mircea_popescu: myeah. the only problem is that i suspect the unix notion of filenames (if ~properly~ regarded, ie, full paths) is actually entirely correct, and how gns will have to work anyway.
mircea_popescu: gns:mircea/writings/trilema/categories/ is just about the only way to corectly refer to the item.
mircea_popescu: asciilifeform the logged discussion on the topic was, "if hashes match but paths do not, the file was moved ; if hashes match and paths match, the file is untouched ; if hashes do not match but paths match the file was modified ; if hashes do not match and paths do not match the file was created/deleted"
☟︎☟︎ mircea_popescu: file a/hurr/durr.txt hash aba1 matches file b/hurr/hurr.txt hash aba1, durr.txt was renamed as hurr.txt (renaming and moving are, like norton commander correctly identified, the SAME op. it's all a namechange.)
mircea_popescu: yes, the idea was to make a "reorg" patch separately if you're going to move files about.
phf: mircea_popescu: we're on the same page
mircea_popescu: meanwhile otherplaces, "shared libraries are obviously a good idea until you’ve actually used them. then whether it’s obvious or not that they’re a bad idea is mostly a matter of how close you are to trying to get them to work." such a great share that anant thing.
mircea_popescu: and so you check the dood's bio, and "I currently work at Ozlo, where we’re building an AI-powered digital assistant. Previously, I worked at Firebase, a scalable realtime application backend. Before that, I worked on a wide range of experimental projects to improve the web at Mozilla Labs."
mircea_popescu: just... why the fuck! "i am an intelligent fellow. i have these dumbells on my feet ; and this loudspeaker screaming in my ears". dude...
mircea_popescu: asciilifeform seems to me a correctly designed and properly implemented version of trinque 's original doodle, which he summarily described as "bundle all files together and hash"
☟︎ trinque: mircea_popescu: bet you the dood even read it.
mircea_popescu: it's just... jesus christ i am at a loss to comprehend what the problems involved are. fuck me, i'm working on an ai sex bot to fetlife ? really ?
phf: asciilifeform: well you followed an established tmsr solution to inbandism, state the counts before you present the count.
mircea_popescu: it's not even the timewaste per se, it's the subjective relation to it.
phf: btw unified diff also follows the same format. you can use @@ ... @@ to know exactly when your hunk ends (see the vpatch code)
phf: there's an implicit inbandism in unified diff though, which is the requirement for diff to be a POSIX "text file", so you still have arbitrary, and unknowably, large "lines"
mircea_popescu: i don't remember what you said when i asked if your new diff diffs binaries ?
phf: mircea_popescu: it doesn't now, there's no reason why it can't, diffing binaries is a different beast from text diffing, so it's about adding a new kind of hunk/header formats that say "this here follows a binary diff"
mircea_popescu: phf that's the issue in my head, of no practical consequence as it is : why, exactly, different beast, and how ?
mircea_popescu: if you have the time i'll hussle you with annoying fundamental questions. if not, later.
phf: mircea_popescu: let's revisit this question in a couple of days, i'll give it some thought too. i want to finish regrind in the next day before hanbot is done with standing up her mp-wp instance
phf: it looks like i'm going to wrap up the rest of the "replicate diff/patch" this week, so that'll also be the time to start adding the clever features
mircea_popescu: it also looks like douchebag ran out of chicks in his discordbook, so we shall enjoy productivity unblemished lel
phf: tmsr tests your fuzzy numbers, it's where "plenty" becomes "~3-5" or more often than not "none at all"
mircea_popescu: part and parcel of the problem of postmodernity, and the deep cause behind all the superficiality, is that nobody ever gets a run for his money. like in overadvanced (supercowardly) species, the whole contest of life consists of display and nothing more.
mircea_popescu: (as you might intuit, i was a terror as a 5yo being introduced to darwinism. "so why did the other birdy quit ?" "well the guy was bigger." "so ?" "so he's affraid of him." "why ?" "because he's bigger." "So what if he's bigger ? what could he do ? just flies around like an idiot" "could peck it" "so could the smaller one!" and on and on.)
