mircea_popescu: indeed.
mircea_popescu: asciilifeform, phf & anyone in the l1 that cares : should i actually push this http://btcbase.org/log/2018-06-07#1821229 thing ?☝︎
a111: Logged on 2018-06-07 20:13 phf: asciilifeform: can they put a bot here so it'll quote for us? :)
asciilifeform: dunno that the game is worth the candles; better to try an' persuade the 1 useful d00d to visit
asciilifeform: ( he seems to log in erry coupla days, i'ma try him next )
mircea_popescu: i mean, the backstop would obviously be "either follow spec as-is or get out of chan", i suppose. i don't specifically care either way, we already have plenty of proper loggers for one thing, and the original, "Hey, maybe someone exists on freenode that's both a) not totally braindead and b) hasn't heard of #trilema yet" was thoroughly proven wrong by now ; the intelligence flow is the other way.
asciilifeform: or do i misread the q
mircea_popescu: how do you read it ?
asciilifeform: and it's about the logger thing, not #rockchip
mircea_popescu: it is about _whitelogger bot following spec and reading out lines.
asciilifeform: aaaaa
asciilifeform: yea theoretically useful
mircea_popescu: odds are it'll result in it leaving, i'm guessing.
mircea_popescu: !!key whitequark\
deedbot: Not registered.
mircea_popescu: !!key whitequark
deedbot: Not registered.
mircea_popescu: i mean, doodn's not even had the common decency to reg up, however many months later.
mircea_popescu: cuz whatever, everyone's speshul and lives life on own terms and whatever geeky bs.
asciilifeform: who runs that thing ?
mircea_popescu: ^
asciilifeform: aa so it's a sad rando anon
mircea_popescu: quantum computing something something, i kinda tuned out past that point.
asciilifeform: snoar
mircea_popescu: http://trilema.com/2018/and-in-other-dead-things/ the history of it.
mircea_popescu: six months, during which not one reader of irclog.whitequark.org turned out to exist should be amply sufficient data from that angle.
mircea_popescu: but whatever, it's what the empire's got, #lisp is about "lisp" and so on.
mircea_popescu: !!up trinque
deedbot: trinque voiced for 30 minutes.
mod6: the zeptobars route may be a decent idea. has anyone reached out to that guy?
mod6: they take bitcoin donations, but, no coins ever sent :[
mircea_popescu: i imagine phf
mod6: here's their addy posted on their "support" page: 1ZeptoBhGA4wewwVv3BZTYyaBtc87nMNg
mircea_popescu: hey phf, you actually know the fellows ? how about they show up here and work something out ?
asciilifeform: mod6: read end of thread, subj is a ~standard arm with eeprom that ( per my experimentation in past 2hr ) actually does seem to contain something like the linked crapola
mircea_popescu: asciilifeform, i'd still like to get some actual working something out of whatever kanzureism "zeptobar" currently is.
asciilifeform: it doesn't have a magic symmetric key, there's a ecc public sig thing to unlock the boobytrap and, e.g., erase/reprogram the thing
asciilifeform: mircea_popescu: i'd luuvvvvv a properly photographed bolix...
asciilifeform: which is just about practical. but 22nm -- don't hold breath
mircea_popescu: right.
mircea_popescu: btw, didja phuctor it ?
asciilifeform: not to mention that it seems to be a ~pogo with eeprom proggy (these dun show on micrograph anyway)
asciilifeform: mircea_popescu: phuctor dun ecc
mircea_popescu: oh, ecc. of course, of course.
asciilifeform: aaaha
asciilifeform: btw the 'h1' turd is a mass of c crapola, chances are there's an overflow somewhere
asciilifeform: like there was in intel's me
mircea_popescu: you know, it occurs to me... it it's a captive minichip. it should be... defeatable. keep feeding it bad sigs and measure the powerlines.
asciilifeform: mircea_popescu: what's that give ?
