Mastodawn

Google has removed a video posted by academic researchers demonstrating how a newly discovered side channel in Apple's A- and M-series CPUs can be used to steal a password.

I thought for sure the removal was a mistake, but a Google representative told me the video was removed for violating a term of service barring "demonstrating how to use computers or information technology to steal credentials, compromise personal data, or cause serious harm to others."

The video, demonstrating important research by @genkin, @YuvalYarom , @themadstephan and jason kim, is here:

https://onedrive.live.com/?authkey=%21AMTjzIS6XfV1jzg&id=8208800C17D803E6%211176&cid=8208800C17D803E6&parId=root&parQt=sharedby&o=OneUp

Just to underscore how arbitrary and patently asinine Google's ToS enforcement is here, two additional videos the researchers posted demonstrating the same side channel remain available.

I wonder how researchers from #projectzero feel about this. Is there any chance any of them can intervene?

OneDrive

Guillaume Rossolini Oct 27, 2023

@dangoodin yeah I remember that the @hak5 team used to have the same issue

𝕃𝕦𝕔𝕒𝕤 Oct 27, 2023

@dangoodin @genkin @YuvalYarom They should post it to Rumble, Odyssee, etc

Amber Oct 27, 2023

@lucas @dangoodin @genkin @YuvalYarom ugg that would be terrible, Rumble on its own is just full of crypto bullshit, right wing "Libertarian", "an"-cap, reactionary, neo-nazi bullshit. Like, I guess if you wanna hang out in the "Nazi Bar", that would be the place to upload your videos.

Edit - oh, you're a crypto shill.... Nevermind, you feel right at home there.

Wraithe Oct 28, 2023

@Saren42 @dangoodin @genkin @YuvalYarom lol yeah I was like “Rumble, who the fuck uses…oh. Ohhhhhhhhh”

𝕃𝕦𝕔𝕒𝕤 Oct 28, 2023

@dangoodin @genkin @YuvalYarom RE: the blocked message from Amber...

Any platform that allows the freedom to post what one user likes might be content you'll likely disagree with. That's how a free and open society works. It'll not have content arbitrarily removed like YouTube does.

soil_dirt Oct 27, 2023

@dangoodin
Welp, education YouTube for pentesting is gone. It was fun while it lasted
@genkin @YuvalYarom @themadstephan @catsalad

@dangoodin @genkin @YuvalYarom

Q: any plans to put it on #BitTorrent and #IPFS - if not, why?

Because I'm convinced #Microsoft will also delete it sooner than later.

After all: #AllGafamsAreEvil!

The Doctor Oct 28, 2023

@kkarhan @dangoodin @genkin @YuvalYarom Why not the Archive?

Luna Lactea Oct 28, 2023

@drwho @[email protected] @dangoodin @genkin @YuvalYarom I put it on archive.org, but it doesn't seem to work.
https://web.archive.org/web/20231028141834/https://onedrive.live.com/?authkey=%21AMTjzIS6XfV1jzg&id=8208800C17D803E6%211176&cid=8208800C17D803E6&parId=root&parQt=sharedby&o=OneUp

OneDrive

The Doctor Oct 28, 2023

@jackemled @dangoodin @genkin @YuvalYarom Can you download the video and upload it to archive.org for preservation?

Luna Lactea Oct 28, 2023

@drwho @dangoodin @genkin @YuvalYarom You probably can.

Joshua Doll 🤷‍♂️Oct 28, 2023

@dangoodin and yet they leave up nextgenhacker101, far more dangerous than this hack. 🤣

https://youtu.be/SXmv8quf_xM?si=hQrNq-xOpwMNeSEU

How to view someones IP address and connection speed!

YouTube

snowbound Oct 28, 2023

@brektyme @dangoodin HOW have I not seen this video before?!?! This is priceless! 🤣

Joshua Doll 🤷‍♂️Oct 28, 2023

@snowbound @dangoodin it's so fun. It's just enough to leave you wondering if it's real or fake, it's fantastic.

Potung Thul Oct 28, 2023

@dangoodin
@genkin @YuvalYarom

Someone should stick it on PeerTube.

@dangoodin @genkin @YuvalYarom exceeded limit

Christopher Neitzert Oct 28, 2023

@dangoodin @genkin @YuvalYarom seems that share has run out of bandwidth. I'd like to see this and mirror it.

@dangoodin @genkin @YuvalYarom
Get your own Cloud #Nextcloud - host your own #PeerTube, #Mastodon, #Friendica, #Wordpress, #lemmy ...

Let's take back the Internet from Monopolies! ✊

Nik | Klampfradler 🎸🚲Oct 28, 2023

@dangoodin @genkin @YuvalYarom

Security researchers are smart. But can they learn? Obviously not, or they'd learn to use decentral, open platforms instead of moving from Google to Microsoft 🙄.

Lord Caramac the Clueless, KSC Oct 28, 2023

@dangoodin @genkin @YuvalYarom Somebody needs to upload this elsewhere, out of the reach of corporations.

Anthropy Oct 28, 2023

@dangoodin @genkin @YuvalYarom as generic datacenter tech I can't help you to exact answers, but it's good to keep in mind that Youtube and Google are both Alphabet companies and they don't always align about how to do things.

The safest option (also to avoid unannounced public disclosure) I think would be stuff like Google Drive (or OneDrive as you're using) honestly, though if Apple refuses to acknowledge it over longer time public disclosure options must exist so it does feel a little double

Dylan Berry Oct 28, 2023

@dangoodin "This item can't be opened right now
The person sharing it has exceeded their sharing limit. Please try again later."

Can you post this to neat.tube or something?

Luna Lactea Oct 28, 2023

@dangoodin @genkin @YuvalYarom It's giving me a few issues, saying "there's a problem viewing this video". I did eventually get it to load, but it's looking like others aren't able to. Maybe this would be good to put on a PeerTube instance. Maybe framatube.org.

Daniel Genkin Oct 28, 2023

@dangoodin Thanks Dan for trying to help. Much appreciated as usual!

Sheogorath Oct 28, 2023

@dangoodin @genkin @YuvalYarom Not exactly on the point but still something I'm confused about: So they had one big monopoly throw them out and they decided to host the video on the other big monopoly?

Dallman Ross Oct 28, 2023

@dangoodin @genkin @YuvalYarom Thanks. Unfortunately:

Orca 🌻 | 🎀 | 🪁 | 🏴🏳️‍⚧️Oct 29, 2023

@dangoodin @genkin @YuvalYarom @[email protected] Maybe find a PeerTube instance to share it?
➡️ https://joinpeertube.org/

What is PeerTube? | JoinPeerTube

A free software to take back control of your videos! With more than 600,000 hosted videos, viewed more than 70 millions times and 150,000 users, PeerTube is the decentralized free software alternative to videos platforms developed by Framasoft

JoinPeerTube

Daniel Genkin Oct 29, 2023

@dangoodin @YuvalYarom @themadstephan After onedrive also stopped working, we now put them on github where the site is hosted. 🤞

gunstick Oct 29, 2023

@dangoodin @genkin @YuvalYarom LoL
Video busted for shitty reason and then hosting it on another giant corporation server where it could be busted as well for the same shitty reason.
What about hosting it on peertube?

Laberpferd Oct 30, 2023

@dangoodin @genkin @YuvalYarom

This Video could have been a Blog post

Dan Goodin Oct 30, 2023

@Laberpferd @genkin @YuvalYarom

That's such a cute comment.

Peter Kovář Nov 10, 2023

@dangoodin @genkin @YuvalYarom Create project 1÷0.