\documentclass[landscape]{seminar}
\usepackage[utf8]{inputenc}
\usepackage[english]{babel}
\usepackage[pdftex,unicode=true,plainpages=false,colorlinks,urlcolor=Brown]{hyperref}
\usepackage[pdftex]{color}
\usepackage{slidesec,epic,eepic,graphicx,ifpdf,rotating,ulem}

\definecolor{Brick}{rgb}{0.6100, 0.4000, 0.1200}
\definecolor{Brown}{rgb}{0.6100, 0.2047, 0.1200}
\definecolor{RedHat}{rgb}{0.8039, 0.0, 0.0}
\definecolor{Olive}{rgb}{0.2300, 0.3700, 0.1700}
\definecolor{OliveDark}{rgb}{0.1600, 0.2700, 0.1200}
\definecolor{WhiteIvory}{rgb}{1.000000, 1.000000, 0.96}
\definecolor{IvoryDark}{rgb}{0.95, 0.95, 0.90}
\definecolor{IvoryDarkDark}{rgb}{0.92, 0.92, 0.85}
\definecolor{Firebrick}{rgb}{0.6980, 0.1333, 0.1333}

\renewcommand{\familydefault}{\sfdefault}

\def\urlmailto#1{\href{mailto:#1}{#1}}
\def\myslidemode{\Large\centering\color{OliveDark}} 
\def\nextpage{\end{slide}\begin{slide}\myslidemode}

\def\topic#1{\centerline{\normalsize\textcolor{Brown}{\textsf{#1}}}}
\def\heading#1{\slideheading{\texorpdfstring{\LARGE\colorbox{white}{\textcolor{RedHat}{\textsf{#1}}}}{#1}}}
\def\subheading#1{\slideheading{\texorpdfstring{\textcolor{Olive}{\Large\textsf{#1}}}{#1}}}
\def\cemph#1{\textcolor{Firebrick}{\bf\textsf{#1}}}
\def\labelitemi{\textcolor{RedHat}{$\bullet$}}
\def\labelitemii{\textcolor{RedHat}{\bf--}}
\addto\layoutspanish{
\def\labelitemi{\textcolor{RedHat}{$\bullet$}}
\def\labelitemii{\textcolor{RedHat}{\bf--}}
}

\def\slidefig#1{\centering\colorbox{white}{\input{#1}}}
\def\quotationbox#1#2{\centerline{\colorbox{white}{\parbox{300pt}{\normalsize\textcolor{OliveDark}{\textit{#1}}\begin{flushright}\unskip\textcolor{Olive}{\textsf{#2}}\end{flushright}}}}}

\newslideframe{plain}{\textcolor{black}{\colorbox{WhiteIvory}{\begin{picture}(340,229)(-170,-115)\put(0,0){\makebox(0,0){\centering#1}}\Thicklines\color{white}\put(-180,125){\line(1,0){360}}\put(-180,125){\line(0,-1){250}}\color{IvoryDarkDark}\put(180,-125){\line(-1,0){360}}\put(180,-125){\line(0,1){250}}\end{picture}}}}

\slideframe{plain}
\pagecolor{IvoryDark}
\pagestyle{myheadings}

\begin{document}

\def\subtitle#1{\textit{#1}}
\def\quote#1#2{\textit{#1}~---~#2}

\begin{slide}

  \myslidemode
  
  \markright{}

  \heading{Who's afraid of}
  \heading{Spectre \& Meltdown?}

  \medskip

  \parbox{170pt}{
    \begin{center}
      \parbox{90pt}{
        \topic{\includegraphics[height=1.3cm]{logo-fsfla.pdf}}
      }\parbox{73pt}{
        \topic{Alexandre Oliva}
        \topic{\urlmailto{lxoliva@fsfla.org}}
      }