asciilifeform: it dun have a seekrit to extract, simply checks pubkey sig
mircea_popescu: yes, but it might give you some code layout maybe ?
asciilifeform: i'm actually ~persuaded that the posted code actually runs
mircea_popescu: ah
mircea_popescu: then nm.
asciilifeform: it's a pretty plain boobytrap, wants magic sig to r/w the 'h1' firmware, or to unlock the console (which gives rootkit access to whole ram, cpu, ec, etc via the usb jack)
mircea_popescu: what is it, 256bit eec key ?
asciilifeform: aha
mircea_popescu: hm.
mircea_popescu: listen, my (often wrong, millitantly ignorant, whatever) intuition is that if oyu have an oracle in your hands (the chip after all DOES say yes or no) and all you want to do is produce a sig it accepts for an arbitrary string, you should be able to achieve this bit fiddling in less than 2^256 tries.
asciilifeform: if i can do this, i think i'll skip the small change and take home satoshi's coinz
asciilifeform: in so far as i can tell, the thing implements plain old 'p256' ecctron
asciilifeform: with no ~obvious~ hole
mircea_popescu: i'd love nothing more than qntra running a "google's ecc crypto defeated in field"
mircea_popescu: but... yeah.
mircea_popescu: anyway... let ~them~ explain how "it was an implementation error -- no fundamental ecc breach".
mircea_popescu: after all the "rsa is broken because we've been misimplementing it for 20 years under our governmentalpg brand hurr" stories, it'd be quite pleasant.
asciilifeform: ... interestingly, the 101 apparently comes with all of the usb debug ~driving~ end crapola, and will happily diddle itself when plugged into... itself
asciilifeform: ( 1 end of hose goes into usbc, other end -- normal usb3 jack between the 2 usbc's )
mircea_popescu: ha
asciilifeform: however still gives eggog '127' when attempting 'usb_updater -U' i.e. 'start unlock sequence'
asciilifeform: same as when driven from real comp (unsurprising)
mircea_popescu: i'm telling you, building a fuzzing harness for a bunch of these may not be a bad way to lock down a machine (driving the fuzzing) for a week or two.
mircea_popescu: the worst case being what, a pile of useless data ? big woop, i have some of that myself, isn't killing me.
asciilifeform: i'm at that magical 'should i throw it out or buy 6'(tm)(r) stage
mircea_popescu: buy 6.
asciilifeform: i could use some eagle eyes on the coad, also
asciilifeform: 1 eagle is worth 9000 'fuzzers'
mircea_popescu: bill s.nsa for 'em and there you go. worst case we have some not-great hammers.
asciilifeform: i'm still curious re mircea_popescu's logic re the older box
mircea_popescu: asciilifeform, where's the logline of you going "hey, this is confusing to me therefore cryptic to anyone" ?
mircea_popescu: which older box ?
asciilifeform: c100pa
asciilifeform: that the dev d00d mentioned
asciilifeform: how would it make sense for it to be ~moar~ subtly boobied than the 101
mircea_popescu: there's this vicious slander going about according to which i actually use some sort of thought process. i wish to deny such rumours right now.
mircea_popescu: i've not thought a line in my life!
asciilifeform: lol
esthlos: trinque: I added a manifest to my v_genesis vpatch. I'm curious, though, how these items (vtron, manifest) become declared "standard", if ever
asciilifeform: mircea_popescu: upstack: possibly you were looking for the http://btcbase.org/log/2017-01-03#1595992 thread☝︎
a111: Logged on 2017-01-03 23:07 asciilifeform: there is ~0 actual relationship between 'confusing to the naked eye' and 'crypto-hard'
mircea_popescu: esthlos, there's some discussion, after which i pick something and start asking people nicely / kicking them in the head about it.
