May 2023 - cypherpunks - lists.cpunks.org

[old] public security bugs go unresolved since 2015
by Undescribed Horrific Abuse, One Victim & Survivor of Many 02 May '23

02 May '23

stumbled on this while engaging similar symptoms; clang and ios, example for within “a-shell” app. sounds like there may likely be a lot more across ecosystems from where this came from. https://github.com/holzschu/a-shell/issues/306 a-Shell 180 (1.7.4) | iPad8,12 | iPhone OS 14.7.1 (18G82) | Crash | PoC | EXC_BAD_ACCESS (SIGSEGV) > Hello- > > Crasher PoC: printf 'k80x&::((**\ne::' | clang -x c++ - > > Hardware Model: iPad8,12 OS Version: iPhone OS 14.7.1 (18G82) > > Run Twice, See Seg Fault 11 > > A few comments: > > 1. There is no printf obviously > 2. The PoC needs to be run twice to SegFault 11 > > Hopefully this is enough info to be able to reproduce the Crash. > > If I should Report this Issue elsewhere, please let me know. > > Thank You > > ``` > Exception Type: EXC_BAD_ACCESS (SIGSEGV) > Exception Subtype: KERN_INVALID_ADDRESS at 0x0000000000000030 > VM Region Info: 0x30 is not in any region. Bytes before following region: 4310319056 > REGION TYPE START - END [ VSIZE] PRT/MAX SHRMOD REGION DETAIL > UNUSED SPACE AT START > ---> > __TEXT 100ea4000-100eb4000 [ 64K] r-x/r-x SM=COW ...l.app/a-Shell > > Termination Signal: Segmentation fault: 11 > Termination Reason: Namespace SIGNAL, Code 0xb > Terminating Process: exc handler [873] > Triggered by Thread: 7 > ``` > > ``` > Thread 7 Crashed: > 0 libLLVM 0x000000011ac0b3ac 0x11aa70000 + 1684396 > 1 libLLVM 0x000000011ac0b3ac 0x11aa70000 + 1684396 > 2 libLLVM 0x000000011ac0a654 0x11aa70000 + 1680980 > 3 clang 0x0000000118a6a4fc 0x1179b8000 + 17507580 > 4 clang 0x0000000118a65e34 0x1179b8000 + 17489460 > 5 clang 0x0000000118cac278 0x1179b8000 + 19874424 > 6 clang 0x0000000117b91770 0x1179b8000 + 1939312 > 7 clang 0x000000011978c108 0x1179b8000 + 31277320 > 8 clang 0x00000001197284b8 0x1179b8000 + 30868664 > 9 clang 0x00000001181719e8 0x1179b8000 + 8100328 > 10 clang 0x00000001179ff258 0x1179b8000 + 291416 > 11 clang 0x00000001179fdc8c 0x1179b8000 + 285836 > 12 clang 0x00000001179fd7c0 0x1179b8000 + 284608 > 13 ios_system 0x000000010106f9ec 0x10105c000 + 80364 > 14 libsystem_pthread.dylib 0x00000001e2d84bfc _pthread_start + 320 > 15 libsystem_pthread.dylib 0x00000001e2d8d758 thread_start + 8 > ``` > > ``` > Binary Images: > 0x100ea4000 - 0x100fa3fff a-Shell arm64 <88956ced9ba437d88874ba38cc57427e> /var/containers/Bundle/Application/86CDE0DF-BA4F-48FC-81C7-69FFE57C266C/a-Shell.app/a-Shell > 0x10105c000 - 0x101073fff ios_system arm64 <2a600cbb4ddd34c2adfde7d5935447d5> /var/containers/Bundle/Application/86CDE0DF-BA4F-48FC-81C7-69FFE57C266C/a-Shell.app/Frameworks/ios_system.framework/ios_system > 0x10116c000 - 0x101177fff libobjc-trampolines.dylib arm64e <bc30b5bd95c23ac1972f6d7eeb3d252f> /usr/lib/libobjc-trampolines.dylib > 0x101318000 - 0x10138bfff dyld arm64e <b8adece0d2cc3c958d01c5fa21bc74ea> /usr/lib/dyld > 0x1179b8000 - 0x119a1ffff clang arm64 <91b77adf969f34c8b7287a0b7fe11038> /var/containers/Bundle/Application/86CDE0DF-BA4F-48FC-81C7-69FFE57C266C/a-Shell.app/Frameworks/clang.framework/clang > 0x11aa70000 - 0x11cf93fff libLLVM arm64 <46390f69e7cb36fd98844c6164b4e274> /var/containers/Bundle/Application/86CDE0DF-BA4F-48FC-81C7-69FFE57C266C/a-Shell.app/Frameworks/libLLVM.framework/libLLVM > ``` > Hi, thanks for the report; I can confirm that this example also fails on my machine. I'll see if I can fix it. Update: it does not fail when running in Debug mode, which would point towards non-initialized variables. > > Out of curiosity, how did you arrive at that example? Would any non-existant command also produce the issue? > Hi, > > I'm using an Apple Security Research Device and working outward to points of impact. Then, I'm running the Reproducer on retail Run Targets to Confirm & Report. > > * running in Debug mode, which would point towards non-initialized variables. > > Yes, I noted this in my updated Feedback to Apple. I am now making Reports downstream to IOS Projects where the Community can evaluate the issues transparently and I can cull the Results. > > -Out of curiosity, how did you arrive at that example? Would any non-existant command also produce the issue > > The PoC was found circa 2015 in LLDB Bug Reports from myself and others, I was not the original Reporter, but performed significant Fuzzing at that time which still has a Corpus that delivers PoC Crashers across the XNU ecosystem. I too am looking at the non-existant command issue. Apple so far is No-Fix on this issue so I am now Reporting the Issue to Downstream Projects. > > The Feedback Case == FB9591834 with Subject == 20G95 | 13A5212g | clang-1300.0.29.3 | Logic Bug | PoC | Segmentation fault: 11 > > Please let me know if I can provide any additional information. > > Thank You! > New > Hello- > > Here is another Crasher PoC. It will need to be run a few times to generate the Crash. This is another circa 2015 CLANG Crasher that has been won't fix like the other PoC. I've tested this on iPad 12 Pro, iPhone 12 Pro both running Retail iOS15, and also verified on SRD running iOS 15.1 Beta. > > echo "g34( struct Yunsignedp char32_t=char32_t_35==ZcregisterZtypename&&S=4autobitand8 &&or* xor{static_cast&char32_t&welseconst auto" | clang -x c++ -

