- cypherpunks - lists.cpunks.org

JusticeLeague
by \0xDynamite 30 Mar '19

30 Mar '19

Adding order to the anarchy: http://github.com/thePastor/JusticeLeague Enjoy!

1 0

Intel's VISA ME Debugging Architecture Exploit
by grarpamp 29 Mar '19

29 Mar '19

https://www.zdnet.com/article/researchers-discover-and-abuse-new-undocument… https://www.intel.com/content/www/us/en/support/articles/000025619/software… https://www.blackhat.com/asia-19/briefings/schedule/#intel-visa-through-the… At the Black Hat Asia 2019 security conference, security researchers from Positive Technologies disclosed the existence of a previously unknown and undocumented feature in Intel chipsets. Called Intel Visualization of Internal Signals Architecture (Intel VISA), Positive Technologies researchers Maxim Goryachy and Mark Ermolov said this is a new utility included in modern Intel chipsets to help with testing and debugging on manufacturing lines. VISA is included with Platform Controller Hub (PCH) chipsets part of modern Intel CPUs and works like a full-fledged logic signal analyzer. According to the two researchers, VISA intercepts electronic signals sent from internal buses and peripherals (display, keyboard, and webcam) to the PCH -- and later the main CPU. Unauthorized access to the VISA feature would allow a threat actor to intercept data from the computer memory and create spyware that works at the lowest possible level. But despite its extremely intrusive nature, very little is known about this new technology.

1 0

Email addresses leaked ! Oh my !
by jim bell 29 Mar '19

29 Mar '19

Email addresses of almost a BILLION people are leaked https://mol.im/a/6864029 via http://dailym.ai/android

1 0

Re: [tor-talk] Is there a way to use internet in a sandbox environment? (Linux)
by grarpamp 29 Mar '19

29 Mar '19

On 3/29/19, npdflr <npdflr(a)zoho.com> wrote: > I am giving a scenario: (Devices: PC Hard Disk having important files for > offline use, USB Device for data transfer and Mobile Device which has > internet connection) > > 1. I have a hard disk that is offline (Linux OS). > 2. I use a mobile device for internet, gather some data and transfer that to > a usb device (via OTG). > 3. I have to mount the usb device to the hard disk since I need the gathered > data. > 4. Give read and write permission to the usb. > 5. I copy the gathered data from usb to the hard disk. Use/process the data > as per needs. > 6. I write some data back to the usb if needed. > 7. Connect usb to the mobile device if needed. > > Data from mobile --> usb --> Hard disk > Data from Hard disk --> usb --> Mobile > > How do I make sure that only the hard disk can read and write to the usb > device and prevent the usb to read/write any hard disk data so that the > files on the hard disk are always safe? Search "BasUSB", "HDDHack", etc. Excepting the direct hardware to hardware hacks that bypass the OS entirely, such as read write address space via hardware interfaces (firewire, pci-usb, etc), the latest memory and cache exploits etc, perhaps put or left in the HW by spies since there are no... #OpenFabs , #OpenHW , #OpenSW , #OpenDev , #OpenBiz , #OpenAudits , etc to help improve and defeat that... Today's kernels still don't provide any sort of storage block device command firmware update opcode filtering that could help prevent implantation of firmware exploits. Many OS still allow unpriviledged users raw access to portable devices. Then filesystem hierarchy access control schemes, and install and boot infrastructures, are also cumbersome or impossible to protect from user, root, or physical level access. To the extent CD-R, DVD-R, and tape "specifications" are just blocks with no firmware being plugged across the gap, and if no "media updates firmware" capabilities, those, or even serial and parallel port transfers, could be more secure than USB. But since it's not open, you never really know. People need to start doing those #Open* things above before they can start to have even the slightest bit of trust in systems.

