- General - Hackerspace.pl Lists

Korporacyjna promocja Internetu dla dzieci
by rysiek 04 Dec '13

04 Dec '13

Cześć, W celu pośmiania się przez łzy, polecam: http://173.20.223.180/photo_album/chron/2013/2013_12_02-copyright_propagand… -- Pozdr rysiek

7 13

Fwd: NSA: The Game
by rysiek 04 Dec '13

04 Dec '13

Hej, Trzeba by w to kiedyś zagrać. ---------- Treść przekazywanej wiadomości ---------- Temat: NSA: The Game Data: poniedziałek, 2 grudnia 2013, 22:34:54 Od: Peter Gutmann For those of you familiar with the game Werewolf (also known as Mafia), here's an updated version, NSA. Peter. -- Snip -- NSA === Peter Gutmann, 11 November 2013. Adapted from a Werewolf writeup found on Zarfhome. http://www.cs.auckland.ac.nz/~pgut001/pubs/nsa_werewolf.txt NSA is a simple game for a largeish group of people, ten or more is best. It requires no equipment apart from some playing cards, or even just bits of paper. You can play it by simply sitting in a circle, but sitting around a table works better (there's room for drinks and snacks). Setting Up Make up a set of cards, one for each player, with a role on each one: Two NSA agents (Werewolves in the original) One Edward Snowden (Seer in the original) One EFF member (Healer in the original) All the rest are Internet users (Villagers in the original) The cards can be anything from fancy custom ones with the NSA logo and other graphics representing the players' roles, through to a convenient pack of Dora the Explorer cards with N, S, and E scrawled on a few of them. In addition to the players there's a moderator who runs things. The moderator shuffles the cards and hands them out, face down. Each player should look at their card without revealing it to anyone else. If there are more than about 15 players then the number of NSA agents, Snowdens, and EFF members can be increased. Two players are secretly NSA agents. They are trying to apply extraordinary rendition to all of the Internet users. Everyone else is an innocent Internet user, but one of the Internet users, Snowden, secretly has inside access to classified information and can detect the presence of NSA agents. In addition another Internet user is an EFF member and can protect one player per turn from the NSA's extraordinary rendition. The Game: Night and Day The game begins with each player introducing themselves. The standard formula for this is "Hi, my name is <insert name here> and I'm an innocent Internet user". This can be embellished as required with additional comments. Once everyone has been introduced, the game proceeds in alternating night and day phases, beginning with night. At night, the moderator tells all of the players "Night has fallen, close your eyes". The moderator then says "NSA, open your eyes". The two NSA agents do so, and look around to recognize each other. The moderator should also note who the NSA agents are. The moderator says "NSA agents, pick someone to render". The two NSA agents silently agree on one Internet user to subject to extraordinary rendition. It's important that they remain silent while doing this, pointing at the victim works best. When the NSA have agreed on a victim and the moderator understands who they picked, the moderator says "NSA agents, close your eyes". The moderator says "Snowden, open your eyes. Snowden, pick someone to check". Snowden opens his eyes and points at another player (as for the NSA agents, this has to be silent). The moderator signs thumbs-up (or some similar yes- gesture) if Snowden pointed at an NSA agent, and shakes their head (or some similar no-gesture) if the Snowden pointed at an innocent Internet user. The moderator then says "Snowden, close your eyes". Finally, the moderator says "EFF member, open your eyes. EFF member, pick someone to protect". The EFF member opens his/her eyes and, as with the others, points at another player. The moderator then says "EFF member, close your eyes". In the initial rounds its best if the EFF member protects themselves. If and when Snowden identifies himself, the EFF member should protect Snowden in order to prevent him from being subject to extraordinary rendition by the NSA. The moderator says "Everybody open your eyes. It's daytime, and <insert victim name> has been subject to extraordinary rendition". The named person is immediately out of the game, and typically leaves the table or circle so that only active players remain. He or she can't say anything involving the game beyond this point, but would typically sit at the periphery and watch the game continue. Now it's daytime. All of the remaining players decide who to lynch as a suspected NSA agent. Anyone can say anything they want. NSA agents can claim to be Edward Snowden and "unmask" NSA agents who are actually innocent Internet users. Players can privately whisper things to other players (for example claiming to be Snowden, or the EFF member), or secretly pass notes. Any excuse to lynch someone is valid, for example because they have a beard, because they're Australian, or because they took the last potato chip. The real Edward Snowden should remain silent until they've identified at least one NSA agent, since they'll be an immediate target for extraordinary rendition if they reveal themselves too early. Similarly, the EFF member shouldn't reveal their identity unless absolutely necessary, since they need to protect Snowden without being themselves rendered by the NSA. Once a majority of players vote for a particular player to die (the player can be allowed to defend themselves, for example by claiming that "we, too, are Internet users", leading to further votes), the moderator says "<insert-name> has been lynched as a suspected NSA agent and is now dead". The player leaves the game in the same way as those subject to extraordinary rendition. If the players take too long to decide, the moderator can hint that night is about to fall, and if they still dither, night will fall without anyone being lynched. At this point the cycle repeats. Everyone closes their eyes, the NSA agent(s) select another person to subject to extraordinary rendition, Snowden (if alive) learns another player's identity, and the EFF member (if alive) protects another player. The sun rises, one player is rendered (unless protected by the EFF member), and the remaining players discuss another lynching. Repeat until one side wins. Winning The Internet users win if they kill all of the NSA agents. The NSA agents win if they render enough Internet users that the numbers of Internet users and NSA agents are even. In other words they win if the NSA agents constitute a large enough voting bloc that they can't be lynched any more. At that point the NSA can unmask and openly subject the remaining Internet users to extraordinary rendition. Notes When everyone closes their eyes at night, it's best for people to make some sort of noise, typically tapping the table. This will cover up any accidental sounds that are made by the NSA agents, Snowden, the EFF member, or the moderator. Once a player is lynched or rendered, there are two options on what to do with their cards, show or no-show. The show option is easiest, particularly for the initial games. With this option the player reveals their card, so that the other players know what sort of person has been eliminated. The no-show option is harder but a lot more fun. With this option the player doesn't reveal their card, so that the other players have no idea who's still left in the game. ----------------------------------------- -- Pozdr rysiek

