assbot: Logged on 24-03-2015 13:08:20; nubbins`: a lot of them don't make it to japan
mircea_popescu: http://log1.bitcoin-assets.com/?date=24-03-2015#1067551 << which is why japan even still exists anymore. they made it to california, that imploded, now they're moving to texas and places. i was kinda snickering at trinque's explosion yest, bexause well... texas won't survive the idiots either.
assbot: Logged on 24-03-2015 13:06:50; asciilifeform: the 'pathology' was that these people imagined they wanted to move to japan, but what they -actually- wanted was: -to have always lived there-
mircea_popescu: http://log1.bitcoin-assets.com/?date=24-03-2015#1067542 << for the record, moving is easy, but a year later and with tons and tons of support and roots and whatnot i still throw almost-daily tantrums
nubbins`: danielpbarron assuming same bdb, i'd say they're interchangeable
ascii_field: anyways i'ma do another buildroot tonight.
mircea_popescu: anyway, the situaton is : usb not usable for storage for our purposes, sd maybe usable. if one wants guidance, that's guidance, if one wants to do testing, that's your falsifiable hypothesis.
trinque: that will someday be the contracted form of "isn't"
nubbins`: will not pull down another block?
trinque: seems the above sd is intended for yeah, filming
mircea_popescu: usbs have never been seriously optimised for FILMING TO THEM
mircea_popescu: let the man fucking play with things already
trinque: mostly interested in helping with the OS
trinque: I am fine with doing the tortoise test
ascii_field: sd card isn't typically built for 100% duty cycle either
mircea_popescu: danielpbarron you gotta appreciate the following point : people have diff items hanging around ther house
mircea_popescu: trinque you should try the sd if you're doing research.
ascii_field: mircea_popescu: how soon can we have it << i personally will dust it off tonight and say where it's at before i turn in for the night
nubbins`: much of today will be useful in the future, i'm putting a pin in it
trinque: any reason not to use pogo with an sd card for the blockchain?
mircea_popescu: forget the 32 bit issue, mod6 is working on that.
ascii_field: though it was used in the bin
mircea_popescu: DON'T EVEN THINK ABOUT firing these in anger. You may lose limbs." << recall that ?
mircea_popescu: "PLEASE REMEMBER - these are for research use only.
ascii_field: no reason why the latest recipe can't build on my cross-chain
ascii_field: but kernel dies during boot and have not so far had the time to determine why
mircea_popescu: jurov i dun see there's a difference.
jurov: i guess these roles were fit for manually working males, "inconvenient" for office rats
mircea_popescu: pro tip : not everything that's inconvenient is bad. on the fucking contrary.
mircea_popescu: the notion taht they are "destructive" for either men or women is so idiotic as to wrap over the ridiculous threshold multiple times.
mircea_popescu: "traditional" gender roles not only happen to be correct, but the costs of getting rid of them are, simply put, societal collapse.
mircea_popescu: "Japanese society can be notoriously conservative when it comes to gender roles. While there is a lot of talk about the negative effects of imposing traditional roles on women, their restrictiveness and destructiveness for well-being are rarely mentioned in regard to men."
mircea_popescu: and the woman's butt has been spanked.
mircea_popescu: http://bturn.com/wp-content/uploads/2013/07/Soviet-sex-12.jpg << notice the male sex bits are crowned
trinque: nubbins`: eh? what's the difference in logo color?
mircea_popescu: because the community is assholes etc.
nubbins`: trinque they're a treat
trinque: I'm going to just buy one of these fuckers and pitch in
mircea_popescu: danielpbarron we want os on the disk like we want wallets on windows.
assbot: Logged on 10-02-2015 23:14:45; danielpbarron: asciilifeform, what about gentoo on the pogo?
mircea_popescu: there is that.
nubbins`: consider the statement suitably modified
nubbins`: but afaik there's no reason, say, gentoo wouldn't fly
nubbins`: arch, fwiw, has the most available documentation re: installing on pogoplug
mircea_popescu: ie, the os ?
