tmsr - Log 2017-02-23

shinohai: I wish my peeps had been incredible enough not to fuck up that Eulora click earlier this week.

asciilifeform: ACHTUNG, PANZERS!!

asciilifeform: mircea_popescu, ben_vulpes , mod6 , et al : http://therealbitcoin.org/ml/btc-dev/2017-February/000250.html

asciilifeform: http://btcbase.org/log/2016-01-20#1378047 << review of logic re above ☝︎

a111: Logged on 2016-01-20 02:05 asciilifeform: presently trb does not have this sane behaviour

veen: http://btcbase.org/log/2017-02-22#1616772 << ben_vulpes i assume mircea_popescu doesn't mean secretary of state ☝︎

a111: Logged on 2017-02-22 04:55 mircea_popescu: btw, trump actually gave state to petraeus, at least on the declarative front.

asciilifeform: shinohai: it's a prereq for using 'g' or any similar item

asciilifeform: it can also be used with traditional ssh tunnels; or even as-is, which will result in same situation as presently seen with 'addnode' -- but no more disconnects!

asciilifeform: classical trb did not have a nondisconnectable marker for peers; would not connect to localhost; and deprioritized non-8333 ports to dead-last order. 'wires' fixes this.

shinohai: Lots of irons in fires atm, but exciting development asciilifeform .... I will test in < 24 hrs

asciilifeform: the one case i have not yet tested is the ~bidirectional~ wire.

asciilifeform: i am deliberately leaving this to you lot

asciilifeform: oh and yes, fWires flag is not currently used for anything.

asciilifeform: ( someone is certain to ask 'why' )

ben_vulpes: http://btcbase.org/log/2017-02-21#1616348 << do "marriage" and "divorce" even have much of a place in the republic? ☝︎

a111: Logged on 2017-02-21 22:27 danielpbarron: ban divorce and it isn't "pedo marriage" -- she grows up eventually

ben_vulpes: note how veen went from "my business partner" to "veen", but "my wife" is still -- mine

asciilifeform: ben_vulpes: we briefly had a case of an interactive wife here, davout's

asciilifeform: but currently 0

asciilifeform: !!key oleanie

asciilifeform: there were formerly other ratings, but evaporated

asciilifeform: smoked the smallest cigs i ever saw

asciilifeform: like long pencil erasers.

asciilifeform: quite implicit, the marriage was certainly not executed here.

ben_vulpes: asciilifeform: could be contractual even if contract never executed in chan or even deeded.

asciilifeform: ben_vulpes: only in heathendom

ben_vulpes: there is no bar to presentation of previously signed documents at a later point.

asciilifeform: ah in that sense

asciilifeform: given that contract is a thing only to the people in it -- sure.

PeterL: http://btcbase.org/log/2017-02-21#1616189 << Why not just respond with "pong" like they expect? ☝︎

a111: Logged on 2017-02-21 17:43 asciilifeform: could simply add anybody who emits a 'ping' to banlist.

asciilifeform: PeterL: what part of 'prb does not own bitcoin protocol' is hard to grasp?

asciilifeform: to what else would you have trb 'respond as they expect', PeterL ? bloom filter? segshitness?

asciilifeform: no pasaran.

PeterL: seems like a ping, pong is not a big change, but I guess I see your point. Is there any benefit to it, or is it strictly noise?

mircea_popescu: there is some value in node discovery, but there's a major problem with the socket starvation.

asciilifeform: PeterL: so far i've found ~0 net effect. (earlier today thought that it was a net loss, but dulap caught up and stayed caught up.)

mircea_popescu: asciilifeform block verification having been your actual issue as per http://btcbase.org/log/2017-02-21#1616446 ☝︎

a111: Logged on 2017-02-21 22:58 mircea_popescu: asciilifeform i expect your node's problem is verification.

asciilifeform: mircea_popescu: block verification is ~an~ issue, world stops for 3-8 minutes when block candidate is being eaten. but is demonstrably not the cause of multi-hour blackhole.

mircea_popescu: yeah. just, back on the 21st the problem happened ot be a pile of contrived blocks s'all.

asciilifeform: mircea_popescu: if you know moar, i'm all ears

asciilifeform: btw do the prb folk have parallelized block verify yet? or do they simply eat whatever garbage.

