asciilifeform: 'he will be a very well trained bear but never a world-class dancer' or how did it go.

asciilifeform: and holy fuq the sheer militant uselessness of each new crop of i_came_via_reddit weevils.

asciilifeform: an ounce of intel work would prolly beat ten pounds of lab wizardry in this case.

asciilifeform: the lulzy bit is that likely, a thousand or more unlocked units exist, in the hands of various derps

asciilifeform: i got various things. problem is that i do not currently have a popped unit where i can see the effect of $manipulation on rng (or any other part, aside from general 'it crashed')

asciilifeform: the fact that h1 started life as fpga, suggests this.

asciilifeform: prolly it's the typical on-chip ring oscillator, plus bit of whitener.

asciilifeform: ( the 'rma unlock' 32byte turd, is simply rng output )

asciilifeform: mircea_popescu: a break of the rng would also do the job. ( admittedly , tall order , but listed for completeness. )

asciilifeform: idea being, it would be a substantial help to have even one unlocked box to experiment with.

asciilifeform: but would prefer to find a purely softwaric pill (e.g. buffer overrun, or whatever means to get code exec)

asciilifeform: one interesting observation, is that the update mechanism lets you flash in arbitrary crapola into 'rw' section ( it simply won't jump to it if it doesn't pass rsa(sha256(payload)) ) . so theoretically could put a nop sled there, ending with jump into the magic half of unlock routine. and then expose the thing to beta/gamma, and perhaps in a few months it will Do The Right Thing ☟︎☟︎☟︎

asciilifeform: doubt that it's quite so trivial, typically you gotta find how to hold it in reset so it doesn't boot up to its current fritz contents

asciilifeform: does, dunnit. cuz its a flatbed. gets the chip markings, mostly, but the pcb itself is out of focus by mm or 2.

asciilifeform: for completeness, http://www.loper-os.org/pub/c101pa/mb_top.jpg + http://www.loper-os.org/pub/c101pa/mb_btm.jpg ( apologies for the sad photos, they came out of a flatbed, evidently not ideal tool for this job ) ☟︎

asciilifeform: http://www.loper-os.org/pub/c101pa/h1.jpg << observe, cr50 has buncha test pads. i bet half a dozen of these, are used for factory fillup. ☟︎

asciilifeform: hey BingoBoingo : does your dental school chix have access to xray ?

asciilifeform: meanwhile, reddit verdict : 'Are there any less tinfoiley sites that discuss this? All of the references circle back to him.' ☟︎

asciilifeform: see why not to link to pedowikia, esthlos ?

asciilifeform: meanwhile, in the entomological pit : https://en.wikipedia.org/wiki/Talk%3AFritz-chip >> 'I've deleted most of the article. The information here is already presented in a more up-to-date fashion at Trusted Computing, which is the correct title for the technology. "Fritz-chip" was never more than a moniker used by critics of the technology put forth by Sen. Hollings. The article now represents this fact. Warrens 23:24, 29 April 2006 ( ☟︎

asciilifeform: loox like you can stuff arbitrary crapola into the filename field, and it gets term-interpreted to stderr ( where result is shat )

asciilifeform: ( from the horse's mouth )

asciilifeform: status messages are parsed by programs to get information from gpg about the validity of a signature and an other parameters. Status messages are created with the option "--status-fd N" where N is a file descriptor. Now if N is 2 the status messages and the regular diagnostic messages share the stderr output channel. By using a made up file name in the message it is possible to fake status messages.'

asciilifeform: 'The OpenPGP protocol allows to include the file name of the original input file into a signed or encrypted message. During decryption and verification the GPG tool can display a notice with that file name. The displayed file name is not sanitized and as such may include line feeds or other control characters. This can be used inject terminal control sequences into the out and, worse, to fake the so-called status messages. These

asciilifeform: let's put in the l0gz :

asciilifeform: ( see top qntra )

asciilifeform: !Q later tell trinque might be worth testing whether koch's latest lul affects deedbot's gpg hose

asciilifeform: https://archive.li/A4vO1 << various lulz in re that famous octopus. ☟︎

asciilifeform: starfish is getting broad daylight waltzing, no way to boeck around the fact.

asciilifeform: possibly because there is no possible counter-argument to the substance.

asciilifeform: i've met these folx in the flesh, show'em e.g. http://www.loper-os.org/pub/nobus.jpg and response is lordosis

asciilifeform: this is the leitmotif audible to asciilifeform , at any rate.

asciilifeform: re 'professionals', i can also picture 'you wrote it like a vuln reveal, but this is not a vuln, this is our masters getting jus primae noctis with our raw starfishes like god intended' irritation

asciilifeform: 'it's just a tpm, what's yer problem'.

asciilifeform: for the moar advanced fetishists, even lets you solder contacts and rewrite boot rom etc., 'Чем бы дитя не тешилось, лишь бы не вешалось'(tm)(r)

asciilifeform: sleeker, moar satisfying anal filler than ye olde wintel's hamfisted offering

asciilifeform: mircea_popescu: revisiting upstack -- i suspect that the decerebrated folx, are not aware of any such famine. google made the perfect fuffle for'em, the dildonic 'open comp' that offers 'fetish of power', go ahead and install linux etc.

asciilifeform: i'm surprised that nobody brought up the eating of toe fungus

asciilifeform: also witness the redditards, 'harping on tpm, that's SOOO rms from 1997' etc

asciilifeform: i think 'professional' is tardcode for 'responsible disclosure' and general usg-fellatio

asciilifeform: focus of fish, is the worm.

asciilifeform: it is not given to fish, to wonder or worry about the life of the fisherman.

asciilifeform: poor folx luuuuvvvv to pennyante gamble.

asciilifeform: 'nintendo'--meiji-era titan of playingcard manufacture.

asciilifeform: (phunphakt -- 'sega' was originally usa/occupation-era co. that made 1armedbandits )