asciilifeform: btw on reread of the sores, raising the b4 pin is not expected to do anything productive, it merely sets the port config to the same default state the three 0 strapping pins already set it to in my box
mircea_popescu: nah, the problem is that it consists of amstan orcs by mass. they're so enamoured with what the mud-toed grandmother back in rural orcistan thinks about "grandson works at google", they'll defect after the anal rape, maybe.
asciilifeform: fughet 'normal people', idea was possibly the asexuate google devs have defector in the ranks
a111: Logged on 2017-12-22 17:18 weevlos: trinque: we are a media publication. our power and capital comes from the number of visitors we have to the site. we aim to transform through culture. if normal people cannot visit our site we are not accomplishing our goal
asciilifeform: with the connect/disconnect subhumans?!
epony: a person, reading the blog at loper..
mircea_popescu: asciilifeform, it's the obvious vuln
asciilifeform: 'inserter of random nops' and the like.
asciilifeform: soo they ~did~ put oddball crypto logic in the fpga, e.g. https://chromium.googlesource.com/chromiumos/platform/ec/+/master/chip/g/dcrypto/dcrypto_runtime.c#40 drives it
asciilifeform: so this doesn't exactly narrow down what the base fpga was.
asciilifeform: i mean, they're world's largest , supposedly, foundry.
asciilifeform: aaand i found the maker
mod6: <+mircea_popescu> holy shit this mgiht be the most infuriating log since we're logging. << it's up there
mod6: <+BingoBoingo> <mircea_popescu> if god wanted people dressed he'd have made them that way. << You forget the Mayogendered. Dressed in yeast << lol
mircea_popescu: in other lulz / other dead things, https://www.shoemoney.com/ completely forgotten. nobody gives a shiot even about his cheapass bitcoin bait.
mod6: <+mircea_popescu> ok, i'm skipping the rest of this swiftgeek barf, it's indigestible. << i sloged through it :D
asciilifeform: ( they clocked it waaay down, it runs at something like 16Mhz )
asciilifeform: ( as can be seen in the paste, shows '0' )
asciilifeform: and the drm crapola of course picks up where it left off, it writes to flash
asciilifeform: well can turn whole thing off, but solely by discharging or pulling the battery
mircea_popescu: my slaves are my slaves because i can kill them whenever i feel like ; and my computers my computers because i can turn them off.
mircea_popescu: no ownership interest in any machine that has always-on components can be said to ever transfer, or in any other way vest in anyone besides the manufacturer.
mircea_popescu: tbh i find this entire "can't turn off" bs as the originating quanta of offense.
asciilifeform: ( homo redditicus still thinks 'hey i own the box' because pulling battery lets you rewrite the cpu's boot rom )
asciilifeform: then they pulled the bait-and-switch and properly shat on the 'owner can cleanse' conceit.
asciilifeform: this was the 'soft' reset-to-factory , at some point presumably worked ( their 'gsctool' thing, supports sending it )
asciilifeform: unrelated to the b4 pin thing
asciilifeform: in disappointing noose, no soft zap -- include/tpm_vendor_cmds.h: VENDOR_CC_RESET_FACTORY = 38 cmd dunwork, result is extension_route_command: handler 22 not found , they closed the hole ( detain in https://archive.li/pEWsr )
mircea_popescu: most of the extant ones consist of a subunitary mancount.
mircea_popescu: there's enough material here to make 15 usg."tech" "task forces".
a111: Logged on 2018-06-11 22:58 asciilifeform: BingoBoingo: i still find it lulzy how google apparently banked on nobody outside of their heathen pit getting hold of the fucking debug hose.
mircea_popescu: http://btcbase.org/log/2018-06-11#1823278 << same old http://trilema.com/2014/pushing-the-soft-tender-flesh-of-a-friend-against-the-sharp-rotating-blades-of-the-immutable-machine/#selection-47.1-47.53 problem.
