#trilema | 2016-04-09

http://zahardzhan.github.io/2011/lisp.html

00:28

phf: l0l!

00:33

http://btcbase.org/log/2016-04-09#1449320 << medicine for a corpse.

00:34

and the examples are quite contrived.

00:38

http://btcbase.org/log/2016-04-09#1449300 << imho this is lame, sheerly from the fact that i need 10x as many keystrokes to transform an old link to a usable one.

00:38

fuck iso.

00:40

^ re http://btcbase.org/log/2016-04-09#1449301 rather.

00:41

i think i'll add /log/?date=09-04-2016

00:41

https://www.wordfence.com/blog/2016/04/panama-papers-wordpress-email-connection/

which'll do correct redirect, but i didn't have the time. tomorrah

~ 49 minutes ~

01:31

punkman

~ 5 hours 50 minutes ~

07:21

;;seen davout

07:21

davout was last seen in #trilema 19 hours, 20 minutes, and 33 seconds ago: <davout> mircea_popescu: http://dpaste.com/0HR7P5B.txt

07:23

$up dooglus

07:23

deedbot

dooglus voiced for 30 minutes.

07:23

you up the same way, say $up to deedbot in pm then $v

~ 16 minutes ~

07:39

and in other breakfast news, http://41.media.tumblr.com/43a7927447299f00dcdf7c7848abb343/tumblr_n6lnvegu0b1t0gmzbo1_1280.jpg

~ 54 minutes ~

08:34

wywialm

hello

~ 1 hours 38 minutes ~

10:13

http://btcbase.org/log/2016-04-09#1449330 << l0l! Run Moar Shitware !

10:14

'MF are running the WP SMTP plugin which gives you the ability to send mail from your website via a mail server. This plugin stores email server address and login information in plain text in the WordPress database. ... MF are also running the ALO EasyMail Newsletter plugin which provides list management functionality. One of the functions it provides is to receive bounced emails from a mail server and automatically remove those boun

10:14

ced mails from the subscriber list. To do this, the plugin needs access to read emails from the email server. This plugin also stores email server login information in the WordPress database in plain text. ...'

~ 18 minutes ~

10:32

hola

10:38

hola señor popescu !

10:38

como andan ?

10:40

El coronel no tiene quien le escriba, Полковника никто не ждет, Большие города, ... , Ни берега ни дна , Холодная война. (tm) (r)

10:41

lol

10:43

in other open questions for the esteemed citizenship, please explain how quadrupedes walk.

~ 20 minutes ~

11:03

which ones ?

11:04

camel - quite unlike dog, etc.

11:06

(exercise for the reader - determine which animal(s) the famous machine 'bigdog' walks as.)

11:11

dog/cat/mostly horse

11:11

you know, the common ones.

11:11

https://www.youtube.com/watch?v=M8YjvHYbZ9w << re the machine.

11:16

https://cryptome.org/2016/04/uk-sex-story-ban.htm << unrelated lulz

11:17

check it out, invalid cert

11:18

valid for 0ldrepublictitle.com ?

11:18

i get plain http l0l

11:18

you linked https

11:18

oh hah

11:18

pasted internal link from the site

11:19

with the link pasted, i see their traditional cert.

11:19

oh check it out, the independent didn't have 17.9 btc spare.

11:19

mircea_popescu is getting a monkeyed route it seems ?

11:19

for fiat science, vorwarts!

11:24

http://dpaste.com/2WTCZAR << what i get

11:24

jesus christ look at that, sha384.

11:27

anyway, wtf is this 0ldrepublictitle.com

11:27

i see no such thing.

11:29

openssl s_client -showcerts -connect cryptome.org:443 </dev/null 2>/dev/null|openssl x509 -outform PEM >cryptome.pem

11:29

^ gets what ?

11:29

http://dpaste.com/34SRW21 << mine.

11:30

lemme export the whole hierarchy sec

11:30

(given command only shits out the 1st in the chain)

11:33

http://dpaste.com/10TN9EJ <<< reverse order.

11:34

i do not see the '0ldrepublictitle.com' crud anywhere in my chain.

11:34

https://certificate.revocationcheck.com/whisperhearing.com << and w/e THAT is either.

11:34

asciilifeform so i got a different chain.

11:34

entirely.

11:35

holy fuck is this a cheap diddle.

11:36

aha!

11:36

y so cheap!!11

11:36

openssl reports same as in dpaste.

11:36

in yours, i presume

11:36

yes.

11:36

lulzy.

