June 2022 - cypherpunks - lists.cpunks.org

[spam][crazy][spam] spamming a mailing list
by Undiscussed Horrific Abuse, One Victim of Many 21 Jun '22

21 Jun '22

ok what is useful to spam here i have a couple behaviors that are a little hard to do, that aren't this other than that i'm not sure what to do, but i seem able to post to this list

1 0

Fwd: Your Freedom of Information Law (FOIL) Request FOIL-2022-090440-017607
by Gunnar Larson 21 Jun '22

21 Jun '22

They keep delaying. ---------- Forwarded message --------- From: <Lisa.Derrick(a)dfs.ny.gov> Date: Tue, Jun 21, 2022, 4:29 PM Subject: Your Freedom of Information Law (FOIL) Request FOIL-2022-090440-017607 To: <G(a)xny.io> Good afternoon, Attached please find correspondence from the NYS Department of Financial Services, pertaining to your FOIL request. Thank you. Tracking Number:FOIL-2022-090440-017607

1 0

Re: Syrian War
by zeynep＠keemail.me 21 Jun '22

21 Jun '22

> And more, more......It's just part of the money he stole.Of course America loves Erdoğan > 2001 : (before Erdoğan) 1$ = 1.2 Turkish Lira (The lira is continually losing value, the deficit is growing and economic uncertainty is increasingly a problem for large sections of the population.) Now : 1$ : 17.34 Turkish Lira Tomorrow (probably) : 1$ : 18 Turkish Lira

1 0

Syrian War
by zeynep＠keemail.me 21 Jun '22

21 Jun '22

A boyfriend sent me this episode of this Turkish series, which was shot in 2005.This episode was filmed in 2005 https://youtu.be/VIexrAN7MgQ : "1:13:40" He said (film character) :They will confuse Syria. This will cause them to enter the country, they will start a civil war there.After Syria, they will confuse Iran..... I've been thinking since my friend shared this series scene with me. How is that possible?

2 2

[data science] EleutherAI
by Undiscussed Horrific Abuse, One Victim of Many 21 Jun '22

21 Jun '22

1 1

[data science] EleutherAI Model Access
by Undiscussed Horrific Abuse, One Victim of Many 21 Jun '22

21 Jun '22

Announcement in eleutherai's discord from today. Since it's topical with my other recent posts. -- We believe that providing widespread and public access to language models like GPT-NeoX-20B is an important step to take to promote research on both the capabilities and the limitations of language models. We know that many people lack the hardware to run a 20B model, but we are excited to announce that CoreWeave and Anlatan are powering a free online demo at https://20b.eleuther.ai/ that supports queries to GPT-NeoX-20B (and GPT-J-6B) with up to 256 tokens of context through their GooseAI platform. As a reminder, if you would like to be doing open source research using our models but lack the computational resources to do so we would love to talk to you about it! Support for both inference and limited finetuning is available. If this interests you, please fill out the following form https://forms.gle/W7AKuP2WzNVVjfFj9.

1 0

The Feds
by Gunnar Larson 21 Jun '22

21 Jun '22

Can't the paparazzi (the feds) just let me innovative?