3 3

O czym agenci NSA rozmawiają przy stole na święta
by rysiek 03 Dec '13

03 Dec '13

Cześć, NSA wysłało do swoich agentów "talking points" do poruszenia przy świątecznym stole: http://ur1.ca/g502a Krótkie podsumowanie (z oryginalną emfazą!): 1. NSA’s mission is of *great value to the Nation* 2. NSA performs its mission *the right way* — lawful, compliant and in a way that protects civil liberties and privacy; 3. NSA performs its mission *exceptionally well*. We strive to be the best that we can be, because that’s what America requires as part of its defense in a dangerous world; 4. *The people* who work for NSA are loyal Americans with expert skills who make sacrifices to help protect the freedoms we all cherish; 5. NSA is committed to *increased transparency, public dialog and faithful implementation* of any changes required by our overseers. Artykuł bardzo skutecznie rozprawia się z każdym z tych punktów, będąc przy okazji świetnym źródłem linków i dokumentów na ten temat. -- Pozdr rysiek

1 0

Czarny Czwartek za 550zł
by rysiek 03 Dec '13

03 Dec '13

Cześć, Kancelaria prawna rozsyła wezwania do zapłaty za udostępnianie filmu "Czarny Czwartek" po torrentach, a prokuratura pomaga: http://trojmiasto.gazeta.pl/trojmiasto/1,35636,15062465,Udostepniles__Czarn… - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Sprawa zszokowała internautów, a najbardziej zdziwiło ich to, skąd kancelaria adwokacka ma dostęp do ich adresów zamieszkania. - Pokrzywdzony [niemiecka firma Baseprotect - red.] zgłosił się do nas w sprawie uzyskania danych osobowych wskazanych IP, a my zwróciliśmy się do dostawców internetu. To zupełnie legalne - mówi Piotr Romaniuk, prokurator rejonowy w Pruszkowie. Listów byłoby więcej, łącznie nawet ponad tysiąc, jednak operatorzy internetowi po roku kasują swoje dane, więc nie można było uzyskać danych wszystkich IP. - To pierwsza tak duża sprawa. Zazwyczaj to sytuacje jednostkowe i głównie zgłaszane przez firmy fonograficzne. Są to sprawy nielegalnego udostępniania plików w sieci, bo ściągać można. Dotyczą zazwyczaj 30-40 osób - tłumaczy Piotr Romaniuk. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- Pozdr rysiek

1 0

Artificial life
by Radoslaw Szkodzinski 02 Dec '13

02 Dec '13

http://www.newscientist.com/article/dn24669-synthetic-primordial-cell-copie… Polacy potrafią, tylko brakuje im środków. -- Radosław Szkodziński

1 0

Alzheimer: Cukrzyca oddziałuje na mózg w inny sposób niż zakładano.
by spin 02 Dec '13

02 Dec '13

http://www.newscientist.com/article/mg22029453.400-are-alzheimers-and-diabe… Cukrzyca oddziałuje na mózg w inny sposób niż zakładano.

2 1

biometric surveillance
by spin 01 Dec '13

01 Dec '13

http://www.newscientist.com/article/mg22029455.200-soft-biometrics-is-the-n…

1 0

Baterie i podzespoły z drukarki 3D
by viq 30 Nov '13

30 Nov '13

http://m.technologie.gazeta.pl/internet/1,113033,15044019,Baterie_i_podzesp… -- viq

1 0

Ryś znów w Radiu -- RDC, sobota, 07:20 rano
by rysiek 29 Nov '13

29 Nov '13

Cześć, Znów będę w radiu -- tym razem RDC, jutro, 07:20 rano. Będzie o prywatności, Internecie, postaram się wstrzyknąć coś niecoś o hakerach, CryptoParty, Hackerspace i WiOO. Jakby ktoś nagrał, byłbym dźwięczny. :) -- Pozdr rysiek

