727000+ entries in 0.348s
pankkake: robwhiz22: just make a better cardano and let
the market decide
robwhiz22: Out of my experience, it does help
to receive half up-front and
then half when I state
the documents are prepared and show
their existence and length.
assbot: Can't do
that, asciilifeform.
robwhiz22: I don't need any details or any input from you.
The process doesn't need
to be iterative.
robwhiz22: asciilifeform, I will include an analysis of whether you can rely on your chip design which cannot be reflashed over USB, as part of
the first part (the Cardano A full document).
robwhiz22: asciilifeform,
there are vectors (social/business/etc)
to reflashing over USB
that you should
think of before considering silicon boobytraps.
robwhiz22: asciilifeform, if you were "sure" you wouldn't have offered a bounty.
The purpose of
the bounty is
to motivate active, friendly attack.
robwhiz22: asciilifeform,
this, coming from someone who isn't sure whether his chips can be reflashed over USB :)
robwhiz22: asciilifeform, manufacturing is actually a smaller value-add
than design, because someone can always copy your finalized designs.
robwhiz22: asciilifeform, I guarantee you
that you will see very big value in your resulting market. In additition, no longer selling snake oil- i.e. a product
that actually works in
the usage cases offered - is its own reward.
robwhiz22: fluffypony, for both of
those reasons it would not make very much sense for me
to
take
their idea and compete with
them.
They're just
the ones
to do it. (Or so I
thought.)
robwhiz22: fluffypony, as mircea_popescu and asciilifeform have shown by slipping 4 months on
their delivery schedule, it is extremely difficult
to bring a security product
to market. Plus, it's
their idea. It really would be better for
them
to have
the proposals for
their consideration. I suppose
they can also share in here if
they want wider feedback.
fluffypony: robwhiz22: Why not make a competing product? You can
talk
to Markus about an IPO:-P
robwhiz22: well, mircea_popescu has said in channel
that he put me on ignore (a strange reaction after inviting me in here.) As I presume he and
the chief engineer make joint decisions,
the only way
the investors in s.nsa will have
the benefits of
the new design, and corrections
to
the existing design, is if
they pay for
them as part of supporting
their investment. ("Adding value", so
they say.)
fluffypony: asciilifeform: I'll wait for him
to screw up again and hold him for random
fluffypony: I was about
to extort 1 BTC out if him
fluffypony: robwhiz22: you're wrong,
this is
the sekrit channel for snake oil only
bounce: so, you're selling snake oil detection services for
the low, low price of 54 bitcoin?
robwhiz22: mircea_popescu, however I believe you are not interested in selling snake oil and would be genuinely interested in creating a product
that meets your basic claims about it.
robwhiz22: mircea_popescu, if you were not interested I would have expected
that reply from you
to one of my
two follow-up emails.
mircea_popescu: they who evere made a sale have some representation of how hard
to push.
those who never have however...
robwhiz22: fluffypony, it's an EXTREMELY unusual request from mircea_popescu
that business be conducted here.
mircea_popescu: think of how hard virgin boys push, and compare
to normal people.
bounce would expect such investors
to at least want
to know whom
they're dealing with. got any references, a CV,
that sort of
thing?
fluffypony: ThickAsThieves: I don't know, I mean, would he be pushing
this hard if he'd never made a sale?
robwhiz22: They will only receive a copy of
the proposal if mircea_popescu and asciilifeform decide
to share it however. It is important not
to get people's expectations up if some feature won't be included in
the first iteration, for example.
robwhiz22: If investors are here
they may read
the private proposal and step up
to pay for
the report and internal design proposal. 15sdNNq9Rk8JM7VENnPvPeoCwTW7ScHHZA
mircea_popescu: asciilifeform honestly,
the bozo filter is a result of
trader1333, not
this derp or
that other one.
robwhiz22: fluffypony,
the amount isn't
totally fixed.
robwhiz22: fluffypony,
the amount varies. I've
taken into consideration
the fact
that Polimedia is a 'startup' and also not asking for any equity, royalty, etc. It's also
trailblazing something radically new.
fluffypony: asciilifeform: Well,
to be fair, he's convinced me
that I can sell a bullshit report for $25k.
That's a learning:)
robwhiz22: asciilifeform, like I said if you are convincing people
to
trust an insecure design
that is unfit for
the usage case you sell, you are a fraud. Convincing people
to
trust it is fraudulent.
robwhiz22: asciilifeform, it is not a main sourcecoming. I've only summarized
things
that render
the Cardano
totally unfit in its present form.
robwhiz22: asciilifeform,
the issue you brought up about reflashing is one
that I wanted
to address very briefly in
the shorter write-up on
the Cardano A. I believe you've found microcontrollers
that can't be reflashed from USB.