mircea_popescu: asciilifeform you there ?
mircea_popescu: what happened there ?
mircea_popescu: gotta go with an os brewed by someone with some experience so as to have at least a fighting chance the whole thing works.
mircea_popescu: dude this "let's try pluging things see what happens" approach only works if you actually test, and you're not tooled for the mindboggling thing this testing would be.
mircea_popescu: but iirc, a lot of valuable effort went into selecting and pepraring the os. what do you mean "it could be debian" ?
mod6: <+mircea_popescu> now, can we has static etc 32 bit ? << yeah. we'll put that at the top of the list.
nubbins`: seeya in the sky
nubbins`: the avionics systems haven't failed since last time, so we're pretty sure it may be fixed
mircea_popescu: they get it from a dead drop or something, and well, whatever. go to conferences.
mircea_popescu: basically, this would be prima facie evidence that the code the power rangers sign has very little to do with them.
mircea_popescu: they think "it may be fixed" because "anectodally" it doesn't seem to have displayed the behaviour.
assbot: Logged on 17-03-2015 15:07:01; mod6: anyway, it certainly is a goal to support x32. it'll just be in the next release. this has been dragging out too long.
thestringpuller: is netbsd still going to be the pogo "base"?
mircea_popescu: mod6 so the emerging problem here is that while i said "ok" to 64 bit only foundation bitcoind, it turns out when need 32 bit support for our own fucking projects, which notably is the pogo.
mircea_popescu: shit. don't tell me the pogos are 32bit ?!
mircea_popescu: so then the master here becomes, arch as per ascii, static as per current foundation release.
mircea_popescu: so basically, you put archlinux according to ascii_field's brew on the pogo, and then compiled a static foundation bitcoind and loaded that up, and that's what we have now ?
mircea_popescu: is the current arch thing static ?
nubbins`: find any forum thread anywhere about pogoplugs being sold at these prices, most of the responses are "!!!!!!!!!"
nubbins`: nobody who can't follow some simple instructions to flash nand down the road and reclaim their SD card is gonna buy one anyway
nubbins`: if it's got a real version of bitcoind that works enough to use, all the better
nubbins`: all else aside, owning one of these pogos is an opportunity
BingoBoingo: Well, the pogo hardware was never marketed with multithreading
mircea_popescu: soo where them threads lead.
BingoBoingo: There's concurrent pogo threads
mircea_popescu: and enjoy the fucking TONEDEAF PARADE
nubbins`: <+danielpbarron> would have to be shipped with SD card already configured if the end user is to just plug in a hard drive and forget about it <<< that is actually preferable for almost everyone who would buy this
mircea_popescu: stop wasting your time with whatever. you have any idea what shortage is for these ?
mircea_popescu: i haven't seen asciiart technical drawings in documents since the 90s.
nubbins`: i have pogo x2 on the way, i'm gonna dig into this
mircea_popescu: danielpbarron what's the shortcoming again ?
ascii_field: mircea_popescu: adding a problem++ to the list at the cost of a weekend is not on this list << astute observation, which is why my patch was specifically labeled as a proof to nail down the locus of the problem, and not an item to be used on the battlefield.
mircea_popescu: ascii_field the way system engineering is done, is either do not fix a problem, or else fix the problem. adding a problem++ to the list at the cost of a weekend is not on this list.
mircea_popescu: danielpbarron i meant, how are they different.
mod6: yeah, im talking about an all encompassing approach .. many small steps, the former.
ascii_field: mod6, mircea_popescu: depending on what it means to fix the leak (total replacement for block sync mechanism and a mathematical proof for it? or something more like my patch ?) it could take anywhere from a weekend to maxint days
mod6: Yes, Sir. Should have responded lastnight, just got distracted hacking together my obsd lappy.
assbot: Thermal Sidechannel Carries 8 Bits Per Hour in Proof of Concept | Qntra.net ... ( http://bit.ly/1BL8t9o )
BingoBoingo: http://qntra.net/2015/03/thermal-sidechannel-carries-8-bits-per-hour-in-proof-of-concept/
mod6: Our goal is to get this resolved, but I think it seriously is going to take some effort. Part of going forward from this release is going to be breaking down goals and getting them lined up. I have high hopes to discuss much of this at the Cnof.
