435700+ entries in 0.295s
mircea_popescu: in any case :
the front against
the usg in
the cyber world is only going
to strengthen
the way it's going. within a decade we will see full area denial in
the sense
that no govt anything will still run online.
☟︎ mircea_popescu: half a day of
this shit, you're willing
to pay money
to anyone shooting
that way.
mircea_popescu: this is how people end up funding "terrorism", for
the record, if anyone wondered.
mircea_popescu: no, no, it's
the bitcoin salesman
that's
to blame. he did it all!
mircea_popescu: and it's also not
the fucking marshall's office
that ENABLED
the criminals by paying
them bitcoin
mircea_popescu: so it's not
the fucking marshall's office
that ENABLED
the criminals by paying
tax dollars for windows shit
assbot: Logged on 23-07-2015 23:32:31; mircea_popescu: "Rosario is an Italian security researcher with specializations in browser security and fuzzing. [...] During
this
time he primarily focused on fuzzing SVG, XSLT, and XPath. He was paid $3.5k EUR per month" << alright ? guy made 50k a year.
thinkaboutit.
mircea_popescu: "the victims" aka government agents, who both provide
the holes and
the payments, are a-ok.
mircea_popescu: "By selling bitcoins
to
the victims,
the FBI, notably, holds Murgio responsible for enabling
the criminals responsible for
the attacks
to receive
the proceeds of
their crimes."
mircea_popescu: but
they propose
the gun shop owner did somethingwrong.
mircea_popescu: basically,
the situation here is, us marshall goes into gun shop, buys ammo, shotos his wife.
mircea_popescu: the sold bitcoin
to some derps who needed it
to pay cryptolocker.
mircea_popescu: them having
thew windows hole in
the first
time, for which
they paid with more public funds, also fine.
assbot: Logged on 23-07-2015 23:30:19; mod6: asciilifeform:
the build we were discussing earlier is now up and running against 195.211.154.159 and seems
to be pulling blocks again just fine.
mircea_popescu: "Additionally,
the FBI said
that
the Murgio sold bitcoins
to victims of ransomware attacks such as Cryptowall. " << yeah, like various USG offices, including if memory serves a sherrif. i suppose
this is now a crime, right ? selling bitcoin
to
the derps.
them using public funds
to pay
the ransom IS FINE!
mircea_popescu: ;;later
tell bingoboingo "Yet, in
the situation where
the very fabric and reliability of
the Internet at large is
threatened it is no one prerogative care
that
they are offering on open Denial of Service attack amplifier on
their connection." i
think you accidentally a verb.
mircea_popescu: of course,
this looks a lot more like someone not knowing
their way around a netstat dump
than a legitimate
thing. because i don't imagine
torrents work so
that a computer ever advertises itself as localhost.
mircea_popescu: ly doing so from
the same machine used detect and prepare a report on infringement for Universal."
mircea_popescu: "On
the 15th of
this month Universal Pictures France filed a
takedown request with Google (archived) demanding
they remove from results sites hosting or linking pirated copies of Jurassic World. Among
the addresses Universal demanded Google sanction was 127.0.0.1 which is
the IP address a computer reserves for communicating with itself.
This means
that not only was Universal seeding its own film
to pirates, it was like
mircea_popescu: " In June, JPMorgan reassigned Chief Information Security Officer Greg Rattray amid staff discord over his handling of
the breach. Rattray and his boss, Jim Cummings, a former head of
the U.S. Air Force’s cyber-combat unit, were
the chief advocates of
the
theory
that
the Russian government was involved in
the breach"
mircea_popescu: herp. fancy
this : governments currently confuse individuals for governments now.
mircea_popescu: The
two are also identified in a previously unreported FBI memo
that connects
them
to
the investigation of
the hack of JPMorgan as well as
to incidents at Fidelity Investments Ltd. and E*Trade Financial Corp. JPMorgan officials argued initially
that one of
the largest U.S. bank hacks in history was
the work of
the Russian government."
mircea_popescu: "Though
these are separate cases, some of
the individuals are linked. A principal in
the alleged securities-fraud scheme is a business associate of one of
those charged in
the Florida bitcoin operation, a friendship dating back more
than a decade
to
their days at Florida State University.
mircea_popescu: omfg who
the fuck got bloomberg
to put
that stupid lined paper background. what,
they
think ima
think
they're moar professional like
this ?
mircea_popescu: i guess it's
the fate of
the aspiring 14%
to never know what actually sunk
their decade of effort.
mircea_popescu: too bad for him, he put all
this effort into writing a neat article in
the hopes of maybe impressing people, he's almost
there and
then he shoots his sale in
the head with stupid associations like
that.
mircea_popescu: and guess what... "Vlad likes long romantic walks on
the beach, e-mail him sweet nothings
to vlad@tsyrklevich.net using his gpg key." links
to keybase.
mircea_popescu: they had
to pick between opening webcam studio, call center or "security firm" and not able
to find
the female lips of either kind for either of
the first
two settled on what sweaty balls could do.
mircea_popescu: i would say Vlad
Tsyrklevich
thoroughly vindicates my side in
the original discussio re
these schmucks.
mircea_popescu: was unable
to
turn
this into a working exploit. It was discovered in October of 2013 and VUPEN used
the same bug
to win Pwn2Own in May of 2014."
mircea_popescu: "Fuzzer results:
Though Rosario's fuzzers found numerous crashing
test cases, like most fuzzer outputs few of
them appeared exploitable. One of
the first crashes
that looked exploitable was an IE10 memory corruption
that was patched within a week of its discovery. Soon after, Rosario found a Firefox crash
that looked exploitable but only appeared
to occur under memory pressure. Despite months of analysis, Hacking
Team
mircea_popescu: "Rosario is an Italian security researcher with specializations in browser security and fuzzing. [...] During
this
time he primarily focused on fuzzing SVG, XSLT, and XPath. He was paid $3.5k EUR per month" << alright ? guy made 50k a year.
thinkaboutit.
