log☇︎
700+ entries in 0.178s
asciilifeform: ...and potentially for dpa experiment. rma unlock , turns out , generates a disposable seekrit ( good for N tries, i fughet what N is ) , encrypts to google's ecc pubkey, and expects to be given the magic string back, to unlock
mircea_popescu: "shows to signs" is not a computable string for the phf-machine.
asciilifeform: you will find the string in the boot rom fw also
mircea_popescu: listen, my (often wrong, millitantly ignorant, whatever) intuition is that if oyu have an oracle in your hands (the chip after all DOES say yes or no) and all you want to do is produce a sig it accepts for an arbitrary string, you should be able to achieve this bit fiddling in less than 2^256 tries.
asciilifeform: kinda why phuctor doesn't have an arbitrary string search
trinque: if the circumstance arose where somebody lifted "asciilifeform" I wouldn't be opposed to changing the alias string for same key to "alfredalfer" as I've handled expired keys in the past, by proving control of key to me
lobbes: BingoBoingo: I left a comment on yer guide re: php5.6 shitgnomes deprecating mysql in favor of mysqli. (Should be in queue). This will be a boon indeed if we can string all the quirks of mp-wp-on-rockchip in one place
lobbes: conceivably, the 'pre-prepared !!v string' method also has the advantage that when tmsr transitions its infrastructure to be using tmsr-rsa, you won't need to recode your botworks
lobbes: http://btcbase.org/log/2018-05-27#1819256 << lobbesbot uses the 'dedicated key residing on the box it is on' method, but indeed, that key controls does not control any funds nor anything else of consequence besides voicing. Now, when I get tickerbot going (will be a separate bot) I'll probably use the 'pre-prepared !!v string for voicing' method for the same reasons you've stated (hygiene and no need to ☝︎
mircea_popescu: amusingly enough, a pre-prepared !!v string for payment of a fixed amt is a de-facto reimplementation of... the banknote.
mircea_popescu: it's always going to be a purely aribtrary market created by authority fiart, whether it's "write this string on your tits" or "tell me the string yulyiana has written on her tiots"
asciilifeform: http://btcbase.org/log/2018-05-23#1817231 << for a n00b, i'd prefer to see a handful of his samples 1st, rather than e.g. deal with million keys submitted with same or garbled user comment string, say ☝︎
asciilifeform: i dun recall the string being in 'alfred' tho
mircea_popescu: to drive it into the dirt : a) suppose you want reliable addition, for which purpose you comission rockchip machines 1 through 6. b) you pass along the string "5+6". the answers come 11 11 11 65524 11 11. c) machine 3 notices it is the only one with that result via its distributed n-of-m magick module, and returns "op fail" instead.
mircea_popescu: everyone gets a tit string ; not everyone gets to be in the wot.
lobbesbot: spyked: Sent 47 minutes ago: <asciilifeform> this script takes the format used in jurov's 'phathub' 2016 collection, and produces set of phuctor-compatible keys. do not forget to specify 'legend', the user string, to identify precisely what the key is, otherwise it will remain a mystery forever to reader
asciilifeform: !Q later tell spyked this script takes the format used in jurov's 'phathub' 2016 collection, and produces set of phuctor-compatible keys. do not forget to specify 'legend', the user string, to identify precisely what the key is, otherwise it will remain a mystery forever to reader
ben_vulpes: mircea_popescu: adrian popa entry has a random https://archive.is/ string
mod6: Where I did get to last year, had some of this working, not all, but some; and it was SLOOOOW. Too much string processing.
mod6: The problem with the Ada version is the string parsing.
mod6: Once I fed it this string "ab6o78", that sprung the trap (see the GDB debugging portion near the bottom).
mod6: One vpatch that is looking pretty nice is ben_vulpes's logging sub-string chop chop.
mircea_popescu: asciilifeform, but i can imagine, you know, lenghty string of ustards trying to help, where their help was of the form "we'll expend x resources if you're willing to jump through y hoops" and he refusing and them going umm... why doesn't the form thing work!!1
asciilifeform: buncha randomola, which it hashes on demand with challenge string
BingoBoingo: ckang: I will lend you a +1 rating for a resume, life story, and a picture of a sharpie in your pooper with the string n3gg34Z on your cheeks
ben_vulpes: just separating the string into two equal-length sets puts you tits and shoulders above the crowd
mircea_popescu: rittah, ima confirm your rating later ; if you want to hang around you'll be able to voice yourself tomorrow, say !!up to deedbot in pm then vertify the string it gives you.
