Show Idle (> d.) Chans


| Results 66501 ... 66750 found in trilema for 'the' |

mircea_popescu: in other news, this doris thing sure knows its steaks!
asciilifeform: d00d prolly saw 'wtf masonic ritual, why am i here, in kitchen there is vodka and it won't drink itself'
trinque: I dun recall kicking, or even telling the guy to leave.
trinque: deedbot has to be one of the longest running and most reliable services here
asciilifeform: 'in the great birdlessness, my arse is a nightingale' -- asciilifeform's grandfather .
asciilifeform: might have to wait another yr to get a new n00b with half a brain.
cnomad: you're the one who asked me
asciilifeform: trinque: cut the fella a bit of slack, he doesn't yet grasp that he's come to olympus, thinks he's in village pub still
asciilifeform: ( there is a historic thread on the subj, that i cannot presently find )
cnomad: ok then don't
asciilifeform: with the nonexpired one.
asciilifeform: cnomad: at any rate, if you read today's log, you will know that there probably will not be any such contest.
asciilifeform: cnomad: on the contrary, the shitstack that passes for modern pc and its soft, is result of 'hire a team'.
asciilifeform: revisiting upstack : i categorically refuse to pay for any cr50 related work that does not produce a working and practically applicable pill. because there is no way to ensure that 'paid to advance art' rather than 'paid 10 derps' mortgages and student loans'
asciilifeform did this at least 1ce, prior to 'fucking, i'ma dispense with the expiration nonsense'
asciilifeform: cnomad: somehow you gave deedbot a key from before you re-signed the rsa4096/0x8D6436492F4A69AF one
asciilifeform: the paste shows what is in the key that deedbot saw.
trinque: also use the paster next time
asciilifeform: the newest, in 2016.
trinque: as the case tends to be
asciilifeform: yes, and there is not actually, afaik, any possibility of a solution to such a problem.
mircea_popescu: yes you pay 1k for the pop ; but the long graph of sub-1k effort adds up to maybe even multiples of 1k.
cnomad: you need to assemble a team of people and pay them according to a statement of work.
mircea_popescu: asciilifeform, understand the problem he describes. if arbitrarily prize is 1k, work required to pop is 1k, and 1k people participate, you are likely to pay about 0.5 per unit work.
asciilifeform: there is no solution, however.
cnomad: like if 2 ppl work on the chip, someone pops it first,
cnomad: so, some advice, if you want -- competition format for long term research is not a great motivator, since it doesn't guarantee that someone will get paid for their time
asciilifeform: he doesn't show up in the deedbot www yet
cnomad: is the competition you guys are referring to for popping that chip?
mircea_popescu: cnomad, having trouble with the dingbat ?
asciilifeform: but if one of the folx tuned in, knows how to make the binomial add up, plox to write in.
asciilifeform: if mircea_popescu doesn't see how the contest can be set up without creating a refereeing clusterfuck, or enriching alice_m, then i refuse to ask him to put any coin into any such thing.
mircea_popescu: phf, "bounty $100 paid for any information of whereabouts of dangerous criminal, except if he shoots the police and escapes"
mircea_popescu: asciilifeform, notice how well arbitering works! i have no way to specify ~whether~ im actually paying a coin into this shipile or not. NOR DO I CARE. i'm just letting you arbiter.
asciilifeform: but if it can't be done to mircea_popescu's satisfaction, i'd rather not do it at all.
asciilifeform: phf: right, hence the '2nd half' clause.
phf: asciilifeform: yes. a bounty is open to all comers, even the dude's brother.
mircea_popescu: and who thereby makes you an instrument of fucking up the market for people who genuinely put sweat in. and so on.
mircea_popescu: there's even a trilema about it.
mircea_popescu: it's entirely there, that's exactly how this "foss" shit works, by sexiness.
asciilifeform: phf: speaking of which, consider the easiest winner , if the anti-patch condition is absent -- a google shitmonkey who knows the hole already and 'wins' on the monday right prior to patch tuesday.
