log☇︎
66000+ entries in 0.36s
Framedragger: it's not an algo, i was referring to a possible fix of a further bad-thing that happens when key stolen. bad-thing is: once your key stolen, attacker (in that broken tox scheme) can impersonate as *anyone* *to* you.
Framedragger: no, there is no such thing, i said it's social. but hold on:
mircea_popescu: trinque the hole stuff is eerily apt for the article i'm just brewing.
Framedragger: http://btcbase.org/log/2017-04-28#1649507 << at the risk of committing a slippery slope / false equivocation / something, orly? is this not unavoidable sometimes. i do realise "b-b-t muh kernel! is not a good answer ☝︎☟︎
Framedragger: right, right, i should have known (you had mentioned this). cool :)
trinque: "oh I'll run around and gargle ideological cum from wherever I find it, invariably because of my own wish fulfillment fantasies and onanisms"
Framedragger: (re. else, later, moving self. but just a quick note re turing complete, well yes a bignumtron should not in itself be turing complete, but i wasn't sure how much additional stuff was planned on top)
trinque: I remember the church derps used to say things like "there's a god-shaped hole in everyone". The homoeroticism of that aside, does appear that there's a "metaphysical domination" shaped hole in most folks. looks like this when nobody in your land bothers to stick it in.
asciilifeform: and in the end, 'We acknowledge that the issue exists and will work towards fixing it. ... I will say this very clearly once again: there is an avoidable security flaw in the Tox handshake. This is not something someone made up. The effect is that if your secret key is stolen, an attacker can impersonate anyone to you. We will fix this issue, most likely by adopting Noise for handshakes.'
asciilifeform: 'Perhaps Tox doesn't care about this, or about many of the threat models that modern AKEs are designed to protect against, in which case, probably it's fine to continue using your homebrewed crypto. But if you actually desire some kind of high assurance security, I strongly recommend not building your own protocols and instead use something designed by an educated expert, such as Noise.' << lol , schneier never dies.
Framedragger: i just thought, asciilifeform's bignumtron is probably not even turing complete yes? if it's not, that *a big plus*
mircea_popescu: well, maybe. i'm not really able to evaluate a framework rightnao.
mircea_popescu: (predict : i know what it will do in the future ; understand : i know what it is doing now ; recover : i separated it from what it did in the past.)
Framedragger: mircea_popescu: well, you're right, damn. looking at list of thing signal gives though, it's just clean functions for doing crypto. i dunno. i think in the case of tox, its crypto may actually map well to noise, in the sense of them being able to just use stuff that noise provides, and not reimplement same shit in broken fashion
mircea_popescu: but to return upstack : if i can't enumerate the states of my machine, i will thus therefore worry about it ending up in a state i can't predict, understand or recover. this is rational.
Framedragger: mircea_popescu: no disagreement. i honestly don't know re framework, i do think they just abused a term (which isn't a great signal)
trinque: questions remain on how best to handle incoming deposits; I hear ben_vulpes might be working on something to help
mircea_popescu: abstraction has this cost, that if i have to maintain AB i spend twice the time if i maintained an A and a B.
Framedragger: damn i need semantic search on logs
Framedragger: i thought you were *for* a crypto library where operator would not have to use (by which i mean abuse, because he will) low level primitives?
mircea_popescu: i'd fucking worry. and i'd have great cause to worry, too.
Framedragger: no, i mean that you can embed it in your $crapchatapp and not worry about IV reuse
Framedragger: yesyes, many issues, sure. and in regards to openssl, you know what i meant, the interfaces that the openssl library exports to its operators
Framedragger: makes sense to have core building blocks. i see protocol framework here in the sense of openssl being a protocol framework
Framedragger: i think by 'you can create protocol' they meant a high degree of abstraction kind of protocol. e.g. stateless or stateful transport security, etc.
