• 38
• 2
• 40

Penitent Monk is a secondary and GOG.com promotional character in The Witcher 2: Assassins of Kings. When Geralt speaks to him in The Inn of Flotsam, he says 'I can make no sense of this relic I have been entrusted. The gods have not granted me understanding of it. Perhaps providence grants you luck, and then I shall give you this prize. Perhaps you will make better use of it.' May 10, 2020 Poker is a game of luck and skill. Skill is something you can account for and improve. Luck can be a bit more fickle. If your ethics allow for it, cheating at poker is a skill that you can learn and improve, allowing you to stop relying on.

“We shouldn’t ask our customers to make a tradeoff between privacy and security. We need to offer them the best of both. Ultimately, protecting someone else’s data protects all of us.” Guess who said that? The answer is at the end of the article. In the meantime, we keep talking of iPhone and iOS security, following up the Apple vs. Law Enforcement – iOS 4 through 13.5 article. This time we are about to discuss some other aspects of iOS security.

The Exploits

I think you know about the renewed Apple Security Bounty program. Participants can earn up to $100,000 for a new lock screen bypass, and up to $250,000 for user data extraction.

Zerodium pays more, up to $2 Million. However, in the recent statement they said the following.

We will NOT be acquiring any new Apple iOS LPE, Safari RCE, or sandbox escapes for the next 2 to 3 months due to a high number of submissions related to these vectors.

Prices for iOS one-click chains (e.g. via Safari) without persistence will likely drop in the near future.

At the same time, Apple sued Corellium, the startup that was able to emulate Apple devices running the different versions of iOS, which really helps security developers all over the world; see Apple Fights U.S. Government Intervention In iPhone Copyright Case and iPhone Research Tool Sued by Apple Says It’s Just Like a PlayStation Emulator for latest updates.

So, are there iOS exploits in the wild? For sure. Here is the information about one of the latest vulnerabilities found (covers iOS 7 through 13.4.1; patched in iOS 12.4.5 beta):

There are many more of those circulating without much (or any) publicity.

Cellebrite & Grayshift

Cellebrite and Grayshift are the two vendors supplying the law enforcement with iPhone unlock tools. While both companies keep their lips shut on anything remotely resembling technical details or even compatibility specifications, it does appear that the latest round is won by these guys. While Apple continues improving USB restrictions, Cellebrite and Grayshift appear to work around the data block, at least in certain cases. The A12 SoC (iPhone Xr/Xs generation) no longer has the vulnerability allowing the companies to attack passcodes on older generation devices, yet support for the new-gen iPhones is touted in forensic newsgroups. It’s hard to imagine Apple being unable to protect their devices against such attacks once and forever. Or may be they can do that, but just do not want to? Is there a reason to insert the backdoor as government wants, if some exploits exist, allowing these two companies to break the iPhone passcodes and extract the data?

Do not forget about NSO group. Despite the fact that their software is not publicly available, and the exploits they are based on are kept secret, it can be abused.

Poker face?

We never know what Apple is thinking, but it looks like they are having a poker face. For sure, Apple is technically able to develop its very own unlock tool, or at least a tool that would decrypt the file system once the company is provided an iPhone and its passcode (or perform partial file system acquisition of locked devices). Apple actively resists, turning down all requests to build unlock tools or introduce backdoors in the iPhone.

On this and many thousands of other cases, we continue to work around-the-clock with the FBI and other investigators who keep Americans safe and bring criminals to justice. As a proud American company, we consider supporting law enforcement’s important work our responsibility. The false claims made about our company are an excuse to weaken encryption and other security measures that protect millions of users and our national security.

It is because we take our responsibility to national security so seriously that we do not believe in the creation of a backdoor — one which will make every device vulnerable to bad actors who threaten our national security and the data security of our customers. There is no such thing as a backdoor just for the good guys, and the American people do not have to choose between weakening encryption and effective investigations.

