mircea_popescu: http://log.bitcoin-assets.com/?date=31-03-2015#1081008 << consider, if you can do the linear without a cpu, you can do the square one also without a cpu, will need a bank of linear readers instead. the reason this is not done is because bitmap interpretation is cheaper
nubbins`: the true test of touch-typing skill
SquirtPrincess: alright thxs then do i just pm you my BTC address
mircea_popescu: SquirtPrincess well normally no, because it's just a bodypart rather than you know, you. but at any rate, i'm feeling generous so, put ae654537 on your tits, take a picture, report back.
assbot: Logged on 31-03-2015 20:16:34; chetty: well I guess eulora will get the ultimate test then, mp is planning on installing a copy on such a box soonish
mircea_popescu: because they word about various turds <<
mircea_popescu: "or simple hoping for the best." << simply ?
mircea_popescu: BingoBoingo "increases the cost to and adversary and might permit" <<
mircea_popescu: you know if you're trying to make a living with this you gotta have them like in a holster. like your business card.
mircea_popescu: BingoBoingo " This is not akin, for example, to two people using the same model of mobile phone but both having software that is out of date. Rather, the outdated version that both "French Maid" and FORCE (as Nob) used is more of a "signature" given the greater number of versions available." << such a bizarre notion, this.
SquirtPrincess: sprry for the delay had unexpected company
mircea_popescu: so these people here... they didn't like the set-up where the half week off for easter didn't bridge twoi weekends, so they called a general strike.
mircea_popescu: next decade, they invent involuntary tattoos
mircea_popescu: ascii_field they're new.
ascii_field: (sop in ru and probably every prison on the planet since babylon at least0
jurov: "When Dave paid John 25 MAK for a workout, every inmate in the yard would take out their notebook and jot down the transaction."
mircea_popescu: nobody in the usg can do anything anymore. it's not just that i have their home address and i know who their wife is fucking better than them.
ascii_field: and half again of what remains in other ways.
mircea_popescu: and there you have the chief importance of snowden, strategically : he drove home the fear.
chetty: well given that the rule of law is no more, no reason not to have a little 'fun'
ascii_field: and thousands of minor malingerers who wanted to do something - anything - to fuck the beast
mircea_popescu: and so there we go.
mircea_popescu: how many of these are there ? (all of them, within reasonable tolerance). how many of these are more than willing to work under a power's blanket, if that power's powerful, rather than their own ? (a bunch)
ascii_field: there are many who betray for free
ascii_field: mircea_popescu: he wasn't just working for the 20k
mircea_popescu: what does the devil have to pay force to love him ?
mircea_popescu: now consider that this man was willing to throw away the goodwill of the behemoth for simply... three times that, and tell me
mircea_popescu: speaking of which bit : the guy made, according to court documents, a very cushy 20k A MONTH. which, let it be noted, is a lot more than media whores a la sam altman actually take home.
ascii_field: jurov: incidentally, this is SOP in cheapo dc gadgetry that runs off the mains
mircea_popescu: ascii_field nah, these days scamzors masquerade as "special agents"
jurov: if it used power source design with capacitors, they do explode on overvoltage
mircea_popescu: listen freeborn, get in the wot, and note that as eulora is coming out these coming days, we'll be looking for people to maintain binaries.
ascii_field: the fine tradition continues today.
ascii_field: and even in the old days, sc4mz0rz often masqueraded as 'meter men'
chetty: just another little piece of the control grid, but apparently this piece is also hazardous to your health and property
mircea_popescu: yeah, might as well put a rectifier in there if you're going to the trouble of modems and shit
ascii_field: b) the rectifier
mircea_popescu: anyway, a) why wouldn't you surge protect what sounds pretty costly and b) what the fuck is in there to explode.
jurov: i have these too. but for whatever reason, dude had to come in anyway and connect it by usb
ascii_field: they have short-range radio and a stereotypical 'nsa van' has to come by
ascii_field: oddly enough, the water meters don't have gsm
jurov: they retransmit keyboard emanations
ascii_field: chetty, mircea_popescu: we have these here.
mircea_popescu: what the hell do those meters do.
nubbins`: i just want a phone number that i can put in the YP, ya know?
