log☇︎
238000+ entries in 0.139s
asciilifeform: GET /.secret << where does this even exist
shinohai: I didn't have a prior copy of thestringpuller 's key in that instance.
mircea_popescu: Framedragger understand, it makes 0 difference that you "exist" in the sense of, have a tight relationship with your gf. existence is solipsistic, you exist to X once X bothers to get your key.
mircea_popescu: 1st seems more like spot check and 2nd i'm not sure the two did have a prior relationship
Framedragger: (i guess WoT trust had been simply deferred to deedbot until those points in time, etc)
a111: Logged on 2016-09-28 20:31 shinohai: !!key thestringpuller
Framedragger: right, right. it just appears that !!key is being used for established relationships, too. but, again, i guess, http://btcbase.org/log/2016-12-06#1578425 etc ☝︎
phf: i think key reliance here is very much ~wot~ very similar to how otc used to operate. i.e. if there's no identity outside of key, then key-identity-trust are all tied together. nobody sends anybody sensitive command/control/comm without knowing them first. i had a version of asciilifeform's key for years, and my knowledge of asciilifeform was build on multiple verifications of asciikey-asciilifeform-rating entity
asciilifeform: Framedragger: it is quite impossible to meaningfully cryptographicate with a stranger
Framedragger: (this whole "request key before i encipher" seems weird to me at any rate. store the keys, have some out-of-band way of verifying them, and use them when needed. but i understand that the current mechanism is useful, and iirc i must have used it myself, even)
mircea_popescu: then the whole thing was badly designed and whoever deserves to lose.
asciilifeform: what if the decision to launch rockets or not has to be made based on signature NOW ?
asciilifeform: point is that you don't always get a gossptronic takeback.
mircea_popescu: asciilifeform ytou can't talk to dead xen
asciilifeform: so far the sappers have gotten to err >1ce
asciilifeform: http://btcbase.org/log/2016-12-06#1578425 << what if the result is that X is dead ? ☝︎
mircea_popescu: see, allowing a well tailored pyramid of risk eating is not bad. it's good.
Framedragger: hmh. i guess it counts as "key verification" then. hm
mircea_popescu: the reason is that large scale crime syndicates don't... think bars important enough ?
mircea_popescu: you see this as an argument against bars ?
mircea_popescu: Framedragger what happens when you go to a bar and order a drink is that the bartender pours you a drink.
Framedragger: mircea_popescu: but what oftentimes ends up happening when you request key from deedbot is that the requester then promptly uses that key to encrypt $text, and ping recipient with a public url to $text. the fact that there's been no mitm, i think, only shows that the lizards do not find this place important enough (for better or worse, etc)
mircea_popescu: once gossipd, this objection entirely vanishes.
trinque: wouldn't be appropriate to approach that ad hoc
trinque: as far as the lying wire is concerned, that's solved by a different gadget ☟︎
Framedragger: oh, sure, i understand that the scheme as currently implemented *actually works* :p
mircea_popescu: "promisetronic" in the sense of "not rippletronic/ethereumtronic/etc" is a good thing.
Framedragger: "X will complain some time maybe"
Framedragger: hmm. i mean, sure, it just.. seems awfully promisetronic, to peruse local lingo.
mircea_popescu: not only is it done, and done tons, contrary to his "never" : but it is eminently administrable and accountable, as i just proved.
Framedragger: and how the hell do you know that what thing-calling-self-deedbot gave you over fleanode is thing-you-requested?
mircea_popescu: 62 times.
mircea_popescu: seems this is exactly defined as "get X's key from Y you trust". observe :
mircea_popescu: Framedragger "using the wot to validate a public key".
trinque: point being the "I am responsible for some" becomes meaningless because no one will ever be pinned down by that.
a111: Logged on 2016-12-06 14:23 mircea_popescu: "I never ever ever successfully used the WoT to validate a public key." ie what we do here multiple times a day ?
Framedragger: http://btcbase.org/log/2016-12-06#1578290 << for completeness sake, i'm not sure if what is done here multiple times a day is the thing he meant, i.e.: key verification :/ ☝︎
asciilifeform: 'the picture of the pipe,' if you will, not the pipe.
trinque: the signed curse would be stood by in court / at the gallows, whereas something like "I am responsible for some of this" is what, the part that killed my goat, or "always not that part" ?
trinque: and the -1 doesn't undermine the opposability with "eh, I never actually read this" and etc
mircea_popescu: diana_coman that part, of "who", is kinda baked in the design as it is, because of the .seals
diana_coman: eacher of computer science, no matter how great/capable that teacher might be
diana_coman: fwiw I kept trying to digest asciilifeform's proposed categories, but I must confess I would still have trouble deciding on one or another; basically my clear categories would really be binary: I'm USING this or I WILL NOT USE this; the rest I would rather expect to be sorted by competence meaning that one who wants to write a patch for eulora would better get a "I'm using this" from someone involved with eulora, not from his t
BingoBoingo: asciilifeform: This is why electric code now includes puzzles like "arc fault" circuit breaker.