      \bigskip

      \topic{\url{https://www.fsfla.org/~lxoliva/}}
      \topic{\href{http://twister.net.co}{Twister}, \href{https://identi.ca/lxoliva}{Pump.io}: \texttt{@lxoliva}}
    \end{center}
  }\parbox{130pt}{
    \includegraphics[width=130pt]{specmelt.png}
  }

  \bigskip

  {
    \tiny
    \centerline{Copyright 2018-2019 Alexandre Oliva  (last changed in July 2019)}
    \centerline{This work (minus images and video) is licensed under the
      \href{http://creativecommons.org/licenses/by-sa/4.0/}{Creative
        Commons BY-SA 4.0 International} License.}
    \centerline{\url{https://www.fsfla.org/svn/fsfla/ikiwiki/blogs/lxo/pres/specmelt/}}
    \centerline{\url{https://www.fsfla.org/blogs/lxo/pub/who-is-afraid-of-spectre-and-meltdown}}
  }

  \nextpage

  \markright{\textcolor{black}{Who's afraid of Spectre \&
      Meltdown?}\hfill\textcolor{black}{Alexandre
      Oliva}\hfill\color{black}}

  \heading{Grandma 2.033's Wisdom}

  \begin{itemize}
  \item Prevention is better than cure
    % https://web.archive.org/web/20180701192135if_/http://www.funnyjunksite.com/pictures/wp-content/uploads/2013/10/Modern-Grandma.jpg
    % https://instazine21.wordpress.com/2014/08/06/in-memory-of-grandma-betty/
    % https://instazine21.files.wordpress.com/2014/08/grandma-betty-dead.png
    \hfill\hbox{\vbox to 0pt{\kern-2.1cm\hbox to 35pt{\includegraphics[width=70pt]{grandmarip.png}}}}
    \medskip
  \item Take a coat, for the cold! \\
    ... and a condom, for the heat :-)
    \medskip
  \item Don't let the \cemph{Big Bad Wolf} in
    % https://instazine21.files.wordpress.com/2014/08/grandma-betty.png
    \hfill\hbox{\vbox to 0pt{\kern-2.44cm\hbox to 35pt{\includegraphics[width=70pt]{grandmate.png}}}}
    \medskip
    % https://nihalyildirim.files.wordpress.com/2011/12/big-bad-wolf2.jpg
    % https://www.youtube.com/watch?v=kN29b1-hhZ0
  \item \href{SpecMelt-YeBin.webm}{Don't take candy \cemph{from} strangers}
    \hfill\hbox{\vbox to 0pt{\kern-0.9cm\hbox to 75pt{\includegraphics[width=105pt]{troubled.jpg}}}}
  \item Don't take strange programs \\
    (it used to be easier)
  \end{itemize}

  \nextpage

  \heading{Data and Software}

  \begin{itemize}
  \item Data: passive (text, tables)
  \item Software: active (instructions)
  \item Software embedded in data
    % http://pre07.deviantart.net/fac1/th/pre/f/2012/257/7/8/mr__coat_big_bad_wolf_proflie_card_by_slasher12-d5epkcq.jpg
    \hfill\hbox{\vbox to 0pt{\kern-2.2cm\hbox to 100pt{\includegraphics[width=130pt]{closed.jpg}}}}
    \begin{itemize}
    \item Macros, Javascript
    \end{itemize}
  \item Automatic execution: \cemph{strange sweetness}
    \begin{itemize}
    \item Viruses, Worms and Trojan Horses
    \item Trackers, miners, blockers
    \end{itemize}
  \end{itemize}

  \nextpage

  \heading{Madness and common sense}

  \begin{itemize}
  \item Antivirus.ru banned in gov.us, .uk, .au
  \item Mobile.cn banned in gov.us
  \item Trojan horse in Iranian nuke research
    % http://www.tujaviu.com/wp-content/uploads/2015/06/dddsdsd1.jpg
    \hfill\hbox{\vbox to 0pt{\kern-1.55cm\hbox to 55pt{\includegraphics[width=85pt]{alieniste.jpg}}}}
  \item Sovereignty and jurisdiction over tech
  \item Our governments, armed forces, elections?
  \item How about us and our own computers?
  \end{itemize}

