November 2018 - cypherpunks - lists.cpunks.org

ZeroWedgie: Teaching the world a lesson, global capitalist ruling class -style‼ - [PEACE]
by Zenaan Harkness 20 Nov '18

20 Nov '18

How to teach the world a bloody lesson, authored by your friendly "capitalist" ruling class oligarchs. The 'Hitlergate' Hearings & Rescuing America >From "The Brink Of Fascism" https://www.zerohedge.com/news/2018-11-19/hitlergate-hearings-rescuing-amer… … In other words, the global capitalist ruling classes are about to teach the world a lesson. It is the same basic lesson they have been teaching the world since the dissolution of the Soviet Union. They taught it in the former Yugoslavia. They taught it in Greece, and Iraq, and Libya. They have taught it throughout the Middle East. They are about to teach it throughout the West. The lesson is, resistance to global capitalism is not just futile, it is suicidal. The lesson is, play with identity politics and all that “cultural wars” stuff to your heart’s content, but fuck with global capitalism and we will squash you like a tomato bug. …

1 0

Why is AEX implemented in SGX if Intel implemented x86 securely?
by Ryan Carboni 20 Nov '18

20 Nov '18

The buried lede in NEMESIS and FORESHADOW: For the “case of a fault or external interrupt, the processor executes an Asynchronous Enclave Exit (AEX) procedure that saves the execution context securely in a preallocated state save area inside the enclave, and replaces the CPU registers with a synthetic state to avoid di- rect information leakage to the untrusted ISR.” Seems. Odd. I dunno. Did anyone read x86 documentation?

1 1

For the relevant foreign powers
by Ryan Carboni 19 Nov '18

19 Nov '18

The US government controls nearly all aspects of my life, and assigns people to meet with me every day.

2 1

Cryptocurrency: Yawn
by grarpamp 19 Nov '18

19 Nov '18

https://i.redd.it/05vwyvyj8az11.png

1 0

public Freenet webGUI
by damiengray＠tutanota.com 18 Nov '18

18 Nov '18

Ever wonder what's on Freenet? If you're curious, there's a public FProxy webGUI at http://gel2bzjxrvcmqpji.onion:8888 <http://gel2bzjxrvcmqpji.onion:8888/>. It's part of a darknet on the Tor OnionCat IPv6 overlay network. The other 20 peers are listed here: http://zerobinqmdqd236y.onion/?ceffbd4a36f954e0#UTW52y4tvML8B0Wwu9i3Wl2BhbG… <http://zerobinqmdqd236y.onion/?ceffbd4a36f954e0#UTW52y4tvML8B0Wwu9i3Wl2BhbG…>. It runs in a Debain 8.11 Docker container, which is hosted in a Debain 9.6.0 KVM domain, and that in turn is hosted on a Ubuntu 18.10 KVM VPS. Iptables rules at VPS and KVM domain levels block all Internet access except through Tor and OnionCat.I'll check it periodically. If someone has broken it, I'll restart the Docker container. If someone has managed to break the KVM domain, I'll restore that from backup. And if someone has gone the extra mile to break the VPS, I'll restore that from backup. This may seem bizarre to privacy lovers. I mean, I could be logging everything! But the point is providing easy-to-use access to Freenet that's secured from third parties. If you decide that it's worth the hassle, I recommend running your own node, connecting through OnionCat IPv6 peers. Or through I2P GarlicCat peers, if you like. While I could be logging everything, that's arguably more-or-less irrelevant, because Tor renders you and the node mutually anonymous. Not perfectly anonymous, true. But there's arguably little risk, unless you and/or the node have been targeted. Just be prudent. Especially be prudent about downloading files from the node. I recommend using Whonix, on a machine with full-disk encryption. Or Tails, with encrypted USB storage.

2 1

X86 dispatch contention vulnerability
by Ryan Carboni 17 Nov '18

17 Nov '18

While many x86 implementation vulnerabilities in the past involve either electromagnetic emissions or cache timing attacks, I have not read anything about instruction dispatch contention. According to anger fog’s research, Intel’s implementation of the x86 instruction set does not dispatch more than three of a single instruction, and it has been so for a long time. Irregardless of their design decisions for instruction dispatch, this provides a side channel in which two cooperating processes operating on the same core can conduct half-duplex communication at the rate of 2 bits per cycle by one process attempting to compete with another process for the same capacity for dispatches over a single instruction (0, 1, 2, 3). While I do not have the resources to know how x86 processors handles dispatch contention issues, if it is handled in a regular and non-random manner, it would reach that theoretical level of severity. This violates certain access controls assumed to be imposed by the kernel. I suppose I can’t collect my quarter million dollar prize if I publish this to the world?