douchebag: !!pay -0.01 128BUcwkYM4AK2k6TXEg8RvA83kxL6Sw9Y
douchebag: !!v 387FBFD7CBFF96A786BA6603955FF979E301422D9E722AA258E45C174B949086
douchebag: !!v 515B68D8A92E5C93C110EEA41B63B623FFCAC88F8F61DD243D5DE2E71C1A0AD2
douchebag: That's all the testing for that matter
douchebag: The idea was that if the bot subtracts the value I send Ie: Balance - - 0.01 it would actually become balance + 0.01 because maths
douchebag: And if the bot was checking if my balance is greater or equal to the value sent, it would obviously pass
douchebag: I actually have found that in web applications before
douchebag: It also leads me to wonder if there are any race conditions in deedbot
trinque: and wtf, pay negative, you think I didn't handle that?
trinque: where's my report on trb dependencies?
douchebag: I'll get on that now, just got home from work
douchebag: What distro would you suggest doing a fresh install on?
douchebag: That'd be interesting - I have minimal experience with gentoo
mircea_popescu: also if you manage to upset the developer's expectation javascript uses ints, it'll fail all sorta 4.9999998 = 5 tests
trinque: this'd be why I didn't use the floopy lisp for the math (yes, could've done the checks in floopy lisp, but.)
mircea_popescu: douchebag there's an almost-official gentoo version floating about, we're working towards making it definitive.
trinque: but as dianan_coman observed, the outside world moved, while the thing hadn't yet eaten enough of the outside world.
trinque: idea is portage, the gentoo package build system, is redone in V
trinque: but, I would recommend a student go build his own by hand. doing so by reading my script would be fine, so long as you research every line to understand why that step was done.
mircea_popescu: !!pay 123456789012345678901234567890123456789012345678901234567890.123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890
trinque: command is a dumb string until the OTP is confirmed, and then gets parsed and certain type demands are made of the result
trinque: which, if fail, straight into oblivion with it
trinque: also subscribe lever has been removed for something like a year, and I've been processing subscription requests by hand
mircea_popescu: in other lulz, "Hey! I'm Ashley. I'm an 18 year old girl living in Houston, TX who's in a bit of a financial bind at the moment. I'm a senior in high school. I don't even have my drivers license or a ride to work so it's not like I can get a normal job at the moment."
trinque: lol nah I had one of those before, wrong jusrisdiction to straighten her out, as per the definitive trilema.
douchebag: trinque: For my writeup, do you want exploits that can actively be exploited on trb or just exploits in the dependencies used?
trinque: if yes, why, if not, why not, would be great.
mircea_popescu: so this upscale local market ("automercado") that stocks all the shit i buy and consequently got a multi-mn monthly account came up with the very dubious idea of running a promotion. one of those things where you get stickers with your receipt and then you fill a book ? in the terms of the master provisioneer, "they'll rue the day!". i think she's got like twenty of the things all lined up.
lobbes: finally sat down and learned some basic sed commands. I especially love the ability to chose an alternate delimiter; makes certain cases of escaping characters a breeze!
lobbes currently hacking a script to convert all the absolute references in my downloaded kibo.com to relative
lobbes: turns out the whole kibo site is only 40 mb or so, so I figured I'd try and mirror the whole thing (after browsing it last night, I realized that the meta aspects of the site are part of the fun)
lobbes: plaintext dun do it justice
trinque suddenly regrets whatever space unescaping \/ is taking up in his skull.
mircea_popescu: lobbes here's a bonus : suppose you have a lengthy file (such as say a server log) and you want to extract just one column. you got awk : cat hurr.txt | awk '{print $3}' (and -F will set the delimiter if space's no good).
mircea_popescu: trinque i despise tools that make you escape. really, it's fucking dumb, let the metachar be settable so i can not need it.
mircea_popescu: and now consider something like cat *** | grep "data.maryland.gov" | awk '{print $19..$22}' | sort -u << "get me the fields 19th through 22nd, once only, and sorted alphabetically".
mircea_popescu: and as it has to be said : you are not a man until you've played a browser game through curl, pipe and awk/sed.
mimisbrunnr: Logged on 2018-04-02 16:54 mircea_popescu: we just discussed this ; s.nsa is at the most selling one of the two spares. ill run the numbers later an' give you an aye or nay.
mircea_popescu: "In March 2018, the blog had 7,556 page views and I made $27.09!!"
ben_vulpes: !!v 6214E787A837E6749DEE8709D2234A274FC8637BF1975414A17E6750FA2FAC26
deedbot: ben_vulpes updated rating of shinohai from 1 to -1 << ran off and took a rather useful tool with him
ben_vulpes: anyone want to buy some electronics off amazon for me, get reimbursed in btc?
