asciilifeform: ' ... and if you don't want the opengl's scaling to kick in you have to get the size just right ' << abstractions ftw! gabrielladdel forward and onward !

asciilifeform: ( http://www.loper-os.org/?p=498&cpage=1#comment-1812 in particular. )

asciilifeform: is re subj.

asciilifeform: or for that matter asciilifeform's ~entire www.

asciilifeform: http://btcbase.org/log/2016-06-10#1480721 << see also thread. ☝︎

asciilifeform: aka deskilling.

asciilifeform: 'And you're right: we were not out to win over the Lisp programmers; we were after the C++ programmers. We managed to drag a lot of them about halfway to Lisp. Aren't you happy?' -- steele (yes, that one, of CLTL!)

asciilifeform: gosling gets the blame, but there were quislings, e.g., steele, see also http://people.csail.mit.edu/gregs/ll1-discuss-archive-html/msg04045.html

asciilifeform: ?

asciilifeform: and what else, chickens build chicken farms /

asciilifeform: any more than the hieroglyphs on the mcdonalds registers were placed there by the cooks.

asciilifeform: the deskilling was not performed ~by~ programmers.

asciilifeform: the key here, for n00bz, is that there is literally not 1 byte in there that does not have 1) a specific purpose, 2) that you can discern from looking at the cpu docs -- which fit on 1 a4 sheet of paper.

asciilifeform: for comparison.

asciilifeform: http://www.retro.co.za/ccc/apple2/paulrsm/6502/INTLST.TXT << woz's much more compact (4kB) float-less basic. ☟︎

asciilifeform: http://www.pagetable.com/docs/M6502.MAC.txt << the infamous microshit (yes, that one) 6502 basic.

asciilifeform: but the implementation.

asciilifeform: and not only the language

asciilifeform: mircea_popescu: basic fit-in-head

asciilifeform: trinque: betcha ben_vulpes's 'xcode', or perhaps the latest microshit studio, does this.

asciilifeform: he turns it on, off, that's mostly it.

asciilifeform: about same as mcdonalds employee has input to the deep fryer machine.

asciilifeform: nah see head has very little input into the process.

asciilifeform: under the vague, limp handholding of 'human' 'programmer'

asciilifeform: but by autoshitter

asciilifeform: mircea_popescu: when you read soup that makes 0 sense to unarmed eyes, the chances are that: it WAS NOT WRITTEN BY HUMAN HAND

asciilifeform: mircea_popescu: naturally by hitting ctrl-spacebar after each vague guess, and reading off the suggested menu crapolade, 'hmm... datesomethingorother...ctrlspace..now...nowwhat...ctrlspace!!1111!111ctrlspace'

asciilifeform: then when (horror) it is time to ~read~ it, they use specially-made 'program analysis' tools to make wall-sized chart...

asciilifeform: producing 1001 mutated pastes of $crapolade every day

asciilifeform: mircea_popescu: java slaves actually use specially-made editors that 'automate' this atrocity

asciilifeform: dafuq is 'unity'

asciilifeform flashbacks to sentence served in java butugychag decade ago

asciilifeform off to swap gas mask canister, barf cylinder,..

asciilifeform: my barf bag! overfloathes!

asciilifeform: http://btcbase.org/log/2016-12-27#1591017 << since theme of the day appears to be sidechanneling, commonlisptrons lacking a separate cons pool for crypto ops, noncacheability hints, etc. are ripe for the treatment ☝︎☟︎

asciilifeform: mircea_popescu: http://btcbase.org/log/2014-12-10#949583 << not quite it, but the only mention i turned up in the l0gz ☝︎

asciilifeform: it is not about primes at all, aha, but about the ancient proverb where 'you can't hide an awl in a sack'

asciilifeform: speaking of timing attack: it also worx great on oaep and all similar (hashtronic) rsa 'padding' systems...

asciilifeform: Framedragger: you round to whatever unit it is accurate to. minutes, hours, weeks, watever

asciilifeform: eh you can 'don't return until M msec passed' can be done even in a scripting lang

asciilifeform: why the livingfuck is there even c in 'pycrypto'..?! ☟︎

asciilifeform: in other lulz, http://www.openwall.com/lists/oss-security/2016/12/27/2

asciilifeform: BingoBoingo: i have a bit of allergic reaction to seeing live articles turn to 404, i admit.

asciilifeform: hm ok

asciilifeform: ben_vulpes: this does not answer the wtf question

asciilifeform: with the difference that coal actually exists, whereas 'in silico screening' typically yields rubbish.

