September 2021 - cypherpunks - lists.cpunks.org

Hacks: iTimed - Cache Attacks on the Apple A10 Fusion SoC
by grarpamp 16 Sep '21

16 Sep '21

https://eprint.iacr.org/2021/464 Cryptology ePrint Archive: Report 2021/464 iTimed: Cache Attacks on the Apple A10 Fusion SoC Gregor Haas and Seetal Potluri and Aydin Aysu Abstract: This paper proposes the first cache timing side-channel attack on one of Apple’s mobile devices. Utilizing a recent, permanent exploit named checkm8, we reverse-engineered Apple’s BootROM and created a powerful toolkit for running arbitrary hardware security experiments on Apple’s in-house designed ARM systems-on-a-chip (SoC). Using this toolkit, we then implement an access-driven cache timing attack (in the style of PRIME+PROBE) as a proof-of-concept illustrator. The advanced hardware control enabled by our toolkit allowed us to reverse-engineer key microarchitectural details of the Apple A10 Fusion’s memory hierarchy. We find that the SoC employs a randomized cache-line replacement policy as well as a hardware-based L1 prefetcher. We propose statistical innovations which specifically account for these hardware structures and thus further the state-of-the-art in cache timing attacks. We find that our access-driven attack, at best, can reduce the security of OpenSSL AES-128 by 50 more bits than a straightforward adaptation of PRIME+PROBE, while requiring only half as many side channel measurement traces. Category / Keywords: implementation / SCA, cache attacks, iPhone Original Publication (in the same form): IEEE HOST Date: received 9 Apr 2021, last revised 14 Aug 2021 Contact author: ghaas at ncsu edu Version: 20210814:150739

1 1

SpyVeillance: All Your Phone Data Bought and Sold
by grarpamp 16 Sep '21

16 Sep '21

https://www.wsj.com/articles/law-enforcements-use-of-commercial-phone-data-…

1 0

We could tell you - but then we'd have to kill you, Dept
by professor rat 16 Sep '21

16 Sep '21

" They're concerned about the constitutionality of your Gestapo tactics - AND FRANKLY SO AM I! " https://twitter.com/gabrielmalor/status/1438252347742883845/photo/1 gabrielmalor ·5h 4th Cir. says the state secrets privilege requires the termination of a lawsuit from Wikimedia seeking a declaration that NSA's alleged collection of communications on the internet backbone violates the First and Fourth Amendments. https://ca4.uscourts.gov/opinions/201191.P.pdf All bad jokes, like the US constitution aside, my understanding of routine NSA/CIA/ FBI/etc lawbreaking is that its done through Hawaii Five Eye. Aussies, Kiwi's, Pommies and Canucks can backdoor hapless yankee's as much as they want. Of course we apply a liberal amount of social-lubricant first - so stop whining about it.

1 0

US NUMBER ONE - most corrupt 'science' on the planet, of course.
by Punk-BatSoup-Stasi 2.0 16 Sep '21

16 Sep '21

http://virusmyth.com/aids/hiv/kmdancing.htm "A segment of our society was experimenting with a lifestyle, and it didn't work. They got sick. Another segment of our pluralistic society, call them doctor/scientist refugees from the failed War on Cancer, or just call them professional jackals, discovered that it did work. It worked for them. They are still making payments on their new BMWs out of your pocket." OK, so that's a pretty interesting piece of information, a 'war on cancer'! The US nazis have been parodying themselves since forever. So yeah, https://en.wikipedia.org/wiki/War_on_Cancer "progress in reducing the overall cancer mortality rate has been disappointing." go figure. But of course as mullis points out, the 10,000 of millions of dollars that the US nazi turds looted from the whole planet through dollar 'inflation' have created millions of corrupt 'scientists', aka thieves.

1 0

Kyle Torpey lies about cypherpunks
by professor rat 15 Sep '21

15 Sep '21

Cypherpunk digital ( or 'electronic' post 2008 ) cash was always part of a bigger idea than any projected or desired cryptocurrency. #Anarchism https://protos.com/bitcoin-what-is-cryptocurrency-cypherpunk-digital-cash-g… To elide that idea is to lie about cypherpunks - and worse - insult listeners intelligence. Its the crypto-ANARCHIST economy, stupid.

