- cypherpunks - lists.cpunks.org

There’s a Hole in the Boot
by coderman 29 Jul '20

29 Jul '20

https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ “BootHole” vulnerability in the GRUB2 bootloader opens up Windows and Linux devices using Secure Boot to attack. All operating systems using GRUB2 with Secure Boot must release new installers and bootloaders. [Download the PDF >](https://eclypsium.com/wp-content/uploads/2020/07/Theres-a-Hole-in-the-Boot.pdf) Introduction Eclypsium researchers have discovered a vulnerability — dubbed “BootHole” — in the GRUB2 bootloader utilized by most Linux systems that can be used to gain arbitrary code execution during the boot process, even when Secure Boot is enabled. Attackers exploiting this vulnerability can install persistent and stealthy bootkits or malicious bootloaders that could give them near-total control over the victim device. The vulnerability affects systems using Secure Boot, even if they are not using GRUB2. Almost all signed versions of GRUB2 are vulnerable, meaning virtually every Linux distribution is affected. In addition, GRUB2 supports other operating systems, kernels and hypervisors such as Xen. The problem also extends to any Windows device that uses Secure Boot with the standard Microsoft Third Party UEFI Certificate Authority. Thus the majority of laptops, desktops, servers and workstations are affected, as well as network appliances and other special purpose equipment used in industrial, healthcare, financial and other industries. This vulnerability makes these devices susceptible to attackers such as the [threat actors recently discovered](https://twitter.com/ESETresearch/status/1275770256389222400) using malicious UEFI bootloaders. Eclypsium has coordinated the responsible disclosure of this vulnerability with a variety of industry entities, including OS vendors, computer manufacturers, and CERTs. Mitigation will require new bootloaders to be signed and deployed, and vulnerable bootloaders should be revoked to prevent adversaries from using older, vulnerable versions in an attack. This will likely be a long process and take considerable time for organizations to complete patching. Table of Contents - [Background: Secure Boot, GRUB2, and CAs](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#background) - [Threats to the Boot Process](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#threat… - [UEFI Secure Boot](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#uefi) - [Chains of Trust and GRUB2](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#chains) - [Challenges of Secure Boot](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#challenge… - [Breaking Secure Boot Through GRUB2](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#breaking) - [Vulnerability Analysis](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#vulne… - [Additional Vulnerabilities](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot… - [Impact](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#impacts) - [Mitigation](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#mit… - [Recommendations](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot… - [Conclusions](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#co… Background: Secure Boot, GRUB2, and CAs Secure Boot can be a fairly deep and technical topic. Our goal here is to give a high-level introduction to the key concepts relevant to this research without going into all the granular details. We have included a variety of external links to provide additional information for those interested. Alternatively, you can go straight to the [description of the vulnerability](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#… itself. Threats to the Boot Process The boot process is one of the most fundamentally important aspects of security for any device. It relies on a variety of firmware that controls how a device’s various components and peripherals are initialized and ultimately coordinates the loading of the operating system itself. In general, the earlier code is loaded, the more privileged it is. If this process is compromised, attackers can control how the operating system is loaded and subvert all higher-layer security controls. Recent research has identified ransomware in the wild using [malicious EFI bootloaders](https://twitter.com/ESETresearch/status/1275770256389222400) as a way to take control of machines at the time of boot. Previously threat actors used malware tampering with legacy OS bootloaders including [APT41 Rockboot](https://attack.mitre.org/software/S0112/), [LockBit](https://news.sophos.com/en-us/2020/04/24/lockbit-ransomware-borrow…, [FIN1 Nemesis](https://arstechnica.com/information-technology/2015/12/nemesis-mal…, [MBR-ONI](https://www.cybereason.com/blog/night-of-the-devil-ransomware-or-w…, [Petya/NotPetya](https://us-cert.cisa.gov/ncas/alerts/TA17-181A), and [Rovnix](https://malpedia.caad.fkie.fraunhofer.de/details/win.rovnix). Additional information on threats to the modern PC boot process is available in the “[Bootkits and UEFI Secure Boot](https://github.com/abazhaniuk/firmware-security-training/blob/master/… section of the System Firmware training. UEFI Secure Boot UEFI Secure Boot was originally developed by the UEFI Forum as a way to protect the boot process from these types of attacks. There are other implementations of secure boot designed for different environments, but UEFI Secure Boot is the standard for PCs and servers. The goal is to prevent malicious code from being introduced into the boot process by cryptographically checking each piece of firmware and software before it is run. Any code not recognized as valid is not executed in the boot process. Secure Boot uses cryptographic signatures to verify the integrity of each piece of code as it is needed during the boot process. There are two critical databases involved in this process: the Allow DB (db) of approved components and the Disallow DB (dbx) of vulnerable or malicious components, including firmware, drivers, and bootloaders. Access to modify these databases is protected by a Key Exchange Key (KEK), which in turn is verified by a Platform Key (PK). Although the PK is used as a root of trust for updates to the platform, it’s not expressly part of the boot process (but is shown below for reference). It is dbx, db, and KEK that are used to verify the signatures for loaded executables at boot time. Additional details on the Secure Boot process can be found in this [PDF](http://www.c7zero.info/stuff/Windows8SecureBoot_Bulygin-Furtak-Bazhniuk_BHUSA2013.pdf). Chains of Trust and GRUB2 Next, OEMs must manage a list of who is permitted to sign code trusted by the Secure Boot Database. Instead of having every OEM manage certificates from every possible firmware, driver, or OS provider, Secure Boot allows for the use of a centralized Certificate Authority (CA). Microsoft’s 3rd Party UEFI CA provides the industry standard signing service for Secure Boot. In short, third parties can submit their code to Microsoft, and Microsoft will validate and sign the code with the Microsoft CA. This establishes a chain of trust that only requires OEMs to enroll the Microsoft 3rd Party UEFI CA to their platforms to enable them to boot third-party installation