mircea_popescu: asciilifeform, that sentiment, but different words. 2015ish vintage i tihnk
esthlos: sounds good
asciilifeform: mircea_popescu: almost definitely in the symmetrics thread
mircea_popescu: hm, that's a thought
asciilifeform: http://btcbase.org/log/2016-06-01#1474768 possibly.☝︎
a111: Logged on 2016-06-01 17:43 asciilifeform: 'aes is hard to break' 'says who' 'says me, i haven't broken it yet'
mircea_popescu: http://btcbase.org/log/2016-02-04#1396415☝︎
a111: Logged on 2016-02-04 17:30 ascii_butugychag: 'this was confusing to ME' is the basis, EVERY MOTHERFUCKING TIME
asciilifeform: aha!
asciilifeform: it
mircea_popescu: i forgot you're polynymic.
asciilifeform: yea it was definitely while asciilifeform was in butugychag
mircea_popescu: sprucing up the dummkopf article ; apparently i hadn't put enough links in there, counterintuitively.
asciilifeform just nao ate it
asciilifeform: btw, curious what mircea_popescu's allergy to 'short ooda loop' is. for instance, mircea_popescu , like asciilifeform , seems to have thrown out his film camera, uses electronic one. why not use film, if 'short ooda loop is for lamers' ?
asciilifeform: film , for the money, beats the living shit out of digicam
mircea_popescu: then they wonder why they don't ever have any gfs, these people. "i tried to evaluate whether she's my gf in a second or less, came out negative" "maybe give it i dunoo... FIVE DAYS ?" "omfg what ? i don't like... live that long"
mircea_popescu: asciilifeform, i am at no point in there hating on short ooda loop. i am hating on the idiocy he surrounds it with.
asciilifeform: ok this is where i admit that i have not read the orig idjicy..
mircea_popescu: pro tip : photographs taken today are shittier than photographs taken on film. who dun it ?
asciilifeform: verily
mircea_popescu: "but mp... i ~copuld~ take better pics today than in 1970. point in case -- i didn't even TAKE pics back then"
asciilifeform: film gives you, what, equiv of 20-30 'megapixel' for phree
asciilifeform: moar, if you have a largeformat cam
mircea_popescu 's head explodes.
asciilifeform: asciilifeform was one of those weirdos with massive pile of film, and even trunk of old photo gear
mircea_popescu: no but see, all the faggots that take pics today and didn't in 1970 are exactly all the faggots that couldn't read books before they were made on pulp paper by pulp paper book makers.
asciilifeform regularly has this convo thread with pet, 'books sucked less when they had to be stitchbound'
mircea_popescu: i saw a terrible film recently, with doris day. something something bla bla bla. she spends the whole time in an ugly looking deerskin.
mircea_popescu: HOWEVER. she can dance. she can sing. because she's a 1950s actress, and that was a PROFESSION which MEANT SOMETHING.
asciilifeform: sorta reminiscent of the old rifle thread ( 'good old days, 7.62x54mm mosin, back when people could still aim, make every pop count' )
mircea_popescu: you know i recently googled a pic, and google helpfully informed me who the, and i quote, "reality television personality, model, entrepreneur, socialite, and social media personality" involved were ?
mircea_popescu: and i was sitting there in disbelief, "dude, it's two milf lamers in a tub, what the fuck".
mircea_popescu: jordyn ?! fucking seriously ?!
asciilifeform sadly entirely unfamiliar with subj
mircea_popescu: point remains, two bit everything all around. that's your "short ooda loop". it's a lot closer to cocaine than the users realise.
asciilifeform: it's the old flies-and-cutlets thread
asciilifeform: meat in the sun.
asciilifeform: there is not a mechanical cure for the need to exclude vermin
asciilifeform: which, yes, will be irresistibly attracted to tasties
mircea_popescu: right. so you know, my allergy "to the short ooda loop" is all the flies going "o man, this is great! yay!". it's not to the fucking meat, i eat steak tartare every so often
mircea_popescu: but i also don't like to hear that buzzing sound.
asciilifeform: makes sense.
mircea_popescu: "corpse whistle" or however you call it.
