193300+ entries in 0.112s
a111: Logged on 2017-05-05 15:20
trinque: sure. Framedragger meanwhile with a headless chrome will have all
the attack surface anybody ever wanted
Framedragger:
http://btcbase.org/log/2017-05-05#1652129 << and yeah
this is PROBABLY
the way
to get burned. asciilifeform imagined
the archiver as a "public whore prostitute", a box which can be exposed
to exploits and malware, but
that's even more dirty. (that said, may be
the way
to go.)
☝︎ Framedragger: possibly
taleb's writings, etc. and yeah it sucks and may be
the wrong choice politically (contrast with mp's explicit refusal
to load PDFs, period).
a111: Logged on 2017-05-05 15:18
trinque: I don't run JS in either case
a111: Logged on 2017-05-05 14:40
trinque: why did you skip over wget -R ?
a111: Logged on 2017-04-05 18:13 phf:
http://btcbase.org/log/2017-04-05#1638105 << dumping dom is not hard (it's innerhtml attribute on document.body/head), extracting images/objects is harder. used
to be able
to do it using canvas, but not
there's security provisions. you literally have
to go into
the browser's cache (via internal apis)
to got
the graphic, etc. back. or else redownload, which is rife with potential issues
a111: Logged on 2017-04-05 17:34 phf: Framedragger: yes, archive.is is a headless webkit. it loads
the page with all
the resources, it lets
the javascript run until
the DOM is in some "final" state, it snapshots
the DOM. at
this point you no longer need javascript
to further render page
a111: Logged on 2017-05-05 14:40
trinque: Framedragger: iirc archive.is uses headless webkit
Framedragger: rehi, finally almost-summer here (hey it's a big deal here when it's not mist and misery more
than 50% of
the week), frolicking in
the sun :)
fromloper: Hmm, might have just had it plugged in badly seem
to be wokring now!
☟︎ fromloper: He has helped me with unlocking
the probe. Now hopefully he can help me figure out what I'm doing wrong :-(
shinohai: hello fromloper ... I personally have not had opportunity
to
try
this particular board yet, I'm sure asciilifeform can help you
fromloper: Well I got gdb working with
the probe, but I can't seem
to get
the probe
to work with
the board. If I plug in
the probe
to
the board,
the board hangs. If i
try continue I just get a bunch of ffffffs. If I do monitor run it says
the probe is not connected. Here is a verbose output:
https://pastebin.com/qWTwMuF5 ☟︎ mod6: i don't fuck around with it comes
to atm
ben_vulpes: fromloper: but it is about money with
the "not wanting
to work for other people"
BingoBoingo: none, I
thought
that's why god invented chinamen
fromloper: There are open source FPGA 68ks
that are pretty small. You might be able
to fit 16 on a relatively small one.
BingoBoingo: pop
them out of performas? Or did performas get expensive?
fromloper: Bingo, I'm not saying
there isn't a market, but it's not really where my interest is.
The ideal is
to find interest and market fit. If it was just about money I would just go work for google.
BingoBoingo: fromloper: You'd be surprised. Many people want out of John Deere's rootkit so
that
they can fix
their
tractor cost less
than $newtractor
mircea_popescu: either out of
the box or with some minimal assembly at home.
mircea_popescu: yes. his idea is, and perhaps not without merit,
that by getting
the bundle he names you might be able
to salvage a driver.
fromloper: asciilifeform.
Thanks again so much for your help and hard work on fixing
the probe.
fromloper: Be back in a bit. Gotta reboot and see if I can find a GD
that won't crash with
the smartprobe.
mircea_popescu: BingoBoingo i'm preparing popcorn for when
they finally unearth
the pedophilia issue. so far swimming in
the brackish water of imaginary problems
that are only problems ot
the problemizers.
☟︎ fromloper: Bingo, my interest is more in security. Most people aren't
that worried about
their
tractor being hacked.
fromloper: I
think
the older ones had a shittier abstraction layer
though.
The python C# one is easy
to reverse.
fromloper: I don't
think
the current version does anymore. All
the FPGA images are XDP3 or XDP4. I know older versions of System Debugger had support for older XDPs. If you have a student email you can get System Studio for free and it has access
to older versions which might support it.
BingoBoingo: fromloper: Anyways prolly more money in debugging John Deere's firmware
than Intel's
BingoBoingo: asciilifeform: What new. Debug
to build aound
the old ones.
mircea_popescu: ben_vulpes one day you'll get
to read military ballistics software, have a lol.
ben_vulpes: then ofc remembered
that 200,000 lines of cpp make up nasa's most important models and rolled my eyes at my own self
fromloper: System Debugger supports
the $3000 XDP-ITP,
the $390 SVT CCA adapter, and
the $15 USB debug cable.
ben_vulpes: mircea_popescu: imagine my brief surprise
to realize
this was not How Adults Did
Things
BingoBoingo: <fromloper> Unfortuatly potential customers are most likely using Intel + Microsoft. Also in US we have
Trump now. World sucks, but still need
to live in it. << What's wrong with Z80 and Motorola 68k and Make Computing Great Again(TM)(R)
fromloper: Driver comes with System Studio (which is free
trial)
fromloper: The ptsecurity guys did a
talk on it.
fromloper: You can get a
trial of System Studio which comes with System Debugger. System Debugger sucks, but
the debug layer is
there underneath in python and C#, so you have pretty direct access
to JTAG if you want
to RE it.
mircea_popescu: ben_vulpes actually
the
time symmetry approach is very intelligent.
fromloper: This is all really my attempt at having
to avoid working for someone else again.
fromloper: Unfortuatly potential customers are most likely using Intel + Microsoft. Also in US we have
Trump now. World sucks, but still need
to live in it.
mircea_popescu: hey, maybe intel capital invests. acquihire cheaper for
them
than actually hiring and
they've been doing all
that song and dance about hiring in
the us.
fromloper: If I liked spending money I wouldn't be worrying about getting
the $15 debug cable
to work or an abandoned $200 probe.
fromloper: They have a "restricted" level NDA which is above
the normal. You need
to acually
talk
to people about your project insead of just signing up a webform. I'll look at Arium / Lauterbauch / Intel PDT if I get past POC and find some investors ;-)
fromloper: Their private debugger is $5k a year
though.
fromloper: I'm at an inital research stage at
this point if it pans out
they have a heavier NDA and you can buy
the private
tools. At
this point I'm just doing proof of concept so I don't want
to invest
too much if it doesn't pan out.
fromloper: mircea, because
their public docs are shit and NDA just means I want share
their secret shit. It's not a big deal
to me.
BingoBoingo: Anyways, MOS 6502 does all
the computing necessary for most purposes
fromloper: I'm not paid. It's my own startup. Other
than
the sage
thing, wasn't specifically asking for help just discussing.
mircea_popescu: fromloper why'd you make any promises
to
those assholes ?
fromloper: NDA doesn't cost anything. You just need
to be a company.
mircea_popescu: but why ? he just wants
to, and you seem
to be free! and
the market ended up 95% usg for entirely unrelated reasons.
fromloper: I have NDA access, so I have slightly better documentation (but still shit and incomplete). Business decision. Intel only because
that's where 95% of
the market is. Also easier
to do security research on ME and AMT if you can step
through, which needs JTAG as well.
☟︎ fromloper: Ahh. Well no choice if I want
to use intel's VMX instrutions but
to use intel. Just
trying
to avoid having
to spend $3000 for
the standard ITP-XDP device and needing special expensive boards with an XDP port.
fromloper: Do you avoid Intel all
together
then or have another recommendation for low level debug?