nubbins`: anyway IDGAF about uptime guarantees or *whatever the fuck* makes a business phone cost more
mircea_popescu: you could change your name to Stink the Shrink
nubbins`: they won't update an entry in a database
nubbins`: i flatly cannot do this at the same rate as i could if both are residential
mircea_popescu: you hold the place in some sort of form neh ?
nubbins`: and i wanted to change it over to the business
ascii_field actually misses the voice quality of true non-ip landline phone
nubbins`: jurov i currently have fiber to the door from same telco that includes home phone service
nubbins`: so local telco refuses to change the caller id on my landline to business name unless i run copper(!) to the house for $130 setup fee and sign up for a $60/mo POTS
mircea_popescu: the russians did a lot of that in the 00s, pushing the various euros for whatever bizarro kremlin reasonings drove the oligarchs
mircea_popescu: if we're going to do public rape of children i'd rather see the sexual abuse of little girls, as unseemly that is, than this intellectual outrage.
mircea_popescu: now : mozart may well stand as an exception. the anonymous child with the idiotic "bitcoin website" is no mozart.
mircea_popescu: where the heck do you live.
Chillum: I would say the a low percentage of adults are creative or intelligent, and a lower non-zero person of children too
mircea_popescu: with the entire array of ill effects.
mircea_popescu: in m's case is more like.,.. 12. but note that his father DID exploit him as a monkey act
mircea_popescu: this, incidentally, is why there's no more child labour.
mircea_popescu: but no children can be either creative or intelligent. being childen is a full time job.
mircea_popescu: there do certainly exist kids who MIGHT , once they're adults, be creative or intelligent.
Chillum: it is just an expression which means to accept the ideas of a group
mircea_popescu: the teacher telling an insecure teen she's pretty to fuck her at least uses her naturally. the idiots telling this kid he's creative and intelligent and so on are abusing him and going against nature.
mircea_popescu: anyway, i find it quite morally dubioous and in any case aesthetically abhorrent, to see the structural mental issues of adolescents used in this manner.
mircea_popescu: mysteriously, they don't.
mircea_popescu: Chillum think of this place as virginity club. we definitely encourage all the young'uns to keep theirs.
mircea_popescu: clearly, this person should be in charge of ^H^H^H used as a front for a thing intended to be marketed to the sort of idiots who like to hear this sort o fnonsense. you know, like randi zuckerberg going to davos.
Chillum: don't worry, I will drink the coolaid before too long
mircea_popescu: anyway, dexter's laboratory was this great show from the 2nd golden age of animation (animaniacs, etc)
ascii_field: mircea_popescu: welcome to the club
nubbins`: i ran into this situation twice in the past two days
mircea_popescu: holy shit the only google reference to that is a logs link.
mircea_popescu: nubbins` only because the people normally discussing it lack any experience of intelligence.
nubbins`: if they had a good backstory for THAT, maybe
mircea_popescu: http://log.bitcoin-assets.com/?date=31-03-2015#1080671 << i wish they stopped abusing children with this freakshow circus act business.
nubbins`: oh pssh, "intelligent design" leaves the construction of said intelligence out of the picture
assbot: Logged on 31-03-2015 11:43:48; nubbins`: rather than lame ol' intelligent design
mircea_popescu: http://log.bitcoin-assets.com/?date=31-03-2015#1080655 << but it does EXACTLY model an intelligent designer. quite literally : it is intelligent, and it creates the world as described in bible.
mircea_popescu: http://log.bitcoin-assets.com/?date=31-03-2015#1080651 << yeah, exponentially. look at the demographic history of the americas if unconvinced.
mircea_popescu: https://biancabibiri.files.wordpress.com/2010/09/generoasa.jpg << this, incidentally, is like the icon of poverty.
ascii_field: most folks in the business have a few dedicated physical boxes, also (with removable hdd, segregated net, etc)
nubbins`: i used to work with a guy who brought his own mac pro to the office and ran windows in a vm
ascii_field: caring what happens, that is. there is not enough money in the world to pay me to -use- winblows
Chillum: what do you mean? You could plug it in and it could in a matter of seconds download and install something onto a windoze box and then erase the evididence. Would be useful to any blackhat or penn tester
mircea_popescu: Chillum isn't that even on the face improbable ? if it doesn't work for one or the other it wouldn't work in general.