asciilifeform: https://chromium.googlesource.com/chromiumos/third_party/tpm2/+/master << for aficionados. the crypto, such as they are, routines in the cr50 thing. ( even seems to include a kind of orc rsa )
mircea_popescu: anyway ; i thought that point comes through, but maybe not as well as i'd have wanted.
asciilifeform: there was an old thread, with the heavy roman lorica
asciilifeform: can't seem to find it nao
mircea_popescu: and the "too heavy" helmets ?
asciilifeform: them
mircea_popescu: http://trilema.com/2018/heres-how-pantsuitism-christianity-ruined-civilisation-in-both-the-ancient-and-the-modern-world/#selection-109.0-109.1154
asciilifeform: yes! it
asciilifeform: iirc there was a continuation, where , something like asciilifeform:'lorica oughta be heavy, but from iron, not lead weights' and mircea_popescu:~'but only the centurion who wears it should get to decide why heavy'
asciilifeform: or perhaps i dreamed this.
mircea_popescu: there is such a thing as ankle weights. my slavegirls should know, they get them lots.
mircea_popescu: that -- heavy from lead.
asciilifeform: there are, 'тяжело в учении -- легко в бою'(tm)(r)
mircea_popescu: "but mp, why does girl need to wear 5kgs of ankle weight for hours on end ?" "so when i fuck her, her knees are straight"
mircea_popescu: and btw, the idiot airport guards keep slicing the weights. cuz it's by now so rare an item i guess, "gotta see what's inside".
asciilifeform: 'could be plutonium' lol
mircea_popescu: well... it basically is shotgun shot.
asciilifeform: i suppose anyffin that dun xray properly, is insta-suspicious to the derps
asciilifeform: could contain whatever, in the middle of lead sphere
mircea_popescu: yeah. it contains nice ass, in the middle of the lead sphere.
asciilifeform: then obvious why they'd like to search
asciilifeform: 'lemme inspect this'
mircea_popescu: lol. if only.
mircea_popescu: but yes, re the тяжело в учении -- легко в бою bit -- it comes as a shock generally that "your training must ~exceed~ actual usage, by a ~factor~. you don't train for 80% of what you'll do ; you train for 250% to 300%+ of what you'll actually do."
mircea_popescu: then, легко в бою indeed.
asciilifeform: upstack, before i start to fall asleep -- what do we wanna do in re the c101 ? march on with curing the 'ordinary' boot rom, and then sit on the thing pending a successful break of the cr50 booby ? shelf whole thing ? which'll it be
mircea_popescu: asciilifeform, do you suspect the core can actually talk to the netbridge ?
asciilifeform: mircea_popescu: it can rewrite the boot rom, is what i know for certain so far
asciilifeform: but i've not found a remote trigger for it. (dun mean there isn't one)
mircea_popescu: yes, but it seems to me it's basically a local rootkit. so it's not such an overwhelming concern for the contemplated usecase -- give iphone girly machine.
asciilifeform: i suspect the thing exists mainly to 1) help 'law enforce' folx pry passwords from unwilling patient's box 2) persistence nest for assorted usgologies installed via pwned userland
asciilifeform: it's pretty much same as intel 'me'
mircea_popescu: so in a sense it's up to you. if you've lost the love of labour because of the cp50 issue, i guess it dies. but if not, i do not see it's a waste of time. make it boot cleanly, try see what happens if you remove the item, try see what happens if you fuzz the item, maybe more stuff occurs -- this is a productive line of research.
mircea_popescu: or so i deem.
mircea_popescu: asciilifeform, you're probably right.
asciilifeform: i'ma carry on with curing the bootloader then. and when 'h1' pops, it pops, we get clean box
asciilifeform: or who knows, 'the horse may die' etc.
mircea_popescu: something like that.
asciilifeform: aite, worx
asciilifeform: the 1.8v spi probing rig comes in next wk.
mircea_popescu: anyway, can also prep a boot rom that has a canary.
