July 2022 - cypherpunks - lists.cpunks.org

BleepingComputer: Hackers scan for vulnerabilities within 15 minutes of disclosure
by jim bell 27 Jul '22

27 Jul '22

BleepingComputer: Hackers scan for vulnerabilities within 15 minutes of disclosure. https://www.bleepingcomputer.com/news/security/hackers-scan-for-vulnerabili… System administrators have even less time to patch disclosed security vulnerabilities than previously thought, as a new report shows threat actors scanning for vulnerable endpoints within 15 minutes of a new CVE being publicly disclosed. According to Palo Alto's 2022 Unit 42 Incident Response Report, hackers are constantly monitoring software vendor bulletin boards for new vulnerability announcements they can leverage for initial access to a corporate network or to perform remote code execution.However, the speed at which threat actors begin scanning for vulnerabilities puts system administrators in the crosshairs as they race to patch the bugs before they are exploited. "The 2022 Attack Surface Management Threat Report found that attackers typically start scanning for vulnerabilities within 15 minutes of a CVE being announced," reads a companion blog post. Since scanning isn't particularly demanding, even low-skilled attackers can scan the internet for vulnerable endpoints and sell their findings on dark web markets where more capable hackers know how to exploit them. Then, within hours, the first active exploitation attempts are observed, often hitting systems that never had the chance to patch. Unit 42 presents CVE-2022-1388 as an example, a critical unauthenticated remote command execution vulnerability impacting F5 BIG-IP products.

1 0

IEEE Spectrum: Micron Is First to Deliver 3D Flash Chips With More Than 200 Layers
by jim bell 27 Jul '22

27 Jul '22

IEEE Spectrum: Micron Is First to Deliver 3D Flash Chips With More Than 200 Layers. https://spectrum.ieee.org/micron-is-first-to-deliver-3d-flash-chips-with-mo… Boise, Idaho–based memory manufacturer Micron Technology says it has reached volume production of a 232-layer NAND flash-memory chip. It’s the first such chip to pass the 200-layer mark, and it’s been a tight race. Competitors are currently providing 176-layer technology, and some have said they are on track to follow Micron’s skyward move or already have working chips in hand. The new Micron tech as much as doubles the density of bits stored per unit area versus competing chips, packing in 14.6 gigabits per square millimeter. Its 1-terabit chips are bundled into 2-terabyte packages, each of which is barely more than a centimeter on a side and can store about two weeks worth of 4K video. With 81 trillion gigabytes (81 zettabytes) of data generated in 2021 and International Data Corp. (IDC) predicting 221 ZB in 2026, “storage has to innovate to keep up,” says Alvaro Toledo, Micron’s vice president of data-center storage. The move to 223 layers is a combination and extension of many technologies Micron has already deployed. To get a handle on them, you need to know the basic structure and function of 3D NAND flash. The chip itself is made up of a bottom layer of CMOS logic and other circuitry that’s responsible for controlling reading and writing operations and getting data on and off the chip as quickly and efficiently as possible. Improvements to this layer, such as optimizing the path data travels and reducing the capacitance of the chip’s inputs and outputs, yielded a 50 percent improvement in the data transfer rate to 2.4 Gb/s. Above the CMOS are layers upon layers of NAND flash cells. Unlike other devices, Flash-memory cells are built vertically. They start as a (relatively) deep, narrow hole etched through alternating layers of conductor and insulator. Then the holes are filled with material and processed to form the bit-storing part of the device. It’s the ability to reliably etch and fill the holes through all those layers that’s a key limit to the technology. Instead of etching through all 232 layers in one go, Micron’s process builds them in two parts and stacks one atop the other. Even so, “it’s an astounding engineering feat,” says Alvaro. “That was one of the biggest challenges we overcame.” According to Toledo, there is a path toward even more layers in future NAND chips. “There are definitely challenges,” he says. But “we haven’t seen the end of that path.” In addition to adding more and more layers, NAND flash makers have been increasing the density of stored bits by packing multiple bits into a single device. Each of the Micron chip’s memory cells is capable of storing three bits per cell. That is, the charge stored in each cell produces a distinct enough effect to discern eight different states. Though 3-bit-per-cell products (called TLC) are the majority, four-bit products (called QLC) are also available. One QLC chip presented by Western Digital researchers at the IEEE International Solid State Circuits Conference earlier this year achieved a 15 Gb/mm2 areal density in a 162-layer chip. And Kioxia engineers reported 5-bit cells last month at the IEEE Symposium on VLSI Technology and Circuits. There has even been a 7-bit cell demonstrated, but it required dunking the chip in 77-kelvin liquid nitrogen

