This post is locked. You won't be able to comment.

4299
4300

Wikileaks latest insurance files don't match hashes (self.crypto)

438498967 が 投稿

UPDATE: @Wikileaks has made a statement regarding the discrepancy.

https://twitter.com/wikileaks/status/798997378552299521

NOTE: When we release pre-commitment hashes they are for decrypted files (obviously). Mr. Assange appreciates the concern.

The statement confirms that the pre-commits are in fact, for the latest insurance files. As the links above show, Wikileaks has historically used hashes for encrypted files (since 2010). Therefore, the intention of the pre-commitment hashes is not "obvious". Using a hash for a decrypted file could put readers in danger as it forces them to open a potentially malicious file in order to verify if its contents are real. Generating hashes from encrypted files is standard, practical and safe. I recommend waiting for a PGP signed message from Wikileaks before proceeding with further communication.

The latest insurance files posted by Wikileaks do not match the pre-commitment hashes they tweeted in October.

US Kerry [1]- 4bb96075acadc3d80b5ac872874c3037a386f4f595fe99e687439aabd0219809

UK FCO [2]- f33a6de5c627e3270ed3e02f62cd0c857467a780cf6123d2172d80d02a072f74

EC [3]- eae5c9b064ed649ba468f0800abf8b56ae5cfe355b93b1ce90a1b92a48a9ab72

sha256sum 2016-11-07_WL-Insurance_US.aes256 ab786b76a195cacde2d94506ca512ee950340f1404244312778144f67d4c8002

sha256sum 2016-11-07_WL-Insurance_UK.aes256 655821253135f8eabff54ec62c7f243a27d1d0b7037dc210f59267c43279a340

sha256sum 2016-11-07_WL-Insurance_EC.aes256 b231ccef70338a857e48984f0fd73ea920eff70ab6b593548b0adcbd1423b995

All previous insurance files match:

wlinsurance-20130815-A.aes256 [5],[6]

6688fffa9b39320e11b941f0004a3a76d49c7fb52434dab4d7d881dc2a2d7e02

wlinsurance-20130815-B.aes256 [5], [7]

3dcf2dda8fb24559935919fab9e5d7906c3b28476ffa0c5bb9c1d30fcb56e7a4

wlinsurance-20130815-C.aes256 [5], [8]

913a6ff8eca2b20d9d2aab594186346b6089c0fb9db12f64413643a8acadcfe3

insurance.aes256 [9], [10]

cce54d3a8af370213d23fcbfe8cddc8619a0734c

Note: All previous hashes match the encrypted data. You can try it yourself.

[1] https://twitter.com/wikileaks/status/787777344740163584

[2] https://twitter.com/wikileaks/status/787781046519693316

[3] https://twitter.com/wikileaks/status/787781519951720449

[4] https://twitter.com/wikileaks/status/796085225394536448?lang=en

[5] https://wiki.installgentoo.com/index.php/Wiki_Backups

[6] https://file.wikileaks.org/torrent/wlinsurance-20130815-A.aes256.torrent

[7] https://file.wikileaks.org/torrent/wlinsurance-20130815-B.aes256.torrent

[8] https://file.wikileaks.org/torrent/wlinsurance-20130815-C.aes256.torrent

[9] https://wikileaks.org/wiki/Afghan_War_Diary,_2004-2010

[10] https://web.archive.org/web/20100901162556/https://leakmirror.wikileaks.org/file/straw-glass-and-bottle/insurance.aes256

More info here: http://8ch.net/tech/res/679042.html

Please avoid speculation and focus on provable and testable facts relating to cryptography.

上位 200 件のコメント表示する 500
並べ替え:
ベスト
トップ新着論争中古い順Q&A

[–]Natanael_L[M] [スコア非表示] stickied comment (0子コメント)

I am temporarily locking this thread since I need to go to sleep, and because this sub is undermanned, and this thread going in circles. I do not want another 1000 comments to read in the morning in order to properly police the sub when I wake up. It will be back in ~12h, I'm guessing.

Edit: 3x insults (now 6x) against the moderators via the report function isn't going to get the thread unlocked faster. This thread doesn't even really belong in this subreddit in the first place, our focus is on algorithms and theory. This sub isn't political.

Edit 2: A response to the submission reports: Political discussions doesn't belong here at all if it is not related to cryptography policy, and it isn't enough that the topic is about somebody who is merely using cryptography. It is the algorithms we are interested in. You have to respect the rules of the subreddit you are visiting.
Speculation also doesn't belong here, and neither does personal attacks and insults and harassment, which there already had been a lot of before I locked the thread.
And no, contrary to what the reports says, it isn't "lazy" to not want to herd wild cats. This thread was flooded by people coming from 10+ larger subreddits, many of which was ignoring our rules. You can't expect the moderators of a normally low volume subreddit to deal with that - I could barely keep up with reading the new comments as they were made, and the volume was increasing!
And you also can't demand to hold your discussions in subreddits where they are off topic, either. If you want an unmoderated discussion, make your own sub for it!

Totesmeta got all the links to other subs discussing this topic:
https://www.reddit.com/r/crypto/comments/5cz1fz/wikileaks_latest_insurance_files_dont_match_hashes/da0ypc3/

There's multiple much more appropriate subs in that list for this discussion.

[–]jabes52 1337 ポイント1338 ポイント  (295子コメント)

ELI5?

[–]438498967[S] 2966 ポイント2967 ポイント  (188子コメント)

Wikileaks told its readers they would publish some files that would have a specific signature. This signature is there to prove that the files have not been changed in any way. The files came out recently and the signature on them does not match. All previous files of this type have matched the signature.

[–]jabes52 639 ポイント640 ポイント  (161子コメント)

Thanks!

I want to make sure I'm understanding this correctly. How does WikiLeaks generate the signature? Is there a new signature every time the insurance file is updated? Suppose the insurance file has been tampered with. What keeps the guilty party from calculating and publishing the new signature (assuming they have Assange's Twitter also)?

[–]Estrepito 2111 ポイント2112 ポイント  (138子コメント)

The signature is generated by an algorithm (a mathematic function), based on the contents of the files. Only the exact same files with the exact same content will generate the same signature. Important to note is that the algorithm is public and not modifiable; anyone can run it and generate the same signature, given the same files as input.

The only way for them to upload files that, after applying the algorithm mentioned before, generate the same signature, is by uploading the exact same files. Which apparently they didn't do, as we're seeing a different signature.

Hope that makes sense!

Edit: As the original poster asked for an ELI5, this post does of course simplify terminology and only takes into account what is practically possible / viable. For a correct understanding of what is happening here, there's no need to understand theoretical possibilities in my opinion, as they tend to confuse rather than clarify. If you're interested though, feel free to read the replies!

[–]LaserPoweredDeviltry 616 ポイント617 ポイント  (22子コメント)

You're the first person to explain this clearly enough for a laymen to follow. Thanks.

[–]Estrepito 215 ポイント216 ポイント  (17子コメント)

No worries. Good for you on making the effort to learn. It's important stuff.

[–]l337joejoe 43 ポイント44 ポイント  (12子コメント)

What are the implications of this?

[–]teawreckshero 52 ポイント53 ポイント  (1子コメント)

The most unlikely possibility is they messed up their hashing/signing process, or a file was corrupted in transit, and the hash came out different.

Aside from that, without more info, it's anyone's guess. Could be their way of tipping people off that shit is going down, could be someone tried to forge the documents to make things appear business as usual. It's almost certain that something is amiss. This just doesn't happen if everything is fine and you know what you're doing.

[–]watchout5 72 ポイント73 ポイント  (5子コメント)

Given Assange's current status (without internet) it's entirely suspect. The files released today are not from wikileaks or if they are they've been tampered with possibly without their knowledge. It's entirely possible it's an honest mistake, unlikely. Clinton might be mad enough at wikileaks to take it down. She has enough money to force a break in. It's entirely speculation. Anything is possible. All we know for sure is that the files released today are the wrong files according to wikileaks. Something important happened I bet.

[–]factoid_ 116 ポイント117 ポイント  (4子コメント)

You missed an obvious one.... Wiki leaks falsified it themselves.

People have a tendency of giving them a pass on anything honesty related as though they are a virtuous paragon incapable of doing wrong.

I'm not saying they did, necessarily, but how would we know? Even when they send out a signature ahead of time, there's no transparency to the process, they could give us the signature of a fake document and then release the same fake document.

Wikileaks has gotten progressively crazier in the last two years.

[–]MightyMetricBatman 22 ポイント23 ポイント  (1子コメント)

It could simply be they added additional files not in the original dump instead of any modified by Wikileaks staffers. However, to not mention why the signature is different is suspicious.

[–]watchout5 19 ポイント20 ポイント  (1子コメント)

Not really, the idea behind falsifying it themselves is that they already submitted these hashes. It's much more likely they mistakenly uploaded the wrong batch of files, or modified the directory by mistake, because if their goal was to falsify the documents, why wouldn't they have uploaded the suspect hash 2 months ago?

コメントをもっと表示する (4 返事)

    コメントをもっと表示する (4 返事)

      コメントをもっと表示する (4 返事)

        [–]PKStarStorm 313 ポイント314 ポイント  (79子コメント)

        It is possible to generate the same signature with a different file. But the file would most likely be a lot of nonsense which would in no way resemble the expected file.

        This technique is used to corrupt torrents sometimes.

        [–]Natanael_L 215 ポイント216 ポイント  (75子コメント)

        You can create MD5 collisions and SHA1 collisions. SHA256 and SHA3 however has no known weaknesses of that kind.

