#trilema | 2016-05-22

also http://btcbase.org/log/2016-05-03#1461563 ; but http://btcbase.org/log-search?q=%22Phuctored%3A+109%22 apparently not all though.

01:15

Logged on 2016-05-03 00:36 deedbot: [Recent Phuctorings.] Phuctored: 625320991898048033 divides RSA Moduli belonging to 'Henry Hertz Hobbit <hhhobbit@gmail.com>; Henry Hertz Hobbit <hhhobbit@hotmail.com>; Henry Hertz Hobbit <hhhobbit@securemecca.net>; Henry Hertz Hobbit <henryhertzhobbit@yahoo.com>; ' - http://phuctor.nosuchlabs.com/gpgkey/63016E43A530350EC983F09A74C50EC8E87FEB92F3DEAC355BE2E64CA7985921

01:15

weird.

~ 3 hours 21 minutes ~

04:36

http://btcbase.org/log/2016-05-22#1470431 << not server keys (but ssh client keys do, yes), it would appear. my stolen and modified ssh key unpacker doesn't see any more info - only PEM'd e and N (as well as ip and type of key, e.g. "ssh-rsa")

04:36

Logged on 2016-05-22 03:49 mircea_popescu: Framedragger iirc ssh pubkeys also include an email do they not ?

04:36

i'll double check though

04:37

http://btcbase.org/log/2016-05-22#1470424 << right - sure

04:37

Logged on 2016-05-22 03:46 mircea_popescu: Framedragger a sample sorta thing works to have what to get things going with ; but in general, just do and deliver the whole bunch

~ 1 hours 15 minutes ~

05:52

oh god damn it, apparently amazon aws is behind one of those "we protect you" things - arbor networks - these folks detect scans and filter them. fuck amazon, then

05:54

(ah more like, they arbor networks' gear, but i was advised the latter may preemptively throttle / filter out scans)

05:54

*they are behind

05:55

"trinque: Framedragger: if you get tired of aws, there's this cheap-as-shit DC called Joe's Datacenter I've been using" << sooo :) do you know by any chance if *they* are behind any stupid gear which may filter out mass scans?

05:56

(scans are via simple TCP SYNs)

~ 43 minutes ~

06:39

[Recent Phuctorings.] Phuctored: 229166617 divides RSA Moduli belonging to 'Franco Visentin <Franco.Visentin@italtel.it>; Franco Visentin <visentin@milano.italtel.it>; ' - http://phuctor.nosuchlabs.com/gpgkey/0A132B46A74CB542285BF53B2BBF026C76EE1B9EDF6E26E3EDBF5E42DFC4D53C

↖

~ 1 hours 12 minutes ~

07:51

http://btcbase.org/log/2016-05-22#1470431 << hmh actually not sure now. it doesn't seem that the email addy in the ssh host's pubkey is sent to client. yet you're right in that the email addy is included (in e.g. /etc/ssh/ssh_host_rsa_key.pub). will check (ssh-keyscan explicitly doesn't give/relay it though)

07:51

Logged on 2016-05-22 03:49 mircea_popescu: Framedragger iirc ssh pubkeys also include an email do they not ?

~ 31 minutes ~

08:23

maybe asciilifeform had a point about modern stupidity re. network. i've been very joyfully scanning on three non-amazon hosts and just received first abuse complaint. need to move ops to the likes of ukraine/bulgaria, lookslike! >.<

↖

08:26

lol

08:27

(it came from hetzner btw where lotsa (by european folk standards anyway) 'shady' stuff runs and where quite a bit of hax0ring originates from)

~ 31 minutes ~

08:58

BingoBoingo

Well how do you think they knew to care?

~ 1 hours 17 minutes ~

10:15

yeah, i guess that's how it goes.

10:22

Framedragger aha. aite.

10:23

and no, they just do not want to be useful to "us", ie, independent people, ie, http://btcbase.org/log/2016-05-19#1468530

10:23

Logged on 2016-05-19 15:03 mircea_popescu: as the maximal leverage avaialble to the individual increases, the % of things crawling out of cunts (which, recall, run perl) that may ever individuate decreases.

