mircea_popescu: let's make glibc no longer compile statically and github not work. that'll make the foss so much better.
mircea_popescu: who the fuck thought this is a good idea ?
mircea_popescu: and for the record, github has given up on being on the web. http://dpaste.com/0ZQN8Q7
mircea_popescu: "BACKGROUND Hospira is a US-based company that maintains offices in several countries around the world." ... srsly ? us-cert.gov is a pr service now ? "please god anything, some text in here to dilute this shit o lord"
mircea_popescu: that Lars Bøgild Thomsen dude... nice work on the anonybox piece of crud. however... he's embedding facebook, running a wiki and a phpbb forum he wants you to comment on, there's no way to leave a comment on his article (wp blog) without "being logged in" and in general what the shit already.
mircea_popescu: it's fucking weird it uses wifi i nthe first place o.O
mircea_popescu: "So yeah, the Anonabox appears to be working but it is downright shocking that the WiFi connection is running unencrypted. Anybody within range of the Anonabox can connect to the network and sniff all network traffic."
mircea_popescu: "If the siteA string is empty, it is taken to be the local machine. A target like @@@@@@@@@@@@@@@@@@@@@@@@@victim would cause high load by recursive finger invocations, and could be used to contribute to a DOS attack. Michael H. Warfield reports that in a SUN NIS environment it is easy to kill a network using finger."
mircea_popescu: meanwhile "criminal possession in the seventh degree", they are going to run out of degrees. best talk to imperial china for some more degrees.
mircea_popescu: dude the way the world spins. the dons of the 50s didn't approve of drugs, at all. then in the late 60s it was like, "whatever, sell them to blacks, they don't have a soul anwyay". then in the 80s it was "whatever, sell them but don't let anyone know". by now it's like... "sell drugs and write opinions for the spectator and send the customer list spam emails to upvote you"
mircea_popescu: "A representative for Venmo would not respond specifically to the question whether they were helping police with their investigation into Getzler"
kakobrekla: > Shellshock was almost discovered a decade ago... http://www.win.tue.nl/~aeb/linux/hh/hh-8.html#ss8.8 but then it wasn't.
assbot: Using the docker command to root the host (totally not a security issue) // reventlov's silly hacks ... ( http://bit.ly/1HKV0Dz )
assbot: Logged on 07-04-2015 07:44:42; cazalla: the fuck is an mp4 script
mircea_popescu: http://log.bitcoin-assets.com/?date=07-04-2015#1090780 << actually, that's how people compile code these days. jam and autom4te.
gribble: gabriel_laddel was last seen in #bitcoin-assets 2 days, 14 hours, 32 minutes, and 34 seconds ago: <gabriel_laddel> <mircea_popescu> gabriel_laddel he's very tender on the topic for some reason. << the lady doth protest too much, methinks
Vexual: or a plane. if they check da specs
cazalla: the fuck is an mp4 script
Vexual: kids need the mp4 script eh?
cazalla: much the same until puberty eh?
cazalla: wouldn't want the missus to actually think i'm enjoying myself while she feeds bubs
cazalla: have not been able to do so the past few weeks
Vexual: nope i think someone stole the tech pages
Vexual: let me find the name
Vexual: why can't i trade sundried tomatoe futures? its supposed to be the fooking future
mircea_popescu: most of them unemployed
Vexual: who gives a shit about the aussie dollar now anyway
mircea_popescu: <decimation> heh there are such folks << yeah, ever since surgery moved to computers.