☟︎ shinohai: logs.bvulpes.com/trilema?d=2018-4-3#324450 <<< have used your script, and it's former incantaion from years ago - very useful things. My solution thus far is simply running a binhost locally, which is temporary as I try to tweak recipe for amd64.
mimisbrunnr: Logged on 2018-04-03 01:03 trinque: but, I would recommend a student go build his own by hand. doing so by reading my script would be fine, so long as you research every line to understand why that step was done.
shinohai: Also, trinque is your www of wot not updating at this time?
☟︎ mimisbrunnr: Logged on 2018-04-03 07:28 ben_vulpes: !!v 6214E787A837E6749DEE8709D2234A274FC8637BF1975414A17E6750FA2FAC26
douchebag: I think I got remote code execution on someones box
douchebag: If that's one of you, please contact me and I will help you resolve this issue
mod6: shinohai, if you could bring that thing that'd be nice.
mod6: meanwhile, we should probably replace that bot functionality asap. we need a way to get VWAP recorded in here daily.
☟︎ a111: Logged on 2018-03-24 00:50 shinohai: I can tar the plugins up for you if you need 'em.
lobbes: either way, I'll try and slap up a vanilla gribble on my pizarro shell later this night
a111: Logged on 2018-04-03 08:00 ben_vulpes: anyone want to buy some electronics off amazon for me, get reimbursed in btc?
lobbes bbl; off to the saltmines
douchebag: Hey, would you guys be able to show me up a pizarro shell for trb?
a111: Logged on 2018-04-03 12:39 douchebag: the IP address begins with 174.108
douchebag: asciilifeform: Basically last night I was sending commands in the bot that would lead to remote code execution
douchebag: The code execution being wget the url provided in case of blind RCE
douchebag: Yeah I figured that was a possibility, I just figured I would mention that incase the code did get executed by anything unintentionally
a111: Logged on 2018-04-03 12:30 shinohai:
http://logs.bvulpes.com/trilema?d=2018-4-3#324610 <<< I'm sorry, been working on my new book "How to set chmod permissions in under 1 minute so users can log into their shell, and other things isp ops should know!" .... but I'll look into that as time permits.
mimisbrunnr: Logged on 2018-04-03 07:28 ben_vulpes: !!v 6214E787A837E6749DEE8709D2234A274FC8637BF1975414A17E6750FA2FAC26
trinque: douchebag: that is not any of my IPs
trinque: what'd you do that got it to belch?
douchebag: no clue, I just checked the logs and saw that lolz.txt was grabbed via wget
☟︎ trinque: auditor: "says here you talk like a fag, and your shit's all retarded"
trinque: douchebag: I'm asking what the test was, which involved lolz.txt
shinohai: but i like salt, my popcorn has been a bit bland of late.
shinohai: ben_vulpes is also aware *why* checking if bot is in #trilema these days is kinda low on list of priorities, as i am in field and only read logs.
douchebag: trinque: I was just issuing commands to the bot
douchebag: And I saw the file actually was requested with wget from an IP address I did not recognize
trinque: yeah I followed that part the first time
trinque: after which command did you get a boop
douchebag: I have no clue - I woke up this morning and saw it in the logs
douchebag: I tried a number of different requests
shinohai: I mean, i still can't play eulora because minigame.bz/ hasn't a server, but i certainly didn't negrate the lot of the #pizarro folks.
trinque: shinohai: weren't you running a bot?
trinque: instead of whining about it, why not bring back said bot
☟︎ shinohai: yup and it shall rejoin as soon as i get back @ desk. my apologies for inconvenience
BingoBoingo: <mircea_popescu> so this upscale local market ("automercado") that stocks all the shit i buy and consequently got a multi-mn monthly account came up with the very dubious idea of running a promotion. one of those things where you get stickers with your receipt and then you fill a book ? in the terms of the master provisioneer, "they'll rue the day!". i think she's got like twenty of the things all lined up. << Here "automercados" are
☟︎ BingoBoingo: roughly convenience stores. The servicios tend to have better sandwiches
ben_vulpes: !!v A4C82702BD7A91BE63B8838DB2164C2B2BC39E9F99B411FB0EEDB8D2192D1F3F
deedbot: ben_vulpes unrated shinohai.
