Show Idle (>14 d.) Chans


← 2015-05-16 | 2015-05-18 →
00:00 hanbot reasons being, nobody had figured out how to hike their pet concern to the event.
00:02 decimation well, one would think that the trains that carry the flower of the ny & dc elites might carry some level of interest
00:02 asciilifeform l0lwut
00:02 asciilifeform elite, on trains?
00:03 decimation sure
00:03 asciilifeform what is this, 1890 ?
00:03 hanbot ^
00:03 decimation how do you think they travel? tsa screening?
00:03 asciilifeform 'learjet' etc
00:03 asciilifeform no tsa.
00:03 hanbot elites travel?
00:04 decimation nah. if going from dc to ny (or reverse) aircraft would be less convenient
00:04 asciilifeform only for plebes condemned to arse searches and queues
00:04 decimation not really. you gonna land a plane in grand central station
00:05 hanbot who goes dc-ny?
00:05 decimation gotta go to teterboro or some other outlying airport
00:05 decimation lawyers, politicians, media
00:05 hanbot i thought it was all maryland
00:05 decimation usg is all over the place
00:06 decimation but the important bits are within walking distance of a metro station
00:06 hanbot ny goes to albany, mostly.
00:07 decimation joe biden was famous for commuting daily from delaware on amtrak
00:07 decimation while he was a senator
00:07 asciilifeform to imagine that this is why the bricks fly, is lunacy
00:08 decimation sorry I wasn't implying that was the case
00:08 decimation the fact that bricks fly at such trains ought to be newsworthy
00:09 decimation my point being that it only turns out to be newsworthy once a major accident happens and people get injured/killed
~ 15 minutes ~
00:24 assbot [MPEX] [S.MPOE] 40900 @ 0.00028386 = 11.6099 BTC [+]
00:26 assbot [MPEX] [S.MPOE] 55150 @ 0.00028386 = 15.6549 BTC [+]
00:38 trinque deedbot-: add feed http://cascadianhacker.com/index.xml
00:39 deedbot- http://cascadianhacker.com/index.xml is a go!
00:40 deedbot- [cascadian hacker] electronics hack night featuring the twiddler and asciilifeform's TRNG - http://cascadianhacker.com/blog/2015/05/16_electronics-hack-night-featuring-the-twiddler-and-asciilifeforms-trng.html
00:41 deedbot- [cascadian hacker] A brief history of the Bitcoin Foundation's activity from 10/2014 through 4/2015 - http://cascadianhacker.com/blog/2015/05/02_a-brief-history-of-the-bitcoin-foundations-activity-from-102014-through-42015.html
00:42 deedbot- [cascadian hacker] fyooturgigs: knife sharpener, garbage-sorter, computational sommelier - http://cascadianhacker.com/blog/2015/04/26_fyooturgigs-knife-sharpener-garbage-sorter-computational-sommelier.html
00:43 deedbot- [cascadian hacker] Well welcomed, the warrior - http://cascadianhacker.com/blog/2015/04/25_well-welcomed-the-warrior.html
00:44 deedbot- [cascadian hacker] Bitcoin needs no changes to destroy your world - http://cascadianhacker.com/blog/2015/04/24_bitcoin-needs-no-changes-to-destroy-your-world.html
00:45 deedbot- [cascadian hacker] Hacking on the Satoshi Codebase: Some Pointers - http://cascadianhacker.com/blog/2015/02/01_hacking-on-the-satoshi-codebase-some-pointers.html
00:46 trinque decimation | it occurs to me that one use of deedbot would be timestamping potential evidence, like camera/video captures << seems a fine use.
00:47 assbot [MPEX] [S.MPOE] 9000 @ 0.00028386 = 2.5547 BTC [+]
~ 16 minutes ~
01:03 trinque http://www.washingtonpost.com/blogs/worldviews/wp/2015/03/27/pakistans-long-history-of-fighting-saudi-arabias-wars/
01:04 decimation sure, pakistan has been a useful stooge for a variety of powers
01:05 trinque given the cozy relationship there I would not be surprised if saudi tries to purchase nukes from pakistan, if they haven't already
01:05 assbot [MPEX] [S.MPOE] 66150 @ 0.00027653 = 18.2925 BTC [-] {3}
01:06 decimation eh, saudi arabia doesn't really need nukes
01:07 trinque why don't they?
01:07 decimation they got usg's nukes on call if they need them
01:14 trinque http://www.wsj.com/articles/saudi-arabia-considers-nuclear-weapons-to-offset-iran-1430999409 << usg might be shifting the balance of power in the region towards their competitor
01:15 trinque I wouldn't trust the USA if I were them.
01:18 assbot [MPEX] [S.MPOE] 43850 @ 0.00027138 = 11.9 BTC [-] {3}
01:19 trinque http://www.wsj.com/articles/saudi-nuclear-deal-raises-stakes-for-iran-talks-1426117583
~ 24 minutes ~
01:43 assbot [MPEX] [S.MPOE] 18800 @ 0.00027033 = 5.0822 BTC [-]
01:47 mats http://www.bbc.com/news/business-32747454
01:48 mats > China to invest $50bn in Brazil infrastructure
~ 48 minutes ~
02:36 gabriel_laddel BAD (bitcoin-assets distro) update #2.
02:36 gabriel_laddel Testing the install process has been impeded by possibly faulty hardware (my testing box reliably kernel panics as of today - idkwtf). I'm stalled until I've new boxen. If someone were willing to set aside a few hours to test the install process, please leave it in the logs. I'll follow up with you via PM.
02:38 * BingoBoingo still rather inclined towards promoting *nix hetrogeny
02:42 * gabriel_laddel sees *nix hetrogeny as meaningless unless the personalized systems all have sources included, can be bundled into a usb stick or CD/DVD installer with a single procedure call
02:49 gabriel_laddel Quote suggestions for 8chan ads:
02:49 gabriel_laddel "He who refuses to do arithmetic is doomed to talk nonsense." - JMC
02:49 gabriel_laddel "PS. Smart people don't give a shit about how much money you have. Because they can take it from you, any time they feel like it. Get it through your skull: you ain't buying it, you ain't coercing it, get on your knees and start worshipping it." -- http://trilema.com/2013/the-sanity-dogma/#comment-95113
02:50 gabriel_laddel "in the meantime, resistance is not futile. only the weak of mind will be assimilated, and they are no loss, anyway." -- Naggum
02:52 gabriel_laddel "Reductio ad absurdum, which Euclid loved so much, is one of a mathematician's finest weapons. It is a far finer gambit than any chess play: a chess player may offer the acrifice of a pawn or even a piece, but a mathematician offers the game. -- A Mathematician's Apology (London 1941)"
02:55 gabriel_laddel http://log.bitcoin-assets.com/?date=17-05-2015#1134249 << !s chetty
02:55 assbot Logged on 17-05-2015 02:54:48; indiancandy1: im like the only pretty girl who comes in here
02:55 gabriel_laddel !s hanbot
02:55 assbot 795 results for 'hanbot' : http://s.b-a.link/?q=hanbot
02:57 gabriel_laddel ;; later tell indiacandy1 who are your role models in the porn biz?
02:57 gribble The operation succeeded.
02:58 BingoBoingo gabriel_laddel: Did you stumble upon my 11 year plan in the logs yet?
02:59 gabriel_laddel BingoBoingo: becoming a MMA punching bag? Yeah.
02:59 gabriel_laddel BingoBoingo: whats up?
02:59 BingoBoingo gabriel_laddel: Nah, avoiding MMA, becoming a boxing tomato can for my 40th birthday in 11 years
03:00 BingoBoingo Oh, not too much is up. My youngest brother got their BS in Mechanical engineering today.
03:00 gabriel_laddel neat
03:00 BingoBoingo WOuld maybe recruit for La Republic serene if we need a trebuchet
03:01 BingoBoingo gabriel_laddel: Year one goal is ending their year in sufficient shape after a decade of chainsmoking and heavy drinking to not get too winded at a gym
03:02 BingoBoingo Also strengthening the metacarpals through controlled stress fractures
03:03 gabriel_laddel Eh, whatever floats your boat I suppose.
03:03 gabriel_laddel I like walking and that is about it as far as exercise goes.
03:05 BingoBoingo I like walking too, but walking lets me smoke while I do it, also seems less like exercise and more liek an activity of daily living the doctors count against you if you can't do it.
03:06 gabriel_laddel BingoBoingo: are you trying to impress to fuck a doctor or something?
03:06 gabriel_laddel who cares?
03:09 BingoBoingo gabriel_laddel: I live in a rogue state atm (Illinois) and I'd rather not have to get a prostate exam to buy legit hunting rifle of Mosin or Simnov design. So earlier this week I was watching past oscar movies and hit Million Dollar Baby. Then it hit me. Why not weaponize me?
03:10 gabriel_laddel BingoBoingo: someone willing to slit throats isn't scary
03:10 gabriel_laddel really, they're not even that useful.
03:10 gabriel_laddel learn organic chemistry
03:10 gabriel_laddel a motivated chemist is really fucking scary
03:11 gabriel_laddel china ships precursors to mexico all the time, head out there (cn), meet the people involved.
03:11 BingoBoingo Oh, scary is context dependent. I sat through ~75% of a pharmacy school's curriculum as a grad assistant who just worked the microphones.
03:12 BingoBoingo Thing is the legitimate governments of most of mexico frown on synthesis without their blessing.
03:12 assbot [MPEX] [S.MPOE] 29900 @ 0.00027969 = 8.3627 BTC [+]
03:12 gabriel_laddel BingoBoingo: China homie
03:12 gabriel_laddel BingoBoingo: do you know synth then?
03:13 BingoBoingo I know the concept of a recipe and I know what a catecholamine is.
03:13 BingoBoingo ?
03:14 BingoBoingo China? WTF?
03:15 gabriel_laddel BingoBoingo: Explain C2 symmetry to me.
03:17 BingoBoingo gabriel_laddel: It is a rotational thing. Anything cool will lack symmetry greater than C1.
03:18 BingoBoingo Blame our earth biases towards amino acids one way and carbohydrates another, not opposite way
03:19 BingoBoingo citalopram vs. escitalopram and levo-methamphatamine vs. dex-methamphetamine is a good starting point on chirality
03:20 gabriel_laddel BingoBoingo: The bent I'm attempting to communicate here is something like this: You've made it to #b-a, which unlike any community I've ever encountered provides a foundation for building a sane civilization and you want to... become a boxer? It doesn't follow. Boxing is a last resort sort of thing, even if you were to become the worlds best boxer you're still basicly some poor fuck who couldn't make
03:20 gabriel_laddel it as an intellectual.
03:21 gabriel_laddel If your goal is to become scary, well, there are way to get there that are going to make you much more scary than the worlds best MMA fighter.
03:21 BingoBoingo Ah, You are looking at ends.
03:21 gabriel_laddel If your goal is to become healthy, idk how boxing figures into it.
03:22 gabriel_laddel Yeah, always work towards a purpose, not a cause right?
03:22 gabriel_laddel (I kid)
03:22 gabriel_laddel that said, I wish you the best in all your ventures.
03:23 BingoBoingo My take is there is a tradition.
03:24 gabriel_laddel Regarding China - finding reliable chemical suppliers and integrating with the WoT sounds like a useful use of one's life.
03:24 gabriel_laddel /s/useful/productive
03:24 gabriel_laddel <BingoBoingo> My take is there is a tradition. << this means nothing to me
03:25 BingoBoingo It requires minimal monetary expenditure and substantial time expenditure to approach X, A side effect of X is getting punched. Getting punched will happen regardless through other habits I entertain.
03:28 cazalla ya know BingoBoingo, people told pacman he couldn't become a boxer
03:28 BingoBoingo ^
03:29 gabriel_laddel Getting punched will happen regardless through other habits I entertain. << can't save people from themselves...
03:29 BingoBoingo I'm actually pretty good at taking a beating.
03:30 gabriel_laddel I'm excellent at shooting H
03:30 gabriel_laddel ...
03:30 gabriel_laddel ?
03:30 gabriel_laddel Seriously?
03:30 BingoBoingo Seriously, Mu chin is good.
03:30 gabriel_laddel Between me, rents and sickboy I'm the best petty thief
03:30 mircea_popescu https://8ch.net/static/banners/cul/1427429909196.png heh. quite.
03:32 BingoBoingo +++++++ ^ +++++++++
03:33 mircea_popescu decimation afaik it was always known (tm) that they found him by sherpa.
03:33 mircea_popescu <decimation> they got usg's nukes on call if they need them << nope, not anymore. new king is trashing the alliance.
03:34 mircea_popescu the us will have to work out of cuba and hawaii.
03:34 BingoBoingo Thankfully Obummer surrendered to the Castros
03:34 mircea_popescu can be bundled into a usb stick or CD/DVD installer with a single procedure call <<< exactly this.
03:35 mircea_popescu an "install" you have to "fiddle with" is not an install.
03:37 mircea_popescu gabriel_laddel kinda too long to fit on a banner, i fthat's what you meant ?
03:37 cazalla of course for every pacman there is countless spider ricos
03:38 gabriel_laddel mircea_popescu: small fonts? I can't speak for anyone else, but I *must* read pretty much any text that makes its way into my vision.
03:38 cazalla BingoBoingo, figured you more for baseball anyway, then you could get juiced up on HGH
03:38 cazalla hispanics getting homeruns
03:38 mircea_popescu gabriel_laddel I like walking and that is about it as far as exercise goes. << im pretty much the same.
03:39 BingoBoingo cazalla: The time it takes to learn to throw anything left handed... versus the exosud of young potential prize fighters for MMA and the NFL... I leik my odds
03:40 mircea_popescu " You've made it to #b-a, which unlike any community I've ever encountered provides a foundation for building a sane civilization and you want to... become a boxer? It doesn't follow." << ahaha lulzy way to put it, but i dbout the guy actually aspires to this as his life. sounded more like a hobby to me
03:40 cazalla still don't get the 11 years of training
03:41 mircea_popescu gabriel_laddel i think that's how half the chan people are too. that's why it's such a trap for them
03:41 BingoBoingo mircea_popescu: Honestly having been roundly rejected by the fiat economy anything I approach is as a hobby, except for the qntra. The Qntra is deadly serious.
03:41 mircea_popescu but anyway, guy has it : we definitely need more people in china.
03:41 BingoBoingo cazalla: If only you knew the tar on my lungs.
03:42 assbot [MPEX] [S.MPOE] 15950 @ 0.00027982 = 4.4631 BTC [+]
03:42 BingoBoingo Also, 40 is kind of peak athlete age barring major injuries
03:42 cazalla i dunno about that, boxing? maybe though
03:43 cazalla but still, 12-18 months training and you're good to go
03:43 BingoBoingo cazalla: Think about how many pitchers peak in ability in their late 30's early 40's (or not) versus combat sports peeps over at 30 because they are too beat.
03:44 cazalla and that's if ya only never boxed before
03:44 BingoBoingo First step is getting to high school graduation weight.
03:45 cazalla slip the jab
03:45 BingoBoingo While building the upperbody and core back up
03:45 mircea_popescu https://media.8ch.net/cul/src/1427434337209.jpg :D
03:46 cazalla do ya compound exercises
03:46 gabriel_laddel hahahaha
03:46 BingoBoingo I leik'd dpb's "transmen are evil" sjw clickbait tumblr
03:46 BingoBoingo cazalla: Working on it.
03:47 cazalla yeah i keep meaning to as well but the booze really gets its hooks in
03:47 mircea_popescu https://www.youtube.com/watch?v=66ag6-nWZ1E << dude, i had no idea that cartman-vlog south park episode was actually ripped from an irl thing
03:48 assbot [MPEX] [S.MPOE] 13050 @ 0.00027982 = 3.6517 BTC [+]
03:48 BingoBoingo Boose isn't as bad as the smoking it seems atm for me, may change.
03:48 BingoBoingo mircea_popescu: Anymore nothing in south park doesn't have an irl connection
03:48 mircea_popescu apparnetly.
03:49 BingoBoingo Last season's season long arc and its tanents all irl tied
03:49 BingoBoingo *tangents
03:50 mircea_popescu check it out jurov https://8ch.net/btc/res/33.html#177 teh plebs do not like your art!
03:51 cazalla ya should toss a quote in from that boy and the tree, that'd go well in /pol/ believe it or not
03:51 mircea_popescu (honestly, that hauling assets banner is great, easily the best of the crop. meanwhile the qntra one is probably the shittiest. imagine these derps, conflating the extremes like that)
03:51 BingoBoingo Nah that's a tie for beating rhonda quotes
03:51 mircea_popescu cazalla oh that's a point huh.
03:52 cazalla it's a great story though, not the first trilema article i read but the first that stuck in my mind
03:55 cazalla BingoBoingo, anyway we should both train and then we can put on some exhibition fights in BA in a year or 2, find some local picaninnies to go up against
03:55 BingoBoingo cazalla: That sounds agreeable
03:55 mircea_popescu ;;seen mike_c
03:55 gribble mike_c was last seen in #bitcoin-assets 4 days, 13 hours, 37 minutes, and 38 seconds ago: <mike_c> i'll add something
03:55 BingoBoingo The dying locust tree in the back yard will probably appreciate the break
03:55 mircea_popescu omg mikey! i need you.
03:59 BingoBoingo If anyone didn't guess already the Qntra Bird Flu article came out of buying 2 dozen eggs and the next week buying the same two dozen eggs for a budget busting (who plans for 67% markups) price.
04:00 cazalla BingoBoingo, buying em? what's the matter with you, can't catch a chicken?
04:00 cazalla chicken chasing is how we use to train in the old days btw
04:02 BingoBoingo cazalla: Turkeys here you can catch wild. Fuck, drove past a roadkill armadillo today which should only happen on the other side of the mississippi river. Chickens though... It takes three eggs to make a decent omlette. Even if you are getting an egg from each hen per day that's still a lot of birdshit.
04:03 cazalla armadillo edible?
04:03 BingoBoingo cazalla: Carries Leprosy
04:04 BingoBoingo So, maybe? I'm not that brave.