        [–]skatan 122 ポイント123 ポイント  (26子コメント)

        Doesn't every hashing function have collisions? I mean it is damn near impossible to create the same 512 character hash, but there have to be some collsions.

        [–]Natanael_L 117 ポイント118 ポイント  (18子コメント)

        Yes, every hash has collisions. But they are supposed to be very very hard to find.

        [–]DarkRider89 98 ポイント99 ポイント  (16子コメント)

        It's not really even that they have to be hard to find. The important part is that you can't find some method whereby you can add or remove arbitrary data from a particular file and have it have the same hash. For all practical purposes, it does not matter that two very different files can receive the same hash value.

        [–]Eriksrocks 29 ポイント30 ポイント  (0子コメント)

        In the case we are talking about here, simply being able to find a collision (which is reasonably similar in size as the original input) matters very much.

        Since the insurance files are encrypted with AES-256, they look like random data. If a collision can be found, the input is also likely to appear random, and therefore a compromised Wikileaks could release files which produce collisions, the hashes would match, and no one would know Wikileaks is compromised until they were attempted to be decrypted.

        コメントをもっと表示する (15 返事)

          コメントをもっと表示する (1 返事)

            [–]Wace 13 ポイント14 ポイント  (0子コメント)

            Every hash function has collisions, but the strong ones have no known ways to generate collisions.

            Take two different random files and there is a (miniscule) chance their hashes collide. The difference is, that with a weaker hash you can take any file and then generate a second file that matches the original by hash.

            As long as there exists no known way to generate a colliding file, we can be fairly certain that a file matching a hash is the original file and not a different file created to match the original hash.

            コメントをもっと表示する (6 返事)

              [–]Shitting_Human_Being 50 ポイント51 ポイント  (34子コメント)

              But what if I have 2256 +1 files? Doesn't that mean that at least 2 of them have the same hash?

              I know 2256 is a stupidly large number that I can't even phantom, but technically it would be possible, right?

              [–]WhoNeedsVirgins 172 ポイント173 ポイント  (13子コメント)

              Just for future reference, it seems you wanted the word GBARBGLRBGLARBLGBR*

              Here reddit, that's what you will have for giving a pedantic remark twice thrice as many upvotes as to the actual answer.

              Also, 2256 is a stupidly large number that you can't even fathom? Bahahaha.

              [–]Natanael_L 42 ポイント43 ポイント  (2子コメント)

              Yes, there's always collisions.

              They're supposed to be incredibly hard to find.

              [–]HitMePat 52 ポイント53 ポイント  (8子コメント)

              You can't have 2256 files. That is a number larger than all of the atoms in the universe. There aren't 2256 bits of data on the entire internet.

              There is no realistic way to make a sha256 hash output with two different inputs.

              コメントをもっと表示する (8 返事)

                コメントをもっと表示する (13 返事)

                  コメントをもっと表示する (3 返事)

                    コメントをもっと表示する (35 返事)

                      [–]Dareeude 41 ポイント42 ポイント  (18子コメント)

                      Okay. A brief introduction: An archive of more files are made into a single file, which could be a .rar .zip or whatever else. Afterwards a checksum is calculated, MD5 is widely used today, but other methods exist.

                      They work by calculating a specific length string from the contents of the file. This means, that a single bit being shifted, the checksum will be wildly different.

                      Extremely ELI5; add up all the 1's and 0's and multiply it with a universally known number = checksum.

                      [–]Natanael_L 46 ポイント47 ポイント  (16子コメント)

                      MD5 is considered insecure today, as is SHA1. Use SHA256 or SHA3

                      [–]honestlynotthrowaway 43 ポイント44 ポイント  (15子コメント)

                      Cryptographically yes, but it's still perfectly adequate for generating checksums.

                      [–]Natanael_L 51 ポイント52 ポイント  (12子コメント)

                      It is trivial to generate MD5 collisions now. Somebody can show you a benign file with an MD5 hash and then hand somebody else a malicious file with the exact same MD5 hash, and you would never know there was any difference unless your directly compared the files.

                      コメントをもっと表示する (2 返事)

                        コメントをもっと表示する (1 返事)

                          コメントをもっと表示する (3 返事)

                            [–]roflz 27 ポイント28 ポイント  (3子コメント)

                            What are the suspicions? Who would do this and why?

                            [–]HitMePat 90 ポイント91 ポイント  (2子コメント)

                            The real leak has damning information. People with an interest in not having that info leak can leak a fake file without that information in it. People read the fake file and say "well that's not so bad" and move on with their lives. The cryptographic signature is supposed to be proof that the file isn't modified.

                            コメントをもっと表示する (22 返事)

                              [–]KageJittai 345 ポイント346 ポイント  (100子コメント)

                              Wikileaks has an insurance file, which is just a giant data dump of all the information they have, published or not. Wikileaks does screen hold back some of the most damning things as 'Insurance' which, if their operation were ever compromised, they would release the decryption key which opens the massive data dump file. Think of it as a dead man switch.

                              Before they release their insurance file, they release a hash of it; a hash is a kind of like a checksum. It doesn't contain the data, but it is a way of ensuring the data hasn't been altered.

                              Think of it this way: if I took all the paint from an image, mix up all the paint to make a new color, that new color contains elements from the original image. I could then do that with a copy of a picture to see if the new color matched the color from the original image. If it didn't match, I could conclude that the copy wasn't the original.

                              What has happened, is the hash they released last month doesn't match the hash for the insurance file.

                              This could have happed for many reasons, either when they uploaded the insurance file, there was a transmission error, or the original hash wasn't correct.

                              It's also possible that Wikileaks has been compromised and to keep up appearances to prevent the release of the decryption key the responsible party released a fake insurance file.

                              Most likely it's a mistake, maybe they accidently released the hash for the unencrypted version, or a transmission failure happened. I would standby and wait and see before jumping to speculation.

                              [–]Skoolz 57 ポイント58 ポイント  (50子コメント)

                              What are people suspecting is happening? Or, rather, who is the main suspect for wiki leaks being compromised?

                              [–]KageJittai 74 ポイント75 ポイント  (14子コメント)

                              More than likely it is a mistake or error. I'm not going to speculate on who might have compromised wikileaks. Wikileaks can play a better role than we can in determining what actually happened. If it was compromised you can expect key holders to release their Dead Man Switch which would still be valid for older insurance files. But they are going to do everything they can to validate that a compromise has happened.

                              [–]shammikaze 93 ポイント94 ポイント  (32子コメント)

                              Hopefully it's a mistake. Otherwise it's possible that Assange has been murdered and it's being covered up. Nobody has seen or heard from him since the Internet outage when heavily armed "police" showed up.

                              [–]TheRedGerund 51 ポイント52 ポイント  (23子コメント)

                              Don't you think they'd have a better plan than murdering him and hoping no one finds out?

                              [–]shammikaze 113 ポイント114 ポイント  (16子コメント)

                              I mean, according to all accounts their Twitter stopped using their safety/authentication key the day of the outage, and then also mysteriously teamed up with Politico (who have always opposed them).

                              It's too many coincidences to not be considered. There is a possibility that he has been killed and it is being covered up via whoever has taken over the Twitter account.

                              Also, the intentionally misleading pictures of him (the one of him and his cat from LONG ago) that were posted as "proof" of life are suspect at best.

                              There's a lot on this. You should look more into it - other people have pieced it together and summarized it far better than I can.

                              [–]TheRedGerund 34 ポイント35 ポイント  (11子コメント)

                              Yeah but why would that be your approach? Eventually people will find out so killing him and taking over the Twitter is just not that great of a plan. Better to kill him and blame someone else so you don't have to pretend he's alive.

                              How long do you think it'll take for people to realize he's properly gone? Then ask yourself, why would they fight so hard to delay the news by that amount?

                              [–]ApocaRUFF 65 ポイント66 ポイント  (3子コメント)

                              The public has a very short attention span. If you can cover it up for a couple of weeks, most people won't care when the 'real' new breaks, and therefore it won't spread as far. If you can cover it up for a month, that is multiplied. So on and so forth. In five months from now, it may come out that Assange very well was killed, however by then a majority of the internet won't care enough as WikiLeaks will still be around so they won't see a difference (even though WL has been making minor changes slowly). It will also probably come out as it being an accident or suicide. There won't be enough evidence to prove it went either way. That, combined with the short attention span, will have a majority of people that come across the information not being angered or upset over it, as there isn't enough information to make an actual decision.

                              It would be different if there was a big fire-fight that was televised and recorded that ended with Assange's death. Or if he had immediately shown up as a suicide after his disappearance. However, the continuation of WL, combined with the "if" factor regarding his disappearance, and further combined with the extended time from the start of his disappearance and the reporting of his death, will result in nothing occurring as a result.

                              コメントをもっと表示する (7 返事)

                                コメントをもっと表示する (4 返事)

                                  コメントをもっと表示する (6 返事)

                                    コメントをもっと表示する (8 返事)

                                      コメントをもっと表示する (2 返事)

                                        [–]thbt101 83 ポイント84 ポイント  (19子コメント)

                                        Wikileaks has an insurance file, which is just a giant data dump of all the information they have, published or not.

                                        Damn, that's kind of scary. A lot of their data releases have caused all kinds of havoc in the world. I can't imagine how much worse it would be if they released the data that even they think is too damaging to release. I wonder if it would actually lead to war.

                                        [–]KageJittai 90 ポイント91 ポイント  (16子コメント)

                                        Well, they don't want to release, they would release it in the event that some state actor tries to shut down their operation, or even comes after them personally.