Vexual: and.. the market was wrong
Vexual: well the rba is going to say in less than aminute whether or not they change the interest rate
decimation: asciilifeform: they probably use something like http://www.ddmnovastar.com/pick-and-place/manual-systems/mpp-21-pick-and-place-system
asciilifeform: surgeons once did (still do?) have the habit of tying knots in fishing line inside a matchbox, every day
decimation: so there's probably a quantity of skilled labor
decimation: heh there are such folks
asciilifeform: if so - someone has excellent hands and ought to be earning a living horseshoeing fleas for a flea circus or the like.
decimation: well, if in large quantity, in p&p, otherwise by hand
asciilifeform: i have trouble believing they put 0805 resistors on by hand, ever
pete_dushenski: mircea_popescu and thx for the tech support :)
decimation: he said they use trays with mixed chips
asciilifeform: so long as they - do..
asciilifeform: at any rate, this is not 'woodcollector' and i don't much give a hoot -how- the parts get on the board
asciilifeform: or simply the fact of the p&p machine being loaded by hand from clips instead of magazine ?
decimation: I suspect they pay good rates for competent techs
asciilifeform: decimation: their 'hand-placed' probably involves a mechanically-cranked apparatus. or someone with much better hands than i
decimation: but they are looking into in-house pcb for 24-hour turnaround assembly!
decimation: of interest in the 'macrofab' podcast: apparently they load the pick n' place with house parts only, and all the other 'unique' chips for each design are hand-placed
mircea_popescu: so w/e you got there.
mircea_popescu: i think the structure's copied after wp-config or /we the file is called where wp keeps its password in plaintext.
pete_dushenski: mircea_popescu i did indeed, though you're right that i should fiddle with those values because there's a reasonable chance i got them wrong!
asciilifeform: you can convert the thing into a disk that perverts blocks in a particular way, or emulates a keyboard and types in obscenities, etc, etc.
mircea_popescu: pete_dushenski didja set up your db pw etc in there ?
asciilifeform: joecool: phison is a maker of cheap usb keychain drives that contain general-purpose micros. an ad hoc sdk was published recently. i had something quite like it, unpublished, in 2012; and hell knows how many other folks also did
decimation: in the airOs mtd2 is labeled 'kernel'
decimation: asciilifeform: yeah, it does appear to contain something specific to their hardware
Vexual: here, jewintro, rub the front and the back of your hands. https://www.youtube.com/watch?v=bVP_w1rQweE
mircea_popescu: in other news, http://proudtobeafilthyslut.tumblr.com/post/107315640663/dirtiestdepravedfilth-happy-new-year
mircea_popescu: in yet another shade of lulz : berkshire does not offer its many directors dso. because buffett believes you know, officers should face the music like any other shareholder. except it does offer it to buffett. because...
asciilifeform: i do not know the payload yet.
asciilifeform: in other news: cryptome is hosting a malicious pdf... http://cryptome.org/2015/04/nsa-ptpof.pdf
asciilifeform: they believe that it can be 'undone' as SAR was
asciilifeform: incidentally, usg doctrine is that 'fresh' nuke powers don't really 'count' - much as usa did not count in 1947 because, elementarily, not enough of the specific industrial base to secure a steady supply of nukes
asciilifeform: mircea_popescu: the racket in question here is where usg plays hand-muppets and runs faux 'we're l337, we sell to 1r4n' at the same time as 'proletariat united against ir nukes' on the other muppet hand
mircea_popescu: decimation from what i've seen, the deal with iran is exactly like the deal with cuba and every other deal conquered US has entered into :
decimation: no he said that they would have to wait awhile and fill out usg forms
asciilifeform: mircea_popescu: su was also nuclear power, didn't keep the buggers from shipping diddled tech there by the gigatonne
asciilifeform: mircea_popescu: because this could be just the necessary lethal stab to the 'nuclear iran' shillfest.
asciilifeform: first, look to see if copy-1 does anything -other- and load & jump to copy-2.
decimation: possibly. it would probably require considerably detailed examination to watch the thing boot
asciilifeform: decimation: i bet there is obfuscation. so dynamic analysis might be appropriate
decimation: asciilifeform: do you think that jtag will show something that these mtd turds don't
asciilifeform: i have one, yes. but not the time.
asciilifeform: won't someone buy one of these things and hook up to jtag bugger driven with gdb, and post instruction stream ?
mircea_popescu: i thought for a moment they had three copies.
