426700+ entries in 0.278s
kakobrekla: perhaps he will be able
to auth again after 2018-08-29
kakobrekla: however i am not sure
this is possible.
kakobrekla: what
threw me off was yesterdays debate - what n6 really would want in his position is
to get otp encrpyted with F9F5 A57C instead 3594 E367
kakobrekla: mircea_popescu it doesnt seem
to be broken key cause
the
thing doesnt work on other peoples keys as well
mircea_popescu: ;;later
tell n6 : can you extract and publish your public key as it resides on your machine, as opposed
to whatever's on sks servers.
punkman: kakobrekla: why did you expect something different from
the last command in
that paste?
mircea_popescu: nevertheless, if
the system only contains public keys,
then it can be safely used
to verify signatures made by
the respective private keys.
mircea_popescu: to doubt it stands for any other. consequently, any system
that automatically decrypts, or automatically signs, is a hole not a point of security.
mircea_popescu:
http://log.bitcoin-assets.com/?date=06-08-2015#1228030 <<
to expound on
this for
the log readership : it is not
trivial but definitely feasible
to cause any running implementation of asymmetric cryptography
to leak key bits if it is possible
to direct encrypted matter at it in an automatic fashion and have live access
to
the results somehow.
this
theoretical fact is practically verified for pgp, and
there's no grounds
☝︎☟︎ shinohai: I have always been interested in interpreting
time into a frequency
shinohai: Well he understood laptrace
transforms, which is more
than I will ever know
mircea_popescu: shinohai if you care
to make a proposition i'll consider it, but otherwise what is
this ? "At 25 Kaczynski became
the youngest assistant professor ever
to be hired by
the University of California, Berkeley" ? i'm not in
the demo.
shinohai: Some of his stuff was
truly out
there, but I admire his abilities in maths.
assbot: Logged on 06-08-2015 21:20:41; ascii_field: priceless moment: when you realize
that 'sha512sum' and related utils on your box were all authored by... ulrich drepper
trinque: shinohai: stop wishing, and build your porno empire
today!
shinohai: I wish I had some sort of job where I maintained a bot
that archived great pr0n pics perpetually.
assbot: Logged on 06-08-2015 21:02:17; pete_dushenski:
then
they wouldn't have
time for mob media outrage and
they'd miss out on
the opportunity
to put dentists out of work
assbot: Logged on 06-08-2015 20:57:37; pete_dushenski: after finding a discrepancy between
the downloaded file (firefox 29) and
the listed checksum
two months ago,
they responded by removing
the checksums on all files !
mircea_popescu: the idea being
that ml + antecedents <=> versioning system
that works sanely.
davout: as long as it's possible
to have a
tool
to work on
the patchset it essentially reduces
to
the same
thing, which
the only
thing I personally care about
trinque: what I wanted was
that
tree data structure *somewhere*
trinque: with
the antecedent named, seems fine
davout: "please express any amounts in
tonal bitcoin" is what comes
to mind :-)
ascii_field: it means
that i will not look at nor will ask anyone else
to look at any other representation
davout: the representation you prefer but is semantically equivalent
to another representation ?
davout: ascii_field: extract
them all if you really insist on having a canonical representation you can frame and hang on your wall i guess
davout: 3.
tiny script
that spits out a properly formatted signed commit for inclusion in versioning
tool
davout: 2. validation script
that checks
that every single commit is signed by WoT-folks
ascii_field: already wrong formulation. why 'extract' when ~they are
the canonical representation~
davout: 1. versioning system
that works sanely (able
to extract individually signed commits)
davout: so basically
the
toolset reduces
to:
davout: (for each commit
that is)
davout: with some additional bash script
that checks
that each key is L1/L2
davout: check fingerprints,
trust keys, you can check
davout: yeah,
that's
the point
davout: ascii_field: if you could have a separate pgptron for checking sigs, and
the ability
to manually insert a signed patch into it?
trinque: but I agree with
that principle
ascii_field: davout,
trinque, et al: i will not be giving any automatic system access
to my pgptron.
shinohai: I do agree.
The fact
that
there are finite boundaries is comforting
to an extent
trinque: davout: it was punkman re darcs I
think
pete_dushenski: shinohai and i agree
that we should be
thankful for
this
assbot: Logged on 05-08-2015 14:26:15; mircea_popescu: so : you wanna contribute, use
this and
that markup,
then rest is done by itself.
shinohai: Of course not, if you
try yo will lose.
pete_dushenski: shinohai within
the context of your propostion, fighting against forces of nature makes little sense.
pete_dushenski: what i'm saying is
that if winbloze 10 is all
there is,
that's all
there is.
shinohai: If anyone can
think outside
the box ....
pete_dushenski: shinohai no see because
ted could see a different world
than
the one he was offered.
pete_dushenski: re: binaries vs. winbloze.
this is perhaps like saying
that sticking your dick in a blender is nothing like sticking your head in a shark's mouth.
ascii_field: priceless moment: when you realize
that 'sha512sum' and related utils on your box were all authored by... ulrich drepper
☟︎ shinohai: If all
the world offered was Windows 10, I'd become
the next
Ted Kaczynski for sure.
pete_dushenski: downloading binaries is nothing compared
to downloading winbloze 10.
assbot: Logged on 06-08-2015 21:03:27;
trinque: pete_dushenski: if you have good hashes of any old
things, consider making a deed
pete_dushenski: ascii_field but you're right.
this is
the sane approach
pete_dushenski: mkay well
then
the offer is open
to any and all -other- in
the wot
kakobrekla: because,
to me it doesnt seem
to be working.
pete_dushenski: dear wot : please
to provide photo editor for mac os 10.6 or 10.8 (eg. pixelmator)
kakobrekla: hm, anyone ever used
this 'exclamation mark'
trick
to specify
the key with which
to encrypt with before?
trinque: gentoo's nice for
this; you can just archive your distfiles folder
pete_dushenski: ascii_field because i'm a sucker for punishment and i fail
to see
the alternative in
this case
ascii_field: (notice, when i post binaries,
they are not for running - certainly not on a computer... but for static analysis)
pete_dushenski: it would just be
the end of computing as we know it if anyone had 2 months, maybe even 2 years!
to actually learn
the ins and outs of a program
pete_dushenski: it's much better if you're always grappling with
the superficial changes
that
the devs on high release every goddam monday
trinque: pete_dushenski: if you have good hashes of any old
things, consider making a deed
☟︎ pete_dushenski: and
that's really no way
to live in
the modern age, no is it.
pete_dushenski: then
they wouldn't have
time for mob media outrage and
they'd miss out on
the opportunity
to put dentists out of work
☟︎ pete_dushenski: god forbid anyone actually become accustomed
to
the
tools of
their craft and, y'know, improve at
their craft !
pete_dushenski: because hey, everyone should just get with
the program and use
the latest shiniest most califragilistically stupendous apps and oses coming out of everyone's bungholes
pete_dushenski: because obstruction is
the most important part of diddling old software
shinohai: Because sbtraction is
the most important part of maths
pete_dushenski: because maybe
that'll make
them more secure and
trustworthy or something
pete_dushenski: after finding a discrepancy between
the downloaded file (firefox 29) and
the listed checksum
two months ago,
they responded by removing
the checksums on all files !
☟︎