media and operating systems by default when Secure Boot is enabled. This includes the ability to sign bootloaders from non-Microsoft operating systems such as Linux. In almost every modern Linux distribution, GRUB (the Grand Unified Bootloader) is the bootloader that loads and transfers control to the operating system. In this document, all references to GRUB are intended to refer to GRUB2, which was a complete rewrite from the previous version commonly referred to as “GRUB Legacy.” Starting in 2009, all widely used Linux distributions have transitioned to using GRUB2. GRUB Legacy has been deprecated and is generally only found in older releases. [Due to legal issues arising from license incompatibilities](https://techcommunity.microsoft.com/t5/hardware-dev-cent…, open-source projects and other third parties build a small application called a “shim,” which contains the vendor’s certificate and code that verifies and runs the bootloader (GRUB2). The vendor’s shim is verified using the Microsoft 3rd Party UEFI CA and then the shim loads and verifies the GRUB2 bootloader using the vendor certificate embedded inside itself. Additional detail on the role of the Microsoft UEFI CA in the boot process is available [here](https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop…. Challenges of Secure Boot As with any technical process, Secure Boot is not without its potential problems. The process involves many pieces of code, and a vulnerability in any one of them presents a single point of failure that could allow an attacker to bypass Secure Boot. Additionally, although UEFI Secure Boot attempts to provide certain integrity guarantees to the boot process, other misconfigurations of the hardware or missing protection features can undermine boot security. One such example is a [DMA attack](https://eclypsium.com/2020/01/30/direct-memory-access-attacks/) using tools such as [PCIe Microblaze](https://github.com/Cr4sh/s6_pcie_microblaze). Additionally, as we will show in this blog post, a vulnerability in the boot process that enables arbitrary code execution can allow attackers to control the boot process and operating system, even when secure boot signatures are verified. Attackers can also use a vulnerable bootloader against the system. For example, if a valid bootloader was found to have a vulnerability, a piece of malware could replace the device’s existing bootloader with the vulnerable version. The bootloader would be allowed by Secure Boot and give the malware complete control over the system and OS. Mitigating this requires very active management of the dbx database used to identify malicious or vulnerable code. Additionally, updates and fixes to the Secure Boot process can be particularly complex and run the risk of inadvertently [breaking machines](https://www.securityweek.com/microsoft-pulls-uefi-related-windows…. The boot process naturally involves a variety of players and components including device OEMs, operating system vendors, and administrators. Given the fundamental nature of the boot process, any sort of problems run a high risk of rendering a device unusable. As a result, updates to Secure Boot are typically slow and require extensive industry testing. Breaking Secure Boot Through GRUB2 In the course of Eclypsium’s analysis, we have identified a buffer overflow vulnerability in the way that GRUB2 parses content from the GRUB2 config file (grub.cfg). Of note: The GRUB2 config file is a text file and typically is not signed like other files and executables. This vulnerability enables arbitrary code execution within GRUB2 and thus control over the booting of the operating system. As a result, an attacker could modify the contents of the GRUB2 configuration file to ensure that attack code is run before the operating system is loaded. In this way, attackers gain persistence on the device. Such an attack would require an attacker to have elevated privileges. However, it would provide the attacker with a powerful additional escalation of privilege and persistence on the device, even with Secure Boot enabled and properly performing signature verification on all loaded executables. One of the explicit design goals of Secure Boot is to prevent unauthorized code, even running with administrator privileges, from gaining additional privileges and pre-OS persistence by disabling Secure Boot or otherwise modifying the boot chain. With the sole exception of one bootable tool vendor who added custom code to perform a signature verification of the grub.cfg config file in addition to the signature verification performed on the GRUB2 executable, all versions of GRUB2 that load commands from an external grub.cfg configuration file are vulnerable. As such, this will require the release of new installers and bootloaders for all versions of Linux. Vendors will need to release new versions of their bootloader shims to be signed by the Microsoft 3rd Party UEFI CA. It is important to note that until all affected versions are added to the dbx revocation list, an attacker would be able to use a vulnerable version of shim and GRUB2 to attack the system. This means that every device that trusts the Microsoft 3rd Party UEFI CA will be vulnerable for that period of time. In addition to vendors using shims signed by the Microsoft 3rd Party UEFI CA, some OEMs that control both the hardware and the software stack in their devices use their own key that is provisioned into the hardware at the factory to sign GRUB2 directly. They will need to provide updates and revocation of previous vulnerable versions of GRUB2 for these systems as well. This vulnerability was assigned CVE-2020-10713 “GRUB2: crafted grub.cfg file can lead to arbitrary code execution during boot process” with a CVSS rating of 8.2 (High) / CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. Follow these links to go directly to the [Impact](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#impacts) and [Mitigations](https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/#mi… sections. Vulnerability Analysis The vulnerability is a buffer overflow that occurs in GRUB2 when parsing the grub.cfg file. This configuration file is an external file commonly located in the EFI System Partition and can therefore be modified by an attacker with administrator privileges without altering the integrity of the signed vendor shim and GRUB2 bootloader executables. The buffer overflow allows the attacker to gain arbitrary code execution within the UEFI execution environment, which could be used to run malware, alter the boot process, directly patch the OS kernel, or execute any number of other malicious actions. To dig a little deeper into the vulnerability itself, we’ll take a closer look at how the code works internally. In order to process commands from the external configuration file, GRUB2 uses flex and bison to generate a parsing engine for a domain-specific language (DSL) from language description files and helper functions. This is generally considered to be a better approach than manually writing a custom parser for each DSL. However, GRUB2, flex, and bison are all complex software packages with their own design assumptions that can be easy to overlook. And those mismatched design assumptions can result in vulnerable