a111: Logged on 2018-04-17 20:39 diana_coman: and at any rate, we end up with a "hello" packet that is the first one, containing version of comms protocol and client id string and all that jazz but *at most* some bits of the key only, followed by... more packets with the remaining, chopped-up public rsa key
diana_coman: and at any rate, we end up with a "hello" packet that is the first one, containing version of comms protocol and client id string and all that jazz but *at most* some bits of the key only, followed by... more packets with the remaining, chopped-up public rsa key ☟︎
mircea_popescu: (one could object, "it's pointless to attempt this, hacked client can just replace magic string", which is true, but nevertheless client can still binary audit his item and see / login with a special, known-good string-test-only client and see what he should be. ie, client can bootstrap himself out of the fakebox produced by a hacked binary.
mircea_popescu: now here's a question on which i'd very much like to hear a lordship oppinion. so, the model currently contemplated for eulora includes a bit whereby the server has to be told by the client a magic string, and will report this back to the client on demand, "here's what you told me you are". the idea is that the client can then sha his binary, and see if the strings match.
lobbes: well, she'd have had to write either the string or have had the tattoo mirrored when creating
mircea_popescu: jaxxie, get all your face in there ; get all the string in there.
mircea_popescu: so what do you need a translation for then, just use their string as-is.
zx2c4: sha256 isnt an encryption function. also beware this construction, especially the second one where the string comes last -- length extension is a problem with sha2
zx2c4: > For a functional example consider node A, whose "encryption" mechanism consists of sha256(string+"hurr"), and node B, whose encryption mechanism consists of sha256("durr"+string.).
mircea_popescu: zx2c4, some random 8 byte string or whatever.
mircea_popescu: if i have a message, which is not null, i can package that message in any string of any arbitrary sized chunklets. so your observing 8+16+24+8+8 does not tell you whether you observed 5 null messages, or a 64 message, or 4 16s, or anything else.
mircea_popescu: jossi to voice yourself, say !!up to deedbot in a pm and then !!v the string it gives you (decrypt its message)
mircea_popescu: thatbitchlola you can voice yourself now ; say !!up to deedbot in a pm, then !!v the string it gives you (have to decrypt first)
zx2c4: no, i dont think sending a random string would make it more secure
mircea_popescu: zx2c4 here's a simple alternative to consider : would you agree the assemblage would be more secure if instead of sending a null payload you sent a random string ?
mircea_popescu: cassidy3 say !!up to deedbot in a pm, then !!v with the string it sent.
mod6: mircea_popescu: yeah, would like to do that one. main reason i stuffed it in a drawer for the time being was that I was getting some really crumby performance with the manual string handling I was doing.
mircea_popescu: their top stories being... "i grepped reddit for a string", "here is some shannonized nonsense about a topic too large for enric durany to touch", "how a kid from sf started a school in india" and ON AND ON.
douchebag: danielpbarron: would you be able to pull that string of chars for me?
danielpbarron: the code is usually the random string the webchat assigns
mircea_popescu: spool i rate you, which means you can now voice yourself. say !!up to deedbot in pm, then pass the string you decrypt with !!v
mircea_popescu: well, i guess we'll have to have a terminology standard then. how about this : fsf = "a little coven of pantsuit retards defined by loyalty to rms and no further characteristics", ie fsf is about on the level of importance of "starslatecodex" ; gnu = "symbol with no concrete reference, sometimes used as g- or gnu- prefix by marketeers exacly like the string 'super-'" ; open = "group of usg wreckers working on perpetuating the
trinque: parser implements a given grammar, turning a string (whether considered as text or raw bits) into an abstract syntax tree
mircea_popescu: this actually misses the all-important mechanism. "when we need to disambiguate, we add more words such as to contradict one of the two possible solutions the string could eval to"
BingoBoingo: mircea_popescu: Yeah, the Ururuayan things with that string on their signage don't look like that.
trinque: command is a dumb string until the OTP is confirmed, and then gets parsed and certain type demands are made of the result
mircea_popescu: "oh, but how does one know something's random noise afore the fact ? isn't that begging the question ?" you can't establish something is random ~after the fact~, nitwit, randomness is not a property of the string ~but of the method that produced it~. therefore, it's random noise because it comes out of an unknown source, duh!
mircea_popescu: !Qlater tell la you can voice yourself by the way, just say !!up to deedbot in a pm then !!v its string.
mircea_popescu: yes, you !!v the string it gave you
asciilifeform: if you ask a c programmer why he thinks it is acceptable to define , e.g, string, as 'pointer into a potentially infinite row of crapola, maybe someone forgot the null terminator' he will ~always bring back answer of 'stfu, terrorist' (i.e. 'never thought about it, and don't intend to')
mircea_popescu: asciilifeform quite. anyway, to summarize : some idiot (from argentina -- and you should have seen his overwhelmed, $10 an hour cafeteria worker expression when the herd of pubescent latinas pinned him against the wall) and some other idiot (luis whatever, the director) COPIED THE STRING "bram stoker's dracula" from a coppola production, unaware of either coppola or stoker, or even the MEANING of the ' possesive convention.