1 1

Facebook Instagram Bans Group Self Advocacy in FreeSpeech Hypocrisy Move
by grarpamp 29 Mar '19

29 Mar '19

https://motherboard.vice.com/en_us/article/nexpbx/facebook-bans-white-natio… Facebook will begin banning posts, photos and other content that reference white nationalism and white separatism, revising its rules in response to criticism that a loophole had allowed racism to thrive on its platform. Previously, Facebook only had prohibited users from sharing messages that glorified white supremacy -- a rhetorical discrepancy, in the eyes of civil rights advocates, who argued that white nationalism, supremacy and separatism are indistinguishable and that the policy undermined the tech giant's stepped-up efforts to combat hate speech online. Facebook now agrees with that analysis, according to people who've been briefed on the decision. The new policy also applies to Instagram. The rise and spread of white nationalism on Facebook were thrown into sharp relief in the wake of the deadly neo-Nazi rally in Charlottesville, Virginia, in 2017, when self-avowed white nationalists used the social networking site as an organizing tool. "Facebook is now fighting the Belgian court's decision to stop tracking Belgian internet users and delete the data it's already gathered on them, or face fines of about $280,000 a day." Your group is next to be silenced.

2 3

Decentralization as Imperatice [was: The Libertarian As Conservative]
by coderman 29 Mar '19

29 Mar '19

> When I first realized that I was already a libertarian, and always had been, in about 1975, it was always quite clear that Liberals, Leftists, and fellow-travellers hated (or at least strongly disliked) libertarianism. For reasons that are clear studying the Nolan Chart https://en.wikipedia.org/wiki/Nolan_Chart and the World's Smallest Political Quiz. https://en.wikipedia.org/wiki/World%27s_Smallest_Political_Quiz > > The Right opposed libertarianism because libertarians promoted both personal and economic freedom, while the Right seemed to like only the latter. > The Left opposed libertarianism because libertarians promoted both personal and economic freedom, while the Left seemed to like only the former. > > That made 'sense', so to speak. Not that the liberals and conservatives actually made sense. it is actually more fundamental! consider that both Right and Left promote the idea of an infallible strong center, which conveys the laws upon mankind. Libertarianism is by definition decentralized; delegating decisions to the edge. given that power corrupts; and absolute centralized power corrupts absolutely, it is clear that both Right and Left are deceptions by Centralized Power to maintain itself. the political question at core is this: centralization? (and abuse of power) - or - decentralization (and individual responsibility) the absurdity of humanity is that our cognitive bias sees only the direct cost of personal responsibility, yet ignores the global cost of centralized abuses. best regards,

4 18

Salvini: “My main goal is to save Europe … We are committed to love, not to war” - [PEACE]
by Zenaan Harkness 28 Mar '19

28 Mar '19

'Tis hard not to love this beach going squirt-gun wielding European love magnet... EXCLUSIVE: 'My Only Purpose Is to Save Europe' – Salvini to Sputnik https://sputniknews.com/interviews/201903281073590696-salvini-europe-interv… Italian Wikipedia Shuts Down to Protest Upcoming Vote on EU Copyright Law https://sputniknews.com/europe/201903251073518030-italy-wikipedia-eu-legisl…

1 0

No longer okay to praise, support or represent White Nationalism on Facebook - bannage ramps up - [MINISTRY] [PEACE]
by Zenaan Harkness 28 Mar '19

