Delivery-Date: Sat, 06 Dec 2014 22:21:43 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.8 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RP_MATCHES_RCVD,URIBL_BLOCKED autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 09E491E04E1;
	Sat,  6 Dec 2014 22:21:40 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 40F2431D7D;
	Sun,  7 Dec 2014 03:21:35 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id EA1BF31D7B
 for <tor-talk@lists.torproject.org>; Sun,  7 Dec 2014 03:21:31 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id VH3KNQO1NGx6 for <tor-talk@lists.torproject.org>;
 Sun,  7 Dec 2014 03:21:31 +0000 (UTC)
Received: from orcus.persephoneslair.org (orcus.persephoneslair.org
 [IPv6:2605:2700:0:17::4713:9bba])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "mail.persephoneslair.org",
 Issuer "persephoneslair.org CA (RSA-4096)" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id B7CD9319DD
 for <tor-talk@lists.torproject.org>; Sun,  7 Dec 2014 03:21:31 +0000 (UTC)
Received: from dysnomia.persephoneslair.org (77-64-253-37.dynamic.primacom.net
 [77.64.253.37])
 by orcus.persephoneslair.org (8.14.7/8.14.7) with ESMTP id sB73LPMg024755
 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK)
 for <tor-talk@lists.torproject.org>; Sat, 6 Dec 2014 19:21:27 -0800
Received: (from andrea@localhost)
 by dysnomia.persephoneslair.org (8.14.7/8.14.7/Submit) id sB73L6vh006062
 for tor-talk@lists.torproject.org; Sun, 7 Dec 2014 03:21:06 GMT
Date: Sun, 7 Dec 2014 03:21:06 +0000
From: Andrea Shepard <andrea@torproject.org>
To: tor-talk@lists.torproject.org
Message-ID: <20141207032106.GE9039@dysnomia.persephoneslair.org>
References: <20141206162254.89023v62cgi1ggqo@vfemail.net>
MIME-Version: 1.0
In-Reply-To: <20141206162254.89023v62cgi1ggqo@vfemail.net>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [tor-talk] NSA TAO Exploit of Whonix Qubes - EGOTISTICALSHALLOT
 - Martin Peck
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============9164351565045142751=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>


--===============9164351565045142751==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="KlAEzMkarCnErv5Q"
Content-Disposition: inline


--KlAEzMkarCnErv5Q
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Dec 06, 2014 at 04:22:54PM -0600, EGOTISTICALSHALLOT wrote:
> Tor community, Martin Peck, Diane Roark..
>=20
> Whonix Qubes has been called out in a US Gov court document of a NSA
> related whistleblower case of Diane Roark, inside a recent affidavit
> of Martin Peck's.
>=20
> http://cryptome.org/2014/12/peck-roark-affidavit.pdf
>=20
> Quote:
>=20
> "EGOTISTICALSHALLOT was created in 2014 by Tailored Access
> Operations as a QUANTUMTHEORY Computer Network Exploitation
> component effective against hardened Whoonix Qubes users on the Tor
> Network."
>=20
> Extensive details of this instance have been documented here..
>=20
> https://www.whonix.org/forum/index.php/topic,805.0.html
>=20
> Would Martin Peck or Diane Roark please promptly inform the
> community of the known origins of this NSA EGOTISTICALSHALLOT text
> written in their documents, and any knowledge of its authenticity as
> being real or fake.
>=20
> And if anyone else has any additional information regarding this
> EGOTISTICALSHALLOT mention-/-codename-/-program then please
> contribute.

Um, it appears under the heading 'fictional input document' in an
affidavit discussing automatic redaction.

--=20
Andrea Shepard
<andrea@torproject.org>
PGP fingerprint (ECC): BDF5 F867 8A52 4E4A BECF  DE79 A4FF BC34 F01D D536
PGP fingerprint (RSA): 3611 95A4 0740 ED1B 7EA5  DF7E 4191 13D9 D0CF BDA5

--KlAEzMkarCnErv5Q
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.20-ecc (GNU/Linux)

iQIcBAEBCgAGBQJUg8ehAAoJEIC/SYIYoeYbib0P/0ZyDh/niZXNGWNs7huuqqaU
LDbeZBM6dYoG04TALt2m2d4eh+/XR59jSctzK+qxMO499sbbEmd6XgvLvOSRUUz6
IudMi2Y9FG/r76ZxSGMdvzpkHLSYOxgSRrG7CS/GnmtgmNmIiA6VKSXF5T96SS+4
Q6Ly+rDTV1Z5zF+NqxK06vgT3av16n/wCNzrfB++E6+j31n23M7yJSOCU80Zbswx
ktyK0Ao9oOsPNER8nIFrj0XA/Qf+sAsa1OLn6l3+9aoa7zGwgcGNntmOMwgTBt89
upYxg0iRsPftxfRbSpxwfJ3C2clb9c8YUq/YTw7FS60Wmq7SogCedgBp5oR8WCrj
47akK5eJ5o5dmcQ17nkZz1/WfvmEFZXzaEcUL9X3ie/xVy3JXjy/uxdK19v7zAoN
dbH9pHI36TCvgAd5GKDCBWIV+xiTS4yMonVfKiNj6LWbcHZzYCgikbmDc6/Xy7P7
zqTi2KAlZhrnA4X1EvTM8LafKATmhwrZNc/ZrH9lCQbZvb4K6OgKqIFXG2bdylOq
Fjk/M/cj9TiZc+Uqsz0H5CzbvaScHMAz8Mx4QFQS0sUeYz3oK6Z/nJ1LewVVRIts
gkihGWsvF0wMe+SXbBOMALVKV5ozMdo5lnXybujjQ4tnVV2P3m5vEvwcehC8Wk+v
s33bi1IRM3TGkw4UDAKD
=ZZy1
-----END PGP SIGNATURE-----

--KlAEzMkarCnErv5Q--

--===============9164351565045142751==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============9164351565045142751==--