10:23

it's a philosophical problem.

10:25

10:28

Framedragger you can also tell them that we're in the process of probing the internet for sever ssh key to break them via phuctor, and as this is a tmsr problem they can get phucked - it will get done over their dead bodies.

10:29

http://btcbase.org/log/2016-05-22#1470457 <<< ahahahaha toldja

10:29

Logged on 2016-05-22 12:23 Framedragger: maybe asciilifeform had a point about modern stupidity re. network. i've been very joyfully scanning on three non-amazon hosts and just received first abuse complaint. need to move ops to the likes of ukraine/bulgaria, lookslike! >.<

10:29

unfiltered net is a thing of the past

10:30

and when you scan from orc box, you often get blackholed on ~other end~

10:32

the probject just suddenly acquired a new valence : it will allow us to also reject shitty hosts! move whenever one turns out shit, see what you're left with. report here, too.

10:32

and if push comes to shove, we might as well use the method described in the original census - ie, write a proper virus for it.

10:33

with the difference that we were looking for storage/hosting space as well, so might as well make it a p2p abstract republican implementation of aws.

10:33

http://btcbase.org/log/2016-05-22#1470454 << new, btw

10:33

Logged on 2016-05-22 10:39 deedbot: [Recent Phuctorings.] Phuctored: 229166617 divides RSA Moduli belonging to 'Franco Visentin <Franco.Visentin@italtel.it>; Franco Visentin <visentin@milano.italtel.it>; ' - http://phuctor.nosuchlabs.com/gpgkey/0A132B46A74CB542285BF53B2BBF026C76EE1B9EDF6E26E3EDBF5E42DFC4D53C

10:33

something in the vein of what was that project called...

10:34

http://trilema.com/open-parasitic-p2p-relay

10:34

mircea_popescu: scanning from consumer boxen takes motherfucking forever

10:35

depends how many.

10:35

esp the typical winblowz victim's

10:35

not like i WANT to. but if "commercial" turns out to be "shit" a la argentina, it becomes not-an-option anymore.

10:36

asciilifeform only new to you, hanno bock ( http://trilema.com/2016/psa-hanno-bock-still-a-deceitful-shitbag/ ) had it in his list since years ago. forgot to publish it s'all.

10:36

lelz

10:37

most assuredly

10:37

o btw, got my paste ?

10:37

still in bed, will eat it soon

10:38

Framedragger if indeed ssh-keyscan wipes it, you'll end up having to gut the tool, and recompile it. ssh-keyscan-tmsr

10:39

asciilifeform if you can add "current largest prime" and "download 8ball" somewhere that'd also kickass.

10:41

it isn't stored as text, and converting will eat many cycles

10:41

to download you mean ? as binary worx imo

10:41

largest prime is not so hard tho, will add to list

10:41

mircea_popescu: it is stored in format meaningful only to my proggy

10:42

downloadable as THAT FORMAT with explanation wtf it is, even more useful.

10:42

folks can generate their own primorial, it is quite trivial

10:42

you gotta force the world to submit. that journey starts with the first step : show it what to submit to.

10:42

^ i just resumed manhood.

10:43

i'd even post the code, but it may help hitler more than it helps us

10:43

dun have to post the code, no.

10:43

heheh. but YEAH, don't worry i haven't given up, formulating plan, meanwhile scanning continues because fuck 'em

10:44

*

mircea_popescu is formulating the other plan, wherein the schmucks haven't learned ANYTHING from the bitcoin experience, will continue with uppity bullshit and we'll in short order end up having to organize bombing campaigns because idiot socialists imagine they may arrest republican folk.

10:46

they would arrest the sea and the sky if they had a jail to fit'em in.

10:46

heh.

