|
i'm the new age threat
|
#
?
Feb 8, 2018 00:38
|
|
|
|
| # ? Jun 8, 2024 00:49 |
|
|
this is the dawning of the age of nefarious
|
|
#
?
Feb 8, 2018 00:57
|
|
|
Soricidus posted:this is the dawning of the age of nefarious
|
|
#
?
Feb 8, 2018 01:09
|
|
|
Soricidus posted:the age of nefarious
|
|
#
?
Feb 8, 2018 01:34
|
|
|
Soricidus posted:this is the dawning of the age of nefarious
|
|
#
?
Feb 8, 2018 01:34
|
|
|
https://motherboard.vice.com/en_us/article/a34g9j/iphone-source-code-iboot-ios-leak?utm_source=vicefbus IPhone's iBoot source code has been posted on Github anonymously.
|
|
#
?
Feb 8, 2018 03:35
|
|
|
CommieGIR posted:https://motherboard.vice.com/en_us/article/a34g9j/iphone-source-code-iboot-ios-leak?utm_source=vicefbus the only part i can understand is the make file
|
|
#
?
Feb 8, 2018 04:03
|
|
|
it’s a bit old. has code for 6s era phones.
|
|
#
?
Feb 8, 2018 04:11
|
|
|
it was posted to reddit a year ago according to the article
|
|
#
?
Feb 8, 2018 04:14
|
|
|
Soricidus posted:this is the dawning of the age of nefarious
|
|
#
?
Feb 8, 2018 04:31
|
|
|
ate all the Oreos posted:im a "visual hacking attempt" they were probably just parroting something
|
|
#
?
Feb 8, 2018 10:07
|
|
|
https://www.bleepingcomputer.com/news/apple/apple-iboot-source-code-leaked-on-github/ An anonymous user has uploaded what appears to be the source code of iBoot —the iOS secure bootloader— on GitHub, and all evidence suggests the code is authentic. A link to the source code became viral last night on Twitter, and drew Apple's attention, prompting the company to send a DMCA request to GitHub to take down the repository. iOS experts who managed to grab a copy or had a chance to analyze it said the code is from iOS 9.3, released in March 2016.
|
|
#
?
Feb 8, 2018 12:23
|
|
|
cinci zoo sniper posted:https://www.bleepingcomputer.com/news/apple/apple-iboot-source-code-leaked-on-github/ Wasn't this same boot loader released by someone last year? I swear I'm getting some deja vu here.
|
|
#
?
Feb 8, 2018 12:36
|
|
|
Proteus Jones posted:Wasn't this same boot loader released by someone last year? I swear I'm getting some deja vu here. yea the vice article that was posted itt like 8 posts ago mentions that
|
|
#
?
Feb 8, 2018 12:51
|
|
|
Trabisnikof posted:it was posted to reddit a year ago according to the article also it was removed by a bot mod and had no replies until today. dunno if it got attention elsewhere but that post basically didn't exist
|
|
#
?
Feb 8, 2018 14:15
|
|
|
its finally the future https://twitter.com/EduardKovacs/status/961486457440559104
|
|
#
?
Feb 8, 2018 16:36
|
|
|
first, install malware on the airgapped machine
|
|
#
?
Feb 8, 2018 16:39
|
|
|
Jewel posted:its finally the future https://twitter.com/EduardKovacs/status/961486457440559104 they could already do it over fm radio broadcast by the memory bus 
|
|
#
?
Feb 8, 2018 16:39
|
|
|
wonder how much it would mitigate to disable the power-saving features and just run the CPU at 100% at all times presumably you could still cause shifts by throwing the really hot instructions at the CPU but the difference would presumably be less pronounced than going from idle to full.
|
|
#
?
Feb 8, 2018 17:17
|
|
|
go compiler invokes host machine's c compiler with insecure flags, allows arbitrary code executionquote:When cgo is enabled, the build step during “go get” invokes the host C compiler, gcc or clang, adding compiler flags specified in the Go source files. Both gcc and clang support a plugin mechanism in which a shared-library plugin is loaded into the compiler, as directed by compiler flags. This means that a Go package repository can contain an attack.so file along with a Go source file that says (for example) // #cgo CFLAGS: -fplugin=attack.so, causing the attack plugin to be loaded into the host C compiler during the build. Gcc and clang plugins are completely unrestricted in their access to the host system.
|
|
#
?
Feb 8, 2018 17:27
|
|
|
flakeloaf posted:first, install malware on the airgapped machine that's unfortunately pretty easy, especially as a lot of people have the attitude "it's airgapped, why bother patching <x>?"
|
|
#
?
Feb 8, 2018 17:27
|
|
|
just sell a USB-powered device that floods the relevant spectrum with noise
|
|
#
?
Feb 8, 2018 17:27
|
|
|
Subjunctive posted:just sell a USB-powered device that floods the relevant spectrum with noise We can call it the Subjunctive dongle!
|
|
#
?
Feb 8, 2018 17:28
|
|
|
"ThreatBlaster" or "CyberSpectrum" probably sells better, but I'm flattered
|
|
#
?
Feb 8, 2018 17:29
|
|
|
I'd call it the "fcc has some very pointed questions for you" dongle
|
|
#
?
Feb 8, 2018 17:32
|
|
|
Schadenboner posted:We can call it the Subjunctive dongle! i don't dislike subjunctive but i lold anyway
|
|
#
?
Feb 8, 2018 17:36
|
|
|
flakeloaf posted:i don't dislike subjunctive but i lold anyway same
|
|
#
?
Feb 8, 2018 17:37
|
|
|
flakeloaf posted:i don't dislike subjunctive but i
|
|
#
?
Feb 8, 2018 17:39
|
|
ed anyway
|
haveblue posted:I'd call it the "fcc has some very pointed questions for you" dongle "and then they shut up because you're the NSA" lol if you don't have APT's gunning for you and you give a poo poo about this
|
|
#
?
Feb 8, 2018 17:42
|
|
|
Subjunctive posted:just sell a USB-powered device that floods the relevant spectrum with noise P sure you're already on all the spectra m8
|
|
#
?
Feb 8, 2018 17:59
|
|
|
it’s a bloodbath in here
|
|
#
?
Feb 8, 2018 18:59
|
|
|
~*tugs collar, loosens tie*~
|
|
#
?
Feb 8, 2018 19:09
|
|
|
Yikes it's a little warm in here
|
|
#
?
Feb 8, 2018 19:41
|
|
|
https://twitter.com/sarahjeong/status/961670884032262145
|
|
#
?
Feb 8, 2018 19:50
|
|
|
Jewel posted:its finally the future https://twitter.com/EduardKovacs/status/961486457440559104 It's called a monitor
|
|
#
?
Feb 8, 2018 22:49
|
|
|
Her twitter feed covering this trial has been gold. She changed to “laser is the sauce” because it was said so many times over the course of the trial.
|
|
#
?
Feb 8, 2018 22:50
|
|
|
https://twitter.com/sarahjeong/status/961703513335087105 my fav so far
|
|
#
?
Feb 8, 2018 23:01
|
|
|
Hahahahaha Alsup takes no prisoners https://twitter.com/sarahjeong/status/961645789394059264
|
|
#
?
Feb 8, 2018 23:21
|
|
|
Proteus Jones posted:Her twitter feed covering this trial has been gold. 
|
|
#
?
Feb 8, 2018 23:25
|
|
|
|
| # ? Jun 8, 2024 00:49 |
|
|
Proteus Jones posted:Hahahahaha what foundation means in that context
|
|
#
?
Feb 8, 2018 23:28
|
|