asciilifeform: mircea_popescu: next patch is a blockverify timer.

asciilifeform: in other wtf, https://hub.docker.com/r/mazaclub/btc-therealbitcoin-base

mircea_popescu: anyway, the point in case block we were discussing yest. i timed it at 22 minutes on "reasonable" amd. ☟︎

asciilifeform: ^ who... and why??

asciilifeform: mircea_popescu: might be interesting to extend my eatblock experiment to modern height

asciilifeform: ( if you recall , that was when we had a trb node, offline, eat the complete chain to date from disk, with timer and valgrind going )

asciilifeform: that xxxx74 block may well be close to 'worstcase'

asciilifeform: i'ma guess the elixir of slooow is: disk thrashing via snarfing of old inputs

asciilifeform: with max nonlocality

asciilifeform: (a 2010 here, a 2011 there...)

asciilifeform: disk is the real killer tho.

asciilifeform: (there is a sigop limit, but no block seek thrash limit!)

asciilifeform: update: both 'wired' nodes at 454265

asciilifeform: !~bc stats

asciilifeform: !~bcstats

jhvh1: BingoBoingo: Bitstamp BTCUSD last: 1132.0, vol: 11870.49427512 | BTC-E BTCUSD last: 1110.612, vol: 5569.02674 | Bitfinex BTCUSD last: 1134.8, vol: 14528.00686702 | BTCChina BTCUSD last: 1086.519981, vol: 4311.64890000 | Kraken BTCUSD last: 1134.1, vol: 1989.691172 | Volume-weighted last average: 1124.93557762

asciilifeform: in other lulz, http://shattered.io

asciilifeform: fpga farm also.

asciilifeform: (not mega-seekrit, it was what alphago ran on)

shinohai: In other news `SHA-1` is trending on twitter today: https://twitter.com/search?q=SHA-1&src=tren

asciilifeform: !#s sha1

asciilifeform: ^ rich chronicle of lulz

asciilifeform: oh mircea_popescu , ben_vulpes , mod6 , et al : the wires patch has a mistake, it fails to reconnect; please do not waste time to test it until fixed.

asciilifeform: ACHTUNG, PANZERS!

asciilifeform: mircea_popescu , ben_vulpes , mod6 , et al : http://therealbitcoin.org/ml/btc-dev/2017-February/000251.html

asciilifeform: ^ [BTC-dev] (EXPERIMENTAL) Wires (rev. 1)

trinque: However they ~will~ prevent the idiotic situation where known/trusted nodes were treated equally to random scum. << lovely, thank you asciilifeform

asciilifeform: trinque: two main things to test, afaik: 1) reconnects (let it connect, then temporarily ban ip in iptables on the other side; see how long it takes to reconnect) and 2 ) bidirectional wires, two nodes 'wired to' one another, same, in each direction.

asciilifeform: third item to test : two or more wires.

asciilifeform: fourth item : wires over ssh tunnel (set up the tunnel, then add 127.0.0.1:tunnelport as your wire)

asciilifeform: that's pretty much it.

asciilifeform: oh i neglected to revise the readme: 'they don't ever voluntarily get disconnected' is not strictly true!!!! wires are now permitted to disconnect (in catastrophic situations, e.g. flood) but will attempt to reconnect after the set interval, ad infinitum.

asciilifeform: !~later tell mircea_popescu in re: http://btcbase.org/log/2017-02-23#1617048 , interestingly zoolag -- despite being an x86 comp the size of a tea saucer, and weighing ~400 gram -- has roughly 3x faster block verification (of given block) than dulap ! -- on account of ssd. ☝︎

a111: Logged on 2017-02-23 03:55 mircea_popescu: anyway, the point in case block we were discussing yest. i timed it at 22 minutes on "reasonable" amd.

asciilifeform: seems to support the disk thrashing hypothesis.

asciilifeform: in other lulz:

asciilifeform: 'One of the first speeches at this year’s Conservative Political Action Conference challenged the media to stop referring to the “alt-right,” a small, far-right movement that seeks a whites-only state and that strongly backed Donald Trump for president, as conservative. “There is a sinister organization that is trying to warp its way into our ranks,” said Dan Schneider, the executive director of the American Conservative Un

asciilifeform: ion, which runs CPAC. “We must not be deceived by [a] hateful, left-wing fascist group.”'

