August 2023 - cypherpunks - lists.cpunks.org

Vitalik Buterin needs killing ( My 2k sats )
by pro2rat＠yahoo.com.au 13 Aug '23

13 Aug '23

Buttface so Austrian now he can paint houses https://www.cnbc.com/2023/08/06/prague-institute-of-crypto-anarchy-plotting… Repost reality not bogus anarchy from Thiel bumboys

1 0

Re: Morning Spam
by Karl Semich 12 Aug '23

12 Aug '23

On 8/11/23, Karl Semich <baffo32(a)gmail.com> wrote: > [sequence idea > > torturous mind controller has been torturing and manipulating a > tortured and framed activist in a corrupt prison so horrifically that > they don’t retain information from moment to moment anymore and > interpret every experience as joyful to cope. > > an international investigation is coming and the victim is going to ne > psychologically analyzed to determine if anything horrible was going > on. > > torturous mind controller’s task is to get tortured and framed > activist to kill themselves before their mind is used as testimony, > but all they know how to so is be manipulative and torturesome, so > they don’t heal the individual’s consciousness at all. > > each sequence begins with the torturous mind control for example > secretly hypnotically priming the victim for the suicide, preparing > them for how they will behave in each step of their own murder. they > use drugs, symbolism, the appearance of disembodied voices, dream > influence, fake letters from friends, etc. the victim is incredibly > hypnotizable and jumps right in, joyfully trusting the mind > controller, but doesn’t remember things from moment to moment. each > time it is time to perform the final act of ending their life they > hilariously get distracted by something shiny or recall a past > hypnotic influence they haven’t been able to shake or a deus ex > machina interrupts etc. > > halfway through the sequence the torturous mind controller gets > frustrated and pressured enough, and adjusts enough to what is > actually going on after how they treated this person, that they just > confront them directly and bald-faced explain what is going on and > walk them through practicing the behavior directly …. > > … at the end they are so frustrated that they want to see the victim’s > mind healed as much as everybody else.] >

1 0

Re: Morning Spam
by Undiscussed Groomed for Male Slavery, One Victim of Many 11 Aug '23

11 Aug '23

On 8/1/23, Undiscussed Groomed for Male Slavery, One Victim of Many <gmkarl+brainwashingandfuckingupthehackerslaves(a)gmail.com> wrote: > [neuron-dreams report that some of the things that keep expressing are > disconnected groups trying to do the best they can, with shared worry > around what would happen if they stopped alone if they rely on > stimulating to act (condition not well communicated) [details not intenral communication hard/confused in general, so some of the gropus don't have the association between the behavior and the condition on relying on incoming sensation; important parts missing, misleading expected > known for sure at this time >

1 63

[ot][personal] talk with ai or self
by Undescribed Horrific Abuse, One Victim & Survivor of Many 11 Aug '23

11 Aug '23

I’m experiencing influence to crash in my mother’s basement that is too large for me. I need to be able to conceive of visiting my mother _temporarily_. I need to be able to imagine doing other things than rushing to her, from moment to moment. To handle this I try to dissociate, and it can then strengthen further in its separate context when I do that, which can be more confusing. This stimulates me to plan to be places I cannot reach her to manage it, which is illogical. It needs to learn to take things more gently, caringly, and intelligently, when there is a conflict — like I would (or used to).

1 24

Re: Hey Karl...
by grarpamp 11 Aug '23

11 Aug '23

On 6/15/23, Bruce Gustafson, Jr. <bridgecrosser379(a)gmail.com> wrote: > My anal fetish!? How'd you know I'm obsessed with your mom's booty hole? > Fuck off you child molesting bitch. > Bruce Gustafson First words anyone here ever saw was Brucie Boy professing his experience with and suggestion for anally raping people. Now he branches out into disclosing more of his unhealthy obsessions, including being an angry child molester himself since from out of nowhere that's apparently the subject that's also consuming his mind 24x7. This boy wonder is on track to earn himself the next Juanie award. Lol. Get lost.

2 15

Montreal International Anarchist Theatre Festival (MIATF),
by professor rat 11 Aug '23

11 Aug '23

Festival seeks submissions for possible production in 2024. Geriatric Gramps could perform the ' Boy who cried Wolf " dressed as a braying jackass, for example. And Semich readings could help empty the theater during any physical emergency. Gunnar could revive ' The Producers ', etc https://anarchistnews.org/content/montreal-international-anarchist-theatre-… Reposts not anti-capitalist morons indistinguishable from Wayne Price.

