asciilifeform: i use the feature also.
mircea_popescu: without the ability to link INSIDE my output $value would decrease sensibly. not a little. a lot.
mircea_popescu: but the "you enabled js, you're dead" position is untenable -- i use js for the selection thing. and i fucking need it
asciilifeform: that's the idea.
mircea_popescu: if i'm responsible for the above why am i not responsible for sending emmylark nude on a harley to luser's house to tear out intel ME out of his chip ?
asciilifeform: the fundamental q is whether there is a diff b/w 'enabled js' and 'enabled opensesamism'
asciilifeform: but conceivably one day there will be an idjit browser that gives obama root on yer box when it sees string 'open sesame'. and what, errybody gotta know in advance to escape 'open sesame', lol ?
mircea_popescu: well which the fuck is it, and don't tell me "why mp! perl=bash=php=crap", it's not the point.
asciilifeform: let's picture the general case. the pgpkey xss thing did not 'fire' against phuctor viewers, because quoted. but did against wotpaste reader ( with 0 practical effect , but for the principle of the thing )
a111: Logged on 2018-01-16 17:08 mircea_popescu: (also, let it be pointed out for the benefit of the future noob : the use of xargs with shit from curl is dancing with the wolves. finest way to lose a box.)
a111: Logged on 2017-11-06 19:27 deedbot: http://trilema.com/2017/how-the-beastforumcom-private-messaging-function-became-a-paid-user-only-item/ << Trilema - How the beastforum.com private messaging function became a paid-user-only item
mircea_popescu: consider the celebrated lulz of (most recently) http://btcbase.org/log/2017-11-06#1733263 : none of those curls are sanitized. yet http://btcbase.org/log/2018-01-16#1771208 right ?
asciilifeform: whether this matters -- is separate q
asciilifeform: the other way to think of it, is that for so long as you have a box that eats rubbish from randos, you have a mechanism for folx to host shitware to use against firefox-besotted js victims etc
asciilifeform: mircea_popescu: do you recall the case of http://btcbase.org/log/2016-08-01#1512390 ?
mircea_popescu: obviously quoted link's right ; other than the attacks croming from nsa ("enemy" aka idiot with vested interest in idiocy), they ALL come from leaky abstractions. both points above qualify.
mircea_popescu: asciilifeform there's two fundamental items i can readily identify, maybe more. 1. i actually did plop an echo $_GET in there. is this just bad coding ? is it a legitimate assumption ? 2. he has a point, as long as it's on trilema.com, a script has powers OUTSIDE of its implicit scope, "steal cookies" whatever. is this ~actually~ bad systems design ?
a111: Logged on 2015-08-13 19:00 phf: mats: well, i actually meant the opposite. classes of attacks can be eliminated by not using c. i think that majority of the attacks come from leaky abstractions. there's no <string> in c, but there's a null terminated memory region. there's no <sql> in perl, but there's a character array with sql text in it. one of the solutions is to plug abstraction holes on a level of the language, in such a way that you can't not use improved abstractions
mircea_popescu: and in other news, http://www.gutenberg.org/files/3178/3178-h/3178-h.htm << pretty decent yarn, mark twain's forgotten novel.
mircea_popescu: in fairness, kid's got me meditating about the nature of things ever since last night. see, the trouble is : in his syustem, he has actually found a vulnerability, as a factual matter. in my system this is entirely meaningless. why the difference ?
trinque appreciates the deedbot fuzzing. pretty damned sure all my inputs are quoted though.
lobbes: Most of the 'dynamic' bits of the www are php+sqlite3. lobbesbot is limnoria (fork of supybot, a common python bot api), also atop sqlite3
a111: Logged on 2018-01-26 07:09 douchebag: Are there any sites any of you guys would like me to check out? I'm a bit bored right now and I am always up for a challenge :-)
lobbes: http://btcbase.org/log/2018-01-26#1776736 << you really should do the homework trinque pointed you to, but if you are done with that and bored again, plox to look at logs.minigame.bz, lobbesblog.com and lobbesbot? I'm a meganoob so you may find something. I've no shame, so disclose whatever you can find here. I'll toss a handful of satoshis your way if you do (and a wot rating)
a111: Logged on 2016-05-01 14:53 mircea_popescu: asciilifeform> mod6: the baked-in presumption of webtardism is almost insulting << it is insulting, not to us though. think about it : the crab has pincers because in its environment THAT WORKS ; and so does "GET /blog/blog-config.php~".