asciilifeform: and in neighbouring monkey cage,

asciilifeform: 'William H. McRaven, a retired four-star admiral and former Navy SEAL, defended journalists this week, calling President Trump’s denunciation of the media as “the enemy of the American people” the “greatest threat to democracy” he’s seen in his lifetime.'

asciilifeform: ( https://archive.is/3s601 , https://archive.is/nApiy for dedicated entomologists . )

asciilifeform: and in same fishwrap, another 'new york deathray plot', https://archive.is/me1dv >> 'The U.S. Army veteran was charged last week with trying to support the Islamic State ... Agents swooped in during a meeting with a man Hester believed was an Islamic State contact, according to an affidavit filed in U.S. District Court in Missouri. But the man was actually an undercover FBI agent who had been building a case against the 25-year-0ld f

asciilifeform: ather of two.'

asciilifeform: 'On his profile, he described himself as “Zionist Jew Pig Redneck Hunting Super Assassin,” according to court documents. '

asciilifeform: brilliant.

asciilifeform: 'Hester said he didn’t have money for bullets but could buy some in a couple weeks when he got his tax return.'

asciilifeform: nao, nobody expects to read about non-retarded 13337 t3rror1stz in the völkischer beobachter. but apparently nowhere else, either.

asciilifeform: and with temper tantrums at wife in lolmart, etc.

asciilifeform: fit for lafond article.

mircea_popescu: anyway, what did the pravda say, what is the "big" and non-alt-right conservative ?

mircea_popescu: either in terms of who participates or what it proposes. i can't seem to find either ?

asciilifeform: mircea_popescu: the 'non-alt' is the old 'gop', the one that sets up 9/11s, invades iraq, etc.

asciilifeform: 'alt' is -- until recently -- crackpots, mr.mold et al. now is hell knows what, 1,001 remoras.

asciilifeform: mircea_popescu: they put on new set of hand muppet gloves, clitler et al.

asciilifeform: the 'respectable conservatives' are a zhirinovskian 'heat sink' and have been for decades.

mircea_popescu: so the media reports to have been "challenged" to stop mentioning the rapist raping it into an early grave by certain imaginary friends it has hallucinated into existence ?

asciilifeform: speaking of zhirinovskys,

asciilifeform: 'White nationalist Richard Spencer says he’s been kicked out of a gathering of conservative activists. Spencer posted a video on the internet saying he was “politely asked to leave” the Conservative Political Action Conference. Spencer was booted shortly after being denounced by an organizer of the conference. American Conservative Union Executive Director Dan Schneider denounced the so-called alt-right as anti-Semitic, racist

asciilifeform: and sexist.'

mircea_popescu: it shall be so lulzy to watch the libertards reconstruct BOTH the shreds of their failed official-left party as well as an imaginary not-trump GOP, all this while actually having to work two jobs to support themselves because well, the endowments are gone-gone.

mircea_popescu: it's like going from jewish princess to blue collar divorced man in the space of one fucking season.

asciilifeform: they're gone?!

asciilifeform missed the memo

asciilifeform: mats: it is a little disappointing, apparently not fully general collision, but only works on strings having a certain structure

asciilifeform: which, i cannot help but notice, resembles the mirrored keys on phuctor...

asciilifeform: mats: i learned my lesson re bbet during the leesedol thing.

asciilifeform: 'don't play chump games unless you stacked the deck yourself. and even then, reconsider.'

asciilifeform: more like taking unknown pills.

mircea_popescu: asciilifeform basically they're mining pdfs. anything, ANYTHING WHATSOEVER, please god anything, just as long as it's not the thing.

asciilifeform: waiwat

asciilifeform: the sha1 people posted the algo. shouldn't take too much work to turn it into a, e.g., gpg fp clobberer.

asciilifeform: as i currently understand it.

asciilifeform: or git clobberer

asciilifeform: well yes, specifically the full fp

asciilifeform: short fp was breakable on a 486

mircea_popescu: which is funny seeing how tmsr design was moving towards "full modulus" a year ago and "for no reason"

asciilifeform: 'refused to use git for no reason'

asciilifeform: 'ain't git-cum-pgp as good as v..?' -- somebody or other

mircea_popescu: asciilifeform there's an intermediate fp between the 40 char and the 8 char item.