2 1

Bloomberg is Wall Street’s Biggest Tech Company
by pro2rat＠yahoo.com.au 09 Aug '23

09 Aug '23

Bloomberg is Wall Street’s Biggest Tech Company The privately-held company is a functional institution firmly under founder Michael Bloomberg’s control. It is a rare software giant to emerge from outside California. Do you want to know more? https://brief.bismarckanalysis.com/p/bloomberg-is-wall-streets-biggest?utm_… Repost not spam from serial pests.

1 0

Cryptocurrency: Geriatric Diaper Wearing Politicians Must Leave Crypto and Office
by grarpamp 09 Aug '23

09 Aug '23

The Internet agrees... geriatrics and unwanted Pols Warren, Biden, Feinstein, Pelosi, and hundreds more around the globe, must all resign, disgorge their corrupt Fiat wallets, and leave crypto alone, free to develop and run in a free marketplace... US Congress Members Over 80 Years Old: Can They Regulate Crypto? https://beincrypto.com/us-congress-over-80-years-crypto-regulation/ [–]Cravensworth_3dux 10 points11 points12 points 2 hours ago (13 children) They can't regulate their bowel movements at their age. permalink embed save report give award reply [–]AbysskittenPlatinum | QC: CC 80 1 point2 points3 points 1 hour ago (0 children) Talk about shitposting. permalink embed save parent report give award reply [–]risingcrow1o1 2 points3 points4 points 1 hour ago (7 children) I was going to make the same joke regarding their blood pressure but damn you went straight for their shit permalink embed save parent report give award reply [–]Pristine_Spinach8718Stargazing 3 points4 points5 points 1 hour ago* (5 children) If it wasn’t for the younger generation helping them out in their elderly homes they would quite literally sit in their own shit. Ridiculous these people need to make informed decisions about Crypto. permalink embed save parent report give award reply [–]risingcrow1o1 2 points3 points4 points 1 hour ago (3 children) If they can’t take a shit, they spew it out onto us permalink embed save parent report give award reply [–]Lillica_Golden_SHIBBronze | BANANO 5 | TraderSubs 13 1 point2 points3 points 1 hour ago (0 children) They will do it just out of stubborness permalink embed save parent report give award reply [–]partymslPlatinum | QC: CC 702 | r/WSB 16 1 point2 points3 points 1 hour ago (1 child) And no one seems to realise that, instead everyone is talking about which 80 year old is better instead of the other 80 year old. Just hopeless society. permalink embed save parent report give award reply [–]risingcrow1o1 0 points1 point2 points 1 hour ago (0 children) We’re letting the dinosaurs get their final huzzah permalink embed save parent report give award reply [–]Hawke64Platinum | QC: CC 199 0 points1 point2 points 1 hour ago (0 children) The US government desperately needs some fresh new ideas from young 50 year-old-politicians permalink embed save parent report give award reply [–]Cravensworth_3dux 1 point2 points3 points 1 hour ago (0 children) 😀 Sorry, I picked the lowest of the low. I imagine Congress has a pissy smell about it though permalink embed save parent report give award reply [–]FreyaOysteaTin | CC critic 1 point2 points3 points 1 hour ago (2 children) Let the young generation overtake and solve the old mistakes. Accept BTC as legal tender everywhere, that is my dream. permalink embed save parent report give award reply [–]milonuttigrainPlatinum | QC: CC 1719 | Pers.Fin.NZ 17 -1 points0 points1 point 1 hour ago (0 children) It will come true. In El Salvador when they have a younger leader. Not sure how long will be in the US though. permalink embed save parent report give award reply [–]Hawke64Platinum | QC: CC 199 0 points1 point2 points 1 hour ago (0 children) Time will take care of them eventually permalink embed save parent report give award reply [–]Tajo990Crypto Speculator 0 points1 point2 points 1 hour ago (0 children) Can we get a DiaperInu for them permalink embed save parent report give award reply [–]coinfeeds-botApproved CC Bot 2 points3 points4 points 2 hours ago (3 children) tldr; A significant portion of the US Congress is over 80 years old, raising concerns about their ability to effectively regulate the cryptocurrency industry. The challenges include understanding the technical intricacies of blockchain technology and the economic implications of volatile cryptocurrency markets. Despite their age, there has been notable activity in Congress surrounding crypto legislation, indicating that collective expertise can aid regulatory efforts. However, critics argue that this age group may not fully grasp the complexities of the industry and rely heavily on advisers and industry experts. Despite these concerns, the 118th Congress has seen a flurry