tmsr - Search: i

35200+ entries in 0.241s

douchebag: I just don't think social engineering would be the right word to use for remote command execution

douchebag: I could have got a reverse shell on the box though, is the gpg privkey for the bot not sitting on the vulnerable machine?

a111: Logged on 2018-05-20 03:52 douchebag: trinque: also in theory, since I got RCE on lobbes bot, in theory I could have determined the balance of the bot if I decided to comprimise the system rather than proof of concept :^)

lobbes: http://btcbase.org/log/2018-05-20#1815879 << also to note, you would have had to compromise my network (which, sure, possible) because the box you achieved RCE on is a dedicated public toilet box containing no privkeys of import. I use a proper airgapped machine for important stuff (ala http://trilema.com/2013/how-to-airgap-a-practical-guide/) ☝︎

trinque: much later and less interesting stuff, I think. she relates the experience as an expensive waste of time.

mircea_popescu: i wonder how many unemplyable grads are filling online job applications while thinking "if only i had gotten 20k/50k/100k worth of bitcoin in 2010/2011/2012 instead of this stinking education toilet paper..."

trinque: I choose.

Mocky: yeah i've seen crazy shit like that, most of it in flordia. once saw a dude riding a wheelie on the interstate opposite direction. never saw his front tire on the ground

douchebag: trinque: also in theory, since I got RCE on lobbes bot, in theory I could have determined the balance of the bot if I decided to comprimise the system rather than proof of concept :^) ☟︎

trinque: I was driving on the highway once, tight traffic, and a guy comes by on a crotch rocket laying like superman on the seat, feet out behind him, weaves through the cars at close to 100mph

Mocky: damn, I had a soccer mom in a mini van try to lane change on me without looking first just yesterday while riding

douchebag: Alright, I can have that done in the next week or so. I'm currently using the rockchip box to host a webpage to troll someone, so I want the lulz there to continue to it's full potential ☟︎

mircea_popescu: so get a load of this : i'm going uphill in the pitch darkness, you know, these complete hairpin curves, and WHAM! there's a fucking police truck, parked, searchlights etc, on THE WRONG WAY

douchebag: Well, it's not complete so I didn't get that done yet.

a111: Logged on 2018-03-29 00:21 trinque: great. I'd like you to review the dependencies of trb (which were frozen at particular versions) for known public exploits, and to publish a report of this on your own mpwp blog.

trinque: btw see how I'm having a thread with myself and getting somewhere? imagine if ya joined in!

trinque: since I haven't heard from you, I'm proceeding with these changes myself ☟︎

lobbes: but, I suppose in this situation, I may as well use the "username:" and forgo the quote

lobbes: asciilifeform: I don't dislike. I was operating under the mode of "reduce log clutter (via not triggering $quotebot) if quote being referenced is ~10 lines away"

asciilifeform: lobbes: i gotta ask, is there a reason you dislike using proper logline quoting ?

lobbes: trinque: ah yeah, I see your point.

trinque: lobbes: I find your quoting style kinda hard to read. looks like a non sequitur in whatever thread they appear until the end is reached, and oh ">>"

lobbes: I really need to get back to reading Gibbon's "Decline and Fall", though I'm starting to think that perhaps I should be starting with a text that deals with the -rise and formation- of the republic and eventual empire so as to give better context as to what, exactly, was declining. And on that note: anyone recommend a good text for that subject? >> http://btcbase.org/log/2018-05-19#1815645 ☝︎

lobbes: it really is. most depressing quote I overheard the other day in the cubicle fields: "I just want to climb the corporate ladder". It is like the legends of "band continuing to play while Titanic sank"

lobbes: phew, I've got a lifetime of translating ahead of me. It is fun, however

lobbes: I'm truly beginning to grok that these days

lobbes: I will say, I've started keeping very detailed notes of everything I do re: my various projects. has become an extension of my brain really >> mircea_popescu> and even today, i know ~nothing "without checking my notes". nor do i want to, wtf. that's why there's a log, after all, because of this style.

mircea_popescu: and even today, i know ~nothing "without checking my notes". nor do i want to, wtf. that's why there's a log, after all, because of this style.

mircea_popescu: then over time it learns to trust you're not bullshiting it, either, and so i ended up learning all of physics magic numberds without ever trying to. to the despair of the kids that did.

lobbes: this is how I've been approaching Deutsch lernen von Kant; I've been going through word-by-word and physically writing down my own researched definitions of each word. Then I'll re-read trying to reconstruct with my new definitions in hand until I encounter something new, then repeat. Slow going (I can read a total of 3 sentences now without checking my notes) but it has been working for me so far, daran ist gar kein Zweifel >> http://btcbase.org

asciilifeform: this is possible via lattice method, but sadly i haven't currently the free hands

mircea_popescu: as it's fucking unlikely two machines crashed the particular way i describe.

asciilifeform: seems more likely that top byte was deliberately set != 0 , this seems to be the custom in erry single rsatron i ran across

a111: Logged on 2018-05-18 18:52 asciilifeform: meanwhile, in the lullicus maxiumus, http://phuctor.nosuchlabs.com/factor/5332 >> 1) it's a prime 2) it's a... i'ma leave this as exercise for the reader !

