- cypherpunks - lists.cpunks.org

Re: X86 dispatch contention vulnerability CRM:0461068385
by Ryan Carboni 17 Nov '18

17 Nov '18

Apple is a better company than than Microsoft. I ask you this: how does Microsoft handle wiretap requests? How does Apple handle wiretap requests? Does Microsoft sign any DLLs that is asked of them? It is curious that no journalist talks about common procedure. No doubt this “attacker” is defined the same as according to citizenlab someone acting without “any legal authorization”. You dogs can smirk behind your laws, and overlook those violate those laws in a way pleasing to you, so I ask of the Lord to strike down an Azure datacenter by what cannot be attributed to any other power! On Thursday, November 15, 2018, Microsoft Security Response Center < secure(a)microsoft.com> wrote: > Hello, > > Thank you for contacting the Microsoft Security Response Center (MSRC). In > order to investigate your report I will need a valid proof of concept (POC) > ideally with images or video, the detailed steps to reproduce the problem, > and how an attacker could use it to exploit another user. > > > When ready, submit a new email to secure(a)microsoft.com without a CRM > number in the subject line. Please include: > > - Relevant information previously provided in your initial report > - Detailed steps required to consistently reproduce the issue > - Short explanation on how an attacker could use the information to > exploit another user remotely > - Proof-of-concept (POC), such as a video recording, crash reports, > screenshots, or relevant code samples > > Regards, > > Tina > MSRC > > > > ------------------- Original Message ------------------- > *From:* ryacko(a)gmail.com > *Received:* Wed Nov 14 2018 09:34:48 GMT-0800 (Pacific Standard Time) > *To:* <Microsoft Security Response Center>; Microsoft Security Response > Center; Microsoft Security Response Center > *Cc:* cypherpunks(a)lists.cpunks.org > *Subject:* X86 dispatch contention vulnerability CRM:0461068385 > > While many x86 implementation vulnerabilities in the past involve either > electromagnetic emissions or cache timing attacks, I have not read anything > about instruction dispatch contention. According to anger fog’s research, > Intel’s implementation of the x86 instruction set does not dispatch more > than three of a single instruction, and it has been so for a long time. > Irregardless of their design decisions for instruction dispatch, this > provides a side channel in which two cooperating processes operating on the > same core can conduct half-duplex communication at the rate of 2 bits per > cycle by one process attempting to compete with another process for the > same capacity for dispatches over a single instruction (0, 1, 2, 3). While > I do not have the resources to know > x86 processors handles dispatch contention issues, if it is handled in a > regular and non-random manner, it would reach that theoretical level of > severity. > > This violates certain access controls assumed to be imposed by the kernel. > > I suppose I can’t collect my quarter million dollar prize if I publish > this to the world? >

1 0

Cryptocurrency: Voluntary Japan - Talks with Bitcoin.com re Bitcoin Cash BCH, Voluntaryism
by grarpamp 16 Nov '18

16 Nov '18

>> Ha. coin fucking base is one of the worst if not the worst cancer in the >> 'cryptocurrency space'. > Gemini is also now pumping their own centralized USDT-alike > shitcoin called GUSD that all the retards are rushing in droves to accept. > https://gemini.com/dollar/ Here's references to the Goldman Sachs Circle Coinbase USDC shitcoin scam, along with a few other fake "stablecoin" scams USDT, USDC, GUSD, TUSD, PAX ... https://old.reddit.com/r/CryptoCurrency/search?q=usdc&restrict_sr=on https://old.reddit.com/r/CryptoCurrency/search?q=stablecoin&restrict_sr=on Remember, "stability" in early days is illogical and unexpected, anyone pushing such coins is as gravely suspect as the coins themselves... such coins being centralized, controlled, censored, reported, anti freedom, anti privacy, etc. Note that there are some distributed cryptocurrencies whose consensus protocol tries doing things like encouraging spending, holding, or other "beneficial" behaviours... by timelocking, vaporizing, rewarding, or other mechanisms over users utxo's, contracts, transactions, etc. You can search and post links to those artificial influence coins if you want. There's also category of contract pegs like DAI, general form of which might be considered coin index funds, derivatives, etc. Once you desire beyond a simple digital cash, things get increasingly more complex and likely to fail. Doesn't mean you can't play them for what they're worth.

