log☇︎
498200+ entries in 0.31s
nubbins`: <+trinque> ben_vulpes: gentoo has this dumb scheme where you have to symlink /etc/init.d/net.lo to say /etc/init.d/net.eth0 <<< +1
assbot: Logged on 05-04-2015 04:17:34; nubbins`: and uses the bought accounts to "buy" his coins
nubbins`: <+mircea_popescu> http://log.bitcoin-assets.com/?date=05-04-2015#1089169 << i still want to know what was in for blazedout to shill for him. <<< i still have NFI ☝︎
assbot: Tales from the Trenches: I was SWATed | randi.io ... ( http://bit.ly/1xR2SmO )
cazalla: danielpbarron, ha check it out, that freebsdgirl ya had it out with on twitter got swatted http://blog.randi.io/2015/04/03/swated/
[]bot: Bet placed: 2 BTC for No on "Silver at or over $22/oz before October" http://bitbet.us/bet/1132/ Odds: 32(Y):68(N) by coin, 33(Y):67(N) by weight. Total bet: 6.265139 BTC. Current weight: 92,827.
[]bot: Bet placed: 2 BTC for No on "Gold to drop under $1000 before August 2015" http://bitbet.us/bet/1131/ Odds: 18(Y):82(N) by coin, 20(Y):80(N) by weight. Total bet: 5.65237 BTC. Current weight: 86,479.
BingoBoingo: There's probably some subset of compulsive behavior spectrum that desperately wants whatever they are doing to actual be museum'ing
BingoBoingo: Setup a freedom toaster at a conference, some idiots are going to put one up in a space they have access to thinking it will attact passerby outside the conference distortion swirl, same with BTC ATMs
BingoBoingo: Will it's an attempt to make some money for the people selling the boxes, but mostly it's a piece of conference swag some naive souls tried to introduce into the real world.
mircea_popescu: rather than a ludicrous attempt to be hipsterashionable.
mircea_popescu: i originally imagined it's a misguided attempt to make money,
mircea_popescu: im starting to realise the "bitcoin atm" thing is actually just a sort of "freedom toaster" v2.0
mats: https://grsecurity.net/~spender/uderef.txt << for the logs
mats: pointer, userland can control the data (and sometimes, control) flow of the kernel by virtue of providing the attack data in its own userland address range as it's fully visible in the kernel's virtual address space as well"
mats: quoth the spender: "the problem i set out to solve with UDEREF was that many kernel bugs can be exploited (at all or more reliably) due to the fact that on i386 most OSs don't separate the userland virtual address space from that of the kernel. this in turn means that whenever userland can make the kernel (unexpectedly) dereference a userland controlled
assbot: Logged on 02-04-2015 20:59:21; asciilifeform: mats: i can trivially make mincemeat of this by issuing raw dma cycles.
mats: http://log.bitcoin-assets.com/?date=02-04-2015#1084918 << UDEREF is about best-effort userland/kernel separation for exploit mitigation, not limiting the capability of the kernel ☝︎☟︎
mircea_popescu: that'd be the problem.
trinque: I don't feel smarter doing this
trinque: oh god the mundane knowledge you must have to operate it
mircea_popescu: if i wanted to live like that i'd have stayed in academia."
mircea_popescu: "you mean to tell me you wrote down form f.45.b instead of 4.5.fb ?!?!?!
mircea_popescu: trying to install gentoo is like taking an exam for public servancy
mircea_popescu: anyway, it's the most objectionable thing ever, all this list of gotchas.
mircea_popescu: sadly intelligent people are coditioned to fear hurting idiots, instead of enjoying it.
trinque: sounds like a hell of a fun time
trinque: haha, the plank with nail is unstoppable
mircea_popescu: stepping on transvestite cocks and hispster beards, in a swamp of hurt feelings.
trinque: either it's easy to install and becomes the shit-smeared playground, or it's pulling teeth and marginally less shit-smeared, it seems
mircea_popescu: sure, someone could. the moment someone does you get ubuntu - two years of unusable, six months of barely usable and then insta-poettering. ☟︎
mircea_popescu: "someone could solve this"
trinque: can't have that because it wouldn't be gentoo!
trinque: someone could solve this; gentoo has this neckbeard orthodoxy which imo is the only thing preventing it from having a proper installer ☟︎☟︎
mats: and here i thought mp was going to show a moment of vulnerability
mircea_popescu: because it is unacceptable for a world to exist where i may have to spend more than an hour getting a new os running. ☟︎☟︎
ben_vulpes: pressed shitboard all the way down?
ben_vulpes: i-i'm scared, t-trinque
trinque: then there's of course having the right kernel module going
trinque: then start the symlink
trinque: ben_vulpes: gentoo has this dumb scheme where you have to symlink /etc/init.d/net.lo to say /etc/init.d/net.eth0
ben_vulpes: but compiled kernel and gentoo - simply refuses. indubitably attributable to operator error.)
ben_vulpes: (live cd connects through virtualization layer just happily
ben_vulpes: (*damned* frustrating, that networking thing)
ben_vulpes: anyways, that's enough for one day.
ben_vulpes: i have a gentoo that comes up as expected - but sans eth0, and damned if i can figure out why.
assbot: Logged on 05-04-2015 04:36:00; ascii_modem: this invites the question of why should we ever use conventional libc again.