asciilifeform: unrelatedly: since nobody answered http://btcbase.org/log/2018-05-18#1815331 riddle, i'ma post the answer : ☝︎

douchebag: Also made friends with a couple of people I had no idea were even going, they just happened to mention they were at the same conference in chat so we met up

douchebag: I also got to meet some internet friends there - it was a great time

douchebag: It is man! I definitely reccomend attending some of the larger security conferences

douchebag: Yeah, I went there with 2 people from class one was a female and she introduced me to a bunch of her coworkers which were primarily female so we just got drunk and watched conference talks

Mocky: i figured can't be worse than programming java, and it was a cool feeling owning some web app, but didn't pan out

douchebag: I was at a 3 security conferences in the past month, had a great time

Mocky: i don't remenmber, some bigish security consultancy, do a lot of conference talks, anyway almost interviews with those lying bastards, after spending a month doing their 'hack the firmware' challenge and 'find all the security holes in this web site' challenge

Mocky: i tried my hand at that stuff a year ago, you heard of ncc group?

douchebag: I also found an open redirect, which they patched. I was able to bypass their fix so I'm waiting on a reply from that now

douchebag: Mocky: I chained CSRF with XSS -> Account Takeover

mircea_popescu: danielpbarron, while present, i'd say these are marginal considerations here, mostly exploited for their comedic potential.

douchebag: That's going to really help for when I travel Europe soon, had fun with it too :^)

mircea_popescu: may i suggest one of your next posts, by the title "A summary of MacArthur & stuff, for the use of MP, who doesn't give a shit about such things" ?

Mocky: anyway after god died, i didn't bother keeping the bible

Mocky: i thought he was a good speaker at the time, i guess his shtick was explaining (his understanding of) the scriptural hermeneutics to people who don't care about such things but want to feel as if they do

Mocky: yeah was a huge 'fan' of macarthur for years, had macarthur study bible i carried around, listened to him on the radio etc

mircea_popescu: i'm not making any judgement about him ; but i am pointing out the whatever they're called, the dudes he's fixated on, are very obviously total tards.

mircea_popescu: this is incidentally a pretty decent parlour trick : take a bonbon in one hand and nothing i nthe other, and present young child with the choice -- but shake your head no as he goes for the bonbon. you'll be surprised (really, in esl lands you'll be downright shocked) how much trouble young kids have in escaping this trap.

a111: Logged on 2018-05-19 16:25 mircea_popescu: danielpbarron, btw, i'm curious : has your fish friend figured out the "He admits he cannot name one other Christian leader outside his own little band of followers—anyone who has lived in the two millennia between the death of the last apostle and the advent of Darwin Fish—who has remained faithful to the truth." bla bla bla "criticism" is very strictly a http://btcbase.org/log-search?q=%22there+was+a+limit+where+the+fla

Mocky: wow i missed a seinfeld reference, i just watched all 6 good seasons of that, damn 2 years ago

Mocky: i don't remember that last time anyone recommended reading to me unsolicited, and now my post-it note reading list system is struggling to keep up. I'm going to need something better

mircea_popescu: ima put this in there, because ahahaha. touton : http://www.perseus.tufts.edu/hopper/morph?l=tou%3Dton&la=greek&can=tou%3Dton0&prior=ei%28/lonto&d=Perseus:text:1999.01.0157:chapter=1&i=1#lexicon

Mocky: this is hard to keep up with, i haven't even gotten though "Democracy sucks..." yet, lol

a111: Logged on 2018-05-19 18:14 Mocky: speaking of plot twists, pretty surprised by the Ada usage. I pictured usg.DOD-design-by-committee lang commissioned to help build out the chumpatronic-mass-programmer infrastructure for gov contracts. I guess it's time to reevaluate my priors.

mircea_popescu: i guess.

a111: Logged on 2018-04-24 15:26 mircea_popescu: you should see the panic when i send girl to swoop her.

asciilifeform: mircea_popescu: i don't specifically know, in his case. but typically they get 'promoted out' of it when reading that level.

a111: Logged on 2018-05-19 17:38 Mocky: i read yudkowski and liked, went to less wrong 'community' and was bunch of tards ingrouping the hell out of eachother

mircea_popescu: on meditation, i suspect the reason for http://btcbase.org/log/2018-05-19#1815573 actually is, that the item exists (at least at its core) as a campus dating club. ☝︎

mircea_popescu: in this sense i suppose djb is a boneh, though i don't like how he runs his harem ; wheras yuk dude is a boeck.

mircea_popescu: i suppose as far as the orcs are concerned, it's mostly a boneh-or-boeck distinction.

Mocky: re: boneh, he seem legit as he's teaching you to trivially break reused otp, and flawed padding schemes, but that's all i know about him, just surprised to see in the logs

Mocky: I have not read many historical texts. i think i've become too accustomed to being around people who don't read at all. i've certainly not spent time to date thinking explicitly about approaches to text comprehension

Mocky: i suppose i haven't

mircea_popescu: taq/tpq : limit up to / from which something is measured ; there's also terminus a quo / terminus ad quem, but i don't like them because confusing to non-latin speakers.

mircea_popescu: i just explained it lol.