asciilifeform: 'A V4 fingerprint is the 160-bit SHA-1 hash of the octet 0x99, followed by the two-octet packet length, followed by the entire Public-Key packet starting with the version field. The Key ID is the low-order 64 bits of the fingerprint. ' -- ye olde rfc4880

asciilifeform: notice that this comes with a built-in twiddle nonce -- the key creation timestamp

asciilifeform: lel d00d was tuned in, all this time..

asciilifeform: adlai: any time you feel like doing something useful -- no shortage of items. there is, for instance, a trb knob direly needing testing, http://therealbitcoin.org/ml/btc-dev/2017-February/000251.html

danielpbarron: the collision was apparently real enough to trigger the spending of a bounty contained in some nonstandard address abomination >> https://bitcointalk.org/index.php?topic=293382.msg17950195#msg17950195 ☟︎

asciilifeform: lol firing squad

asciilifeform: in other vintage lulz, 'Note also that unlike nearly every other OpenPGP subsystem, there are no parameters in the MDC system. It hard-defines SHA-1 as its hash function. This is not an accident. It is an intentional choice to avoid downgrade and cross-grade attacks while making a simple, fast system. (A downgrade attack would be an attack that replaced SHA-256 with SHA-1, for example. A cross-grade attack would replace SHA-1 wi

asciilifeform: th another 160-bit hash, such as RIPE-MD/160, for example.)'

asciilifeform: -- the -- i shit thee not -- rfc.

asciilifeform: 'to prevent anal punishments, we pre-inserted this road cone into your arse. this is not an accident. it is an intentional choice...'

asciilifeform: http://btcbase.org/log/2017-02-23#1617193 >> golden lulzies, 'Note that the value of your SHA256, RIPEMD160, RIPEMD160(SHA256()) or SHA256^2 bounty may be diminished by the act of collecting it.' ☝︎

a111: Logged on 2017-02-23 18:47 danielpbarron: the collision was apparently real enough to trigger the spending of a bounty contained in some nonstandard address abomination >> https://bitcointalk.org/index.php?topic=293382.msg17950195#msg17950195

mircea_popescu: asciilifeform the important point there is : the whole fake bitcoin address (3something) is supposed to be "useful" in practice. this utility is supposed to be proven by idiotic "challenges" like this one put up by peter todd. EXCEPT the output does not actually SIGN the transaction claiming the bounty. ☟︎

asciilifeform: it was a toy, and even explicitly warned 'you must mine the block yourself, or miner can simply take the prize'

mircea_popescu: what they say is "we recommend you mine the block yourself", because totally, this is how it goes, instead of saying "we understand this doohickey is braindamaged beyond the conceivable and the only reason it exists is the existential void besetting our meaningless existence"

asciilifeform: to revisit upstack, for whoever may have forgotten, gpg sigs ONLY contain 64bit keyid. e.g., from my vpatch sigs, 0xB98228A001ABFFC7 .

mircea_popescu: or to quote from the cesspool, "This is both incredibly fascinating, and a beautiful show of the kinds of innovation the Bitcoin system supports!"

asciilifeform: at quite reasonable expense, enemy can produce a key that sha-fp's to B98228A001ABFFC7, and for which he has the priv p,q.

asciilifeform: ditto mircea_popescu's, and everybody else.

asciilifeform: it is not particularly difficult for tmsr folk to avoid situation where this boojum matters. however it is quite ~impossible~ for heathens to avoid.

asciilifeform: signatures from, e.g., linus, are automatically in question.

asciilifeform: and anyone else with whom you (for particular values of 'you') have not exchanged, out of band, modulus.

asciilifeform: http://btcbase.org/log/2016-08-18#1523633 << see also. ☝︎

asciilifeform: and also http://btcbase.org/log/2016-06-17#1483829 thread. ☝︎

a111: Logged on 2016-06-17 02:16 asciilifeform: btw does mircea_popescu know what would happen if a pgp key with his main key but new magical subkey were generated and posted to sks ?

mircea_popescu: amusingly enough -- it is currently the case that deedbot's deeds list integrity is currently protected by republican design rather than by usg's "cryptographic standards".