BingoBoingo: douchebag: When are some Qntra submissions incoming?
douchebag: I can have some ready tonight if you can link me to where qntra shares are traded
douchebag: last time I tried looking there were so broken links
☟︎ BingoBoingo: douchebag: On MPEx, there's proxy issues being sorted out. Sometimes the proxies run away and MP has to chain them back to his Ex
BingoBoingo: In other news, the nose is mostly under control. South American cold still has my energy rather zapped. The Incan nurse however did apologize last night.
☟︎ BingoBoingo: asciilifeform: Remember, nothing of incredible value. I am still awaiting a birthday card from February.
☟︎ trinque: douchebag: consider that if you figure out which box responded to you, you at the very least can improve some Lord's bot for him, maybe lobbes' archivebot slurped it? At best, (if it was done in PM), you've got something else listening in, slurping things up.
trinque: that latter would be a mighty interesting blog post
BingoBoingo: trinque: Remember the "Reddit Police" DDoS bot?
BingoBoingo: Roughly coincided with the GAW miners drama.
a111: Logged on 2018-04-03 12:30 shinohai:
http://logs.bvulpes.com/trilema?d=2018-4-3#324610 <<< I'm sorry, been working on my new book "How to set chmod permissions in under 1 minute so users can log into their shell, and other things isp ops should know!" .... but I'll look into that as time permits.
mimisbrunnr: Logged on 2018-04-03 07:28 ben_vulpes: !!v 6214E787A837E6749DEE8709D2234A274FC8637BF1975414A17E6750FA2FAC26
a111: Logged on 2018-04-03 12:29 shinohai: Also, trinque is your www of wot not updating at this time?
mimisbrunnr: Logged on 2018-04-03 14:25 douchebag: Hey, would you guys be able to show me up a pizarro shell for trb?
douchebag: My machines are capable but if I'm going to be running a node, it would probably be best to have a dedicated VPS to do so
mircea_popescu: douchebag generally it runs on actual dedicated machines, rather than vps.
a111: Logged on 2018-04-03 12:51 mod6: meanwhile, we should probably replace that bot functionality asap. we need a way to get VWAP recorded in here daily.
BingoBoingo: douchebag: The added value in running more nodes is generally spreading the network geographically, etc. There's little value in adding yet another nominal node to the same box or AWS freakshow
a111: Logged on 2018-04-03 12:39 douchebag: the IP address begins with 174.108
mircea_popescu: douchebag dood is building the UCI before we even have it lmao.
trinque put a rather beefy node in the pizarro rack at 161.0.121.250
mircea_popescu: asciilifeform the pic shows that he got "something" to load a file from his filehost. supports the theory that has rce, if he can run wget he can run plenty.
mircea_popescu: (consider, the way linux works today, if i can run wget as a user i can take the box, the memory leaks.)
mircea_popescu: wget WILL time the netcard for you, the netcard has dma, that's the wholew story.
mircea_popescu: asciilifeform well, some ip apparently. i dunno, going through teh logs.
mircea_popescu: this is a theory we can easily verify. douchebag write f2c26beed4 on the boxes' tits or something. can you get it reliably ?
mircea_popescu: not entirely intractable to discern whether human is involved or not.
douchebag: Actually, I exited out of that - I'm able to retrieve it but I need to know the proper request to send. waiting on a response from that right now
douchebag: I did do a reverse search on that IP address though
douchebag: It seemed to be out of North Carolina if I remember correctly
lobbes is slowly assembling parts for his own home trb node. Waiting on replacement cpu fan to come in atm. Updates to follow!
mircea_popescu has noticed over the years that the usage of screen is a sort of pons asinorum in computer usage. like the oil rag cloth in a car distinguishes pisi tourist from the driver who actually maintains the machinery ; or like condoms on the nightstand distinguish the woman from the girl and so on.
lobbes: Re: douchebag's recent wget payload: I can confirm that it most likely wasn't my archivebot. The bot doesn't download links directly, it stores list of urls found in chan and forwards them to the archive.is submit form
a111: Logged on 2018-04-03 15:07 asciilifeform: this is possibly foreign concept in 'web' world, but over here in the adult world people , for instance, read logs. every day.
mircea_popescu: but very distantly read. it's a perl meatgrinder, i'm sure it misses most of the meat.
mircea_popescu: vulnerable home computers are pestilentially common ; did you get to the portion in the logs where we logged into a shitton of servers administering solar panels ?
a111: Logged on 2018-04-03 15:24 douchebag: no clue, I just checked the logs and saw that lolz.txt was grabbed via wget
mircea_popescu:
http://btcbase.org/log/2018-04-03#1792298 << what do these two have to do with each other anyway. there should be a difference between doing wrong and not doing enough. not every burgher can be in the town council, that dun mean he's bankrupt now or something, what the hell.
