tmsr - Log 2018-04-04

a111: Logged on 2018-04-03 19:51 mircea_popescu: BingoBoingo mind redirecting www to . sometime too ?

pehbot: douchebag: I am PehBot. See also http://www.loper-os.org/?p=2051 . My Width is currently fixed to 256 and Height to 32.

asciilifeform: trinque: not as such. BUT he really oughta build the proggy and do in his own shell.

douchebag: If those lines weren't stripped I could potentially send my own commands to the ircd

asciilifeform: i've temporarily moved it to #asciilifeform-test, douchebag , justforyou !

phf: which reminds me that i should implement the help feature, a111 is no conformant at the moment

phf: douchebag: a111 logs, speaks logs, responds to #!s #!seen #!seenbefore #!born and #!vulpes

phf: but relevant to the conversation, i grew up in russia in the 90s, so i did infosec until 2005 or so

phf: i did several talks on the idea that sanitizing data is retarded, and that you're supposed to have a proper parsing strategy instead. that it's in other words an impedance mismatch problem, and if you teach computer your assumptions it will be impossible to have injection issues ☟︎☟︎

phf: so cl-irc isn't "stripping away" faulty sequences, there's a state machine parser there that only accepts a valid irc protocol, likewise the renderer is not escaping html, instead the dom is constructed server side and where you have strings, you can only have strings. they will be serialized into html according to html escaping rules.

asciilifeform: phf: i was vaguely hoping he might grasp this by playing with pehbot / reading ffa ; but loox like no dice so far ☟︎

asciilifeform: going by the log in #asciilifeform-test, d00d 1) still refuses to actually read the proggy 2) continues to think that it remaining standing has something at all to do with 'sanitizing' or anticipating whatever attack

asciilifeform: being one of the few languages with actual docs, and of which i used a deliberately small subset -- oughta be pretty simple.

asciilifeform: meanwhile, in sads, RK3328 ( and in fact every arm cpu in production ) won't boot without a ~1MB evil blob (that in fact runs on dedicated evil-core, just like intel's ME . ) so much for 'published errything.' ☟︎

asciilifeform: and, interestingly, the entire public net appears to be EMPTY of ANY discussion of a cure. ☟︎

lobbes: so, this is kind of like the "default-deny" philosophy? "you may only build the house from this valid list of materials" versus "grab any material you can find, but watch out for this list of lethal building materials"? >> http://btcbase.org/log/2018-04-04#1792809 ☝︎

a111: Logged on 2018-04-04 00:35 phf: i did several talks on the idea that sanitizing data is retarded, and that you're supposed to have a proper parsing strategy instead. that it's in other words an impedance mismatch problem, and if you teach computer your assumptions it will be impossible to have injection issues

trinque: the grammar asserts what ought to be there; it rejects everything else, but it didn't reject the "all else" item by item.

lobbes: hm yeah, applying this to my case: there is only ONE point where user-entered data enters into the process, and that is where the bot snarfs from the chan and inserts into the first sqlite3 db. So really, I just need to teach THAT part of my process what a valid url is, and then parse accordingly

trinque: parser implements a given grammar, turning a string (whether considered as text or raw bits) into an abstract syntax tree

lobbes: hm okay, this is a bit over my head, but you are saying that I need to understand what the grammar for a url is, and then have the parser follow that grammar?

douchebag: lobbes: Why not completely avoid sending any user input to a bash interpreter at all?

lobbes: well, it seems like phf's (and others') approach is slightly saner. Even if user input doesn't go to bash, well.. what about the phantomjs exploit you found

lobbes: there's also an additional precaution I could take: instead of the thing being on an hourly cronjob, I could easily set up a quick 'validation report' for myself and then pull a 'manual' crank to initiate everything ☟︎

asciilifeform: hey trinque , i was attempting a gentoo , and found that i cannot even extract a 2016 stage3 on a sane box because --xattrs-include='*.*' and my tar has nfi what xattrs are

mircea_popescu: http://btcbase.org/log/2018-04-03#1792728 << yes, actually. x could not be y, but opt to not-not be y. is this bad ? ☝︎

a111: Logged on 2018-04-03 23:41 phf: mircea_popescu: "Unlike obligate coprophagiacs, subsistence hunters could not be stone age fucktards, but for whatever reason opt not to." is there a double not in there?

