#trilema | 2016-05-04

and in other partyvan news, http://65.media.tumblr.com/21222f1b753050b4e31f97c436e5d4eb/tumblr_o1phrw0oAT1trzasto1_1280.jpg

00:05

mircea_popescu: elementarily, anyone intending to mail in ze bomb will ddos the sensors prior

00:06

'cry wolf' etc.

00:06

well not "anyone", but sure.

00:06

point was that it is quite trivial, and the whole orchestra is a waste of dough.

00:07

not exactly. lafond makes this point, re the difference between a police force and a militia. you can't expect the police to protect you against organised violence. it works entirely and strictly for disorganised violence.

00:07

there are no hoodrats-cum-nukes.

00:07

the thing sorta implies organization definitionally.

00:08

two people have an argument and one gets really angry, police can fix this. random derp gets overexcited tries to ship smoke detector shavings to ex gf's mother, police can fix this.

00:08

recognize, shavings dun set off neutronograph

00:08

by the time powerful entity sends ddos wave prior to dirty bombs, police's not a useful expense.

00:08

they are ~specific~ to fissiles.

00:08

jus' sayin'.

00:09

(incidentally, geiger tubes in, e.g., train stations, were sop for ~decades~.)

00:09

this here's different.

00:09

the multi-bn-dollar neutron-detector-at-shipping-interfaces programme, going for well over three decades already, has captured exactly 0 anything.

00:09

afaik.

00:09

but much like in the case of "metal detectors" in airports, going for about as long, the goal was never THAT.

00:10

the goal was the same : it gave good basis for the eventual "globalisation", which, without the derpy "peace movement" post nuke detonation would have likely never existed

00:10

this whole am

00:10

aml/kyc idiocy is fed exactly off that.

00:10

and similarly with the "metal detector" security in airports. tis for the cows, not for the metals.

00:11

well the metal arches are theatre

00:11

the neutronographs - not advertised, concealed behind drywall etc.

00:11

but the fact that there is a "greater good" pretext to force say germany to put them in,

00:11

In other lols Sanders beat Clitler in Indiana. GOP settled their party divide first 111!!!

00:11

took some digging to even realize that they are a separate concern from the theatre.

00:12

is what's needed to then force germany to "approve" gpg4win oficially.

00:12

well yeah, basic usgtronics

00:12

so yeah, it is theatre, just, you're not the demo.

00:12

judge is the demo ; and bureaucrats are the demo ; and so on.

00:12

'choose, either us or greenglassocalypse'

00:17

mircea_popescu: this'd handily explain a buncha things.

00:17

e.g., the astronomically expensive gc/ms poison detectors, etc.

00:17

theatre for the chair-warmers.

00:18

quite. this argument that "oh, never seen" ... guess what ? priceless relics in temples also kept in dark, never seen!

00:18

not by public at any rate. but gotta keep THE PRIESTS impressed too!

00:18

lest cynicism takes hold.

00:18

su was illustration of what happens if you fail to keep the priests in.

00:20

the unravelling of the vaccine story recently is rather symptomatic. a society that no longer accepts the "vaccinarnos es cuidarnos entre todos" is, to use proper terminology, ungovernable.

00:20

like any theatre, state necessitates willing suspension of disbelief.

00:21

and otherwise, the world is too harsh to face without theatre. at least for most bipedals.

00:21

(it is pretty fucking harsh. slavegirls may attest.)

00:21

http://www.breitbart.com/tech/2016/05/03/angry-sjw-demands-student-journalist-be-punished-for-filming-trigglypuff/

00:22

mircea_popescu: what unravelling

00:24

http://btcbase.org/log/2016-05-04#1462316 << this is not a 32-mirror. i would dearly love to know how the schmuck generated his key.

00:24

Logged on 2016-05-04 03:29 deedbot: [Recent Phuctorings.] Phuctored: 1321909 divides RSA Moduli belonging to 'Alan Cox <alan@etchedpixels.co.uk>; ' - http://phuctor.nosuchlabs.com/gpgkey/3B2DC689E312DF7B25F1C5A190A8A7470AA5A605E3FFDAA204E1F3C86B810167

00:24

and ditto for the others.

00:24

BingoBoingo can't imagine why anyone'd care ?

00:24

asciilifeform can always mail 'em an' ask ?

00:25

mircea_popescu: i tried this, so far nothing.

00:25

maybe their email client is also misbehaving.

00:25

satan knows.

00:25

all hail the dark lord.

00:25

mircea_popescu: Apparently the video that earned her the trigglypuff nickname was entertaining, but I ain't got time for that. Just gotta leave the triggering stuff here for when Hanno reads the logs before his astroturf sessions.

00:26

lol. i dun think he got time for that, too buys [could have] discovering quantum cold fusion.

00:26

oh speaking of these people,

00:27

i know nothing of heininger in real life, but i had a dream where she was a hot chik

00:27

how is this speaking of THOSE people.

00:27

it was surreal.

00:27

https://www.cis.upenn.edu/~nadiah

00:28

^ apparently has photo, even.

00:28

$up Chicago

00:28

Chicago voiced for 30 minutes.

00:28

asciilifeform until i hear different, actual scientists involved have no fault some imbecile "journalist" / online whore dragged their name in.

00:29

mircea_popescu: cited by name in your original phuctor article series.

00:29

and not heard from hence.

00:29

some people grok the concept on seeing a dead cat.

00:30

Thanks mircea_popescu, deedbot

00:30

some people gotta see their eviscerated children. each his own./

00:30

how's Chicago ?

00:30

;;google site:qntra.net Chicago

00:30

Error: We broke The Google!

00:30

0.o

00:30

eh it was broken from before.

00:30

IM NOT BUYING IT.

00:31

mircea_popescu, I'm well, thanks. Happily celebrating the Trump victory in nearby Indiana today. How is Mircea?

00:31

http://qntra.net/2016/03/chicago-to-scape-around-hole/

00:31

*

asciilifeform bbl

00:31

going throgh reports. nothing much.

00:33

Otherwise, just waiting on some hdparm security-erase to complete on a disk, so I can throw it into a scratch array. I needed some space to work on a large collection of files, to tarball them before archiving them on tape.

00:33

that sounds exciting and all.

00:38

It could be worse. There is a series of checks, tests and configurations I employ before putting a spindle into production. This is because I have a battery of Seagate Barracuda ES.2 drives from circa 2008/2009 which I still want to use. Some of them are just bad, from known firmware problems and the others need to somehow prove themselves to be *good enough* to use for scratch data handling.

00:41

At the time the Barracuda ES.2 drives were manufactured, their promotional materials were quite attractive. As time progressed, there were a number of problems with them similar to the IBM Deskstar (Deathstar) hard drives.

~ 19 minutes ~

01:00

$up Chicago

01:00

Chicago voiced for 30 minutes.

01:02

Thanks BingoBoingo, how are you today?

01:02

Not bad

01:03

Good, working on anything particularly interesting today?

01:05

Oh, not today. Just mourning a Clinton v Clinton election

01:10

BingoBoingo, I'm afraid I don't understand. What do you mean by a Clinton v. Clinton election?

01:10

Trump is just a Clinton in huckster clothing

01:13

Ah, okay. Maybe the claim Trump will pick Hillary as his VP has some merit to it.

01:14

Nah, their strategy is have a clinton on each line of the ticket

01:14

BingoBoingo, you should mourn on Undernet in #political or #politics with the masses.

01:14

The dialog there is often quite colorful.

01:18

Ain't nobody got time for that

01:19

:p some people watch football, some people watch soap operas, some people like talking to a brick wall on the Undernet.

01:20

$gettrust deedbot Chicago

01:20

L1: 0, L2: 0 by 0 connections.

01:21

*

Chicago will get on the WoT soon.

~ 50 minutes ~

02:12

http://www.jameslafond.com/article.php?id=4329

~ 3 hours 9 minutes ~

05:21

https://archive.is/yVEdn re:500eur notes

~ 39 minutes ~

06:01

asciilifeform: toplevel trb is just redirected to thebitcoin.foundation, that is ran by mod6

06:03

^ re: http://btcbase.org/log/2016-05-02#1461500

06:03

Logged on 2016-05-02 20:05 asciilifeform: ;;later tell jurov observed any spike in trb site traffic ? (it is linked from nosuchlabs.com)

~ 2 hours 51 minutes ~

08:54

all these noobs!

