General June 2014

general@lists.hackerspace.pl

41 participants
31 discussions

Fwd: Geeklist #hack4good 0.6 is coming! Ambassador sign up open!
by rysiek 17 Jun '14

17 Jun '14

Taka sytuacja. ---------- Treść przekazywanej wiadomości ---------- Temat: Geeklist #hack4good 0.6 is coming! Ambassador sign up open! Data: poniedziałek, 9 czerwca 2014, 10:01:46 Od: Dan Cunningham Hello Geeklist Ambassadors! I’m very excited to announce that the next Geeklist #hack4good will take place worldwide this 12-14 September. Based on a lot of your feedback, this time - for the first time - we have a strong theme. We are uniting worldwide to address one of the greatest challenges facing humanity today, an issue that affects every single country, one that underpins many of our other challenges globally, and critically - one that we must unite together to solve on a global scale. #hack4good 0.6 is a hack against climate change Humans are the primary cause of climate change, and right now we are continuing to increase our fossil fuel emissions (in fact at an increasing rate). We continue to cut down forests. We continue to build coal power plants. And we continue to consume more and more resources. This is leading us directly towards increasingly unthinkable and unmanageable scenarios - disastrous impacts on human health, livelihoods, agriculture, ecosystems, population displacement and loss of human and animal life. Another future is possible. We believe technology holds the key to rapid reversal in these trends: to educating people, to creating political will, to maximising the impact of existing movements, to stimulating the transition to a low-carbon economy, to getting organised and to really solving this problem! Technology also has a huge role to play in adapting to the effects that we are already seeing worldwide - the heat waves, droughts, wildfires, flooding, increased extreme weather events which I know many of us have already been affected by. It’s in our hands to build solutions that create stronger communities and to help deal with these emergencies as well. The time to act is now. September 2014 is a critical time for the climate, with world leaders gathering in New York at Ban Ki-Moon’s UN Climate Summit. This must set the world on a path to a strong international agreement and commitment to decisively move to a low-carbon future. From over 500 teams that will take part in #hackgood 0.6, we’ll be showcasing those teams and projects that have the greatest potential for impact - in New York - putting technology firmly at the forefront of a united human response to what may be the greatest single challenge of the 21st century. I hope you and your city can be part of it. If you haven’t already, sign up by next Friday, 20th June, to organise a #hack4good against climate change in your city at http://hack4good.io Thanks! - Dan *P.S. Please forward this email on to anyone else you think would be interested to get involved with organising the event around the world!* *P.P.S. Email or Skype me if you have any questions (my Skype name is djcunning)* -- *Dan Cunningham* *Head of Geeklist Corps of Developers* | +44 (0)7964 404 897 | skype: djcunning | dan(a)geekli.st | https://geekli.st/dancunningham ----------------------------------------- -- Pozdr rysiek

