log☇︎
6600+ entries in 0.04s
Framedragger: sure, open source culture is mostly a pile of crap, with little to no reflection on the culture *itself*, hard to disagree with you here. ☟︎
Framedragger: *many
Framedragger: (well to be true, 'throw away openssl' has been seriously contemplated by any a folk recently, i would wager a guess. but perhaps much less so with the latter, sure.) ☟︎
Framedragger: s/afaiic/afaiac/
Framedragger: my echochamber saturation is nearing 100% but not yet there ;)
Framedragger: 'the light'
Framedragger: asciilifeform: i guess you have little patience for spotting potentially hopeful people, and bringing them up to speed on $ideology / teaching them / etc. which is absolutely understandable, afaiic. ☟︎☟︎
Framedragger: the whole unidirectional diode thing is nonetheless cute, if not truly original or anything
Framedragger: asciilifeform: yes i saw it: http://btcbase.org/log/2016-07-17#1504181 ☝︎
Framedragger: sure
Framedragger: "free hardware"
Framedragger: "on top of"? but hence his whole airgap thing ☟︎
Framedragger: asciilifeform: (maqp had mentioned that tpc-cev may be outdated, mind. just fyi)
Framedragger: asciilifeform: i see your point. but to me "just trust in pfs for both {rsa-4096, aes-256}" still sounds pretty crazy
Framedragger: ben_vulpes: war != coup but ok
Framedragger: (well, all implementations of openpgp anyway ^ )
Framedragger: i suppose so.
Framedragger: asciilifeform: actually with pgp you'll just end up trusting your much dreaded aes256 since openpgp will do the whole 'session' thing as you know
Framedragger: no pfs either
Framedragger: difficult to organize coups without the 'I'. the (shitty shitty) turkey coup used whatsapp incidentally ☟︎
Framedragger: (i do realize i'm invoking a tu quoque of sorts)
Framedragger: asciilifeform: what would you recommend for secure IM right now?
Framedragger: doesn't have to be. but, sure, we all have limited time under the sun, so
Framedragger: that i agree with
Framedragger: (the impression was "crazy smart guy")
Framedragger: so, fair enough
Framedragger: it was probably the about page where you ranted about how you were sitting in $lecture thinking about a generic associative notation system etc etc, and realizing it's a slippery slope to hell and you need to implement a lisp machine
Framedragger: hm honestly, maybe i didn't :)
Framedragger: well, let me recall if perhaps i had the same first impression when encountering your blog ca. 2010
Framedragger: it's quite alright without being too unique/revolutionary. e.g. https://maqp3d.wordpress.com/2015/09/28/whatsapp-vs-textsecure-a-closer-look-at-axolotl/
Framedragger: his blog https://maqp3d.wordpress.com/
Framedragger: a111 quoted in reversed order, argh.
Framedragger: incidentally prolly just grokked the main point of gossipd, i.e. http://btcbase.org/log/2016-02-07#1399507 + http://btcbase.org/log/2016-02-07#1399508 ☝︎☝︎
Framedragger: imho more than just lulz. but agree re 'hopelessly alone' comment
Framedragger: yeah just finished reading everything
Framedragger: that's too bad
Framedragger: ;;seen maqp
Framedragger: and some exchanges will add 'ETHC' (classic non-HF ethereum) pairs. popcorn will be consumed
Framedragger: more ethereum lols - https://www.reddit.com/r/ethereum/comments/4t82uq/replay_attack_redux_ef_devs_confirm_the_issue_is/ - so da developers are set on hard forking, but it is super unclear who's gonna support what. etherfolk are startled at the unthinkable possibility of two chains resulting from this mess. whoddathought. quality entertainment!
Framedragger: but at this point im more interested to try my hand at 'p2p/federated content system', a la mp's e2e encrypted generalized forum idea, whatever this resolves to in the particular.
Framedragger: i guess the only way to convince people would be to present a working PoC with working spam mitigation, hm.
Framedragger: sure, it *may* descend into madness, you're right!
Framedragger: *wysiwyg
Framedragger: not saying that it'd be wisiwyg-pretty
Framedragger: each comment saved as separate file, to be removed etc using normal system tools; any modifcation under tree triggers static content regeneration
Framedragger: i'm amused that it's hard to find something like this, i.e. static generator _and_ a comment handler component
Framedragger: (maybe i just described a spec that i should one day implement, heh)
Framedragger: jurov: that, of course, is a problem. but surely "everything dynamic or everything static & no comments" is a false dichotomy? could you not have an html form which POSTs to a separate dynamic handler which is only responsible for comments? a "current comments" static html page is generated upon every new approved comment, etc.
Framedragger: ah, this was suggested, http://btcbase.org/log/2016-07-03#1496088 etc. ☝︎
Framedragger: regarding LAMP stacks and blog software: static site generators are there for a reason. significantly smaller codebases and attack surfaces cf. wordpress. just sayin'. ☟︎☟︎
Framedragger: lolwut, Apocalyptic was wrong by deciding to play in the wrong sandbox? Ok. ☟︎
Framedragger: kiwiirc is pretty, yeah!