                                        As soon as they do release it, they lose any protection the file holds so you can bet they would make damn sure it's absolutely necessary.

                                        コメントをもっと表示する (2 返事)

                                          コメントをもっと表示する (29 返事)

                                            コメントをもっと表示する (5 返事)

                                              [–]Exec99 7107 ポイント7108 ポイント x2 (683子コメント)

                                              A few of us attentive sleuths knew something was wrong since the day Assange's internet was cut. But there was a very intense effort to censor any mention of this.

                                              Now this part will sound ridiculous to anyone who wasn't paying very close attention, but Assange has not been seen or heard from since Oct 17th. Two interviews were put out recently that try to make it seem that they were done after Oct 17th but in reality they were not. If you don't dismiss what I am saying instantly and dig around, you will see that many people have been aware of this since the 17th but most attempts to discuss it were blacked out quickly. Now it seems more people are catching on so please help bring awareness to this and don't even take my word for it, but research it yourself.

                                              [–]tudda 1477 ポイント1478 ポイント  (505子コメント)

                                              I've been following this theory in wikileaks/conspiracy as well... I also thought it was strange that yesterday he was being questioned, but there was no confirmation from him? Why didn't he come to the window for 2 seconds to confirm?

                                              Something seems off.

                                              [–]ablevictor 1591 ポイント1592 ポイント  (138子コメント)

                                              I posted about this in detail. There was no confirmation from Assange because he is not at the embassy. Even his lawyer was not allowed to attend yesterday's meeting which was regarding his charges.

                                              [–]fat_osvaldo 849 ポイント850 ポイント  (122子コメント)

                                              Right that should be a massive red flag.

                                              [–]jeffinRTP 203 ポイント204 ポイント  (121子コメント)

                                              Could he be in Moscow planning the next leak?

                                              [–]Herculius 623 ポイント624 ポイント  (108子コメント)

                                              No lol John Kerry convinced ecuador to turn off the internet.

                                              He is certainly in the custody of U.S. officials.

                                              [–]btribble 496 ポイント497 ポイント  (29子コメント)

                                              "Certainly"

                                              [–]tonycomputerguy 226 ポイント227 ポイント  (28子コメント)

                                              "In custody"

                                              [–]billkilliam 184 ポイント185 ポイント  (27子コメント)

                                              "Of U.S. officials"

                                              [–]offlein 604 ポイント605 ポイント  (9子コメント)

                                              "."

                                              [–]OustTheEstablishment 118 ポイント119 ポイント  (12子コメント)

                                              When we took Bin Laden into custody he ended up over the side of a boat.

                                              Edit: Chill guys, I know he was shot. That's part of the joke.

                                              コメントをもっと表示する (4 返事)

                                                [–]viva_wafflecrisp 198 ポイント199 ポイント  (69子コメント)

                                                They probably broke in immediately following the backout, knowing Assange wasn't able to contact the outside world for a certain period of time. Makes sense.

                                                [–]Herculius 210 ポイント211 ポイント  (65子コメント)

                                                after that the biggest ddos attack of all time happened.

                                                [–]Santoron 489 ポイント490 ポイント  (63子コメント)

                                                And trump got elected. And the Cubs won it all.

                                                What's your point? Or are we just throwing shit at the wall in a game of "Memba the Xfiles?"

                                                [–]Herculius 261 ポイント262 ポイント  (51子コメント)

                                                The ddos attacks were directed at Britain and the US.... they happened at the exact same time the London City Airport was shutdown.

                                                It is not a stretch to look at these events as possibly related to the removal of assange from the embassy.

                                                [–]ForteShadesOfJay 90 ポイント91 ポイント  (1子コメント)

                                                Fucking Cubs I knew this was all their fault somehow.

                                                コメントをもっと表示する (9 返事)

                                                  コメントをもっと表示する (1 返事)

                                                    [–]lakerswiz 23 ポイント24 ポイント  (1子コメント)

                                                    weren't there live streams and what not of the embassy he's staying in immediately after his internet was cut? if anyone "broke in" it sure as hell was low key.

                                                    [–]Derm 36 ポイント37 ポイント  (0子コメント)

                                                    I'm sure low key and discreet would have been key requirements in extracting him and they wouldn't just send the boys in the front door.

                                                    コメントをもっと表示する (1 返事)

                                                      [–]SIThereAndThere 50 ポイント51 ポイント  (0子コメント)

                                                      He's getting hoomcoked pizza and pasta form Podesta

                                                      コメントをもっと表示する (7 返事)

                                                        [–]fairly_common_pepe 93 ポイント94 ポイント  (9子コメント)

                                                        Why the shit is this misinformation upvoted?

                                                        The Russians didn't leak jack shit.

                                                        [–]jeffinRTP 61 ポイント62 ポイント  (0子コメント)

                                                        Of course they didn't. Just ask them, they never lie about anything.

                                                        コメントをもっと表示する (8 返事)

                                                          コメントをもっと表示する (2 返事)

                                                            コメントをもっと表示する (15 返事)

                                                              [–][deleted] 598 ポイント599 ポイント  (32子コメント)

                                                              r/whereisassange

                                                              r/wikileaks is BS, they have been compromised since mid October when 7 new moderators joined. They usually delete threads about Julian being MIA.

                                                              [–]dfu3568ete6 158 ポイント159 ポイント  (21子コメント)

                                                              It should all be kept to one thread like the Podesta email threads to make a stronger argument. Since his power was cut that sub has been flooded with "wheres Assange" threads so they probably get pulled as spam.

                                                              [–][deleted] 267 ポイント268 ポイント  (20子コメント)

                                                              The moderators reject those threads, they aren't pulled as spam. I've had conversations with these moderators about why they pulled my posts ("concern trolling").

                                                              Also if you comment about his disappearing, you get downvoted with recent 2 month accounts or younger that also call you a concern troll, or try to deflect your evidence in a way that makes it clear they don't regularly follow WikiLeaks, or know about the people behind it. Either way the accounts I've used there have been banned, so that happens too.

                                                              There has been no substantive discussion on that subreddit at all since mid October about Assange being detained.

                                                              Again, 7 new moderators moved in around this time, and the serious WikiLeaks followers have since left because it's obvious that sub is a joke now.

                                                              They also decided to sort all threads by "new" when they came in. A moderator told me "It's common on Reddit", questioning whether they even know how Reddit works. There is not one other subreddit I am aware of that sorts threads by "new" (outside of large live events), but they insist.

                                                              [–]hankbaumbach 101 ポイント102 ポイント  (9子コメント)

                                                              Just here to comment that I subscribed to at least 80 subreddits and not a single one sorts by "new"

                                                              [–]Hot4_TeaCha 25 ポイント26 ポイント  (2子コメント)

                                                              This "concern troll" language has bubbled up a lot recently, particularly from commenters who have been sowing discord and unproductive solutions within activist forums. I've been surprised how often the term is being applied and by who and towards whom it's being applied to.

                                                              The term has been around for a while, but now I'm wondering if it's just a meme that took hold with people who spend too much time in fringe-conspiracy sites or if they're actually plants.

                                                              [–]IamA_Werewolf_AMA 13 ポイント14 ポイント  (1子コメント)

                                                              Concern trolling is some straight up Orwellian bullshit. Groups are using it to silence any even mildly dissenting opinions and build some of the most fervent circlejerks the world has ever seen.

                                                              コメントをもっと表示する (7 返事)

                                                                コメントをもっと表示する (10 返事)

                                                                  [–]ablevictor 246 ポイント247 ポイント  (182子コメント)

                                                                  Here are some links. Catch up on the details. This needs to spread.

                                                                  [–]Hellscreamgold 117 ポイント118 ポイント  (53子コメント)

                                                                  sorry - but if wikileaks was so dependent on assange, they were designed poorly.

                                                                  [–]ablevictor 172 ポイント173 ポイント  (51子コメント)

                                                                  You're right that would be poor design. Truth is we don't know. But there's a lot of evidence suggesting Wikileaks is compromised. (Strange Twitter behavior, strange tweets, possible deadman switch release, bullshit AMA, 6 new mods at wikileaks subreddit, strange mod activity at r /wikileaks, death of a handful of key members this year, all of this on top of JA's absence)

                                                                  [–]dissentcostsmoney 105 ポイント106 ポイント  (43子コメント)

                                                                  Its definetly compromised, they also tried to prevent any spread of this info.

                                                                  There was a picture of assange blackbagged that was realtime scrubbed from the internet.

                                                                  This is huge. The chans are being suppressed & some people are going MIA. sounds crazy but its happening.

                                                                  The info on the WL insurance drops is so bad they will do anything to contain it.

                                                                  [–]ablevictor 65 ポイント66 ポイント  (29子コメント)

                                                                  There was a picture of assange blackbagged that was realtime scrubbed from the internet.

                                                                  First I've heard of this. Would be a huge find.

                                                                  [–]aickem 27 ポイント28 ポイント  (11子コメント)

                                                                  There was a picture of assange blackbagged that was realtime scrubbed from the internet.

                                                                  Link? Even if it's dead check the internet archives. Someone (probably google) might have a snapshot of the page

                                                                  コメントをもっと表示する (1 返事)

                                                                    コメントをもっと表示する (7 返事)

                                                                      コメントをもっと表示する (1 返事)

                                                                        [–]037_Engineering 154 ポイント155 ポイント  (125子コメント)

                                                                        what possible motive does the alt media have for covering up that Assange is dead?