04:05 cazalla i thought road kill was like american pie
04:06 BingoBoingo cazalla: You still got to be picky. People fight over rights to bumper deer. Less so for plague carriers like armadillo.
04:06 BingoBoingo http://philippinefailblog.com/what-a-filipino-resume-might-look-like/
04:10 * BingoBoingo would rather punch one of the local coyotes into dinner than try making an armadillo edible
04:11 BingoBoingo <gabriel_laddel> BingoBoingo: The bent I'm attempting to communicate here is something like this: You've made it to #b-a, which unlike any community I've ever encountered provides a foundation for building a sane civilization and you want to... become a boxer? It doesn't follow. Boxing is a last resort sort of thing, even if you were to become the worlds best boxer you're still basicly some poor fuck who couldn't make << Where are
04:11 BingoBoingo you a native to?
04:12 gabriel_laddel BingoBoingo: USSA
04:12 BingoBoingo <gabriel_laddel> If your goal is to become scary, well, there are way to get there that are going to make you much more scary than the worlds best MMA fighter. << Scary for the sake of scary is one of the last things I aspire to. That's how people get shot and sliced.
04:13 assbot [MPEX] [S.MPOE] 14507 @ 0.00027969 = 4.0575 BTC [-]
04:14 gabriel_laddel BingoBoingo: You're splitting (the wrong) hairs.
04:15 BingoBoingo Anyways my survey of the field now is half the people on my high school's football team tried MMA at one point and got into "pro" fights of some sort. They played the proverbial tomato can to a t.
04:15 BingoBoingo Because few of them could get under heavy weight.
04:16 gabriel_laddel ...
04:16 * gabriel_laddel sputters, cannot compute
04:16 * cazalla buys BingoBoingo a tapout shirt for xmas
04:16 BingoBoingo Some things don't
04:17 * BingoBoingo still works on getting reasonably fit though
04:19 * BingoBoingo though doing an honest assessment finds a person who can reasonably keep up in a lot of #b-a convos but who can't program for shit. And honestly... training to trade punches seems much easier than learning to program on any level approaching asciilifeform, ben_vulpes, and mod6.
04:20 BingoBoingo And numerous others
04:33 * BingoBoingo admits probably too old to lern to code worth damn
04:33 assbot [MPEX] [S.MPOE] 53460 @ 0.00027015 = 14.4422 BTC [-] {2}
04:36 assbot [MPEX] [S.MPOE] 36100 @ 0.00027695 = 9.9979 BTC [+] {2}
~ 57 minutes ~
05:34 assbot [MPEX] [S.MPOE] 18700 @ 0.00027982 = 5.2326 BTC [+]
05:40 punkman http://stupidhackathon.github.io/index.html
05:42 punkman https://github.com/diafygi/gnu-pricing
05:46 punkman http://mistaken.co/assets/app_picture.png
~ 29 minutes ~
06:15 assbot [MPEX] [S.MPOE] 64800 @ 0.00027534 = 17.842 BTC [-] {2}
06:20 assbot [MPEX] [S.MPOE] 7602 @ 0.00027982 = 2.1272 BTC [+]
06:26 assbot [MPEX] [S.MPOE] 44855 @ 0.00027118 = 12.1638 BTC [-] {2}
06:27 assbot [MPEX] [S.MPOE] 4295 @ 0.0002685 = 1.1532 BTC [-]
06:40 assbot [MPEX] [S.MPOE] 21863 @ 0.00027982 = 6.1177 BTC [+]
06:49 assbot [MPEX] [S.MPOE] 36600 @ 0.00027988 = 10.2436 BTC [+] {2}
07:00 assbot [MPEX] [S.MPOE] 17750 @ 0.0002685 = 4.7659 BTC [-]
07:04 assbot [MPEX] [S.MPOE] 49850 @ 0.00027301 = 13.6095 BTC [+] {3}
07:14 assbot [MPEX] [S.MPOE] 30009 @ 0.00028072 = 8.4241 BTC [+]
~ 29 minutes ~
07:44 copypaste ;;later tell mircea_popescu 8chan is also blocked in Saudi Arabia and Oman according to reports I've received. Apparently only a few Russian ISP block it on order of ROSKOMNADZOR.
07:44 gribble The operation succeeded.
~ 26 minutes ~
08:10 assbot [MPEX] [S.MPOE] 48216 @ 0.0002684 = 12.9412 BTC [-] {2}
08:24 assbot [MPEX] [S.MPOE] 110000 @ 0.00026761 = 29.4371 BTC [-] {2}
08:27 assbot [MPEX] [S.MPOE] 56200 @ 0.00027402 = 15.3999 BTC [+] {2}
~ 20 minutes ~
08:47 assbot [MPEX] [S.MPOE] 27550 @ 0.0002676 = 7.3724 BTC [-]
08:53 jurov http://log.bitcoin-assets.com/?date=17-05-2015#1134165 i don't see how, if we're limited to straight paths for electrons
08:53 assbot Logged on 17-05-2015 02:37:42; asciilifeform: http://log.bitcoin-assets.com/?date=17-05-2015#1134108 << they don't need to turn sharp corners, in our hypothetical machine
08:54 jurov your "field emission display" is in fact counterexample - it does no computation whatsoever while electron flies
08:55 jurov classic CRTs do at least the "demultiplexing"
08:58 assbot [MPEX] [S.MPOE] 27100 @ 0.00028096 = 7.614 BTC [+] {2}
~ 18 minutes ~
09:16 assbot [MPEX] [S.MPOE] 23600 @ 0.00027548 = 6.5013 BTC [-]
09:24 assbot [MPEX] [S.MPOE] 18800 @ 0.00028108 = 5.2843 BTC [+]
~ 17 minutes ~
09:41 davout ;;later tell mircea_popescu http://i.imgur.com/g5ci4oK.png <<< the paymium banner
09:42 gribble The operation succeeded.
~ 16 minutes ~
09:58 assbot [MPEX] [S.MPOE] 35750 @ 0.00027707 = 9.9053 BTC [-]
10:12 asciilifeform ;;later tell mircea_popescu http://nosuchlabs.com/stats << notice anything ?
10:13 gribble The operation succeeded.
10:13 asciilifeform jurov: you are quite right, the electrons would have to move laterally. but not necessarily in very sharp turns.
~ 18 minutes ~
10:32 asciilifeform ;;later tell mircea_popescu you've got mail.
10:32 gribble The operation succeeded.
10:35 asciilifeform yes, we broke a pgp key.
10:35 mats how exciting
10:37 asciilifeform ;;later tell kakobrekla https://bitbet.us/bet/1144/phuctor-will-find-a-bad-key can be resolved? get the necessary data from mircea_popescu
10:38 gribble The operation succeeded.
10:38 asciilifeform (for anyone perplexed - we promised not to announce dud keys publicly, at least not if key's owner answers the warning - see http://nosuchlabs.com/theory )
10:40 * kakobrekla doesn't resolve bets, but mods that do read bb comments so is fine.
10:40 asciilifeform kakobrekla: i woke you up because the info necessary to resolve this bet is not public (as of yet.) hence tricky.
10:41 asciilifeform in fact, i'm rather unclear on what will happen if key's owner wakes up and asks 'pretty please don't rape me on camera'
10:41 davout RAEP RAEP RAEP
10:41 asciilifeform (he isn't anyone we know. but we did promise to spare)
10:42 mats i loled. 1.08btc on 0.02btc
10:42 asciilifeform somebody's gonna chortle on cock
10:42 mats too bad its the house
10:42 davout lol
10:43 * asciilifeform recused himself from the bet
10:43 kakobrekla well, lets see what the wot is worth.
10:44 kakobrekla anyway, the affected parties are basically (listed by alphabetical order): mp
10:46 asciilifeform phun phuct: i never actually tested the code which displays phuctored moduli. (couldn't be bothered to craft a dud key, it's a pain) - but it worked. because was written correctly. perhaps a novel concept to some folks
10:49 * kakobrekla never heard of that
10:50 asciilifeform and the poor bugger appears to be in the strong set, no less.
10:55 davout asciilifeform: aren't there, by definition, at least two 'buggers'?
10:56 assbot [MPEX] [S.MPOE] 38700 @ 0.00028269 = 10.9401 BTC [+] {2}
11:06 adlai iiuc, finding the second bugger would require bruteforce checks against all the keys contributing to the modulus that phucked the first bugger
11:07 adlai (not that much work, definitely less than the work which has already been done to find the first one)
11:08 assbot [MPEX] [S.MPOE] 65450 @ 0.00028294 = 18.5184 BTC [+]
11:08 adlai (phuctor now knows the factorization of a single key, and it knows which of the two prime factors is shared with the second bugger)
11:08 davout if you know that there's another broken one in the set, might as well re-check the set to find it
~ 17 minutes ~
11:26 asciilifeform davout: there sure are
11:26 asciilifeform davout: in not too long, i will learn who the 2nd one is.
11:27 asciilifeform so here's my other observation:
11:27 asciilifeform we haven't really discussed it, but there are interesting implications in breaking a fella's pgp key.
11:27 asciilifeform mircea_popescu likes to speak of having 'killed' that greek derp, but in a very real sense the schmuck whose key we just broke, is dead
11:28 asciilifeform which is to say, i could sign, with his key, 'please rape me in public with a donkey' and it will be as legit as anything he will ever say himself
11:28 asciilifeform in the eyes of the gods
11:30 asciilifeform to rephrase, he no longer (if ever did) have sole control of his private key
11:30 asciilifeform and we must not neglect the third party - the fine folks who boobytrapped mr schmuck's copy of pgp.
11:32 asciilifeform if keys are identities are people - which, for purposes of wot and dealings among folks who will never meet in the flesh, they most certainly are - that one: has died.
11:33 asciilifeform phuctor does not send automatic emails. to anyone. so, let's see what happens when mircea_popescu writes to mr schmuck
11:34 asciilifeform but my point above was, what are we to do with the answer? it could be coming from just about anyone!
11:44 assbot [MPEX] [S.MPOE] 38491 @ 0.00027652 = 10.6435 BTC [-] {2}
11:45 assbot [MPEX] [S.MPOE] 3909 @ 0.00027595 = 1.0787 BTC [-] {2}
11:49 jurov asciilifeform: but there were multiple people with colliding moduli, not only one?
11:49 jurov or i misunderstand something?
11:51 assbot [MPEX] [S.MPOE] 39142 @ 0.00027555 = 10.7856 BTC [-]
11:54 jurov soo i have inadvertently turned to computational sommelier,too... thinking about replacement to my broken qwerty phone, then it hit me..n900!
11:55 jurov with possible upgrade to neo900 in few months (expected price 900euro, tho)
11:58 assbot [MPEX] [S.MPOE] 42000 @ 0.00026963 = 11.3245 BTC [-]
11:59 adlai jurov: yes, at least two keys need to have a primer in common. had phuctor run over the keys in reverse order, it would've found the other chump first
12:05 asciilifeform jurov: there is a second, but it will take a while to unearth it.
12:08 asciilifeform mircea_popescu!
12:09 mircea_popescu aha
12:10 mircea_popescu 340k submitted HOL SHIT
12:10 asciilifeform ahahahaha.
12:10 mircea_popescu achtung BingoBoingo cazalla : phuctor broke a rsa.
12:10 asciilifeform mircea_popescu read log
12:10 asciilifeform and check yer mails
12:12 mircea_popescu lol
12:12 mircea_popescu dude...
12:12 mircea_popescu yes im going to
12:12 asciilifeform the most lulzy part (what the common factor was) is not even posted publicly yet.
12:13 mircea_popescu im waiting to share it in the interview lolz.
12:13 asciilifeform kudos to mircea_popescu for supplying the cpu cycles for this apparatus pro bono
12:13 mircea_popescu i am in complete disbelief that this actually happened.
12:14 mxtm what exactly has happened?
12:14 mxtm gpg key has been breached?
12:14 mxtm or
12:14 asciilifeform mxtm: some 2 schmucks (of which i've identified 1, but the other will follow in a week or so) had common factor in their rsa private keys.
12:15 mircea_popescu this is truly fucking major.
12:15 mxtm and you derived the priv keys from this?
12:16 mircea_popescu yes. once keys are factored we have the privkey.
12:16 mxtm jeez
12:17 mircea_popescu yes.
12:17 mxtm that is quite major
12:22 mircea_popescu that is quite major. but it's not the half of it.
12:22 mircea_popescu more stuff to be announced here, later.
12:23 mircea_popescu ;;rated asciilifeform
12:23 gribble You rated user asciilifeform on Sat Nov 30 16:31:44 2013, with a rating of 3, and supplied these additional notes: S.NSA engineer..
12:24 mircea_popescu ;;rate asciilifeform 4 First man to factor a 4096 RSA key in the history of computing.
12:24 gribble Error: For identification purposes, you must be authenticated to use the rating system.
12:24 assbot [MPEX] [S.MPOE] 49144 @ 0.00026758 = 13.15 BTC [-] {2}
12:24 mircea_popescu !rated asciilifeform
12:24 assbot You rated user asciilifeform on 30-Nov-2013, with a rating of 4, and supplied these additional notes: He came up with the Cardano For Christmas marketing plan. Also phuctor..
12:24 asciilifeform eh waitup
12:24 mircea_popescu !rate asciilifeform 5 4 First man to factor a 4096 RSA key in the history of computing.
12:24 assbot Request successful, get your OTP: http://w.b-a.link/otp/f995623f9ad9fe6a
12:24 asciilifeform perhaps the ssl folks did
12:24 asciilifeform factor one
12:24 mircea_popescu i sign my lines, you sign your lines
12:25 asciilifeform l0k
12:25 mircea_popescu !v assbot:mircea_popescu.rate.asciilifeform.5:d27ae6467cd0fbd6f440b352f05f3a753c3bde57d60bac74172b5cf5cc0fd544
12:25 assbot Successfully updated the rating for asciilifeform from 4 to 5 with note: 4 First man to factor a 4096 RSA key in the history of computing.
12:39 assbot [MPEX] [S.MPOE] 65133 @ 0.00027838 = 18.1317 BTC [+] {3}
12:48 williamdunne Holy shit wel done asciii
12:50 asciilifeform williamdunne: 'first ecstacy, then laundry.' (al schwartz)
12:52 jurov asciilifeform: phuctor rejects this: https://pgp.mit.edu/pks/lookup?op=get&search=0x0E280B593F9A01F9
12:53 jurov i have verified my gpg 2 imports it
12:53 asciilifeform jurov: most peculiar. it is a valid rsa key.
12:53 mircea_popescu yeah now he has to do various shit.
12:53 asciilifeform no this is a good find, i will add it to the queue of three or four other mysterymeats
12:54 asciilifeform the only peculiar thing i can see in this key is the use of odd orcish hieroglyphs in the id string
12:54 asciilifeform but that shouldn't throw off my apparatus.
12:55 mircea_popescu lmao utf strikes again
12:55 mircea_popescu python strings alf. python strings.
12:57 * asciilifeform promises to investigate this oddity, and see if there are others like it, as soon as finishes current plate
13:00 mod6 <+mircea_popescu> yes. once keys are factored we have the privkey. << holy shit o.0
13:00 mircea_popescu ikr?
13:02 asciilifeform for the record, since folks were asking, much simpler than i thought,
13:02 asciilifeform we have schmuck-P; if one were to divide Π(∀n) by (schmuck-P ^ 2), result is J*K where J is $schmuck-Q and K is $otherschmuck-Q. thereby K*schmuck-P == otherschmuckmodulus.
13:02 asciilifeform no need to walk it.
13:04 mod6 lol, great work.
13:05 mod6 im stunned. very impressive.
13:05 mircea_popescu http://trilema.com/2015/full-disclosure-4096-rsa-key-in-the-strongset-factored/
13:06 asciilifeform that was fast.
13:06 mike_c mircea_popescu: good afternoon
13:07 mircea_popescu had to.
13:07 mircea_popescu mike_c just hte man i wanted to see
13:07 mike_c what can i do for you?
13:07 mircea_popescu say, can i has 728x90 bitbet banners ? and in some manner WITH the link, so i can put them on 8chan ?
13:07 mircea_popescu you get to use your own btc addy for referrals.
13:08 mike_c yeah, i can whip that up
13:08 mircea_popescu excellent.
13:09 mod6 wow! 231?!
13:09 * mod6 falls out of his chair
13:09 mxtm looooooooooooooool
13:09 mxtm yeah
13:09 mxtm that's great
13:09 Apocalyptic asciilifeform, mircea_popescu, congratulations
13:09 mod6 ^^
13:09 Apocalyptic this is quite stunning
13:10 mircea_popescu word.
13:10 mircea_popescu i am quite stunned myself.
13:10 mircea_popescu anyway, i do encourage everyone to try this themselves.
13:11 mxtm now what do we do with our GPG keys and GPG in general :(
13:11 Apocalyptic asciilifeform, isn't Π(∀n) the product of all the modulus treated by phuctor ? how do you get $schmuck-Q * $otherschmuck-Q by dividing it by (schmuck-P ^ 2) ?
13:12 mircea_popescu mxtm we check implementations to make sure they're conformant to spec.
13:12 mircea_popescu the spec is in no way broken by this.
13:12 mircea_popescu oh also - if anyone has a hacker news account or w/e - put it in.
13:13 asciilifeform Apocalyptic: you are correct, the formula is missing a step. but i will leave it as exercise.
13:13 Apocalyptic asciilifeform, that calculation makes sense if Π(∀n) is in fact the product of only the two modulus we're interested in
13:18 mats asciilifeform: seen this? https://factorable.net/weakkeys12.extended.pdf
13:19 asciilifeform mats: the ssl folks ?
13:19 asciilifeform i shat on them when we started out, because they published neither code nor results !
13:19 asciilifeform and i shit on them now.
13:19 mircea_popescu ^
13:19 mircea_popescu never happened (tm)
13:19 asciilifeform aha.
13:19 asciilifeform the paper is worth reading, it contains a bit of exposition on -how- a schmuck might end up with dupped privates
13:19 Apocalyptic asciilifeform, also I noticed that "Moduli waiting to test" number is updated quite regularly, why the running product displays the same number of digits for a while now, I guess it doesn't update as often ?
