82200+ entries in 2.028s
ben_vulpes: this consulting short isn'
t really that great of a short actually
mircea_popescu: <mats_cd03> but do uber, airbnb, dropbox, and the like not deserve billion dollar valuations?" <<< i agree that other people's shit stinks but isn'
t my doodoo all perfumed ?!
mats_cd03: you can'
t go and just coin your own things, man!
mats_cd03: 13:01:49 <+myriadgetsmehard> It's not up to them to decide what is a premium domain or not. I say it's up to the whole free market, which they won'
t let me be a part of, it's also not really free
chetty: sadly enough some vc funded tard might it, don{
t mean it will actually make money/have value
myriadgetsmehard: It's not up to them to decide what is a premium domain or not. I say it's up to the whole free market, which they won'
t let me be a part of, it's also not really free
mircea_popescu: the russian career criminals reportedly find the us, in spite of having the world's largest incarcerated population, doesn'
t even have good prisoners.
kuzetsa: I'm glad I didn'
t have a system policy which let that suspicious code run
xmj: didn'
t know that one, thanks!
kuzetsa: and that isn'
t on the server, that's on my laptop
kuzetsa: I haven'
t got anything using RSA in production at this time
assbot: I just donated $1K to the Global Learning XPRIZE because governments indoctrinate more than they educate.
http://t.co/nkWMXwFR3R /Indiegogo
ben_vulpes: <decimation> gov'
t pays for such 'research', most of which is pointless:
http://www.sbir.gov/ << people say: "do this!" and I say "what innovation? we duct tape thinger a to tab b and make clients happy." they do not understand, and i cannot enlighten them without calling into question that which they value themselves upon.
decimation: usg asks so many questions, doesn'
t understand the answers...
decimation: one wonders how many other useful reports lie mouldering in some gov'
t bin, unscanned
mircea_popescu: <peterl> isn'
t Rassah gay? <<< i don'
t think as much gay as a furry creature.
peterl: I don'
t know him personally
BingoBoingo: JuliaTourianski: don;
t you worry boys, xenoestrogen & phytoestrogen will get you << You know one of the steps involved in maturing sperm cells in the testicals involves... converting testosterone to estrogen!
JuliaTourianski: don;
t you worry boys, xenoestrogen & phytoestrogen will get you
mircea_popescu: such bad writing. if something is a first then it can'
t be "standard procedure"
pete_dushenski: asciilifeform: apple << wtf is the point of 'canary' if everyone ignores, makes up justifications, when it croaks. << just because puppets talking "ignore" doesn'
t mean everyone ignores
mircea_popescu: <fluffypony> I can'
t take these bugs seriously without a logo and an info site << these bugs got no ux!
fluffypony: I can'
t take these bugs seriously without a logo and an info site
mircea_popescu: exactly asciilifeform's "but we don'
t even know how to make computers yet!" sorta thing
berndj-blackout: asciilifeform: won'
t any nonzero hammer work, given enough time to get a decent SNR?
mircea_popescu: * asciilifeform is just unendingly entertained that вредители are allowed to not only keep living, but contributing code to whatever. <<< not quite whatever. currently the fashionable idiocies du jour still hold currency with the crowd, that "not the man, but what he's saying" and "we're all equal" and similar socialisms. they won'
t last the evening.
Darkstone1: that i you shouldn'
t buy anything that you can'
t inspect the source for i can certainly agree with.
diametric: and i'd never run a trade bot i couldn'
t inspect the source for.
punkman: well you can'
t really sell it without source
mircea_popescu: lobbes: and the paper wasn'
t even peer reviewed << in that guy's case, peers can be a misnomer :p
mike_c: my point is you can'
t take existing turd and audit it to security.
mike_c: of course. so you have vulnerable bash. doesn'
t mean someone can hit it through your web server. i guess i gotta construct applicable
http request.