4 11

Redefining the Kilogram
by jim bell 17 Nov '18

17 Nov '18

https://www.engadget.com/2018/11/16/kilogram-officially-redefined/ Today, scientists voted to change the definition of the kilogram as well as three other units of measurement -- the ampere, the kelvin and the mole. The vote took place at the General Conference on Weights and Measures in Versailles, France and the new definitions will be based on "what we call the fundamental constants of nature," as Estefanía de Mirandés of the International Bureau of Weights and Measures (BIPM) told Science News, instead of the less precise definitions these measurements are currently tied to. The kilogram, for example, is defined by a physical cylinder known as Le Grand K that's stored in a vault outside of Paris. These redefinitions have been in the works for some time. "This is the most important decision that the BIPM has made in maybe 100 years, which may be a slight exaggeration, but at least since 1960 when they adopted the International System of Units," Terry Quinn, emeritus director of the BIPM, told Engadget last year. And while the changes won't necessarily be reflected in your day to day life, they'll help scientists make more accurate measurements going forward. [end of quote] Jim Bell

1 0

Re: X86 dispatch contention vulnerability CRM:0461068385
by Ryan Carboni 17 Nov '18

17 Nov '18

Apple is a better company than than Microsoft. I ask you this: how does Microsoft handle wiretap requests? How does Apple handle wiretap requests? Does Microsoft sign any DLLs that is asked of them? It is curious that no journalist talks about common procedure. No doubt this “attacker” is defined the same as according to citizenlab someone acting without “any legal authorization”. You dogs can smirk behind your laws, and overlook those violate those laws in a way pleasing to you, so I ask of the Lord to strike down an Azure datacenter by what cannot be attributed to any other power! On Thursday, November 15, 2018, Microsoft Security Response Center < secure(a)microsoft.com> wrote: > Hello, > > Thank you for contacting the Microsoft Security Response Center (MSRC). In > order to investigate your report I will need a valid proof of concept (POC) > ideally with images or video, the detailed steps to reproduce the problem, > and how an attacker could use it to exploit another user. > > > When ready, submit a new email to secure(a)microsoft.com without a CRM > number in the subject line. Please include: > > - Relevant information previously provided in your initial report > - Detailed steps required to consistently reproduce the issue > - Short explanation on how an attacker could use the information to > exploit another user remotely > - Proof-of-concept (POC), such as a video recording, crash reports, > screenshots, or relevant code samples > > Regards, > > Tina > MSRC > > > > ------------------- Original Message ------------------- > *From:* ryacko(a)gmail.com > *Received:* Wed Nov 14 2018 09:34:48 GMT-0800 (Pacific Standard Time) > *To:* <Microsoft Security Response Center>; Microsoft Security Response > Center; Microsoft Security Response Center > *Cc:* cypherpunks(a)lists.cpunks.org > *Subject:* X86 dispatch contention vulnerability CRM:0461068385 > > While many x86 implementation vulnerabilities in the past involve either > electromagnetic emissions or cache timing attacks, I have not read anything > about instruction dispatch contention. According to anger fog’s research, > Intel’s implementation of the x86 instruction set does not dispatch more > than three of a single instruction, and it has been so for a long time. > Irregardless of their design decisions for instruction dispatch, this > provides a side channel in which two cooperating processes operating on the > same core can conduct half-duplex communication at the rate of 2 bits per > cycle by one process attempting to compete with another process for the > same capacity for dispatches over a single instruction (0, 1, 2, 3). While > I do not have the resources to know > x86 processors handles dispatch contention issues, if it is handled in a > regular and non-random manner, it would reach that theoretical level of > severity. > > This violates certain access controls assumed to be imposed by the kernel. > > I suppose I can’t collect my quarter million dollar prize if I publish > this to the world? >

1 0

Cryptocurrency: Voluntary Japan - Talks with Bitcoin.com re Bitcoin Cash BCH, Voluntaryism
by grarpamp 16 Nov '18

16 Nov '18

>> Ha. coin fucking base is one of the worst if not the worst cancer in the >> 'cryptocurrency space'. > Gemini is also now pumping their own centralized USDT-alike > shitcoin called GUSD that all the retards are rushing in droves to accept. > https://gemini.com/dollar/ Here's references to the Goldman Sachs Circle Coinbase USDC shitcoin scam, along with a few other fake "stablecoin" scams USDT, USDC, GUSD, TUSD, PAX ... https://old.reddit.com/r/CryptoCurrency/search?q=usdc&restrict_sr=on https://old.reddit.com/r/CryptoCurrency/search?q=stablecoin&restrict_sr=on Remember, "stability" in early days is illogical and unexpected, anyone pushing such coins is as gravely suspect as the coins themselves... such coins being centralized, controlled, censored, reported, anti freedom, anti privacy, etc. Note that there are some distributed cryptocurrencies whose consensus protocol tries doing things like encouraging spending, holding, or other "beneficial" behaviours... by timelocking, vaporizing, rewarding, or other mechanisms over users utxo's, contracts, transactions, etc. You can search and post links to those artificial influence coins if you want. There's also category of contract pegs like DAI, general form of which might be considered coin index funds, derivatives, etc. Once you desire beyond a simple digital cash, things get increasingly more complex and likely to fail. Doesn't mean you can't play them for what they're worth.

1 0

Wikileak's Assange Seemingly Indicted
by grarpamp 16 Nov '18

16 Nov '18

https://www.washingtonpost.com/world/national-security/julian-assange-has-b… Democracy Now Coverage https://www.youtube.com/watch?v=QLtK3_JxYKY OP's https://twitter.com/SeamusHughes/status/1063232297674162176 https://pacer-documents.s3.amazonaws.com/179/399086/18919235200.pdf https://www.iamwikileaks.org/ https://justice4assange.com/ https://twitter.com/WikiLeaks https://twitter.com/AssangeDefence (formerly @JulianAssange) https://twitter.com/AssangeLegal https://twitter.com/Unity4J #FreeAssange

1 0