10:46

ticket escalation process should include "organizational takeover" at some point

10:48

not really, in the ideal. who the fuck wants to take over the role of feeding the cattle. (point in case : http://logs.minigame.bz/2016-05-22.log.html#t14:21:58 ). i see little drawback to the solution of "massacre all teh beoble" if it comes to that.

10:48

hm, yeah.

10:48

but otherwise, let the socialists run the daycare, that's what they know and what they're for. the only edge is that they MUST come to terms with the fact that they're not "il factotum de la citta", but some derpy old women running the daycare, must stay out of way of men, and bow head respectfully when encountering them

10:49

that's the one loose end of the world right now, that they somehow got the idea everyone's a child and their kindergarten "rules" matter in the objective.

10:49

hence - anomists.

10:50

fuck me if i want to organize tmsr versions of "customer support" calls, general hospital practice, "they took our jerbs" response and all the myriad other pebcac issues the world's filled with since roosveltism filled it with beoble.

10:52

amusingly, this existed before (during feudalism, of course, the time everything cool existed). clerics were immune to temporal courts, all they had to do was plead privilege of clergy.

10:52

the institution survived in what's today probation.

10:55

would have to cure'em of 'we control the vertical and the horizontal' first tho

10:55

hopefully they eventually learn this of words, as the expression goes.

10:59

and, ironically, the privilegium fori could not even be renounced by individuals.

10:59

maps just about exactly.

10:59

btw, did everybody notice that 8balling broke a non-crockofshit (i.e. non-mirrored) key

10:59

yes.

11:00

with shit exponent tho

11:00

hence i predict, all or most of those will pop

11:05

and incidentally,

11:05

Clericis laicos infestos oppido tradit antiquitas, quod et praesentium experimenta temporum manifeste declarant, dum suis finibus non contenti nituntur in vetitum, ad illicita frena relaxant, nec prudenter attendunt, quam sit eis in clericos ecclesiasticasve personas et bona interdicta potestas, ecclesiarum praelatis, ecclesiis, ecclesiasticisque personis regularibus et saecularibus imponunt onera gravia, ipsosque talliant, e

11:05

t eis collectas imponunt, ab ipsis suorum proventuum vel bonorum dimidiam decimam, seu vicesimam, vel quamvis aliam portionem aut quotam exigunt et extorquent, eosque moliuntur multifarie subiicere servituti, suaeque submittere ditioni, et, (quod dolenter referimus,) nonnulli ecclesiarum praelati ecclesiasticaeque personae, trepidantes ubi trepidandum non est, transitoriam pacem quaerentes, plus timentes maiestatem temporalem

11:05

offendere quam aeternam, talium abusibus non tam temerarie quam improvide acquiescunt, sedis apostolicae auctoritate seu licentia non obtenta.

11:06

(bonifacius viiith, feb 1296)

11:07

asciilifeform hence the importance of 8ball growth.

11:07

aha.

11:08

the 1 minus is that firing gets slower with time.

11:09

how so ?

11:09

bigger products

11:09

moar tonnage

11:09

it occurs to me - only new keys should be paired with full 8ball.

11:10

extant keys should, independently, be paired with latest prime batch

11:10

we would not have that last result if we did this

11:11

and why not ?

11:11

think

11:11

i am thinking.

11:11

that key is ancient

11:11

submitted as part of the warmup

11:12

"new" refers to phuctor pov, not otherwise.

11:12

but not popped until 8ball grew for a day

11:12

if it has the key in db, then x ; if it doesn't, then y.

11:13

what i was originally thinking of doing was running sans 8ball all day except for midnight.

11:14

(treating any key differently from any other would substantially complicate the mechanism)

11:14

no, discriminate keys in "newly added" NA and "already known", AK, and then discriminate 8ball in historical H and what we're currently adding CA, and then pair NA with H and AK with CA.

11:14

this covers the whole thing without insisting to repeat H-CA over AK all the time

11:16

it'll be a while before any such trick is necessary.

11:16

aite.

11:16

and when it is, we'll simply bernstein in 2 processed, one just with 8ball.

11:16

*processes

11:16

aite then.