assbot: Logged on 07-04-2015 03:14:49; asciilifeform: 'There are actually two copies of the bootloader in the NOR flash: the first one is failsafe, and doing bootloaderupdate will replace the second image. Basically after the CPU comes out of reset, it boots the failsafe bootloader image (the first one) in the NOR flash. The failsafe finds and boots the actual bootloader image (the second one) in the NOR flash. This bootloader then loads the kernel from
asciilifeform: decimation: probably licensing turd for their proprietary kmod
mircea_popescu: decimation so they have TWO hidden ones ?
decimation: I think you can download the 'open source' turds from ubquiti
asciilifeform: decimation: then this'd be it
decimation: there are apparently 3 'images'
asciilifeform went & got some of the spiders out of his mircea_popescu's-conference-travel-trunk. now back
mircea_popescu: he didn't paste the whole thing did he
asciilifeform: decimation: if it's in the nor, can be replaced, only question is how
mircea_popescu: like if i behead you i might not get any pancreas tissue on the blade.
decimation: ^ascii, one wonders if you can replace the 'failsafe'
asciilifeform: and the schneiers
asciilifeform: mircea_popescu: it -is- possible that he had some but none made it past the greenwalds
asciilifeform: 'There are actually two copies of the bootloader in the NOR flash: the first one is failsafe, and doing bootloaderupdate will replace the second image. Basically after the CPU comes out of reset, it boots the failsafe bootloader image (the first one) in the NOR flash. The failsafe finds and boots the actual bootloader image (the second one) in the NOR flash. This bootloader then loads the kernel from the USB drive and boots it
asciilifeform: also note how there is none of this (or the other let's-sell-boobietrapped-goods-to-persians) 'shartups') in the snowden releases.
asciilifeform: these became popular, presumably, with 'orcs' on a budget
asciilifeform: it sold routers that gave very reasonable performance for 1/20th the cost of cisco et al
decimation: they seem kinda derpy software-wise
mircea_popescu: It was the first, and being first, was best, but now we lay it down to ever rest. Now pause with me a moment, shed some tears.
asciilifeform: i think i can see why ubiquiti was picked for this particular role in the usg shitgnome muppet theatre
decimation: asciilifeform: they have weird stuff mounted for storing configs:
mircea_popescu: asciilifeform which is why the patches have to stay unpublished.
asciilifeform: to the extent they were not already raped in the 'liberty bsd' piece and in this here thread
asciilifeform: ^ lulzies! they very much don't want you replacing that uboot.
asciilifeform: 'As evidence, consider that in version 5.5.4 of the AirMax firmware, the kernel was modified such that the MTD partitions would be read only, however this change cannot be found in the corresponding kernel patches or source.'
decimation: and it starts at 2048, so that's probably the bootloader?
asciilifeform: sda1 contains the kernel
decimation: interesting here's the partition layout
asciilifeform: access uboot from the serial console, or, if replacing with another uboot, do so from the new os
asciilifeform: back it up (or replace with another) and put new os on that.
asciilifeform: just pull the usb
asciilifeform: ben_vulpes: yes. http://therealbitcoin.org/ml/btc-dev/2015-March/000074.html and http://therealbitcoin.org/ml/btc-dev/2015-March/000076.html
ben_vulpes: perhaps i am behind the times, but is there a buildroot config that's been passed around?
asciilifeform: motherfuckers.
asciilifeform gets out the serial cable, indignant
asciilifeform: or hm, uboot is in the nor flash...
decimation: but then I would need a mips64 build host
asciilifeform: decimation: it has the whole orchestra, minus a very small and possibly interesting micro-bootloader that loads uboot - iirc - on it
asciilifeform: decimation: pull the usb drive
decimation: asciilifeform: ugh, the ubquiti os has hardly any tools
mircea_popescu: asciilifeform understand, nobody's denying men will go to the end of the earths. they will. but only with fredericus.
asciilifeform: decimation: this, among other reasons, is why i live in a particular not altogether-pleasant place..
ben_vulpes: "navigate the buildroot menuconfig"
mircea_popescu: so what if they did.
mircea_popescu: not if the fucking polar bears are.
asciilifeform: mircea_popescu: is it because most folks need fallback employment if a job falls through? sure - but if a craftsman is needed badly, he will go on tour to antarctica. so long as the costs are covered.
mircea_popescu: no, they could not.
asciilifeform: mircea_popescu: fact remains, they could get reversers. it's just another kind of craftsman, like heart surgeon. they would simply have to pay the fee
mircea_popescu: because, there's like eight of them, and none of them have time for our stupid shit.