mircea_popescu: http://btcbase.org/log/2018-04-03#1792736 << it's not that big. but, if indeed it is that big this is a reason to find more storage space, can't really cut them off. ☝︎

a111: Logged on 2018-04-03 23:48 lobbes: I agree this needs archiving (I'm currently working off their version of kritik der reinen vernunft as a german study aid). However, unlike kibo.com I would wager the entirety of gutenberg is much much larger. I'd prolly need moar storage than the ~200gb ssd on the dedicated home craptop I'm currently using (but maybe not) >> http://btcbase.org/log/2018-04-03#1792648

mircea_popescu: http://btcbase.org/log/2018-04-03#1792743 << bwahaha wut. ☝︎

a111: Logged on 2018-04-03 23:53 douchebag: and I'll tell you why, when working for a company doing a security audit - you will get paid the most for RCE. Women love money, and that money can be used to help take care of the children

mircea_popescu: !!up candi_lustt

mircea_popescu: ^ there douchebag , now you can learn lips.

mircea_popescu: and in other "best villains of the silver screen", https://www.youtube.com/watch?v=-N9LnkKQfuc

mircea_popescu: #!born douchebag

mircea_popescu: !#born phf

mircea_popescu: phf it's supposed to produce no more than one line per command.

mircea_popescu: http://btcbase.org/log/2018-04-04#1792811 << this is not something that can be "grasped" as such. ☝︎

a111: Logged on 2018-04-04 00:46 asciilifeform: phf: i was vaguely hoping he might grasp this by playing with pehbot / reading ffa ; but loox like no dice so far

mircea_popescu: much in the vein astronomy can not be grasped playing with ptolemaic spheres.

mircea_popescu: http://btcbase.org/log/2018-04-04#1792809 << links ? hm ? HM ? ☝︎

mircea_popescu: i mean my talk to ro politicians about basic economics from like 2005 is on the fucking web ffs!

mircea_popescu: and the time i burned the koran/bible and the time i stabbed that rabbit and so following.

mircea_popescu: dja understand what it says ?

mircea_popescu: http://trilema.com/2009/banii-oamenii-si-valorile-liberale/ << uncharacteristically for vloggers, transcript is available.

mircea_popescu: myeah.

mircea_popescu: incidentrally, the comments are something else.

mircea_popescu: im sure he'll say something if he finds something neh

asciilifeform: doesn't show any symptoms of approaching the thing in any way other than http://btcbase.org/log/2016-05-01#1460013 ☝︎

a111: Logged on 2016-05-01 14:53 mircea_popescu: asciilifeform> mod6: the baked-in presumption of webtardism is almost insulting << it is insulting, not to us though. think about it : the crab has pincers because in its environment THAT WORKS ; and so does "GET /blog/blog-config.php~".

mircea_popescu: eh, what;'s the rush.

mircea_popescu: http://btcbase.org/log/2018-04-04#1792817 << fuck 'em. let them sell to each other for bitpaybux until they fall over for all i care. ☝︎

a111: Logged on 2018-04-04 01:06 asciilifeform: meanwhile, in sads, RK3328 ( and in fact every arm cpu in production ) won't boot without a ~1MB evil blob (that in fact runs on dedicated evil-core, just like intel's ME . ) so much for 'published errything.'

mircea_popescu: http://btcbase.org/log/2018-04-04#1792818 << the english web is empty of EVERYTHING. there isn't anything there. i looked. ☝︎

a111: Logged on 2018-04-04 01:06 asciilifeform: and, interestingly, the entire public net appears to be EMPTY of ANY discussion of a cure.

asciilifeform: mircea_popescu: it's chinese, therefore lulzy. mine seems to boot up with the shitrom broken...

