114400+ entries in 0.897s
mircea_popescu: the only assurance to be had here comes from
a gossipd model. where anyone could have written the plaintext, and for all anyone POORLY CONNECTED knows, they probably did.
☟︎ maqp: Why not? To have even
a tiny bit of integrity you need trustworthy peer network
maqp: then when you want to send
a message to contact, you encrypt the message with the public key and ask users to pass along the ciphertext
mircea_popescu: because why would i gift upon
a would-be atacker that;s really
a lame ass kid unable to on hios own merit secure the cost of
a proper burial
maqp: Why not instead have
a public repository of all public keys similar to Tor
mircea_popescu: as far as anyone who wasn't there is concerned, this may as well be
a fabrication altogether. and so on.
maqp: Why couldn't this work on OTR. I have
a OTR messaging with my friend and I ask them to relay
a message for me to someone peer has on their contacts?
maqp: so
a secure communication system with no anonymity between peers, no secrecy, no integrity and no authenticity unless all peers are trustworthy
☟︎ maqp: So
a friend who holds
a grudge on you can change
a message?
phf: maqp: in case of gossip there's no propagation. it's
a p2p where each node, explicitly your peer, makes claims about what was said or heard elsewhere. не веришь, прими за сказку
maqp: Can you give
a tldr on how ciphertexts propagate in the network?
assbot: V-tronics 101:
A gentle introduction to The Most Serene Republic of Bitcoin's cryptographically-backed version control system ... (
http://bit.ly/1nWQIFF )
mircea_popescu: anyway, the model gossipd is supposed to use is, you pass along traffic to your peers, if you're satisfied that it comes from either youself or
a peer. it's
a sort of messaging-over-wot. exactly like v works.
maqp: So the urban vs rural talks about anonymity being
a "rat in
a sewer"
maqp: But I fail to see the rat in the sewer, when you're giving the government
a finger by bouncing traffic across the globe
maqp: It doesn't have to be
a family, it might be
a parent, friend, someone we look up to
maqp: There's nothing bad being
a Moose. It can be hard to be
a moose when your family is being tortured in another room when you chose not to use anonymity to hide participation in dissidence movement
maqp: So it's
a secure chat with track record?
phf: maqp: that was the original proposal, that outlines some principles, but there's been
a lot of discussion in the logs about it
hanbot: kakobrekla vspace isn't too horrid, aside from the voice stuff...which i guess makes it an unfortunate choice. at least it's not
a heh.
maqp: Is there
a memo on that design?
mircea_popescu: maqp no, it's
a not-yet implemented, not-yet fully designed irc/pigdin/mail/etc replacement
mircea_popescu: it's this secure communication thing dreamed up by b-
a.
maqp: I'll have to read the article. Tor sucks slides indicate it puts up
a fight even against FVEY agencies
maqp: So Pidgin is just
a way to transmit ciphertexts from dbus to XMPP server
maqp: I completely agree with ioerror on that "pidgin is
a flock of zero-days flying in formation"
ben_vulpes: heh anyways i just cracked xotika, picked
a random feed and whaddaya know the last frame of the bloomberg video that autoplayed itself is superimposed on this poor girl's face
mircea_popescu: guruvan> seems like people round here need bigger heads <<< i thought "the consensus" was b-
a heads already too big
danielpbarron:
a year is long enough. picking out the ones with old dates mostly
danielpbarron: heh, my list was getting
a little too long to fit in my head so to speak
assbot: You rated user thomas_d on 24-Nov-2014, with
a rating of 1, and supplied these additional notes: plays on seals as thomas_dick.
maqp: AFAIK Snowden hasn't got
a degree in math/crypto, but what he said might indicate something in the leaks the journalists chose not to publish. It's
a long shot but since there was no harm in cascading...
maqp: Snowden hinted something about using cascading at Harvard Privacy Synopsium when he was talking with Schneier. Schneier disagreed but it left me wondering whether Snowden's tongue slipped. Cascading was agreed as
a good practice in the Schneier's Friday squid blog so I had
a go
punkman: "because why trust on
a single cryptographic primitive" << because it's nice if the whole thing fits-in-head, and even if you cascade there is still the possibility of meet-me-in-the-middle attacks or I dunno what else
ben_vulpes: the superb owl impends, and the girls need
a hand hefting cakes and buckets of wangs
assbot: Logged on 07-02-2016 16:56:01; ascii_rear: ben_vulpes: good 'v' summary - but i'm still waiting for somebody to crap out
a treatise re: the philosophical 'why' of it
maqp: "because why trust on
a single cryptographic primitive" makes
a lot more sense than "why use information theoretically secure ciphers"
maqp: It's also
a lot easier with NaCl than with OTP/CEV (there's
a separate command for adding PSKs)
mircea_popescu: as the saying goes, #b-
a presence counts for 30 iq points.