1 0

IRS "zgubiło" maile, kongres prosi NSA o ich odnalezienie
by rysiek 16 Jun '14

16 Jun '14

Hej, Full story below, tl;dr jest następujący: trwa dochodzenie w sprawie jakichś przekrętów w IRS w Stanach. Na żądanie Kongresu dotyczące udostępnienia maili z pewnego okresu, po roku ociągania się, IRS odpowiedziało, że nieszczęśliwie akurat te maile szlag trafił przy jakimś padzie systemu, taki pech. Well, kongresmen będący członkiem komisji, która prowadzi to dochodzenie poprosił właśnie... NSA o pomoc w odzyskaniu przynajmniej metadanych tych "zaginionych" e-maili. Będzie śmiesznie! - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://news.yahoo.com/lawmakers-fume-over-lost-emails-irs-probe-080830845--… WASHINGTON (AP) — Congressional investigators are fuming over revelations that the Internal Revenue Service has lost a trove of emails to and from a central figure in the agency's tea party controversy. The IRS said Lois Lerner's computer crashed in 2011, wiping out an untold number of emails that were being sought by congressional investigators. The investigators want to see all of Lerner's emails from 2009 to 2013 as part of their probe into the way agents handled applications for tax-exempt status by tea party and other conservative groups. Lerner headed the IRS division that processes applications for tax-exempt status. The IRS acknowledged last year that agents had improperly scrutinized applications by some conservative groups. "Do they really expect the American people to believe that, after having withheld these emails for a year, they're just now realizing the most critical time period is missing?" said Rep. Darrell Issa, R-Calif., chairman of the House Oversight Committee. "If there wasn't nefarious conduct that went much higher than Lois Lerner in the IRS targeting scandal, why are they playing these games?" The Oversight Committee is one of three congressional committees investigating the IRS over its handling of tea party applications from 2010 to 2012. The Justice Department and the IRS inspector general are also investigating. Congressional investigators have shown that IRS officials in Washington were closely involved in the handling of tea party applications, many of which languished for more than a year without action. But so far, they have not publicly produced evidence that anyone outside the agency directed the targeting or even knew about it. If anyone in the Obama administration outside the agency was involved, investigators were hoping for clues in Lerner's emails. "The fact that I am just learning about this, over a year into the investigation, is completely unacceptable and now calls into question the credibility of the IRS' response to congressional inquiries," said Rep. Dave Camp, R-Mich., chairman of the House Ways and Means Committee. "There needs to be an immediate investigation and forensic audit by Department of Justice as well as the inspector general." The IRS said technicians went to great lengths trying to recover data from Lerner's computer in 2011. In emails provided by the IRS, technicians said they sent the computer to a forensic lab run by the agency's criminal investigations unit. But to no avail. The IRS was able to generate 24,000 Lerner emails from the 2009 to 2011 because Lerner had copied in other IRS employees. The agency said it pieced together the emails from the computers of 82 other IRS employees. But an untold number are gone. Camp's office said the missing emails are mainly ones to and from people outside the IRS, "such as the White House, Treasury, Department of Justice, FEC, or Democrat offices." Anti-tax advocate Grover Norquist called the episode "the worst attempt to blame technology in service of a cover-up since the infamous 18-minute gap" in former President Richard Nixon's Watergate tapes. The IRS said in a statement that more than 250 IRS employees have been working to assist congressional investigations, spending nearly $10 million to produce more than 750,000 documents. Overall, the IRS said it is producing a total of 67,000 emails to and from Lerner, covering the period from 2009 to 2013. "The IRS is committed to working with Congress," the IRS said in a statement. "The IRS has remained focused on being thorough and responding as quickly as possible to the wide-ranging requests from Congress while taking steps to protect underlying taxpayer information." Sen. Orrin Hatch of Utah, the top Republican on the Senate Finance Committee, called Friday's disclosure "an outrageous impediment" to the committee's investigation. "Even more egregious is the fact we are learning about this a full year after our initial request to provide the committee with any and all documents relating to our investigation," Hatch said. Lerner has emerged as a key figure in the tea party probe. In May 2013, she was the first IRS official to publicly acknowledge that agents had improperly scrutinized applications. About two weeks later, Lerner was subpoenaed to testify at a congressional hearing. But after making a brief statement in which she said she had done nothing wrong, Lerner refused to answer questions, invoking her constitutional right against self-incrimination. The IRS placed Lerner on administrative leave shortly after the congressional hearing. She retired last fall. In May, the House voted to hold Lerner in contempt of Congress. Her case has been turned over to the U.S. attorney for the District of Columbia. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - GOVERNMENT The Clever Way GOP Congressman Is Pushing Back After IRS Claims Lois Lerner Emails Were ‘Erased by a Glitch’ Jun. 13, 2014 5:56pm Jason Howerton Rep. Steve Stockman (R-Texas) asked the National Security Agency on Friday to turn over all the metadata it has collected on the email accounts of former IRS official Lois Lerner from January 2009 to April 2011. Stockman’s clever move comes hours after the tax agency apparently claimed it had lost Lerner’s emails from that same time period due to a computer glitch. “I have asked NSA Director Rogers to send me all metadata his agency has collected on Lois Lerner’s email accounts for the period which the House sought records,” Stockmansaid in a press release. “The metadata will establish who Lerner contacted and when, which helps investigators determine the extent of illegal activity by the IRS.” “The claim incriminating communications were erased by a glitch