asciilifeform: eh drilling cleanly is 'easy', ever seen the tool, clockmaker's drill
mircea_popescu: and any way to drill to them cleanly
mircea_popescu: maybe a low power xray shot would actually be worth it, see if there's any lone balls.
asciilifeform: and can then only be reached with drill
asciilifeform: ( either that or it's a sad and unrouted ball entirely )
asciilifeform: but somehow i suspect that 'b4' is one of the pads.
asciilifeform: academic, there's no simple way to get to most of'em
mircea_popescu: asciilifeform, i don't expect pulling up all the pins one at a time will brick the machine, do you ?
a111: Logged on 2018-06-11 22:36 asciilifeform: they're exactly like eichmann, perfect little marvels of industrious compartmental schizoid
asciilifeform: sooo apparently we want to pull ~up~ pin B4, which is 'pin 10 of port 0' , wherever the fuck that physically is.
a111: Logged on 2018-06-11 22:32 asciilifeform: it'd be one thing if, say, google dev showed up and 'yes i'ma pgp to mircea_popescu the magic key', or even 'here's the schem'. but nooo, instead they come to 'explain' to us how 'tpm can be used to benefit you' .
mircea_popescu: saw an old woman balancing a sack on her head while looking in a shop window. ~split the diff ?
Mocky: speaking of drool, i saw a moron at the gym today balancing a water bottle on his head while chatting up a chic. almost got a pic
mircea_popescu: if you go hang out on highschool campus, a very infuriating process of cockteasing may well be the norm.
Mocky: "Looking at cleavage is like looking at the sun. You don't stare at it. It's too risky. Ya get a sense of it and then you look away."
a111: Logged on 2018-06-11 22:06 BingoBoingo: that, or to repeat the "common" process they are sure gets done all the time.
trinque: tell you what, those trucker tits tightened my txn-hucking loop into the minutes scale. can't even complain.
mircea_popescu: holy shit this mgiht be the most infuriating log since we're logging.
a111: Logged on 2016-12-29 18:40 asciilifeform: not everybody wants to be involved with mega-empires, on the giving or on the receiving end. in that light, the pashtun mountains are every bit a 'high-tech' deterrent as a SAM battery.
asciilifeform: well at least in theory
asciilifeform: bahahaha i found the factory test mode pin
BingoBoingo: It however is impossible to go "full Charrúa" because they Uruguayos of all people genocided them under General Fructuoso Rivera before mass immigration of Italian trashpeople ruined Cisplatine culture
mircea_popescu: Mocky, pashtun is this word for tribesmen inhabiting the place empires go to die (afghanistan)
BingoBoingo: Mocky: The simple life of freedom visible in certain tribes.
asciilifeform: i have 1 of these here ( well, a part-timer )
trinque: http://btcbase.org/log/2018-06-11#1823317 << the tiny furry bastard. has a whole greeting protocol, consistent vocalizations, says his name by way of butthole display. worlds beyond what these derps consider communication when they arrive.
BingoBoingo: Sleep in the hills with blanket, kalash, and a local goat-girl
BingoBoingo: I suspect the level of human dysfunction we are encountering is different. Thankfully my problem is alleviated by saner girls importing themselves here from Northern South America because "land of opportunity"
BingoBoingo: danielpbarron: This isn't lack of belief in their heads so much as lack of life
a111: Logged on 2016-09-08 16:03 asciilifeform: pretty lulzy, motherfucking 16TH CENTURY b00k, is NOWHERE on the net.
a111: Logged on 2018-06-11 21:01 hl`: not really trustworthy if they have non-free firmware on them, but theoretically they have a use case
mircea_popescu: http://btcbase.org/log/2018-06-11#1823103 << even worse if they have usg's rsa keys in them.
BingoBoingo: <danielpbarron> nontheless, it would offend my brothers and sisters to do such a thing << Come to Uruguay. Live here six months. Hire girls you would have though good looking when you arrived, but because of their deep cultural failings you now view as well dressed more fuckable goats.
mircea_popescu: danielpbarron, it's mostly a medieval conceit. had to display it as something. you ever saw the dog-like elephant i linked once ?