mircea_popescu: yes but it probably doesn't have $random-useless-feature!!1

mircea_popescu: http://btcbase.org/log/2018-04-04#1792831 << this is the worst choice, in general. ☝︎

a111: Logged on 2018-04-04 02:19 lobbes: there's also an additional precaution I could take: instead of the thing being on an hourly cronjob, I could easily set up a quick 'validation report' for myself and then pull a 'manual' crank to initiate everything

mircea_popescu: http://btcbase.org/log/2018-04-04#1792834 << ext4 ☝︎

a111: Logged on 2018-04-04 02:30 asciilifeform: trinque: any idea when this liquishit crept in ?

mircea_popescu: fwiw, iirc reiserfs has them too.

mircea_popescu: probably once they started supporting ext4.

mircea_popescu: anyway, odds are you can just take it out.

mircea_popescu: just drop the flag, see what happens.

asciilifeform: and i untarred in spite of this oddity, and the only barf was that python, ping, and cc1 binaries failed to extract. but oddly enuff extracted later manually...

mircea_popescu: anyway. extended attributes is this ~dead standard that got implemented anyway, basically a kludgy extension of chown.

mircea_popescu: the flag tells tar whether to store this extra metadata with the files or not. generally droppoing it has no effect. ah ok then

mircea_popescu: "password length can not exceed 12 characters". teh webfolk clearly doing it rite.

mircea_popescu: asciilifeform ^ lemme know if i left anything out. ☟︎

mircea_popescu: in other world wide webs, "* Topic for #gaygeeks is: Welcome to #gaygeeks, a PG-rated social channel for geeky LGBT people and friends."

mircea_popescu: https://pbs.twimg.com/media/DZ3k2jxWkAAFhx9.jpg << hacks. HACKS, you understand. because "women in tech" => "fucking around with your phone on facebook is now hacking".

mircea_popescu: and oh look, anil dash still exists. in fact, the whole twitter "tech" poser scene is still there! amazing.

mircea_popescu: in other lulz, /me joins #lesswrong. there's a "* Loaded log from Sat Sep 20 11:53:02 2014" ; then /me joins #startups. there's a "Loaded log from Sat Sep 20 11:52:17 2014". apparently... i did this once before ? ☟︎

lobbes: not sure if pete_dushenski is ever coming around again or what, so I went ahead and created a page for the tsmr bot directory: http://lobbesblog.com/static/tmsr_bot_directory.html ☟︎

lobbes: I purposely decided not to curate the actual commands. I figure that is best left to the operator to maintain

mircea_popescu: what do you mean curate ?

lobbes: as it stood, my own bot's commands on the old directory weren't even represented accurately. plus the spec does specify each bot should have a "help" command listing all other commands

mircea_popescu: ah so basically you didn't ~include~ the command list.

lobbes: yeah, sorry, I was kinda unclear; just lists the bot name, operator, and call command

mircea_popescu: aaand closing channels. #lesswrong is spectacularily retarded. i mean wikitardia levels of inane wank. #clojure and #bash are mostly dead, 99% join/part and the rest hi guise, i got a dumb question. startup and gaygeeks are dead.

mircea_popescu: i suspect the internet was actually LARGER in 1988.

mircea_popescu: shrunk like 60% in 30 years.

BingoBoingo: https://www.rt.com/sport/423161-commonwealth-games-england-african-country/ << "Commonwealth Games organizers have confused England with the African Republic of The Gambia in the event’s official program, which contains information about the 71 nations participating."

lobbes: Lol. Rest of the world catching up to Qntra's accurate classifications of various Anglotardistans

mircea_popescu: aaand in other http://btcbase.org/log/2018-04-03#1792405 : cat trilema.com.txt | grep "/2009/banii-oamenii-si-valorile-liberale/" | grep "leusercontent" > http://p.bvulpes.com/pastes/foK6J/?raw=true ☝︎

a111: Logged on 2018-04-03 17:26 asciilifeform: y'know it's still 'read' if you put it through meatgrinder

mircea_popescu: 2.7k lines between 8 and 10 this am, that's like... more interest in the ro language than the romanian government ever managed to generate in the entire history of a romanian government, spanning 1866-2018

mircea_popescu: meanwhile in local news bulletin : took slut out shopping yest, bought her a mostly see through and very ass-flattering dress at a shop which identifies itself as : "Punt. San Jose, centro al frente de la puerta principal del Colegio de Senoritas."

