Show Idle (>14 d.) Chans
← 2017-03-06 | 2017-03-08 → ↓
02:58 davout bonjour everyone
03:07 davout so i did some reading re the wallet separation thing and ended up realizing i had an incorrect idea about trb's internals
03:09 davout i thought i'd find an in-memory UTXO index, which i didn't. appears to me like trb will have to keep some sort of "watched addresses list" after all, or that such an index will have to be bolted in somehow
03:09 davout the former looks like the most practicable option at this point
~ 6 hours 14 minutes ~
09:24 mircea_popescu !!up dm0n_
09:24 deedbot dm0n_ voiced for 30 minutes.
09:25 mircea_popescu davout this links into which part of the conversation ?
↖
09:25 dm0n_ thks
09:25 mircea_popescu aha. an' who might you be ?
~ 18 minutes ~
09:43 Reuel https://twitter.com/wikileaks
↖
09:43 Reuel Anyone following this? CIA dump
09:44 Reuel My smart TV :(
09:45 mircea_popescu notrly. trump vs the rogue usg, kinda meh.
09:56 Reuel poor USa...
09:58 mircea_popescu speaking of, asciilifeform what about that ada rsa for eulora!
09:58 Reuel "CIA air-gap jumping viruses" lol gonna read this
~ 32 minutes ~
10:31 asciilifeform mircea_popescu: when 'p' is released, it can be put to use in eulora and elsewhere
10:32 mircea_popescu http://btcbase.org/log-search?q=%22%27P%27%22 << stretches back... A YEAR.
10:32 mircea_popescu when is this when ?
10:33 asciilifeform ffs i have 2 hands mircea_popescu .
10:34 mircea_popescu hey, didn't that hawking fellow have an eyeball typewriter ?
10:34 asciilifeform arse joystick
10:34 asciilifeform i gotta get one
10:34 mircea_popescu oh i thought you already had THAT
10:34 asciilifeform http://btcbase.org/log/2017-03-07#1622672 << https://wikileaks.org/ciav7p1 >> massive bag'o'lulz, in some ways considerably moar 'current' than the snowden rubbish . includes discussion of 'nsa is retarded, they forget to strip out debug crapola', etc
10:34 a111 Logged on 2017-03-07 14:43 Reuel: https://twitter.com/wikileaks
10:34 asciilifeform and also hilarious 'HIVE is a multi-platform CIA malware suite and its associated control software. The project provides customizable implants for Windows, Solaris, MikroTik (used in internet routers) and Linux platforms and a Listening Post (LP)/Command and Control (C2) infrastructure to communicate with these implants.'
10:35 mircea_popescu well it'd have to be more current, five years later.
10:35 asciilifeform mikrotik!
10:35 asciilifeform !#s mikrotik
10:35 a111 15 results for "mikrotik", http://btcbase.org/log-search?q=mikrotik
10:35 mircea_popescu anyway, shutting down the "lp/c2" bs is about half the fun of this internet life.
10:35 mircea_popescu half the time they don't even bother to argue the point, go down like common malware artists.
10:36 asciilifeform the wikifolx censored ip list for some reason
10:36 mircea_popescu keeps changing anyway, notjust for above reason.
10:37 mircea_popescu but anyway, the "law enforcement" / terrorist government bs reduces to "we're like in the top 20 or so malware houses". hurr.
10:37 mircea_popescu hardly worth 0.1% of the budget. "cyberwarfare" hurr durr.
10:37 asciilifeform possibly the funniest bit is the docs for their internal gossipd
10:38 mircea_popescu which is badly designed and dun work.
10:38 * asciilifeform has not tested, does not know how well works
10:40 asciilifeform lel, mikrotik is ~the~ platform apparently.
10:41 asciilifeform all versions factory-pwned, just as suggested by phuctor.
10:42 asciilifeform https://wikileaks.org/ciav7p1/cms/index.html << handy table of lulz , for log readers.
10:42 asciilifeform also apparently mircea_popescu was right about the staffing problems, https://wikileaks.org/ciav7p1/cms/page_23134361.html
10:43 asciilifeform 'gender commits'
10:43 * mircea_popescu gets lucky and is right on occasions!
10:45 asciilifeform CandyMountain_v1.0/bin/unclassified/centos/candymountain-centos-64 << lel
10:48 asciilifeform https://wikileaks.org/ciav7p1/cms/page_14587860.html << the very same huaweis
10:48 asciilifeform from phuctor.
10:48 asciilifeform lulzy
10:49 mircea_popescu i suppose the fellow who was looking to be useful could write a phuctor - confirmed - by - wikileaks piece for qntra.
10:49 asciilifeform anybody who wants a copy of the 'implants' wikilicks censored, just gotta log into some of the phuctored boxen.
10:50 mircea_popescu the fundamental problem being that it's way the fuck easier to spend day clicking through lolpics and "voting" on whatever retarded 2.0 site than reading the logs ; which then down the road means that one can'd do jack shit that's useful because drooled in class instead of paying attention. and so it goes, the gap between man and cow ever deepens.
10:51 Framedragger vim tips (https://wikileaks.org/ciav7p1/cms/page_3375350.html) and unit test guidelines (SECRET//NOFORN!!!1) https://wikileaks.org/ciav7p1/cms/page_11629048.html
10:51 mircea_popescu "oh i had some other things to do."
10:51 asciilifeform https://wikileaks.org/ciav7p1/cms/page_14588809.html << 'how nsa fucked'
10:51 mircea_popescu i'm sure you did, especially given that there totally even are other things to do irl. like... what ?
10:51 mircea_popescu Framedragger they have a point, indians don't do unit tests.
~ 19 minutes ~
11:11 BingoBoingo Who wants the honor of writing of Wikileaks Phuctor gloating for Qntra?
11:24 * Framedragger commits to writing at least one article in june (or maybe even before) #preplanninglikeachump
11:25 * shinohai is busy with whoreticulture but may have time later if no one else steps up ....
11:30 asciilifeform https://wikileaks.org/ciav7p1/cms/page_14588652.html << more in re mircea_popescu's psychiatric observations
11:31 Framedragger some kind of boys club with too much time on their hands lol.