                                                                        WL is a Weapon of Mutually Assured Destruction. The GOP just gained all three branches. Do you think they want a guy like Assange around? WL has a full infrastructure to protect whistleblowers including international lawyers specialized in Asylum seeking, massive funding to help hide and protect informers, journalists to publish stories so that the important stuff doesnt get hidden. The left neeeeeeeds to understand how desperately they neeeeeed WL right now. To get vindictive right now would set back whistleblowing by at least 15 years and who the hell knows what can be accomplished by an unchecked US government in that amount of time. Especially a US government that has no opposition party for at least 2 years. The implications are massive and cannot possibly be overstated.

                                                                        [–]somegridplayer 114 ポイント115 ポイント  (13子コメント)

                                                                        The left neeeeeeeds to understand how desperately they neeeeeed WL right now.

                                                                        Pretty sure the left is not very impressed by WL right now.

                                                                        [–]037_Engineering 48 ポイント49 ポイント  (1子コメント)

                                                                        I know. That is why they

                                                                        neeeeeeed to understand how desperately they neeeeeed WL right now.

                                                                        The left is in an awfully shitty position right now.

                                                                        コメントをもっと表示する (11 返事)

                                                                          [–]Hot4_TeaCha 255 ポイント256 ポイント  (87子コメント)

                                                                          The left neeeeeeeds to understand how desperately they neeeeeed WL

                                                                          This claim might be a little easier to take seriously if WL hadn't just staged a very targeted psyops campaign to the benefit of the Right and/or to the detriment of American political stability.

                                                                          [–]billbrown96 30 ポイント31 ポイント  (1子コメント)

                                                                          Weren't the big leaks all after Assange's disappearance?

                                                                          [–]Hot4_TeaCha 15 ポイント16 ポイント  (0子コメント)

                                                                          I believe so. I think he put out a tweet or two after, but who knows how genuine that would be.

                                                                          [–]toxeia 121 ポイント122 ポイント  (64子コメント)

                                                                          Corruption is corruption. Spill ALL the beans. Just because it was all one sided shit lately didn't make the fact they thought they could get away with this shit any less disgusting or terrifying.

                                                                          [–]Hot4_TeaCha 162 ポイント163 ポイント  (25子コメント)

                                                                          There was really nothing terrifying about the Podesta emails if you actually read them and understood the context. Everything "scary" was drummed up nonsense from politically motivated individuals.

                                                                          [–]emanresusinekat 20 ポイント21 ポイント  (6子コメント)

                                                                          spoken like someone who didnt read the leaks.

                                                                          [–]Hot4_TeaCha 14 ポイント15 ポイント  (5子コメント)

                                                                          Exercise critical thinking instead of accepting conclusions spoon fed to you by biased media sources.

                                                                          You people are so easily duped it would be hilarious if it wasn't so tragic.

                                                                          [–]emanresusinekat 11 ポイント12 ポイント  (4子コメント)

                                                                          Holy shit follow your own advice my man. I dont come to my conclusions from media sources. Nothing but fiction on there. I read the emails myself. Every day. You clearly did not.

                                                                          Next you'll be feeding me some bs line about russia or something.....

                                                                          コメントをもっと表示する (18 返事)

                                                                            コメントをもっと表示する (38 返事)

                                                                              コメントをもっと表示する (20 返事)

                                                                                コメントをもっと表示する (23 返事)

                                                                                  コメントをもっと表示する (2 返事)

                                                                                    [–]fat_osvaldo 419 ポイント420 ポイント  (49子コメント)

                                                                                    Also the fact that he was allowed to be questioned by a prosecutor from Ecuador without his lawyer present is also very suspicious.

                                                                                    [–]hiimvlad 112 ポイント113 ポイント  (47子コメント)

                                                                                    pretty sure that the swedish prosecutor met with an ecuadorian prosecutor who relayed the questions.

                                                                                    [–]fat_osvaldo 234 ポイント235 ポイント  (46子コメント)

                                                                                    Right. But without his lawyer present as should have been there with ANY prosecutor.

                                                                                    コメントをもっと表示する (1 返事)

                                                                                      [–]lkoz590 27 ポイント28 ポイント  (23子コメント)

                                                                                      What do you think about the RT Interview?

                                                                                      I don't believe the Michael Moore video or the other "proofs" they released.

                                                                                      I have a friend who is pretty faithful in RT news though. It's the only counter-evidence I can think of to this theory

                                                                                      [–]tudda 109 ポイント110 ポイント  (20子コメント)

                                                                                      People have pointed out the inconsistencies in it, the audio cuts, and him not directly addressing the question he was asked.

                                                                                      I honestly don't know what to think. There are a lot of possibilities but you'd have to know everyone's true intentions to even have a chance at figuring it out.

                                                                                      • If the CIA compromised/captured/killed him on Oct 15th, why would they let the releases continue?
                                                                                      • If the cia compromised the entire wikileaks staff, and changed the dns to a replica server, it seems odd they would still let the releases continue.
                                                                                      • If the dead man switch is responsible for the continued releases, why would wikileaks staff act like he's still alive?
                                                                                      • If there's no issue at all, why wouldn't wikileaks staff , or julian do something to show proof life? Even if it was just going to the window. And why wasn't his lawyer allowed to be present for the meeting with the prosecutor?

                                                                                      My conspiracy theory is they compromised Assange (and possibly all of wikileaks staff), and wikileaks site by altering the DNS and pointing to replica server, changing the releases so whatever massive bombshell was going to come out , doesn't. They don't care who is president, they care about keeping whatever massive secret he was going to drop. They will continue running wikileaks as is and possibly fake documents , and then expose them as fake, use the media to push the narrative that they are fake, and then people will be more reliant on the MSM than ever, effectively stopping the red pilling in its tracks.

                                                                                      [–]sinascendant 48 ポイント49 ポイント  (1子コメント)

                                                                                      Point1/2: They'd let the releases continue for the same reason the FBI kept distributing child porn on Tor, probably, to make it look like the site was still running and maybe catch some more fish in their net.

                                                                                      Point 3: The DMS would most likely be something more serious than that. There's a possibility it was compromised; or it may just be this encryption. And the staff may not know whether or not he's been compromised.

                                                                                      Point 4: Likely the result of the above.

                                                                                      コメントをもっと表示する (18 返事)

                                                                                        コメントをもっと表示する (2 返事)

                                                                                          [–]Exec99 12 ポイント13 ポイント  (69子コメント)

                                                                                          Yes definitely.

                                                                                          [–]tudda 41 ポイント42 ポイント  (68子コメント)

                                                                                          I haven't been following wikileaks / julian for very long. Maybe you'd be willing to answer a few questions for me?

                                                                                          1) Have they ever cut his internet in the past?

                                                                                          2) What's the longest he's ever gone without a real confirmation/proof of life?

                                                                                          3) Would it be possible for them to have taken out/taken over the entire wikileaks operation across the world in a coordinated attack, and let it continue to operate with modified releases stripped of the extremely harmful stuff?

                                                                                          [–]hoeskioeh 46 ポイント47 ポイント  (63子コメント)

                                                                                          1) no

                                                                                          2) idk. so far this issue hasn't arisen in the past in this prominency.

                                                                                          3) difficult to ascertain. you would need to apprehend a number of people simultanously all over the globe. some of those names are only available after you apprehend the persons ahead of the chain... there is - afaik - no complete list of wikileaks related people, at least in public.

                                                                                          a well equipped alphabet organisation might be able to pull this off with some months of observation and planning. impossible? no. plausible? shrugs

                                                                                          [–]FreedomByFire 24 ポイント25 ポイント  (26子コメント)

                                                                                          I would find it very difficult to believe that asange does not have a dead mans trigger if he's really gone.

                                                                                          [–]onmybreak 21 ポイント22 ポイント  (4子コメント)

                                                                                          Remember that massive DDoS attack?

                                                                                          [–]FreedomByFire 18 ポイント19 ポイント  (3子コメント)

                                                                                          That's interesting theory, but it's what's the point of that without making it obvious that it was him or that he was caught?

                                                                                          [–]toastman42 39 ポイント40 ポイント  (1子コメント)

                                                                                          I think the better theory isn't that the DDoS was Asange's DMS, rather that the DDoS was initiated by a state actor to disrupt Asange's DMS.

                                                                                          [–]onmybreak 25 ポイント26 ポイント  (0子コメント)

                                                                                          Disrupted traffic to many platforms that the DMS could have posted to.

                                                                                          コメントをもっと表示する (21 返事)

                                                                                            コメントをもっと表示する (36 返事)

                                                                                              [–]Exec99 15 ポイント16 ポイント  (3子コメント)

                                                                                              1. No
                                                                                              2. Nothing like this. His embassycat twitter hasn't tweeted since the 15th either
                                                                                              3. Yes for sure.

                                                                                              コメントをもっと表示する (6 返事)

                                                                                                [–]FanSciFi 379 ポイント380 ポイント  (7子コメント)

                                                                                                Had to scroll up to see which sub this was (If it was wikileaks sub, i'd have not posted), but yes, I and many others were banned from the wikileaks sub. There was a mod takeover. At this point I'm completely lost.

                                                                                                Edit: Interestingly enough after reading this, I went back to see if it was still compromised, a mod on the wikileaks sub has linked to a clearnet directory of .onion wesbites, which contained illegal websites (yes, those kinds of websites). I also explained how just having tor doesn't make you anonymous, that there is more to do before you can safely use tor. His response? banned for 'spamming stickies'

                                                                                                The post that got me banned (AKA the spam)

                                                                                                His idea of being secure - Direct link to his post, since he won't ban himself.