1 0

Black Prince of the Emirates
by professor rat 15 Sep '21

15 Sep '21

https://en.wikipedia.org/wiki/Erik_Prince#Private_security_for_the_United_A…

1 0

Ex-U.S. Intelligence Officers Admit to Hacking Crimes in Work for Emiratis
by coderman 15 Sep '21

15 Sep '21

https://www.nytimes.com/2021/09/14/us/politics/darkmatter-uae-hacks.html Ex-U.S. Intelligence Officers Admit to Hacking Crimes in Work for Emiratis They were among a trend of Americans working for foreign governments trying to build their cyberoperation abilities. WASHINGTON — Three former American intelligence officers hired by the United Arab Emirates to carry out sophisticated cyberoperations admitted to hacking crimes and to violating U.S. export laws that restrict the transfer of military technology to foreign governments, according to [court documents made public on Tuesday](https://int.nyt.com/data/documenttools/uae-darkmatter-hackers-char…. The documents detail a conspiracy by the three men to furnish the Emirates with advanced technology and to assist Emirati intelligence operatives in breaches aimed at damaging the perceived enemies of the small but powerful Persian Gulf nation. The men helped the Emirates, a close American ally, gain unauthorized access to “acquire data from computers, electronic devices and servers around the world, including on computers and servers in the United States,” prosecutors said. The three men worked for DarkMatter, a company that is effectively an arm of the Emirati government. They are [part of a trend](https://www.nytimes.com/2019/03/21/us/politics/government-hackers-ns… of former American intelligence officers accepting lucrative jobs from foreign governments hoping to bolster their abilities to mount cyberoperations. Legal experts have said the rules governing this new age of digital mercenaries are murky, and the charges made public on Tuesday could be something of an opening salvo by the government in a battle to deter former American spies from becoming guns for hire overseas. The three men, Marc Baier, Ryan Adams and Daniel Gericke, [admitted violating U.S. laws as part of a three-year deferred prosecution agreement](https://www.justice.gov/opa/pr/three-former-us-intelligence-comm…. If the men comply with the agreement, the Justice Department will drop the criminal prosecution. Each man will also pay hundreds of thousands of dollars in fines. The men will also never be able to receive a U.S. government security clearance. Mr. Baier worked for the National Security Agency unit that carries out advanced offensive cyberoperations. Mr. Adams and Mr. Gericke served in the military and in the intelligence community. DarkMatter had its origins in another company, an American firm called CyberPoint that originally won contracts from the Emirates to help protect the country from computer attacks. CyberPoint obtained approval from the American government to work for the Emiratis, a necessary step intended to regulate the export of military and intelligence services. Many of the company’s employees had worked on highly classified projects for the N.S.A. and other American intelligence agencies. But the Emiratis had larger ambitions and repeatedly pressed CyberPoint employees to exceed the boundaries of the company’s American license, according to former employees. CyberPoint rebuffed requests by Emirati intelligence operatives to try to crack encryption codes and to hack websites housed on American servers — operations that would have run afoul of American law. So in 2015 the Emiratis founded DarkMatter — forming a company not bound by U.S. law — and lured numerous American employees of CyberPoint to join, including the three defendants. DarkMatter employed several other former N.S.A. and C.I.A. officers, according to a roster of employees obtained by The New York Times, some making salaries of hundreds of thousands of dollars a year. The investigation into the American employees of DarkMatter has continued for years, and it had been unclear whether prosecutors would bring charges. Experts cited potential diplomatic concerns about jeopardizing the United States’ relationship with the Emirates — a country that has cultivated close ties to the past several American administrations — as well as worries about whether pursuing the case might expose embarrassing details about the extent of the cooperation between DarkMatter and American intelligence agencies. There is also the reality that American laws have been slow to adapt to the technological changes that have provided lucrative work for former spies once trained to conduct offensive cyberoperations against America’s