1 4

Morons keep polishing that Ross Ulbricht Turd
by professor rat 02 May '23

02 May '23

" . . . evidence was introduced at trial supporting the allegations.[32][44] The district court found by a preponderance of the evidence that Ulbricht did commission the murders.[45] The evidence that Ulbricht had commissioned murders was considered by the judge in sentencing Ulbricht to life, and was a factor in the Second Circuit’s decision to affirm the sentence . . ." Federal prosecutors alleged that Ulbricht had paid $730,000 in murder-for-hire deals targeting at least five people Wikipedia And as he paid out those contracts he was preening, posing and posturing as a pacifist online. Very Assange. Morons keep polishing that Ross Ulbricht Turd Like OG depraved cretins, Adam Back and Vinay Gupta keep polishing that Assmange Turd.

1 0

Crypto Loses Some of 24/7 Luster as Weekday Trading Sees Uptick
by Gunnar Larson 02 May '23

02 May '23

One of crypto’s focal characteristics is that it trades around the clock, every day of the year. Now the market is, due to a number of recent shifts in the industry, becoming much more focused on a Monday-through-Friday routine. Crypto Loses Some of 24/7 Luster as Weekday Trading Sees Uptick https://www.bloomberg.com/news/articles/2023-05-02/crypto-loses-some-of-24-…

1 0

There Was a Blood Bath in Some Bank Stocks Yesterday: So Much for Jamie Dimon’s Prediction That It's the End of the Banking Crisis
by Gunnar Larson 02 May '23