asciilifeform: all in all, i'd rather not have the contest at all, than to chance to give coin to fucking alice_m to add coin cherry to the top of a google bounty cake.
phf: also contest starts around the time that ascii publishes articles on subj, conceivable that someone else decides to look at the cr50, white hats a vulnerability to google.
asciilifeform: because i trust heathens about as far as i can throw'em ?
asciilifeform: which is 1 reason why such contests are thin on the ground.
mircea_popescu: so then ?
asciilifeform: what exactly is wrong with 'if, for any reason whatsoever, pill doesn't work in fw released on aug 1, the 2nd half of prize will be returned to the pot contributors' ?
mircea_popescu: there's no such thing as chainsaws sold with elements of chance.
mircea_popescu: no, the objection is to the mix. if you want to specify, then you must specify. if you're going to "incluide an element of chance", then the specification pretense is spurious.
asciilifeform: (i.e. 'what if enemy , on own power, finds the hole within $period' )
asciilifeform: well as i understand it , mircea_popescu dun like one of the proposed goals because it includes an element of chance
mircea_popescu: either can have arbitered contest, which defines a goal in human lang ; or else can have exam, which defines a final state, in machine lang.
mircea_popescu: i think the principal result of the discussion is, "can't have multi-pronged or articulated contests"
asciilifeform: thus far asciilifeform seems to be the only one among the thinking folx who thinks that this idea had any life in it. so i suppose i'll shelf it for nao..
mircea_popescu: maybe ~THEY~ don't swing that way ?
mircea_popescu: hence -- marriage. that prostitution contract whereby if the fuck doesn't take, worker's obliged to re-do.
asciilifeform: 'if they reappear in $period, obligated to rework for $0'
mircea_popescu: "to prove it was not insult to god of the rain"
asciilifeform: mircea_popescu: do they still have human referees at horse tracks ? i thought it was all laser nao..
mircea_popescu: the more i think about this, the more i want alf to be in charge of all sorts of things. imagine alf-run horsetrack.
asciilifeform: the 'whinners', if you will.
asciilifeform: what i would like to avoid, however, is the fucking trannies.
asciilifeform: quite likely there will not.
asciilifeform: i dun think i actually disagree with mircea_popescu , re: whether there will be a winner.
mircea_popescu: it may be the case, now and again, that your own fetishes aren't a worldwide concern.
asciilifeform: formulated simply as 'to get other half of prize, it will be the case that vendor update month from submission day, does not contain patch for hole'
phf: gentleman's word, if only there was a mechanism to verify a gentleman's trustworthiness
mircea_popescu: well, scholarship only helps in the way it helps, what can i tell you.
mircea_popescu: a review of extant literaturer shows this is the only known-to-work example of a cut to your problem.
asciilifeform: however there MUST be some incentive not to go straight to enemy.
asciilifeform: phf: it is impossible to make the receipt of the 2nd half of prize fully in the hands of the player, this is entirely correct.
phf: outside of participants control to the game.
phf: i don't think "can still buy and diddle of amazon in a month" is adequate test for "didn't leak the patch to google". but i don't think there's a procedure to test the goal in general (see absence of evidence above). perhaps you could restate the goal, but then whatever restatement i'm not sure it will be under the control of the participant. in fact as mircea_popescu pointed out, a restatement of this particular goal simply introduces a random element
mircea_popescu: "what the fuck is your problem ?" "i just spent all day telling teenagers they're ugly because they don't have three tits".
mircea_popescu: consider this : i set up a tent at porcfest, advertising "mp slavegirl intake". and there is sure enough a lengthy line of bikini clad beauties before it. i also put slavegirl in tent, and instruct her to reject the ugly ones. ugliness is "mechanically testably alf 3.o" defined as "lacks third tit". end of day, my slavegirl's pretty downcast.
asciilifeform: ( if 'he made this bizarre algo and i cannot make heads or tails of it' is the obstacle )
asciilifeform: hence the role of referee.
