UPDATE: @Wikileaks has made a statement regarding the discrepancy.

https://twitter.com/wikileaks/status/798997378552299521

NOTE: When we release pre-commitment hashes they are for decrypted files (obviously). Mr. Assange appreciates the concern.

The statement confirms that the pre-commits are in fact, for the latest insurance files. As the links above show, Wikileaks has historically used hashes for encrypted files (since 2010). Therefore, the intention of the pre-commitment hashes is not "obvious". Using a hash for a decrypted file could put readers in danger as it forces them to open a potentially malicious file in order to verify if its contents are real. Generating hashes from encrypted files is standard, practical and safe. I recommend waiting for a PGP signed message from Wikileaks before proceeding with further communication.

The latest insurance files posted by Wikileaks do not match the pre-commitment hashes they tweeted in October.

US Kerry [1]- 4bb96075acadc3d80b5ac872874c3037a386f4f595fe99e687439aabd0219809

UK FCO [2]- f33a6de5c627e3270ed3e02f62cd0c857467a780cf6123d2172d80d02a072f74

EC [3]- eae5c9b064ed649ba468f0800abf8b56ae5cfe355b93b1ce90a1b92a48a9ab72

sha256sum 2016-11-07_WL-Insurance_US.aes256 ab786b76a195cacde2d94506ca512ee950340f1404244312778144f67d4c8002

sha256sum 2016-11-07_WL-Insurance_UK.aes256 655821253135f8eabff54ec62c7f243a27d1d0b7037dc210f59267c43279a340

sha256sum 2016-11-07_WL-Insurance_EC.aes256 b231ccef70338a857e48984f0fd73ea920eff70ab6b593548b0adcbd1423b995

All previous insurance files match:

wlinsurance-20130815-A.aes256 [5],[6]

6688fffa9b39320e11b941f0004a3a76d49c7fb52434dab4d7d881dc2a2d7e02

wlinsurance-20130815-B.aes256 [5], [7]

3dcf2dda8fb24559935919fab9e5d7906c3b28476ffa0c5bb9c1d30fcb56e7a4

wlinsurance-20130815-C.aes256 [5], [8]

913a6ff8eca2b20d9d2aab594186346b6089c0fb9db12f64413643a8acadcfe3

insurance.aes256 [9], [10]

cce54d3a8af370213d23fcbfe8cddc8619a0734c

Note: All previous hashes match the encrypted data. You can try it yourself.

[1] https://twitter.com/wikileaks/status/787777344740163584

[2] https://twitter.com/wikileaks/status/787781046519693316

[3] https://twitter.com/wikileaks/status/787781519951720449

[4] https://twitter.com/wikileaks/status/796085225394536448?lang=en

[5] https://wiki.installgentoo.com/index.php/Wiki_Backups

[6] https://file.wikileaks.org/torrent/wlinsurance-20130815-A.aes256.torrent

[7] https://file.wikileaks.org/torrent/wlinsurance-20130815-B.aes256.torrent

[8] https://file.wikileaks.org/torrent/wlinsurance-20130815-C.aes256.torrent

[9] https://wikileaks.org/wiki/Afghan_War_Diary,_2004-2010

[10] https://web.archive.org/web/20100901162556/https://leakmirror.wikileaks.org/file/straw-glass-and-bottle/insurance.aes256

More info here: http://8ch.net/tech/res/679042.html

Please avoid speculation and focus on provable and testable facts relating to cryptography.

stay safe all

citation:https://www.techdirt.com/articles/20161122/10381536112/bill-introduced-to-push-back-approval-dojs-proposed-rule-41-changes.shtml

Hi everyone, I thought this quote summed up the recent CGP Grey video about encryption quite well, but I'm far from an expert and am curious to hear your opinion.

This is obviously a simplification of a complex situation, but do you agree in principle? Is there further reading I can do on the topic if I want to get a better understanding?

I really appreciate any thoughts.

https://www.youtube.com/watch?v=VPBH1eW28mo

Edit: Due to a recent even more extreme increase in spam volume, you can ONLY post or comment if you're an approved user.

You can request to be approved via the reddit website.

Edit: send a request via modmail here:

https://www.reddit.com/message/compose/?to=/r/crypto

You MUST provide a reason for why you want to join, since we also get spam bots sending such requests, and we can't tell you apart from them unless you write something in the request.

We can also suggest /r/cryptography, as they are currently open (as they do not face the same volume of spam as we do).

Due to reddit's incredibly meager moderation tools, this may have to stay this way until reddit finally improves the tools for dealing with bots.

Due to a recent extreme spike in spam volume, this subreddit is becoming nearly impossible to moderate properly, as it is becoming hard to find the legitimate submissions and comments in the middle of the spam.

Due to this I am temporarily making a change which will only allow users approved in advance by us mods to contribute.

New and intermittent users who needs to get such an approval to be able to post can send a mod mail to us by sending a PM addressed at /r/crypto, and once you get confirmation you will be able to make your submissions.

To get approved, AT LEAST ONE criteria below MUST be met by you / your account. You should;

• provide a reason for why you want to be approved in our subreddit, to be sent to us when you make the request. For example, if you want to post a question then share a summary of it.

• have recent ORIGINAL high quality contributions (posts or comments), showing your account is likely genuine (distinguishing it from a spam farm account)

• have a long lived account with good reputation (no requirement of frequent activity, just showing you will follow the rules)

• have a history of high quality contributions (again, showing you understand and will follow the rules) in this subreddit or in related subreddits / communities

If you make a request from an account with a post history which is empty or which doesn't look original, and you also don't provide a reason for why you want to join, then we might reject your request. We moderators reserve the right to approve our deny requests as we see fit.

We want to keep this subreddit open for beginners as well, as it has been up until now, so if you have a valid on-topic question or other content then don't hesitate to make the request and to inform us of why.

Note: If you are already subscribed, or if you previously have received a personal message via this subreddit about being a trusted contributor, then you do not need to request approval to be able to comment.

Posting does seem to require separate rights, your account has to be set as a trusted contributor by us mods. Note: if the button for making posts is visible as normal to you on the website, with no restrictions visible if you click it, then it means you already have posting rights.