mircea_popescu: (at least that's what i parse the words to mean, framework = "standard with a lot of user serviceable knobs")
Framedragger: i'm not convinced it's a very bad idea. i'm not advocating such 'we love complexiti' architecture of course
Framedragger: ah. well, i thought it was a set of lower-level crypto interfaces on which you could build higher-level protocols
Framedragger: oops by 'certainly not' i meant 'certainly pos compared to alf's
Framedragger: i mean, 'compared to what'. certainly not compared to asciilifeform's actually-fucking-constant-time crypto architecture
Framedragger: here i have a problem because i don't think noise is necessarily bad; or that e.g. signal protocol is necessarily bad (yes names are barf'y)
Framedragger: i think in the end they managed to address the fact that they should address it
Framedragger: http://btcbase.org/log/2017-04-28#1649251 << as the case currency stands with regards to tox, the saddest thing about it is not its pos code, pos design (i think there are some attempts to have a design?), but that some arguably should-know-better smart people are sinking time into it ☝︎
trinque: obviously I'll also make special cases for things like trb deeds.
trinque: at which point I'd be more than happy to serve up whichever bits forever
trinque: I can help ya make it eat more large objects (don't mind the archivng) but eventually it's going to need to either deplete the deed author's wallet account for $amountOfBitsServed, or something along those lines
trinque: danielpbarron: anyhow for now I request that you use deedbot as something to check against, and not as a CDN/archive.is
mircea_popescu: ben_vulpes i hope you bought a cape by now.
a111: Logged on 2017-04-28 17:50 Framedragger: actually interestingly, trilema.com also renders verdana here on firefox. but i think that ben_vulpes' site somehow managed to use "verdana italic" as "regular verdana", which looked horribru. but i'm not sure what that even
danielpbarron: i wanted to preserve a copy of it for the future in case it's no longer available anywhere else
trinque: danielpbarron: I'm gonna stop my bitcoin node a sec
trinque: know what? I bet it's just a timeout happening
mircea_popescu: i recall that conversation.
trinque: otherwise your feature request is noted and I'll have to do something about eating bigger files
danielpbarron: i asked if i should do that and someone specifically told me to do it this way
danielpbarron: unrelatedly, trinque why can't i deed stuff? i tried again with a smaller thing and i got the same result. bot says "deeds online" much later but my entry isn't on the website
trinque: I've seen both "I hate taking baths" and "holy shit there are zero acceptable men in my wot" variants
danielpbarron: i've met her dad. he's a nice guy
trinque: danielpbarron: I always take "anarchist chick" as "I have daddy problems omg look at me breaking the rules"
danielpbarron: i have spent considerable time in person with her in which she is very friendly, and she knows well about tmsr, this goes back several years
trinque: man, I was hoping for some kind of spy vs spy situation where danielpbarron thwarted her honeydicking
Framedragger: meh. if i was told out of the blue like that, i may respond the same :) (contra is of course "ignorance is not an excuse")
danielpbarron: http://i.imgur.com/79t5xNm.jpg
ben_vulpes: BingoBoingo: i thought about looking up local fairs
Framedragger: it's the ultimate zoo, what can i say
Framedragger: you can view <pre> as a content/semantic tag, and 'style' would be 'shit in css'. i mean, if we truly believed in content/form separation on the web
asciilifeform: ( imho -- i'd much rather have everything monospace, if could only have one. )
Framedragger: actually interestingly, trilema.com also renders verdana here on firefox. but i think that ben_vulpes' site somehow managed to use "verdana italic" as "regular verdana", which looked horribru. but i'm not sure what that even ☟︎
ben_vulpes: i am looking. what in particular are you objecting to?
asciilifeform: i'm half-convinced that just about all commonplace linux fonts were specially made by wreckers in '90s.
ben_vulpes: asciilifeform: i must confess -- styling html makes me impotent
asciilifeform: ben_vulpes: i must confess -- the font on your www is barely readable on my boxes. gloms horizontally.
lobbes: http://logs.minigame.bz/2017-04-28.log.html#t06:10:10 << pete_dushenski, if I send a plaintext your way with lobbesbot's commands could you add it to your list?
mircea_popescu: i've been contemplating the point of whether more than 1 in 1000 humans actually have need for electrical power. ☟︎
mircea_popescu: for a moment there i almost thought there's something wrong with phuctor.
