#trilema | 2016-06-16

http://btcbase.org/log/2016-06-16#1483243 << wyyyyyy

00:00

Logged on 2016-06-16 02:17 thestringpuller: i built with stator

~ 49 minutes ~

00:49

[» Contravex: A blog by Pete Dushenski] A brief discourse on specification. - http://www.contravex.com/2016/06/15/a-brief-discourse-on-specification/

~ 45 minutes ~

01:35

[Recent Phuctorings.] Phuctored: 10976761628737 divides RSA Moduli belonging to 'Mirko Gmyrek | x-quture netservice UG (mbH) <m.gmyrek@x-quture.com>; ' - http://phuctor.nosuchlabs.com/gpgkey/B731C95FA850A5B27F1A5FC534AA85C6768AF95600A3F1DEC3A63E78F0AA48C9

~ 1 hours 46 minutes ~

03:22

;;ticker --market all

03:22

Bitstamp BTCUSD last: 731.98, vol: 11178.94029119 | BTC-E BTCUSD last: 700.15, vol: 10421.63378 | Bitfinex BTCUSD last: 734.02, vol: 84201.08057663 | CampBX BTCUSD last: 675.0, vol: 3.6406797 | BTCChina BTCUSD last: 736.8669, vol: 61319.81620000 | Kraken BTCUSD last: 730.1, vol: 3164.44414108 | Volume-weighted last average: 732.764292434

~ 17 minutes ~

03:39

[Recent Phuctorings.] Phuctored: 1553809262733 divides RSA Moduli belonging to 'Cacho Page (Gmail cachov2) <cachov2@gmail.com>; ' - http://phuctor.nosuchlabs.com/gpgkey/40EC4D973DB7A02863E11105863DC26D14570BA0723C48152F81B25EBD59132E

03:46

[Qntra] Acquihired Changetip Can't Unload Actual Changetip "Business" - http://qntra.net/2016/06/acquihired-changetip-cant-unload-actual-changetip-business/

~ 4 hours 27 minutes ~

08:14

thestringpuller

mod6: hmm. it looks like my chain b0rked after 405...

08:14

thestringpuller

i preserved the chain, and the bitcoind that built it. so what i'll do is get another disk, try to start from scratch with that build, and see if it wedges at the same place.

~ 1 hours 22 minutes ~

09:37

asciilifeform: is there a 'stable' algorithm / spec for deriving phuctor's hash / permalink? you'd mentioned before that it "includes the entire key - names, emails, ~all~ subkeys."

09:38

for example say i have some public key available. is there a way for me to derive phuctor's permalink for that key (acknowledging that the permalink may not be active yet, i.e. phuctor does not even know of the pubkey etc) ?

09:39

the latter would be quite useful - i may spin up some simple analysis thingie which shows info for those ssh keys, and it'd be nice to be able to link to corresponding phuctor entries

09:42

Framedragger: there is not, currently, but i can clean up and post a script later. for the time being you can easily get the hash by submitting key to phuctor.

09:45

;;later tell phf log is deed

09:45

The operation succeeded.

09:45

;;later tell phf log is dead

09:45

The operation succeeded.

09:56

asciilifeform: kk, thanks, a script (or some description) would be useful!

~ 19 minutes ~

10:16

yeah that's a good point Framedragger

10:18

not a big deal at all tho of course, useful for laters and for future exploitations and analysis infrastructure though

10:19

it is kind of a big deal. asciilifeform there must be a standard. this "submit key" thing doesn't work if for instance he's trying to dump 2mn static html pages into a website.

10:20

mircea_popescu: about to post proggy, momentarily

10:20

Framedragger there's also nothing wrong with trying to package it for b2b and beat in the marketplace those derps mentioned in the log days ago. i don't personally think there's a market there, but maybe i'm missing a crease. teh republic'd support you in any case.

10:20

asciilifeform win.

10:21

(is it gonna be lisp ?)

10:21

mircea_popescu: yeah not the worst idea, i too think there may be not much of a market there though, but who knows.. good to know, if i ever come to consider b2b plans more seriously

10:22

generally, the fiat of the fiat state must be leached away from its crippled hands. very generally. what way one goes to accomplish this... well, that's why the one is one.

10:22

i guess right now i'm more curious to see general statistics / trends, e.g. distribution of ssh server versions per given geo region / AS etc., not that it may be too useful, but just genuinely curious

10:23

mircea_popescu: can't disagree with you there

10:23

mircea_popescu, Framedragger, et al : http://wotpaste.cascadianhacker.com/pastes/c06000f7-e785-4388-8328-f43f90055283/?raw=true

10:23

that was fast :)

10:23

asciilifeform: cheers

10:23

go,try.

10:24

~no error checking tho.

10:24

yeah, if you get imagemagik installed (lol!) there's a bunch of interesting visual stuff. quick way to jumpstart a blog, socialmedia exists ~out of this.

10:24

and a blog is a valuable and important asset for the adult man.

10:24

also i left some of the pieces used by phuctor in, in case whoever wants to experiment.

10:24

asciilifeform an idea here would be to make a soft commitment to publish all cannonical code in lisp implementations.

10:24

not obligatory, just, something to strive to.

10:24

asciilifeform: ah wait lol: i'd be parsing ssh rsa keys, not pgp keys - different format - though also base64 etc. i'll check!

10:25

mircea_popescu: would be. but i never finished my cl rewrite of phuctor.

10:25

the whole rfc4880 parser has to be rewritten.