ThickAsThieves: if i recall,
the product will be demonstrated next week, no?
robwhiz22: asciilifeform, moreover perhaps attention
to detail is what caused some of
the shipping delays
to begin with.
This is why I wrote with a proposal
to help while
things can be helped.
robwhiz22: asciilifeform,
they are not fools. So far you haven't shipped something broken, and have
the
time and resources
to fix
things.
robwhiz22: fluffypony I
think
they have sufficient investment
to cover
the design. It's a very low amount due
to
the category being
totally new.
fluffypony: Costs
to cover manufacturing != costs
to cover design
fluffypony: robwhiz22:
Then open source your criticisms
robwhiz22: asciilifeform, it was my understanding
that you and mircea_popescu have
taken investment for it. Why would you use it
to manufacture sometihng faulty
that does not meet its described usage case?
That is fraudulent.
robwhiz22: asciilifeform Because
the machine is unfit
to be manufactured
today. Why would I "wait for it" and have
this idea
totally disappear, instead of being iterated on and working and being something big.
mircea_popescu: skylytez heya.
they're in
the log,
two different people have made parsers
ThickAsThieves: i'm selling another 30min of !up
to robwhizz for 54btc
robwhiz22: mircea_popescu and asciilifeform are selling hte snake oil
that
they will fix
this.
They have
taken investment for it.
Their solution is
totally broken and unfit for
this usage case.
fluffypony: But I'm sure you'll find it worth
the money
bounce: robwhiz22,
two can play
the argument from authority game. plenty more read it and I don't see anyone agreeing with you. ie you failed
to convince.
fluffypony: Guys if anyone is interested I'm selling my report on why robwhiz22's report is wrong for
the low price of $20 000 in BTC up-front. If I get more
than 3 buyers I'll include a copy of his report as well.
robwhiz22: he keyring passphrase would in all likelihood compromise
that key."
robwhiz22: The idea of
the Cardano is quite simple. It is described in mircea_popescu's specs:
http://trilema.com/2013/snsa-first-product-the-cardano/ -- it says, "Consider
the case of visiting a random net cafe or public library. Without Cardano you are in a relatively
tough spot : even should you carry your gpg keyring and gpg software on a USB stick, and even should you be able
to install gpg software on
the respective computer,
typing in
t robwhiz22: Apocalyptic, but it's only snake oil in
the current design :)
robwhiz22: Apocalyptic, yes. And
the snake oil being sold here is
that if you have an attacker with physical access,
then if you have a Cardano you haven't lost. It's snake oil.
skylytez: Hi Mircea. I'm just
trying
to learn what I can from your blog. I'm actually looking for
the 29 people
robwhiz22: bounce,
the audience for
that letter was Mircea who I
think understands security
to a certain level. I am happy
to explain any of
the points, but it was not a public document.
ThickAsThieves: youve been full of shit since you ninjashogunned your way in here, now it's your job
to fix it
bounce: not
to be unkind but
the amount of words you spent failing
to convey your message don't inspire confidence
that 20..50 pages will do better
robwhiz22: Apocalyptic, did you read
the pastebin? It was not cleaned up for a public disclosure but I can answer any questions on it.
robwhiz22: ThickAsThieves, new architectures for radically new product categories don't write
themselves. It will
take me six weeks just
to come up with 20-50 pages at a high-level.
robwhiz22: ThickAsThieves, I offered 3 specific ways in which
the Cardano fails
to meet its mission.
robwhiz22: asciilifeform, and you are
the same kind of "engineer" as
the ones who promise a perpetual motion machine and
take investment for it from people
they dupe. How does
this help
the conversatoin?
ThickAsThieves: robwhiz22, yknow, if you offered one "free" bit of useful advice, something of value, you'd get more
than 54btc worth out of it
fluffypony: What's
that saying about it being better
to keep quiet and be
thought a fool
than open your mouth and confirm everyone's suspicion? Something like
that.
robwhiz22: asciilifeform, as mentioned ad hominem attacks don't improve a design. I can say
that usually, companies will have several iterations of completely internal design proposals
that htey will consider. I've never heard of a company
that wanted
to ship products
thta would have wanted proposals (even from consultants etc)
to be public in
this way.
bounce: robwhiz22: you were warned repeatedly
that
this was expected and required and I'm reasonably sure you gave permission for
the receiver
to do whatever
they liked with
the information.
robwhiz22: I did not intend for nubbins`
to publish
those
two pastebins. I can answer any questions on
them.