1 0

[praca] [fw: Sieciowa fucha]
by antoszka 29 Nov '13

29 Nov '13

Ziomy, przesyłam ofertę roboty od kumpla (ja nie mam na to czasu). Prosił, żeby w razie czego od razu uderzać do zainteresowanej babki: <marta.ewa.cichon(a)gmail.com> Elo. PS. Wiem, nie ma widełek etc., ale to taka pojedyncza fucha, więc chyba raczej trzeba po prostu pogadać z babką bliżej o co chodzi i wyjść z własną propozycją. Pozdr., ----- Forwarded message from Piotr Stefański ----- Date: Thu, 28 Nov 2013 22:52:55 +0100 From: Piotr Stefański To: Antoni Grzymala Subject: Sieciowa fucha Cześć, nie wiem, czy Ci się jeszcze zdarza takimi sprawami zajmować, ale znajoma poszukuje firmy/osoby, która mogłaby dla Biblioteki Narodowej wykonać analizę/optymalizację konfiguracji/instalacji sieci i ewentualnie tę sieć od czasu do czasu sprawdzać. Jak masz czas i chęć o tym pogadać albo znasz kogoś, kto mógłby się tym zająć, chętnie zdobędę i przekażę znajomej namiar. pozdrawiam, Piotr Stefański ----- End forwarded message ----- -- [アントシカ]

1 0

Cycki !!! instalacja interaktywna
by Andrzej Stokowski 29 Nov '13

29 Nov '13

Szanowanko wszystkim, Szukam człowieka która zaprojektuje i wyceni element do instalacji interaktywnej Zasada działania mniej więcej taka: Osoba zbliżajaca się do instalacji uruchamia czujkę ruchu która powoduje że na monitorze pojawia się animacja zajmująca ok 25% ekranu, która wraz ze zbliżaniem się osobnika do instalacji skaluje się az do zajęcia 100% ekranu. Animacja będzie kreowana na bieżąco i przesyłana na monitor po MIDI. w przypadku dodatkowych pytań odpowiem ;) pzdr Zdzisław Gruby

3 2

Winter BikeHack
by rysiek 29 Nov '13

29 Nov '13

Ja kcę! https://joindiaspora.com/posts/2193100 -- Pozdr rysiek

4 4

Debata o zakrywaniu twarzy -- już trwa
by rysiek 28 Nov '13

28 Nov '13

Cześć, Rozpoczyna się debata o zakazie zakrywania twarzy na zgromadzeniach: http://watchdog.org.pl/2,1289,karanie_za_zakrywanie__debata.html Zapraszamy do oglądania transmisji na żywo: https://www.youtube.com/watch?v=8a7eOYPRDRU Jest też czat/IRC: http://tnij.org/zakrywanie Serwer: irc.freenode.net Kanał: #zakrywanie -- Pozdr rysiek

1 0

Fwd: Re: [#2013112210007415] Odp: Naruszenie praw autorskich
by Angelika Maria Piątkowska aka Piątkosia 27 Nov '13

27 Nov '13

yyy ok..... -- Angelika Maria Piątkowska Studentka 4 roku Informatyki na Wydziale Elektrotechniki, Informatyki i Telekomunikacji Uniwersytetu Zielonogórskiego ------ Wiadomość oryginalna ------ Temat: Re: [#2013112210007415] Odp: Naruszenie praw autorskich Data: 2013-11-27 15:26 Nadawca: "Chomikuj.pl" <abuse(a)chomikuj.pl> Adresat: piatkosia.apt(a)interia.pl; > Witam serdecznie, > > po otrzymaniu wiarygodnego zgłoszenia o naruszeniu praw autorskich, podejmujemy > interwencję, do której jesteśmy prawnie zobowiązani. W razie wątpliwości, > sugerujemy zwrócić się bezpośrednio do podmiotu, który zgłosił naruszenie i z nim > wyjaśniać sporne kwestie. Dane kontaktowe: microsoft-notices(a)marketly.com > > W celu upewnienia się, że można legalnie umieścić dany plik, zachęcamy do lektury > przewodnika o prawach autorskich (w stopce portalu). > > > Pozdrawiamy, > -- > Kontrola legalności i nadużyć > Chomikuj.pl > abuse(a)chomikuj.pl > ---------------------------------------------------------------------- > Treść tej wiadomości jest poufna i prawnie chroniona. Odbiorcą może być jedynie > jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem > niniejszej wiadomości, jej przeglądanie, rozpowszechnianie, kopiowanie, > rozprowadzanie lub inne działanie o podobnym charakterze jest prawnie zabronione i > może być karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy bezzwłocznie > zawiadomić nadawcę i usunąć ją z komputera bez otwierania załączników. > > The information in this email is confidential and may be legally privileged. It is > intended solely for the addressee. Access to this email by anyone else is > unauthorised. If you are not the intended recipient, any review, disclosure, > copying, distribution or any action taken or omitted to be taken in reliance on > it, is prohibited. If you have received this e-mail in error, please notify the > sender and delete the it from any computer without opening the attachments. > ---------------------------------------------------------------------- > > > -------------- > > > Firma Microsoft Corporation nie jest właścicielem tego pliku, ani nie jest on > chroniony prawem ani autorskim, ani żadnym innym. Program jest rozprowadzany na > darmowej licencji gnu/GPL, a jego rozprowadzanie jest nie tylko dozwolone, ale > wskazane, zdaniem twórców. Więcej informacji na http://www.gimp.org/ . > Sprawdzajcie czasami wasze zgłoszenia. > > > > > > >

8 9

HS Waw na imprezie promującej przestrzenie twórczej współpracy
by Maciej Sawicki 27 Nov '13