asciilifeform must admit that the http://btcbase.org/log/2018-01-26#1776811 thread reminds him of http://btcbase.org/log/2016-05-01#1460013
mircea_popescu: in her case, that's the up side.
mircea_popescu: but i thought they already had a perfect medium of exchange called the unified standard dosidoe!
asciilifeform: meanwhile, in heathendom, https://archive.is/rTmuG >> 'The first freight deal settled in Bitcoin was executed last month on a vessel carrying wheat from top shipper Russia to Turkey, according to Prime Shipping Foundation, the venture behind the transaction. ... The vessel used in Prime Shipping’s transaction carried 3,000 metric tons of wheat from Rostov-on-Don to Samsun. '
mircea_popescu: i rated you, so now the bot will allow you to voice yourself. say /query deedbot and then !!up ; it will give you a thing to decrypt, give the result back to it as !!v <string>
emmylark: I'm talking to you through the Freenode server in my IRC client. It made me register a name and email.
mircea_popescu: say /msg nickserv register your_password your_email_address ; use a good password and an email you actually can read, they'll send you a verification thing. this way someone else can't steal your name.
deedbot: Provide a paste URL to the ascii-armored GPG public key or the full 40 character key fingerprint without spaces or dashes.
mircea_popescu: emmylark it's very nice to get to choose ; i choose to keep the second for my private collection of smutty selfies.
emmylark: How did I do sir? Was it acceptable? I sent a second one just in case the first wasnt enough. I thought it might be nice to get to choose
mircea_popescu: emmylark so write 4b57ff75 on your tits ; and get your slit in the shot as well.
mircea_popescu: say hello to the group, slut.
douchebag: It's the simple things like that which can do that most damage
douchebag: I could grab the AWS Instances API keys lol
douchebag: IF I were able to find a bot that essentially returned the content of that URL and it was hosted on Amazon AWS
douchebag: What are the commands that have that sort of functionality?
douchebag: That actually can hold quite the potential of a vulnerability
douchebag: mircea_popescu: So the bots in this channel for instance the one that will add your GPG key from a url you provide
douchebag: I wonder if any of the logs will pop an alert
mircea_popescu: but this browsershots set is a comedy goldmine! apparently a good third of the failful firefox browsers ALSO are getting an "uptades" blabla popup
douchebag: Don't feel bad, XSS is one of the most common vulnerabilities that exists on the majority of websites
mircea_popescu: anyway, i suppose "the message chosen was $" is just bad webcoding on my part.
douchebag: It might be, I'm not sure at the moment if this was added with mp-wp or if it was uploaded to trilema.com's webhost a later date
douchebag: You'll see arbitrary html was added to the page
douchebag: Go there
mircea_popescu: odd, neither archive bot not this testbox firefox i have do it.
douchebag: XSS can be used to steal cookies of logged in users which can then be used to jack their session.
douchebag: Is it alright if I link you to a PoC of the vulnerability?
a111: Logged on 2018-01-25 06:00 hanbot: http://btcbase.org/log/2018-01-25#1775981 >> can grab http://thewhet.net/testickle/mp-wp_genesis.vpatch & http://thewhet.net/testickle/mp-wp_genesis.vpatch.hanbot.sig ; pubkey's on about page if you need it.
douchebag: Where can I find a copy of the source?
a111: Logged on 2018-01-23 07:11 mircea_popescu: actually, hanbot is about to genesis mp-wp, you're more than welcome to help down with the paring down effort of that, if you want. mostly php.
