log☇︎
42300+ entries in 0.009s
asciilifeform: if anyone finds out what is in that thing, plox to write in !!
asciilifeform: so prolly not infineon, in their 'fob'.
asciilifeform: ... but asciilifeform ran the litmus on'em, and no dice
asciilifeform: !#s infineon
asciilifeform: in related lulz, the google dev shithub etc do mention that they use a usb 'fob' for signing. which suggested that maybe infineon-lulz
asciilifeform: hmm i guess dunwork quite yet
asciilifeform: !Qddg 0xb93d6539 ☟︎
asciilifeform: but , tldr -- phf was of course right , http://btcbase.org/log/2018-06-23#1829126 was 'too good to be true' ☝︎
asciilifeform: but this is 'obvious to alert reader'(tm)(r) ☟︎
asciilifeform: btw typo, 'also_keyid' etc is incorrect name, really it is a ptr to the modulus
asciilifeform actually played the whole thing, incl the expansion pack, fughet what it was called
asciilifeform: http://btcbase.org/log/2018-06-25#1829520 << imho it is a troo gem for the ages ☝︎
asciilifeform: http://btcbase.org/log/2018-06-25#1829504 << iirc even the meanest hotel in BingoBoingostan, has bidet ☝︎
asciilifeform: http://btcbase.org/log/2018-06-25#1829496 << congrats BingoBoingo ! ☝︎
asciilifeform: ('dev keys')
asciilifeform: fwiw i've confirmed that #1 is ~not~ any of the privkeys published at various times in their shithub.
asciilifeform: ( for n00bz / folx innocent of ida : the procedure names in the screenshits, are naturally asciilifeform's , they are not present in the bin )
asciilifeform: ^ phf , mircea_popescu , other interested folx ^
asciilifeform: seen in http://www.loper-os.org/pub/c101pa/c101pa_unlock_nodice.txt , 'RO keyid: 0xaa66150f(prod)' corresponds to keyid of #0, and 'RW keyid: 0xde88588d(prod)' is #2 ; #1 is '0xb93d6539' and not seen in the sysinfo msg, but does show up in early vers of fw (e.g. https://chromium-review.googlesource.com/c/chromiumos/platform/ec/+/400418 ) and prolly is dedicated nsakey ☟︎
asciilifeform: ( or rather, flip at least 1 bit in each half of it)
asciilifeform: the routine linked earlier to mircea_popescu , prolly dun help us much, to activate it one must somehow corrupt the entire rom
asciilifeform: (3) is the actual routine that forces keyid to be one of the 2 , we will call'em hitler key #1 and #2 , the latter is http://phuctor.nosuchlabs.com/gpgkey/2F5EC26698365939D499561F385A39A4217604DEB38913D71AFD135B28009DAF , the former i have not converted yet (along with #0 ).
asciilifeform: one of them is that it pins (forces the payload pubkeys to be one of the 2 given), the two options are seen in (4)
asciilifeform: (2) is the ro (sorta misnomer, it is upgradeable) rsa checker routine, it is very loosely based on the ancient published one seen in https://github.com/coreboot/chrome-ec/blob/b9f5a3d6baae84950f5ff0c4f7c588e55944818a/chip/g/loader/launch.c , but with a few twists
asciilifeform: going in order: (1) is the sig header tested by the boot maskrom ( contents not known, but can be guessed at, it has 1 hard-wired pubkey ). this we will call cr50 hitler key #0 . it cannot be changed by fw updater.