☝︎ douchebag: It it okay if I test this payload again right now
BingoBoingo: Best case it's just the FBI and they are too busy chasing imaginary Russians to notice you walking away with their server
douchebag: Alright, give me a moment I just didn't want to bother anyone with my payloads
lobbes: douchebag aha I think that is my home ip. Plox do test payload again
douchebag: Oh shit, and you never manually ran wget on that IP
lobbes: Actually, when was this? I think I may hace manually wgot
douchebag: vjiayxgdlqk1veovjxso63g6ixopce.burpcollaborator.net
douchebag: on something that looked like that
lobbes: Hmm interesting. Yeah this was a few weeks ago iirc when I curiously grabbed one of yer payloads via wget
douchebag: I got remote code execution on your box
douchebag: Can you send me links to the scripts ?
lobbes: Also not 100% positive if that was my home ip, but charlotte nc is my residence. I'll confirm that tonight
douchebag: Are any of these things being manually passed into bash commands
douchebag: lobbes: How often does the bot search ?
lobbes: the bot operates from an external vps (not my home ip). Shoves urls into a db which my home box downloads and then passes eaxh one to archive.is.
douchebag: and how are you passing these to archive.is
lobbes: That is done through a process where a python script reads from (ahhh now I think I see where it may remotely execute) db and passes url via bash to a phantomjs script which submits to archive.is
douchebag: For you, I really do suggest fixing that
lobbes: I'll dig more into it tonight once I'm in front of it all
douchebag: Because if I was a blackhat I could have pwned ur home box
lobbes: Yeah really. Thank you for uncovering this (I am n00b, you will soon learn)
douchebag: No problem man, just glad I could help!
lobbes: Likewise, I'll give ya a favorable rating once in front of my gpg key
lobbes: Oya. Hey, this is the peril of "learning as you go"
lobbes: What would you suggest as a better design? Obvs no passing urls via bash
mircea_popescu: why is your home box doing work that's not directed at you ?
mircea_popescu: conceptually, if it's talking to you it's an infangwif ; if it's talking to the outside it's an outsidewif. why are you fucking streetwalkers / sending the wife to walk the streets ?
douchebag: lobbes: If you want to make a secure application, consider all user input as malicious
lobbes: mircea_popescu: the logs, but it is an old craptop with an ssd dedicated to public toilet Only place I had to store the gbs of archive data.
mircea_popescu: lobbes well fine, but i was discussing teh design as such. there's no rule against "i have a crappy box for a server that's not worth placing in a dc so it sits in garage", sure. nor is there any rule against "i just simplified speech, called it homebox, it's not" -- but what you say is all i have to go on, that's all.
douchebag: I think it's being passed into bash into a PhantomJS interpreter
lobbes: Man I feel stupid in general
deedbot: mircea_popescu rated douchebag 1 at 2018/01/15 07:34:46 << hyde.solutions
mircea_popescu: !!rate douchebag 2 "your home machine's name is lobbes"
douchebag: lobbes: Just make sure whenever you handle any user input, consider all input as potentially malicious
mircea_popescu: ben_vulpes i wasn't initially going to say anything besides "nay" ; but hey, pizarro's a friend of ours, so : nsa would sell the spare machine for cost, which is about .371. comes with two fgs installed and free shipping.
☟︎ douchebag: and for fucks sake do not pass any user input into a bash interpreter
lobbes: douchebag really though, this has been a wake up call to get my shit together. Ty again
douchebag: Yeah no problem, it was pretty fun to discover
mircea_popescu: !!v 86FC0A4A826976505E6815A4D3677651F10E73948ED9B253C022B65F6C2DFB4E
deedbot: mircea_popescu updated rating of douchebag from 1 to 2 << "your home machine's name is lobbes"
lobbes: Just know, I'm prolly the easiest target here :P
douchebag: It was originally developed by dafydd portswigger
douchebag: now he has a couple other people working on it, I know ones name is James Kettle
douchebag: mircea_popescu: I got 0.01 for perma voice, do I get 0.02 for Remote Command Execution :-D ?
mircea_popescu: lol. i was going to buy you the pro yearly package, actually. but since you already have it, no need :D
douchebag: I appreciate that, feel free to reimburse it though haha
lobbes: Anyways, archivetron's url snarf has been temporarily disabled for obvious reasons. Will resume once I plug these holes tonight
lobbes: I'll announce once back up
douchebag: I bet so many bots could be pwned with similar techniques
mircea_popescu: douchebag i'll get you a sever once the pizarro folk unwrap their heads enough to actually have one on offer. so you can tinker on gentoo, trb etc and get out of the "vps" bs hell.
