mircea_popescu: even from a purely operational standpoint - it'd seem sks servers have all the interest in the world to reject such broken keys rather than publish them, carry them in db etc
mircea_popescu: definitely not what's expected from / implied by the listings, but who knows.
asciilifeform: at the moment it looks like sks bit rot is responsible
jurov: no, rejected, scroll to the bottom
trinque: jurov: so yours imported the subkey?
asciilifeform: the rest of it gets sucked in
asciilifeform: the subkey is skipped
mircea_popescu: incidentally... how likely is it that this behaviour is emergent, which is to say, you can't import the weak key ANYMORE ?
mircea_popescu: so this is a manufactured subkey that was somehow uploaded to sks and merged into the guy's key but not necessarily used or even issued by him ?
asciilifeform: who's got the mouse spray
mircea_popescu: seems the guy was maybe being attacked or something ?
mircea_popescu: curious what the actually useful output is.
mircea_popescu: anyone feel like running a -v -v over the thing ?
davout: few extra features to implement for the phuctor... also nice to have: "throw list of URLs at it, it fetches the SSL cert and tries to factor it"
mircea_popescu: i pass a base64 img wrapped in a tags. could you maybe make it be the same and i just forward it ? dunno.
mircea_popescu: mike_c you see how the 8chan ads work ?
williamdunne: mircea_popescu: What do the CKW__.s mean?
mike_c: I have a script that will do it, not sure if you can use that for your ads? If not, we could either pick a specific bet to promote and link it to that, or link to homepage.
asciilifeform: but right now the display apparatus expects all moduli to be associated with pgp keys
mircea_popescu: in other news, how does a server look while trending on everything ? like so :
davout: or i guess yes, GCD the running product once in a while
mircea_popescu: you can just import the P ?
davout: mircea_popescu: it would be better for the phuctor itself to do it
asciilifeform: the relevant bit is posted
asciilifeform: incidentally, folks asking 'how does it work' can go to my site & read the fucking src now
mircea_popescu: d34th you wanna do something, do the same with ssl certs.
davout: it would probably make sense for the phuctor to start munching SSL certs as well
trinque: not since cloaked and getting a new IP from the ISP
d34th: mircea_popescu: question about the working is it cpu based or opencl
williamdunne: To this day I have not had my connection drop, the wired connection has remained solid without dropping. Maybe I'm just lucky and ddos guys like me?
mircea_popescu: actually i guess just the comment will do.
mircea_popescu: http://trilema.com/2015/full-disclosure-4096-rsa-key-in-the-strongset-factored/#comment-114212 << apparently the ddos guy is still lurking.
mircea_popescu: how do you like the world outside ?
mircea_popescu: "In the army battle field tactical communication are handle by streaming ciphers on the radio. The idea is not to be impossible to breach. But strong enough that time is on your side"
trinque: oh man he's the maintainer of kernel.org?
mxtm: THE peter anvin
mircea_popescu: what did you think the considerations were.
mircea_popescu: jurov lots of these republishing things. i think it's some business major's idea of web entrepreneurship
jurov: http://thetrendythings.com/read/27592 << snatched verbatim
asciilifeform: i was never strongly interested in the version strings. anyone can write what he wants.
mircea_popescu: this, tbh, is a good move, because : someone came up with the fucktarded idea of adding "visual" identity to keys. as if i can tell one whore from another on the basis of a 5kb icon.
asciilifeform: wait till we find the boobytrapped pgptron that is responsible for the $smallint factors.
jurov: just use cpanel to replace the ssh key, no?
mircea_popescu: http://trilema.com/2015/full-disclosure-4096-rsa-key-in-the-strongset-factored/#comment-114210 << the problems of people.
asciilifeform: or by asking ft meade, where the process lives now, to do it
mircea_popescu: make another one while ssh'd in :D
asciilifeform: make other one by taking airplane ?
mircea_popescu: you can make another one.