asciilifeform: mechanical, bitwise integrity -- yes

mircea_popescu: this is where you link any imbecile of the geoffrey supran variety who dares blather about how "do not homebrew crypto"

mircea_popescu: asciilifeform no, i just mean the reason it can't get crapflooded with fake deeds.

asciilifeform: not without a broad daylight fleanode break.

mircea_popescu: even then. "you weren't voiced on my machine, whence did this deed come from"

asciilifeform: the real headache is that it is entirely possible to produce a 'i eat toe fungus!', signed, sincerely, 0x8A736F0E2FB7B452. a year ago i estimated that this costs 100k usd. today -- probably a few thou.

mircea_popescu: asciilifeform o hey, consider this situation : 1. i know your fp, so i make fake key for that fp. 2. i know trinque 's fp, so i make fake key for that fp too. 3. i know you keep a signed copy of trinque's key on your keyring ; so : 4. i proceed to sign trinque's fake key with your fake key and 5. pretend to be a noob and give you my gpg pubkey. ☟︎

mircea_popescu: if you --import it gpg will probably update trinque's key under your signature won't it.

asciilifeform: it will, guaranteed.

asciilifeform: the keyring thing is a work of evil.

asciilifeform: became a serious itch for asciilifeform when he watched a sha1 collision get crapped out on demand, for minor project, at butugychag 1+ yr ago

mircea_popescu: we started moving away from sha-1 to sha-512 digests for clearsigned messages what, coupla years back ?

asciilifeform: mircea_popescu: yes but this does 0 for gpg fp.

asciilifeform: they are hard-wired to sha.

asciilifeform: regardless of knob settings. it is required by the rfc, and is in common among all known pgptrons.

mircea_popescu: i'm not disputing that part ; just saying that it's not exactly a surprise.

asciilifeform: should not have been a surprise, to anyone. like the old example of derelict bridge falling down. 'not an if, but a when'

mircea_popescu: anyway. to get back to the point of interest : it is entirely possible to produce a 'i eat toe fungus!', signed, sincerely, 0x8A736F0E2FB7B452. ; but it is not possible to hide the fact that this was a fake from the owner of the privkey and anyone who has his pubkey.

asciilifeform: trivially correct.

asciilifeform: will add also that from the pov of a third party unliked to wot of (owner) or (usurper), there are now ~two~ 0x8A736F0E2FB7B452 people.

mircea_popescu: (and, of course, we have, courtesy of you know, that "unreasonable expenditure that will spell the ruin of s.nsa and with it of the entire republic!!11" a complete list of all rsa moduli.)

asciilifeform: we also have a few other things, e.g., http://btcbase.org/log/2016-12-11#1581867 . ☝︎

a111: Logged on 2016-12-11 23:00 asciilifeform: i was not going to expand on the 'p' thread until the proggy is done, but this is probably a good time to say 1 more

asciilifeform: ~done. i was aiming to SPARKify it before release...

mircea_popescu: i think it's a good time to release (provided it doesn't turn into a wires thing eh!), we can have it on qntra and "republic same day response" etc.

asciilifeform: this is one of those 'sapper -- errs once' affairs.

asciilifeform: safety-critical code.

ben_vulpes: asciilifeform: 'SPARKify'? reduce existing code to fit into SPARK subset of ada?

asciilifeform: ben_vulpes: it is more than simply 'reduce', but yes

asciilifeform: http://btcbase.org/log/2016-12-11#1581753 << prev thread re subj ☝︎

a111: Logged on 2016-12-11 21:09 asciilifeform: trinque: it is a very simple thing, think 'rpn calculator' and you almost have it.

deedbot: http://www.contravex.com/2017/02/23/joseph-and-the-amazing-technicolor-dreamcoat/ << » Contravex: A blog by Pete Dushenski - Joseph and the Amazing Technicolor Dreamcoat

asciilifeform: 'YouTube cuts popular live stream of giraffe about to give birth for 'nudity and sexual content''

jhvh1: trinque: Bitstamp BTCUSD last: 1178.98, vol: 10955.20557454 | BTC-E BTCUSD last: 1136.159, vol: 6445.08664 | Bitfinex BTCUSD last: 1181.4, vol: 21505.71700862 | BTCChina BTCUSD last: 1119.21264, vol: 5499.66000000 | Kraken BTCUSD last: 1179.0, vol: 2546.68111312 | Volume-weighted last average: 1167.21082463