13:19 asciilifeform Apocalyptic: it gets updated when a batch is done
13:19 asciilifeform Apocalyptic: so you'll be waiting a few days
13:19 Apocalyptic s/why/while
13:19 asciilifeform ^ good question
13:20 asciilifeform answrs.
13:20 mircea_popescu optimized bubble-like process, was discussed in the logs iirc
13:20 mircea_popescu faster to pair them up.
13:20 asciilifeform we don't crap out the product often, it dances on the disk and slows things down
13:20 asciilifeform it lives in ram normally.
13:20 Apocalyptic understandable
13:20 asciilifeform (which is why the thing takes an ungodly time to revv back up after a cold boot)
13:21 deedbot- [Trilema] Full disclosure : 4096 RSA key in the strongset factored. - http://trilema.com/2015/full-disclosure-4096-rsa-key-in-the-strongset-factored/
13:23 davout https://news.ycombinator.com/item?id=9560790
13:24 asciilifeform aaaaand then there were 2.
13:24 asciilifeform http://nosuchlabs.com/stats
13:25 mats if that makes it to front page, prepare for an onslaught of 'mp is a pornographer and slaver'
13:25 mircea_popescu oh, well... this was powered by slave labour.
13:25 mircea_popescu ask anyone. such as stan.
13:25 mats asciilifeform: ya, wasn't sure if the link was the same paper you referred to earlier re: 'ssl folks'
13:25 jurov lol. and which machine was this? in odessa?
13:25 mircea_popescu ayup
13:25 mircea_popescu and holy shit.
13:26 mircea_popescu boys ? it ... it just found another.
13:26 mircea_popescu NOT the pair to the previous one.
13:26 mircea_popescu another PAIR
13:26 mod6 wow!
13:26 mxtm WHAT LOL
13:26 mod6 exponential ?!
13:26 mircea_popescu omfg strong set is rotten to the core.
13:26 mircea_popescu expo-fucking-nential.
13:26 mircea_popescu see, it needed a well loaded up P
13:27 davout hory shet
13:27 mircea_popescu asciilifeform is this 500 line py script published anywhere ?
13:27 asciilifeform which
13:27 asciilifeform the ugly www frontend ?
13:27 asciilifeform or werker
13:28 Apocalyptic wait, the worker is a python script ?
13:28 asciilifeform i don't recall if i posted it anywhere.
13:28 asciilifeform Apocalyptic: v1 was. but not this one
13:28 asciilifeform the thing that does the gruntwork is in c, uses gmp (as gpg uses)
13:28 Apocalyptic sound choice
13:28 asciilifeform the www front end is an ugly python hack
13:28 mircea_popescu werker
13:28 mircea_popescu ah ok
13:28 asciilifeform i posted werker in #b-a a few days after phuctor went public
13:28 asciilifeform no one commented
13:29 asciilifeform feel free to post somewhere
13:29 mircea_popescu asciilifeform plox put it as post on loper-os
13:29 asciilifeform the src specifically ?
13:29 mircea_popescu and yes, 2nd one also includes key in strong set.
13:29 asciilifeform mircea_popescu: sure, lemme cook up a ps0t
13:30 mircea_popescu ty
13:31 davout so 2 identified keys have been factored and 2 others have been factored, but not identified yet, right?
13:32 asciilifeform aha
13:33 Apocalyptic mircea_popescu, asciilifeform, will the second colliding prime be published ?
13:33 davout just publish them in chan, as they come, more log readership
13:33 davout :D
13:34 mircea_popescu Apocalyptic nah.
13:34 mircea_popescu just owner(s) announced.
13:35 mircea_popescu davout two pairs of gpg keys are known, in the sense that their pubkey modulus has been factored.
13:35 kakobrekla same p on second one?
13:36 mircea_popescu nope. 21 this time. why bother with a full length 77 when one could just use 7.
13:36 mircea_popescu faster.
13:36 Apocalyptic <mircea_popescu> just owner(s) announced. // once you have the owners name you can get their keys, and at that point it's trivial to compute the common prime factor
13:36 mircea_popescu (generally - since the gcd finally contains 3, it will be a massacre now for all the shitty keys)
13:36 mod6 21?!
13:36 mircea_popescu Apocalyptic announced PRIVATELY. of course.
13:36 mircea_popescu im not tellin' you.
13:37 Apocalyptic oh ok
13:37 davout mod6: digits?
13:39 mircea_popescu Apocalyptic from what i hear alf's contemplating sending them certs signed by their own key.
13:39 mircea_popescu he has a sense of humour like that.
13:39 Apocalyptic heh
13:39 mod6 proof in the pudding :]
13:40 davout mircea_popescu: best proof possible
13:41 davout !up bad_duck
13:41 mircea_popescu if anything shows the value of hard work and just sitting down and doing it, in the present environment of financial "futures" and just-in-time everything, this would be it.
13:42 davout !rated bad_duck
13:42 assbot You rated user bad_duck on 25-Mar-2014, with a rating of 1, and supplied these additional notes: encore une victoire pour canard.
13:42 mircea_popescu everybody could have tyold you gcd'ing is a waste of time and cycles.
13:42 mats http://mercemolist.net/2014/10/07/colofon-navaja-negra-la-clave-rsa-que-al-final-se-rompio/
13:43 mircea_popescu "que permitía romper una clave pública de 1024 bits en 20 minutos, con un simple portátil."
13:43 jurov http://www.reddit.com/r/technology/comments/36a3mu/today_a_4096_bit_rsa_key_was_factored_more_coming/
13:44 mircea_popescu http://log.bitcoin-assets.com/?date=15-05-2015#1132661
13:44 assbot Logged on 15-05-2015 04:11:23; mircea_popescu: (for they following at home : 4x as many bits does not mean 4x as large numbers. when computer registers went from 32 to 64 bits, maxint went from 2147483647 to 9,223,372,036,854,775,807)
13:44 mircea_popescu you know, just a line down from where i say "i have my doubts 4096 keys will EVER be factored."
13:44 bad_duck davout: thx
13:44 mircea_popescu of course, i was not contemplating nonsense of this sort.
13:44 asciilifeform http://www.loper-os.org/?p=1504
13:45 davout bad_duck: you should be able to !up yourself in PM with assbot
13:45 asciilifeform jurov: i'm waiting for the apocalyptic 'omg1111111111!!!111 pgp broken, seppuku now' stampede
13:45 davout hahaha, reddit is downvoting it
13:45 davout http://www.reddit.com/r/Bitcoin/comments/36a1m2/full_disclosure_4096_rsa_key_in_the_strongset/
13:46 mircea_popescu lol.
13:46 davout if(matters) { downvote } else { moon_moon_moon }
13:46 jurov more like "mircea popescu t3h ev1l"
13:46 mircea_popescu what do i have to oh
13:46 mircea_popescu cause of trilema ? ookay.
13:48 davout because paywall...
13:48 mircea_popescu the supreme irony of which being, that you have to be a fairly frequent reader to hit the paywall.
13:49 davout precisely
13:49 jurov of be behind NAT with an reader
13:49 jurov *or
13:49 mxtm wait
13:49 mircea_popescu i guess, yeah.
13:49 mxtm apparently, luckier
13:49 asciilifeform the article on my www (earlier link) contains link to 'werker'
13:49 asciilifeform for curious folks
13:49 mxtm is that supposed to be a hint at the number
13:49 asciilifeform l0l
13:50 mircea_popescu mxtm no, it's just that having maintained control over the box i feel no need to divulge anything.
13:50 mxtm gotcha
13:50 mats re: previous es link, it appears openssl at some point did not check whether factors were weak
13:50 asciilifeform mircea_popescu: at this point i must note that i have no idea if i'm connected to shakespeare or another man by the same name, when i talk to dulap
13:50 mircea_popescu mats gpg always did afaik, special algo foir this
13:50 assbot [MPEX] [S.MPOE] 15306 @ 0.00028464 = 4.3567 BTC [+]
13:50 asciilifeform the box, if it had been purloined and returned, has yielded up its private ssh key to enemy
13:51 mircea_popescu asciilifeform why, no openssl ? :D
13:51 mircea_popescu you can make another one.
13:51 asciilifeform make other one by taking airplane ?
13:51 mircea_popescu make another one while ssh'd in :D
13:51 asciilifeform or by asking ft meade, where the process lives now, to do it
13:51 asciilifeform if it was stolen - it remains stolen
13:51 asciilifeform sorta how one can't un-fuck goat
13:52 asciilifeform take a minute to think
13:52 mircea_popescu APPRECIATE MY SARCASM GOD DANGIT
13:52 asciilifeform l0lz
13:52 * asciilifeform appreciates. commenting re: 'maintained control'
13:52 mircea_popescu http://trilema.com/2015/full-disclosure-4096-rsa-key-in-the-strongset-factored/#comment-114210 << the problems of people.
13:53 jurov just use cpanel to replace the ssh key, no?
13:53 mircea_popescu ^^^
13:53 mircea_popescu voted most likely to succeed perianne.
13:55 asciilifeform so far this is nothing.
13:55 mircea_popescu davout hit a reload, went from 2 points by davout 8 minutes ago to 49 points by davout 35 minutes ago | 11 comments
13:55 asciilifeform wait till we find the boobytrapped pgptron that is responsible for the $smallint factors.
13:56 mircea_popescu asciilifeform very curious, because i always suspected you know "older versions"
13:56 mircea_popescu well... shit man, older versions don't really do 4kb keys
13:56 trinque holy phuctor
13:56 asciilifeform gonna guess it's a creative bug where pollard-rho -must- fail to pass
13:56 davout asciilifeform: what's the version string on the key?
13:56 asciilifeform which one
13:57 jurov phuctor discards comments, i guess
13:57 asciilifeform jurov: actually sks does
13:57 assbot [MPEX] [S.MPOE] 52218 @ 0.00028491 = 14.8774 BTC [+] {2}
13:58 mircea_popescu yeah, sks cuts comments.
13:58 mircea_popescu this, tbh, is a good move, because : someone came up with the fucktarded idea of adding "visual" identity to keys. as if i can tell one whore from another on the basis of a 5kb icon.
13:58 asciilifeform i was never strongly interested in the version strings. anyone can write what he wants.
13:58 asciilifeform it isn't even signed
13:58 mircea_popescu allowing comments means you can't have fixed width tables, which ffs.
13:59 asciilifeform i can change yours to 'pgp over dead goat' and it'll parse.
13:59 jurov http://thetrendythings.com/read/27592 << snatched verbatim
14:00 mircea_popescu also this.
14:00 mircea_popescu jurov lots of these republishing things. i think it's some business major's idea of web entrepreneurship
14:00 asciilifeform https://news.ycombinator.com/item?id=9560961
14:01 asciilifeform ^^^
14:01 asciilifeform !
14:01 asciilifeform achtung, panzers
14:01 mats hey, they preserved links to the original thing.
14:01 mircea_popescu asciilifeform i know.
14:01 mircea_popescu what did you think the considerations were.
14:02 asciilifeform https://news.ycombinator.com/item?id=9560990
14:03 mxtm woah, i didn't know that hpa was
14:03 mxtm THE peter anvin
14:03 trinque so... gpg's used by kernel devs to sign patches, eh?
14:04 trinque oh man he's the maintainer of kernel.org?
14:04 mxtm used to be
14:04 mxtm and like his name used to show up on syslinux
14:04 trinque that's... incredible
14:04 mxtm everything that used syslinux
14:04 mxtm it would be like
14:04 mxtm SYSLINUX PETER ANVIN
14:04 mircea_popescu sadly.
14:07 asciilifeform wai wut
14:07 * asciilifeform was off reading wankatron threads on hn, reddit
14:07 mircea_popescu asciilifeform i thought you were banned on graham-altman propertiesd
14:07 asciilifeform did we just nuke a known fella
14:07 asciilifeform mircea_popescu: my -site- iirc was banned.
14:07 mircea_popescu ah ah
14:07 mircea_popescu you were banned on wikipedia, for being a spammer, i recall now.
14:07 asciilifeform i'm a little surprised that trilema wasn't
14:08 mircea_popescu https://news.ycombinator.com/item?id=9560993 << independently confirmed
14:09 mod6 nice
14:09 davout http://log.bitcoin-assets.com/?date=17-05-2015#1134868 <<< did that for a deed, got trinque all worked up, 'whoa, you really do GPG on an atari box??'
14:09 assbot Logged on 17-05-2015 17:59:08; asciilifeform: i can change yours to 'pgp over dead goat' and it'll parse.
14:09 trinque haha
14:09 trinque twas win 3.11, I remember
14:09 mircea_popescu "In the army battle field tactical communication are handle by streaming ciphers on the radio. The idea is not to be impossible to breach. But strong enough that time is on your side"
14:09 mircea_popescu experts :D
14:10 mircea_popescu !up d34th
14:10 d34th thanks, its been a while since i've been in here
14:10 mircea_popescu how do you like the world outside ?
14:11 d34th its a dark and dangerous place
14:11 mircea_popescu lol
14:11 mircea_popescu http://trilema.com/2015/full-disclosure-4096-rsa-key-in-the-strongset-factored/#comment-114212 << apparently the ddos guy is still lurking.
14:12 mircea_popescu gotta update that post.
14:12 mircea_popescu actually i guess just the comment will do.
14:13 mircea_popescu !up dandelany
14:13 williamdunne To this day I have not had my connection drop, the wired connection has remained solid without dropping. Maybe I'm just lucky and ddos guys like me?
14:13 mircea_popescu Server Load0.45 << kinda funny to watch trilema iron.
14:14 mircea_popescu williamdunne i dunno what exactly he does, but if people are complaining it must be something.
14:14 trinque it has happened to me on occasion
14:14 d34th mircea_popescu: question about the working is it cpu based or opencl
14:14 trinque not since cloaked and getting a new IP from the ISP
14:14 mircea_popescu d34th you mean phuctor ? it's cpu
14:14 mircea_popescu !up kmq
14:15 d34th i have a few cores i could donate
14:15 davout it would probably make sense for the phuctor to start munching SSL certs as well
14:15 mircea_popescu d34th you wanna do something, do the same with ssl certs.
14:15 mircea_popescu openssl is dead for us here./
14:15 asciilifeform see link by mats earlier
14:15 asciilifeform re: openssl
14:16 asciilifeform (it was, purportedly, done, by a bunch of academitards who refuse to publish any results)
14:16 mircea_popescu !up fgeek
14:16 mike_c mircea_popescu: banner created. http://www.btcalpha.com/bb_ad.png?height=90
14:17 mircea_popescu mike_c how do i get what url it needs to link to ?
14:17 asciilifeform incidentally, folks asking 'how does it work' can go to my site & read the fucking src now
14:17 asciilifeform the relevant bit is posted
14:17 davout mircea_popescu: it would be better for the phuctor itself to do it
14:17 mircea_popescu you can just import the P ?
14:17 mircea_popescu it's published for this reason.
14:17 davout or i guess yes, GCD the running product once in a while
14:17 asciilifeform this is a point, if you convert your ssl or whatever rsa key to pgp format,
14:17 asciilifeform you can throw it in the pot with the rest.
14:18 mircea_popescu ^
14:18 asciilifeform ditto ssh
14:18 mircea_popescu in other news, how does a server look while trending on everything ? like so :
14:18 mircea_popescu CKKC_CKC__._CKKKKWKKKK__KK_KKK___KKKK___C_KKC_KK___C_K.WWK._K__.
14:18 mircea_popescu .KK_WCCC__K___CK_KKKK___K__C__C_KW_C_KK_K_KWK__C_CKC_W___.CK_KCK
14:18 mircea_popescu KC_K_K__C_K_____K_______K_K_K____________K_..._.................
14:18 mircea_popescu .............K..................................................
14:18 davout asciilifeform: it doesn't parse plain rsa keys?
14:18 asciilifeform (please don't throw in private key. i will -not- get it back out for you)
14:18 asciilifeform davout: nope. applies pgp parser 1st
14:19 asciilifeform -possibly- if folks ask nicely i will add a 'throw modulus raw' thing
14:19 asciilifeform but right now the display apparatus expects all moduli to be associated with pgp keys
14:19 asciilifeform (one or more)
14:20 mike_c I have a script that will do it, not sure if you can use that for your ads? If not, we could either pick a specific bet to promote and link it to that, or link to homepage.
14:20 williamdunne mircea_popescu: What do the CKW__.s mean?
14:20 asciilifeform does one of you ad folks wanna make a commemorative banner for this occasion ?
14:20 asciilifeform 'we broke a 4096 key, read how'
14:20 asciilifeform etc
14:21 davout lol, good idea
14:21 mircea_popescu williamdunne "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process
14:21 mircea_popescu mike_c you see how the 8chan ads work ?
14:21 asciilifeform https://en.wikipedia.org/wiki/Hans_Peter_Anvin
14:22 mircea_popescu i pass a base64 img wrapped in a tags. could you maybe make it be the same and i just forward it ? dunno.
14:22 asciilifeform then again, is it 'him' or 'another shakespeare'
14:22 asciilifeform anybody got any material signed by anvin ?
14:22 davout few extra features to implement for the phuctor... also nice to have: "throw list of URLs at it, it fetches the SSL cert and tries to factor it"
14:22 mircea_popescu davout yeah cuz we're so totally out of material to squeeze atm :D
14:22 asciilifeform l0l aha
14:22 mike_c mircea_popescu: iframe?
14:22 mircea_popescu run out of geyser oil, gotta go to fracking.
14:22 davout yo
14:23 trinque asciilifeform: https://lwn.net/Articles/461236/ ?
14:24 mircea_popescu mike_c https://8ch.net/btc << see what it imports from trilema.com
14:25 williamdunne mike_c: could work just as well as an <img src="something.php"/>
14:25 mircea_popescu nice one trinque
14:25 trinque mircea_popescu: pretty lulzy
14:26 asciilifeform trinque: 0xBDA06085493BACE4
14:26 assbot [MPEX] [S.MPOE] 35469 @ 0.00028515 = 10.114 BTC [+]
14:26 mircea_popescu asciilifeform https://news.ycombinator.com/item?id=9561045 << please be warned about my kthx
14:27 mike_c mircea_popescu: ok, i can make something like that. headed to a bbq right now, I'll get it going tonight.
