470500+ entries in 0.302s
mike_c: I'll put on
the list: "make 1-1
trust graph look better" :)
assbot: Logged on 21-05-2015 18:12:46; ascii_field:
trinque: i dare say
that -no one- can make money doing -this-
jurov: yes, i meant
the graph mostly
mircea_popescu: reason giving as little quarter as possible is
the correct policy."
mircea_popescu: he quotes "Note
that it is not said nor implied here
that
there's any sort of
theoretical vulnerability related
to using 65537 as an exponent for RSA.".
the full quote is "Note
that it is not said nor implied here
that
there's any sort of
theoretical vulnerability related
to using 65537 as an exponent for RSA.
The point is
that you don't know what exact implementation flaws
the NSA is or may be relying on, and for
this
mircea_popescu: or
to understand specifically what's being said or anything whatsoever... people must be real lonely.
mircea_popescu: the fact
that someone would spend
the
time
to
type in a 12 paragraph, 500 word reply made out of pure banal WITHOUT BOTHERING
TO READ
THE ARTICLE
BingoBoingo: cazalla: Looks like a mix of some sort didn't want
to stay in its container
Hasimir: also
true, but I'm addicted
to
the game
cazalla: and anyway, you don't need
to vote in order
to be politically active
cazalla: it's against my religious values
to vote is already more
than i should be required
to
tell
them
Hasimir: on
the plus side, being more politically active
than
the vec makes it believable when I say I was
too sick
to walk
to
the polling station
Hasimir: yeah, I missed a local council election once and got a similar
thing
cazalla: AEC send a please explain letter and
that's
the end of it
Hasimir: well,
technically it's compulsory getting your name
ticked off, but most vote once
they're
there
cazalla: trinque, at least you have
the option not
to vote.. i usually find myself rediscovering my religious roots on election day which exempts me from wasting my
time.. why Hasimir would volunteer
to waste even more of his
time
though, i can't figure
that one
☟︎ cazalla: meh i gave up voting years ago, don't even bother
turning up whether it's local, state or federal election..
they can pay me for my
time if
they're
that keen for my vote
Hasimir: I've got a greater chance of influencing here
than in
the capital of
the world ... I mean America
Hasimir: I wish I could've seen
their internal company panic,
though
cazalla: Hasimir, what do you gain by wasting
time
trying
to change
the politics down under?
Hasimir: I guess paypal
take allegations of 14 counts of
their breaching
the electoral act seriously after all ...
Hasimir: oh wow, paypal just capitulated -- I'll be back later, I've got
Treasurer duties
to perform
Hasimir: nice little api on dpaste
too ...
trinque: fucker got me with his "3d" CLIM, whatever
that means
trinque: ;;later
tell gabriel_laddel ok, I'm loading up masamune
Hasimir: but
then I'm a fan of py3 (yes, yes, I'm a heretic
too)
trinque: yup, I don't
tend
to stop coding, just swap which project
Hasimir: I've got a lot of crap ... er, code like
that
trinque: I
tend
to hack on it on
the weekends
trinque: anyhow use it, see what works/doesn't, rate
the guy
Hasimir: the output looks
the same, but with -sa it's not encrypted, just signed
Hasimir: all it would
take would be
the same as allowing it
to hash any pgp message
trinque: Hasimir: deedbot- has his own key in
the WoT, rate him and leave feedback and I'll get
to it
Hasimir: ah,
that explains why it can't be done with gpg -sa (a pity,
that's a great way
to avoid encoding errors)
trinque: you have
to feed him your public key first, and it checks
that against what assbot knows about
trinque: Hasimir: either
that or a public key
Hasimir: does it look for
the "BEGIN PGP SIGNED MESSAGE" header?
Hasimir: trinque, and
the docs are where?
jurov: heh seems
there will be leaks.b-a.link soon
trinque: Hasimir: deedbot records
the sha256 of gpg signed messages into
the bitcoin blockchain
Hasimir: I should probably pop
that onto an s3 instance
Hasimir: it includes
the rainbow series
Hasimir: speaking of ancient arcane shit ... I also have a full copy of everything
that
the nsa had on radium.ncsc.mil prior
to september 11
Hasimir: or by
their selinux mailing list in
this case
ascii_field: if zimmerman isn't in
the pay of usg - he oughta be sending
them a bill.