code. The parser engine generated by flex includes this define as part of the token processing code: #define YY_DO_BEFORE_ACTION \ yyg->yytext_ptr = yy_bp; \ yyleng = (int) (yy_cp - yy_bp); \ yyg->yy_hold_char = *yy_cp; \ *yy_cp = '\0'; \ if ( yyleng >= YYLMAX ) \ YY_FATAL_ERROR( "token too large, exceeds YYLMAX" ); \ yy_flex_strncpy( yytext, yyg->yytext_ptr, yyleng + 1 , yyscanner); \ yyg->yy_c_buf_p = yy_cp; In this macro, the generated code detects that it has encountered a token that is too large to fit into flex’s internal parse buffer and calls YY_FATAL_ERROR(), which is a helper function provided by the software that is using the flex-generated parser. However, the YY_FATAL_ERROR() implementation provided in the GRUB2 software package is: #define YY_FATAL_ERROR(msg) \ do { \ grub_printf (_("fatal error: %s\n"), _(msg)); \ } while (0) Rather than halting execution or exiting, it just prints an error to the console and returns to the calling function. Unfortunately, the flex code has been written with the expectation that any calls to YY_FATAL_ERROR() will never return. This results in yy_flex_strncpy() being called and copying the source string from the configuration file into a buffer that is too small to contain it. Beyond just this specific path, a number of additional places throughout the flex-generated code also expect that any calls to YY_FATAL_ERROR() never return and perform unsafe operations when that expectation is broken. Mismatched assumptions between producers and consumers of an API are a very common source of vulnerabilities. Ultimately, by providing a configuration file with input tokens that are too long to be handled by the parser, this buffer overflow overwrites critical structures in the heap. These overwritten fields include internal parser structure elements, which can be used as an arbitrary write-what-where primitive to gain arbitrary code execution and hijack the boot process. Of further note, the UEFI execution environment does not have Address Space Layout Randomization (ASLR) or Data Execution Prevention (DEP/NX) or other exploit mitigation technologies typically found in modern operating systems, so creating exploits for this kind of vulnerability is significantly easier. The heap is fully executable without the need to build ROP chains. Finally, rather than being architecture-specific, this vulnerability is in a common code path and was also confirmed using a signed ARM64 version of GRUB2. Additional Vulnerabilities There have been a couple of examples of previous vulnerabilities found in GRUB2 that result in arbitrary code execution, but with a much smaller scope. In April 2019, a vulnerability in how GRUB2 was used by the Kaspersky Rescue Disk was [publicly disclosed](https://habr.com/en/post/446238/). In February 2020, more than six months after a fixed version had been released, Microsoft pushed an update to revoke the vulnerable bootloader across all Windows systems by updating the UEFI revocation list (dbx) to block the known-vulnerable Kaspersky bootloader. Unfortunately, this resulted in systems from multiple vendors encountering unexpected errors, including bricked devices, and the [update was removed from the update servers](https://www.windowslatest.com/2020/02/15/windows-10-kb4524244-issu…. Additionally, in May 2020, Dmytro Oleksiuk [disclosed](https://twitter.com/d_olex/status/1264238411679887360) that certain HPE ProLiant servers contained a version of GRUB2 signed by a HP CA that allows the use of the “insmod” command to load unsigned code. This issue was assigned CVE-2020-7205 and is also embargoed until July 29th. In response to our initial vulnerability report, additional scrutiny was applied to the GRUB2 code and a number of additional vulnerabilities were discovered by the Canonical security team: - CVE-2020-14308 GRUB2: grub_malloc does not validate allocation size allowing for arithmetic overflow and subsequent heap-based buffer overflow - 6.4 (Medium) / CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - CVE-2020-14309 GRUB2: Integer overflow in grub_squash_read_symlink may lead to heap based overflow - 5.7 (Medium) / CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H - CVE-2020-14310 GRUB2: Integer overflow read_section_from_string may lead to heap based overflow - 5.7 (Medium) / CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H - CVE-2020-14311 GRUB2: Integer overflow in grub_ext2_read_link leads to heap based buffer overflow, - 5.7 (Medium) / CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H - CVE-2020-15705 GRUB2: avoid loading unsigned kernels when grub is booted directly under secure boot without shim - 6.4 (Medium) /CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - CVE-2020-15706 GRUB2 script: Avoid a use-after-free when redefining a function during execution - 6.4 (Medium) /CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - CVE-2020-15707 GRUB2: Integer overflow in initrd size handling. - 5.7 (Medium) /CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H Given the difficulty of this kind of ecosystem-wide update/revocation, there is a strong desire to avoid having to do it again six months later. To that end, a large effort — spanning multiple security teams at Oracle, Red Hat, Canonical, VMware, and Debian — using static analysis tools and manual review helped identify and fix dozens of further vulnerabilities and dangerous operations throughout the codebase that do not yet have individual CVEs assigned. Impact Due to a weakness in the way GRUB2 parses its configuration file, an attacker can execute arbitrary code that bypasses signature verification. The Boot Hole vulnerability discovered by Eclypsium can be used to install persistent and stealthy bootkits or malicious bootloaders that operate even when Secure Boot is enabled and functioning correctly. This can ensure attacker code runs before the operating system and can allow the attacker to control how the operating system is loaded, directly patch the operating system, or even direct the bootloader to alternate OS images. It gives the attacker virtually unlimited control over the victim device. Malicious bootloaders have recently been [observed in the wild](https://twitter.com/ESETresearch/status/1275770256389222400), and this vulnerability would make devices susceptible to these types of threats. All signed versions of GRUB2 that read commands from an external grub.cfg file are vulnerable, affecting every Linux distribution. To date, more than 80 shims are known to be affected. In addition to Linux systems, any system that uses Secure Boot with the standard Microsoft UEFI CA is vulnerable to this issue. As a result, we believe that the majority of modern systems in use today, including servers and workstations, laptops and desktops, and a large number of Linux-based OT and IoT systems, are potentially affected by these vulnerabilities. Additionally, any hardware root of trust mechanisms that rely on UEFI Secure Boot could be bypassed as well. Mitigation Full mitigation of this issue will require coordinated efforts from a variety of entities: affected open-source projects, Microsoft, and the owners of affected systems, among others. This will include: - Updates to GRUB2 to address the vulnerability. - Linux