10:25

mircea_popescu: good advice, thanks

10:26

and here's a two stroke engine to get the day started in gear. http://67.media.tumblr.com/c4a6298582c76943b282e9b85b59de44/tumblr_nukg7cFcjI1tvvddjo1_500.gif

10:26

asciilifeform yeah, just saying as a horizon thing.

10:26

Framedragger: phuctor only eats rfc4880 keys. strictly.

10:26

(you can write two pages of cannonical implementation in lisp even if your actual implementation that you use is in py/c/whatever. make it a sort of official lingua franca of coding, is my idea.)

10:26

mircea_popescu: realize that the routine posted earlier uses all of rfc4880.

10:26

which is definitely not two pages of anything.

10:26

i just did looking at it.

10:26

aha.

10:26

could mock it out!

10:27

lel

10:27

:D

10:27

aaaanyway. just a stray thought.

10:28

from the dept. of loltronics: http://triggerwarning.us/critiquing-the-future-with-bruce-sterling

10:28

omfg log is dead

10:28

for umpteenth time..

10:28

'he blackhat scene is always riddled with informants. The only thing a Darknet guy likes better than darknetting is ratting somebody else out. All hackers aspire to an upgrade to spook. Hackers have no shut-your-mouth “omerta,” so whenever they get arrested they’ll brag to the authorities for 72 hours straight. They’ll even draw helpful little flowcharts for the cops.'

10:29

*the

10:29

so10K causes the BitGold pyramid to collapse under weight.

10:29

guy has a solid point. there's nothing new in this world except for hte history you didn't know etc.

10:29

whole thing lulzy

10:30

asciilifeform a look, global warming idiot. /me moves on.

10:30

'... bitcoin is for suckers ... mtgox'

10:30

asciilifeform: gotcha. i have thing which converts ssh pubkey format to e,N,IP. i'll probably have a thing which generates rfc4880 (inserting ip address as comment field, say) from e,N,IP. thanks!

10:30

no wonder he's being promoted. by now, the moment i see lamestream going "X is a Y" the ~only thing i think about is that if Y = bitcoin, they'd be saying x=gavin.

10:30

mircea_popescu: fella is a well-known dead tree sf author on this side of the ocean.

10:31

asciilifeform because you people have ~no taste and read shit spread on paper.

10:31

*

asciilifeform doesn't buy him

10:31

but yes

10:31

psa : genre fiction is not fiction, it's those merchandise tags and labels that ran long for the space.

10:31

fucking copywriters a) aren't writers and b) aren't people.

10:32

you want to buy a "genre fiction" novel, buy fifty cans of campbell soup and read the labels in succession. same shit.

10:32

plus you get some delicious canned soup out of the deal.

10:32

hey '50s american sf was readable

10:32

e.g., sheckley.

10:32

asimov, et al.

10:32

it ain't the 50s anymore, dorothyform.

10:33

*

Framedragger likes greg egan (hard scifi)

10:33

australian d00d

10:33

Framedragger: i have his complete worx here.

10:33

niiice.

10:33

'I know what militant leftist political correctness actually does in reality. It’s got nothing to do with SJW’s sobbing over transgender rights and everything to do with having your door kicked in with KGB jackboots at four in the morning.'

10:34

*

Framedragger still hasn't read schild's ladder. prolly need accompanying graph theory textbook

10:34

" All hackers aspire to an upgrade to spook." <<< ahahaha. "all barbarian lords aspire to colonus status". fucking bs. foederati had superior legal status to "colonus servusque". much like black dudes in the us have superior status to white office drones.

10:34

bears in the woods, superior still !

10:34

check out the inept agitprop bullshit. NOBODY wants to be "a spook", and for most people, including cashiers and waitresses, this move isn't an upgrade.

10:34

the ticks on the bears - even moar.

10:34

less money, shittier work.

10:35

asciilifeform mno, not in that vein at all.

10:35

the roman "citizen" is the basis of the european slave class.

10:35

the barbarian is the basis of the european minor nobility.

10:36

as late empire turned to medieval times, colonus -> peasantry and foederatus -> yeomanry.

10:37

(with any luck, slave's kid could become knave, ie, 4th rank in the army, below yeoman, squire and knights in that order.)

10:38

sterling had point tho - can't get 20 people in a room without a stool pigeon

10:38

for anyone and anything.

10:39

hm?

10:43

asciilifeform that's basically saying "can't get a proper meal assembled without getting a bacteria in there. if it's clean it's an industrial product nobody wants to eat, if it's made properly, well!". this is true, but also irrelevant, the bacteria are everywhere but they aren't specifically dedicated to a cause through being bacteria. they're not typhus specifically.

10:43

now, man beset with lots of typhus may end up thinking so, "they're all the same", etc. but this is not exactly thinking in the proper sense, more like emotional lashing out.

10:47

BingoBoingo " since it's sale to Airbnb" << its.

10:52

asciilifeform: script worx, much thanks!

10:55

Framedragger: yw

10:56

asciilifeform: do you think it's a sensible idea to try and convert ssh public keys into rfc4880, and then submit them to phuctor (possibly in bulk)? or is that something i should leave to you?

11:00

phuctor gotta move to tmsr format not teh other way round. give the guy a moment,

11:03

heheh

11:03

yeh i'll be patient and will meanwhile muck around with what i've collected

11:10

mircea_popescu: phuctor is, originally, ~specifically~ about pgp keys, ~verbatim~, as found in the wild forest. any other thing will have to be a new gadget.

11:11

they are stored as-found. so they can be shat back out and compared to extant key elsewhere etc.

