log☇︎
498100+ entries in 0.326s
mircea_popescu: http://log.bitcoin-assets.com/?date=05-04-2015#1089472 << ahh the excitement of the geek that laid an egg :D ☝︎
assbot: Logged on 05-04-2015 16:50:58; trinque: I don't want decisions made for me; I want bricks laid for me.
mircea_popescu: so it's done once not just at level you, but at the whole wot level.
assbot: Logged on 05-04-2015 14:14:53; ascii_modem: that part takes me 1h at most. it is deliberately manual, like the sub reactors, or therealbitcoin
mircea_popescu: it was pretty clear at the time the ru "sanctions" were nailgun suicide.
mircea_popescu: beijing accords or wtf they were called
Birdman: Then I suppose I should read up on the logs, thanks.
mircea_popescu: this is not exactly new. was discussed here back in the lead-up to the cn-ru financial compact
Birdman: Apparently nations are falling head over heels to switch over
Birdman: [20:57] <Birdman> thoughts on the Chinese's AIIB? http://www.zerohedge.com/news/2015-04-02/us-has-screwed-its-approach-chinas-aiib-former-us-secretary-state-blasts
mircea_popescu: marginally amusing read, stuff like http://www.kalzumeus.com/2015/03/09/announcing-starfighter/ (grep for "Sounds like BS, right. I know. I’m a generic web programmer (yay Ruby, meh JavaScript, boo low-level anything). The last time I played a CTF, written by my cofounders, they had me breaking into locks controlled by micro controllers which ran embedded assembly code.")
mircea_popescu: (you can trace Patrick McKenzie / starfighter if you feel like it0
mircea_popescu: it is kind-of fascinating for me that they were actually this unprepared for gavin getting headshot.
mircea_popescu: pretense to the contrary is just that, pretense, readily explained by the desperation in usg quarters post their loss of their main asset in here.
mircea_popescu: it's entirely untrue, and a poor attempt at trying to salvage some clout for the power rangers.
asciilifeform: ^ anything from that link other than factual ?
nubbins`: absent title: "the bitcoin protocol doesn't exist"
BingoBoingo: mats: "The packages, at 4 inches by 6 inches, are not easily concealed, he said. And because of the single-use packaging, he said, it would be easier to spike a punchbowl with a large bottle of rum." << I was telling people you wouldn't lose volume by powdering the stuff
assbot: Log In - The New York Times ... ( http://bit.ly/1D9aB02 )
asciilifeform: ;;later tell mircea_popescu got your msg but not his reply, it was keyed to you only
nubbins`: mildly annoying that i've got a binary but can't reproduce the process
nubbins`: i think i'm maybe just ripping one or two things too many out of it
nubbins`: anyway, the general idea is to use bcp to rip everything out of boost that doesn't belong there
nubbins`: man for the life of me i can't reproduce these build steps
assbot: TI-89 Bitcoin Diceware Tool Released | Qntra.net ... ( http://bit.ly/1DOW9Lp )
danielpbarron: not that gentoo can't do those things, but the installer is actually somewhat automated
danielpbarron: if you're used to debian, OpenBSD isn't such a jarring experience
assbot: Logged on 05-04-2015 05:52:05; mircea_popescu: because it is unacceptable for a world to exist where i may have to spend more than an hour getting a new os running.
danielpbarron: http://log.bitcoin-assets.com/?date=05-04-2015#1089295 << OpenBSD is very easy to install, so long as you have hardware on which it is easy to install ☝︎
ben_vulpes: hafta upgrade from os x 10.9 to 10.10 to cut ios builds
ben_vulpes: me pogo's at the office ☟︎
nubbins`: i did this by running make nconfig after make pogoplug_defconfig and adding them manually
nubbins`: if you want to be able to build bitcoind with your buildroot toolchain, you'll have to add a few options to the config
assbot: The BTC-dev March 2015 Archive by thread ... ( http://bit.ly/1az0cjE )
ben_vulpes: awww shit yee i have sshd into the gentoo box!
ben_vulpes: nubbins`: i have an enp0s3 as well, don't really know what to do to turn it into/use it as eth0 tho
Apocalyptic: ^ only for that fact alone it's a good experience ☟︎
ben_vulpes: but hory shit have i learned things about the linux shitpile
nubbins`: would be nice to get some people to test this patch when it's ready ☟︎
nubbins`: has anyone besides me and alf attempted the portatronic buildroot?
assbot: Logged on 05-04-2015 05:54:27; trinque: someone could solve this; gentoo has this neckbeard orthodoxy which imo is the only thing preventing it from having a proper installer
trinque: ascii_modem | http://log.bitcoin-assets.com/?date=05-04-2015#1089297 << lol installer?!! as in copying other folks' bins over? ick << nah, just bash script that plonks you into a partition editor, then a list of architectures, then has you pick a stage, etc; script the scriptable parts of the manual, and leave everything that should be.. manual :D ☝︎
mircea_popescu: pls to make a proper patch in full glory so people can benefit from fruits of your genius.
nubbins`: imagine, i thought i left this life behind.
