enough.

We need to focus on simplicity. Simplicity for the end user so anyone anywhere can pick X project up and use it. We need full physical end to end technological systems. Ones that support life anywhere. Ones that link you with humanity. Ones that instantly allow a group to catch up to the rest of the world no matter what level of development they may be at.

We need countries to change their rules and we need larger neutral zones in cultures.

Places and rituals that allow societies to mix and mingle.

We need to stick together and be smart enough to look past our differences.  We need to win.

http://wiki.hackspherelabs.com

A lot of the site still has yet to be done and I am working on it.

I still have many sections to get done

Fight Sopa! – http://wiki.hackspherelabs.com/index.php?title=SOPA_Act

Lets see if this works.

Satellite Essential Project track things in Africa, etc.  Track mass graves, troups, etc.  50 cm imagery.

Threat tracking, hactivists, anonymous.  APT threat.  Intrusion set developed by airforce.  China.  Tools, methods, and tactics to attack.  APT is an actual thing in the end brought about to allow classified people to talk about it.

Advanced:  Do what is necessary to get the job done.  Adjusts tactics based on targets posture.  Public exploits.  Work full spectrum of computer intrusion.

Persistent:  Patient and will not stop pursuing their goal.

Threat:  Not mindless piece of code.  Funded, motivated, multiple ‘groups’ and ‘crews’.

So many different targets:  Google, RSA, Intel, Morgan Stanlet, Lockheed, MS, Adobe, GE, Northrop, Goldman, Juniper.  China….attacking lots/all.  Involved with China??

APT Workday:  Email harvesting Activity @ 6am, after hours, always take lunch.  7 day work week.  Lot of management and people.

Spearphishing most used attack vector.  Crappy ones to good ones.  Gmail, Yahoo, etc, addys.  Monitoring emails allow for knowledge of abbreviations.  Updating contact list a big one.  Attacks on American progress.  Look at this, its a funny cat.

C2:

Lots of different malware.  2x malware, beacon transmits, http, dns.  DNS requests fire once an hour.

DNS, HTML Responds, Image Metadata.

Prevention eventually fails.  Actor trying to get posture.  Authorities will be of little help.

Get top down support.  Realistic expectations, everyone’s responsibility.  Mental preparation:  Be prepared for the worst day of your career.  Be source of calm and reason, never ending struggle, work through your worse case.

Study your opponent, Empathize, Defeat.

Detection, Response, Prevention.  Advanced Information Security == Counter-Intelligence.

Internal Threat Intelligence, classify your data, follow news, study the opponent, track their targets.  Not just organizations but also people.  Where are your users logging in to.

Understand the Kill Chain:  Research your target, weaponize,  deliver it, open(exploitation), Install something, c2(command and control), Extraction (Getting data out).  7 mins to respond.  (http://computer-forensics.sans.org/blog/2009/10/14/security-intelligence-attacking-the-kill-chain/)

Always more then one way to stop attack.  If thing that caught attack failed?  What would have happened?  Job never ends.

Log Management:  Log Rhythm, 1 Labs, RSA, ArchSight, loglogic, nitrosecurity.  3 periods of about 45 mins a day doing hardcore analytical work.  How many people to view these logs….human factor.

Big picture:  How many servers monitoring vs watching what they are doing.

Segmentation is critical:  Servers on one place users on another place, security policies that limits the space at which an attacker can move in an organization.  Segment groups.  Sonicwall, Juniper, Checkpoint, FW’s etc.

Scope the comprimise, find it all…need logging, report.

Admins have their own segmentation.  IT separate network.  These machines can bring the others back.

Egress Traffic Control – Log all traffic – paloalto, ironport, mcafee.  Log downloaded files, man in the middle ssl.  Servers do not need to talk to the internet.

Control naming and lookups:  Log DNS and responses….opendns makes this easy.  Blackhole DNS hostnames.  Only port 53 to your servers.

Update and Vulnerability Management – Applied less then 48hrs.  Bad guys go to patch to exploit within 72hrs.  Own a vulnerability management system:  Rapid 7, qualys, ncircle.  Catch machines not getting updates.