11:37

so what are all these domains then :D

11:37

compare, for your amusement, dig 0ldrepublictitle.com with dig access.0ldrepublictitle.com (the latter is what the cert really serves)

11:38

rarely have i seen all the letter servers from a to m be in the authority section of an obscure, blogger.com-esque domain.

11:38

aaactually

11:38

i see same thing in both.

11:39

with cryptome.org i meant

11:39

in other lulz, "The team of hearing care professionals at. Whisper Hearing Centers use the most advanced technology. My Humor. Talking some good old fashion gossip" etc.

11:39

http://dpaste.com/2M0KNC0

11:40

so why is some aural health clinic in roseville/oakland connected to this thing then.

11:40

why do you THINK. l0l.

11:40

except, again, it is only connected if you're on mircea_popescu's end of the ferretcannon.

11:41

http://dpaste.com/2GTX2E1

11:41

l0l!!

11:45

mircea_popescu: wget -l 0 -qO- https://cryptome.org | sha512sum plox

11:45

fabff2ffd92a4118b31279ee8dad6c5101202b1aae815dd392d175ff9f4e96cfe3d0ad31e0f910c06e10bc90a4224526911857747a7744960bf533fb2560bce8 << mine.

11:47

$ wget -l 0 -qO- https://cryptome.org | sha512sum cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

11:47

oh for FUCKS sake

11:47

deedbot

$ wget -l 0 -qO- https://cryptome.org | sha512sum cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e is not a command.

11:47

lol

11:48

http://dpaste.com/0ADM003

11:49

dollars to doughnuts you get a diddled john young pgp pubkey

11:55

can haz diff ?

12:09

in a sec ya

12:09

i gotta confess this was the best cryptome link to date. usually it's kinda flat.

12:11

asciilifeform so where do you want me to get the key from ?

12:11

mircea_popescu: just diff plox

12:11

i'd like to know the diddlepayload.

12:11

between the stuff in dpaste and ?

12:13

and your wget ....

12:13

of ?

12:13

wget -l 0 -qO- https://cryptome.org > foo

12:13

a ok ok

12:14

*

asciilifeform ON A MOTHERFUKING SATURDAY yet ANOTHER phone interview with folks who ~lied~ in advertisement re telecommute

12:14

srsly the derpery

12:15

'caek for sale' rrrrring 'let's talk about the cake' 'ok' [next day] 'let's talk about the cake. we don't actually have cake. but we have some broken glass and cement. how would you like some??'

12:16

wget -l 0 -qO- https://cryptome.org > foo.txt produces an empty file

12:16

lulz.

12:16

this shit doesn't even wurk

12:17

waaat

12:17

for srs.

12:17

try curl ?

12:18

curl works fine o.O

12:18

l0l!

12:19

http://dpaste.com/2CZ8VBT enjoy

12:20

paste the raw text, i'ma 'meld' it

12:22

http://dpaste.com/2FKDMBB via base64 foo.txt >

12:22

for great glory, it almost starts with "petuh"

12:22

l0l!

12:23

null diff !

12:23

vhell then!

12:23

$ sha512sum mp.txt

12:23

360dd2f7a5f602c4f38f3ef4376136b11e295a0045523cf67bb5e7a50fcf52cc6f00c46ad855dcb6e55b0be3bbd679bbd2d11c398e80e652d1e9f2bb9b7cc130

12:30

*

asciilifeform pictures hitler minion, who turned off the jammer ~just in time~, cackling

12:39

lol

12:40

yeh same hash.

12:41

i still get the same pem tho

12:42

in other lulz " www.0ldrepublictitle.com; or visit us on Facebook at ORNTIC or ORTC, or on Twitter @OldRepTitle. The Old Republic Title Insurance Group, Inc. is comprised of ..."

12:46

so what the fuck is the relation between a cali hearing clinic, a mid sized title holding/services company such that they'd share certs ? and no, it's not JUST on the mp end of the cannon : http://archive.is/uHV8m

12:50

clinic and title company both ran winblowz and Generous Shareholder Donated their cert to ftmeade ?

12:50

i thought this was obvious

12:50

no i meant from the alt-reality usg perspective

12:50

"never happened - but if it did happen, then... what ? operator error ?

12:50

from inside the mental asylum, this... idk, helps stand up the delusion that anyone gives half a shit re ssl ?

12:51

yeah totally

12:51

props up the notion that the master keys aren't owned by hitler and therefore this idiocy must be done ?

12:51

lol.