asciilifeform: the box, if it had been purloined and returned, has yielded up its private ssh key to enemy
asciilifeform: mircea_popescu: at this point i must note that i have no idea if i'm connected to shakespeare or another man by the same name, when i talk to dulap
mats: re: previous es link, it appears openssl at some point did not check whether factors were weak
mircea_popescu: mxtm no, it's just that having maintained control over the box i feel no need to divulge anything.
mxtm: is that supposed to be a hint at the number
asciilifeform: the article on my www (earlier link) contains link to 'werker'
mircea_popescu: the supreme irony of which being, that you have to be a fairly frequent reader to hit the paywall.
davout: http://www.reddit.com/r/Bitcoin/comments/36a1m2/full_disclosure_4096_rsa_key_in_the_strongset/
asciilifeform: jurov: i'm waiting for the apocalyptic 'omg1111111111!!!111 pgp broken, seppuku now' stampede
assbot: Logged on 15-05-2015 04:11:23; mircea_popescu: (for they following at home : 4x as many bits does not mean 4x as large numbers. when computer registers went from 32 to 64 bits, maxint went from 2147483647 to 9,223,372,036,854,775,807)
assbot: You rated user bad_duck on 25-Mar-2014, with a rating of 1, and supplied these additional notes: encore une victoire pour canard.
mircea_popescu: if anything shows the value of hard work and just sitting down and doing it, in the present environment of financial "futures" and just-in-time everything, this would be it.
mod6: proof in the pudding :]
mircea_popescu: Apocalyptic from what i hear alf's contemplating sending them certs signed by their own key.
mircea_popescu: (generally - since the gcd finally contains 3, it will be a massacre now for all the shitty keys)
Apocalyptic: <mircea_popescu> just owner(s) announced. // once you have the owners name you can get their keys, and at that point it's trivial to compute the common prime factor
mircea_popescu: nope. 21 this time. why bother with a full length 77 when one could just use 7.
mircea_popescu: davout two pairs of gpg keys are known, in the sense that their pubkey modulus has been factored.
Apocalyptic: mircea_popescu, asciilifeform, will the second colliding prime be published ?
davout: so 2 identified keys have been factored and 2 others have been factored, but not identified yet, right?
asciilifeform: the src specifically ?
asciilifeform: the www front end is an ugly python hack
Apocalyptic: wait, the worker is a python script ?
asciilifeform: the ugly www frontend ?
mircea_popescu: omfg strong set is rotten to the core.
mircea_popescu: another PAIR
mircea_popescu: boys ? it ... it just found another.
mats: asciilifeform: ya, wasn't sure if the link was the same paper you referred to earlier re: 'ssl folks'
deedbot-: [Trilema] Full disclosure : 4096 RSA key in the strongset factored. - http://trilema.com/2015/full-disclosure-4096-rsa-key-in-the-strongset-factored/
asciilifeform: (which is why the thing takes an ungodly time to revv back up after a cold boot)
mircea_popescu: faster to pair them up.
mircea_popescu: optimized bubble-like process, was discussed in the logs iirc
Apocalyptic: asciilifeform, also I noticed that "Moduli waiting to test" number is updated quite regularly, why the running product displays the same number of digits for a while now, I guess it doesn't update as often ?
asciilifeform: the paper is worth reading, it contains a bit of exposition on -how- a schmuck might end up with dupped privates
asciilifeform: and i shit on them now.
asciilifeform: i shat on them when we started out, because they published neither code nor results !
asciilifeform: mats: the ssl folks ?
Apocalyptic: asciilifeform, that calculation makes sense if Π(∀n) is in fact the product of only the two modulus we're interested in
asciilifeform: Apocalyptic: you are correct, the formula is missing a step. but i will leave it as exercise.
mircea_popescu: the spec is in no way broken by this.
mircea_popescu: mxtm we check implementations to make sure they're conformant to spec.
