New attack uses vulnerability in microchips.

“Modern processors are fast, in part, because they guess. Rather than waiting to find out which way a program will branch, a chip predicts the likely path. And races ahead. When the guess is right. “ (MIT)

“Time is saved. When it’s wrong, the work is discarded, but traces of it linger. Since the Spectre vulnerability was disclosed in 2018, attackers have known how to read those traces to pull secrets out of memory they should never see.” (MIT)

MIT Schwarzman college of computing uncovers a new type of attack. That opens Linux passwords to an attacker. The attacker uses the vulnerability in a modern microchip log file. The microprocessor itself creates this file. Called a “guess file”. Officially, that file is called prediction machinery. But. I use the term “Guess file”. That is the log file. The microchip uses it to predict how the program routes itself. 

“AMD’s defense, called saferet, cleans the prediction machinery immediately before each use, leaving a vulnerable window just two instructions wide, which typically execute within tens of nanoseconds. The researchers hit it anyway, by slowing down the processor at that exact spot to make the target easier to strike.” (MIT)

There is one small vulnerability. The system needs to stop before it starts a new task. That opens the door to the processor. A couple of milliseconds is enough to slow the processor. The attacker can strike. We know. That hackers can exploit even the smallest windows and backdoors. They can get access to the system. Those vulnerabilities are growing bigger in the time of AI. AI can launch attacks. Using precise and fast reactions. The AI waits for the processor to slow down. Before it begins a new task. When the processor stops, the AI tries to slip malicious code into the processor. 

So the computer makes a bad guess. And that opens a path to at least the password file. 

“The defenses work by wiping or isolating the processor’s prediction machinery, removing anything an attacker might have planted. The catch, as PhD student Daniël Trujillo and MIT Assistant Professor Mengjia Yan point out, is that the wipe and the moment the predictions get used can’t happen at the same instant. There is always a gap. — sometimes only a handful of instructions wide. Anything that runs in that gap can dirty the machinery all over again. The researchers call this class of attack “TONTOU.” (MIT)

If hackers can infect microchips, they can infect an entire computer. The microchip is a small computer. There is a cache and an operating system. The Kernel is the program that connects the hardware to software. Every command that a user gives. And a program that runs on a computer travels through the processor. If malware. Can be written in the microchip. The results can be destructive. The cache is the point. There, the malware could write itself. 

If. The cache is not protected. That can cause infection. There is a small possibility that the attackers can write their malware in that memory. Normally, a microchip’s internal control programs run on ROM. But that cache is vulnerable. Researchers in an MIT laboratory created a method called “interrupt injection”. 

“To show what this means in practice, the team built a working exploit on an AMD system running a current Linux kernel. They first stripped away a defense that scrambles where the operating system sits in memory, succeeding in all 10 tries in about nine minutes each. That helped them read protected memory at roughly five bytes per second — slow, but fast enough to locate and copy “/etc/shadow,” the file storing the system’s root password hash, in half their attempts.” (MIT)

This file tells the computer which program requires attention. Normally, the processor destroys that file immediately after it uses it.  But researchers could slow the processor at a critical moment. And they could use that file to open the password file. This means. They got access to the entire system. 

But the “guess-file”. It has another option. That option is that. It determines which program or file can use the microprocessor’s resources. There is a small possibility. Tha. If hackers can create that file. And slip it into the microchips. They can gain access to the entire system. And they can slip in any malware. In a computer, using the microprocessors as the platform. 

https://computing.mit.edu/news/new-type-of-attack-can-slip-past-the-defenses-in-your-computers-processor/

https://en.wikipedia.org/wiki/Spectre_(security_vulnerability)

The use of mobile telephones as the spying tool

Picture I

https://marxjatalous.blogspot.com/

Kimmo Huosionmaa

Use of the mobile telephones in multiple new purposes have made this thing also very effective spying tool. The mobile telephones 3D-scanning programs use the sonar system of the mobile telephone to create the 3D-models of the targeted piece. But do you know, that the similar systems can modify the mobile telephone very effectively the remote microphone and eavesdrop device, that can break privacy in any house, there is found the window? And behind that window, persons are talking about private talkings.


