Anonymous, People's Liberation Front Build Anonymous Data-Sharing Site
suraj.sun writes with these snippets from an article at Ars Technica: "Hacker group Anonymous and the People's Liberation Front have created a data-sharing site called AnonPaste.tk, meant to host pastes of code and other messages without any moderation or censorship of the information posted. The new site, which uses a free .tk web address, allows users to set a time for the paste to expire. It claims that data is encrypted and decrypted in the browser using 256 bit AES, so the server doesn't see any of the information included in the paste.The site says it's taking donations in the form of WePay or BitCoins. ... AnonPaste is built using open-source software called ZeroBin, created by French developer Sebastien Sauvage. According to Infoweek Sauvage has experience in creating online authentication systems for French banks, suggesting the creator knows a thing or two about encryption of data. Still, on the software's information page, Sauvage reminds potential users that ZeroBin software can not protect against potential Javascript attacks. 'Users still have to trust the server regarding the respect of their privacy,' he says. 'ZeroBin won't protect the users against malicious servers.'"
This site will get it's domain removed faster than I can post this comment. The .tk admins have a long history of blatantly removing anything that might cause trouble, are porn and/or hijacking domains that are popular. Great choice there, indeed.
I am NOT about to let you or your anonymous friends run JavaScript in my browser. No. That would compromise my security. The idea outlined in the summary sounds good, but the JavaScript-based implementation is bad. EPIC FAIL. Think of the Tor-users! They are not about to let their anonymity go by submitting to the evil JavaScript World Order.
9/11: Never forget it was a false-flag operation
...we already have lots of ways to do this. We can encrypt and post to Usenet. We can use extensions like FireGPG to encrypt on post to websites. So why use a system where we place all our trust in the service provider, which is both theoretically risky and has failed in the past:
http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/
Palm trees and 8
as DDoSing websites.
Trying another false-flag operation? Going for #Anti-Sec 2?
[End Of Line]
It claims that data is encrypted and decrypted in the browser using 256 bit AES, so the server doesn't see any of the information included in the paste.
And where does the key come from? If from the server, then the data is not encrypted at all.
Shacahr
Well, Anonymous is going to start their OWN pastebin! With hookers! And blackjack!
"liberty" and "libertarian" are separate concepts.
oh, I thought Palestinians did it!
the "People's Liberation Front", which no one has ever heard of till now, can be easily mistaken for the Popular Front for the Liberation of Palestine.
It claims that data is encrypted and decrypted in the browser using 256 bit AES, so the server doesn't see any of the information included in the paste.
And where does the key come from? If from the server, then the data is not encrypted at all.
Shacahr
http://beta.piratepad.net/front-page/
Actually I'd say piratepad is slightly better.
Sorry, the whole story doesn't make much sense. If anyone can access the pastebin, then anyone can see its contents, including the server, no matter how encrypted the data is stored on it. If not anyone can access the server then it's not a public pastebin, but an encrypted fileserver and whoever accesses it would need to password first.
The smart way is just to encrypt your data with PGP or AES and then upload it to piratepad.
This Anonpaste wont be useful unless you connect to it anonymously. What they are promising is they wont censor your shit if you post something tragic.
I suspect that it was because .tk is free... If they wanted to pay for a domain, then some Anonymous member would likely have to give up some personal details... (Disclaimer, haven't read TFA so what I said could be complete bull.)
But since they aren't giving us detailed technical specifications we "experts" cannot check it to determine what those problems might be. I'd like to discuss the technical specifications but I would think something like this would have to be set up with a special protocol and decentralized DNS. I would expect it to be on the darknet.
Trying another false-flag operation? Going for #Anti-Sec 2?
It's not that simple although I do see your point considering Sabu was their snitch. I doubt the FBI infiltrated the PLF though. PLF are far more skilled and very much professionals.
I'll say it again, anyone who actually has a need to use encryption of this sort properly would need specialized skills to begin with. The PLF is not going to provide any sort of training. So basically if you have a need to use this then you already know how to become Anonymous on the internet. If you don't then you shouldn't be using something like this in the first place.