☟︎ mircea_popescu: asciilifeform i dunno he can arm... one thing at a time.
mircea_popescu: yeah, tell you what, i'll be as happy as you are once it's finally done.
douchebag: Well, I'm gonna grab a cigarette to aid with this excitement
mircea_popescu: this is neat. ok, chuck the largest sd you can find in there an' consider it sold.
mircea_popescu: douchebag alf lands in the oriental republic sometime mid month ; you'll get your login then, an' your first task will be to get trb up on it ; and the tasks 2 throught 999 will be to have fun.
a111: Logged on 2018-04-03 15:38 trinque: instead of whining about it, why not bring back said bot
a111: Logged on 2018-04-03 16:36 BingoBoingo: <mircea_popescu> so this upscale local market ("automercado") that stocks all the shit i buy and consequently got a multi-mn monthly account came up with the very dubious idea of running a promotion. one of those things where you get stickers with your receipt and then you fill a book ? in the terms of the master provisioneer, "they'll rue the day!". i think she's got like twenty of the things all lined up. << Here "automercados" are
a111: Logged on 2018-04-03 16:44 douchebag: last time I tried looking there were so broken links
trinque: general point of "nobody wants your head bud, just move in a direction". I guess he had a health problem, which is rough.
lobbes: To wrap back to this discussion, I think I see your point. There's no real reason this craptop needs to deal with the user input at all. All I need it for is to download, store and parse shit download from archive.is. >>
http://btcbase.org/log/2018-04-03#17924 ☝︎ a111: Logged on 2013-05-06 02:54 tiberiusiv: miami is not like NYC lol
a111: Logged on 2018-04-03 16:57 BingoBoingo: In other news, the nose is mostly under control. South American cold still has my energy rather zapped. The Incan nurse however did apologize last night.
mircea_popescu: lobbes the only important consideration here is that design is not a haphazard activity driven by occurence and circumstance. that's implementation. design is a deductive activity, it proceeds from first principles and does not break faith.
☟︎ lobbes: mircea_popescu makes sense
mircea_popescu: lobbes you lopped off a digit from the url ; it goes by #17924
lobbes: Ahh that's what happened
mircea_popescu: asciilifeform you know, your page is stale. it was already fixed in the latest version!
a111: Logged on 2018-04-03 18:37 mircea_popescu:
http://btcbase.org/log/2018-04-03#1792321 << sounds like local knockoff. this thing only exists in cr, some local entrepreneur (in the proper sense of the term) made a supermarket that actually works.
deedbot: yangwao voiced for 30 minutes.
deedbot: yangwao_ voiced for 30 minutes.
BingoBoingo: yangwao_: Who is your daddy and what does he do?
lobbes: mircea_popescu: But yeah, I need to think through my designs a bit better. Problem is I'm probably missing some crucial first principles.
mircea_popescu: lobbes on the positive side, this is how they were born in the first place, by people thinking about it. no revelation under the sun.
BingoBoingo: mircea_popescu: Yeah, the Ururuayan things with that string on their signage don't look like that.
lobbes: Perhaps I ought to go through all my existing designs, map them out, and then blog post em for forum critique.
lobbes: True dat. Anyways I'll bbl. Thanks for allowing me to brain pick
a111: Logged on 2018-04-03 17:05 BingoBoingo: asciilifeform: Remember, nothing of incredible value. I am still awaiting a birthday card from February.
BingoBoingo: mircea_popescu: Sent US mail, with "International Stamp" per the sender's description
douchebag: Do you guys know the specs of the server ?
ben_vulpes: mircea_popescu: is that free shipping to .uy?
a111: Logged on 2018-04-03 18:27 asciilifeform: ROC-RK3328-CC ( currently building a kernel for it, without the 'evil' periphs )
douchebag: How would this compare to a raspberry pi ?
mircea_popescu: douchebag it's basically a very fast i/o low cpu power box.
mircea_popescu: the republic's de facto moving towards hardware specialization, there's on one hand the very heavy cpu machines (of which sha miners are a subset, phuctor is another, and so on), and then the sort of thing like this, typified by a trb node machine.
mircea_popescu: as you don't do a lot of numbers churning, it might be tghe perfect item for you. and if not, well, we see.
spyked: re arm box, /me was considering buying the arm64 olinuxino from teh olimex people. the rockchip board seems very similar (++ on the USB3 port), but I can't seem to find it in the EU.