11:35 BingoBoingo If no one else writes /me will, but mostly offering mircea_popescu and asciilifeform, S.NSA partners well earned "dibs" if they want them
11:40 davout http://btcbase.org/log/2017-03-07#1622669 <<< folks wondering how the "wallet split" was going
11:40 a111 Logged on 2017-03-07 14:25 mircea_popescu: davout this links into which part of the conversation ?
11:43 mircea_popescu seems somewhat solipsistic
11:44 asciilifeform 'Topic 3: BadUSB' << lel
11:44 davout mircea_popescu: howso ?
11:46 mircea_popescu "what part of the conversation this links to ?" "no, just stuff going on in my head" "seems like stuff going on in your head" "how so"
11:47 davout http://btcbase.org/log/2017-02-19#1615802
11:47 a111 Logged on 2017-02-19 22:41 mod6: i haven't heard on davout's progress recently.
11:47 davout http://btcbase.org/log/2017-02-19#1615799
11:47 a111 Logged on 2017-02-19 22:40 mircea_popescu: curious how davout 's work on splitting function is coming along btw
11:47 * davout is confused.
11:49 mircea_popescu well, so how is it coming along ?
11:50 davout back at square one, did some reading to get started on implementing what i had in mind (full scan of the UTXO upon request for UTXOs relevant to addresses)
11:50 asciilifeform 1 more lul:
11:50 asciilifeform '(S//NF) All tools must utilize OS provided cryptographically secure sources of entropy (e.g., /dev/random on *nix, Microsoft CryptoAPI, etc) and should be a source compliant with NIST SP 800- 90. If a non-800-90 mechanism is used, the output from the source of entropy must be hashed with SHA-256 prior to use. Deviations from this must be justified and accepted by the OCRB.' -- 'Network Operations Division Cryptographic Requirements'
11:50 mircea_popescu did what you have in mind come from a discussion here at any point ?
11:50 davout found out that i in fact hallucinated the existence of this index, which may or may not have been added later on to prb, but was absent from trb
11:51 davout yeah, i remember talking about it here
11:51 mircea_popescu can link ?
11:52 davout http://fr.anco.is/2017/removing-the-wallet-from-trb-first-thoughts
11:52 mircea_popescu seems kinda solipsistic.
11:52 mircea_popescu "how so" "because you didn't link to the conversation here, you linked to your own thingee"
11:52 mircea_popescu "i am confused" "evidently"
11:52 * mircea_popescu saving the next 14:25 - 13:55 interval of this convo.
11:54 davout http://btcbase.org/log/2017-01-27#1608204
11:54 a111 Logged on 2017-01-27 19:00 davout: thestringpuller: UTXO set is ~2gb tops, indexing might be nice but necessary to scan for UTXOs that match a given set of addresses, also the wallet part can cache them if that particular wallet is the only one able to actually spend those UTXIs
11:54 * mircea_popescu off to re-read that thing
11:55 asciilifeform davout: the '~2gb tops' may (or may not) be true currently, but it is a fundamentally unbounded quantity. as discussed in 2 very recent threads with mircea_popescu re 'proton decay' and ultimate lifespan of bitcoin
11:55 davout asciilifeform: yeah, you did mention it also during that thread
11:55 mircea_popescu i also recall a thread re how to do this with maybe mimi or else deedbot, which i don't think is that one
11:56 asciilifeform davout: likewise i have nfi why wallet split requires indexing ~all~ unspents. just index the ones the user specifies
11:57 mircea_popescu how will the user specify them
11:57 davout asciilifeform: the idea was that the internet facing piece shouldn't have this kind of information
11:57 mircea_popescu (but yes, this was broadly the idea there, index by arbitrary-address-list)
11:57 asciilifeform davout: aha, you do it on an in-house 'hot' node
11:58 asciilifeform (at some point you gotta touch the net, if you want to broadcast tx, or learn that you've been paid)
11:58 davout well, obviously, but there's no particular reason your signed tx has to go out through ~your~ node
11:59 mircea_popescu http://btcbase.org/log/2017-01-03#1595779 << ah there it was.
11:59 a111 Logged on 2017-01-03 20:42 mircea_popescu: this scheme among other things cheaply allows the "add arbitrary new address to wallet", just have utility that (separately) processes B.B and produces new set of B.T.
12:00 mircea_popescu davout so the competing idea, other than "maintain uxto unspent index", was "maintain index of txn involving specified list of addresses"
12:00 davout the existing wallet already does that
12:00 mircea_popescu that's the bit i was looking for.
12:00 mircea_popescu ok, so then what's teh problem ?
12:01 davout 1. the principle of the thing where the wallet is coupled to the node and chain storage
12:02 mircea_popescu i thought that was adequately resolved through layering.
12:02 davout 2. the way the existing trb wallet currently works, mainly the automatic utxo selection
12:02 mircea_popescu didja ever discuss the unsuitability of that ?
12:02 davout of the coupling?
12:02 mircea_popescu yes.
12:03 mircea_popescu i also dun get 2. how's the fact you already have the index you need related to the fact prb fucks up output selection ?
12:03 davout you mean trb?
12:03 mircea_popescu trb too, for now, i guess.
12:03 davout it's not really related
12:03 mircea_popescu well then why's it there.
12:04 deedbot http://phuctor.nosuchlabs.com/gpgkey/84DEA074B5B7F0A858E8B3AE0A0E6C1EEF4E40E2835FB94585FA727B344168FD << Recent Phuctorings. - Phuctored: 1508...2273 divides RSA Moduli belonging to '77.37.2.63 (ssh-rsa key from 77.37.2.63 (13-14 June 2016 extraction) for Phuctor import. Ask asciilifeform or framedragger on Freenode, or email fd at mkj dot lt) <ssh...lt>; ' (Unknown DE HE)
12:04 deedbot http://phuctor.nosuchlabs.com/gpgkey/84DEA074B5B7F0A858E8B3AE0A0E6C1EEF4E40E2835FB94585FA727B344168FD << Recent Phuctorings. - Phuctored: 1720...7347 divides RSA Moduli belonging to '77.37.2.63 (ssh-rsa key from 77.37.2.63 (13-14 June 2016 extraction) for Phuctor import. Ask asciilifeform or framedragger on Freenode, or email fd at mkj dot lt) <ssh...lt>; ' (Unknown DE HE)
12:04 davout has the index, should ask user to select outputs, not automagically generate transaction
12:04 mircea_popescu absolutely.
