- cypherpunks - lists.cpunks.org

ThunderSpy: Intel Fucks Up Closed Source HW Again
by grarpamp 12 May '20

12 May '20

https://thunderspy.io/assets/reports/breaking-thunderbolt-security-bjorn-ru… https://github.com/BjornRuytenberg/spycheck-linux Thunderspy targets devices with a Thunderbolt port... an attacker who gets brief physical access to it can read and copy all your data, even if your drive is encrypted and your computer is locked or set to sleep. Thunderbolt devices possess DMA-enabled I/O. In an evil maid DMA attack Thunderbolt has been shown to be a viable entry point in stealing data from encrypted drives and reading and writing all of system memory. In response, Intel introduced Security Levels. We present Thunderspy, a series of attacks that break all primary security claims for Thunderbolt 1, 2, and 3. Inadequate firmware verification schemes Weak device authentication scheme Use of unauthenticated device metadata Downgrade attack using backwards compatibility Use of unauthenticated controller configurations SPI flash interface deficiencies No Thunderbolt security on Boot Camp These vulnerabilities lead to nine practical exploitation scenarios. Cloning user-authorized device identities to arbitrary attacker devices Permanently disabling Thunderbolt security and future firmware updates All Thunderbolt-equipped systems shipped between 2011-2020 are vulnerable. The Thunderspy vulnerabilities cannot be fixed in software Avoid leaving your system unattended while powered on, even when screenlocked. Disable the Thunderbolt controller entirely in UEFI (BIOS). Stay tuned for Thunderspy 2: Judgment Day. Intel has stated they had been already aware of Thunderspy variants... Intel has not shared why they have chosen not to inform the general public. The author of Thunderspy would like to thank prof. dr. Tanja Lange and Jacob Appelbaum for supervising his MSc thesis, of which this work is part, at Eindhoven University of Technology, the Netherlands. Oops!... ClosedHW did it again! https://www.youtube.com/watch?v=oIkRKc8wX24

1 0

[RUS] Who split Germany after WW2?
by Zenaan Harkness 11 May '20

11 May '20

Most us propagandized flunkies in the inglorious West don't actually know our history. For those who appreciate a quick catch up here and there, read it and empathize: http://russiafeed.com/divided-germany-cold-war-washington-moscow/ Who divided Germany during the Cold War – Washington or Moscow? The Soviet proposal for a neutral, united Germany was refused by the West, in order to create their own puppet state by Nikolay Starikov December 8, 2017, 12:17 pm

2 1

[Soul Cookie] - 'The Russians Are Coming': How East Germans Met Soviet Soldiers in 1945
by Zig the N.g 11 May '20

11 May '20

A Soul Cookie for our weary locked down covidbrains - some personal recollections of a child as The Russians were coming, and did indeed come! 'The Russians Are Coming': How East Germans Met Soviet Soldiers in 1945 https://sputniknews.com/interviews/202005101079256651-the-russians-are-comi… .. The soldiers almost panicked when talking about the horrors to be expected from the Russians, always advising my mother to "flee" to the west as soon as possible. But we had no relatives or acquaintances in Germany who could shelter us. ...

1 1

Headline: "Did we just witness one of the nuttiest foreign policy blunders in American history?" Jim Bell doesn't thing so.
by jim bell 11 May '20

11 May '20

https://usa-onlinenews.com/2020/05/07/did-we-just-witness-one-of-the-nuttie… "I cannot be the only American who somehow missed the news that on March 26 Secretary of State Mike Pompeo announced the United States would offer bounties of a combined $55 million for the capture of President Nicolás Maduro of Venezuela and four of his top associates. By the end of March, most of the country was living under some sort of mandatory lockdown. People were fighting for toilet paper and stocking up on bags of rice and making plans for aspirational quarantine reading. Millions of us were preparing for Mad Max. "It now appears that we were thinking of the wrong '80s action flick. Last weekend it was reported that a group of more than 100 American mercenaries, including two former Green Berets and one ex-agent from the Drug Enforcement Administration, had failed in some kind of apparent coup attempt and that some of them were being detained by the Maduro government. What was being called "Operation Gideon" perhaps unsurprisingly failed to bring about regime change, much less result in the apprehension of the country's socialist dictator. Reports suggest that 50 of the mercenaries stormed Venezuela by sea, joining up with around the same number of fellow soldiers of fortune already waiting behind enemy lines. The Venezuelan army (and Maduro's own paramilitary loyalist forces) outmatched them by around 350,000. A small ragtag band of American warriors attempts to force the commies out of South America against all odds? This is basically the plot of Predator if the Predator hadn't shown up. "Pompeo maintains that the United States government was not involved in this offensive. For what it's worth, he is probably telling the truth. Instead it appears that the plot was launched long ago by a bunch of former Venezuelan military officials who have been training deserters from the Maduro regime in secret Colombian camps for a year. One of the principals, a retired general named Cliver Alcalá, was arrested in the United States back in March for drug smuggling and is imprisoned in New York." [end of partial quote] Jim Bell's comment follows: I consider the headline of this article foolish. It suggests that a single attempt to remove Maduro and his corrupt cronies, having failed, somehow means that the entire concept of offering a reward for their removal is somehow ill advised. To the contrary, it might have succeeded, at which point the plan would have been labelled "brilliant". The world doesn't get just one chance to do so. If there was one thing about this idea that was foolish, it was offer to give that money only if Maduro et al were "removed", not killed. It would probably be much easier to kill Maduro than to engineer his physical removal from Venezuela. I also wonder if the United States Government set up any sort of system to allow people to anonymously collect this $55 million. So, how do these people imagine that they will be able to successfully get away with this money? IF the US government secretly says to them, "We're only giving you one tenth of what you were promised. Be glad we gave you that much. If you complain we'll broadcast your name, picture, and location to the entire world!" A large promised reward is only useful if the potential collector is confident he will actually receive all of it, and won't be killed by enemies before he is good and old. Jim Bell