mircea_popescu: yes and he's doing his job to the best of his abilities.
ascii_field: they ought to have gone 100x faster.
mircea_popescu: mod6 i am of the same persuasion.
mircea_popescu: danielpbarron what was the current block count on those things ?
mircea_popescu: 40 mins is the new 2 weeks
BingoBoingo: <nubbins`> was bsd chosen because of smallest footprint or other? << small footprint no crud
nubbins`: was bsd chosen because of smallest footprint or other?
ascii_field: but iirc the device support of openbsd is a subset of netbsd's
ascii_field: i would do it pro bono but haven't the time
ascii_field: noise sensitivity makes it hopeless in the wild
ascii_field: 'The two systems would then engage in a handshake, involving a sequence of “thermal pings” of +1C degrees each, to establish a connection. ' << stopped reading here
ascii_field: i specifically mean that a node running bitcoincrashcrashcrash is dangerous to itself and others.
ascii_field: mircea_popescu: if you ask me, releasing the memleak version is lunacy
mircea_popescu: anyway, speaking of this, what was the status of teh pogo project ? we ready to bake ?
ascii_field: you can't get it without the extra bells & whistles
nubbins`: might be worth contacting /them/
ascii_field: i'll add that the case is not merely decorative
nubbins`: lel. i know, i mean actually having just the boards produced
mircea_popescu: hemeans just the boards.
ascii_field: nubbins`: probably ~19 usd forever until they run out
ascii_field: nubbins`: them's chumps paying
ascii_field: not revealed in the phoundation site, of course
ascii_field: i think i've identified the board
thestringpuller: just bad feeling seeing summer 2015 as their schedule and this aligns with gavin wanting to have enough dick's sucked to push his shit into github around then as well
ascii_field: the photo suggests something like a 'raspberry'
nubbins`: i.e. 0.5.3.2 should patch just the same
ascii_field: but otherwise snore
nubbins`: mod6 i should stress that *none* of the hardening options are included in that makefile, and it really should not be used for anything other than reference
thestringpuller: you see the bitnode news?
ascii_field: thestringpuller: hm ?
nubbins`: ben_vulpes mod6 mircea_popescu and other interested parties: http://pastebin.com/raw.php?i=uJQDaKcz
BingoBoingo: It's there
BingoBoingo: lol q&a at the end https://www.allcrypt.com/blog/2015/03/what-happened-and-whats-going-on/
ascii_field: if it is anything like the training version of 'strela' (man-portable surface to air rocket from ru, whose manual was discussed in here a few wks ago) the training variant lets you lock onto and track a target, but doesn't fly or explode.
Adlai: ... actually, there's a lot of new magic?
BingoBoingo: My guess is it is either for training pilots under load or training maintenance techs without a sapper's margin of error
Adlai: iirc some training ordnance also simulates in-flight behavior of the real thing
ascii_field: at any rate, such rockets have not really changed since the '70s
ascii_field: and one can presumably speak to them
ascii_field: mats: what precisely is the point of a training round rocket ?
cazalla: the only downside to es.qntra.net would be that it won't benefit from the mother, a subdomain is essentially a brand new site (in the eyes of google)
BingoBoingo: cazalla: They moved most of that functionality into wordpress, better to separate the things at a moving parts level anyways
Adlai would call this a partly disassembled enclosure, the missile has its own insides too
cazalla: BingoBoingo, there's also wordpress multisite, but i have never used it
ascii_field: mats: what do these cost (assuming this was surplus ?)
cazalla: http://log.bitcoin-assets.com/?date=24-03-2015#1067407 <<< i can figure it out, alternatively, another idea would be to just make another wordpress install in qntra.net/es/
mats: all the moar reason to sell pogos imo
gribble: The operation succeeded.
