#trilema | 2016-10-06

!!up oama

08:31

oama voiced for 30 minutes.

08:32

thestringpuller and how do you propose the buyer "not let the supplier leave" ? unequal relationship, the supplier is the supplier, the buyer can run the gamut from the lowest upwards, so.

08:33

localbuttcoins is truly a convoluted way of obtaining btc

↖

08:43

https://bitcointalk.org/index.php?topic=1159946.msg16469139#msg16469139

08:43

!!up oama

08:43

oama voiced for 30 minutes.

08:44

asciilifeform http://wotpaste.cascadianhacker.com/pastes/mg8b1/?raw=true

08:45

still here mircea_popescu? you haven't convinced the argentinians to make you their dictator yet?

08:45

i dun wanna be the king of cattle.

08:46

how's ladyboyland ?

08:46

hot and humid

08:47

"vaginal"

08:47

shinohai what the everloving fuck, handmade sks ?

08:48

ikr

08:48

by a guy who "only has access to pc on weekend" ie, is 12 irl ?

08:48

I should feed all dem keys into phuctor

08:48

maybe that's why they all aim to have vaginas?

08:48

shinohai bet you we have them, but if you do - plox script for the love of all that's holy. bash-curl even.

08:49

oama i thought they just aimed to suck the dick.

08:49

that too

08:50

in other "holy shit open source" news : to run a linux repo, you must provide... md5hashes for the stuff, because... apt-get wants it. fancy that. and by default you get that and sha1. because it's fucking 1995 and there's a thousand fly eyes!

08:58

do we need to make a republican version of apt-get now?

08:58

no, burn the whole thing. v is enough.

08:59

linux repo in v?

08:59

also in lulz, red hat does not package rhash. at all. you want keccak on your system, use the buggy openssh implementation!

08:59

PeterL all software belongs in v and nowhere else.

09:04

and in other fucking lulz http://archive.is/YOQ4U

09:04

anyone have any idea how to do sha-3 in centos ?

09:06

http://keccak.noekeon.org/KeccakInPython-3.2.zip possibly.

09:06

for the love of christ.

09:07

or build their c reference proggy.

09:07

yes. because this is why fucking weimer exists, so anything you need you build from source. then PeterL can wonder if "linux repo in v".

09:07

IN WHAT THE FUCK ELSE

09:08

fucken bullshit.

09:08

hey wasn't it mircea_popescu who (correctly) pointed out that there are no usable gold teeth in executed usg corpses. and now he's trying to salvage rathead linux ??

09:09

legacy fucking sytstems

09:09

for the past five fucking years, nearly, i've been in the process of getting rid of the crap

09:09

and i'm still not done.

09:14

*

mircea_popescu sings... for the water is wide, i cannot get o'er

09:14

neither have i

09:14

wiiiiiiings to flyyyyyy

~ 19 minutes ~

09:33

!!key kmalkki

09:33

http://wotpaste.cascadianhacker.com/r/rymxo/?raw=true

09:34

!!rate kmalkki 1 coreboot maestro

09:34

Get your OTP: http://wotpaste.cascadianhacker.com/r/h089d/?raw=true

09:35

!!v 2858810A09E13E28CDCA83155877499E99905A51C93CD7909A7DD840FA53C04A

09:35

asciilifeform rated kmalkki 1 << coreboot maestro

09:40

welcome.

09:41

!!rate kmalkki 1 coreboot

09:41

Get your OTP: http://wotpaste.cascadianhacker.com/r/45p2d/?raw=true

09:41

!!v EB71EA3ABADCAB6F6A6DFB5A4D788ED7D785907CD4B350B533BD033CDBEE104F

09:41

mircea_popescu rated kmalkki 1 << coreboot

09:42

kmalkki

smartprobe binaries now as ELFs with symbols... mostly

09:43

where ?

09:44

kmalkki

on my desktop.. what's your favorite anon share

09:44

can put in http://wotpaste.cascadianhacker.com/ or else make a v out of them i guess.

