<p​hrogsstudent:hackliberty.org> Hello, I am a student of phrog from discord

<p​hrogsstudent:hackliberty.org> Phrog is my sensei

<p​hrogsstudent:hackliberty.org> Im sorry.....

<p​hrogsstudent:hackliberty.org> This was in the past

<p​hrogsstudent:hackliberty.org> Ive learned better

<n​aphtha:kyun.host> 'ick on 'eck

<t​igerbalm:matrix.org> x.com/tokendynamics/status/1722494485383496086?s=46

<t​igerbalm:matrix.org> Interesting video on moneros price floor

How are you supposed to calculate the "amount of times each unit is used over the year"?

<4​rkal:monero.social> Wrote this cool guide on how to create a cool iso for cold storage. 4rkal.eu.org/posts/coldstorage

<4​rkal:monero.social> Wrote this guide on how to create a cool iso for cold storage. 4rkal.eu.org/posts/coldstorage

<4​rkal:monero.social> Maybe this is useful for some member of the community **cough cough**

<i​ntr:envs.net> mamma mia

<r​brunner7:monero.social> Where do the OS files to write to this ISO come from?

<r​brunner7:monero.social> From the installation you are running this on, or from some ArchLinux website?

<4​rkal:monero.social> Its using this github.com/laurent85v/archuseriso . All packages are pulled from the arch repos

<r​brunner7:monero.social> So should be pretty hard to corrupt even if you already have malware on the system you build the ISO

<4​rkal:monero.social> Yeah ig

<i​ntr:envs.net> frfr ong no cap

gen-z_decode.py

<4​rkal:monero.social> *.lua

<j​ohn_r365:monero.social> Was listening to ArticMine on MoneroTalk discuss the Intel Management Engine.

<j​ohn_r365:monero.social> And then watched a Defcon talk on it.

<j​ohn_r365:monero.social> I see you can buy Purism and System76 laptops with it disabled. And possibly some laptops/motherboards are compatible with Coreboot, which disabled it.

<j​ohn_r365:monero.social> Just wondered...

<j​ohn_r365:monero.social> Do AMD devices have a similar vulnerability.

<j​ohn_r365:monero.social> Same question for ARM devices?

<a​rticmine:monero.social> AMD devices also have a similar vulnerability.

<4​rkal:monero.social> The safest most tinfoil hat method might be using risc-v processors

<4​rkal:monero.social> Don't think they have any kind of "management" engines

<4​rkal:monero.social> +open source

<a​rticmine:monero.social> Sandboxing DRM supporting devices on a separate sub net is a simple was to mitigate the risk

<j​ohn_r365:monero.social> Thanks for doing that interview ArticMine - found it v interesting and thought provoking.

<g​fdshygti53:monero.social> But Risc-V still have speculative execution :)

<a​rticmine:monero.social> john_r365: You are welcome.

<j​ohn_r365:monero.social> Re subnets - I was more thinking of devices used for generating seeds.

<j​ohn_r365:monero.social> Presumably if you use a ME vulnerable device, the tin foil hat approach would be to disable/remove the WiFi card and keep it offline.

<j​ohn_r365:monero.social> And then cold sign from it.

<j​ohn_r365:monero.social> Maybe some Monero contributors have already covered this in detail in blog posts?

<4​rkal:monero.social> monero.observer/cypherpunk-transmis…oft-disable-intel-me-xx30-thinkpads

<4​rkal:monero.social> Don't know if this is what you're looking for..

<g​fdshygti53:monero.social> My Lenovo thinkcenter 1L PC have a Jumper

<g​fdshygti53:monero.social> ME ON/OFF

<a​rticmine:monero.social> Cool

<g​fdshygti53:monero.social> That thinkcenter have a Intel 10900 in it, so still quite nice.

<g​fdshygti53:monero.social> And I confirm that when jumper is set to OFF, if seam ME is OFF (at least all Intel tools for ME bark at me when I run them)

<g​fdshygti53:monero.social> And I would not dare switching it back to ON as I already zeroed part of the flash already

<a​rticmine:monero.social> Does play ready DRM (latest version) work on it? Can you install Windows 11 on it? Let me guess the answer is NO in both cases

<g​fdshygti53:monero.social> Windows 11 work just fine

<g​fdshygti53:monero.social> All my media content come from that very old network called Usenet, none have DRM so I have never tried

<a​rticmine:monero.social> Once the Intel ME is disabled the DRM will not work

<g​fdshygti53:monero.social> TPM seam to work too

<g​fdshygti53:monero.social> TPM seam to work too (well I guess it is as it's required for windows 11 😂 )

<a​rticmine:monero.social> That could be the test

<a​rticmine:monero.social> Testing play ready DRM would be helpful

<g​fdshygti53:monero.social> But why would I want to play DRMed content.