Bit9 – Endpoint monitoring and Enforcement – AV useless, bad guys test against it – banary packing has become a cottage industry.  Application whitelisting is the future.  Track new exes.

Fake posture, advanced honeypots, fake documents and networks.  They know when they are in a honeypot.

nlevay@americanprogress.org

Really likes whitelist.

Methods of fusion, magnets, lasers, Farnsworth.  NIF uses lasers and deuterium.  Lasers hit deuterium after reflecting off gold tube then create a field of xrays which then compact deuterium.

Magnet confinement fusion reactor:  ITER.  (Joke:  Eats funds, 16 billion dollars.)  Like a florescent light bulb to create plasma and use magnets to focus and control the stream of plasma.  Turn the tube into a doughnut and eliminate the inefficiency with the ends.  Magnets are made out of superconducting material.  Take 30-60 years to construct.

Takes forever even to get access to play with the unit and it costs so much that not many experiments are run.

Farnsworth reactor (IEC Fusion).  Use electrostatic field to control plasma.  Vacuum chamber with a spherical grid or electrode in the middle.  Ionize the chamber after injecting deuterium.  3 pathways deuterium + deuterium reaction can go.  Deuterium Proton Neutron + Electron (Hydrogen + Neutron).  The reaction creates helium 4 that does not want to stay together.  If it does it releases gamma ray.  Or releases gamma ray and becomes helium 3.  Or may release Tritium. (I think)

High Voltage:  10Kev to 120Kev.  More the current the better.  To get voltage:  Regulated lab supply, X-ray, neon, etc…

High Vacuum:  Get rid of other things in chamber.  Vacuum pump, Roughing pump, Diffusion pump, Turbo pump, Welch 14000, really small Edwards diffusion pump.

Nuclear Instrumentation:  Geiger Tube, Neutron Detection, Counter/Scaler, Bubble Detector, Activation.  To be safe and a way to measure neutrons (Boron Trifloried filled tube is detector).

Safe:  Leaded glass, xrays produced at 50,000 volts.

Pressurized Deuterium gas (problems getting it).  Pressurized research grade from a big company.  NRC (Nuclear Regulation)  Electrolysis unit.  LOTS of regulation on deuterium.  Expensive.  600$ (400$) shipping. (People make meth with it)

Heavy water:  Platinum electrodes, Electrolysis, salt water, split into deuterium and oxygen.  Regulator valve and filter to make deuterium gas.

Helium 3 cheaper to mine on moon then to make on earth.

Turns on Roughing pump, pumps chamber down in stages by opening different valves, turns on power supply to fuel system.  Turns on diffusion pump to heat up oil.  Neutrons slowed down by paraffin wax so detector can detect them.  Has uranium to calibrate counters.  To get Gamma vs Neutron peak.  Geiger counter to count radioactivity and wants to beat it with reactor.  Just under 8000 count after a min.  Vacuum good enough to generate plasma.  Increases voltage.  Pressure drops voltage must increase.  A few faint glows, as he is trying to get the reaction between 20 and 30 thousand volts.  Still a plasma discharge and not fusion.  Cosmic rays energetic wake up neutron detector.

Bursts of plasma, one faint purplish plasma glow.  Not required to have plasma in chamber to produce fusion.  People say glow less mode more efficient then with plasma.  More and more glows and neutrons as he tunes the device.  Eventually he gets a stable flowing reaction.

Star in a Jar.  Going from water to a star.  Next round of experiments may include computer tuning/etc.

fusor.net – Paul Schatzkin – native of nashville, creator of fusor.net

This reactor is actually far away from the first farnsworth reactor design.

The guy is focusing on programming because the problems are easy and quicker to solve.

More efficient with better fuel but better ways to make it more efficient.

The electrode in the center?  Different shapes of reactors work in different ways.  Different shapes of vacuum chambers:  Spheres, cylinders, etc.  Match geometry of grid to geometry of chamber.  70 percent in size the grid should be vs 100 percent of the chamber.

The tube type laser guys know how to get high voltage powersupplies which is the most expensive part of the fuser device.