08:54

lel

08:56

and in other lulz, http://dpaste.com/2Y0VAST

~ 44 minutes ~

09:40

mircea_popescu was arrested for trafficking meth in Georgia: https://i.imgur.com/p1w7pYO.jpg

09:41

o.O

09:41

^ that dude was caught with 100k in meth because he got pulled over for speeding >.<

09:42

and what's it got to do with me ?

09:43

if i ever I imagined mircea_popescu getting arrested for meth, it would be that foto

09:43

lol mkay

09:50

and in other news, http://66.media.tumblr.com/91ec1875268cf60f161c0b47b8d71b9d/tumblr_nfk9frdlf31spdrm0o1_1280.jpg

~ 33 minutes ~

10:24

News Flash: Gavin is stupid: http://archive.is/IInmC

10:30

deedbot http://trilema.com/wp-content/uploads/2016/05/smg-ssw8.txt

10:31

;;google site:trilema.com gavin retarded

10:31

Error: We broke The Google!

10:31

yaright.

10:32

anyway, lettuce read on teh bbc the stuff they read on trilema back in january 2015 and took a year and a half to digest! clearly "the media" is relevant, influential and what was the other one.

10:32

deedbot- http://trilema.com/wp-content/uploads/2016/05/smg-ssw8.txt

10:32

deedbot-

accepted: 1

10:32

ah ok.

10:41

http://seclists.org/oss-sec/2016/q2/224

10:48

;;google factorable.net

10:48

Error: We broke The Google!

10:49

ah ssh key study huh.

10:49

.5% of tls rsa they say.

10:50

lol dreamhost acct ; no history online. nice.

10:51

https://factorable.net/resources.html << nothingt there.

10:51

yet another rush job brought to you by drhoaxtoshi.labs

10:52

o nice find BingoBoingo ! check out the paydirt quote asciilifeform :

10:52

"When looking into this a few days ago, I found that OpenSSL 0.9.5a (and earlier?), which was current in year 2000, had a bug that would result in behavior just like this on some 64-bit platforms: http://marc.info/?l=openssl-users&m=95961024500509 "

10:52

AHA

10:53

fwiw http://btcbase.org/log/2013-09-14#313064

10:53

Logged on 2013-09-14 15:24 asciilifeform: mircea_popescu: https://factorable.net/keycheck.html tests for some very basic weaknesses.

10:53

In other lulz http://qntra.net/2016/05/phuctor-factors-united-states-disa-key/#comment-56341

10:54

phf yes, and the domain was reigstered in 2012. this doesn't serve here : they have to have history specifically in the things discussed. otherwise, it's not unlike someone applying to a job requiring 5000 hours of flight experience on the basis of his driving license from 1993. fine.. but ?

10:54

"There are even weirder examples, though - e.g., one of Phuctor's factors is 0x115CFF61CFECFF61BE9, where we see three 32-bit limbs satisfying: limb[1] = limb[0] + limb[2] and also limb[2] is small and thus likely didn't come from a CSPRNG, but possibly from uninitialized memory." << very good point. this person's actually intelligent.

10:57

anyway, in practical terms - so he references both. good for him. anyone interested in doing some work can look at either site and proceed. i can't find any useful item AT ALL on factorable net. not as much as a factor or anything. some vague discussions in summary of supposed finds substantiated in no manner. if this is science you can also be pope, why not.

10:58

obviously, they're going to copy whatever phuctor publishes, which is fine but also rather obvious.

10:58

mircea_popescu: lel!

10:58

the fastgcd thing is henninger's

10:58

yes.

10:59

it is quite old

10:59

yes.

10:59

but notice they put boost on the site!

10:59

waiwut

10:59

*

asciilifeform catches up with l0gz

10:59

how did that george costanza quote go, "but mr tuttle, consider i'm in the smaller office!"

10:59

can anyone actually reply to the seclist turd ?

11:00

namely, 'openssl WAS NEVER IN GPG'

11:00

srsly

11:00

for fucks sake.

11:00

i wouldn't bother. let them sort it out on their own, what.

11:00

i'm the father of the whole internetland now ?

11:01

well i'm certainly not.

11:01

can't be arsed.

11:01

lulz instead : https://www.youtube.com/watch?v=d3NlnLySnq0

11:01

but it is interesting to watch how the beast digests.

11:01

today it is 'phuctor and hanno bock's', tomorrow - 'hanno bock's'

11:01

etc

11:01

nah.

11:01

why not?

11:02

'A bug that not only duplicates the least significant 32 bits onto the

11:02

pointedly not what happened there. what happened there was, "this kid made an airplane ; this other retarded kid made a playdough blob. the first kid called him retarded. let's list them in order : playdough blob ; airplane. let people fly with whichever they choose."

11:02

next 32 bits, but also keeps the rest of the limbs at all-zeroes. '

11:02

it's a thing.

11:03

bug!!1111111

11:03

yeah, just so HAPPENS that BUG makes fingeprint on old gpg of randint modulus key appear sAME.

11:03

forfuckssake.

11:03

bug!.

11:03

hey, it's a seclist! what do you want them to discuss.

11:03

the malfeasance that couldn't be any plainer than this daylight ?

11:04

but, bug?!

11:04

and didja know, bugs only affect interesting users

11:04

e.g. apple security hotline

11:04

and pgp update key.

11:04

lalala i can't hear you. what ?

11:04

well, that.

11:06

look : they're what they are. this is pointedly not us. the difference between man and and is that ant is specialized physiologically. man can drop what he's doing and do something else, or pick a different set of tools, or approach, or whatever.

11:06

and does THE ONE THING.

11:06

these people are what has come to mean in english "scientists". they will do the thing they do, no matter what.

11:07

i just dun get it, most of'em aren't paid to swallow ft meade cock

11:07

not even indirectly

11:07

nothing to do with anything.

11:07

as children, they stuck their head in a ring. then they kept adding rings.

11:07

what ring

11:08

now - https://asoutherngirlinsouthafrica.files.wordpress.com/2011/12/3311565227_51a8bf7bf9_o2.jpg

11:08

an order to remove rings is equiv to a death setence, for them.

11:08

l0l!

11:08

it is a fact.

11:08

permanent tissue damage.

11:10

so they'll fuck around with the rings, forever. hopefully their children will be raped into sanity. i'm doing a little towards that, if the children happen to be easy on the eyes and female. that'sall.

11:10

the "western civilisation" may survive only in this limited sense.

11:12

but meanwhile - no, the Βασιλεύς Βασιλέων, Βασιλεύων Βασιλευόντων is not paying any of them anything.

11:13

mircea_popescu> and does THE ONE THING. << anT i mean, obviously. heh.

11:25

long, long ago, when i was quite unemployed, i wrote to Βασιλεύς Βασιλέων, Βασιλεύων Βασιλευόντων and offered my services

11:25

he replied with form letter.

11:25

so i unzipped and pissed.

11:25

so it boggles my mind that other folks did not do same.

11:25

why fellate hitler for phreee ?

11:26

incidentally little birdie told me recently that nsa 'TAO' pisses on american nondiscrimination laws and never employs foreign-born folk

11:26

so mega-unsurprise

11:26

but lulzy

11:26

(re 'rule of law' etc.)

11:28

"it's what we do".

11:33

also, afaik "american nondiscrimination laws" work strictly to protect enumerated groups. women, blacks, what have you. "foreign born white men" isn't on the list.

11:34

mircea_popescu: letter of the law is, i quote, 'RACE, COLOR, RELIGION, SEX, NATIONAL ORIGIN'

11:34

(u.s. equal opportunity commission.)

11:34

read the fine print.

11:34

yer thinking of the private sector

11:34

usg has own proclamation

11:34

oh oh.

11:34

that uses this verbiage.

11:34

aha. civil service.

11:34

yes, but the ways in which "success" is "measured" involve "enough blacks/women/... ?"

11:35

i never quite understood this "place of birth" fixation in [always B list] secret services.

11:35

ask them not me (tm)

11:35

but this is classic, 'proper aryans only!'

11:35

eh, half the time there isn't who to ask what color to paint the walls, let alone substantial matters.