asciilifeform: (1) http://www.loper-os.org/pub/c101pa/ida/cr50_fritz_ro_sig.png (2) http://www.loper-os.org/pub/c101pa/ida/cr50_fritz_hitler_enforcer.png (3) http://www.loper-os.org/pub/c101pa/ida/cr50_fritz_hitler_enforcement_businessend.png (4) http://www.loper-os.org/pub/c101pa/ida/cr50_fritz_pinned_pubs.png ☟︎
asciilifeform: in other publish-or-perish : ...i'ma prolly burn in hell for this, but ida shits out wincrapola line endings and so for now these 'pre-print' screenshits will have to do :
asciilifeform: fwiw ru emigres (esp of the elderly sort) often stuck in exact same mode
asciilifeform: can even make a sort of conversation with these, once succeed in snapping'em out of that human ant mode where the most interesting thing in the universe is the petrol station where 2cents cheaper etc
asciilifeform: verily
asciilifeform: 'when will you take me relax'(cn postdoc chix to a young asciilifeform)
asciilifeform: it so happens that i dun dislike'em
asciilifeform prolly doomed to learn cn at some point
asciilifeform: but given as asciilifeform dun speak cn , never got anywhere
asciilifeform: mircea_popescu: asciilifeform sometimes goes to place exactly like-that, complete with old man
asciilifeform: i think they 'when i hear 'culture', i reach for my pistol' more or less to a man
asciilifeform: *gave a
asciilifeform has yet to meet the chinese who have a millifuck re anyffing whatsoever but wealth full-bore
asciilifeform: how else.
asciilifeform: that very same
asciilifeform: and it does seem to get called in the case when neither half of rom passes rsa sig...
asciilifeform: some entirely non-rsaific attribute, that is
asciilifeform: ( spoiler : seems to clumsily look for string 'escue' and some, yet to be determined, magical attribute of a candidate rsa sig )
asciilifeform: ( not, naturally, any such thing in the public src )
asciilifeform: because to asciilifeform it looks like a lolnobus
asciilifeform: http://p.bvulpes.com/pastes/nLG1g/?raw=true << hey mircea_popescu , what does this look liek to you ?
asciilifeform: speaking , incidentally, of 'publishing before perishing' :
asciilifeform: aah
asciilifeform: BingoBoingo: oh hah, i thought today was Getting Keys day
asciilifeform: fwiw it's been in continuous test on zoolag since day1 ( http://btcbase.org/log/2017-12-23#1757668 ) ; iirc several other folx also tested ( incl. 'side by side' nodez ) , see what they have ( ben_vulpes ? possibly mircea_popescu ) ☝︎
asciilifeform: in my book, turning '6 month sync' into '3 week sync' is a win.
asciilifeform: for reference : http://btcbase.org/patches/asciilifeform_aggressive_pushgetblocks << subj
asciilifeform: would be interesting to hear, if anybody can think of one.
asciilifeform: and i've yet to hear of anyffing like an argument for keeping shitoshi's idiocy of 'boot time is speshul', even as devil's advocate exercise
asciilifeform: mod6: i see it as moar of a bugfix ( a la mircea_popescu's fix of the db locks constant ) rather than troo patch, fwiw
asciilifeform: mod6: up to my nose in saecular liquishit. how'bout you?
asciilifeform: ohai mod6
asciilifeform: http://btcbase.org/log/2018-06-25#1829397 << imho a genesis oughta be a proggy, if a minimal one, that introduces some basic functionality of the larger item ( as seen in ffa ch1 ) , rather than a placeholder, '[this is genesis and blah and other things will also go here]' -- if this makes sense ☝︎
asciilifeform: spyked: prolly i oughta elaborate re the item in your 4th footnote. a compact lisptron has no particular reason to have any notions of parsing baked in; all it needs is 1) a basic i/o mechanism 2) a way to load an initial pre-built s-expression into the working memory and immediately evaluate it. ☟︎
asciilifeform: oh hey the adalisp
asciilifeform: 'мочила -- pro fella, who мочит' (tm)(r)(phf)(iirc)
asciilifeform: PeterL: worse, it may even superficially appear to work but drop certain byte sequences ( see logs re 'flow control' )
asciilifeform: PeterL: i dun think FG will work there either, winblowz doesn't give a handy knob for serial devices afaik
asciilifeform: 10 per 2M ?! this is about bmore level ! i thought brazil were a world champ , what is this
asciilifeform: PeterL: out of curiosity, what chapter you built ? ( i can't picture how the /dev/random thing could work on winblowz, say )
asciilifeform: *yours
asciilifeform: PeterL: your will be laden with all kindsa crud in the bin
asciilifeform: PeterL: gprbuild is what applies the restrictions, so what you build is not quite ffa
asciilifeform: !#s talos
asciilifeform: http://btcbase.org/log/2018-06-24#1829199 << lol these come in erry 6mo or so nao, don't they ☝︎
asciilifeform: mm pretty satisfying, swinging that thing through cloud of mosquito
asciilifeform: *walking
asciilifeform: , still waking along, mostly torso-less and wingless...