14:27 mircea_popescu thanks!
14:27 mike_c mircea_popescu, asciilifeform: awesome work guys :)
14:27 mircea_popescu mostly him.
14:28 jurov https://news.ycombinator.com/item?id=9561091 interesting
14:29 Apocalyptic asciilifeform, it so happens that $shmuck-Q is actually not a prime as well
14:29 mircea_popescu nothing is a prime anymore ;/
14:29 asciilifeform jurov: i was suspecting a spurious key
14:30 asciilifeform or corrupt sks
14:30 mircea_popescu interesting.
14:30 mircea_popescu anyone feel like running a -v -v over the thing ?
14:31 mircea_popescu curious what the actually useful output is.
14:32 mircea_popescu https://news.ycombinator.com/item?id=9561049 << also this.
14:33 mircea_popescu seems the guy was maybe being attacked or something ?
14:33 asciilifeform http://dpaste.com/3R5JRKD.txt << i get this
14:34 jurov double verbose: http://live.coinbr.com/images/hpa.txt
14:35 asciilifeform me thinks we may have found a mouse hill.
14:35 asciilifeform who's got the mouse spray
14:35 d34th asciilifeform: http://dpaste.com/218K4BV.txt
14:36 mircea_popescu so this is a manufactured subkey that was somehow uploaded to sks and merged into the guy's key but not necessarily used or even issued by him ?
14:37 asciilifeform https://news.ycombinator.com/item?id=9561158
14:38 trinque deedbot-: http://dpaste.com/3XT5Z9F.txt
14:39 mircea_popescu incidentally... how likely is it that this behaviour is emergent, which is to say, you can't import the weak key ANYMORE ?
14:39 deedbot- accepted: 1
14:39 mircea_popescu possible at all even ?
14:39 asciilifeform mircea_popescu: quite possibly it was diddled -in order to- create this effect.
14:39 mircea_popescu hm
14:39 asciilifeform then again, what would they gain ?
14:39 asciilifeform the subkey is skipped
14:39 asciilifeform so what
14:39 asciilifeform the rest of it gets sucked in
14:39 mircea_popescu how would i know that
14:39 asciilifeform anything anvin signs with his actual key, should still validate
14:39 mircea_popescu no idea.
14:39 assbot [MPEX] [S.MPOE] 26900 @ 0.00028395 = 7.6383 BTC [-] {2}
14:42 trinque jurov: so yours imported the subkey?
14:43 jurov no, rejected, scroll to the bottom
14:43 trinque ah I see it; different output than mine
14:43 jurov i asked it to be twice as verbose
14:44 trinque yeah I did -v -v
14:44 trinque maybe different versions
14:44 asciilifeform at the moment it looks like sks bit rot is responsible
14:44 * ben_vulpes is late to the party http://dpaste.com/27W05C2.txt
14:45 asciilifeform anybody got his original published key ?
14:45 asciilifeform the one for which the sigs verify
14:45 asciilifeform (anvin's)
14:45 mircea_popescu ^
14:45 mircea_popescu !up anig
14:45 asciilifeform (and we haven't even begun the other 3 poor schmucks)
14:45 mircea_popescu because we have a year-old snapshot and it doesn't look different.
14:45 mircea_popescu asciilifeform i wonder if this is reproducible, make sks servers display random data as people's subkeys.
14:46 mircea_popescu definitely not what's expected from / implied by the listings, but who knows.
14:46 asciilifeform seems like a bit of a tall order to believe that anvin was struck by a lucky cosmic ray
14:46 asciilifeform this 'uncle' is 'too rich' to die a natural death
14:46 asciilifeform too many hungry heirs
14:47 mircea_popescu even from a purely operational standpoint - it'd seem sks servers have all the interest in the world to reject such broken keys rather than publish them, carry them in db etc
14:47 asciilifeform afaik they don't check
14:47 mircea_popescu weird.
14:47 asciilifeform (if anyone can disprove this, please wake me up)
14:47 asciilifeform mircea_popescu: we're #1 on hn btw
14:48 mxtm wow
14:48 asciilifeform https://news.ycombinator.com/item?id=9561179
14:49 mxtm noice
14:49 mircea_popescu couldn't have happened to better people.
14:49 asciilifeform 'Here's what's going on: There are a number of keys on the keyservers that are faulty copies of real keys - they share most of the values, but have some errors. I don't exactly know why that is happening, but I assume it's because of network transmission errors or server crashes during transmissions. These keys don't really do any harm. ...'
14:49 asciilifeform l0l
14:49 mxtm wat
14:49 asciilifeform https://eprint.iacr.org/2015/262 <<< aaad we got a plagiarist
14:50 mircea_popescu i am not sure how much of this to believe.
14:50 mircea_popescu asciilifeform so what exactly is this, ft meade damage control ?
14:50 asciilifeform obligatory:
14:50 asciilifeform http://log.bitcoin-assets.com/?date=04-06-2014#700916
14:50 assbot Logged on 04-06-2014 00:08:26; asciilifeform: BingoBoingo: the buggers' traditional defense is to pretend that the event was a non-event - or, if this is impractical, to continue living in an imaginary world where they 'scooped' the story first, and all of the 'unsanctioned' discussion never happened.
14:50 asciilifeform fuck
14:50 asciilifeform '04-06-2014 00:08:26 <asciilifeform> BingoBoingo: the buggers' traditional defense is to pretend that the event was a non-event - or, if this is impractical, to continue living in an imaginary world where they 'scooped' the story first, and all of the 'unsanctioned' discussion never happened.'
14:50 mircea_popescu !up irkki
14:51 mats assbot lives
14:51 mircea_popescu slow, but here.
14:52 asciilifeform https://news.ycombinator.com/item?id=9561212
14:53 mircea_popescu asciilifeform lol dude's story is that he's replicated the results of phuctor since late march ?
14:53 mircea_popescu mmmmkay.
14:53 mircea_popescu brave of him to come out like that lol.
14:56 mircea_popescu !up fufu
14:57 mircea_popescu !up tmp6548
14:57 mircea_popescu !up spockywocky
14:57 mats hello visitors
14:58 kakobrekla prolly ddosed to moon
14:58 mircea_popescu strange, our fortress has a moat, provided free of charge by "the enemy"
14:59 tmp6548 Hi all
14:59 ben_vulpes asciilifeform: who is hanno's sponsor?
15:00 mats http://www.codereversing.com/blog/archives/226 >> 'Nop Hopping: Hiding Functionality in Alignment'
15:01 asciilifeform ben_vulpes: feel free to dig. i can't be bothered.
15:01 trinque https://hboeck.de/
15:02 ben_vulpes found that, yeah
15:02 asciilifeform mats: jumping into the middle of an instruction is as old as time
15:02 * ben_vulpes is still sobering up from last nights revelry
15:02 mircea_popescu freelance journo/whatevs. doubt there's sponsors in the classic sense.
15:02 asciilifeform mats: classic vx-er trick
15:02 mircea_popescu "The results I worried about, millions of children running Windows on the OLPC, have not occurred. Instead we see millions of children running Windows on the Intel Classmate."
15:02 mircea_popescu poor rms.
15:05 asciilifeform incidentally, anybody want to take the time to walk the sks set and check for 'skipped...' ?
15:05 asciilifeform 'there is never kitchen with single cockroach'
15:05 ben_vulpes * BingoBoingo though doing an honest assessment finds a person who can reasonably keep up in a lot of #b-a convos but who can't program for shit. And honestly... training to trade punches seems much easier than learning to program on any level approaching asciilifeform, ben_vulpes, and mod6. << you could catch up to me in rather short order
15:07 mircea_popescu !up fche_
15:07 ben_vulpes asciilifeform: 'caltrop' << how does the tossing of control bits affect output?
15:08 asciilifeform ben_vulpes: you won't see certain bytes in the output
15:08 asciilifeform ben_vulpes: i specifically warned you not to use an rs232 dongle. don't be surprised when output fails a number of tests.
15:08 ben_vulpes so if the device randomly cooks up a control sequence that will get ripped out?
15:08 asciilifeform at all times.
15:08 ben_vulpes aha
15:09 asciilifeform 'everything can be as simple as possible, but not simpler' (TM) (R)
15:09 davout asciilifeform mircea_popescu is the same 'skipped' behaviour observed when importing the second broken key?
15:09 mircea_popescu and then, as that's ripped out, some tests will find the entropy not as good
15:09 mircea_popescu davout tis on the list of things to do, but it is a long list
15:09 ben_vulpes i am not as malbec immune as davout thinks
15:09 mircea_popescu !up yang
15:10 yang hi
15:10 mats asciilifeform: as a new dog i must learn old tricks
15:10 mircea_popescu ello
15:10 mats asciilifeform: this in particular wasn't new to me but nonetheless i shared
15:10 ben_vulpes mats: as a new dog i must piss on each and every electric fence
15:10 davout mircea_popescu: it'd be really interesting to know, it's a gpg --recv-keys | grep skipped away
15:10 mats asciilifeform: it hurts ma ego everytiem i get a 'old fucking news'
15:10 asciilifeform ben_vulpes: it'll be especially puzzling because you won't immediately know why it fails, given as you debiased the bits
15:11 asciilifeform (you did, didntcha?)
15:11 ben_vulpes workin on that part
15:11 asciilifeform so the missing value in the output won't be, e.g, 13
15:11 asciilifeform it'll be a pattern.
15:11 mircea_popescu davout yes but honestly i'd rather let it work some more first.
15:12 mircea_popescu asciilifeform ben_vulpes a fine example of the perils of "whitening".
15:12 asciilifeform just as i said then
15:12 asciilifeform mircea_popescu: got a link to your article quoting that day's convo ?
15:12 asciilifeform i've misplaced it
15:12 asciilifeform the one with rs232 link
15:12 mircea_popescu you can't fool mother nature. nevertheless, it is more than happy to sell you the tools by which to fool yourself.
15:12 mircea_popescu lemme look
15:13 asciilifeform filed somewhere under s.nsa iirc
15:13 mircea_popescu oh ya 1 sec
15:13 mircea_popescu http://trilema.com/2013/unsorted-collection-of-various-cardano-related-updates-spurious-pics/#selection-771.0-773.42
15:14 mircea_popescu !up xaxs
15:14 asciilifeform ty mircea_popescu. that's the one.
15:14 asciilifeform ben_vulpes ^^^^
15:16 * ben_vulpes reads...again
15:16 decimation asciilifeform: so did the sks server at one point accept anvin's key and then later bitrotted it?
15:16 decimation cause I thought there was a checksum
15:16 mircea_popescu this seems the most ... "nothing happened, go back to sleep"-benign theory.
15:17 mircea_popescu it seems tempting, tho there are sticking points. but in any case, as phuctor progresses we'll get a better idea.
15:17 mircea_popescu now that it has 3, 7, 11 etc in the P it will find all these.
15:17 decimation doesn't the sks server check before shitting public key?
15:17 decimation 'oh I got a bad key'
15:17 mircea_popescu more on point, would you expect they STORE bad keys ?
15:17 trinque incidentally dieharder has been busted in gentoo for at least two months
15:17 mircea_popescu why ? space is an issue, right ?
15:17 mircea_popescu trinque how ?
15:18 trinque I'm trying to figure out why it wont build
15:18 mircea_popescu heh.
15:18 decimation apparently because of their political stance (all gpg keys must be public and stored for all time)
15:18 ben_vulpes trinque: so it's not me!
15:18 asciilifeform they store them, easily enough, by never checking
15:18 mircea_popescu !up referredbylopero
15:18 asciilifeform l0l it cuts the nicks
15:18 mircea_popescu decimation doesn't that stance open them to incredible ddos ?
15:18 decimation heh yeah sure does
15:18 mircea_popescu i mean, if the claims is accurate, what's to keep me from making anyone's sks profile 1 gb long ?
15:18 decimation I don't think anything
15:19 mircea_popescu full of 1mn such pubkeys ?
15:19 ben_vulpes trinque: how does one go about walking the history of portage?
15:19 trinque ben_vulpes: you can always build a specific version provided the ebuild is still available in portage by emerge =category-name/thing-0.1.2
15:19 trinque this underscores the need to archive /usr/portage/distfiles
15:20 decimation well, I guess if you want your 'roster of people' to be a combination of legal record and bathroom graffiti, they got you covered
15:20 asciilifeform ^
15:20 trinque and probably the portage tree itself
15:20 mircea_popescu decimation anyway, we'll know more / anything of actual substance once the guy himself answers.
15:21 asciilifeform https://news.ycombinator.com/item?id=9561305
15:22 mircea_popescu and we'll have a pretty decent picture once phuctor's done walking the set, which looks like a coupla months
15:22 decimation indeed. I'm off on a home improvement project, good luck with the ramblig mob that's gonna come by
15:22 mircea_popescu asciilifeform the man has a good point.
15:22 asciilifeform very much
15:22 asciilifeform why not one of the guests is speaking, l0l
15:22 asciilifeform all ddosed ?
15:23 davout HN now displays "Why Japanese Toilets Are Failing in America (2013)" higher than this
15:23 trinque lol this is now #20
15:23 trinque for me
15:23 asciilifeform davout: pg has an override button that is used very frequently and with scarcely any subterfuge
15:23 asciilifeform (most folks know)
15:24 mircea_popescu davout what diff does it make lol.
15:24 davout none, just a random observation :D
15:24 asciilifeform i recommend that someone who cares, snapshot the thing before it vanishes entirely
15:24 asciilifeform assuming anyone cares.
15:24 davout I was thinking time-decay algo
15:25 trinque jumped from #1 to #20 abruptly for me
15:25 mircea_popescu asciilifeform https://archive.is/08Ylu there
15:26 trinque I've been refreshing
15:26 asciilifeform neato
15:26 mircea_popescu what was it that wiped an article badly leaving it still sorta-visible ?
15:26 mircea_popescu was it reddit i think ?
15:26 asciilifeform reddit
15:26 asciilifeform re: blocksizewarz
15:26 asciilifeform it was mega-lulzy
15:26 asciilifeform because the 'hand of smiting' was visible
15:26 trinque tendrils everywhere
15:28 mircea_popescu oh right right
15:29 asciilifeform iirc there's a full copy of it on mircea_popescu's www
15:29 mircea_popescu was like "we have consensus and therefore will delete your reddit thread proving the contrary. because this will totally work, you being some derps who depend on the graham lulzatron"
15:29 mircea_popescu then it... didn't work.
15:30 mircea_popescu whether that proves the contrary, or for that matter whether the contrary needs any proof... exercise for reader.
15:31 ben_vulpes https://news.ycombinator.com/user?id=throwaway2391 << bobby boy do i have to smack you again?
15:32 mircea_popescu !up JPT
15:32 ben_vulpes can you hear me major tom...
15:33 JPT Thank you
15:33 mircea_popescu sure. who're you ?
15:33 JPT I decided to read along a little since it got to me that some rsa keys were broken ;)
15:33 mircea_popescu aha. enjoy.
15:33 asciilifeform ben_vulpes: https://news.ycombinator.com/item?id=9561398
15:34 mircea_popescu ;;bc,stats
15:34 mircea_popescu !up delan
15:34 gribble Current Blocks: 356889 | Current Difficulty: 4.880748724468138E10 | Next Difficulty At Block: 358847 | Next Difficulty In: 1958 blocks | Next Difficulty In About: 1 week, 4 days, 6 hours, 4 minutes, and 8 seconds | Next Difficulty Estimate: 52452025482.1 | Estimated Percent Change: 7.46717
15:35 mircea_popescu so in also newsworthy : between yesterday and today there has been a shitton of hashpower added
15:35 mircea_popescu enough to push the estimate up 5 points.
15:35 asciilifeform any public comment on who/why ?
15:36 mircea_popescu no. and obviously, "the process is inherently dirty" etc. nevertheless...
15:36 mircea_popescu something came online.
15:36 asciilifeform perhaps the first batch of those cable boxes.
15:36 mircea_popescu lol. no fucking way.
15:36 asciilifeform eh howthefuck would i know. but why not.
15:36 mircea_popescu tosoon dude. how fast do you think that can be deployed.
15:37 asciilifeform yesterday - if they were baked a month ago
15:37 mircea_popescu not even designed yet.
15:37 asciilifeform it srsly isn't hard
15:37 mircea_popescu !up sharp0_
15:37 asciilifeform none of this shit is hard
15:37 assbot [MPEX] [S.MPOE] 47600 @ 0.00028283 = 13.4627 BTC [-]
15:38 mircea_popescu nothing is hard. nothing gets done. ya know ?
15:38 trinque lol dieharder has been rotting for a year on both redhat descendants and gentoo
15:38 asciilifeform trinque: wai wat ?!
15:38 trinque https://bugzilla.redhat.com/show_bug.cgi?format=multiple&id=1106140
15:39 asciilifeform as in, won't build at all ?
15:39 asciilifeform or just as ebuild
15:39 mircea_popescu trinque only terrorists would want to test their rngs.
15:39 trinque yeah I'm figuring out a patch
15:39 davout asciilifeform: just because something is easy for a guy with 200 IQ doesn't mean it's as easy for two dudes with 100 IQ
15:39 trinque just missing an include
15:39 trinque for intptr_t
15:39 trinque blowing up inside glibc
15:39 asciilifeform davout: no, i meant that it is actually not hard. as in, go and read definition for sha256
15:39 asciilifeform not rocket surgery
15:39 mircea_popescu THAT is hard.
15:39 davout just teasing :D
15:39 trinque asciilifeform: https://bugs.gentoo.org/531268
15:40 mircea_popescu half the "literate" population can't even read trilema because "it's too hard" and words hurt their brain
15:40 davout only action can be hard as only action can oppose resistance
15:40 asciilifeform mircea_popescu: they won't read it because it makes them want to eat a luger
15:40 asciilifeform this is understandable
15:40 trinque gotta already want to eat a luger when you find trilema :p
15:40 mircea_popescu !up KeesH
15:40 mircea_popescu lol
15:41 asciilifeform perhaps it needs a 'cum se suge luger' article
15:41 mircea_popescu lmao
15:41 mircea_popescu you know that's to this day one of the most popular articles ? i dunno what's with them ppls.