And no I don't think it's about the FBI because there are intelligence agencies all around the world other than the FBI who wont like this either. It's all the global government agencies that will hate this in general. It's global government agencies vs Anonymous.
According to what Pastebin says about Anonpaste just using Anonpaste could mean you have something to hide and if you have something to hide it means you need to be investigated.
Although Anonymous has used the news of AnonPaste to taunt Pastebin, Vader isn't worried about the popularity of his own site. He does see problems with the general idea of the new paste site though. "Having this new anonymous paste service online will most likely mean that less 'sensitive information' is posted on Pastebin.com, which we like," Vader told Ars, "But we think this new totally anonymous Paste site will be used mainly by people who have something to hide, people who are posting things that really shouldn't be posted. We see no benefit for normal legitimate users to use it over the currently existing paste websites. We are afraid that this site will be bombarded with people's personal information, credit-card details, and things such as child pornography."
If you use Anonpaste then the governments will claim you're a credit card thief, a child pornography, or a terrorist, because why else would you want to use something like Anonpaste?
My advice is don't post on Anonpaste. Read Anonpaste but don't post a damn thing. If someone really knows what they are doing they probably don't need Anonpaste but if they somehow did then they weighed the risks already.
Would that be the Peoples Liberation front of Judea or the Judean Peoples Liberation Front?
Only in the US has the word "libertarian" been co-opted by the free-market uber alles, Ayn Rand worshiping, "I've got mine so fuck you!" crowd.
In the rest of the world, the word "libertarianism" is quite similar in meaning to "anarchism". In fact, many anarchists (including Noam Chomsky) use the term "libertarian socialism" to describe their philosophy, as the term "anarchism" has been tainted with connotations of rioting, looting, burning police cars, and punk-rock wannabees.
Remember "News for Nerds, Stuff that Matters"? Help make it a reality again! http://soylentnews.org
where does the decrypting code come from?
lets assume an attacker has the server under his control. he will not only be able to modify the scripts to send the content of the decrypted paste back, he can even send the entered password to the server.
so its still more insecure than crypting off-browser and pasting it then. But better an encryption, which is secure most the time, than no attempt at all. You can just not guarantee, it will be encrypted or safe. So do not use it, if you know better. But encourage people who have the options to use it or do not encrypt at all, to use it.
I thought most of anonymous was in prison after that last big bust a month or two ago. Didn't even know they were still operating.
... the Judean People's Front?
Can someone please tell me what's supposed to be so politically edgy about creating yet another disordered, unregulated system?
That kind of jumbling and lack of accountability is pretty much the problem with our political system, and yet Anonymous sells it as subversive and avant-garde. It's not.
Then when you ask Anonymous what it thinks it's trying to accomplish, rather than sending you a sheaf of redacted government memos they just tell you, "There is no such thing as Anonymous." If life were a party, Anonymous would be the geeky attention-seeking teen off in the corner snorting handfuls of GHB.
It'd be nice if groups "there's no such thing as" didn't make headlines so often. I can't take them seriously.
The Wolfpack Project: BitCoin + Crowdfunding = Political Accountability
Go see "Life of Brian."
SPLITTER!
Make sure you don't put the URL that matter in the article!
That could be thousand of ads prints for missed !
The link is http://www.anonpaste.tk/
Is it the Judean People's Liberation Front, or the People's Liberation Front of Judea?
Woao. My name on the front page of Slashdot. Now I can die. :-D
If you don't trust AnonPaste, you can just install ZeroBin (the opensource software AnonPaste is based on) on your own website.
Oh yeah....and presently Thomas Bodstrom and family are living a short drive from the CIA's HQ in Northern Virginia, USA.
Sounds great.
Now, how can I be sure that the Javascript executing in my browser, a:. isn't malicious, and b:, hasn't been intercepted and changed by someone in the middle?
Get your own free personal location tracker
Congratulation Sebastien for finally making it on Slashdot !! Ca ne te fait pas l'effet d'un gateau d'anniversaire ? Au plaisir de continuer à te lire via shaarli ;0)
I knew that this was a false flag operation as soon as I saw Anonymous was teaming up with the People's Liberation Front, and not the Liberation Front of the People. Splitters!
You are not alone. This is not normal. None of this is normal.