asciilifeform: i deliberately didn't even bring up the whole thing's (almost certain) reliance on tor and related idiocy
asciilifeform: arbitrators won't immediately run off and do whatever the fuck they like with the secret because... because what? magical drm goggles glued onto their skulls?
asciilifeform: no. why would they do that. we have l33t crypt0-d00dz now.
asciilifeform: what it actually takes in real life, to establish the kind of relationships needed
asciilifeform: 'slur' << i love how these nitwits show no symptoms whatsoever of having bothered to study how secrets were sold historically, from babylon to cold war, etc
asciilifeform: memory paper << snore. 1) serious folks using dram - use ecc dram. 2) serious folks do not allow opponent to execute arbitrary strange on their von neumann box 3) serious folks doing truly serious things use sram.
asciilifeform: decimation: department of state << try this gedankenexperiment. what could they possibly leak, that would have a measurable effect - with or without the cooperation of the state-controlled media
asciilifeform: BingoBoingo: fan of 'song of maldoror' ?
asciilifeform: wake me up when a 'minuteman' is pwned and sent off on an unsanctioned joyride.
asciilifeform: the secure facilities (actual ones, vs. ordinary 'favourite son' golden toilet contracts) are used. by the folks who matter.
asciilifeform: because they (correctly!) believed that it simply does not matter.
asciilifeform: all that resulted was a leak, of facts which anglo media will never print - so it's almost as good, from their point of view, as 'never happened'☟︎
asciilifeform: ukraine << so what. did even a single usg minion die from the intercepted phone ?
asciilifeform: decimation: usg 'leaders' think of themselves as being above such trivialities as secure communications << of what concern is what a muppet says to another muppet ?
asciilifeform: whereas it mainly consists of not-doing-things
asciilifeform: we're speaking of 'secure computing' as if it were an actual technology, like +ev fusion or whatnot
asciilifeform: decimation: but my sources believe they're under continuous bureaucratic siege to go 'standards compliant'
asciilifeform: decimation: usg did have a few 'parallel universes' of computing. there is, afaik, still a lab or two that use symbolics boxes, for example
asciilifeform: decimation: with own parallel universe, where neither 'microshit office' nor 'bash' nor 'openssl', nor any of the constituent parts, are in use ?
asciilifeform: because virtually all extant crapware falls in 'trojan' category.
asciilifeform: BingoBoingo: notice how the term 'trojan' has mostly faded from Official claptrap re: 'seekoority'
asciilifeform: decimation: this is about as thinkable to present-day academics - and turdware industrialist peddlers alike - as galois theory was to the romans
asciilifeform: BingoBoingo: actual exploit in the sense that no cooperation is needed from the luser
asciilifeform: BingoBoingo: occasionally actual exploit exists
asciilifeform: 'attacker' (via spammail or telephone) - 'can plz has password' sony clerk: 'aye, here'
asciilifeform: BingoBoingo: reading from only the official material, that is precisely the kind of 'attack' involved.
asciilifeform: BingoBoingo: let's say you want some idiot dead. you bring him a loaded pistol, and say 'here. please put in mouth, here's the trigger.' he does.
asciilifeform: decimation: only if it sells the right agenda.
asciilifeform: in fact, discountable on account of mere mention by usg.
asciilifeform: 'best' korea << not even a necessary hypothesis
asciilifeform: nanotube around? yesterday i updated my key (new exp date, same fingerprint); still getting 'Error: Problem creating encrypted OTP file.' from gribble.
asciilifeform spends his evenings debugging an entirely other rom to which he does have source. and disagrees, seeing how there is plenty of sport in it.
asciilifeform: ben_vulpes: so you think your day job is painful. go debug a rom, for an evil embedded cpu arch, to which you haven't source.
asciilifeform: check out where the fuckers say 'grub [bootloader] should detect an impending fsck' - because it is the responsibility of the entire planet, they think, to compensate for their idiocy
asciilifeform: 'My experience of running Linux on my personal local interactive (rather than server) systems over the past eighteen years leads me to believe that the long-term benefit of *prophylactic* fsck invocations triggered by mount-count or interval-since-check is approximately zero, since *those* invocations of fsck have never discovered FS corruption on my systems.'
asciilifeform: jurov: nah this one's further in the thread
asciilifeform: the best place to hide a little malice is a gigantic pile of incompetence.☟︎
asciilifeform: as they have in fact been demonstrated to do on many past occasions.
asciilifeform: decimation: another thing is that intel et. al. are not honest actors and there would be every reason to suspect the physical product and documentation to diverge in arbitrarily malicious ways.
asciilifeform: doesn't matter how thoroughly the thing is published.