Vexual: despite the botox, still very expressive
asciilifeform: because the only industry is meat processing ?
assbot: #243 – An interview with Macrofab – Macro Manufacturing Mechanization | The Amp Hour Electronics Podcast ... ( http://bit.ly/1C8zMMq )
decimation: asciilifeform: http://www.theamphour.com/243-an-interview-with-macrofab-macro-manufacturing-mechanization/ < interview with macrofab guys, with details of exactly what they use (Universal GSM2 pick n place)
mircea_popescu: you think there exists anyone competent working in argentina, for instance ?
mircea_popescu: they haven't any.
asciilifeform: mircea_popescu: the ubiquiti example dovetails nicely with the thread re: unemployed reversers. if persians happily buy turdware, they either haven't many, or haven't any competent ones, or they are all occupied with something else (what ?)
mircea_popescu: asciilifeform sure. but it is the historical repository.
asciilifeform: mircea_popescu: neato, had no idea it lived there
mircea_popescu: theatlantic spamsite adds exactly nothing, hinders plenty.
mircea_popescu: "they raised awareness"
mircea_popescu: certainly. most of gdp in the "service economy" is exactly akin to running a bunch of elizas at each other.
assbot: When PARRY Met ELIZA: A Ridiculous Chatbot Conversation From 1972 — The Atlantic ... ( http://bit.ly/1C8yDEq )
asciilifeform: http://www.theatlantic.com/technology/archive/2014/06/when-parry-met-eliza-a-ridiculous-chatbot-conversation-from-1972/372428 etc
mircea_popescu: "if you conceivably have to forward my stuff to anyone, get off the line, i'm important."
gribble: The operation succeeded.
asciilifeform: ;;later tell decimation before you ceremonially burn that thing, or put openbsd on it, etc. consider posting the u-boot partition to #b-a warez (talk to kakobrekla?)
asciilifeform: usg contractor supplying boobytrapped goodies to the untermenschen
asciilifeform: 'From my conversations with Ubiquiti, I have found that they claimed that it's alright to refuse to provide source code to GPL-licensed software if "This decision was taken with the security of the users in mind". Furthermore, my conversations were endlessly delayed by the supposed necessity to forward my query to another, unnamed, team.' << now we can probably say what.
mircea_popescu: spam masquerading error reports nao, the world simply can't exist w/o wots.
mircea_popescu: i mean the specific "error are you x" thing.
asciilifeform: they used to follow a similar pattern, e.g., 'this post is a very astute commentary on the subject, i should like to read another like it, please carry on the good work' etc.
asciilifeform: i get idiocy like this all the time.
mircea_popescu: today ... "For some reason or another, I can't see all of this content, it keeps disappearing? Are you taking advantage of java?"
asciilifeform: still saves time and wear on the nand vs flashing it in every time
gribble: The operation succeeded.
asciilifeform: ;;later tell decimation ^ iirc you were using a naked 'edgerouter' somewhere. the time to stop was - july. the second best time - now
asciilifeform: and, '...anyone with physical access to the end of the Ethernet cable to your Ubiquiti airOS-based device... ...can obtain the plain text configuration while leaving behind no trace that they dumped your configuration ...'
asciilifeform: of course, now we have a helpful recipe for determining whether it's a don't-give-a-fuck-shop or a usg honeypot - sue, and see if state secrets privilege is invoked...
