asciilifeform: (and we haven't even begun the other 3 poor schmucks)

asciilifeform: (anvin's)

asciilifeform: the one for which the sigs verify

asciilifeform: anybody got his original published key ?

asciilifeform: at the moment it looks like sks bit rot is responsible

asciilifeform: anything anvin signs with his actual key, should still validate

asciilifeform: the rest of it gets sucked in

asciilifeform: so what

asciilifeform: the subkey is skipped

asciilifeform: then again, what would they gain ?

asciilifeform: mircea_popescu: quite possibly it was diddled -in order to- create this effect.

asciilifeform: https://news.ycombinator.com/item?id=9561158

asciilifeform: who's got the mouse spray

asciilifeform: me thinks we may have found a mouse hill.

asciilifeform: http://dpaste.com/3R5JRKD.txt << i get this

asciilifeform: or corrupt sks

asciilifeform: jurov: i was suspecting a spurious key

asciilifeform: trinque: 0xBDA06085493BACE4

asciilifeform: l0l aha

asciilifeform: anybody got any material signed by anvin ?

asciilifeform: then again, is it 'him' or 'another shakespeare'

asciilifeform: https://en.wikipedia.org/wiki/Hans_Peter_Anvin

asciilifeform: etc

asciilifeform: 'we broke a 4096 key, read how'

asciilifeform: does one of you ad folks wanna make a commemorative banner for this occasion ?

asciilifeform: (one or more)

asciilifeform: but right now the display apparatus expects all moduli to be associated with pgp keys

asciilifeform: -possibly- if folks ask nicely i will add a 'throw modulus raw' thing

asciilifeform: davout: nope. applies pgp parser 1st

asciilifeform: (please don't throw in private key. i will -not- get it back out for you)

asciilifeform: ditto ssh

asciilifeform: you can throw it in the pot with the rest.

asciilifeform: this is a point, if you convert your ssl or whatever rsa key to pgp format,

asciilifeform: the relevant bit is posted

asciilifeform: incidentally, folks asking 'how does it work' can go to my site & read the fucking src now

asciilifeform: (it was, purportedly, done, by a bunch of academitards who refuse to publish any results)

asciilifeform: re: openssl

asciilifeform: see link by mats earlier

asciilifeform: i'm a little surprised that trilema wasn't

asciilifeform: mircea_popescu: my -site- iirc was banned.

asciilifeform: did we just nuke a known fella

asciilifeform was off reading wankatron threads on hn, reddit

asciilifeform: wai wut

asciilifeform: https://news.ycombinator.com/item?id=9560990

asciilifeform: achtung, panzers

asciilifeform: !

asciilifeform: ^^^

asciilifeform: https://news.ycombinator.com/item?id=9560961

asciilifeform: i can change yours to 'pgp over dead goat' and it'll parse. ☟︎

asciilifeform: it isn't even signed

asciilifeform: i was never strongly interested in the version strings. anyone can write what he wants.

asciilifeform: jurov: actually sks does

asciilifeform: which one

asciilifeform: gonna guess it's a creative bug where pollard-rho -must- fail to pass

asciilifeform: wait till we find the boobytrapped pgptron that is responsible for the $smallint factors.

asciilifeform: so far this is nothing.

asciilifeform appreciates. commenting re: 'maintained control'

asciilifeform: l0lz

asciilifeform: take a minute to think

asciilifeform: sorta how one can't un-fuck goat

asciilifeform: if it was stolen - it remains stolen

asciilifeform: or by asking ft meade, where the process lives now, to do it

asciilifeform: make other one by taking airplane ?

asciilifeform: the box, if it had been purloined and returned, has yielded up its private ssh key to enemy

asciilifeform: mircea_popescu: at this point i must note that i have no idea if i'm connected to shakespeare or another man by the same name, when i talk to dulap

asciilifeform: l0l

asciilifeform: for curious folks

asciilifeform: the article on my www (earlier link) contains link to 'werker'

asciilifeform: jurov: i'm waiting for the apocalyptic 'omg1111111111!!!111 pgp broken, seppuku now' stampede

asciilifeform: http://www.loper-os.org/?p=1504

asciilifeform: aha

asciilifeform: mircea_popescu: sure, lemme cook up a ps0t

asciilifeform: the src specifically ?

asciilifeform: feel free to post somewhere

asciilifeform: no one commented

asciilifeform: i posted werker in #b-a a few days after phuctor went public

asciilifeform: the www front end is an ugly python hack

asciilifeform: the thing that does the gruntwork is in c, uses gmp (as gpg uses)

asciilifeform: Apocalyptic: v1 was. but not this one

asciilifeform: i don't recall if i posted it anywhere.

asciilifeform: or werker

asciilifeform: the ugly www frontend ?

asciilifeform: which

asciilifeform: http://nosuchlabs.com/stats

asciilifeform: aaaaand then there were 2.

asciilifeform: (which is why the thing takes an ungodly time to revv back up after a cold boot)

asciilifeform: it lives in ram normally.

asciilifeform: we don't crap out the product often, it dances on the disk and slows things down

asciilifeform: answrs.

asciilifeform: ^ good question

asciilifeform: Apocalyptic: so you'll be waiting a few days

asciilifeform: Apocalyptic: it gets updated when a batch is done

asciilifeform: the paper is worth reading, it contains a bit of exposition on -how- a schmuck might end up with dupped privates

asciilifeform: aha.

asciilifeform: and i shit on them now.

asciilifeform: i shat on them when we started out, because they published neither code nor results !

asciilifeform: mats: the ssl folks ?

asciilifeform: Apocalyptic: you are correct, the formula is missing a step. but i will leave it as exercise.

asciilifeform: that was fast.

asciilifeform: no need to walk it.