log☇︎
1800+ entries in 0.626s
ascii_field: and contains howlers like 'the entire point of PGP software is anonymity'
ascii_field: ^ describes, among many other lulz, how one of the most damning acts of mr force was to encourage dpr to use pgp
asciilifeform: deedbot- http://www.loper-os.org/pgp.asc
nubbins`: all the patches are written by people in here, and pgp-signed
Chillum: There is so little information on that site about what the changes actually are or how they have been audited. It seems to have been made in November. It would be a bit like running a custom code version of PGP
asciilifeform: Adlai: go send coke and plutonium over pgp
Adlai: BingoBoingo: oh also, the link to gwern's pgp info didn't get through
assbot: Searching pgp.mit.edu for key with fingerprint: 8680FD3C9D20B92FBEF3D058FD5A63B9EAC2A55E. This may take a few moments.
nubbins`: ^ grab a pgp key and wrap up
decimation: asciilifeform: another good point, why didn't he use pgp to verify his information?
asciilifeform: to be fair, it isn't like his other communiques are pgp-signed.
nubbins`: mircea_popescu email the smartest journalist in .ar and tell em youve got a bombshell, but they need pgp
mircea_popescu: <BingoBoingo> <asciilifeform> does s ever -mention- pgp? << Snowden mentions GPG all of the time, Greenwald mentions tor all of the time << exactly apt description.
BingoBoingo: <asciilifeform> does s ever -mention- pgp? << Snowden mentions GPG all of the time, Greenwald mentions tor all of the time
asciilifeform: does s ever -mention- pgp?
nubbins`: mod6 i use separate pgp keys for various things
nubbins`: i'mma have to set up a new pgp key
asciilifeform: nubbins`: that plus another directorate name is pretty much all we publicly have on the 'directorate of breaking pgp'
nubbins`: didn't schneier advocate windows as an acceptable PGP machine?
assbot: Searching pgp.mit.edu for key with fingerprint: 15F6BD45240C4679C5F559B5050434ED71A1704C. This may take a few moments.
nubbins`: <+Adlai> and trusting that people don't leave authenticated irc accounts idle accessible to random passersby <<< vs trusting that their pgp implementation doesn't cache their passphrase 8)
mircea_popescu: "Do have any PGP key? Try our online PGP key generator"
mircea_popescu: still, more pgp flowing through the tubes is a net gain
punkman: the problem is how do you communicate to derps that they should use actual PGP for the "important" stuff
assbot: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: SKS 1.1.5 Comment: Hostname: pgp - Pastebin.com ... ( http://bit.ly/1HhwXMa )
asciilifeform: my first pgp-gram actually.
assbot: Please To PGP (Guide for Linux, OS X, Windows) | Contravex: A blog by Pete Dushenski ... ( http://bit.ly/1O8XNeP )
danielpbarron: http://www.contravex.com/2014/09/23/please-to-pgp-guide-for-linux-os-x-windows/
ben_vulpes: require vast orchestration overhead to survive. not like pgp and bitcoin.
mircea_popescu: even so. look at it this way : zimmerman died, his pgp still in use.
assbot: Please To PGP (Guide for Linux, OS X, Windows) | Contravex: A blog by Pete Dushenski ... ( http://bit.ly/1FBDe71 )
danielpbarron: coinking, http://www.contravex.com/2014/09/23/please-to-pgp-guide-for-linux-os-x-windows/
ben_vulpes: <assbot> Successfully added a rating of 1 for brendafdez with note: no such thing as a chick that can pgp << hawwwww
assbot: Successfully added a rating of 1 for brendafdez with note: no such thing as a chick that can pgp
assbot: Searching pgp.mit.edu for key with fingerprint: 59D8599B65A983BF0288E5B6CE5BEE6C81FCA4D4. This may take a few moments.