15:41 trinque ok I fixed the dieharder build on gentoo
15:41 asciilifeform like my 'clojure' article aha
15:42 asciilifeform trinque: congrats. post plz
15:42 trinque yeah I'll make a patch
15:42 trinque just missing an include
15:42 asciilifeform (mine was built in '11 and never touched since)
15:42 mircea_popescu https://news.ycombinator.com/item?id=9561212 << THAT comment needs to go. lol.
15:43 mircea_popescu funny how targetted them folks are.
15:43 asciilifeform aha
15:43 asciilifeform wondered if anyone will notice
15:43 ben_vulpes <mircea_popescu> most she-haters i know are womenz. << girl last night pointed out that all of her worst clients (she's a physical therapist, deals with highly athletic folks coming to terms with their now-reduced performance envelopes) are women
15:43 davout oh god srsly, white on white
15:43 delan mircea_popescu: grats to you and loper on factorising hpa’s key
15:43 delan I really hope my keys’ factors are /actually/ prime
15:43 mircea_popescu delan myeah. one shouldn't have to hope on this score, but then again here we are.
15:43 asciilifeform delan: the good news is, that it remains possible to do arithmetic whether or not anyone grants permission. go and run test on your own
15:43 mircea_popescu arithmetics drm, now that's an idea.
15:43 asciilifeform delan: imagine, the entire 'international community' and obama himself can't stop you from running euclid.
15:44 asciilifeform much as they might like to.
15:44 mircea_popescu actually, a fully-explicit "how to extract your rsa moduli as numbers, and how to test things" write-up may be a good use of someone's time.
15:44 asciilifeform it'll be a backbreaker on account of rolling in rfc2440
15:44 mircea_popescu !up wowPGP
15:44 asciilifeform but if we say 'use a tool' then 'pgpdump'.
15:45 mircea_popescu asciilifeform hence "may"
15:45 assbot [MPEX] [S.MPOE] 39350 @ 0.0002841 = 11.1793 BTC [+] {3}
15:45 mircea_popescu mopre like a training exercise for younguns looking to get shellshocked by "free software"
15:45 asciilifeform iirc no extant pgptron includes this functionality
15:47 mircea_popescu asciilifeform tbh i find the "broken in transit" explanation offered by the back to sleep camp particularly ridiculous.
15:47 mircea_popescu seriously, some bits got changed ? and what archive still extracted , no problem ?
15:47 mircea_popescu no checksums even, no crypto, nothing at all ?
15:47 mircea_popescu who is this supposed to persuade, exactly ?
15:49 davout the real thing here would be to actually find a GPG implementation that does not run the check that leads normal ones to simply discard this key
15:49 delan something fishy going on — http://puu.sh/hQVmI/b85c9c57d0.png
15:50 delan probably getting nuked
15:50 mircea_popescu davout how would you know it is even publicly accessible ?
15:50 mircea_popescu maybe this is paort of a tandem with specific userland diddling.
15:51 mircea_popescu which would neatly explain why it HAS TO stay on sks servers.
15:51 mircea_popescu victim gets nsa-something or the other, gets the "key", etc.
15:51 asciilifeform aha.
15:51 asciilifeform the choice of victim is very telling
15:51 mircea_popescu i meant the REAL victim.
15:51 asciilifeform i should like to get a list of -everything- he 1) signed 2) public is running
15:51 mircea_popescu some guy trying to do something or the other with softwasre.
15:51 mircea_popescu asciilifeform debian.
15:51 asciilifeform then we have our corpse.
15:52 ben_vulpes conspiraci!
15:52 mircea_popescu i am definitely suspicious of this entire tower of mirrors made of shit.
15:52 mircea_popescu "oh, it's not really what it seems, fart fart"
15:52 asciilifeform the buggers' only defence
15:52 asciilifeform is the fart cloud.
15:53 asciilifeform expect it to thicken, thicken.
15:53 mircea_popescu anyway, im not entirely sure we might ever see the diddled gpg that goes with this didlded key to produce anything interesting
15:53 mircea_popescu but if we do see it, im definitely publishing the story.
15:53 davout mircea_popescu: yup, not saying it's possible, saying that would be definitive proof
15:53 mircea_popescu it would be, yes, if it were to somehow be found.
15:54 asciilifeform actually the necessary diddle would be small:
15:54 asciilifeform anything that doesn't check self-sigs.
15:54 davout yep, not saying anything more
15:54 asciilifeform probably includes at least one 'www-based' pgptron
15:54 mircea_popescu asciilifeform nah, i suspect it's more subtle than that.
15:54 asciilifeform subtle bug triggered by really terrible keys?
15:54 asciilifeform also possible
15:54 mircea_popescu there's a long tradition of "must fail to pass" bullshit seen in the wild, and allegedly not originated by nsa
15:54 asciilifeform perhaps even remote exec
15:55 mircea_popescu for all you know this is the magic packet required to X.
15:55 asciilifeform somebody wanna copy cryptome on this ?
15:55 mircea_popescu im letting things settle for a day and plan to write a follow-up.
15:56 mircea_popescu !up referredbyloper
15:56 asciilifeform speaking of which, mega-l0l (unrelated) - http://cryptome.org/2015/05/william-mcneilly.pdf
15:57 asciilifeform 'This contains references to CB8890: The instructions for the safety and security of the Trident II D5
15:57 asciilifeform strategic weapon system. I'm sure all the Strategic Weapon System (SWS) personnel are scratching
15:57 asciilifeform their heads and wondering how I'm writing this on my personnel laptop and referencing a book,
15:57 asciilifeform which is contained within a safe in the Missile Control Centre (MCC). The MCC is the
15:57 asciilifeform compartment used to control the launch of the nuclear missiles. It can only be accessed by people
15:57 asciilifeform on the access list, and no personnel electronics are allowed. I was on the access list but how could I
15:57 trinque asciilifeform: http://dpaste.com/1XXN25S.txt << nothing too crazy
15:58 asciilifeform have gotten a copy of every single chapter on to my phone? A hidden camera? No. Smuggled the
15:58 asciilifeform book out then filmed it? No. What I did was walk into a room were no recording devices are
15:58 asciilifeform allowed. I sat down; took my Samsung Galaxy SII (white) out of my pocket, and recorded the entire
15:58 asciilifeform book word for word. I held the phone still, about a foot in front of my face and anyone who looked
15:58 asciilifeform at the screen or used common sense, would've seen I was recording. There were other SWS
15:58 asciilifeform personnel in the room; in the video you can see a SWS JR about 3 feet in front of me talking to
15:58 asciilifeform another SWS JR sitting right beside me.'
15:58 mircea_popescu lol.
15:58 mircea_popescu so do they actually work ?
15:58 asciilifeform trinque: neat
15:58 asciilifeform trinque: consider contacting the maintainers
15:58 mircea_popescu !up rororo
15:59 asciilifeform mircea_popescu: no idea how genuine the text, but riotously funny
15:59 trinque asciilifeform: yeah I'll bother the ebuild guy for this
16:02 asciilifeform mircea_popescu et al: http://dpaste.com/00YX117 << plain txt
16:03 mircea_popescu trinque is this like the only bit of c code deployed without stdint ? i wonder if he had a reason
16:03 asciilifeform ^^ recced to all. hilarious turd
16:04 mircea_popescu asciilifeform incidentally, i know of no better proof that the "atomic weapons not actually militarily useful" than this sort of perennial wank.
16:05 trinque mircea_popescu: seems it might've worked against an older glibc
16:05 trinque which perhaps implicitly included that?
16:05 trinque I know not.
16:05 asciilifeform mircea_popescu, ben_vulpes: http://www.loper-os.org/pub/tard.png << glorious fan mail
16:06 trinque lol?!
16:06 mircea_popescu asciilifeform useless without sender field ; uninteresting if it's anything but sam altman
16:07 mircea_popescu i'd have added "or one of his harem slaves" but iirc he's a twink
16:07 mircea_popescu but since we're doing random anon lulz, https://8ch.net/btc/res/33.html#187
16:08 mircea_popescu !up referredbyloper
16:08 asciilifeform mircea_popescu: going by the style, it's our old phriend, mr spam
16:08 asciilifeform post on loper-os.org updated to include tard.png
16:08 trinque ye gods the autism
16:08 ben_vulpes that's some top kek
16:09 asciilifeform buysometime42@gmail.com
16:09 asciilifeform throwaway
16:09 mircea_popescu how the system can’t pass tests to show it could’ve launched ha!
16:09 mircea_popescu !up tuxforce
16:10 ben_vulpes gotta be ninjashogun
16:10 asciilifeform the sheer mental breakage required to waste one's time so.
16:11 asciilifeform in other news, we got another.
16:11 ben_vulpes "Not known to me -> No." << omg
16:13 asciilifeform mircea_popescu you have mail.
16:16 mircea_popescu asciilifeform http://trilema.com/2015/i-think-you-drastically-overestimate-the-military-importance-of-nuclear-weapons/#comment-114220 << republished it jic
16:17 asciilifeform mircea_popescu: this new one's a dev too.
16:17 asciilifeform check him out
16:17 mircea_popescu 9. for crying out loud, NOT EVEN SINGLE USE.
16:17 asciilifeform well, 3
16:17 mircea_popescu this, if indeed reflective of an implementation error, shows an entirely different bug
16:17 asciilifeform incidentally, this is consistent with 'cosmic rays'
16:17 mircea_popescu you should check to make sure yo udon't use the same prime TWICE
16:17 asciilifeform a number with flipped bit is likely to be divisible by smallint
16:18 trinque lol, article's at #28 now with way more points than those above
16:18 trinque there are older articles with fewer points above
16:21 mircea_popescu doubleplusungood article!
16:22 mircea_popescu what i don't get is, how exactly you reproduce this ? i can't seem to make sks server to accept extra, unsigned subkeys from anyone.
16:23 asciilifeform mircea_popescu: this one's another 'invalid subkey...'
16:23 mircea_popescu moreover, the way it presents the blob is as a single, shares pgp key blob
16:23 mircea_popescu so can anyone get a key server, no matter which, to somehow swallow up an extra subkey for an existing key ?
16:24 asciilifeform evidently
16:24 mircea_popescu how ?
16:24 asciilifeform the entire blob, notice, as per rfc2440/4880, is not in any way hashed
16:24 mircea_popescu so ?
16:24 asciilifeform the way you do it is 1) take existing 2) feed in place of old
16:24 asciilifeform it will update, because - evidently - there is no mechanism whereby the update would be rejected.
16:24 mircea_popescu i must be doing something wrong then
16:27 trinque and articles are moving around it, yet it stays where it's pinned
16:27 trinque #1 -> #20 -> #28
16:27 trinque hilarious
16:27 mircea_popescu "We are at war, with a new kind of enemy. The terrorists have infiltrated every nation on our planet." tsk tsk now how would will mcneilly know this.
16:28 mircea_popescu trinque it is pretty lulzy.
16:29 BingoBoingo What a fucking morning to sleep in !!! Digesting Convos around Phuctor's discovery and writing up some news.
16:30 assbot [MPEX] [S.MPOE] 22300 @ 0.00028283 = 6.3071 BTC [-]
16:31 asciilifeform https://news.ycombinator.com/item?id=9561595
16:32 mircea_popescu BingoBoingo lol you slept with lady luck eh ?
16:32 asciilifeform l0l reddit broken
16:32 mircea_popescu aww, links beleeted again ?
16:32 asciilifeform nah just overload
16:33 asciilifeform i expect it'll all be memory-holed shortly.
16:33 BingoBoingo mircea_popescu: Well, downside of sleeping in is I missed a timely annoucement of keys shattering. On the plus side Am I reading it right, that the pattern seems to be various sorts of strongset people have these weak keys, almost exclusively?
16:33 asciilifeform after folks start going 'snore, it's just another gnu dev with b0rk3d key'
16:33 mircea_popescu https://archive.is/8dQXf https://archive.is/couZ1 https://archive.is/0CuN2 if anyone gives a shit at some point
16:36 asciilifeform BingoBoingo: a few folks appear to have bit-corrupted keys on sks
16:36 trinque I'm about as amazed with how rapidly the various "news" sites can respond to this
16:36 trinque by respond I mean bury
16:36 asciilifeform (nothing, afaik, has been signed publicly with them)
16:36 mircea_popescu BingoBoingo the official story seems to be that keys got accidentally.
16:36 asciilifeform accidentally gnu devs aha
16:36 BingoBoingo But this accidentally seems to mostly affect a certain kind of person
16:36 mircea_popescu so far at least.
16:36 mircea_popescu trinque within the hour. not so terribru.
16:36 asciilifeform #2 is small change
16:36 asciilifeform (though he programs)
16:36 asciilifeform #1 and #3 - not so much
16:36 asciilifeform their factor-counterparts, i do not yet know
16:36 asciilifeform but of them, there are also 3.
16:44 asciilifeform any student could build 'phuctor'
16:44 asciilifeform (distributed not in the 'faster' sense - it cannot be - but the 'remove single juicy target' sense)
16:44 asciilifeform oughta be part of ordinary keyserv practice.
16:44 mircea_popescu people dun wanna werk tho.
16:45 mircea_popescu people wanna sperg all day on "social media" and "attract investors".
16:45 asciilifeform those aren't people.
16:45 trinque seems this is actually glibc fuckery re: dieharder
16:45 asciilifeform trinque: ??
16:45 mircea_popescu Zoe Quinn is the role model, dumbass made a "game" that wouldn't have passed muster in the early sierra adventure games
16:46 trinque asciilifeform: unistd.h uses intptr_t within, yet does not include stdint.h
16:47 asciilifeform trinque: i've run into this kind of thing on several occasions.
16:47 asciilifeform not yet sure what to make of it.
16:47 trinque "whatever used this also had an include for stdint.h so who cares" ?
16:48 * asciilifeform meatspace break, bbl
16:48 mircea_popescu asciilifeform http://blog.hboeck.de/archives/872-No,-nobody-has-factored-a-4096-bit-RSA-key.html if you care.
16:50 trinque "I assume they are produced by network errors, harddisk failures or software bugs. It may also be that someone just created them in some experiment."
16:50 trinque ahahaha
16:50 * trinque purchases bulk tinfoil
16:50 mircea_popescu !up stevko_
16:51 mircea_popescu trinque imagine if "network errors, harddisk failures" worked this way.
16:51 mircea_popescu it'd stop warez dead in its tracks, seeing how you couldn't watch any movie or anything.
16:52 mircea_popescu but yes, software bugs. now that we got to software bugs...
16:54 mircea_popescu !up beautyon
16:56 mircea_popescu the instructor said don't touch anything. A crew member responded by saying “it doesn't matter none of it works anyway, you can touch what you want.”
16:56 mircea_popescu bwahgaha
16:56 danielpbarron >> There is a service called Phunctor where you can upload a key and it'll check it against a set of known vulnerable moduli.
17:00 trinque now #93 lol
17:00 * trinque is done watching that
17:00 trinque criminals everywhere.
17:01 mircea_popescu i updated the article to lulz a little at the ydumbinator crew
17:03 trinque https://bugs.gentoo.org/show_bug.cgi?id=531268
17:04 trinque guy sends me to go bother whoever can fix glibc
17:04 trinque and I will, if only as an exercise in whether it's actually possible to get something fixed in glibc
17:06 assbot [MPEX] [S.MPOE] 10350 @ 0.00027823 = 2.8797 BTC [-]
17:08 ben_vulpes "Someone handed you an ebuild, and you don't know what to do with it? Fear not, for here be instructions!" << docs with a dash of humor
17:09 cazalla http://log.bitcoin-assets.com/?date=17-05-2015#1134624 <<< i'll defer to BingoBoingo for this story, i sorta grasp the situation but not really enough to do a story justice
17:09 assbot Logged on 17-05-2015 16:10:13; mircea_popescu: achtung BingoBoingo cazalla : phuctor broke a rsa.
17:10 mircea_popescu !up prx
17:10 prx thx mircea_popescu
17:10 mircea_popescu trinque we were looking for someone to fix glibc earlier too
17:10 mircea_popescu for the libnss debacle.
17:11 mircea_popescu there is theoretical support, but in practice the lists seem dead and i have nfi who can even undertake that beast of a task
17:11 prx just wanted to see myself what's up here with those insane broken keys
17:11 mircea_popescu prx log's in the topic.
17:11 prx mircea_popescu: yep, thx. I'll stay here forlivestuff, if that's fine with you guys
17:12 trinque https://bugs.gentoo.org/show_bug.cgi?id=549754
17:13 trinque tragedy of the commons; everyone fucks glibc and no one pays her medical bills
17:13 mircea_popescu prx sure
17:13 mircea_popescu http://log.bitcoin-assets.com/?date=17-05-2015#1135377 < if this were the case i should also be able to replace your key with mine. doesn't seem that works tho
17:13 assbot Logged on 17-05-2015 20:24:41; asciilifeform: it will update, because - evidently - there is no mechanism whereby the update would be rejected.
17:14 mircea_popescu prx are you getting flooded btw ? some people complaied.
17:15 prx mircea_popescu: Not yet, will yell if it pops up.
17:15 mircea_popescu been some internet tough guy months ago "destroying us" by flooding noobs, but i had thought he gave up meanwhile.
17:16 prx So you're on someones hatelist :)
17:16 mircea_popescu ah, plenty of people.
17:17 ben_vulpes the more the merrier...
17:17 prx Having the right enemies might be more interesting than having the wrong friends
17:18 mircea_popescu ;;google trilema sec waxman
17:18 gribble Interacting with fiat institutions, a guide on Trilema - A blog by Mircea ...: <http://trilema.com/2014/interacting-with-fiat-institutions-a-guide/>; The SEC asked this Romanian Bitcoin CEO for private data to probe ...: <https://ihb.io/2014-03-20/news/sec-asked-romanian-bitcoin-ceo-private-data-response-4087>; MPEx owner in danger of being extradited to US to face charges ...: (1 more message)
17:18 mircea_popescu can start there lawls.
