VirtualTam's bookmarks

1. Who was responsible for leaking the Meltdown/Spectre story beforehand, and thus breaking the co-ordinated patched release planned for 9th-Jan between various vendors?

   2018-01-08
   hack hardware hardware/cpu intel linux memory security

   Permalink
   • https://cyber.wtf/2017/07/28/negative-result-reading-kernel-memory-from-user-mode/
   • https://cyber.wtf/2018/01/05/behind-the-scene-of-a-bug-collision/
   • https://lwn.net/Articles/738975/
   • https://lwn.net/Articles/741878/
   • https://lwn.net/Articles/741882/
   • https://twitter.com/misc0110/status/948706387491786752
   • https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
2. SHAttered

   2017-02-24
   attack checksum collision cryptography/hash security sha1 source-code-management/git

   Permalink
   • https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html
   • https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/
   • https://news.ycombinator.com/item?id=13719368
   • https://github.com/peff/git/commits/jk/sha1dc
   • https://plus.google.com/+LinusTorvalds/posts/7tp2gYWQugL
3. How would git handle a SHA-1 collision on a blob? - Stack Overflow

   2015-02-14
   algorithm code collision commit cryptography/hash patch review security sha1 source-code-management/gerrit source-code-management/git

   Permalink
   • https://en.wikipedia.org/wiki/SHA-1
   • http://stackoverflow.com/questions/1867191/probability-of-sha1-collisions
   • http://en.wikipedia.org/wiki/Birthday_problem

   Some thoughts we had while toying with Gerrit, which artificially tracks different commits to group them as "patch sets", by using a Change-Id SHA-1 in the commit message:

   • https://gerrit-review.googlesource.com/Documentation/cmd-hook-commit-msg.html
   • https://gerrit.googlesource.com/git-repo/+/master/hooks/commit-msg
4. gitbrute: bruteforce a Git commit SHA-1

   2015-02-14
   collision commit cryptography/hash sha1 source-code-management/git

   Permalink

   Applied example: https://github.com/bradfitz/deadbeef

5. BeamNG.com - About

   2013-08-14
   car driving game indie physics simulation

   Permalink

   Realistic physics: vehicle deformation after damage, collisions or accidents... time for havoc! There's a tech demo available, and BeamNG.drive's Alpha is available for purchase