11:36

it is classic "we're too inept to ever do anything so let's fuck around with paper all day instead".

11:36

i could see (maybe) why you wouldn't want non-citizen grunts in the army.

11:36

except those are a dime a dozen

11:36

i had an office across the hall from no less than a major

11:36

though that was much more of a concern back before transportation

11:36

ru-born.

11:37

asciilifeform amusingly, 100 years ago one couldn't be ru major unless german :D

11:37

200.

11:37

w/e.

11:38

anyway once you think about how american sigint actually works, when it works, it makes sense

11:38

(via schmoozing and 'iana committee' sabotage, which calls for pedigreed yacht rats, not maths folks, etc.)

11:39

bullcrap.

11:39

this "pedigreed yacht rats" exists strictly in your imagination, as a derivative product of 1970s Burda.

11:41

[for this side of the iron curtain folks : insanely popular fashion mag because it included patterns for all items so pre-industrial girls and young women could make them at home. first western mag to be published in russia ; and in china. easily beat anything cosmo ever was or could be.]

11:42

they also exist at least in, e.g., annapolis (seaside town i passed through recently)

11:42

and elsewhere

11:42

not wholly mythical animals, these.

11:43

i watched them alive.

11:43

sure. but not quite the same holy bible now and there as it was then.

11:43

not quite, no.

11:43

and from the same period : http://67.media.tumblr.com/553d044a935e96986194c201744734bc/tumblr_n21vgdx3nk1r38h27o1_1280.jpg

11:43

i can almost taste those stockings, being what EVERY girl had for a decade or so. each. and every. one.

11:45

at any rate, i can easily see why nsa would escew folks who might have actual culture

11:45

what the fuck was that sitcom called, hm.

11:45

and non-'esl' memory etc.

11:45

*eschew

11:46

single-minded ss man must have no mother, no father, but the fuhrer

11:46

or sumthinglikethat

11:46

also bs.

11:47

then i'm at a loss re explaining the fixation.

11:48

it's easy.

11:48

fuck i found it. thanks god for internets!

11:49

http://www.imdb.com/title/tt0086793/ << there you go.

11:49

wats that

11:49

that is the place where your "yacht rats" thing actually exists.

11:49

nowhere else.

11:50

ahaha, how very true

11:51

bbbut it exists

11:51

phf i'm like the emperor-god xenomorph from the future, i go "what was that bullshit tv series from the early 90s with all the boats" and wihin minutes a woman pops the name. unfuckingbelivable.

11:51

i went to school with the fuckers

11:51

saw them, alive.

11:51

asciilifeform i suspect your chief problem is that you go to school with your own internally emulated versions of irl fuckers.

11:51

and you demand fiction make sense, and so end up with very... unrealistic versions of said fuckers.

11:52

in which way are my emulated fuckers inaccurate ?

11:52

in the way where they make sense in your emulation in places they make no sense irl.

11:52

then this error compounds, because it's selective.

11:52

i mean, these kidz ~did~ have vacation houses, did end up in princetonyaleward, etc.

11:52

then next thing you know, meta-nsa the yachting club.

11:53

sure!

11:53

you have any fucking idea how much WORK sailing is ?

11:53

sometimes i still see these santa barbara americans though, old men with "silver hair" driving a Mercedes, or mostly on the metro here. they always look so lost and small, like they walked from the screen, "the last American hero" style. except instead of like punching the car window and discovering that it hurts, their credit card is denied or something, and they are like "what is that???"

11:53

actually fuck that. you ever been on a yacht ? by been i mean > 6 hours.

11:53

'work' is something you do against your will.

11:53

to pay billz.

11:53

trust me. after the 9999th winch tick, it's against your will.

11:53

next thing mircea_popescu tells us fucking is work.

11:54

at any rate, quite obviously not all 'yacht rats' take up sailing

11:54

it is, after all, exercise.

11:54

think about it in these terms : 1. i can sail, and actually used to be / could be very good at it (right body type) ; 2. i could afford a yacht, what. 3. i don't either. ???

11:54

mircea_popescu doesn't fly airplanes either

11:54

he has theorems.

11:54

can't be arsed. etc.

11:54

*last action hero, rather

11:55

airplane is merely annoying to fly. too many blinkenlichten and shit.

11:55

yachts are actually hard.

11:55

hey that bleuriot or what was it, that i sat down in, had 0 lights.

11:55

in the air ?

11:55

on the dashboard.

11:55

none provided.

11:55

yeah well, maybe they only turn them on when airborne to save on headlamp fluid.

11:56

it had fewer gauges than my car.

11:56

lel

11:56

oh, the thing with the steel wires ?

11:56

aha.

11:56

you didn't notice the anal dildo. those things are "viscerally piloted".

11:56

that was in the bench, i almost sat on it!111111

11:56

which is worse, not better, than blinkenlichten

11:56

[Trilema] MiniGame (S.MG), April 2016 Statement - http://trilema.com/2016/minigame-smg-april-2016-statement/

11:57

*

asciilifeform will mail in his ^ tonight, it is very short

11:59

cool.

11:59

doing that an' fmpif tomorrow

12:04

;;later tell BingoBoingo

12:04

(later tell <nick> <text>) -- Tells <nick> <text> the next time <nick> is in seen. <nick> can contain wildcard characters, and the first matching nick will be given the note.

12:04

http://qntra.net/2016/05/phuctor-factors-united-states-disa-key/#comment-56467 << plox fix me formatting

12:04

;;later tell BingoBoingo http://qntra.net/2016/05/phuctor-factors-united-states-disa-key/#comment-56467 << plox fix me formatting

12:04

The operation succeeded.

12:04

ahh.

12:04

argh

12:05

*

asciilifeform goes to fiddle with his terminal

12:06

http://qntra.net/2016/05/phuctor-factors-united-states-disa-key/#comment-56468 << much better answer.

12:08

(number one issue for the noob slaves, too, "it wasn't explained". bitch, i'm going to beat you into a pulp, what explain. figure it the fuck out, it's your ass.)

12:09

asciilifeform: fxd

12:10

ty BingoBoingo

12:10

mircea_popescu: l0l!

12:11

mega-answer.

12:11

schmucks.

12:12

really, he's going to trade his "giving a shit" for me doing more work on top of the work i did that he can't do in the first place ? in what fucking world!

12:12

i want him giving a shit like i want cold sores.

12:14

by that logic, why did i bother to write 'theory' page on phuctor ?

12:14

perhaps a literate man should already know the theory..?

12:14

there is a difference between YOU DOING and HE DEMANDING.

12:14

ah hm.

12:14

you can do whatever the fuck you want, including help yourself to a double serving of his wife

12:15

he can THANK YOU FOR IT, and he can HELP. that is it. exactly strictly and absolutely it, nothing more to no degree.

12:15

IF we ever want his political opinions on things, which is a very remote distant and unlikely if, WELL ASK FOR IT!

12:17

somehow illiterate street urchins in all the large cities, 1916 as well as 2016 can master this basic concept before age 14. yet it eludes the byproducts of welfare state.

12:17

lel qntra ddos ?

12:17

or just 'slashdotted'

12:17

or your terminal being weird ?

12:17

dun think so

12:18

i see it.

12:18

i also see.

12:18

just sl000w

12:18

pings in 1/4s. it's you.

12:19

*

asciilifeform has deeply nfi.

12:32

curl -s http://phuctor.nosuchlabs.com/sadmods | grep -c -i "mirrored"

12:32

153

12:33

only 5% ish fo the pile of braindamage.

12:34

but >1/2 of the phucked

12:35

i may have said this before, but,

12:35

i have a ~strong~ suspicion that there are q == nextprime(p) keys in there.

12:35

somewhere.

12:35

first things first. the ssl keys thing - both github and search.

12:36

iirc jurov was doing something with those.

12:36

the nice thing about ssl and ssh pubkeys is that you can harvest them.

12:36

in the wild.

12:36

with the first half, yeah. we also need a general purpose multiconverter.

12:36

(port scanner)

12:36

anyone wanna write that ?

12:36

ask henninger ! l0l

12:37

srsly that would be lulzy

12:37

there already exists a "various ssh formats" conversion ; need to bolt on base16/10 number and pgp format.

12:37

asciilifeform had she had the common sense to wot i would.