asciilifeform: elaborate
asciilifeform: ( what means here, canary )
mircea_popescu: i dunno, have the boot flash a pink pixel, put a number on screen, whatever. replacement boot sequence won't know to do it, will it.
asciilifeform: aa in that sense yes
mircea_popescu: so then you know it's been flashed.
mircea_popescu: >0.
asciilifeform: fwiw the boot rom reads from linux's ordinary spi driver, in userland
mircea_popescu: in more general terms, if you had to dismantle every organisation the moment it had a mole in it... there'd be no organisations ever.
asciilifeform: ( i.e. 'h1' does not sit , as far as i can tell, between cpu and bootrom , but rather sits on the bus )
mircea_popescu: this is the common design, neh ?
asciilifeform: on x86 boxen, southbridge usually sits directly between cpu and bios rom
asciilifeform: ( given as x86 cpu does not know how to speak spi/lpc/etc )
mircea_popescu: no but these are arms. i thought this is what arm mostly is, bridge-wise.
asciilifeform: there seem to be 4 onboard busses in the thing; ram ( just cpu and dram ) ; pci ( occupied by 80211 chip , you prolly could safely pull it out, even sits on conveniently protruding bit of pcb ) ; spi ( connects to : cpu; boot rom; ec ; 'h1' ) ; i2c ( connects to cpu ; 'h1' ; voltage regs ) .
asciilifeform: this is to count only the onboard (i.e. excluding usb)
asciilifeform: iirc the audio dac sits on i2c also
asciilifeform: this is currently best picture i have ( wish i had the schem... )
mircea_popescu: honesrtly i'd still rather get this than "go to store buy intel chip"
asciilifeform: yea
asciilifeform: so far i did find how to disable #wp signal on the h1 ( it tracks the battery-triggered #wp ). the way updater works, it permits flashing in any old turd, and it goes in a temp slot, which only on next boot gets ecc-sigchecked
asciilifeform: potentially we find a hole in this process.
mircea_popescu: this is conceivable.
asciilifeform: if can find , e.g., overflow, then can have whatever payload waiting there to be jumped into.
mircea_popescu: honestly, i don't expect either elegance or smoothness come out of the haphazard antidesign style of google et all.
asciilifeform: ( which is less painful than if nothing could be shat into it to begin with )
mircea_popescu: something somewhere's crackin'.
asciilifeform: it's a massive ball o'shit
asciilifeform: and the contents do seem to correspond, at least partially, to the published src. so there's definitely something to work against.
asciilifeform: ( hey douchebag ! )
mircea_popescu: lol srsly.
mircea_popescu: contrary to your respective inclinations, you two'd actually make a great team. very bias-mismatched.
asciilifeform: i used to work with a roughly similar fella, so yes, agree
asciilifeform: now if he can be arisen from his arse...
asciilifeform bbl,meat
mircea_popescu: in other holy shit... google returns my own stored image if you try and find the "porch monkey" thing. jesus f. the web is pointless.
mircea_popescu: "NEW YORK, June 05, 2018 (GLOBE NEWSWIRE) -- The Nasdaq Stock Market announced today that it will delist the common stock of Long Blockchain Corp. Long Blockchain Corp.’s stock was suspended on April 12, 2018 and has not traded on Nasdaq since that time. "
mircea_popescu: in other news nobody carted about.
mircea_popescu: meanwhile at the beach, https://78.media.tumblr.com/d8b02d8788229d446afa7d98ff438d22/tumblr_oxei6oXluN1ubezpxo1_1280.jpg
spyked: re. nsa laptop thread: olimex ppl (huh, it seems I keep mentioning these folks) have a "diy laptop kit" whose specs are very similar to the c101pa (for comparison: http://archive.is/4cp8W vs. https://www.olimex.com/Products/DIY-Laptop/KITS/TERES-A64-WHITE/open-source-hardware , the latter doesn't seem to archive for some reason). it's a candidate for my (by now long) hw-to-buy list, the "open sores diy" aspect is otoh the biggest
spyked: selling point.