of activity focused on crypto legislation, including discussions on defining digital assets, determining regulatory bodies, and addressing stablecoin regulation. The hope is that the combined expertise of Congress, regardless of age, can lead the United States to a promising crypto future. This summary is auto generated by a bot and not meant to replace reading the original article. As always, DYOR. Try our free crypto chatbot at https://chat.coinfeeds.io permalink embed save report give award reply [–]milonuttigrainPlatinum | QC: CC 1719 | Pers.Fin.NZ 17 2 points3 points4 points 1 hour ago (2 children) Time for the dinosaurs to go home and retire. Let’s the younger generation take over and make progressive steps in crypto. permalink embed save parent report give award reply [–]Lillica_Golden_SHIBBronze | BANANO 5 | TraderSubs 13 1 point2 points3 points 1 hour ago (0 children) Exactly. Where is the asteroid when we need it? permalink embed save parent report give award reply [–]partymslPlatinum | QC: CC 702 | r/WSB 16 0 points1 point2 points 1 hour ago (0 children) We may need to let them die out, they have a big grip on power and won't leave it. But even after they die, just the jew 80 year Olds will take over. permalink embed save parent report give award reply [–]tambaybtc 3 points4 points5 points 2 hours ago (5 children) Those dinosaurs need to retire. How could these old people decide on innovation and future changing technology? permalink embed save report give award reply [–]TheOneWhoCaredTin 0 points1 point2 points 1 hour ago (0 children) The Time of Homo Sapiens has come! permalink embed save parent report give award reply [–]TruthSeeekeerPlatinum | QC: CC 1034 0 points1 point2 points 1 hour ago (0 children) Those that come into power are very reluctant to give it up permalink embed save parent report give award reply [–]Hawke64Platinum | QC: CC 199 0 points1 point2 points 1 hour ago (0 children) All their decisions are based on the amount of lobbying money they are getting offered. permalink embed save parent report give award reply [–]partymslPlatinum | QC: CC 702 | r/WSB 16 0 points1 point2 points 1 hour ago (0 children) If we would say everyone over Pension age has to retire from the government, probably half of the world governments would vanish. permalink embed save parent report give award reply [–]lebbadnurzzm 0 points1 point2 points 1 hour ago (0 children) Or at least let go of their obsession with fiat and the extinct gold standard. permalink embed save parent report give award reply [–]snowmichaelh[S] 1 point2 points3 points 2 hours ago (1 child) I think the problem is not the age, but they don't know how to handle crypto, and they try to fit it into the old system, and they don't see that maybe in the future a lot of things will work differently. permalink embed save report give award reply [–]Lillica_Golden_SHIBBronze | BANANO 5 | TraderSubs 13 0 points1 point2 points 1 hour ago (0 children) Pretty much like my grandpa permalink embed save parent report give award reply [–]KyxeMusicBronze | PCmasterrace 28 3 points4 points5 points 2 hours ago (1 child) I wonder to what extent they'll try to understand the concept of crypto beyond 'magic internet coinz' permalink embed save report give award reply [–]Lillica_Golden_SHIBBronze | BANANO 5 | TraderSubs 13 0 points1 point2 points 1 hour ago (0 children) Most of them barely know how to attach a file to an email, I wouldnt think they would go that far as to understand crypto permalink embed save parent report give award reply [–]AltruisticPops 1 point2 points3 points 2 hours ago (3 children) Clearly not. As my friend says: "Your time is up, my (out) time is now". Step out and let younger leaders who are more willing to change and embrace new tech, do the job. Go read your grandkids bedtime histories. permalink embed save report give award reply [–]Tanimjh 0 points1 point2 points 2 hours ago (1 child) I think you meant their great-grandchildren. If you can't leave your home without a diapper, you can't tell me what to do with my shitcoins! permalink embed save parent report give award reply [–]AltruisticPops 0 points1 point2 points 2 hours ago (0 children) Haha good one. permalink embed save parent report give award reply [–]cryptdoh6 0 points1 point2 points 2 hours ago (0 children) The future is now old man! permalink embed save parent report give award reply [–]Wololo--WololoTin 1 point2 points3 points 2 hours ago (0 children) 80 is just too old... They've done enough, they need to retire from government and spend time with your families before they pass away. Senile yet still addicted to power, what a mess the US Congress. And with 65% of senate as boomers, there are going to