adversaries. Specifically, the rules that govern what American intelligence and military personnel can and cannot provide to foreign governments were devised for 20th-century warfare — for instance, training foreign armies on American military tactics or selling defense equipment like guns or missiles. They have not addressed the hacking skills honed in some of America’s most advanced intelligence units and sold to the highest bidder. This year, the C.I.A. sent a [blunt letter](https://www.nytimes.com/2021/01/26/us/politics/intelligence-officer… to former officers warning them against going to work for foreign governments. The letter, written by the spy agency’s head of counterintelligence, said it was seeing a “detrimental trend” of “foreign governments, either directly or indirectly, hiring former intelligence officials to build up their spying capabilities.” “I can’t mince words — former C.I.A. officers who pursue this type of employment are engaging in activity that may undermine the agency’s mission to the benefit of U.S. competitors and foreign adversaries,” wrote Sheetal T. Patel, the C.I.A.’s assistant director for counterintelligence. Prosecutors said that the Emirates gradually transitioned its contracts from CyberPoint to DarkMatter, but that at no time did the three men obtain the necessary approvals to provide defense services to DarkMatter. The court documents said that the three men and others worked in DarkMatter’s “Cyber Intelligence Operations,” which gained access to “information and data from thousands of targets around the world.” In interviews, former DarkMatter employees said that Emirati officials were particularly focused on hacking the computer systems of the country’s main rival, Qatar, but that operations were also carried out against Emirati dissidents and journalists. They even [hacked the emails](https://www.nytimes.com/2021/02/06/technology/cyber-hackers-usa.htm… of a Qatari minister communicating with the former first lady Michelle Obama about a planned trip to Qatar. Mr. Baier and his group purchased computer tools from U.S. companies for use in hacking operations, according to prosecutors. In two instances, DarkMatter paid about $750,000 and $1.3 million — illustrating how much American companies stand to gain from selling those dangerous tools to foreign countries and businesses. Prosecutors said the men “expanded the breadth and increased the sophistication” of the operations that DarkMatter was providing to the Emirati government. The efforts took aim at “individual, corporate and government targets by compromising computers and accounts belonging to associates, employees or relatives of the primary targets,” according to court documents. Prosecutors said CyberPoint warned the Americans that it could not support DarkMatter’s intended computer exploitation operations without obtaining the proper U.S. authorization. Two former employees, Lori Stroud and Jonathan Cole, left the company after growing troubled about DarkMatter’s hacking and targeting of American citizens. When the pair, who are married, raised the issue with their superiors, they were sidelined, they said. They left the company in 2017 and began cooperating extensively with the F.B.I.’s investigation. “This is a huge win,” Mr. Cole said in an interview on Tuesday. “This will send a message to former U.S. intelligence operatives working overseas. They should not share U.S. tradecraft with foreign governments.”

2 1

The TIME magazine view of the world died by 1981!
by professor rat 15 Sep '21

15 Sep '21

Arsenic and Old Luce. Walking corpse media doesn't get much deader than this. https://www.coindesk.com/tech/2021/09/15/ethereum-founder-vitalik-buterin-n… Buttface on the cover a fitting end to a shoddy empire

1 0

Batshit crazies fucking big dog now
by professor rat 15 Sep '21

15 Sep '21

https://decrypt.co/80971/far-right-conspiracist-sent-60000-bitcoin-fund-leg… I blame John Young - and his BFF Israel Shamir

1 0

WIPE out the fascist USA
by professor rat 15 Sep '21

15 Sep '21

This type of demogoguery must surely wipe out the fascist United States as surely as it wiped out the fascist Union of Soviet Socialist Republics https://marc.info/?l=cypherpunks&m=99697607707615&w=1 “Surely the larger lesson learned from that day is that other men, all over the world, took inspiration not from the heroism of the rescuers in New York or the passengers flying over Pennsylvania, but from the 19 hijackers - the twisted brilliance of their scheme and their willingness to sacrifice their lives to make a political and, as they saw it, religious statement.” Richard Corliss/Time Magazine

1 0