12:04 davout s/outputs/inputs/
12:04 mircea_popescu yeah.
12:05 davout so basically i thought it would be quite easy to cleanly decouple the wallet from the node, but i'm now stuck with the realization that for now the most workable option will simply be to make small improvements here and there
12:06 mircea_popescu well, if you're not willing the read the jan 3rd discussion, i guess.
12:06 davout yeah, i will.
12:07 davout i did read actually, but seems it didn't really stick
12:07 mircea_popescu lol ok. anyway, the issue is that you seemed diverged, ie conversation is there, you're doing something else with no real discussion of why / what's wrong with it / etc.
12:14 davout http://btcbase.org/log/2017-01-03#1595788 <<< hah, true
12:14 a111 Logged on 2017-01-03 20:51 davout: hrm, i'll have to re-read
12:14 mircea_popescu lel
12:15 asciilifeform https://wikileaks.org/ciav7p1/cms/page_4849711.html << lel they have in-house irc
12:15 asciilifeform almost like people
12:15 mircea_popescu do you know since when ?
12:15 asciilifeform (rather than 'slack', aol, etc.)
12:15 asciilifeform mircea_popescu: dunno, prolly since 1985 or wat
12:15 mircea_popescu 2013ish actually afaik.
12:18 davout mircea_popescu: i agree that the description made in the convo you linked is a very desirable target architecture
12:19 asciilifeform https://wikileaks.org/ciav7p1/cms/page_46628880.html << 31117w4r3z
12:19 mircea_popescu davout dja see a problem with it ?
12:19 davout as far as the wallet is concerned it's pretty much "when new address is added, rescan blockchain, have relevant txes in specific collection"
12:19 mircea_popescu pretty much
12:19 davout i don't see any fundamental problem with it
12:19 mircea_popescu i don't see the user has a leg to stand on, "i'm not sure which my addresses are". if you add some - there's a (minor) penalty.
12:20 mircea_popescu well ok so then you can just make it.
12:20 mircea_popescu maybe fundamental problem appears.
12:20 davout in essence, that's already what trb does
12:20 mircea_popescu keeping a pile of ALL utxos, as the alternative, is not very good, because you end up storing a bunch of (potentially toxic) crap
12:21 davout i thought trb was keeping them in ram already
12:21 mircea_popescu node-trb.
12:21 mircea_popescu this'd be wallet-trb.
12:22 davout which allowed any existing node to trivially serve any arbitrary wallet, at the cost of a 2gb memory scan for unspent outs
↖
12:22 mircea_popescu well yes but the idea was to split.
12:23 davout it would have allowed some level of split, but anyway, this particular idea is dead since trb doesn't have this in-memory data structure
12:24 davout so now, re your description, i'm not sure what a good start would be, because cutting it the way you described sounds like a mega-project that encompasses more than the mere wallet
12:24 mircea_popescu how so ?
12:26 davout well, as i understand it the end result is a different set of binaries that talk together through a $to-be-defined queue mechanism
12:27 davout and even if single binary, still sounds like a large architectural rewrite
12:27 mircea_popescu you can just take stock trb, operate on it, and place it so it only connects to operator-specified trb nodes.
12:27 mircea_popescu then you can take stock trb, operate on it, and so people interested can pick both version, have internal-external couple.
12:28 mircea_popescu conceivably can use current trb as your genesis for this.
12:28 davout yeah, take a few trbs and cut different parts from each basically
12:28 mircea_popescu yep
12:28 davout design a way for them to talk together
12:28 mircea_popescu then also conceivably the changes will be backported into trb main once well tested
12:28 mircea_popescu and so there you go
12:28 mircea_popescu well no, let them talk to each other as they do now exactly.
12:29 mircea_popescu you don't have to invent a new protocol.
12:29 asciilifeform http://btcbase.org/log/2017-03-07#1622815 << davout why would you need to store all of these?! just fire them, through the diode, at the wallet box that is actually computing addr balances , 1 at a time
12:29 a111 Logged on 2017-03-07 17:22 davout: which allowed any existing node to trivially serve any arbitrary wallet, at the cost of a 2gb memory scan for unspent outs
12:29 mircea_popescu eh trhat';s a dead branch, let it be.
12:29 asciilifeform aite
12:30 * asciilifeform still eating thread
12:30 mircea_popescu this has been a honest-to-god real-time davout node emerging in march going "so guyse... chatlog-block-419333 is highest rite ?" and resyncs ensued.
↖
12:30 mircea_popescu bitcoin is like the paradigm of thought.
12:31 asciilifeform 'AVG will sometimes heuristically identify Raptor/Melomy/Ferret trojans as, well, Trojans (duh). However, in many cases this heuristic detection can be avoided by renaming the .exe to a common installer name such as setup.exe. There may be other names that can be used – Windows itself recognizes a few "installer" exe names and slaps the little shield icon on there by default and also does that weird "this program didn't install c
12:31 asciilifeform orrectly" popup, which can be elminated with some manifest-fu.'
12:31 asciilifeform gold.
12:32 mircea_popescu sounds about the level.
12:32 mircea_popescu you understand ? backfeed fucking computing, "if i do this this happens so you press thios button" sorta excel-dev.
12:33 davout this split really doesn't sound that simple to me
12:33 mircea_popescu davout well it's certainly not trivial, no.
12:33 mircea_popescu i suspect it's the simplest-possible, which still doesn't promise it's simpler than any arbitrary level.
12:34 davout see, i don't see how it could be done without designing another way for nodes to communicate in another way than the currently existing protocol
12:34 asciilifeform mircea_popescu: so far reads like data dump from any large american software co. plenty of 'excel monkey' material, a veeery small bit of classy.
12:34 mircea_popescu davout why not ?
12:34 trinque davout: there is also eatblock
12:34 mircea_popescu asciilifeform just about. and large in the sense of alcatel not in the sense of alphabet, at that.
12:35 trinque wallet node could be munching with that hole
12:35 davout for example, how does the wallet perform a reindex, without storing the chain itself
12:35 mircea_popescu davout wallet doesn't.
12:35 mircea_popescu meh. wallet doesn't NOT store the chain. it's just stock trb.
12:36 mircea_popescu it doesn't store ~the mempool~ is all.
