log☇︎
102800+ entries in 0.03s
asciilifeform: ^ cure
asciilifeform: iirc.
asciilifeform: stty -ixon
asciilifeform: loses, e.g., 0x03.
asciilifeform: veen: linux, by default. because it was dropped as a baby.
asciilifeform: (there is a red alarm lamp on the pcb to alert in case of analogue rng failure, but it is theoretically possible for the circuit to break outside of FUCKGOATS proper)
asciilifeform: you also MUST have some means for not attempting to cryptoate if the device for whatever reason is not functioning.
asciilifeform: the requisite necks for it to unexist, have not yet been broken.
asciilifeform: and this exists.
asciilifeform: because unix is retarded
asciilifeform: i.e. NOT emit flat spectrum of octets 0x00 - 0xFF !!!!!!
asciilifeform: or the tty will LOSE CONTROL CHARS !!!!
asciilifeform: you MUST kill flow control
asciilifeform: there are some nuances though.
asciilifeform: theoretically.
asciilifeform: aha.
asciilifeform: see also http://qntra.net/2016/08/rng-whitening-bug-weakened-all-versions-of-gpg .
asciilifeform: veen: rng in gpg has serious problems , on top of using /dev/random
asciilifeform: ( http://btcbase.org/log/2017-02-23#1617259 << thread today ) ☝︎
asciilifeform: veen: have patience, i have only 2 hands
asciilifeform: i would say 'replace /dev/random in gpg source with /dev/fg and build' but the rng in gpg is monumentally retarded and i disrecommend its use entirely
asciilifeform: and there is no reason for it to happen in the kernel .
asciilifeform: my point is, sane proggy oughta know how to eat multiple /dev/ttyUSB0, /dev/ttyUSB1, ... however many, correctly.
asciilifeform: it plugs in through a ttl to usbuart plug
asciilifeform: there's no driver, veen , it's a tty
asciilifeform: or suppose you have -- as i recommend - three FUCKGOATSen.
asciilifeform: let's suppose you trip over the cable. for sake of argument -- what then
asciilifeform: veen: file ? you gonna store the position somewhere ?
asciilifeform: what would you like to know, veen ?
asciilifeform: 22 peers.
asciilifeform: (mine, and any other malleus-enabled nodez, will ban.)
asciilifeform: lulzily we're banning ~100% of prb nao because they ~insist~ on shitting out 'alert' packets
asciilifeform: ( what this looks like : you get some, e.g., 'WARNING: disconnecting wire 127.0.0.1:9000 ! (will retry...)' in the debug log. until the wire peer is happy to eat again . )
asciilifeform: aaaaaaaaaaand wire-reconnector worx!
asciilifeform: no moar ping-reject.
asciilifeform: aaaaaaaaaand we're back.
asciilifeform: ben_vulpes: you got reversin' that needs doing, or wat
asciilifeform: (only node, rather, on dulap)
asciilifeform: dulap down for next 3 minutes, folx
asciilifeform: typically
asciilifeform: i'm usually sold by the pound...
asciilifeform: hm
asciilifeform: 'opposed piston engine'
asciilifeform: l0l!!
asciilifeform: ok this is delicious, but i must briefly revisit upstack: mircea_popescu , mod6 , or anyone else in my l1 who wants to ssh+wire-peer with dulap: please gpggram a ssh rsa pubkey to me.
asciilifeform: pretty lulzy that they had the 'how we FOUND our BUG!' document hot an'ready to broadcast.
asciilifeform: 'The underlying bug occurs because of a pointer error.'
asciilifeform: https://archive.is/X00QT << from the horse's mouth.
asciilifeform: because this unrapes, apparently, someone.
asciilifeform: usg.google, unsurprisingly, has top priority of... purging 13333337 s33333kr1tz from its public caches.
asciilifeform: 'I don't know if this issue was noticed and exploited, but I'm sure other crawlers have collected data and that users have saved or cached content and don't realize what they have, etc. We've discovered (and purged) cached pages that contain private messages from well-known services, PII from major sites that use cloudflare, and even plaintext API requests from a popular password manager that were sent over https (!!).'
asciilifeform: ( and yes, archive.is uses shitflare , continuously )
asciilifeform: h that some colleagues around the Project Zero office even got intrigued. It became clear after a while we were looking at chunks of uninitialized memory interspersed with valid data. ...'