11:12

log still dead, incidentally.

11:12

does phf host it on a dial-up or what.

11:14

Framedragger: fundamentally anybody should feel free to submit whatever to phuctor.

11:14

it will go ~slightly~ faster if i dump'em in, in bulk, but understand - i do not have the time presently to write any serious adjunct to phuctor

11:22

asciilifeform so write it a convertor. it's strategically stupid to make "a new gadget".

11:22

jurov wrote one.

11:22

posted last week iirc.

11:22

he wrote it TO tmsr format iirc.

11:22

2way

11:22

a nice then. so put it in.

11:23

thing is, pgp key includes more info than simply 'modulus, email'

11:23

it also has self-sigs.

11:23

where am i to get these ?

11:23

leave blank.

11:24

understand, if i were to switch phuctor to storing IN this format, NO key it spits out will ever be eatable by gpg.

11:24

which is dumb.

11:24

we're back to this ?

11:24

apparently?

11:25

it is the height of ridiculous for you to tell me that "my program is so fucking stupid if it has to handle two items it can only pick one and pretend the other doesn't exist". you understand this ?

11:26

mircea_popescu: does it not make sense to you that having two classes of object, whereas previously there was no need to distinguish classes, is at least 2x complexity ?

11:26

if you store as a csv, add more fields. if you store in any other format, a mechanical equivalent for "add more fields" exists. what is the problem ?

11:26

there ARE NOT two classes of object. rsa is the class of object.

11:26

*

asciilifeform bangs head on desk

11:26

no.

11:26

different packagings of THIS SAME OBJECT are not to be entertained. we control ther fucking horizontal, not "gpg" or "opensshit".

11:26

rfc4880 key is the fundamental object !

11:27

as it was written.

11:27

fuck that shit.

11:27

iirc mircea_popescu even ~read~ the thing.

11:27

i am not importing "tinyscheme" or "rfc" or anything else.

11:27

let them all fucking burn.

11:27

did i ever say the pgp format shouldn't burn ?

11:27

i do not have use for as much as a rotten end of a thread from usg. you follow this concept ?

11:27

sure

11:27

so then stop being jurov-y about burning it.

11:27

phuctor is, among other things, specifically machine for illustrating the defects in gpg format

11:28

illustrate them by storing rsa in the rsa format and adding the illustration on the side

11:28

not by centering on the non-rsa formats and adding tms on the side.

11:28

fundamentally this is good idea. but i can work either on this or on other things.

11:28

there is exactly ONE rsa format, for all time, past as well as future, and it goes like this : N, e, comment.

11:29

mircea_popescu dun believe in self-sigs ?

11:29

well, work on your own time. but work the way we're going not orthogonally.

11:29

asciilifeform can be part of comment.

11:30

if you're structuring the 'comment' field, before long you end up with rfc4880 et al if not careful.

11:30

(but in generally, no, it's as fucking stupid to have the sig cert in the sig as it's stupid to have the bitcoin transactions in the bitcoin wallet.

11:30

these belong somewhere else.)

11:32

the tx in wallet thing is monumentally annoying but afaik no one has invented a practical alternative to the O(N) 'how much coin do i have'

11:32

and N is getting pretty fat.

11:32

yeah well. so make two files.

11:33

???

11:33

understand, getting the balance of an addr is O(N) ~unless~ you've been watching it as the blocks splat in.

11:33

make wallet.dat and pending_transactions.dat. so if i want to flush pending txn i just delete that.

11:33

ah

11:33

yeah that'd work

11:33

doh if i may say so myself.

11:34

the notion of joining at the hip a permanent store and a cache is so idiotic as to make me certain the guy had no sort of formal education

11:35

eh american education would do it also.

11:35

i don't mean, in cs. i mean, at all. fucking baker's notions of the world.

11:35

the most basic, elementary, fundamental, first fucking function of any cache implementation is flush ffs.

11:35

the only one thing a datastore never does is "drop"

11:36

who ever thought of this omfg it gives me hives on the brain just thinking about it.

11:36

hey here in the lande of the phreeeee they combined toilet and washroom

11:36

(why not and also kitchen, everyone fresh off the boat always asks)

11:36

why not cache and store also.

11:37

sigh. anyway. "selfsigs" are not particularly well thought out, not to the degree but in the same manner.

11:38

selfsig is how you know you have an rsa pubkey vs dogvomit.

11:39

there's 10x to 100x more ssh-rsa than gpg-rsa. it's a moot point.

11:40

there is!

11:40

prolly more than 100x moar.

11:40

and we already know that they have large-factor collisions

11:40

(from, elementarily, machines with ~no~ rng)

11:40

well, going by Framedragger 's 20mn figure. aha.

11:41

this incidentally is why phuctor had been a depressing thing for me. the thing i set out to find, i never found (evidence of diddled rng on pgp users' boxes.)

11:41

we found exactly ONE large-factor collision, and it was some troll

11:41

give it some time.

11:41

what's the 8ball at yet, 100mn ?

11:41

8ball is not relevant to this

11:41

i was speaking of LARGE FACTOR collisions

11:41

as in, between keys

11:41

woosh :p

11:41

8ball would take about a billion years to get to sqrt(2048)

11:41

hence the humour!

11:42

(at which point it would factor ALL 2048b keyz!11111111111)

11:42

lel

11:42

*

asciilifeform was laughing in other terminal and forgot here.

11:42

lol

11:42

2**2048 damn

11:44

http://btcbase.org/log entirely dead apparently

11:45

i see it ?