ben_vulpes: mircea_popescu: if you don't show up in the forum, marshall hoplits on demand, are you still
a senator?
maqp: "lightish square,
a bit darker square, white square"...
maqp: I wonder if there's
a library for that
assbot: Successfully added
a rating of 1 for maqp with note: I showed him the log, and he joined! I'm on
a roll.
mircea_popescu: otherwise what, wipe mike_c because he had
a kid ? nonsense i say!
mircea_popescu: ben_vulpes well, the search is running ok. this is
a thing.
ben_vulpes: i also don't quite know what mthreat's doing in there beyond running search and being
a known usg antagonist.
maqp: punkman: It's
a classical one-time MAC with excess key expenditure. Not
a good idea I admit
punkman: maqp, is that
a carter-wegman MAC in your otp version?
maqp: I tried it earlier, but the classic Diffie-Hellman had much less security and
a lot longer public key
gribble: diametric was last seen in #bitcoin-assets 1 week, 1 day, 21 hours, 42 minutes, and 31 seconds ago: <diametric> not sure that makes it
a trivial non-crime at that point.
gribble: artifexd was last seen in #bitcoin-assets 41 weeks, 3 days, 22 hours, 19 minutes, and 18 seconds ago: <artifexd> I'm comfortable calling it
a review. Not just of what it is but what it was and how it got to where it is.
mircea_popescu: well no, not really april yet. there should prolly be some discussion for
a new one huh.
mircea_popescu: maqp now you can self-voice ; just say !up to assbot in
a pm and it'll give you
a string to decrypt. pass it with !v and you're voiced.
assbot: Successfully added
a rating of 1 for maqp with note: diodes
assbot: Searching pgp.mit.edu for key with fingerprint: 559FA134DE33AED70DF97D8B085ADF061C2B20CD. This may take
a few moments.
maqp: interesting. There doesn't seem to be
a setting for that when uploading key to MIT key server
phf: it sort of relies on the idea that control is easier to chord with. all the control combos are basic text manipulation stuff, so when i'm emacsing i chord with the thumb opposite of key, i.e. c-
a is left pinky
a, right thumb control
mircea_popescu: anyway, there's
a 1 BTC with your name on it here. if you post an address in this session you got it. if you disconnect before you registered
a sig with assbot, you won't be able to get it cuz i won't know it's you.
maqp: Maybe. Provided that there are no obligations to where my project should be heading towards. I could use
a cup of coffee, but it'll take some time to learn how to secure the account and endpoint
phf: ascii_rear:
http://log.bitcoin-assets.com/?date=07-02-2016#1399083 << i've remapped it to cntrl for decade+, like other sane folk << you know that's
a filthy unixism and is going to overwork your already qwerty abused left hand even further? lispm puts control on both sides of spacebar, followed by alt/meta, follwed by other stuff..
☝︎ mircea_popescu: the other case is signed documents, there's
a bot that keeps
a notary service.
maqp: Well, since this is
a public chat room with no secrecy/authenticity, I don't really see the need at the moment
mircea_popescu: also, it's
a good idea to register your pgp key with assbot. that way you create an identity in the wot we can attach to.
maqp: thanks. I wanted to recommend you guys take
a look at the TFC-NaCl that's fresh out of oven and has better design compared to OTP/CEV versions
mircea_popescu: th the Caps Lock key. It was funded by donations from the campaign's supporters and eventually raised €194.91." << this is
a good summary of the man's contributions. they evaluate to < 200 euro +
a wikipedia paragraph.
mircea_popescu: by no means the end of the world. won't even buy you
a walk's worth of county road.
punkman: dark city was fun, I think I actually saw it in
a cinema
punkman: well I couldn't really give you
a good definition of "film-noir", but there's
a cynical private-dick type guy, searching for
a girl that disappeared mysteriously