- cypherpunks - lists.cpunks.org

Bugs in billions of WiFi, Bluetooth chips allow password, data theft
by jim bell 18 Dec '21

18 Dec '21

https://www.bleepingcomputer.com/news/security/bugs-in-billions-of-wifi-blu… Bugs in billions of WiFi, Bluetooth chips allow password, data theft By Bill Toulas Researchers at the University of Darmstadt, Brescia, CNIT, and the Secure Mobile Networking Lab, have published a paper that proves it's possible to extract passwords and manipulate traffic on a WiFi chip by targeting a device's Bluetooth component. Modern consumer electronic devices such as smartphones feature SoCs with separate Bluetooth, WiFi, and LTE components, each with its own dedicated security implementation.However, these components often share the same resources, such as the antenna or wireless spectrum. This resource sharing aims to make the SoCs more energy-efficient and give them higher throughput and low latency in communications. As the researchers detail in the recently published paper, it is possible to use these shared resources as bridges for launching lateral privilege escalation attacks across wireless chip boundaries. The implications of these attacks include code execution, memory readout, and denial of service.

4 12

Posting tracking links is not "Embracing Hideouts"
by grarpamp 18 Dec '21

18 Dec '21

On 12/18/21, Gunnar Larson <g(a)xny.io> wrote: > https://lm.facebook.com/l.php?u=https%3A%2F%2Fwww.onlyinyourstate.com%2Fida… People be aware that you are sending a links that are full of Facebook and other actors global SpyVeillance tags. That is an action that is materially opposed to "embracing hideouts". And can be viewed by recipients as both suspect, and lazy. Instead, strip all links of all trackers, URL shorteners, redirects, etc and go straight to the source, ie... https://www.onlyinyourstate.com/idaho/outlaw-hideout-id/

1 0

Anti-5G “quantum pendants” are radioactive
by jim bell 18 Dec '21

18 Dec '21

Anti-5G “quantum pendants” are radioactive https://share.newsbreak.com/993b39lx

1 0

COVID-19 noise Vs signal
by professor rat 18 Dec '21

18 Dec '21

>From early 2020 on its been clear to me this latest epidemic out of China had to be taken as a biological warfare assault. There are just too many clues hiding-in-plain-sight to ignore this. " The wicked flee where none pursue " and the CCP act as guilty as certain rapist loose in liberal, democratic and progressive Sweden. But even if this pandemic was accidental there are still plenty of reasons to work for the long overdue death of every Marxist Communist commissar still breathing. There are worse things than war as the poor North Koreans, Uighur and many others are learning this minute. And where-ever there is net access then local rebels can do the heavy lifting. There is already an extraordinary amount of resistance to red-fascist bullying on the ground. Revolutionary defeatism can defeat the Red Army. And I still think the Bear can be played back against the Dragon. Pooter won't be around forever.

1 0

The Small Town Of Culdesac, Idaho Embraces Its History As A Hideout For Outlaws
by Gunnar Larson 18 Dec '21

18 Dec '21

https://lm.facebook.com/l.php?u=https%3A%2F%2Fwww.onlyinyourstate.com%2Fida…

1 0

List politics
by professor rat 18 Dec '21

18 Dec '21

Starting on the libertarian ancap right, list politics have steadily moved leftwards as cryptoanarchist infrastructure has moved out into the broader economy. But there's never been any question this was a political list. Prominent founder Mongo often referred crypto-centric posts to other fora. Even before the establishment of " Coderpunks '. This is not a list where encryption fanatics can nerd-out on technical details for too long. Or well they can, but at the risk of being ignored. Here endeth the sermon.

1 0

Project Veritas attempted extortion documented
by professor rat 18 Dec '21

18 Dec '21

>>> . . . while we hate to resort to whataboutism, can you imagine what the mainstream media would do if Trump's daughter's diary contained allegations of sexual molestation and 'inappropriate showers'? For now, we expect crickets. <<< Trump is on the record as saying he would marry his daughter and has been linked to golden showers. But all that aside, conservatives-coughs-fascists, seem quite happy to see a world where rapists, murderers and thieves can run rampant ( specifically criminals like Assange, Ulbricht and O'Keefe ) This is LOL-GOP-Qanon ' conservatism ' in action today!