11:45

looks like he put moar petrol in the 2-cycle modem or what.

11:45

but yes.

11:45

incl. your last line, aha

11:46

this "later" functionality is kind of useless on a bounced connection

11:46

yeah i;ve been thinking on the correct spec for it.

11:47

in general the way it's supposed to work is that it pms you ONCE IT SEES YOU TALK

11:47

not once you show up at all.

11:47

it actually works this way afaik.

11:47

sorta half-way i dunno.

11:48

it's hosted on digitalocean fwiw, maybe i should try moving it to our friend's cockli server, see how well romanian diesel modems work

11:49

worth a shot. in any case protectionism should be a concern, much rather support people with than items without a wot.

11:50

[Recent Phuctorings.] Phuctored: 429529 divides RSA Moduli belonging to 'Wilfred de Kok <wdk@protonmail.ch>; Wilfred de Kok <wilfred@thinkhuman.nl>; ' - http://phuctor.nosuchlabs.com/gpgkey/CB4E61E28FD9AFC202292274E2D73AD5AF5FEC567DCE5EDC52BFA34CB5B88F18

11:50

course, ending up with half the shit suspended because one guy's diesel modem croaked is also not such a good state of affairs.

11:50

but, well backuped services don't so much care about this.

11:51

omg new ?

11:51

hey last one was new iirc

11:51

this morning.

11:51

btw both of the ones this morning were bitflips.

11:52

i've almost rewritten the irc bot. i'm not going to festival for couple of weeks, so it's going to get done

11:52

is phucvtor down btw ?

11:52

not afaik ?

11:52

lol is your life "code hard, festival harder" phf ?

11:52

looks like it is under load tho

11:53

yeah timing out here.

11:53

put some gas in teh twocycle ? :D

11:54

*

asciilifeform goes to the tank

11:55

mircea_popescu: try now

11:56

bitflipolade btw

11:56

just like last 2.

11:56

aha

11:57

incidentally, because self-sig exists, i could turn these into their correct versions if i had to.

11:57

O(Nbits).

11:57

elementarily.

11:58

sort of passive crc. not clear that a) if you want it you shouldn't have it purpose built and b) if it's "just there" it should be necessarily preserved.

11:58

at least assuming 1-bit flip (which so far has been the case)

11:58

you can't do this with crc.

11:58

necessarily

11:58

but anyway, as far as formats go - it seems data integrity procedures should be separated from data.

11:58

not certain how practical this is, because in order to work it has to be standardized.

11:58

works for the user.

11:58

e.g. 'last K bits are ALWAYS sig'

11:59

seems on the contrary, an epic point of decentralization

11:59

this is like decentralization of mains socket voltage.

11:59

no thx.

11:59

no. data is data, formats are standard. data storage is your problem. encrypt it as you will. no standard encryption. backup it as you will. no standard backup.

11:59

it's one thing to have standardized mains. it's another to have standardized items that plug into them. no thx.

12:00

but 'no standard checksum' is lunacy.

12:00

mains plug is standard where i live.

12:00

asciilifeform the items, not the plug.

12:01

anyway, "standard checksum" appears to be emerging as sha.

12:01

ew

12:01

at least it's what we mostly do.

12:01

it is, and ew

12:01

this is entirely optional when designing new rsa container tho

12:01

can sign ~the modulus whole~

12:01

what's the ew ?

12:01

just takes multiple shots to cover modulus, comment, etc.

12:02

ew sha

12:02

yes but why

12:02

because hashes are fundamentally poisonous.

12:02

and ought to be abolished when practical.

12:02

why ?

12:02

because many-to-one function.

12:02

fundamentally.

12:03

this seems ~the only true use of a hash function, "give me some bits to compare with his bits make sure the file made it"

12:03

collisions are certain to exist.

12:03

otherwise what, send everything in triplicate, like it's soviet union time ?

12:03

every time you hash, you make a bet that it will never be practical to find'em.

12:03

collisions there, also.

12:03

no hash - no collision.

12:04

asciilifeform some dirt is not actually dirt in the usual sense, but part of the fabric of reality.

12:04

point was, in certain cases you don't actually win much by making this wager.

12:04

sometimes i suspect if you were my hammam master you'd steel mesh the freckles off the girls. possibly most of the smaller clits nad nipples too.

12:04

such as when rsa-signing a small string.

12:04

l0l!

12:08

;;later tell pete_dushenski nice job adding references.

12:08

The operation succeeded.

~ 23 minutes ~

12:31

> mircea_popescu: [15:40:33] well, going by Framedragger 's 20mn figure. aha.

12:31

yeah i'm not certain how representative that figure is of whatever, honestly. with all metaphor removed, it literally is "the number of ipv4 hosts which respond to a TCP SYN to port 22 with TCP ACK [packet with ACK flag set]". i'm fairly confident that i haven't missed many hosts of this kind, but too should be replicated and tested.

12:31

yeah, i know.

12:32

k, just making sure for the records, then

12:32

best figure so far is all.

12:34

btw i'd choose self-sigs over "trust sks keyservers not to include fake subkeys" any time of the year. obvs the point is to disassemble this false dichotomy. but short-term, self-sigs are not useless at all.

12:35

Framedragger: concept of 'subkey' is waiting to be shot in the head incidentally.

12:35

and that's great and all.

12:37

s/but too/but this too/ ^^

12:45

incidentally, 8ball presently weighs 333.5MB.

12:48

8ball contains exclusively moduli only, right? cool.

12:48

8ball has nothing to do with moduli

12:48

it is an eternally growing primorial.