Mocky: hire strippers and dress them in fig leaves
BingoBoingo: <mircea_popescu> if god wanted people dressed he'd have made them that way. << You forget the Mayogendered. Dressed in yeast
mircea_popescu: if god wanted people dressed he'd have made them that way.
mircea_popescu: danielpbarron, if you represent the republic, do me a favour and hire a half dozen strippers to be mostly naked, will you.
mircea_popescu: because otherwise, really, the thing you "identify as" at parties bears no meaning and no interest, for us as for the chicks that don't come with you to your records collection.
mircea_popescu: http://btcbase.org/log/2018-06-11#1823026 << this sort of statement would be so much more useful/important/noteworthy/actually existent if it came in the form of "i'm the guy from $X, long term so and so". where $X doesn't have to be a "our words are backed by nuclear weapons" state. can even be a blog. a dogshed. SOMETHING. but something specifically and identifiably existent.
asciilifeform: mircea_popescu: can cut to the verdict, if you like, http://btcbase.org/log/2018-06-11#1823215 .
BingoBoingo: <mircea_popescu> asciilifeform, unless you're looking for confused teeny cunt, you never miss much by missing the congregations of confused teeny cunt. << And for that alf needs to do Uruguay delivery runs during the summer.
mircea_popescu: ok, i'm skipping the rest of this swiftgeek barf, it's indigestible.
mircea_popescu: asciilifeform, unless you're looking for confused teeny cunt, you never miss much by missing the congregations of confused teeny cunt.
a111: Logged on 2018-06-11 23:54 danielpbarron: they have some app exibitors can use to promote where they'll be and what they are serving (i reserved a vendor campsite specifically for the purpose of provoking conversation about the Bible) -- i also mention in my "profile" that i'm a lord in the most serene republic of Bitcoin, which mysteriously gets removed. I add it again, removed again. They apparently don't mind a religious "cult" but not
BingoBoingo: Plenty of dogs understand speech even if they suck at generating it
asciilifeform: washing aint fine culinary art, either, but picture cook who does not wash instruments.
BingoBoingo: The redditards have a pathology. A presence of something anti-useful
a111: Logged on 2016-01-19 21:55 ascii_butugychag: the whole point of engineering is to cut apart the happenstance-linked crud from what you actually want.
asciilifeform: Mocky: it's the ~only part.
mircea_popescu: this is the problem. education only ever succeds on some and never on others, in which case what sort of technology is it, really.
asciilifeform: Mocky: we had a fella coupla yrs ago, Framedragger, who struggled with the disease and in the end relapsed.
asciilifeform: cure, if indeed possible, has to begin there.
asciilifeform: because multilayer psychosis ultimately rooted in 'mother will provide me with what to suckle' wedge.
a111: Logged on 2018-06-11 23:36 danielpbarron: i once triggered a guy to the point of thinking he might have his first fist fight, over anti-ssl, till his friend dragged him away
asciilifeform: http://btcbase.org/log/2018-06-11#1823338 << they have a 'seekoority is what comes in ssl bottle, it's how we seekoore our tor darkmarketrons' idiocy stack baked into their hindbrains
BingoBoingo: <mircea_popescu> i need a unicode for the new york jew handwave. << Gaza http://qntra.net/2018/06/israeli-knesset-quietly-disqualifies-equality-bill-maintain-the-jewish-majority-even-if-it-violates-rights/
mircea_popescu: i need a unicode for the new york jew handwave.
asciilifeform: with the black sma cable.
asciilifeform: wireless is the little iron shielded box in the corner, the thing 1 of the earlier folx referred to as 'm2'
asciilifeform: hammer objection was in re cr50, this massive toad that sits in the middle of the board b/w errything and damn near errything else
mircea_popescu: but your objection to "just hammer the damned thing off the board" was "won't be able to power up, controls the 3v line". and now you found bypass ?