1 0

Cryptocurrency: Privacy-Enabled Coins Route Around SWIFT and SPFS Censorship (of your financial interests too)
by grarpamp 18 Dec '21

18 Dec '21

https://www.themoscowtimes.com/2021/12/14/belarus-banks-readying-for-swift-… Belarusian banks are preparing for tougher Western sanctions by signing up to Russia’s alternative to the SWIFT, the international financial messaging network that underpins the global banking system, Russia’s Moskovsky Komsomolets tabloid has reported. Russia’s System for Transfer of Financial Messages (SPFS) has more than 400 domestic users — practically every licensed Russian lender — but is used by only 38 banks from nine other countries. Developed in 2014, SPFS is designed to keep banking transactions in the event of Western sanctions disconnecting Russia from SWIFT.

1 0

Ars Technica: Backdoor gives hackers complete control over federal agency network
by jim bell 18 Dec '21

18 Dec '21

Ars Technica: Backdoor gives hackers complete control over federal agency network. https://arstechnica.com/information-technology/2021/12/us-federal-agency-fa…

3 2

A new spyware-for-hire, Predator, caught hacking phones of politicians and journalists
by coderman 18 Dec '21

18 Dec '21

''' Nour, who lives in exile in Turkey, became suspicious when his phone was “running hot.” ''' https://techcrunch.com/2021/12/16/cytrox-predator-phone-hacking-meta/ A new spyware-for-hire, Predator, caught hacking phones of politicians and journalists While NSO Group was [taking flak](https://techcrunch.com/2021/11/23/apple-nso-group-lawsuit/) for hacking into the phones of journalists, activists and human rights defenders, an entire class of spyware makers and surveillance-for-hire outfits were operating as normal, largely unnoticed. These private surveillance groups develop and deploy never-before-seen exploits that quietly hack into and steal the contents of a victim’s phone — call logs, text messages, emails, location data and more — often on behalf of authoritarian governments targeting their most vocal critics. Now, following an investigation by researchers at Citizen Lab and Facebook’s new parent company, Meta, seven surveillance-for-hire groups have been banned from using the social media giant’s platforms to target other users. Meta [said Thursday](https://about.fb.com/news/2021/12/taking-action-against-surveilla… that it has removed more than 1,500 Facebook and Instagram accounts associated with the seven outfits, which the company said were used for reconnaissance, social engineering and sending malicious links to thousands of victims in over 100 countries. Meta said it’s notified around 50,000 people it believes were targeted by the seven groups. Although much of the recent focus of the surveillance industry has been on companies like NSO Group, both Citizen Lab and Meta warned that the wider surveillance-for-hire industry will continue to balloon if left unregulated. “It’s important to realize that NSO is only one piece of a much broader global cyber mercenary ecosystem,” according to a report of Meta’s investigation seen by TechCrunch before its publication. One of the banned companies is Cytrox, a North Macedonia-based spyware maker. Meta said it found the company using a “vast” infrastructure of web domains mimicking legitimate news sites to target the iPhone and Android devices of its victims. Meta said it sent legal notices to Cytrox and blocked hundreds of domains associated with its infrastructure. Meta was acting on findings by Citizen Lab, which also on Thursday released a [forensic report](https://citizenlab.ca/2021/12/pegasus-vs-predator-dissidents-doubly-infected-iphone-reveals-cytrox-mercenary-spyware/) into the hacking of phones belonging to two Egyptians living in exile — a former politician and the host of a popular news show who asked not to be named. Citizen Lab said the spyware that infected their phones in July 2021, dubbed Predator, was developed by Cytrox. Citizen Lab first discovered the spyware on the iPhone belonging to Ayman Nour, an Egyptian politician and outspoken critic of the incumbent president, Abdel Fattah el-Sisi, who took over the country following a military coup in 2013. Nour, who lives in exile in Turkey, became suspicious when his