2 1

Cryptocurrency: DEX - Distributed Exchanges
by grarpamp 11 May '20

11 May '20

> https://en.bitcoinwiki.org/wiki/DEXes DEX is distributed exchange, think D-Ex. Decentralized exchange is not, think De-X. Visualize, but consider also a DEX execution net more a distributed-state-of-swap-tx-db or messaging-like to which trades all plug and tx into, not necessarily a p2p routing network per se... https://static1.seekingalpha.com/uploads/2018/2/1/389729-15174980652034152.… Most so called "DEX" today are spamvertised corporate startup lies, worthless garbage infested with some things that make them not a true DEX... a) Centralized or "De-X" not truly distributed in some p2p or chain net sense. b) Works only with one particular token family or blockchain network. c) Have arbitration, escrow, insurance, brokerage, custody, entry fee'd, governed, staked, taxed, trades fiat, keeps a record, has support desk, etc. Binance style central exchanges running on onions are not DEX. OpenBazaar markets are not DEX. XMR, ZEC, JoinMarket, CashShuffle, CashFusion are not DEX. McAfee DEX (OEM'd @switchdex switch.ag) is not really a true DEX. ERC20, SLP, etc families only... must be made cross-chain DEX compatible. BlockDX is more like a true distributed atomic cross-chain DEX. Others coming soon. A true DEX will be a cross-chain fully distributed non-custodial uncensorable exchange protocol, its own atomic execution network, blockchain-ish, messaging or transaction advertisement meta layer API running over some privacy overlay network in free space. Generally requires each participant coin to have set of atomic exchange and cryptographic API functions into the DEX such that any market pair among the coins can be composed and executed free of counterparty risk. ccDEX - emphasizing cross-chain to eliminate all the ETH and other token only DEXs from consideration. Atomic - emphasizing committal of nominal values in key form to the exchange protocol net for proofed agreement, execute or return. Both sides either have the privkeys and safely swap over the protocol in time, or they don't. Some DEX use intermediate mechanisms. Some early DEX protocol research and operational nets are out there, for which further searches will return even newer more advanced work... bitshares etherdelta bisq 0x nvo-safenetwork blockdx.co/blocknet.co avalanche tao method language Standardized DEX protocol API's will emerge and be adopted. If you can sue it, shoot it, shut it down, get censored, premined, gov / founder taxed, kyc'd, deanon'd, lose money to the protocol or humans, not be opensource, not be privacy, waste disk space, vote governance stake force over free networks etc... then 10+ years past Genesis, considering today's available and forthcoming crypto tech, it's not a DEX, and it's not a cryptocurrency... it's just central fiat.

