niconiconi on Nostr: New lesson for security researchers: when you find a vulnerability, don't use it to ...
New lesson for security researchers: when you find a vulnerability, don't use it to steal crypto keys, escalate privilege, or execute shellcode. Just write video game cheats, and the anti-cheat industry will make sure it's patched. DMA attacks were long considered a hypothetical method for FBI/NSA to steal a dissident's laptop disk encryption key in a cafe, yet after a decade of demos, VM and QubesOS users still needed to hunt for motherboards with proper IOMMU. Even after Thunderbolt and USB 4 made these attacks universal, for a long period nobody really cared. It only became the default right now thanks to PCIe cheat hardware. Advancing security and privacy for free software desktops, who cares? Video games losing money? Much better.
Published at
2025-12-20 01:06:46 UTCEvent JSON
{
"id": "44c1376f894b6dccae440a80baa28b8ea1339386f979328772dc42316b98d09f",
"pubkey": "26fdcfc5f6ff27a9926ef372554241c70b1042094ec7749aa301091e34d17aa0",
"created_at": 1766192806,
"kind": 1,
"tags": [
[
"proxy",
"https://mk.absturztau.be/notes/agh5woptmw0j0008",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub/"
]
],
"content": "New lesson for security researchers: when you find a vulnerability, don't use it to steal crypto keys, escalate privilege, or execute shellcode. Just write video game cheats, and the anti-cheat industry will make sure it's patched. DMA attacks were long considered a hypothetical method for FBI/NSA to steal a dissident's laptop disk encryption key in a cafe, yet after a decade of demos, VM and QubesOS users still needed to hunt for motherboards with proper IOMMU. Even after Thunderbolt and USB 4 made these attacks universal, for a long period nobody really cared. It only became the default right now thanks to PCIe cheat hardware. Advancing security and privacy for free software desktops, who cares? Video games losing money? Much better.",
"sig": "65a39401d9bc92056f8fdcabc80f7bc1358278a12bfbb7305a8752540ab74570d3ebfa7bfa9564c7b3a9354a8132118ddbaaf3c6de8b91a49478a0cc7f03cf10"
}