30900+ entries in 0.213s

diana_coman: it's still open to discussion as far as
I can see it so any comments are most welcome
a111: Logged on 2018-07-17 03:19 mod6:
I'm saying in the instance of inquisition.
I don't think there is any way to separate a willful liar from someone who lost control of their key.
a111: Logged on 2018-07-17 03:24 Mocky: if shortwave repeater was in l1 confidence and one day
i became l1,
i wouldn't see having to keep that secret as a burden.
a111: Logged on 2018-07-17 03:00 asciilifeform: Mocky:
i grasp the argument, but must point out that all attempts to date to cudgel people into paying for software, have ended in tears ( usually for the cudgel-wielder )
a111: Logged on 2018-07-16 16:28 asciilifeform: mircea_popescu: releasing binaries does not create this guarantee. even static elf, when put on a box where linus et al (or his successor) see it fit to subtly change the abi, will bomb, and not necessarily immediately. and
i'ma still 'be idiot'
a111: Logged on 2018-07-17 02:13 asciilifeform: mircea_popescu:
i thought of 1 far-conveyor item where
i actually had it in my notes 'to be for l1 encyclical only' -- the shortwave repeater
a111: Logged on 2018-07-16 15:44 mircea_popescu: as we're contemplating an eulora client rewrite,
i am contemplating the following code release paradigm : client author a) releases code encrypted to l1, signed and deeded (so basically, gpg -aer asciilifeform -r ave1 -r etc) ; b) releases precompiled binaries for allcomers.
spyked:
http://btcbase.org/log/2018-07-16#1834921 <--
I'm sold on the idea
i. in particular for eulora, and ii. otherwise for it to be established on a case-by-case basis. for (
i),
I see nothing wrong with e.g. challenging users to reverse-engineer the client (or maybe
I'm just nostalgic about game cracking/trainers).
☝︎☟︎ ave1: And the whole thing affirms the power/status of the Lords.
I.E. when an author goes against a Lords wishes or AWOL it is then in the power of that Lord to contact another author and give him the source etc.
☟︎ ave1:
I like it (
I thinks it's paramount) that the republic is exclusive and not inclusive . (It then means something if you are included)
ave1:
I find the 'if it can happen, it will happen' a strange argument. Let's say you let a friend stay in your house while you are away for a couple of months? Yes, he could destroy the house and steal the contents, still this arrangement works and has worked for many friends.
☟︎ ave1: Third, it is not about who leaked it (
I do not care about that much). It's about trust and if L1 does not trust each other, then what?
a111: Logged on 2018-07-16 15:44 mircea_popescu: as we're contemplating an eulora client rewrite,
i am contemplating the following code release paradigm : client author a) releases code encrypted to l1, signed and deeded (so basically, gpg -aer asciilifeform -r ave1 -r etc) ; b) releases precompiled binaries for allcomers.
ave1:
http://btcbase.org/log/2018-07-16#1834921, ack.
I think it's a brilliant idea. Especially, points (2) and (3) and
I'm not worried about the "keeping a secret" parts. First,
I've worked for companies with an extensive secret code base (and this code is and has been secret for a long time > 30 years) . Second, all leaked sources are "illegal" anyway (as in this source was not sanctioned, so it's worthless).
☝︎ mircea_popescu: and
i tend to play games from 20 years ago today still. which...
Mocky: or maybe not.
i still have software from the 90's that
I use on a daily basis, install straight from orig 90's cd
Mocky: if there turns out competition between clients, maybe
i want to do something to get more market share
mircea_popescu: or
i dunno, maybe you're the one guy who thinks need for speed only finally nailed the plot on installment 8.
Mocky: if shortwave repeater was in l1 confidence and one day
i became l1,
i wouldn't see having to keep that secret as a burden.
☟︎ mircea_popescu: anyway, it's altogether doubtful that this naive model of imperial "progress" ever applied to software.
i don't expect lcients to become ever better over time.
mircea_popescu: yeah but
i mean...
i dunno, sometimes
i feel like
i'm the only one who was ever 12. so you're at camp, and someone spread toothpaste on the teacher's moustache while he slept. so ?
Mocky:
i don't see it as a problem for the client writer. to the contrary
i would expect clients to get regular updates and older versions less useful relatively over time. but maybe asciilifeform doesn't care about eulora at all, why involve when only possible involvement 'suspected of leak'?
mod6:
I'm saying in the instance of inquisition.
I don't think there is any way to separate a willful liar from someone who lost control of their key.
☟︎ Mocky: there's no way toknow, obviously. but if
i wrote a client under this l1 confidence model, and it leaked not by me,
i would suspect someone in l1... who else?
Mocky: if in the case of a confirmed leak, pointed questions could be asked even of those who never so much as looked at it. and
i'm not saying answering questions is a big burden, but alternately not being suspected in the first place could be considered a benefit
mircea_popescu:
i would expect it is actually a ~gain~ if one discovers he's leaking secrets unwillingly.
mircea_popescu:
i suppose. though honestly, what is it, don't decrypt the deed, it'll sit there.