BTW JohnnyX is the creator of PhreakNIC.

Personal story about Sept 11th and how someone was late for work and did not die.  Kryptos is a CIA sculpture that she could not get into the CIA complex and see.  FBI = Food and Beverage Industry to terrorists.  Started giving talk about stenography and eventually was able to get into CIA via undercover agent from CIA.  No emails at cia.gov and ended up getting email from ucia.gov!

Webpage about Kryptos.  She was able to get rubbings and see/get things that others did not.  Was able to meet creator of sculpture.  Now it is a major part of her life.  Made a list of famous unsolved codes(has large list on her site).

Cracking early crypto work from 1400′s (maby, could be just old paper) said to lead someone to treasure.  (Voynich)  Drawings different and part of the encryption?  Different plants.  Swimming ladies throughout the strip, water pouring in different places.  “Plumbers Nightmare.”  Passion flower.  Machine readable text converted to manuscript.

May be a complete fake designed to get money.  This ‘magic’ book is worth something to you rich emperor guy!  Buy it!  A castle from old Italy.

Hoax!  Cardan Grille.  Might be this, might be that.

Questions, Questions, Questions.

Copiale Cipher – 18th Century Manuscript – Cracked with software.  Reporters thinking it is the Voynich Manuscript.  Silly Reporters.

Back to Kryptos:

Made in 1990.  CIA wanted art for building.  Wanted to do sculptor that had encryption.  Two years to carve letters in by hand.  Letters are huge.  6 per letter size paper.  Part 4 is 97 characters.  FOIA NSA request about Kryptos.  Search for documents have been completed but you are in queue.  Much many reviews in process.  6 months, 5 months, final approval, more months, final approval stages.  Eventually she is supposed to get this information.

Jim Glogly solved some in 1999.  CIA David Stein.  The first three parts simple codes.  NWICX or NWICS google search for intel community.  Team in 2007, skype encryption, running on other stuff, and report regarding kryptos.

Started making list of everything that has been created by the Kryptos artist.  Russian language.  KGB classified document.  First sculpture with text lead to more text/crypto art.  Technically two crypto sculptures.  CIA and KGB…classified document is plaintext of KGB on other sculpture.  Another sculpture with russian classified document on it.  “Untitled”

Kryptos, Untitled…Vigenere Table, Palimpsest (old message showing through).

Other closely related works made by him.

Cyrillic Projector – The extra bolt…more puzzles.

Scheidt Hint:

He did things to mask the english in part 4.  Cannot be solved through weighting of english language.  Part 4 is in english and uses all of the letters.  NYPVTT == BERLIN.  Robert Mattson from SAIC tried cracking it.  Much many words can be generated.  Kryptos installed 1988-1990…Berlin Wall fell in 1989.

Many theories.

American Da Vinci Code has Kryptos stuff on it.  He should be selling a model.

Programmable HID Device and the Teensy combined.  Arduino Dev Package, Teensyduino and serial drivers, Teensy Loader, PHUKD Library.  Put Phuked folder in arduino-0022\libraries, set board type.

Teensy writing over code when you first plugin or while you are coding.  Hold button when you put it in so it will not overwrite, after you plug in let go.

<idea> Push links during presentation.  Powerpoint whatever.</idea>

Light sensitive using a photo resistor and a normal resistor.  Can run commands, poor man’s motion detector.

David Kennedy (Rel1K), Josh Kelley (Winfang), Robin Wood, Darren Kitchen, Brad Bowers, Monta Elkins, Richard Rushing.  Rubber Ducky, and powershell.

Hardware keyloggers, who uses them.  Wants to build his own keylogger.  Objectives:  SD Card, Payloads based on keystrokes, username/password, screw with person, hobby platform to add new functionality(WiFi, Bluetooth, Ethernet).

Keyboard hardware protocols/etc not reliable.

Teensy, PS/2 female Cable, SD Adapter, USB deal…..Irongeek libs, ps/2 libs, SDFat16 lib.

A few demos of his device.