distributions and other vendors using GRUB2 will need to update their installers, bootloaders, and shims. - New shims will need to be signed by the Microsoft 3rd Party UEFI CA. - Administrators of affected devices will need to update installed versions of operating systems in the field as well as installer images, including disaster recovery media. - Eventually the [UEFI revocation list (dbx)](https://uefi.org/revocationlistfile) needs to be updated in the firmware of each affected system to prevent running this vulnerable code during boot. On the Coordinated Release Date (CRD) of July 29, we expect to see advisories and/or updates from the following affected parties: - Microsoft - UEFI Security Response Team (USRT) - Oracle - Red Hat (Fedora and RHEL) - Canonical (Ubuntu) - SuSE (SLES and openSUSE) - Debian - Citrix - VMware - Various OEMs - Software vendors, including security software, are also impacted by this vulnerability and will be updating their bootloaders. - … more to be added once we have a full list … However, full deployment of this revocation process will likely be very slow. UEFI-related updates have had a [history of making devices unusable](https://www.securityweek.com/microsoft-pulls-uefi-related-windows…, and vendors will need to be very cautious. If the revocation list (dbx) is updated before a given Linux bootloader and shim are updated, then the operating system will not load. As a result, updates to the revocation list will take place over time to prevent breaking systems that have yet to be updated. There are also edge cases where updating the dbx can be difficult, such as with dual-boot or deprovisioned machines. When any OS is installed or launched, the bootloader and OS need to be updated before the revocation is applied to the system. Further complicating matters, enterprise disaster recovery processes can run into issues where approved recovery media no longer boots on a system if dbx updates have been applied. In addition when a device swap is needed due to failing hardware, new systems of the same model may have already had dbx updates applied and will fail when attempting to boot previously-installed operating systems. Before dbx updates are pushed out to enterprise fleet systems, recovery and installation media must be updated and verified as well. Microsoft will be releasing a set of signed dbx updates, which can be applied to systems to block shims that can be used to load the vulnerable versions of GRUB2. Due to the risk of bricking systems or otherwise breaking operational or recovery workflows, these dbx updates will initially be made available for interested parties to manually apply to their systems rather than pushing the revocation entries and applying them automatically. This will allow IT professionals, enthusiasts, and others the opportunity to test the revocation updates on their individual systems and identify any issues before making the revocations mandatory. Organizations should additionally ensure they have appropriate capabilities for monitoring UEFI bootloaders and firmware and verifying UEFI configurations, including revocation lists, in their systems. Organizations should also test recovery capabilities as updates become available, including the “reset to factory defaults” functionality in the UEFI setup. This will ensure that they can recover devices if a device is negatively impacted by an update. Finally, organizations should be monitoring their systems for threats and ransomware that use vulnerable bootloaders to infect or damage systems. Recommendations - Right away, start monitoring the contents of the bootloader partition (EFI system partition). This will buy time for the rest of the process and help identify affected systems in your environment. For those who have deployed the Eclypsium solution, you can see this monitoring under the “MBR/Bootloader” component of a device. - Continue to install OS updates as usual across desktops, laptops, servers, and appliances. Attackers can leverage privilege escalation flaws in the OS and applications to take advantage of this vulnerability so preventing them from gaining administrative level access to your systems is critical. Systems are still vulnerable after this, but it is a necessary first step. Once the revocation update is installed later, the old bootloader should stop working. This includes rescue disks, installers, enterprise gold images, virtual machines, or other bootable media. - Test the revocation list update. Be sure to specifically test the same firmware versions and models that are used in the field. It may help to update to the latest firmware first in order to reduce the number of test cases. - To close this vulnerability, you need to deploy the revocation update. Make sure that all bootable media has received OS updates first, roll it out slowly to only a small number of devices at a time, and incorporate lessons learned from testing as part of this process. - Engage with your third-party vendors to validate they are aware of, and are addressing, this issue. They should provide you a response as to its applicability to the services/solutions they provide you as well as their plans for remediation of this high rated vulnerability. Conclusions While Secure Boot is easily taken for granted by most users, it is the foundation of security within most devices. Once compromised, attackers can gain virtually complete control over the device, its operating system, and its applications and data. And as this research shows, when problems are found in the boot process, they can have far-reaching effects across many types of devices. We will update this blog post as more information becomes available, and we encourage users and administrators to closely monitor alerts and notifications from their hardware vendors, the [Microsoft MSRC](https://www.microsoft.com/en-us/msrc), and any relevant open-source projects. Please join us for a webinar “[Managing the Hole in Secure Boot](https://www.brighttalk.com/webcast/17865/430345?utm_source=Eclypsium&… on August 5th. References: - Microsoft - Security advisory - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 - UEFI Forum - Updated Revocation List - https://uefi.org/revocationlistfile - Debian - Security advisory - https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot - Canonical: - Security advisory - https://ubuntu.com/security/notices/USN-4432-1 - KnowledgeBase article - https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass - Red Hat - Customer documentation - https://access.redhat.com/security/vulnerabilities/grub2bootloader - SUSE - Security advisory: - https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ - Knowledge Base article: - https://www.suse.com/support/kb/doc/?id=000019673 - HP - Security advisory - [HPSBHF03678 rev. 1 – GRUB2 Bootloader Arbitrary Code Execution](https://support.hp.com/us-en/document/c06707446) - HPE - Security advisory - https://techhub.hpe.com/eginfolib/securityalerts/Boot_Hole/boot_hole.html - VMware - Security advisory - https://kb.vmware.com/s/article/80181 - Upstream Grub2 project - [GRUB2 Git Repository](http://git.savannah.gnu.org/gitweb/?p=grub.git&view=view+git+re… - [GRUB Developer Mailing List](https://lists.gnu.org/mailman/listinfo/grub-devel/)