phone was “running hot.” Citizen Lab found that Nour’s phone had been infected with Pegasus, the now-infamous spyware created by NSO Group. That led to the discovery that his phone had been concurrently hit by the newly discovered Predator spyware. Both Nour’s phone and the phone belonging to the host of the news show were running iOS 14.6, the latest version of iOS at the time of the hacks, suggesting the spyware made use of a never-before-seen exploit in the iPhone’s software to infect the phones. Apple spokesperson Scott Radcliffe declined to say whether the company had fixed the vulnerability. Read more on TechCrunch - [A massive ‘stalkerware’ leak puts the phone data of thousands at risk](https://techcrunch.com/2021/10/19/stalkerware-security-phone-data-tho… - [Apple files lawsuit against NSO Group over Pegasus spyware](https://techcrunch.com/2021/11/23/apple-nso-group-lawsuit/) - [This tool tells you if NSO’s Pegasus spyware targeted your phone](https://techcrunch.com/2021/07/19/toolkit-nso-pegasus-iphone-android… Predator shares a similar set of features to NSO’s Pegasus. Citizen Lab said Nour was sent a malicious link over WhatsApp. When opened, the spyware can access a phone’s cameras and microphone and can exfiltrate the phone’s data. Predator — unlike Pegasus — lacks the ability to silently infect a phone without any user interaction, but it makes up for that with persistence. Citizen Lab said the spyware can survive a reboot of an iPhone — typically clearing any spyware lurking in its memory — by creating an automation using the Shortcuts feature built into iOS. The researchers said that, “remarkably,” Nour’s phone was compromised at the same time with both Pegasus and Predator, but that the infections were likely unrelated. “Based on the slapdash nature of Predator’s code, it’s clear we’re looking at the B Team here,” said Bill Marczak, one of the Citizen Lab researchers who discovered and analyzed the Predator malware. “Even so, Predator was still able to break into the latest, fully up-to-date phones, so it’s no surprise that we found repressive governments, including Egypt and Saudi Arabia, as Predator operators.” Citizen Lab said it was likely that Predator is being used by government customers in Armenia, Greece, Serbia, Indonesia, Madagascar and Oman — plus Egypt and Saudi Arabia, which are known to target their critics with mobile spyware. Meta, meanwhile, said its investigation found Predator customers in Vietnam, the Philippines and Germany. Cytrox CEO Ivo Malinkovski could not be reached for comment; an email sent prior to publication bounced as undelivered. Meta said that it also banned four other Israeli companies involved in the surveillance-for-hire business: Cobwebs, Cognyte, Black Cube and Bluehawk. In addition, it banned BellTrox, an Indian hacking outfit [accused of hacking](https://www.reuters.com/article/us-india-cyber-mercenaries-exclusi… into thousands of email accounts belonging to politicians and government officials, and a China-based spyware maker believed to be used by China’s law enforcement. Although NSO has faced [legal challenges](https://techcrunch.com/2021/11/23/apple-nso-group-lawsuit/) and restrictions on [its business dealings](https://techcrunch.com/2021/11/03/us-bans-trade-with-security-fir… in large part because of accusations of abuse and spying on members of civil society — claims that the company has repeatedly denied — the social media giant warned that the growing surveillance industry continues to proliferate regardless. “We will continue to investigate and enforce against anyone abusing our apps,” Meta’s report said. “However, these cyber mercenaries work across many platforms and national boundaries. Their capabilities are used by both nation-states and private enterprises, and effectively lower the barrier to entry for anyone willing to pay. For their targets, it is often impossible to know they are being surveilled across the internet.” --------------------------------------------------------------- You can contact this reporter securely over Signal and WhatsApp to +1 646-755-8849. You can also send files or documents using our SecureDrop. [Learn more](https://techcrunch.com/2020/12/17/techcrunch-launches-securedrop/).

2 1