09:44

though the later prolly premature

09:44

if you sign them, they can also go into deedbot's list

09:44

as seen on http://deedbot.org/

09:54

mircea_popescu: in my experience you don't. it's more of a final warning. if the supplier tries to bail early, it's usually a setup of some kind.

09:54

i really should change it. thx.

09:55

more like a sign that the setup's done as he no longer cares what you think.

09:57

gotta case the trap spot first. honestly with street trapping you should have a shadow or two...some muscle...but I didn't want to imply i endorse violence in the article

~ 17 minutes ~

10:15

http://btcbase.org/log/2016-10-06#1553536 << i use it to find the plug. people as close as possible with regular access to clean btc with no KYC links. based on dealings in our good 'ol city I think there is a small underground miner consortium.

10:15

a111

Logged on 2016-10-06 12:33 shinohai: localbuttcoins is truly a convoluted way of obtaining btc

10:19

mircea_popescu: this is nearly everyone besides a few which sed ate, but nearly all are keybase.io http://wotpaste.cascadianhacker.com/pastes/2gmzb/?raw=true

10:19

so I'm willing to bet phuctor has em already

~ 32 minutes ~

10:51

anyway, i AM mildly curious how many here present can actually calculate sha-3 512 (ie, keccak) from command line.

10:52

shinohai aha.

10:53

Doesn't rhash do that?

10:55

do youy have it ?

10:56

because if you don't have it it doesn't do that ; and from a cursory inspection it turns out NOBODY packages it. because why would they, usg has its own designs.

10:59

mircea_popescu: there was a reason i did not use sha3 in the lamport tutorial.

11:11

sucks.

11:17

from other lulz: http://www.telegraph.co.uk/technology/2016/10/06/spotify-has-been-sending-computer-viruses-to-listeners/

~ 19 minutes ~

11:36

and in other passtimes, http://67.media.tumblr.com/b0db55c8f2e3d557b27d184023d4b93c/tumblr_mt72waEt5p1s7ejhlo1_500.gif

11:42

When Vinny says pay, you pays bitch.

~ 26 minutes ~

12:09

aye

~ 19 minutes ~

12:28

https://www.gnupg.org/faq/gnupg-faq.html << "If you need more security than RSA-2048 offers, the way to go would be to switch to elliptical curve cryptography not to continue using RSA." hmm, interesting

12:29

"RSA-4096 is not a bad idea: its just, generally speaking, unnecessary. You gain very little in the way of additional resistance to brute-forcing and cryptanalysis."

12:31

aha, this is the actual reason I was looking through FAQ: "SHA-3 is a completely new hash algorithm that makes a clean break with the previous SHAs. It is believed to be safe, with no warnings about its usage. It hasn't yet been officially introduced into the OpenPGP standard, and for that reason GnuPG doesn't support it."

12:42

https://pthree.org/2014/04/30/sha3-keccak-in-linux/ << mircea_popescu it looks like rhash does do this

12:43

from rhash -h : "--sha3-224, --sha3-256, --sha3-384, --sha3-512 Calculate SHA3 hash sum."

12:51

i get this on local machine

12:51

echo foobar | rhash --sha3-256 -

12:51

9c5bbf00bb6103c7f3d91fe598489725341010b8d0785274029d4645c34ebe9c (stdin)

12:53

hmm, I get ec7f27c2fb6588d30116d0abd380354bd73b9100e4ad2520c099c0716895ca70 (stdin)

12:53

shouldn't they be the same?

12:55

wat

12:55

kek

12:56

rhash v1.3.1 here, you?

12:56

1.3.3

12:57

fwiw i tried both echo foobar and echo -n foobar

12:57

was just about to ask if one of you was using a weirdo shell

12:57

with warped echo

12:58

*

trinque compiles rturd

12:58

we need a tie breaker

12:59

% echo foobar | ./rhash --sha3-256 -

12:59

9c5bbf00bb6103c7f3d91fe598489725341010b8d0785274029d4645c34ebe9c (stdin)

12:59

clearly all PeterL's fault

13:05

should I be worried that I am getting a different value?