The PICKit 2 programmer is faster and able to handle the USB logging.  Sure Electronics source, contact irongeek for string.  Conversion of words typed to other words.  Code is on the irongeek site.

Irongeeks site:  homemade-hardware-keylogger-phukd

Serial is faster then KB.

CREDITSEC – Next Generation Credit Card Security

I missed but the information to contact him: rtyagi2@jhu.edu – 443-813-7577 – tyagi.1986@gmail.com

His presentation was fast :/

Social networking and the fact that Google banned his account.  Definitions of identity etc.  Is identity what you think of yourself or what others think of you?  Identity as a virtual term or a term from the outside in.  Aspects of something generate an identity.  Giving something a label or identity changes who they are.

Generally people really have more then one identity and more then one identity type.  Fake names giving power to a group or a person.  A man that made up a name and generated an identity around it (Emperor Norton I).  Nicholas Bourbaki, Voltaire, Mark Twain.

Social networking repeating a mistake.  Correction not repeated…he cant control it, they do not care.  Fake persona generated in the modern day.  Valid or invalid if the information is true?  Identities created by just titles.  President, etc…you think they are important or not important.

Social networks are:  Leaders and followers.  Changing meaning of word friend.  Advertising preys on this.  Creating false identities that one can relate to.  Past 150 people it is hard to keep track of all your friends.  Noisebridge too hard to track and now everything is subgroups.  Same with the ‘man’ and the ‘system’, etc.

On-line identity and the factors that really identify it and create it.  How transparent really should an identity be?

Privacy promoting tech:  Tor, Selective Logging, Privacy and sharing settings on websites, remailers.  (http://mixmaster.sourceforge.net/).  Sockpuppets (http://en.wikipedia.org/wiki/Sockpuppet_%28Internet%29)

Throws some quotes up from facebook guy and 4chan creator.  Facebook guy (zucker) does not like privacy, 4chan understands the difference between freedom of expression online and how it calms things in real life.

A summary of social networks and the privacy settings in them work.  Facebook, Twitter, Blog platforms, Google Plus, Diaspora.

https://www.eff.org/pages/when-government-comes-knocking-who-has-your-back

Actually was sent a message by Google to confirm his id after he said that his name is his nick.  They then suspended his account again later.  Other users creating fake names that look real now.  Google is demanding sensitive information without policies and security.

Vic Gundotra Web 2.0 and Nick Names.  NO NICK NAMES.

Presenter went WAY over.

I need to find that data mining tool. (Maltego?)

The lighting talks where interesting and a good way for people to get to know the other people around them.  They where very informal but overall had some good information.  Someone commented about hosting and the crazy sites that people host and stories about them.  Imagine the stuff that they have to see on some of these crazy porn sites.  Some information about personal experiences at the Occupy protests and such. The whisper deal for android done by Moxy was also mentioned (http://www.whispersys.com), along with information about a way to improve the tor network (tor.noisebridge.net)

Hackers Guide To Pwning A Pedophile:

Reminded my about (http://www.tineye.com/) reverse image search.  The presenter is Ex CIA and runs a company that busts pedophiles.  He states that you do not want to entrap the people that you are trying to bust and also gives some pointers on how to handle evidence.  He recommends that you md5 sum the information and save these checks to a separate folder.  (This would be useless because this can be changed.  Video or some type or real world log may help too.)

He then goes about explaining some of the psychological aspects of a pedo.  After that he moved to wireless tapping and hacking into someone’s system to gather information.  A case is in TN right now.

He then goes into terms and abbreviations that pedos use.  I was interested to learn that they have symbols too.  The biggest group on-line is call Man Boy Love (Free Spirits) along with a list of many pedo groups.

Do not collect images!  Accident?  Contact the FBI Innocent Images Task force!  A Ringbusy number is a way to give someone a number to make to look real.  They are looking for:  people who want to travel to see kids, have images, etc.

Firefox:  Pedophile Report (Plugin/Software) – Go to someones facebook page and hit report!

www.internetpredatortracker.com

They want people to help and volunteer.  Join if you would like.  Daisy and John!

More to come.

http://files.hackspherelabs.com