asciilifeform: but the problem of making it impossible ~mechanically~ is unsolvable in the general case. and cannot be done in any contest, this or other.
asciilifeform: if phf can think of a way to 'game' the 'exam', i'm all ears.
phf: mircea_popescu: _procedure_ is testable, but it doesn't necessarily verify the _goal_ (following my adhoc terminology above)
asciilifeform: meaningful. i either get a pile of c101pa with rewritable cr50 256kB firmwares, or not.
asciilifeform: phf: i'm still waiting to hear why the test algo i proposed, somehow resolves to 'untestable'
phf: goals and procedures inadvertently put the arbiter in the position of affirming that the goal has been or been not achieved but without following own procedures. in other words you want me to potentially call that the source has been leaked to google, but rely on a procedure that i can't possibly consider adequate for the verification.
phf: asciilifeform: my thinking is that your goals ("didn't leak to google") ought to be separate from the testing procedures ("can buy from amazon in a month"). some of your goals are potentially untestable and it's up to whoever's doing independent verification to come up with the procedure for testing, or dismiss the goal as untestable. then up to you to either find a different arbiter, or agree not to pursue one of the goals. i think that providing both
mircea_popescu: it's not even dumb, it's like a pcb with a large hole in the middle.
asciilifeform: i dun ask mircea_popescu to stroke my fur and say 'it will all surely work', the gods gave us mircea_popescu specifically to say 'eh this is dumb'
asciilifeform: if it's dead in the water, what fun.
asciilifeform: by this logic ( and i suspect that mircea_popescu is right , in earlier thread ) there's no point .
mircea_popescu: so... i can't imagine the problem you're trying tro approach even exists, which is why i can't come up with a way to solve it.
mircea_popescu: whereas if he knows about you, it seems altogether unlikely he'd even consider talking to google about it, and for the same reasons.
mircea_popescu: seems to me that if the one is looking to eat out of his work, he'll likely not even know you exist. because the sort of people dumb enough to depend on their daily labour for their sustenance while at the same time smart enough to reverse engineer are a very narrowly defined set. one is guaranteedly pantsuit.
mircea_popescu: well, to me this seems a much larger risk than the possible insolvency of alf.
asciilifeform: he does not, correct. therefore he is to be cognizant that he is taking a chance.
mircea_popescu: yes, but the key to communication, which is what you do when you try to engage others, is that you step outside of what you have need for, and speak of something ~they~ can relate to.
asciilifeform: at any rate currently i dun even have a referee. chances are that there will be no game.
asciilifeform: exactly. hence the mechanical cut.
asciilifeform: because player cannot prove that he did not sell it to google on the 5th.
asciilifeform: i do not see the injustice. contest can ~only~ operate on facts, not suppositions.
mircea_popescu: and you imagine complicated injustice is better than just a shrug and a pat on the ass ?
asciilifeform: nope, i do not ask phf to decide. the condition is clean cut, like guillotine.
mircea_popescu: it's perfectly possible google just fixed it on their own. and now you want phf to decide this somehow ? fucking how ?
mircea_popescu: anyway, your design is dysfunctional in that (even allowing for it modelling somewhat close to reality, which i have no faith it does) suppose today someone gives you a working pill, and june 27th google patches the hole. and the someone says "dood, i have nfi, i honestly didn't tell anyone anything".
asciilifeform: and if comes the hour that we need 500 clean boxes, for whatever, e.g. unattended shortwave relays, there they are.
mircea_popescu: well, say they were 500 heh ? SINCE IT WAS YOUR NUMBER
asciilifeform: speaking specifically of the one asciilifeform delivered
mircea_popescu: dood, danielpbarron had like a whole crate of them.