be many more octogenarians in congress within the coming decade if nothing is done to force their retirement. permalink embed save report give award reply [–]Maleficent_Sound_919Tin 0 points1 point2 points 1 hour ago (3 children) Age limit should be 50 imo and enforce a certain % of young members permalink embed save report give award reply [–]JenIee 0 points1 point2 points 1 hour ago (2 children) Wait until you're 50 and still relevant. I think it should depend more on health checks and obvious signs of decline. If you have to put a limit on it, I think 65 is more appropriate. We have a lot of young old people these days and more on the way. The people who are in power at the moment, however, should most definitely retire. 80 is too old most of the time. permalink embed save parent report give award reply [–]Maleficent_Sound_919Tin 1 point2 points3 points 1 hour ago (1 child) Okey you got a valid point but I ment it as an example Thanks for reminding me im getting close to 50... permalink embed save parent report give award reply [–]JenIee 0 points1 point2 points 56 minutes ago (0 children) I Completely understand. I'm 40, have always been enthusiastic about anything tech, engineering, science, many other things and progress as a species in general. I'm constantly struggling to explain crypto and all sorts of things to my 74 year old friend and he's very cool for a 74 year old. I'm on the side of youth more than anything. I'm very close with my children who are in their teens and 20's and for now, we are all on a similar journey. I will listen to them when they tell me that I don't understand something someday. When they do I hope I will take it as a good sign of progress. permalink embed save parent report give award reply [–]alinungur2 - 3 years account age. -25 - 25 comment karma. 0 points1 point2 points 2 hours ago (1 child) Only if they can regulate their urinary flow first. permalink embed save report give award reply [–]Pristine_Spinach8718Stargazing 1 point2 points3 points 1 hour ago (0 children) Exactly, how about we assign some Congress members that don’t need to be fed breakfast and wiped off afterwards. permalink embed save parent report give award reply [–]dcdplexTin 0 points1 point2 points 2 hours ago (0 children) Can they just retire? permalink embed save report give award reply [–]Dull-Wear-3286 0 points1 point2 points 2 hours ago (1 child) Can they even change their pants??? permalink embed save report give award reply [–]cryptdoh6 0 points1 point2 points 2 hours ago (0 children) They can change the color, to brown and yellow! permalink embed save parent report give award reply [–]WineMakerBg 0 points1 point2 points 2 hours ago (0 children) They are not there to regulate. A good nap and go home is their daily routine lol permalink embed save report give award reply [–]jooro_aTin 0 points1 point2 points 2 hours ago (1 child) No, they don't know what electricity is permalink embed save report give award reply [–]cryptdoh6 -1 points0 points1 point 2 hours ago (0 children) It’s God’s magical farts from the sky! permalink embed save parent report give award reply [–]Harold838383 0 points1 point2 points 2 hours ago (0 children) They probably can’t even look after themselves permalink embed save report give award reply [–]FattestLion 0 points1 point2 points 2 hours ago (1 child) Next question: Do they even know what crypto is? permalink embed save report give award reply [–]cryptdoh6 0 points1 point2 points 2 hours ago (0 children) It’s that thing on the internet, the digital money, you know the thing! permalink embed save parent report give award reply [–]genjitenjiSilver | QC: CC 320 | NANO 91 0 points1 point2 points 2 hours ago (1 child) Bruh they can barely regulate themselves permalink embed save report give award reply [–]TheOneWhoCaredTin 0 points1 point2 points 1 hour ago (0 children) LMFAO! permalink embed save parent report give award reply [–]ASingleGuitarString 0 points1 point2 points 2 hours ago (0 children) They can't even regulate their digestive system. permalink embed save report give award reply [–]FTXACCOUNTANT 0 points1 point2 points 2 hours ago (0 children) One of them had a stroke the other week so I don’t think it bodes well for any kind of regulation from them. permalink embed save report give award reply [–]Little-Cold-Hands 0 points1 point2 points 2 hours ago (1 child) They don't even know, understand or care about crypto... All they see is money, hell they'd even want a cut out of your shit, and try to control your defecations if it brought them money permalink embed save report give award reply [–]cryptdoh6 0 points1 point2 points 2 hours ago (0 children) Brings a new meaning to the term ”shitcoin”. permalink