asciilifeform: phf: the funny bit is: if fire safety laws were to be enforced in usa, most if not all of the suburban idiotboxes would be condemned and bulldozed ☟︎
phf: i know a guy who lives in a shipping container (actually mutliple shipping containers welded together) in that area, but he built it himself, he works with steel and propane and is generally a competent person (he lives on his shop grounds). when i read the story i though maybe a warehouse rave caught on fire, but apparently the idiots were living there? it'll just make the authorities take a closer look at oakland warehouses and fuck
asciilifeform: they invite themselves to every party, neh?
trinque: no, but it invites them to the party
asciilifeform: trinque: then these same weasels, revealed to be weasels, don't get ticket to mircea_popescu's mars ship
trinque: asciilifeform: suppose vectored sigs exist, and having provided a weasel route through V, nobody ever actually swears to an item in full.
phf: this happens to squats all the time, but i don't think that the fatalities are as high in civilized world, because people tend to understand what they get into when they squat. sucks, because it's likely to make getting warehouses for legitimate use trickier in the future
asciilifeform: https://archive.is/TzZnb << moar re: the crispy critters from earlier thread
shinohai: I had nearly all my stuff in claims until I found out they vanish sporadically, so back to Electron it all went.
mircea_popescu: anyway, you should prolly go through your inventory and hold a garage sale / auction. prices changed a lot since a year ago
jurov had once amassed almost-significant amount of eulora stuff ... in a claim that vanished :D
jurov: i doubt it, gave up on creating tools long before that
mircea_popescu: anyway. any tool bps or stuff ? many things went up a lot.
jurov: mircea_popescu: just looked into storage to be sure, nope. but by time screens came out, i got scared by amounts you(plural) invested into eulora and gave up on it
phf: ben_vulpes: if you were to use bind everywhere you can use it (e.g. as a replacement for let, destructuring-bind) your code is going to look sufficiently different that it's not clear if you're even programming in common lisp at that point. makes the result less readable for other cl programmers, and code becomes harder to future proof. the tradeoff is generally seen as not worth it (too intrusive for little payoff)
mircea_popescu: oh i thought you bought one of the first ones.
jurov: mircea_popescu: no and iirc i never used them
a111: Logged on 2016-12-06 02:33 ben_vulpes: does the lispy lordship have opinions to share about cl extension libs like "alexandria" and "metabang-bind"?
phf: http://btcbase.org/log/2016-12-06#1578252 << the two are different beasts. alexandria by design is a set of helper functions that wouldn't be out of place in the standard (complete with sometimes obtuse names!), some like with-gensyms doplist flatten iota if/when-let i've seen reimplemented all over the place. bind is more of a everything and kitchen sink replacement for builtin operators ☝︎
a111: Logged on 2016-12-06 02:33 ben_vulpes: does the lispy lordship have opinions to share about cl extension libs like "alexandria" and "metabang-bind"?
jurov: http://btcbase.org/log/2016-12-06#1578252 << as long as they fit into the head (like alexandria), fine for me. why are you asking? ☝︎
mircea_popescu: aanyway. the moral broadly speaking is that there's a windows-niggers-and-other-idiots python ("windows-niggers-and-other-idiots" which is how you decode "3" in unicode) and a normal people python which finally became stable cca 2010 and thanks god.
deedbot: http://phuctor.nosuchlabs.com/gpgkey/A61730B2012A2336FD271D000CA46DC5653BB1D1D0EDE99267BCD2D8ABE8D49F << Recent Phuctorings. - Phuctored: 1514...6497 divides RSA Moduli belonging to '79.98.25.160 (ssh-rsa key from 79.98.25.160 (13-14 June 2016 extraction) for Phuctor import. Ask asciilifeform or framedragger on Freenode, or email fd at mkj dot lt) <ssh...lt>; ' (server.admode.lt. LT)
deedbot: http://phuctor.nosuchlabs.com/gpgkey/100CAE7A776AD64680BA79678B251D0FED4E74ED5809C0CB72E443D006DF15CB << Recent Phuctorings. - Phuctored: 1352...2407 divides RSA Moduli belonging to '87.118.232.174 (ssh-rsa key from 87.118.232.174 (13-14 June 2016 extraction) for Phuctor import. Ask asciilifeform or framedragger on Freenode, or email fd at mkj dot lt) <ssh...lt>; ' (Unknown RU)
deedbot: http://phuctor.nosuchlabs.com/gpgkey/9460417F17B2CD1F76F6DB069E697C5DABA33283141E06F1ABA005ACF08CD48F << Recent Phuctorings. - Phuctored: 1432...5707 divides RSA Moduli belonging to '79.98.25.168 (ssh-rsa key from 79.98.25.168 (13-14 June 2016 extraction) for Phuctor import. Ask asciilifeform or framedragger on Freenode, or email fd at mkj dot lt) <ssh...lt>; ' (server.mokamediagroup.com. LT)
mircea_popescu: in other lulz, "Unicode on UNIX is only madness if you force it on everything. But that's not how Unicode on UNIX works. UNIX does not have a distinction between unicode and byte APIs. They are one and the same which makes them easy to deal with." (from thing guy linked, http://trilema.com/2016/minigame-is-probably-never-going-to-support-python-3/#comment-119991 ).