12:48

ahhhh

12:48

that gets gcd'd with the rest.

12:49

an ever-growing bunch of primes, right!

12:49

incidentally i devised a way to make the thing grow ~100x faster, but still not implemented.

12:49

ars longa.

12:50

https://www.washingtonpost.com/world/british-member-of-parliament-reported-to-have-been-shot/2016/06/16/a9b988de-33c4-11e6-ab9d-1da2b0f24f93_story.html

12:50

(iirc this was mentioned in logz somewhere. presently it multiplies old_primorial * next_prime(old_prime), but this is wasteful, ought to happen in batches so that massive turd is multiplied only rarely)

12:51

l0l!

12:52

an unkillable vermin, dead ?!

12:52

nowai

12:54

Framedragger your concept of "fake subkey" is broken. what makes a subkey fake ?

12:55

'brought to an immediate halt the country's European Union referendum campaign just a week before the vote.' << that was apparently easy.

12:55

to be specific : is this http://67.media.tumblr.com/91a7527fbf8fbbe3ee9f4f93a87ab6c0/tumblr_npzgb9CdVS1tceoigo1_500.gif a fake woman, or a real woman ?

12:55

"i don't personally know her, she's therefore not a woman but meat".

12:56

asciilifeform it's also not partucularly true, but it is what they would like, so.

12:56

"i took mercury and it brought the syphilis to a halt". mmmkay.

13:01

mircea_popescu: whether signature by $key to which the key in question is a sub of is valid?

13:02

why does it have to be all abstract and difficult

13:03

*

Framedragger afk

13:04

except in the case as seen of hpa's key, where they just attached a valid sig to an invalid key.

13:04

the fact remains : unless i have your key from you, it's fake. no amount of holy water sprkinling on the key in question can alleviate this.

13:06

wtf is a 'valid sig to an invalid key'

13:07

<mircea_popescu> and here's a two stroke engine to get the day started in gear. http://67.media.tumblr.com/c4a6298582c76943b282e9b85b59de44/tumblr_nukg7cFcjI1tvvddjo1_500.gif << ty

13:07

asciilifeform you recall, they pasted the sig packet off the actual key to a random concoction, verbatim

13:08

"bite error"

13:11

<mircea_popescu> BingoBoingo " since it's sale to Airbnb" << its. << ty fxd

13:12

<mircea_popescu> less money, shittier work. << Even if more money can't spend because blows cover, then die

13:17

mircea_popescu: yeah but that ain't a 'valid sig'

13:17

valid sig is valid ~for~ payload

13:30

;;later tell mod6 http://thebitcoin.foundation still contains a buncha #b-a links ?

13:30

The operation succeeded.

~ 56 minutes ~

14:27

;;ticker --market all

14:27

Bitstamp BTCUSD last: 747.86, vol: 14522.51117654 | BTC-E BTCUSD last: 714.997, vol: 12883.63577 | Bitfinex BTCUSD last: 748.22, vol: 102681.82802122 | CampBX BTCUSD last: 675.0, vol: 4.81007134 | BTCChina BTCUSD last: 749.918331, vol: 71268.07480000 | Kraken BTCUSD last: 748.298, vol: 4917.98036024 | Volume-weighted last average: 746.706548862

14:29

https://i.sli.mg/JU24fH.png

14:35

lo

14:37

guy needs a better family.

14:39

http://tmzuncut.com/woman-sets-husband-fire-raping-7-year-old-daugh

14:47

mebbe the 3rd time of seen that with a different woman charged with said crime.

14:51

and of course "the public" = the rest of the tatanyshas are worried she may get executed for this.

14:51

i have nfi how someone who waits for you to go to sleep, pours gasoline and lights up could possibly escape the hanging. it is about as cowardly premeditated as it gets, no need to encourage this sort of behaviour.

14:52

in usa, no corpse --> no hanging

14:52

weird, ikr

14:52

hang them both

14:52

phf: I'll get you postgresql user/pass this evening

14:56

mircea_popescu: in usa it is not wholly unheard-of for wife to mutilate husband (blinding, decocking, etc) while he sleeps

14:56

often the jury nullifies

14:57

in the old tradition of samson and delilah

14:58

it's outrageous. married woman that hurts sleeping husband should be given the option of burning at the state / boiling in oil.

14:58

curious - why option

14:59

optimal anguish.

14:59

either choice has a bunch of onlookers mocking her for choosing wrong.

14:59

l0l!

15:02

incidentally this is an islamic mainstay afaik. punctually, fine example of why "civilised" us might well welcome the rule of the "barbarians". legal improvements.

15:03

where in dar-al-islam is there this

15:03

afaik it's head-chop for everybody.

15:03

(aside from shia hangings)

15:03

i cant quote verse.

15:03

but i've yet to meet muslim married woman that'd even conceive such outrage.

15:09

https://securelist.com/blog/research/75027/xdedic-the-shady-world-of-hacked-servers-for-sale << lulzy

15:13

aha.

~ 29 minutes ~

15:43

notagain

15:56

nihil est perenne

15:59

drink. campari.