asciilifeform: spyked: it's utter rubbish
asciilifeform: blobulent slow arm, non-ips lcd, shitplastic case, toystore keyboard
asciilifeform: don't encourage the 'i can peddle liquishit parts that would've been spat on in china street markets decade ago , if i stamp Open on the box!' hucksters.
spyked: asciilifeform, could please expand re. "blobulent arm"? it's allwinner a53 afaik? I have no comments re. all other points other than: judging from what I hear, only alternative seems "bake own case/kbd/other parts or reuse ones from x60/whatever".
asciilifeform: spyked: i could be wrong re the blobs, but iirc there is no fully open loader for a53
asciilifeform: i was actually in line to buy the box myself, for something like a year, turn finally came but by that time i got to see the photos / reviews
asciilifeform: spyked: reusing parts from existing lappy is possible, tho tricky, you would have to reverse engineer the kbd matrix, buy its weirdo connector somewhere , make kbd scan controller, etc.
mircea_popescu: well, don't encourage the "ima make really strong damning statements without my notes" stuff either.
asciilifeform: i sat down to do this some yrs ago, then decided that life is too short
mircea_popescu: this what ? keep track of why you rejected $item ?!
asciilifeform: mircea_popescu: i can't properly damn it, not having suffered with it with own skin
asciilifeform: no
mircea_popescu: yes, but you still had some sort of thought process.
asciilifeform: keyboard-reuse
mircea_popescu: oh
asciilifeform: re upstack -- i do not currently have an 'allwinner', cannot comment re its uboot definitively.
mircea_popescu: so "it's utter rubbish" / "i suspect the os dyi may be sprinkling of holy water, but never checked this. let me know if you establish one way or the other" ?
asciilifeform: the physical chassis is the very solidly rubbish part
mircea_popescu: ah. right. cp is metal isn't it.
asciilifeform: yea
asciilifeform: all aluminum ( but the hinge cover, where antenna lives )
asciilifeform: and better kbd than $3k crapple ( tho similar to decade ago crapple )
mircea_popescu: i honestly dunno what diff it makes for what's intended as a cheap throwaway anyway
asciilifeform: kinda costly for throwaway
mircea_popescu: kbd... well... yeah. though i loathe laptop kbds equally anyway. nonstandard shape
asciilifeform: yea there is not and afaik has never been such a thing as a truly pleasant laptop kbd
mircea_popescu: cuz they insist on making them unwide.
asciilifeform: i have one with full width and numpad. believe or not
asciilifeform: still sucks
mircea_popescu: why the fuck they imagine ~this~ is engineering problem to solve is anyone's guess. but the laptop kbds they produce are reminiscent of lens-shaped dildos. WHY WOULD YOU
mircea_popescu: "oh, it's ERGONOMIC". no it isn't.
mircea_popescu: it's inhumane.
mircea_popescu: "but mp, who are you to define humanity" shut it. i said, shut it.
mircea_popescu: asciilifeform, really ? which is this one ?
asciilifeform: stinkpad w540
asciilifeform: ( massive tank of a box, 32G, 8core thing, multiple drive slots, kg power brick, etc . but still sad and shallow, vs x60, not even speaking of troo desktop, kbd )
asciilifeform: but -- has width... numpad, arrows.
mircea_popescu: asciilifeform, 340.5mm. not even close.
asciilifeform: i did most of the early trb on that thing
mircea_popescu: good for you but my hands are made for slapping bitches in place. 450mm plox ty.
asciilifeform: there's a 450mm lappy?
mircea_popescu: this is what i'm saying.
mircea_popescu: keyboard is the size it is. laptop builds around that, the size of the keyboard is not an open engineering problem.
asciilifeform: hell, i'd buy a lappy with a spring kbd. but can only dream of this.
mircea_popescu: yeah, we've not even got to the extra annoying extra short travel distance.