11:18

oh btw, roman law, restated by gratian : someone suing in violation of forum priviledge thereby loses his claim, no matter how well established it may be substantially.

11:19

$google hostensis "ita scriptum est"

11:19

No results.

11:19

pfff.

11:21

mircea_popescu: why did boniface essentially revoke the clericis laicos bull ?

11:21

in 'etsi de statu'

11:21

you can't revoke a bull. they stand for permanent memory of mankind

11:21

well, he backpedalled

11:22

he was being held hostage, it doesn't count :D

11:22

ahahaok.

11:22

(the original bull issued in a situation where france and england were moving towards war ; and because there was precedent that churchly goods may be taxed for a just war - ie, a crusade.

11:23

the respective kids were about to go crusading on each other's ass on boniface's property, so he issued the bull.

11:23

then got pissy, english king declared the clergy in a state of outlawry, which did noting, and the french king banned export of money fro mfrance, which starved rome.)

11:24

but the privilege of the learned man is that he may pick from the books what he wants ; and by now there's sufficient books for anything. thus therefore, clericis laicos stands.

11:25

(really, i only quoted it for the very interesting introduction - plainly states that teh beoble hate us, and always have, and logically always will. because the fruits of satan's own belly can't do no better. o.O)

11:25

quite

11:25

hence, oxford shall be surrounded by thick walls, and gunports.

11:26

even neal stephenson's yarn had this brought back

11:26

('anathem', mega-b0000k)

11:27

actually, re the times and places of that bull, kathrine hepburn and richard burton made an excellent film.

11:28

funny that he kept chasing the ill brought up (if very pretty) whore. imo she was a detriment to him.

11:40

mircea_popescu: theory draft looks pretty good, i'ma format it tonight (or possibly tomorrow, depending on meatspace chores i'm about to march off to)

11:40

cool ; no rush really.

11:41

i don't recall the shithub keys dump having yet been thrown in

11:41

was this done via the front door and i slept through it ..?

11:41

(the keybase set was posted here and i shoveled it in directly)

11:43

mircea_popescu: also afaik no one has ever generated a 4096 ~byte~ key

11:43

the figures normally given are in bit.

11:47

ah right.

~ 37 minutes ~

12:25

incidentally, re: earlier phucked key, https://sks-keyservers.net/pks/lookup?op=vindex&search=visentin%40milano.italtel.it << the genuine article

12:25

exactly same.

12:25

2048 bt even.

12:26

nb.

12:26

at this point it is a dead certainty that one of the '90s winblowz pgps was wholly a crock of shit

12:26

just about.

12:27

(and aha the good doktor boeck knew all along!1111)

12:28

one logical next step is to find out which.

12:29

and to find and flondor the authors.

12:29

nah.

12:29

(we already knew, e.g., re zimmerman.)

12:29

let 'em fret.

12:29

why would they fret unless the knife falls.

12:31

[Recent Phuctorings.] Phuctored: 229166617 divides RSA Moduli belonging to 'Franco Visentin <Franco.Visentin@italtel.it>; Franco Visentin <visentin@milano.italtel.it>; Franco Visentin <Franco.Visentin@italtel.it>; Franco Visentin <visentin@milano.italtel.it>; ' - http://phuctor.nosuchlabs.com/gpgkey/83D656B74C6A1E9C5CEEC29BA62DF7252A4E27EEA5229593594D0085A11F3BDF

12:32

heh

12:32

aaaaaaaaaaand there goes his OTHER modulus.

12:35

heh

12:39

[Recent Phuctorings.] Phuctored: 12452866785 divides RSA Moduli belonging to 'Timo Halbesma <T.L.R.Halbesma@uva.nl>; ' - http://phuctor.nosuchlabs.com/gpgkey/EA3020CDCD4CECB547E320E46FF6F6686F397656E19A4C437143EF9D6B0DAC28

12:43

guesswat

12:45

ANOTHER perfectly non-mirrored mod

12:46

with unremarkable e, even

12:47

http://btcbase.org/log/2016-05-12#1466073 <<< is this still a necessity ?