trinque off for the night as well
douchebag: Are there any sites any of you guys would like me to check out? I'm a bit bored right now and I am always up for a challenge :-)
trinque: guy's probably away for the night. why don't you drop him a gpggram on his paste site, link him to it here
douchebag: And how most people are more than willing to share the information they acquire through blogs and whatnot
douchebag: I suppose the point I'm trying to get across is that there is a pretty good community involved with bug bounties, I especially like the classic hacker additude of most of the people in the sense that they're all working together to learn more
mircea_popescu: i know quite a few people whose iq is over 150. the internet is good at collecting similar things. sadly -- this does little for the intelligence of the race in general.
mircea_popescu: i know a girl that made $30 million with her ass ; and you must admit that for the average girl's ass this is indeed generous.
douchebag: Haha, you do have to admit for the average person $40k in a little over 3 weeks is pretty damn good.
douchebag: However, even though I have to wait until they patch the bugs I found before they reward me, they did reward me $150 on triage and will be rewarding the rest at a later date
douchebag: Well, I still have to wait until they patch them before they reward the bounty. They pay based on likelyhood/impact, now a friend of mine reported a vulnerability less serious than the one I found and he was rewarded $2,000 total
douchebag: I managed to find two vulnerabilities in Yahoo last night, I highly suggest their bug bounty program for anyone who is interested in doing that sort of stuff.
deedbot: http://www.contravex.com/2018/01/26/the-g-word/ << Contravex: A blog by Pete Dushenski - The G-word.
mod6: and it goes back to the same thing as with diana_coman. having two '++' at the front of the line. the way the vdiff is written, when it passes the diffed file off to awk to pattern match the ---|+++ it adds that '+' in the front, then it matches, causing it to call sha512sum.. which is where the false comes from. I think.
mircea_popescu: basically her svging of binaries did some inadvertent fuzzing of the whole vdiff process
mod6: Perhaps something with the vdiff is doing this? Or maybe there was something weird in the original encoding of this image? But that seems to be the solution, remove that ' false' and that should work.
mod6: anyway, removing: ' false' from that line will indeed, yield the correct hash, and allow for a proper base64 decoding.
mod6: Why? Because of the 'false' at the end of this line: ++6/l4BiDfMrebzvzrfh2UMH8cTMAsbHbPRFuih0reDbX30AD+17CB1JhgefoRhOIbIr3k3CDKGT false
mod6: So if you manually extract the 'mpwp/blog/wp-includes/js/tinymce/plugins/wpgallery/img/gallery.png.svg' from the mp-wp_genesis.vpatch, and place it in a file, and attempt to base64 decode it, it fails to decode.
mod6: ok lemme see if i can do a bit of debugging on this mpwp and see if that really was the issue there.
a111: Logged on 2018-01-26 00:33 mod6: I'd like to make another positive mention here about TMSR~, if I may : one thing that really makes me smile is that all of us, no matter how busy, or whatever, are always willing to drop whatever it is to pitch in when the ship needs trimming.
asciilifeform: http://btcbase.org/log/2018-01-26#1776638 << for some reason my automatic default mental picture was the scene from film 'das boot'
asciilifeform: rather.
asciilifeform: for thread-completeness i will point out that 'who runs the craft' is a problem that exists just the same in current-day bitcoinism.
asciilifeform: the orig scenario of course requires benevolent martian , who would gently pick up idjit humans who try to approach the box, like child picks up beetles, and puts'em elsewhere
asciilifeform: ( 'machine' in the very general sense, you'd want >1 , which understand one another's keys and sync )
asciilifeform: with the obvious physical gotchas.
asciilifeform: fwiw a literal martian bank would probably work quite well. ( you might have to put it farther than mars, or even on a continually-moving craft , so as it could not be templar-molested by 'french king' )
mircea_popescu: so therefore... unsatisfied it doesn't work.