~ 26 minutes ~

16:26

iOS Beetus edition https://i.sli.mg/Zx7lGt.png

16:27

I do not recall a worse keynote ever given by "apple"

16:28

somebody decided they needed to be more inclusive with their presenters, and they included a bunch of duds

16:28

And transfats

16:34

i liked the black chick that was doing the whole blackface shtick

16:35

"execu-super-mommy" i believe is that term she used, right before trying to get boomer audience to sing along to the sugarhill gang

16:36

followed by half hour of two grownups earnestly demoing imessages features presumably targeted at 12 year old girls

16:48

boggles my mind that any of you bothered to watch

16:49

http://btcbase.org/log/2016-06-16#1483611 << this does not make sense to me. granted, maybe i need to be elucidated. but gpg clients correctly handle hpa's key mess, viz. https://news.ycombinator.com/item?id=9561091 (link to particular comment about this particular case of diddling)

16:49

Logged on 2016-06-16 17:04 mircea_popescu: except in the case as seen of hpa's key, where they just attached a valid sig to an invalid key.

16:51

(and also the tree of comments below, which are not properly visually formatted, in terms of identation)

16:51

(schoen et al)

~ 28 minutes ~

17:19

trinque the apple you're thinking of got pancreatic cancer, they got a replacement from central casting.

17:21

asciilifeform buncha recovering 2000s fanbois, whadda ya want. anyone's a teenager sometime.

17:23

Framedragger so some clients handle it correctly. this isn't much of an argument that it belongs there.

17:27

ben_vulpes

the pathetic "omg these cool features!" from current fanboys is endlessly entertaining.

17:28

you guys, i really enjoyed the main guy, because he was like a steve jobs zombie, down to a gaunt cancer look. he existed in this uncanny valley with all the manerisms and presentation ticks.

17:29

next year they can give him a kardashian ass and he could launch a music album.

17:29

i'm just so rarely exposed to agitprop that this was a fascinating experience. it's like watching men in suits get on all fours and earnestly eat shit from the floor.

17:30

Wait you didn't see that part?

17:30

l0l

17:31

ben_vulpes: the crapple currently in business is a sad thing. i have a brand-new $3k box here, for instance, that periodically forgets it has wifi.

17:31

no need to spread! boom, it's that easy!

17:32

if the alternative weren't microshit, nobody would even conceive of buying such a thing.

17:32

*

trinque sends asciilifeform a grumpy emoji

17:33

lel

17:33

*

trinque just picked up a g5 imac as a non-intel curio

17:33

25 bucks on craigslist

17:34

i remember them costing their weight in silver.

17:34

it was an interesting arch

17:35

but my understanding is, nsa wanted standardization on x86, and got it.

17:37

[Recent Phuctorings.] Phuctored: 4579563035892572414441 divides RSA Moduli belonging to 'Cyber-Tom <cyber-tom@mailcity.com>; ' - http://phuctor.nosuchlabs.com/gpgkey/AD4C57403CECBEB77262D7BE6F1E4F9925E7A673AA8AA1A5971A1555B67C20AD

17:37

boom

17:38

flipolade btw.

~ 59 minutes ~

18:37

candidate for castle alfstein? https://carbondale.craigslist.org/reb/5624243887.html

18:45

gernika

Something I built that may be of interest to Z80 fans: http://www.exusiae.com/blog/thortron.html

18:50

interesting

18:54

http://btcbase.org/log/2016-06-16#1483669 << it does, however, show that a coherent account "fakeness" (from the query by yourself ("what makes a subkey fake ?")) is possible.

18:54

Logged on 2016-06-16 21:23 mircea_popescu: Framedragger so some clients handle it correctly. this isn't much of an argument that it belongs there.

18:55

account of*

18:56

i.e., the "fake subkey" case *can* be handled correctly.

18:57

hence self-sigs do provide value here; this is not to say that the notion of "subkey" shouldn't be razed from the earth, eventually.

19:04

Framedragger as exemplified by the woman in the picture. she's "not fake". in what sense ? she could call you and swear for herself ? so ?

19:04

your notion of fake is broken. you think fake is a property of objects. fake is a property of relations.

19:04

non sequitur, even though the example is cute

19:05

it follows very much, what.

19:05

i agree that it's a property of relations. a signature establishes a relation

19:05

don't see a contradiction

19:05

maybe bad wording: not "self-signature" in this case, but rather one (parent) key signing another (child) key.

19:06

a self-signature establishes nothing. if YOU signed the key then ~you~ would know it's not fake in the specific sense that it's the same one you signed.

19:06

that it signs itself shows ~nothing.

19:08

let's particularize: hpa's parent key was embedded in the pgp wot (whether the latter is worth anything is a *separate* point) which people trusted. then, hpa's child key appears, and it's not properly signed by hpa's parent key, the latter being trusted prior. maybe the sig is not there, maybe the sig is invalid, whatever. child key gets rejected. this scheme in itself is not circular, and it *worked*.

19:09

i don't know hpa. any item purporting to be hpa's key is fake, and this can not be fixed by hpa or anyone on his behalf through technological means of any sort.

19:09

whether it truly worked well, whether some gpg clients are shit, whether keyservers should preemptively dismiss such keys - all worthy points of discussion, but separate.

19:09

the only solution is for us to become acquainted.

19:09

if another knows hpa, and signs his key, then that one knows the key he signed to be not fake, but the key he signed. this, again, has little to do with hpa per se.

19:11

i agree. but what if there was some trust path from you to hpa's parent key; and there were no paths at all to the diddled child key. surely that's something, even if not enough for you to mark hpa's key (any key) as "trusted"

19:11

anyway. the only way in which the scheme you discuss worked was to prevent effectual use of symmetric key crypto, and it's altogether doubtful people needed help for that.

19:12

Framedragger i don't see much merit in the whole scheme. gpg does something stupid and then maybe salvages some edge of it. mmkay.

19:13

"subkeys" are ~equivalent to "domain names" and various attempts to weaken bitcoin that were quashed historically. "wouldn't you like some wool over your eyes ???"

