Hide Idle (>14 d.) Chans
← 2020-02-12 | 2020-02-14 → ↓
asciilifeform: curiousd0g: originally 'v' was a ~400ln. program, the vtrons folx use today are slightly more complicated. but basic knobs are same.
shinohai: Once you try "V", gotta say you get hooked pretty quick.
asciilifeform: curiousd0g: the basic diffs vs versionatrons you may have used in the past, are 1) no net access. no servers, clients. 2) no state. the only inputs are the patches, pgp keys of signers, and the signatures. 3) all history represented by pgp-signed patches. 4) no 'merging' permitted.
curiousd0g: do you need a bitcoin daemon running in order to use it?
asciilifeform: for my orig. version, all you need is 1) python 2.x 2) gnupg
asciilifeform: for mod6's variant, perl
curiousd0g: awesome
asciilifeform: works fine on a box w/out network card.
asciilifeform: curiousd0g: a v tree can in fact be used 'by hand', by patch -p0 < patch1 ; patch -p0 < patch2 ... etc
asciilifeform: generally you don't want this, because would have to determine ordering also by hand (and verify sigs). but can.
asciilifeform: this is how people bring up a vtron on a box w/out 'v'
curiousd0g: what is the cmu scandal?
snsabot: Logged on 2020-02-12 23:46:38 asciilifeform: curiousd0g: tor incidentally is a proven honeypot .
curiousd0g: oh, sorry, now i see
asciilifeform: curiousd0g: cmu developed a complete kit for fbi for unmasking tor users whenever needed, and this was used to nail various 'secret market' folx; while at same time kept out of the trials
asciilifeform: ( if it were brought into trials, cmu would be forced to explain how it worked. but instead fbi concocted various fictional 'parallel constructions' (actual usa legalistic term) re how supposedly dpr posted under his human name, etc )
curiousd0g: "Under these circumstances Tor users clearly lack a reasonable
curiousd0g: expectation of privacy in their IP addresses while using the Tor network. In other words,
curiousd0g: they are taking a significant gamble on any real expectation of privacy under these
curiousd0g: circumstances."
asciilifeform: curiousd0g: 'tor' is a joke on several levels. incl. but not limited to the use of ssl (which is ~100% transparent to usg in all cases.)
curiousd0g: how is it 100% transparent when my keys are generated in my machine?
curiousd0g: and they never leave it?
asciilifeform: curiousd0g: the whole 'pki' scheme relies on central authorities. which happily issue signed certs to officials.
curiousd0g: oh yes, that i know
asciilifeform: curiousd0g: it's the ~other fella's~ keys that get freely substituted by 'man in middle'
curiousd0g: but then it's not all the traffic 100% transparent, only targeted individuals
asciilifeform: the 'targeted' set can be as small or large as they want.
curiousd0g: the operation would be noticed
asciilifeform: long ago noticed. by plenty of people (see links.) simply not noticed by the poor chumps who thought 'tor'ism would keep'em out of usa jails.
asciilifeform: (notice, ~100% of the high-profile 'tor will keep me outta jail' folx, are in nao )
curiousd0g: "you don't understand how it works, i do"
curiousd0g: tor npc's
asciilifeform: this, + the fact that 'tor society' is funded 100% by usg from day 1, oughta be enuff argument, even for a non-technical person who has nfi re the internal mechanisms
asciilifeform: yet various folx who oughta know better -- still using. this is a process powered by wishful thinking.
asciilifeform: they want 'something like tor' to exist, and convince selves that there's it.
asciilifeform: ( in fact nothing 'like what the users think tor is' can exist on the current net, traffic analysis on backbone suffices to find at least in what dc a 'hidden' box lives. after which they search the dc. )
asciilifeform: normally even this is unnecessary, victim is instead lured to visit a www where browser 0day
curiousd0g: tagged as "vulnerabilities"
asciilifeform: curiousd0g: do you know what '0day' means ?
curiousd0g: but i mean, that link doesn't make sense, it doesn't describe any "vulnerability"
asciilifeform: then you know that it means ~unpublished~ vuln.
curiousd0g: tor does protect you against canvas fingerprinting
asciilifeform: the link is discussing a long-known vuln, where under certain browsers a js can capture a screenshot of entire screen.
curiousd0g: privacy.resistFingerprinting: true
curiousd0g: in about:config
curiousd0g: problem solved
asciilifeform: whereas for ~any given browser, at ~any given time, there are unpublished vulns that let author of visited www run arbitrary code on yer box.
asciilifeform: typically (but not always) via bug in js interpreter.
curiousd0g: jit typically
asciilifeform: curiousd0g: so then you know.
asciilifeform not pedant to be insulting, but because knows ~0 re curiousd0g . for all i know curiousd0g was bulldozerist until last month and only then bought pc.
curiousd0g: i'm not finding references to large scale ssl tampering
asciilifeform: curiousd0g: you'll find re third world plenty of examples. but of course none re e.g. usa in open press, for obv. reasons
curiousd0g: oh, that was well known
curiousd0g: the kazakhstan thing
asciilifeform: 18mil people in kazah. not 'large scale' enuff ?
asciilifeform: china also diddles ssl openly.
curiousd0g: i agree it's large scale, but it was only kazakhstan
curiousd0g: oh, china, hehe, china china
asciilifeform: usa similar, but you won't read about it in 'new york times', obv., instead will read, from inside jail, re how you supposedly slipped by signing with real name on stackoverflow (as e.g. dpr)
asciilifeform: ssl was specifically designed to make this process maximally simple.
asciilifeform: which is why usg-controlled orgs (google et al) are aggressively pushing it .