asciilifeform: just found the wire.
mircea_popescu: wait, wait. did you get the power or didn't you ? what are we talking about here ?
asciilifeform: ( rk3399 is a bog-standard rockchip, very similar to the one in pizarro pilot plant, but with 6 cores instead of 4 )
asciilifeform: see the pcb photos from earlier today.
asciilifeform: and have the box still run.
asciilifeform: aside from that, this is almost the perfect mircea_popescu lappy in this one respect : the 802.11 card is on own little dildo corner of pcb, you could prolly remove it with a saw.
asciilifeform: mircea_popescu: yep. but see the caveat in $thread.
asciilifeform: the tpm bullshit doesn't seem to use much (or any) custom logic, the crypto is in the c src
asciilifeform: it's the usb tty
asciilifeform: mircea_popescu: this is a pestilentially-common product; arm co licenses the .verilog
asciilifeform: this one is something like a xilinx but with metal rom instead of the usual LUT rom.
asciilifeform: well 'whitelabel arm' implies a proper physical one with the engraving sanded off. which i suspect this one is emphatically not.
asciilifeform: http://btcbase.org/log/2018-06-12#1823375 << except, it ain't a proper arm cortex, but a softcore-arm in (metallization)fpga. cuz i suspect somebody read the Logz re specificity-of-diddling
asciilifeform: http://btcbase.org/log/2018-06-12#1823382 << i accidentally nuked the trackpad on my current test unit, so i got this!11
BingoBoingo: The trash mining sector of the economy here is probably the third largest behind Tourism and Agriculture depending on the order those two sort themselves into.
BingoBoingo: The structures that become part of your reality in the bananastan too cold for growing bananas
a111: Logged on 2018-06-11 19:33 |\n: any other devices with the extra similar one (even with brushed label)?
mircea_popescu: waste is the most important signal of social hierarchy. that's what it's fucking for.
mircea_popescu: http://btcbase.org/log/2018-06-11#1822694 << jesus fuck how fucking braindead can you get! let ~everyone else~ not use fucking computers, holy shit. there's a reason http://trilema.com/2016/the-megawatt-standard/ already!
mircea_popescu: danielpbarron, should be a pretty decent heuristic indicator for you. one of the two things you're in is going somewhere, according to the beast.
a111: Logged on 2018-06-11 19:23 swiftgeek: asciilifeform: the point is to take some lessons from that 1 unit
mircea_popescu: http://btcbase.org/log/2018-06-11#1822648 << can you step back from your own insanity, and look at how they fucked your head ? really, you're going to go through your entire life "taking lessons", ie not doing anything, because that's what they made you do it at the child abuse camp they call college ? and then what, you'll be 80 and dying on a borrowed mattress, and... what ? you'll have had all these lessons you "took" ? wh
mircea_popescu: well, they're the kids with no clue or skill, hoping to eat off the usg's printouts. what's to expect.
mircea_popescu: http is a ~stateless~ protocol. you need state, do something else. no, there may not be such a thing as a "website login", not anymore than there can be a planesubmarine.
mircea_popescu: we're not here to try and convince mommy that we're cool kids. we're here to fuck her in the ass until it prolapses, and leave her chained to a pole in the park where all the used needles are.
mircea_popescu: different from, say, comp.lang.lisp archive in that a) their chosen kid wasn't naggum and b) they actually had gathered around properly, as opposed to the idiots on bbs, captive in their self-important notions of independence and other man-alone-isms.
mircea_popescu: tl;dr : cat-v was a bunch of dorks collected around a chosen kid, trying to do things. chosen kid died and they turned to scar tissue.
oda: not that there's anything wrong with that. just that my convictions regarding software choices are a bit more moderate
mircea_popescu: in fact, there was a collision at some point, where was it...