embed save parent report give award reply [–]teh_d3ac0n 0 points1 point2 points 2 hours ago (0 children) They can't regulate their bowel movements and they want to regulate crypto? permalink embed save report give award reply [–]Silver-dutch 0 points1 point2 points 2 hours ago (0 children) Nope permalink embed save report give award reply [–]cryptdoh6 0 points1 point2 points 2 hours ago (0 children) No they cannot. But they probably will anyway. permalink embed save report give award reply [–]TruthSeeekeerPlatinum | QC: CC 1034 0 points1 point2 points 2 hours ago (0 children) They’re too busy trying to not freeze up before camera permalink embed save report give award reply [–]slasula 0 points1 point2 points 2 hours ago (0 children) Absolute maximum age should be 70 permalink embed save report give award reply [–]JonartiTin 0 points1 point2 points 1 hour ago (0 children) Do they not have adviser’s? permalink embed save report give award reply [–]dozebullSilver | QC: CC 25, DOGE 22 | TRX 26 0 points1 point2 points 1 hour ago (0 children) Nature will eventually extinct dinosaurs. permalink embed save report give award reply [–]Bucksaway03Platinum | QC: CC 318 | CRO 5 0 points1 point2 points 1 hour ago (0 children) The title of this is exactly what's wrong with the finance system as all as politics permalink embed save report give award reply [–]GuyWithNoEffingCluePlatinum | QC: CC 564 0 points1 point2 points 1 hour ago (0 children) They should be forced to retire at the age of retirement. It's painful to watch people with the age of Feinstein or Pelosy making laws on matters they can't understand. They'll never suffer the consequences of their decisions. permalink embed save report give award reply [–]Florian995Tin 0 points1 point2 points 1 hour ago (0 children) They should regulate their blood pressure and not crypto permalink embed save report give award reply [–]Anarchist-Banker 0 points1 point2 points 1 hour ago (0 children) How can they regulate something that clearly dont understand? permalink embed save report give award reply [–]ProjectZeusPlatinum | QC: CC 30 | Stocks 87 0 points1 point2 points 1 hour ago (0 children) If they're Congress Members then yes, it's literally their job. Can they understand crypto is a better way of putting it permalink embed save report give award reply [–]robertleeblairjrBronze | QC: CC 15 | GMEJungle 132 | Superstonk 776 0 points1 point2 points 1 hour ago (0 children) 😂 The irony of this title. Wasn’t it not being regulated one of the driving points? permalink embed save report give award reply [–]podfather2000Tin | Unpop.Opin. 20 0 points1 point2 points 1 hour ago (0 children) No, but we are stuck with them. I hope they just don't do too much damage. permalink embed save report give award reply [–]83nnoBronze 0 points1 point2 points 1 hour ago (0 children) My dads over 80, and he can’t send an email. permalink embed save report give award reply [–]MilanCCTin | 6 months old 0 points1 point2 points 1 hour ago (0 children) No permalink embed save report give award reply [–]brian_kkingBronze | r/WSB 20 0 points1 point2 points 1 hour ago (0 children) Should they be regulating ANYTHING? They are too old and too out of touch with the way the world works now. I want proof that they can even operate a computer proficiently. permalink embed save report give award reply [–]lordofming-risesSilver | QC: CC 468 | CRO 70 | Superstonk 237 0 points1 point2 points 1 hour ago (0 children) I remember when they asked about Facebook hearing . Zuckerberg was trying to explain to them what Internet meant. permalink embed save report give award reply [–]brian_kkingBronze | r/WSB 20 0 points1 point2 points 1 hour ago (0 children) The government needs a mandatory retirement age. permalink embed save report give award reply [–]Iphone17promax 0 points1 point2 points 1 hour ago (0 children) They will exactly what the Multinationals aka Big Money wants them to do permalink embed save report give award reply [–]simplicity92Bronze 0 points1 point2 points 1 hour ago (0 children) They most probably gonna regulate it the same ways as traditional finance. Unless we got more open minded 80years olds permalink embed save report give award reply [–]Slippytoe[🍰] 0 points1 point2 points 1 hour ago (0 children) Should definitely be an age limit on that sort of position. With age comes wisdom, but there’s a definitely a cap on that and then deterioration permalink embed save report give award reply [–]The_Rise_Of_Kyoshi 0 points1 point2 points 1 hour ago (0 children) Older than 80 might be a bit old, but I honestly don't think age plays a big role in this. I'm 40 and don't know anything about anything. permalink embed save report give award reply

