2900+ entries in 0.208s

mircea_popescu:
phf ah, so it was just stating the obvious for some reason ? i'm... aware that's how it propagatges o.O
mircea_popescu:
phf no, no, the structure of the argument, "X propagates via r-selection" is not delivering on what i expect is the intent ("of COURSE x is "bad" in the sense of illegitimate).
mircea_popescu:
phf is this repackageable into a puritan argument against sluts ? if not, why not ?
a111: Logged on 2018-01-23 19:52
phf: i can see the education angle, and how it fails these people, but what i'm surprised about is the lack of personal drive? it's some kind of learned helplessness
a111: Logged on 2016-08-01 20:03
phf: mircea_popescu: a lot of xss detection "solutions" rely on grepping for known bad input, like "script" or whatever. and there are ways to sidestep that, like '<scr' + 'ipt>' or a='ipt>';'<scr'+a. in this case whoever is fucking with detection by using this truly wtf feature i've never heard of, <meta charset="a">b</meta> that apparently parses b according to charset a rules
a111: Logged on 2015-08-13 19:00
phf: mats: well, i actually meant the opposite. classes of attacks can be eliminated by not using c. i think that majority of the attacks come from leaky abstractions. there's no <string> in c, but there's a null terminated memory region. there's no <sql> in perl, but there's a character array with sql text in it. one of the solutions is to plug abstraction holes on a level of the language, in such a way that you can't not use improved abstractions
hanbot: mod6 thanks very much for looking --that error was 2nd headscratcher for me.
phf's vdiff.sh was used to make this, fwiw
diana_coman:
phf, the newly published chapter 7 in eucrypt is the keccak sponge but it turns out that I'll still change it from inside out for next week
a111: Logged on 2018-01-24 03:52
phf: ascii still labours under soviet system: "hygiene is useful, you will also get shot for not doing it"
a111: Logged on 2018-01-23 20:22
phf: trinque: the function used to be performed by a teacher with a ruler
a111: Logged on 2018-01-23 19:54 lobbes: It appears such to someone with actual skills such as
phf. But for one for whom it is a "well, what else is there?", it seems like the rational move
a111: Logged on 2018-01-23 19:52
phf: i can see the education angle, and how it fails these people, but what i'm surprised about is the lack of personal drive? it's some kind of learned helplessness
mircea_popescu: lotta wasted time.
phf has it, where's your edited civ savefiles ffs.\
a111: Logged on 2018-01-23 19:25
phf: if you're in the first category, you're going to be paid peanuts to do bitch work, if you're in the later category then by 19 (or whatever) "how to pentest career!1" is going to be ~the last fucking question~ you're going to ask a channel full of autodidacts
a111: Logged on 2018-01-23 18:39
phf: afair though, the subset of commands that we have in vdiff can be reduced to portable awk (i had it working on mac os x), but i don't remember what the necessary changes are. someone mentioned that busybox awk fails..
shinohai: Just to make note in logs, I tested
phf's vdiff changes as outlined on his blog, and got satisfactory results. Old version of vdiff failed as expected.
a111: Logged on 2018-01-23 20:10
phf: i guess the main differentiator is whether or not douchebag actually wants to hack, in which case it's going back to commodore thread. between esl education and ipad there's no obvious direction of exploration, that he can take the way we could take it in the 90s
lobbes: It appears such to someone with actual skills such as
phf. But for one for whom it is a "well, what else is there?", it seems like the rational move
☟︎ mod6:
phf: aha. good deal. agreed that most machines i've ever seen have a /bin/sh, not all have a /bin/bash.
mircea_popescu: esthlos it is not standard procedure ; the emerging consensus is to have a dedicated philosophy file which a) all patches must touch (by protocol) ; b) contains comments as to the patcher's state of mind and c) contains one line per patch uniquely identifying it, machine generated. the format's not fixed yet, but as
phf is working on a new proper vdiff it's probably going to coalesce around a variant of whatever he uses.
☟︎☟︎☟︎ hanbot: ty
phf & mod6 for vdiff/ulimit fixes --former did the trick, hopefully i'll never need the latter but noted to self in case.
a111: Logged on 2018-01-22 19:39
phf: hmm, that's a relevant point to original "blog it!" because looking for those threads is work :> certainly more work than searching through own blog
a111: Logged on 2018-01-22 19:34 asciilifeform:
phf: on one hand, asciilifeform oughta take better notes. on other ,
phf really oughta have blog!11
a111: Logged on 2018-01-22 19:34
phf:
http://btcbase.org/log/2018-01-22#1774395 << what i don't understand is how i can have the same conversation ~with ascii~ over and over again and still he'd be repeating the same original stuff. i don't think it's a question of my blog here, unless you're saying that me saying things in log have no merit because i don't have a blog post to back it up with. this is a novel take by the way, because log used to be canon
trinque:
phf: I dunno it's that; I could pick out plenty of examples of "trinque said!!" from the log. I think it's just a huge amount of information by now.