BingoBoingo: douchebag: If you keep impressing and outgrow the ARM thing, there are worse places to vacation after dropping off a box than Uruguay. The best weather here runs December to February though.
mod6: iirc this dude would be coming out of eastern europe.
mod6: instead of the united retards
spyked: asciilifeform yeah I was talking about the ROC-RK3328-CC. it seems a tad beefier than the olimex counterpart. but otherwise yeah, olimex live very close to me, had a board delivered in ~2 days some months ago.
mod6: mircea_popescu: aha, iirc he said he's moving tho
douchebag: I will be in the United States in april
douchebag: I'm leaving for eastern europe late may
mod6: douchebag: ah just through april tho?
mod6: ah, alright. will keep that in mind.
spyked: mircea_popescu: yeh I'm definitely considering that! the reason I've postponed getting an ARM board at all was the lack of a full-fledged SATA 3 port. I wanna get trb running on arm at some point among others.
mircea_popescu: missoury dunno even what chic is, while chicago had it long ago!
BingoBoingo: <mircea_popescu> he is better than you rural hicks from southern ill! << This is true. At his age I was solidly anti-productive.
mircea_popescu: spyked as described this item would actually make a great node ; whether the practice holds is to be seen in practice.
spyked: also, as a fun-fact: I tried running lispbots on an old first-gen raspberry pi, but it seems SBCL doesn't support threading on ARM (at least not ARMv6 and ARMv7). so I want to test that on ARM64.
douchebag: Oh but yeah, until then - let me know if there are any IRC bots or web applications you want me to take a look at
spyked: eh, I ended up using it to host my IRC bouncer. at least it's good enough for that.
phf: spyked: i prefer ccl on low powered machines, the only parts of trinque's bot that rely on sbcl are one or two functions related to thread management
mircea_popescu: phf still though, losing out on threading on a quad machine is a little dumb.
phf: oh, right, that wasn't obvious from what i said, ccl supports multithreading on arms
mircea_popescu: i suppose the question of lisp standardization, soon to be visited upon our fair republic, will be one helluva burning flame.
phf: i believe rainer joswig hosts his websites on some arm box with CL-HTTP on top of it
mircea_popescu: spyked a good move at this point i guess would be patching trinque 's bot to be all cll.
ben_vulpes: mircea_popescu: thanks for extending the counteroffer, i'll take it. will you take payment in pizarro credits?
mircea_popescu: oh, and : lobbes other than the design review, consider lifting the whole of gutenberg into your archive ? the idiots already have a
https that is broken, so far
http only works but who knows how long.
☟︎ mircea_popescu: ben_vulpes cash or bonds, though for the latter no actual discount was discussed in teh nsa boardroom. but i guess i'll go with .4 off the cuff and hope nobody throws gavels at me.
☟︎ trinque uses ccl elsewhere, would glady sign that patch
ben_vulpes: mircea_popescu: works, i'll take it for bonds
mircea_popescu: epic contributions from "paul nakata" (hey, nobody on a stick but has a keybase key), some dork who "programs in cl every day" and the whole menagerie of "nobody told us to shut the fuck up like, ever"
mircea_popescu: ben_vulpes cool. that takes s.nsa pile to .9 if memory serves ?
a111: Logged on 2018-02-26 17:11 mircea_popescu: spyked the bot is a solved problem, genesis and all.
BingoBoingo: mircea_popescu: Sure, I will take a look at it
mircea_popescu: "in natural languages, we are used to context. indeed, contextual meaning is what makes natural languages natural. we have `list' as a verb, and we have `list' as a noun. we have `listless' as an adjective describing something (like a programming language) that does not have lists, and an adjective describing someone who is sort of permanently tired. when we need to disambiguate, we do so with more words."
mircea_popescu: this actually misses the all-important mechanism. "when we need to disambiguate, we add more words such as to contradict one of the two possible solutions the string could eval to"
mircea_popescu: whole fucking natural language is nothing beyhond "add aix^i terms until the damned P has only one real root."
mircea_popescu: and "default" is not a perfectly reasonable variable name holy shit. is this guy going to name his daughter "Cunt" ?
