log☇︎
39300+ entries in 0.024s
mircea_popescu: i'm willing to bet "entropy is improved" 50% of the time. ☟︎
mircea_popescu: asciilifeform, they're not equally distributed. here's what i propose : take a rng run, ent ; then take out all carmichael numbers from it, run ent. then see if you can tell which is which.
a111: Logged on 2019-03-17 03:03 mircea_popescu: "We wonder, and some Hunter may express wonder like ours, when through wilderness where London stood, holding the Wolf in chace he meets some fragment, huge, and there stops to guess. What powerful but unrecorded race once dwelt in that annihilated place ?"
asciilifeform: fwiw however i cannot presently think of any rng test, even the dumbest ones in the 'dieharder' collection, that wouldn't barf at a rng which avoids 3/4 (or any similar proportion) chunk of the integer number line
mircea_popescu: asciilifeform, i'd say you found the first meaningful patch to be put on the fg tree.
mircea_popescu: imo item should be baked anyways, as a tmsr.crypto model object.
BingoBoingo: <mircea_popescu> being pretty much the ~only test anyone here in any substantial sense gives a shit about. << Indeed
asciilifeform: on pc , pretty slow ( dun actually make anyffing like full use of even the modest fg bit rate )
asciilifeform: ( like all other possible rng tests, presupposes that the device is in fact an rng, rather than e.g. tape playing back an old rng run while enemy dies of laughter )
mircea_popescu: being pretty much the ~only test anyone here in any substantial sense gives a shit about.
mircea_popescu: totally should be part of tmsr.ent
asciilifeform: incidentally, litmus where you pluck a string of N bits from rng, and then look for the expected distribution of m-r liars ( or apparent primality ) is itself a notbad, imho, rng test
mircea_popescu: but yes, the relation you unearth is sound. the problem or set thereof i started discussing is exactly homomorphic to "well, we have no proper rng tests, "ou'll have to take the girl by the nose, count, and break out the abacuses.")
asciilifeform: which 6 yrs after picking up subj, asciilifeform for instance is no closer to nao than then
mircea_popescu: your rng working or not is aside the point ; we're discussing here random numbers as a mathematical abstraction, we're not even counting "well, your set of 4, 4, 4, 4 is not exactly an implementation of that abstraction"
asciilifeform: ( and applies equally to the candidate # , and to any other application of rng )
asciilifeform: so is the idea 'you cannot know whether yer rng actually worx?' cuz then i must agree
mircea_popescu: asciilifeform, and this SHOULD STAY THAT WAY, is one thing i'm saying. for the above reasoning.
mircea_popescu: yes you have "good reason to believe".
asciilifeform: the interval being picked for witness is 1..n ( well,really 1..n-1 , see diana_coman's review) tho
mircea_popescu: afgain : just because you've proven that 3/4 numbers in the interval 1, n have property p, you have not shown ANYTHING about how many numbers have the property p in some other interval q, q+k.
asciilifeform: cheaper, thermodynamically.
mircea_popescu: argument reduces to "you do not know what random means".
asciilifeform: near as i can tell, the argument resolves to 'random dun exist, if beelzebub feels like it he will feed you 32 liars'
a111: Logged on 2019-03-28 15:05 mircea_popescu: i do not dispute that the exercise is not worth doing, unless one has a girl nose fetish. nevertheless, worth doing is a different consideration from true.
mircea_popescu: we're back to http://btcbase.org/log/2019-03-28#1905447 however this worm turns. ☝︎
mircea_popescu: how do you know this ?
asciilifeform: yer harem aint a uniform hat pick from the set tho
mircea_popescu: asciilifeform, i dun see how works either! but what i'm saying is that you don't have ~proof~ it doesn't!
mircea_popescu: just because "every other human is female" does not mean there's 3 males in my harem.
asciilifeform: i must confess that i dun see how works.
mircea_popescu: statistical means some things, we do not know how it diverges once we narrow intervals.
asciilifeform: i can't see any path to 'magically fails 32 shots despite working uniform rng' without rejecting the 3/4
asciilifeform: apparently mircea_popescu dun buy the 3/4 proof ?
mircea_popescu: asciilifeform, the problem's not necessarily stated as you state it. i am not capable to know in advance WHAT attack will have to be faced.
mircea_popescu: asciilifeform, for all you know, all numbers between n and n+k are liars for all primes larger than 2^l
asciilifeform: say you have n for which the entire bottom quarter of the 2048bit witness space is liar. how does this prevent working rng from still finding working witness in the expected # of shots ?