12:51

or that the protocol isn't swiss cheese on all levels outside of the crypto ?

12:51

or, or.

12:52

anyway. was entertaining.

12:52

would've been mega-entertaining if not for the null diff. but sure.

12:52

BingoBoingo et al ^ qntra-able ??

12:53

possibly of interest to the cryptome people only.

12:53

not imho mega-nyooz but it beats the 'furry' nonsense

12:53

nah, that's funny, this is tedium.

12:54

people who know the us is a scam know the us is a scam. people who "don't know" "don't know" for various good reasons that this bit isn't addressing.

12:54

there still always remains the chance to not merely 'x is a scam' but to take the scammer, and nail his arms and legs to the floor

12:55

imho more rewarding pasttime

13:04

can't argue with that.

13:06

anyway, root domain isn't a very good test. who knows, maybe there's some web-based "log in" state thing somewhere on cryptome or w/e.

13:07

not visibly.

13:07

i get diffs only when he updates the text.

13:08

and only there.

13:08

wouldn't necessarily be linked from main

13:08

(there are no timestamps, cache control crapolade, etc)

13:21

<asciilifeform> BingoBoingo et al ^ qntra-able ?? << Mebbe? Lemme take a look

13:32

Ok, someone with a better idea of how SSL works, pls qntra this

13:33

* asciilifeform ON A MOTHERFUKING SATURDAY yet ANOTHER phone interview with folks who ~lied~ in advertisement re telecommute << Seriously try home depot

13:34

Who knows alf mebbe you even get to make friends with some orcs?

13:49

"Police dropped all endangerment charges in exchange for him not filing a complaint about them expressing relief he won’t be able to reproduce." https://thevalleyreport.com/2016/03/14/man-shoots-off-his-own-penis-taking-selfies-with-gun/

13:51

win

~ 19 minutes ~

14:10

http://btcbase.org/log/2016-04-09#1449471 << l0lwut

14:11

*

asciilifeform already has a shitjob, dun need another that pays 10x less for anything

~ 24 minutes ~

14:36

deedbot-

[» Contravex: A blog by Pete Dushenski] Five cars, four peoples, $3 mn, two turtledoves, and one supreme weapon. - http://www.contravex.com/2016/04/09/five-cars-four-peoples-3-mn-two-turtledoves-and-one-supreme-weapon/

~ 47 minutes ~

15:23

jurov

http://btcbase.org/log/2016-04-09#1449442 << was that https? they likely use some middleman like cloudflare which issues one common certificate per random group of customers

15:27

jurov

just checked, they still do it, there's like 40 alt names on one cert

~ 1 hours 10 minutes ~

16:38

jurov: realize, i see no such thing here

16:38

jurov: try usa proxy & see what i mean.

16:39

and afaik cryptome never used shitflare.

16:39

;;later tell adlai holy shit did you really end up in an asylum ?

16:39

The operation succeeded.

16:43

http://www.contravex.com/wp-content/uploads/2016/04/hitler-did-nothing-wrong-mountain-dew.jpg << win

~ 24 minutes ~

17:08

https://akroncanton.craigslist.org/clt/5531434102.html

~ 22 minutes ~

17:30

jurov doesn't seem to resolve to a cloudflare ip, but possible.

17:30

tho if cryptome actually uses cloudflare... lol.

~ 17 minutes ~

17:48

ben_vulpes

asciilifeform: how d'you figure re adlai ?

18:01

https://memegenerator.net/Y-U-So << wtf is this wonder ?

18:05

Y U SO inquisitive?

18:05

lol. but srsly, conn reset ? wut ?

~ 36 minutes ~

18:41

deedbot-

[Trilema] Eulora : Official April Auction, or A Story of Toils - http://trilema.com/2016/eulora-official-april-auction-or-a-story-of-toils/

~ 1 hours 43 minutes ~

20:25

BingoBoingo: http://ix.io/vIb

20:34

;;later tell BingoBoingo disregard msg above, this version has ref links: http://ix.io/vIc

20:34

The operation succeeded.

20:48

;;later tell ben_vulpes http://oopweb.com/Ada/Documents/AdaLinux/Volume/book.html

20:48

The operation succeeded.

20:48

^ not barnes but very useful

20:53

ty shinohai

20:53

deedbot-

[Qntra] More Sourceforge Fail - http://qntra.net/2016/04/more-sourceforge-fail/

20:56

thx for title, I always forget that.