asciilifeform: mircea_popescu: the cost on my end , to buy and transport, was about 300bux. now you can prolly turn this into a few grand, if you compare against 'keep coin in pocket' , sure
a111: Logged on 2018-06-12 21:02 asciilifeform: it isn't even wholly about the machines, from asciilifeform's pov, asciilifeform would like to see the enemy bleed some, hear the laments , see the mules driven before him, etc
asciilifeform: incidentally the whole fleet cost about 300 bux; i.e. the cost of 1 c101pa-tron.
mircea_popescu: anyway, the value here is "lol @google", not "oh, ima sell 500 laptops for 0.01 btc profit per".
asciilifeform: in re pogo in particular, i dun recall a particular +ev biznis plan for'em . they were , in mircea_popescu's exact, iirc, words, a reserve fleet.
asciilifeform: to precisely price them, is beyond not only asciilifeform , but the gods themselves.
mircea_popescu: but back to it : i see the value in taking a magic marker to the outside track of google's "drm". i do not see the value in your hairebrained scheme to make a business out of it.
asciilifeform: there's a finite, currently large but monotonically dwindling, number of non-nsa comps.
mircea_popescu: kim kardashian also routinely changes hands for price of ~lawnmower ; doesn't mean she's any good. they just like having their picture taken with her.
mircea_popescu: and you see the problem with this ?
mircea_popescu: and it works ~same for them, too.
mircea_popescu: same reasoning drives the bolix museumists.
asciilifeform: difficult to 'cover the $100k' when lemon market.
mircea_popescu: meanwhile the same money put in bitcoin went from $2 to whatever the fuck.
mircea_popescu: i think you conflate economics and coolness. for one thing, an original trinitron bought the year sony came out with them was like 5k ? or some shit like that. for the other thing, 1k from 1988 is like 10-15k today. so... i don't see the $100k price tag that'd merely cover inflation.
asciilifeform: there's oldcrap, and there's simply old.
mircea_popescu: well like it or not, it's old crap. the thinkpad sitting sadly on a chair is...like 2gb ram and a fucking pentium
mircea_popescu: i bet you i could, if i wanted to. there's plenty of old crap here.
asciilifeform: there are not so many left that have life in'em.
mircea_popescu: somehow i've not bought another.
asciilifeform: point being, yes, in clean and working condition (i.e. with not yet faded tubes, for instance) these are yes valuable.
asciilifeform: the thing for which asciilifeform made a cured bios
asciilifeform: mircea_popescu: the non-ME-intel ones
mircea_popescu: the $500 lenovo mini laptop things ?!
asciilifeform: phf: i gave goals, what's the problem again ?
phf: asciilifeform: i'm up for a job of contest arbiter, i don't think that what you're proposing is arbitration. i thought that you're going to give goals, and it's up to me to evaluate if the goals have been achieved. but you want me to merely verify your procedure. that's fine, but that doesn't make me an arbitrator.
mircea_popescu: in general. but converting the general to practically actionable bits is usually the challenge.
asciilifeform: mircea_popescu: supply of clean comps will become valuable as the resource dries up, which it shows every sign of heading to do.
mircea_popescu: by now they cost more in storage than they cost to acquire, even though patriotic republicans' have been eating the cost for us.
asciilifeform: phf: i am happy that you are willing to experiment. and if yer not feeling up to the job of contest arbiter, that's allright.
asciilifeform: mircea_popescu: pogo ? they're as usable as ever as soon as somebody gets trb into 256MB, lol
a111: Logged on 2018-06-13 00:30 mircea_popescu: http://btcbase.org/log/2018-06-13#1824464 << in perhaps better formulation, the very point of having arbiter is so as to avoid exam taking ; the whole point of having "written contract" (import here pizarro's coc, import here the "opposable instrument" thread with trinque, etc) is to permit exam taking. these are contrary design constraints.
phf: http://btcbase.org/log/2018-06-13#1824502 << right. it's also not a good idea for an arbiter to sign someone else's exam, as if it's anything but. i've offered to run the proposed experiments without arbitrating, but that's not what ascii wants.