Framedragger: ah, actually freenode blocks connection eventually anyway since tor node in dnsbl and whatnot, so that's not a good argument anyway i guess
Framedragger: mircea_popescu: there's no captcha for the kiwiirc webchat thing only if your ip request is quite unique etc. if you e.g. go from tor (*ducks*) then you get presented with the lovely cloudflare captcha where you have to solve shit for multiple times until you pass. but at least no default captcha i guess
Framedragger: *to include the new ssh_openpgp_diff_2016-07-13.tar is what i meant
Framedragger: asciilifeform: and signature (updated checksums file to include the new ssh_openpgp_all_2016-06-20.tar): http://95.85.10.71:8000/all/openpgp/SHA256SUMS.txt
Framedragger: (oh, and 1. will sign a checksum at some point (soon); and 2. the tarball contains three compressed files which expand into three dirs, with ~600k files per dir; one file = one openpgp key, same as last time)
Framedragger off to town
Framedragger: this concludes the ipv4 ssh key scan (the new keys are due to re-scan + the previously-excluded hetzner hosting ip ranges). i may rescan in a couple of weeks or a month to see how many new etc (and in general it would be a good and interesting exercise, etc.) some kind of writeup will follow...eventually
Framedragger: asciilifeform: i have moar ssh keys for ya: http://95.85.10.71:8000/all/openpgp/ssh_openpgp_diff_2016-07-13.tar (diff from that 10M bunch, i.e. only new ones) 920M file, 1.82M new ssh keys. ☟︎
Framedragger: yeah i know (http://log.bitcoin-assets.com//?date=26-06-2016#1451011) ☝︎
Framedragger: oh the sweet naivete and woes of internet's ephemeral aspects: has anyone (re)read the bitcoin foundations declaration of independence recently? http://thebitcoin.foundation/declaration.txt that link tied to taxation of bitcoin profits does not work anymore, for example. i guess the declaration's main matter was in spirit anyway
Framedragger: http://btcbase.org/log/2016-07-13#1502525 << hmm ok.. even his workflow wouldn't differ much now that i think of it.. he reviews patches sent via email etc. and he sure as fuck uses his wot fiercely. so, yeah.. ☝︎
Framedragger: admirable architecture, that
Framedragger: hmh i guess they can...
Framedragger: ah, right i see what you mean
Framedragger: ring0 enuf for everyone
Framedragger: sure
Framedragger: i mean, why not maintain them separately etc
Framedragger: well, it's hard to disagree, on second thought.
Framedragger: linus chose to do the whole 'driver is part of kernel' thing, yeah.
Framedragger: riiiight
Framedragger: i guess the fact that you need to arrive at a single kernel executable file does not hinder this (cf. all those exokernel projects, not that exokernel architecture is the right approach)
Framedragger: so in the case of an os kernel, you'd just make sure to break down the source into codebase modules so to speak?
Framedragger: watching linux kernel dev be managed with v may, i imagine, be a sight of entertainment, but then something tells me alf et al. are against such monolithic codebases in the first place ☟︎
Framedragger: thanks asciilifeform
Framedragger: and prolly retink them laters as you relisten etc
Framedragger: 'cause you do have to really follow and think about the concepts used in the thing if you want to enjoy it beyond the superficial-level "wow such pretty noise"
Framedragger: heh. i listened to a weirdo almost-atonal musical piece yesterday by a friend who's doing sonology / electronic music (yeah such precise terms, i know). it was fkin great, lots of effort but worth it methinks. but then, the point is that this also counts as 'interpretation', possibly
Framedragger: heh, yeah, i see what you mean. trilema allows for more elaborate.. structures
Framedragger: for shizzle
Framedragger: mircea_popescu: http://btcbase.org/log/2016-05-20#1469423 fwiw but it's now much. i'm now convinced i had originally misinterpreted. at that point i was assuming that you had basically thrown out git in your mind as useless as it had been tainted with too strong an association with github. if that even makes sense. ☝︎
Framedragger: searchin'
Framedragger: aok
Framedragger: how do i search for multiple words associated by OR, not AND? $s works for this but btcbase's search doesn't, right?
Framedragger: regarding the association: previously i got the impression that you thought git and github are now being confused and hence best to get rid of git and start anew anyway. maybe wrong impression
Framedragger: ^ but re my q, i should first understand v...
Framedragger: mircea_popescu: yeah, acknowledged
Framedragger: this may sound like bait, but.... could you not just use signed commits in git, and enforce use of those commits, and use `git blame`? is the argument against this the usual "git is a shitload of code, best to start anew [and also without existing political associations re. github etc.]", or sth more than that? ☟︎
Framedragger: mircea_popescu: not yet, and that's due to lack of time, and generally lazy vibes over the summer (a festival or two, reading books etc) i know i should take a careful look at v, and i dun want to botch it, hence terribly slow with it
Framedragger: http://btcbase.org/log/2016-07-12#1502117 << myeah, maybe it's not even that much of a problem; just, lame.. ☝︎
Framedragger: literal lol :D
Framedragger: so husserl's bracketing technique in phenomenology is used for signaling online harassment targets in sociul meedia. world is truly a place of wonder ☟︎
Framedragger: the excluded ranges for anyone curious: http://95.85.10.71:8000/all/blacklist.conf.txt (the ones before "# temporary" are default for masscan, based on ipv4 reserved ranges from IANA)
Framedragger: look at*
Framedragger: will be interesting to later also look how many of the originally-online nodes were down in this new rescan, and how many new ones appeared (i.e. when hetzner ranges are removed).
Framedragger: (i.e. i had originally planned to re-scan those hetzner ranges and include them in the original tarball, but ended up postponing that.)
Framedragger: from rescan of ipv4, from 'untainted' ip addresses. the ">1M" is due not only to rescan itself, but also because i had excluded ipv4 ranges for hetzner which had been sending tons of abuse complaintz. i can handle those complaints now. but i had forgotten about exclusion of hetzner ssh hosts. the new tarball will fix this (it won't include any old ssh keys, only new ones).
Framedragger: and while on topic, there'll be another tarball soon asciilifeform - considerably smaller, but still > 1M
Framedragger: trinque: re. "ssh ones are a bit long." << yeah you're right, need to shorten them..