mircea_popescu: and this is symptomatic of the sheer confusion OF EVERYTHING these fuckwits live in. "Personally, I will only sign keys if I have done at least casual checking or very careful checking. I will not sign a key if I have not verified the ownership of the key. This weakens the Web of Trust." and then eats up weak hashes and government paper. because why the fuck not, PERFECTLY coherent with his "careful" stance.
mircea_popescu: aaron toponce (goes by eightyeight in that chat) has possibly the lulziest "gpg key signing" item i saw : https://pthree.org/my-pgp-key-signing-policy/
shinohai: I'm dying of a snakebite, but won't take any anti-venom called fucksnakes
shinohai: I'm still incredulous that one guy is so hoity-toity he won't say FUCKGOATS
mircea_popescu: if i one day actually wish to entertain adolescentine farts about "qc" or such nonsense ima just invite for dinner any of the bois oogling my women from a safe distance.
mircea_popescu: in other news : ##crypto did 530/738 lines as join/part spam Apr 27 13:21:01 to Apr 27 21:26:05. the remainder 208 lines were 90% of the material and about 450% of the signal us. i think asciilifeform 's evaluation prevails.
mircea_popescu: i couldn't even bring myself to salt the slugs.
mircea_popescu: BingoBoingo in fairness i was never serious about it in the productive sense, more like an enjoyable passtime.
mod6: BingoBoingo: oh yeah, my tomatoes do well. i did 22 plants 2 years ago, 10 last year. im most fond of the cherries & romas.
BingoBoingo: I am pretty sure I mentioned nearby horseradish festival
mircea_popescu: i had a monsoon here four days a week since mid april.
mod6: <+mircea_popescu> BingoBoingo did i tell you about that time i grew the world's saddest eggplants ? << lol. last year, I got 1 out of like 3-4 plants. it looked more like a purple carrot.
BingoBoingo: I do remember the artichokes
mircea_popescu: BingoBoingo did i tell you about that time i grew the world's saddest eggplants ?
deedbot: http://trilema.com/2017/how-i-found-some-area-of-expertise-in-mathematical-cryptography-one-expects-to-find-here-and-there-plus-divers-spots-missed-while-shaving/ << Trilema - How I found some area of expertise in mathematical cryptography one expects to find here and there ; plus divers spots missed while shaving.
phf: well, i want to also indicate that at the end of the loop the value must be 0
asciilifeform: if i correctly understood what phf wanted.
phf: what do i do with that loop_counter_overflow (technically underflow). it will never get triggered, but i feel like there needs to be some way to not leave it dangling. an assert of some sort
phf: you overestimate the state of things here. i only just managed to ~actually~ get a working very very naive expt
phf: asciilifeform: if i have procedure foo(x in; y out), and i'm calling it with foo(a, a); is it up to procedure to ensure that y is not clobbered before x is used, or is it more that you don't call with a same variable in in and out?
asciilifeform: incidentally BingoBoingo the conibears sprung many times ( and i tested with a stick, hair trigger, quite sensitive ) and caught 0.
phf: never the the less, i put a hack that fixes the issue without using <pre>
phf: asciilifeform: browser doesn't render repeat whitespace, unless you do <pre> but then, i believe, it doesn't automatically wrap lines
a111: Logged on 2017-04-27 18:55 Framedragger: re. american who said sth interesting, i volunteer david lewis (the philosopher)! inb4 BingoBoingo's "only american philosopher was james joyce"
asciilifeform: for I in Integer range 1 .. Exponent loop
asciilifeform: ( and i will note, all -- afaik -- implementations of bignumtron, fail this litmus )
asciilifeform: i am no pro trishop, but bible and koran both were silent on what System.Storage_Unit oughta equal...
mircea_popescu: i guess that;s a point.
mircea_popescu: oh i thought "the quanta of simultaneous operation"
asciilifeform: i wonder if there is any other language, than cl and ada, in reasonably common use today, that does not presuppose 8-bit bytes.
asciilifeform: kyoto cl. clisp. franz. lispworks. scineer. (last one - i never tried, cannot say with certainty how standard-compliant)
phf: i decided to learn ada today
asciilifeform: ( and i did not even post any example of use, much less a makefile. so we have here a fella who definitely does his homework ! )
asciilifeform: i was about to be excited.
phf: asciilifeform: i did a thing ☟︎