27 Nov '13

http://wawalove.pl/Nowe-Miejsce-warszawskie-przestrzenie-tworczej-wspolprac… Zapraszamy już jutro na happeing (od 12:00 schody ruchome przy trasie W-Z) i do naszej skromnej siedziby (jutro i w piątek, ul. Długa 44/50). Pozdrawiam, v PS: jeszcze jest parę rzeczy do ogarnięcia. Jakby ktoś chciał pomóc to proszę o kontakt

1 0

Continuous authentication: Users ID'ed through typing, mouse movements
by spin 27 Nov '13

27 Nov '13

http://www.scmagazine.com.au/News/365221,users-ided-through-typing-mouse-mo…

3 3

PCIe cluster interconnects
by spin 27 Nov '13

27 Nov '13

Jako wielki fan single-system-images zapodawałem temat jakiś czas temu na HS-Waw itp, a teraz znowu mnie naszło: http://www.embedded.com/design/connectivity/4213842/1/Using-PCI-Express-as-… http://www.pcisig.com/developers/main/training_materials/get_document?doc_i… http://archive.hpcwire.com/hpcwire/2011-01-24/a_case_for_pci_express_as_a_h…

2 1

Flavour simulation with electrodes
by spin 26 Nov '13

26 Nov '13

http://www.newscientist.com/article/mg22029444.500-electrode-recreates-all-…

1 0

Re: [HS General] [HS3M] ciekawe warsztaty hardware
by spin 26 Nov '13

26 Nov '13

On 2013-11-26 12:25, Adam Łabędzki | invemax.com wrote: > Jeżeli kogoś jara robotyka i sztuka, to brzmi ciekawie ☺ > > http://www.3hack.pl/wydarzenia/warsztaty-manmachine-budowa-robotow-paraboli… > > Od dzisiaj do 1 grudnia w Gdańsku. Dłuugi opis na stronie. > > Adam Labedzki Fajne info! Dam HS-General na CC

1 0

Fwd: Recycling HW: NICs, PCI cards, A500, J6000, SCSI disks
by Maciej Grela 25 Nov '13

25 Nov '13

Hej, mamy jakiś muzealników na liście? Jeżeli tak to szykuje się dla nich okazja. Pozdr, enki ---------- Forwarded message ---------- From: Grant Grundler <grantgrundler(a)gmail.com> Date: 2013/11/25 Subject: Recycling HW: NICs, PCI cards, A500, J6000, SCSI disks To: linux-parisc <linux-parisc(a)vger.kernel.org> I'm not doing anything with my PA-RISC HW and will recycle it. Anyone interested in it for hppa linux development? I have many multi-port PCI cards, 9GB to 36GB SCA SCSI drives, and two systems. I can ship if you want to pick up the cost of shipping. cheers, grant -- To unsubscribe from this list: send the line "unsubscribe linux-parisc" in the body of a message to majordomo(a)vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html

1 0

iLOL'd
by rysiek 25 Nov '13

25 Nov '13

Cześć, Taki filmik na vimeo, endżoj. http://vimeo.com/79695097 -- Pozdr rysiek

2 1

configuration management software
by piorek 22 Nov '13

22 Nov '13

Hej, Co prawda podejrzewam, że większość tutaj czyta slashdot'a i i tak już trafiła na ten link, ale podrzucam dla reszty: http://www.infoworld.com/d/data-center/review-puppet-vs-chef-vs-ansible-vs-… -- Pozdrawiam Piotrek 'piorek' Fiorek

1 0

MenuetOS, czyli "że komuś się chciało"
by rysiek 20 Nov '13

20 Nov '13

Hej, Widząc niusa o wydaniu stabilnym MenuetOS, muszę przyznać, że zaliczyłem "wow moment". JKJP, cały system napisany w assemblerze. Że komuś się chciało! http://www.menuetos.net/ -- Pozdr rysiek

4 3

Ryś dziś o 13 w Tok FM
by rysiek 20 Nov '13

20 Nov '13

Cześć, Jak ktoś jeszcze nie ma dość interakcji ze mną, albo się pośmiać chce, dziś o 13:00 w Tok FM będę w temacie cenzury i pornografii dziecięcej w Internecie. -- Pozdr rysiek

5 7

Public domain game art
by Robert Gerus 19 Nov '13

19 Nov '13

http://www.glitchthegame.com/public-domain-game-art/ > Tiny Speck, Inc., the game’s developer, has relinquished its ownership of copyright over these 10,000+ assets in the hopes that they help others in their creative endeavours and build on Glitch’s legacy of simple fun, creativity and an appreciation for the preposterous.

1 0

Re: [HS General] [HS WAW] Serwery do oddania/wstawienia do HS-u…
by Kuba Niewiarowski 18 Nov '13