                                                                                                inconclusive if sub is compromised, definitely heavily censored if you don't agree.

                                                                                                End Edit.

                                                                                                Let's say he is alive and in the embassy, why hasn't his internet been restored? Did anyone else notice how aggressive wikileaks has been since the internet outage? It's very childish, or like a government doing an impression of what they think the wikileaks team is like. I'd assume that the team would be able to get some sort of information out, I don't think they would all be together in one room working, but maybe I'm wrong. IDK. It's fucking off, is what it is.

                                                                                                It's not conclusive, it's sort of like The Thing, where things seem off, but everyone is on edge, so you can't ID the monster.

                                                                                                [–]zeddus 105 ポイント106 ポイント  (0子コメント)

                                                                                                Wikileaks FB account has been acting childish regarding Sweden for years so thats nothing new. It has shaped up a bit recently though.

                                                                                                [–]ninefivedelta 60 ポイント61 ポイント  (0子コメント)

                                                                                                The Thing is a very apt analogy. I imagine being within the Wikileaks team is constantly like how the characters felt once they became aware that within their midst there was one or many who were not as they seem. I'd say with damn near 100% certainty in my own mind they've been infiltrated by informants or members blackmailed and flipped, and guaranteed they feel the same way. No telling who, how many, to what extent, or which ways they're being misdirected and used for someone else's agenda. The only thing each of them can know for sure is their own status.

                                                                                                コメントをもっと表示する (5 返事)

                                                                                                  [–]Lawls91 107 ポイント108 ポイント  (9子コメント)

                                                                                                  Why hasn't the deadman's switch been thrown to decrypt the previous insurance file(s) if this is the case? I am by no means an expert with regards to Wikileaks, just genuinely curious.

                                                                                                  [–]BravoFoxtrotDelta 78 ポイント79 ポイント  (6子コメント)

                                                                                                  Who knows. Could be a shitty switch. Or a highly capable extraction operation. Or just a big mistake and we're all spinning our wheels. I'm hoping for the best and staying tuned.

                                                                                                  At this point there's no reason (IMO) to assume that the hashes tweeted Oct 16 are associated with the insurance files released on Nov 8.

                                                                                                  [–]AreYouEvenMoist 32 ポイント33 ポイント  (2子コメント)

                                                                                                  Or it just hasn't triggered yet. Might be a year long timer

                                                                                                  [–]BravoFoxtrotDelta 17 ポイント18 ポイント  (1子コメント)

                                                                                                  yeah - really difficult to say anything meaningful at this point, but it's certainly interesting and worth watching given three hashes, three files, no match. I wait.

                                                                                                  コメントをもっと表示する (3 返事)

                                                                                                    [–]scots 45 ポイント46 ポイント  (1子コメント)

                                                                                                    It's possible Julian has decided to continuing performing whatever daily or weekly action is necessary to prevent the dead man's switch scripts from sending the encryption keys out.

                                                                                                    And by "decided" I mean to imply that jumper cables, a wet car wash sponge, a car battery, testicles and persons acting on behalf of the US Government may be involved.

                                                                                                    [–][deleted] 100 ポイント101 ポイント  (12子コメント)

                                                                                                    r/whereisassange, good for uncensored discussion.

                                                                                                    [–]the_strat 113 ポイント114 ポイント  (11子コメント)

                                                                                                    Its also good for quarantining this discussion.

                                                                                                    [–][deleted] 66 ポイント67 ポイント  (9子コメント)

                                                                                                    I posted it because I want people to be aware of the sub.

                                                                                                    There are virtually no other places on Reddit to keep an active discussion about Assange being MIA or WL being compromised. r/wikileaks censors those discussions (since mid Oct with their 7 new moderators), r/conspiracy it doesn't get far anymore (it used to), and r/the_donald doesn't care and is filled CTR-like accounts that accuse you of concern trolling.

                                                                                                    コメントをもっと表示する (1 返事)

                                                                                                      [–]therealcatspajamas 186 ポイント187 ポイント  (7子コメント)

                                                                                                      Yup. The last nail in the coffin for me was when, in that sketchy-ass AMA, "Sarah Harrison" used the WikiLeaks twitter account as proof, no imgur selfie, no PGP sig, just a twitter post.

                                                                                                      I argued with a couple of the IAmA mods and apparently they saw a selfie, and she wanted to post it to imgur, but "couldn't figure out how".

                                                                                                      Yeah, that's correct Sarah Harrison, WikiLeaks editor and investigative journalist apparently doesn't know how to use imgur.

                                                                                                      On top of that, the mods refused to post the pic THAT SHE SUPPOSEDLY MEANT TO POST HERSELF. I call bullshit.

                                                                                                      Interestingly enough one of the mods that I talked to deleted his own public comments a few days later.

                                                                                                      See Here and Here

                                                                                                      [–]FuckOffMrLahey 84 ポイント85 ポイント  (25子コメント)

                                                                                                      He phoned in to CISL2016 at the end of October. The first thing he talked about was his Internet being cut off.

                                                                                                      Edit: https://youtu.be/wP5s0EcDpdI

                                                                                                      [–]kurt1004 14 ポイント15 ポイント  (23子コメント)

                                                                                                      Hmm. That doesn't mean he is still in the embassy though. He could be calling from somewhere else.

                                                                                                      [–]InternetBodhisattva 33 ポイント34 ポイント  (10子コメント)

                                                                                                      But it does mean he is either alive or someone is using software to mimic his voice.

                                                                                                      [–]FuckOffMrLahey 39 ポイント40 ポイント  (1子コメント)

                                                                                                      Or maybe he's just dead and Walt Disney Imagineers skinned him and turned him into an animatron...

                                                                                                      [–]Brak710 21 ポイント22 ポイント  (1子コメント)

                                                                                                      He was replaced with a host.

                                                                                                      Maybe that's why he couldn't leave the embassy... he couldn't find the door.

                                                                                                      コメントをもっと表示する (6 返事)

                                                                                                        コメントをもっと表示する (12 返事)

                                                                                                          コメントをもっと表示する (1 返事)

                                                                                                            [–][削除されました]  (10子コメント)

                                                                                                            [deleted]

                                                                                                              [–]Ballsdeepinreality 22 ポイント23 ポイント  (9子コメント)

                                                                                                              Where is the rest of Wikileaks crew?

                                                                                                              They just did an AMA...

                                                                                                              [–][削除されました]  (8子コメント)

                                                                                                              [deleted]

                                                                                                                [–]Unobud 35 ポイント36 ポイント  (6子コメント)

                                                                                                                haha I'm with you guys on all this and I'll rely on people smarter than me to assess the importance of hash changes in a cryptological sense but if you think the general public will be able to understand I think we're going to have an issue.

                                                                                                                コメントをもっと表示する (1 返事)

                                                                                                                  [–]bookstime6 22 ポイント23 ポイント  (3子コメント)

                                                                                                                  What do you think about the Swedish prosecutor arriving at the embassy this week to question Assange?

                                                                                                                  [–]TheCookieMonster[🍰] 34 ポイント35 ポイント  (2子コメント)

                                                                                                                  It happened this week because it was delayed until November 14th at Julian's request.

                                                                                                                  (the prosecutor was originally going to arrive on October 17th)

                                                                                                                  [–]the_strat 31 ポイント32 ポイント  (1子コメント)

                                                                                                                  Weird about that timing. The 17th is when his internet outage was reported.

                                                                                                                  [–]bIackbrosinwhitehoes 110 ポイント111 ポイント  (45子コメント)

                                                                                                                  https://youtu.be/_sbT3_9dJY4?t=16m25s

                                                                                                                  Here is John Pilger asking Assange about Ecuador cutting his feed. You claim he hasn't been heard of since the 17th, but they cut his feed on the 18th. And here he is talking about it.

                                                                                                                  [–]exmatt 176 ポイント177 ポイント  (29子コメント)

                                                                                                                  Listen again. Pilger mentions the internet being cut off. While Julian's answer makes sense contextually, you will notice that Julian himself makes no direct mention of his internet being cut off.

                                                                                                                  [–]bIackbrosinwhitehoes 49 ポイント50 ポイント  (18子コメント)

                                                                                                                  From the same answer I posted above:

                                                                                                                  WikiLeaks does not publish from the jurisdiction of Ecuador, from this embassy or in the territory of Ecuador; we publish from France, we publish from, from Germany, we publish from The Netherlands and from a number of other countries, so that the attempted squeeze on WikiLeaks is through my refugee status; and this is, this is really intolerable. [It means] that [they] are trying to get at a publishing organisation; [they] try and prevent it from publishing true information that is of intense interest to the American people and others about an election.

                                                                                                                  [–]exmatt 105 ポイント106 ポイント  (16子コメント)

                                                                                                                  Wikileaks has been squeezed by Julian's refugee status for the past four years!

                                                                                                                  What about the quote references anything current? How is this different from what Julian has been saying for the past 4 years?

                                                                                                                  Nothing about this statement indicates chronology, except we can be sure he said these things after 2012. Other statements from Assange can date this interview to during the election season, but nothing Julian says indicates that this was filmed after October 18th.

                                                                                                                  [–]the_strat 20 ポイント21 ポイント  (0子コメント)

                                                                                                                  Anticipating someone trying to strike you down, The Moroccan King email was released on 20/10/16. But that doesnt matter, publishers often discuss material to be released in advance. WL did so by announcing the email release schedule. So, yeah. No verification of dates. Pilger does mention "the last week of the campaign" but that is said off camera and disagrees with the final transcript.