mod6: I appreciate all your hard work / blood / sweat / tears on your trb adventure with deedbot. Your contributions are and will make a difference. This is why the republic is on top. We don't imagine the change we want to see in the world, WE MAKE THE CHANGE WE WANT TO SEE IN THE WORLD.
trinque often does this to a person he thinks is qualified to give the argument
asciilifeform: even that 'works' for the usd value of 'works'..
a111: Logged on 2018-01-26 00:31 mircea_popescu: but you can see the appeal.
mircea_popescu: which is like "i'm satisfied X", together with "hey, wait a minute, what if..."
a111: Logged on 2015-08-02 21:00 mircea_popescu: you buy 6x6 inch panbes of glass and crash them
asciilifeform: mircea_popescu: closest thing i ever came up with to 'analogue bitcoin' was a variant of http://btcbase.org/log/2015-08-02#1222527 , where you have a sheet of $glasslike and a thermal stressor gadget is used to crack it into N 'jigsaw' pieces; idea being that adjacent pieces 'plug into' yours and can 'verify' it , and so on recursively
mod6: I'd like to make another positive mention here about TMSR~, if I may : one thing that really makes me smile is that all of us, no matter how busy, or whatever, are always willing to drop whatever it is to pitch in when the ship needs trimming.
mircea_popescu: see, you can tell the guy is genuinely 60ish not just because of his specific pre-internet use of language ; but also because of his default mental models.
mircea_popescu: so there we go.
asciilifeform: i can also see the appeal of fart-powered flight
mircea_popescu: but you can see the appeal.
asciilifeform: presumably meant the magical 'untamperable clipper chips' of the 1990s 'digital currency' derps
a111: Logged on 2018-01-25 21:28 NoSatoshisHear: I worked on digital coin in 2001, but tried to find a non-net solution, and finally just gave up. When you head the wrong way, you don't get there. Still feel stupid for not buying in at $5, but I had no interest in Silk Road.
mircea_popescu: http://btcbase.org/log/2018-01-25#1776463 << hey, i knew a guy who didn't finance (1980s!) porn ventures because "not interested in the loose women". bought "blue chip" fucking revlon and bs instead. i'm sure there's even today ossified mind going "i'm not into tmsr because i'm not interested in terrorism". hurr durr, you never know what things are really about.
mod6: Honestly, I loved the homework for ffa_calc. That was awesome.
mod6: I think so too, I took a peek at it. I'm actually excited that you put homework problems in there. And I'll do 'em for sure.
asciilifeform: mod6: i have a feeling you'll love the ch8 homework.
mod6: yes. I'm starting to love ada, at least, syntactically. The way you've used it, is very straight forward -- at least once one understands how array access / slices work.
asciilifeform: the other fortunate bit, at least re ffa, is that it is not complicated from the ada pov
mod6: I'm gonna get this vtron stuff out of the way, then dive in. I should be able to make it through the first 3 chapters pretty easily. I even wrote my own unit tests for those parts.
asciilifeform: mod6: aha, you were among the earliest iirc to get on that ship
mod6: Thankfully I put the time in.
mod6: The good news is, I started really digging into ada and your sneak-previews early last year.
mod6: <+asciilifeform> mod6: i dun particularly disagree with any of this, but the pov that 'vetting ffa' is a 1time thing, that can be done and then 'is done', imho is mistake : each user must read it ~himself~. << I basically just mean for me & ben.
mircea_popescu: yes, they must, but not with a view to validate theory of evolution ; with a view to expunge head cockroaches
mircea_popescu: asciilifeform sorta like "Each user must read darwin theory for himself"
asciilifeform: ( forever, that is, not for individual user, but for the sequence of n00bz )
asciilifeform: mod6: i dun particularly disagree with any of this, but the pov that 'vetting ffa' is a 1time thing, that can be done and then 'is done', imho is mistake : each user must read it ~himself~.
mod6: I'd like to see the Republic continue to expand the number of trb nodes we have available this year. There are activities currently afoot that immensly support that. Getting FFA vetted and used as a base lib really will help get the ball rolling for any proposed trbi.
mod6: we'll get there.