asciilifeform: elsewhere, in re http://btcbase.org/log/2017-02-22#1616821 >> http://archive.is/QoAki << 'Google’s Jigsaw unit, as part of a larger effort to battle online trolling, said earlier today that it was releasing a new tool called Perspective, software that uses machine learning to detect harassment and abuse online.' ☝︎

a111: Logged on 2017-02-22 07:26 mircea_popescu: anyway, there's a common thread going through the google go ai, attempts to "secure the banking system against risk", the surveillance state / internet of things / smart cars and so on.

asciilifeform: 'The software works by determining the “toxicity” of online comments, a scale that has been established by mining millions of comments from the web and then presenting them to panels of 10 people (humans!) at a clip to get their feedback. '

asciilifeform: 'Update February 23rd, 1:45PM ET: Twitter user Ramsey Nasser points out that the algorithm has consistently high toxicity for Arabic, no matter the content.'

asciilifeform: gold.

asciilifeform: trinque: what about http://btcbase.org/log/2013-12-04#405828 ? ☝︎

a111: Logged on 2013-12-04 18:23 gribble: MtGox BTCUSD last: 1210.0, vol: 15442.99754919 | Bitstamp BTCUSD last: 1150.01, vol: 12582.57372365 | BTC-E BTCUSD last: 1059.9, vol: 11463.51851 | Bitfinex BTCUSD last: 1150.01, vol: 2621.40917063 | CampBX BTCUSD last: 975.55, vol: 94.01568371 | BTCChina BTCUSD last: 1126.0836, vol: 49103.04600000 | Volume-weighted last average: 1135.7963542

asciilifeform: or what, we aren't counting mtgox ? then why count the other leveraged and otherwise paper-addled exchanges.

asciilifeform: unrelatedly, system of two 'wired' trb nodes appears to have marked resistance to 'blackhole'.

asciilifeform: first it went to 1300s.

asciilifeform: iirc?

mircea_popescu: anyway, re "online trolling", it's by now a rather transparent euphemism for "racist homophobic terrorism" aka "russia influencing elections" aka pantsuit clown getting raped by reality.

mircea_popescu: o hey check it out -- latest trilema article not actually indexed by google.

mircea_popescu: this could be because "rape" (this happened before, a few trilema articles that google unhappened) ; or maybe triloxic content finally got its comeuppance.

asciilifeform: meanwhile, in the monkey cage, https://archive.is/TlYxN

mircea_popescu: turns out "the biftinex hack" was ~= same as "the mtgox blabla", ie usg ran off with the coins ?

mircea_popescu: (but nice trick with the archive there, got me to check out reddit and it wasn't even talking about me!)

asciilifeform: in other noose! zoolag and dulap are now wire-via-ssh-tunneled together.

asciilifeform: worx great.

asciilifeform: ACHTUNG, PANZERS! ☟︎

asciilifeform: mircea_popescu, ben_vulpes , mod6 , shinohai , et al :

asciilifeform: http://therealbitcoin.org/ml/btc-dev/2017-February/000252.html

asciilifeform: [BTC-dev] (EXPERIMENTAL) A Recipe for the use of Wires via SSH Tunnels. ☟︎

asciilifeform: and holy mother of fuck, jurov , why does your thing mangle '@' into 'at' ☟︎

asciilifeform: guessed.

asciilifeform: anyway this is up an' running.

asciilifeform: in other lulz, mircea_popescu , https://archive.is/HIr9r << i think we have the answer to 'why did asciilifeform get 64kb of crapolade in the guise of ZIPs from archive.is in july of '16 ? '

asciilifeform: 'cloudbleed'

asciilifeform: 'On February 17th 2017, I was working on a corpus distillation project, when I encountered some data that didn't match what I had been expecting. It's not unusual to find garbage, corrupt data, mislabeled data or just crazy non-conforming data...but the format of the data this time was confusing enough that I spent some time trying to debug what had gone wrong, wondering if it was a bug in my code. In fact, the data was bizarre enoug

asciilifeform: h that some colleagues around the Project Zero office even got intrigued. It became clear after a while we were looking at chunks of uninitialized memory interspersed with valid data. ...'