mircea_popescu: i do not dispute that the exercise is not worth doing, unless one has a girl nose fetish. nevertheless, worth doing is a different consideration from true. ☟︎
mircea_popescu: there, again there is not a mathematical proof to permit you to say -- if i say "the largest contiguous set of consecutive liars before number n will contain k such liars where k = n divided by alf's gf's nosehair count" there's no formulaic approach you can fall back on. you'll have to take the girl by the nose, count, and break out the abacuses.
asciilifeform: the 1 device which dun rely on unprovens is... otp ( insert oblig old thrd here !11 )
mircea_popescu: the bound presumes a flat spectrum rng and properties of large sets of random numbers that ~have not been proven~, though they are experimentally VERY reliable.
asciilifeform: correct, the bound presumes a flat-spectrum rng.
asciilifeform: this type of failure hinges on imperfection of rng, rather than hidden boojum in m-r
asciilifeform: the m-r proof is unambiguous re the number line thing. i.e. the p of n ~actually random~ witnesses all lying, is bounded.
mircea_popescu: this is not what i'd call "crackpottery". for all you know there IS a manner to construct "~always lied about by random witnesses" prime candidates.
mircea_popescu: asciilifeform, as to your earlier question : not such a large degree of crackpottery needed. consider that if i affirm today that a) given a list of however many ~randomly chosen~ witnesses from (1,n) b) the number k = x^2 + q x + p is going to be falsely identified as a prime number while n = q ^ 2 + p ^ 3, there is c) nothing you can practically do to give me the lie other than ~actually construct such numbers and check~.
asciilifeform: ( or, to be pedantic, 3 from a 4th )
asciilifeform: it's sorta like the proposition of hiding 4 people in phone booth
asciilifeform: to the point that i'm at a loss to construct a crackpot hypothesis for the negative ( what would the loch ness monster here look like ? erry composite n, we know has 3+ / 4 of integers as proper witnesses. so where wouldja hide'em so that working rng doesn't find 1 in 32 shots before asteroid hits machine ? )
asciilifeform: all we have is the http://btcbase.org/log/2019-03-28#1905286 ( from elementary proof ) + the observation that nobody ( or at least not asciilifeform ) has ever found a composite that doesn't properly light up m-r 'composite!' indicator for 3+ / 4 rng stabs. ☝︎
a111: Logged on 2017-07-18 22:58 asciilifeform: whaack is quite likely thinking of the bulk of the b00k, which consists of blockcipher liquishit which is complicated for no reason at all other than the religion where 'it is confusing to ME, author, and therefore Must Be Hard To Break'
mircea_popescu: asciilifeform, i don't disagree a is the correct way ; but i am pointing out we do not actually have math to point to here. for all we, properly speaking, know, http://btcbase.org/log/2017-07-18#1686299 eminently applies. ☝︎
asciilifeform: mircea_popescu: recall that http://www.loper-os.org/?p=2978#selection-1320.0-1335.6
mircea_popescu: it is factually true that the liar occurence in (1, n) is ~1/3 ; i don't know how to evaluate the occurence in (n, n+k). it could be 1/3^2 or 1/3 ^ k or 1/3 ^ 1/k^16 or whatever the fuck else.
asciilifeform: mircea_popescu: i'm quite curious to hear how could be weaker ( to any degree of crackpottery at all )
mircea_popescu: in any case, it seems to me that the a witnesses MUST be generated as rng(0, 2^4096) rather than rng (2^4095, 2^4096).
asciilifeform: ( fg disgorges up to ~32 candidate 2048-bit nums / sec . so it aint anywhere close to becoming the bottleneck in this use case )
mircea_popescu: asciilifeform, possibly a is actually significantly weaker than b. i dunno, intuitively i'd readily agree with you, but the fact is ~we don't know~.
asciilifeform: koch et al shat out his 'fixed witnesses' thing, and folx ate it largely cuz rng poverty. which we dun suffer from.
a111: Logged on 2016-09-11 22:50 asciilifeform: it is foolish to design for 'what if my rng silently fails'. it is a 'jesus bolt' failure
asciilifeform: ( see earlier thrd also, http://btcbase.org/log/2016-09-11#1539708 ) ☝︎
asciilifeform: when we 1st had m-r thread, i also considered a hybrid algo, where you take e.g. 32 rng witnesses, and 32 that are kept in bottle and known only to you , for 64-shot test that is slightly moar immune to rng failure. but then thought 'rng is jesus bolt, if fails, yer candidate is also fucked' so couldn't think of why to do such a thing.