assbot: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 As of AD 347694 I am funkenst - Pastebin.com ... ( http://bit.ly/18NN0Wj )
bagehot: Yeah, https://pgp.mit.edu/pks/lookup?search=bagehot&op=index
bagehot: Sorry, this is probably all RTFM issues, but is it !register <long pgp id>
mod6: http://pgp.mit.edu/pks/lookup?op=get&search=0xB98228A001ABFFC7
ascii_field: in this discussion i'm making the assumption that you intend to actually work with the machine - rather than, say, using for pgp
pete_dushenski: feel free to pgp-gram or ;;later tell if you've been to the home of usain bolt and.... other fast runners.
assbot: kbpgp - PGP in JavaScript ... ( http://bit.ly/1ATskCV )
assbot: kbpgp - PGP in JavaScript ... ( http://bit.ly/1ATs9HQ )
punkman: oh they got their own javascript pgp now https://keybase.io/kbpgp
assbot: Searching pgp.mit.edu for key with fingerprint: 178BF6EEA4C3A737F70878AC5E40172FEBBA0713. This may take a few moments.
ryan-c: BingoBoingo: My gpg keys are in pgp.mit.edu and sks-keyservers as well.
nubbins`: sjsqd the only official statements are PGP-signed statements from members of assbot's wot
ben_vulpes: <asciilifeform> [04:55] that the fella actually thought he was 'using pgp' << wait wut? who biffed at this epic scale?
asciilifeform: i.e., that this is what pgp is
asciilifeform: that the fella actually thought he was 'using pgp'
adlai: asciilifeform: the convenience of pgp with all the trustlessness of ssl!
asciilifeform: that won't touch normal pgp keys, and requires centrally-blessed 'certs'
asciilifeform: in other nyooz, today at $censored_firm we were suddenly excited to learn that a very, very costly $censored_guild_professional will accept a document via 'pgp'... only to learn that he was speaking of a 100%-proprietary turdware
assbot: Searching pgp.mit.edu for key with fingerprint: DAAEE6B5D72910B74A6F01F952A4B5B2F3188BF2. This may take a few moments.
mircea_popescu: deedbot- add-key http://trilema.com/contact-pgp/
mircea_popescu: deedbot- add-key http://trilema.com/contact-pgp/
asciilifeform: get the budget high enough without making secrecy impossible << this is right back to the 64-quadrillion-bzollar question. the dept-of-breaking-pgp gets $maxint and remains totally secret - not to say that they've succeeded or even tried, but we have no idea how much cocaine they were able to buy with the $maxint, nor the carat purity of the gold of which their toilets were made
asciilifeform: BingoBoingo: wanna write the first provably-correct pgp ?
assbot: Logged on 27-02-2015 02:42:39; asciilifeform: (e.g. contains no detail re: 'pendleton' and 'piedmont', the directorates-of-what-shall-we-do-about-pgp cited in earlier 'crown jewels' list)
asciilifeform: (e.g. contains no detail re: 'pendleton' and 'piedmont', the directorates-of-what-shall-we-do-about-pgp cited in earlier 'crown jewels' list) ☟︎
fluffypony: we should put pgp in the blockchain
pete_dushenski: "network effects anyone?! Early adopters are important people because ADOPTION!" << twitter dood derping at me about pgp adoption
asciilifeform: 'I simply asked him -- in a private email -- if there was a signature for Convergence someplace because I didn't see any online. He accused me of being "inflammatory" and stated it was necessary to "take a leap of faith" (i.e. download and run it without verification). This was back in 2012, mind you. He appeared to be oddly anti-PGP back then, too. Frankly, after that I had no appetite for any more of his, erm, style and forg
punkman: https://github.com/tedu/reop "a simple, semi-modern wannabe PGP clone"
ascii_field: http://pgp.mit.edu:11371/pks/lookup?search=%3Ckiyohara%40NetBSD.org%3E&op=index&exact=on
assbot: Searching pgp.mit.edu for key with fingerprint: 6F227EFC5B577AE959E13138BACBCE400996EB88. This may take a few moments.
asciilifeform: sooo >> usg could mandate pgp for letters of credit just as easily as it mandates the garbage we see today
asciilifeform: why is it possible to borrow $maxint in mr. chump's name without his pgp key
mircea_popescu: "This position can be in house or freelance. Must be local to the area to discuss projects. " "we never heard of pgp, what is it, italian shoes ???"