20:58

shinohai et al : http://qntra.net/2016/04/more-sourceforge-fail/#comment-51370

20:59

The only reason I used it was for trb private key issues, and the last time I tried to add a key it borked the entire wallet.dat.

~ 19 minutes ~

21:19

RUN MORE... oh wait now

21:20

run moar shit ya didn't read off whoreforge

21:20

(serving up infected exe since, when, 2010 ?)

21:20

at least.

21:21

mac version of torrent client i use was compromised couple of months ago, "oops we found a ransomware, we don't know how it got there"

21:22

You use transmission?

21:22

aha, 'transmission', famous

21:22

*

shinohai prefers rtorrent

21:22

yes

21:22

i don't get this, you installed it recently ?

21:22

well, no my version is like year old or so

21:22

folks who left 'autoupdate' on, got phucked

21:23

folks who "leave autoupdate on" really weren't fucked enough.

21:23

nor do i have autoupdate on anything, obviously

21:23

worst scum.

21:23

mircea_popescu: consider that the proggy ran on ~os~ with autoupdate.

21:23

heh

21:24

it exists for linux too, im sure.

21:24

https://www.transmissionbt.com << l0l! appears to!

21:25

http://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infected-transmission-bittorrent-client-installer << linked from, even. pretty good dissection.

21:26

'As KeRanger encrypts each file (i.e. Test.docx) starts by creating an encrypted version that uses the .encrypted extension (i.e. Test.docx.encrypted.) To encrypt each file, KeRanger starts by generating a random number (RN) and encrypts the RN with the RSA key retrieved from the C2 server using the RSA algorithm. It then ....' << L0l!1111

21:26

srsly?!

21:26

'... encrypts the RN with the RSA key retrieved from the C2 server ...' << !!

21:26

hey, same way gpg works.

21:26

"symmetric key"

21:26

but i wouldn't necessarily think twice when provisioning new system. i ended up provisioning this imac entirely from things i found on backup drive. that's it, i'm airgapping up in this bitch

21:27

mircea_popescu: y'know, not ~all~ malware artists are tards. some folks have embedded key.

21:28

from your own link : the only other mac thing wasn't even working.

21:28

aha.

21:28

these are common, believe or not.

21:28

crapware that doesn't even run.

21:28

ironically, this shit was signed with apple's whatever.

21:28

(in the old days this was unheard of, because the thing needed to propagate after all.)

21:28

totally shooting the discussion re "trusted cpu".

21:28

if fucking apple can't keep its key safe...

21:28

mircea_popescu: signed with apple's developer cert !

21:29

understand, this means that somebody cought up $100

21:29

i can do right now.

21:29

sign 10 times.

21:29

they get revoked at the drop of a hat.

21:29

just like microshit's driver signing certs.

21:29

i don't see how any of this is a counter to what i said.

21:29

because this is not a precious master key

21:29

yes, the "strong wall" will be breached by the owners themselves. of course.

21:29

this is why the whole "security" shit dun work.

21:29

but something their coke machine dispenses when you stick in a benjie.

21:29

not as drm, not as tpe, not as w/e.

21:29

they want to live in a world of idiots. this means they can never be safe. full stop.

21:30

well the plebe-cert-signed shit doesn't get to turn ~all~ of the knobs

21:30

that's how the drm prison worx

21:30

all the knobs that are must be ; and necessarily must be. the knobs that are not, are not ; and necessarily can't be.

21:30

elaborate?

21:30

do you want to hear it in greek, also ?

21:30

meta-nsa has best keys of course

21:31

phf: meta-nsa relaxes and smokes in the corner, it doesn't need keys, sends magic udp

21:34

mircea_popescu: crapple app dev keys and microshit driver keys play roughly the same role in ecosystem as that cali hearing aid shop's ssl cert.

21:35

i.e. they get harvested by folks lookin' to do some infectin', and revoked immediately when the news break

21:35

cheap, disposable.

21:35

easy come, easy go

21:35

i don't think you take the point, perhaps for lack of familiarity with anaximander.

21:35

let's have it

21:35

in any case : the fiat world will never be secure, no matter what.

21:35

fiat world is exactly as secure as... the zoo.

21:35

yes, once in a while some critter escapes.

21:36

generally, they stay on the correct side of the bars.

21:36

this is not so.

21:36

a better model would be "a zoo where the humans are scored by how many times the animals have sex with them"

21:37

bit of a puzzler

21:37

(who is scored in an ordinary zoo, and how? i dun follow the analogy)

21:37

the correct model, ie, the zoo, is right here. the republic is a zoo. outsiders are kept in cage.

