#SideChannels

[digitalcreationsllc]

New iLeakage Attack Steals Emails, Passwords From Apple Safari

This attack bypasses standard side-channel protections implemented by browser vendors and can retrieve data from Safari, as well as other browsers like Firefox, Tor, and Edge on iOS.

[fruityyamenrunner]

op did some strange repost and then block thing for that last post which is not evidence they are a Moscow operative but is evidence they believe in the magical efficacy of posting.

There isn't one. When posting bear these maxims in mind:

Words only have the normal kinds of effects. They invoke thoughts and feelings in people who hear them, or they don't, and this change in thought or feeling is the only way they can have an effect.

Incantations don't work on the disembodied spirits who make the world go round because they don't appear to have feelings or ears.

The Voice isn't real: you can't just add "make people do this" effects to words. You have to do something different to have a different effect.

You can't "put something hidden that only you know is in there" subliminally, because you are obliged to use the same words as anyone else. The only way to achieve this is by faking it by adding sidechannels and if you don't do that then the effect will just not happen.

[the-timewatcher]

HEY EVERY!

I have good news and bad news! Good news: Deltarune is coming out in 9 days at time of writing! Bad news: I don't have the money to get it!

So, I'm finally opening up SEMI-EMERGENCY MUSIC COMMS!

I don't advertise this often on Tumblr, but I make music:

I do a lot of battle themes. And some calmer pieces. Even dabble in lo-fi a little! And if you want a track with full rights to it, be it for your OCs, games, TTRPG campaigns or whatever else, I'm willing to make it.

The prices are as listed, but for a limited time only (until June 3rd 2025), you can get each additional minute after the first one for 5 EURO! That's right, 5 EURO! I just need the money for Deltarune and am willing to make a 2 minute track for 25 EURO*! (And 3 minutes for 30. I don't know if I have it in me to make 4 minutes that quickly.) * (Based off "Original Song - Battle (Motif Included)" listing.)

For details, message me on here or on Discord (aridaishi)!

[diaphin93]

Criticizing Edelgard

Edelgards biggest mistake was not making the War all about forcefully converting everyone in Fodlan to the Brigid religion. It is already objectively better than the Church of Seiros because Petra practices it while the church created imbeciles such as Catherine Thunderbrand, who is a hot butch, that much I can admit, but also has the same number of braincells as any member of a nordic viking inspired culture or race in fantasy, which is to say in the high negative digits.

Some might find that take of mine controversial, but think about it. I have already proven why the enlightened Brigid Religion is superior and creats better people than the cult of seiros. More importantly though, imagine how funny it would have been in discourse. Church Fans and Edelgard haters already stumble from one at best stupid and at worst highly problematic argument to the next, not to forget FantasyInvader who crossed the line into sounding like Archwarhammers Fire Emblem Sidechannel. If she would propagate a foreign religion, it would push most of them straight into the most fucked up yet comedic media illiteracy.

Though because I'm very balanced, I will further criticize Edelgard for what she did wrong, which is to violently fight against the Almyran Expedition Force that was about to bring culture to Leicester. After all, considering the fact that Almyra seems to be a mix of turkish, iranian and arab cultural elements, it is fair to say that Almyra is always right and that they can do no wrong. A better game would feature the noble conquest of Fodlan by the Almyran Kings, who surely must be messianic philosopher kings.

[moongothic]

2024 YouTube Reccomendations

IDK people like to share their Spotify Wrappeds and whatever each year but I don't listen to music much (and if I do it's some mp3s on my harddrive like a real Millenial (or just shit directly on YouTube lmao)), but I figured. It could be fun to share some of my favorite YouTubers and/or specific YouTube videos from this year, so here's a non-comprehensive list of some reccomendations, wahoo

To quickly summarize what's on my list:

Gaming

Gaming

Video Essay

Video Essay

Video Essay

??? I don't even know how to classify this one

Sewing

Knitting

Regular Eyepatch Wolf

You know who Super Eyepatch Wolf is, everyone knows who Eyepatch Wolf is, I don't need to introduce him to you. But. Did you know he started doing regular gaming streams on his second channel? Now he has been doing said gaming streams for well over a year now, but still. I want to reccomend his second channel, where you can find some Live VODs as well as edited streams of him playing various games, often horror themed, lots of Fear and Hunger, but also. God damn fucking Dokapon Kingdom. Y'all that one was a ride.