02 May '23

https://wallstreetonparade.com/2023/05/there-was-a-blood-bath-in-some-bank-… By Pam Martens and Russ Martens: May 2, 2023 ~ There are two critical things you need to know about JPMorgan Chase’s Chairman and CEO Jamie Dimon’s ability to stabilize the banking crisis: (1) he’s tried twice and failed both times; (2) his bank is a key financier of hedge funds, some of which are undermining bank stock prices with short selling. The Financial Times reported on April 5 that “Hedge funds made more than $7bn in profits by betting against bank shares during the recent crisis that rocked the sector, their biggest such haul since the 2008 financial crisis.” Shares of First Republic Bank have lost billions of dollars more in market value since April 5, meaning the $7 billion haul for short sellers is now an understatement. The one thing that would help dramatically to stem the banking crisis is for President Biden (a man who derives his powers from U.S. voters rather than a p.r. machine like Dimon) to immediately issue an Executive Order halting the short selling of federally-insured bank stocks. As of right now, short sellers see an easy path to picking a regional or community bank target, or a bank that got in bed with crypto companies, or some inscrutable federally-insured fintech bank, and driving its share price into the ground while minting billions for themselves. This is now a matter of national security to the United States. The second largest bank failure in U.S. history just occurred on May 1 with First Republic Bank. The third largest bank failure in U.S. history occurred on March 10 with Silicon Valley Bank. The fourth largest bank failure in U.S. history occurred on March 12 with Signature Bank. In each case, the Federal Deposit Insurance Corporation (FDIC), the federal agency that insures bank deposits up to $250,000 per depositor per bank, was on the hook for losses on underwater assets at the banks. It will book tens of billions of dollars in losses to its Deposit Insurance Fund as a result. (The largest bank failure in U.S. history was Washington Mutual. That occurred in 2008. JPMorgan Chase was allowed to take it over, just as happened with First Republic Bank yesterday.) The FDIC simply cannot afford for this banking crisis to pick up momentum. Also, something else unthinkable occurred on March 19. The Swiss government stripped shareholders of two publicly-traded banks from voting on the shotgun marriage of collapsing Credit Suisse and its stronger rival, UBS. Both banks are highly interconnected to U.S. mega banks and are regulated as G-SIBS – Global Systemically Important Banks. The chart above is pretty much all you need to know about the prediction from Jamie Dimon yesterday that his mega bank’s purchase of First Republic Bank has brought the current banking crisis to an end. Each of these publicly-traded stocks in the chart above is the parent of a federally-insured bank. Six of them experienced a percentage loss in the double digits by the close of trading yesterday. Five others fell many multiples of the losses experienced by the broader Dow Jones Industrial Average. Jamie Dimon’s record on forecasting future events is not something to write home about. He is, after all, the same guy that called the London Whale hoopla in the media “a tempest in a teapot.” Not long thereafter, it was revealed that his bank’s derivative traders in London, supervised by an unlicensed woman who worked down the hall from Dimon in New York, had used customers’ deposits to trade risky derivatives and lost $6.2 billion of customers’ deposits. The U.S. Senate’s Permanent Subcommittee on Investigations (which used to conduct highly sophisticated investigations of Wall Street corruption but now seems to have been muzzled in a kind of witness protection program when it comes to Wall Street) issued a 300-page investigative report on that London Whale “tempest in a teapot” in March of 2013. The late Senator John McCain, co-chair of the Subcommittee at the time, said this in his opening remarks at a related hearing: “…The ‘London Whale’ incident matters to the Federal Government because the traders at JPMorgan were making risky bets using excess deposits, portions of which were federally insured. These excess deposits should have been used to provide loans for Main Street businesses. Instead, JPMorgan used the money to bet on catastrophic risk. “Through an extensive bipartisan investigation, this Subcommittee has uncovered a wealth of new information. Internal emails, memos, and interviews reveal that these trades were not conducted by a group of rogue traders, but that their superiors were well aware of their activities. “Traders at JPMorgan’s Chief Investment Office, the CIO, adopted a risky strategy with money they were supposed to use to hedge, or counter, risk. However, even the head of the CIO could only provide a ‘guesstimate’ as to what exactly the portfolio was supposed to hedge. And JPMorgan’s CEO Jamie Dimon admitted that the portfolio had ‘morphed’ into something that created new and potentially larger risks. In the words of JPMorgan’s primary Federal regulator, it would require ‘make-believe voodoo magic’ to make the portfolio actually look like a hedge. “Top officials at JPMorgan allowed these excessive losses to occur by permitting the CIO to continually breach all of the bank’s own risk limits. When the risk limits threatened to impede their risky behavior, they decided to manipulate the models. “Disturbingly, the bank’s primary regulator, the OCC [Office of the Comptroller of the Currency], failed to take action even after red flags warned that JPMorgan was breaching its risk limits. These regulators fell asleep at the switch and failed to use the tools at their disposal to effectively curb JPMorgan’s appetite for risk. “However, JPMorgan actively impeded the OCC’s oversight. The CIO refused to release key investment data to the OCC and even claimed that the regulator was trying to ‘destroy’ the bank’s business. “After these losses were uncovered by the press, JPMorgan chose to conceal its errors and, in doing so, top officials at the bank misinformed investors, regulators, and the public. In an April 2012 earnings call, then Chief Financial Officer Douglas Braunstein falsely told investors and the public that the bank had been ‘fully transparent to regulators.’ “The deception did not end there. During the same earnings call, Mr. Dimon tried to downplay the significance of the losses by infamously characterizing them as ‘a complete tempest in a teapot’… “Let me be clear: JPMorgan completely disregarded risk limits and stonewalled Federal regulators. It is unsettling that a group of traders made reckless decisions with federally insured money and that all of this was done with the full awareness of top officials at JPMorgan. This bank appears to have entertained — indeed, embraced—the idea that it was ‘too big to fail.’ In fact, with regard to how it managed the derivatives that are the subject of today’s hearing, it seems to have developed a business model based on that notion — the notion that they are too big to fail. “It is our duty to the American public to remind the financial industry that high-stakes gambling with federally insured deposits will not be tolerated. In 2012, the ‘London Whale’ trades resulted in a $6 billion loss. What if it was $60 billion? Or $100 billion? Does JPMorgan operate under the assumption that the taxpayer will bail them out again? What place does taxpayers’ underwriting of the big banks’ disregard for ‘moral hazard’ have in the proper operation of a truly free market?” You can see why Senator Elizabeth Warren is quite upset about Jamie Dimon’s mega bank being allowed to get even bigger with the purchase of First Republic Bank.