mircea_popescu: see http://trilema.com/2016/please-stop-using-dns-already-and-other-considerations/ to get an idea where the republic's coming from re all this "convenience" and web n.0 bs.
mircea_popescu: not to mention the whole pile of shit that's cloudflare.
mircea_popescu: we don't generally support the idiocy known as https, so merely you not serving http may put you outside of the web.
oda: mircea_popescu: I got it working with the paste site in the deedbot help site. Also that tiuxo site is my site. Cloudflare filtering might have denied deedbot, I filter out China / Russia / Korea and a few useragent strings I was getting a lot of weird traffic from
mircea_popescu: http://btcbase.org/log/2018-06-11#1822603 << for the record, that made absolutely no sense.
mircea_popescu: oda, try putting it in p.bvulpes.com ; that tiuxo site uses some ssh bullshit / isn't on the web.
a111: Logged on 2018-06-11 19:01 trinque: one might, say, introduce himself, like even my cat does when he walks into the room
a111: Logged on 2018-06-11 18:37 apt-get: the reason I keep using this nick is because it's quite handy to have personal info drowned out in a sea of noise when someone tries to look it up
a111: Logged on 2016-02-24 04:23 mircea_popescu: omfg alf sees the world like a bee-dog : in black and white and all pixelated.
mircea_popescu: then again alf almost sounds like an anime character, doesn't seem to have hurt him any.
mircea_popescu: eventually went to specialist store, bought 3 meters of double-width towel substance, had them rodeando it. 3 * 3500 + 3000 for the work = ~30 bux. now i have a proper beach towel, can seat five.
mircea_popescu: and in other fuck-this-failed-civilisation, NO SHOP in all the fucking town had a proper beach towel. the chinese overlords have decided all towels must be up to 1/3 size and that's it. "i want a towel king bed size" "you mean sheets ?" "no dood. towel." "here's the towels." "these are small."
deedbot: Provide a paste URL to the ascii-armored GPG public key or the full 40 character key fingerprint without spaces or dashes.
asciilifeform: mircea_popescu: i'm picturing the archaetypical baba yaga scoop
asciilifeform: oda: you can start with today's , let's say from http://btcbase.org/log/2018-06-11#1822562 point, the last set of cr50 people
asciilifeform: oda: you will definitely want to read the log ( http://btcbase.org/log/ ) and use the search box.
oda: Hi, just got here after reading the cr50 article on loper-os
mircea_popescu: and in other news, i bought myself a meter and a half long spoon paddle.
asciilifeform: BingoBoingo: i still find it lulzy how google apparently banked on nobody outside of their heathen pit getting hold of the fucking debug hose.
asciilifeform: or better yet, if they dun show signs of a half-working brain, just !!down , dun hesitate, 'ваше слово, товарищ маузер!'(tm)(r)
a111: Logged on 2018-06-11 20:35 asciilifeform: so far my only clue that h1 actually runs the given fw , is that i was able to flash in a vendor update : http://btcbase.org/log/2018-06-08#1821699 and ended up with a slightly different, in the ways suggested by the src, console
a111: Logged on 2018-06-11 19:57 asciilifeform: swiftgeek: given your introduction ( http://btcbase.org/log/2018-06-11#1822589 ) i assume you may be interested in verifying fact that cr50 is not a subfunctionality of the ordinary (i.e. kept in winbond spi ) bootrom or the EC controller ('nuvoton' arm , visible in right hand of photo ). this is very simple to do:
asciilifeform: BingoBoingo ( and other awake folx ) , plz to point future 'fact checker' i_came_from_reddit folx, to http://btcbase.org/log/2018-06-11#1822821 + http://btcbase.org/log/2018-06-11#1822990 etc, if i'm off in meatland
a111: Logged on 2016-12-16 14:31 mircea_popescu: japan got buldozed chiefly because of the utterly immoral attitude of thinking people at the time.
