log☇︎
689 entries in 0.695s
pete_dushenski: https://images-na.ssl-images-amazon.com/images/I/71nKwu2REIL._SX522_.jpg << anyone remember these as a kid ? hilariously entertaining rube goldberg-style marble toy
trinque: sorry about that guys. I left a tcpdump running to catch the SSL weird and filled my disk
trinque: but whether SSL took a shit or ping timed out or... really has no bearing on what I'm going to do next
punkman: you ever get SSL errors on reconnect?
trinque: yep, it can make use of cl+ssl
asciilifeform: trinque: i find the ssl barfs interesting, where precisely do they come from in your thing ?
trinque: wtf re: SSL error
asciilifeform: deedbot has quit (Read error: error:140D2081:SSL routines:TLS1_ENC:block cipher pad is wrong) << l0lwut?!
mircea_popescu: look at those fabulous pagely.netdna-ssl.com/wp-content/blabla delays.
asciilifeform: mircea_popescu: crapple app dev keys and microshit driver keys play roughly the same role in ecosystem as that cali hearing aid shop's ssl cert.
BingoBoingo: Ok, someone with a better idea of how SSL works, pls qntra this
asciilifeform: from inside the mental asylum, this... idk, helps stand up the delusion that anyone gives half a shit re ssl ?
trinque: SSL error queue is empty.
asciilifeform: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac] << ?!
phf: that was my impression since that's how my bouncer runs, and the only time i had issues is when my ssl cert silently expired. but come to think of it, i've not tested it
phf: or better yet add ssl key
mrottenkolber: I am indeed using ssl to connect to freenode, this assbot thing might actually work. :D
mrottenkolber: But... am I even connected using ssl? no idea
mircea_popescu: https://cluj-wpengine.netdna-ssl.com/assets/pekus-statiunea-baisoara.jpg << the fashionable place for losing one's virginity at the time.
assbot: Logged on 02-03-2016 03:20:58; mod6: http://log.bitcoin-assets.com/?date=01-03-2016#1418803 << i usually just modify the rotor script so that it just builds bitcoind with all of the necessary environment vars set, but comment out the building of BDB/SSL/Boost. The re-compile usually takes a few minutes. Not more than say 15.
assbot: Logged on 02-03-2016 03:20:58; mod6: http://log.bitcoin-assets.com/?date=01-03-2016#1418803 << i usually just modify the rotor script so that it just builds bitcoind with all of the necessary environment vars set, but comment out the building of BDB/SSL/Boost. The re-compile usually takes a few minutes. Not more than say 15.
mod6: http://log.bitcoin-assets.com/?date=01-03-2016#1418803 << i usually just modify the rotor script so that it just builds bitcoind with all of the necessary environment vars set, but comment out the building of BDB/SSL/Boost. The re-compile usually takes a few minutes. Not more than say 15. ☝︎☟︎☟︎
asciilifeform looks forward to pounding in the 'g' knife into the ssl idiocy
asciilifeform: the original ssl-'phuctor'-no-we-won't-publish-the-data folks, incidentally.
asciilifeform: yes i know that jurov has wwwtrons, but what is the ssl for.
asciilifeform: jurov: what do you use ssl for ?
ben_vulpes: http://log.bitcoin-assets.com/?date=29-01-2016#1389453 << let me tell you, the look of astonishment, disbelief, and 'omg my priors' on $admingurl's face when i told her i valued publishing the ssl piece under my own name so highly that no terrestrial rag could afford to buy it from me was udderly priceless ☝︎
BingoBoingo can finally read ben_vulpes on SSL
assbot: Money, Trust, and the Wild Wild Web (A socioeconomic history of SSL, or that green lock symbol in your browser) ... ( http://bit.ly/1NsN7n0 )
ben_vulpes: http://cascadianhacker.com/blog/2016/01/23_money-trust-and-the-wild-wild-web-a-socioeconomic-history-of-ssl-or-that-green-lock-symbol-in-your-browser.html#fn.7
deedbot-: [cascadian hacker] Money, Trust, and the Wild Wild Web (A socioeconomic history of SSL, or that green lock symbol in your browser) - http://cascadianhacker.com/blog/2016/01/23_money-trust-and-the-wild-wild-web-a-socioeconomic-history-of-ssl-or-that-green-lock-symbol-in-your-browser.html
deedbot-: [cascadian hacker] Money, Trust, and the Wild Wild Web (A socioeconomic history of that SSL, or that green lock symbol in your browser) - http://cascadianhacker.com/blog/2016/01/23_money-trust-and-the-wild-wild-web-a-socioeconomic-history-of-that-ssl-or-that-green-lock-symbol-in-your-browser.html
ben_vulpes: mircea_popescu: narrative scrolling through my head is "tbl made htmlz, smart ppl thot waz cool, rest of internet piled on, shartups demanded cc processing over webz, tls/ssl became defacto"
mircea_popescu: <ben_vulpes> does anyone know of any decent sociopolitical histories of tls/ssl? << "no" or "only shitty ones" depending on your clearance.