12:37

technically there is no need to convert them to pgp format

12:37

i can throw them in as a specialcase.

12:38

(and does it actually make sense to phuctor them ~together~ with pgp keyz?)

12:38

in other lulz,

12:38

http://seclists.org/oss-sec/2016/q2/200

12:39

'There are multiple vulnerabilities in ImageMagick, a package commonly used by web services to process images. One of the vulnerabilities can lead to remote code execution (RCE) if you process user submitted images. The exploit for this vulnerability is being used in the wild. A number of image processing plugins depend on the ImageMagick library, including, but not limited to, PHP's imagick, Ruby's

12:39

asciilifeform yes, it makes sense. primes are primes, factors are factors.

12:39

rmagick and paperclip, and nodejs's imagemagick.

12:39

'

12:39

asciilifeform the thing's been a blessing for hackers for many years now.

12:39

asciilifeform by the way, do you have any kind of werker to keep adding primes to the 8ball ?

12:40

mircea_popescu: as a matter of fact i do

12:40

currently on other box

12:40

nice. so then let all these things converge. the server ssh keys ; the user ssh keys ; the pgp keys and the 8ball werker.

12:40

eventually we will have all factors.

12:41

ALL factors.

12:41

it is of pretty limited use tho, expanding 8ball from 1st mil primes to 10 mil yielded... what.. 2 pops ?

12:41

no matter.

12:41

utility is not measured by results.

12:41

re imagemagic, this is gold:

12:41

this is research not engineering.

12:41

''ImageMagick allows to process files with external libraries. This feature is called 'delegate'. It is implemented as a system() with command string ('command') from the config file delegates.xml with actual value for different params (input/output filenames etc). Due to insufficient %M param filtering it is possible to conduct shell command injection. One of the default delegate's command is used

12:41

to handle https requests...'

12:41

quite like, e.g., glibc's dyn load

12:42

aha.

12:42

and related rubbish

12:42

srsly the modus operandi NEVER changes

12:42

same source also.

12:42

with these people.

12:42

aha.

12:42

crab, pincers.

12:43

asciilifeform anyway, just get the 8ball expander to work constantly, fill a core or something.

12:43

and will be nice if 8ball is published also, say daily.

12:44

and in other news, http://67.media.tumblr.com/a8d2965d89bd18287633be95f4abda5c/tumblr_nu9w3p7Msi1s5ycf8o1_1280.jpg

12:45

mircea_popescu: good idea.

12:45

(it working 100%, but right now shuttled manually.)

12:46

and finally, you do have a knob to fill in factors into 8 ball manually ? if not add it in

12:46

sooner or later someone ELSE is going to report an actual factor.

12:46

this was part of my plan for the rewrite

12:46

and defo next on featurelist.

12:47

(will be particularly useful to check/disprove shit coming from hanno bock, http://trilema.com/2016/psa-hanno-bock-still-a-deceitful-shitbag/ ) et all.

12:47

incidentally there are perennially privkeys floating on 'pastebin' etc.

12:47

these oughta be edible.

12:48

;;google site:pastebin.com "BEGIN PGP"

12:48

Error: We broke The Google!

12:48

eh ffs.

12:49

http://www.medicaldaily.com/heroin-epidemic-organ-transplants-wait-list-384428

12:49

anyone wanna make his bot google ? trinque ? phf ? who else had bots ?

12:49

https://www.google.com/#tbs=li:1&q=%22-----BEGIN+PGP+PRIVATE+KEY+BLOCK-----%22+site:pastebin.com

12:49

^ seems to wurk

12:50

about 1/2 of them trollage

12:50

2/3 of the remainder - homework

12:50

and 1 or 2 'doxings'.

12:50

i tried one, we already had it.

12:50

http://phuctor.nosuchlabs.com/gpgkey/234D1BA9CAB9C80F5BC3837F50F2AAF5BE30EAB7A4D7E0F722F5D3C2B857CB0A << no wait, we didn't have it. right ?

12:51

well apparently not

12:51

where's the priv

12:53

asciilifeform what's the source for the currently waiting keys ?

12:53

http://seclists.org/oss-sec/2016/q2/34 << lel... 'systemd-journald from systemd v213 started creating world readable journals, allowing local users to read sensitive system log entries.'

12:54

lol

12:54

mircea_popescu: there is still 3 or 4 days worth of old sks archive, being pumped in.

12:54

https://www.gwern.net/Black-market%20archives << possibly good source for keys not on keyservers

12:54

punkman: aha!

12:55

mircea_popescu: no key waits for >1h.

12:55

ah cool.

12:55

at the end of a werker run, all keys that were part of the run, are marked nonwaiting.

12:55

so we're running out of fuel, basically.

12:55

aha.

12:56

there are a couple companies that do comprehensive crawls of pastebins, could be worth looking into

12:56

i'ma saw apart a recent sks dump this weekend.

12:56

and pump.

12:56

great read punkman

12:56

will also look into what it'd take to real-time eat sks.

12:56

would you download the thing and take out the keys ?

12:56

well yeah

12:56

how else

12:56

asciilifeform i was asking him.

12:56

ah

12:58

hmm maybe, got a server with space for it?

12:58

oh hey!

12:58

re yesterday's thread re dlls and gpg4win:

12:58

http://seclists.org/oss-sec/2016/q2/97

12:58

mircea_popescu ^^^ mega-l0l

12:58

asciilifeform actually i want this archive anyway, feed the wot into the wot.

13:00

oh it's gwern

13:01

asciilifeform nicely improved error message for bad keyts.

13:02

punkman what'd you want, an acct and 5 or so tb ?

13:02

mircea_popescu: which, the eggog ?

13:03

asciilifeform yeah, "no moduli"

13:03

mircea_popescu: lel, i never changed it

13:03

it always distinguished between 'not a key' and 'key, but no rsa'

13:06

http://phuctor.nosuchlabs.com/gpgkey/72AEE8BABBF4652BC2531BE414B2417B5A38128BAA8C1E6B4BEF9F4D0D026A7B << lel, fyodor of seclist

13:06

speaking of the rsa-less.

13:06

( from http://insecure.org/fyodor/gpgkey.txt )

13:07

mircea_popescu: 3tb should probably do

13:10

http://seclists.org/oss-sec/2016/q1/89 << lulzy, for 'golang' aficionados. somehow i missed this

13:10

(perhaps through not giving a fuck re shitlangs)

13:12

asciilifeform ah, by the reaction of fromphuctors i thought it was opaque

13:14

last bit of lulz from this dig,

13:14

http://seclists.org/oss-sec/2016/q1/178

13:15

^ usg retreating from pushing ecc claptrap ?!

13:15

asciilifeform "ecc is dead - not because mp said ecc is dead, but for other reasons altogether"

13:15

hurr durr.

13:16

this makes... how many by now ? 3rd major trend i killed, after "moore law" and so on ?

13:16

ehh can't resist, another, http://seclists.org/oss-sec/2016/q1/266

13:16

^ strike yet another crypto lib off the list

13:17

asciilifeform see, you should be upset the world's not beating down your door with job offers post phuctor ? what should i say ? that why is not every presidential wreath in the world mailed to me ?

13:17

lel!

13:17

in a sea of "who could have predicted", the man who does predict is but amused.

13:17

i am very amused!111 on my stake.

13:18

totally puts a stake through the heart of the "fair price" nonsense also. what is this "fair price", to hire the man that knows the future ? the causes of the past ?

13:18

"science of economics", so much drivel.

13:20

lol @go bignum.

13:20

predicting future, it turns out, is not so hard.

13:20

e.g. trb and dns.

13:21

oh remember how we were going to have a golang gossip

13:21

vaguely.

13:21

i remember very well.

13:22

and how cruel, how unreasonable, the beating i administered must've seemed to audience.

13:22

punkman turns out i don't have such a wonder ;/ you can have 2tb right now, though. should be ok, nevertheless, i think, seeing how it's not a single file/item, but a collection.

13:23

asciilifeform │ and how cruel, how unreasonable << notrly, deedbot went from golang to CL for example

13:23

what a coincidence!

13:23

http://seclists.org/oss-sec/2016/q1/450 << we luuuuuuv amd!111111

13:24

''Under certain conditions it allows unprivileged users running under qemu VMs to affect the host Linux kernel in a problematic manner...'