mircea_popescu: what they did, referentially, as hanbot cleverly pointed out, is they called it "bram stoker's dracula" because the coppola version, which is what spawned this modern nonsense of young-male-vampire, CALLED it that. they have nfi who coppola was, or stoker for that matter. they just COPIED THE STRING.
diana_coman: no requirement re format, it's really: pass this here char * to Ada safely and recover this String from Ada via an "out String" parameter (char * on C side)
asciilifeform: ada folx: re making ada strings out of the c variety : strlen(char *) is a potentially lethal op ( suppose the nullterminator is missing ) so it will never be called implicitly by ada. you gotta either call strlen deliberately on c side, and then form ( can be on stack , declare ... Foo : String(1 .. Length) ... , say, a la http://btcbase.org/patches/ffa_ch4_ffacalc#L53 ) a proper ada string and copy the cstring into it.
mircea_popescu: try and understand that taking refuge in a string of nouns after having pointed out to you that most people will just discard out of hand strings of epithets as pure painstuitola isn't the best of strategies.
hanbot: mhm, neat. i'll check it out once the ball o' string's sorted
mircea_popescu: (for convenience, in pesudocode : select from an array of possible headers the one which corresponds to the remainder of dividing by 42 the number you obtain by converting from hexadecimal format the string you obtain by taking 6 characters from the 7th of the md5 hash of the current date)
asciilifeform: i'd even be satisfied with something exactly like BingoBoingo's link httpd but minus the nulltermed pointeristic string warcrime. (i.e. direct adaization)
asciilifeform: ( this is entirely separate from the fact that all 'industrial' http servers existing nao are in megatonne of c liquishit, language with nothing resembling sane string handling )
spyked took a look through how mod_security does user agent-based filtering and stumbled upon http://archive.is/ELI4u#selection-1478.0-1518.2 lulz; no idea how a programmatically-generated string can be botched up just like that.
a111: Logged on 2018-01-19 18:34 mircea_popescu: !~later tell spyked hey, does your tarpit not send pingbacks or is there some error ? what's the response if you say curl -v -A "Mozilla/5.0" -r 0-4096 --connect-timeout 30 --max-time 10 "http://www.dianacoman.com/xmlrpc.php" --header "Content-Type: text/xml" --data "<?xmlversion="1.0"?><methodCall><methodName>pingback.ping</methodName><params><param><value><string>http://trilema.com/2017/re-reading-is-the-most-powerful-tool/
a111: Logged on 2018-01-26 16:34 asciilifeform: but conceivably one day there will be an idjit browser that gives obama root on yer box when it sees string 'open sesame'. and what, errybody gotta know in advance to escape 'open sesame', lol ?
a111: Logged on 2018-01-26 16:34 asciilifeform: but conceivably one day there will be an idjit browser that gives obama root on yer box when it sees string 'open sesame'. and what, errybody gotta know in advance to escape 'open sesame', lol ?
asciilifeform: but conceivably one day there will be an idjit browser that gives obama root on yer box when it sees string 'open sesame'. and what, errybody gotta know in advance to escape 'open sesame', lol ? ☟︎☟︎
a111: Logged on 2015-08-13 19:00 phf: mats: well, i actually meant the opposite. classes of attacks can be eliminated by not using c. i think that majority of the attacks come from leaky abstractions. there's no <string> in c, but there's a null terminated memory region. there's no <sql> in perl, but there's a character array with sql text in it. one of the solutions is to plug abstraction holes on a level of the language, in such a way that you can't not use improved abstractions
mircea_popescu: i rated you, so now the bot will allow you to voice yourself. say /query deedbot and then !!up ; it will give you a thing to decrypt, give the result back to it as !!v <string>
spyked: it is (the payload, sans armor and version string)
a111: Logged on 2018-01-19 18:34 mircea_popescu: !~later tell spyked hey, does your tarpit not send pingbacks or is there some error ? what's the response if you say curl -v -A "Mozilla/5.0" -r 0-4096 --connect-timeout 30 --max-time 10 "http://www.dianacoman.com/xmlrpc.php" --header "Content-Type: text/xml" --data "<?xmlversion="1.0"?><methodCall><methodName>pingback.ping</methodName><params><param><value><string>http://trilema.com/2017/re-reading-is-the-most-powerful-tool/
mircea_popescu: </string></value></param><param><value><string>http://thetarpit.org/posts/y04/069-on-intellectual-ownership.html</string></value> from a terminal ?
