- cypherpunks - lists.cpunks.org

extremely stealthy hardware Trojans - existing transistor dopant polarity changes
by Zenaan Harkness 16 May '18

16 May '18

Holy firetruck, Punkman, sh1rts gettin' real: Georg T. Becker, Francesco Regazzoni, Christof Paar, and Wayne P. Burleson in the abstract of a paper [PDF] https://link.springer.com/article/10.1007/s13389-013-0068-0 In recent years, hardware Trojans have drawn the attention of governments and industry as well as the scientific community. One of the main concerns is that integrated circuits, e.g., for military or critical-infrastructure applications, could be maliciously manipulated during the manufacturing process, which often takes place abroad. However, since there have been no reported hardware Trojans in practice yet, little is known about how such a Trojan would look like and how difficult it would be in practice to implement one. In this paper we propose an extremely stealthy approach for implementing hardware Trojans below the gate level, and we evaluate their impact on the security of the target device. Instead of adding additional circuitry to the target design, we insert our hardware Trojans by changing the dopant polarity of existing transistors. Since the modified circuit appears legitimate on all wiring layers (including all metal and polysilicon), our family of Trojans is resistant to most detection techniques, including fine-grain optical inspection and checking against "golden chips". We demonstrate the effectiveness of our approach by inserting Trojans into two designs—a digital post-processing derived from Intel's cryptographically secure RNG design used in the Ivy Bridge processors and a side-channel resistant SBox implementation—and by exploring their detectability and their effects on security. (From LWN Briefs: https://lwn.net/Articles/749980/ )

1 0

[WAR] The West finally gets one up on Russia re torture
by Zenaan Harkness 16 May '18

16 May '18

The reality of empires is eventually, if belatedly, exposed. With Israel massacring dozens with impugnity, the USA's "humanitarian" CIA <ahem>, and now Russia (see below) it's sad days. ** What Moral Standing Do We Have After This Outrage? And Are We About to Join *Another* Idiotic War, Like Feeble Minions? https://russia-insider.us9.list-manage.com/track/click?u=fa2faf7034c3c3c413… ------------------------------------------------------------ by Peter Hitchens (1,513 views) on Tue, May 15, 2018 Typical Russians, eh? They kidnap a man and his pregnant wife in broad daylight, then hide them in a secret prison in an Asian airport where they wield sinister influence. There they begin to torture him. Despite the fact that she is obviously pregnant, they chain her to a wall and put a hood over her head, for five days. Next, they swathe her from head to toe in duct tape (in agony, because one of her eyes is taped open) and fly them both to Syria so he can be tortured more thoroughly for several years. With the two chained and bound prisoners comes a delivery note from the Russian spy chief to his Syrian opposite number: ‘This is the least we could do for you, to demonstrate our remarkable relationship’.

1 0

Haven - Android Physical Space Monitor
by grarpamp 15 May '18

15 May '18

https://guardianproject.github.io/haven/ https://www.youtube.com/watch?v=Fr0wEsISRUw Haven is for people who need a way to protect their personal spaces and possessions without compromising their own privacy. It is an Android application that leverages on-device sensors to provide monitoring and protection of physical spaces. Haven turns any Android phone into a motion, sound, vibration and light detector, watching for unexpected guests and unwanted intruders. We designed Haven for investigative journalists, human rights defenders, and people at risk of forced disappearance to create a new kind of herd immunity. By combining the array of sensors found in any smartphone, with the world’s most secure communications technologies, like Signal and Tor, Haven prevents the worst kind of people from silencing citizens without getting caught in the act.

