Oops, your WiFi/Bluetooth chip can inadvertenly broadcast your encryption keys as electromagnetic noise from the CPU gets amplified and transmitted too
http://s3.eurecom.fr/tools/screaming_channels/
Also, hat tip to them for sharing source code and setup details.

Keys for Pektron keyless entry systems (used in Tesla, McLaren and other high-end cars) are copyable within minutes. Tesla at least acknowledges the issue, unlike other vendors 🤦🏼‍♂️ (via @atemerev)
https://www.esat.kuleuven.be/cosic/fast-furious-and-insecure-passive-keyless-entry-and-start-in-modern-supercars/

do you really need files?
https://oleksandr.works/2018/09/16/accidental-complexity-files/

PS. Maybe I should create a separate channel mirroring my blog? Or keep it here?

Hamiltonian Descent Methods: generalization of the momentum

https://arxiv.org/abs/1809.05042
via @karfly

TLDR: CloudFlare edge servers as Tor hidden services. Suspicious at first, very reasonable after closer look
https://blog.cloudflare.com/cloudflare-onion-service/

cyberpunk reality in full swing
https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies

"oops" [TLDR: you can tell libssh "i'm logged in" and you'll be logged in]
https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/

Orca: Search engine that finds bugs in code!
TLDR: On large projects reduces time to find the offending commit (of hundreds that went into latest and previous releases) 3x on average, 7x median, up to 45x.

https://www.usenix.org/conference/osdi18/presentation/bhagwan

X.org local privilege escalation (most Unix/Linux systems affected; launch X and enjoy superuser rights)

For added fun, combine with recent libssh vuln :)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14665

in environments that are only sparsely rewarding, curiosity is a very big deal. also, lazy robots who decide to watch TV instead of exploration :D

https://blog.openai.com/reinforcement-learning-with-prediction-based-rewards/

"Let's remove Quaternions from every 3D Engine", An Interactive Introduction to Rotors from Geometric Algebra
http://marctenbosch.com/quaternions/

beautiful red team detective story // btw, reaching this level of InfoSec requires one hell of an asset inventory
https://threader.app/thread/1063423110513418240

Vacuum tubes strike back!
https://spectrum.ieee.org/nanoclast/semiconductors/devices/new-metalair-transistor-replaces-semiconductors

Amoeba computing!
https://phys.org/news/2018-12-amoeba-approximate-solutions-np-hard-problem.html

​​when robots get sufficiently smart, they start to avoid work too 🙂
> CycleGAN learns to “hide” information about a source image into the images it generates in a nearly imperceptible, high frequency signal. This trick ensures that the generator can recover the original sample and thus satisfy the cyclic consistency requirement, while the generated image remains realistic
CycleGAN, a Master of Steganography via @vzezin

my head is fuzzy today, but the post is still entertaining (summarizes multiple papers)
https://rjlipton.wordpress.com/2012/04/14/tabulation-hashing-and-independence/

that's how NSA attacked SSH and HTTPS (most likely). it's so simple, as always. ingenious.

note: not applicable to bitcoin, the vulnerable spot here is key generation, not the math itself :)

https://algorithmsoup.wordpress.com/2019/01/15/breaking-an-unbreakable-code-part-1-the-hack/

one more possible cause of Alzheimer, now bacterial (note: in mice)
http://advances.sciencemag.org/content/5/1/eaau3333