1 0

Reinsberg, B. (2020) Fully-automated liberalism? Blockchain technology and international cooperation in an anarchic world. International Theory, (doi: 10.1017/S1752971920000305)
by jim bell 29 Jul '20

29 Jul '20

Reinsberg, B. (2020) Fully-automated liberalism? Blockchain technology and international cooperation in an anarchic world. International Theory, (doi: 10.1017/S1752971920000305) http://eprints.gla.ac.uk/217843/7/217843.pdf "Fully-automated liberalism? Blockchain technology andinternational cooperation in an anarchic worldBernhard Reinsberg 1, 21 – University of Glasgow, School of Social and Political Sciences, 40 Bute Gardens, Glasgow, G12 8RT, bernhard.reinsberg(a)glasgow.ac.uk2 – Centre for Business Research, University of Cambridge Abstract: A recent wave of scholarship attests that the liberal world order is under threat.While there is disagreement about the underlying reasons for this diagnosis, there are fewattempts to further our understanding of how the liberal order can be reinvigorated. Thisarticle probes the potential of blockchain technology to promote international cooperation. Blockchain technology is a data structure that enables global governance stakeholders toestablish decentralized governance systems which provide high-powered incentives forenhanced cooperation. By outlining the contours of a blockchain-based global governancesystem for climate policy, the article illustrates that blockchain technology holds theoreticalpromise to foster cooperation in three ways: leveraging new sources of information throughblockchain-based prediction markets; allaying coordinating problems through reducing thecost of transactions for side payments; and allowing states and other global governance actorsto make more credible commitments given guaranteed execution of blockchain-enabled smartcontracts. By empowering local knowledge holders and non-state actors that traditionallylacked the means to coordinate efforts to influence global politics, blockchain technology alsopromises to advance an international order based on liberal values. In actuality, however,emerging blockchain-based global governance systems will fall short of the libertarian idealof ‘fully-automated liberalism’ as their design and operation will remain under the shadow ofpower. " [end of partial quote]

1 0

actual vaccine ingredients -- [gilmay97@gmail.com: Fwd: I called poison centre.]
by Zig the N.g 29 Jul '20

29 Jul '20

----- Forwarded message from Gil May <gilmay97(a)gmail.com> ----- From: Gil May <gilmay97(a)gmail.com> To: reader(a)gmail.com Date: Wed, 29 Jul 2020 10:56:28 +1000 Subject: Fwd: I called poison centre. * I called the poison centre.* *If in doubt call the poisons center nearest to you, then post their reply. Test this story to the end degree.* *Here it be!* Thank you to the unknown author. Found on FaceBook. <https://www.facebook.com/photo.php?fbid=10158285554742356&set=a.10153584214…> [image: Image may contain: text that says "I CALLED POISON CONTROL"] <https://www.facebook.com/photo.php?fbid=10158285554742356&set=a.10153584214…> “I gathered all vaccine ingredients into a list and contacted Poison Control. After intros and such, and asking to speak with someone tenured and knowledgeable, this is the gist of that conversation. Me: My question to you is how are these ingredients categorized? As benign or poison? (I ran a few ingredients, formaldehyde, Tween 80, mercury, aluminium, phenoxyethanol, potassium phosphate, sodium phosphate, sorbitol, etc.) He: Well, that's quite a list... But I'd have to easily say that they're all toxic to humans... Used in fertilizers... Pesticides... To stop the heart... To preserve a dead body... They're registered with us in different categories, but pretty much poisons. Why? Me: If I were deliberately to feed or inject my child with these ingredients often, as a schedule, obviously I'd put my daughter in harm's way... But what would legally happen to me? He: Odd question... But you'd likely be charged with criminal negligence... perhaps with intent to kill... and of course child abuse... Your child would be taken away from you... Do you know of someone's who's doing this to their child? This is criminal... Me: An industry... These are the ingredients used in vaccines... With binding agents to make sure the body won't flush these out... To keep the antibody levels up indefinitely... He: WHAT?! Your conclusion? The man was beside himself. He asked if I would email him all this information. He wanted to share it with his adult kids who are parents. He was horrified and felt awful he didn't know... his kids are vaccinated and they have health issues...” ~ By Iris Figueroa 🍃♥️🍃 ✅INGREDIENTS TO VACCINES - You CANNOT make an educated decision without being educated. Here are just SOME vaccine ingredients. These are being INJECTED into your kids; ◾Formaldehyde/Formalin - Highly toxic systematic poison and carcinogen. ◾Betapropiolactone - Toxic chemical and carcinogen. May cause death/permanent injury after very short exposure to small quantities. Corrosive chemical. ◾Hexadecyltrimethylammonium bromide - May cause damage to the liver, cardiovascular system, and central nervous system. May cause reproductive effects and birth defects. ◾Aluminium hydroxide, aluminium phosphate, and aluminium salts - Neurotoxin. Carries risk for long term brain inflammation/swelling, neurological disorders, autoimmune disease, Alzheimer's, dementia, and autism. It penetrates the brain where it persists indefinitely. ◾Thimerosal (mercury) - Neurotoxin. Induces cellular damage, reduces oxidation-reduction activity, cellular degeneration, and cell death. Linked to neurological disorders, Alzheimer's, dementia, and autism. ◾Polysorbate 80 & 20 - Trespasses the Blood-Brain Barrier and carries with it aluminium, thimerosal, and viruses; allowing it to enter the brain. ◾Glutaraldehyde - Toxic chemical used as a disinfectant for heat sensitive medical equipment. ◾Foetal Bovine Serum - Harvested from bovine (cow) foetuses taken from pregnant cows before slaughter. ◾Human Diploid Fibroblast Cells - aborted foetal cells. Foreign DNA has the ability to interact with our own. ◾African Green Monkey Kidney Cells - Can carry the SV-40 cancer-causing virus that has already tainted about 30 million Americans. ◾Acetone - Can cause kidney, liver, and nerve damage. ◾E. Coli - Yes, you read that right. ◾DNA from porcine (pig) Circovirus type-1 ◾Human embryonic lung cell cultures (from aborted foetuses) ✳You can view all of these ingredients on the CDCs website. I encourage everyone to do their own research. Look up the MSDS on these chemicals. Read the thousands of peer reviewed studies that have evaluated the biological consequences these chemicals can have on the body, especially when being injected. ✳Fact check vaccine ingredients here: https://www.cdc.gov/…/do…/appendices/b/excipient-table-2.pdf <https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.cdc.gov%2Fvaccines%2Fpubs%…> #educatebeforeyouvaccinate <https://www.facebook.com/hashtag/educatebeforeyouvaccinate?__eep__=6&source…> #injectionisdifferentthaningestion <https://www.facebook.com/hashtag/injectionisdifferentthaningestion?__eep__=…> #learntherisks <https://www.facebook.com/hashtag/learntherisks?__eep__=6&source=feed_text&e…> #informedconsent <https://www.facebook.com/hashtag/informedconsent?__eep__=6&source=feed_text…> https://www.facebook.com/drryanberl…/posts/10160167051315215 <https://www.facebook.com/drryanberlin/posts/10160167051315215> Animal blood in vaccines https://www.ncbi.nlm.nih.gov/…/pdf/amjphnation00376-0090.pdf <https://www.ncbi.nlm.nih.gov/pmc/articles/PMC1620411/pdf/amjphnation00376-0…> Food in vaccines, like peanut oil etc shows it causes food allergies https://vaccinesafetycommission.org/…/08-2015-Journal-Food-… <https://vaccinesafetycommission.org/pdfs/08-2015-Journal-Food-Allergies.pdf…> Vaccine Guide https://vaccine.guide <https://l.facebook.com/l.php?u=https%3A%2F%2Fvaccine.guide%2F%3Ffbclid%3DIw…> ----- End forwarded message -----