13:24

'

13:27

http://seclists.org/oss-sec/2016/q1/645 << run moar git.

13:27

'server and client side remote code execution through a buffer overflow in all git versions before 2.7.1'

13:28

at any rate, enough zoo for one day.

13:35

$rated gwern

13:35

mircea_popescu has not rated gwern.

13:35

$key gwern

13:35

http://wotpaste.cascadianhacker.com/r/e976c253-23b8-4c89-b9e1-bb51421051ec/

13:36

damn these people...

13:37

so what does http://www.btcalpha.com/wot/user/gwern/ say ? Fingerprint 85F99FDE8F20898F59BCDF32BE90E8E4F7E5D682

13:37

but what does the site say ? PGP key (mirror; fingerprint: 89C588CC; my old key, F7E5D682, is no longer usable)

13:37

and why am i at this point to believe this man is anything but an impostor ?

13:45

asciilifeform o you know what ? wanna spider keybase ?

13:50

my morning: http://wordpress.shithouse.tv/

13:59

am i the only one to have ever asked for "jiztory" in a terminal ?

14:01

asciilifeform meanwhile : keybase keys confirmed new via http://phuctor.nosuchlabs.com/gpgkey/1D7AB955D7C3D6DA6952F80879F3F89B16E367E31BA8067853DEFF66389A1FE7 ; will be sending you a dump later today.

14:05

and in other news, http://pastebin.com/FfdDSbBh

14:17

in other *other* news, "lastpass" password sharting tool won't let users *see* shared passwords, but does provide for *copying* shared passwords and pasting into arbitrary other places on the computer. further, if one gets into the DOM and changes the "password" attr on the relevant element the browser will happily render it in place.

14:17

the idiocy on display is no longer even amusing.

14:17

heh

14:18

it;s almost like a metal detector of its very owwwn!

14:20

yech

14:27

oh and incidentally, definitely worth reading gwern.net ; that fellow is almost exactly the tmsr antichrist : haskellite as far as computing science goes ; consumate lesswrongian as long as theology goes ; tardpedia "inclusionist" as long as political philosophy goes. pretty much every mistaken, poisonous or outright wrong assumption "modern" "civilisation" makes, he makes. loudly, unapologetically, roundly.

14:27

it's quite something else.

14:28

http://btcbase.org/log/2016-05-04#1462828 << neato

14:28

Logged on 2016-05-04 18:01 mircea_popescu: asciilifeform meanwhile : keybase keys confirmed new via http://phuctor.nosuchlabs.com/gpgkey/1D7AB955D7C3D6DA6952F80879F3F89B16E367E31BA8067853DEFF66389A1FE7 ; will be sending you a dump later today.

14:28

mircea_popescu: 'gwerns' are a dime a dozen.

14:28

asciilifeform incidentally-1 : would you prefer an actual dump ? i'm contemplating just doing posts in place, is this too much load for phuctor ?

14:29

mircea_popescu: better to chug it in on my end - impervious to www overload

14:29

whereas feeding'em in at the mouth end risks stalling when there are hordes of gawkers

14:29

incidentally-2 : you absolutely should introduce a (faux) directory structure of the type /ABCD/ABCD/ABCD/ABCD/ABCD/ABCD/ABCD/ABCD where each superior "directory" lists the subs it contains, and the last level lists actual keys. google will utterly lap this up. and it's useful in the general, passive sks.

14:29

asciilifeform aite, will send you dump then.

14:30

the abcd thing is an idea. but i wasn't really going for an sks clone

14:30

considering that we'll be jettisoning the pgp format.

14:30

costs ~nothing, it's just an interface atop what you already have neh ?

14:30

it can be done, sure.

14:30

i'd have to reorg the db again.

14:30

(i don't presently parse out the subness of subkeys)

14:30

do it, you;ll be amazed at the "artificial intelligence" alphabet, inc employs.

14:31

"something made by ten year olds on a rainy day"

14:31

http://seclists.org/oss-sec/2016/q2/229 http://seclists.org/oss-sec/2016/q2/230 << moar lulz re us

14:32

infuriating idiocy

14:32

'similar observations for factors are

14:32

probably a red herring: an artifact of the process used by these

14:32

factoring projects rather than part of how the keys were generated.'

14:33

and the continuing mention of openssl

14:33

asciilifeform he has a point tho.

14:33

where it never touched

14:33

but yes the large numbers are composites, this is obvious in 5 seconds to a kindergartener

14:33

how else.

14:33

in point of fact composites are broken into not-necessarily-prime chunks, which is more of a function of the random state of the breaker than anything, and the actual bitfield offers no information re the process that made the key

14:33

random ints are divisible by 3, 5... etc nyooz at eleven.

14:33

well so it is obvious, what of it. he can state it.

14:34

the insistence on 'software bug' whereas it is plain as daylight ~why~ there are 32mirror keys, and why they are for whom they are, is the riotous part.

14:34

all he's saying is that using THE FOUND FACTORS as some sort of lithmus for the key production process is a dead end. which it is.

14:34

ah, well. it's their schtick, what.

14:35

" Could it be that all of the broken e keys were generated by OpenSSL from year 2000 or earlier? " << it could not be. a) none of the keys come from openssl ; b) most keys are post 2000.

14:36

plain to anyone without a mouthful of obamacok

14:37

asciilifeform understand, the most important quality of doing things openly is that every derp everywhere is now able to try and stuff it into his peculiar headbox. there's a lot of "number worshipping" undercurrent i detect in there, sort-of the educated version of "lottery playing systems", which is more repugnant to the civilised man than the political slant. even so.

14:37

let the fuzzers fuzz.

14:37

reads ~exactly~ like lottosystem folk

14:37

and in other weird news, keybase somehow has > 50k users. wtf.

14:37

but artifully, deliberately, as misdirection

14:38

asciilifeform i perceive no such deliberate / artful anything.

14:38

well, what, he did not run the keys through pgpdump? did not see the dates ?

14:38

has nfi that openssl was never in gpg ?

14:38

indeed not. problem ?

14:38

also not.

14:38

(or closed pgp for that matter)

14:39

what, you expect people went to your 3rd grade ? how many people were there in that class! 20 ? 30 ?

14:39

whole world didn't fit!

14:39

what ~did~ he use for his analysis ? tea leaves? sheep entrails ?

14:39

he writes numbers on paper. problem ?

14:40

because what, he is a pashtun, never seen computer ?

14:40

how is it your business how he runs his household!

14:40

not my business, i suppose, whether the man is coprophagic, but he forgot to wipe his mouth, it seems.

14:41

it's the internet.

14:41

and now i have trouble distinguishing his mouth from arse.

14:46

i has a working keybase crawler..

14:46

phf i already mostly extracted the userbase.

14:47

kk

14:47

if you wanna do something, do the gwern thing, punkman disappeared ?

14:48

what gwern thing?

14:48

http://btcbase.org/log/2016-05-04#1462750 << there's a 50gb dump of snapshots of dark markets.

14:48

Logged on 2016-05-04 16:54 punkman: https://www.gwern.net/Black-market%20archives << possibly good source for keys not on keyservers

14:48

a) it should be downloaded anyway ; b) contains pgp keys.

14:48

hmm

14:48

which should be extracted an' dumped to phuctor.

14:49

not to mention their wot should be extracted also, ffu.

14:49

that's a whole Project

14:49

so it is ; currently looking for a doer.

14:50

another thing that really needs 'a doer' is the hunt for ancient pgptrons

14:50

that might hold the magic.

14:50

asciilifeform that will have to be user-provided.

14:50

otherwise you're sending men to blow glass with lungs, warmed with arse.

14:50

send men to where they have leverage - such as by exposing a whole swathe of usg "law enforcement" derps.

14:51

there weren't so many of'em

14:51

at some point, esp the smaller markets, were 2/3 usg by mass

14:51

like these things go.

14:51

classic

14:51

it wouldn't astonish me if it were 99%.

14:52

phf anyway, at the very least that thing needs long term seeders ; which is a mitzvah.

14:52

it's on archive.org so probably safe by now

14:52

$gettrust archive.org

14:52

L1: 0, L2: 0 by 0 connections.

14:52

entirely unsafe.

14:52

2tb will do in a pinch, does it have to run in polite mode on shared server?