4 5

This 1.5TB microSD is surely witchcraft
by jim bell 21 Jun '22

21 Jun '22

This 1.5TB microSD is surely witchcraft https://share.newsbreak.com/1bhubzb6

2 1

Timing Attacks
by zeynep＠keemail.me 21 Jun '22

21 Jun '22

https://timing.attacks.cr.yp.to/ Timing attacks extract your confidential data from observations of the time used by your computer. Timing attacks have been demonstrated again and again to successfully extract complete cryptographic keys and other secrets. This web site, timing.attacks.cr.yp.to, is aimed at end users, operating-system distributors, CPU manufacturers, and software engineers who would like to know what they can do to protect data against timing attacks. AuthorsDaniel J. Bernstein has coauthored more than 50 attack papers on a wide range of cryptographic topics, including the influential paper "Cache-timing attacks on AES", but he works primarily on protecting systems against attack. His fast high-security Curve25519 and ChaCha20 cryptographic algorithms are now used every day by billions of people. These algorithms were designed from the outset to help systems engineers stop timing attacks. Billy Bob Brumley works primarily on attacking systems using timing as a side channel, protection being a by-product. On the offense side, he coinvented / codiscovered / codeveloped the first cache-timing attack on OpenSSL ECCthe first cache-timing attack on OpenSSL DSAthe first remote timing attack on OpenSSL ECC, CVE-2011-1945other side-channel vulnerabilities in OpenSSL, e.g., CVE-2018-0737side-channel vulnerabilities in Google's BoringSSL (and Chrome), e.g., CVE-2016-2178side-channel vulnerabilities in LibreSSL, e.g., CVE-2016-7056side-channel vulnerabilities in ARM's Mbed TLS, e.g., CVE-2019-18222, CVE-2020-10932side-channel vulnerabilities in Mozilla's NSS (and Firefox, Thunderbird), e.g., CVE-2020-6829, CVE-2020-12399, CVE-2020-12400, CVE-2020-12401, CVE-2020-12402side-channel vulnerabilities in wolfSSL, e.g., CVE-2020-11735the first bug attack in the wild, CVE-2011-4354various side-channel attack vectors, e.g., Cache Storage, Certified Side Channels, CVE-2019-1547various microarchitecture attack techniques, e.g., PortSmash, CVE-2018-5407, Degrade, HyperDegradeOn the defense side, his implementations of cryptographic algorithms are now used every day by billions of people, including (but not limited to) his free and open-source software (FOSS) contributions to OpenSSL and Mozilla's NSS / Firefox / Thunderbird.

1 0

Hertzbleed Is A New CPU Hack Affecting Just About Everybody
by jim bell 21 Jun '22

21 Jun '22

Jim Bell's note: In late 1977, I built a single board microprocessor trainer called a Dyna-Micro. https://www.google.com/search?q=%22dyna+micro%22&oq=%22dyna+micro%22&aqs=ch… At the time, I noticed that if I turned on the AM radio, running the computer caused varying bleeps and bloops to be received. Probably then and before, owners of primitive PCs like Altair noticed the same thing. A few years later, I first heard of the idea called tempest, the practice of shielding computers to avoid transmitting information by radio. Even later, in the early 2000s, I read a (even then, old) book by ex MI-5 person Peter wright, called Spycatcher, that described how they could remotely determine what radio station a radio was receiving, by detecting its local oscillator's frequency. So-called heterodyne radios work by generating a local oscillator frequency, then nonlinearly mixing that with the signal from the antenna, and then filtering the difference through an IF (intermediate frequency) filter. https://www.google.com/search?q=%22dyna+micro%22&oq=%22dyna+micro%22&aqs=ch… >From that: 'Wright examines the techniques of intelligence services, exposes their ethics, notably their "eleventh commandment", "Thou shalt not get caught." He described many MI5 electronic technologies (some of which he developed), for instance, allowing clever spying into rooms, and identifying the frequency to which a superhet receiver is tuned. " -----------HertzBleed Is A New CPU Hack Affecting Just About Everybody https://share.newsbreak.com/1ay58kwf Unlike more traditional ways to hack information, side-channel attacks rely on these signatures to try to infer what information was being processed. You can think of it kind of like guessing your presents before your actual birthday: a stereotypical “hacker” would think of ever-more sneaky ways to simply open the wrapping paper, but someone using a side-channel attack would be giving it a shake, feeling the edges, and estimating the weight. Hertzbleed is not by any means the first such attack to be discovered – side-channel attacks have been around for more than two decades at this point – it has a few extra capabilities that haven’t been seen before. It can be deployed remotely, making it much easier to use than previous side-channel attacks, and it also works on “constant time” mechanisms – that is, code specifically designed to eliminate one of the biggest clues for a would-be hacker, the length of time a process takes to complete. And the really bad news is, you’re almost certainly affected. Certainly, all Intel processors are susceptible to Hertzbleed, as are dozens of AMD chips. And even if your personal computer, laptop, tablet or phone doesn’t use those affected processors, thousands of servers across the planet do – servers which, as a matter of course, store your data, process your information, and run the services we depend on every day.

2 1