Apocalyptic: asciilifeform, isn't Π(∀n) the product of all the modulus treated by phuctor ? how do you get $schmuck-Q * $otherschmuck-Q by dividing it by (schmuck-P ^ 2) ?
mircea_popescu: anyway, i do encourage everyone to try this themselves.
mircea_popescu: say, can i has 728x90 bitbet banners ? and in some manner WITH the link, so i can put them on 8chan ?
asciilifeform: we have schmuck-P; if one were to divide Π(∀n) by (schmuck-P ^ 2), result is J*K where J is $schmuck-Q and K is $otherschmuck-Q. thereby K*schmuck-P == otherschmuckmodulus.
asciilifeform: for the record, since folks were asking, much simpler than i thought,
mod6: <+mircea_popescu> yes. once keys are factored we have the privkey. << holy shit o.0
asciilifeform promises to investigate this oddity, and see if there are others like it, as soon as finishes current plate
asciilifeform: the only peculiar thing i can see in this key is the use of odd orcish hieroglyphs in the id string
asciilifeform: no this is a good find, i will add it to the queue of three or four other mysterymeats
asciilifeform: williamdunne: 'first ecstacy, then laundry.' (al schwartz)
assbot: Successfully updated the rating for asciilifeform from 4 to 5 with note: 4 First man to factor a 4096 RSA key in the history of computing.
asciilifeform: perhaps the ssl folks did
mircea_popescu: !rate asciilifeform 5 4 First man to factor a 4096 RSA key in the history of computing.
assbot: You rated user asciilifeform on 30-Nov-2013, with a rating of 4, and supplied these additional notes: He came up with the Cardano For Christmas marketing plan. Also phuctor..
mircea_popescu: ;;rate asciilifeform 4 First man to factor a 4096 RSA key in the history of computing.
gribble: You rated user asciilifeform on Sat Nov 30 16:31:44 2013, with a rating of 3, and supplied these additional notes: S.NSA engineer..
mircea_popescu: that is quite major. but it's not the half of it.
mircea_popescu: yes. once keys are factored we have the privkey.
mxtm: and you derived the priv keys from this?
asciilifeform: mxtm: some 2 schmucks (of which i've identified 1, but the other will follow in a week or so) had common factor in their rsa private keys.
asciilifeform: kudos to mircea_popescu for supplying the cpu cycles for this apparatus pro bono
mircea_popescu: im waiting to share it in the interview lolz.
asciilifeform: jurov: there is a second, but it will take a while to unearth it.
adlai: jurov: yes, at least two keys need to have a primer in common. had phuctor run over the keys in reverse order, it would've found the other chump first
jurov: soo i have inadvertently turned to computational sommelier,too... thinking about replacement to my broken qwerty phone, then it hit me..n900!
jurov: asciilifeform: but there were multiple people with colliding moduli, not only one?
asciilifeform: but my point above was, what are we to do with the answer? it could be coming from just about anyone!
asciilifeform: if keys are identities are people - which, for purposes of wot and dealings among folks who will never meet in the flesh, they most certainly are - that one: has died.
asciilifeform: and we must not neglect the third party - the fine folks who boobytrapped mr schmuck's copy of pgp.
asciilifeform: mircea_popescu likes to speak of having 'killed' that greek derp, but in a very real sense the schmuck whose key we just broke, is dead
asciilifeform: we haven't really discussed it, but there are interesting implications in breaking a fella's pgp key.
asciilifeform: so here's my other observation:
asciilifeform: davout: in not too long, i will learn who the 2nd one is.
asciilifeform: davout: there sure are
davout: if you know that there's another broken one in the set, might as well re-check the set to find it
adlai: (phuctor now knows the factorization of a single key, and it knows which of the two prime factors is shared with the second bugger)
adlai: (not that much work, definitely less than the work which has already been done to find the first one)
adlai: iiuc, finding the second bugger would require bruteforce checks against all the keys contributing to the modulus that phucked the first bugger
davout: asciilifeform: aren't there, by definition, at least two 'buggers'?