1 0

Yuri Bezmenov: How To Brainwash A Nation
by grarpamp 28 Jul '20

28 Jul '20

Yuri Alexandrovitch Bezmenov (Tomas David Schuman) https://www.youtube.com/watch?v=RmxKHuvUkgI Longer https://www.youtube.com/watch?v=y3qkf3bajd4 https://www.youtube.com/watch?v=pzeHpf3OYQY https://www.youtube.com/results?search_query=yuri+bezmenov https://www.youtube.com/results?search_query=g+edward+griffin " An incredible interview done back in 1985 with Yuri Bezmenov, a former KGB agent who was trained in subversion techniques. He explains the 4 basic steps of socially engineering an entire generation into thinking and behaving the way those in power want them to. It's a little freaky that our nation was transformed in the exact same way, and followed the exact same steps. This is related to the classic "Problem - Reaction - Solution" play book. If the problem does not exist to reach the desired solution they cause the problem... (flase flag terror attacks - fear - police state), (Man mad Global warming - fear - Global taxes to fund a world Government), (Underwear bomber - fear - naked body scanners)..... Once we are all aware of this they can't get away with it. " https://www.youtube.com/watch?v=r-QFDX7mLqM https://www.youtube.com/watch?v=6A_jLgTaRjQ

3 3

covid masks, Mikovits, considerations -- Re: give a listening ear to those who might "struggle" -- Fw: Interesting
by Zenaan Harkness 28 Jul '20