mod6: you read the code.
mod6: asciilifeform: by that i mean, 'you should choose your own adventure' -- each man pulls in the vpatches he desires.
mod6: However, until n00bs get into the fold with what 'V' is, they kinda need just 1 stable thing to build with a 1-button-push. Which means folding things in slowly.
mod6: Some of this is my fault, I've been trying to keep up here. Getting kinda swampped with a bunch of things at once. But! These are all good things. FFA, eucrypt, ada, vtron stuff, et. al.
asciilifeform: mod6: currently, and quite fortunately, there ~is~ a foundation, with releases .
asciilifeform: mod6: this was in response to a hypothetical 'but why do we even need releases' , not re current trb www
mod6: <+asciilifeform> n00b wants to run trb. which trb will he run ? << n00b runs what is available at thebitcoin.foundation -- there are some recent vpatches that will become mainline once I can get all of the things vetted more closely.
mircea_popescu: jesus what a juggernaut this guy is. YO! that's not the sentiment.
mod6: nothing personal. i feel like the foundation is a good thing ; maintaining all of the things re: trb.
mircea_popescu: the issue is not "what is basic", but "you are too harsh" / "am not"
mod6: <+mircea_popescu> http://btcbase.org/log/2018-01-25#1776346 << i suspect his idea is "ideally, nothing". in any case foundation has not managed to keep up with the rest of the pie despite periodic prodding. << hmm. well whatever it is we do, I spend a lot of time doing it. happy to shut it down if it's not needed any more.
asciilifeform: dunno that there is any straight way to settle 'what is basic' . but rough measures of most-famous-products at company one supposedly worked at, is not imho 'cruel & unusual' puzzle
mircea_popescu: there's no argument as to that.
mircea_popescu: i don't think the fellow took your meaning.
asciilifeform: trinque start the clock whydontcha
asciilifeform: or , how about , NoSatoshisHear , you worked at intel yes ? in what chemistry was the i386 fabbed ? and roughly how many transistors on the die , to the nearest hundred thousand ?
asciilifeform: hey NoSatoshisHear -- you say you read the ffa series ? in what order of complexity does modular exponentiation run ?
trinque will show his mother
trinque: oh, do we get an upvote then?
NoSatoshisHear: Just find the pseudo named people to be fun, and I am looking for fun. That and code fun. You have provided both.
NoSatoshisHear: exactly. I don't have any idea. Yup, looked up lots of folx with real names. Not like I hide much either.
trinque: NoSatoshisHear: plenty of folks here with their actual names.
mircea_popescu: eh, they've no fucking idea. but anyway.
NoSatoshisHear: John Does down the stack... Pseudonymity is the way to go, don't hide, drown in excess data... Lol, go for it Palantir
NoSatoshisHear: There is a Romanian named Mircea Popescu that is registered with the IEEE... You are not him, correct? https://ias.ieee.org/images/files/CMD/2014/mircea%20popescu.pdf
mircea_popescu: oh lol. they summoned up an imperial-flavoured alt-mp. has ~nothing to do with anything, and no other claim to fame besides "hey, we can pretend THIS is relevant".
mircea_popescu: the who ?
NoSatoshisHear: So, come on, how many BC do you really have? Not like you could ever answer, but you are really not Satoshi, and really are the Romanian guy I looked up under IEEE?
NoSatoshisHear: Damn, I so want to tether, but I have morals unfortunately.
NoSatoshisHear: Would be even better if "hacked" in the end?
NoSatoshisHear: shitcoin nonsense combined with the current addicted gamblers might be a fun public spectacle.
mircea_popescu: the problems arise from imperfection.
mircea_popescu: yes, but a perfectly dumb item is as respectable as the perfect woman.