14:53

well, as of right now it's not pulling at any rate

14:53

punkman pgpgram me your ssh key, i'll add it and you can log into account. nothing really happening there atm, so you should be ok.

~ 44 minutes ~

15:37

http://www.egyptindependent.com//news/tom-jerry-blame-violence-arab-world-official <<< so I watched a lot of T&J as a child, I suppose I am a terrorist.

~ 46 minutes ~

16:24

;;bc,stats

16:24

16:25

https://factorable.net/keycheck.html << lel

16:25

'The keycheck service is no longer available.'

16:26

awww.

16:26

because it was available, at some point, we just all collectivelly missed it throughout.

16:27

ahaha ha.

16:28

wasn't available in '13 when i started.

16:28

incidentally.

16:28

or iirc there was a form!

16:28

just b0rk3d

16:29

http://btcbase.org/log/2013-09-14#313064

16:29

Logged on 2013-09-14 15:24 asciilifeform: mircea_popescu: https://factorable.net/keycheck.html tests for some very basic weaknesses.

16:29

https://web.archive.org/web/20130220094146/https://factorable.net/keycheck.html

16:29

^ is what there was.

16:34

asciilifeform there was a form that did nothing. how is this "Available"

16:34

by this theory i'm available for coming out of cakes at parties.

16:34

except gavin ACTUALLY DOES IT!

16:35

lol

16:36

perhaps it worked at some point. i have deeply nfi.

16:36

yes, perhaps the moon is made of cheese.

16:36

this isn't how things work.

16:37

eh henninger's proggy from that site (straight implementation of bernstein) works.

16:37

and besides, hot chix dun lie do they

16:37

lel

16:37

sure, it works. and hanno boeck's ( http://trilema.com/2016/psa-hanno-bock-still-a-deceitful-shitbag/ )'s hands also work. in principle like that.

16:37

they just don't do anything useful is all.

16:38

boeck took henninger's thing and ran it

16:38

afaik that was all.

16:38

mno. he took it, and DIDNT run it.

16:38

there was an output in his shithub iirc

16:38

and then claimed to have ran it, but then his claim ran into the jagged shores of reality when he could not produce ONE SINGLE VERIFIABLE STATEMENT

16:38

in support of that claim.

16:38

ah yeah last year's boeck

16:39

this year's boeck reluctantly, grudgingly, ran the fucking proggy

16:39

on what looks like just our set of phucked keyz, handily loaded from our www.

16:39

no he didn't. he didn't get as far as removing the dsa/ecc keys out of the sks dump to get a proper count of rsa moduli

16:39

or rather, a pruned (how, i didn't bother to see, but smaller) subset.

16:40

snapshotted on some trilema article or other.

16:40

https://archive.is/mTgyy

16:40

https://github.com/hannob/pgpmoduli/blob/master/gcds it was.

16:41

perfectly egregious case of fraud, and i have no fucking idea what anyone accepting anything written by him for pay could possibly be thinking.

16:42

curl -s https://raw.githubusercontent.com/hannob/pgpmoduli/master/gcds | sort | uniq | wc -l

16:42

186

16:42

i wonder, how did he pick ~which~ 186 of our mods to boeck over.

16:43

or, hm, nm,

16:43

curl -s https://raw.githubusercontent.com/hannob/pgpmoduli/master/vulnerable_moduli | sort | uniq | wc -l

16:43

273

16:43

~more~ than in my set ?? where'd the new ones come from.

16:44

his arse ?

16:44

if you're bored run a comparison.

16:44

who knows, maybe it's one of those typical if hysterical cases of "thief claiming theft" and we discover HE doped the sks servers.

16:44

that would be mighty lulzy.

16:45

though i have nfi what could point specifically to him (or anybody else)

16:45

i find stuff like that 271 byte one a little off.

16:45

256*

16:46

which?

16:46

(paste?)

16:46

about half are 512, exactly 9 are 4096.

16:46

12c7466512c746654d5320e34d5320e3e011d9bce011d9bcf9891175f9891175af590560af590560aeddd493aeddd493e50c5e54e50c5e54f0fba560f0fba5600505c39c0505c39c72a6c40372a6c40301ec59a601ec59a69525b3689525b368eb92e62ceb92e62ce60eb80ee60eb80e9eca6a989eca6a985cff89cb5cff89cb

16:46

looks like a standard mirrormod

16:46

buncha them, really.

16:46

well yeah

16:47

2339dbf02339dbf0b97fc3efb97fc3efe42d1ab5e42d1ab5a9917e72a9917e72c71535d5c71535d58238a2cd8238a2cd7d43a0b27d43a0b24ebfa6664ebfa6660bbfeaa90bbfeaa94d312b834d312b833e8898503e889850824696df824696df6411dd0f6411dd0f5f5d20475f5d2047f5d3431bf5d3431b16f6fdfd16f6fdfd

16:47

we have http://btcbase.org/log/2016-05-04#1462672 of them as of last count.

16:47

Logged on 2016-05-04 16:32 asciilifeform: 153

16:47

i mean specifically the 128 byte ones.

16:48

that'd be any 1024b mod, no?

16:49

dude there's soemthing amiss here.

16:49

hm?

16:49

http://dpaste.com/0Q15SM1 << take this. it's in hex right ?

16:50

aha

16:50

4096 characters = 2048 bytes = 16384 bits ?

16:50

aha

16:50

he has NINE "vulnerable" 16kb moduli ?

16:50

who even fucking uses 16kb rsa.

16:51

is that even a rsa modulus ?

16:51

i saw at least 1 of these.

16:51

can't be verified, of course, because he publishes some random strings.

16:51

these, to my eyes, count as EXACTLY nothing.

16:51

https://encyclopediadramatica.se/Trigglypuff

16:52

Note that Trigglypuff like Gavin lives in Amherst, MASSachussetts

16:52

for all this is work, he ran /u/random for a while.

16:53

mircea_popescu: http://phuctor.nosuchlabs.com/gpgkey/561245D928FF0843F5F346549A73B46C6836E3B2BE309DC7F6CCAFCF7F17795C

16:53

^ one such

16:54

care to calc the fingerprint of the one i dpasted and see if it exists irl ?

16:55

will do this when i get back to the right console

16:55

for all of them, in fact.

16:57

randomly looking : 299120016550324784203428319 aka F76D2096C15EFF95C9F1DF not on his list ; 1888753310995198753 aka 1A3633211A363321 not on his list,

16:57

that's 2 of 2, what the fuck am i even doing here.

16:57

derp pulled some random digits out of his ass, end of story.

16:57

oh guess what

16:58

gpg --recv-key cbe2d0bd

16:58

... not found on keyserver

16:58

awww!

16:58

(your example)

16:58

so... not only did he lie about having run the code ; once getting called on it, he ACTUALLY FABRICATED SOME EXAMPLES.

16:58

either that or he used ft meade's sks

16:58

nice going.

16:58

that has keys from mars in it.

16:58

yaright.

16:59

or these are ssl keyz

16:59

there are 16kb keys in the wild

16:59

from henninger

16:59

punkman: i linked to one earlier

16:59

on phuctor.

16:59

punkman sure there are.

17:02

asciilifeform: did you say something about recovering pubkeys from rsa signatures in the past?

17:03

punkman: yes, it is not difficult

17:03

but you need a number of sigs.

17:03

more - better.

17:06

what was it, 1024 sigs for 4096 rsa key ?

17:07

iforget.

17:07

it is in the logz somewhere.

17:10

ok, came back from dinner, it looks like dnmarchives is pulling at my connection capacity

17:10

it looks like what ?

17:11

oh the torrent ? cool. is it actually 50gb ?

17:12

;;later tell shinohai https://images.encyclopediadramatica.se/1/10/Triggly_Puff_Dating_Profile.jpg

17:12

The operation succeeded.

17:15

"I'm socially awkward and hate wearing clothes" <<< Dear Lord.

17:16

48g and a 206m "padding file"

17:16

cisheteropatriarchy << rolls right off the tongue

~ 17 minutes ~

17:34

phf not bad!

17:34

shinohai hey, the idea of even dressing young women indoors is bizarre.

17:37

I cannot see trigglpuff as "young woman" by any stretch of imagination.