nubbins`: but i don't think it's a *terrible* idea for our install script to only compile the parts of boost that we need
nubbins`: or if they'd rather do it manually as needed
nubbins`: also the bcp stuff could totally be included in same, not sure if this is something people want
nubbins`: ok fwiw that auto.sh does have problems, i'll try to polish it later
nubbins`: i'm gonna try this all from scratch once more just to verify
nubbins`: you'll need to use bcp (see logs) to trim out the fat and gristle
nubbins`: please note the Boost section -- i'm using a custom subset of the full boost libs
mircea_popescu: at least looks to me like something along those lines
mircea_popescu: yeah apparently uclibc is made specifically because of this/similar issues
decimation: apparently uclibc has a dns client that opens /etc/resolv.conf itself, built into the code
mats: well ofc provably preventing the exploit is preferable. PaX like a custom Gentoo build, relying on the attacker not knowing it's there, and/or failing to react accordingly
nubbins`: so that's static bitcoind, running on pogotron, built with portatronic toolchain.
nubbins`: but i think this is sufficient proof, yes?
nubbins`: no storage attached at all, so i can't tell if it, y'know, does anything
decimation: although the question of what it does with gethostbyaddr() is a good one
nubbins`: ascii_modem actually it was the client side that baffled me, heh.
assbot: Logged on 05-04-2015 14:21:21; nubbins`: w/e the libnss thing is. details escape me now.
decimation: well, it does need rpmbuild at least, it would probably be difficult to work without redhat
nubbins`: /home/ftp # tftp 192.168.2.23 just spits out usage instructions
nubbins`: ugh c'mon tftp
ascii_modem: decimation: the source rpm still needs rathead to build
assbot: Logged on 05-04-2015 06:26:08; mats: http://log.bitcoin-assets.com/?date=02-04-2015#1084918 << UDEREF is about best-effort userland/kernel separation for exploit mitigation, not limiting the capability of the kernel
ascii_modem: http://log.bitcoin-assets.com/?date=05-04-2015#1089320 << fuck 'mitigation' and the surrender built into the word. i insist on -extirpation- -- with hot iron ☝︎
assbot: Logged on 05-04-2015 05:43:38; mircea_popescu: ie, my way out of swallowing random binary strange is to get a solid block of binary strange ? from... red hat ?
decimation: http://log.bitcoin-assets.com/?date=05-04-2015#1089276 < I apologize for failing to convey my meaning well. I meant that redhat 'provides' this as a source package, and therefore one could examine exactly how they did it - not to swallow the binary without inspection. Source is here > http://ftp.redhat.com/redhat/linux/enterprise/6Server/en/os/SRPMS/glibc-2.12-1.149.el6_6.5.src.rpm ☝︎
ascii_modem: i still want to know why gentoo has the only honest (re: stdint) gcc !
ascii_modem: the -only- real test
nubbins` scrambles to xfer to pogo
ascii_modem: though i'm pretty sure it left a dns turd in somewhere - so a bit odd, this
nubbins`: oh right, yeah, the dns-snip patch killed that
ascii_modem: until killed the dns crap
nubbins`: w/e the libnss thing is. details escape me now. ☟︎
nubbins`: why did i not have this issue
mircea_popescu: what was bitcoind using that ended up pulling libnss via glibc ? gethostbyaddr() was it ?
assbot: Logged on 05-04-2015 05:55:23; mircea_popescu: sure, someone could. the moment someone does you get ubuntu - two years of unusable, six months of barely usable and then insta-poettering.
ascii_modem: that part takes me 1h at most. it is deliberately manual, like the sub reactors, or therealbitcoin ☟︎
mircea_popescu: and i'm not counting whatever it takes to compile. just, it is not sane to expect me to go through laundry lists for minute after minute after minute.
assbot: Logged on 05-04-2015 05:54:27; trinque: someone could solve this; gentoo has this neckbeard orthodoxy which imo is the only thing preventing it from having a proper installer
mircea_popescu: i didn't say it should take YOU an hour. i said it should take me an hour.
mircea_popescu: and you do not see a problem with this ?
assbot: Logged on 05-04-2015 05:52:05; mircea_popescu: because it is unacceptable for a world to exist where i may have to spend more than an hour getting a new os running.
ascii_modem: http://log.bitcoin-assets.com/?date=05-04-2015#1089295 << ftr a new gentoo box usually takes me at least a week - if on sane hardware ☝︎
mircea_popescu: i can. ocasionally i choose not to.
ascii_modem: i find it odd that mircea_popescu does not handle linux in same way as lathe or - hell - dental work
mircea_popescu: again, entirely separate propblems, these.
nubbins`: if you want to complete the picture, tell me your handshake is limp and clammy
nubbins`: <+mircea_popescu> a lathe is the essence of unusable. <<< o.O i bet you have soft hands
ascii_modem: me, i find all those -other- distros, the ones that insist on littering my disk with all those bins i didn't ask for and that werent built in my home - unusable
mircea_popescu: a lathe is the essence of unusable.
ascii_modem: mircea_popescu: gentoo is not so much a 'usable linux' as a -machine for building a usable linux-. sorta like 'buildroot'. would you also say that, e.g., a lathe - is 'unusable' ?
assbot: Tales from the Trenches: I was SWATed | randi.io ... ( http://bit.ly/1a4Cknf )
nubbins`: <+cazalla> danielpbarron, ha check it out, that freebsdgirl ya had it out with on twitter got swatted <<< this imo is explicit admission by her enemies that they have no external genitalia
nubbins`: now it's happening when i try to (re-)compile bdb rather than when i try to compile bitcoind
nubbins`: okay, this is good:http://pastebin.com/raw.php?i=KKWE8Spe
nubbins`: i like this guy
nubbins`: try ifconfig to see if yours is same