News for hackers. Stuff that matters.

_kbh_

Re:Cracking Meta's Messenger Certificate Pinning on macOS on Tuesday March 05, 2024 @08:17PM (#39611157)
You have to resign the binary when you modify anyway which achieves the same thing.

On non-jailbroken platforms you generally do this with a developer certificate.

Re:Apple Watch Ultra 2 Hacked on Sunday February 18, 2024 @03:17AM (#39417194)
No one is burning a baseband 0day to write "we are in control" on a screen.
Re:RustPython on Wednesday February 07, 2024 @06:11AM (#39287109)
Ghidra uses Jython not sure if that counts as serious.
> Indeed, especially when Googling "Mercedes report security issue" the page litterally populates the results with the address to email so it wasn't like it's hard to find.

Reporting via a third party isn't super unusual if you think that a organisation may be a bit legal threat happy from your report.

> Decade old Backdoors no

I really doubt it's a backdoor after reading the blog post and this thread chain from a prolific M1 MacBook hacker (macran) I think it was just an unused or very rarely used feature that was left enabled by accident.

https://social.treehouse.systems/@marcan/111655847458820583

Some choice quotes.

First, yeah, the dbgwrap stuff makes perfect sense. I knew about it for the main CPUs, makes perfect sense it'd exist for the ASCs too. Someone had a lightbulb moment. We might even be able to use some of those tricks for debugging stuff ourselves :)

Second, that "hash" is almost certainly not a hash. It's an ECC code*. I bet this is a cache RAM debug register, and it's writing directly to the raw cache memory array, including the ECC bits, so it has to manually calculate them (yes, caches in Apple SoCs have ECC, I know at least AMCC does and there's no reason to think GPU/ASC caches wouldn't too). The "sbox" is just the order of the input bits to the ECC generator, and the algorithm is a textbook ECC code. I don't know why it's somewhat interestingly shuffled like that, but I bet there's a hardware reason (I think for some of these things they'll even let the hardware synthesis shuffle the bits to whatever happens to be physically optimal, and that's why you won't find the same table anywhere else).

> Especially since NATO tries to expand to Ukraine despite saying it would not for decades.

The irony here being that no one promised anything to Russia regarding in any actionable way.

But Russia has multiple treaties where they say they will respect the borders and sovereignty of Ukraine.

If those treaties don’t matter to Russia why should any made up promises regarding NATO matter to anyone else.

Re:Israel Helped to Spawn Hamas (2009) on Sunday October 29, 2023 @10:06PM (#38064934)
> Read this

>https://www.nytimes.com/2023/10/24/world/middleeast/gaza-hos...

I did and this doesn’t sound very “conclusive” at all

>> The Times’s finding does not answer what actually did cause the Al-Ahli Arab Hospital blast, or who is responsible.

>https://twitter.com/QudsNen/status/1718547315764441095

This tweets main source appears to the GreyZone which is a pro Russian propaganda rag that mostly peddles in misinformation I wouldn’t find it credible.

Re:Trabant on Sunday October 29, 2023 @01:55AM (#38056120)
The German Spy Museum in Berlin has a very cool modified Trabant door in their collection that has an embedded IR camera used by the Stasi in East Germany.

https://www.berlin.de/en/museums/3977291-3104050-spy-museum-...

Re:Israel Helped to Spawn Hamas (2009) on Saturday October 28, 2023 @11:36PM (#38055654)
> [1] several sources, and most recently the NYT have shown that the rocket that the zinoist media said it caused the blast in the hospital actually came from israel.

I haven't seen anything that showed any conclusive proof that the rocket came from Israel, the blast pattern doesn't match any armaments that Israel has airburst or not.

I'm happy to change my mind with a link that provides concrete evidence though, can you provide one.

Re:Quadcopters Can Now Visually Track Targets More Effectively on Saturday October 28, 2023 @10:47PM (#38055457)
> Ukraine was just foolish enough to sign up for the role of “US’s cannon fodder” in the never ending US-Russia war.

I think you will find its Russia who invaded, and Russia alone is the one who decided this.

No one else did, everyone else wanted peace, Russia alone wants war.

