log☇︎
128000+ entries in 0.03s
asciilifeform: (2.x is a monstrosity for other reasons)
asciilifeform: the rng thing was in all published vers.
asciilifeform: 'награждение непричастных, наказание невиновных' (tm) (r)
asciilifeform: this subj occurred to me before - who, if anyone, checks the FUCKEDMONKEY or whatever outputs against humint ?
asciilifeform: (also helps that the typical target is softer than fresh dog shit)
asciilifeform: it gets carried along by the - occasional - working trick.
asciilifeform: (0 from crypto directorate tho.)
asciilifeform: so i know what they look like.
asciilifeform: mircea_popescu: i did a tour of duty in the most godforsaken imaginable salt mine full of ex-nsa folk. ☟︎
asciilifeform maxed out dosimeter for the day.
asciilifeform: y be loosely described as 'MIT keyserver meets blockchain'. '
asciilifeform: and who won't love 'As far as the conference program goes, the Mesh may be considered as a proposal to replace/augment the existing OpenPGP key server infrastructure with a new one that provides support for multiple PKI based applications and trust models. ... The Mesh makes it easy for a user to transfer an email configuration from one machine to another and offers to automatically configure OpenPGP ... service whose architecture ma
asciilifeform: and i won't even bother summarizing, e.g., 'OpenPGP for Android, Web and Windows'
asciilifeform: i bet it will eat.
asciilifeform: ^ who wants to try feeding this abortion , e.g., the khadeer key ?
asciilifeform: full control to make bad decisions. We hide Key IDs from the user, we don't use the words public and private, we never mention Key Signing or Keyservers, and we don't generate 8192 RSA keys. In this talk we give an overview over our different UX decisions, the reasoning behind them...'
asciilifeform: 'In the last 4 years developing OpenKeychain, an OpenPGP implementation for Android, we made several unconventional UX decisions. While other implementations are still based on UX paradigms introduced in 1997 by PGP 5, we try to re-invent UX for a broader user base. Some of our decisions are subject to controversy in the OpenPGP community, in particular those of hiding information and complexity from the user, rather than giving them
asciilifeform: or how about,
asciilifeform: and yet hilarious.
asciilifeform: so predictable, one can almost die of boredom.
asciilifeform: ool and the various geographical pools.'
asciilifeform: though their 'is' is quite lulzy, e.g., the sks server talk is about 'This talk will discuss some experiences operating the services and discuss new features related to new specifications such as Elliptic Curves (including but not limited to Ed25519 and Curve25519) and the experimental Tor support available at hkp://jirk5u4osbsr34t5.onion in addition to providing an overview of the other available pools such as the TLS enabled HKPS p
asciilifeform: not is's.
asciilifeform: these folk specialize in isn'ts.
asciilifeform: lel
asciilifeform: ^ abstracts.
asciilifeform: https://openpgp-conf.org/program.html
asciilifeform: aha.
asciilifeform: and guess what isn't on the agenda.
asciilifeform: https://lists.gnupg.org/pipermail/gnupg-devel/2016-August/031475.html << they have a CONFERENCE!11111 ☟︎
asciilifeform: aaaaaaand, didja know,
asciilifeform: ( https://lists.gnupg.org/pipermail/gnupg-devel/2016-August/031508.html ) .
asciilifeform: -- gutmann
asciilifeform: 'It's not at all what I described in my PRNG paper, but I can't tell if that's an accident or by design because, well, there are no code comments. What the GnuPG code does is mix the next 64 bytes and then overwrite the preceding 20 bytes with the mixed output, however this doesn't propagate any entropy along through the buffer.'
asciilifeform: ( ??? )
asciilifeform: ( https://lists.gnupg.org/pipermail/gnupg-devel/2016-August/031513.html )
asciilifeform: 'I _might_ have introduced the hole to mix in more bytes in each step. Or it was a plain bug.' -- koch.
asciilifeform: once you have a known ~relation~ like this, you can work with it.
asciilifeform: that includes ripemd.
asciilifeform: all he needs is a lattice solution, as described in the sarkar thing.
asciilifeform: 'To predict bytes 580..599 an attacker needs to know the bytes in the range 0..44 and 560..579.' << horseshit.
asciilifeform: ;;later tell mircea_popescu https://lists.gnupg.org/pipermail/gnupg-devel/2016-August/031516.html << continued lelz ☟︎
asciilifeform: what sort of nonsense is this. ☟︎
asciilifeform: ^ has to be hangout, they own the upstream.