28 Mar '19

“while people will still be able to demonstrate pride in their ethnic heritage, we will not tolerate praise or support for white nationalism” -Facebook [see below for more] The Ministry protects the truth. Only truth may be spoken publicly. Truth is that which is published by the Ministry Stream Media. Speaking un-truth is a criminal offence. African National Congress good, White National Congress bad. White babies bad, infinigger immigration good. Infinigger immigration necessary due to lack of white babies so pensions can be paid. White babies bad. Brown babies good. Do not procreate to save the planet - infinite immigration from shirthole countries to increase our populations to save the planet since they keep breeding and need more food. "Minority" man good, White man bad. Competence is a threat and owes infinity reparations to everyone else. Success and achievement are highly dubious results which strongly imply Huwaite Man Bad. Chinese homeland good. African homelands good. Asian homelands good. White homelands is crimethink. Discussion of crimethink shall be punished. ANTIFA good. MAGA bad. MIGA good. Israel wall good. White wall bad. Orange man bad. Israeli nationalism is worthy pride, European nationalism is nefarious evil. Germany must remain guilty. Germany must never stop reparations. Germany must continue to prosecute and jail those who question any of the claimed "facts" regarding the holocaust. Discussion of holocaust "facts" is anti-Semitism. Criticism of Israel, of Jews and of Zionism, both unwarranted criticism as well as warranted criticism, is anti-Semitic and anti-Zionist. Being anti-Semitic or anti-Zionist is criminal thinking, and crimethink shall be punished. Non-white ethnic separatist movements are good. White separatist movements are bad. Dilution of White countries with open borders is good, but in this case Jews are not White, they are ethnic minority. Discussion of the most powerful tribe in the world is in most countries a literally jailable criminal offence. Truth says the most powerful tribe in the world is actually the most persecuted tribe in the world, for all time, and must receive infinity reparations for the endless subjugation and persecution, which is why their power must not be discussed. The most powerful are the most subjugated. The most powerful are the most persecuted. The most powerful are the superlative victims. White man bad. Facebook Bans Pro-White Groups, Discussions https://www.zerohedge.com/news/2019-03-27/facebook-bans-pro-white-groups-di… Facebook on Wednesday announced that it will begin banning "praise, support and representation of white nationalism and separatism" on both Facebook and Instagram. The company had already been blocking users from sharing messages which glorify white supremacy - while civil rights advocates [MINISTRY ALERT!] have long argued that white nationalism and white separatism are the same thing. Facebook claimed in a Wednesday blog post https://newsroom.fb.com/news/2019/03/standing-against-hate/ that "people will still be able to demonstrate pride in their ethnic heritage," they will "not tolerate praise or support for white nationalism or separatism." [O]ver the past three months our conversations with members of civil society and academics who are experts in race relations around the world have confirmed that white nationalism and separatism cannot be meaningfully separated from white supremacy and organized hate groups. Our own review of hate figures and organizations – as defined by our Dangerous Individuals & Organizations policy https://www.facebook.com/communitystandards/dangerous_individuals_organizat… – further revealed the overlap between white nationalism and separatism and white supremacy. Going forward, while people will still be able to demonstrate pride in their ethnic heritage, we will not tolerate praise or support for white nationalism and separatism. -Facebook https://newsroom.fb.com/news/2019/03/standing-against-hate/ In May of last year, internal training materials leaked to Motherboard https://motherboard.vice.com/en_us/article/mbkbbq/facebook-charlottesville-… revealed that Facebook treated the terms differently - allowing the "praise, support and representation" of white nationalism and white separatism "as an ideology," according to the Washington Post. https://www.washingtonpost.com/technology/2019/03/27/facebook-says-it-will-… Civil rights groups applauded the move. “There is no defensible distinction that can be drawn between white supremacy, white nationalism or white separatism in society today,” Kristen Clarke, president and executive director of the Lawyers’ Committee for Civil Rights Under Law, https://lawyerscommittee.org/ said Wednesday in a statement. The organization had pushed Facebook for months to change its policies, pointing to pages such as “It’s okay to be white,” which has more than 18,000 followers and has regularly defended white nationalism. Another, called “American White History Month 2,” often posted white-supremacist memes, according to the Lawyers’ Committee. A cached version of the page from late February showed it had more than 258,000 followers before it went offline. -WaPo https://www.washingtonpost.com/technology/2019/03/27/facebook-says-it-will-… Facebook's move has some wondering where exactly they draw the lines, and whether they plan to do anything about non-white race-based supremacy groups. Facebook says it is banning white nationalist content. This is understandable when it's violent, but where do they draw the line? Is talking about "white people issues" now forbidden? How long can we sustain today's asymmetry in identity politics? https://t.co/AsY8N9Yhhj — Jeff Giesea🌿 (@jeffgiesea) March 27, 2019 https://twitter.com/jeffgiesea/status/1110986231645638661?ref_src=twsrc%5Et… Banning all "white identity" because of violent acts done in its name is like saying we should ban all Muslims because of ISIS. This is dumb and counter-productive. I support pushing violent extremism in ALL forms out of the public square, but we must be precise in drawing lines — Jeff Giesea🌿 (@jeffgiesea) March 27, 2019 https://twitter.com/jeffgiesea/status/1111000761536778240?ref_src=twsrc%5Et… Black Panthers and the Nation of Islam (Black American Muslim sect) are both ethnic separatist movements. Non-violent and I disagree with them, but there’s no reason to noplatform white or black separatists/segregationists. It’s an idea. I’m deeply troubled by this decision. https://t.co/dAiEuH27wS — Ali Alexander (@ali) March 27, 2019 https://twitter.com/ali/status/1111001468151054336?ref_src=twsrc%5Etfw It's no longer okay. https://t.co/PXC1IqpmaS — Nick Monroe (@nickmon1112) March 27, 2019 https://twitter.com/nickmon1112/status/1111018890866425857?ref_src=twsrc%5E…