mircea_popescu: punt indeed. punters beware.

a111: Logged on 2018-04-04 04:32 mircea_popescu: asciilifeform ^ lemme know if i left anything out.

mircea_popescu: hola!

asciilifeform: meanwhile on the chinesium front, asciilifeform was pretty close to throwing out the 'rockchip' this morn., when saw that every few hrs it read-retries the sd flash. but apparently harmless eggog: comes from certain sad levelling firmwares , they cannot keep up with the host ☟︎

asciilifeform: but aside from this, 'throw out, or buy five more?', i have a self-rebuilding gentoo, and theoretically recent 'uboot' gives a blobless boot and ergo 100% blobless machine that actually fucking builds own kernel and gcc and etc etc

mircea_popescu: ahhh

mircea_popescu: to quote from the everlogs, http://btcbase.org/log/2018-03-23#1789029 ☝︎

a111: Logged on 2018-03-23 04:14 douchebag: Okay, why do you guys liek arguing so much? Is this why you guys don't get anything done?

a111: Logged on 2018-04-04 04:49 mircea_popescu: in other lulz, /me joins #lesswrong. there's a "* Loaded log from Sat Sep 20 11:53:02 2014" ; then /me joins #startups. there's a "Loaded log from Sat Sep 20 11:52:17 2014". apparently... i did this once before ?

mircea_popescu: a yeah!

mircea_popescu: well... nothing changed in four years.

mircea_popescu: to be specific : http://p.bvulpes.com/pastes/rnjFD/?raw=true

mircea_popescu: asciilifeform no, the moneyshot is, "I'm going to need a source on that. the doctor dude seems to know what he's doing. also the ballistic gelatin is kinda hard to argue against"

asciilifeform: 'navigating-and-or-avoiding-the-inpatient-mental-health-system' << already 'winning' in chan subjline !

mircea_popescu: the gist of the argument is, them : wank wank wank ; me : your wank is only meaningful self-referentially ; them : you are wrong because self-reference.

mircea_popescu: i guess. fucktards dun know how to separate eggs. pro tip : TAKE IT IN YOUR HAND. omfg, basic slavegirl kitchen training.

asciilifeform: lol, small arms wank! where are the planet-eaters, the solar shade weapon specialists, the immortality pills?!11

mircea_popescu: se ?

mircea_popescu: see* ?

asciilifeform: possibly the truly prolific crackpots began to have problem navigating-and-or-avoiding-the-inpatient-mental-health-system(tm)(r) and left these...

mircea_popescu: either that or the ever growing self-absorption of esl speakers has... well.. absorbed.

mircea_popescu: incidentally, that "'navigating-and-or-avoiding-the-inpatient-mental-health-system" is about as fucking terrible as haskellists code.

mircea_popescu: it's fundamentally wrong, ideologically offensive, practically useless at best and counterproductive in general, deeply myopic, utterly nonsensical and the list could go on. holy shit why even bother exist if you're going to be the guy that spewed it.

asciilifeform reports, however, that the archaetypical emerge -av --update --deep @world on chinesiumtron , to the tune of 117 various packages, took ~4hr. which is, lulzily, approx the same as on my workstations

asciilifeform: with -j5 in make.conf (i.e. 100% cpu utilization) ; but heatsink not even warm

asciilifeform: note, this beast has a video jack, could in principle be used as gentooistic workstation.

asciilifeform: ... thing built with my USE flags, incl. ban on gcc >=5 ( i used a stage3 tarball from 2016 deliberately , but with current-day portage snapshot ) -- no serious barf

mircea_popescu: notbad

mimisbrunnr: Logged on 2018-04-04 20:20 mircea_popescu: it's fundamentally wrong, ideologically offensive, practically useless at best and counterproductive in general, deeply myopic, utterly nonsensical and the list could go on. holy shit why even bother exist if you're going to be the guy that spewed it.

