log☇︎
7300+ entries in 0.025s
Framedragger: thanks
Framedragger: (i mean, ip address as it appears in an IP header)
Framedragger: (i hope you lost any hope in ip address in packet as a form of identity/proof/whatnot, though!)
Framedragger: both, i suppose, or either would be interesting. gossipd probably provides decent constraints and framework for thought, so might as well stick to that
Framedragger: ..getting to it. lots of stupid jokes to sift through. but thanks, will continue
Framedragger: how do you ensure that it's still bob you're talking to, or do you not care (on some technical or literal level)
Framedragger: right, so your idea of pfs is perfect unlinkability, so to speak. of course this makes sense
Framedragger: right.
Framedragger: butbut, yes of course, hence the whole idea of otr actually changing session key constantly, for plausible deniability and all that (and won't argue that it's not broken)
Framedragger: *decrypt
Framedragger: hm, see i put more weight on the "can't encrypt if permanent key is compromised" part in pfs
Framedragger: i think i expressed myself badly, though.
Framedragger: right, the example, however, only probed a general scheme, and no protocol particulars. but fair enough
Framedragger: however if you want to be sure that it was bob who constructed this session that you're now participating in - your old friend bob will have to show that he owns the private key
Framedragger: all i meant was that you e.g. have an otr fingerprint - which represents a permanent keypair. but your otr client establishes ephemeral key per each session
Framedragger: ephermeral keys are usually used for encryption; i don't think the functions of permanent vs. ephermeral keys are mutually exclusive at all
Framedragger: asciilifeform: won't argue as it's obvious that it'd be fruitless. i can certainly see the viewpoint. "what he pushes == snakeoil" is a strong accusation tho. however, i'm not prepared to provide defence till i'm old, weary, and wise (or at least till i'm old)
Framedragger: concepts not contradictory, you use one as session key, the other to link sessions in terms of authorship / who participates in said sessions. unless you meant something more technical/particular mircea_popescu
Framedragger: asciilifeform: btw the prekey idea is sound, with or without ad hominem
Framedragger: but i'm too tired now.
Framedragger: logs are no help btw
Framedragger: asciilifeform: bullshit.
Framedragger: (incidentally, author has a nice writing voice, https://moxie.org/stories.html / moxie.org)
Framedragger: "this one weird trick" kind of thing, not too smart, but possibly just smart enough.
Framedragger: this way one can (in principle) achieve pfs for communications between otherwise offline nodes
Framedragger: in other news, am casually looking into perfect forward secrecy in *asynchronous* communications. this *may* turn out to be relevant for gossipd enthusiasts and connoisseurs in the long run, too. the most simple way appears to be for nodes to generate a bunch of "pre-keys" (halves of ephemeral key exchange), and store/cache them somewhere (obvs signed by their permanent identity key), a la https://whispersystems.org/blog/asynchronous-sec
Framedragger: mircea_popescu: apologies - too much presumption on my part, then!
Framedragger: thestringpuller: yes, fair enough
Framedragger smiles
Framedragger: > kakobrekla: and if someone is missing mps clothless pic, please enjoy https://bou.si/4c/1465748545019.png
Framedragger: but to show this / give examples of some differences.. eh fuck that, too much effort
Framedragger: the mapping between the sets is not necessarily bijective, i.e. one-to-one
Framedragger: oh shit i meant
Framedragger: i would maintain that the socialist set and the doesnt-deserve-bitcoin set are not necessarily mutually exclusive; at least this cannot be known a priori. mp et al. would argue that it can; so be it
Framedragger: thestringpuller: "do people deserve bitcoin?" is this still a non-rhetorical question? :)
Framedragger: vc: cool, and i remember you saying this the first time otherwise wouldn't have done it, just wanted to let you know that these particular scans won't (*completely*) trash the reputation of the currently assigned ipv4 :)
Framedragger: (gun resume and finish ipv4 open ssh port scans tonight with vc's node (vc: it's randomized ip range scan and only 30 kpackets/s, before you ask), and then deploy ~10 vps nodes for ssh key extraction, feeding port-22-open-list from the former into the latter.)
Framedragger: *variations of
Framedragger: and yeah that's hot
Framedragger: mircea_popescu: yeah afk shit is calming down, so getting back to variations packet madness :D
Framedragger: vc: yep, all good otherwise !
Framedragger: right i'll stop diddling with mac addresses and do some actual packet-sending work heh
Framedragger: vc: thanks for clarifying!
Framedragger: ahhh. not a bad thing hm
Framedragger: with botched mac addr so shouldnt even reach internet, i think theyre getting dropped at some local router
Framedragger: vc: yeah just relaunched. vm031
Framedragger: vnstat gives me maybe 5 mbps total
Framedragger: i mean it's clearly not bw cap
Framedragger: 41 bytes i think
Framedragger: uh need to check. but it's just a TCP SYN!
