log☇︎
1400+ entries in 0.023s
Framedragger: aha maybe..
Framedragger: almost as if the thing would need to wait and then send a challenge to that same nick, but this is kinda promisetronic i guess.
Framedragger: mircea_popescu: what does that accomplish? !!v to show that key i'm registering is indeed owned by me?
Framedragger: i like her smile
Framedragger: (-NickServ- You have 30 seconds to identify to your nickname before it is changed.)
Framedragger: 30 seconds after nick requested, i believe
Framedragger: "tl;dr: OVH had an issue where your second network card was connected to other servers in the datacenter. This allowed you to run a DHCP server and offer a gateway. This also allows you to MITM several machines outbound traffic, I had 35 machines responding back with DHCP Leases and about 4 routing outbound traffic to me as their router."
Framedragger: http://btcbase.org/log/2017-04-21#1646987 << heh https://jrwr.io/doku.php?id=blog:ovh_vrack_security_issue (they did respond and amend fairly quickly, but srsly) ☝︎
Framedragger: re 'years from now', guess so, can't see why not. fun exploit times! (but seriously, opened ticket at $provider to query about a xeon cpu)
Framedragger: funny: if one were to follow intel's route of patching firmware, as regards say x220s, lenovo gives update in the form of windows executables ☟︎
Framedragger: ('provisioning' (see link) is (i think) a separate thing.)
Framedragger: *actually*, one needs to ask their hosting providers if AMT is enabled (BIOS setting), wouldn't hurt
Framedragger: re https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr (released today) (AMT (part of intel's ME) mega-vulnerable (shocker i know)), will just remind x220 fans that those laptops are 'biznis grade' and hence have AMT in them. ☟︎☟︎
Framedragger: "we have very different notions of 'vouch' in our minds, friendo"
Framedragger: "I can vouch for iluvbitcoins. I haven't dealt with him but I have a spoken to him a few times a while back." what
Framedragger: thanks, that makes sense of course.
Framedragger: i suppose the alternative is not necessarily "buy up bitcoin" (somehow stuck in mind), but invest in business (and possibly (non-nato, or w/e) real estate). (not against my current plans, just, can't do all at once (yet))
Framedragger: asciilifeform: no, and i see what you mean
Framedragger: i use wikipedia for quick lookup of $topic sometimes; i also use it as "collection of references to other places" thing. is this fundamentally toxic? maybe.
Framedragger: what can i say!
Framedragger: so the disagreement stems from that (naive) premise. other parts of reasoning i cannot disagree with, of course.
Framedragger: i admit that i still have this notion of "global internet" in my mind, as a +ev thing.
Framedragger: we block idiot "write access", so to speak. not blacklisting IPs in logotrons (yet!)
Framedragger finds any "blocking" to be retarded on a fundamental level
Framedragger: https://turkeyblocks.org/2017/04/29/wikipedia-blocked-turkey/ ^
Framedragger: (mp: "this is good!" :D )
Framedragger: they blocked wikipedia like 2 days ago heh
Framedragger: mircea_popescu: they have massive firewall, blocking at will. could be not a problem, depending on business case of customers of course. and i guess the counter would be "everyone does"
Framedragger: alsoalso, ideally more than one upstream ^
Framedragger: unfortunately northern syria (rojava) uses internet via turkish radio towers (checked / had chat with them once). that'd be an interesting location (kurdish autonomous region; i mean, while it lasts....)
Framedragger: pete_dushenski: curious how much they'd quote for 256 GB ECC ram :) (phuctor)
Framedragger: nah, yeah, i gettit.
Framedragger: seems like :D
Framedragger: true.
Framedragger: but yes, saving over multiple decades, different thing *entirely*, of course of course.
Framedragger: "worked for him!"
Framedragger: mircea_popescu: right, insane inflation. counterpoint "it's all about timing and location" anecdote (purely for entertainment): dad worked in chocolate factory in u.s. back in ~1991, for 2-3mo.; went home with ~ $1k, bought car and flat. ppp!
Framedragger: (also, by 'usd' meant a portfolio of different fiats)
Framedragger: (just to be clear, this is another is/ought, i was doing the "is" (imho) part ^, not "ought", of course)
Framedragger: mircea_popescu: alright, more than that: i place higher odds of usd surviving in 2050 if put against btc surviving in 2050. why: a very primitive "age of existence" heuristic. and, i don't trust EC crypto, like, you know, no-one here does. so not willing to put retirement savings into btc. it adds up, utilities, retirement.
Framedragger: (not disagreeing with core point.)
Framedragger checks, can't yet pay for utilities with non-fiat
Framedragger: mircea_popescu: there is that. point is, world is ~sheep (when approximated/rounded), they have fiatbux/lifedebtbux, they don't care about these things, intel's profits come at scale, hence investing into "decent tech" is not business-viable. is all i'm sayin'.
Framedragger: yes but this is a bit circular, one of those "prove P: if tmsr, then P; ergo, P"
Framedragger: anyway, i don't see much outrage in regards to intel ME outside of tmsr et al.
Framedragger: they just use linux and do not give a fuck about getting fucked in ass if money keeps flowing in. money from business and customers who *are not* high-principled powerusers
Framedragger: asciilifeform: that's the more dramatic take on it; the other one is "most of linux powerusers are dirt poor, and there aren't many of them [and the companies which *run* on linux do not count as part of the former group.]"
