Безопасности не существует: как NSA взламывает ваши секреты

Конечные поля, хэш-мясорубки, скрытые радиоканалы и трояны, запаянные в кремний. Пока мы гордимся замками AES-256, спецслужбы ищут обходные тропы: подменяют генераторы случайности, слушают писк катушек ноутбука и вывозят ключи через незаметные ICMP-пакеты. Эта статья собирает мозаичную картину современных атак — от математических лазеек до физических побочных каналов — и задаёт неудобный вопрос: существует ли вообще абсолютная безопасность? Если уверены, что да, проверьте, не трещит ли ваш щит по швам.

https://habr.com/ru/articles/918068/

#криптография #безопасность #NSA #шифрование #конечные_поля #sidechannel #аппаратные_бэкдоры #генератор_случайности #covert_channels #киберпанк

Bypassing kASLR via Cache Timing

Explores a prefetch side-channel attack to bypass kASLR on Windows 11 by measuring cache access times to locate the kernel base address.

https://r0keb.github.io/posts/Bypassing-kASLR-via-Cache-Timing/

#kASLR #SideChannel

Catch us at Hardwear.io later this month!

We’re bringing our side-channel attack bench demo and showing how easily it integrates with the esDynamic platform.

#hardware #hardwear_ioUSA #sidechannel

Intel: Ein weiterer Angriff umgeht alle bisherigen CPU-Schutzmaßnahmen. Eine weitere Sicherheitslücke öffnet viele Prozessoren erneut für Seitenkanalangriffe trotz bisheriger Schutzmaßnahmen... #CyberSecurity #CPU #Vulnerability #SideChannel www.heise.de/news/Intel-E...

Intel: Ein weiterer Angriff um...

TOR is not a gimmick, but it doesn’t claim to be perfect either.

#sidechannel #COSADE #TorProject

A mask is still the best metaphor.

https://yashalevine.com/surveillance-valley

https://scheerpost.com/2025/04/02/the-secret-military-history-of-the-internet-w-yasha-levine-the-chris-hedges-report/

#MIC #MilitaryIndustrialComplex #ChrisHedges #SI #Scheer #Surveillance #Privacy #CivilSociety #MartialLaw #Junta #Tech #CS

#History #MIC #Arpa #ONR
#clock #delusion #psy #genocidalSpyime #Pharoh
The hate group violates our privates with subconscious patrols . . .

SCA4PQC – die @Cyberagentur startet ein Forschungsprogramm zur Entwicklung seitenkanalresistenter Post-Quanten-Kryptographie. Ziel: Schutz vor Quantenangriffen und physischen Seitenkanalangriffen. Fokus: Cloud/Desktops, IoT und Smartcards. Forschung und Wirtschaft sind eingeladen.
Mehr Informationen: https://t1p.de/b52np
#PostQuantum #CyberSecurity #SCA4PQC #PostQuantumCrypto #SideChannel #ITSecurity #OpenScience

“KernelSnitch: Side Channel-Attacks on Kernel Data Structures” by Lukas Maar 📄👇
https://www.ndss-symposium.org/wp-content/uploads/2025-223-paper.pdf

#NDSSsyposium2025 #SideChannel

“Power-Related Side-Channel Attacks using the Android Sensor Framework” by Mathias Oberhuber 📄👇
https://www.ndss-symposium.org/wp-content/uploads/2025-92-paper.pdf

#NDSSsyposium2025 #SideChannel

“A Systematic Evaluation of Novel and Existing Cache Side Channels” by @v4m1n 📄👇
https://www.ndss-symposium.org/wp-content/uploads/2025-253-paper.pdf

#NDSSsyposium2025 #SideChannel

Secure Application Programming in the presence of Side Channel Attacks

Marc Witteman

https://riscureprodstorage.blob.core.windows.net/production/2017/08/Riscure_Whitepaper_Side_Channel_Patterns.pdf

#riscure #hardwarehacking #sidechannel

Starting the week by shipping out some Hardware Benches to our customers 🚛

#SideChannel #cybersecurity #hardware #faultinjection

Yet another side channel attack, this time on Apple Silicon Aarch64: https://predictors.fail/files/SLAP.pdf

#sidechannel #security #apple #aarch64 #macos

Someone found a clever #sidechannel to abuse #Cloudflare CDN caching to reveal the approximate location (~location of next big datacenter) of #Signal and #Discord users by sending them a message/notification with an image in it that is fetched from the CDN:

https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117

@signalapp

Hardware #SideChannel attacks like "electromagnetic fault injection" bypass Apple’s chip defenses. The result? Jailbreaks & #malware on iDevices. #Apple needs to rethink its shielding fast. 🛡️

Cracking encrypted communication with #AI Chatbots like ChatGPT using, ironically, LLMs.

https://youtu.be/I1RqhGGRmHY

Responses were sent back one word-sized token at a time📨

Merely knowing word lengths is enough to infer whole response paragraphs.

The opening responses sentences are so formulaic you can use an LLM to guess the topic, punctuation was singled out with a special token 😬

This shows how encrypted information is still vulnerable to #sidechannel attacks.

#defcon #cybersecurity

The first #ACSAC2024 #PaperPreview for today is Weber et al.'s work, which shows that existing HW features can be repurposed to stop ongoing #SideChannel #attacks almost immediately by monitoring the victim: https://www.openconf.org/acsac2024/modules/request.php?module=oc_program&action=summary.php&id=52
#cybersecurity

The first #ACSAC2024 #PaperPreview today is Ayoub et al.'s Bluescream, where they investigate how an attacker can manipulate #Bluetooth Low Energy to enable the long-distance EM #sidechannel #attack called Screaming Channels: https://www.openconf.org/acsac2024/modules/request.php?module=oc_program&action=summary.php&id=103
#cybersecurity

YubiKey 還在出清有問題的版本

在「YubiKey still selling old stock with vulnerable firmware」這邊看到的，有人提到 YubiKey 還在賣有問題的版本，裡面提到的 blo

https://blog.gslin.org/archives/2024/11/15/12066/yubikey-%e9%82%84%e5%9c%a8%e5%87%ba%e6%b8%85%e6%9c%89%e5%95%8f%e9%a1%8c%e7%9a%84%e7%89%88%e6%9c%ac/

#Computer #Hardware #Murmuring #Security #Software #attack #channel #compliance #eucleak #fips #firmware #hardware #security #side #sidechannel #sidechannel #vulnerability #vulnerable #yubico #yubikey

Can the informaiton leaked by #sidechannel #subconscious - #timespace ever be anonymized scientifically?

They wake you from your dreams (subconscious) to target your daytime (gravity).

Their capabilities aren't really for terrorism, they're for terrorizing.

https://spaceplace.nasa.gov/gravitational-waves/en/

https://www.ligo.caltech.edu/page/what-are-gw

https://en.wikipedia.org/wiki/Laser_Interferometer_Space_Antenna

https://securityaffairs.com/168667/security/tor-project-commented-on-deanonymizing-technique.html

#COSADE #Freemasonry #Time #TerrorismByTheState #Genocide #Privacy #SocialControl #Clock

More fun with Intel and AMD Spectre side channel attacks...

https://www.theregister.com/2024/10/18/spectre_problems_continue_amd_intel/
https://comsec.ethz.ch/research/microarch/breaking-the-barrier/

#intel #amd #spectre #sidechannel