asciilifeform: ut Ubiquiti remains under review by the Department .... '
asciilifeform: 'It said in its prospectus that certain of its products were sold to Iran, Cuba, Syria, the Sudan and North Korea and that some of its encryption components were sold without the appropriate export authorization
A review of Ubiquiti's sales to Iran by the Department of Commerce's Office of Export Enforcement earlier this year resulted in a warning letter, but no criminal or administrative prosecution or other penalties -- b
asciilifeform: owed them to continue for another year, until February 2011, OFAC said. The company said, in a filing released Thursday, that until early 2010 it didnt prohibit its distributors from selling its products to Iran. After it learned of the potential violations, the company said that it failed to immediately amend all its distribution agreements and to implement more robust compliance controls.'
asciilifeform: 'Ubiquiti demonstrated reckless disregard for U.S. sanction law, and allowed its wireless equipment to be exported into Iran through distributors located in the United Arab Emirates and Greece, according to a release from the U.S. Office of Foreign Assets Control. The firm had no compliance program at the time, according to the release. And even after Ubiquiti learned that the transactions broke U.S. law, the company all
mircea_popescu: it's not like the entire cookbook isn't actually given there eh ? ready for copy paste.
pete_dushenski: mircea_popescu aite, if it's not in your filter, it's not there. i guess we'll just have to blog platforms to the list of 'internet pillars to rebuild'
asciilifeform: ^ what the elephant is for
assbot: Choking on a Cherry - The Fifth Element (5/8) Movie CLIP (1997) HD - YouTube ... ( http://bit.ly/1C8v9lf )
mircea_popescu: pete_dushenski it may be the filter, i dunno. kinda impossibru to debug from my side.
mircea_popescu: (the incantation literally is, "Trompi squeeze your balls and make it rain")
asciilifeform: mircea_popescu: i have a kind of image of just this animal in my head. but not earthling elephant, but the creature from '5th elephant' who i think of as 'desk elephant', or, alternatively, 'lisp elephant'
pete_dushenski: "Nobody can move into bitcoin, take it over, change the protocol or do whatever nefarious thing you can imagine, and force everybody to continue using it. Why not? Because altcoin." << um. might need to check those premises again, funkenstein_
mircea_popescu: and i received their revelation in my heart and have converted to the cult of the most reverable trompi, the divine.
mircea_popescu: this was elevated to divinity, a sort of fsm, by the people making the robotzi cartoons
asciilifeform: mircea_popescu: while on the subject of trilema mechanics - what's 'dupa trompi' ?
pete_dushenski: i was all excited when i first read the article, then soon realised that i had miles to go
pete_dushenski: like at the most basic level
gribble: The operation succeeded.
pete_dushenski: mebbe you don't want them, which'd be your call
pete_dushenski: as we know, wp sucks a donkey's cock, but it still seems odd that none are getting through these days
pete_dushenski: come to think of it, the "bitcoinpete" links had a much higher success rate than contravex
pete_dushenski: mircea_popescu when reading older trilema articles, i notice the odd trackback to contravex, but not so much on the newer articles. are these getting stuck in your spam filter of late ?
pete_dushenski: ben_vulpes how goes the swamp battle to argentina ?
gribble: thestringpuller was last seen in #bitcoin-assets 3 days, 15 hours, 7 minutes, and 19 seconds ago: <thestringpuller> ^- close the bet
ben_vulpes: ;;seen thestringpuller
ben_vulpes: ;seen thestringpuller
mircea_popescu: how many entries are there between index 46 and 59 ?
BingoBoingo: <mircea_popescu> http://libertybsd.net/ubiquiti/ << i can't believe whoever wrote that seriously thinks linking to unitedagainstnucleariran.com bolsters whatever point they may wish to make. << Oh, you caught the third layer lulz there. http://qntra.net/2015/03/private-lawsuit-dismissed-because-of-state-secrets-privilege/
ben_vulpes: i take some solace in the confusion it'll bring to my poor lizard obama agents.
mircea_popescu: yes. well. visiting argentina will turn out to have been the largest expense of your namechange.
ben_vulpes: i know how to pay the reciprocity fee, jackholes
mircea_popescu: http://libertybsd.net/ubiquiti/ << i can't believe whoever wrote that seriously thinks linking to unitedagainstnucleariran.com bolsters whatever point they may wish to make.
asciilifeform: but yes, on their www
asciilifeform recalls that getting a passport in usa takes a rather long time.
mircea_popescu: dude. does the thing have a picture of you in it ?