Framedragger: amd dropped coreboot support in (iirc) 2013 *because* it deemed it not profitable. impact to business probably ~0.
Framedragger: and yet and yet, all them new xeons....
Framedragger: (at least in intel ME, from slides i infer that if it doesn't detect the "ME firmware part in BIOS flash", it doesn't even turn on?)
Framedragger: mircea_popescu: machine doesn't boot if you do, it's for enterprise security you understand
Framedragger: asciilifeform: no, but the src of the separate kernel at the very least. "gotta start somewhere", again. but yeah i know, sisyphus much
Framedragger: access to main memory, access to *network* (complete bypass of cpu), yeahyeah... amazing
Framedragger: amd "kinda said" they may release full src for coreboot et al., but obvs no dice yet
Framedragger: asciilifeform: yeah apparently. but gotta start somewhere. and yeh i understand that shit's different *again* since then
Framedragger: https://recon.cx/2014/slides/Recon%202014%20Skochinsky.pdf << nothing new, but sat down to read some slides about teh backdoor in question, more technical details, decent overview imho. "slides" because info needs to be patched up from proprietary intel SDKs etc etc
Framedragger: (sorry for low-level noise, just for posterity.)
Framedragger: summary of short chat with cherryservers (hey can't hurt): they used to offer colo but do no more (hmh); they "may" consider attaching "arduino-sized" (my description) hardware device, will report back tomorrow after consulting with technicians when they are in.
Framedragger: curious, what is phuctor's cpu? xeon e5-4620? v2/v3/v4?
Framedragger posts ad, "need slavegirls, for mopping -- my backlog"
Framedragger: yes.
Framedragger: could it be legitimate concern of space in their cramped cages that they are worrying about? (i know, naive interpretation)
Framedragger: maybe a matter of renting rack unit vs rack vs cage
Framedragger: ah. rightright.
Framedragger: mircea_popescu: what do you mean, do you mean resistance against colocating?
Framedragger: asciilifeform: ah shit, of course
Framedragger: cherryservers do seem nice but their nato affiliation is over 9000 hah
Framedragger: some providers may agree to attach usb devices. iirc (possibly) leaseweb. (based in .nl, i know, but they also fought some 'give us yer customers' cases iirc)
Framedragger: (iirc pinspb hosts, or is related to 2x4 dns boxes. would need to dig up)
Framedragger: asciilifeform: yeah, but they don't offer colo, at least upon initial glance. can send query, of course. but may as well deal with their upstream DCs
Framedragger: yepyep. i must say that i had not dealt with them directly, ever. but it came up in my 'ok so what actual non-nato providers/DCs could i use?'
Framedragger recalls using some 'virtual gold' 'incorporated in panama' company currency to trade goods. sustainable? no. can make it werk for specific trades? can do!
Framedragger: if there is a will!..
Framedragger: ^ can purchase ip blocks via 'em, too, for good price; etc.
Framedragger: btw, if anyone is considering doing the isp thing, one of the potential providers which offers colo is https://pinspb.ru/ (doesn't look serious i know, but after some research it turns out to have close ties to 2x4.ru, and that's not a bad sign.)
Framedragger: mircea_popescu: i'll mention one thing tho: you cited "$10k+ / year" figures and all that, but just ftr i don't believe the actual *profit margin* (vs. revenue) would be decent. that said, this should of course be researched.
Framedragger: nopenope.
Framedragger: in which mp gets pissed again!1
Framedragger: the "but we begged" is quite rich, omg
Framedragger: olook the backdoor is an actual backdoor! good call on opteron asciilifeform :)
Framedragger: (cv mentions gaming. not making this up)
Framedragger: in other sads, http://wotpaste.cascadianhacker.com/pastes/B2q4T/?raw=true
Framedragger: http://log.mkj.lt/trilema/20170501/#20 << ah, yes! that is definitely in the plan. in june or july, conservatively say july!
Framedragger: we should party.
Framedragger: whatever my gripes with teh mp-way, /me been personal fan of mpex design and opsec since day 1 ;)
Framedragger: yes sure, there is that.
Framedragger: (cf. early gossipd designs, etc.)
Framedragger: ^ good reminder why any trust on 'origin ip' is moot eh!
Framedragger: terp zone? moar like twerp zone hueheuhue
Framedragger: mircea_popescu: yeah i guess it's just a specific case of a general meh-thing
Framedragger: myeah :)
Framedragger: it quotes some statement official or w/e, but is there
Framedragger: page 57
Framedragger: it should be under 'golden shield' section
Framedragger: mats: sure, sure. but it's *particularly* in-your-face when you're pitching and saying "we can track X down so you can er lawfully take care of em"
Framedragger: saw 'em in seoul, too. "meh", let them be, no?
Framedragger not a fan
Framedragger: (https://www.wired.com/images_blogs/threatlevel/files/cisco_presentation.pdf &c, for posterity)
Framedragger: not sure if falun gong really had done much at that point. but cisco wiretapping was used to track 'em down and kill 'em
Framedragger: i still say 'fuck you cisco' for pitching (and later selling) customised surveillance infrastructure to china by saying that its shit can "combat ‘Falun Gong’ evil religion and other hostiles" (sic)