From Jasper and Theo:
"""> Thanks to Ben Gras of VUSec for sharing an early version the research paper
> with us. More details will be made public soon as 'tlbleed'.
Thanks for saying that Jasper. And thanks to Ben for getting the paper to us.
As demonstrated in the commit message, we hesitate to pass on more information. That remains Ben's thunder in Vegas.
"""
Blackhat, Aug 4-9.
https://www.blackhat.com/us-18/briefings/schedule/#tlbleed-when-protecting-your-cpu-caches-is-not-enough-10149
My life is swirling sewage-laden toilet bowl right now, but the world needs an article on OpenBSD "breaking embargos."
If other people find the sources, I'll take an hour and hammer them into a post.
Post original mailing list and article links in answer to this toot. Or don't. Whatevs.
I'll credit folks, of course.
My bias on this: there were fubars, like the 8 out of 10 OpenSSL bug. They'll argue against embargos over beer, but if they agree to it they'll keep it.
Ever wondered how expensive it is to own a (pure) proof-of-work cryptocurrency? https://www.crypto51.app/
Clerk at a shop was convincing me that installing the $brand loyalty Android/iOS app was a good deal. I declined stating privacy reasons and was surprised as she asked why.
So I asked her if it would be OK in me having information on:
- where & when she shops
- what she buys
- with whom she meets
- how often she uses the toilet
- and potentially leaking that information online by accident
in exchange for a 20% price cut on a deodorant.
She uninstalled the app on the spot. No joke.
If you see ?utm_source and a bunch of other gibberish at the end of a shared URL, go ahead and just take off everything starting with the ?
This is Google Analytics tracking information.
Gmail enters the "extend" phase of Embrace, Extend, Extinguish by creating new proprietary features for email then forcing non-gmail users the view the mail through a link with Google Login (and sometimes SMS confirmation!)
https://arstechnica.com/gadgets/2018/04/gmail-com-redesign-includes-self-destructing-e-mails/#p3
I can't even begin to say how much I love the sheer cross-conceptual nerdery of this.
going retro
if some meta toot about this being my first toot is never made, i'll probably never toot at all.
