Rocksolid Light

Welcome to Rocksolid Light

register   nodelist   faq  


rocksolid / rocksolid.shared.linux / Re: Hope your not using 4.17++ branches

SubjectAuthor
* Hope your not using 4.17++ branchesAnonUser
`* Re: Hope your not using 4.17++ branchesAnonUser
 `* Re: Hope your not using 4.17++ branchesanonymous
  `* Re: Hope your not using 4.17++ branchesanonymous
   `- Re: Hope your not using 4.17++ branchesAnonUser

Subject: Hope your not using 4.17++ branches
From: anonuser@retrobbs.rocksolidbbs.com.remove-tm3-this (AnonUser)
Newsgroups: rocksolid.shared.linux
Organization: RetroBBS
Date: Tue, 12 Nov 2019 06:09 UTC
  To: rocksolid.shared.linux
It's ring -4 compromised as a monolithic:
https://itsfoss.com/nsas-encryption-algorithm-in-linux-kernel-is-creating-unease-in-the-community/
https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology and Resources/Linux - Privilege Escalation.md
https://www.defcon.org/html/links/dc-archives/dc-26-archive.html

-seL4 Gang
--
Posted on RetroBBS



Subject: Re: Hope your not using 4.17++ branches
From: AnonUser@rslight.i2p (AnonUser)
Newsgroups: rocksolid.shared.linux
Organization: Rocksolid Light
Date: Tue, 12 Nov 2019 11:54 UTC
AnonUser wrote:

  To: rocksolid.shared.linux
It's ring -4 compromised as a monolithic:

https://itsfoss.com/nsas-encryption-algorithm-in-linux-kernel-is-creating-unease-in-the-community/
https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology and Resources/Linux - Privilege Escalation.md
https://www.defcon.org/html/links/dc-archives/dc-26-archive.html

-seL4 Gang

"Google engineer Eric Biggers requested the inclusion of Speck in Kernel 4.17
because Google is going to provide Speck as an option for dm-crypt and fscrypt
on Android."

The idea of knowingly using any nsa provided encryption in dm-crypt as an end
user is scary.

--
Posted on Rocksolid Light



Subject: Re: Hope your not using 4.17++ branches
From: anonymous@def2.anon (anonymous)
Newsgroups: rocksolid.shared.linux
Organization: def2org
Date: Tue, 12 Nov 2019 18:38 UTC
The idea of knowingly using any nsa provided encryption in dm-crypt as an end
user is scary.

And I believe it shows on which side of the barricade google is standing, in case you hadn't noticed before.

Using 4.9, myself, thanks for sharing anyway.
 Posted on def2




Subject: Re: Hope your not using 4.17++ branches
From: anonymous@def2.anon (anonymous)
Newsgroups: rocksolid.shared.linux
Organization: def2org
Date: Tue, 12 Nov 2019 19:16 UTC
any kernel version starting with 4.20 is without speck again (https://www.tomshardware.com/news/nsa-speck-removed-linux-4-20,37747.html).
so if you updated your kernel recently you should be safe.
Posted on def2




Subject: Re: Hope your not using 4.17++ branches
From: AnonUser@rslight.i2p (AnonUser)
Newsgroups: rocksolid.shared.linux
Organization: Rocksolid Light
Date: Wed, 13 Nov 2019 02:31 UTC
anonymous wrote:

any kernel version starting with 4.20 is without speck again (https://www.tomshardware.com/news/nsa-speck-removed-linux-4-20,37747.html).
so if you updated your kernel recently you should be safe.
Posted on def2

Nice to know thx!
--
Posted on Rocksolid Light



1
rocksolid light 0.6.5e
clearnet i2p tor