1 0

Wikileak's Assange Seemingly Indicted
by grarpamp 16 Nov '18

16 Nov '18

https://www.washingtonpost.com/world/national-security/julian-assange-has-b… Democracy Now Coverage https://www.youtube.com/watch?v=QLtK3_JxYKY OP's https://twitter.com/SeamusHughes/status/1063232297674162176 https://pacer-documents.s3.amazonaws.com/179/399086/18919235200.pdf https://www.iamwikileaks.org/ https://justice4assange.com/ https://twitter.com/WikiLeaks https://twitter.com/AssangeDefence (formerly @JulianAssange) https://twitter.com/AssangeLegal https://twitter.com/Unity4J #FreeAssange

1 0

free entertainment!
by juan 15 Nov '18

15 Nov '18

here's a guy called craig wright, also known as 'satoshi nakamoto' (LMAO!!!) https://www.youtube.com/watch?v=MXMCzhwm554 the points he makes are quite interesting : his and the bloomberg-journo-asshole's criticism of the lightning network is that LN users(nodes) would be 'unlicensed money transmitters' and so would be doing 'illegal money laundering'. 'satoshi nakamoto' then rants against even more people who are 'redesigning' bitcoin to be 'illegal', that is have some privacy built in. "I'm going to shut them down with SV". "We are going to take legal action" et cetera. No doubt that the guy is Real Libertarian. It should be mentioned that wright or 'satoshi nakamoto'(LMAO!!!) used to be a buddy of roger ver's but ver has finally disowned him.

1 0

Nigerian 404: Google not found, Internet wobbly
by Steve Kinney 14 Nov '18

14 Nov '18

Nigerian 404: Google not found. https://www.theregister.co.uk/2018/11/14/nigerian_telco_bgp/ Reported day one of same. https://www.theregister.co.uk/2018/11/13/google_russia_routing/ If the network's rockin', don't come knockin' https://www.engadget.com/2017/11/07/comcast-internet-outage-level-3-route-l… I been seeing brief, intermittent outages that play hell with serious data transmission all over my neighborhood for three days now, and user comments seem to indicate that condition occurs all over the map. Don't even tell me a worm armed with the NSA's login credential (reversed from the hard coded hash) is jumping around between Cisco routers... O sunshine take me now away from here, I'm a needle on a spiral in a groove The turntable spins as the last waltz begins, and the weatherman say's someting's on the move... https://www.youtube.com/watch?v=o2rOWVWJmWU Then again, it's probably nothing. :o)

2 1

Cryptocurrency: USA Voted for Slavery Again - Anarchapulco Feb 14-17 2019
by grarpamp 14 Nov '18

14 Nov '18

Election Results (Courtesy TDV) https://www.youtube.com/watch?v=RVx8t4Pwqj4 https://anarchapulco.com/ Now if we could only raise global awareness of the need for cryptographically private privacy coins powered by ZK-Snarks/Starks such as Zcash ZEC, even other privacy tech in coins such as Monero, coins that work over the anonymous encrypted overlay networks like Tor and I2P etc, tools like CoinJoin JoinMarket, and emerging mix schemes like Wasabi Wallet, wallets like Samourai, Stash, BillionApp, BIP47, and whatever other privacy methods the future brings and holds true. No reason not to choose to adopt privacy. And note the desperate need for things like distributed exchanges (DEX), and exchanges and localcoins residing in the anonymous encrypted overlay and messaging networks. These days almost anything is more private and scaleable than the original default legacy "Bitcoin BTC". Legacy coins and blockchains are not private or anon, nor likely to be so anytime soon. They will fall to pressure, analysis, failures to use privately, sellout, get regulated, and eventually fail because of this. Like all Fiats that came before. Manage some hedges into whatever the rising and leading true privacy coins of the days happens to be. If your adversary can track, monetize, or control it, if anyone can see all the transactions and wallets, or if your coin can be shutdown, censored, filtered, sued, silenced, colored, or if you need to use a third party service, etc... in the end you're simply not going to win the war that's aiming to turn it all back into Fiat. https://pbs.twimg.com/card_img/1062471272439791616/T1EBM7kB?format=jpg&name… https://twitter.com/officialmcafee/status/1062383647070830593 https://www.youtube.com/watch?v=ymxZgddC9ns Bonus: 4th IIS Feb 12-13 2019 https://www.youtube.com/watch?v=OXx-NbBY9Mo