BingoBoingo: asciilifeform: It just sounds so much like the Pogo linux situation
ben_vulpes: turns out the argentines want *translated* court documents demonstrating name change, *and* they want the translations *notarized* and they want the *notarized shit* bearing a apostille, which today i learned to be a thing.
mircea_popescu: you know, the eeeee-eeeh thing
mircea_popescu: can you do the hand thing ?
asciilifeform: actually the record for 'worst jew' is probably mine
mircea_popescu: asciilifeform anything's possible. in this case tho, the discussion is whether it's possible without the subject's will.
asciilifeform: mircea_popescu: ... wealth by itself, especially if you imagine cash is "wealth" , does not allow any power whatsoever << i am astonished that this needed to be elaborated. any 'wealth', lacking that other element, can be separated from the 'owner' and his earthly bones by the folks who have both
asciilifeform: mircea_popescu: ... as if a reverse engineer needs any further "branding" or advertising past the ability to do hisd work << it is entirely possible to be under- or even un-employed, or mal-employed (substitute appropriate term..?) in any profession, and yes, even that one
mircea_popescu: more on point : i wonder how many people didn't have to pay their tickets because had intelligent lawyer who disputed chain of custody claims of police.
mircea_popescu: something they couldn't even legally do, which is why they had to bring in delphi for 20k.
BingoBoingo: I wonder how many petty traffic, weed, and misdemeanor tickets would have been unprosecutable if they didn't pay the people to pay the turroristas
mircea_popescu: i suppose as the dea goes bankrupt the ex-dea agents move on to helping local police "fight terrorism" at the rate of 20k for every .5k paid out
funkenstein_: cyberlocker not only helped their security but also boosted GDP
mircea_popescu: this pretty much explains how the thing work. "in order to pay 500 bux to terrorists we must first pay 20k to our own people!"
mircea_popescu: "There is no total figure available for the total cost inflicted by the multi agency investigation though $19,604 was paid to Delphi Technology Solutions, the firm which handled the ransom payment for Tewksbury. "
gribble: The operation succeeded.
mircea_popescu: ;;later tell peterl yo, there ?
BingoBoingo: http://qntra.net/2015/04/tewksbury-police-pay-ransom/ << scoop still somewhere other than here
mircea_popescu: just like having a car doesn't alow having gasoline. it's true that often people who have cars also independently have gasoline, but the two are fundamentally unrelated, and there is such a thing as the fool's breakdown, ie, car's outta gas on the side of hte road.
assbot: Logged on 06-04-2015 23:06:50; lobbes: Surely wealth alone is not enough, but it does allow some 'power' does it not? Either way, I'm just some schmuck aspiring to wealth. Not sure how much I'm qualified to speak on such things.
mircea_popescu: i don't think there was ever someone unemployed in that field, ever.
mircea_popescu: http://log.bitcoin-assets.com/?date=06-04-2015#1090166 << as if a reverse engineer needs any further "branding" or advertising past the ability to do hisd work.
mircea_popescu: http://log.bitcoin-assets.com/?date=06-04-2015#1090151 << nothing the usg uses actually works.
lobbes: Surely wealth alone is not enough, but it does allow some 'power' does it not? Either way, I'm just some schmuck aspiring to wealth. Not sure how much I'm qualified to speak on such things.
mats: .engineer domains can nao be rented for the low low cost of just $50,000
ascii_field: 'THE COURT: As I said I am perfectly happy to bankrupt them. I am perfectly happy to take their real estate and to sell it, if that is what they choose. '
ascii_field: judge: 'I want Mr. Ceglia -- sir, you need to understand something about me. I have no compunction about taking people's parents' homes away and heaving them homeless on the street -- none whatsoever.'
BingoBoingo: Maybe the assumption of a tamper trap is normally enough?