18 Nov '13

W dniu 18 listopada 2013 21:11 użytkownik Maciej Grela < maciej.grela(a)gmail.com> napisał: > W dniu 18 listopada 2013 20:13 użytkownik Kuba Niewiarowski > <marsjaninzmarsa(a)gmail.com> napisał: > > W dniu 18 listopada 2013 19:06 użytkownik Krzysztof Kotkowicz > > <krzysztof(a)kotkowicz.pl> napisał: > > > >> Dnia 18 lis 2013 o godz. 19:01 Kuba Niewiarowski > >> <marsjaninzmarsa(a)gmail.com> napisał(a): > >> > >> > Antoszka, Nadal aktualne? > >> > > >> > >> Ej, a nie spocisz się za bardzo w komunikacji miejskiej? Bo taka była > >> swego czasu Twoja wymówka, jak się deklarowałeś z odbiorem dwóch > monitorów > >> ode mnie. > > > > > > Krzysiu, ale to nie dla mnie, to dla Lublina, ja tylko przekazałem > > wiadomości pomiędzy listami. Czytaj z łaski swojej maile w kontekście. > > > > Wszystkich zainteresowanych prosiłbym chociaż o załączanie w CC Tanatosa > z > > lubelskiego HS, który się odezwał, że chcą. > > Zaproponuj koledze Tanatosowi zapisanie się na listę General, została > ona stworzona dokładnie w celu wymiany takich informacji między > różnymi HSami. Nie będzie trzeba wtedy pamiętać o żadnych CC. > > Pozdr, > enki > Przesyłam wiadomość dalej, w takim razie. Tanatos, zapraszamy na listę General. :) Sprzęt chyba czeka. :) -- Pozdrawiam, Kuba Niewiarowski.IT

2 1

thought-generated objects/design
by spin 18 Nov '13

18 Nov '13

http://www.indiegogo.com/projects/children-creating-real-objects-with-their… https://en.wikipedia.org/wiki/Hod_Lipson Nowy trend żeby ożenić drukarki 3d z generowaniem kształtów za pomoca eeg. Troche przekombinowane, ale generalnie 'automatyzacja interpretacji' jest fajna. Generujemy skryptem serię derywatów obiektu, pytamy się usera który się najbardziej podoba x n iteracji do osiągnięcia pożądanego kształtu. dążymy do skrócenia czasu trwania pojedynczej iteracji. Dobra podstawa do nauki o podświadomości estetyki też.

2 1

Jeremy Hammond skazany na 10 lat + 3 lata zakazu korzystania z kryptografii
by rysiek 16 Nov '13

16 Nov '13

Hej, Kim jest Jeremy Hammond? http://en.wikipedia.org/wiki/Jeremy_Hammond Wczoraj został skazany -- za włam do Stratfora -- na 10 lat, plus 3 lata zakazu korzystania z kryptografii *po wyjściu z więzienia*. Oto jego mowa na koniec procesu: http://freeanons.org/jeremy-hammond-sentenced-10-years/ Na dole znajdziecie wersję nieocenzurowaną. -- Pozdr rysiek

1 0

Topienie stali with magnets, how do their work
by rysiek 16 Nov '13

16 Nov '13

Joł, Gorący temat: https://joindiaspora.com/posts/3293520 -- Pozdr rysiek

8 7

Naruszenie licencji na oprogramowanie?
by rysiek 15 Nov '13

15 Nov '13

Cześć, na liście FWiOO trwa dyskusja na temat odpowiedzi, którą otrzymaliśmy od jednej z dużych firm w sprawie pewnego ich urządzenia (a dokładnie systemu operacyjnego, który na nim jest): "Linux, ale nie w otwartej edycji, tylko developowany na potrzeby Korporacji. Szczegółowe dane zna developer, ale nie wiem, czy je poda" Jeżeli jest Linux, to jest kod na GPLu. Urządzenia są dystrybuowane, razem z oprogramowaniem. Jeżeli jest kod na GPLu, który jest dystrybuowany, powinienem móc dostać źródła. Czyżby pewna duża polska firma naruszała licencję jądra Linuksa?.. -- Pozdr rysiek

5 6

DIY ładowarka słoneczna na USB
by rysiek 15 Nov '13

15 Nov '13

Hej, Czego to ludzie na Diasporze nie podrzucą: http://elektronenschleuder.de/?p=132 -- Pozdr rysiek

1 0

konferencja MS na temat interoperacyjności
by Maciej Sawicki 14 Nov '13

14 Nov '13

hej, może ktoś będzie miał ochotę wpaść: https://www.interopconf.com. Ja niestety odpadam. Pewnie będzie dość drętwo, ale HS mógłby to zmienić ;) Pozdrawiam, v

5 5

quadcopter
by piorek 14 Nov '13

14 Nov '13

quadcopters - we're doing it wrong http://spectrum.ieee.org/automaton/robotics/aerial-robots/iros-2013-should-… -- Pozdrawiam Piotrek 'piorek' Fiorek

4 3

Fwd: Re: The second operating system hiding in every mobile phone
by rysiek 14 Nov '13