NoSatoshisHear: centralized system, so one server counts the ticks, it would simply be a demo of reddit "the button" style idiocy combined with gambling. Sounds viral, like the 1918 flu.
mircea_popescu: there's no intrinsic reason to close the auction ; if you solve this you may have something.
mircea_popescu: honestly your coin idea isn't even bad, in theory. in practice it has a fundamental flaw. you see, bitcoin acts AS A CLOCK. this is its principal function. your thing has no clock.
a111: Logged on 2018-01-25 22:43 mircea_popescu: http://btcbase.org/log/2018-01-25#1776346 << i suspect his idea is "ideally, nothing". in any case foundation has not managed to keep up with the rest of the pie despite periodic prodding.
ben_vulpes: http://btcbase.org/log/2018-01-25#1776478 << in the "journal of negative results", china thing went ~nowhere, i had some 6-7 notional meatsacks try to use irc, one managed to reg a key and then fell off the map; now waiting for bisp to come online to host on republican terms
mircea_popescu: hanbot hey, make a mp-wp install for the young'un ? i've a mind to publicly expose her.
NoSatoshisHear: and almost a dollar auction, auctioneer gets nothing, puts up the initial $100, gets lot of lulz if the crowd ever starts trying to win on the money rake game. Demos of economics are just plain w00ty tooty fun times.
a111: Logged on 2018-01-25 21:19 NoSatoshisHear: so, I may make a fun shitcoin for lulz. I like the hellcoin idea. The block gets awarded to the last 10 suckers^h^h^h^h^h miners that put a "realcoin" into the chain. We start at $100 and let people "mine" with coins, last 10 when the timer ticks down get the block.
a111: Logged on 2018-01-25 21:16 NoSatoshisHear: Read the all, love to read. Trilema leads out to all of you guys stuff, all 1% great stuff, and 99% personal wanglings.
mircea_popescu: http://btcbase.org/log/2018-01-25#1776422 << for the obvious reason, became obvious ship is slowly sinking and rudderless in any case, time to move on. eh!
a111: Logged on 2018-01-25 21:38 trinque: caaddr: your connection through tor is going to end up irritating folks if the join/part gets too noisy.
mircea_popescu: then again growth is hard.
mircea_popescu: http://btcbase.org/log/2018-01-25#1776346 << i suspect his idea is "ideally, nothing". in any case foundation has not managed to keep up with the rest of the pie despite periodic prodding.
lobbes: In other heathendom lulz, local conservative radio stations in my area have begun airing ads: "Bobface from Alabama made $7 million cashing out on 'crypto stocks'. You can too! Buy this b00k to learn what you need to know to get in on it"
trinque: caaddr: your connection through tor is going to end up irritating folks if the join/part gets too noisy.
NoSatoshisHear: W00t! learned a lot from TRB, so thx to all of you maintainers! Will not make a V prolly though. Still learning lightning, now with "onion routing". HODL on, and buy my tethers plz.
NoSatoshisHear: so, will be back later with a verifiable ID instead of this anon lunacy, thx for the lulz and info in the meantime.
NoSatoshisHear: I worked on digital coin in 2001, but tried to find a non-net solution, and finally just gave up. When you head the wrong way, you don't get there. Still feel stupid for not buying in at $5, but I had no interest in Silk Road.
NoSatoshisHear: still wonder if I mean Satoshi at one of the parties with Tim May and James A Donald and some of the other early coiners. I was surprised to find peeps I hung with in SF...
NoSatoshisHear: yes, will do a real ID, just flaming some crap right now. I have my main server back for repairs, so when it comes home I will do the do.
NoSatoshisHear: it would not be a coin, but a gambling experiment. Either no one would play, or lots would and the game could never end.
NoSatoshisHear: the world has a lot of idiots, like me.
NoSatoshisHear: yes, it's just like reddits "the button", only with money. Would be serious lulz, and only an idiot would play.