a111: Logged on 2018-06-13 00:07 asciilifeform: after $time , phf goes and buys, from amazon, a c101pa , and administers the pill. if it is cured just the same as his current one, the other half of prize is to be awarded.
a111: Logged on 2018-06-12 23:39 asciilifeform: phf: you will test using your c101pa. and so you will need the debug snake, i will need to put the output of sysinfo , ver , brd , etc cr50 console commands into the statement.
asciilifeform: pretty clear imho. obtain a c101pa. obtain the snake ( schematic on asciilifeform's www . ) send to asciilifeform the output of the http://btcbase.org/log/2018-06-12#1824405 . then, judge prospective winners , under condition http://btcbase.org/log/2018-06-13#1824459 . if pill permits overwriting all 256k of the chip, with arbitrary contents , we have a winner. then month later, http://btcbase.org/log/2018-06-13#1824462 .
mircea_popescu: http://btcbase.org/log/2018-06-13#1824480 << not to mention he still has a pile of whatever they were, from last time.
mircea_popescu: so far it's not altogether clear what specifically other dood's to do.
asciilifeform: if i can't get another d00d to play the tuba while i do the drums, what merit can there be in contest.
mircea_popescu: what's the problem with that ?
mircea_popescu: so then whatcha need arbiter for.
asciilifeform: it is not difficult to mechanically test, either.
mircea_popescu: gotta pick what you pick ; and as per the common sense notion, if your job isn't a good fit for any tool, your job's not a well defined job.
mircea_popescu: note however that practice is alligned : when you protested (essentially) that the tits thing is being exam-took, i ignored it, specifically because... it was specified!
mircea_popescu: but i'm not doing it, am i ? i dunno how i'd do it ; i'm also not against exercising the doing it muscle, but commetary is part and parcel of the exercising.
a111: Logged on 2018-06-13 00:07 phf: yes, but if you are going to establish a procedure why do you need an arbitrator, or in other words, i don't see a point of separate arbitrator if the process is your own
mircea_popescu: http://btcbase.org/log/2018-06-13#1824464 << in perhaps better formulation, the very point of having arbiter is so as to avoid exam taking ; the whole point of having "written contract" (import here pizarro's coc, import here the "opposable instrument" thread with trinque, etc) is to permit exam taking. these are contrary design constraints.
mircea_popescu: BingoBoingo, fwi, "No word from oil insiders on interest in the shambling cryptographic provenance solutions still in search of a problem to solve and customers to buy it; but this has not deterred Team Cockchain ("Smokin' it!" ™®) from announcing eleventeen different projects to disrupt this massive industry from its mother's basement." makes 0 sense to me.
asciilifeform: do the pets know not to grease the threads, lol
mircea_popescu: "oh it dun do anything, it's just oxigen" "sure. until the day it does something, then you'll really see a show"
asciilifeform: i considered o2 for the laser, could cut sheet metal if i substituted o2 in place of the air column, but hesitated, keeping tank in unvented shed is invitation for trouble
mircea_popescu: all the collars and whatnot.
asciilifeform: dare i to ask why mircea_popescu keeps the tank around
mircea_popescu: wtf is this world coming to. i just vented a few m3 into the biodiversidad
mircea_popescu: asciilifeform, in between the tank and the valve, fucking bullshit hecho en mexico nonsense.
asciilifeform: if we can't get somebody other than asciilifeform to stand up as referee, can't really have this contest imho. and a pill that gets immediately patched against by enemy , is of no use.
trinque lacks the machines and spare hands, and yes, ass located square in natoreich
asciilifeform: really ideally somebody outside of usa , so they can't simply break down the door
phf: asciilifeform: i see, i'm sorry, but i don't think i can properly be called a referee under these conditions. i can do independent testing for you though, i.e. test against current c101pa, and against one that i purchase at a time you indicate.
asciilifeform: phf: i fully expect that the winner will want to publish his discovery. hence i would like to give an incentive for him to wait a reasonable time.
asciilifeform: and generally treasurer and instigator oughta be different people. as in the trb foundation.