☟︎ mod6: asciilifeform: up
to, height=365462 now. and my other obsd build has been connected
the whole
time and still chugging along: height=224116
mircea_popescu: buncha fucking amateurs
this world is made out of i swear.
mircea_popescu: "Several of
these forwards included a PDF with VBI's entire exploit portfoli"
mod6: asciilifeform:
the build we were discussing earlier is now up and running against 195.211.154.159 and seems
to be pulling blocks again just fine.
☟︎☟︎ mircea_popescu: "Exploit portfolios: VBI regularly sent portfolio updates
to its customers.
Though
they were encrypted, Hacking
Team's habit of forwarding encrypted messages unencrypted means
that many of
them are accessible. "
mircea_popescu: "Hacking
Team's CTO claimed
that VUPEN “burned”
their (presumably unsold) vulnerabilities after a set period of
time
to move
the exploit market; putting
their deployments in jeopardy." doh.
mircea_popescu: s, like Gamma International and NSO Group, prominently advertised
their 0day capabilities, forcing Hacking
Team
to be defensive with prospective customers."
mircea_popescu: "As a result,
their 0day providers
tended
to be small and unestablished. Some established exploit vendors, like VUPEN and COSEINC, did offer
to sell Hacking
Team exploits, but
they were predominantly overpriced, second-rate, and not even 0day. As a result, Hacking
Team was seriously exploit supply constrained because
they had difficulty finding suppliers
that
they deemed reliable and reasonably priced.
Their competitor
assbot: Logged on 23-07-2015 18:23:00; gabriel_laddel:
thanks MP
kakobrekla: anyway,
that line goes something 'it doesnt matter what it is, as long as
the boy is healthy.'
mircea_popescu: ;;later
tell gabriel_laddel so
talk
to her, odds are she'll do it.
kakobrekla: "to see" would be close
to 'videti'. sight is 'vid'.
assbot: Logged on 23-07-2015 18:17:06;
trinque:
tired of
this "just
the
tip" nonsense
mircea_popescu: (jack of cards is fante in romanian; young man about
town idem).
assbot: Logged on 23-07-2015 04:48:44;
trinque: mircea_popescu |
trinque what is
this, "i'll date once i'm rich enough for it
to work" ? << perhaps bitcoin is well upstream of anyone's revolution
assbot: Logged on 23-07-2015 04:15:36; asciilifeform: actually
the real deal might be a locomotive-style drivetrain
trinque: I'm gonna go with "wad of golang I'd rather kill
than inspect"
ben_vulpes: y'know
trinque its probably cawsmic race
BingoBoingo: He was
their Satoshi until he
talked blocksize
assbot: Nick Szabo: Bitcoin "more vulnerable
to selfish mining if delays become more prominent, e.g., in
the case of larger blocks" : Bitcoin ... (
http://bit.ly/1fq1nUi )
mircea_popescu: ;;later
tell funkenstein_ hey weren't you pretending
to be a dwarf ?
gribble: funkenstein_ was last seen in #bitcoin-assets 1 day, 0 hours, 46 minutes, and 4 seconds ago: <funkenstein_> re: hastings, uconnect: "boston brakes" is
the
term used in reportage by veteranstoday and others
gribble: Bitfinex BTCUSD
ticker | Best bid: 276.35, Best ask: 276.59, Bid-ask spread: 0.24000, Last
trade: 276.23, 24 hour volume: 7131.42363814, 24 hour low: 275.56, 24 hour high: 278.44, 24 hour vwap: None
mats: the sentence is hard
to parse if you don't understand
the bittorrent protocol
mats: BingoBoingo:
that's a confusing
title
solrodar: ;;later
tell ben_vulpes any progress with
the boost problem you had with my script? What was
the problem anyway?
trinque: my chrome had it before I
turned it off
trinque: yep, and even on chrome doesn't it use
that widevine
thing?
mats: lots of folks vulnerable
to
those -- people not on Chrome
that use Netflix for example
mats: yeah. HT email archives suggest
they have a couple Silverlight 0days, but i haven't seen it in any of
the released code
trinque: mats: has
to go without saying at
this point
to disable flash...
mats: >NEONNIPPLE: Office 2007, Word + Excel, required ActiveX control, required user interaction (going
to Edit menu)
shinohai: trinque:
they are
trying
to be clever. I never
talk
to most of 'em. I just pay my bill every month
trinque: though I guess
they acknowledge it in
the source
trinque: shinohai: beatings for
these hashbang people
telling me
to sh <(curl anythingontheinternet)
assbot: Universal finds pirated copy of Jurassic World seeded from its own servers |
Technology |
The Guardian ... (
http://bit.ly/1KmRVMr )
gabriel_laddel: there is a default .conkerorrc file
that is required
to run it called default-conkerorrc.js
trinque: bu
tI'll probably keep grabbing components in
the meanwhile
trinque: I'm not gonna push ya
to gimme masamune
til you're done.