17:20 mircea_popescu http://log.bitcoin-assets.com/?date=17-05-2015#1134581 << amusingly enough, that 0.02 is obviously the house. nobody took the opposing side.
17:20 assbot Logged on 17-05-2015 14:42:17; mats: i loled. 1.08btc on 0.02btc
17:20 asciilifeform omfg the idiocy.
17:20 asciilifeform mircea_popescu: let's post all 3
17:20 asciilifeform so we can put the 'cosmic rays' folks to rest.
17:21 mircea_popescu the wicked may never rest.
17:26 mircea_popescu win ?
17:26 mircea_popescu !up alphonse23_
17:26 alphonse23_ thanks
17:27 mircea_popescu aha. who're you ?
17:27 alphonse23_ I came because of the 4096-rsa article
17:27 mircea_popescu aite.
17:28 alphonse23_ mostly curious why HN would care to hide the story?
17:28 alphonse23_ but from the article it was reported here.
17:28 davout re the bitbet, this guy had it: "So I can still drop bad keys on purpose? Or key had to be added before announcing this bet?"
17:28 trinque alphonse23_: interesting, eh? it plummeted from #1 very strangely
17:29 mircea_popescu graham, altman &co are butthurt because we regularly mock their "venture capitalism" ? i dunno
17:29 mircea_popescu !up tcrypt
17:29 alphonse23_ HN has changed a lot in the pass few months
17:29 alphonse23_ it's a lot more heavily moderated
17:29 alphonse23_ i've been going there daily for years, and I've noticed the change
17:29 mircea_popescu davout that bet promises to be a conundrum to resolve.
17:29 davout no shit
17:30 alphonse23_ but this, the mod manipulating titles -- for whatever reason. There's ton of down voting too.
17:30 alphonse23_ it's like, their in league with the NSA now or something...
17:30 mircea_popescu eh, their site, they can do whatever they please.
17:31 mircea_popescu i don't personally use it.
17:31 davout the bet was misworded from the beginning, had someone intentionally created a set of shitty keys and fed the to the phuctor, it would resolve as yes
17:31 davout the title diddling on HN is documented in the comments actually
17:31 mircea_popescu the conundrum is more along the lines of "what constitutes a key"
17:32 mircea_popescu alphonse23_ anyway, the mistake here is for members of the public naive enough to imagine conde nast / ycombinator / etc sites represent anything but the alt-reality their owners have a financial interest in.
17:32 davout that's the easy part i think "anything recognized as such by asset's favorite gnupg version"
17:32 trinque this guy's making me write a test program to fix an include in glibc
17:32 mircea_popescu they will farm said naive members of the public for free content, yes.
17:32 trinque lol
17:32 mircea_popescu but that's as far as it goes.
17:32 trinque it's plainly visible looking at the header itself
17:33 mircea_popescu davout then i suppose it's not broken yet ?
17:33 davout mircea_popescu: well, if i craft a key whose factors are 1 and 3, theoretically it's a valid gpg key
17:33 davout if i then submit a key whose factors are 3 and 5
17:34 davout phuxxored they are, to yes the bet should resolve
17:34 mircea_popescu !up joshbuddy
17:34 mircea_popescu davout yes, had you done it afore the bet i guess.
17:34 alphonse23_ mircea_popescu: but to do it so openly, how does that not hurt them.
17:34 davout mircea_popescu: right, the bet does specify the number of moduli to test
17:34 joshbuddy hiya, just hanging out after reading the hilarious rsa key blog post by .. umm you
17:34 mircea_popescu alphonse23_ whom has heardbleed hurt ?
17:35 alphonse23_ so where the hell do I get my tech news from. Reddit? they Y combinator owns them too.
17:35 mircea_popescu joshbuddy enjoy.
17:35 mircea_popescu alphonse23_ once gossipd is done, i guess there.
17:35 assbot [MPEX] [S.MPOE] 47155 @ 0.00028062 = 13.2326 BTC [+] {3}
17:36 alphonse23_ "MQTT broker in golang" first time hearing about it
17:37 mircea_popescu !s gossipd
17:37 assbot 103 results for 'gossipd' : http://s.b-a.link/?q=gossipd
17:38 mircea_popescu alphonse23_ an ad-interim solution is of course variety. there's qntra doing bitcoin news. there's 8chan doing all sorts of things.
17:38 mircea_popescu the man of one book, like the man of one site, is never too close to truth
17:39 mircea_popescu http://log.bitcoin-assets.com/?date=17-05-2015#1134618 << seeing how the factors so far have been 3, 7 and 11... i imagine all the truely bad keys will be in one of those (possibly most/all of those) groups
17:39 assbot Logged on 17-05-2015 15:59:46; adlai: jurov: yes, at least two keys need to have a primer in common. had phuctor run over the keys in reverse order, it would've found the other chump first
17:40 alphonse23_ sure. it just a shame. hacker news was a real gem back in the day. I'm sure it's inevitable, as things become more mainstream, they get too political, and less honest. Now I have to go out a find good honest news from somewhere underground.
17:41 deedbot- [cascadian hacker] lords of cascadia - http://cascadianhacker.com/blog/2015/05/17_lords-of-cascadia.html
17:42 ben_vulpes september forever
17:42 mircea_popescu just the way that goes.
17:42 ben_vulpes <gabriel_laddel> I like walking and that is about it as far as exercise goes. << i'm on this minimal time workout kick lately
17:44 ben_vulpes put 20lbs of bricks in backpack, bike to 'mountain', park bike at base of tabor (http://www.communitywalk.com/map/list/394038?order=0), brick up stairs twice, roll back to office
17:44 ben_vulpes got it down to 35 minutes.
17:44 mircea_popescu sounds like you're a pashtun training for marriage
17:44 mircea_popescu (the kidnapping 13 yo bride part)
17:45 assbot [MPEX] [S.MPOE] 35574 @ 0.00028595 = 10.1724 BTC [+] {2}
17:46 ben_vulpes i thought that was a family activity
17:47 ben_vulpes (because malnutrition?)
17:47 ben_vulpes http://www.ap-linux.com/ << why does this need to be its own distro?
17:48 mircea_popescu other than because some she-geeks are cute and people try to hit on them with "hy babyy i r maek distro" ?
17:52 ben_vulpes DreadKnight: how's the game coming?
18:01 trinque https://bugs.gentoo.org/show_bug.cgi?id=549754 << specific incantation that breaks the glibc headers
18:03 ben_vulpes i'm getting the impression with gentoo that i should copy the dieharder source into mydiehardfork overlay and then emerge mydiehard fork - how wrong is this?
18:04 trinque ben_vulpes: probably faster than waiting for a glibc fix :^)
18:04 ben_vulpes lol yeah that's indeed the conclusion i came to
18:04 trinque yeah that's right, put your own hand-carved ebuilds in your local overlay
18:05 * trinque brb
18:09 assbot [MPEX] [S.MPOE] 47990 @ 0.00027705 = 13.2956 BTC [-] {2}
18:15 jurov jus' looking on code path that produces the "invalid subkey binding" message, found this:
18:15 jurov http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=blob;f=g10/sig-check.c;h=fc5e1fa41ac6d4414bbc2ffa3ffc695b02d70749;hb=be136273454532d94a955fbbcfa1544b47cad954#l609
18:16 jurov /* does this make sense????? */
18:16 jurov not implying anything, only found the commnt lulzy
18:17 mircea_popescu !up zlrth
18:18 mircea_popescu looking in there is the right thing jurov so props.
18:18 mircea_popescu http://blog.fefe.de/ < i think this guy was here earlier ?
18:19 assbot [MPEX] [S.MPOE] 37550 @ 0.00027703 = 10.4025 BTC [-]
18:19 mircea_popescu "Proudly made without PHP, Java, Perl, MySQL and Postgres"
18:19 ben_vulpes confirmed for being in over my head with overlays
18:19 mircea_popescu also Heilige Scheiße has a nice ring to it.
18:27 ben_vulpes so is qntra not writing up the gpbacle?
18:28 mircea_popescu iirc BingoBoingo is working in it
18:29 mircea_popescu copypaste any idea why https://8ch.net/btc/res/183.html#183 yields a 404 when one clicks reply ?
18:30 mircea_popescu asciilifeform http://trilema.com/2015/full-disclosure-4096-rsa-key-in-the-strongset-factored/#comment-114226 "Because Phuctor shows me an Internal Server Error when I try to test a key."
18:32 ben_vulpes !up DreadKnight
18:32 ben_vulpes there ya go
18:32 DreadKnight yey, cheers
18:32 DreadKnight usually too lazy to do the whole thing manually
18:33 DreadKnight regarding the game, polishing documentation and preparing some a crowd funding
18:33 DreadKnight if I secure a bit of cash, things will run smoothly
18:33 mircea_popescu asciilifeform https://news.ycombinator.com/item?id=9561547 << check it out, people were doing lectures at stanford about phuctor, omitting to mention phuctor.
18:34 assbot [MPEX] [S.MPOE] 5300 @ 0.00028352 = 1.5027 BTC [+]
18:34 mircea_popescu i'm looking forward to all the gavin lectures about the perils of larger blocksizes. also at stanford.
18:35 mircea_popescu pushed by someone with... a keybase.io account.
18:35 mircea_popescu because ofcourse.
18:35 assbot [MPEX] [S.MPOE] 39900 @ 0.00028602 = 11.4122 BTC [+]
18:36 mircea_popescu bitrated.com/zmanian/ << there's even a chump wot and everything
18:36 mircea_popescu no doubt, ALSO lectured about at stanford.
18:36 mircea_popescu also made in march
18:36 mircea_popescu also etc etc etc.
18:40 ben_vulpes DreadKnight: whaddaya need the funding for? i thought you wrote the thing yourself.
18:41 mircea_popescu !up Humean
18:41 trinque ben_vulpes: pssh, those sweet office chairs with 5-way lumbar support for one
18:41 Humean woah neat i feel special
18:41 Humean thanks assbot
18:42 ben_vulpes trinque: keep laughing, you'll be renting a desk soon
18:42 trinque ben_vulpes: oh don't misunderstand, I am a big fan of the 5-way lumbar support
18:42 ben_vulpes we rearranged the deck chairs last week, place feels almost like humans and not nerds
18:42 trinque fancy
18:43 trinque and I hear there's not one cat on the premises
18:43 ben_vulpes NO FUCKING CATS.
18:45 ben_vulpes !up evhan
18:45 mircea_popescu aite ima be out for a while. laters.
18:46 mats http://nypost.com/2015/05/17/al-sharptons-daughter-sues-city-for-5m-after-spraining-ankle/
18:47 evhan ty ben_vulpes
18:47 ben_vulpes what brings you by, evhan?
18:47 evhan Mention on loper-os, swung by out of curiosity.
18:48 DreadKnight ben_vulpes, didn't coded the gameplay, it's a bit above my skill level; anyway, even if I did 100% of the thing, would still need funding
18:49 ben_vulpes serenissima runs on slave labor
18:50 DreadKnight the republic of Venice?
18:51 DreadKnight the project gets small contributions constantly, but when it comes to bigger stuff, people tend to vanish at about 90% progress xD
18:54 ben_vulpes that last 10% is more expensive than anyone ever expects
18:56 DreadKnight there's sure something strange going on when it comes to the last few steps
18:57 ben_vulpes why would people work on it for free?
18:57 DreadKnight we have a saying around, going something like "you drawn like the gypsy near the shore", meaning overall that you failed in the last few steps
18:59 DreadKnight well, there are quite a few reasons, crediting (name/link), experience, the joy of contributing to something bigger just to name a few
19:00 DreadKnight the other day found out that a cg animation series done in blender by just one dude used quite a few of the creatures from my project :)
19:00 ben_vulpes heh
19:00 decimation there are clearly people on hacker news who are enemies of #b-a
19:00 DreadKnight the project itself is free, so this stuff is allowed provided crediting is done
19:01 decimation that hboeck link is top on hn now
19:01 trinque decimation: fancy that eh?
19:01 ben_vulpes DreadKnight: i thought the thing was supposed to make money?
19:02 trinque decimation: got there quick too
19:03 ben_vulpes !up DreadKnight
19:03 ben_vulpes lol
19:03 DreadKnight xD
19:03 DreadKnight even if something is free, it can still make money
19:04 decimation I thought ninjashogun was one of the h-n mods?
19:04 DreadKnight gmail is free and makes money, same goes for games like league of legends, soon even world of warcraft
19:04 ben_vulpes decimation: in his dreams
19:06 ben_vulpes DreadKnight: every single one of those companies pays their employees.
19:06 ben_vulpes people working for a link or publicity need to have some sort of assurance that their time so spent is going to yield a return.
19:06 ben_vulpes (i mean, everyone does, right? for every thing that we do.)
19:07 trinque DreadKnight: doing the ad-supported thing is a loss leader at best; you have to be able to burn money until your audience is large enough to merit being paid for the # of eyeballs
19:08 DreadKnight ben_vulpes, a return is not always needed, some people do things for passion or practice; there are quite a few nice free open source games out there and software, most likely the browser you are making is done half by unpaid contributors
19:08 DreadKnight trinque, the ad crap is my last option
19:09 ben_vulpes i'm just trying to point out why you're having problems retaining horsepower is all
19:10 ben_vulpes just because she doesn't care about her boyfriend around that other guy doesn't mean diddly when it comes to your desire to get up her skirt
19:10 DreadKnight ben_vulpes, yeah, I'm aware, that's why it's perfectly fine to pay people to work on open source and it's why I need some funding or get better at coding
19:11 DreadKnight anyway, I partnered up with a coder this year, will see how that goes in the long run
19:11 williamdunne >Forget MPEX. The best/most reliable stock exchange is, by far, BTCT.CO.
19:11 ben_vulpes !up pete_dushenski
19:11 ben_vulpes good afternoon, pete
19:12 pete_dushenski afternoon ben_vulpes !
19:12 assbot [MPEX] [S.MPOE] 52450 @ 0.00028602 = 15.0017 BTC [+]
19:12 ben_vulpes following the key drama?
19:12 pete_dushenski and a big pacific howdy from the coast !
19:12 pete_dushenski ben_vulpes indeed. just catching up on it.
19:13 decimation pete_dushenski: where are you at? vancouver?
19:13 pete_dushenski i tested and re-tested my key a *few* times already
19:13 pete_dushenski decimation even better : victoria
19:13 ben_vulpes ah vbc is byootiful
19:13 ben_vulpes ferry's fucking expensive, though.
19:13 decimation yeah I've been through there, I wouldn't mind going back
19:13 pete_dushenski ben_vulpes ya not cheap eh
19:14 ben_vulpes well, en velo...
19:14 ben_vulpes on?
19:14 ben_vulpes how would i say "on bike" in french?
19:14 pete_dushenski decimation it's quite the place. not quite summer here yet tho. still only 16-18C during the day.
19:14 pete_dushenski ben_vulpes sur velo ?
19:14 pete_dushenski no, par velo
19:15 pete_dushenski "by bike"
19:15 ben_vulpes davout:
19:15 pete_dushenski "sur" is too literal of a translation from english, "par bicyclete" even.
19:16 decimation I don't think it ever gets too hot there?
19:16 decimation the pacific moderates
19:17 mxtm pete_dushenski: spanish uses en for "by" in cases of transportation
19:17 mxtm which translates "in/on"
19:17 mxtm fwiw
19:17 decimation https://blog.hboeck.de/archives/872-About-the-supposed-factoring-of-a-4096-bit-RSA-key.html#comments < heh the hboeck guy admits he doesn't really know of which he speaks
19:18 pete_dushenski en carro, sure.
19:18 mxtm en bici, etcétera
19:18 pete_dushenski mxtm aha. sounds like anglocization but what do i know.
19:18 mxtm i dunno either
19:19 pete_dushenski decimation who's the hboeck guy again ?
19:20 * pete_dushenski checks logs.
19:21 trinque pete_dushenski: the guy who ended up top comment on the HN post
19:21 trinque https://news.ycombinator.com/item?id=9560790
19:22 pete_dushenski ahaha mr. "i'm almost certain"
19:24 williamdunne I'm pretty sure the internet was invented for two purposes, selling drugs and pretending to know stuff you don't
19:24 williamdunne Anything outside of that is just abusing the tech
19:27 decimation asciilifeform: https://news.ycombinator.com/item?id=9561764 < lol you butthurt the mr. spam mod
19:28 pete_dushenski williamdunne except... the internet sucks for drugs. mp has an ancient essay on the matter.
19:28 decimation pete_dushenski: mircea's 'story' on hacker news was quickly demoted to well below visibile for most folks
19:28 williamdunne pete_dushenski: Wasn't the first transaction ever completed on the internet the purchase of weed?
19:28 decimation meanwhile this guy (hboeck) has a post that pretty much says "nothing to worry about", and is promoted to #1
19:28 pete_dushenski williamdunne http://trilema.com/2013/what-the-drug-trade-is-how-the-drug-trade-works-and-why-silk-road-didnt-work-and-didnt-matter/
19:29 pete_dushenski decimation lulzy.
19:29 pete_dushenski williamdunne the first transaction was knowledge, no ?
19:34 williamdunne pete_dushenski: Trade then
19:34 williamdunne Okay
19:34 williamdunne Read the article, and I still don't see how that makes it bad for the last mile
19:35 williamdunne Obviously 10 tonnes of cocaine isn't going to be carried by FedEx
19:35 ben_vulpes for one, fedex doesn't hire its submersibles out yet
19:36 ben_vulpes people aren't even supposed to know those exist
19:39 pete_dushenski williamdunne i really have nfi what the first trade was. if you say it's weed, we'll go with that, but that doesn't mean that first=best
19:40 williamdunne Very trye
19:40 williamdunne *true
19:40 williamdunne ben_vulpes: Family friend is working on something kinda cool for the other side
19:40 williamdunne Well, owns the company doing it
19:40 ben_vulpes what does "kinda cool" mean
19:40 ben_vulpes last mile delivery?