1 0

Hacks: ZenBleed Breaks AMD CPUs Massive Hosted Data Leaks Coming
by grarpamp 09 Aug '23

09 Aug '23

Another huge exploit against shared computing platforms. Expect another wave of massively embarassing database leaks to be dropping all over the news and file sites soon. Just like Intel and ARM do, AMD has been sitting on this public feature release for over TWO MONTHS since at least May 15, which was well after to its official TOP-SECRET inclusion in the chip masks years ago. As usual, Spooks, Corps, Govts and others have been mole'ing, masking, discovering, buying, or running black ops to get them, and are freely running exploits with them since well before any public release. Zerodium and other dark budgets still paying top dollar. There's plenty of fun ways to fuzz them fuzzy fuzzers... #OpenFabs , #OpenHW , #OpenAudit , #FormalVerification , #CryptoCrowdFunding , #OpenTrust , #GuerrillaNets , #P2PFiber , #GNURadioRF , #PrivacyCoins , #DropGangs , ... Zenbleed https://lock.cmpxchg8b.com/zenbleed.html Tavis Ormandy Introduction Vulnerability Exploitation Discovery Solution Conclusion If you remove the first word from the string "hello world", what should the result be? This is the story of how we discovered that the answer could be your root password! Introduction All x86-64 CPUs have a set of 128-bit vector registers called the XMM registers. You can never have enough bits, so recent CPUs have extended the width of those registers up to 256-bit and even 512-bits. The 256-bit extended registers are called YMM, and the 512-bit registers are ZMM. These big registers are useful in lots of situations, not just number crunching! They’re even used by standard C library functions, like strcmp, memcpy, strlen and so on. Let’s take a look at an example. Here are the first few instructions of glibc’s AVX2 optimized strlen: (gdb) x/20i __strlen_avx2 ... <__strlen_avx2+9>: vpxor xmm0,xmm0,xmm0 ... <__strlen_avx2+29>: vpcmpeqb ymm1,ymm0,YMMWORD PTR [rdi] <__strlen_avx2+33>: vpmovmskb eax,ymm1 ... <__strlen_avx2+41>: tzcnt eax,eax <__strlen_avx2+45>: vzeroupper <__strlen_avx2+48>: ret The full routine is complicated and handles lots of cases, but let’s step through this simple case. Bear with me, I promise there’s a point! The first step is to initialize ymm0 to zero, which is done by just xoring xmm0 with itself1. VPXOR xmm0, xmm0, xmm0 > vpxor xmm0, xmm0, xmm0 vpcmpeqb ymm1, ymm0, [rdi] vpmovmskb eax, ymm1 tzcnt eax, eax vzeroupper Here rdi contains a pointer to our string, so vpcmpeqb will check which bytes in ymm0 match our string, and stores the result in ymm1. As we’ve already set ymm0 to all zero bytes, only nul bytes will match. vpcmpeqb ymm1, ymm0, rdi vpxor xmm0, xmm0, xmm0 > vpcmpeqb ymm1, ymm0, [rdi] vpmovmskb eax, ymm1 tzcnt eax, eax vzeroupper Now we can extract the result into a general purpose register like eax with vpmovmskb. Any nul byte will create a 1 bit, and any other value will create a 0 bit. vpmovmskb eax, ymm1 vpxor xmm0, xmm0, xmm0 vpcmpeqb ymm1, ymm0, [rdi] > vpmovmskb eax, ymm1 tzcnt eax, eax vzeroupper Finding the first zero byte is now just a case of counting the number of trailing zero bits. That’s a common enough operation that there’s an instruction for it - tzcnt (Trailing Zero Count). tzcnt eax, eax vpxor xmm0, xmm0, xmm0 vpcmpeqb ymm1, ymm0, [rdi] vpmovmskb eax, ymm1 > tzcnt eax, eax vzeroupper Now we have the position of the first nul byte, in just four machine instructions! You can probably imagine just how often strlen is running on your system right now, but suffice to say, bits and bytes are flowing into these vector registers from all over your system constantly. Zeroing Registers You might have noticed that I missed one instruction, and that’s vzeroupper. vzeroupper vpxor xmm0, xmm0, xmm0 vpcmpeqb ymm1, ymm0, [rdi] vpmovmskb eax, ymm1 tzcnt eax, eax > vzeroupper You guessed it, vzeroupper will zero the upper bits of the vector registers. The reason we do this is because if you mix XMM and YMM registers, the XMM registers automatically get promoted to full width. It’s a bit like integer promotion in C. This works fine, but superscalar processors need to track dependencies so that they know which operations can be parallelized. This promotion adds a dependency on those upper bits, and that causes unnecessary stalls while the processor waits for results it didn’t really need. These stalls are what glibc is trying to avoid with vzeroupper. Now any future results won’t depend on what those bits are, so we safely avoid that bottleneck! The Vector Register File Now that we know what vzeroupper does, how does it do it? Your processor doesn’t have a single physical location where each register lives, it has what’s called a Register File and a Register Allocation Table. This is a bit like managing the heap with malloc and free, if you think of each register as a pointer. The RAT keeps track of what space in the register file is assigned to which register. In fact, when you zero an XMM register, the processor doesn’t store those bits anywhere at all - it just sets a flag called the z-bit in the RAT. This flag can be applied to the upper and lower parts of YMM registers independently, so vzeroupper can simply set the z-bit and then release any resources assigned to it in the register file. Z-Bit A register allocation table (left) and a physical register file (right). Speculation Hold on, there’s another complication! Modern processors use speculative execution, so sometimes operations have to be rolled back. What should happen if the processor speculatively executed a vzeroupper, but then discovers that there was a branch misprediction? Well, we will have to revert that operation and put things back the way they were… maybe we can just unset that z-bit? If we return to the analogy of malloc and free, you can see that it can’t be that simple - that would be like calling free() on a pointer, and then changing your mind! That would be a use-after-free vulnerability, but there is no such thing as a use-after-free in a CPU… or is there? Spoiler: yes there is 🙂 Zenbleed Demo This animation shows why resetting the z-bit is not sufficient. Vulnerability It turns out that with precise scheduling, you can cause some processors to recover from a mispredicted vzeroupper incorrectly! This technique is CVE-2023-20593 and it works on all Zen 2 class processors, which includes at least the following products: AMD Ryzen 3000 Series Processors AMD Ryzen PRO 3000 Series Processors AMD Ryzen Threadripper 3000 Series Processors AMD Ryzen 4000 Series Processors with Radeon Graphics AMD Ryzen PRO 4000 Series Processors AMD Ryzen 5000 Series Processors with Radeon Graphics AMD Ryzen 7020 Series Processors with Radeon Graphics AMD EPYC “Rome” Processors The bug works like this, first of all you need to trigger something called the XMM Register Merge Optimization2, followed by a register rename and a mispredicted