19:14

right, sure. but then you'd agree that all phuctorings (save for one, apparently) are interesting insofar as one is interested in how broken this scheme is?

19:14

i.e. they show only that.

19:14

i don't think it can ever be said "x phenomena shows only y abstraction".

19:15

i dunno why it's interesting and what it shows exhaustively.

19:15

maybe i'm jumping too much. apologies - sleepy; and i get the point.

19:15

but anyway, sure, there's a difference between "random subkey" and "subkey signed by main key".

19:15

nevertheless, it seems to my eyes to be of the kind of "there's a difference between burnned out barn with door open and burned out barn with door closed".

19:15

i suppose that's what i wanted to state originally, yeah. i know it's not a strong case; but it's not utter bullshit, either.

19:17

more importantly : i don't want to outsource the management of my trust chains. if i trust you, i trust one key, not all keys in all derivations you may one day come up with.

19:17

and if you want a subkey, I do the signing, not you.

19:17

depends on matter of scale. if you zoom out and look at gpg as a whole then you just want to burn everything to the ground, sure. and if you zoom out further you want to rewrite more and more things. but sometimes it is worthwhile to consider relative differences of worth, too, so to speak.

19:17

sure, but the "who is in charge" point is important.

19:18

yeah i agree here, i do see that point

19:18

so, yeah.

19:18

if gpg was intended as a sort of otr, "user creates subkeys forever", it's shockingly poorly implemented.

19:18

tru

19:18

if it's intended to work as what it works, then really there's no use or need for that nonsense.

19:18

so in a sense i made a design decision post-implementation, because these cojoined twins had to be cut somehow. this is improper, sure, but unavoidable.

19:21

one practical consideration re you signing my subkeys: what if you really trusted my main key but then i later decided to move that key to offline storage for security, and derive a subkey - one may argue that gpg provides just this kind of means of streamlining the process - i sign my new subkey or whatever, and there's that, no need for you to meet me in person again. otherwise doesn't scale at all, if 1000 people wanted to trust my su

19:22

hanbot

say Valfor, who're you?

19:22

otherwise doesn't scale at all, if 1000 people wanted to trust my subkey. i guess *you* could argue that fuck scale and fuck "lots of people", etc.

19:26

^ i'll re-think and converse better next time, bed time

~ 16 minutes ~

19:42

jurov: i heard you have a converter from tmsr format (e,N,comment) to openpgp, if that's true can you link to it perchance please? would save time / redundancy :)

19:45

jurov: but probably nvm actually 'cause your tool i expect does not generate things like self-sigs out of nowhere, etc. (need by current instance of phuctor). would still like to take a look if it's around tho!

19:45

needed*

19:50

gernika

Whales are spouting off the coast today. Beautiful thing.

19:53

Framedragger why should it scale ? dunbar number is a thing. there's no need for you to be trusted, or even known, by more than a few dozen people.

19:54

and why should the process be streamlined ? the decision to "move your key to storage" has some costs, for them. why should you be insulated from this ? you wanna do X, pay up.

19:55

$gettrust valfor

19:55

L1: 0, L2: 0 by 0 connections.

19:55

:/

19:55

wtf is this wonder.

19:55

$gettrust Valfor

19:55

L1: 0, L2: 0 by 0 connections.

19:56

Valfor who're you and how did you get voice ?

19:56

I presume I was given it?

19:56

not really something I can take for myself :P

19:56

mircea_popescu: yeah k, i mean, i may disagree re. dunbar's number being directly applicable here, maybe i'm some l33t package maintainer, but fair enough, won't argue further here

19:56

wat

19:57

it's lisp's fault, i knew it

19:57

trinque i think he got voice a whole back and deedbot forgot about it.

19:57

valfor is some unclaimed garbage collected side effect

19:57

:(

19:57

my heart

19:57

May 02 18:10:34 <deedbot> Valfor voiced for 30 minutes.

19:57

you're ripping me to shreds

19:57

Valfor well lol, consider getting in the wot eh.

19:57

weird. deedbot tracks nick changes at least

19:58

My nick has been the same :P

19:58

If you all want a collective devoice

19:58

I'm happy to do so

19:58

Valfor more like auditing the mechanism than anything.

19:58

just discussing teh bot mr feelings!

19:58

No worries

19:58

Well let me know if you do - don't want to be inadvertently breaking the rules :)

20:05

http://btcbase.org/log/2016-06-16#1483689 << this HAS to be a scam.

20:05

Logged on 2016-06-16 22:37 BingoBoingo: candidate for castle alfstein? https://carbondale.craigslist.org/reb/5624243887.html

20:06

nothing in usa - that one could live in - costs this little, unless it is attached to onerous restoration mandate from the city, and/or surrounded by heavily armed and belligerent africa

20:07

http://btcbase.org/log/2016-06-16#1483707 << neither moar nor less fake than linux kernel, neh ?

20:07

Logged on 2016-06-16 23:09 mircea_popescu: i don't know hpa. any item purporting to be hpa's key is fake, and this can not be fixed by hpa or anyone on his behalf through technological means of any sort.

20:13

;;later tell gernika http://btcbase.org/log/2016-06-16#1483690 << neato

20:13

Logged on 2016-06-16 22:45 gernika: Something I built that may be of interest to Z80 fans: http://www.exusiae.com/blog/thortron.html

20:13

The operation succeeded.

20:15

;;later tell mircea_popescu http://qntra.net/2016/06/clinton-and-major-socialist-party-data-released-by-hero/#comment-61788

20:15

The operation succeeded.