Re:The destruction of Gaza's internet is complete on Saturday October 28, 2023 @01:51AM (#38047497)
> This is a completely made up fake story that's oft repeated by the Netanyahu administration. No basis in reality

We have pictures of dead babies from the October raid by Hamas, this is based in reality and is not made up.

> to me it's clear, if a private business sells a technology service that is being used in a war, the adversary is going to see that action as hostile and use powers within their means to neutralize the threat. I'm not sure you're using the word "conspiracy theory" correctly.

But Ukraine is literally using services from a SAR satellite right now, which is run by a private business.

https://www.universetoday.com/157208/ukraine-crowdfunded-a-1...

And yet theres 0 noise or even evidence anyones even thinking of blowing it out of the sky.

> I reject the concept of “just war” in general in all instances and think all war is mass murder, definitionally.

Then you must be for a swift Ukrainian victory right?, cause anything else just raises tensions in the region and increases the chance of another war in the near future.

> Furthermore, even in your worldview, an American citizen using nominally American-jurisdiction hardware to enable airstrikes in a war zone that has nothing directly to do with America is an unforced escalation in the proxy war unrelated to “illegal invasion” that invites retaliation against Americans and American space-based assets.

The war in Ukraine isn’t a proxy war it’s just a plain old war between Russia and Ukraine with both sides having allies that help supply them, and I’m not sure why “illegal invasion” is in quotation marks that’s exactly what it is.

> One may simply be against violence in all forms, which seems much more plausible, given what we know about humans on Earth, especially skeptics like Musk who tend to resist pro-just-war state messaging.

This is an easy view to have when you live the luxury of being able to choice whether or not to be involved in a war.

Ukrainians had no such choice war was forced upon them by the Russians.

Re:I Face Investigation for Terrorism on Thursday October 26, 2023 @06:54AM (#38023953)
> Just for the record, there are also claims supported by evidence, that Israel did it.

I've seen no convincing evidence that shows that Israel did it, the creator and damage size is way too small for any Israeli bomb or missile even airburst does not match the features found at the explosion.

> I think the USSR restoration empire building narrative is overblown.

You should tell that to Russian media who posted this very long very USSR restoration empire building victory article a handful of days into the war.

>>https://web.archive.org/web/20220226051154/https://ria.ru/20...

> Also, if what you say about red lines were true, the US would not be so hesitant to provide lots of advanced aircraft to Ukraine, which they have not done as yet despite this clearly being a full enemy-of-my-enemy proxy war.

They are literally starting training on the aircraft next month iirc, and will receive them in 4-6 months after that.

Nothing happened when all of Russias red lines were crossed, the Americans are merely boiling the frog to avoid escalation.

I think Russias red lines are akin to chinas final warning now days, a joke.

I think the invasion is less about Russia seeing Ukraine as an existential threat and more about Russia seeing Ukraine as rightfully there’s to take.

That’s why I don’t think Russia would actually retaliate in any significant way to the use of starlink.

They know it’s not an existential threat and that’s why they continue to draw red lines and when they get crossed literally nothing happens.

Except no one is going retaliate against starlink as it would stop _everyone_ from launching satellites.
> They (the Ukrainians) requested that he re-enable it in that area specifically so that mass murder could be conducted with it, and he declined. (This is an example of the geopolitical power he wields, and it will only increase after Starship.) Couching it in “strategic policy decisions” euphemism doesn’t change the fact that they tried to draft him into a conspiracy to slaughter hundreds of teenage Russian conscripts.

A lot of this paragraph is objectively false I don’t think conscripts are the ones that man boats and submarines.

Destroying those Russian missile boats and submarines would have taken out a large amount of the ships that where intentionally targeting Ukrainian civilians with cruise missiles.

Re:It's Time to Tax Billionaires on Wednesday October 25, 2023 @06:04PM (#38018978)
That kind of attitude and appeasement is exactly what lead us to WW2.
Re:I Face Investigation for Terrorism on Wednesday October 25, 2023 @08:40AM (#38012142)
> There's absolutely no evidence this happened.

There's evidence that Hamas beheaded children I haven't seen any evidence they tortured them infant of their parents.

Re:It's Time to Tax Billionaires on Tuesday October 24, 2023 @06:06AM (#37996883)
> Russia has the economy the size of Italy. Three American states have bigger economies than Russia. Were more advanced than them on every level technologically economically militarily. The only thing they have is nukes which they'll still have no matter how Ukraine turns out.