12:47

Logged on 2016-05-12 01:40 mircea_popescu: however, a major point of collaboration imo, would be if everyone who runs bots (ie, deedbot, yours putatively, etc) ALSO keep logs, and provide phf with passive redundancy

12:47

ben_vulpes

how old?

12:48

ben_vulpes: 2012.

12:48

https://sks-keyservers.net/pks/lookup?op=vindex&search=T.L.R.Halbesma%40uva.nl

12:48

pub 4096R/6E58C04E 2012-01-05

13:02

o noes.

13:02

shinohai not so much a necessity as an utility i think.

13:03

BingoBoingo do we care about broken 4kb key from 2012 ?

13:03

asciilifeform divisible with fucking 5!

13:04

aha.

13:04

*

asciilifeform bbl

13:04

oh well then, almost got eulora-style logs working good enough

13:10

nb.

~ 20 minutes ~

13:31

[Trilema] An essay on Woman in three epistles, by John Wilkes, esq. - http://trilema.com/2016/an-essay-on-woman-in-three-epistles-by-john-wilkes-esq/

~ 1 hours 6 minutes ~

14:37

ohai

14:38

trinque: looks like deedbot still chokes on trailing whitespace when $v'ing one's otp

14:39

also looks like there's an extra white space at the end of the GPG decrypted OTP

~ 26 minutes ~

15:05

mircea_popescu: plox to mpex withdrawals

~ 1 hours 55 minutes ~

17:01

on it.

~ 18 minutes ~

17:19

in other accidental news, http://www.hampsteadparishchurch.org.uk/data/vol_rate.php << "one tenth of one penny for each pound".

~ 26 minutes ~

17:46

and in yet other lulnewz, harold rosenberg wrote "heard of independent mind" in 1948, and died in 1978. guess who the fuck STILL claims copyright over that fucking essay ? usg!

17:46

ima publish it later on, fucking scandalous bullshit this. TEN YEARS AFTER THE DEATH OF THE AUTHOR. NO EXCEPTIONS. NO ASSIGNMENTS. NO BULLSHIT.

~ 21 minutes ~

18:08

hey.

18:08

so i've been brought current on one side of the fork.

18:09

and we proceed to discover the wonders of the web! google produces a bevy of "ocr services". as follows : newocr.com "Error! Text can not be recognized." ; ocr.space (best!!!) "Error: All images / PDF pages gave error. None of the image / page was successfully converted. Please check the errors in result area." and in that "page area", "****** Result for Image/Page 1 ****** Error:"

18:09

fucking useless shitstack omfg.

18:13

free-online-ocr.com claims "low image quality", which is outright fucking ridoinculous.

18:13

in 2016, like in 2010 , like FOR FUCKING EVER, if you want sometghing done... gotta do it yourself. sigh.

18:22

so we proceed to install tesseract ; which has obscure notation conventions and incredible inept github page / --help ; and which can only take ".tif" and it MUST NOT be ".tiff" and closes everything witgh a segmentation fault and finally after being catered to for ten mintues declares that "check_legal_image_size:Error:Only 1,2,4,5,6,8 bpp are supported:16" which holy shit omfg.

18:25

the magical fix, entirely undocumented of course, is to invoke "convert -colors 256 -alpha off -density 300 in.png out.tif" and let imagemagick (yeah, that horror) output stuff tesseract magically likes just fine.

18:25

i'm so sick of computer-pseudoscience i can't put it in words.

18:29

how goes diametric

18:29

over worked

18:31

saw some kind of schism happen, didn't realize it actually resulted in the fracturing of the channel.

18:36

more like expulsion of corrupt elements.

18:38

i see there's people straddling both sides of the aisle

18:39

i guess that includes me since i'm still in both channels and voiced in both.

18:42

*

mircea_popescu shrugs.

18:42

there's people everywhere.

18:52

BingoBoingo

<mircea_popescu> BingoBoingo do we care about broken 4kb key from 2012 ? << If someone wants to write it sure.