14 Nov '13

---------- Treść przekazywanej wiadomości ---------- Temat: Re: The second operating system hiding in every mobile phone Data: środa, 13 listopada 2013, 18:52:13 Od: Alexey Zakhlestin <indeyets(a)gmail.com> Do: cypherpunks(a)cpunks.org Reminded me of a good old article… http://blog.mecheye.net/2012/12/bytecode/ Bytecode Posted on December 9, 2012 What is the most commonly used bytecode language in the world? Java (JVM Bytecode)? .NET (CLI)? Flash (AVM1/AVM2)? Nope. There’s a few that you use every day, simply by turning on your computer, or tablet, or even phone. You don’t even have to start an application or visit a webpage. ACPI The most obvious is the large, gargantuan specification known as “ACPI”. The “Advanced Configuration and Power Interface” specification lives up to its name, with the most recent specification being a mammoth document that weighs in at almost 1000 pages. And yes, operating systems are expected to implement this. The entire thing. The bytecode part is hidden deep, but it’s seen in chapter 20, under “ACPI Machine Language”, describing a semi-register VM with all the usuals: Add, Subtract, Multiply, Divide, standard inequalities and equalities, but then throws in other fun things like ToHexString and Mid (substring). Look even further and you’ll see a full object model, system properties, as well as an asynchronous signal mechanism so that devices are notified about when those system properties change. Most devices, of course, have a requirement of nothing less than a full implementation of ACPI, so of course all this code is implemented in your kernel, running at early boot. It parallels the complexity of a full JavaScript environment with its type system and system bindings, with the program code supplied directly over the wire from any device you plug in. Because the specification is so complex, an OS-independent reference implementation was created by Intel, and this is the implementation that’s used in the Linux kernel, the BSDs (including Mac OS X), and the fun toy ReactOS, HaikuOS kernels. I don’t know if it’s used by Windows or not. Since the specification’s got Microsoft’s name on it, I assume their implementation was created long before ACPICA. Fonts After that, want to have a graphical boot loader? Simply rendering an OpenType font (well, only OpenType fonts with CFF glyphs, but the complexities of the OpenType font format is a subject for another day) requires parsing the Type 2 Glyph Format, which indeed involves a custom bytecode format to establish glyphs. This one’s even more interesting: it’s a real stack-based interpreter, and it even has a “random” opcode to make random glyphs at runtime. I can’t imagine this ever be useful, but it’s there, and it’s implemented by FreeType, so I can only assume it’s used by some fonts from in the real world. This bytecode interpreter also contained at one time a stack overflow vulnerability which was what jailbroke the iPhone in JailbreakMe.com v2.0, with the OTF file being loaded by Apple’s custom PDF viewer. This glyph language is based on and is a stripped down version of PostScript. Actual PostScript involves a full turing-complete register/stack-based hybrid virtual machine based on Forth. The drawbacks of this system (looping forever, interpreting the entire script to draw a specific page because of complex state) were the major motivations for the PDF format — while based on PostScript, it doesn’t have much shared document state, and doesn’t allow any arbitrary flow control operations. In this model, someone (even an automated program) could easily verify that a graphic was encapsulated, not doing different things depending on input, and that it terminated at some point. And, of course, since fonts are complicated, and OpenType is complicated, OpenType also includes all of TrueType, which includes a bytecode-based hinting model to ensure that your fonts look correct at all resolutions. I won’t ramble on about it, but here’s the FreeType implementation. I don’t know of anything interesting happening to this. Seems there was a CVE for it at one time. To get this article to display on screen, it’s very likely that thousands of these tiny little microprograms ran, once for each glyph shape in each font. Packet filtering Further on, if you want to capture a network packet with tcpdump or libpcap (or one of its users like Wireshark), it’s being filtered through the Berkeley Packet Filter, a custom register-based bytecode. The performance impact of this at one time was too large for people debugging network issues, so a simple JIT compiler was put into the kernel, under an experimental sysctl flag. As a piece of historical interest, an earlier version of the BPF code was part of the code claimed to be infringing part of the SCO lawsuits (page 15), but was actually part of BSD4.3 code that was copied to the Linux kernel. The original BSD code was eventually replaced with the current architecture, known as the Linux Socket Filter, in Linux 2.2 (which I can’t easily link to, as there’s no public repository of the Linux kernel code with pre-git history, as far as I know). What about it? The popularity of bytecode as a general and flexible solution to problems is alluring, but it’s not without its complexities and faults, with such major security implications (an entire iPhone jailbreak from incorrect stack overflow checking!) and insane implementation requirements (so much that we only have one major implementation of ACPI used across all OSes that we can check). The four examples also bring out something interesting: the wildly different approaches that can be taken to a bytecode language. In the case of ACPI, it’s an interesting take on what I can only imagine is scope creep on an originally declarative table specification, bringing it to the mess today. The Type 1 Glyph and TrueType Hinting languages are basic stack-based interpreters, showing their PostScript heritage. And BPF is a register-based interpreter, which ends up with a relatively odd register-based language that can really only do simple operations. Note, though, that all of these implementations above have had security issues in their implementations, with numerous CVEs for each one, because bytecode interpreter implementations are hard to get right. So, to other hackers: do you know of any other low-level, esoteric custom bytecode specifications like these? And to spec writers: did you really need that flexibility? ----------------------------------------- -- Pozdr rysiek

2 1

Fwd: The second operating system hiding in every mobile phone
by rysiek 13 Nov '13