13:13

just got back, I get:

13:13

9c5bbf00bb6103c7f3d91fe598489725341010b8d0785274029d4645c34ebe9c (stdin)

13:14

so same as trinque

13:16

SHA512 (rhash-1.3.3-src.tar.gz) = 0ac1699a0e5718b750610cd6189d9d582186d7e17191e3723a994559c8f9c6ea7e0d34825da0c96fd0fc6be3e14b5f44ce7a21d17156cdfce3f0e3e4ff09389e

13:16

PeterL: worth figuring out eh? even if it's pebkek

13:16

*

shinohai always userd rhash to create torrent files

~ 19 minutes ~

13:36

!~later tell BingoBoingo http://ix.io/1tIO

13:36

jhvh1

shinohai: The operation succeeded.

13:46

9c5bbf00bb6103c7f3d91fe598489725341010b8d0785274029d4645c34ebe9c (stdin) << must be something to do with the older version I got from apt-get, with newer version I get this hash

13:47

now, how do I go about removing the old version and replacing it with the new one I just built?

13:49

apt-get autoremove rhash

13:49

if you built from source it will leave that in /home/ or wherever

13:56

I learn so much hanging around here!

13:58

now you can copy the one you built to /usr/local/bin and good to go

14:02

what's the difference between /usr/bin and /usr/local/bin ?

14:02

rhash actually has make install...

14:02

oh thats true

14:14

PeterL: /usr tends to contain items considered part of your distribution, /usr/local contains 3rd part or "contrib" items

14:14

though this distinction has gotten pretty muddy over the years

14:15

on openbsd for example, /usr contains things shipped with the release. anything installed from ports is in /usr/local .

14:16

then there's /opt which roughly translates to "fuck it, I'm putting this turd all by itself in say /opt/rhash-1.3.3/"

14:17

*

trinque avoids discussing /var lest he have an aneurysm.

14:20

http://archive.is/dsW46 <<< handy pic of what a bf that attempts to pull stuck vibrator out of gf's ass with salad tongs looks like.

14:22

http://archive.is/dsW46#selection-965.0-965.33 << ahaha now it's a cause.

14:24

No woman should ever have to have a buttplug irretrievably lodged in her ass again.

14:26

I can only assume "go in through my stomach" is "abdomen" for the anatomically illiterate.

14:26

since this is probably clickbait fiction, they should rewrite it in a month with the dude playing lead. it'd be funnier.

14:37

trinque: tell us about /var

14:42

thing's overrun with autistaxonomy n-levels deep, because the filesystem is a terrible database.

14:42

/var is meant to be mutable state, as opposed to static-at-runtime state in /etc

14:43

but y'know CUPS writes to /etc/cups/printers.conf all damned day, because fuck you.

14:46

when i learned unix from graybeard, i was actually told things like "have your etc mounted read only for day to day operation, have your var on separate drive since that's where all the thrashing is" etc.

14:47

yep, not a terrible thing to mount whole root r/o

14:47

*

trinque has a bigger problem with every unique graybeard snowflake inventing his own format inside /var

14:48

so when I want to "join" across all this data I get to munge strings like some barbarian

14:49

haha

14:50

CUPS haha

15:03

PeterL i'll ask you what i asked him : does it do it on your box ?

15:05

I am confused, yes it does

15:05

then ok ; but it doesn't exist on plenty of boxes and in most distros - is the point.

15:05

(and from looking through the log - no, it didn't. but anyway)

15:05

because I just installed it

15:05

ikr?

15:06

but it is relatively new, so that is why you have to manually add it, right?

15:07

eventually all the open source guys will get around to adding this to thier packages

15:07

in one interpretation.

15:07

aww PeterL

15:07

they don't seem to take very long in adding the official usg holes to "their" packages.

15:07

that's either very charitable or very naive

15:07

or very sarcasatic.

15:08

did I forget the sarcasm tag again?

15:08

hey, midwesterners use mayo as a food base, i have nfi when y'all are joking

15:08

so, this gets added to "tmsr distro"?

15:09

I thought it was the cajuns that made everything out of mayo?

15:09

shinohai why does that student look 45.

15:10

maybe she went back to school?

15:10

mebbe.