BigTexasBingo: Network connectivity at the Cowork is down for predictably latino reasons.

mircea_popescu: ben_vulpes ikr

mircea_popescu: hehe

mircea_popescu: anyway, since we're reading "slate star codex", ie scott alexander's blog (the pantsuit-annointed official tlp replacement so tlp never actually happened), let's lul together : https://archive.is/Yyblu#selection-1259.852-1259.1460 ☟︎

mircea_popescu: "So Peterson wants to ensure we don’t get to the point where that’s the only choice left; he advises his acolytes not to destroy society (which leads to the chaos/authoritarian dilemma), but to recognize that they’re going to choose to follow some order of some kind, and that they should therefore intentionally follow even a flawed societal order, because it’s better than gas chambers and ethnic cleansing. The reality

mircea_popescu: that “bad things happen to good people” shouldn’t persuade them to tear down society and try starting all over again, because that leads to the chaos/tyrant choice, and we can’t go there."

mircea_popescu: ie, "we [the fried chicken niggers] don't want to go there". ofcourseyoudon't.

mircea_popescu: whole pile is actually a lot of wank in the general vein of, "r jwz, how to survive the coming of mp"

mircea_popescu: douchebag did you manage to do anything fun with it in the interim ?

mircea_popescu: not bad.

douchebag: I think most web application developers have the mental capacity of a monkey with autism

mircea_popescu: everyone involved in "technology", especially if the only language they speak is english and even more especially if their general philosophy is in the "I think medical science is still pretty healthy, and that the consensus of doctors and researchers is more-or-less right on most controversial medical issues." vein of above-illustrated jwzism are strictly speaking subhuman, and a great and needless burden to the planet.

mircea_popescu: that's what you get for "getting more people involved" in things.

douchebag: mircea_popescu: To be honest with you, I got into web application hacking just to pwn websites of nerds for lulz

mircea_popescu: i imagined.

douchebag: and eventually I got good enough where I could pop boxes of multi-billion dollar organizations

mircea_popescu: why do they pay you ?

douchebag: Because they would rather pay me $2k to tell them how I could have dumped their database

douchebag: than for their database to be dumped and lose a shit ton of money & bad press coverage

mircea_popescu: so they "pay" you in the sense of giving you nothing as far as they concerned to get in exchange the very valuable (as far as they're concerned) option to continue exactly as before ?

mircea_popescu: now you understand how their shit got written.

mircea_popescu: yes dude. the failure of postmodern "democracy" is built out of the mass involvement of idiots who have no business outside of chained-in-dungeon, coupled with weak non-payments to pacify the elite and the self-seeking, comfort driven behaviours of everyone.

mircea_popescu: of course not.

mircea_popescu: !!up BigTexasBingo

BigTexasBingo: I don't have civilized desk internet at the moment. Douchebag the goldmine is in burning the god damned colored hats.

mircea_popescu: douchebag anyway, i'm not saying the options you're taking aren't on the table. they are. i am however saying that the table won't last ; which of course is about as interesting in the direct as telling a brontosaurus happily chewing on a fern that a meteoir's coming. "so... what does this mean ~TO ME~, should i switch to chewing palms ?"

mircea_popescu: meteors mean nothing to dinosaurs.

mircea_popescu: but as the elite increasingly opts out of supporting the "shiny happy faces of drooling imbeciles" modern of postmodern democracy, the thing will fall. it can't support itself, the only way it can live is for as long as you're willing to take $1k in lieu of "tell you what, I OWN tmobile now, you can all go home / hit the unemployment lines"

mircea_popescu: hey. ruining the possibility of pantsuit continuance is entertainment to me.

mircea_popescu: you could, if you were a "tester". or an "influencer". or whatever.

mircea_popescu: the ammounts of money involved in all this are so trivial as to not meet the bar for being called money.

ben_vulpes: so let me get this straight BigTexasBingo the daily derper can't rely on its people to catch up to new ip addresses but it can get the word of mouth out on new dns records?

mircea_popescu: douchebag as things currently stand, if it's fiats and it's not in the billions you're wasting your time.

mircea_popescu: think about it for a second, it's dubious if there are one thousand human beings alive today. the total monetary mass is well past the trillion mark.