asciilifeform: mircea_popescu: possibly i'm thick, but what does b win ? seems like any hardcoded list, if becomes known to enemy, opens you up to theoretical 'bake a n for which the witnesses are liars' item
mircea_popescu: atm i am unaware how one would answer this ; but if any brins are in the audience by all means, even an unsuccessful ~meaningful~ attempt at tackling this question of our times is liable to make new math. ☟︎
mircea_popescu: type a has the disadvantage that possibly we end up with worse witnesses, and type b has the disadvantage that possibly lists of n to which our known list of candidate witnesses is blind to may be also constructed in advance.
mircea_popescu: the ~only question that actually needs an answer is whether a) a selection of n random numbers b bits long made every time a candidate prime is checked for compositeness or b) a pre-given list of prime numbers b bits long among which n are randomly picked each time a candidate prime is checked for compositeness is a better approach towards checking a candidate prime for compositeness.
mircea_popescu: thinkin gmore about this whole witness and liar discussion :
asciilifeform: http://p.bvulpes.com/pastes/RKx9Y/?raw=true << full 1000-shot run of the 2048bit-prime demo. min=13, max=306, avg=58, med=44 , total run time for 1000 primes = 58207 sec.
asciilifeform: would still like to find note #3 from that one , where he actually constructs the num
asciilifeform: ty diana_coman ! found http://btcbase.org/log/2017-10-08#1722915 shortly , there it was ☝︎
diana_coman: I had it in my stash from writing eucrypt time so it rang a bell instantly
mircea_popescu: diana_coman, nice find, definitely the source of my memory.
a111: Logged on 2017-10-08 19:15 mircea_popescu: asciilifeform https://www.researchgate.net/publication/220161766_Constructing_Carmichael_Numbers_which_are_Strong_Pseudoprimes_to_Several_Bases (guy named arnault gave example of number for which all tests up to ~300 were misleading)
diana_coman: asciilifeform: arnault's paper in the log from 1995 if that's the one you were looking for http://btcbase.org/log/2017-10-08#1722906 ☝︎
mircea_popescu: "Digg Inc., a social-media pioneer once valued at more than $160 million, is selling for the deeply discounted price of about $500,000, three people familiar with the matter said." << back in 2012.
mircea_popescu: now it answers ty
mircea_popescu: meanwhile in ancient trilemas, http://trilema.com/2012/o-fata-pe-gustul-meu/
asciilifeform: the only source iirc for this item was an old ru report .
asciilifeform: nfi what became of this
mircea_popescu: all part of work to make silent subs ; even the exhaust gets bottled.
asciilifeform: possib that this was done in recent yrs, i missed.
mircea_popescu: afaik it's internally organized much like the "car battery" : a buncha half-liter cells inside a lined tank
asciilifeform: bad enuff that you gotta have the 400atm ballast cistern
asciilifeform: rright but generally you would not want a bottle of 800atm on a boat that might have to live with depth charges nearby etc
mircea_popescu: afaik it's just compressed air, taken when up.
asciilifeform: mircea_popescu: iirc they used peroxide as oxidizer, rather than compressed o2
asciilifeform aficionado mostly of sovok fleet , not up to date on newfangled
mircea_popescu: the engines won't go very far on it (in no small part because it';s almost never taken to ~water density, ie, 800 or so atmospheres) ; but there's still a lot of air that can be fit in some not-so-huge tanks.
asciilifeform: afaik modern folx still tryin' to resurrect tech
mircea_popescu: not as energy store ; as oxygenation tank.
asciilifeform: afaik that was the last word on the tech.
asciilifeform: there was a sovok train engine with no boiler . for last-mile into factory with combustibles. filled with steam, off-site, went for ~40min after.
asciilifeform: compressed gas aint so great as energy store, you lose just about errything you put in , to pv = nRT
mircea_popescu: in truth, never actually looked into this too closely.
asciilifeform: for torpedo.
mircea_popescu: ~everyone does this now ; im pretty sure soviets also did.
asciilifeform: it was the germans who tried to actually ~run~ ship on compressed air. in ww1. did not ( surprise? ) go far.
mircea_popescu: no, i mean, air tank to run diesel engine off of.
asciilifeform: airtank only good for vertical. battery if you care to also move..
mircea_popescu: even soviets had these