asciilifeform: one autist sqeals in delight designing shutter for the drone camera, another -- the rocket proximity cap, another -- likes to draw cute little octopi; etc
asciilifeform: usg cultivates these, from childhood
asciilifeform: they're exactly like eichmann, perfect little marvels of industrious compartmental schizoid
trinque: for one, I'd expect anyone who spent enough time in one to come out the other side schizophrenic
trinque: perhaps the compartmentalized nonsense factory is not such a strong longterm strategy
asciilifeform: because somehow this is not insulting to the intelligence of the fucking fruit fly stuck to my display. not even speaking of the l1 lordship.
asciilifeform: it'd be one thing if, say, google dev showed up and 'yes i'ma pgp to mircea_popescu the magic key', or even 'here's the schem'. but nooo, instead they come to 'explain' to us how 'tpm can be used to benefit you' .
a111: Logged on 2018-06-11 22:15 BingoBoingo: Well, living in the land of Mate crackpipes you get to see this behavior taken to extremes. They are playing the game where they TRY to burn as many man hours as possible in an unproductive manner.
asciilifeform: http://btcbase.org/log/2018-06-11#1823242 << naaah BingoBoingo , see, different thing. the crack smokers for the most part only burn ~own~ time. ~these~ folx, they want to burn yours, and mine.
asciilifeform: they dun make tards, apparently even, like they used to. i swear , the tards from 10y ago were not this thick.
asciilifeform: the very notion that anything whatsoever happening on a nato-produced 22nm die is 'owner controlled'...
a111: Logged on 2018-06-11 21:24 hl`: that's actually a fair point too. as implemented in e.g. PCs nowadays, even putting the closed firmware issues aside, the way they are integrated is _not_ secure. they're just connected using open pins to the CPU, you could easily replay everything
asciilifeform: upstack, observe the lulzfest, where http://btcbase.org/log/2018-06-11#1823026 and then http://btcbase.org/log/2018-06-11#1823205 demands fritz on-die in cpu ! for 'security!'
asciilifeform: seekrit committee generally concerned with specifics of applications (i.e. anything where you gotta know the identity of intended victim, say)
asciilifeform: (i.e. snarfing up that delish printolade like there's no tomorrow )
asciilifeform: in darpa land they do what in civilized world is called 'освоение бюджета'.
BingoBoingo: Productivity is dangerous. In Uruguay the danger is raising the bar and taking away from crack pipe time. In DARPA land the dangers being fended off are myriad.
BingoBoingo: Well, living in the land of Mate crackpipes you get to see this behavior taken to extremes. They are playing the game where they TRY to burn as many man hours as possible in an unproductive manner.
a111: Logged on 2017-09-15 23:48 asciilifeform: kanzure: i spilled the beans from a similar darpa conference that i attended, in the heart of the beast itself, few yrs back ( it's in the l0gz, spoiler : multilinear map homomorphic crypto is bunkum ) and still waiting for gasenwagen
asciilifeform: http://btcbase.org/log/2018-06-11#1823179 << phunphakt, asciilifeform ( in ascii_butugychag period ) was a slave in precisely that bit of idiocy, sat in the peanut gallery at the derp committee, etc
asciilifeform: ^ dun forget what they're famous for..
asciilifeform: it isn't clear that all of their derpery has to date added up to any 'gets done'
asciilifeform: 'go to repair shop!' the cheek.
asciilifeform: BingoBoingo: it isn't clear to me, what, if anything, these folx wanted, other than to waste our time.
BingoBoingo: And with the read only brains, only hope they have is that they are interesting enough to an MP for them to recieve their exploitable crash that re-enables write access.