Framedragger: hmm. yeah self-test which doesn't leave localhost gives me ~ 3M pps or so
Framedragger: note, stricly-localhost test gives me much more than that. but test with bogus mac address (so it doesn't hit the actual internet) gives only 10k pps, which is real low. some hardware firewall doing excessive ratelimiting?
Framedragger: vc: just fyi, there appears to be a ~10k packets / second limit somewhere upstream, are you aware of anything of the kind? i'm just running some self-tests (using a program which has its own TCP stack, i.e. no use of kernel networking / sockets). same tests produce at least 10 times as much elsewhere. cpu not the bottleneck. just wondering what it could be
Framedragger: hehe yeah, ssh keys, welcome to idiotland i guess
Framedragger: vc: nice, man
Framedragger: by which i mean, any crazy customer support / admin stories thus far? :)
Framedragger: vc: thanks for the cockbox! how are things?
Framedragger: whoops ignore, window focus damn you
Framedragger: framedr
Framedragger: the whole fucking UK is built on this back-and-forth financial-wannabe masturbation. in that sense, "fuck your mother" (which includes such material manifestations as russian winter as you try to move troops in it) sounds much more sober, lively and worthwhile, heh. /incoherent-ranting
Framedragger: yeah.
Framedragger: what's funny is the kind of schemes that these views make possible. e.g. you go to bank and bank says your co is worth shit. then you discover that you have "goodwill" etc. so you create another co. and license the use of the main co's TM etc. use to that other co. then you go to bank and show these invoices etc.; voila, inflated value
Framedragger: ip dept rings a bell
Framedragger: we consider them to be ip, then try to put onto balance sheet, then inflate another co's value
Framedragger: true, of course
Framedragger: god i should stop regurgitating my firm's propaganda
Framedragger: mircea_popescu: "intangible assets"
Framedragger: ben_vulpes: IP is not just source code but shit like brand etc, and goodwill behind it. i'm not defending the foundation of IP, just sayin
Framedragger: i dunno. gonna be interesting. will update if any good comes out of it (or bad..)
Framedragger: mircea_popescu: yeah i mean.. yeah. it's almost as if: if bitcoin valuation of ip returns > 0, then bitcoin failed in terms of one of its design principles, or something
Framedragger: > find emoji javascript and jquery scroll animation
Framedragger: > look for EBITDA
Framedragger: i detest these glossy landing page designs. then again, maybe a stability point has been reached on the web, in the sense of content-less websites now employing a content-less form
Framedragger: yeah it's probably bull; interesting to think in terms of IP though, whether there's a valuation methodology possible
Framedragger: one of potential clients: scotcoin (as in chief operators - haven't looked yet if that even makes sense)
Framedragger: yes, aside from that
Framedragger: gonna be interesting
Framedragger: just explained what public ledger is
Framedragger: lol just had a meeting with boss: he wants to create a general valuation (as in IP valuation) framework for cryptocurrencies
Framedragger remembers writing a shitty "back-connect" backdoor, coupling it with keylogger and a shitty "Hacker Defender" (sic) rootkit which hides the former two, and installing the bundle onto school PCs running the latest AV...
Framedragger: fair enough
Framedragger: asciilifeform: i'm sure you've had good fun with them :)
Framedragger: asciilifeform: undocumented windows NT features or sth like that? there was a book...
Framedragger: (it's a long post but a nice read for one of them rainy days)
Framedragger: THIS https://mollyrocket.com/casey/stream_0029.html -- example of internal windows APIs... it's full of dragons. spoiler alert: vomit
Framedragger: ^ wow, fetishisation of social something much
Framedragger: but there's also this [one sec]
Framedragger: iirc they have their own solution for pipes, which does work
Framedragger: i do remember investigating how a few of them ring 0 windows rootkits work, thereby sort of delving into NT internals... it's a world unto itself. and it's full of objects!!! ah, childhood :D
Framedragger: true, true
Framedragger: muh idol is bill gatez he the great hack3r
Framedragger: but yeah of course fuck them, can't argue with that
Framedragger: welll, NT kernel is a piece of engineering, whatever your feelings for M$
Framedragger: ah, right, i see why you'd think that. yeah so something of the kind, partially. ugh M$
Framedragger: i don't think it's a complete stack trace. it's just timestamps?
Framedragger: mircea_popescu: etw seems to be a more generic framework than that, but can't be bothered to look too deeply. something like that anyway
Framedragger: it's just logging timestamps to windows event logger it seems. but still bold and shitty
Framedragger: can't complain. *muh links get st0len*
Framedragger: alf is like a good decent-link-filter-and-repost bot #b-a -> #trilema
Framedragger: asciilifeform: ah, right; subkeys included. fair enough.