359800+ entries in 0.227s
mircea_popescu: so much fucking packaging and meta-packaging for, in
the end, ~ a hundred pounds of organic
turd.
ascii_rear: what happens
to a fella who 'experimentally verifies hierarchy'
there
ascii_rear: incidentally does adlai behave like
this in
the .il army ?
mircea_popescu: forget
the stupid shit, you're just some nobody
that'll soon die, just like everyone else. you have no intrinsic value or importance, just like everyone else. you have no opportunities, you have no chances,
there's nothing
to manage. go do something useful already.
mircea_popescu: you happen
to be
the sort of misfortunate fucktard
that grew up among idiots rather
than parents, and as a result are way
too fixated on experimentally verifying
this hierarchy
thing and way
too fascinated by
the female "oh may gawd what if i sell myself short".
adlai is off
to defend precisely
this
theorem, but not with words on IRC.
mircea_popescu: <adlai> notice how much mircea hates me... he scratches, he moans, he bleeds! but
the
thorn - remains. << dude stop being derpy. you're not
the only or
the first guy
to have made or lost money on mpex. it has nothing
to do with anything else.
ascii_rear: a boatload of folk are paid for, more or less, just
this
adlai: better
theorems
to prove :)
adlai: anyway, it's an idea, stupid one at
that... i have better ones
to defend.
ascii_rear: multiply by whatever
the bloat factor of
the stego is
adlai: and really, it's only 144MB daily,
times
the concealment factor
adlai: (one of
the oft-repeated defenses of facebook among meatspace 'anarchists' is
that
they don't censor private groups, because nobody complains)
adlai: let's say
there's a channel, #bitcoin-words, where blocks are broadcast stegodoodically. freenode lets it live. ditto for
the hashtag, and
the subreddit... but facebook suddenly closes down accounts
that spam such words, even in private groups.
adlai: do would-be
tyrants other
than USG not lurk in
the shadows, waiting
to replace
them?
adlai: ascii_rear: oh wait. remember "reveal
themselves as
tyrants"?
that is
the value of a ~public~ btc stegotron, esp. one which flows
through 'media'
adlai: anybody making half a bitcent on bitbet knows
this.
adlai: re: snr... i realize it's an Unsolved Problem, and in precisely
the same way
that "racism works", it makes sense
to
triage
text by
the mouth it whenced; but "the opposite of stupid is not wrong"
adlai leaves it
there. someday if he picks up
the meth pipe instead of
the
tankard, he'll whip
together a PoC... or if he found
the shot glass instead, he'll find his way
to
https://xkcd.com/simplewriter/ and
tell people how he
thinks
they should build
the system for passing computer money
through
the words
that are said most often.
adlai: sure,
that's why it's
tongue-in-cheek... so nobody will
take it seriously, nor waste
time censoring people saying words over social media.
adlai is
thinking not of
the day when you can't get your
tx
to
the chinaman, but rather of
the day when he can't return you your receipt
ascii_rear: problem with all stego is
that it runs exactly counter
to standardization
☟︎ adlai: yes,
the PGP-w mode.but PGP stego only needs
to work for ~2 people, whereas btc stego should work for 21M.
ascii_rear: mircea_popescu had an article about simple
text stego
adlai: yeah,
that's why
they
tell me
to shut up, and when i'm not
too drunk
to read, i do.
ascii_rear: e.g., i could go on about
the kind of
things
that happen
to me at $firm but I DONT
ascii_rear: iirc mircea_popescu (and damn near everybody) isn't
terribly fond of clutter in
the logz from depressed folks screaming on
the stake
adlai: notice how much mircea hates me... he scratches, he moans, he bleeds! but
the
thorn - remains.
adlai repeats, for
the less-alert lurkers: my +v is a
testament
to
the fact
that money can be made on mpex.
adlai: don't get me wrong,
there is definite noise
to be reduced, aka - money
to be made. but
the question is more "how much money do you need,
to earn back
the registration fee before your grandchildren die"
adlai: what do i look like, a bunch of
text? i have eyes as well.
adlai gueesstimates 22 mil btc, but has not yet done
the math
adlai: (also, an exercise in financial mathematics, for
the
truly alert lurker - how many
times larger a bankroll
than $mpexRegistrationFee-$mpexReferralFee do you need for registration
to be rational?)
ascii_rear: i
thought
the whole reason behind adlai getting depressed and
taking
to dope was
that he couldn't get enough coin
to properly
try scalpel
adlai: goon with
the
trigger finger might be greedier
than his boss
adlai: hmm. it's not all self-delusion... it means, "this
target is worth more
than X btc"
ascii_rear: adlai: familiar with ww2 story of
the bombing of coventry ?
adlai: glass cannons are perfectly reusable if you reinforce
the firing station, syncronize your shots with other noise (aka soldiering 101)
ascii_rear: (how many
times can you use, e.g., a pill against rsa ?)
ascii_rear: adlai: a glass cannon is a proverbial weapon
that can be used exactly once.