  \nextpage

  \heading{Spectre \& Meltdown}

  \vbox to 0pt{
    \hbox{\vbox to 0pt{\kern-1.55cm\hbox{\kern-13pt\includegraphics[width=65pt]{spectre.pdf}}}}
    \hfill
    \hbox{\vbox to 0pt{\kern-2.55cm\hbox{\includegraphics[width=50pt]{meltdown.pdf}}}}
  }

  \verb%if (x < n)                       % \hfill\\
  \verb%  a = m[x], b = a & 1, y = *c[b];% \hfill\\

  \begin{itemize}
  \item Speculative execution: while obtaining \verb%n%...
  \item Branch prediction: usually \verb%(x < n)%
  \item Memory protection: \verb%m[x]% inaccessible, but...
  \item Memory caches: holding \verb%*c[0]% or \verb%*c[1]%?
  \item Even with VM, in VMs and browsers!
  \end{itemize}

  \nextpage

  \heading{Why Worry?}

  \begin{itemize}
  \item[] Got personal data on the computer?
  \end{itemize}
  \heading{Software you use either...}
  \begin{itemize}
  \item is reliable?  (not strangers' candy)
  \item serves you, under your control?
    % http://www.fsf.org/blogs/rms/20140407-geneva-tedx-talk-free-software-free-society/
    % https://static.fsf.org/nosvn/RMS_Intro_to_FS_TEDx_Slideshow.odp
    \hfill\hbox{\vbox to 0pt{\kern-1.35cm\hbox to 75pt{\includegraphics[width=105pt]{obey.png}}}}
  \item is auditable \cemph{and} was audited?
  \item could be changed for direct access?
  \end{itemize}
  \heading{... or it does not serve you}

  \nextpage

  \heading{Free Software}

  \begin{itemize}
  \item Controlled by the user
  \item Essential freedoms
    \hfill\hbox{\vbox to 0pt{\kern-0.95cm\hbox to 150pt{\includegraphics[width=180pt]{fsf30.png}}}}
    \begin{itemize}
    \item Run for any purpose
    \item Study (audit) sources and adapt
    \item[] \cemph{$\Uparrow$} Individual
      \hspace{1em} \cemph{$\Downarrow$} Community
    \hfill\hbox{\vbox to 0pt{\kern-2.25cm\hbox to 70pt{\includegraphics[width=100pt]{gnu30.png}}}}
    \item Make and distribute copies
    \item Improve and distribute improvements
    \end{itemize}
  \end{itemize}

  \nextpage

  \heading{Software Freedom}

  \begin{itemize}
  \item Human right founded on ethics
  \item For your data security
    \hfill\hbox{\vbox to 0pt{\kern-0.65cm\hbox to 90pt{\includegraphics[width=120pt]{100gnu+freedo.png}}}}
    \medskip
  \item Operating system, apps
  % \item App repos
  % \item Pre ou autoinstalled
  \item Libraries, plugins, addons
    % https://twitter.com/vaughndavis/status/844623663357837313
    % https://pbs.twimg.com/media/C7i0vhLVQAA0bij.jpg
    \hfill\hbox{\vbox to 0pt{\kern-0.15cm\hbox to 85pt{\includegraphics[width=115pt]{fake-gnus.jpg}}}}
  \item Software embedded in data!
  \item Drivers, firmware and microcode
  \item[\cemph{\hbox to 0.2pt{/}$\bullet$}] Service as a Software Substitute (SaaSS)
  \end{itemize}