Back to the quote in the first paragraph.

That was Tim Cook, who else.

• 38
• 2
• 40

19.05.2018 První výstřel 2018, Open Air (CZ)
26.03-15.04.2018 Demonic 21 Tour (EU)
28.08-03.09.2017 Russian Tour /w NERVOSA (BR)
04.08.2017 Loud Farm open Air fest (SK)
24.06.2017 Metalhead Meeting Festival (RO)
13.05.2017 /w HOLY MOSES (DE) (Moscow)
12.05.2017 /w HOLY MOSES (DE) (Saint Petersburg)
23.03-22.04.2017 Game On Tour (EU)
20.10.2016 /w NERVOSA (BR) (Tallinn)
19.10.2016 /w NERVOSA (BR) (Riga)
18.10.2016 /w NERVOSA (BR) (Vilnius)
20.08.2016 Metal Crowd Open Air (BLR) (Rechitsa)
01.06.2016 Hammer And Tongs Fest (PL)
24-31.05.2016 Step Into The Inferno Balkan Tour
21.05.2016 w/ SODOM (DE) (Brashov)
17.07.2015 supported by Splash! (Moscow)
28.06.2015 supported by Z’ele (Saratov)
27.06.2015 w/ VADER (PL) (Samara)
25.06.2015 w/ VADER (PL) (Yaroslavl)
13.06.2015 w/ Children of Bodom (FI) (Nizhny Novgorod)
12.06.2015 w/ Children of Bodom (FI) (Moscow)

Rock Hard

POKERFACE je veľmi pozoruhodná ruská thrash metalová skupina, ktorej frontwomenka Lady Owl vyniká vynikajúcim vokálom, ktorý som počul len u veľmi málo žien spievajúcich v metalových zoskupeniach. Táto mladá banda vznikla v roku 2013 a vyniká hudbou a imidžom, minimálne na ruskej scéne, ale podľa môjho názoru určite zaujme fanúšika v ktorejkoľvek krajine. Túto zostavu, ale aj jej nový album “Game on”, vám viac priblížili jej jednotliví členovia v našom rozhovore.

Travailler Sa Poker Face Drawing

metal hammer

Poker Face App

Nadal węszę w niej wprawdzie pewną sztuczność, ale trzeba przyznać, że ten ich modern thrash/melodic death ma obecnie wszelkie predyspozycje, by uczynić z Pokerface gwiazdę na przynajmniej lokalną skalę. Czy uda im się wystrzelić także poza obręb Rosji, wątpię, bo jednak nie są to dźwięki na tyle porywające i nowatorskie, by bez poparcia dużej wytwórni poruszyć słuchaczy z zachodniej Europy.

Metalized

Sá er der atter udsolgt i gode bandnavne, men man kan vel til dels tilgive Pokerface, nár de nu er fra Rusland. Faktisk er de efter sigende ret hot derovre og har bl.a spillet med Megadeth, Kreator og Death DTA. Truppen blev dannet i 2013 og er med Game On ude med dereš andet album, og det er faktisk ikke sá skidt. En solid blanding af death og thrash metal, som uden at vaere sindsoprivende formár at underholde med nogle cool breaks og faengende riffs hist og pist. Alt sammen stramt og velspillet og med en udmaerket produktion.

metal on loud

Sorry, metal critics…I hate these definitions “old school thrash”, “new school thrash”. Give a listen to the first full-length album of thrash newcomers PokerFace “Divide And Rule” and tell me what it is. In my modest opinion, it is great raw speedy thrash with some death metal influences (oh, this beauty and beast, two in one, Delirium, pure death metal goddess) which makes metalheads headbang and critics nod: ja, ja, sehr gut!

Last Photo Sets

Travailler Sa Poker Face Emoji

PARTNERS:

Hammer and Tongs ● Total Metal ● Metal On Loud ● VladPromotion ● Navaho Studio ● MSR Sound ● MetalStuff