Chillum: I was thinking the same thing
ascii_field: for the benefit of microshit
Chillum: the alternative is no password, no need to even steal it
Chillum: of what the payload was, or that you had it
Chillum: the idea is that you load the key with a password in secure location A, then you got to insecure location B, use it to start a computer and it erases itself
mircea_popescu: why even put it in the eeprom at all.
Chillum: I want to make a digispark that when plugged in to usb sends a very long password from the eeprom, then erases it several times
Chillum: I was thinking something like a Digispark, probably cost about the same as the parallel/ps2 cable
ascii_field: Chillum: you don't even need a microcontroller. can bitbang ps/2 trivially with parallel port of another machine nearby.
Chillum: if you do use the keyboard port create a ps/2 fuzzer with the arduino ps/2 library. Send it all kinds of random stuff, see if you can cause unexpected behavior.
Chillum: The Planiverse is a cool book
assbot: The Tinkertoy computer and other machinations : Dewdney, A. K : Free Download & Streaming : Internet Archive ... ( http://bit.ly/19zm2T8 )
ascii_field: which is the actual best solution to this
ascii_field: Chillum: i'm surprised that you have not suggested reconstructing the baud clock using analogue means
Chillum: at the very least I would want a filter to remove any non-printable keystrokes
Chillum: I am not confident I could find every single thing that reads the keyboard. I am confident I can secure rs232
ascii_field: Chillum: if your box can be rebooted or otherwise interestingly reconfigured without root pw, you deserve to be owned.
Chillum: or you could use RS232 with a little microcontroller to read the upc
Chillum: and find everywhere else modern OS's access the keyboard
Chillum: Well if I build something like this I won't hook the user input up to the port that controls the bios
Chillum: sorry, but a guy at the computer being hostile is certainly part of real word computer security
Chillum: the device can have physical security with only a rs232 port within reach
ascii_field: hostile user picks up the machine and takes it home.
ascii_field: Chillum: why on earth would you spin the gramophone attached to a computer with no os loaded ?
Chillum: at least you need an OS present before the rs232 is read, keyboards are read before the OS is loaded
ascii_field: Chillum: read the specificity principle discussion linked earlier
Chillum: you are using the ps/2 driver for your code
ascii_field: the best code is no code.
Chillum: I would use an arduino nano or something to decode and tx the data
ascii_field: it cannot behave as anything other than a keyboard. no matter how much it wants to.
Chillum: it went from fixed length only to variable length. The software was a fool to trust it though
Chillum: so it shares some of the fault
Chillum: the gizmo allowed special codes from the public manual to turn on features that were supposed to be off
ascii_field: and 2) there is no 'picture in picture' idiocy possible
ascii_field: that way 1) reader is analogue, as the gods intended
Chillum: he shows how to turn on multi-code qrs, then mysql inject a computer attached to the reader
ascii_field: the correct way to do 2-dimensional barcodes would be 1) traditional barcode laser pen, combined with 2) something like a small gramophone
Chillum: yes, you can see that each number is the same pattern of lines
Chillum: a lot of readers can have their mode changed to accept other types of codes by giving it a special UPC
Chillum saves the url for later, I don't load pdfs on this computer
ascii_field: re: qr: finally found the paper i was looking for: https://www.sba-research.org/wp-content/uploads/publications/qrinception.pdf
Chillum: not through the wire at least
Chillum: there are a lot of <10 watt computers
Chillum: they don't like to be deeply drained though
Chillum: if you only discharge a vehicle battry 20% before charging it they last a good amount of time
ascii_field: which are quite the same as ups battery.
ascii_field: afaik they use traditional lead-acid batteries.
Chillum: yes, but at least some of them you can plug into utilities while parked
Chillum: I am thinking the power systems for RVs, they run a lot and I think they can be charged from the mains
ascii_field: you will have to actually understand the physics. and build it
ascii_field: Chillum: there is. but not cheap.
Chillum: surely there must be something that can either clean the signal or noise it up so much you can't see anything else
ascii_field: Chillum: what of the mains wiring ?