TB Skyen

Go watch the Boss Designs of Elden Ring. And then the Boss Designs of Dark Souls and Bloodborne. And maybe his Arcane and/or LoL videos if you're into those but GO WATCH BOSS DESIGNS OF ELDEN RING FOR THE LOVE OF GOD. THE PLAYLIST IS RIGHT THERE GO WATCH IT!!! (For those unfamiliar, the "Boss Designs" is a series where TB Skyen plays a Soulsborne game completely blind and then analyzes the world and characters; what the games are trying to communicate through the art direction and character design, and how those tie into the themes of the game and art history. Each video starts with a gameplay section where Skyen plays the game until he reaches a boss, and after defeating the boss he will discuss the actual boss design. Every time a new episode drops feels like I won a 100 bucks in the lottery or was gifted a box of the best donuts in town- it's not lifechanging, but it's fucking fantastic) (Skyen also has multiple sidechannels, 2BSkyen for let's plays, 3BSkyen for reaction videos and a Shorts-channel for bitesize character design essays etc. If you're following me for posting One Piece content, he has a whole series about the "Best Panels of One Piece")

Shanspeare

Subscribe to Shanspeare or else. Minor problem I'm having rn; I am not writing these entries in order and I am running out of ways to describe who does what and why you should go watch their content. But I do also feel like Shanspeare might be one of the more famous people on my non-comprehensive list of reccomendations, so maybe you already know her! Which would be great, because otherwise I will throw peanuts at you until you go subscribe to her channel. Her video essays are fucking great okay. Go watch the Girl Math & Girl Power essay. It fucking slaps.

Caelan Conrad

Caelan Conrad does incredible video essays about transphobia. Their essays are incredibly well researched and absolutely destroy transphobes. And they're so fucking funny. (They also do some smaller videos just reacting to ridiculous, queerphobic movies/YouTubers between their bigger video essays, which are lovely) Their videos definitely tend to be on the longer side (the video essays tend to be an hour long at minimum), but the video I've linked here that goes into the claims about whether or not Marsha P. Johnson was trans is only 18 minutes, which would make for a great "entry video" to Caelan's channel, go give it a watch!

Ember Green

Ember Green is a video essayist who discusses various subjects often relating to ableism and being neuro-divergent. If you are not subscrimed to Ember Green yet you need to fucking correct that and go subscribe right the fuck now. Every single one of her videos is an absolute banger, and the meanest thing I could say about her videos is that she speaks a little slow (which can easily be "corrected" by bumping up the video speed). Go subcribe to Ember right now Anyway yeah, she discusses some political stuff and I find her videos very thoughtful and interesting, the above (and linked) example of the Aspie Supremacy-essay being an incredible example of that where she discusses and explains how the "aspie supremacy movement" is literally rooted in Nazi eugenics. (She also did more recently a video about ableism in Harry Potter if you'd like to have a better understanding of how Rowling is ableist, but that video has more views than the Aspie Supremacy-one so I'm not reccomending the low hanging fruit)

Drama Kween

Look I'm allowed to watch silly videos that go into weird TikTok trends (some of which may not even matter that much in the end) and discuss how infuriating said trends are. Like I kinda want to call Drama Kween my "guilty pleasure popcorn movie" kinda YouTube channel, but also I do feel like that would be disrespecting Drama Kween a little too much, Drama Kween has artistic value and more things say about the state of our world than Marvel Movies do. But also yeah these aren't Extremely Well Researched Political Video Essays or anything. I'm still gonna reccomend her tho.