asciilifeform: phun phuct: i never actually tested the code which displays phuctored moduli. (couldn't be bothered to craft a dud key, it's a pain) - but it worked. because was written correctly. perhaps a novel concept to some folks
kakobrekla: anyway, the affected parties are basically (listed by alphabetical order): mp
kakobrekla: well, lets see what the wot is worth.
asciilifeform recused himself from the bet
mats: too bad its the house
asciilifeform: in fact, i'm rather unclear on what will happen if key's owner wakes up and asks 'pretty please don't rape me on camera'
asciilifeform: kakobrekla: i woke you up because the info necessary to resolve this bet is not public (as of yet.) hence tricky.
asciilifeform: (for anyone perplexed - we promised not to announce dud keys publicly, at least not if key's owner answers the warning - see http://nosuchlabs.com/theory )
gribble: The operation succeeded.
asciilifeform: ;;later tell kakobrekla https://bitbet.us/bet/1144/phuctor-will-find-a-bad-key can be resolved? get the necessary data from mircea_popescu
gribble: The operation succeeded.
asciilifeform: jurov: you are quite right, the electrons would have to move laterally. but not necessarily in very sharp turns.
gribble: The operation succeeded.
gribble: The operation succeeded.
jurov: classic CRTs do at least the "demultiplexing"
assbot: Logged on 17-05-2015 02:37:42; asciilifeform: http://log.bitcoin-assets.com/?date=17-05-2015#1134108 << they don't need to turn sharp corners, in our hypothetical machine
gribble: The operation succeeded.
BingoBoingo: And numerous others
BingoBoingo: Because few of them could get under heavy weight.
BingoBoingo: Anyways my survey of the field now is half the people on my high school's football team tried MMA at one point and got into "pro" fights of some sort. They played the proverbial tomato can to a t.
gabriel_laddel: BingoBoingo: You're splitting (the wrong) hairs.
BingoBoingo: <gabriel_laddel> If your goal is to become scary, well, there are way to get there that are going to make you much more scary than the worlds best MMA fighter. << Scary for the sake of scary is one of the last things I aspire to. That's how people get shot and sliced.
BingoBoingo: <gabriel_laddel> BingoBoingo: The bent I'm attempting to communicate here is something like this: You've made it to #b-a, which unlike any community I've ever encountered provides a foundation for building a sane civilization and you want to... become a boxer? It doesn't follow. Boxing is a last resort sort of thing, even if you were to become the worlds best boxer you're still basicly some poor fuck who couldn't make << Where are
BingoBoingo would rather punch one of the local coyotes into dinner than try making an armadillo edible
BingoBoingo: cazalla: Turkeys here you can catch wild. Fuck, drove past a roadkill armadillo today which should only happen on the other side of the mississippi river. Chickens though... It takes three eggs to make a decent omlette. Even if you are getting an egg from each hen per day that's still a lot of birdshit.
cazalla: chicken chasing is how we use to train in the old days btw
cazalla: BingoBoingo, buying em? what's the matter with you, can't catch a chicken?
BingoBoingo: If anyone didn't guess already the Qntra Bird Flu article came out of buying 2 dozen eggs and the next week buying the same two dozen eggs for a budget busting (who plans for 67% markups) price.
cazalla: BingoBoingo, anyway we should both train and then we can put on some exhibition fights in BA in a year or 2, find some local picaninnies to go up against
cazalla: it's a great story though, not the first trilema article i read but the first that stuck in my mind
mircea_popescu: (honestly, that hauling assets banner is great, easily the best of the crop. meanwhile the qntra one is probably the shittiest. imagine these derps, conflating the extremes like that)
cazalla: ya should toss a quote in from that boy and the tree, that'd go well in /pol/ believe it or not
BingoBoingo: Boose isn't as bad as the smoking it seems atm for me, may change.
cazalla: yeah i keep meaning to as well but the booze really gets its hooks in
BingoBoingo: While building the upperbody and core back up
cazalla: slip the jab
BingoBoingo: cazalla: Think about how many pitchers peak in ability in their late 30's early 40's (or not) versus combat sports peeps over at 30 because they are too beat.