mircea_popescu: http://log.bitcoin-assets.com/?date=05-04-2015#1089208 << apparently we were not the only ones to notice glibc got raped. ☝︎
mircea_popescu: i want it from nsa directly. what is this.
mircea_popescu: ie, my way out of swallowing random binary strange is to get a solid block of binary strange ? from... red hat ? ☟︎
mircea_popescu: http://log.bitcoin-assets.com/?date=05-04-2015#1089192 << maybe i'm from the wrong asylum, but what exactly does "provide a static X" mean ? ☝︎
assbot: Logged on 05-04-2015 04:17:34; nubbins`: and uses the bought accounts to "buy" his coins
mircea_popescu: http://log.bitcoin-assets.com/?date=05-04-2015#1089169 << i still want to know what was in for blazedout to shill for him. ☝︎
assbot: Logged on 05-04-2015 04:12:42; ascii_modem: as someone who only ever knew about it from #b-a links - i thought it was a kinda nature preserve just for folks like woodman
mircea_popescu: http://log.bitcoin-assets.com/?date=05-04-2015#1089151 << quite exactly that, actually. ☝︎
assbot: Logged on 05-04-2015 04:12:26; nubbins`: it's like the usms thing but on the forum
mircea_popescu: http://log.bitcoin-assets.com/?date=05-04-2015#1089113 << ftr, i've given up on it. imo gentoo is too retarded to be usable. ☝︎
decimation: true. it's also possible that the code was acquired from elsewhere, written for some other purpose, and was 'merit-washed' into the ecm module
ascii_modem: but someone -decided- to use the idiot coolie
ascii_modem: quite possibly did not even know, for toyota or toy car
decimation: and that person either *knew* what he was doing or was pathologically ignorant
decimation: somewhere there was a sweatshop where some asian person was committing code to this device
ascii_modem: cheaper than that endangered animal, the actual engineer...
ascii_modem: but because the unreflective imbecile who signed off on it is.
ascii_modem: it is -not!- because the non-ecc chip is cheaper
ascii_modem: but it is important to remember -why-
ascii_modem: some berkshire 'wriggleys' is laughing all the way to the bank
decimation: at least toyota got to pocket $0.50!
ascii_modem: fitted non-ecc ram in a car? enjoy being used as living crash dummy in next test
ascii_modem: fits-in-head is the only answer. though it goes well with a balanced diet of public impalements for wreckerz
decimation: Adlai: yeah I don't think it will even let you link with any modern open source standard libraries
Adlai: something like compcert doesn't help when the libraries have mounds of garbage code, even if it "works," you just get mounds of garbage object code
decimation: if 'we' let vendors hide their software, they will produce turds
decimation: rms was right about this kind of stuff
decimation: one wonders how much of our lives depend directly on such hard and soft turdware
decimation: "Although the investigation focused almost entirely on software, there is at least one HW factor: Toyota claimed the 2005 Camry's main CPU had error detecting and correcting (EDAC) RAM. It didn't. EDAC, or at least parity RAM, is relatively easy and low-cost insurance for safety-critical systems."
decimation: Misbehaviors of Toyota’s ETCS are a cause of UA. "
decimation: Barr's ultimate conclusions were that: Toyota’s electronic throttle control system (ETCS) source code is of unreasonable quality. Toyota’s source code is defective and contains bugs, including bugs that can cause unintended acceleration (UA). Code-quality metrics predict presence of additional bugs. Toyota’s fail safes are defective and inadequate (referring to them as a “house of cards” safety architecture).
decimation: it's in the logs somewhere. point is, there's a whole cottage industry around trying to 'support' C for missions that matter
ascii_modem: or the plane-falls-like-brick one
decimation: aye that's what I'm thinking of
decimation: ^ I tried to use it once, immediately puked when it encountered system libraries
Adlai: sure, but it's not like this is the first time people have wanted to use minimal functionality from existing libraries
decimation: there's this thing http://www.absint.com/compcert/index.htm
ascii_modem: one reason is that it is damnably hard for c/cpp
decimation: ascii_modem: suddenly talk about lisp machines seems cool
Adlai never understood why nobody wrote a tree-shaking compiler
decimation: which gives us glibc turdlets
decimation: ^ what he means, specifically, is that you can enslave your rhel machine to a winblows 'kerberos/ldap' server
assbot: How Red Hat killed its core product—and became a billion-dollar business | Ars Technica ... ( http://bit.ly/1GVabMr )
decimation: http://arstechnica.com/business/2012/02/how-red-hat-killed-its-core-productand-became-a-billion-dollar-business/ < ""We never ever go into a customer and say, 'There's an application that's not supported on RHEL," Cormier said. "If it's supported on Windows, it's supported on RHEL.""
nubbins`: meanwhile windows wants to turn itself into a bunch of sheets of coloured construction paper laid out on a blue tarp
decimation: they want to turn linux into winblows
decimation: all the more reason to use embedded buildroot/minimal distro
ascii_modem: this invites the question of why should we ever use conventional libc again. ☟︎
decimation: so this is not an issue for pogo anyway
decimation: 6) uClibc does not support NSS (/lib/libnss_*), which allows glibc to easily support various methods of authentication and DNS resolution. uClibc only supports flat password files and shadow password files for storing authentication information. If you need something more complex than this, you can compile and install pam.
nubbins`: ok, so the libdl/DSO thing is gone
decimation: well, the redhat glibc static build is pretty much just building glibc with -static
nubbins`: go small or go to the mall