BigTexasBingo: Ben_vulpes lowest effort cultures but their story in this case seems to check out.

mircea_popescu: anything less than the billion dollars is the sound of you getting shortchanged.

douchebag: mircea_popescu: Everyone's got to start somewhere, and anyone who knows me knows very well that I am one of the most strong willed people you'll ever meet

mircea_popescu: BigTexasBingo i don't want to read that, can there be a one line summary ?

mircea_popescu: douchebag well, from experience you won't make it supporting the system ; but burning it down.

BigTexasBingo: mircea_popescu Anglin and weev bullied Mexico into taking Honduran refugees

mircea_popescu: BigTexasBingo according to mexico ? or the honduran refugees ?

mircea_popescu: douchebag do you know who ers is/was ?

mircea_popescu: http://btcbase.org/log/2015-09-07#1265178 << he did the exact same thing, except back when he also had the excuse of "all this being new" and "you don't know how it will go" ☝︎

mircea_popescu: just that. same exact thing.

mircea_popescu: "I would love to make a billion dollars ; Between a few people, I have $3.5million that investors are willing to invest ; and I have a team of people who are extremely skilled"

mircea_popescu: try to leverage technology to convince the political power to give you some decidous leaves inscribed with flattering but ultimately hollow words such as "glory forever!" which will stick around for a season before turning to dust.

mircea_popescu: basically, you're engaging in the up to date equivalent of the athenian poetry competition.

BigTexasBingo: (+mircea_popescu) BigTexasBingo according to mexico ? or the honduran refugees ? << According to developing trumpism and Mexico

mircea_popescu: (no, ustards didn't invent pop culture. britny hilton existed 500 bc, fo sho.)

mircea_popescu: BigTexasBingo link where trump says anglin did something ?!

douchebag: mircea_popescu: Some of the people I have on my stoppped terrorism via hacking

mircea_popescu: douchebag as above : according to whom, "the terrorists" ?

mircea_popescu: anyway. some of the classical atenian poets stopped the rain. heck, one even sang his way into hell. he didn't actually accomplish anything down there, but he ALMOST did.

mircea_popescu: "that should count for something"

BigTexasBingo: Mircea_popescu chance of posturing. Requires more digging. Possibly lulz blooming in the coming weeks, but likely no less than 10 days

mircea_popescu: douchebag have you perchance read http://trilema.com/2016/to-be-clear-hillary-clinton-lost-the-presidential-election-on-june-16th-2016/ ? because you might be selling cabbage to the gardners.

mircea_popescu: in simple terms, the terrorists long ago won all possible battles. they're just not who you thought would be the terrorists.

mircea_popescu: aaaanyway, my original curio in http://btcbase.org/log/2018-03-31#1791647 is very much resolved. take the scott alexander fellow from above : he's been around for long enough, writes frequently enough, meets all the other criteria implied in the request. he's very VERBOSE too, and utterly fucking unreadable. ☝︎

a111: Logged on 2018-03-31 16:40 mircea_popescu: i would really like a list of "all personal blogs older than a decade" right about now.

mircea_popescu: i managed to get to point X of his ENDLESS "i can tolerate anything except the outgroup" "recommended article", after going through another two or three items placed higher on his list of self-recommendations ; but eventually my patience was exhausted.

mircea_popescu: he's not technically on the level of the literate-since-yesterday redditard, but he's very much on the level right above that -- zero intellectual curiosity (in spite of a lot of meta herp derping about it), absolutely no critical ability whatsoever, a complete inadherence to humor, metaphore, rhetorical device, subtext, any sign of an intellectual life whatsoever.

mircea_popescu: he reads to me like someone on antipsychotic medication. maybe at some point in his youth he was intelligent, i guess, but by now i'd much rather listen to the barristas. at least they giggle.