<g​fdshygti53:monero.social> If it's the only loss then it's a non issue (I get my content on usenet because of DRM... Imajin being on Linux and being limited to 1080p because you don't have Windows + edge or something)

<g​fdshygti53:monero.social> But why would I want to play DRMed content.

<g​fdshygti53:monero.social> If it's the only loss then it's a non issue (I get my content on usenet because of DRM... Imajin being on Linux and being limited to 1080p because you don't have Windows + edge or something)

<g​fdshygti53:monero.social> Not paying money for inferior quality

<a​rticmine:monero.social> Also are you running Windows 11 in a VM?

<g​fdshygti53:monero.social> Naa, I did run Windows for a while got I got sick of some issue on Linux.

<g​fdshygti53:monero.social> Then I figured out after a while that people found a fix for my issue (disabling power management for the iGPU). So I reinstalled Linux.

<g​fdshygti53:monero.social> But I did the ME test while on Windows (the Intel tools for messing with ME are for windows)

<a​rticmine:monero.social> One would want to run DRM infected in this context to identify the relationship of the DRM to the vulnerability

<a​rticmine:monero.social> If it is the root cause this is very important. Also it can be a test that the Intel ME was truly disabled

<a​rticmine:monero.social> If the DRM still works the vulnerability remains

<a​rticmine:monero.social> DRM is critical here because of the US DMCA

<g​fdshygti53:monero.social> Will try this weekend maybe.

<g​fdshygti53:monero.social> Any "DRM" will work or it's specific, I think I never played drm content.

<g​fdshygti53:monero.social> I just get Netflix and test with that?

<a​rticmine:monero.social> The newest Microsoft play ready. Not just any DRM

<a​rticmine:monero.social> Netflix is a good test

<p​lowsof:matrix.org> i assume we have seen the latest monerotalk? havn't finished it myself yet yewtu.be/watch?v=9XgG4sNVS38

<j​ohn_r365:monero.social> Doug: "So... how could the CCS Hacker have better structured their transactions to make network graph analysis harder?"

<j​ohn_r365:monero.social> Justin & ArticMine: "No comment" 😂

:)

<g​orillaquest:matrix.org> He recommended an old device as a wallet which is untrue because they are EOL

<g​orillaquest:matrix.org> Also supported "properly" rooting a phone, if they can't use desktop OS which is not a good idea

<g​orillaquest:matrix.org> Also supported "properly" rooting a phone if they can't use desktop OS which is not a good idea

<1​23bob123:matrix.org> Still guessing on how it happened are we

<g​orillaquest:matrix.org> No, Im trying to clear some misinformation that was said in the recent monerotalk episode about security practices

<1​23bob123:matrix.org> It was more directed at the convo about it. Unless there is a forensic analysis where doing market speculation

<1​23bob123:matrix.org> But from what i have seen about infrastructure would surprise me was cause of a high cve

<1​23bob123:matrix.org> But from what i have seen about infrastructure wouldn’t surprise me was cause of a high cve

HELO WE'VE BEEN HACKED FOR 2k XMR BUT DON T WORRI WE'LL FORENSIC OUR BACKDOORED DEV MACHINES AFTER "THANKS"_GIVING X---------_DDDDD

it's not a time-sensitive issue after all... always yours, Luigi1111111

 

everyone knows its 1111, or 1112, or 1111w, or 1112w, not 1111111

<c​omradeblin:matrix.org> The CCS Wallet Hack: Exposing and Improving Monero’s weaknesses with Francisco “ArticMine” Cabañas and Justin Ehrenhofer. EPI #288

<c​omradeblin:matrix.org> ➡️ youtu.be/9XgG4sNVS38?si=wsekcu5Vvhg-73Wq

<c​omradeblin:matrix.org> We discuss:

<c​omradeblin:matrix.org> -The Hack of the CCS Wallet and possible causes

<c​omradeblin:matrix.org> -Moonstone’s probabilistic tracing of the stolen funds

<c​omradeblin:matrix.org> - Future of Monero dev funding & Governance

<c​omradeblin:matrix.org> Special thanks to our sponsors

<c​omradeblin:matrix.org> cakewallet.com

<c​omradeblin:matrix.org> monero.com

<c​omradeblin:matrix.org> linktr.ee/stealthex

<c​omradeblin:matrix.org> as well as Sunchakr for making these interviews possible.

<c​omradeblin:matrix.org> And of course our listeners & supporters for making Monero Talk possible 🗽📷🎤!!

<1​23bob123:matrix.org> How shit we got hacked!

<j​ohn_r365:monero.social> Nacho: - yeah, I wondered about that. Doesn't rooting a phone make it more vulnerable not less? Afaik you can install a custom OS like Graphene without rooting it...

<j​ohn_r365:monero.social> Root is only needed if you want to do something specific - like run Titanium backup etc.