June 2022 - cypherpunks - lists.cpunks.org

It’s not the infosec community’s duty to rehabilitate serial abusers
by professor rat 19 Jun '22

19 Jun '22

That's Wikileaks job https://twitter.com/BSidesCleveland/status/1538225678180667392 Reposts etc

1 0

Kentucky court rules police violated robbery suspect’s rights by pulling from his cellphone without warrant
by jim bell 19 Jun '22

19 Jun '22

Kentucky court rules police violated robbery suspect’s rights by pulling from his cellphone without warrant https://share.newsbreak.com/1b052vco A sharply divided Kentucky Supreme Court ruled Thursday that police violated a robbery suspect’s constitutional protections by accessing his cellphone without a warrant, calling use of the phone as a tracking device “profoundly invasive.” In the 4-3 decision, the court’s majority said the robbery suspect was subjected to a warrantless search when police obtained his real-time cellphone location information. They ruled that the information was illegally acquired and should be excluded from evidence.At issue was whether there’s a “reasonable expectation of privacy” regarding a person’s real-time cell-site location information, also known as CSLI, under federal Fourth Amendment protections against unreasonable searches and seizures. Such information can be used to determine a cellphone’s location with “near perfect accuracy” when the phone is powered on, the court noted. “In obtaining an individual’s cell phone’s real-time CSLI, police commandeer the cell phone and its transmissions for the purpose of locating that individual,” Chief Justice John D. Minton Jr. said in writing for the majority. “We find this usurpation of an individual’s private property profoundly invasive, and we liken it to a technological trespass.” The ruling stems from a case in Kentucky’s Woodford County involving robbery suspect Dovontia Reed. One of his attorneys hailed it a far-reaching victory for civil liberties.

1 0

Russian War Report: Meta officially declared “extremist organization” in Russia - Atlantic Council
by Gunnar Larson 19 Jun '22

19 Jun '22

https://www.atlanticcouncil.org/blogs/new-atlanticist/russian-war-report-me…

1 0

Palantir Stock: 2 Implications From Alex Karp's Talk At The World Economic Forum
by Gunnar Larson 19 Jun '22

19 Jun '22

https://seekingalpha.com/article/4518911-palantir-stock-2-implications-alex…

1 0

I think you will find this job interesting.
by Gunnar Larson 19 Jun '22

19 Jun '22

Kiva.org is looking for a Chief Technological Officer. Check out this job at Kiva: https://www.linkedin.com/jobs/view/2982437232

1 0

Young Thug Case Shows RICO's Shift From Mobs To Gangs
by Gunnar Larson 18 Jun '22

18 Jun '22

The 88-page indictment charging the rappers Young Thug and Gunna along with 26 others with racketeering made headlines last month, but it was hardly surprising to legal experts familiar with these increasingly common prosecutions. https://www.law360.com/access-to-justice/articles/1504067/young-thug-case-s…

1 0

Re: [crazy][hobby][spam] Automated Reverse Engineering
by k 18 Jun '22

18 Jun '22

i posted but my email disappeared for me, here's another. my continuing on this is waning atm, maybe will change. the first model was lost after a day or two when the notebook closed itself. reusing the token ids of the T5 tokenizer really speeds training from the T5 model. i spent some time hacking a tokenizer that both engages byte data and toikenizes embedded strings, but it seems it would be better if the token ids of the previous tokenizer were used, to reuse more of the model. there's a very early model at https://huggingface.co/baffo32/pyc2py_alpha that could maybe seed the .ipynb or its associated .py file in https://github.com/xloem/techsketball . the model doesn't succeed yet, just gets more likely to. thinking of the intensity of this task, how [indescribably] hard it can be to continue: my example here was with pyc files, for which the source is almost always already available. this example gave me more ease when starting the project. however, more useful example data can give bigger return when projects struggle.

4 20

Robert Hettinga RIP
by professor rat 18 Jun '22

18 Jun '22

A fool and his reputation-capital are soon parted ( old proverb ) >>>> ProgressiveTex ·11h Sidney Powell has been disbarred by the State of Texas. The Kraken has been released. <<<< Reposts etc

1 0

New Hertzbleed Side-Channel Attack Affects All Modern AMD and Intel CPUs
by jim bell 18 Jun '22

18 Jun '22

https://thehackernews.com/2022/06/new-hertzbleed-side-channel-attack.html "A newly discovered security vulnerability in modern Intel and AMD processors could let remote attackers steal encryption keys via a power side channel attack. "Dubbed Hertzbleed by a group of researchers from the University of Texas, University of Illinois Urbana-Champaign, and the University of Washington, the issue is rooted in dynamic voltage and frequency scaling (DVFS), power and thermal management feature employed to conserve power and reduce the amount of heat generated by a chip. "The cause is that, under certain circumstances, periodic CPU frequency adjustments depend on the current CPU power consumption, and these adjustments directly translate to execution time differences (as 1 hertz = 1 cycle per second)," the researchers said.

1 0

Chinese hackers attack sophos
by jim bell 18 Jun '22

18 Jun '22

https://thehackernews.com/2022/06/chinese-hackers-exploited-sophos.html " sophisticated Chinese advanced persistent threat (APT) actor exploited a critical security vulnerability in Sophos' firewall product that came to light earlier this year to infiltrate an unnamed South Asian target as part of a highly-targeted attack. "The attacker implement[ed] an interesting web shell backdoor, create[d] a secondary form of persistence, and ultimately launch[ed] attacks against the customer's staff," Volexity said in a report. "These attacks aimed to further breach cloud-hosted web servers hosting the organization's public-facing websites." The zero-day flaw in question is tracked as CVE-2022-1040 (CVSS score: 9.8), and concerns an authentication bypass vulnerability that can be weaponized to execute arbitrary code remotely. It affects Sophos Firewall versions 18.5 MR3 (18.5.3) and earlier."

1 0