ben_vulpes: does anyone know of any decent sociopolitical histories of tls/ssl?
mircea_popescu: and no, i don't mean ssl, either.
mircea_popescu: not necessarily. the original attack on ssl didn't.
mircea_popescu: first time ssl broke down,
ascii_field: and 'ssl
mircea_popescu: "Cuccias said that Nest Cam uses 128-bit SSL encryption, Perfect Forward Secrecy and a 2048-bit RSA key that is unique to each camera. “This ensures that videos are not accessible, even over open WiFi networks. That said, customers can always see the status of their camera through the Nest app,” "
mod6: Seems to work. Next step will probably be to sign & host SSL/BDB/Boost - but what about buildroot & all of it's deps? those too?
punkman: https://cache-bitify.netdna-ssl.com/wp-content/uploads/2015/10/Dorian-Nakamoto-Auction-1.jpg
mircea_popescu: let's leave it at "google ssl fails", it's good enough.
mircea_popescu: hm is it just me or is google ssl broken now ?
asciilifeform: 'Besides integrating hardware accelerators for AES and SSL....'
trinque: ben_vulpes: I'm glad the guy didn't just bolt ssl to the thing
shinohai: Maybe open ssl borked on me
assbot: Google threatens action against Symantec-issued SSL certificates following botched investigation | PCWorld ... ( http://bit.ly/1Mz394P )
mike_c: and yet, that's how my SSL certificates are delivered
assbot: SSL Server Test: irs.gov (Powered by Qualys SSL Labs) ... ( http://bit.ly/1j3MJEQ )
assbot: SSL Malvertising Campaign Targets Top Adult Sites | Malwarebytes Unpacked ... ( http://bit.ly/1QFbtgN )
pete_dushenski: https://blog.malwarebytes.org/malvertising-2/2015/09/ssl-malvertising-campaign-targets-top-adult-sites/
BingoBoingo: Also, Ver can't to valid SSL cert https://archive.is/OLvvk
mircea_popescu: https://images-na.ssl-images-amazon.com/images/G/01/vince/boost/detailpages/21inc6._SR1000,750_.jpg << o hey check out, the idiots haven't exactly learn what the nigger words are in bitcoin.
phf: https://images-na.ssl-images-amazon.com/images/G/01/vince/boost/detailpages/21inc8d._SR1062,670_.jpg << note that the tag on asic seems to be blurred, compared to very readable labels all around it
phf: https://images-na.ssl-images-amazon.com/images/G/01/vince/boost/detailpages/21inc3b.jpg
ascii_field: https://images-na.ssl-images-amazon.com/images/G/01/vince/boost/detailpages/21inc6._SR1000,750_.jpg << knockoff of 'otc', sort-of.
asciilifeform: i.e. no 'headers-first' or other gavinisms, no ssl or other hearnias, etc
assbot: Colin Keigher: Geotrust/Symantec has revoked all SSL certificates for .PW TLD domains ... ( http://bit.ly/1QkSQPI )
mats: http://colin.keigher.ca/2015/09/geotrustsymantec-has-revoked-all-ssl.html
asciilifeform: mircea_popescu: and i think he was talking about an ssl turd, rather than anything from phuctor ?
asciilifeform: 'FWIW adding SSL to the protocol is a fairly relatively non-invasive change. It might be worthwhile to implement that first as a means to test the developers you wish to hire to later implement partial mode.' << l0l!!
asciilifeform: l0l, hearnia ssl is back!