  \nextpage

  \heading{Virtual Machine, Real Risk}

  \begin{itemize}
  \item Own local computer (IntelME? PSP?)
  \item Own remote computer
    % http://download.fsfe.org/advocacy/stickers/thereisnocloud/thereisnocloud-v2-74x74.pdf
    \hfill\hbox{\vbox to 0pt{\kern-0.4cm\hbox to 40pt{\includegraphics[width=70pt]{nocloud.pdf}}}}
  \item Shared (virtual?) computer
  \item Isolation between customers by provider
  \item Ethics: independent computations
  \item Practice: panic among customers and providers
  \end{itemize}

  \nextpage

  \heading{Freedom and Security}

  \begin{itemize}
  \item Freedom is not enough for security
  \item But security requires freedom
    % http://www.fsf.org/blogs/rms/20140407-geneva-tedx-talk-free-software-free-society/
    % https://static.fsf.org/nosvn/RMS_Intro_to_FS_TEDx_Slideshow.odp
    \hfill\hbox{\vbox to 0pt{\kern-0.95cm\hbox to 80pt{\includegraphics[width=110pt]{msghost.png}}}}
  \item Controlling software and users
    \medskip
  \item Individual and collective defenses
    \begin{itemize}
    \item Deliberate and elaborate attacks
    \item Exploiting accidental errors
    \item Exploitable (NetSpectre) gadgets
    \end{itemize}
  \end{itemize}

  \nextpage

  \heading{World Wide Execution Web\hspace{2em}}

  \begin{itemize}
  \item Pages with Flash, Java, Javascript, ...
    % https://en.wikipedia.org/wiki/File:Continents_vide_couleurs.png
    % https://en.wikipedia.org/wiki/File:Zygiella_web.jpg
    \hfill\hbox{\vbox to 0pt{\kern-2.4cm\hbox to 40pt{\includegraphics[width=70pt]{wwweb.pdf}}}}
  \item Automatic execution under server's control
  \item GNU LibreJS, NoScript, Greasemonkey
  \item Auditing, adaptation, version selection
  \item Control by the user, or block
  \item Unwanted access, all lost: coincidence?
  \end{itemize}

  \nextpage

  \heading{Holes and Patches}

  \begin{itemize}
  \item Demand for non-Free microcode
  \item Updates with unwanted features?
  \item Slower and costlier computing
  \item Consider software freedom
    % http://sarazervos.com/wp-content/uploads/2016/01/plug-dam-640x350.png
    \hfill\hbox{\vbox to 0pt{\kern-1.65cm\hbox to 75pt{\includegraphics[width=105pt]{dam.png}}}}
  \item Who knows what other holes are there?
  \item The gravity of running blindfolded
    % from https://www.imdb.com/videoplayer/vi2966010393
    \hfill\hbox{\vbox to 0pt{\kern-0.65cm\hbox to 75pt{\includegraphics[width=105pt]{blindfolded.jpg}}}}
  \item Don't let the Big Bad Wolf in!
  \end{itemize}

  \nextpage

  \heading{Nothing to Fear...}

  \parbox{130pt}{
    \heading{Thank you!}

    \bigskip

    \topic{\includegraphics[width=110pt]{logo-fsfla.pdf}}

    \heading{Be Free!}
  }\parbox{140pt}{
    % https://www.youtube.com/watch?v=ocHj_pJBwWg
    \includegraphics[width=140pt]{blowing.png}
  }

  \bigskip

  \parbox{180pt}{
    \topic{\urlmailto{oliva@gnu.org}, \urlmailto{lxoliva@fsfla.org}}

    \topic{\href{http://twister.net.co}{Twister}, \href{https://identi.ca/lxoliva}{Pump.io}: \texttt{@lxoliva}}

    \topic{\url{https://www.fsfla.org/~lxoliva/}}
  }\parbox{90pt}{
    % https://en.wikipedia.org/wiki/File:Zeke_midas_wolf.jpg
    \includegraphics[width=90pt]{specmelt.png}
  }

\end{slide}

\end{document}