28 Jul '20

If you're frustrated, a bit fearful or even angry, the following discussion with the ever informative Leo may assist in getting grounded on the issue of masks during this covid lock down. We can't do more than we can do - higher authorities are in play here - but we do what we can for one another, the Aussie way. We live in a great country of great people with big hearts and a larrikin way, and there ain't no need to go gettin all depressed now, especially when you know you're just one shopping trip away from bumping into some amazing legend in their own mind - it's uplifting :D If you're the type who music can be a pick up, perhaps a little country music: https://www.youtube.com/watch?v=CjWY9udugZ0 "Thank God I’m a Country Boy (Aussie Version)". The short version of the convo below is this: "If I am infected, and if I wear a mask when close to others, they might be a bit less likely to get infected too". So take heart y'all, > > > > On 21/07/2020 10:39 am, Zenaan Harkness wrote: > > > > > Be alert. > > > > > > > > > > In the face of extended uncertainty and lack of the truth being told > > > > > to us, some folks can get a bit stressed out. > > > > > > > > > > By reaching out when you get that nudge or "sharing a little support" > > > > > i.e. you're own groundedness, simple preparations ("hey, a little rice > > > > > and water can go a long way, right?") and reminders, you may lessen > > > > > the fright, the shock, and or the "madness" that some folks might tend > > > > > towards. > > > > > > > > > > Keep it conservative/real, especially for those who are not inclined > > > > > to "think for themselves" much - you know the sort - sometimes a few > > > > > simple words like "we'll be right, we're Aussies, and we will pull > > > > > through this together, like we always have" can be enough to lighten > > > > > the load. May be confirm that they have your phone number in their > > > > > mobile - could make all the difference to their sanity, and if they > > > > > have a family at home, this might mean a meaningful difference to > > > > > their family. > > > > > > > > > > Keep a disposable mask prominently displayed in your shirt pocket or > > > > > around your neck, not only so you can use it if needed at a moment's > > > > > notice, but to remind one another that we should look out for each > > > > > other, that perhaps we ought take our duty of care "responsibility to > > > > > one another" seriously - and a mask let's people know you're thinking > > > > > of them, not just yourself! > > > > > > > > > > We do not whow how this virus might mutate into something much worse - > > > > > this is the big scientific difficulty with viruses, they can mutate on > > > > > a cycle of a few weeks, making any vaccine from even 6 months ago, > > > > > less than useful (vaccines are often not harmless, even when they are > > > > > ineffective). > > > > > > > > > > > > > > > So let's continue to give our best to each other, look out for each > > > > > other, this is just another journey. > > > > > > > > > > Stay safe, be prepared, and do what your gut tells you is prudent, > > > > > moment by moment. > > > > > > > > > > If you pray, then pray; if you meditate or contemplate, do that. > > > > > > > > > > Good luck and may God's will prevail, > > > > > Zen > > > On Tue, Jul 21, 2020 at 10:59:01AM +1000, Leo wrote: > > > > uuummm About the mask Zen > > > > > > > > I have the book Plague of Corruption by expert virologist Dr Judy Mikovits in > > > > the USA, she makes it clear, that once air born it simply mixes with oxygen > > > > and you inhale it at the same time, mask or no mask. I think forcing people to > > > > wear masks is more an exercise on population control and getting used to > > > > orders/directives from "daddy" > > > > > > > > The damage and weakening effect due to inhaling your own carbon dioxide would > > > > pose a far greater risk > > > > And would they really care about our health? When they poison us with toxic > > > > vaccinations and GMO food and destroyed diary products etc. > > > > > > > > 1) Your oxygen intake is less > > > > 2) Inhaling toxic air > > > > 3) Weakening immune system further. > > > > > > > > We live in a circus :-) > > On 22/07/2020 1:00 am, Zenaan Harkness wrote: > > > Interesting - may be her book is a big part of why they try to shut her down. > > > > > > Obviously "according to the narrative", the mask is only useful if you are closer to someone than the "official" 1.5 meters. > > > > > > I do have one important (hopefully obvious) question: > > > > > > does Mikovits say that in the scenario where > > > - if I am infected with a virus, > > > - and I wear a mask, > > > - and if you are "close" to me (say, less than 1.5 meters), > > > - and we are say talking to each other, > > > - and then if I cough, > > > > > > then does me wearing a mask NOT reduce the likelihood of you getting that virus that I have? > > > > > > > > > I'd really like to know Mikovits' position on this? > > > > > > Thank you very much, > > > Zen > On Wed, Jul 22, 2020 at 09:05:50AM +1000, Leo wrote: > > Because the mask holes have to be big enough to allow oxygen intake....then > > they are big enough to allow the virus through. > > > > But fair enough, it could give "some" protection, BUT I am simply quoting from > > an expert virologist in that field. > > But I think the point is more like when you have lots of people at a normal > > distance, extremely unlikely there would be any benefit from a mask, less > > oxygen and ingesting your own expelled air would actually lower your own > > immunity and it does not make a lot of sense as a general rule for the public > > as a whole, I try not to have opinions, I am just quoting the expert. > > > > The same logic as the so called lock down and isolation, more people will be > > harmed by losing jobs, their business and maybe their home if we get that 2nd > > wave. > > But then again, the pandemic is just a means to to install the NWO, get used > > to doing what you are told, no matter how stupid it is. > > > > The main point is this, say the different viruses are like smarties in a big > > jar, lots of colours representing different viruses, well up to now we just > > called them smarties when people died (Flu) and it just pushed them over the > > edge, usually having had bad health conditions, but now when someone dies, > > they say he died because he had the red smartie CV19 > > > > In the USA one of the worst hit areas, the yearly mortality rate for the whole > > country has not changed, what does that confirm? > > That is not to say that the next wave released maybe 4 times stronger, we can > > only deal with as things change and challenge us once more. > > > > Anyway for me, it is more important to keep my immune system strong and make > > sure I have antiviral solutions at hand, just in case of that second more > > severe wave. > > We need to combine our efforts and all work together................and maybe > > not dispute minor applications, that applies to me as well :-) On 22/07/2020 9:43 am, Zenaan Harkness wrote: > Yes I've been aware for some weeks that a mask does not really reduce your > likelihood, only that it reduces spittle transmission range when people > cough, which might help others. > > I was really hoping Mikovits or someone had spoken to this a little more > clearly. > > As to re-inhaling your own CO2, with most masks at least, this is a pretty > small % of a full breath, although it's true that many people breathe rather > shallowly - although this is perhaps more of an argument for breathing > properly rather than to avoid masks, I accept that there may be some % > reduction in O2/ increase in CO2 when wearing a mask. > > I believe that what Mikovits says she says, but I actually have not yet seen > any quote from her or from her book on this topic, though if one exists, I'd > certainly be interested to read it... > > Regarding the lock down in general, I believe we are not yet in a NWO > installation free for all, although there is certainly some push for this > from Bill Gates for example. > > What I believe is that we are in a period of testing and judgement, literally > from the realm(s) above. > > This is why I encourage people to get their house in order, rather than say > be belligerent and stop paying rent or mortgage if you are able, pay your > debts where you can and "clean up your back yard". > > If everything we have here is from a template in the heavens, then they have > their supercomputers and have their records on us which they update during > this judgement time. > > You're right that we should certainly be cautious of what the MSM "tells" us, > but some things do actually have a righteous foundation, and we owe it to > ourselves to try to determine what has a righteous foundation, and what is > simply tyranny knocking on the door. > > And when we can see that something might help others, at least in some > situations, then it is of course the right thing to do to help others, and so > we should do that. > > Even if it's small, I believe that sometimes wearing a mask may help others > by reducing their likelihood of infection. > > It might be small, but it's a simple way we can look out for one another, and > there's really no reason to not do that. > > It's of course a good thing (and probably the primary personal benefit) to > keep our own immune system strong. > > But perhaps we should not dismiss so quickly those small things that might > help others. And frankly, if anything like the Spanish flu appears, I'll be > really happy that people are trained to wear masks to reduce _their_ > spreading to me, if they get infected - I do not see this as a bad thing. > > As long as the elites do the "divorce with China" thing, properly, I am happy > with learning when a mask might be useful for me or others... > On Wed, Jul 22, 2020 at 10:30:20AM +1000, Leo wrote: Thanks for feedback Zen, 100 % agreed on how we react now, determines our future in other spheres Have a lovely day, we all do what we can. I will send you a recipe to assist in knocking these out.........

2 2

WHO's days in Africa nearly over - Madagascar, Tanzania, Nigeria, Burundi, Italy ... - [PEACE]
by Zenaan Harkness 28 Jul '20

28 Jul '20

The WHO's days in any African nation are now numbered, with despotism against African people from the WHO, Bill Gates and others being publicly exposed and getting turfed out of a steady series of African nations, including "an Italian politician demanded the arrest of Bill Gates in the Italian parliament" and Bill Gates' ID2020 program "to chip the human race through the digital identification program ID2020" in India being exposed. These are positive steps. Folks waking up. WHO Offered $20M Bribe To Poison COVID-19 Cure – Madagascar President https://greatgameindia.com/who-offered-20m-bribe-to-poison-covid-19-cure-ma… World Bank/IMF Exposed: COVID Aid Conditional On Imposing Extreme Lockdowns, Curfews https://greatgameindia.com/belarus-world-bank-coronavirus-conditions/ https://www.zerohedge.com/geopolitical/world-bankimf-exposed-covid-aid-cond…

1 0

communicating with police officers, narratives, discrimination
by Zenaan Harkness 27 Jul '20