15:14

phf lol graybeard trying to emulate vax on micro ?

15:15

and in other "practical lessons in redundancy", http://66.media.tumblr.com/8eb17a81724f99bdd761115606b6cee5/tumblr_nhsz38o5MS1u2tjfmo1_500.gif

15:28

"research indicates coffee made from capsules contains significantly more furan than drip or boiled."

15:29

i suppose no marketing budged to pay for this awareness, however. gotta find better awarenesses.

15:30

"lets run our boiling hot water over some random plastic bits, what could possibly go wrong?"

15:30

it's actually from the coffee.

15:31

furan is a degradation product ; mostly driven by thermal shock.

15:31

would that also apply to cappucinos?

15:32

to a slighter degree. and to microwaves. and so on.

15:33

http://www.tandfonline.com/doi/abs/10.1080/02652030701551842?journalCode=tfac20 for the passionate.

15:40

mircea_popescu> then ok ; but it doesn't exist on plenty of boxes and in most distros - is the point. <- ubuntu 14.04 at least actually has it

15:40

a does it ?

15:43

apparently previous version of ubuntu should have it too https://launchpad.net/ubuntu/+source/rhash

15:43

"brewing by an espresso machine caused significant loss of furanic compounds." < from another study on mircea_popescu's link

15:43

or here : http://packages.ubuntu.com/search?keywords=rhash

15:44

so yeah, from ubuntu 12.04

15:44

could ship a statically compiled rhash.

15:45

there is an example with the rpm target in the Makefile using ADDLDFLAGS, should also work with target "all"

15:45

why not build from source?

15:45

10.04 definitely doesn't have it, fwiw.

15:45

that being said, it is from "universe" aka not "officially" supported

15:46

PeterL: I just proposed that.

15:46

I guess I misunderstood what you proposed

15:47

if you ship a statically compiled rhash that'd be a binary neh ?

15:48

sure if he meant end user of Eulora compiles. I understood that most of them download binaries.

15:49

ah, this is only vaguely related to eulora ; inasmuch as i've decided to keep snapshots of known-good linuxen and in the process discovered the horribru state of "open source" opsec

15:50

ps. you'd be surprised just how many installs are secured by a md5 hash. do check what happens if you disable it ; or try to use a repo with it disabled.

15:50

got it, and yes.

15:50

and by now md5 collisions are subsecond affairs even without significant gear / investment.

15:51

(because src allows comments, this literally means ANYTHING could be in that file that "matches" md5 signature)

15:51

meanwhile gentoo, which obviates the whole F35^H^H^Hdebian-style build infrastructure, bloats by the day

15:52

*

trinque did another base install of gentoo the other day, was something like 1.5-2gb

15:52

what the fuck.

15:52

gotta have like two pythons, a perl, can't remove scads of doc/info/sgml(WHAT?)/man pages in-band, god knows whatever else

15:53

....

15:55

trinque: can you install an ancient gentoo?

15:55

none of these is 2gb wtf

15:55

ben_vulpes: I'd rather freeze an openbsd and steal portage from gentoo

15:55

farting around with that still.

15:56

diana_coman of course the q now is, if it has it or "has" it, like seen above with PeterL 's experience with a v 1.3.1 that fraudulently misrepresented sha2 as sha3

15:59

tension, apprehension and dissension long ago began.

15:59

mircea_popescu, and right you are, ofc

15:59

it's version 1.3.1 in the repos from what I see

15:59

whell.

16:00

this then would qualify as "not has it".

16:00

indeed; not has it then it is

16:01

I don't think it matched up with sha2 either

16:01

whole fucking termite nest, in all places and everywhere, THIS paper thin. "it has it, o wait dun look closer".

16:01

from littoral combat ships to convenience paper cups, all the way and whichever way. the usg way!

16:02

mircea_popescu: one of your earlier links contained yet another 'happy surprise' - there are TWO INCOMPATIBLE keccaks floating around, by decree of His Putrid Majesty, one of'em is simply the normal keccak but it appends a constant turd to the input (nfi why)

16:03

http://ethereum.stackexchange.com/questions/550/which-cryptographic-hash-function-does-ethereum-use << more confusion

16:03

only latest version of ubuntu claims to have 1.3.3-1 rhash but by this time I'm not even sure that is what it claims anyway

16:04

PeterL it's sha-256 long, but you're right, not the correct value

16:04

asciilifeform doh.