17:37

http://i.imgur.com/mHoDqf8.jpg <<< moar like it

17:40

well, she's obese, but otherwise under 30 no ?

17:40

Impossible to ascertain

17:40

Same way it is impossible to tell if Gavin is older than 12

17:46

i guess. i come from a world where women under 30 aren't allowed at uni anwyay.

17:46

and by under i mean over*

17:47

no hot henningerz at mircea_popescu's uni, i take it?

17:48

woman got shit to do, ain't nobody got time to fuck around in postdocs forever.

17:55

$up fromphuctor

17:55

fromphuctor voiced for 30 minutes.

17:55

I wonder what mircea_popescu would do to trilema readers if trigglypuff cam in here to do the "I'll pay for your tits" thing.

17:56

what, you don't wanna see her tits ?

17:56

even xhamster announced they would not pay for nudez of her.

17:56

trilema is more daring than xhamster i guess.

17:59

mircea_popescu: http://www.loper-os.org/pub/bok.txt

18:00

do i need to explain this

18:00

or is it obvious.

18:02

seems like he even bagged a few folks we didn't, e.g,. http://phuctor.nosuchlabs.com/gpgkey/E11CDF14DD89647BC7B12CEAA217D3FFFBD37D6640295728BEC80235ED76367F

18:03

i'm beginning to suspect that mircea_popescu was right

18:03

not re the 'random numbers out of his arse'

18:03

because this obviously wasn't it

18:03

but that boeck is the ~perp~, laughing at us.

18:12

[Trilema] Mr. Right - http://trilema.com/2016/mr-right/

18:15

;;later tell mircea_popescu http://btcbase.org/log/2016-05-04#1463062

18:15

Logged on 2016-05-04 21:59 asciilifeform: mircea_popescu: http://www.loper-os.org/pub/bok.txt

18:15

The operation succeeded.

~ 27 minutes ~

18:42

asciilifeform interesting

18:42

so i fell on the exactly... one he had out of thin air ?

18:45

well meanwhile google only shows trilema for any hannob/pgpmoduli search i do ; and i dunno how to derive an actual location from that url. when was the vuln moduli .txt published ?

18:47

"updated_at": "2016-05-02T16:54:14Z" according to github...

18:47

aha.

18:49

asciilifeform imo this is absolute proof he copied the phuctor results without understanding them. otherwise it is plain impossible he has a list of "vulnerable moduli" that is more extensive than phuctor's all the while having a list of factors that includes ~none of the factors phuctor found

18:50

where ~none is extrapolated on the basis of 2 assays coming up with 0 hits.

18:53

http://www.curiousgnu.com/reddit-godwin

19:06

ok am seeding complete dnmarchive

19:06

cool!

19:07

how's your side punkman ?

19:07

also in lieu of working on btcbase i figured out how to make my crawler download really fast, so now i'm running into rate limiting :/

19:08

on what ?

19:08

keybase

19:08

lol.

19:08

how many users did you end up with so far ?

19:09

not many, 30k something

19:09

unique ?

19:09

yes

19:09

then you're ahead of me, i only see 13.5k

19:09

26214 14866

19:09

unique users, pending to process

19:09

hm ?

19:09

ah

19:09

aite, ima call this off then, you're way ahead.

19:12

it's now consistently returning empty documents even with two workers, i'm probably on some ban list

19:12

heh. why push it lol.

19:13

i'll upload the list once it starts looking like i'm exhausting the graph. should've been saving the graph info come to think of it

19:13

anyway, i've implemented a truly braindamaged algo,

19:13

19:13

it just cycles that, takes a while.

19:14

well, you said something about 50k+, and by the time i came back from lunch my single thread solution got about 19k, so i went "no way in hell is mp's awk/bash hackery going to beat my leet python script", which promptly got me ratebanned

19:15

lol

19:15

i had forgotten to dedupe the list.

19:16

deduped it's at ~13232 rightnao.

19:18

http://btcbase.org/log/2016-05-04#1463079 << he has most of our mods. and broke at least one that's still green on phuctor

19:18

Logged on 2016-05-04 22:49 mircea_popescu: asciilifeform imo this is absolute proof he copied the phuctor results without understanding them. otherwise it is plain impossible he has a list of "vulnerable moduli" that is more extensive than phuctor's all the while having a list of factors that includes ~none of the factors phuctor found

19:18

and got a bunch of mods we dun have afaik. from ????.

19:18

asciilifeform so then why doesn't his factor list list the factors ?

19:18

see http://btcbase.org/log/2016-05-04#1463011

19:18

Logged on 2016-05-04 20:57 mircea_popescu: randomly looking : 299120016550324784203428319 aka F76D2096C15EFF95C9F1DF not on his list ; 1888753310995198753 aka 1A3633211A363321 not on his list,

19:19

waaaaitasec

19:19

it doesn't??!

19:19

should.

19:19

you tried, and none of them divided the mod?!

19:20

i took some of the factors we found, converted them to hex, and looked for them in his list. not there.

19:20

our factors are composites

19:20

so are his.

19:20

what, 3000000003 is prime now ?

19:21

(in fact MOST of his "factors" are that, mirror bs, 19, 35, 65, etc)

19:21

aha

19:21

if you look through the list. 5f0000005f is not distinct from 50000005, even if wc -l will count them each

19:22

and he simply does not have enough DATA in that file to account for more than maybe 1/5 or so of the factors phuctor found

19:22

aha

19:22

ie, we have composites, yes, but about 12kb of primes.

19:22

he has more lines, 500 bytes worth of primes, and supposedly more factored moduli

19:22

doth not wash.

19:22

i suppose i'll divide'em, later.

19:24

really, not worth the effort. the entire thing exists simply to waste your time.

19:25

i wanna know why he popped one we hadnt

19:25

can pretty much ignore him from here out, for all the difference his miserable existence will ever make to anyone.

19:25

imho he may well be the perp

19:25

the original one

19:25

that a liar claims something doth not mean it is also worth investigating.

19:25

that schmuck ? gimme a break.

19:25

he didn't perp the insemination of his wife, what.

19:27

easy to test.

19:27

his primez will fatten the 8ball for a run and we see.

19:28

as foretold in ... THE VERY LOGS!

19:28

good thing you had hopper added.

19:32

ha

19:33

reusing the same connection session fixed the rate limiting problem

19:33

at 31k now

19:33

brb

19:33

same

19:44

so, should i mess with the gpg conversion? or is there going to be possibility to feed raw (e,N,userinfo) data directly?

19:46

to phuctor

~ 17 minutes ~

20:04

jurov we want the key data anyway, you know, so as to publish the pages nicely.

20:04

put the github url or w/e it is instead of the normal comment field

20:07

i suppose this really ends up in a discussion of "we need a new format for rsa keys", doesn't it.

20:08

even base64(csv of e,N,string) would be better than the current shit.

20:22

[» Contravex: A blog by Pete Dushenski] Razerbacks, oh razerbacks! - http://www.contravex.com/2016/05/04/razerbacks-oh-razerbacks/

~ 16 minutes ~

20:38

mod6

<+a111> Logged on 2016-05-02 20:05 asciilifeform: ;;later tell jurov observed any spike in trb site traffic ? (it is linked from nosuchlabs.com) << cat /var/log/thebitcoin.foundation-* | grep "nosuchlabs" | wc -l 69

20:39

mod6

apparently this started around May 1st.

20:51

*

asciilifeform back.

20:52

hanbot

for the record, it's not just phuctor that your friend Boeck [could have done] did. See also [could have] found Heartbleed: http://www.openwall.com/lists/oss-security/2015/04/07/7

20:52

and shot kennedy!

20:52

(or... unshot?!)

20:52

lmao

20:52

there's a deedbot ripoff doing the rounds as well

20:52

what the fuck.

20:52

ben_vulpes: those are old nyooz

20:53

what is with this, it's self-parodic by now.

20:53

there was a shit-combinator sponsored one at least a year ago

21:01

asciilifeform more's the point : is phuctor happy with a e, n, userstring csv ?

21:01

right now mods have to link back to keys in the db

21:01

(as in, rfc4880 turds)

21:01

"keys" ie, fingerprints ?

21:01

as in .asc

21:01

that's calculated from N no ?

21:02

no, as in thrown in the submit box.