1 0

Julian Assange: Inter-American Asylum Opinion
by grarpamp 13 Nov '18

13 Nov '18

http://www.corteidh.or.cr/docs/comunicados/cp_28_18_eng.pdf https://justice4assange.com/ http://unity4j.com/ https://twitter.com/cestlaviv/status/1018349681808695296

2 4

Krassenstein: “More porn ... = less mass shootings” - [PEACE]
by Zenaan Harkness 13 Nov '18

13 Nov '18

According to Brian Krassenstein, we need moar porn, because (apparently) “'No-fap' is fascism, plain and simple.” Well, that's news. No-fap is literally fascism. Guess we "literally shaking" at the news or something :) So apparently Huwaite folk trying to improve their lives is fascism, plain and simple, and this will only result in "more mass shootings". How very insightful. Amazing really. Guess it is (or was) Monday already... Memetic Monday: These Things Happen Nov 12 https://dailystormer.name/memetic-monday-these-things-happen/ Memetic Monday: In the Mouth of Midterms Nov 5 https://dailystormer.name/memetic-monday-in-the-mouth-of-midterms/

1 0

free speech or die, mofos! - Lana Lokteff calls for action 'gainst Big Tech - [PEACE] [MINISTRY]
by Zenaan Harkness 12 Nov '18

12 Nov '18

But muh corporations must be free! Muh muffugin shares! Muh "free" corporate monopolies! Muhfuggin Libertarian rights! Suck it up buttercup - you be sheep, nyet gazillionaire$; we be trenchin from now, from here, not there in your utopian imagi-bullshit-nation. But muh upotian bushtits are the best buffslishts we ebbah seen in dum histary off muh world!??? Surely?!?!?!?!? Non! You bin edumacated, muh fellow sheeple! Wake up and smell (((thy shit)))! Leading Russian-American Alt-Right YouTuber Makes a Great Case for Laws Against Censorship (Lana Lokteff) https://russia-insider.us9.list-manage.com/track/click?u=fa2faf7034c3c3c413… https://en.wikipedia.org/wiki/Lana_Lokteff

1 8

Quantum compass.
by jim bell 11 Nov '18

11 Nov '18

https://www.engadget.com/2018/11/11/quantum-compass/ "GPS is vital to modern navigation, but it's extremely fragile. Never mind coverage -- if a satellite fails or there's a jamming attack, it quickly becomes useless. Scientists may have a much more robust answer, though. Scientists have demonstrated a "commercially viable" quantum accelerometer that could provide navigation without GPS or other satellite technology. The device uses lasers to cool atoms to extremely low temperatures, and then measures the quantum wave properties of those atoms as they respond to acceleration. The result is an extremely sensitive device that's also considerably more reliable than conventional accelerometers. While existing hardware can help determine to location to some extent by measuring velocity, it quickly falls apart without help from space. As you might have noticed by looking at the photo above, this quantum 'compass' isn't ready to replace the accelerometer in your phone. It's only truly ready for ships, trains and other large vehicles where size and power requirements aren't major factors. It could keep transportation networks humming even if GPS fails outright. The researchers also expect the underlying concepts to help with science studies, such as looking for gravitational waves. [end of quote] https://phys.org/news/2018-11-quantum-compass-satellites.html "The UK's first quantum accelerometer for navigation has been demonstrated by a team from Imperial College London and M Squared. Most navigation today relies on a global navigation satellite system (GNSS), such as GPS, which sends and receives signals from satellites orbiting the Earth. The quantum accelerometer is a self-contained system that does not rely on any external signals. This is particularly important because satellite signals can become unavailable due to blockages such as tall buildings, or can be jammed, imitated or denied – preventing accurate navigation. One day of denial of the satellite service would cost the UK £1 billion. Now, for the first time, a UK team has demonstrated a transportable, standalone quantum accelerometer at the National Quantum Technologies Showcase, an event demonstrating the technological progress arising from the UK National Quantum Technologies Programme – a £270m UK Government investment over five years. The device, built by Imperial College London and M Squared, was funded through the Defence Science and Technology Laboratory's Future Sensing and Situational Awareness Programme, the Engineering and Physical Sciences Research Council, and Innovate UK. It represents the UK's first commercially viable quantum accelerometer, which could be used for navigation. Accelerometers measure how an object's velocity changes over time. With this, and the starting point of the object, the new position can be calculated. Using the precision of ultra-cold atoms Accelerometers have existed for some time, and are present today in technologies like mobile phones and laptops. However, these devices cannot maintain their accuracy over longer periods without an external reference. [end of quote]

1 0