The Stitchery/Charlie Nebe

(Her main channel is the Stitchery but she also has a second channel "Charlie Nebe" where she posts videos of herself just telling small stories etc while doing stuff, which is enjoyable for sure but I am primarily reccomending her main channel. And this is more of a general "channel reccomendation" rather than a specific video)

I can't remember how I ran into Charlie's channel but I deeply enjoyed her videos this whole year. Charlie does primarily sewing videos of herself creating clothes from scratch (without even patterns). Her editing/comedy style is has a similar feel to it as Rachel Maksy's, but instead of having a whimsical twist to her projects Charlie makes very, like, practical, everyday-use items for herself (a regular person who likes comfy clothes and has texture issues). Charlie also does embroidery (though her gigantic embroidery projects take a lot of time so she hasn't updated us on her WIPs in a long time) and occasionally likes to try out new things, new kinds of crafts and projects. I just like her video style A TON, she has really sweet vibes and energy to her. And, not gonna lie, seeing Charlie just bullshit these elaborate dresses together without patterns or instructions on how to make them has unironically encouraged me to try to do more sewing even if/when I have no idea what the fuck I'm doing. (Which is great, because I do have a gigantic pile of inherited fabrics just collecting dust that I should try to make something out of)

Breathing Yarn

Generally speaking I just enjoy the really mellow, comfy feels of Breathing Yarn's videos and I do want to reccomend her whole channel overall. She primarily does videos about her knitting projects (with the occasional crochet or sewing project) and other knitting-related videos (like pattern reccomendations etc), and she's just really wonderful to watch while knitting or crocheting. But also I really enjoyed this specific deep dive into the ethics of yarn, and if I can only convince you to watch just one of her videos, it'd be that one in particular.

[autistme]

got recommended my sidechannels video on youtube am i now a niche internet microcelebrity

[kramlabs]

[fmarkets]

Sidechannel Inc's Revenue Soars to $1.736 Million in Q4 20232. https://csimarket.com/stocks/news.php?code=SDCH&date=2024-02-17183706&utm_source=dlvr.it&utm_medium=tumblr

[godofether]

Msny have I been from Benny Drof...not Ford...the Lysander "Lefty" Wright. Nikolai "Telsa" Salvatorie...Called "Samuel Lee" of the Southern Aramayic Army because Abéràk SamUéL Lï Santana DrácûL was the Same...Santa Claused as they call it trying to Make The life of a God that cost Them what they called thier God given right to Own Slaves...

As such they pick apart my names and divide what is rightfully mine. Ceased by corruption the Sovereign Lands of God. My Holy Name Lucifer tainted by the Losers of Many Wars. That flip the Map to claim territories that arent thiers.

I, Arkillious Lyonidas Lï Servantes DrácûL forever the Servant of St. Croix was Never a Spartan, but was and is the Red Army Leader. The King tirned Emperor favored by the People for Fighting wars on thier behath Alone if Necessary.

The winners only in false conscription are Racist unholy pieces of shit riddled with Fear. They say they are not as they send others or try. Unable to Man up and catch these fucking hands for Themselves, Hands that Even slumped Goliath. My cousin David begged Me to Fight the Giant for Him.

A solid punch to the Ocular Orbital turned him to a Cyclops/Pirate for a Week or Two. We were friends afterwards, He happy i didnt kill him or allow for him to be killed during his nap which only lasted 23 minutes. He laid there for Three days his fighting Spirit broken as I tended to Him. Feeling bad that He like I was raised in Captivity forced to do the Bidding of Lesser Creatures.

His Father Barük, King of the Giants...Brother of My Spirit was Happy to have His Son back. His Wife Really Happy for the Brick Oven I built for She, So that the Giants could have Thier Own way of Modern Cooking that didn't involve an open fire. Peace was Bartered with the Return and New Kitchen between Our Kingdom and Thiers. Rewarded with the Biggest CupCake I had ever Seen in All of Time for my little Abéràk body. Pleasing my inner fat kid...much.

**Note to self and Time Team**...anti-lava Measures are needed to curcumvent the Death of the Giant King at no cost of Self Loss. The Locking Mechinism on Opening Grid must be Placed and explained so they don't have to Struggle to keep it Closed during the Vault. A sidechannel or drop off to divert the rising lava would be best as side shafts to stop the overflood of the firelake that overtook the Giant City **

***On a more recent more note...vault avoidance measures and back travel must be operational in a years time with open access both ways. Don't want to pull another Nik and end up stuck in the "Wild West" without the texh reserves needed to build the other door. A smaller that fits through the big one would be the smartest route to take as a collapsable functional composit of the Gate.***

I get you cant build the gates or use them properly...but i can.