BingoBoingo: cazalla: If only you knew the tar on my lungs.
BingoBoingo: mircea_popescu: Honestly having been roundly rejected by the fiat economy anything I approach is as a hobby, except for the qntra. The Qntra is deadly serious.
mircea_popescu: gabriel_laddel i think that's how half the chan people are too. that's why it's such a trap for them
cazalla: still don't get the 11 years of training
mircea_popescu: " You've made it to #b-a, which unlike any community I've ever encountered provides a foundation for building a sane civilization and you want to... become a boxer? It doesn't follow." << ahaha lulzy way to put it, but i dbout the guy actually aspires to this as his life. sounded more like a hobby to me
BingoBoingo: cazalla: The time it takes to learn to throw anything left handed... versus the exosud of young potential prize fighters for MMA and the NFL... I leik my odds
mircea_popescu: gabriel_laddel I like walking and that is about it as far as exercise goes. << im pretty much the same.
cazalla: BingoBoingo, figured you more for baseball anyway, then you could get juiced up on HGH
cazalla: of course for every pacman there is countless spider ricos
BingoBoingo: Thankfully Obummer surrendered to the Castros
mircea_popescu: the us will have to work out of cuba and hawaii.
mircea_popescu: <decimation> they got usg's nukes on call if they need them << nope, not anymore. new king is trashing the alliance.
mircea_popescu: decimation afaik it was always known (tm) that they found him by sherpa.
gabriel_laddel: Between me, rents and sickboy I'm the best petty thief
gabriel_laddel: Getting punched will happen regardless through other habits I entertain. << can't save people from themselves...
BingoBoingo: It requires minimal monetary expenditure and substantial time expenditure to approach X, A side effect of X is getting punched. Getting punched will happen regardless through other habits I entertain.
gabriel_laddel: <BingoBoingo> My take is there is a tradition. << this means nothing to me
gabriel_laddel: Regarding China - finding reliable chemical suppliers and integrating with the WoT sounds like a useful use of one's life.
BingoBoingo: My take is there is a tradition.
gabriel_laddel: that said, I wish you the best in all your ventures.
gabriel_laddel: If your goal is to become scary, well, there are way to get there that are going to make you much more scary than the worlds best MMA fighter.
gabriel_laddel: BingoBoingo: The bent I'm attempting to communicate here is something like this: You've made it to #b-a, which unlike any community I've ever encountered provides a foundation for building a sane civilization and you want to... become a boxer? It doesn't follow. Boxing is a last resort sort of thing, even if you were to become the worlds best boxer you're still basicly some poor fuck who couldn't make
BingoBoingo: Blame our earth biases towards amino acids one way and carbohydrates another, not opposite way
BingoBoingo: I know the concept of a recipe and I know what a catecholamine is.
gabriel_laddel: BingoBoingo: do you know synth then?
BingoBoingo: Thing is the legitimate governments of most of mexico frown on synthesis without their blessing.
BingoBoingo: Oh, scary is context dependent. I sat through ~75% of a pharmacy school's curriculum as a grad assistant who just worked the microphones.
gabriel_laddel: china ships precursors to mexico all the time, head out there (cn), meet the people involved.
gabriel_laddel: really, they're not even that useful.
BingoBoingo: gabriel_laddel: I live in a rogue state atm (Illinois) and I'd rather not have to get a prostate exam to buy legit hunting rifle of Mosin or Simnov design. So earlier this week I was watching past oscar movies and hit Million Dollar Baby. Then it hit me. Why not weaponize me?
BingoBoingo: I like walking too, but walking lets me smoke while I do it, also seems less like exercise and more liek an activity of daily living the doctors count against you if you can't do it.
BingoBoingo: gabriel_laddel: Year one goal is ending their year in sufficient shape after a decade of chainsmoking and heavy drinking to not get too winded at a gym
BingoBoingo: Oh, not too much is up. My youngest brother got their BS in Mechanical engineering today.