mike_c: well, that's the pgp wot
mircea_popescu: taub why cant you pgp /
taub: i cant into pgp
mircea_popescu: im not even sure pgp has a spec.
gabriel_laddel: As for PGP, I'm assuming that I'm going to have to spend a decent amount of time with the codebase and reading the spec. Perhaps not.
gabriel_laddel: asciilifeform: I'm assuming, at least for now, that I'm going to have to /look/ at the current PGP sources (thus the C sexprast ). This has no bearing on what will be released other than - I will do what makes sense given the situation.
gabriel_laddel: asciilifeform: gossipd requires C. PGP, CL (at least, this is where I'd start).
asciilifeform wishes to point out that a 'sane pgp' will not be pgp-compatible. because much of the insanity lies in the standard itself.
mircea_popescu: gabriel_laddel you seriously thinking of implementing a sane pgp ? ☟︎
gabriel_laddel: hoever it was, and I'm fairly sure I grok ASCII's plan and will be handling some intro documentation for it + figuring out how the PGP code needs to interface with it exactly.
punkman: netbsd has a pgp implementation
mircea_popescu: phillipsjk: [...] < I wish the banks around here knew what GPG/PGP was. << it's because i don't use actual banks, but the well developed argentine underground system.
phillipsjk: mircea_popescu: well, you may not believe this or like this, but... my banking depends on my gpg signature o.O < I wish the banks around here knew what GPG/PGP was. The card-holder agreements universally say: "You acknowledge that e-mail is not secure..."
mircea_popescu: <assbot> Searching pgp.mit.edu for key with fingerprint: 6160E1CAC8A3C52966FD76998A736F0E2FB7B452. This may take a few moments.
kanzure: http://pgp.mit.edu/pks/lookup?op=vindex&search=0x984F10CC77169FD2
kanzure: http://pgp.mit.edu/pks/lookup?op=get&search=0x984F10CC77169FD2
kanzure: Searching pgp.mit.edu for key with fingerprint: %d. This may take a few moments.\n Could not find your key. Check if your key is available on keyservers and try later.
asciilifeform: pgp keys are, in practice, all the global namespace you could ask for.
mircea_popescu: asciilifeform no, not so. the better comparison is you saying " winblows user walking to pgp is somewhat like a virgin playing pensively with a fat cucumber. she isstill a virgin."
asciilifeform: winblows user walking to pgp is somewhat like a prisoner walking in the direction of the yard gate. he is still in his cell.
asciilifeform: backdoors << the linked piece was about somebody who woke up to the idea of checking signatures on downloaded crypto app binaries (for winblows naturally) but couldn't quite wrap brain around pgp
assbot: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Please deposit s.qntr shares - Pastebin.com ... ( http://bit.ly/1DE0RbQ )
jurov: yes, that's what i'm doing. it just insists that application/pgp is not text
asciilifeform: turdatron wants a machine-readable standalone sig (just the --pgp-- block) for every attachment.
jurov: mircea_popescu: the email is out, after a bugfix (to account for application/pgp mimetype properly)
assbot: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The enclosed 1386667 bytes f - Pastebin.com ... ( http://bit.ly/1AoubVU )
mircea_popescu: dude these fucktards. LEARN PGP!!1eleventyfivethousand cocks in your mother's dumb mouth.
asciilifeform: i imagine ben_vulpes et al will post pgp-signed lists of working nodes now and again
ben_vulpes: <asciilifeform> [] ben_vulpes, mircea_popescu: am i the only one who wonders why 1) checking hashes, inside a pgp-signed script, when patch sigs also are checked 2) patches & their hashes, sigs, listed explicitly, instead of iterating over directory << consider it an excess of paranoia
asciilifeform: ben_vulpes, mircea_popescu: am i the only one who wonders why 1) checking hashes, inside a pgp-signed script, when patch sigs also are checked 2) patches & their hashes, sigs, listed explicitly, instead of iterating over directory
teward: got the pgp key for 'teward' but if your bot fails to recognize master/alt nicks... well...