Naphex: mike_c: check is simple cause bash shouldn'
t run anything in the env
mike_c: doesn'
t mean your box is open.
mike_c: so.. just b/c you have vulnerable bash doesn'
t mean you got pwned.
kuzetsa: the initial "fix" was for a parsing flaw described in CVE-2014-6271 (shellshock) which a lot of distros patched but then didn'
t get CVE-2014-7169 as well (a different type of issue with bash)
mircea_popescu: ThickAsThieves: i often think about that, how the hell can someone who cannot/willnot read code, ever be the steward of a software project safely? <<< you know i don'
t actually read all that much code at all. i guess i could, more or less, but i wouldn'
t trust myself to understand it. by which i don'
t mean "what it does", but i do mean "what we can absolutely say about this program"
kuzetsa: mike_c: I'm certain that the public-internet-facing daemons on the system in question don'
t pass stuff around using environment variables
Naphex: mircea_popescu: yeah but that doesn'
t hit sh until successful login
kuzetsa: Naphex: I don'
t have any mail daemon on that particular system either
mircea_popescu: if the process of figuring out what is safe worked, we wouldn'
t have the bug in the first place.
kuzetsa: Naphex: I don'
t use apache
kuzetsa: mircea_popescu: but... I don'
t have any cgi on the
httpd, nor are any of the other daemons the sort which use environment variables to pass stuff around (using bash or otherwise)
mircea_popescu: you don'
t need round stones to produce round stones. you just need a rotative process.
mircea_popescu: just because they meanwhile fell off doesn'
t mean you didn'
t need them to get here.
mircea_popescu: once the "you have one chance, don'
t fuck it up" model gets implemented universally, we'll have a wholesale return to the pleasant mores of the society constructed on enforcing the same principle upone women only.
mircea_popescu: which is why you can have good programmers that speak english, russian or whatever else natively, as well as c or lisp or whatever else ; but you can'
t make someone a good programmer by teaching him to say i++;
mircea_popescu: ing even may be an excessive requirement. if on the other hand in a room with a woman that doesn'
t want to, you can be e a poe for all the good it'll do you.
mircea_popescu: bounce: now it would help if we can properly articulate what ails us. but we can'
t, because the terminology has been deliberately confused and watered down and broadened and stretched (by the industry) so as to spread FUD more effectively << you are very naive to imagine the terminology has anything to do with it. point in case : if in a room with a woman that wants to fuck me, i don'
t need to speak her language. point
mircea_popescu: since they can'
t find a sponge that comfortably fits a calender
mircea_popescu: they didn'
t understand there's a mp. it hurt. won'
t repeat mistakes next time.
mike_c: perhaps not. we didn'
t see double digits (yet) this year
mats_cd03: my principle concern is getting to 1000btc. i don'
t know if it can be done, at the current rate of career progression... i need a better job.
mircea_popescu: mats_cd03 owning like 1% of 1% of the world's currency ain'
t the worst fate.
mats_cd03: i can'
t afford to flee. i have yet to bump four digit vidya game coins.
mircea_popescu: and if you can'
t find people who work like that, you're not in a good country to do business, quit the bezzlathron and move.
nubbins`: nah i quit gov'
t work long ago
assbot: [0/12] HODL silkscreened
t-shirts
nubbins`: they can'
t form, the flour from the bread would get mixed in with the maynnaise
nubbins`: i'm going to submit a paper about how submarine sandwiches don'
t exist
lobbes: and the paper wasn'
t even peer reviewed
nubbins`: they say black holes don'
t exist, but offer no explanation for what the things we've been calling black holes are
jurov: wallet isn'
t so hard
bounce: it's a bit like... well, calling everyone who does anything wrong a "wrongdoer", regardless of the details of the crime. do that consistently and there's no discernible difference between a mass murderer and a petty thief, or even someone telling you you left the keys in the door and don'
t forget to close up, guv.
bounce: now it would help if we can properly articulate what ails us. but we can'
t, because the terminology has been deliberately confused and watered down and broadened and stretched (by the industry) so as to spread FUD more effectively
bounce: that's a really strong argument. fits just about anywhere. "can'
t have 100% security anywhere, might as well give up".