ben_vulpes: reddit ssl is confuckered to use sha-1
ascii_field: internet connection is established. I don't know too much exactly what those do, but one appears to phone home to http://download.lenovo.com/ideapad/wind ... 2_oko.json which is a bit worrying with the combination of a "ForceUpdate" parameter shown and the lack of ssl, making it fairly likely that it's exploitable for remote code execution by anyone who can intercept your traffic(public wifi, etc).'
n6: ascii_field: Not sure I understand would turning off ssl fix this?
ascii_field: what is this nonsense with sks using ssl anyway
phf: for the record i think a secure and verifiable path for receiving a key of person in wot is to ssl connect to freenode using explicit server key, request !shasum wot from assbot, download http://files.bitcoin-assets.com/wot/wot_users.sql.gz, verify its shasum, do `zgrep -oE '\([^)]+phf[^)]+\)' wot_users.sql.gz` (or whatever nick), the second number in the grep output is going to be the key fingerprint, next grep --recv-key <fingerprint>
assbot: Logged on 31-07-2015 03:53:10; asciilifeform: coderwill: on top of the thousand and one other sins, tor linked in ssl at the height of 'heartbleed' - something which pretty much nobody is speaking of today
coderwill: asciilifeform: sorry, i don't understand this last point - linked in ssl?
asciilifeform: coderwill: on top of the thousand and one other sins, tor linked in ssl at the height of 'heartbleed' - something which pretty much nobody is speaking of today ☟︎
mod6: Has anyone else been able to build asciilifeform 's "stator" on ubuntu? What I have experienced is that it does not build: The libs are not copied/installed into ./ourlibs, they are installed to the following places; OpenSSL to o /usr/local/ssl/, BDB to /lib and Boost to /usr/local/lib
mircea_popescu: curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
mod6: But you'll still have to create your own distfiles + ourlibs then drop in ssl/bdb/boost into distfiles. then pull down stator and build.
mod6: i have serached forward to SSL
ben_vulpes: trinque: the hsa company can't figure out their ssl cert
asciilifeform: this atmosphere where 'gotta have ssl or else' is an engineered product
assbot: ssl - PHP Curl (with NSS) is probably using SSLv3 insted of TLS when connecting to https - Stack Overflow ... ( http://bit.ly/1JbPMQD )
ascii_field: punkman: ssl ? no thx
ascii_field: https://github.com/hackedteam/core-linux/tree/master/melter/lib/packages << diddled ssl ?
mod6: you are using ssl 1.0.1g with stator right?
assbot: Logged on 04-07-2015 06:06:56; decimation: why isn't anyone seriously attempting to extract the open-ssl code paths used by bitcoin?
decimation: why isn't anyone seriously attempting to extract the open-ssl code paths used by bitcoin? ☟︎
mod6: january was pre SSL 1.0.1g
assbot: Logged on 06-05-2015 23:40:00; mircea_popescu: asciilifeform "OpenSSL: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure"
assbot: Logged on 09-06-2015 13:03:57; mircea_popescu: curl: (35) Unknown SSL protocol error in connection to www.blockstream.com:443
funkenstein_: How about, bitcoin-assets windows ssl expert?
BingoBoingo: pete_dushenski: Give midori a go. Just keep in mind its SSL implementation is especially retared so http is not going to really offer much of an illusion even of protection
mircea_popescu: curl: (35) Unknown SSL protocol error in connection to www.blockstream.com:443 ☟︎
asciilifeform: tor is this thing where tcp is bounced via three machines, selected by shitgnomiferous mega-turd of a client, over ssl (ditto)
mircea_popescu: i had thought they had just given up on their own version of telnet-ssl.
trinque: https://www-ssl.intel.com/content/www/us/en/tech-tips-and-tricks/streaming-tv-shows.html << this was a particularly weird market for intel to get into, afaik nothing has come of it
davout: few extra features to implement for the phuctor... also nice to have: "throw list of URLs at it, it fetches the SSL cert and tries to factor it"
asciilifeform: this is a point, if you convert your ssl or whatever rsa key to pgp format,
mircea_popescu: d34th you wanna do something, do the same with ssl certs.
davout: it would probably make sense for the phuctor to start munching SSL certs as well
mats: asciilifeform: ya, wasn't sure if the link was the same paper you referred to earlier re: 'ssl folks'
asciilifeform: mats: the ssl folks ?
asciilifeform: perhaps the ssl folks did
decimation: ssl everywhere!