12:37 asciilifeform i know of no reason why wallet would ever want to ~receive~ mempool tx
12:37 mircea_popescu if net-trb decides to engage in a reorg, it will eventually induce one in all the wallet-trbs connected to it.
12:37 mircea_popescu asciilifeform quite.
12:37 trinque why would it send either? crap a signed tx and operator feeds it to network node
12:37 asciilifeform and trinque has it : i've put up nodes that communicate outside the house ~only~ via eatblock
12:37 mircea_popescu asciilifeform incidentally your ssh thing may well have been a major step forward for this split.
12:37 asciilifeform worx great.
12:37 trinque aha
12:37 mircea_popescu because now - they can ssh connect!
12:38 asciilifeform mircea_popescu: that is one of the most obvious uses, aha
12:38 mircea_popescu aha.
12:38 davout asciilifeform: knowing about incoming txes before they've confirmed?
12:38 trinque why does that help anything?
12:38 asciilifeform davout: ~nobody gives half a shit about unconfirmed tx he didn't himself make
12:38 trinque isn't in a block; may *never* be in a block
12:39 asciilifeform aha
12:39 mircea_popescu i concur. "unconfirmed tx" is improperly thought of as a tx.
12:39 davout asciilifeform: mebbe operator wants to check his tx propagated?
12:39 trinque and if I wanted that I'd want to do it as a "mempool explorer" tool
12:39 trinque ^
12:39 mircea_popescu davout operator sshs into network node.
12:39 asciilifeform davout: you wouldn't do this from wallet box
12:39 mircea_popescu and yes, better money just ask mimi for instance.
12:39 mircea_popescu (ie, someone else.)
12:39 davout i really don't feel strongly about this, just thinking out loud
12:40 davout (this unconfirmed tx thing)
12:40 mircea_popescu that's why the forum's here for.
12:40 mircea_popescu well, that and not being read.
12:44 asciilifeform in other lulz, nsa has internal clone of ida, 'ghidra'
↖
12:44 asciilifeform java turd.
12:45 asciilifeform and it is not even first-revealed in today's dump, has figured in... help-wanted ads, for eons.
12:45 mircea_popescu does it even work ?
12:45 asciilifeform now how would i know.
12:46 asciilifeform in-house mega-seekrit javaturd.
12:46 asciilifeform ( ads, e.g., https://www.techexpousa.com/jobdetails.cfm/450840/Software-Engineer )
12:47 mircea_popescu myeah.
12:55 asciilifeform lel, ipnoje uses 'tinyscheme' internally.
12:56 asciilifeform 'Apple seems to have taken version 1.38 of the Tiny Scheme project (available online, google it or check workshop output) and modified it a little. Most modifications are fixes for the most obvious bugs in the program: changing sprintf to snprintf and adding some more size checks but they have not fixed everything. In fact, they haven't even bothered keeping up with the Tiny Scheme project, which is now on version 1.41. Apple have al
12:56 asciilifeform so added a couple of new members and changed some sizes in the struct scheme.These are fairly trivial to reverse but comparing each function in a disassembler with the Tiny Scheme source version. Apple uses Tiny Scheme to create a vector of sandbox rules that it then converts to a compiled sandbox profile....'
12:57 mircea_popescu lel
12:59 asciilifeform ( from the docs of the active ios9+ browser driveby-with-arbitrary-payload. which hopefully surprises nobody )
12:59 deedbot http://qntra.net/2017/03/wikileaks-hands-elected-trump-us-government-weapon-to-gut-careerist-deep-state-us-government/ << Qntra - Wikileaks Hands Elected Trump US Government Weapon To Gut Careerist 'Deep State' US Government
13:00 asciilifeform ( more re same, https://wikileaks.org/ciav7p1/cms/page_13205587.html )
13:02 asciilifeform BingoBoingo: neato
13:06 BingoBoingo ty asciilifeform, figured I'd take big picture leaving opportunity for experts to fill in mined lulz with further submissions
13:09 asciilifeform 'VOIP - Huawei VOIP Collection' << direct phuctor lel
13:12 asciilifeform various cisco rootkits, also, but these i regard as a snore
13:14 asciilifeform buncha konsoomer junk also (linksys et al)
13:15 Framedragger isn't internet backbone basically juniper + cisco still? :(
13:18 asciilifeform Framedragger: don't forget huawei.
13:18 asciilifeform which is why you'll often find trb-related tcp pipes randomly RST'd, and the like.
13:19 Framedragger i thought huawei only made consumer shit? (not that that's reassuring...)
13:19 asciilifeform nope
13:19 Framedragger i see - i'm behind on the internet of shit it seems
13:26 asciilifeform 'Development of a tool to burst out a binary using udp packets with forward error correction at 100MB/s' << somebody reads the l0gz
13:26 asciilifeform https://wikileaks.org/ciav7p1/cms/page_5341225.html << him, apparently
13:27 asciilifeform 'Worked as head of Software Engineering at Mediatech Inc. from 2004-2006' << who will be the first to name this illustrious fella.
13:28 asciilifeform https://wikileaks.org/ciav7p1/cms/page_18382968.html << winblowz code-signing bypass, courtesy of microshit
13:30 asciilifeform https://wikileaks.org/ciav7p1/cms/page_3375460.html << usbdrive-shaped hardware raper for crapple desktops
13:32 asciilifeform https://wikileaks.org/ciav7p1/cms/page_14588150.html << crapple firmware infector
13:33 trinque no lets get rid of openfirmware; it doesn't x, y, and ...
13:33 trinque moar ARM and EFI
13:35 trinque it may sadden those that don't yet know that open firmware was a dead simple forth nugget. i.e. in the sense that apple for a brief time meant dead simple.
13:35 asciilifeform https://wikileaks.org/ciav7p1/cms/page_36405256.html << re the 'internal gossipd', at the time of the writing appears to be entirely hypothetical
13:36 asciilifeform trinque: the move to intel, killed it, intel iron wants megatonne of initialization crapolade
13:36 trinque aha
13:36 asciilifeform (and, bonus: builds only on winblowz, heavy on -- yes -- masm)
13:37 asciilifeform lel, i was wrong re their 'gossipd', it was written, by unknown commercial contractor: https://wikileaks.org/ciav7p1/cms/files/Fluxwire_manual-3.5.0.pdf << docs.
13:38 asciilifeform pretty heavy.
