731400+ entries in 0.412s
ThickAsThieves: he seemed pretty proud of
the notion
that most nodes were USG
ThickAsThieves: i was speaking with a former military
tech at
the bar a few weeks ago and he was giving me a shit-eating grin about NSA/Tor
BingoBoingo: ThickAsThieves: And
this is why I've never upgraded Multibit beyond version 0.5.11
ThickAsThieves: " Jered Kenna interviewed Bitcoin core developer Mike Hearn about BitcoinJ,
the
Tor network, and what developments are coming
to
the Bitcoin protocol. Mike explains why BitcoinJ will be using
the
Tor network for greater privacy and security."
BingoBoingo: The state of
the art from 1980 on 2004 semiconductors would be a hell of a
thing
to behold
BingoBoingo: But
they happened because it is easy
to "circle
the wagons around
the cesspool buying
time
to fish out another
turd for sale"
BingoBoingo: Seems
the hardware aspects of Loper are only
the beginnings of
the mess
BingoBoingo: I see. It's also
the implementation "Land of Lisp" supposes for most of its exercises
BingoBoingo: asciilifeform:
The particular implementation
BingoBoingo: So... what Open source alternatives are
there
to OpenSSL which aren't as much of a bitch
to read?
assbot: Last
trade for S.MPOE on MPEX was at 0.00097812 BTC [-]
zacm: competent
to follow
the incentives, like getting
through
the revolving door
to a higher paying job, making deals along
the way
to do so
TestingUnoDosTre: It's not like
the USG can afford, or even needs
to pay a high salary
decimation: and
that explains
the workings of
the USG
zacm: better off having
the dumber ones
there anyway
TestingUnoDosTre: Thats
the
thing,
they would never go
to
the SEC in
the first place
zacm: what?! Don't Ivy League graduates at
the
top of
their class look forward
to
that nice, lucrative SEC position?
decimation: the other problem
the SEC has is
that
thier lawyers are at best 'C' league compared
to Goldman's army
decimation: if you could double your income or better, which side of
the fence would you play?
decimation: This is what happens when
the USG pays peanuts for 'talent'
zacm: ra, ra,
there's your "regulation"
ozbot: SEC Goldman Lawyer Says Agency
Too
Timid on Wall Street Misdeeds - Bloomberg
zacm: Kidney said his superiors were more focused on getting high-paying jobs after
their government service
than on bringing difficult cases.
The agency’s penalties, Kidney said, have become “at most a
tollbooth on
the bankster
turnpike.”
zacm: The SEC has become “an agency
that polices
the broken windows on
the street level and rarely goes
to
the penthouse floors,” Kidney said, according
to a copy of his remarks obtained by Bloomberg News.
decimation: "This issue did not affect
the versions of openssl as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.4 and earlier.
This issue does affect Red Hat Enterprise Linux 6.5, Red Hat Enterprise Virtualization Hypervisor 6.5, and Red Hat Storage 2.1, which provided openssl 1.0.1e."
BingoBoingo: mircea_popescu I suspect
they must have a seekrit forum, because You have more socks
than
that everywhere.
mircea_popescu: BingoBoingo "To understand
this by repeating
this, only 20 members have posted on
the Big Rock Candy Foundation 's forum in
the last six months."
bounce: the guy's an academic with a bunch of publications and
two rfcs
to his name.
time
to send in some
tin foil hats
to check all
that,
too.
mircea_popescu: bounce
they may not be exactly right.
this will
take a lot of work.
mircea_popescu: talk about a product
that owns its market.
the french f1
mircea_popescu: this is promising.
ty chan, and let it become part of
the permanent record : more has been ruined by convenience
than by any other sin.
bounce: apparently 2012-12-30 last cvs entries says
timeline
bounce: when did
they move
to git from cvs?
Naphex: atleast
that went right.
Naphex: until 12.00 GMT+2 mostly everything was vulnerable, and as
the sploit went public everyone started sniffing everything.
mircea_popescu: anyway,
this suddenly makes
tor significantly more useful. at least for a few weeks.
bounce: probably not, but last in
this channel, possibly
Naphex: i'm guessing
that was
the logic behind it
Naphex: so you go compile from source
to get ECDH,
to avoid stupid encryption restrictions
bounce: there was also
that = vs == in a linux syscall a while back
mircea_popescu: bounce maybe you're
the last guy on
the internet
that hasn't made copies.
Naphex: i got screwed cause i had
to compile from source
to get ECDH.
mircea_popescu: question is who were
the idiots and who were
the patsies.
bounce hasn't checked
the repo, if any. probably should.
fluffypony: on
that HIGH note, it's bed
time here, well as close
to bed
time as 1:15am is when
the wife is fast asleep next
to you
mircea_popescu: Naphex all
the poor souls arguing with me over
tor's safety a few months ago. awww.
bounce recalls an irc discussion going on 15 years back, where someone speculated
that a nsa backdoor might look like "int foo;" instead of "long foo;". and you just can't
tell. well, here we have such an innocuous
thingy. and you never can
tell. but spectacular,
that
the effects certainly are.
Naphex: mircea_popescu: you can basically sniff whole SSL
trafic with Heartbleed.
fluffypony: if POST/GET vars bleed
that's one
thing
fluffypony: yeah I'm not
talking about mitigating
the heartbleed attack
mircea_popescu: the point here is
that
this attack spent most of
the past
two years unknown.
fluffypony: but locking a session
to an IP is also fraught with issues, so
that's not a good
technique
mircea_popescu: fluffypony
there's many ways
to mitigate a known attack, by
the very definition of "known".
fluffypony: mircea_popescu: I still maintain
that
the damage from something like
this could be reduced by mitigating session hijacking
mircea_popescu: fluffypony mike_c was liveircing wowmoments with it earlier
too
fluffypony: some of
them are broken, but enough weren't
fluffypony: before I patched our local server
this morning (not behind CloudFlare as CloudFlare don't have a node in South Africa) I played around with it
mircea_popescu: asciilifeform you know you're in
the footnotes for
that reason :)