2 3

Cryptocurrency: On the need for banks
by grarpamp 11 May '20

11 May '20

> A few (2 billion?) dollars were actually created by JFK's government, but not since. That would be... https://en.wikipedia.org/wiki/United_States_Note There are no relevant countries that remain free from Govt Central Banks... https://en.wikipedia.org/wiki/Central_bank https://en.wikipedia.org/wiki/List_of_central_banks There are no countries fiat at all that are backed by Gold or any other resource, it's all 100% fiction, the convertibility ratio, at their issuance window, back into anything, is precisely zero... "From this point, the international monetary system was made of pure fiat money." https://en.wikipedia.org/wiki/Gold_standard Any "reserves" are no longer used to back their fiats literally, it's now more a trading, settlement, forex, and wargames thing... https://en.wikipedia.org/wiki/Gold_reserve Some like DPRK and others in the news are even getting into holding and trading cryptocurrency now. > ratio of capital to loans is the "reserve ratio", which was around > 15% but years ago got reduced to 3% and from memory even lower There are a number of points in systems various reserve ratios are applied. US Fed indeed just cut, and set some other to 0%, when COVID hit, see their site. > actual dollars in existence (M1 vs M0 etc) Physical money, coin, vault cash, etc often limited, including by War On Cash now. M2/capita is more related to gold price, M2 is exploding through various means. > interest is not created at the time the loan ... unbalanced Instead of simply walking away upon recognizing unbalance, conditioning and systematic control blackmarking structures can trip people and entire nations into doing theft and war to steal resources to pay it back and balance the books. Curiously, some religions forbid interest, but in practice even some strict among them still can be seen hypocritically using interest and derivatives in some form or another, laughably certifying them as legit. Even paper gold and gold leasing have become a thing for decades now. Also left out was the underlying structure known as Govt [Treasury] Bonds, the utter bullshit premise that a Government can issue them to backstop even their own central banks, that a Govt can enslave tax you and attach whatever little you still freely own, without your explicit consent, into backing the debts of the Govt, Central, and Commercial banks, and their lendees. The idea being that, when all defaults roll up, that you get stuck with pay off their bond, else international and other claimants invade. Too big to fail? QE2inf? Inflate out? Nope, pay us. That's like ridiculous notion you are and bound yourself to some fantasy Constitutions or "social contracts" without explicitly signing, by unluck of being born into such shitholes, letting such unfiduciary unrepresentatives continue to elect themselves and rule over you with their democracies. Feel like shit and a dumbass yet? https://en.wikipedia.org/wiki/Gold_as_an_investment https://en.wikipedia.org/wiki/Gold_holdings Upside... cryptocurrencies and even gold, guns and goats are coming into more favor worldwide now. People don't want to be left holding the short end of fiat. Collapse or not, these harder forms are still infinitely useful to your cause. When literally every place on the planet is now overrun by Government and Central Banks, every flavor in history, now joining into one, holding their lightswitch and risks over you... one answer is not to keep trying to fix them, but to route around and get rid of them, to go entirely different ways that don't involve them.

1 0

Tanzanian president Magufuli puts WHO niggers in their place
by Zig the N.g 11 May '20

11 May '20

Tanzanian president John Magufuli put WHO niggers in their place when he became suspicious of WHO and sent them samples of papaya, a goat and a quail, for COVID-19 testing. All samples came back from the WHO as "positive for COVID-19". Magufuli then kicked the WHO out of Tanzania ~2 days ago and fired the head of Tanzania's testing lab. "We Sent Them Samples Of A Goat, A Papaya & A Pheasant": Tanzanian President Catches WHO In Epic Lie https://www.zerohedge.com/geopolitical/we-sent-them-samples-goat-papaya-phe… .. But we'd love to hear Bill Gates regale us with "data-based arguments" about why the WHO is indispensable to the international effort to combat the coronavirus.

1 0

Area51: S4 UFO AATIP Nimitz Fravor Lazar TTSA Physics Alien Tech
by grarpamp 10 May '20