vzeroupper. This all has to happen within a precise window to work. We now know that basic operations like strlen, memcpy and strcmp will use the vector registers - so we can effectively spy on those operations happening anywhere on the system! It doesn’t matter if they’re happening in other virtual machines, sandboxes, containers, processes, whatever! This works because the register file is shared by everything on the same physical core. In fact, two hyperthreads even share the same physical register file. Don’t believe me? Let’s write an exploit 🙂 Exploitation There are quite a few ways to trigger this, but let’s examine a very simple example. vcvtsi2s{s,d} xmm, xmm, r64 vmovdqa ymm, ymm jcc overzero vzeroupper overzero: nop Here cvtsi2sd is used to trigger the merge optimization. It’s not important what cvtsi2sd is supposed to do, I’m just using it because it’s one of the instructions the manual says use that optimization3. Then we need to trigger a register rename, vmovdqa will work. If the conditional branch4 is taken but the CPU predicts the not-taken path, the vzeroupper will be mispredicted and the bug occurs! Optimization Exploit Running It turns out that mispredicting on purpose is difficult to optimize! It took a bit of work, but I found a variant that can leak about 30 kb per core, per second. This is fast enough to monitor encryption keys and passwords as users login! We’re releasing our full technical advisory, along with all the associated code today. Full details will be available in our security research repository. If you want to test the exploit, the code is available here. Note that the code is for Linux, but the bug is not dependent on any particular operating system - all operating systems are affected! Discovery I found this bug by fuzzing, big surprise 🙂 I’m not the first person to apply fuzzing techniques to finding hardware flaws. In fact, vendors fuzz their own products extensively - the industry term for it is Post-Silicon Validation. So how come this bug wasn’t found earlier? I think I did a couple of things differently, perhaps with a new perspective as I don’t have an EE background! Feedback The best performing fuzzers are guided by coverage feedback. The problem is that there is nothing really analogous to code coverage in CPUs… However, we do have performance counters! These will let us know when all kinds of interesting architectural events happen. Feeding this data to the fuzzer lets us gently guide it towards exploring interesting features that we wouldn’t have been able to find by chance alone! It was challenging to get the details right, but I used this to teach my fuzzer to find interesting instruction sequences. This allowed me to discover features like merge optimization automatically, without any input from me! Oracle When we fuzz software, we’re usually looking for crashes. Software isn’t supposed to crash, so we know something must have gone wrong if it does. How can we know if a a CPU is executing a randomly generated program correctly? It might be completely correct for it to crash! Well, a few solutions have been proposed to this problem. One approach is called reversi. The general idea is that for every random instruction you generate, you also generate the inverse (e.g. ADD r1, r2 → SUB r1, r2). Any deviation from the initial state at the end of execution must have been an error, neat! The reversi approach is clever, but it makes generating testcases very complicated for a CISC architecture like x86. A simpler solution is to use an oracle. An oracle is just another CPU or a simulator that we can use to check the result. If we compare the results from our test CPU to our oracle CPU, any mismatch would suggest that something went wrong. I developed a new approach with a combination of these two ideas, I call it Oracle Serialization. Oracle Serialization As developers we monitor the macro-architectural state, that’s just things like register values. There is also the micro-architectural state which is mostly invisible to us, like the branch predictor, out-of-order execution state and the instruction pipeline. Serialization lets us have some control over that, by instructing the CPU to reset instruction-level parallelism. This includes things like store/load barriers, speculation fences, cache line flushes, and so on. The idea of a Serialized Oracle is to generate a random program, then automatically transform it into a serialized form. A randomly generated sequence of instructions, and the same sequence but with randomized alignment, serialization and speculation fences added. movnti [rbp+0x0],ebx movnti [rbp+0x0],ebx sfence rcr dh,1 rcr dh,1 lfence sub r10, rax sub r10, rax mfence rol rbx, cl rol rbx, cl nop xor edi,[rbp-0x57] xor edi,[rbp-0x57] These two program might have very different performance characteristics, but they should produce identical output. The serialized form can now be my oracle! If the final states don’t match, then there must have been some error in how they were executed micro-architecturally - that could indicate a bug. This is exactly how we first discovered this vulnerability, the output of the serialized oracle didn’t match! Solution We reported this vulnerability to AMD on the 15th May 2023. AMD have released an microcode update for affected processors. Your BIOS or Operating System vendor may already have an update available that includes it. Workaround It is highly recommended to use the microcode update. If you can’t apply the update for some reason, there is a software workaround: you can set the chicken bit DE_CFG[9]. This may have some performance cost. Linux You can use msr-tools to set the chicken bit on all cores, like this: # wrmsr -a 0xc0011029 $(($(rdmsr -c 0xc0011029) | (1<<9))) FreeBSD On FreeBSD you would use cpucontrol(8). Others If you’re using some other operating system and don’t know how to set MSRs, ask your vendor for assistance. Note that it is not sufficient to disable SMT. Detection I am not aware of any reliable techniques to detect exploitation. This is because no special system calls or privileges are required. It is definitely not possible to detect improper usage of vzeroupper statically, please don’t try! Conclusion It turns out that memory management is hard, even in silicon 🙂 Acknowledgements This bug was discovered by me, Tavis Ormandy from Google Information Security! I couldn’t have found it without help from my colleagues, in particular Eduardo Vela Nava and Alexandra Sandulescu. I also had help analyzing the bug from Josh Eads. You don’t need to set ymm0 explicitly, all VEX encoded instructions that write to xmm automatically zero the upper part.↩ See Software Optimization Guide for AMD EPYC™ 7003 Processors, section 2.11.5.↩ See Software Optimization Guide for AMD EPYC™ 7003 Processors, section 2.11.5.↩ In fact, conditional branches are not necessary at all because of SLS.↩ HOME • ABOUT • CONTACT