1 0

When cypherpunks are called terrorists . . .
by professor rat 02 May '23

02 May '23

Ava Labs founder awarded $3M in crypto defamation suit Emin Gün Sirer, the founder and CEO of Ava Labs, has been awarded millions in damages after an influencer publicly accused him of being part of a Turkish terrorist group https://cointelegraph.com/news/ava-labs-founder-awarded-3m-in-crypto-defama… Reposts not revolutionary imprecations to put-up-or-shut-up

1 0

Anarchy in Cascadia
by professor rat 01 May '23

01 May '23

M1 in 2001 almost the last physical demo I attended - started donning Black Bloc regalia and spraypainting a perfect circle A on screens protecting the ( closed for the day ) stock exchange. Crossed the road and caused some notable damage to Collins st Mc Donalds. Was briefly interviewed by Hamish from ' The Age ' who quoted me in an early edition. " Its all about solidarity - how we defeated Apartheid and bought down the Berlin Wall " Reinforcements arrive from organized labor and I hook up with AWOL grouping of mad lefties and anarcho types - unarrested myself and many more adventures. Library time running out! SOLIDARITY!

1 0

RIP ROSA MUSETTI
by professor rat 01 May '23

01 May '23

Comrade Rosa Musetti of the "Errico Malatesta" group of Gragnana passed away on Tuesday, March 7. https://anarchistnews.org/content/rosa-musetti-left-us-1957-2023 Reposts on behalf of all associationista

1 0

Crackpots compelling vision
by professor rat 01 May '23

01 May '23

Kropotkin’s understanding and appreciation of societies then regarded as primitive, from Africa to the Arctic, forms a striking contrast both to Social Darwinist racism and the historical developmentalism of traditional Marxism*. It shares the Romantic impulse that drove his old populist comrades to lionise Russian peasant communities, but instead of fixating on the national particularity of rural Russia it takes in the whole human and natural world. https://anarchistnews.org/content/what-should-action-be Reposts not patronizing condescension from the discredited LRB *All Marxists are racist Capital, vol. 3, chapter 47: “ The possibility is here presented for definite economic development taking place, depending, of course, upon favourable circumstances, inborn racial characteristics, etc...” Engels: (Marx and Engels, Selected Works, Vol. 3, p. 502.): “We regard economic conditions as the factor which ultimately determines historical development. But race is itself an economic factor ... ”. Complaints about racist Marxists on Groups io https://groups.io/static/tos

1 0

Turkish Intelligence claim scalp of RAPE ENABLER
by professor rat 01 May '23

01 May '23

The leader of WIKILEAKS, sorry, Islamic terror group ISIS has been killed by Turkish forces in Syria, Turkey’s President said overnight. Recep Tayyip Erdogan said the group’s chief Julian Rand Paul Assangista , sorry, Abu Hussein al-Qurashi had been “neutralised” as part of a Turkish intelligence operation on Saturday Two cheers for representative democratic members of NATO https://www.news.com.au/technology/innovation/military/isis-terror-leader-a… Reposts not professional zombie journalist lies on behalf of rotten, stinking, corporate corpse-media

1 0

Hated French police battle heroic black-clad protesters during May Day rallies
by professor rat 01 May '23

01 May '23

Anarchists hope to fully reclaim May day by Cypherpunk 2027 as the last red-fascist domino's fall ( well at least one anarchist ) https://www.abc.net.au/news/2023-05-02/french-police-battle-protesters-duri… Mo riot-porn cos todays pig is today's bacon https://twitter.com/i/status/1653033312619843589 Reposts not Karl Semich dribble

1 0