13 Nov '13

Czas pohakować bejzbandy? ---------- Treść przekazywanej wiadomości ---------- Temat: The second operating system hiding in every mobile phone Data: środa, 13 listopada 2013, 09:54:09 Od: Eugen Leitl http://www.osnews.com/story/27416/The_second_operating_system_hiding_in_eve… The second operating system hiding in every mobile phone posted by Thom Holwerda on Tue 12th Nov 2013 23:06 UTC I've always known this, and I'm sure most of you do too, but we never really talk about it. Every smartphone or other device with mobile communications capability (e.g. 3G or LTE) actually runs not one, but two operating systems. Aside from the operating system that we as end-users see (Android, iOS, PalmOS), it also runs a small operating system that manages everything related to radio. Since this functionality is highly timing-dependent, a real-time operating system is required. This operating system is stored in firmware, and runs on the baseband processor. As far as I know, this baseband RTOS is always entirely proprietary. For instance, the RTOS inside Qualcomm baseband processors (in this specific case, the MSM6280) is called AMSS, built upon their own proprietary REX kernel, and is made up of 69 concurrent tasks, handling everything from USB to GPS. It runs on an ARMv5 processor. The problem here is clear: these baseband processors and the proprietary, closed software they run are poorly understood, as there's no proper peer review. This is actually kind of weird, considering just how important these little bits of software are to the functioning of a modern communication device. You may think these baseband RTOS' are safe and secure, but that's not exactly the case. You may have the most secure mobile operating system in the world, but you're still running a second operating system that is poorly understood, poorly documented, proprietary, and all you have to go on are Qualcomm's Infineon's, and others' blue eyes. The insecurity of baseband software is not by error; it's by design. The standards that govern how these baseband processors and radios work were designed in the '80s, ending up with a complicated codebase written in the '90s - complete with a '90s attitude towards security. For instance, there is barely any exploit mitigation, so exploits are free to run amok. What makes it even worse, is that every baseband processor inherently trusts whatever data it receives from a base station (e.g. in a cell tower). Nothing is checked, everything is automatically trusted. Lastly, the baseband processor is usually the master processor, whereas the application processor (which runs the mobile operating system) is the slave. So, we have a complete operating system, running on an ARM processor, without any exploit mitigation (or only very little of it), which automatically trusts every instruction, piece of code, or data it receives from the base station you're connected to. What could possibly go wrong? With this in mind, security researcher Ralf-Philipp Weinmann of the University of Luxembourg set out to reverse engineer the baseband processor software of both Qualcomm and Infineon, and he easily spotted loads and loads of bugs, scattered all over the place, each and every one of which could lead to exploits - crashing the device, and even allowing the attacker to remotely execute code. Remember: all over the air. One of the exploits he found required nothing more but a 73 byte message to get remote code execution. Over the air. You can do some crazy things with these exploits. For instance, you can turn on auto-answer, using the Hayes command set. This is a command language for modems designed in 1981, and it still works on modern baseband processors found in smartphones today (!). The auto-answer can be made silent and invisible, too. While we can sort-of assume that the base stations in cell towers operated by large carriers are "safe", the fact of the matter is that base stations are becoming a lot cheaper, and are being sold on eBay - and there are even open source base station software packages. Such base stations can be used to target phones. Put a compromised base station in a crowded area - or even a financial district or some other sensitive area - and you can remotely turn on microphones, cameras, place rootkits, place calls/send SMS messages to expensive numbers, and so on. Yes, you can even brick phones permanently. This is a pretty serious issue, but one that you rarely hear about. This is such low-level, complex software that I would guess very few people in the world actually understand everything that's going on here. That complexity is exactly one of the reasons why it's not easy to write your own baseband implementation. The list of standards that describe just GSM is unimaginably long - and that's only GSM. Now you need to add UMTS, HSDPA, and so on, and so forth. And, of course, everything is covered by a ridiculously complex set of patents. To top it all off, communication authorities require baseband software to be certified. Add all this up, and it's easy to see why every cellphone manufacturer just opts for an off-the-shelf baseband processor and associated software. This does mean that each and every feature and smartphone has a piece of software that always runs (when the device is on), but that is essentially a black box. Whenever someone does dive into baseband software, many bugs and issues are found, which raises the question just how long this rather dubious situation can continue. It's kind of a sobering thought that mobile communications, the cornerstone of the modern world in both developed and developing regions, pivots around software that is of dubious quality, poorly understood, entirely proprietary, and wholly insecure by design. ----------------------------------------- -- Pozdr rysiek

6 6

Czysty geniusz
by Maciej Grela 13 Nov '13

13 Nov '13

Hej, tylko to tutaj zostawię. Enjoy :). https://www.youtube.com/watch?v=nZjAw267jWo Pozdr, enki

4 3

Commandline-fu
by spin 12 Nov '13

12 Nov '13

Pewnie old news, ale stronka z commandline'ową wirtuozerią: http://www.commandlinefu.com/commands/browse/sort-by-votes

2 1

Truecrypt code audition coming
by spin 11 Nov '13

11 Nov '13

http://arstechnica.com/security/2013/10/new-effort-to-fully-audit-truecrypt…

2 1

[oddam] za darmo p3 + płyta + ram
by Maciej Sawicki 11 Nov '13

11 Nov '13

ASUS CUSL-2C (brak bateryjki do podtrzymywania ustawień) 512 MB RAM w jednej kostce jakieś p3 Prawdopodobnie sprawne. kontakt na priv. Pozdrawiam, v

1 0

Oddam za darmo nokie 5200
by Maciej Sawicki 11 Nov '13

11 Nov '13

Hej, Robię małe porządki. Znalazłem nokię 5200 niebieską. Muszę zobaczyć czy mam gdzieś do niej akcesoria typu ładowarki i słuchawki. Ma jedno malutkie pęknięcie z tyłu obudowy i lekko przetartą klawiaturę (przy klawiszach 2 i 5). Prawdopodobnie sprawna. Na 99,9% ma simlocka w plusie. Preferowany odbiór osobisty w hs. Kontakt na priv. Pozdrawiam, v