19:41 williamdunne Its a line of speedboats that can go underwater on command without any real preparation to collect drugs dropped from boats
19:41 williamdunne For the coast guard to stop drug smugglers
19:41 assbot [MPEX] [S.MPOE] 57850 @ 0.00028602 = 16.5463 BTC [+]
19:41 williamdunne Disagree with the cause, but pretty cool project IMIO
19:41 ben_vulpes excellent bezzletron
19:42 ben_vulpes won't work, wrong target etc
19:42 ben_vulpes but if they're draining derpbuxx from the beast more power to 'em
19:42 williamdunne Government contracts don't need to work
19:42 ben_vulpes and moreover cannot actually.
19:42 ben_vulpes !up pete_dushenski
19:42 pete_dushenski cheers ben_vulpes
19:43 ben_vulpes ;;$(sleep 3600 && echo "!up pete_dushenski")
19:43 gribble Error: "$(sleep" is not a valid command.
19:44 pete_dushenski you tried !
19:44 * ben_vulpes shrugs
19:44 ben_vulpes > gribble is not a tty. falling back to telnet.
19:54 jurov *gribble on fire
19:54 ben_vulpes !up pete_dushenski
19:55 pete_dushenski ben_vulpes thx!
19:55 ben_vulpes de rien
19:56 pete_dushenski fuckin pawn brokers in this town i tell ya
19:56 ben_vulpes ?
19:56 pete_dushenski you'd swear they were trying to keep their inventory for their grandchildren
19:56 deedbot- [cascadian hacker] how to process bitcoin transactions for your webapp (or: the ghetto watch-only-wallet) - http://cascadianhacker.com/blog/2015/05/17_how-to-process-bitcoin-transactions-for-your-webapp-or-the-ghetto-watch-only-wallet.html
19:57 pete_dushenski so i walk into a shop on the edge of chinatown and find a beautiful mid-century modern walnut table
19:57 pete_dushenski complete with two leaf inserts. perfect height (tall), in good condition, only $270 !
19:58 pete_dushenski so i want to ship it home, naturally.
19:58 pete_dushenski no can do, they tell me.
19:58 pete_dushenski all they have are cardboard boxes, no freight boxes, no shipping relationships in place, no arrangements can be made.
19:59 pete_dushenski honestly, there are thousands of cruise ship tourist visiting victoria daily, and these assderps haven't figured out shipping a box 1,000km IN THE SAME COUNTRY
19:59 pete_dushenski no customs, no duty, nothing complicated.
19:59 pete_dushenski just basic frieght is too complicated for these people.
20:00 pete_dushenski completely nuts.
20:00 ben_vulpes call dhl breh
20:01 chetty http://blogged.com/ search for 4096
20:02 chetty the replacement story is already up hehe
20:02 pete_dushenski ben_vulpes i've used fedex freight before, they'll come pick up the package from wherever and deliver it wherever.
20:02 pete_dushenski but box it up for you ? i'd be surprised.
20:03 ben_vulpes your privilege is dripping on the floor
20:05 pete_dushenski wtf my privilege nothing. i'm getting on a plane tmrw morning and it's not so much to ask to have a seller of goods to crate a fucking table for transport.
20:06 ben_vulpes heh
20:06 pete_dushenski or w/e, mebbe my privilege knows no bounds. hey, i'm not the one losing business.
20:07 ben_vulpes win some lose some
20:07 pete_dushenski ya, tis just a table.
20:07 pete_dushenski i didn't want one that bad when i woke up, just saw the right one at the right price and wanted it.
20:07 pete_dushenski ah well.
20:12 assbot [MPEX] [S.MPOE] 45707 @ 0.00027956 = 12.7778 BTC [-]
20:14 ben_vulpes mwell i'm off for a spell
20:14 ben_vulpes trying out a new fried chicken joint
20:20 decimation pete_dushenski: surprising. I thought those kinds of tourist shops specialized in shipping
20:21 pete_dushenski decimation seriously. you'd think so, but you'd think wrong.
20:21 pete_dushenski i guess there's enough local demand in this retirement town that they don't have to try.
20:21 pete_dushenski very nice, seemingly helpful staff, entirely inept.
20:22 pete_dushenski http://www.barclays-exchange.com << these guys.
20:23 pete_dushenski "We have been in business for nearly 26 years and hold a full pawnbroking license to buy, sell and loan." << no mention of shipping eh...
20:24 decimation fun fact: there's a part of vancouver, bc that is us territory (point roberts)
20:26 decimation also, victoria is well south of the canada-us border
20:27 danielpbarron !up pete_dushenski
20:28 pete_dushenski danielpbarron ty!
20:29 pete_dushenski decimation that it is. though victoria feels like a million miles away from us-istan.
20:29 decimation heh. I guess I can see why a pawn shop wouldn't bother with shipping
20:31 pete_dushenski decimation why's that ?
20:31 decimation I suppose they figure enough derps would come and go on foot
20:31 decimation but I imagine that they could sell on the internet for $$
20:32 decimation their website is unwhelming
20:32 pete_dushenski these guys obviously fail at the internet.
20:33 pete_dushenski so shooting themselves in the foot is par for the course, i guess.
20:33 decimation pete_dushenski: are you planing on visiting any other outlying islands or the rest of bc from there?
20:34 pete_dushenski not this time 'round.
20:35 pete_dushenski i've seen most of bc previously, just hadn't been to vic in a while.
20:35 pete_dushenski i went to summer camp nearby in my youth
20:36 pete_dushenski http://campmiriam.org << this one.
20:37 pete_dushenski sacha baron cohen went to another camp in the same organisation ;)
20:37 decimation heh did they teach hebrew?
20:37 pete_dushenski more socialism.
20:37 pete_dushenski seriously, the shit in my veins !
20:38 pete_dushenski "solidarity forever", "ticky tacky houses", etc.
20:38 decimation I got screwed of out learn german from my german heritage too
20:39 pete_dushenski ya, i didn't get german or romanian somehow.
20:39 pete_dushenski this camp though had *daily* chores for like 2.5 hours.
20:39 pete_dushenski camp, where you do chores, imagine.
20:39 assbot [MPEX] [S.MPOE] 11550 @ 0.00028607 = 3.3041 BTC [+] {2}
20:39 pete_dushenski some kids helped in teh kitchen, some cleaning garbage.
20:39 decimation like, sweeping the forest?
20:40 decimation sounds like a good way to save on staff costs
20:41 pete_dushenski i wrote for the newspaper, wrote mad magazine-esque fake nooz
20:41 pete_dushenski decimation no doubt. it wasn't *that* expensive, at least compared to the bbyo summer camps.
20:43 mats ever cut grass with a pair of scissors?
20:43 pete_dushenski mats haha omg no. why ? have you ?
20:44 mats yeah. as punishment.
20:44 pete_dushenski parents ?
20:44 mats http://www.vfp62.com/IMAGES_9/mowing_grass.jpg
20:45 pete_dushenski you call that grass ? i trim more manbush than that on a monthly basis.
20:45 mats builds character (tm)
20:46 cazalla http://log.bitcoin-assets.com/?date=18-05-2015#1135775 <<< heh we had this even here but i'd walk off with the group which cleaned dishes the night before, never washed as much as a plate
20:46 assbot Logged on 18-05-2015 00:39:54; pete_dushenski: some kids helped in teh kitchen, some cleaning garbage.
20:48 mats i spent the whole day (0900-1600) with some other trainees cutting grass at battalion hq because one of the nubs in my squad saved his granola bar from the mess hall and put it in his locker where it was discovered
20:48 cazalla http://log.bitcoin-assets.com/?date=18-05-2015#1135780 <<< did this one countless times, not as punishment though, old man forced me to do it along the fenceline so he didn't have to whippersnip it
20:48 assbot Logged on 18-05-2015 00:43:05; mats: ever cut grass with a pair of scissors?
20:49 mats http://terminallance.com/2015/04/10/terminal-lance-374-no-party-like-a-working-party << basically this.
20:50 assbot [MPEX] [S.MPOE] 27523 @ 0.00028624 = 7.8782 BTC [+]
20:50 mats i drank something like 6-7 litres of water that day... missouri is hot as fuck during the summer
20:51 mats cazalla: how much fence? several km?
20:51 cazalla 1/4 acre block
20:52 cazalla wasn't just me though, he had my mother out there doing the same thing
20:53 danielpbarron !up referredbyloper
20:56 mats ah
20:57 mats in other news, the new Mad Max picture is quite good
20:58 pete_dushenski that's a bit of a surprise.
20:58 mats http://www.metacritic.com/movie/mad-max-fury-road << surprised metacritic treats it so well
20:59 mats (they tend to shit on everything)
20:59 cazalla aussie football ceremony lol http://gfycat.com/ThirdWeeklyChital
21:00 decimation mats http://www.returnofkings.com/63036/why-you-should-not-go-see-mad-max-feminist-road
21:01 danielpbarron !up pete_dushenski
21:01 mats decimation: i'm just happy to find a fun action movie that passes the Bechdel test
21:02 assbot [MPEX] [S.MPOE] 16821 @ 0.00028624 = 4.8148 BTC [+]
21:02 pete_dushenski heh.
21:03 pete_dushenski http://filmschoolrejects.com/features/10-famous-films-that-surprisingly-fail-the-bechdel-test.php?all=1
21:04 decimation well, then sjw is where it's at
21:14 danielpbarron !up justJanne
21:15 justJanne Nah, I was just reading on the RSA factorization article where someone claimed this channel would still DDoS everyone who joins. Sadly I can’t see any of that (was hoping to see if it actually is true xD)
21:16 danielpbarron it comes and goes
21:16 justJanne I mean, I see some traffic, but it’s minimal.
21:17 BingoBoingo justJanne: It isn't anything done by any of the channel regulars. It's just some butthurt dickbag with an excess of unwarranted self importance who imagines they are saving the world by DoSing every ip they spot here
21:18 justJanne Reminds me of that guy spamming a gaming channel with links to their DDoSing company
21:18 danielpbarron i heard that it just targets the user who most recently joined, and especially if it is a new hostmask
21:20 BingoBoingo justJanne: Well the person doing it at first called themselves the reddit police and started by DoS'ing sites affiliated with regulars here. Then the sites beefed up and weren't so easy to DoS. So now they's had to settle for messing with home internet connections.
21:20 justJanne I got some traffic on my system from 159.118.187.45 accessing my server via HTTPS and sending a few thousand GET requests, but nothing really devastating
21:20 williamdunne lol what a tool
21:20 justJanne (I have a bouncer on my server with 1Gbps connection, so I rarely notice DDoS at all)
21:21 mats he's doing us a favor.
21:21 BingoBoingo People examining the traffic spotted that most of the zombies were ntp reflection and stuff anyone could walk away with, and they likely did leaving less to hit here with.
21:21 mats if you read this -- please stop by for another friendly conversation
21:21 justJanne I have null-routed NTP and everything anyway
21:23 justJanne So, they really DDoS random people?
21:23 justJanne or, rather DoS
21:26 BingoBoingo justJanne: Yeah, just anyone without a freenode cloak who joins when their spybot is online here to pull the trigger
21:27 justJanne BingoBoingo: tell me when the bot is online, I’d like to analyze the traffic xD
21:27 adlai is it an altcoin? is it a bubble? no, it's driveby moderation: http://hnrankings.info/9560790/
21:28 BingoBoingo justJanne: I dunno what nick it uses. Never much cared to try identifying it.
21:28 adlai (cf http://www.righto.com/2013/11/how-hacker-news-ranking-really-works.html )
21:29 justJanne BingoBoingo: It should be easy to find.
21:30 danielpbarron !s fivezerotwo
21:30 assbot 204 results for 'fivezerotwo' : http://s.b-a.link/?q=fivezerotwo
21:30 danielpbarron justJanne, ^ for you
21:33 danielpbarron !s from:fuddos
21:33 assbot 7 results for 'from:fuddos' : http://s.b-a.link/?q=from%3Afuddos
21:35 justJanne Sometimes when I get DDoSd I run nmap against the attacking servers, one time I found a small IRC server with only one channel, in which were 256 clients all with just a number as name, and one other client sending specific commands every few minutes
21:35 justJanne kinda interesting.
21:36 danielpbarron justJanne, http://log.bitcoin-assets.com//?date=08-12-2014#948443
21:36 assbot Logged on 08-12-2014 17:59:30; asciilifeform: incidentally, if anyone bothered to read the packet dump i posted a while ago, they should know that the ddos bot uses misconfigured consumer routers (upnp reflection)
21:38 danielpbarron and this http://log.bitcoin-assets.com/?date=06-01-2015#966322
21:38 assbot Logged on 06-01-2015 01:32:50; asciilifeform: svetlana: i got a massive packet dump, and so has kakobrekla
21:38 trinque http://hnrankings.info/9560839,9561606,9561693,9561599,9561920,9560426,9560904,9560790,9561920/
21:39 trinque check out that precipitous drop
21:39 trinque and the abrupt rise of the rebuttal
21:40 trinque it'll be interesting to see how much longer that stays at #1
21:43 williamdunne justJanne: Thats an IRC botnet
21:43 williamdunne Pretty oldschool method
21:43 justJanne assumed as much, but I have no experience with them yet, and was surprised seeing one in the wild
21:43 * adlai wonders whether any of the strongset edges point to the diddle
21:44 williamdunne Guessing for some reason they thought it would be a swell idea to use the IRC server for additional DDoS power?
21:46 williamdunne !up justjanne
21:46 justJanne but yeah, I was kinda surprised, would have assumed they’d put the control for the botnet on a different system
21:47 justJanne at least so that one doesn’t discover their botnet that easily
21:48 oglafbot http://oglaf.com/ragtrade/
21:49 justJanne anyway, let’s wait for that DDoS-bot ;P
21:53 danielpbarron justJanne, while you're waiting, read this: http://wiki.bitcoin-assets.com/first_steps_in_bitcoin-assets
22:00 justJanne danielpbarron: looking into it, but just found out my last GPG key’s validity ends this month
22:05 decimation justJanne: no problem, make a new subkey or extend the date
22:05 decimation justJanne: Someone compiled a list of ips that originate dos'er
22:05 justJanne Meh, too lazy to copy it from my other PC, I’ll just make a new one and sign it with my old key later
22:11 decimation you can see the logs at log.bitcoin-assets.com
22:16 assbot [MPEX] [S.MPOE] 31396 @ 0.00028687 = 9.0066 BTC [+] {4}
22:29 assbot [MPEX] [S.MPOE] 49100 @ 0.00028281 = 13.886 BTC [-] {2}
22:29 mircea_popescu lol janne 18yo female ? srsly ?
22:31 mircea_popescu !up justJanne
22:31 justJanne Yes, why?
22:31 mircea_popescu these guys keep saying it's forbidden on irc.
22:32 justJanne oh, btw, need to update that.
22:32 williamdunne Hmm wonder whos younger out of me and Janne
22:32 justJanne sorry, forgot to update it -.-
22:32 justJanne am 19
22:32 mircea_popescu that totally kills the whole thing. i bet you're not even from cali.
22:32 justJanne nah, northern Germany
22:33 mircea_popescu scam.
22:33 justJanne just another compsci student
22:33 mircea_popescu anyway, get in the wot, then you can voice.
22:34 mircea_popescu http://trilema.com/2015/full-disclosure-4096-rsa-key-in-the-strongset-factored/#comment-114229 << lol check it out, ~they~ are going to ~lend me~ credence. i've been visited by backwards world wtf is with today.
22:35 justJanne I am registered with assbot, but no one levelled me up yet ;P
22:35 cazalla 14/f/cali oldest fbi trick in the book
22:35 williamdunne You need a lord to do that
22:35 mircea_popescu !rate justJanne 1 55 yo Pittsburgh steel mill worker posing as 19 yo girl on the interwebs.
22:35 assbot Request successful, get your OTP: http://w.b-a.link/otp/3ce24e592e5d8bcf
22:35 justJanne Nooo
22:35 justJanne If you want, you can mail me on my student mail, I’m real stu120691@informatik.uni-kiel.de >_>
22:35 mircea_popescu !v assbot:mircea_popescu.rate.justJanne.1:44086df839c6a505edd1681e3dff4c96ffd5990b1c9abddd93c99f55a195008c
22:35 assbot Successfully added a rating of 1 for justJanne with note: 55 yo Pittsburgh steel mill worker posing as 19 yo girl on the interwebs.
22:35 mircea_popescu justJanne well on the plus side now you can voice.
22:36 williamdunne justJanne: I'm pretty sure a 55 yo Pittsburgh steel mill worker would have the connections to get one of those there fancy emails
22:37 decimation koennen Sie ein bisschen Deutsch schreiben?
22:37 justJanne ja, wieso?
22:38 adlai !t m s.mpoe
22:38 assbot [MPEX:S.MPOE] 1D: 0.00026733 / 0.00027828 / 0.00028748 (2307220 shares, 642.06 BTC), 7D: 0.00023904 / 0.00026467 / 0.00029014 (38353417 shares, 10,151.15 BTC), 30D: 0.00019511 / 0.00026548 / 0.00033918 (109094749 shares, 28,962.95 BTC)
22:38 decimation bitte schreiben Sie eine Kurzbiographie?
22:38 adlai is the middle number vwap?
22:38 williamdunne ich habe eine gross hose schlange is about all I remember from three years of German lessons
22:39 williamdunne And ich bin zwolf jahre alt
22:39 williamdunne But I couldn't update that to my current age
22:40 justJanne Die wird aber ganz kurz ausfallen müssen ;P Ist auch nicht viel zu sagen – Geboren in then 90ern, ganz normal Grundschule, bin mit 8 ins Hochbegabtenförderungsprogramm gekommen, hab neben der Schule interessantes Zeug gelernt, dann Gymnasium, hab mit 16 neben der Schule angefangen zu studieren, und hab mit 18 Abitur mit 2,2 gemacht. Bin seit letztem Herbst Vollstudentin ;)
22:40 decimation ^ sufficiently idomatic to pass the google translate test
22:40 justJanne you could have just looked at my hostname ;P
22:41 decimation justJanne: given your interest in this gpg episode, there is something that you could assist with
22:41 decimation can you identify the supposed "german email program" that was supposedly the source of these weak keys?
22:42 mircea_popescu decimation wait, we're progressed past the "it occured while copying" to obscure email programs naoi ?