1 0

Re: centralized corrections
by coderman 27 Mar '19

27 Mar '19

> Or the global cost of decentralized abuses. Which could be, and used to be, worse. Name your abuse of choice: it's worse when it's being done everywhere to / by everyone. let's play a game: centralized power to redress cultural wrongs. assuming that Stephen is speaking of social concerns; a centralized action designed to redress cultural norms could be righteous, right? who can say "Brown v. Board of Education" was not the arc of history? these are the seductions of centralization - when they accomplish easily what is hard fought directly. to think that centralized power is only utilized for righteous ends is to succumb to the fallacy. no, decentralized malicious actions are not as bad as centralized ones. they are, by definition, limited. e.g. within the realm of direct intervention. best regards,

4 6

GPS-SDR-SIM
by coderman 27 Mar '19

27 Mar '19

https://github.com/osqzss/gps-sdr-sim GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio (SDR) platforms, such as [ADALM-Pluto](https://wiki.analog.com/university/tools/pluto), [bladeRF](http://nuand.com/), [HackRF](https://github.com/mossmann/hackrf/wiki), and [USRP](http://www.ettus.com/). Windows build instructions - Start Visual Studio. - Create an empty project for a console application. - On the Solution Explorer at right, add "gpssim.c" and "getopt.c" to the Souce Files folder. - Select "Release" in Solution Configurations drop-down list. - Build the solution. Building with GCC $ gcc gpssim.c -lm -O3 -o gps-sdr-sim Using bigger user motion files In order to use user motion files with more than 30000 samples (at 10Hz), the USER_MOTION_SIZE variable can be set to the maximum time of the user motion file in seconds. It is advisable to do this using make so gps-sdr-bin can update the size when needed. e.g: $ make USER_MOTION_SIZE=4000 This variable can also be set when compiling directly with GCC: $ gcc gpssim.c -lm -O3 -o gps-sdr-sim -DUSER_MOTION_SIZE=4000 Generating the GPS signal file A user-defined trajectory can be specified in either a CSV file, which contains the Earth-centered Earth-fixed (ECEF) user positions, or an NMEA GGA stream. The sampling rate of the user motion has to be 10Hz. The user is also able to assign a static location directly through the command line. The user specifies the GPS satellite constellation through a GPS broadcast ephemeris file. The daily GPS broadcast ephemeris file (brdc) is a merge of the individual site navigation files into one. The archive for the daily file is: ftp://cddis.gsfc.nasa.gov/gnss/data/daily/ These files are then used to generate the simulated pseudorange and Doppler for the GPS satellites in view. This simulated range data is then used to generate the digitized I/Q samples for the GPS signal. The bladeRF and ADALM-Pluto command line interface requires I/Q pairs stored as signed 16-bit integers, while the hackrf_transfer and gps-sdr-sim-uhd.py support signed