adlai doesn't understand
the glass cannon's purpose
ascii_rear: mircea_popescu: i'd expect
to find it in chinese iron with american firmware (e.g., apple keyboard)
mircea_popescu: which... if
the chinese aren't doing it already, it's because
they're kinda
too slow for
this world.
mircea_popescu: the only
thing
that'd be interesting
there is discovering a supply chain attack.
adlai: totally unrelated, yet...
this is why i work on scalpl, and why nobody else cares about scalpl.
assbot: Logged on 08-05-2015 23:15:54; mircea_popescu: same reason intel's fundamentally unconcerning : all greedy algorithms are vulnerable
to other greedy algorithms.
that's what it means.
adlai has
typed a btc hotwallet password into ssh-o-ssh, for canarification
mircea_popescu: afaik most folks copy/paste passwords, but
that's besides
the point.
ascii_rear: afaik most folks encipher ssh key (for just
the same reason as btc hotwallet)
mircea_popescu: i dunno who'd use password-based ssh.
then again
that paper is from a decade ago.
adlai: the inner session is opened from direct access
to relay box.
ascii_rear: most sysadmins end up doing
this at some point
adlai does
this routinely, is he even stupider
than he
thought?
ascii_rear: as in, where you pass
terminal input
to a process on a remote box
mircea_popescu: who
the fuck sends passwords over
the wire one character at a
time is beyond
the scope of
this discussion/
ascii_rear: 'It is widely believed
that 0.1 seconds is about
the limit for
the response
time for a user
to feel
that
the system is reacting instantaneously [32].
Therefore in practice,
the window size will have
to be smaller
than
that. Our own experience with
the Keyboard JitterBug shows
that 20 ms is a perfectly acceptable window size and
this amount of added lag for each keystroke is effectively unnoticeable by
the user.'
ascii_rear: dollars
to doughnuts you will find a signal at some point.
ascii_rear: ty mod6. re: 'jitterbug', could be interesting
to wire up some consumer keyboards
to a
thing
that fakes a press for each key and determines
time-to-signal-on-the-wire.
mod6: pete_dushenski: root@enchante:/home/tevye# ./build-bitcoind-151224.sh << if you made /home/tevye/.wot -- run
this as 'tevye', not root.
ascii_rear: artificial side channels are old hat at
this point
ascii_rear: r link is encrypted. Our experiments suggest
that simple Keyboard JitterBugs can be a practical
technique for capturing and exfiltrating
typed secrets under conventional OSes and interactive network applications, even when
the receiver is many hops away on
the Internet.'
ascii_rear: Keyboard JitterBug
that solves
the data exfiltration problem for keystroke loggers by leaking captured passwords
through small variations in
the precise
times at which keyboard events are delivered
to
the host. Whenever an interactive communication application (such as SSH,
Telnet, instant messaging, etc) is running, a receiver monitoring
the host’s network
traffic can recover
the leaked data, even when
the session o
ascii_rear: 'This paper introduces JitterBugs , a class of inline interception mechanisms
that covertly
transmit data by perturbing
the
timing of input events likely
to affect externally observable network
traffic. JitterBugs positioned at input devices deep within
the
trusted environment (e.g., hidden in cables or connectors) can leak sensitive data without compromising
the host or its software. In particular, we show a practical
ascii_rear still
thinks it could be interesting
to set up a number of publicly identifiable (version patch) nodez and watch
the enemy reaction
adlai preps
the leaflets: "When was
the last
time anybody actually verified
the seals on Napoleon's
tomb? All seven of
them!?"
ascii_rear: nobody other
than mircea_popescu (and napoleon?) ever rode on a horse in egypt ?
adlai apologizes in advance for
telling people what
to do, i realize
that's frowned upon when you're an Outsider (tm) (s) (r) ~~~
thestringpuller: mircea_popescu:
thestringpuller you hafta understand
this "X is a scammer" bullshit is pretty much ALWAYS some sort of entrenched structure
trying
to wash its sins on
the cheap. oh, "madoff" scammed ? Really ? HE diod it ? not
the 1k+ "experts"
that recommended him
to his clients etc ? not all
the various "supervisors" and "authorities" ? it was... maddof ? <<
this is why goat et. al pumping pirate have vanished from existence.
adlai: hmm. is
there a way
to `!rated somebody me` so assbot
tells how
they rated me?
thestringpuller: BingoBoingo: Mebbe if you WoT'd
the guy actually
talk
to him before joining a rate frenzy? << I rated him based on multiple btc purchases, all of
them went smooth. I haven't seen/talked
to him for many moons. People change.
pete_dushenski: mod6: cheers. i'll give
trinque's a shot since i haven't started
the build just yet. just populating .wot atm.
adlai: ;;google pink floyd
the wall
the
trial lyrics
adlai: it's a pink floyd
thing
adlai: mircea_popescu: how many
times do i have
to
tell you, dad, stop
treating me like a child!
mod6: either should work fine for you.
try
trinque's if you hvaen't started
the build yet. otherwise, np.
mod6: shinohai:
that's awesome =]
shinohai: Also,
thanks mod6 for help with signing script
the other day, works like a charm now.
mod6: mainly just
to unbury
the static binary once built.
mod6: aha,
this is /my/ latest one.