asciilifeform: 'On February 17th 2017, I was working on a corpus distillation project, when I encountered some data that didn't match what I had been expecting. It's not unusual to find garbage, corrupt data, mislabeled data or just crazy non-conforming data...but the format of the data this time was confusing enough that I spent some time trying to debug what had gone wrong, wondering if it was a bug in my code. In fact, the data was bizarre enoug
asciilifeform: 'cloudbleed'
asciilifeform: in other lulz, mircea_popescu , https://archive.is/HIr9r << i think we have the answer to 'why did asciilifeform get 64kb of crapolade in the guise of ZIPs from archive.is in july of '16 ? '
asciilifeform: anyway this is up an' running.
asciilifeform: guessed.
asciilifeform: and holy mother of fuck, jurov , why does your thing mangle '@' into 'at' ☟︎
asciilifeform: [BTC-dev] (EXPERIMENTAL) A Recipe for the use of Wires via SSH Tunnels. ☟︎
asciilifeform: http://therealbitcoin.org/ml/btc-dev/2017-February/000252.html
asciilifeform: mircea_popescu, ben_vulpes , mod6 , shinohai , et al :
asciilifeform: ACHTUNG, PANZERS! ☟︎
asciilifeform: worx great.
asciilifeform: in other noose! zoolag and dulap are now wire-via-ssh-tunneled together.
asciilifeform: lul
asciilifeform: meanwhile, in the monkey cage, https://archive.is/TlYxN
asciilifeform: iirc?
asciilifeform: first it went to 1300s.
asciilifeform: unrelatedly, system of two 'wired' trb nodes appears to have marked resistance to 'blackhole'.
asciilifeform: lel
asciilifeform: or what, we aren't counting mtgox ? then why count the other leveraged and otherwise paper-addled exchanges.
asciilifeform: trinque: what about http://btcbase.org/log/2013-12-04#405828 ? ☝︎
asciilifeform: gold.
asciilifeform: 'Update February 23rd, 1:45PM ET: Twitter user Ramsey Nasser points out that the algorithm has consistently high toxicity for Arabic, no matter the content.'
asciilifeform: 'The software works by determining the “toxicity” of online comments, a scale that has been established by mining millions of comments from the web and then presenting them to panels of 10 people (humans!) at a clip to get their feedback. '
asciilifeform: elsewhere, in re http://btcbase.org/log/2017-02-22#1616821 >> http://archive.is/QoAki << 'Google’s Jigsaw unit, as part of a larger effort to battle online trolling, said earlier today that it was releasing a new tool called Perspective, software that uses machine learning to detect harassment and abuse online.' ☝︎
asciilifeform: 'YouTube cuts popular live stream of giraffe about to give birth for 'nudity and sexual content''
asciilifeform: http://btcbase.org/log/2016-12-11#1581753 << prev thread re subj ☝︎
asciilifeform: ben_vulpes: it is more than simply 'reduce', but yes
asciilifeform: safety-critical code.
asciilifeform: this is one of those 'sapper -- errs once' affairs.
asciilifeform: ~done. i was aiming to SPARKify it before release...
asciilifeform: we also have a few other things, e.g., http://btcbase.org/log/2016-12-11#1581867 . ☝︎
asciilifeform: will add also that from the pov of a third party unliked to wot of (owner) or (usurper), there are now ~two~ 0x8A736F0E2FB7B452 people.
asciilifeform: trivially correct.
asciilifeform: should not have been a surprise, to anyone. like the old example of derelict bridge falling down. 'not an if, but a when'
asciilifeform: regardless of knob settings. it is required by the rfc, and is in common among all known pgptrons.
asciilifeform: they are hard-wired to sha.
asciilifeform: mircea_popescu: yes but this does 0 for gpg fp.
asciilifeform: became a serious itch for asciilifeform when he watched a sha1 collision get crapped out on demand, for minor project, at butugychag 1+ yr ago
asciilifeform: the keyring thing is a work of evil.
asciilifeform: it will, guaranteed.
asciilifeform: the real headache is that it is entirely possible to produce a 'i eat toe fungus!', signed, sincerely, 0x8A736F0E2FB7B452. a year ago i estimated that this costs 100k usd. today -- probably a few thou.
asciilifeform: not without a broad daylight fleanode break.
asciilifeform: mechanical, bitwise integrity -- yes
asciilifeform: and also http://btcbase.org/log/2016-06-17#1483829 thread. ☝︎
asciilifeform: http://btcbase.org/log/2016-08-18#1523633 << see also. ☝︎
asciilifeform: and anyone else with whom you (for particular values of 'you') have not exchanged, out of band, modulus.
asciilifeform: signatures from, e.g., linus, are automatically in question.