BingoBoingo: gabriel_laddel: Did you stumble upon my 11 year plan in the logs yet?
gribble: The operation succeeded.
gabriel_laddel: ;; later tell indiacandy1 who are your role models in the porn biz?
assbot: Logged on 17-05-2015 02:54:48; indiancandy1: im like the only pretty girl who comes in here
gabriel_laddel: "Reductio ad absurdum, which Euclid loved so much, is one of a mathematician's finest weapons. It is a far finer gambit than any chess play: a chess player may offer the acrifice of a pawn or even a piece, but a mathematician offers the game. -- A Mathematician's Apology (London 1941)"
gabriel_laddel: "in the meantime, resistance is not futile. only the weak of mind will be assimilated, and they are no loss, anyway." -- Naggum
gabriel_laddel: "PS. Smart people don't give a shit about how much money you have. Because they can take it from you, any time they feel like it. Get it through your skull: you ain't buying it, you ain't coercing it, get on your knees and start worshipping it." -- http://trilema.com/2013/the-sanity-dogma/#comment-95113
gabriel_laddel sees *nix hetrogeny as meaningless unless the personalized systems all have sources included, can be bundled into a usb stick or CD/DVD installer with a single procedure call
BingoBoingo still rather inclined towards promoting *nix hetrogeny
gabriel_laddel: Testing the install process has been impeded by possibly faulty hardware (my testing box reliably kernel panics as of today - idkwtf). I'm stalled until I've new boxen. If someone were willing to set aside a few hours to test the install process, please leave it in the logs. I'll follow up with you via PM.
trinque: http://www.wsj.com/articles/saudi-arabia-considers-nuclear-weapons-to-offset-iran-1430999409 << usg might be shifting the balance of power in the region towards their competitor
trinque: why don't they?
trinque: given the cozy relationship there I would not be surprised if saudi tries to purchase nukes from pakistan, if they haven't already
deedbot-: [cascadian hacker] Hacking on the Satoshi Codebase: Some Pointers - http://cascadianhacker.com/blog/2015/02/01_hacking-on-the-satoshi-codebase-some-pointers.html
deedbot-: [cascadian hacker] Well welcomed, the warrior - http://cascadianhacker.com/blog/2015/04/25_well-welcomed-the-warrior.html
deedbot-: [cascadian hacker] A brief history of the Bitcoin Foundation's activity from 10/2014 through 4/2015 - http://cascadianhacker.com/blog/2015/05/02_a-brief-history-of-the-bitcoin-foundations-activity-from-102014-through-42015.html
deedbot-: [cascadian hacker] electronics hack night featuring the twiddler and asciilifeform's TRNG - http://cascadianhacker.com/blog/2015/05/16_electronics-hack-night-featuring-the-twiddler-and-asciilifeforms-trng.html
decimation: the fact that bricks fly at such trains ought to be newsworthy
decimation: sorry I wasn't implying that was the case
asciilifeform: to imagine that this is why the bricks fly, is lunacy
decimation: but the important bits are within walking distance of a metro station
decimation: usg is all over the place
decimation: gotta go to teterboro or some other outlying airport
decimation: how do you think they travel? tsa screening?
decimation: well, one would think that the trains that carry the flower of the ny & dc elites might carry some level of interest
decimation: note that the new york times hasn't seen fit to cover this until now, because reasons
decimation: "Getting ?rocked,? as locomotive engineers call it, is so common on the Northeast Corridor that trains long had metal grills over their windshields to act as armor. These days, thick glass is specifically designed to withstand the impact of a cinder block. Amtrak officials say trains are pelted in the neighborhoods around the crash site monthly."
decimation: http://www.nytimes.com/2015/05/17/us/projectile-problem-goes-beyond-amtrak-train-and-philadelphia.html?_r=0 < lol apparently the new explanation for the amtrak crash in philadelphia is that the 'local citizens' were throwing bricks at the trains