10 May '20

Continuing series of threads on Area51 / Area 51 ... https://www.navair.navy.mil/foia/documents https://www.youtube.com/watch?v=Eco2s3-0zsQ David Fravor JRE#1361 https://www.youtube.com/watch?v=BEWz4SXfyCQ Bob Lazar JRE#1315 https://www.youtube.com/channel/UC6i-se5IU8hRbPov5-ON1tw/videos So, extraterrestrial hardware operating here, even held / operated / replicated by humans... yes, or no? https://interstellarbooks.com/products/dream-land-an-autobiography-by-bob-l… https://web.archive.org/web/20010210025937/http://www.boblazar.com/protecte… http://www.unitednuclear.com/ "Bob Lazar: Area 51 & Flying Saucers". Netflix. 2018. 38 minutes 34 seconds. zeta reticuli element 115 gene huff aav eg&g edgerton, germeshausen and grier eric davis mtg w adm thomas r wilson memo mccarran janet operation paperclip dr edgar mitchell project galileo project sidekick project looking glass condon report billy meier photos tyler rogaway doctor krangle mary elizabeth elliot mike thigpen dennis mariani barry castillio rene klas-tv / channel 8 lv george knapp N 37 01' 40", W 115 46' 35" https://www.google.com/maps/place/Papoose+Lake/@37.1028826,-115.8663174 https://en.wikipedia.org/wiki/George_Knapp_%28journalist%29 https://www.beyondweird.com/ufos/George_Knapp_Interview_November_1989.html http://www.ufomind.com/area51/people/knapp/ http://www.ufomind.com/area51/people/lazar/ http://www.boblazar.com/ https://web.archive.org/web/19991023105113/http://www.boblazar.com/protecte… https://web.archive.org/web/20061215042915/http://www.boblazar.com:80/close… https://web.archive.org/web/19991012210405/http://boblazar.com/protected/re… https://web.archive.org/web/19991012140305/http://boblazar.com:80/protected… https://en.wikipedia.org/wiki/Moscovium https://en.wikipedia.org/wiki/Betty_and_Barney_Hill_abduction https://en.wikipedia.org/wiki/Zeta_Reticuli https://en.wikipedia.org/wiki/Planetary_objects_proposed_in_religion,_astro… https://en.wikipedia.org/wiki/Los_Alamos_Neutron_Science_Center http://www.serpo.org/release36.php https://www.wired.com/wp-content/uploads/archive/wired/archive/14.06/images… http://members.tripod.com/~Dr_J_Stupid/datedoc.html https://preterhuman.net/forum/index.php?topic=22 https://cdn.preterhuman.net/texts/alien.ufo/area51.ufo https://cdn.preterhuman.net/texts/alien.ufo/area512.ufo https://cdn.preterhuman.net/texts/alien.ufo/area513.ufo https://cdn.preterhuman.net/texts/alien.ufo/area514.ufo https://cdn.preterhuman.net/texts/alien.ufo/area515.ufo https://cdn.preterhuman.net/texts/alien.ufo/area516.ufo http://www.abovetopsecret.com/forum/thread703722 https://www.lazygranch.com/ http://ufo.whipnet.org/area.51/s4.papoose.lake/index.html https://www.dreamlandresort.com/ https://old.reddit.com/r/area51+ufo/ https://ufo.fandom.com/wiki/File:Admiral_Wilson_and_Eric_Davis_-_2002_memo.… http://checktheevidencecom.ipage.com/checktheevidence.com/pdf/Admiral%20Wil… https://eu.freep.com/story/entertainment/movies/2019/04/10/bob-lazar-area-5… https://files.ncas.org/condon/index.html https://www.holybooks.com/ http://www.cufon.org/cufon/cufon-v.htm http://www.cufon.org/cufon/afu.htm Physics 370 Introductory Space Science Volume II Department of Physics United States Air Force Academy 33.2 OPERATIONAL DOMAINS - TEMPORAL AND SPATIAL

1 0

Photolithography HomeFABs
by grarpamp 10 May '20

10 May '20

https://www.youtube.com/watch?v=YAPt_DcWAvw https://news.ycombinator.com/item?id=22718510 https://www.youtube.com/channel/UC7E8-0Ou69hwScPW1_fQApA/videos http://sam.zeloof.xyz/first-ic/ https://physicsworld.com/a/first-principles-calculations-shed-light-on-semi… #OpenFAB https://www.anandtech.com/show/15581/el-capitan-supercomputer-detailed-amd-…

2 2

mutt, neomutt, and searching emails
by Zenaan Harkness 10 May '20

10 May '20

There are some ageing dinosauruses that still use TUIs and even the more archaic mbox "all emails in this folder in a single file" email storage, and to distressingly admit to the truly ancient practice of "grep"ing an mbox file when mutt's search feature is just so dang diddly ang dang SLOW on a 20,000+ email folder (and that's barely 4 years of cypherpunks!). What to do. Well the installation of neomutt many moons ago, which was not accompanied by any man page reading nor even a simple yandex, has not changed the search speed automatically. Mutt (/neomutt)'s "~b" email body search feature is so slow across 20k emails it's impressive, especially given the speed of grep from the command line, and the speed of opening that 20k email folder. The following thought arises: On opening an mbox folder, mutt evidently scans those 20k messages, since it numbers them uniquely, and can jump very quickly to any single email, and also can filter the subjects, senders, recipients etc using it's secret incantations for "L"imiting etc. So it at least appears that mutt indexes that mbox file by (presumably) line number, and also (again, apparently at least) caches certain of the headers of each email. If the above assumptions are correct, then searching the body of emails could be done using grep at the command line, and scanning grep's output for line numbers, and mapping that against mutt's internal mapping of the mbox. Theoretically at least, this is a relatively simple algorithm. But although it's simple, it may be too late given the existence of neomutt which probably just requires some reading, config, and learning the new commands for searching emails using whatever new whizz bang system that puts the neo into neomutt (for the lazy, that would be libnotmuch).

1 1