asciilifeform: this reminds me, not long ago asciilifeform picked up a little chinese toy, item shaped like tennis raquet but the wires are charged to 4000v and connect to (small) cap; a sort of mechanized fly swatter, they pop, little blue plasma burst, vapour. nominally. so then , having used it, later i see a most peculiar insect, did not immediately realize what it is, never having seen before. looked closely, turns out -- fly head + front legs ☟︎
asciilifeform: ( btw, this does not appear to be in the l0gz as-such, so asciilifeform will note : c was an evil thing from ~birth~. on machines so impoverished that 'c is necessary', oughta be writing in asm; on machines where not necessary -- well, obvious )
asciilifeform: writing parsers in overflowsanddanglingpointers-lang is braindamaged.
asciilifeform: 'this arg parser, with all of the eggog handlings/safeties already weighs 85% of lisp interpreter...'
asciilifeform: ben_vulpes: funnily enuff, ~this very item~ is how asciilifeform got mired in attempt to bolt a lisp onto trb
asciilifeform: not thick, this is so
asciilifeform: upstack : http://btcbase.org/log/2018-06-23#1829075 << for the record , it withstood (not much surprise) phuctoring (incl. fermat etc) ☝︎
asciilifeform: and not optionally, but errytime.
asciilifeform: ben_vulpes: dun forget fee=<...>
asciilifeform: srsly we have enuff pistols that fire from 2 ends. time for a normal one.
asciilifeform: or some other name, but idea being that it must be 1) impossible to confuse it with old 2) keywords ~named~, no order dependency plox
asciilifeform: e.g. 'sendbtc to=<destaddr> change=<chgaddr> [from=<optionalfromaddr_0,optionalfromaddr_1,...,optionalfromaddr_n>]'
asciilifeform: eliminate possibility of confusion with old , or reactor meltdown if new trb is plugged into a scriptolade harness meant for old, etc
asciilifeform: ben_vulpes: if changing the semantics, i recommend new names ( new commands )
asciilifeform: nao this is imho hard to swallow ('submarine with screen door') and so currently i'm assuming that i simply missed something. will have to test, at any rate.
asciilifeform: the other interesting bit ( from asciilifeform's disasm of the 3.4 fw) is that there doesn't seem to be any pinning of the keys! ( i.e. i can't currently find any reason why it wouldn't eat a rw-fw update signed with a variant key, so long as said key is stuffed in where expected)
asciilifeform was aiming to nail down from what derives what, rather than flooding phf, lel
asciilifeform: lol!
asciilifeform: http://btcbase.org/log/2016-03-16#1434267 << see also oldthread ☝︎
asciilifeform: ben_vulpes: absolutely, this has been a sore spot of asciilifeform's since day1
asciilifeform: possibly the 2nd dumbest thing shitoshi did, after the mining algo -- the coin fragging nonsense.
asciilifeform: http://btcbase.org/log/2018-06-22#1828901 << this kind of thing was a multi-week headache for asciilifeform the last time he had to actually uncork the launch codes and move coin; and i expect that it will only ever get worse ☝︎
asciilifeform: btw i did figure out the http://btcbase.org/log/2018-06-22#1828757 matter -- their key format reserves 1st 4bytes for 'keyid' . but the lulzimplementation pictured in the (useless, doesn't seem to occur in the bin) published 'loader', treats the key as starting there . as i currently understand, couldn't actually work as written, barring some mathematical curio ☝︎
asciilifeform: since his monumental 'nobody has the keys!' gem, all i saw of him was that 1 time he popped in here and drooled for coupla min.
asciilifeform: pretty great lolcow, btw, that d00d. spilled what he thought was a carefully incomplete pile of beans to 'get asciilifeform to waste months making debug cable', i suspect, didn't quite expect us to get a working one in 1wk
asciilifeform: the only even mild surprise is the sheer pile of echafaudage
asciilifeform: never!111