21:37

the fiat world is not such. yes, it has the choice to either become such, in which case we won, or else keep trying to pretend no child left behind. in which case we win. etc.

21:38

in an ordinary zoo, humans are scored like in any other employment. by how often they come late, and other factors.

21:38

fiat world has, what, 400 yrs. of accumulated fat, with which it carries out caligulistic nonsenses like, yes, 'child left behind'

21:38

mno.

21:38

that is definitionally its identity.

21:38

if it abandons that, it no longer substantively exists.

21:39

which is ?

21:39

"no child left behind"

21:40

incidentally, and perhaps mircea_popescu does not know this, but even here in the heart of mordor this phrase is a comical byword for idiocy, like nixon's plumbers

21:40

yep.

21:40

so ?

21:41

but i definitely see how it handily encompasses the varied crimes of the egalitarian cult.

21:42

what, and if 15 yo girlie "mocks" some dude in her english class that means she's not interested ?

21:42

no i get it.

21:43

so yes, "walled garden". except it's not so walled as to prevent INEPT third worlder to "we are accept only bitcoin".

21:43

re earlier thread, here is an interesting example of strong cage - intel microcode

21:43

the bar it poses is exactly that, ~100 bucks, ie fifteen minute's labour or w/e.

21:43

in 20 yrs of signed microcode patches, NOTHING leaked out, not only keys, but even the format of the payload.

21:44

similarly, in 500 years of continued derpery, nobody bombed isfahan.

21:44

(key exists, legendarily, in 1 copy, in the castle of doom, etc.)

21:44

i'm sure that'll do something for the future.

21:44

but it says exactly nothing about the item being strong, it's all about the item being worthless.

21:44

i disagree.

21:44

and on what basis ?

21:45

not only on the obvious basis of 'can add magic instruction' but 'will reveal magic instructions that have been added in 20 yrs of nsa-supplied patches'

21:45

"isfahan could host the mother of the red heifer"

21:45

this is no basis.

21:46

basically, i've by now distilled the unifying, common principle of all our disagreements to date. it is as follows :

21:47

you use engineering valuator, which defaults to 0 and respectively maxint in certain edge cases. this comes into conflict with known floors and ceilings established through political, generally, but occasionally economical valuations.

21:48

iirc i once did explain that my mental model of the enemy is myself with a negative sign.

21:49

and i see this as proper, because scheming against a ~stupid~ enemy is largely a waste of time, because how to know ~exactly how stupid~ he is ?

21:49

not a matter of stupid.

21:49

so the correct thing to do is to picture enemy who has thought of ~at least~ everything you can think of.

21:50

and in any case, scheming against an enemy modelled on the basis of yourself is rather silly, seeing how if you are so similar you shouldn't be enemies in the first place.

21:50

not how it works

21:50

different colour uniforms --> enemies.

21:50

or, he has a pie, and i do not, enemies.

21:51

i dun follow.

21:51

and in all cases the most similar creatures are the ones that must fight

21:51

certainly not so.

21:51

*

asciilifeform brb, phood

~ 17 minutes ~

22:09

*

asciilifeform back

22:10

re the microcode thing, i can picture mircea_popescu going on a bank heist, and, coming up against a massive safe, 'let's not bother with the dynamite, fellas, this thing surely is full of used condoms'

22:11

the intel turds are ciphered and signed for a reason.

22:11

(a reason that was in place as early as '97)

22:12

while it is ~conceivable~ that any particular heavy safe is filled to the brim with used condoms,

22:12

generally it is not why safes exist upon satan's green earth.

22:12

depends who owns the safe.

22:12

i don't let the enemy inform my decisions by his behaviour this explicitly. you ever read the fox and bear fable ?

22:14

aha?

22:14

how'd they say in russian, "trage, trage ca de radacina tragi"

22:15

waiwut

22:15

ah so then dunno it ? this one : http://www.neamt.ro/cmj/Creanga/Ursul_pacalit.html

22:15

ie how the bear lost its tail.

22:15

ah i was thinking of aesop's

22:16

story in brief :

22:16

fox wakes up to the sound of peasant driving very heavy cart full of fishes from the lake. climbs in quietly, and while on its back pushes fishes off the cart with feet. then collects it up and goes home.

22:16

on way home, bear, who at the time had splendid tail, nicer than fox', asks where she got all the fishes.

22:17

fox explains that you go to lake, put tail in water, pull out full of fishes.

22:17

ah yes i recall this!

22:17