20:17

http://btcbase.org/log/2016-06-16#1483723 << manual reactor rods ?

20:17

Logged on 2016-06-16 23:17 mircea_popescu: more importantly : i don't want to outsource the management of my trust chains. if i trust you, i trust one key, not all keys in all derivations you may one day come up with.

20:17

there was a very good thread where mircea_popescu explained this, but i can't seem to find it

20:18

the one where 'key can squirt out a signature for a new key but this can leave no permanent mark on the original,' ergo auto-acceptance of subkeys is invitation for 'evil maid attack' etc.

20:19

(or more general variant where enemy can take something you signed and turn THAT into a subkey that is in turn accepted somewhere!!)

20:19

^ this may actually be practical with pgp

20:19

^ and may account for at least one phuctored modulus

20:19

^^ mircea_popescu et al ^^

20:20

re evil maid, sure, that's a prob.

20:21

asciilifeform: btw would phuctor (as it currently works) be able to import an otherwise normal openpgp / rfc4880 key either (1) no self-sig or (2) a somehow borked (nulled? haven't looked at rfc4880 data structures yet) self-sig? as i see it lotsa info is actually contained *within* the signed part, in that format..

20:21

well, probably not as traditionally stated (e.g., if 'evil maid' borrows mircea_popescu's key, she can launch the rockets)

20:21

Framedragger: would happily eat such a key

20:21

notice, the sig is not used for anything therein

20:29

<asciilifeform> nothing in usa - that one could live in - costs this little, unless it is attached to onerous restoration mandate from the city, and/or surrounded by heavily armed and belligerent africa << AHA, the latter. You gotta supply your own walls!

20:29

BingoBoingo: if walls were enough, place would cost $mil

20:29

not 13k.

20:29

elementarily.

20:29

Well, also in Cairo, Illinois. A very special nowhere.

20:30

the missing ingredient HAS to be something that costs moar than the difference to add back in.

20:30

thinkaboutit.

20:31

for instance, i know a fella who moved to a - perfectly tame little town in west virginia, and thought he was getting great deal, but it turned out that it is physically impossible to get decent net connection there (at least without paying for streets to be dug up, six figures)

20:31

You know how the coastal property market works? Cairo is kinda the opposite. rural AND black! North of the Mason-Dixon line too!

20:31

BingoBoingo: with same logic, why not zimbabwe

20:31

even cheaper

20:31

and blacker

20:32

But roads out are less nice. Also Cairo has city (flood) walls

20:33

And big interstate meeting points.

20:33

*

asciilifeform wonders why BingoBoingo has not himself bought the warehouse

20:33

Too far removed from hobby venue

20:34

And BingoBoingo already lives in paler region of middle west

20:36

asciilifeform: kthx, good to know.

20:45

;;later tell mod6 also worked on Deb http://dpaste.com/0S4VX30

20:45

The operation succeeded.

~ 35 minutes ~

21:20

shinohai: nice!

21:24

<asciilifeform> http://thebitcoin.foundation still contains a buncha #b-a links ? << yeah, shinohai did a project where he transfered over the stuff there like the wiki to the deedbot page.

21:25

i haven't updated the links because i wasn't sure that the deedbot wiki page is fully baked yet.

21:25

the content is baked, not sure about the infrastructure/container itself.

21:25

trinque?

21:25

is this stuff ready?

21:27

and yah, as far as I can tell asciilifeform, the only #b-a links there (three of them) are pointing at wiki.bitcoin-assets.com

21:27

or did you see others?

~ 20 minutes ~

21:48

the thing's fine to be linked to, but I don't think shinohai finished transferring pages

21:56

All are there except mebbe 2-3 articles I haven't finished formatting

22:06

asciilifeform not afaik.

22:12

mircea_popescu: all it'd take is a sha1 collision

22:12

i meant re hangout

22:12

with ANY of the sha1 from the total set of signatures publicly known for key K

22:12

ah

22:14

(every time a sig is published, this job gets slightly easier...)

22:16

btw does mircea_popescu know what would happen if a pgp key with his main key but new magical subkey were generated and posted to sks ?

22:17

... it would be displayed as latest; folks who -receive-key longfp would end up with it; all known pgp clients - happily encipher to it; etc.

22:18

but i think we may have already done this thread

22:18

(though for some reason it refuses to turn up)

22:19

http://btcbase.org/log/2016-06-17#1483819 << only them

22:19

Logged on 2016-06-17 01:27 mod6: and yah, as far as I can tell asciilifeform, the only #b-a links there (three of them) are pointing at wiki.bitcoin-assets.com

22:22

cool thx alf

22:24

incidentally 'all my chums get my key only from my hands' dun help.

22:24

because ~sigs~ made with the magic sub will pass.

22:25

(as valid, both for folks with mircea_popescu's genuine pubkey, and for those with the magic one)

22:25

myeah.

22:26

kinda why i don't like the "auto trust" bs.

22:26

hence 'subkey must die!'

22:26

it entirely subverts pgp. and i don't believe it to be accidental either.

22:26

now, the ad-interim solution is to a) sign the key ; b) only encrypt to signed key. but... dun help noobs.

22:26

by no means accident. a thick part of the rfc is specifically devoted to it, one way or another

22:27

mircea_popescu: enemy can just as easily sign ~his~ variant

22:27

and ditto.

22:28

munchausen could fly by pulling own boots

22:28

but we - cannot.

~ 1 hours 19 minutes ~

23:47