13:40 asciilifeform and oh hey, http://btcbase.org/log/2015-08-02#1222312 <<<>>> https://wikileaks.org/ciav7p1/cms/page_2621481.html
13:40 a111 Logged on 2015-08-02 20:02 mircea_popescu: siemens is "german" in the sense tsipras is "greek" and so on. absolutely nothing to do.
13:40 asciilifeform ^ siemens voip gear, pwned
13:42 asciilifeform aaaand https://wikileaks.org/ciav7p1/cms/page_9535850.html << hald (dbus component, poetteringism) local root.
13:42 asciilifeform (0 details, but stated to exist.)
13:44 asciilifeform https://wikileaks.org/ciav7p1/cms/page_1179686.html << lulzy, pocket gadget for theft of seeekrits from... floppies
13:45 asciilifeform '...initial plan for concealment host is as a day planner.'
13:45 asciilifeform 'hey lemme borrow this'
13:45 * asciilifeform can almost picture this scene
13:47 asciilifeform https://wikileaks.org/ciav7p1/cms/page_22642800.html << plunder of lulz from the italian 'hackteam' dump of '15
13:49 asciilifeform https://wikileaks.org/ciav7p1/cms/page_9535630.html << their version of mircea_popescu's 'uci'.
13:50 mircea_popescu i see you're well entertained.
13:50 asciilifeform actually nearing the bottom of this barrel
13:52 asciilifeform 'RainMaker v1.0 is a survey and file collection tool built for a FINO QRC operation. IOC/FINO is looking to expand asset-assisted operations. The intended CONOPS involves using an asset to gain access to a target network. The asset has the ability to plug in a personal thumbdrive to the network. In this scenario, the asset will have "downloaded" the portable version of VLC player (2.1.5) and will listen to music during work hours. W
13:52 asciilifeform hile she is listening to music, the tool will execute the survey and a prioritized file collection. All collected data will be stored to the root of the removable media it is executing from. When the asset next meets with the case officer, the thumbdrive is retrieved and the collection is processed. '
13:52 asciilifeform srsly?
13:53 asciilifeform https://wikileaks.org/ciav7p1/cms/page_4849785.html >> 'I strongly suggest that you name your missing vector for DanceFloor "Twerk". '
13:54 mircea_popescu note the fist fucking ever appropriate use of "she"
13:56 asciilifeform loox like they censored the ~only ~useful bits, e.g. the active av holes.
13:56 asciilifeform largely sums to snoar.
13:57 * asciilifeform ate the whole thing.
13:58 mircea_popescu anyway. maybe new elbrus brings ofw back.
14:02 asciilifeform https://wikileaks.org/ciav7p1/cms/files/DevelopersGuide.pdf << for aficionados strictly -- details of implant protocol, where gibblets are disguised as tcp replay packets. apparently standardized across this particular directorate.
14:02 asciilifeform 'Hive beacons were designed to work with the Blot proxy (developed by Xetron). Blot looks for a tool ID embedded in the HELLO packet of an SSL session initiation. If the ID is found, then it forwards the packet to the tool-handler, otherwise it is sent to the cover server. The tool ID is embedded in the HELLO packet using the embedData function defined in …/polarssl/library/loki_utils.c. The SSL data structure defined in …/polars
14:02 asciilifeform sl/include/polarssl/ssl.h is extended to include the session _checksum, tool_id, use_custom, and xor_key. The data contained within this packet is constant with the exception of a time stamp taken from the real-time clock and a few bytes of random data. A CRC checksum is computed from the entire packet and is included with the HELLO packet. When Blot receives this packet, it checks the CRC searches a list of previously seen packets f
14:02 asciilifeform or any matches. If a match is found the packet is assumed to be a TCP replay and is dropped.'
14:03 asciilifeform document also of slight interest in re discussion of ntp, and issues of time synchronization in general. apparently unsolved problem for usg just as well as for victims.
14:03 trinque unsolved problem for reality too
14:04 asciilifeform 'IOC/ECG's Advanced Forensic Division (AFD) performed an analysis of Hive version 2.5 network communications to assess its likelihood of detection.The results of this analysis are found in document AFD-2012-0973-2. In summary, AFD was able to create signatures for DNS, ICMP, and TFTP triggers; found that the TCP and UDP triggers did not adhere to their respective protocol standards; and further found that the TCP and UDP triggers eac
14:04 asciilifeform h had consistent packet sizes.'
14:04 asciilifeform ^ apparently they use own auditor directorate for beta testing, and consistently fail
14:04 asciilifeform this rounds out today's lulzfest, i think.
14:08 asciilifeform and srsly, 0 directly bitcoin-related anything. in motherfucking 2015-16. asciilifeform is disappoint.
14:08 asciilifeform ~that~ compartment, apparently, leakproof.
14:08 asciilifeform ( just as crypto directorate is )
14:08 BingoBoingo asciilifeform: To be fair about lack of Bitcoin, this is CIA rapidly reinventing own "NSA"
14:09 BingoBoingo Stuck on low hanging fruit
14:09 asciilifeform BingoBoingo: we did have a thread back in... 2013? re 'they will copy su approach and make 2-in-a-box kgb/gru duet'
14:09 BingoBoingo AHA
14:17 asciilifeform not even the directorate which runs the gavins, the hearns, ever seems to leak so much as a drop.
14:17 BingoBoingo Well, draining has just begun. Build windmill and pump!
14:18 asciilifeform thus far i suspect that 'leakage' is roughly proportional to a directorate's population of folx who know what is 'twerk'
14:18 asciilifeform and who embed anime gif into their project docs (several examples in the linked dump)
14:19 asciilifeform but i'll be the first to admit that this heuristic is very much a 'blind man and the elephant'.
14:19 BingoBoingo And thus pumping needs to begin. Change pressure on the container and see what fails
14:32 ben_vulpes in other water-related engineering projects, here's something that is very definitely not a lock: http://gcaptain.com/worlds-first-ship-tunnel-to-bypass-dangerous-seas-in-norway/
14:44 trinque https://1917.rt.com/ << russian revolution member-berries
14:58 shinohai https://github.com/bitcoin/bitcoin/pull/9938 <<< locks-free checking
15:01 trinque http://btcbase.org/log/2015-02-05#1008756 << this is indeed still the case
15:01 a111 Logged on 2015-02-05 18:01 punkman: http://log.bitcoin-assets.com/?date=05-02-2015#1008336 << this is now stuck at 124275
15:01 trinque http://btcbase.org/log/2015-02-05#1008972 << mod6, is that why this patch did not make it in?