mircea_popescu: gotta stop the spread of "fake news" and other burgeois propaganda.
mircea_popescu: phf for the obvious reason, the horde of consumers want to do what other people have done. the idea is for terrorists to not be able to communicate with upstanding, law abiding citizens, not the other way around.
Framedragger: (the 79.98.25.168 pop is interesting tho, as some of these hosting-company-i-use boxen get provisioned with everything installed, and i'm sure as fuck that "not all" customers regen ssh host keys. so there may be more pops, or other interesting goodness. probably the whole /16 is worthy of getting properly port-scanned, lots of broken stuff there i'm sure - if anyone has time etc)
jhvh1: shinohai: The operation succeeded.
shinohai: !~later tell mod6 http://wotpaste.cascadianhacker.com/pastes/ecRir/?raw=true
mircea_popescu: https://code.launchpad.net/ubuntu/+source/base-files << there's even a convenient listing.
Framedragger: need the latest node.js!!!
mircea_popescu: and they always package "sid" (ie, devel) as opposed to stable
mircea_popescu: anyway. 10.04/10.10/11.04 are squeeze ; the rest up to 14.04 wheezy and then jessie.
phf: Framedragger: fwiw the logs have properly reffed the original link, no need for a second one
mircea_popescu: (they "commit to security updates within 9 months". fancy that wonder.)
Framedragger: "i dug the dirt myself and now gotta eat it"
scriba: Something went wrong while attempting to read the log.
Framedragger: http://log.mkj.lt/trilema/20161206/#101 << hah, same hosting company and same /24 that is used for Framedragger's logotron and other things
asciilifeform: phf: same reason elliot r. 'abandoned traitorous women' though he had none..?
asciilifeform: was there an ubuntu based on diddled-debian, mircea_popescu et al ?
phf: why does he go through song and dance of "officially" abandoning his key, if he has by own admission no counterparties?
a111: Logged on 2016-12-06 14:02 deedbot: http://phuctor.nosuchlabs.com/gpgkey/9460417F17B2CD1F76F6DB069E697C5DABA33283141E06F1ABA005ACF08CD48F << Recent Phuctorings. - Phuctored: 1797...6589 divides RSA Moduli belonging to '79.98.25.168 (ssh-rsa key from 79.98.25.168 (13-14 June 2016 extraction) for Phuctor import. Ask asciilifeform or framedragger on Freenode, or email fd at mkj dot lt) <ssh...lt>; ' (server.mokamediagroup.com. LT)
asciilifeform: there was a thread re 'do-ocracy', a name one of the perpetrators gave to this practice
Framedragger: right, right. and also the whole "incompetence ~= malice" thing.
asciilifeform: boeck himself does this ~weekly
asciilifeform: Framedragger: the way hannoboecks work is that they will pick a trivial but 'glamorous' problem to 'solve' and score 'cred' with rubes thereby
mircea_popescu: Framedragger guess what, toddlers drinking bleach die just like adults do.
mircea_popescu: ie, for every empire gdp tmsr does ~4.5
Framedragger: i think he's just young (https://github.com/FiloSottile). i remember his heartbleed test tool, it wasn't innovative but was useful. (but i hear what mircea_popescu is saying)
mircea_popescu: anyway, i guess all this gives a very interesting answer to the "how does tmsr gpd compare to fiat states gdp". apparently they produce 2 gpgrams/year/capita, and consist of what, 1k of the herbivores ? meanwhile ben_vulpes 's thing deals in what, dozens/day ?
asciilifeform: pretty lulzy piece; somehow the species of insect was quite apparent imho from 1-2 paragraphs of merely the style of the text !
mircea_popescu: that's kinda what they do, whenever something moves without hitler they try to barnacle on it.
mircea_popescu: notice how he glued himself to heartbleed (which, unlike the normal hanno bockian crap, was a surprise to the empire).
mircea_popescu: hurr durr, they were doing pgp subversion research and picked his hanno bock to publish some results.