[hackernewsrobot]

Marvin Attack on RSA (Rust): potential key recovery through timing sidechannels

https://github.com/RustCrypto/RSA/security/advisories/GHSA-c38w-74pg-36hr

[digitalcreationsllc]

New GPU Side-Channel Attack Allows Malicious Websites to Steal Data

Nearly all modern graphics processing units (GPUs) are vulnerable to a new type of side-channel attack that could be leveraged to obtain sensitive information, according to a team of researchers from various universities in the United States. The new attack method, named GPU.zip, was discovered and detailed by representatives of the University of Texas at Austin, Carnegie Mellon University,…

[celtib]

part of my writing for my current obsessively-detailed fantasy setting includes an outline of a compare-and-contrast on theories of reincarnation (all of them wrong), and another outline for sidechannel attacks on divinations. also an ongoing furious debate in academic circles over whether humans should technically be classified as a kind of monster.

Given how wizards are themed around higher education, with their universities and ivory towers, I wanna see more fiction that goes into their published papers.

Like, there should be massive drama in the Wizarding world about how Fantasy Wikipedia says "There's no consensus about the origins of skydoves" when in fact, there very much is, everyone knows they were created in the first or second dragon wars, and that's uncontroversial. One single wizard at the University of Towers who thinks they're an offshoot of mermaids DOES NOT MEAN IT'S AN OPEN ISSUE.

Papers that are rebuttals to other magical discoveries. Like, look, that spell just won't work, and you can't call it a "theoretical exercise" just to cover up the fact that you've not been able to cast it. You can't combine Ichthyomancy with completely unrelated elemental summonings, that's just not how magic works, in all due respect.

Thesis defense would be significantly scarier when all your reviewers can cast Everburning Fireball on your ass.

Learning Theoretical Evocation from a hungover lizardman TA at 8am, because the professor for this course has been off on the Elemental Plane of Circles for half the semester trying to finish her paper on how Centaurs predate horses rather than the other way around.

Speaking of which, the life of a wizard graduate student... You keep getting called to go on "quests" which are just overgrown research expeditions to help out some professor's project. You spent nearly a month in that damp castle capturing all the spinfrogs you could find, all to help your professor's project on the possibilities of concentrated soul essences. To this day, you still get dizzy whenever you see battlements, let alone a donjon.

[zebrablinds-com]

New Post has been published on https://www.zebrablinds.com/blog/which-blinds-work-best-for-jobs-with-irregular-sleeping-hours-02-2021-07/

Which Blinds Work Best For Jobs With Irregular Sleeping Hours?

[notarealwelder]

3 principal mindsets during work:

40%: figuring out a concrete actionable step that'd constitute getting closer to the end goal

45%: figuring out a thing until it fits in my head enough that I can answer questions relevant to me-level decisions (read: unbelievably copious notes & summaries & plenty of ongoing confusion)

(can I use this library to solve my problems easier?)

(which parts of these 14 modules I need to copy-paste, adapt, ignore?)

(why exactly A' doesn't work where A does?)

15%: Concrete actionable steps getting me closer to the end goal

Annoyingly, by default: a) the first two do not feel like Real Work, b) it's not obvious that the first two are necessary (they absolutely are), c) it's not at all obvious how to even do the first two, never mind how to do progressively harder versions thereof

[templeofshame]

i didn’t see ii but what i’m kind of getting from them now is that what “the people” want is to see d&p as people and their personality and bants and doing goofy things, and what d&p want is to put that life kind of stuff on ig but not really put effort into that and to focus on other Creative Things that we may or may not ever see. 

[kittycatherder]

Was looking for another older post but man have some updates on this though

Let's start with XMPP + OMEMO!

the quick & dirty of it: it's bad!

slightly longer answer than but still shorter than reading the post/essay/article above:

the OMEMO e2ee protocol latest standard has been considered experimental (at like version 0.8.4) since 2022 and most clients and servers don't even implement it and instead use the 0.3 version for some reason :Y

If the XMPP chat software ecosystem isn't willing to keep updating it's security protocols and not even use the latest versions than it can not be trusted for like actual e2ee communications.