Chillum: of course there is the act of making all adapters a bit noisy by poor design so it can be picked up on radio
ascii_field: and ask yourself the question, when contemplating whether a piece of hardware could have been boobytrapped - what would you, in the place of the enemy, place as the payload ?
assbot: Logged on 06-03-2015 23:41:18; asciilifeform: it is absolutely essential, to understand what is being spoken of here, to go back to the thread about the specificity of hardware-diddling.
ascii_field: i'll go further, and say that one could straight encode ps/2 clock and data signals as barcode.
Chillum: mag stripe cards that can be swiped at variable speeds(different speeds in the same swipe) use a timing signal
Chillum: If there were a strip of timing lines at even intervals you could even just put it into a depression and hand pull it across, if they were wide enough a bit of slant would be okay
nubbins`: <+ascii_field> a virginal gentoo box is imho presently the gold standard of non-retarded computing (at least on linux. could argue with openbsd, etc) <<< if anyone reading this is at all interested in playing with .foundation releases going forward, i'd strongly encourage they fire up a VM and actually go through a fresh gentoo install. official guides are well-written and if you can't handle this step, you're not ready for monkey-football
Chillum: 4 readers next to each other
Chillum: good idea to reduce seek time of the scanner. Was thinking long strip of paper because thermal paper is so cheap and it could be pulled through and spat out
ascii_field: nubbins`: and this is everyone's loss, because i was gonna attempt a proper fix for the orphans thing tonight
ascii_field: Chillum: i do it differently. 'boustrophedonic' (if you don't know, look it up) raster scan on the tape
nubbins`: <+ascii_field> and where the fuck DOES this thing build? <<< apparently only on osx and DPB's pogos o.O
Chillum: hmm a strip of thermal paper could have 4 different barcodes running along the length of the strip to be read concurrently to reduce paper size
Chillum: some control over the content is still needed
Chillum: even if you have a trusted barcode reader feeding information into a rs232 port you can still trigger a buffer overflow in something that uses the data
Chillum: you can even program your own microcontroller with the barcode algo if you are worried
Chillum: thermal printer/laser
Chillum: type the whole transaction??
Chillum: even if you software decode a signal the hardware can still tamper with it
Chillum: I think all means of moving information from one computer to another involves some hardware
ascii_field: but everybody but me seems to use these
Chillum: rs232 for the good ones
trinque: hardware assist likely means the qr code reader is actually a keyboard
ascii_field: Chillum: you may come from a place where the word 'hardware' means you are permitted to not think about how something works. #b-a is not such a place.
ascii_field: Chillum: and what's in the hardware? pixie dust?
ascii_field: and correspondingly - they enlarge attack surface.
ascii_field: Chillum: If one could have cheap hardware with a built in hardware assist qr reader << this is one of the things i disagree with mircea_popescu about. i do not like qr codes. they require a surprising amount of algorithmic complexity and consequently cpu horsepower to decode.
chetty: well I guess eulora will get the ultimate test then, mp is planning on installing a copy on such a box soonish
ascii_field: if something doesn't build correctly there - it's broken.
ascii_field: a virginal gentoo box is imho presently the gold standard of non-retarded computing (at least on linux. could argue with openbsd, etc)
ascii_field: why is it in there? is it still in phoundation's fork?
ascii_field: and where the fuck DOES this thing build?
SquirtPrincess: thxs <3 fr the info
ascii_field: but the use of boxes not under therealbitcoin's control, for any purpose, is not a thing to live with indefinitely
BingoBoingo: <mod6> good deal. im excited about a hardened version of bitcoin to run on obsd! << Just remember on obsd libressl is an option. Libressl v 2.0 syncs plays much nicer with the built in OpenBSD memory protections than OpenSSL does, those changes were the reason they forked.
ascii_field: at the very least should have mirror.
ascii_field: ben_vulpes, mod6, et al: auto.sh downloads tarballs from places that aren't therealbitcoin
Chillum: If one could have cheap hardware with a built in hardware assist qr reader then you could use that for a cold wallet system. You would likely need more than one qr code per tx though
mod6: BingoBoingo: cool. ive got openssl/bdb/boost built now on obsd 5.6, then just gotta apply sublte obsd changes to v0.5.3.1 and then try the static build. if all works & pulls blocks, I'll make patches: one for the v0.5.3.1 source and one for `auto.sh' (which needs a few tweaks). maybe you can just point at that instead. anyway, no worries.