                                                                                                                  [–]Seanpkd30 15 ポイント16 ポイント  (5子コメント)

                                                                                                                  A minute or two later he is talking about Sweden and their extradition policies.

                                                                                                                  He said "We know they refused to say they will not extradite me to the United States and they have extradited 100 percent of people that the U.S. has requested since at least 2000. So over the last 15 years every single person the U.S. has tried to extradite from Sweden has been extradited."

                                                                                                                  I believe it's possible he just miscalculated years, but who knows.

                                                                                                                  コメントをもっと表示する (9 返事)

                                                                                                                    コメントをもっと表示する (1 返事)

                                                                                                                      コメントをもっと表示する (10 返事)

                                                                                                                        [–]onlysimulacrum 51 ポイント52 ポイント  (11子コメント)

                                                                                                                        His blinking in this vid reminds me of that famous clip of a soldier blinking SOS in Morse Code....

                                                                                                                        edit: it was "Torture" he blinked.... https://www.youtube.com/watch?v=BgelmcOdS38

                                                                                                                        [–]Rabbithole48 17 ポイント18 ポイント  (5子コメント)

                                                                                                                        I asked about this long ago, any idea if he blinked anything in Morse ?

                                                                                                                        [–]Ballsdeepinreality 13 ポイント14 ポイント  (2子コメント)

                                                                                                                        Doesn't look like it, you need long and short, only see short. Plus, a short enough message to fit into blinks.

                                                                                                                        SOS for example, ... --- ...

                                                                                                                        コメントをもっと表示する (2 返事)

                                                                                                                          コメントをもっと表示する (5 返事)

                                                                                                                            コメントをもっと表示する (3 返事)

                                                                                                                              [–]crosswalkox 13 ポイント14 ポイント  (4子コメント)

                                                                                                                              Can you explain exactly what this means that the keys don't match?

                                                                                                                              コメントをもっと表示する (46 返事)

                                                                                                                                [–]Symbolic-DeTH 213 ポイント214 ポイント  (5子コメント)

                                                                                                                                holy crap no joke. r/wikileaks is out of there minds right now. Even going as far as saying they have contacted wikileaks and verified its the same team and Assange is fine, BUT WONT PROVIDE PROOF! while at the same second claiming they will remove anything that doesnt provide proof. Fucking crazy

                                                                                                                                [–][削除されました]  (2子コメント)

                                                                                                                                [removed]

                                                                                                                                  [–]Guyote_ 36 ポイント37 ポイント  (0子コメント)

                                                                                                                                  They added like 8 new mods in the days following the embassy internet outage. Perhaps they are also compromised

                                                                                                                                  コメントをもっと表示する (1 返事)

                                                                                                                                    [–]manueslapera 412 ポイント413 ポイント  (27子コメント)

                                                                                                                                    If true, what would this mean?

                                                                                                                                    [–]DoWhile 793 ポイント794 ポイント  (19子コメント)

                                                                                                                                    It means the contents of the file changed from the time they committed to the time they released.

                                                                                                                                    The cause of this could be anything from transmission error to malice.

                                                                                                                                    [–]antibubbles 155 ポイント156 ポイント  (17子コメント)

                                                                                                                                    NO... nobody said the pre-commitment hash was going to be the next insurance file hash.
                                                                                                                                    I don't know why you'd assume they're supposed to be related.

                                                                                                                                    [–]438498967[S] 275 ポイント276 ポイント  (11子コメント)

                                                                                                                                    They seem to have the same names.

                                                                                                                                    https://twitter.com/wikileaks/status/796085225394536448

                                                                                                                                    John Kerry = 2016-11-07_WL-Insurance-US.aes256

                                                                                                                                    UK FCO = 2016-11-07_WL-Insurance-UK.aes256

                                                                                                                                    Ecuador = 2016-11-07_WL-Insurance-EC.aes256

                                                                                                                                    [–]Gonzo_Rick 35 ポイント36 ポイント  (7子コメント)

                                                                                                                                    Maybe it'd be a good idea to hold onto both file sets (making sure not to get them mixed up). In the event of the keys being released, we can open and compare the contents, which could provide knowledge on the current state of Wikileaks. It might behoove you to keep the newer ones in a sandbox or something (particularly if the time comes to open them), in case there's any malware tucked away.

                                                                                                                                    Totally unrelated, but I just became aware of this subreddit. Do you think I should use a throwaway account and VPN for being active here? Or are those precautions only necessary for more sensitive contents/subjects?

                                                                                                                                    [–]test822 40 ポイント41 ポイント  (1子コメント)

                                                                                                                                    Do you think I should use a throwaway account and VPN for being active here?

                                                                                                                                    only if you're going to be dropping some incredibly juicy secret shit for some reason

                                                                                                                                    if you're just discussing stuff that everyone can already access, like this, I wouldn't worry about it

                                                                                                                                    コメントをもっと表示する (5 返事)

                                                                                                                                      コメントをもっと表示する (3 返事)

                                                                                                                                        [–]otakugrey 25 ポイント26 ポイント  (0子コメント)

                                                                                                                                        If they aren't made to match the files they had committed to release, then what would you think the pre-commitment files hashes are supposed to go to instead?

                                                                                                                                        コメントをもっと表示する (4 返事)

                                                                                                                                          コメントをもっと表示する (1 返事)

                                                                                                                                            コメントをもっと表示する (7 返事)

                                                                                                                                              [–]sealfoss 145 ポイント146 ポイント  (3子コメント)

                                                                                                                                              I think we should be pressuring wikileaks to address this. Maybe with a hashtag? Like #WheresJulian

                                                                                                                                              [–]SD7 128 ポイント129 ポイント  (3子コメント)

                                                                                                                                              There has been a number of high level WikiLeaks deaths recently too. John Jones QC – WikiLeaks U.N. lawyer died on April 16th 2016. Michael Ratner – WikiLeaks chief counsel died on May 11th 2016. Seth Rich – Employee of the Democratic National Committee (DNC) was fatally shot on July 10th 2016 and Gavin MacFadyen – WikiLeaks director died October 22nd 2016.

                                                                                                                                              [–]Woodenspurs 37 ポイント38 ポイント  (0子コメント)

                                                                                                                                              HIS NAME WAS SETH RICH

                                                                                                                                              I will never forget that mans sacrifice until the day I die.

                                                                                                                                              コメントをもっと表示する (2 返事)

                                                                                                                                                [–]tlodw 254 ポイント255 ポイント  (24子コメント)

                                                                                                                                                Hi all, came to this trawling r/all. I'm 0% fluent in 100% of the conversations going on here. I do, however, follow all stories I see about Wikileaks + Assange. Problem is, even after quite a bit of googling, I really don't understand the significance of this poast and the resulting comments.

                                                                                                                                                If anyone is willing to do an ELI5 I would really appreciate it! Thanks!

                                                                                                                                                [–]TheKingOfTCGames 173 ポイント174 ポイント  (14子コメント)

                                                                                                                                                basically any file can be reduced to a signature a specified length string of alphanumeric digits that only that file can be reduced to. that means that a file and signature are mathematically connected, a file will always be signed to the same string if they use the same method.

                                                                                                                                                they tweeted out the signature(the small string) before but now when they released the full files they dont match up to the signature when other people try to reduce it.

                                                                                                                                                ergo something fucky is going on.

                                                                                                                                                [–]ItzWarty 30 ポイント31 ポイント  (5子コメント)

                                                                                                                                                only that file can be reduced to

                                                                                                                                                Technically hash collisions are a thing. Here's another way to explain it:

                                                                                                                                                Assume you have hash(myFile) and yourFile; if hash(yourFile) is not equal to hash(myFile), then you have a different file.

                                                                                                                                                A trivial (and poor) hash on sentences would be taking the first letter of the sentence. poorHash("I am a dog") => "I", poorHash("Potato") => "P". "I" is not "P" so clearly the hashs' inputs were different. However, poorHash("I am potato") => "I", so poorHash("I am a dog") is equal to poorHash("I am potato"). That doesn't mean their inputs were identical.

                                                                                                                                                For cryptographic hashes you have much larger inputs and, furthermore, minor deviations in inputs are supposed to result in large changes in outputs (there are other important factors too, but I digress). Even then, if your'e doing e.g. a 512-bit hash, you have 2512 possible outputs max - and you can certainly provide 2512 + 1 inputs which would certainly mean a hash collision - that's known as the pidgeonhole principle.

                                                                                                                                                [–]TheKingOfTCGames 39 ポイント40 ポイント  (3子コメント)

                                                                                                                                                ok there is a mathematically virtual 0% chance for this to happen. but given the level of detail I was explaining at its neither here nor there.

                                                                                                                                                [–]ItzWarty 20 ポイント21 ポイント  (2子コメント)

                                                                                                                                                Perhaps - it depends on whether you believe such cryptographic hashes could be one day broken. Hash mismatches guarantee you have the wrong file - hash matches don't guarantee you have the right file. And then to answer the question above it would be worthwhile to explain things as "hey, if 1 number changed the intermediate math would change and you'd likely get a different result".

                                                                                                                                                コメントをもっと表示する (1 返事)

                                                                                                                                                  コメントをもっと表示する (8 返事)

                                                                                                                                                    [–]suema 158 ポイント159 ポイント  (3子コメント)

                                                                                                                                                    Explanation for literal 5 year olds.