21:02

this is fixable but not immediately.

21:02

aha. so no cheating here

21:02

not yet.

21:02

there wouldn't really be anything to throw in the box for ssl keys tho

21:02

not yet.

21:02

unless want to generate a pgp 'box' for them.

21:03

so is the logical thing here to just proclaim "rsa key, as per the republic, is a e, N, string tripled" and then, jurov can dump to THAT format and you'll import from that format later ?

21:03

aha, but it helps to leave some place for 'whose key this allegedly is'

21:03

otherwise the output becomes a pain to read.

21:03

"string"

21:04

no ?

21:04

aha.

21:04

right. so the new standard for a rsa key is (e, N, userstring), and everyone's expected to produce THAT.

21:04

aha.

21:04

alrighty then.

21:05

jurov ^ feel free to extract as such and it'll be imported later on.

~ 20 minutes ~

21:25

https://yro.slashdot.org/story/11/12/27/0044242/gnupg-short-id-collision-has-occurred << vintage lulz.

21:38

https://www.schneier.com/blog/archives/2016/04/friday_squid_bl_524.html << our old phriend's bl0g, even.

21:41

in entirely unrelated nyooz,

21:41

https://www.kickstarter.com/projects/1604844025/bloc-by-bloc-the-insurrection-game << via Vexual.

21:41

BingoBoingo ^ possibly of interest to you.

21:42

'In Bloc by Bloc: The Insurrection Game, players join a movement that is struggling to liberate a randomly generated city that changes every game. Each player controls a faction of revolutionaries fighting back against the authorities. The factions must cooperate to defeat their common enemy while carefully balancing individual secret agendas. Build barricades, clash with riot cops, loot shopping centers, defend liberated zones, and

21:42

occupy the city before time runs out and the military arrives.'

21:42

lulzy.

21:49

asciilifeform yeah, they're propping him something fierce. fun times.

21:49

if nothing else, populates teh list of names.

21:57

mircea_popescu: http://dpaste.com/14F1S3Y.txt

22:00

"Pedofunding A crowdfunding site for child pornography, Pedofunding, was launched in November 2014. It seemed like possibly the birth of a new black-market business model so I set up a logged-out scrape to archive its beginnings (sans any images), collecting 20 scrapes from 2014-11-13 to 2014-12-02, after which it shut down, apparently having found no traction."

22:01

l0l!!

22:01

i guess a bunch of weirdos have the usg to thank for their wholly delusional belief that child porn is "big business", somehiw.

22:01

nuts.

22:01

hey all folks with childrenz gotta be deluded into thinking their spawn are worth something...

22:01

or they start to slide

22:01

heh.

22:15

https://www.reddit.com/r/DarkNetMarkets/comments/3dfq8s/dark_net_market_archives_20112015/ << fucking dopeheads, i swear

22:16

i almost prefer the vapid floozies. to hear these schmucks " I feel like this post deserves a montage or a slideshow with music. So much reminiscing and joyful sadness. ", makes my skin fucking crawl.

22:16

'I'm no longer as interested in the DNMs as I used to be. I was originally lured in by the fascination of watching a small cryptopunk revolution, and I was hopeful that it would go beyond the SR1 model into multisig and beyond. But we have seen little multisig usage, and that augurs ill for the distributed marketplaces. (What if someone built a trustless distributed blackmarket and no one wanted to use it?) Instead, the SR1 business

22:16

model has proven remarkably durable despite the constant wearying turmoil of exit-scams and hacks and as I write this in mid-July 2015, there seems to be little chance that things will change substantially soon. (If Tor hidden services are cracked, the DNMs will simply move to I2P or Freenet; if Bitcoin starts getting too easily tracked, transactions will be settled in Monero or another cryptocoin with better anonymity properties, et

22:16

c.) ' << l0l!!

22:17

asciilifeform he's not JUST into lesswrong, wikipedia, bla bla. he's also convinced "darknet" is relevant in general, that a bunch of inept shitheads were "a cryptoanarchist revolution" and, wonder of wonders, that the pill poppers had some sort of impact in bitcoin whatsoever.

22:17

it boggles the mind, what nonsense people can sell themselves on, for lack of friends and anything useful to do.

22:18

frying brain like an egg with ??? also helps. presumably.

22:18

he said what he was doing, some stimulant or other

22:18

modafinil

22:19

that wouldn't explain it.

22:19

maybe that's just the official truth.

22:19

it is in the logz - this is the pill that mircea_popescu wouldn't even notice if he ate.

22:19

prolly he also ate 10,001 'experimentals.'

22:20

possibly.

22:20

it is ~also~ possible that he ate nothing.

22:20

ah, and obviously - fully dedicated to "safety in tor"

22:20

when i was a bored, sn0r3d kid, reading usenet, i sometimes read the dope groups

22:20

and imagined what their 'trips' might feel like.

22:25

i guess more or less like waking with a headache in a dirty bed with a woman you don't recall meeting.

22:25

nah

22:26

that was imagining-what-drink-feels-like.

~ 31 minutes ~

22:57

http://lesswrong.com/r/discussion/lw/9p9/open_thread_february_114_2012/5v6g << i followed this link off the guy's page ; turned out to be exactly as worthless as expected (take the most glaringly obvious point - he protests that polyamory practitioners are rich powerful valuable people [which he can't confront so he has to mangle up in terms of skin color etc, which doesn't make him a racist because rationalism or whatever, t

22:57

he usual crap] ; it doesn't occur to him that while this is true, the expectation that "all the people" are a sort of given, and polyamory must be applied TO them, as they are, warts and all, as opposed to THEM being applied to it, through an extrudation process which substantially changes THEM, as just so happens to be the absolute historical norm both in theory and in practice - but hey, he needn't know this anymore than th

22:57

e previous point, he's got a rationalist amulet to protect him from things!), but also i notice - that lesswrong thing is essentially dead, isn't it ? one wiki edit (his), "0 points" throughout whatever that may mean, recent posts nobody cares about, latest diary from February, 5-th most recent blog from last month etc etc. i thought there were many idiots in this thing, turns out it's just a handful of derps that meanwhile f

22:57

ound girlfriends, a la encyclopedia dramatica ?

22:57

and in other lulz http://annasalamon.com/

23:04

dag that's some /jew/

23:04

the chick ?

23:04

mhm

23:05

o check it out, openwrt split up.

23:05

i wonder if it's a moles vs ants sorta split

23:08

mircea_popescu: once again for teh illiterate?

23:08

"moles vs ants"?

23:09

the complaints are poor decision process, lack of transparency etc. i wonder if the actual valuable contributors packed and left the various hanno bocks, bob becks and other undesirable politicos behind.

↖ ↖

23:12

but in other lulz, http://security.stackexchange.com/questions/13996/convert-rsa-public-key-to-the-right-format?rq=1

23:13

a us bank is willing to touch customer keys? o.O

23:16

private banks have been using keys for over a decade you know.

23:17

http://btcbase.org/log/2016-05-05#1463243 << quite unlikely. you can't just take a tumour off like a knapsack and get up and go...

23:17

Logged on 2016-05-05 03:09 mircea_popescu: the complaints are poor decision process, lack of transparency etc. i wonder if the actual valuable contributors packed and left the various hanno bocks, bob becks and other undesirable politicos behind.

23:17

depends on the tumour.

23:18

http://btcbase.org/log/2016-05-05#1463233 << pet informs me that 'there is a lesswrong ~diaspora~, self-identified, in a buncha places, even tumblr'

23:18

Logged on 2016-05-05 02:57 mircea_popescu: e previous point, he's got a rationalist amulet to protect him from things!), but also i notice - that lesswrong thing is essentially dead, isn't it ? one wiki edit (his), "0 points" throughout whatever that may mean, recent posts nobody cares about, latest diary from February, 5-th most recent blog from last month etc etc. i thought there were many idiots in this thing, turns out it's just a handful of derps that meanwhile f

23:19

but what happened to their home island of caspiar ? it fucking sunk ?

23:19

something let the air out of the thing, and the denizens dispersed to the four winds

23:19

weird.

23:20

all analysis seems to point to the whole substance of that thing being based on a very tooth-and-nail neoprotestant stubbornness of collective action.

23:20

i suppose eventually they couldn't stand each other anymore or somesuch