asciilifeform: http://btcbase.org/log/2016-12-26#1590744 << fwiw i did this for a living, for years. about as much joy as mining coal. ☝︎

asciilifeform: don't 'forbes' it.

asciilifeform: if it got retracted -- print retraction.

asciilifeform: imho deedbot 'here's breaking news' followed by 404, is a fail

asciilifeform: it isn't there.

asciilifeform: http://btcbase.org/log/2016-12-26#1590789 << where the hell did this go ? ☝︎

asciilifeform: it is precisely to strip away the crapolade.

asciilifeform: http://btcbase.org/log/2016-12-27#1590885 << from where did you think the awk in 'vdiff' came from. ☝︎

asciilifeform: anything else puts a megatonne of weight on one single hash, a titanic reward for finding one single solitary collision, hashes (which are voodoo, in all variants, see friday's thread) are not built to withstand this kind of pressure. ☟︎☟︎

asciilifeform: the only sane 'fingerprint' is the entire modulus+exponent. ☟︎☟︎

asciilifeform: and there is NO and can NOT be such a thing as a 'sane key fingerprint.' see thread, http://btcbase.org/log/2016-11-23#1572717 ☝︎

asciilifeform: i see no particular reason to justify its use for anything else, and in particular for any future thing.

asciilifeform: where two keys where 1 byte of the selfsigned text (e.g., username string) differs, are to be considered distinct

asciilifeform: the linked item was made for a specific, narrow purpose, for butterfly collection of pgp keys as-found-in-the-wild.

asciilifeform: http://btcbase.org/log/2016-12-26#1590808 << ftr i will say that i heavily disrecomment the use of this or anything like it ☝︎

asciilifeform: variant == buggy

asciilifeform: see link.

asciilifeform: ben_vulpes above found catastrophic ?!?? in ironclad's sha512 tho.

asciilifeform: afaik nobody uses 384

asciilifeform: the former

asciilifeform: 512? v uses

asciilifeform: mircea_popescu: for http://btcbase.org/log/2016-12-26#1590676 ☝︎

asciilifeform: original author's hands grew from what place, that he released this

asciilifeform: (pss-verify :sha1 (subseq msg start end) s)) ....

asciilifeform: :n-bits nbits)))

asciilifeform: (rsa-key-exponent key) (rsa-key-modulus key))

asciilifeform: (let ((s (integer-to-octets (rsa-core (octets-to-integer signature)

asciilifeform: phf: but! why in satan's name does it hardcode sha1 for rsa verify

asciilifeform: phf: yer right re ssl

asciilifeform: ben_vulpes: lemme guess, it takes liberties with newlines

asciilifeform: i have nfi, why not read the src, then tell us..

asciilifeform: http://btcbase.org/log/2016-12-25#1590665 << last i saw, it used openliquishit ffi ☝︎

asciilifeform: this is the only way where variant-wots work correctly, aha.

asciilifeform: now i gotta wonder if anybody read, e.g., FUCKGOATS

asciilifeform: ben_vulpes: not yet read

asciilifeform: ben_vulpes: if it didn't pass error codes, how the hell did it work to detect if sig was valid

asciilifeform: 0 until we shoot gnupatch.

asciilifeform: ben_vulpes: mismatched postpress hash should be impossible if fuzz is properly killed.

asciilifeform: the only error condition is cyclic graph

asciilifeform: this is the correct behaviour.

asciilifeform: silently.

asciilifeform: ben_vulpes: no pubkey? seals dun count, unsealed patches -- invisible.

asciilifeform: ben_vulpes: i must disagree

asciilifeform: guess who luuuuvvvs such item.

asciilifeform: theoretical boost of 1.5x of bitrate, in exchange for making the debiaser 1000x moar complex

asciilifeform: http://btcbase.org/log/2016-12-25#1590439 << i read the original crapolade last year ☝︎

asciilifeform: http://btcbase.org/log/2016-12-24#1590363 << lel, sv d00d 'can also have problems' ☝︎

asciilifeform bbl.

asciilifeform: *boat oar

asciilifeform: the rifle MAY make an acceptable boar oar. but if it does, it will be purely by accident.

asciilifeform: (whether 'collision resistance' of any hash is a matter of demonstrable physical reality, or of imagination, is wholly separate subject)

asciilifeform: and this would not count against their collision resistance, which was the only property actually asked for by the designer.

asciilifeform: (for instance, it may well be the case that, e.g., sha2, or keccak, leak, say, the parity of the incoming bitstring into the hash. or some other property.)

asciilifeform: this came up in the rng whitening thread, but bears mentioning now and again