Hasimir: well, I know nsa head-hunted at least one nai employee back when
they owned pgp corp
ascii_field: but
to classify him as a genuine person may
turn out
to be dangerous for one's health (assuming
that one is not asset himself)
ascii_field: usg -has- his genuine private key when it wants
to.
ascii_field: Hasimir: incidentally, zimmerman is not on
the list because he is an nsa asset in good standing.
the 'silent circle' and multi-coloured phones idiocies are more
than ample proof of
this
Hasimir: I'll have a look at
this deedbot
thing
then ...
Hasimir: trinque, it includes him
trying
to lure me into discussing it and me giving him armchair legal advice
trinque: Hasimir:
that would be an awesome
thing
to sign and deedbot-
ascii_field: mod6:
they are so accustomed
to
the illiteracy of
the general public,
that
they are entirely unprepared for folks with half a clue.
☟︎ Hasimir: BingoBoingo, somewhere I have a log of a PM with
that guy who we later learned was
the undercover agent going after silk road v1
☟︎ trinque: plausibility of
the lie is what's sought, not confirming it
mod6: <+ascii_field> 'Is it possible
that a keyserver running
the old, buggy PKS code ... <<
this is gotta be
trolling, right??
assbot: Logged on 12-09-2014 16:47:05; asciilifeform: once you've been 'taught
the controversy' -
that is, convincing
that
there -even is- reasonable debate among informed people, on a particular subject -
the lie becomes a kind of half-truth, automagically
BingoBoingo: Hasimir: You have
to understand influence agents of various sorts have passed here before
Hasimir: though logic and healthy skepticism requires questioning myself just as much, if not more so,
than anyone else ...
Hasimir: you realise
that's not a change of attitude, right?
Hasimir: I
think
there's something worth looking into it until an answer is confirmed
ascii_field: a soft fecal matter consensus
that 'there is nothing worth looking into here, move along'
ascii_field: i very much get what
the agents are
trying
to achieve, yes.
ascii_field: for all we know, it is possible
that on some pgp client
the faux keys could replace
the genuine ones if user ever 'synced' from sks
Hasimir: or at least all
the names ...
Hasimir: so someone who already had all
those keys in
their keyring ...
ascii_field: it is someone who -would have written-
to one or more of
the folks on
the list.
ascii_field: Hasimir:
the
target is almost certainly -not- on
the list
Hasimir: in which case
the
target is on
that list
Hasimir: alright, assume you're right
then, what do
they gain by doing
this in a way
that can be found by regular(-ish) geeks?
☟︎ ascii_field: this goes for -all-
the agents who read
the logs.
ascii_field: but
there are human fingerprints on it.
take
the 'bug' or 'cosmic ray' hypothesis
to a home for retarded folks. nobody here is dumb enough
to fall for it.
ascii_field: BND is just a random guess of mine at present, based on
the de pirate party
thing
Hasimir: trinque, except for
the BND ...
ascii_field: data is public.
the code, largely - also public.
ascii_field: Hasimir: also realize
that we are
talking about an experiment which -any- interested reader, at
this point, could replicate.
trinque: incidentally I don't recall anyone here making specific claims about who is behind
this
ascii_field: Hasimir: please realize
that so far you are setting off every possible alarm in my head, 'disinfo agent'
Hasimir: jurov, not so, if
that were
the case I wouldn't be here discussing it
ascii_field: Hasimir: yes. you can write a proggy
to create
this
type of key from any rsa pubkey you like.
jurov: Hasimir: you're
too willing not
to
think about it and handwave it away
ascii_field: they are -all- in
the set from
the heuristic published on mircea_popescu's www.
ascii_field: incidentally, i just walked
the
totality of sks db looking for -all- rsa keys with pub-exponents equal
to 281479271743489.
Hasimir: I never claimed
to have answers, but you guys are locked into
the "it must be a conspiracy" mindset and assuming any criticism is part of
the conspiracy
☟︎ ascii_field: and we are
to believe
that
this happens by accident, with no other bits flipped. ever.
jurov: Hasimir, so I
take some key, mangle "data indicating cipher prefs" and whatnot, and viola, valid signature without original key's owner knowledge?