                                                                                                                                                    You can do math to get a fingerprint of data. Or really really dumbed down:

                                                                                                                                                    This is a sentence and I want to fingerprint it. --> TIASAIWTFI

                                                                                                                                                    Say you send the sentence in a letter to your friend. But you think the postman might write something else on it. So you upload the fingerprint (TIASAIWTFI) you calculated to twitter. Everyone can see it, but they have no idea what the original message was. Since your friend also knows how to calculate this fingerprint from the original message, he can take the letter he received and compare the fingerprints.

                                                                                                                                                    If they match, the message is genuine and nobody tampered with it. In reality the hashing algorithm is much more complex, as to avoid hash collisions (two sentences giving the same fingerprint) and the message itself is encrypted.

                                                                                                                                                    What happened here is that WL twitter posted some hashes that don't match some files. Or maybe they're not meant to match those files. Maybe somebody just made a mistake. It's a bit muddy. Assange hasn't been seen for a month. Go buy another box of .22LR and a crate of spam.

                                                                                                                                                    [–]Isophix 20 ポイント21 ポイント  (2子コメント)

                                                                                                                                                    So, every bit of data on a computer is stored as 1s and 0s. No matter the file type, computer language used, etc, in the end, it's all 1s and 0s. What "hashing" does is takes that long line of 1s and 0s, and puts it through an algorithm. The algorithm spits out a relatively short "signature" - the hash. Now, when someone sends you a file, you use the same algorithm on that file. If you get the same signature, it is the same file.

                                                                                                                                                    In this case, Wikileaks has taken all the very damaging information it has, and put it in a file. This file is encrypted, so if you have it, you can't use it without the decryption key. However, encrypted doesn't matter to the hashing algorithm. It takes the 1s and 0s of the encrypted data, and makes a signature.

                                                                                                                                                    What has happened is the "insurance" file Wikileaks has sent out doesn't match signatures with what they said they would send out this time. That means the file has changed. It literally could be a period added in a text file. It could be that a file has been added into the bundle. It could be a legit change; it could be that Wikileaks has been overtaken by a nefarious agent.

                                                                                                                                                    The reason it is concerning is: Generally, when you are ensuring the integrity of information, you DON'T change what you have been doing. If you say your "insurance file" is going to contain XYZ, you send out XYZ. Anything different puts the integrity of that info into question.

                                                                                                                                                    OPs point is that all of the previous releases of insurance files have matched the declared hashes. This one - does not. It begs the question: Has Wikileaks been compromised?

                                                                                                                                                    コメントをもっと表示する (2 返事)

                                                                                                                                                      [–]Flechetta03 176 ポイント177 ポイント  (18子コメント)

                                                                                                                                                      https://np.reddit.com/r/WikiLeaks/comments/5bvbkg/please_hear_me_out/

                                                                                                                                                      No one would listen...

                                                                                                                                                      [–]Natanael_L 80 ポイント81 ポイント  (14子コメント)

                                                                                                                                                      The submission text has been removed now. What was it?

                                                                                                                                                      [–]kousi 152 ポイント153 ポイント  (10子コメント)

                                                                                                                                                      Let's assume that WL and Assange had a very damaging info on HRC. would the Obama administration allow it to come out?

                                                                                                                                                      If you follow the latest events carefully one cannot negate the option that JA is in Guatanamo.

                                                                                                                                                      Not the video, not the conference call none of these.

                                                                                                                                                      For instance The DNC leak as PHASE 3 does not make any sense.

                                                                                                                                                      Please read: http://survivalacres.com/blog/julian-assange-is-probably-dead-captured-or-escaped/

                                                                                                                                                      And remember that minority reports are what WL is all about.

                                                                                                                                                      [–]chaosmosis 40 ポイント41 ポイント  (2子コメント)

                                                                                                                                                      There are a lot of reasons they would have to potentially stop him from releasing important information. Why narrow in on HRC?

                                                                                                                                                      [–]kousi 11 ポイント12 ポイント  (0子コメント)

                                                                                                                                                      Ask the guy who posted it, I just happened in here and pasted his missing text.

                                                                                                                                                      コメントをもっと表示する (1 返事)

                                                                                                                                                        コメントをもっと表示する (7 返事)

                                                                                                                                                          コメントをもっと表示する (3 返事)

                                                                                                                                                            [–]Herculius 14 ポイント15 ポイント  (0子コメント)

                                                                                                                                                            I kept trying too. But I only have so much time.... and nobody cared.

                                                                                                                                                            コメントをもっと表示する (2 返事)

                                                                                                                                                              [–]majorchamp 56 ポイント57 ポイント  (0子コメント)

                                                                                                                                                              All previous insurance files match: wlinsurance-20130815-A.aes256 [5],[6]
                                                                                                                                                              6688fffa9b39320e11b941f0004a3a76d49c7fb52434dab4d7d881dc2a2d7e02
                                                                                                                                                              wlinsurance-20130815-B.aes256 [5], [7]
                                                                                                                                                              3dcf2dda8fb24559935919fab9e5d7906c3b28476ffa0c5bb9c1d30fcb56e7a4
                                                                                                                                                              wlinsurance-20130815-C.aes256 [5], [8]
                                                                                                                                                              913a6ff8eca2b20d9d2aab594186346b6089c0fb9db12f64413643a8acadcfe3
                                                                                                                                                              insurance.aes256 [9], [10]
                                                                                                                                                              cce54d3a8af370213d23fcbfe8cddc8619a0734c

                                                                                                                                                              Where have they ever posted the hashes for those 4 insurance files?

                                                                                                                                                              Show me.

                                                                                                                                                              I found this...but that isn't on wikileaks domain http://download.cabledrum.net/insurance/2013-08-17/checksum.txt

                                                                                                                                                              [–]gunguolf 48 ポイント49 ポイント  (24子コメント)

                                                                                                                                                              Please, someone ELI5

                                                                                                                                                              [–]polaarbear 86 ポイント87 ポイント  (23子コメント)

                                                                                                                                                              A while back WikiLeaks tweeted several hashtags of files as a "precommitment" to release that data. The hashtags are basically a "fingerprint" of the file.

                                                                                                                                                              Today they released those files but the hashtags don't match. Since the "fingerprint" doesn't match, it means somebody altered or doctored the files inbetween the two dates.

                                                                                                                                                              [–]theidleidol 170 ポイント171 ポイント  (2子コメント)

                                                                                                                                                              hastags

                                                                                                                                                              Nope. Hashes. Hashtags are what you use on twitter

                                                                                                                                                              [–]Timothy_Claypole 36 ポイント37 ポイント  (0子コメント)

                                                                                                                                                              Are you telling me your hashes aren't all #election2016 ?

                                                                                                                                                              It takes ages for me to work out those collisions. Especially as I use pen and paper.

                                                                                                                                                              コメントをもっと表示する (1 返事)

                                                                                                                                                                コメントをもっと表示する (20 返事)

                                                                                                                                                                  [–]twatchops 50 ポイント51 ポイント  (12子コメント)

                                                                                                                                                                  As side from tftp uploads...this is the first time I've seen hashes put to good use.

                                                                                                                                                                  [–]autotom 32 ポイント33 ポイント  (3子コメント)

                                                                                                                                                                  They're very important in theory

                                                                                                                                                                  [–]lolidaisuki 60 ポイント61 ポイント  (2子コメント)

                                                                                                                                                                  They are very important in practice as well, without them we might as well not use TLS and other forms of encryption at all.

                                                                                                                                                                  [–]pullpush 11 ポイント12 ポイント  (1子コメント)

                                                                                                                                                                  Or storing a password fingerprint without actually storing the password

                                                                                                                                                                  [–]ismtrn 22 ポイント23 ポイント  (1子コメント)

                                                                                                                                                                  I bet that pretty much every piece of software you are using is using several hash maps internally. They are one of the most commonly used data structures and they are based around hashes (although not cryptographic ones)

                                                                                                                                                                  コメントをもっと表示する (6 返事)

                                                                                                                                                                    [–]Auntfanny 40 ポイント41 ポイント  (2子コメント)

                                                                                                                                                                    Media is reporting that the Swedish prosecuter has just finished two days of questioning in person at the Ecuadorian embassy. There was also an Ecuadorian prosecutor present. The Swedish prosecuter travelled to the UK to conduct the interview.

                                                                                                                                                                    If Assange is not in the embassy this is hugely damaging PR for Sweden and Ecuador because they will effectively been lying to the public for the past 2 days. I can't see them being this complicit in any operation that ends with the public finding out Assange is dead or in US custody. It will be particularly damaging to the Swedish judiciary given Assange's assertions that the allegations against him were a ruse to get him out of the U.K. and a forward extradition to the US.

                                                                                                                                                                    It will be interesting to see how this plays out, but I'm hoping I'm right and Assange is just a victim of an Internet ban rather than anything more nefarious.

                                                                                                                                                                    [–]eirunn 30 ポイント31 ポイント  (0子コメント)

                                                                                                                                                                    From 8chan:

                                                                                                                                                                    There are other discrepancies.