Mocky: this makes sense to me. the only thing
i have against it is asciilifeform and mod6 argument about the burden of keeping secrets. while
I don't see the proposed method as actually burdensome,
i see the argument in the general case
Mocky: asciilifeform,
i dont' even see it as an issue of paying for software: the paying or not doesn't need to differ from the case where minigame writes the official client
mod6:
I figured, can't really help it with the old client. Was thinking maybe there is a new one in the works with some stuff that need not be open sores.
mod6: Or am
I being retarded here?
mircea_popescu: notice that ~even today~ there's solid market in "music cds". if you want
i can photograph the people outside trying to sell their shiny "extrenos"
lobbes:
I could see someone creating a 'ecu casino' for the 'masses' indeed
mircea_popescu: asciilifeform note
i'm not forbidding anyone from ~publishing~ their client.
mod6: Anyway Gentlemen,
I think that currently this comes down to: 1) "How much do
I trust the man standing next to me?" and 2) What are the consequences should others betray and leak my valuable assets?
mircea_popescu:
i'm thinking more in the veins of, "really, you gave monkey ak ?"
mod6:
I see this as even beyond the Eulora scenario, stretching out to any TMSR~ source;
I just don't see a good way to solve it right now, other than being selective with who gets rights to see the $src.
mod6:
I'm not sure that we have the correct abilities to do such a thing at this time, at least on a policy based level.
mod6:
I would like for TMSR~ to retain it's own code; for many reasons, including preventing other possible fraud and snake-oil salesmen... a variety of things have been written about on the subject in here actually.
mod6:
I'd like to say, that
I don't think that it's an over all /bad/ idea,
I'm just not sure if it's a good idea either.
I think this might just be a case-by-case basis.
mod6: Another thing,
I was thinking about was: Perhaps shipping the source to all L1, maybe let people request this themselves.
mircea_popescu:
i dunno,
i wouldn't use any online banking thing that didnt'; checksum
mod6: Another scenario that
I was kind of thinking about is where: Lord X encrypts $src_code, drops it into deedbot, and $src_code is encyptped to {a,b,c,d}. Upon a future date, person 'a', is drummed out and neg-rated. Nothing stops person 'a' from still decypting that $src_code with his key, neg-rated or not. This is not wholly differnt than before... just saying that there's no "backsies".
mircea_popescu: consider the case at hand.
i dunno if you've read the proposed protocol etc, but suppose it happens with euclient. so recognized owner creates a new set of binaries (
i dunno, moves a class around say) and
i use the new hashes for server, and so the leaker gets what exactly ? client for a server that won't talk to it ?
mod6:
I've been trying to see how this doesn't end up with a bunch of finger-pointing once someone's source code is inevitably leaked. (If it can happen, it will happen.)
mod6: From the earlier discussion,
I tend to see a lot of points from all sides. And quite an interesting discussion.
I've been thinking on it all day.
a111: Logged on 2018-07-16 15:44 mircea_popescu: thoughts plox! (and
i specifically want everyone to say at least an ack, so let's page asciilifeform ave1 ben_vulpes BingoBoingo danielpbarron diana_coman hanbot lobbes mod6 phf spyked trinque )
mod6: Ok well,
I'm all caught up here.
a111: Logged on 2018-07-16 16:51 mircea_popescu:
i dunno specifically ; im not sure he ever said.
a111: Logged on 2018-07-16 16:01 diana_coman: mircea_popescu, there is of course the fact that l1 is neither for life nor perhaps yet all that difficult to get in and out -
I don't know whether this is a l1 matter or a s.mg board matter
mircea_popescu:
i kinda lost track of him myself ; but plox to maintain the wot in good working order from own pov.
shinohai:
I think
I'll order a couple and get on those experiments forthwith
a111: Logged on 2018-07-16 15:44 mircea_popescu: thoughts plox! (and
i specifically want everyone to say at least an ack, so let's page asciilifeform ave1 ben_vulpes BingoBoingo danielpbarron diana_coman hanbot lobbes mod6 phf spyked trinque )
BingoBoingo: <Mocky>
i've been meaning to learn spanish. they got cute girls there? << Here we have them in most colors except African/Asian/Indian. The taller ones usually show up December/January
Mocky: correction, let me consider how
i can make it happen
BingoBoingo:
I can host a few nights, but this is a bit cramped for a two week stay.
mircea_popescu: BingoBoingo do you like the idea of hosting or should
i include an airbnb in his vacation package.
BingoBoingo: <mircea_popescu> BingoBoingo do you have a guestroom/bed anything btw ? <<
I have a place to put a surface for guest accomodations
mircea_popescu: Mocky how about this, you pick two weeks this month/next,
i'll pick up your airfare, BingoBoingo will set you up, and you can go hang out in uruguay.
Mocky:
i've been meaning to learn spanish. they got cute girls there?
mircea_popescu: Mocky btw
i was serious about uruguay. you ever thought of travel ?
BingoBoingo: On this sunny pleasantly warm alt-January day
I went for a walk and returned to OMG logs
diana_coman: asciilifeform,
I enjoyed his stories during those 2-3 years when
I read almost only SF, 16-18 or there about; when
I re-read now
I kept getting annoyed because
I keep finding it starts well and then sort of veers into what he'd like the world to be rather than what it is
a111: Logged on 2018-07-16 16:31 mircea_popescu:
i have to fucking compile every thing the 9000th time,
i can't just put binary images on my 9001th rockchip ?!
mircea_popescu: uncharacteristically close to original, even has same ending.
i just cleanned up the science a little.
Mocky: oh yes, that was good. but
i never read the original
mircea_popescu: ahahah yeah. and imo did plenty of good, convinced me
i'm a great poetastre!
diana_coman: so go ane improve ye young man! uhm, old,
I forgot it's me the youngun
diana_coman:
I thought of Sheckley's Ask a Foolish Question but it might be just me
diana_coman:
I suspect for fun eulora can even sell 1 secret every 10 years and it won't hurt much, lol
mircea_popescu: diana_coman entirely my arbitrary call.
i'll put whatever strings in there
i put, and well... what can you do.