trinque: they didn't offer up their assholes quick enough?
douchebag: Fucking had this dude from work looking over my shoulder
douchebag: asking questions about everything I type in my terminal
douchebag: Most of the people there are alright
douchebag: This is just new kid who just likes asking too many questions
douchebag: and doesn't understand it's considered disrespectful to stare at someone elses computer screen
douchebag: Yeah no it was fine most of the day, this kid would just get out of his seat and stand behind me and start staring at what I was doing and asked a bunch of questions
douchebag: so much for mass shooting being a men only sort of deal
douchebag: Tranny tits are a-okay in California
mircea_popescu: basically "liberation" and "4th wave feminism" consists of a bunch of male dweebs with no utility that nobody wants appropriating feminity and taking over boobs.
mircea_popescu: ain't enough they kicked women out of the last well paying job available to them (nursing), now they're gonna steal the tits, too ?
mircea_popescu: nfi, i was discussing the "women in tech" trend generally.
mircea_popescu: there's by now a large and visible class of dweebs who considered the "should i learn github or get boobs" dilemma and came out with "better get boobs -- govt pays for it."
douchebag: Men need to stop acting like women and women need to stop acting like men, imo
mircea_popescu: men can't stop acting like women -- there's really nothing else for them.
mod6: Hey, thanks for your donation shinohai!
douchebag: just buy the fucking water filters already
lobbes: oy, yup this is the spoofed user agent that the phantomjs portion of the process was using. RCE was happening both at the bash level AND via the headless browser.. I got poked in several orifices >>
http://btcbase.org/log/2018-04-03#1792665 ☝︎ lobbes: !!v B7975B7CA5C064DEC53DCE43D14C35C0F1D735FB0F849EE418B922F3A81502F5
deedbot: lobbes rated douchebag 2 << exploited several security holes in my archive process, but was nice enough to tell me rather than pwn me
douchebag: lobbes: Mind sharing the source code? I could perhaps help you identify further exploits
lobbes: my plan tonight is to go through and map out whole process (I'll probably tar up my code after I attempt to sanitize inputs), will bake a blog post exposing my naivete to forum at large
phf: mircea_popescu: "Unlike obligate coprophagiacs, subsistence hunters could not be stone age fucktards, but for whatever reason opt not to." is there a double not in there?
☟︎ shinohai: dont be so hard on self, supbybot/limnoria is broken so beautifully anyway
douchebag: lobbes: I'll help you make your bot more secure
lobbes: ty douchebag! much appreciated
lobbes: and shinohai, as much as I'd like to blame this on supybot, this one is all me (the exploited code was all brewed by yours truly)
douchebag: Just tell me essentially what it is you're trying to do, what you have already tried, and then I'll suggest you how to write it properly
lobbes: douchebag well, it is very convoluted atm. besides, I'd rather there be a static page I can point to than just barfing it in the logs
lobbes: I agree this needs archiving (I'm currently working off their version of kritik der reinen vernunft as a german study aid). However, unlike kibo.com I would wager the entirety of gutenberg is much much larger. I'd prolly need moar storage than the ~200gb ssd on the dedicated home craptop I'm currently using (but maybe not) >>
http://btcbase.org/log/2018-04-03#1792648 ☝︎☟︎ a111: Logged on 2018-04-03 19:41 mircea_popescu: oh, and : lobbes other than the design review, consider lifting the whole of gutenberg into your archive ? the idiots already have a
https that is broken, so far
http only works but who knows how long.
douchebag: Forsure, I'm rather experience with application design from a security prespective so just let me know if you have any questions
douchebag: Just make sure a problem like that doesn't occur again. Remote code execution is just as bad as it can get
trinque: heh, meanwhile, all of sexual reproduction is based on getting those RCEs
douchebag: and I'll tell you why, when working for a company doing a security audit - you will get paid the most for RCE. Women love money, and that money can be used to help take care of the children
☟︎ trinque: why, is that's what sperm do, my man.
a111: Logged on 2016-09-17 02:55 mircea_popescu: trinque fancy that, you had to have someone tell you! nature teaches by example, you stick more data into woman each time than you ever did into all machines you ever touched. yet...
douchebag: trinque: What other bots are in here besides lobbes and deedbot
deedbot: pehbot voiced for 30 minutes.
trinque: I think mimisbrunnr only quotes log-lines; it's ben_vulpes'