BingoBoingo: Well for most people, wife replaced while they sleep would probably be +EV
asciilifeform: rotten old fungus man rms, you can say whatever about, but he was exactly on target re how this particular item will go, back in '97. first, 'it only stores keys, harmless!' ( and won't give'em up to usg Because Reasons ... ) then 'ok now it can rewrite fw' 'yer lying, they Would Never!11!!' '...'
asciilifeform: BingoBoingo: somehow the derps obsess with 'wife replaced while you sleep' scenario. aaaand then go on to advocate elaborate tpmdildo that makes this scenario actually workable.
asciilifeform: if anyone was puzzle re naggum's remark concerning 'read only brains' -- here they are!
asciilifeform apologizes to log reader for having allowed this waste of time to clutter the chan.
swiftgeek: anyway so far there is no root of trust implemented in SoC that respect end user
hl`: (see TPM reset attacks. the TPM specification people claim that these were fixed with TPM1.2, this is not correct however)
hl`: that's actually a fair point too. as implemented in e.g. PCs nowadays, even putting the closed firmware issues aside, the way they are integrated is _not_ secure. they're just connected using open pins to the CPU, you could easily replay everything
asciilifeform: any other notion of 'root of trust' is fritzian.
asciilifeform: back upthread -- discussion of 'roots of trust' WILL start with , at the very MINIMUM, iron where i can fucking see the transistors through optical microscope. and never with anything else.
asciilifeform: if anybody told you otherwise, he is a dirty liar, and probably selling snake oil.
asciilifeform: ( and there is no known complexity class pindown of factoring. )
asciilifeform: there is not even a proof that the difficulty of rsa is equivalent to that of factoring.
asciilifeform: and in particular a reduction of ~every~ generated key, rather than avg case.
asciilifeform: at any rate there does not currently exist ANY usable crypto algo, of any purpose, for which a complexity class reduction to any class is known.
asciilifeform: it exists strictly to slightly increase the headache for reversers, and is not interesting tech from my pov
hl`: i.e., you'd have to solve the halting problem to write a program which can analyse the generated programs in the general case, meaning that any computational malevolence (compromised silicon, etc.) can only compute the result of the algorithm by executing it unless someone solves the halting problem
asciilifeform: this is an eprom. and i've had them in physical possession long enuff to know that they weren't touched by fucking nato. and , on top of this, i can physically photo the crystal without decap.
hl`: general case - basically using the halting problem as a trapdoor function.
hl`: asciilifeform: that's actually an interesting idea - i've toyed with a similar idea previously, though for different applications. basically, my idea was to come up with some way of algorithmically generating algorithms such that the algorithm generator can know the correct answer computationally easily, but where the structure of the algorithm is highly randomised such that it resists analysis in the
asciilifeform: it, and no other
asciilifeform: if you cannot determine via physical means that the proggy as-published is actually executing on the given device
asciilifeform: which resolves to 1) i wrote the code 2) i know that the die was not built in advance to subvert the functionality of said code
swiftgeek: asciilifeform: yep it needs to be open otherwise lol
swiftgeek: hl`: and nobody dumped yet trackpoint code either :>
swiftgeek: hl`: not really, but whether medium is ro or rw it doesn't matter
hl`: (especially since they have a bloody _firmware update_ capacity. !)
hl`: pretty much - agreed that TPMs with nonfree firmware (i.e. all of them which currently exist) are pretty dubious for that reason.
asciilifeform: if i cannot audit the contents of the device, it is impossible to prove the nonexistence of magic key.
asciilifeform: this is the fundamental fallacy that resulted in a market empty of honest iron.
hl`: asciilifeform: not exactly. the fundamental premise is just to measure the computing environment - this can be used to pro-owner ends if you control the tpm.
hl`: to be clear, any company which ships chips fused to only run their code gets a 'fuck you' from me
asciilifeform: hl`: how much do you like google's tpm, which opens in 3 seconds to 'evil maid' with the magic rsa key ?
hl`: there's not really that much point to tpms if physical attacks aren't in your threat model. if they are, they can provide resistance against evil maids, etc.
swiftgeek: asciilifeform: it depends on having root-of-trust (tpm isn't it), then it's a fun store of secrets
asciilifeform: you don't resell crypto hardware, you thermite it