asciilifeform: phf: i need an arbiter so as to give players some amt of confidence that rules will not change underneath them.
asciilifeform: it is to be specified that if during $period the machine becomes unavailable in retail, the 2nd half of prize condition is thereby unmet.
phf: yes, but if you are going to establish a procedure why do you need an arbitrator, or in other words, i don't see a point of separate arbitrator if the process is your own
BingoBoingo: ben_vulpes: It's there now
asciilifeform: after $time , phf goes and buys, from amazon, a c101pa , and administers the pill. if it is cured just the same as his current one, the other half of prize is to be awarded.
phf: the discussions after that though are all over the place, and introduce some requirements that i don't think i can arbitrate like "didn't leak the code back to google"
a111: Logged on 2018-06-12 19:44 asciilifeform: for my purposes, a proper break is when i can load in arbitrary firmware in place of the vendor's.
asciilifeform: theoretically as soon as phf gets his snake going, and gives green light, we can start.
trinque: no such automatic reader of address balance is currently in the loop. process by which I confirm deposits is unspecified, varies.
asciilifeform: trinque: there's a pretty good chance that the prize will not be claimed.
trinque: yep, thing works best if there's always a somebody on the other end, of course.
asciilifeform: on 2nd thought possibly bad idea, if contest ends without a winner, what to do about them.
asciilifeform: trinque: idea is, heathens could donate anon ( admittedly tall order, that any want to )
lobbesbot: trinque: Sent 1 minute ago: <asciilifeform> would it be possible to set up a public address that will auto-add to the pot when sent coin to ?
trinque: asciilifeform: just register a nick that represents the pot, have folks !!pay that nick
ben_vulpes: BingoBoingo: can i get the copyright r ?
lobbesbot: asciilifeform: The operation succeeded.
asciilifeform: !Q later tell trinque would it be possible to set up a public address that will auto-add to the pot when sent coin to ?
a111: Logged on 2017-10-22 14:54 asciilifeform: aaalso why are there signs warning of buried ~oxygen~ pipes !
asciilifeform: i have nfi if they do it using coolies in romania working for food, or with what else. but there it is.
mircea_popescu: imo it's a way better story if it goes "and then google patched with bated breath WITHIN MINUTES"
mircea_popescu: your idea is that "what if i don't have enough time to get to the store after contest is declared" ?
asciilifeform: once they're cured, they're cured.
mircea_popescu: i don't get it, and if your model is correct, secret waits a month thereby ? what's in a month ?
mircea_popescu: you'll end up having to pay like 5 btc for the work involved in this arbitering lol.
asciilifeform: it is to be computed as follows : at the end of the elapsed period, i go to a shop and buy a box, and let it vendor-update
mircea_popescu: "shows to signs" is not a computable string for the phf-machine.
asciilifeform: i trust the bounty-motivated folk about as far as i can throw'em.
asciilifeform: for the smart arses who want to collect from us and then immediately google's bounty.
asciilifeform: also thinking , half the prize is to be paid immediately on the receipt of a working crack, and other half a month later if google shows no sign of patching.
mircea_popescu has no strong feelings either way
mircea_popescu: i can't imagine we'll have such a deluge of these the clerical work keeping track is worh the hassle
asciilifeform: the outputs from phf's box.
asciilifeform: phf: you will test using your c101pa. and so you will need the debug snake, i will need to put the output of sysinfo , ver , brd , etc cr50 console commands into the statement.
asciilifeform: also worx, but this is easier to keep track of if folx want to donate to the pot etc
deedbot: http://trilema.com/2018/on-the-internet-nobody-believes-youre-a-sow/ << Trilema - On the internet, nobody believes you're a sow.
asciilifeform: phf: the way i'm thinking of doing it: i'ma write up and sign a statement describing the competition; you will create a special-occasion key, e.g. 'cr50contest', rate it e.g. +1 cr50 , and i will drop a coin into it.