If some person would speak something, what is private, that kind of remote microphones and spying tools can record those talking, and the target would not notice anything. The resonance of the class can be meter also by using sonar or radar, and that resonance can change as the voice signal by using similar technology as the laser microphones use. Those mobile telephones can fly to the roof, near to the targeted window by using drones, and they can observe everything, what happens in the targeted room. If those systems are covered with new STEALTH-layers, what makes them merge in the background, like chameleons those systems would be invisible. And the active STEALTH uses the small cameras to make pictures from opposite side of the device, what makes them act like chameleons. Those drones can also equip with automatic rifles or submachine guns, and they can use to eliminate any target in the world.


And if the resolution capacity of SONAR is high enough, that system can break any privacy in the world. And the mobile telephones can be used as the eavesdropping device simply by leaving the Whatsapp or some other social media solution on and leaving the telephone in the room, and the voice inside that room would be analyzed by using computer programs. Those programs can separate speech from the back noise very effectively, and that's why even the weakest sounds can transform to normal recording.


This thing can allow that any person can record the voices behind the glass and modern mobile telephones also make photographing in the streets very unseen. That is the reason, why even the highly secret government facilities are not marked themselves by using the "photographing prohibited signs". That kind of signs are actually like red roosters for some photographers, and that's the reason why that sign is not found anywhere except near some military bases. It's impossible to control the photographing in ordinary streets. And for the better information security, those signs are not placed in the streets.

Picture I

https://o.aolcdn.com/images/dims?quality=100&image_uri=http%3A%2F%2Fo.aolcdn.com%2Fhss%2Fstorage%2Fmidas%2Ffe046bab7fb8f9af08ce716ad0b03dda%2F202523229%2Fmicrosoft-mobilefusion.jpg&client=cbc79c14efcebee57402&signature=86ad9c6e0ba7e562d807a0f0a0abf52c72656677

Writing about religion and opinions

https://vapaaverkkojulkaiseminen.blogspot.com

Kimmo Huosionmaa

Sometimes we are facing the newspaper article, where is mentioned, that somebody is atheist. And this kind of news is probably meant for giving the people some kind of picture of that person's opinions. What does the opinion of religion and god influences of other work of that person, is the thing that I don't sometimes understand. When we are talking about religion, we are talking about the thing, when people believe, or they do not believe in something. Religion is a myth, what is visible in every city in the Western world, or in the countries, what has not the officially atheistic government, what would deny any religious signs. 

When we are thinking about the God, I'm sure that this creature would not live in my neighbor. And I ever met this thing, so I must say that if there is no proof the existence of the god, we must proudly say that we believe or we would not believe that thing. And believing in something, what can change many times during the day. We have all confessed our Christian religion in the church, but do we really believe in that thing? 

This is the thing, what everybody knows in the mind or heart, what term we would want to use about that thing, where we deeply handle things, what is important to us. When people are young, the things like religion are not very important for them, but at the end of the life, those things like the existence of the God would become more important. And at the final end at the time of death, the human want to believe that something is waiting for that person because that makes things easier to stand. 

But religion and atheism are good weapons in the attack against some other persons because there are no right opinions about those things. When that targeted person tries to defend self, would that cause only more critiques and even hate against that person, because there is no way to defend the right way. Every time when this person tries to say something, would that hurt somebody very deep opinion and feelings about religion. 

Or if the defense bases the religion is the real thing, that would be justified as a pseudoscience. But how this is possible, that our person never please other persons in the society. The answer is simpler as you might think, my dear readers, there are three groups of attackers. One is the team, what leads the attack, and other teams, what have the opinion that religion is true, and another has the opinion, that religion is false. 

This action would sometimes boost with programs, where some private detective claims, that somebody, who has the same background than this targeted person is some pedophile. That sounds good in the media. The harassment is also very often used the method in this kind of things, where somebody would be wanted to smoke out of the workplace. Personal opinions about religion are everybody's own business. That is the thing, what would not be seen in the normal life.