a111: Logged on 2018-01-22 14:40 asciilifeform:
phf: you gotta put this in proper essay form sometime
a111: Logged on 2018-01-21 22:34
phf: mircea_popescu: it's not clear to me what "properly handle" is, given the many conversations on the subj. there's no reason why it couldn't if there was some direction as far as proper. i'm personally leaning towards the idea that binary blobs shouldn't be in vpatch (as per latest thread on subj), but it's a non-pragmatic take
mircea_popescu:
phf there's no direction re proper cuz of first principle issues, i dun want to make dumb part of the history.
mircea_popescu: myeah.
phf will your differ properly handle binaries by hash ?
hanbot: mircea_popescu no wonder --looks like you published it (for
phf & asciilifeform) on july 3rd of 2016, file date is july 23rd
mircea_popescu: spyked
phf uses a similar (handrolled, unpuiblished) item ; meanwhile lisp languishes in a sad marsh of unusability.\
a111: Logged on 2018-01-19 19:11
phf: his 4th sig is non plaintext by the way, i threw it in since the eater ate, but this probably should be an anti-policy
a111: Logged on 2016-08-03 15:40
phf: the whole font changes meaning take two is coming from the japanese. they were actively promoting this idea back during early unicode standardization days, where there was a strong drive to include every idiosyncratic version of kanji in the standard, because "that's how my family writes it in our last name".
mircea_popescu: but this happens all the fucking time right here, too! take the... well i can't fucking find it now, but there's a line in the log where
phf goes "hey, your trying to do the mp rant comes out short, you;'re not mp". why the fuck not! had all the bits!!1
a111: Logged on 2018-01-18 20:58 mircea_popescu: consider concretely the case of eucrypt's keccak. diana_coman is writing it as a direct derivation off genesis, meaning on extant v impls if one wanted to import it they could import JUST it, without the rest of eucrypt (it'll be pulled in later through the usual procedure in eucrypt itself). superficially this may seem like it encourages
phf to go "o i know, i'll just link keccak patch into my codebase rather than regring (i
a111: Logged on 2018-01-18 20:31
phf: i half expect it to be some kind of kafka narrative, where, when not engaged with tmsr business, alf actually does some macabre butcher work involving big meaty hands and slabs
a111: Logged on 2018-01-18 20:58 mircea_popescu: the problem is that later on, eucrypt's smg_keccak will be pulled into the main to be used for purposes ; if EVEN LATER it gets a patch,
phf will then not actually have a way to seamlessly "get just the patch", he will have to regrind at that time anyway.
mircea_popescu: the problem is that later on, eucrypt's smg_keccak will be pulled into the main to be used for purposes ; if EVEN LATER it gets a patch,
phf will then not actually have a way to seamlessly "get just the patch", he will have to regrind at that time anyway.
☟︎ mircea_popescu: consider concretely the case of eucrypt's keccak. diana_coman is writing it as a direct derivation off genesis, meaning on extant v impls if one wanted to import it they could import JUST it, without the rest of eucrypt (it'll be pulled in later through the usual procedure in eucrypt itself). superficially this may seem like it encourages
phf to go "o i know, i'll just link keccak patch into my codebase rather than regring (i
☟︎ mircea_popescu: sadly, until
phf's improved diff hits the deck there's nothing we can do here.
diana_coman:
phf, those are the keccak transformations; do you need the actual sponge?
a111: Logged on 2017-08-21 14:43
phf: i spent (mostly another whisperer and myself did) on getting vlm stable, and i'm unconvinced that some of the issues we encountered were purely "buggy vlm". there is, for example, a crash in floating point instruction that happens when you load document examiner on stock piratebay opengenera. i have no explanation for it still, because vlm code ~seems to do the right thing~. there are other similar instances
fromloper: I see, hopefully
phf will have more luck with Zeptobars
a111: Logged on 2018-01-17 04:31
phf: oh, hah, i remember this "bytebeat" stuff, before it had a fancy name
mircea_popescu:
phf shorts because you probably tore proper pants by climbing into tree.
a111: Logged on 2018-01-16 18:48
phf: one of many 19th c poems, that i can recite, while standing on a chair (a particular form of grownup entertainment apparently unknown in eslands)
a111: Logged on 2018-01-16 21:44
phf: in further fare news, "SBCL 1.4.3 ships with ASDF 3.3.1, and a number of Quicklisp projects have build problems as a result. Linedit, mgl, micmac, cl-string-match, and others are affected."
a111: Logged on 2018-01-16 21:51
phf: but unfortunately doesn't work (i've not tried the ttf one, but i suspect it'll render like shit) on those fancy high definition flat screens kids use these days
a111: Logged on 2018-01-16 18:44
phf: i wonder if current day ru even talks about "lost knowledge" LoTR style, or it's literally arab egyption "we're best of what could possibly be!1"
a111: Logged on 2018-01-16 18:40
phf: nah, they "fought for freedom" such a long time, it'll literally kill them to admit mistake. what's left of that culture plays charades at roman toga theme new years parties in potomac and praises large kitchen, which is a step up from kitchens of 30 years ago