NoSatoshisHear: try and even get the hdmi spec, I'm still looking for a "dumped" version. Love the ethernet spec they built in...
asciilifeform: sounds like a rather tedious fiatola casino
NoSatoshisHear: You start with $100 in the pool, the "miners" contribute any amount of BC or other "valid" coin to bid. It goes in the pool, and the timer resets. If it times out, the last 10 get the block award.
asciilifeform: like the hdmi people did
asciilifeform: NoSatoshisHear: keys leaking also not so exciting, they can simply swap out the key in next chip rev
NoSatoshisHear: 30 minute timout shite, though I did see the key may have leaked and someone had an uploader.
asciilifeform: what's it mean to 'put a realcoin into the chain'
asciilifeform: which is why i do not see the various diy attempts to disable the particular ME, as interesting in any way
NoSatoshisHear: so, I may make a fun shitcoin for lulz. I like the hellcoin idea. The block gets awarded to the last 10 suckers^h^h^h^h^h miners that put a "realcoin" into the chain. We start at $100 and let people "mine" with coins, last 10 when the timer ticks down get the block.
asciilifeform: imho the interesting aspect of the intel fritzchip is not that it is there, but that an unknown and unknowable number of items with equivalent functionality also there.
NoSatoshisHear: Read the all, love to read. Trilema leads out to all of you guys stuff, all 1% great stuff, and 99% personal wanglings.
asciilifeform: have you been reading the logs, NoSatoshisHear ?
NoSatoshisHear: then they put the bastard in everything, moved from NB to CPU, and you know the rest...
NoSatoshisHear: yup, every engineer who heard of the system hated it, and the vp++ loved the idea, gave control to corporate overlords of your work machine.
NoSatoshisHear: I worked on ICH7 and ICH8, fugging bugs out the ass in ICH7...
asciilifeform: this wasn't an engineer decision, but board 'decision' ( in the sense that if board tried to decide 'no', intel would have simply been given a new board )
NoSatoshisHear: yup... that is it. Started in 2004, was designed to access memory, drive, and ethernet while main cpu was asleep...
asciilifeform: is this the turd that turned into ME ?
NoSatoshisHear: I'll be damned if they didn't put that bastard into my sacred north bridge! The intel management engine...
NoSatoshisHear: was pretty cool getting to be in the architect meeting. They introduced the FU chip in 2004 as a seperate processor. I so voted it down. It sounded like a spy chip and it was.
asciilifeform: (which in turn inherited from ancient ibm monopoly, so altogether century+ old)
NoSatoshisHear: left, was not happy with the system, thought it was not conducive to making new wares, but great for maintaining older established platforms.
NoSatoshisHear: you get a percent of the profit every quarter, I started at 25% of salary, and got a 10% bump at 1 year, some 20 year+ doods have 2000% multipliers.
NoSatoshisHear: I have, came last summer, fugged around, left with a copy of trb to play with, will make a real name and gpg id in the near future....
NoSatoshisHear: ya, i'm an idiot. thx for the !up
asciilifeform recently on yet another kick of 'what do re hashing' , if nobody guessed
asciilifeform: and for thread-completeness i gotta point out that 'Until the day Bitcoin mining uses up 50%+1 of all electricity generated on planet Earth, this theoretical avenue remains open, if very theoretical' isn't necessarily guaranteed : there always remains ( because Hashing Is Voodoo (tm) ! ) the possibility of discovering shortcut to the mining process ( we had the 'satcoin' thread; possibly other variations on the theme also )
mircea_popescu: you can sorta guess when exactly the "strong independent woman" will start bawing like a little girl on the basis of the displayed priors.
asciilifeform: mircea_popescu: the only obvious problem with 'oppenheimer' hypothesis is that shitoshi iirc walked away ~prior~ to bitcoin 'chain reaction'
mircea_popescu: asciilifeform i am well persuaded http://trilema.com/2014/the-woes-of-altcoin-or-why-there-is-no-such-thing-as-cryptocurrencies/#footnote_2_56073 was actually satoshi's nobel/oppenheimer moment. "o noes, this is bad because i have not the balls to live!"