Mocky: i dont' recall seeing taq before, is that latin?

asciilifeform: lol apparently i missed a line

Mocky: on a different note, i see this Boneh fellow, is all over the logs. I think this is the same guy i took a video class coarsera "crypto 101' 18 months ago

Mocky: I'm more interested in the EE side, ie actually knowing enough about the physical machine to be said auditor: http://btcbase.org/log/2014-08-30#815513 ☝︎

Mocky: I have had an interest in working on hardware for the past few years. Not in the 'make ic fab' sense, but just like 'know how to make something'. But I haven't known where to start. Not super juiced to drop some python on a raspberry pi and consider myself a 'maker'

a111: Logged on 2018-01-11 17:00 asciilifeform: so yes, the only reason why anybody sells ice and 95xx -like 'sea of gates' at all, is that for 'glue' (simple boolean functions of signals, for e.g. bus decoding, addressing, simple i/o multiplexing) is that you can't actually do it reliably with the non-seaofgates devices

a111: Logged on 2018-04-30 16:16 asciilifeform: ( for the sake of thread-completeness, what would the ~alternative~ to this story look like? i suggest -- it'd be a process which does to ic fab what 'polaroid' process did to colour photography. find way of etching the circuit from prefab 'sandwich' without caustic baths, sputtering, etc... )

Mocky: asciilifeform, I must to confess to having been a reader of your blog years ago for a short time. but you seemed so bitter about the state of hardware and future prospects. maybe just my perception.

a111: Logged on 2015-02-13 23:03 asciilifeform: i suspect that mircea_popescu would actually like ada. not writing it, mind you, but seeing it written

Mocky: i'll have a look at that

a111: Logged on 2017-07-13 15:16 asciilifeform: the other thing to remember, is that the win from writing in ada - but not in ada in general, but the style demonstrated in ffa in particular -- remains even if YOU HAVE NO ACCESS TO GNAT and gotta compile by hand into asm. because it forces the style of algo that CAN be safely so expressed - i.e. without presumption of pointerolade arithmetic, gc, or other cost-externalizing electrosocialisms

Mocky: speaking of plot twists, pretty surprised by the Ada usage. I pictured usg.DOD-design-by-committee lang commissioned to help build out the chumpatronic-mass-programmer infrastructure for gov contracts. I guess it's time to reevaluate my priors. ☟︎

Mocky: his writing had for me a flavor of what i would now say is: (read in logs here can't find now) "stop being so fucking stupid for one goddammed minute"

Mocky: i even liked his harry potter fan fic, at least better than actual harry potter

Mocky: i read yudkowski and liked, went to less wrong 'community' and was bunch of tards ingrouping the hell out of eachother ☟︎

Mocky: hey i'm not an evangelist of it, but at least it has an actual spec, coherent memory model and thread model. but if i have to write one more corporate java web app imma choke

Mocky: i used to teach java for sun microsystems long ago

douchebag: I love my Macbook Pro

Mocky: i wont touch a mac, so lets not even go there

Mocky: i hate windows and i hate linux. end up using windows more since need for my job

Mocky: for a living, well i wasn't good enough to sling dope, so i became a java programmer ☟︎

Mocky: got to reading some lesswrong stuff, made me think, eventually i rememberd how to think and realized i based my life on bullshit, so i blew it all up

Mocky: re: http://btcbase.org/log/2018-05-19#1815544 I've had my head up my own ass for so long I wonder where I've been keeping myself as well. I believed in a lot of things built a life on that, god, marriage, mortgage, best usa, being 'good citizen' ☝︎

mircea_popescu: it's an important fucking difference, "maintenance -- when i want ; not when it's needed. it's never needed". this is very much a male ideal, viz both the eastern ( http://trilema.com/2014/the-battlefield-of-the-future/#selection-93.458-93.517 ) and the western ( http://trilema.com/2016/mochila-o-muerte/#selection-87.64-99.1 ). this all follows from men being, well... http://trilema.com/2016/a-complete-theory-of-politics/#sel

mircea_popescu: a right right, i forgot that part! kalash == maitenance is an act of love and devotion, not a matter of necessity. this is deeper than it sounds, consider this recent exchange : http://p.bvulpes.com/pastes/NQRtP/?raw=true ☟︎

mircea_popescu: i dunno if you're aware, but such a thing isn't even supposed to be possible, and certainly not likely. so what do you do for a living ?

asciilifeform: http://btcbase.org/log/2018-05-19#1815491 << notably, earliest (afaik) kolhoz. i.e. 100% tax on crop followed by palace redistribution. ☝︎

a111: Logged on 2018-05-18 22:24 mircea_popescu: "This is not a guide to a correct Eulora build on Windows. It’s the story of how someone did it while knowing virtually nothing about the tools, language or project. For all I know, it’s the worst way to do it that ends up working. " << i really like how this dood's mind is organized.