18:57

were you looking for something to sink teeth in diametric ?

19:11

*

danielpbarron was banned from the other side :D

19:20

O.o

19:33

[Recent Phuctorings.] Phuctored: 311016478199379485797517 divides RSA Moduli belonging to 'Kristian Biss (Mfr Voll Name) <Kristian.Biss@piraten-mfr.de>; Trotzik (Bei Zeus die Dicken schon wieder) <trotzik@piraten-mfr.de>; ' - http://phuctor.nosuchlabs.com/gpgkey/090DE0A92A6663072D4E9A404B6399E98F59D4C4C4825A31B580100BF4CB72B9

~ 33 minutes ~

20:06

[Trilema] The Herd of "Independent" Minds, or Has the AvantGarde Its Own Mass Culture? - http://trilema.com/2016/the-herd-of-independent-minds-or-has-the-avantgarde-its-own-mass-culture/

20:21

^ great read btw.

20:23

http://oilprice.com/Energy/Energy-General/Turkish-Russian-Relations-Worsen-As-Turkish-Helicopter-Is-Downed.html

20:23

*

mircea_popescu goes to fish for the piece of logs where this was predicted.

20:26

http://btcbase.org/log/2015-11-29#1333639 an' http://qntra.net/2015/11/clinton-found-a-turkey/ werd!

20:26

Logged on 2015-11-29 18:02 trinque: http://www.reuters.com/article/2015/11/29/us-mideast-crisis-turkey-russia-pilot-idUSKBN0TI07T20151129 << the angle I see here is that Turkey wants Russia to tell them of their operations in Syria in advance so that Turkey can pass the information along to their allies within

20:31

oh and re the perennial discussion of progress and "what things cost" : i'd like a pound of costards, please.

20:35

the crystal ball still works

20:47

mircea_popescu: nah, just curious what happened, and if i'd still be welcome in both places. or only one.

20:47

i'll let asciilifeform fill me in when i see him again

20:47

dun see why not.

~ 26 minutes ~

21:14

i just got spam with an... iso image attached. that's a new one o.O

21:15

thats impressive

~ 1 hours 7 minutes ~

22:23

asciilifeform et al.: a couple of representative ssh host key samples (e,N,ip_address) - two /8's - pipeline was masscan (sort of nmap+zmap with custom tcp stack) -> ssh-keyscan (manually parallelized) -> custom conversion into CSV

↖

22:24

http://95.85.10.71:8000/47/47-e_N_IP.txt.bz2 (a sparse /8 - 13983 keys extracted) (3.1MiB compressed)

22:24

http://95.85.10.71:8000/31/31-e_N_IP.txt.bz2 (a denser (but not super dense at all - can be 10x this and more) /8 - 55668 keys extracted) (13MiB compressed)

22:24

uncompressed TXTs as well as signatures (as separate *.sig's) in http://95.85.10.71:8000/47/ and http://95.85.10.71:8000/31/

22:37

(scanning the whole ipv4 in the sense of "check if something's listening behind this port, for all IPs" is apparently the easy part, even with no/little investment. you don't need to use stateful sockets etc. extracting particular info after doing some back-and-forth is where it's harder to scale.)

22:41

i'm afraid these keys won't contain any additional comments or email addresses. while the latter are stored on the ssh host, they are not transmitted during key exchange, viz.: http://wotpaste.cascadianhacker.com/pastes/e9318ddf-dfb5-494b-8c75-ecda5ebe30b1/

22:49

(i did store the 'banners' associated with all those IPs though, would consider merging them into the CSVs to become comments. don't know how useful, but curious (e.g. whether weak device is an embedded appliance/router etc))

22:49

they'd look like "31.204.153.252:22 SSH-2.0-OpenSSH_6.0p1 Debian-4+deb7u4"

22:58

yeah rather useful i'd say

22:59

certainly the "ssh census" will be a valuable qntra article which you're invited to write once done.

22:59