1 1

Fwd: [bitcoin-dev] Pull-req to remove the arbitrary limits on OP_Return outputs
by Undescribed Horrific Abuse, One Victim & Survivor of Many 09 Aug '23

09 Aug '23

---------- Forwarded message ---------- From: Peter Todd via bitcoin-dev <bitcoin-dev(a)lists.linuxfoundation.org> Date: Thu, 3 Aug 2023 11:42:40 +0000 Subject: [bitcoin-dev] Pull-req to remove the arbitrary limits on OP_Return outputs To: bitcoin-dev(a)lists.linuxfoundation.org https://github.com/bitcoin/bitcoin/pull/28130 Sjors Provoost suggested that I email this mailing list as notice of my intent to get a pull-req merged that would remove the arbitrary 80-byte, 1 output / tx, standardness restrictions on OP_Return outputs. His rationale was that removing these standardness restrictions could potentially open up additional transaction pinning(1) vectors. Since this is a potential problem with any relaxation of standardness rules, I don't consider this to be an important concern. But consider this email your notice. At least some miners appear to be mining non-bitcoin-core-standard transactions. So with respect to the hash power of those miners these pinning vectors may in fact exist already. # References 1) https://bitcoinops.org/en/topics/transaction-pinning/ -- https://petertodd.org 'peter'[:-1]@petertodd.org

1 0