22:42 mircea_popescu jeez how the world changes in a coupla hours based on what's said in b-a log, you'd think we're talking to gavin-the-handpuppet & co.
22:42 decimation heh yeah lemme find a link
22:43 justJanne Yeah, I probably can.
22:43 mircea_popescu not that we aren't, just, lulz factor.
22:44 decimation it's in the comments of that article that replaced yours on hacker news https://blog.hboeck.de/archives/872-About-the-supposed-factoring-of-a-4096-bit-RSA-key.html
22:45 decimation "I don't really know, but I talked to Nadia Heninger about it and she mentioned that they were probably created by some email software only used in Germany. "
22:45 decimation Note that your headline was dinged for being inaccurate, while this guy's blog is more inaccurate by his own admission
22:45 justJanne That's very helpful. NOT ;P
22:45 mircea_popescu herpitty derp.
22:45 mircea_popescu anyway, to quote myself, "I will write up an article addressing this particular set of bullshit tomorrow. I promise it will be good. Engage bated breath."
22:46 justJanne Hmm.
22:47 mircea_popescu http://log.bitcoin-assets.com/?date=17-05-2015#1135600 << heh the blessed 90%. "nothing may ever get done!!1"
22:47 assbot Logged on 17-05-2015 22:51:31; DreadKnight: the project gets small contributions constantly, but when it comes to bigger stuff, people tend to vanish at about 90% progress xD
22:49 decimation https://mvideos.stanford.edu/graduate#/SeminarDetail/Spring/2015/EE/380/9469 < this Nadia Heniger chick claims that rsa keys can be poorly generated by bad rngs (around 50:00 or so)
22:50 mircea_popescu http://log.bitcoin-assets.com/?date=17-05-2015#1135604 << confirmed romanian. "te-neci ca tiganu' la mal." implying normal people drown in blue water, but gypsies can't even do this right, they drown after almost getting to shore.
22:50 assbot Logged on 17-05-2015 22:57:59; DreadKnight: we have a saying around, going something like "you drawn like the gypsy near the shore", meaning overall that you failed in the last few steps
22:50 justJanne decimation: that's true. RSA keygens use a probabilistic prime test.
22:50 justJanne With a very bad RNG, it would tell you 2 is prime.
22:50 justJanne Sorry.
22:50 justJanne Meant 20
22:50 decimation lol she claims that (52:41) that openssl just adds the current time of day in seconds to the entropy pool
22:51 justJanne It does.
22:51 mircea_popescu this is (or at least was) true
22:51 adlai mircea_popescu: fyi/raffs: https://news.ycombinator.com/item?id=9562548
22:52 justJanne Read the report on OpenSEL by the OpenBSD guys. It's a whole new level of WTF
22:52 mircea_popescu "[1] He's been scraping the profiles of young women (specifically) and posting links, names, and hometowns on his blog. Yes, as technologists, we know that this kind of indexing is trivial. That's no reason, as a decent human being, to terrorize innocent people."
22:52 mircea_popescu herp.
22:52 mircea_popescu who the fuck asked anon what is and isn't reason nao ?
22:52 mircea_popescu backwards world srsly.
22:52 mircea_popescu justJanne it was in chan.
22:52 * adlai considered writing some words about how security theater damages actual security, but stuck to lazy bean counting
22:53 justJanne Actual security is sadly a thing that doesn't exist in critical places.
22:53 mircea_popescu http://log.bitcoin-assets.com/?date=17-05-2015#1135608 << everywhere someone hopes to get something for nothing and figures govt's the answer to that quandry there's an enemy of b-a. amusingly, this boils down to really very few people and traceably so.
22:53 assbot Logged on 17-05-2015 23:00:52; decimation: there are clearly people on hacker news who are enemies of #b-a
22:53 adlai (a reporter writing about 'accidentally' carrying a multiple-inch blade onto an airplane damages airplane security far, far less than the security practices that let it through)
22:54 mircea_popescu http://log.bitcoin-assets.com/?date=17-05-2015#1135619 << it's unclear to me how you figure gmail makes money.
22:54 assbot Logged on 17-05-2015 23:04:20; DreadKnight: gmail is free and makes money, same goes for games like league of legends, soon even world of warcraft
22:54 justJanne Gmail isn't free.
22:54 williamdunne mircea_popescu: scraping your emails to better sell your advertisements
22:55 adlai gmail sells adspace to its parent company. the number of people who know its actual revenue is probably quite low.
22:55 williamdunne Increasing the number of people who know the platform so that enterprise customers will purchase it
22:55 justJanne Gmail has two options: sell your data or pay.
22:55 justJanne Yeah.
22:55 williamdunne I think with pay they still have your data
22:55 justJanne Nope.
22:55 decimation gotta pay if you want 'google apps' too
22:55 justJanne As a large company you can get Google Apps as a box.
22:55 mircea_popescu http://log.bitcoin-assets.com/?date=17-05-2015#1135624 << that never happens, but sure.
22:55 assbot Logged on 17-05-2015 23:07:10; trinque: DreadKnight: doing the ad-supported thing is a loss leader at best; you have to be able to burn money until your audience is large enough to merit being paid for the # of eyeballs
22:56 justJanne A local server you can put in your own data center. It can operate even separate from the web.
22:56 decimation justJanne: did you see any ntp reflection traffic?
22:56 midnightmagic adlai: http://carnal0wnage.attackresearch.com/2015/05/normal-0-false-false-false-en-us-x-none.html
22:57 justJanne decimation: I'm on phone right now, but as the latency didn't go up, doesn't seem so. Or at least nothing noticeable.
22:57 * adlai notices that assbot doesn't insert titles anymore... midnightmagic linked "Lets Call Stunt Hacking What it is, Media Whoring", an apt topic for today
22:58 mircea_popescu midnightmagic not bad, but it lost me at the "well credentialed" etc bs.
22:58 mircea_popescu adlai i suspec assbot is a little tired.
22:58 * adlai taps it, gently
22:58 justJanne Tbh, security of embedded systems could be better.
22:58 justJanne In general embedded systems could be better.
22:59 mircea_popescu decimation honestly, i suspect the guy complaining on trilema was either trying to stir up shit or else working on meanwhile inacurate history. seems the ddos guy is gone.
22:59 adlai was this some fix-in-anger to the http://log.bitcoin-assets.com//?date=29-04-2015#1115842 conundrum?
22:59 assbot Logged on 29-04-2015 14:33:49; davout: mircea_popescu kakobrekla mebbe make scoopbot_revived not mention the title and let assbot handle it?
22:59 * justJanne thinks back to the Toyota issue
22:59 decimation mircea_popescu: yeah, in fact I suspect "the lady doth protest too much"
22:59 mircea_popescu adlai iirc that measure didn't pass.
23:00 mircea_popescu http://log.bitcoin-assets.com/?date=17-05-2015#1135631 << lol win.
23:00 assbot Logged on 17-05-2015 23:11:27; williamdunne: >Forget MPEX. The best/most reliable stock exchange is, by far, BTCT.CO.
23:00 midnightmagic mircea_popescu: The old Aurora attacks are an excellent example of the perversion of the idea of 'well-credentialed'. The people they had making comments about the SCM systems involved in that attack and the shoddy investigations going on were.. extreme.
23:01 mircea_popescu yeah. if i don't happen to know someone willing to vouch, you can have credentials coming out of your ears, i just see "idiot" in thick font. which is basically wot-ness.
23:01 midnightmagic I personally watched the responses internal to some of the companies involved and observed the evolution of the document they presented to the public. The people on whose opinions some of those documents were based were bullshit artists, borderline pathological, of the worst order.
23:02 midnightmagic mircea_popescu: Everything it seems, comes down to human trust evaluation.
23:02 midnightmagic most of the time.
23:02 justJanne Embedded systems are still often built by programmers, not by engineers.
23:02 mircea_popescu worst part being that it's usually "corporate [in]culture" that takes marginal yet ambitious intellects and molds them to this shit.
23:02 decimation !up btcg
23:02 mircea_popescu !up btcg
23:02 btcg thanks
23:03 decimation btcg: what brings you here?
23:03 mircea_popescu aha. who're you ?
23:03 btcg to talk about interesting topics :)
23:03 btcg do i need to auth with assbot for voice perm?
23:04 mircea_popescu and get rated, yes.
23:04 decimation btcg http://wiki.bitcoin-assets.com/first_steps_in_bitcoin-assets
23:05 decimation was assbot's link title functionality kaput?
23:05 btcg i didn't see anything
23:05 williamdunne wut?
23:05 mircea_popescu three minute half hour ?
23:05 mircea_popescu !up btcg
23:05 mircea_popescu kakobrekla hey, is something the matter with assbot ?
23:06 BingoBoingo prolly just needs to fart
23:07 williamdunne btcg did you dieded?
23:09 btcg no i am here
23:09 williamdunne To get perma voice you need to be in assbots L2 - so you need a rating from a lord
23:10 williamdunne So someone on the send section here: http://w.b-a.link/user/assbot
23:11 midnightmagic mircea_popescu: Mediocrity is a natural result of psychopathic and sociopathic inroads. The moment upper management ceases to directly observe their employees, the result is the most convincing-sounding people's voices become the most relied-on. Convincing-sounding is not the same as accurate/informed.
23:14 decimation midnightmagic: convincing-sounding is pretty much the going standard in the english speaking world
23:15 midnightmagic -- which directly resulted in the erroneous and I would say, outright lying in the Aurora analyses. None of the conjecture that the public could see (because that's what the fuck it was) needed to ever be tested or 'pay rent' in terms of accuracy.
23:16 btcg !register F4DE 6DF4 EB8B A2DA AD8D 14A5 B004 5BC9 02AC 1559
23:16 assbot That does not seem to be a valid fingerprint.
23:16 williamdunne no spaces
23:16 btcg !register F4DE6DF4EB8BA2DAAD8D14A5B0045BC902AC1559
23:16 assbot Searching pgp.mit.edu for key with fingerprint: F4DE6DF4EB8BA2DAAD8D14A5B0045BC902AC1559. This may take a few moments.
23:16 assbot Key 02AC1559 / "boxsk <boxsk@tutanota.io>" successfully imported.
23:16 assbot Registration successful.
23:18 btcg now i need a vote?
23:19 decimation is tutanota.io even valid?
23:19 btcg oh should be .com
23:19 btcg sorry, can i reset my key
23:20 danielpbarron >> My aim is to fight mass surveillance. I write code to fight for our human right to privacy. I want to create a cloud service which is so easy to use and so secure that it locks out all the spies. We really deserve it. << lol
23:21 decimation btcg: sure, just make a new one
23:23 danielpbarron !up joshbuddy
23:23 justJanne danielpbarron: that sounds like Kim Schmitz
23:23 justJanne Sorry, he's known outside of DE as Kim DotCom
23:24 joshbuddy danielpbarron: where was that quote from?
23:24 joshbuddy also, thanks for voice
23:24 danielpbarron it's Matthias https://archive.is/8ovft#selection-839.1-839.218
23:25 decimation btcg: do you use this tutanota app?
23:25 btcg !register CDA330208F2249841291524C65A7427639BAE3AB
23:25 assbot Nick btcg is already taken.
23:26 btcg i use their webmail mostly
23:26 danielpbarron !h
23:26 assbot http://wiki.bitcoin-assets.com/irc_bots/assbot
23:26 decimation btcg: heh sucks I'm not sure if you can unregister
23:26 danielpbarron !changekey
23:26 assbot You need to specify your new key fingerprint.
23:27 decimation yeah auth with assbot and use that ^
23:27 btcg !changekey CDA330208F2249841291524C65A7427639BAE3AB
23:27 assbot Request successful, get your OTP: http://w.b-a.link/otp/90180887373ba656
23:27 btcg tuta is nice at least encrypts all email
23:28 danielpbarron i can do that with gmail + gnupg
23:29 assbot [MPEX] [S.MPOE] 39419 @ 0.00028808 = 11.3558 BTC [+] {2}
23:29 decimation yeah how is something 'encrypted' on a website that isn't under your control?
23:30 justJanne I can do that with Thunderbird, K9 and GnuPG.
23:32 BingoBoingo K9? You trust private keys on mobile devices?
23:32 danielpbarron the point being, your email client shouldn't have anything to do with your encryption
23:32 decimation or mail storage
23:33 justJanne BingoBoingo: Yes — remember, I use no Google services, and modified half of the apps on my phone myself.
23:36 decimation justJanne: yeah but have you examined your phone's firmware?
23:37 BingoBoingo And hardware
23:37 williamdunne !up btcg
23:37 btcg thanks william
23:38 mike_c mircea_popescu: you should be able to drop this link in as the source of the iframe: http://www.btcalpha.com/bb_frame.html?height=90&ref=1GiSXgAhjqYvAB17JjXX8YCqNCizCjLJgp
23:39 williamdunne v.welcome
23:39 williamdunne !gettrust assbot btcg
23:39 assbot Trust relationship from user assbot to user btcg: Level 1: 0, Level 2: 0 via 0 connections. |http://www.btcalpha.com/wot/trust/?from=assbot&to=btcg | http://www.btcalpha.com/wot/user/btcg/
23:39 williamdunne !gettrust assbot williamdunne
23:39 assbot Trust relationship from user assbot to user williamdunne: Level 1: 0, Level 2: 3 via 3 connections. |http://www.btcalpha.com/wot/trust/?from=assbot&to=williamdunne | http://www.btcalpha.com/wot/user/williamdunne/
23:39 justJanne decimation: BingoBoingo: compiled from source myself every month.
23:39 justJanne And monitoring all networked IO.
23:39 mike_c ;;later tell mircea_popescu: ad ready, see log 5 lines up
23:39 gribble The operation succeeded.
23:39 mats how about your baseband fw?
23:39 BingoBoingo ^
23:40 williamdunne mats: How about you hard disk controller?
23:40 mats i can dump it, can you?
23:41 justJanne The ISP I'm using was started by a few people from the CCC, so from that side not too high of a risk.
23:41 justJanne And I'd like to dump the firmware, but that would violate copyright.
23:42 mats fwiw i use a smartphone too, the point being rammed here is that you don't really have an expectation of security.
23:42 mats layer accordingly.
23:43 williamdunne ;;seen samouraiwallet
23:43 gribble samouraiwallet was last seen in #bitcoin-assets 1 week, 2 days, 3 hours, 14 minutes, and 55 seconds ago: <SamouraiWallet> cool system. tying in wot with irc +v
23:47 danielpbarron btcg, http://log.bitcoin-assets.com/?date=18-05-2015#1136035 << you need to decrypt this with your first key, and send the result back as !v [decrypted string]
23:47 assbot Logged on 18-05-2015 03:27:04; assbot: Request successful, get your OTP: http://w.b-a.link/otp/90180887373ba656
23:47 danielpbarron there is no "auth with assbot" and all actions come with a OTP
23:48 btcg ah ok, well 404
23:48 williamdunne btcg: Easiest way is wget -O - URL | gpg -d
23:48 danielpbarron expired. try again
23:48 williamdunne Automate using this
23:48 williamdunne http://bitstein.org/blog/bash-function-for-assbot-authentication/
23:49 danielpbarron williamdunne, that means you're decrypting on the same machine that has internet?
23:49 williamdunne Yes, I'm a peasant that does that
23:49 mircea_popescu mike_c win
23:49 btcg !changekey CDA330208F2249841291524C65A7427639BAE3AB
23:49 assbot Request successful, get your OTP: http://w.b-a.link/otp/5844d86bdf7b9395
23:49 williamdunne I'll eventually create another key offline which I'll use as a master or summin
23:49 williamdunne In case of breach
23:49 williamdunne Stick authentication of it in deedbot or summin
23:50 mircea_popescu mike_c will be going up shortly, guy's online and all.
23:50 cazalla lol those comments always remind me of this scene https://youtu.be/n16uBK71miQ?t=1m
23:51 mircea_popescu midnightmagic i have my doubts about how all that *pathic stuff works. kinda weaponized terminology, like "heretic"/"disbeliever" in middle ages.
23:51 cazalla what sorta person are you mircea_popescu terrorizing those poor sods on fetlife
23:52 btcg !v assbot:btcg.changekey.cda330208f2249841291524c65a7427639bae3ab:6448f8043a7a44284ff9e38a2c9c7c34ffb455f01d9c8618ec07770e996d43a9
23:52 assbot Key 39BAE3AB / "boxsk <boxsk@tutanota.com>" successfully imported.
23:52 assbot New key fingerprint for btcg is: CDA330208F2249841291524C65A7427639BAE3AB
23:52 mircea_popescu cazalla the masochist and the terrorist. should be a book.
23:53 BingoBoingo !up dandelany
23:54 mircea_popescu <justJanne> BingoBoingo: Yes — remember, I use no Google services, and modified half of the apps on my phone myself. << o.O what are you, like a hacker ???
23:54 justJanne A CompSci student.
23:54 mircea_popescu you gotta appreciate, a compsci student in the us is a guy that's too autistic to deal drugs.
23:55 mircea_popescu otherwise about as literate.
23:55 mircea_popescu !up btcg
23:55 justJanne Nah, they'd fail Math101 here.
23:55 mircea_popescu iirc math101 is no longer with numbers
23:55 justJanne Without that you can't progress in CompSci.
23:55 mircea_popescu they were racist.
23:55 justJanne And math101 is helpful here, about 90% fail that class.
23:56 justJanne Helps keep the study free from scriptkiddies.
23:56 btcg ty mircea_popescu
23:58 justJanne And, tbh, math101 at university isn't supposed to work with numbers. Math 101 is set theory, logic, lists, trees, functions, relations, sur/in/bijectivity, upper and lower bounds, complexity, etc.
23:58 mircea_popescu i think alf might fall in love.
23:58 BingoBoingo justJanne: At my school those topics were all in 300 series classes.
23:58 mircea_popescu yeah, but you went to a good school.
23:59 BingoBoingo lol
23:59 justJanne Right now I'm taking second semester classes, last week homework was doing RSA on paper.
23:59 justJanne In math
23:59 mircea_popescu i have my doubts if you could get a decent definition of the notion of number from one in ten us graduates.
← 2015-05-16 | 2015-05-18 →