15:01 a111 Logged on 2015-02-05 19:11 mod6: <+punkman> running a node with this line removed: http://btc.yt/lxr/satoshi/source/src/main.cpp#0939 . works so far << check out this patch: http://therealbitcoin.org/ml/btc-dev/2014-December/000023.html
15:01 trinque would've been nice if punkman studied this when he first saw it.
15:01 asciilifeform shinohai: no mention of the db, the actual bottleneck..
15:02 asciilifeform ( incidentally, trb doesn't validate scripts in blocks. at. all. )
15:02 * trinque has such a checkpoints-cauterized node wedged at that very block, will in fact study
15:02 trinque 124276 happens to be a 1 txn block btw
15:04 asciilifeform trinque: first q to ask in a wedge: 'has it SEEN the block?'
15:04 asciilifeform ( recall, in mircea_popescu's recent case, answer was the -- very usual -- 'nope' )
15:06 trinque this guy's running with -connect to deedbot.org node
15:06 trinque sec and I'll grab some logs
15:07 mircea_popescu asciilifeform aha. the nsa itself long knew it is both a) deeply ineffectual and b) extremely loud. which is why now and again i say something to the effect of "wtf straw must one have in head to work for those dorks, move on already."
15:08 mircea_popescu asciilifeform> not even the directorate which runs the gavins, the hearns, ever seems to leak so much as a drop. << the reason is that utterly nobody gives a shit.
15:08 asciilifeform mircea_popescu: and somebody gives a shit re junk routers etc?
15:08 mircea_popescu yeah.
15:08 mircea_popescu don't ask me to explain what entertains teh public.
15:09 asciilifeform i suspect that , e.g., gavin's pay stubs, would entertain plenty.
15:09 mircea_popescu they're not that substantial.
15:09 trinque not nearly so much as "omg caught pirate robertz" or "pedo dark web lair"
15:10 asciilifeform no, but the fact-of.
15:10 trinque makes great tweets
15:10 mircea_popescu nobody working for idiot empire makes much. this is a recurrent fantasy of yours, but not more.
15:10 asciilifeform gotta divide by amt of honestwork, mircea_popescu
15:10 asciilifeform megabux / ~0 is pretty sum
15:11 mircea_popescu no ; because if a girl who does nothing but fucks up and sucks my cock makes a grand, that grand does not get divided by 0.000000epsilon to result in TWENTY BRILLIONS!!1
15:11 asciilifeform in asciilifeform's mental calculus, it sure does
15:11 mircea_popescu the only difference between slavegirl in my household and usg employee is that a) i whip mine and b) after a while they are sensibly better at everything. the usg drones don't get whipped and don't improve.
15:12 asciilifeform commuting to and sitting in butugychag is a mega-difference
15:12 mircea_popescu but otherwise, it's the same. i sent a bunch of girls on a bunch of missions this month, with various wads of cash.
15:12 mircea_popescu except for the part where IT IS MY CASH, they could just as well have been "government employees"
15:13 mircea_popescu who you know, "made salaries".
15:13 trinque couldn't find the log, but the other day mircea_popescu discussed that some pedo case's dismissal had very much to do with that the guy refused to LARP with them re: their importance.
15:14 asciilifeform mircea_popescu: that's rather like to say that fucking same gurl vs fucking hole in a muddy tree trunk, 'is the same'
15:14 trinque no one can seriously claim the guy wearing steampunk goggles and going to conferences isn't LARPing in the grand american tradition of pretense to existing
15:15 mircea_popescu asciilifeform explain
15:15 mircea_popescu trinque no but it's exactly it, an exercise in serving the phantasmagorical.
15:15 mircea_popescu http://trilema.com/2009/inchipuiti-va/ << very related, sadly in romanian.
15:15 mircea_popescu (gedankenexperiment, what would happen if you could produce any item by thinking about it.)
15:16 asciilifeform mircea_popescu: sweeping a floor for beloved comendante hasta y por la siempre, as gurl does, is quite different from sweeping floor for salary from hitler. even if same broom and same floor somehow.
15:16 mircea_popescu well yes, certainly.
15:16 mircea_popescu but not ~economically~ different.
15:17 trinque the stay-puffed marshmallow man, elementarily
15:17 trinque i.e. any manner of destructive nonsense, or cancer of the imagination
15:17 asciilifeform trinque: wassat?
15:17 mircea_popescu yea trinque the who ?
15:17 trinque first ghostbusters, the david bowie lesbian god tells them to choose teh form of their destroyer
15:18 trinque first thing that popped into what's his name 80s hack's head was the marshmallow man
15:18 mircea_popescu lol ok
15:18 * mircea_popescu wanders back to his zuleika rewrite that he's been labouring on since weekend.
15:18 mircea_popescu expect an 80kword novel to be dropped on your heads later this week dear all.
15:21 asciilifeform briefly upstack: as i once described, many years ago asciilifeform actually tried to sign up for nsa! was , unsurprisingly, turned down ( you get a ream of paper even if turned down! )
15:21 asciilifeform and , years later, ended up briefly labouring in a butugychag full of ex-nsa folx, who confirmed, they dun like ethnic untermenschen there
15:21 asciilifeform they suure luvv anime bois tho. apparently.
15:22 asciilifeform or maybe this is only at cia.
15:23 asciilifeform the funny bit is, that was when i formed picture of nsa as 'serious org'
15:24 trinque I guess it wouldn't be the only "serious" gay men's club on earth.
15:24 asciilifeform 'they're exempt from equalism!11 , think!'
15:25 asciilifeform dunno, per my informant there were gurls there,
15:25 asciilifeform fuckable, even
15:28 * trinque cannot connect those inputs to "luvv anime bois"
15:33 asciilifeform conflicting data re seekrit heathen pits, noose at 11
15:34 mircea_popescu i don't see why it's such a big deal, i included all sorts of strange in the logs, what of it ?
15:37 asciilifeform in other strange, '4-year-old male white rhino who was slaughtered this week inside his enclosure at a zoo outside Paris. The rhino — discovered by his keeper at the Thoiry Zoological Park on Tuesday — now holds the ominous distinction of likely being the first rhino to be killed by poachers inside a zoo, experts said.'