16:04

diana_coman 1.3-3.1, get it ? it's a palindrome!

16:04

asciilifeform well you could venture a guess.

16:05

lol

16:18

and i'm going to write up that " "If you need more security than RSA-2048 offers, the way to go would be to switch to elliptical curve cryptography" nonsense ; because it's getting ridiculous

~ 40 minutes ~

16:59

hm, anyone recall the "the canonical 'specificity of diddling theorem' article." as per http://btcbase.org/log/2015-05-30#1148301 ?

16:59

a111

Logged on 2015-05-30 04:04 asciilifeform: mircea_popescu: y'know, at some point one of us needs to write the canonical 'specificity of diddling theorem' article.

17:02

i guess ima go with http://trilema.com/2013/how-to-airgap-a-practical-guide/#selection-89.209-89.346

17:06

iirc there is no canonical specificity of diddling article

17:07

but that's the best i've found as well.

17:14

alright.

~ 20 minutes ~

17:35

http://trilema.com/2016/werner-koch-lies/ << Trilema - Werner Koch lies.

~ 1 hours 9 minutes ~

18:45

* trinque avoids discussing /var lest he have an aneurysm. << /var is great. Most stuff belongs there!

18:55

lets separate things properly here

18:55

having a partition for run-time mutable state sounds great

18:56

one could have that and impose some rigorous structure over the damned thing too

18:58

and /etc for that matter

19:00

Todays ebay scam brought to you by the US Army http://archive.is/Mcf5H

19:05

insert into `/etc/hosts` (ip, hostname) select ip, hostname from `/var/db/dhcp.leases`; << the only reason this (represented in *any* syntax, has nothing to do with SQL itself) isn't possible is that "freedom" plus autism equals makework

19:08

a pile of cleartext sexprs manipulated through a transactional constraints checker would be superior, even, to the relational example.

19:15

freedom plus autism equals makework eh ?

19:15

trinque i think you're on to something.

19:15

shinohai i lullzed.

19:19

Do all scammers have only a 3rd-grade education now? Seriously, ebay of all places.

19:23

the cattle regards the fence as "part of its environment". it endows it with basic assumptions of fairness etc derived from the "fact" that it & its fellow moos still moo.

19:23

just like they don't suspect the rain of being radioactive ; they wouldn't suspect ebay of being run by you know, someone.

19:23

"it just is."

19:25

http://qntra.net/2016/10/us-tax-department-busted-by-indian-police/ << Qntra - US Tax Department Busted By Indian Police

19:25

"although no word was available as to whether any iTunes gift cards were recovered the haul" BingoBoingo ?

19:28

and in other kim gageshian news, https://lh5.googleusercontent.com/-q7nOPKd9m3I/UsaZLZA1beI/AAAAAAAAASc/GcTx92XVbHI/w800-h600/KimKardashianMuzzleGagged.jpg

19:28

You haven't got a call from a Preet asking you to pay fines with an itunes giftcard?

19:29

no it was John ford-kerry or w/e ketchup firm they named him after.

19:30

I guess they figure they need to send the big cheeses after you.

19:30

it's not a cheese it's a ketchup im telling you.

19:36

did we have https://eprint.iacr.org/2015/1000.pdf here btw ? asciilifeform ?

19:40

*

shinohai is going to start offering pdf to text conversions as a service

19:40

for srs

19:54

mircea_popescu: pretty sure we did, it's a nadia heninger

19:58

mircea_popescu: fxd, ty

20:01

preet just called, he wants his defendent back.

20:07

*

BingoBoingo pretty sure that is the wrong cart for that load https://i.imgur.com/qE6kGWQ.jpg

20:08

"I bought this toilet and it already had shit it it!"

~ 39 minutes ~

20:47

asciilifeform tacked on yeah. but iirc we didn't.