asciilifeform: 'TAO project REXKWONDO successfully enabled Country-Wide Shaping and Man-in-the-Middle (MiTM) capabilities against Lebanon's Internet traffic for the first time ever.'
asciilifeform: lulzy.
asciilifeform: s following the successful shaping tasking.'
asciilifeform: 'The OGERO ISP gateway router (RB) was exploited via HAMREX to enable SECONDDATE MiTM. The OGERO upstream Liban Telecom routers were exploited with CGDB, then implanted with HAMMERCORE and HAMMERSTEIN to enable successful Shaping of Hizballah Unit 1800 related traffic for multiple CT projects. Traffic was exfiltrated to STORMBREW from core routers and was accessible to S21, S2E, and SSG\NAC analysts via XKEYSCORE in less than 24 hour
asciilifeform: (what is/was s215..?)
asciilifeform: 'Collaboration between multiple divisions within TAO and S215 led to the development of a custom-built router exploit and new HAMMERCORE implant builds.'
asciilifeform: normal organ, iirc, could not stand up to the humidity.
asciilifeform: phf: by the brits.
asciilifeform: so yes, i would happily offload the 45 shells to 50 people.
asciilifeform: PeterL: typical medieval arrangement was rather like modern 'stair climber' exercise machine. in separate room.
asciilifeform: because 'i'ma play the organ and fuck y'all', approximately.
asciilifeform: mircea_popescu: was my point. concert organists dun have 'i gotta pump with this other hand' problems.
asciilifeform: (neighbours in my old flat were 'hari krishna' weirdos, and so i unfortunately became very closely familiar with this instrument.)
asciilifeform: who has nobody to offload the pumping to.
asciilifeform: both kinds have this feature, and run on accordion-style reeds internally. anyway it is very much 'poor man's' instrument traditionally.
asciilifeform: like upright piano, but instead of organ pedals, there is one 'singer sewing machine'-style pumper.
asciilifeform: that's the other one, aha
asciilifeform: the small one is kinda like accordion, but stationary, sits on the floor, one hand plays, other - pumps
asciilifeform: musical instrument.
asciilifeform: ever see a 'harmonium' ?
asciilifeform: there we go
asciilifeform: aha
asciilifeform: asciilifeform's eyeglasses would not work on mircea_popescu either, i suspect.
asciilifeform: and i enjoy coming back to actual workstation that is set up just-so, correctly.
asciilifeform: quite unpleasant.
asciilifeform: quite often, e.g., asciilifeform , is reduced to working on 1 display, sometimes for weeks at a time, on account of travel, say.
asciilifeform: 'i picked this up, now won't throw out' ?
asciilifeform: i.e. 'not from a good life.'
asciilifeform: quite a few items that look 'wtf, why would you DO that' to mircea_popescu , come from not having a slave stable
asciilifeform: aha.
asciilifeform: mircea_popescu: the correct analogy is the bellow pumping.
asciilifeform: now i just have one 'big red button' for'em.
asciilifeform: hanbot: i used to turn'em on/off, had entire switchboard for this, then noticed that IT is a timesink...
asciilifeform: not everything merits an entire panel.
asciilifeform: 'tiling' simulates cutting display into pieces. is all it is.
asciilifeform: PeterL: i have tiles-on-multiple-displays. not importantly different.
asciilifeform: and if it is in a low-priority corner of peripheral vision, i can ignore.
asciilifeform: so that if something moves, my hindbrain can do the coprocessing
asciilifeform: it is one of the reasons i have the panels
asciilifeform: i also have 0 notifications.
asciilifeform: as did mazarin .
asciilifeform: mircea_popescu has humans in the loop , this tech is not applicable outside of dirigible .
asciilifeform: say, irc box.
asciilifeform: i don't actually disagree with ^
asciilifeform: polling ?
asciilifeform: mircea_popescu: how do you learn when a process has produced an interesting output ?
asciilifeform: mircea_popescu: describe yours ?
asciilifeform: i'm not interested in having ONE scroll and a bunch of 'something changed, MAYBE YOU SHOULD CHECK' blinkers.
asciilifeform: instead of having to move windows.
asciilifeform: i simply do the work of switching, when i switch, using EYES
asciilifeform: phf: likewise, i do not actually deal with the separate streams simultaneously !
asciilifeform: it remains the case that merging rudder and throttle is braindamaged, regardless of how you do it.
asciilifeform: mircea_popescu: nobody said 'more is better.'
asciilifeform: let him set if he wants to control throttle or rudder.
asciilifeform: and let's have one touch screen instead of the bunch of levers!111111
asciilifeform: 'for what do you need all of these gauges at the same time!'