asciilifeform: phf: do you have now with what to referee ? if i start the contest today, and entry is mailed in, can you test ?
phf: http://btcbase.org/log/2018-06-12#1824041 << if you decide that the effort is worth the while, i'll referee
asciilifeform: the great outdoor world under the sun makes an ok fumehood..
cnomad: motivation for me to finish assembling the fumehood
mircea_popescu: cnomad, aite, give it a few mins then, maybe not up to date yet
cnomad: er, more precisely I'm not going to get to it until sometime next month, so I'd rather accept payment then
mircea_popescu: !!rate cnomad 1 dood either ran off with my boards or else produced an image of some sort ; we don't know the future yet
cnomad: there im now on yer watchlist
cnomad: it prolly will yield some periphery information about the die, similar families / cells that it uses
mircea_popescu: so let him get off the girl and get to his computert later.
douchebag: He's not at his computer at the moment
diana_coman: funny how this hw guy can't even do as much as the girls with tits managed
douchebag: Sry, been jumping between quite a few different things throughout the day
asciilifeform: and forfuckssake yes they're locked. what didja think the thread were about, douchebag ?
douchebag: you can put them in an "rma open" config which will allow some communications functionality
douchebag: My buddy said "although they are mostly factory locked"
mircea_popescu: sure. but here no need for that, we're trying to match the chip.
mircea_popescu: make 100 shots if you have to, just learn how to use the damned sony and get a proper fixed shot
asciilifeform: i put the spi bootrom in the pic, to make clear the fact that it is connected ~through~ cr50
mircea_popescu: 1mm past the demarcation is plenty
asciilifeform: but will strip down the box again ( gotta pull out mb and heat sinks etc ) and make a bigger, later this wk
mircea_popescu: asciilifeform, can you publish a very large pic of the chip (and margins) only ?
asciilifeform: however it is not known presently whether one exists.
mircea_popescu: could just put a sane kbd driver in there and whatnot. i don;'t even fucking want google's kbd driver, they can shove it.
asciilifeform: douchebag: ~in~ fpga. but not an off-the-shelf one, but with LUT filling in mask rom.
BingoBoingo: Even then more apt metaphor for the operation would be a drain and fill
trinque: it's right next to the johnson rod
douchebag: "i hope hes not referring to the fucking motor compressor"
asciilifeform: aha, in so far as i can tell they did a fairly clean job.
douchebag: asciilifeform: Are you referring to the motor compressor
asciilifeform: so no trace of it on the prod chip.
asciilifeform: factory edition of the chip had a loader that overwrites self via spi
mircea_popescu: yes but how did they enable it ?
asciilifeform: test jig was simply a variant of the stock fw, and it gets rewritten by the 'prod' fw prior to retail sale.
mircea_popescu: ahaha, does it brick if you cut out the thermometer ?
asciilifeform: mircea_popescu: fwiw i tracked down their factory test jig src. it was in their shithub, 'removed' in october 19
asciilifeform: has thermometer, etc.
mircea_popescu: asciilifeform, honestly, i still suspect there's a clean way to flash-in via the factory pads. however...
a111: Logged on 2018-06-11 15:46 asciilifeform: one interesting observation, is that the update mechanism lets you flash in arbitrary crapola into 'rw' section ( it simply won't jump to it if it doesn't pass rsa(sha256(payload)) ) . so theoretically could put a nop sled there, ending with jump into the magic half of unlock routine. and then expose the thing to beta/gamma, and perhaps in a few months it will Do The Right Thing
a111: Logged on 2018-06-12 19:51 cnomad: well the most likely non-firmware approach would be finding a way to glitch/fault it
BingoBoingo: douchebag: Spiders and ticks aren't the only things that bite. Fumigate.
asciilifeform: otherwise it's a purely c-machine exploitation problem
asciilifeform: the only on-chip secret that'd make a diff, is if there is an iron backdoor left in fpga
douchebag: BingoBoingo: Well, that's what the doctor told me

|