27 Jul '20

Some people seem to like to direct their anger at external authorities, or treat certain other humans with disdain because they've had a bad experience with someone else of the same profession/job/ race/ sex/ whatever. There are bad apples around, but it may be in your personal interest to keep in mind that many police officers at least originally joined the police because they either wanted to make a positive difference in their community, and/or they actually wanted to see righteousness upheld in their community and the obvious corollary, to see unrighteousness be held to account. Such principles at least in their essence are honourable, and with inherent dignity. As many with open eyes can see, there are powerful forces at work today, particularly in the USA, which are acting with the intention to bring about great chaos in your communities, and one way they do this is by using their dogs in the media to try to program the sheeple to see external authorities as purely negative and without any redeeming factors. Such dichotomies or black and white absolutes, are obviousy false even at a quick glance, and we do no favour to ourselves, or to those we care about, to hold to such black/white bullshit. When roaming gangs come to the door of you and those you love, a natural instinct for many is to immediately seek the support of external authorities which at least nominally are intended to be in such a role of support. We are all human, with human failings and human tendencies. We ought consider carefully the "mainstream media" narratives we are fed, and the foundation intentions which might be underlying the messages put to us. We each play a role in creating our world, and sitting on the fence "as a mugwud bird, with his mug on one side, and his wud on the other side of that fence, pretending to be impartial" is an actual choice, and in this sense is a very real action, with very real consequences - because you see, he might think he is "impartial", but he still shits on one side of the fence... Our maker endowed us with some capacity for discrimination, and perhaps now is a useful time to get back to using this power of discrimination, to actively discriminate between right and wrong, truth and bullshit, good and evil.

7 13

The Guardian: US attorney general may be using Assange case for political ends, court told
by jim bell 27 Jul '20

27 Jul '20

The Guardian: US attorney general may be using Assange case for political ends, court told. https://www.theguardian.com/media/2020/jul/27/us-attorney-general-julian-as…

1 0

Red Bull - Official Drank o' The Alt-Freakin-Right - "you know you love 'em Ossie sheilas"
by Zig the N.g 27 Jul '20

27 Jul '20

Oh yeah, the BLM awareness raising campaign is starting to bear fruit, grape drank fruit to be precise :D I ain't sure Red Bull does grape drank, but it looks like it on day agenda now muffaduckas ;) You know you love it... Red Bull Fires "Woke" Diversity Directors Who Tried To Push For BLM Support Paul Joseph Watson via Summit News, https://summit.news/2020/07/20/red-bull-fires-woke-diversity-directors-who-… https://www.zerohedge.com/political/red-bull-fires-woke-diversity-directors… Red Bull has fired two ‘diversity directors’ who tried to force the company into virtue signaling about Black Lives Matter while also dissolving several ‘culture teams’ who were pressuring Red Bull to take a more aggressive ‘woke’ political stance. Stefan Kozak, its North America chief executive, and Amy Taylor, its North America president and chief marketing officer, have both left the Austrian drinks company after they tried to create a schism within the business about its supposed “inaction on the Black Lives Matter movement.” According to the Wall Street Journal, “Ms. Taylor had been working on diversity and inclusion efforts within the company with Mr. Kozak’s support for several years but was met with opposition when she began advocating for Red Bull to be more overt in its support of racial justice in the last month, according to people familiar with the matter.” https://archive.fo/kW9oK .. Now jis lark Biden pullin sum serious poll numbers which be crucifyin' Trump's black approval rate-in's, this "dastardly, ebil, nasty muffaducka" move by Red Bull is totally gonna crucify dey sales ... or sum.thin ... https://www.youtube.com/results?search_query=thank%20god%20i%27m%20a%20coun… Thank God I’m a Country Boy (Aussie Version) https://www.youtube.com/watch?v=CjWY9udugZ0 Now here's one for the lads: exactly how you expect to have a good relationship with your sheila, if you __don't__ have a good relationhip with her fogies? Riddle me that muffaduckas ;) Create our world fellow Souls,

5 8

Fwd: give a listening ear to those who might "struggle" -- [sales@grainmills.com.au: Fwd: Fw: Interesting]
by Zenaan Harkness 27 Jul '20

27 Jul '20

---------- Forwarded message ---------- From: Zenaan Harkness <zen(a)freedbms.net> Date: Tue, 21 Jul 2020 10:39:38 +1000 Subject: give a listening ear to those who might "struggle" -- [sales(a)grainmills.com.au: Fwd: Fw: Interesting] To: my_bffs(a)freedbms.net Be alert. In the face of extended uncertainty and lack of the truth being told to us, some folks can get a bit stressed out. By reaching out when you get that nudge or "sharing a little support" i.e. you're own groundedness, simple preparations ("hey, a little rice and water can go a long way, right?") and reminders, you may lessen the fright, the shock, and or the "madness" that some folks might tend towards. Keep it conservative/real, especially for those who are not inclined to "think for themselves" much - you know the sort - sometimes a few simple words like "we'll be right, we're Aussies, and we will pull through this together, like we always have" can be enough to lighten the load. May be confirm that they have your phone number in their mobile - could make all the difference to their sanity, and if they have a family at home, this might mean a meaningful difference to their family. Keep a disposable mask prominently displayed in your shirt pocket or around your neck, not only so you can use it if needed at a moment's notice, but to remind one another that we should look out for each other, that perhaps we ought take our duty of care "responsibility to one another" seriously - and a mask let's people know you're thinking of them, not just yourself! We do not whow how this virus might mutate into something much worse - this is the big scientific difficulty with viruses, they can mutate on a cycle of a few weeks, making any vaccine from even 6 months ago, less than useful (vaccines are often not harmless, even when they are ineffective). So let's continue to give our best to each other, look out for each other, this is just another journey. Stay safe, be prepared, and do what your gut tells you is prudent, moment by moment. If you pray, then pray; if you meditate or contemplate, do that. Good luck and may God's will prevail, Zen ----- Forwarded message from Leo <sales(a)grainmills.com.au> ----- From: Leo <sales(a)grainmills.com.au> To: undisclosed-recipients: ; Date: Tue, 21 Jul 2020 08:27:41 +1000 Subject: Fwd: Fw: Interesting User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 *Sent:* Monday, 20 July 2020 11:28 AM *Subject:* Interesting Sent from my iPad -- This email has been checked for viruses by AVG. https://www.avg.com ----- End forwarded message -----

4 6