4 ms·

If you can get code to run on a server which can trigger Hertzbleed, beit a virtual server where you have no control over what other people run on their virtual

If you can get code to run on a server which can trigger Hertzbleed, beit a virtual server where you have no control over what other people run on their virtual server instance, or you can employ a virtual cpu like the NSO iMessage gif exploit but program virtual gif cpu to do more than whats detailed in the NSO iMessage gif exploit, do private messaging platforms like WhatsApp have much privacy? I know people like evidence including the legal system, most of the time, but stealth weapons have to be captured in order to obtain the evidence.

Aachen 4y ago
Yes. Being able to target specific systems with specific exploits that are worth hundreds of thousands of euros, and using it risks the vulnerability being fixed, is very very different from people on encrypted messengers having no privacy at all (compare it to slack or IRC). Encryption still serves a propose here. The /NS[OA]/ is not the only attacker we're defending from and they, too, have the aforementioned restrictions.
- Terry_Roll 4y ago
  You mean to say, you cant build this yourself? https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i... Have you even tried this on other platforms and other devices? the x86 instructions can be found here https://en.wikipedia.org/wiki/X86_instruction_listings https://en.wikipedia.org/wiki/X86_instruction_listings Intel provide an instruction trace facility https://blog.cubieserver.de/publications/Henschel_Intel-PT_2017.pdf https://blog.cubieserver.de/publications/Henschel_Intel-PT_2... You've got this one from Intel https://www.intel.com/content/dam/www/public/us/en/documents/reference-guides/real-time-instruction-trace-atom-reference.pdf https://www.intel.com/content/dam/www/public/us/en/documents... Other methods described here using JTAG with chips https://microchipdeveloper.com/emhead:eep-rt-hw-instruction-trace https://microchipdeveloper.com/emhead:eep-rt-hw-instruction-... How do you think this was found? https://en.wikipedia.org/wiki/Pentium_F00F_bug https://en.wikipedia.org/wiki/Pentium_F00F_bug
  - Aachen 4y ago
    And now the whatsapp exploit code too please? It's really not as simple as you pose it.
    - Terry_Roll 4y ago
      Its why the bests hacks get bought for millions.

Aachen 4y ago

Yes. Being able to target specific systems with specific exploits that are worth hundreds of thousands of euros, and using it risks the vulnerability being fixed, is very very different from people on encrypted messengers having no privacy at all (compare it to slack or IRC). Encryption still serves a propose here. The /NS[OA]/ is not the only attacker we're defending from and they, too, have the aforementioned restrictions.

Terry_Roll 4y ago
You mean to say, you cant build this yourself? https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i... Have you even tried this on other platforms and other devices? the x86 instructions can be found here https://en.wikipedia.org/wiki/X86_instruction_listings https://en.wikipedia.org/wiki/X86_instruction_listings Intel provide an instruction trace facility https://blog.cubieserver.de/publications/Henschel_Intel-PT_2017.pdf https://blog.cubieserver.de/publications/Henschel_Intel-PT_2... You've got this one from Intel https://www.intel.com/content/dam/www/public/us/en/documents/reference-guides/real-time-instruction-trace-atom-reference.pdf https://www.intel.com/content/dam/www/public/us/en/documents... Other methods described here using JTAG with chips https://microchipdeveloper.com/emhead:eep-rt-hw-instruction-trace https://microchipdeveloper.com/emhead:eep-rt-hw-instruction-... How do you think this was found? https://en.wikipedia.org/wiki/Pentium_F00F_bug https://en.wikipedia.org/wiki/Pentium_F00F_bug
- Aachen 4y ago
  And now the whatsapp exploit code too please? It's really not as simple as you pose it.
  - Terry_Roll 4y ago
    Its why the bests hacks get bought for millions.