People in /r/crypto have been discussing the conspiracy theory about Assange not being in whatever embassy he's stuck in. That he's in cahoots with the Russian government after they've threatened to "destroy" WikiLeaks due to their latest activity back in 2010, I think. A lot of such stuff - in a post where a redditor compares (I think it was) SHA256 of the recently released files, which didn't match with the promised sum (meaning that the files have been altered in some way by WikiLeaks). I haven't read the article but figured that the aformentioned was worth sharing, given the title.
According to the thread in question ... "As the links above show, Wikileaks has historically used hashes for encrypted files (since 2010)" - Assange said in an interview with John Pilger Pilger: The people in the United States would like to know does this file contain info about Hillary Clinton? Assange: Well lately I heard a lot of threats from US official and this might be the reason for it,but the answer to your question is yes encrypted file with a dead man’s switch and it is about Hillary Clinton but also it contains info for much more government official around the world! The earlier encrypted files were an insurance policy that presumably contain enough damaging information to prevent whoever they are about from killing Assange and other members of wikileaks. Assange is said to have set up a mechanism where if he dies unexpectedly the keys to decrypt those files will be released. The initial speculation was that those hashes were the signal to release they keys to decrypt the previously released encrypted insurance files. Again from that thread "Using a hash for a decrypted file could put readers in danger as it forces them to open a potentially malicious file in order to verify if its contents are real. Generating hashes from encrypted files is standard, practical and safe." Why do you think they would change the way they used the hashes to a system where anyone who has the encrypted files can verify them to a system where literally no-one except those people with the decryption keys can verify the newly released encrypted files. It doesn't make any sense to me. I'm as skeptical as hell about conspiracy theories but this is very strange. FWIW, the hashes are for unencrypted files, they aren't supposed to match the encrypted files.
Yes but for all their previous insurance releases: ---- No hash for decrypted file contents encrypted file hash of encrypted file <-- anyone can verify ---- Suddenly: hash for decrypted file contents <-- only people with keys can verify encrypted file No hash of encrypted file In the world of intelligence, counter-intelligence and espionage doesn't that strike you as odd?