BingoBoingo: mod6: Cool if the news ever calms down enough try try the reference build I'm going to have to put this in the notebook.
Chillum: the earlier version looks more useful: http://gizmodo.com/amazon-dash-is-a-magic-wand-that-makes-sure-you-never-r-1558691755 barcode scanner and microphone with wifi button. Would rather hack that
mod6: BingoBoingo: thank's for the OpenBSD reminder about arc4random, a note about your blog though... you do say 7.x or 8 or w/e.. in v0.5.3/v0.5.3.1 the function that contains that part to change from rand() to arc4random() is called: CWallet::SelectCoinsMinConf
ascii_field: in other news,
Chillum: by reducing the difficulty of ordering people are significantly more likely to order
ascii_field: trinque: from the ad, it seems like the button comes unadorned but possibly with different stickers depending on what vendor you set yours to
trinque: these are ads.
ascii_field: Chillum: even funnier: eventually printer will want a credit card inserted when you print. but - you get toner in the mail when runs out
ascii_field: Chillum: ad says they will be given away to subscribers
Chillum: even if you can't hack other people's it would be nice if you can repurpose it
ascii_field: should expect, then, that as their power trickles away, their license to kill will be revoked, and they find themselves reclassified from global hegemons to mere murderers.'
ascii_field: ted to Russia to stand trial. This is largely a symbolic gesture, but non-symbolic non-gestures of a preventive nature are sure to follow. You see, my fellow space travelers, murder happens to be illegal. In most jurisdictions, inciting others to murder also happens to be illegal. Americans have granted themselves the license to kill without checking to see whether perhaps they might be exceeding their authority. We
ascii_field: 'Recently a retired US general went on television to declare that what's needed to turn around the situation in the Ukraine is to simply “start killing Russians.” The Russians listened to that, marveled at his idiocy, and then went ahead and opened a criminal case against him. Now this general will be unable to travel to an ever-increasing number of countries around the world for fear of getting arrested and depor
ascii_field: (idiocies like boards with video chip, sound card, etc. at 3 to 5 times the cost - don't count, not interesting in the least)
ascii_field: in other 'news', week straight of scouring the net for traces of anything even roughly comparable to 'pogo' still being in production -
ascii_field: but it's still lightyears ahead of doing all the work manually
ascii_field: eventually we are probably stuck with the job of actually figuring out how buildroot works
nubbins`: ascii_field: i did make clean; make pogoplug_defconfig, but my "BR2_INSTALL_LIBSTDCPP=y" line from pogoplug_defconfig isn't showing up in the resultant .config
ascii_field: nubbins`: made changes to pogoplug_defconfig, they don't show up in .config << make clean; make pogoplug_defconfig; make
gribble: The operation succeeded.
BingoBoingo: ;;later tell freeborn If you have the slightest inclination to use the wallet at all and you aren't using 5.7 or -current you will want to change the random function in wallet.cpp explicitly to arc4random, which has not been rc4 based in a long time. It is their good random.
nubbins`: hm, made changes to pogoplug_defconfig, they don't show up in .config
jurov: http://therealbitcoin.org/mailman/listinfo/btc-dev << explained here
nubbins`: asciilifeform are those md5 checksums on the end of your patch names or what?
lobbes: jurov: oh wow. noob me was unaware of the existance of ARM processors. Yes, looking around the google this seems like it might be a good route to follow. Thanks for the tip!
ben_vulpes: this is what i get for being on irc before the stimulants hit my bloodstream
ben_vulpes: "some of the work going on over at the lab has to do with microfluidic transport systems relying on capillaries - and i mean *micro* - we etch the channels in"
ben_vulpes: a gentleman by the name of mark weislogel gave me the inspiration for the idea one year in thermofluids
jurov: lobbes there are dedis with small arm machines
lobbes: and I'm too cheap to shell out the dough for a dedi
lobbes: thanks jurov. Yeah, I feel like I'm leaning the gentoo direction. Still gotta find a good hosting provider for simpleshell though