That doesn't mean they aren't a military rival, Russias been building up there military stocks for decades, and inherited huge stockpiles as the successor state to the USSR.

That stockpile pile is being so quickly decimated that Russia is starting to dig into there stockpiles of tanks that are 60+ years old.

> That's been the propaganda reason for previous wars...

In what way is helping a country defend itself from a brutal imperialistic invasion not helping defend democracy?.

Re:It's Time to Tax Billionaires on Monday October 23, 2023 @09:28PM (#37993911)
> So I dont understand the strategic interest of Ukraine.

How is it not in Americas strategic interest to decimate its biggest military rival, whilst committing a small fraction of its yearly military budget?.

At the same time it reduces Russian military exports and makes them look incredibly weak.

It also helps defend democracy in Eastern Europe.

> March_f6 5 hours ago | parent | context | flag | on: Ukraine's American Missiles Wrecked 21 Russian Hel...

I'm honestly not sure but I'm also not sure we have ever seen a nuclear power with its back against the wall to this degree have we? I'm not trying to make people worried it's just something I personally worry about.

Nuclear powers (including Russia and the USSR) have lost wars before so I’m not sure how they are backed against a wall.

They can always just leave.

Re:Alexei Navalny's lawyers are arrested on Sunday October 22, 2023 @05:54PM (#37979442)
You never answered the questions, are civilian causalities okay or not?.

Given how multiple cities in Ukraine look after Russias “ground offensive” I presume you’d be fine with Israel flattening Gaza in a ground offensive?.

Considering that’s exactly what Russia is doing to Ukraine.

> The question is actually a different one: about the collateral damage.

Or are you saying that if Ukraine used civilians as meat shields and forced them to stay in place that you would have a problem with what Russia is doing?.

Re:Alexei Navalny's lawyers are arrested on Sunday October 22, 2023 @05:51PM (#37979418)
> Again, this is one missile (maybe it was shot down by AA rocket, or just went off course).

The amount of precision guided missiles that we have seen hit civilian targets makes me think this is just as likely to be an intentional targeting as it is “flying off course”.

> The point of this launch was likely some military target.

You have no way of knowing this, and one could say literally the same thing about the Israeli strikes.

Re:Alexei Navalny's lawyers are arrested on Sunday October 22, 2023 @06:34AM (#37974238)
> As it was already noticed, it was not due to unannounced airstrikes in Bakhmut but due to ground offensive. Any civilians could and should have been evacuated by then, or at least took cover.

Sure,

So like the Dnipro apartment block strike that was from a Russian Kh-22 and flattened part of the building.

Here's a photo.

https://upload.wikimedia.org/wikipedia/commons/c/cf/Dnipro_a...

Re:Alexei Navalny's lawyers are arrested on Sunday October 22, 2023 @06:29AM (#37974221)
> Launching "a missile" at a target pales in comparison with a row of apartment blocks levelled by air strikes.

It literally nearly levelled a shopping mall and killed 20+ civilians and injured close to 60.

So I guess the real question becomes, are civilian causalities okay or not?, if they are not okay then Russians indiscriminate targeting and killing of civilians in Ukraine is just as bad as Israels.

> And no, ground offensives are not the same. I hope we won't see those in Gaza - there is still chance.

So if Israel kills civilians in a ground offensive does that make it okay?.

Re:Alexei Navalny's lawyers are arrested on Saturday October 21, 2023 @07:20PM (#37971391)
> However, the issue is that exhibit B is whole rows of apartment blocks hollowed out, visibly mangled or even levelled out by Israeli air strikes.

It’s like your exactly describing what the Russians did to Bakhmut.

https://www.theguardian.com/artanddesign/2023/may/18/stark-b...

Re:Alexei Navalny's lawyers are arrested on Saturday October 21, 2023 @07:17PM (#37971373)
> As a fact, no, I don't. The amount of carnage seen on Palestine photos and videos is not matched.

You’re not looking very hard then.

The carnage is identical the Russians have literally leveled entire cities in Ukraine, I dare say the Russians have leveled an area that is overall larger then Gaza in its entirety.

This is before we get to the especially brutal parts of Russias war like when they launched an anti ship missile at a shopping centre.

Older »