20:50

!~later tell diana_coman http://ix.io/1tOB

20:50

jhvh1

shinohai: The operation succeeded.

20:50

mircea_popescu: it was in crypto-'13. iirc, the original 'here is how much amazonium it takes to break n-bit rsa'

20:52

this is a 2015 re print

20:53

*

asciilifeform looks

20:54

ah this is the one where they added 'and now it costs ~ a hundy, and plenty of idiots still remain to whom to do it'

20:54

Apparently a new round of DoS attacks on ETH ... this time on *parity* clients

20:54

aww.

20:54

but i thought come at me bro!

20:55

Well, they asked for it

20:55

i dunno anything makes one so happy as derps who dunno when to quit.

20:56

particularly well fed by this entire "you are a special snowflake and have rights and nobody can ever rape you"

20:57

+ of course the "money is of no consequence, plenty of things more important '''in life'''" bit, not to mention the "you gotta just keep faith and hold out forever!" etc.

20:57

usg is the ultimate lolcow factory.

20:58

As long as I have a gas station to work in, I can ride out teh storm and keep huffin'

20:58

werd.

20:59

meanwhile in "productive travel" news, http://66.media.tumblr.com/acaf02eb8ff46c553e67bab94dd775ad/tumblr_mkgnh7mKc91rubadgo1_1280.jpg

20:59

get the whole couchette compartment is still the best way to travel

21:00

What a lovely posterior

21:00

nature helps teens.

21:02

http://cascadianhacker.com/least-effort-signups-in-django << CH - Least-Effort Signups in Django

21:05

what the fuck is an automatic login.

21:05

what the fuck is a password

21:09

mircea_popescu: elaborated upon

21:09

what's to elaborate, i have nfi what the guy you quote wants to do.

21:09

http://archive.is/VkjX4 <<< nothing like free booze to lube the blocksize debate

21:10

he's also way too fuckin excited about django

21:10

should always come off like you're clearing your throat the morning after a moonshine bender

21:11

shinohai "will you give a shit ? let us know in comments below". apparently they forgot to add to the pinoy workorders, because about as empty as evan fraggart's gaze.

21:11

"senior editor of bitcoin.com", 17yo.

21:13

Hey it's hard to find any decent help when you recruit from reddit, even if you do supposedly have millions in btc

21:13

guess so.

21:14

amusingly, this is almost exact replay of a story 4 years old. aanyway.

21:14

I loll'd at his tweet earlier this morning, so ecstatic that they have 1% of all mining power on their phork

21:14

IT'S HAPPENING

21:21

1% today, two percent tomorrow!

21:29

WE! ARE! THE ROGER VER PERCENT!

21:29

(tm)(r)(occupy*)

21:30

*

shinohai wonders why he doesn't call his fork "Bitcoin Uncensored"

21:32

i need roger ver percent because i don't want beer to dictate my body shape!

~ 15 minutes ~

21:48

http://trilema.com/2016/body-heat/ << Trilema - Body Heat

21:48

http://www.contravex.com/2016/10/06/voltaire-money-adnotated-part-2/ << » Contravex: A blog by Pete Dushenski - Voltaire. Money. Adnotated. Part 2.

~ 33 minutes ~

22:21

does anyone else have this issue running asciilifeform's lamport example diff commands? http://dpaste.com/00VJ9E2.txt

22:22

mod6: it's a wordpress idiocy

22:23

try as i might, i was unable to zap the space between the < and (.

22:23

'diff < (./lamport_decode.sh sha256sum pubkey.txt < encoded.txt)' should be 'diff <(./lamport_decode.sh sha256sum pubkey.txt < encoded.txt)' .

22:24

(possibly not wp per se, but the plugin i used to format code fragments. i fought with it for a while, and gave up)

22:25

ah got it.

22:25

yup works if i use it like: diff <(./lamport_decode.sh sha256sum pubkey.txt < encoded.txt)

22:26

anyway, onwards and upwards.

22:26

because that is the correct syntax. the other - rubbish.

22:26

mega-useful and syntactically befuddling sugar for bolting the command inside to a fifo and passing as argument

~ 41 minutes ~

23:07