conjures memories of Rose Mary Woods,” the congressman added. “Barack Obama has brought us Jimmy Carter’s economy and Richard Nixon’s excuses.” Congress requested all emails sent from Lerner to and from other IRS employees from early 2009 to April 2011. After promising to turn them over, the IRS said Friday it can’t find any of those emails. Stockman isn’t the only member of Congress who isn’t buying the excuse. Rep. Darrell Issa (R-Calif.) asked, “If there wasn’t nefarious conduct that went much higher than Lois Lerner in the IRS targeting scandal, why are they playing these games?” TheBlaze has reached out to Frederick R. Chang, a recognized national expert in cyber security and SMU professor, to see if there are ways the emails “lost” due to a glitch or crash could be recovered. We will update this story should he respond. Read Stockman’s letter to NSA Director Admiral Michael Rodgers below: June 13, 2014 Admiral Michael S. Rogers >Director, National Security Agency >Fort Meade, MD 20755 >Admiral Rogers: >First, thank you for your 33 years of, and continued service to, our country. >Second, as you probably read, the Internal Revenue Service informed the House Ways and Means Committee today they claim to “lost” all emails from former Exempt Organizations division director Lois Lerner for the period between January 2009 and April 2011. >According to chairman Camp, “The IRS claims it cannot produce emails written only to or from Lerner and outside agencies or groups, such as the White House, Treasury, Department of Justice, FEC, or Democrat offices” due to a “computer glitch.” >I am writing to request the Agency produce all metadata it has collected on all of Ms. Lerner’s email accounts for the period between January 2009 and April 2011. >The data may be transmitted to our Communications Director at Donny(a)mail.house.gov. >Your prompt cooperation in this matter will be greatly appreciated and will help establish how IRS and other personnel violated rights protected by the First Amendment. >Warmest wishes, >STEVE STOCKMAN >Member of Congress - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://www.zerohedge.com/news/2014-06-14/congressman-asks-nsa-restore-two-y… Congressman Asks NSA To Restore Two Years Of "Lost" Lois Lerner IRS Emails Submitted by Tyler Durden on 06/14/2014 21:47 -0400 Yesterday, the republican campaign to get to the bottom of IRS' targeting of conservative groups was dealt an absolutely idiotic blow when the IRS, in all seriousness, announced that it had lost two years worth of emails to and from the chief subject of the investigation: former agency official Lois Lerner. As House Ways and Means Commitee chairman Dave Camp said, "The fact that I am just learning about this, over a year into the investigation, is completely unacceptable and now calls into question the credibility of the IRS’s response to congressional inquiries,” he said in a statement. "There needs to be an immediate investigation and forensic audit by Department of Justice as well as the Inspector General." According to NRO, the agency informed Camp that a computer crash resulted in the loss of e-mails between January 2009 and April 2011 sent between Lerner and outside agencies such as the White House and the Department of Justice. "Those messages are particularly relevant given revelations earlier this week that the agency in 2010 transmitted a database to the FBI containing confidential taxpayer information, potentially in violation of federal law." The IRS said in a separate statement that it has or will produce 24,000 e- mails from the period between 2009 and 2011 using the files of 82 individuals with whom Lerner corresponded, and that it has produced nearly all of the 67,000 e-mails sent and received by Lerner during her time at the agency. Apparently lack of document (and email) retention is a crime for everyone, but not for the IRS. And furthermore, only when it comes to the IRS, can a single computer crash destroy the entire email path history, even as it crosses through countless servers across the world, and ultimately lands in somebody else's inbox. It goes without saying that for the IRS to even assume someone would believe this particular, and quite spectacular, lie is beyond insulting to even the most gullible idiot among the US population. So we won't say it. What, however, was simply a bizarre, if idiotic, lie has just been taken to a whole new level of ridiculousness, when moments ago, representative Steve Stockman (R-Texas) announced he would request that the National Security Agency help in the hunt for missing emails to and from the IRS’s Lois Lerner, and recover two years worth of "lost" emails. From the Hill: In a letter to NSA Director Michael Rogers on Friday, Stockman requested that the NSA turn over information it has about emails between Lerner and outside groups between January 2009 and April 2011. > >Stockman’s request for the NSA’s “metadata” on the emails comes as congressional Republicans probe whether the IRS mishandled applications for tax-exempt status from Tea Party and conservative groups. > >In a statement, Stockman said the NSA’s information “will establish who Lerner contacted and when, which helps investigators determine the extent of illegal activity by the IRS.” > >“Your prompt cooperation in this matter will be greatly appreciated and will help establish how IRS and other personnel violated rights protected by the First Amendment,” Rogers wrote. Turns out all those jokes about people calling the NSA and asking for backups of lost emails and of course files (because remember, courtesy of complicit megacorporations, the NSA has full backdoor access to everything anyone does) - they weren't jokes at all. And now the NSA is caught between a rock and a hard place: because if it refuses an officialcongressional demand, it shows once again that the spy agency is entirely separated from any concept of checks and balances and accountability; if it complies, it confirms that all the NSA is, considering it can't even tap into a bunch of Al Qaeda phones and figure out what the jihadists' strategy is in Iraq, is just a massive data repository of all US electronic information, to be abused at will by corrupt, criminal government workers, some of whom will likely have to resort to the "dog ate my emails" excuse in the immediate future. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- Pozdr rysiek