1 0

Jan6: Iraq Goes Gangnam Style, Copycats American Sit-In
by grarpamp 27 Jul '22

27 Jul '22

https://twitter.com/Joyce_Karam/status/1552330793678262279 https://twitter.com/Joyce_Karam/status/1552337293012344841 https://twitter.com/alsharqiyatv/status/1552331270197317635 Protestors in Baghdad have stormed into #Iraq’s Parliament inside the Green Zone in biggest demonstration since 2020. Mostly followers of Shia cleric Muqtada Sadr. Iraqi protestors are now inside the Parliament chamber, standing on desks, grabbing documents, folders, dusters and whatever they come across. Caretaker Prime Minister Mustafa al-Kadhimi demanded that the demonstrators "immediately withdraw" from the Green Zone, warning that he would send additional security forces to ensure "the protection of state institutions and foreign missions, and prevent any harm to security and order." Lol. Iraq overthrows its Parliament. Today, they are free and happy. Tomorrow, they will unfortunately repeat exactly what all you fools throughout history have done before... They will install an even worse tyranny over themselves, thus completely and permanently wiping out all the freedom they had so happily won and enjoyed for a moment the day before. Overthrow, occupy, squat... is becoming a worldwide sport vs power. So next time you're in one, and you will be... be different than all the rest, become and remain free, by refusing to install anything over top of Freedom. Iraqi Protesters Storm Parliament Amid Record Run Without Government On Wednesday hundreds of followers of the hardline Iraqi Shia cleric, militia leader, and politician Muqtada al-Sadr overwhelmed security in Baghdad's Green Zone, where they were able to breach and storm the country's parliament building. The protests came amid political friction which pits al-Sadr's bloc, which won a majority as the largest faction in the 329-seat parliament during prior October elections, against the pro-Iran Coordination Framework faction. The latter group's nomination for prime minister, Mohammed Shia al-Sudani, is being fiercely opposed by al-Sadr's followers. BREAKING: Protestors in Baghdad have stormed into #Iraq’s Parliament inside the Green Zone in biggest demonstration since 2020. Mostly followers of Shia cleric Muqtada Sadr: pic.twitter.com/RBlm9xpGFS — Joyce Karam (@Joyce_Karam) July 27, 2022 The high secured Green Zone has since the US invasion and occupation of Iraq been home to all major government branches, embassies and diplomatic missions, and international institutions. However, some local correspondents have suggested based on video to emerge of the protests that security stood down after being overwhelmed by the crowds. Police were seen milling about the building alongside protesters. There were reportedly no Iraqi lawmakers inside parliament at the time, with the crowds occupying the building and chanting political slogans. Caretaker Prime Minister Mustafa al-Kadhimi demanded that the demonstrators "immediately withdraw" from the Green Zone, warning that he would send additional security forces to ensure "the protection of state institutions and foreign missions, and prevent any harm to security and order." كافيتيريا مجلس النواب العراقي تغص بالمتظاهرين#الشرقية_نيوز pic.twitter.com/axI6xMIJID — AlSharqiya TV - قناة الشرقية (@alsharqiyatv) July 27, 2022 The country's politics have been gridlocked and essentially without a new government ever since the October vote. Reuters notes that "Iraq marked its longest post-election deadlock on Wednesday, as lawmakers’ failure to form a government hampers reforms needed for a country struggling to recover from decades of conflict." Video from within the Parliament building where soldiers causally let Sadri protesters walk around but tell them not to break anything #Iraq pic.twitter.com/qHHAeNwQWE — Mohammad Ali Musawi (@malimusawi) July 27, 2022 "More than nine months since an October election, lawmakers tasked with choosing a president and prime minister looked no closer to an agreement, bringing Iraq to a record 290 days without a head of state or cabinet," the report describes. Nor are they necessary, in fact of history, they're proven to always be harmful.

1 0

Re: please clarify your FOIL request re DFS appeals procedures FOIL-2022-091931-017884
by Gunnar Larson 27 Jul '22

27 Jul '22

Dear DFS: These are simple and/or record requests. So send whatever you can. Gunnar On Wed, Jul 27, 2022, 2:34 PM <George.Bogdan(a)dfs.ny.gov> wrote: > Dear Mr. Larson: > > You made the following request by e mail to Christine Tomczak of the DFS > Office of General Counsel: > > "We would like to receive any and all records concerning the nature FOIL > requests under appeal are managed. > > > > This may include a handbook or other guide with detailed instructions > concerning precluding any obstruction claims." > > > Please clarify what you mean by the phrase "concerning the nature FOIL > requests under appeal are managed" and what you mean by "obstruction > claims." > > DFS follows what is required by Public Officers Law Article 6, the > Committee on Open Government’s regulations (21 NYCRR 1401), and DFS’ own > regulation, 23 NYCRR 3. I assume you are requesting only internal DFS > documents and not public legal documents. > > Sincerely, > George Bogdan > DFS Records Access Officer > > > > > > > > > > > > Tracking Number:FOIL-2022-091931-017884 >

