October 2019 - cypherpunks - lists.cpunks.org

CNN: WhatsApp had a bug that let hackers take over phones with a GIF
by jim bell 07 Oct '19

07 Oct '19

CNN: WhatsApp had a bug that let hackers take over phones with a GIF. https://www.cnn.com/2019/10/07/tech/whatsapp-gif-bug-trnd/index.html

1 0

AMD SME (Secure Memory Encryption, Memory Guard) in Ryzen Pro and Epyc CPUs, Intel Cuts Prices
by grarpamp 07 Oct '19

07 Oct '19

https://www.cnet.com/news/intel-dramatically-cuts-prices-of-top-end-i9-gami… Intel been cutting prices across all lines, typically in topend parts, in response to AMD's new lead in hardware. Shows customers of (and vocally supporting of) monopolie$ like Intel just how hard they themselves have been getting raped by monopolies over the years. https://arstechnica.com/gadgets/2019/10/amd-ryzen-pro-3000-series-desktop-c… https://www.amd.com/en/ryzen-pro Could solve ColdBoot attacks, but only if encryption keys are not accessible via solder pin readout or proprietary or OS software access... Monday, AMD announced Ryzen Pro 3000 desktop CPUs would be available in Q4 2019. This of course raises the question, "What's a Ryzen Pro?" The business answer: Ryzen Pro 3000 is a line of CPUs specifically intended to power business-class desktop machines. The Pro line ranges from the humble dual-core Athlon Pro 300GE all the way through to Ryzen 9 Pro 3900, a 12-core/24-thread monster. The new parts will not be available for end-user retail purchase and are only available to OEMs seeking to build systems around them. >From a more technical perspective, the answer is that the Ryzen Pro line includes AMD Memory Guard, a transparent system memory encryption feature that appears to be equivalent to the AMD SME (Secure Memory Encryption) in Epyc server CPUs. Although AMD's own press materials don't directly relate the two technologies, their description of Memory Guard -- "a transparent memory encryption (OS and application independent DRAM encryption) providing a cryptographic AES encryption of system memory" -- matches Epyc's SME exactly. AMD Memory Guard is not, unfortunately, available in standard Ryzen 3000 desktop CPUs. If you want to build your own Ryzen PC with full memory encryption from scratch, you're out of luck for now.

2 4

The broken record: Why Barr’s call against end-to-end encryption is nuts | Ars Technica
by jim bell 06 Oct '19

06 Oct '19

https://arstechnica.com/tech-policy/2019/10/the-broken-record-why-barrs-cal… --- SmartNews http://bit.ly/smartnews-app

1 0

shameless pro-Huwaite male encouragement - Legendary Gym transformation
by Zenaan Harkness 06 Oct '19

06 Oct '19

OK, so why is a "look after yourself and tame the world" email better then ignoring the incel mass shooter Joker promotion? Apparently Joke is quite a dark artsy movie, leaving only the storyline and character development a rung or five below 10/10. http://dstormer6em3i4km.onion/stormer-movie-review-joker-10-10-spoiler-free/ So, some inspiration for muh grits: Incel Revenge Fantasy Comes True After Obese Man Loses the Weight and Hits the Gym http://dstormer6em3i4km.onion/incel-revenge-fantasy-comes-true-after-obese-… Now that, is how it's done folks. Create your world already. Nice work lad! No doubt your literal (and impressive) incel transformation achieves ongoing results. Can be done. Reclaim your human form.

1 0

AG Barr: USG Seeks Front Door to Encryption Not Backdoor
by John Young 06 Oct '19

06 Oct '19

Attorney General William P. Barr Delivers Remarks at the Lawful Access Summit https://www.justice.gov/opa/speech/attorney-general-william-p-barr-delivers… "It is also said that the Government is seeking a secretive 'backdoor' to everyone's communications and data. That is false. We are seeking a front door. The heart of the matter is this: Do the security advantages of warrant-proof encryption offered to the individual outweigh the risk posed to the public by that same technology? This is not a decision for the companies to make by themselves. It is a decision for society to make. We think our tech sector has the ingenuity to develop effective ways to provide secure encryption while also providing secure legal access."