1 0

Hakerzy, źli niedobrzy, psują, kradną, gwałcą... Watch_Dogs
by Wiktor Przybylski 16 Jun '14

16 Jun '14

Atakowaliśmy już MON i parę portali internetowych. Może uderzymy w Ubisoft, hm? W patrz_psach (Watch_Dogs) ilość bredni na sekundę przekracza magiczne 9000, pomijając medialną otoczkę wokół gry która jest budowana na słowie haker istnieje drzewko umiejętności z gałęzią przetłumaczoną z angielskiego "hacking" na "hakowanie", w którym znajdują się rzeczy typu "przeciążaj systemy budynków powodując wybuchy", w zestawie narzędzi hakera jest "kilka exploitów do hakowania, które ułatwią ci walkę", hakowanie bankomatów, zakłócanie komunikacji i tym podobne gówno. Można zgnoić ich za beznadziejne tłumaczenie na polski albo rzucić temat hsom na świecie, może się zrobić ciekawy dym. Co sądzicie? -- Pozdrawiam. Wiktor Przybylski

8 11

Fwd: Re: Encryption Works - Off Topic
by rysiek 12 Jun '14

12 Jun '14

Ważny głos w dyskusji. ---------- Treść przekazywanej wiadomości ---------- Temat: Re: Encryption Works - Off Topic Data: środa, 11 czerwca 2014, 15:40:12 Od: coderman Do: cpunks <cypherpunks(a)cpunks.org> On Tue, Jun 10, 2014 at 9:15 PM, Mark Thomas <mark00thomas(a)me.com> wrote: > I sent this email to John since he is the only one who answered the question > I asked about your statement. > > Do you care to respond? i'm not sure what you expect me to say. Encryption Works - usually against the interests of its users! as we have seen from the current leaks and past history, encryption tells you where the interesting data and networks are, and also where not to bother attacking. encryption provides cover for backdoors and side channels you don't know are there. encryption with broken keys provides false confidence leading to greater losses. encryption with poor usability fails catastrophically, undoing the privacy of all prior exchanges in a single fatal swoop. encryption's specialized nature leads to centralized authorities and experts easily compromised unwittingly, or wittingly. (or both at once!) you see where this is going... is it useless? i think not. (blanket, passive surveillance always worthwhile to thwart) but it's no where near sufficient as a privacy enhancing technology itself. ----------------------------------------- -- Pozdr rysiek

4 6

Fwd: [HS WAW Off Topic] google zaszyfruje?
by rysiek 06 Jun '14

06 Jun '14

Hej, przerzucam tu, bo temat istotny ogólnie, nie tylko we stolycy. ---------- Treść przekazywanej wiadomości ---------- Temat: [HS WAW Off Topic] google zaszyfruje? Data: wtorek, 3 czerwca 2014, 23:41:03 Od: Maciej Sawicki <viroos.pl(a)gmail.com> Do: Off Topic (nie) związany z Warszawskim Hackerspacem. <waw- ot(a)lists.hackerspace.pl> Może temat na kolejne crypto party? http://googleonlinesecurity.blogspot.com/2014/06/making-end-to-end-encrypti… -- pozdrawiam, Maciek Sawicki ----------------------------------------- -- Pozdr rysiek

4 5

hackathon - kontroler do PS3 dla osoby niepełnosprawnej
by Maciej Sawicki 06 Jun '14

06 Jun '14

Hej, Jakiś czas temu zwrócił się do nas (do HS WAW, za pośrednictwem rysia) kolega z uszkodzonym rdzeniem kręgowym ( http://en.wikipedia.org/wiki/Tetraplegia) z zapytaniem czy bylibyśmy w stanie zrobić specjalnie dostosowany kontroler do PS3. Trzy osoby (Ja, emeryth, spin) obiecały pomóc. Jakieś konkretne rozmowy/ustalenia odbyły się w lutym. W pewnym sensie byliśmy fair bo ostrzegaliśmy, że robimy to po godzinach i że to może potrwać mega długo, ale nie sądziłem, że aż tak... Jest mi z tego powodu bardzo źle i chciałbym tą sprawę jednak doprowadzić do końca. Niestety są pewne przeciwności losu. Po pierwsze - zaczynam nową pracę, która zapowiada się jako dość angażującą poza tym jest związaną z częstymi wyjazdami służbowymi (i to dość długimi). Po drugie spin powiedział mi w ostatnią środę, że definitywnie nie może zająć się tym projektem. Dobra wiadomość jest taka, że emeryth ma zapał, kompetencje, czas, żeby to pociągnąć. Jednak potrzebuje trochę pomocy ze zrobieniem prototypów. Koncepcyjnie wiele rzeczy jest rozrysowanych/przemyślanych. emeryth w dużym stopniu ogarnął elektronikę (bazując na jakimś open sourcowym projekcie). Brakuje elementów mechanicznych i złożenia tego do kupy. Proponujemy zrobienie hackathonu w wyniku którego powstanie pierwszy prototyp. Emeryth zaproponował termin sobotę 14. Emryth pokieruje imprezą i obiecuje, że znajdzie zajęcie dla każdego. Bardzo serdecznie zapraszamy :) -- pozdrawiam, Maciek Sawicki