~ 1 hours 17 minutes ~
16:55 asciilifeform !!up onlooker
16:55 deedbot onlooker voiced for 30 minutes.
~ 41 minutes ~
17:37 shinohai Well onlooker certainly lives up to his handle.
17:47 asciilifeform shinohai: i still dun get why cia stooge needs a handle. can read the l0gz on www, like anybody
17:49 shinohai Maybe they get paid by # of connections
17:50 trinque somebody's boss's boss just orders that X must infiltrate and monitor, and yes sir right away sir.
17:50 trinque and so he does the most visibile thing such that boss sees him working, and he goes back to reading reddit.
17:50 mircea_popescu alternatively random guy clicked a link, hasn't even noticed the tab among the symphony of tabs on his ie.
17:51 asciilifeform mircea_popescu: he didn't show up under the default lamer nick (e.g., 'fromphuctor') so probably not this
17:51 mircea_popescu perhaps. who knows where the link is found by now.
17:53 asciilifeform and lol, infiltrate, sooo 2013!111 what'll he do, bore folx to death, like ninjashotgun
17:53 asciilifeform or the other d00d, which one was he,
17:53 asciilifeform decimation.
17:54 asciilifeform ( the last time i mentioned him on the air -- he actually showed up! in pm! to whine re how cruelly he is libelled, how he was Never A Stooge, etc. snoar. )
~ 15 minutes ~
18:09 mod6 <+trinque> http://btcbase.org/log/2015-02-05#1008972 << mod6, is that why this patch did not make it in? << i don't think it was because of any such wedge. i think we held off because it was proposed that there might have been a better way to handle that through configuration files. it's all in the logs if you look in around the time that email was sent; december of '14.
18:09 a111 Logged on 2015-02-05 19:11 mod6: <+punkman> running a node with this line removed: http://btc.yt/lxr/satoshi/source/src/main.cpp#0939 . works so far << check out this patch: http://therealbitcoin.org/ml/btc-dev/2014-December/000023.html
18:10 trinque meanwhile found some discussion, yep
18:10 trinque and in fact, meanwhile found that it was my own build environment hauling in libressl on openbsd
18:10 trinque so no big deal
18:10 asciilifeform trinque: what was this in re
18:11 trinque stripping out of checkpoints. I'd done it here myself days ago before finding that you had already in 2016
18:11 asciilifeform snip of 'checkpoints'
18:11 asciilifeform ah
18:11 trinque *2015
18:11 asciilifeform i never cut the old ones out, but introduced flag 'verifyall'
18:12 asciilifeform iirc mircea_popescu at the time said that the thing really oughta eat a programmable set of checkpoint
↖
18:12 asciilifeform but imho we are very, very far away from the 'verifying chain takes too long' problem, for this to be a burning issue
18:12 trinque maybe; seems like a data structure that somebody would love to spooge malicious values into via some other (networking code) exploit
18:13 asciilifeform trinque: if you have remote-execution 0day in the thing, you have a problem.
18:14 asciilifeform plus/minus one useless routine, will make no difference, just like 7 bullet holes in head vs 8.
18:14 asciilifeform but recall, i started by asking for 'the book' and for it to be as thin as reasonably possible (but not thinner..)
18:14 trinque having a branch available to skip verification ~at all~ seems questionable.
18:14 asciilifeform so snip, snip the crapolade.
18:15 trinque indeed, I'm snipping and mapping for entirely that reason.
18:15 asciilifeform fwiw i run my boxes with verifyall.
18:15 trinque aha
18:16 asciilifeform btw trinque lemme know if you'd like a 'wire' on dulap.
18:16 asciilifeform ( ideally you would also have one to ben_vulpes , et al , avoid 'stars' )
18:20 trinque asciilifeform: need an ssh pubkey for it iirc?
18:20 asciilifeform aha
18:20 trinque k will generate shortly and send it to ya
18:20 asciilifeform gpggram.
18:20 trinque sure will
18:31 asciilifeform in other cia lulz, https://www.academic-signature.org
18:43 asciilifeform in yet other lulz, 'dwave' no longer gets to monopolize snake oil market, https://www-03.ibm.com/press/us/en/pressrelease/51740.wss
~ 16 minutes ~
19:00 mircea_popescu how fortunate are we, to live in the times of such great discoveries.
19:01 trinque and with cloud computing, nobody gets to inspect the snake oil milking machine.
19:01 trinque nb
~ 17 minutes ~
19:18 asciilifeform in other very non-noose, cpp standard does not specify initialization order of static variables.
19:19 asciilifeform (specifically unlike ada, where you can explicitly specify what this is called, 'elaboration', procedures)
19:19 asciilifeform *specify this, which is called
~ 1 hours 24 minutes ~
20:44 trinque http://www.ebay.com/itm/Symbolics-MacIvory-model-3-workstation-in-an-Apple-Quadra-700-with-Mac-O-S-8-0-/112326565327?hash=item1a272f5dcf:g:LUsAAOSwWxNYseQZ
20:44 deedbot http://phuctor.nosuchlabs.com/gpgkey/AFB7ADF63CF9C236A056A28E6E751A1031503D5BAC1020EEDC3350529CAB3E26 << Recent Phuctorings. - Phuctored: 1586...3923 divides RSA Moduli belonging to '222.168.55.50 (ssh-rsa key from 222.168.55.50 (13-14 June 2016 extraction) for Phuctor import. Ask asciilifeform or framedragger on Freenode, or email fd at mkj dot lt) <ssh...lt>; ' (Unknown CN 22)
20:44 deedbot http://phuctor.nosuchlabs.com/gpgkey/AFB7ADF63CF9C236A056A28E6E751A1031503D5BAC1020EEDC3350529CAB3E26 << Recent Phuctorings. - Phuctored: 1501...3239 divides RSA Moduli belonging to '222.168.55.50 (ssh-rsa key from 222.168.55.50 (13-14 June 2016 extraction) for Phuctor import. Ask asciilifeform or framedragger on Freenode, or email fd at mkj dot lt) <ssh...lt>; ' (Unknown CN 22)
20:44 trinque first time I've seen one of those for sale.
20:44 * trinque will not be buying, but might be interesting to any scrap hunters present.