3 3

cypherpunls and guns
by juan 15 May '18

15 May '18

out of the memory hole : ---------- At 12:51 AM -0800 1/6/98, Wei Dai wrote: >I don't understand why there is so much talk about guns here lately. >Unless someone comes up with a weapon that has some very unusual economic >properties, individuals cannot hope to compete with governments in the >domain of deadly force. If we have to resort to physical violence, we've >already lost! People on almost any unmoderated mailing list will talk about what interests them. Those who mainly want to talk about crypto are of course free to do so. (You have, Wei, done important work in this area. But you very, very seldom write articles on this list, at least not for the last couple of years--I count less than one article per month from you over the past half year. I urge you to write such articles if you dislike reading what others are writing.) I agree that two or three or four or five years ago I was much more likely to write about something more crypto-related. Well, much time has passed. Most things worth saying have been said, at least for me. I can't work up the energy to discuss "data havens" a fourth or fifth time. (And an article from me on data havens, or information markets, or crypto anarchy, will usually produce complaints from people who don't see what it has to do with getting the latest version of PGP! That's only a slight exaggeration.) There have also been very few major new participants. A few years ago we could count on one or two major new "talents" joining the list each year, generating articles and new ideas. For whatever reasons, this has nearly stopped. I would guess the reasons are related to a) no major publicity stories as in past years, b) the disintegration of the list a year ago in the wake of the "moderation" fiasco (which cut subscriptions by 3-5x), c) competition from several other crypto lists, "moderated" by their owners, d) exhaustion of the older participants in the battles, and e) those who are interested in our topics have mostly already found us (meaning, the rich hunting period is over). ; >Think about it: if we can defend ourselves with guns, why would we need >crypto? This has an obvious answer. Guns are a last resort. Crypto makes it less likely that Big Brother will know what the proles are talking about, less likely that participants in a plan will be targetted for investigation and raids. Wei, your question could be paraphrased this way: "If Pablo Escobar could defend himself with guns, why did he need crypto in his cellphone?" (The answer being that P. Escobar was detected by using a cellphone without security. The NSA then told the DEA and its allies where he was and they took him out on a rooftop.) Final comment: If I find the motivation, I may finish an essay I've been working on about how we, the Cypherpunks and the World, are *retrogressing* in crypto areas. Most of the exotic applications are no longer being discussed, and various mundane commercial products are the main focus. Yawn. --Tim May The Feds have shown their hand: they want a ban on domestic cryptography ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, ComSec 3DES: 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^2,976,221 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway." ------------

1 0

G. Edward Griffin: Voluntaryism, Soviets, Cancer, Banks, Crypto
by grarpamp 15 May '18

15 May '18

Cryptocurrency with WAM at Take The Red Pill Winnipeg https://www.youtube.com/watch?v=BC3s8rnYLa0 Bitcoin with Max Wright and Trace Mayer https://www.youtube.com/watch?v=Id6rK87GF8M America with Lauren Southern https://www.youtube.com/watch?v=rimtKVZlnKs Interviews Yuri Bezmenov https://www.youtube.com/watch?v=y3qkf3bajd4 The Creature From Jekyll Island w/ interview https://www.youtube.com/watch?v=lu_VqX6J93k https://www.youtube.com/watch?v=R1gTnOkdXps In Nielsio's Voluntary Library https://www.youtube.com/user/Nielsio/videos A World Without Cancer https://www.youtube.com/watch?v=JGsSEqsGLWM

1 0

From sand to silicon chips, openly
by Steven Schear 15 May '18

15 May '18

http://parallel.princeton.edu/openpiton/open_source_processors.php

4 4

Cryptocurrency: #BankersAgainstBitcoin, New Documentaries, Snowden
by grarpamp 15 May '18

15 May '18

1 0

Rowhammer is now remote exploitable
by grarpamp 15 May '18

15 May '18

---------- Forwarded message ---------- From: Peter Gutmann <pgut001(a)cs.auckland.ac.nz> Date: Mon, May 14, 2018 at 11:03 PM Subject: [Cryptography] Rowhammer is now remote exploitable To: "cryptography(a)metzdowd.com" <cryptography(a)metzdowd.com> An interesting paper just turned up on arXiv: Nethammer: Inducing Rowhammer Faults through Network Requests https://arxiv.org/abs/1805.04956 [...] In this paper, we present Nethammer. Nethammer is the first truly remote Rowhammer attack, without a single attacker-controlled line of code on the targeted system. [...] Depending on the location, the bit flip compromises either the security and integrity of the system and the data of its users, or it can leave persistent damage on the system, i.e., persistent denial of service. We investigated Nethammer on personal computers, servers, and mobile phones. Nethammer is a security landslide, making the formerly local attack a remote attack. Peter. _______________________________________________

1 0

Oliver Stone: The Putin Interviews
by grarpamp 15 May '18

15 May '18

http://www.imdb.com/title/tt6840134/ torrents http://uj3wazyk5u4hnvtk.onion/search/putin%20interviews/0/99/0

1 0

BriarProject Messaging 1.0 Released
by grarpamp 15 May '18

15 May '18

Briar 1.0 for Android has been released. Briar is a secure messaging app that uses peer-to-peer connections between mobile phones to implement decentralised messaging, forums and blogs. It operates over Tor, Bluetooth and wifi. https://briarproject.org/ https://code.briarproject.org/akwizgran/briar

4 9