4 3

0day na rozruszniki serca
by TeMPOraL 06 Jun '14

06 Jun '14

Bo wszyscy wiedzieliśmy, że ten dzień kiedyś nadejdzie. http://blog.erratasec.com/2014/05/can-i-drop-pacemaker-0day.html + https://news.ycombinator.com/item?id=7849453 Jacek Złydach, http://temporal.pr0.pl/devblog | http://esejepg.pl | http://hackerspace-krk.pl TRC - Bringing you tomorrow's solutions yesterday.

5 4

"a skilled backdoor-writer can defeat skilled auditors"?
by rysiek 04 Jun '14

04 Jun '14

Hej, w linku, który rzuciłem w wątku o Google End-to-End, jest ciekawy fragment na nieco inny temat: https://blog.spideroak.com/20140220090004-responsibly-bringing-new-cryptogr… - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - In short several very skilled security auditors examined a small Python program — about 100 lines of code — into which three bugs had been inserted by the authors. There was an “easy,” “medium,” and “hard” backdoor. There were three or four teams of auditors. 1. One auditor found the “easy” and the “medium” ones in about 70 minutes, and then spent the rest of the day failing to find any other bugs. 2. One team of two auditors found the “easy” bug in about five hours, and spent the rest of the day failing to find any other bugs. 3. One auditor found the “easy” bug in about four hours, and then stopped. 4. One auditor either found no bugs or else was on a team with the third auditor — the report is unclear. See Chapter 7 of Yee’s report for these details. I should emphasize that that I personally consider these people to be extremely skilled. One possible conclusion that could be drawn from this experience is that a skilled backdoor-writer can defeat skilled auditors. This hypothesis holds that only accidental bugs can be reliably detected by auditors, not deliberately hidden bugs. Anyway, as far as I understand the bugs you folks left in were accidental bugs that you then deliberately didn’t-fix, rather than bugs that you intentionally made hard-to-spot. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Discuss. -- Pozdr rysiek

5 6

Nabór do Rady Informatyzacji
by rysiek 03 Jun '14

03 Jun '14

Cześć, taka sytuacja: https://m.mac.gov.pl/aktualnosci/ruszyl-nabor-do-rady-do-spraw-cyfryzacji-w… "Ruszył nabór do Rady do Spraw Cyfryzacji – wielostronnego forum współpracy między interesariuszami cyfryzacji w Polsce" "Zgodnie z ustawą członków Rady mogą rekomendować: (...) stowarzyszenia których celem statutowym jest reprezentowanie środowiska informatycznego lub wspieranie zastosowań informatyki, gospodarki elektronicznej, komunikacji lub mediów." Może by kogoś wystawić? :D -- Pozdr rysiek

7 14

Hackerspejsów ? Hackerspace'ów ?
by Wiktor Przybylski 02 Jun '14

02 Jun '14

Cześć. Jestem w trakcie obrabiania pewnego tekstu dotyczącego HSu, i występuje tam od groma przypadków gdzie angielskie skądinąd słowo Hackerspace należy odmienić przez przypadki. Nie byłoby w tym nic trudnego, wszak skoro "Hackerspace" kończy się literą 'e', która w odmianie nie jest wymawiana, należy użyć apostrofu [1]. Jednak ostatnio gdy pisaliśmy list do ministerstwa, wówczas wywiązała się między mną a ryśkiem mała dyskusja na temat tego, że w sumie to pasowałoby jakoś to spolszczać, przez pisanie tak, jak się czyta - space -> spejs. Tak jak angielski computer stał się komputerem, a hacker hakerem. Skończyło się na tym, że uciąłem to stwierdzeniem, że "W piśmie do ministra nie bawiłbym się w neologizmy". Zastanawiam się której formy jednak wybrać. Fajnej, czy poprawnej. Fajnie byłoby też poznać wasze zdanie na ten temat. Do jakiej formy warto byłoby to ujednolicić (wszak jesteśmy jedynymi polskimi HSami [pomijając hsy których nie ma na liście general], do nas to należy i do osób które o nas piszą. *wink*) i używać aż wsiąknie. No i jak zwykle... ... Let the shitstorm begin. --- [1] http://poradnia.pwn.pl/lista.php?id=14480 -- Pozdrawiam. Wiktor Przybylski

13 44

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

General June 2014