1 0

Fwd: FOIL DHSES-22-07-012
by Gunnar Larson 27 Jul '22

27 Jul '22

---------- Forwarded message --------- From: DHSES, FOIL (DHSES) <FOIL.DHSES(a)dhses.ny.gov> Date: Wed, Jul 27, 2022, 12:37 PM Subject: FOIL DHSES-22-07-012 To: G(a)xny.io <G(a)xny.io> Attached please find correspondence regarding the above Freedom of Information Law request. Thank you.

1 0

Jurisdiction shopping for Dummies
by professor rat 27 Jul '22

27 Jul '22

Here a quotation from a book I've been reading: "The eurocurrency markets represent a type of regulatory arbitrage. Eurobanking is a managed financial package that combines the currency of one country (one regulatory environment) with the banking regulations and competitive efficiencies of another country. This repackaging was made possible by improvements in worldwide communications links and information technology. If the regulatory burden becomes too high in one area of the world, the bundle of eurobanking services can be reassembled in another. Hence, national regulators must compete to maintain their respective shares of the eurocurrency business. Competition with respect to lending quotas, reserve requirements, capital requirements, deposit insurance, the taxing and reporting of interest payments, and the taxing of profits, dividends, and capital gains, all measured against any perceived positive benefits of local regulation, governs the geographical distribution of eurocurrency market shares." From _International Financial Markets_, by J. Orlin Grabbe, formerly of the Wharton School. Regulatory arbitrage is an Important concept, as well as a great phrase. The writer is square in the middle of the mainstream in the business world, and note how effortlessly he speaks of avoiding governments and playing them off against each other.... https://marc.info/?t=96583955000001&r=1&w=1

1 0

New Yorker lies about Wikileaks
by professor rat 27 Jul '22

27 Jul '22

" . . . Organizations such as WikiLeaks espouse an absolutist commitment to transparency . . ." ( New Yorker liar, PR Keefe ) JULIAN " Cypherpunks are all about privacy for the poor and transparency for the powerful " ASSANGE

1 0

New Yorker lies about Shulte and Wikileaks
by professor rat 27 Jul '22

27 Jul '22

There is plenty to condemn both Joshua Shulte and post 2009 - Wikileaks without making shit up. " . . .But WikiLeaks had also shown, quite recently, a willingness to be a mouthpiece for foreign intelligence services: in 2016, the site had released e-mails from the Democratic National Committee which had been stolen by hackers working on behalf of the Kremlin. . . ." Sez the New Yorker quite recently. But did 2010 Wikileaks just go down the Memory Hole? https://reason.com/2011/02/03/julian-assange-and-israel-sham/ " . . .He travelled on to Belarus, ruled by the Soviet-style dictator Alexander Lukashenko, where he met regime officials. The Russian Interfax news agency reported that Shamir was WikiLeaks’ “Russian representative”, and had “confirmed the existence of the Belarus dossier”. According to him, WikiLeaks had several thousand “interesting” secret documents. Shamir then wrote a piece of grovelling pro-Lukashenko propaganda in Counterpunch . . ."

1 0

Go Robo
by professor rat 27 Jul '22

27 Jul '22

The Real Vision Bot was co-developed by quant analyst and hedge fund CEO Moritz Seibert and statistician Moritz Heiden. Real Vision founder and macroeconomic expert Raoul Pal has called the bot’s historic performance “astonishing,” saying it outperforms an aggregated bucket of top 20 crypto assets on the market by more than 20%. https://dailyhodl.com/2022/07/26/robot-known-for-outperforming-crypto-marke… Just mind your fingers with those pawns

1 0

Filecoin Green
by professor rat 27 Jul '22

27 Jul '22

Filecoin, the world’s largest decentralized storage network, allows users to store, request and transfer data via a verifiable marketplace. Its advanced technology provides a robust foundation to store the world’s most valuable datasets. An alternative to costly cloud storage, the Filecoin network offers efficiently priced and geographically decentralized storage, minimizing financial barriers and allowing users to take advantage of its unmatched network capabilities. Filecoin is completely open source, enabling people from all over the world to participate. https://cointelegraph.com/press-releases/filecoin-to-host-sustainable-block… Reposts etc - caveat lecter

1 0