mod6: <+asciilifeform> to me it looks completely indefensible. <+asciilifeform> WHY should boot time be special ? << aha, to me your change there seems like the Right Thing
mircea_popescu: the thought was that this runs for a coupla hours after hours on uni computer
diana_coman: asciilifeform, no "advocate", more like explain: probably the thought was that after it starts it remains (magically!) always at the top
asciilifeform: btw i'm still waiting for anybody to try to defend the original shitoshi sync behaviour, somehow
mod6: so im fairly confident to get it resolved here with a simple email. will report back one way or another.
asciilifeform: but the up/down sides of this method are i think obvious
mod6: for instance, i have a R610 running with ssd, and when doing eatblock (sucking in all the blocks cut up via cutblk), I can process like 15k-20k blocks per day. more importantly, the IO timings are WAAAAAY lower.
asciilifeform: btw i'll mention again a simple method to speed up sync (to a point) 1,000x or moar -- signed hashes ( a la the programmable checkpoint thread from 2yrs ago )
asciilifeform: ( dulap had ~ok trb performance on spinning rust, but it had striped raid . and STILL couldn't keep up with ssd zoolag, despite the latter being a box the size of my fist, with no raid, on residential fiber )
asciilifeform: i.e. screamingly short of the system requirements
mod6: My node got with 140 blocks, then promptly fell back behind about 400-500. but this is caused by my dedicated node running on spinning rust it appears. when i get a moment, I'm gonna call the DC and see if they'll throw in an ssd in there for me. that should cure it.
mod6: <+asciilifeform> ( iirc mod6 also has a node with it, runs smoothly, talk with him. possibly ben_vulpes also ) << this in ref to >> http://therealbitcoin.org/ml/btc-dev/2017-December/000281.html ?
mircea_popescu: 2 was not actually stated by anyone, i'm just saying for the record.
a111: Logged on 2018-01-25 19:12 ben_vulpes: suresure. what even means "a release" though, in a world where each patch now touches the changelog file. that eg ben_vulpes produces a patch that *only* touches the changelog, saying "the foundation makes of this link in the chain a checkpoint"?
trinque: a C++ program is not reducible to particular files sliced out of it. it's the whole, and the filesystem state is a lie.
mircea_popescu: 1. the idea to have "changelog only" patches as a signature device is a major departure from how v worked previously, it semanticizes an item that we only recently even introduced ; 2. the idea to have patches that are deliberately non-compliant so "they won't be mainline" is a solution to what i thought an inexistend problem -- why not maintain special "experumental" keys for the purpose instead, l;ike sane people ?
ben_vulpes: makes for a neat delineation between patches baked in an angry stew and those selfsame patches read in the cold light of morning and possibly even reground by others as "this works, and i propose it for inclusion in the trunk"
trinque: experimental patches meanwhile wouldn't, and the operator is invited to regrind the experimental item into a patch which edits changelog, if it's graduating out of "experimental"
trinque: editing the changelog, "mainline" would not ever have multiple leafs, aside intentional forks
mircea_popescu: i suppose the idea here is to turn this into a semantic device ?
ben_vulpes: that the world promises to deliver me a regrinding nightmare out of stitching together ten patches that all descend from the release patch
ben_vulpes: i'd rather have people chose which node on which to base their patches themselves, based on their own judgement of the quality of the priors, otherwise there's a new axis of promisetronix in play
ben_vulpes: suresure. what even means "a release" though, in a world where each patch now touches the changelog file. that eg ben_vulpes produces a patch that *only* touches the changelog, saying "the foundation makes of this link in the chain a checkpoint"?
trinque: ben_vulpes: macroexpand my statement to "I am not adding maintaining my own wad of chosen experimental patches, regrinding them each time there is a mainline release"
ben_vulpes: more of a tumor hanging off the infant's face, but yeah
asciilifeform: ben_vulpes: there is such a thing as ' ben_vulpes & mod6 Troo Release ' !
ben_vulpes: given the evolution of 'v', and that the act of pressing is a private, intimate one, does "current trb's behavior" make much sense anymore?
asciilifeform: for which there can be NO justification.
asciilifeform: the 'boot time is SPESHUL' is an idjit winblowzism