~ 30 minutes ~
21:15 asciilifeform trinque: pretty typical price
21:15 asciilifeform and it's dks selling, looks like
21:16 asciilifeform (though for some reason location is california, instead of virginia where he historically was found)
21:16 asciilifeform http://www.ebay.com/itm/Symbolics-XL1201-no-FPA-4-MW-memory-18-GB-SCSI-disk-19-in-monochrome-console-/112325366421?hash=item1a271d1295:g:g~4AAOSwXYtYsb-C << him, also, nao
21:17 asciilifeform i lost more or less all interest in the physical machines after i got hold of the emulator.
21:18 asciilifeform ( which not only runs on x64, but offers some reversing, and without electron microscope, even )
21:29 asciilifeform iirc phf has the xl1201.
↖
21:30 asciilifeform btw speaking of ebay, for ~same price you can get working electron microscope, of recent make.
21:31 asciilifeform i would get it, if i had where to put.
21:36 asciilifeform !$ ssh 222.168.55.50 77.37.2.63 95.240.174.82 130.88.150.85
21:36 scriba ssh banner of 222.168.55.50 as seen on 2016-06-13: SSH-2.0-OpenSSH_4.3p2 Debian-8ubuntu1
21:36 scriba ssh banner of 77.37.2.63 as seen on 2016-06-13: SSH-2.0-OpenSSH_4.3p2 Debian-9
21:36 scriba ssh banner of 95.240.174.82 as seen on 2016-06-13: SSH-2.0-OpenSSH_4.6p1 Debian-5
21:36 scriba ssh banner of 130.88.150.85 as seen on 2016-06-13: SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu7
21:38 * asciilifeform wonders if anybody had ever built bitcoin against debianized openssl...
21:39 asciilifeform !!up onlooker
21:39 deedbot onlooker voiced for 30 minutes.
21:39 asciilifeform i guess 'looker', not talker, huh.
21:39 mircea_popescu maybe it's alfbaiter
21:40 asciilifeform evidently
21:42 asciilifeform hm, now that i think of it, the question of 'against which openssl was it built' may be.. answerable. mircea_popescu : did satoshi ever distribute a binary ?
21:42 asciilifeform iirc there was such a thing
21:42 mircea_popescu early on, yeah. i've no copies though.
21:43 asciilifeform ^ if anybody has copy... write in plox ^
21:43 asciilifeform esp. of the winblowz client .
21:45 asciilifeform http://www.metzdowd.com/pipermail/cryptography/2009-January/014994.html << exe evaporated, naturally
21:47 asciilifeform http://www.zorinaq.com/pub/bitcoin-0.1.0.rar << purports to be mirror.
21:52 asciilifeform 0.9.8h 28 May 2008.
21:52 mircea_popescu prolly more interesting
21:52 mircea_popescu i was gonna say, get the pre 1.0 ones
21:53 asciilifeform this seems to be the 1st public exe.
21:53 asciilifeform (my memory, apparently, was correct, he published a winturd along with 1st source)
21:53 shinohai asciilifeform: http://btcinfo.sdf.org/trb/original-bitcoin/
21:55 asciilifeform shinohai: INTERESTINGLY the checksums do not match !!
21:55 asciilifeform sha512 of the exe i linked earlier : fa8f822c8f0d86f419ef94ffe80bdbfd4966169f4d3becec8b5cd4bf693ad11c1c8f91d3cfb74664cfc910a326f4bc799613847cf56aa12c3ff6124121626b6e
21:55 asciilifeform of shinohai's : 919504c2ed1fd687f26b8b91033466854fe295464ac281abd3d83456208922a60d2844edecd4e330d7b329c24c7772289e0d32620b6dc0b8bf772b36efae98bf
21:56 asciilifeform then again noshit
21:56 asciilifeform shinohai: yours is 'BitCoin v0.1.3 ALPHA' per the readme.
21:56 asciilifeform same openssl tho.
21:57 shinohai Came from a bitcointalk mirror long ago
~ 32 minutes ~
22:29 asciilifeform it is interesting how much, imho, moar readable these are, than trb.
22:31 mircea_popescu they are ?
22:31 asciilifeform yea
~ 16 minutes ~
22:48 BingoBoingo !~ticker --market all
22:48 jhvh1 BingoBoingo: Bitstamp BTCUSD last: 1221.0, vol: 14695.82308481 | BTC-E BTCUSD last: 1208.399, vol: 7580.12544 | Bitfinex BTCUSD last: 1214.3, vol: 44198.95268492 | BTCChina BTCUSD last: 1125.7281, vol: 10865.13950000 | Kraken BTCUSD last: 1208.92, vol: 4255.09536423 | Volume-weighted last average: 1202.8837954
22:53 mircea_popescu O NOES BITCOIN PRICE MALAISE
22:55 trinque !!up ser
22:55 deedbot ser voiced for 30 minutes.
22:55 trinque wb
22:58 trinque o.0
~ 48 minutes ~
23:47 deedbot http://phuctor.nosuchlabs.com/gpgkey/77A9AAD03EADB9C5C54C893B5F439B1AAFB0E729454C9EE89C1857F7009D3272 << Recent Phuctorings. - Phuctored: 1487...5067 divides RSA Moduli belonging to '190.220.130.117 (ssh-rsa key from 190.220.130.117 (13-14 June 2016 extraction) for Phuctor import. Ask asciilifeform or framedragger on Freenode, or email fd at mkj dot lt) <ssh...lt>; ' (ffylead.uncu.edu.ar. AR M)
23:47 deedbot http://phuctor.nosuchlabs.com/gpgkey/77A9AAD03EADB9C5C54C893B5F439B1AAFB0E729454C9EE89C1857F7009D3272 << Recent Phuctorings. - Phuctored: 1604...4269 divides RSA Moduli belonging to '190.220.130.117 (ssh-rsa key from 190.220.130.117 (13-14 June 2016 extraction) for Phuctor import. Ask asciilifeform or framedragger on Freenode, or email fd at mkj dot lt) <ssh...lt>; ' (ffyl2.uncu.edu.ar. AR M)
23:49 BingoBoingo O NOES ARGENTINE RSA MALAISE!
← 2017-03-06 | 2017-03-08 → ↑

Random(trilema) | Download hourly DB snapshot | Get Source Code

Theme: Light | Dark | System Default