asciilifeform: and it keeps shrinking
asciilifeform: recent boxen feel just about like banging fingers on table
asciilifeform: with, of course, the grim end of the line, being the glass pseudokbd
mircea_popescu: in the immortal words of brick pollitt, "that will come too."
asciilifeform: already came, in pnojeism
asciilifeform: far upstack, re the 'cr50' thread -- asciilifeform woke up today and realized that we can simply cut #wp track on spi rom ( naturally after filling it with e.g. uboot )
mircea_popescu: right.
asciilifeform: in other noose, i found the vendor binary for my particular box's cr50 (all ver strings match) : https://gsdview.appspot.com/chromeos-localmirror/distfiles/cr50.r0.0.10.w0.3.0.tbz2
asciilifeform: this is useful because there is not, apparently, any means for getting a locked h1 to disgorge its fw
asciilifeform: ( 0.3.0/cr50_v1.9308_25_B.45-d65d216 )
asciilifeform: the arch is, apparently, 'arm cortex m'
asciilifeform: https://chromium.googlesource.com/chromiumos/platform/ec/+/master/chip/g/ << support crapola for the chip, apparently.
asciilifeform: more interestingly, https://chromium.googlesource.com/chromiumos/platform/ec/+/master/chip/g/loader/verify.c << there ~is~ an rsa key embedded, apparently one variant for fw update
mircea_popescu: ha-HA!
mod6: oh hey!
deedbot: http://qntra.net/2018/06/big-botnet-of-small-routers-gets-bigger/ << Qntra - Big Botnet Of Small Routers Gets Bigger
BingoBoingo: Watching this laptop get molested in channel in near real time is a complete joy.
asciilifeform: https://chromium.googlesource.com/chromiumos/platform/ec/+/master/chip/g/rdd.c#20 << as i suspected, thing drives the receiving end of the debug snake ( the http://www.loper-os.org/?p=2415 item )
asciilifeform: https://chromium.googlesource.com/chromiumos/platform/ec/+/master/chip/g/config_chip.h#139 << implies that google does not actually hold all of the privkeys
mircea_popescu: heh
BingoBoingo: lol
mircea_popescu: anyway ; basically old lizzards hold exact same pov as tmsr, keeping rsa keys and letting the bumbling kiddies play about with the ecc.
asciilifeform: just like we found with the amd fritz
mircea_popescu: quite.
mircea_popescu: (ftr, i am not proposing this agreement as some kind of proof.)
phf: http://btcbase.org/log/2018-06-08#1821658 << they could also bring back 701c butterfly keyboard design, but i guess that's too gimicky.☝︎
a111: Logged on 2018-06-08 13:48 asciilifeform: stinkpad w540
phf: i used to get comments about ibook in the early 2000s, like old boomer types asking me about y2k or whatever. get the same reaction with x60 now, some guy on amtrak wanted to talk about bitcoin
BingoBoingo: The age of my laptop shocks Latinos and Latinas universally.
phf: oh those are a special category. my iranians also get distressed because i use old hardware.
asciilifeform: i was able to flash in the https://gsdview.appspot.com/chromeos-localmirror/distfiles/cr50.r0.0.10.w0.3.4.tbz2 image ; it supports a few moar commands, including 'rma open' returned-to-factory unlocker thing. but result was , unsurprisingly, 'with notes from hitler only' : http://www.loper-os.org/pub/c101pa/c101pa_unlock_nodice.txt
asciilifeform: the vendor's 'we'll unlock' pg (to be fair, mentioned in no docs anywhere, only in the python proggy in the src repo) is only a taunt.
asciilifeform: turns out also that this is the only routine that uses ecc crypto
asciilifeform: ( what can be flashed in : it gotta pass the rsa sig ; plus it gotta match the board id ; plus the version must be above the previous )
asciilifeform: so throwing in, e.g., old devkey-carryng versions, dunwork.
phf: ah, so it's a "we'll unlock but not for you"
asciilifeform: aaaha
asciilifeform: for hitler, happily unlocks.