                                                                                                                                                                    The torrents aren't signed (via Verisign):

                                                                                                                                                                    _US

                                                                                                                                                                    d8:announce33:udp://tracker.opentrackr.org:133713:announce-listll33:udp://tracker.opentrackr.org:1337el34:udp://tracker.coppersurfer.tk:6969el40:udp://tracker.leechers-paradise.org:6969el21:udp://zer0day.ch:1337el23:udp://explodie.org:6969ee7:comment28:WL Insurance (US) 2016-11-0710:created by13:mktorrent 1.04:infod6:lengthi3188919835e4:name33:2016-11-07_WL-Insurance_US.aes25612:piece lengthi2097152e6:pieces30420:

                                                                                                                                                                    _UK

                                                                                                                                                                    d8:announce33:udp://tracker.opentrackr.org:133713:announce-listll33:udp://tracker.opentrackr.org:1337el34:udp://tracker.coppersurfer.tk:6969el40:udp://tracker.leechers-paradise.org:6969el21:udp://zer0day.ch:1337el23:udp://explodie.org:6969ee7:comment28:WL Insurance (UK) 2016-11-0710:created by13:mktorrent 1.04:infod6:lengthi1394333337e4:name33:2016-11-07_WL-Insurance_UK.aes25612:piece lengthi2097152e6:pieces13300:

                                                                                                                                                                    _EC

                                                                                                                                                                    d8:announce33:udp://tracker.opentrackr.org:133713:announce-listll33:udp://tracker.opentrackr.org:1337el34:udp://tracker.coppersurfer.tk:6969el40:udp://tracker.leechers-paradise.org:6969el21:udp://zer0day.ch:1337el23:udp://explodie.org:6969ee7:comment28:WL Insurance (EC) 2016-11-0710:created by13:mktorrent 1.04:infod6:lengthi545315877e4:name33:2016-11-07_WL-Insurance_EC.aes25612:piece lengthi2097152e6:pieces5220:

                                                                                                                                                                    There are files in the file.wikileaks.org/torrent directory that have been changed.

                                                                                                                                                                    For one example, go to https://file.wikileaks.org/torrent/

                                                                                                                                                                    Ctr+F '09-Nov-438498967 06:00', which is not the format the use for dates.

                                                                                                                                                                    Look at the file. You can download a copy of this file from Oct 21 2016 here: https://archive.org/details/SaudiArabiaDatabaseFromWikileaks

                                                                                                                                                                    and from June 2015 here: https://archive.is/TdJ4t

                                                                                                                                                                    You can then use the 'diff' to compare the files. The output is 'the binaries differ'.

                                                                                                                                                                    The encrypted files are not 'salted' either. I all previous files were salted.

                                                                                                                                                                    [–][削除されました]  (48子コメント)

                                                                                                                                                                    [deleted]

                                                                                                                                                                      [–]MaunaLoona 191 ポイント192 ポイント  (19子コメント)

                                                                                                                                                                      https://i.imgur.com/Gfdrot2.png

                                                                                                                                                                      https://www.ceddit.com/r/IAmA/comments/5c8u9l/we_are_the_wikileaks_staff_despite_our_editor/d9vtmh1/?context=3

                                                                                                                                                                      Wikileaks has not signed a single document with their pgp signature, since Oct 16. This would be an easy task that would confirm their identity. It is, after all, the reason they established a pgp key, to begin with. A simple pic of Sarah uploaded to imgur is not a rigorous task. The mindless shitposters manage to make it happen every few seconds. The Twitter has had quite a new "view" since Oct 16. Wikileaks used to just leak, without an attached opinion, or hype. The file sizes for the podesta dumps do not coincide with the original announcement by WL. The interview with RT had no dialogue, on Assange's part, indicating the interview was recent. I firmly believe their Twitter has been compromised, as well as their domain. On October 16, there were hashes being tweeted like we would expect from a "dead man's switch'

                                                                                                                                                                      [–]SquareWheel 34 ポイント35 ポイント  (26子コメント)

                                                                                                                                                                      I don't know who you're quoting, but reddit mods are not at all employees.

                                                                                                                                                                      [–]No8145 46 ポイント47 ポイント  (16子コメント)

                                                                                                                                                                      The Iama sub has been run by paid employees before. I'm not sure what the situation is now though.

                                                                                                                                                                      [–]Natanael_L[M] 29 ポイント30 ポイント  (0子コメント)

                                                                                                                                                                      I can attest to that

                                                                                                                                                                      コメントをもっと表示する (8 返事)

                                                                                                                                                                        コメントをもっと表示する (1 返事)

                                                                                                                                                                          [–]eirunn 12 ポイント13 ポイント  (0子コメント)

                                                                                                                                                                          Saw these on Imgur: https://imgur.com/gallery/Xv46v

                                                                                                                                                                          Not sure if relevant to this or not. Neither is the uploader.

                                                                                                                                                                          [–][削除されました]  (12子コメント)

                                                                                                                                                                          [deleted]

                                                                                                                                                                            [–]438498967[S] 41 ポイント42 ポイント  (11子コメント)

                                                                                                                                                                            People are looking for the keys for the previous insurance files in the blockchain.

                                                                                                                                                                            [–]mellowmarcos 27 ポイント28 ポイント  (0子コメント)

                                                                                                                                                                            RIP Julian Assange. No one has seen him recently. If there is no actual confirmation from him about what's going on soon, then it's rational to say he is tucked away in a hole somewhere.

                                                                                                                                                                            [–]Natanael_L 51 ポイント52 ポイント  (12子コメント)

                                                                                                                                                                            Maybe those public files aren't what the hashes were meant for?

                                                                                                                                                                            [–]438498967[S] 73 ポイント74 ポイント  (10子コメント)

                                                                                                                                                                            They seem to have the same names.

                                                                                                                                                                            https://twitter.com/wikileaks/status/796085225394536448

                                                                                                                                                                            John Kerry = 2016-11-07_WL-Insurance-US.aes256

                                                                                                                                                                            UK FCO = 2016-11-07_WL-Insurance-UK.aes256

                                                                                                                                                                            Ecuador = 2016-11-07_WL-Insurance-EC.aes256

                                                                                                                                                                            [–]admax88 96 ポイント97 ポイント  (7子コメント)

                                                                                                                                                                            Uhh do they?

                                                                                                                                                                            One is "John Kerry", the other is "2016-11-07_WL-Insurance-US.aes256"

                                                                                                                                                                            Just because John Kerry is american doesn't mean the entire insurance file is about him.

                                                                                                                                                                            The have related names, but I wouldn't say they have the "same names"

                                                                                                                                                                            [–]Treebeezy 24 ポイント25 ポイント  (0子コメント)

                                                                                                                                                                            How are these names the same? Similar, sure. But they are not the same.

                                                                                                                                                                            コメントをもっと表示する (1 返事)

                                                                                                                                                                              コメントをもっと表示する (1 返事)

                                                                                                                                                                                [–]Todomas 12 ポイント13 ポイント  (5子コメント)

                                                                                                                                                                                Does this indicate that some of the emails could have been forged or faked? or something else completely?

                                                                                                                                                                                [–]Natanael_L 29 ポイント30 ポイント  (1子コメント)

                                                                                                                                                                                The released DNC emails? They had DKIM signatures which are independently verifiable.

                                                                                                                                                                                [–]zombiesingularity 15 ポイント16 ポイント  (0子コメント)

                                                                                                                                                                                No, it would just mean WikiLeaks has been taken over by someone/something that's not actually WikiLeaks.

                                                                                                                                                                                コメントをもっと表示する (2 返事)

                                                                                                                                                                                  [–]d4rch0n 62 ポイント63 ポイント  (4子コメント)

                                                                                                                                                                                  Does anyone know what block mode of operation was used, since it just says AES256 at the end?

                                                                                                                                                                                  What I'm wondering is if they used something like CBC and it's possible the bad guys figured out what plaintext he had, then mutated the encrypted documents to include something malicious using AES+CBC malleability, then reuploaded them.

                                                                                                                                                                                  If the hashes don't match I wouldn't open the documents and read them.

                                                                                                                                                                                  [–]mrdotkom 12 ポイント13 ポイント  (2子コメント)

                                                                                                                                                                                  Can't open them without the private key anyway

                                                                                                                                                                                  [–]438498967[S] 24 ポイント25 ポイント  (1子コメント)

                                                                                                                                                                                  You can check if they are salted. Files wlinsurance-20130815-A.aes256, wlinsurance-20130815-B.aes256, wlinsurance-20130815-C.aes256 and insurance.aes256 were salted. The latest ones don't seem to be. You can check by doing:

                                                                                                                                                                                  strings wlinsurance-20130815-C.aes256 | head -c 8

                                                                                                                                                                                  The output will be "Salted__".

                                                                                                                                                                                  コメントをもっと表示する (1 返事)

                                                                                                                                                                                    [–]ExgeniusExventions 78 ポイント79 ポイント  (10子コメント)

                                                                                                                                                                                    wonder if he had a clinton style accident.

                                                                                                                                                                                    [–]Lectricblues 23 ポイント24 ポイント  (2子コメント)

                                                                                                                                                                                    I just watched the RT interview video on YouTube dated November 5, 2016. At the 19:12 mark he says that Sweden extradites 100% of US requests since the year 2000. He then says "15 years ago". No, not a big deal but interesting slight miscalculation by ~ 1 year.

                                                                                                                                                                                    [–]Loudlech5 10 ポイント11 ポイント  (1子コメント)

                                                                                                                                                                                    But literally in the first two minutes (watch @ exactly 2:00) he says they've been publishing the Podesta emails so it's silly to speculate it's from a year ago when those emails weren't even on anyone's radar, so it's just misspeaking or something such.

                                                                                                                                                                                    [–]Kougeru 11 ポイント12 ポイント  (0子コメント)

                                                                                                                                                                                    People also often round to the nearest 0 or 5 when discussing years. "20 years ago...15 years ago..." ect

                                                                                                                                                                                    コメントをもっと表示する (192 返事)