3 2

O reformie prawa autorskiego w Europarlamencie
by rysiek 09 Nov '13

09 Nov '13

Cześć, we wtorek jest "iwent" w Europarlamencie na temat reformy prawa autorskiego: http://ur1.ca/g08af Opis na TorrentFreak: http://ur1.ca/g08ah Będę tam, po powrocie postaram się opisać, co i jak. -- Pozdr rysiek

1 0

Apple dostało patent na blokowanie nagrywania na mobiliach
by rysiek 09 Nov '13

09 Nov '13

Hej, Apple właśnie dostało patent na blokowanie funkcji nagrywania i robienia zdjęć na urządzeniach mobilnych: http://boingboing.net/2012/08/30/apple-granted-patent-for-locat.html "On Tuesday, Apple was granted a patent that could prevent photos and videos from being taken in particular locations. Other restrictions include forcing the camera to go to sleep so it cann't be used at all." "I imagine movie theaters would be the first to use this remote disabling feature (if Apple ever decides to move ahead with this technology; just because they have a patent doesn't mean they'll use it). The paranoid side of me imagines governments using it to prevent citizens from communicating with each other or taking video during protests." -- Pozdr rysiek

3 3

HADOOPrelegent
by rysiek 07 Nov '13

07 Nov '13

Cześć, Słuchajcie, szukamy specjalisty od HADOOPa, który miałby ochotę prelegować na Forum Otwartych Technologii: http://fot2013.computerworld.pl/ Znacie kogoś takiego? :) -- Pozdr rysiek

1 0

Komputer zasilany "krwią"
by rysiek 06 Nov '13

06 Nov '13

Hej, Nie wiem, czy ktoś z Was już to widział, ale... http://www.bbc.co.uk/news/science-environment-24571219 "IBM unveils computer fed by 'electronic blood'" "Its new "redox flow" system pumps an electrolyte "blood" through a computer, carrying power in and taking heat out." -- Pozdr rysiek

2 1

Dark Mail Alliance
by viq 05 Nov '13

05 Nov '13

http://darkmail.info/ "From the Team of Silent Circle" Our Mission To bring the world our unique end-to-end encrypted protocol and architecture that is the 'next-generation' of private and secure email. As founding partners of The Dark Mail Alliance, both Silent Circle and Lavabit will work to bring other members into the alliance, assist them in implementing the new protocol and jointly work to proliferate the worlds first end-to-end encrypted 'Email 3.0' throughout the world's email providers. Our goal is to open source the protocol and architecture and help others implement this new technology to address privacy concerns against surveillance and back door threats of any kind. W ciągu dwóch tygodni mają opublikować white paper. -- viq

2 4

DevFest - impreza dla użytkowników technologii Google
by Maciej Sawicki 05 Nov '13

05 Nov '13

Hej, GDG[0] organizuje fajną konfę [1] w najbliższą sobotę w Warszawie. Zostało jeszcze kilka biletów [2] z dodatkowej puli :). Pozdrawiam, v [0]: https://developers.google.com/groups/directory/Poland [1]: http://www.devfest.pl [2]: https://devfest2013.evenea.pl

1 0

"SSL added and removed here :)"
by rysiek 30 Oct '13

30 Oct '13

Hej, Nie ma co nawet za bardzo komentować: http://ur1.ca/fykvb "NSA infiltrates links to Yahoo, Google data centers worldwide, Snowden documents say" "In this slide from a National Security Agency presentation on “Google Cloud Exploitation,” a sketch shows where the “Public Internet” meets the internal “Google Cloud” where user data resides. Two engineers with close ties to Google exploded in profanity when they saw the drawing." -- Pozdr rysiek

1 0

tymczasem w ameryce...
by piorek 30 Oct '13

30 Oct '13

Może jednak warto uświadamiać ludzi u nas, że hacker to nie automatycznie kryminalista, póki nie dochodzi do takich akcji: http://techcrunch.com/2013/10/26/the-war-on-hackers/ -- Pozdrawiam Piotrek 'piorek' Fiorek

9 12

Zaproszenie na konferencje MCE - 20% zniżki
by Maciej Sawicki 30 Oct '13

30 Oct '13

Hej, W imieniu organizatorów konferencji Mobile Central Europe [0] gorąco zapraszam na najlepszą (np pod względem ilości zagranicznych prelegentów) polską konferencję o tematyce mobilnej. Konferencja odbędzie się 10 stycznia 2014 w warszawskim Kinie Praha. Przed konferencją będzie hakaton o tematyce hardwarowej[1]. (full disclosure głównym organizatorem). Wpisując promo kod 31337 można uzyskać 20% zniżki (uwaga - z kodu może skorzystać tylko 10 osób, kod jest ważny do następnego piątku tzn: 08.11.2013). Pozdrawiam, v [0]: http://mobilecentraleurope.com/ [1]: http://mobilecentraleurope.com/hackathon.html

1 0

WebRTC z otwartym H.264?
by piorek 30 Oct '13

30 Oct '13

Just FYI: http://www.engadget.com/2013/10/30/cisco-plans-to-open-source-h-264-code-fo… -- Pozdrawiam Piotrek 'piorek' Fiorek

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

General