mircea_popescu: !~later tell spyked hey, does your tarpit not send pingbacks or is there some error ? what's the response if you say curl -v -A "Mozilla/5.0" -r 0-4096 --connect-timeout 30 --max-time 10 "http://www.dianacoman.com/xmlrpc.php" --header "Content-Type: text/xml" --data "<?xmlversion="1.0"?><methodCall><methodName>pingback.ping</methodName><params><param><value><string>http://trilema.com/2017/re-reading-is-the-most-powerful-tool/ ☟︎☟︎
asciilifeform: mircea_popescu: nope. you find the subtle-manipulators and string'em up.
mircea_popescu: mod6 the magic string diff uses is "+++ " ie three plusses AND A SPACE
a111: Logged on 2018-01-16 21:44 phf: in further fare news, "SBCL 1.4.3 ships with ASDF 3.3.1, and a number of Quicklisp projects have build problems as a result. Linedit, mgl, micmac, cl-string-match, and others are affected."
phf: in further fare news, "SBCL 1.4.3 ships with ASDF 3.3.1, and a number of Quicklisp projects have build problems as a result. Linedit, mgl, micmac, cl-string-match, and others are affected." ☟︎
asciilifeform: i give a string of bytes - i want to search for THAT string of bytes. with ~maybe~, ~optionally and explicitly~, case-mutation.
mircea_popescu: dude, it's plainly documented and well known : without quotes it matches all the workds ; with quotes the string
mircea_popescu: curl -A "Mozilla/5.0" -r 0-4096 --connect-timeout 30 --max-time 10 "http://www.dianacoman.com/xmlrpc.php" --header "Content-Type: text/xml" --data "<?xmlversion="1.0"?><methodCall><methodName>pingback.ping</methodName><params><param><value><string>http://trilema.com/2018/minigame-smg-december-2017-statement</string></value></param><param><value><string>http://www.dianacoman.com/2017/12/07/introducing-eucrypt/</string></value>
asciilifeform: ( folx who ~did~ read it , know that it is possible to determine that a particular fg evaluates the same function on the input, for a particular string pair S1, S2 of bits, fed simultaneously into I1a, I2a, I1b, I2b, of FG a and b respectively; by syncing the oscillators , by connecting the 4th pins of a and b together.
mircea_popescu: a string of five random letters provides him with DOZENS of collisions.
mircea_popescu: suppose you have a set of symbols S1..Sn each with meanings Mij, i in n j in k. suppose you have a grammar G which has one function : if adding element Sx to a string made of q S, it permits you to discern which Sij are thereby invalidated.
mircea_popescu: in the EXACT http://btcbase.org/log/2018-01-09#1767895 sense of, "well i dunno what to do with this data and so here's me warping a vector into a string" ☝︎
mircea_popescu: . (Note that this is a direct encryption of plaintext material with the help of RSA and not an encryption of a key for e.g. AES with RSA and afterwards an encryption of the plaintext with AES). Based on this function are the functions rsaencryptplaintexttoct() and rsaencryptbytearraytoct(), which process a user-given plaintext string and byte sequence respectively." << this distinction seems rathger without a difference.
shinohai: Yeah, he will give you a unique string to write on your tits, take pic/upload/ get paid.
a111: Logged on 2018-01-05 18:29 asciilifeform: ( make a string out of /dev/random crapola + current epoch time, say )
asciilifeform: ( make a string out of /dev/random crapola + current epoch time, say ) ☟︎
mircea_popescu: "it worked, but it created serious memory leaks" is, of and by itself, diagnosable string. not even indicative, dispositive outright!
mircea_popescu: now consider the case of witch doctor. guy comes into office, outputs a string ; witch doctor responds with some activity and some instruction ; problem does not get better.
mircea_popescu: consider the case of a doctor. guy comes into office, outputs a string ; doctor responds with some activity and some instruction ; problem gets better or doesn't.
mircea_popescu: btw, that's a decent string for his early bb posts, back when he was a dicklet at nyu.
a111: Logged on 2017-12-22 06:54 mircea_popescu: Techman say /query deedbot to open a pm session ; say !!up in there to it ; then return !!v the string.
mircea_popescu: (lit hum includes all sciences from agriculture to string theory + philosophy, for the record)
BingoBoingo: <mircea_popescu> incidentally, the fresh blood you (and trinque ) pumped in trb ecosystem made a lot of secondary nodes gain lots of speed too. << Aha, since the aggressing started and some trb nodes changed ver string my nodes have had an easier time staying at the tip
trinque: a complicating factor of me testing the version string is that while ahead, I may be feeding other TRBs, while not, not.