bytes. HackRF, bladeRF and ADALM-Pluto require 2.6 MHz sample rate, while the USRP2 requires 2.5 MHz (an even integral decimator of 100 MHz). The simulation start time can be specified if the corresponding set of ephemerides is available. Otherwise the first time of ephemeris in the RINEX navigation file is selected. The maximum simulation duration time is defined by USER_MOTION_SIZE to prevent the output file from getting too large. The output file size can be reduced by using "-b 1" option to store four 1-bit I/Q samples into a single byte. You can use [bladeplayer](https://github.com/osqzss/gps-sdr-sim/tree/master/player) for bladeRF to playback the compressed file. Usage: gps-sdr-sim [options] Options: -e <gps_nav> RINEX navigation file for GPS ephemerides (required) -u <user_motion> User motion file (dynamic mode) -g <nmea_gga> NMEA GGA stream (dynamic mode) -c <location> ECEF X,Y,Z in meters (static mode) e.g. 3967283.15,1022538.18,4872414.48 -l <location> Lat,Lon,Hgt (static mode) e.g. 30.286502,120.032669,100 -t <date,time> Scenario start time YYYY/MM/DD,hh:mm:ss -T <date,time> Overwrite TOC and TOE to scenario start time -d <duration> Duration [sec] (dynamic mode max: 300 static mode max: 86400) -o <output> I/Q sampling data file (default: gpssim.bin ; use - for stdout) -s <frequency> Sampling frequency [Hz] (default: 2600000) -b <iq_bits> I/Q data format [1/8/16] (default: 16) -i Disable ionospheric delay for spacecraft scenario -v Show details about simulated channels The user motion can be specified in either dynamic or static mode: > gps-sdr-sim -e brdc3540.14n -u circle.csv > gps-sdr-sim -e brdc3540.14n -g triumphv3.txt > gps-sdr-sim -e brdc3540.14n -l 30.286502,120.032669,100 Transmitting the samples The TX port of a particular SDR platform is connected to the GPS receiver under test through a DC block and a fixed 50-60dB attenuator. BladeRF: The simulated GPS signal file, named "gpssim.bin", can be loaded into the bladeRF for playback as shown below: set frequency 1575.42M set samplerate 2.6M set bandwidth 2.5M set txvga1 -25 cal lms cal dc tx tx config file=gpssim.bin format=bin tx start You can also execute these commands via the bladeRF-cli script option as below: > bladeRF-cli -s bladerf.script HackRF: > hackrf_transfer -t gpssim.bin -f 1575420000 -s 2600000 -a 1 -x 0 UHD supported devices (tested with USRP2 only): > gps-sdr-sim-uhd.py -t gpssim.bin -s 2500000 -x 0 LimeSDR (in case of 1 Msps 1-bit file, to get full BaseBand dynamic and low RF power): > limeplayer -s 1000000 -b 1 -d 2047 -g 0.1 < ../circle.1b.1M.bin ADALM-Pluto (PlutoSDR): The ADALM-Pluto device is expected to have its network interface up and running and is accessible via "pluto.local" by default. Default settings: > plutoplayer -t gpssim.bin Set TX attenuation: > plutoplayer -t gpssim.bin -a -30.0 Default -20.0dB. Applicable range 0.0dB to -80.0dB in 0.25dB steps. Set RF bandwidth: > plutoplayer -t gpssim.bin -b 3.0 Default 3.0MHz. Applicable range 1.0MHz to 5.0MHz.

1 0