3 4

WIRED: A Bug in Popular Android Phones Gives Hackers Full Control
by jim bell 06 Oct '19

06 Oct '19

WIRED: A Bug in Popular Android Phones Gives Hackers Full Control. https://www.wired.com/story/android-smartphone-hacking-fcc-bots-voatz-secur…

3 3

Facialized: Masks and Facepaint are now Felonies in HongKong, Except for Police
by grarpamp 06 Oct '19

06 Oct '19

https://gizmodo.com/hong-kong-announces-ban-on-masks-and-face-paint-that-he… https://twitter.com/austinramzy/status/1180024240034086912 https://www.youtube.com/watch?v=LKaboI74CQM The Hong Kong government is banning masks and face paint in an attempt to stop the pro-democracy protests that have been raging since June. "The new 'emergency' order was announced by Hong Kong leader Carrie Lam at a press conference today and will go into effect at midnight local time, 12:00 pm ET," reports Gizmodo. From the report: The new law bans "any facial covering that is likely to prevent identification," during public demonstrations. Anyone arrested under the new rule will face up to a year in prison and a fine of roughly $3,200 U.S. "We believe that the new law will create a new deterrence effect against masked violent protesters and rioters," Lam said at a press conference that was carried live online. "Hong Kong is not in a state of emergency," Lam assured citizens. "But we are indeed in a location of serious danger." Hong Kong protesters, upset about Beijing's political incursion into the region, wear masks primarily for three reasons. First, protesters want to keep from being identified by cameras around the city that use facial recognition software. Second, the protesters don't want to be identified by police forces on the ground, allowing authorities to target them later when they arrive home. And third, the masks can shield protesters from teargas, which has become a common weapon deployed by police. Lam said at today's press conference that bans on face coverings were "something which has already been introduced in a number of jurisdictions around the world" and defended the move as something that could help to restore peace and order in the region. Lam notes that the new law is exempt for people who need to cover their faces for their jobs. What this means is that police will likely be allowed to wear masks, while the average civilian will not.

2 2

6yrs on: https://www.reddit.com/r/onions/comments/dcdgcg/6_years_ago_today_silk_road_10_was_taken_down/
by b0z0＠SDF.ORG 06 Oct '19

06 Oct '19

Hi all. https://www.reddit.com/r/onions/comments/dcdgcg/6_years_ago_today_silk_road… x b0z0(a)sdf.lonestar.org SDF Public Access UNIX System - http://sdf.lonestar.org

1 0

Tom's Hardware: As CPU Materials Get Thinner, Security Risks Grow - Report
by jim bell 06 Oct '19

06 Oct '19

Tom's Hardware: As CPU Materials Get Thinner, Security Risks Grow - Report. https://www.tomshardware.com/news/cpu-thin-materials-security-risk-silicon,…

2 3

UK-US CLOUD Cross-Spying Act Removes Remaining Protections
by grarpamp 06 Oct '19

06 Oct '19

https://www.cnet.com/news/us-uk-sign-pact-to-share-electronic-evidence-in-c… The US and UK signed an agreement this week that will allow law enforcement officials in both countries to demand tech companies in the other's country to furnish electronic evidence for use in criminal investigations. The agreement is the first approved under the controversial CLOUD Act passed by Congress last year. From a report: The agreement between the two counties "will dramatically speed up investigations by removing legal barriers to timely and effective collection of electronic evidence," the US Justice Department said in a statement. The pact will allow investigators to gain access to data on serious crimes such as terrorism, child sexual abuse and cybercrime without encountering legal obstacles. "Only by addressing the problem of timely access to electronic evidence of crime committed in one country that is stored in another, can we hope to keep pace with 21st Century threats," US Attorney General William Barr said. The CLOUD Act, which stands for Clarifying Lawful Overseas Use of Data Act, updated the rules for criminal investigators who want to see emails, documents and other communications stored on the internet. It also lets the US enter into agreements to send information from US servers to criminal investigators in other countries with limited case-by-case review of requests.

1 0