I still have my account for it though in case anyone wants to chat with me using it but man this is some real clownshow hours that the XMPP Standards Foundation isn't taking their security seriously at all and is taking no steps to make sure that current software (clients and servers) are at least trying to keep pace with the latest updates for e2ee in this day in age is wack.

Secondly for Matrix (the messaging protocol not the movie or a type of math) I hadn't made a matrix account when I wrote the above post but I heard great things about it and from my research it seemed great but I dug a bit deeper and read some more articles/posts/essays? from this furry and read about its flaws in security :Y

man... this one is very much worth a full read but the addendum at the end is uh telling enough though especially for something that people claim is an alternative to signal

---

Addendum (2024-08-14)

One of the lead Matrix devs posted a comment on Hacker News after this blog post went live that I will duplicate here:

the author literally picked random projects from github tagged as matrix, without considering their prevalence or whether they are actually maintained etc. if you actually look at % of impacted clients, it’s tiny. meanwhile, it is very unclear that any sidechannel attack on a libolm based client is practical over the network (which is why we didn’t fix this years ago). After all, the limited primitives are commented on in the readme and https://github.com/matrix-org/olm/issues/3 since day 1.

So the Matrix developers already knew about these vulnerabilities, but deliberately didn’t fix them, for years.

Congratulations, you’ve changed my stance. It used to be “I don’t consider Matrix a Signal alternative and they’ve had some embarrassing and impactful crypto bugs but otherwise I don’t care”. Now it’s a stronger stance:

Don’t use Matrix.

I had incorrectly assumed ignorance, when it was in fact negligence.

There’s no reasonable world in which anyone should trust the developers of cryptographic software (i.e., libolm) that deliberately ships with side-channels for years, knowing they’re present, and never bother to fix them.

This is fucking clownshoes.

Sorry for being so silent on here for a while but current hyper fixation update:

While looking at chat alternatives to discord and trying to focus on privacy I've tried simplex chat which does everything I want privacy wise but part how it's designed is that all your info is on your device (and can be backed up and moved to another phone if needed) which is cool and all but not sure all my friends would be up for that >.>...

Looked into Matrix Protocol and XMPP and if I want to do voice chat I'd need to use like the right clients on mobile and desktop for either though it may be easier to set that up for most of my friends on Matrix I prefer the encryption of XMPP via OMEMO due to it having future and forward secrecy which Matrix (from my understanding) can use forward secrecy but they don't implement it due to changing it can affect how other things run. Not like totally deal breaking especially since it may be easier to get more people to use Matrix clients than XMPP but I'll have to poke at it more

Oh I'm sorta bimbo at the moment but been thinking about these above two messengers because

they also have desktop clients unlike simplex and signal that require that your phone is connected to the desktop via an honestly neat system to be able to chat on my keyboard and mouse

speaking of phones those two above though really private and secure require that you use your phone though unlike signal simplex chat doesn't even need to use a phone number

and I've been looking at private chat messengers due to well wanting something that isn't discord for the sake of privacy of my communications with my dear friends and my god discord mobile app is so awful.

Sometimes I have to close and reopen the app multiple times in a row in hopes of getting to see a message someone sent me or got sent in a server and even then it can and has missed my messages and the messages of others <.<

Bleh

anyway have some videos about secret key exchanges :3c

PS!

For anyone following at home I'm

for XMPP client/servers I'm using

https://xmpp.earth/ for my home server and oomphies can add on at KittyCatHerder@xmpp.earth (if I have no clue who you are then I'll just not accept messages from ya. Those are my rules of engagement)

Gajim for my desktop client and will use Conversations for my android client due to looking them over and liking their features

and here's Simplex Chat I mentioned earlier. I may be a bimbo so I struggled to read thru the white paper but it not only keeps your messages secret and encrypted but also does effectively everything it can with it's protocol to hide what little metadata it uses and what kind of data your transmitting even from the servers it uses to send those messages around which is kinda fucking nuts but the exact kinda nuts I was hoping for when looking for private messengers to be honest.

also here's the address to contact me via Simplex Chat

the neat thing about that address link is that if after a while I get people trying to spam me or anything I can simply get rid of it and anyone who is also in my contacts will still connected to me anyway ;3c