asciilifeform: it's a deedbot-style challenge/response thing
asciilifeform: https://chromium.googlesource.com/chromiumos/platform/ec/+/master/common/rma_auth.c#176 << mechanism, for the curious.
asciilifeform: https://chromium.googlesource.com/chromiumos/platform/ec/+/master/common/rma_auth.c#254 << the magic moment where answer is checked.
phf: heh they are also using gentoo for their stuff.. https://chromium.googlesource.com/chromiumos/overlays/chromiumos-overlay/+/master/chromeos-base/chromeos-cr50-scripts/
asciilifeform: phf: all of google's linux-like crapola stack is gentoo-based
asciilifeform: they plagiarized it long, long ago
asciilifeform: ( complete with own ebuilds, etc )
asciilifeform: phf: if you are able to build the usb snake -- lemme know which cr50 turd ver is in your box
asciilifeform: http://btcbase.org/log/2018-06-08#1821694 << i actually had that box. the mechanism is clever but i suspect that it wears out ( my unit, to be fair, did not last long enuff for the kbd clockwork to wear out, mobo died 1st )☝︎
a111: Logged on 2018-06-08 17:08 phf: http://btcbase.org/log/2018-06-08#1821658 << they could also bring back 701c butterfly keyboard design, but i guess that's too gimicky.
douchebag: hello
BingoBoingo: Run moar Intel "descriptor region": https://archive.is/XFaFu
asciilifeform: how the fuck is this a vuln tho
asciilifeform: 'ohnoez, user can flash his fw!'
asciilifeform: 'did not securely authenticate firmware updates'
asciilifeform: ohnoez, not tivoized properly!11
BingoBoingo: 4srs
BingoBoingo: The vulnerability is "person physically in control of machine can fuck it as he likes"
deedbot: http://qntra.net/2018/06/security-researcher-continuing-to-receive-new-usg-charges-for-authoring-popular-code/ << Qntra - Security Researcher Continuing To Receive New USG Charges For Authoring Popular Code
mircea_popescu: https://www.google.com/chromeos/partner/console/cr50reset?challenge=ABXFGCMDADUJFPQ7J8MQUUSTGXGTRTVJ6Z548PWC8AGMGT2QJ4BT3TW4HJVU4XLPASB4GE78RSBKYEHC&hwid=BOB <<< ahahaha roflmao.
asciilifeform: reminiscent of old-time gsm carriers and their crippled handsets
mircea_popescu: mhm
mircea_popescu: looks like made by the exact same people, actually.
asciilifeform: https://archive.li/ZtbxL << clue re origin of 'h1'. seems like they took a 'metallization mask' fpga, a la early asicminer crapola, and run licensed cortex-m3 core .
mircea_popescu: http://btcbase.org/log/2018-06-08#1821721 << yup. you realise that as far as the imbeciles are concerned, once we break their laptop "security" it'll have been "terrorism" and "hacking" bla bla.☝︎
a111: Logged on 2018-06-08 18:31 asciilifeform: 'did not securely authenticate firmware updates'
asciilifeform: btw the #linux-rockchip d00d is definitely caught nao in telling a fib : 1) yes there is not one, but two magic keys (1 for flash updates, other for factory unlocker routine) and yes all deployed units can be popped via either
mircea_popescu: right.
asciilifeform: and that's just the visible crapola.
asciilifeform: https://archive.li/Mzar8 << when it was in spam pr stage of life cycle.
asciilifeform: ( at first, unabashed usgology; then rebranded, disguised , as it was rolled out to production boards )
mircea_popescu: asciilifeform, isn't this fun tho
asciilifeform: will be moar fun when it pops.
mircea_popescu: "nation states". they can just say tmsr, why all the pretense.
asciilifeform: 'nobus'(tm)(r)
mircea_popescu: meanwhile in contemporary etchings, https://78.media.tumblr.com/23e95b3188bc8b6198f810eab81e9572/tumblr_msz4naJTeh1snc50fo1_1280.jpg