gribble: The operation succeeded.
ascii_field: to all of the people here.
ascii_field: i highly recommend reading the ucc winners
ascii_field: it's the one by S. Nicolussi
ascii_field: i could've sworn you discovered this very item in the actual wild
ascii_field: jurov: the rpm signature entry isn't yours by any chance ?
ascii_field: ... and one of the submissions is a pwning of actual wild openssl when an idiot uses dsa.
jurov: can i borrow the dog?
ascii_field: ^ i won't spoil the riddle here
ascii_field: 'It is my aim to set a new high-water mark for transparency in parameter generation. To that end, all of these values are nothing-up-my-sleeve numbers which I generated by singing the Bohemian Rhapsody backward with my dog barking in the background, digitizing the audio as an MP3 at a bitrate of 192kbit/s, and taking every 17th byte of the result. Their integrity can easily be verified by repeating this procedure.'
ascii_field: incidentally, one of the entries is a diddled ecc curve
jurov: known difference between the key values used in two signatures"
ascii_field: 'Shows how this backdoor can completely pervert the security guarantees provided by the TLS protocol... even the presence of a single CA certificate with a secretly embedded backdoor in the certificate store would render the entire TLS security fictional...'
ascii_field: 'Provides a working implementation of a backdoor embedded into the RSA modulus of a Certification Authority public-key certificate and the code for a minimalistic client and server communicating over a TLS channel:'
ascii_field: used as part of an implementation of IPSec over IPv6 in a resource constrained IP stack. In such a case, under normal operation the library will perform properly, interoperating with other IPSec aes-ctr hosts. But when it is triggered by a forged ICMPv6 packet it will lead to a full plaintext reveal. Another forged ICMP packet will restore the conforming behavior so that normal packet retries will mask the improper
ascii_field: 'The library implements the AES block cipher in CTR mode and for the most part behaves as it is described in almost all circumstances it would normally be used in. Notably it passes all the FIPS and RFC test vectors for AES encoding and can interoperate with openssl. The library can be used in most any application where AES is needed and will behave appropriately. The library becomes exploitable specifically when it gets
jurov: and the motivation, too
ascii_field: the timing constraints are unforgiving.
ascii_field: even something as simple as dram is not, in practice, usable without the 'hard' blocks
ascii_field: mats: the way the story normally ends is that the reversed fpga becomes quasi-usable nearly the same time it goes out of print and replaced with incompatible version...
mats: how was their progress?
ascii_field: mats: neato, there was a similar project for xilinx 'virtex'
ascii_field: trinque: basic tradecraft - the more shocking the exploit, the louder will be the cry when it is discovered; the more victims - the sooner it ends up on, e.g., my desk, or that of 100,000 other folks who can pry it open
trinque: that led me to believe that they infect everyone, make almost all dormant
trinque: ascii_field: hm, I took the hard drive firmware situation to mean malware could hide and resurface without being detectable at the OS level
nubbins`: danielpbarron "but if the gps app is closed source, it could be sending your location to the NSA" 8)8)8)8)8)
ascii_field: trinque: part of the NSA botnet << most of us will live and die without having the honour of an 0day spent (yes, they're used up when used, think about it) on our sorry hides
trinque: and now I'm part of the NSA botnet
trinque: or the parts are completely open and NSA spent infinite money discovering hardware flaws
ascii_field: there is no sensible 'pNohe', we already knew this
nubbins`: thanks for having a detrimental effect on distribution and the software ecosystem, judas
nubbins`: you buying a car has the same effect
nubbins`: me buying a handheld garmin has a detrimental effect on distribution and the software ecosystem
funkenstein_: even though it has a detrimental effect on distribution and the software ecosystem
trinque: soon as there's a fully open and documented phone/computer, I'll buy that too
nubbins`: no, you're there and i'm here
nubbins`: is there anyone present who would take on the job of finding me a piece of software compatible with my needs, for $2.40?
funkenstein_: danielpbarron did you send the 120 to an appstore?
ascii_field: (as i'm sure many others here have)