shinohai: Let's Encrypt! (tm)
asciilifeform: the purpose of e.g. ssl is to drive n00bz away from actual crypto.
curiousd0g: ah, but i'm working on a solution, don't worry
asciilifeform: curiousd0g: i thought you weren't a programmer ? or am i mistaken
curiousd0g: not the best programmer
curiousd0g: not as good as you, that for sure
asciilifeform: curiousd0g: generally if you're new to something, will want to start w/ things that don't get people killed if you make mistake
curiousd0g: hmmm, yeah
asciilifeform: i , for instance , like 'flight sims', but if tonight i buy a plane, i doubt you'd want to get into it
curiousd0g: gonna finish reading it after a meal, later guys
asciilifeform: laters.
asciilifeform invites all other lurkers to de-lurk. i have www serv log on a wall in realtime, i knew yer there !11
asciilifeform: e.g. the argentina fella, who's been going for 1y+
curiousd0g: isn't mircea in ar?
asciilifeform: nope, he moved years ago
shrysr: hez prolly in the air you breathe https://bitcointalk.org/index.php?topic=271711.0
asciilifeform: wb shrysr btw. what've you been up to ? ( other than reading old mp ? )
curiousd0g: shrysr: thanks, i'm a converted now
asciilifeform: shrysr: ftr that piece was 100% correct when was written ( i.e. immediately prior to mtgox bubble popping )
curiousd0g: in contrast, any goddamn idiot can call
curiousd0g: himself a programmer.
asciilifeform: shrysr: at the time, a great many folx were buying who had 0 business doing so ( e.g. borrowed megatonnes of $ , on gigantic interest, to do so . many of these ate their pistols. )
curiousd0g: "in contrast, any goddamn idiot can call himself a programmer"
curiousd0g: well... that's not the problem. the problem is that they call themselves programmers and they are still hired
asciilifeform: curiousd0g: ever had occasion to try to hire a programmer ?
curiousd0g: yes, it was painful
asciilifeform: good % of folx who show up, can't 'hello world'
asciilifeform: afaik this doesn't even vary much by country
shrysr: hey asciilifeform, same old. job hunt and skill-up etc ... making progress i think, but its a goddamn frustrating process.
asciilifeform: e.g. diplomas, make 0 diff ( very often fella shows up with a++ diploma -- bought, perhaps -- and still no 'helloworld' )
asciilifeform: shrysr: still in canada ?
curiousd0g: correct! once i spent one hour watching (teamviewer or something like that) a self-proclaimed programmer (cs student) trying to write a simple piece of code in python, google allowed, the internet at his disposal ...
shrysr: asciilifeform: yes
asciilifeform: curiousd0g: at one point i had fella with master diploma and perfect marks walk in. 'computer engineering'. couldn't helloworld.
curiousd0g: the most interesting part is that their bosses can't either, that's how they get hired
shrysr: curiousd0g: ".... still hired" - problem extends beyond programming world.
asciilifeform: the bosses generally aint hired to program
curiousd0g: how can an lawyer be in charge of an orchestra?
curiousd0g: you need to know how to play drums at the very least
asciilifeform: very easily, if the orchestra doesn't in fact need to play
shrysr: :D
asciilifeform: if all it needs to do is to avoid legal liability...
asciilifeform: laugh, but this is accurate portrait of 'corporate usa'
curiousd0g: XD "we never said our performance wouldn't make dogs cry!, you still owe us, pay or else..."
asciilifeform: curiousd0g: i'ma bbl tomorrow. meanwhile i rec to read at least the 'v' intro, you will 100% need to understand v if you're interested in experimenting w/ trb .
snsabot: Logged on 2020-02-12 23:54:28 asciilifeform: ( 'v' is described here , by ben, who vanished, but his www remains )
asciilifeform: curiousd0g: if you end up puzzled, feel free to leave q's here, i'ma answer'em when i read the log.
asciilifeform: ( the log is yer friend -- lets you interact w/ people w/out having to be awake at same time. and to see what has been said re a subj prior. make use of search box on www. )
curiousd0g: thanks a lot
feedbot: http://thetarpit.org/2020/nu-te-mai-preocupa-esti-vai-de-mortii-tai << The Tar Pit -- Linguistic ruminations on the connection between dead relatives and how "the people" aren't worth two shits; and other urban subcultural considerations
asciilifeform: !q uptime
snsabot: asciilifeform: time since my last reconnect : 1d 18h 19m
mod6: Hi there asciilifeform, wanted to just touch on something in your whogaveblox. (In fact, I think I ~may~ have asked the same question before, but can't remember or find.)
asciilifeform: mod6: aha?
mod6: I'm referencing lines 19 through 23, the conditional block upon 'pfrom'.
mod6: It seems to me that we may want to be a bit more explicit here as the assumption is made that if pfrom isn't null, then we can get an IP, otherwise "LOCAL".
asciilifeform: mod6: not sure i understand? what to make more explicit ?
mod6: I tried to follow around through the code, it seems like CNode gets created upon external message to the node itself.
mod6: basically, could be something like this:
asciilifeform: mod6: the conditional is to handle the 'eatblock' case
mod6: if (pfrom->addr != null && !pfrom->addr.IsLocal()) { peer_ip = pfrom->addr.ToStringIP(); } else { peer_ip = "LOCAL"; }
asciilifeform: mod6: see here re why null there
mod6: for eatblock, ofc.
mod6 looks at link.
asciilifeform: mod6: your version will bomb. cuz if it's a null, then you can't ->addr...
asciilifeform: or hrm i'm still thinking in ada mode, it won't bomb, b/c short-circuit eval
asciilifeform: but still bad form
mod6: err. hmm. let me think on this.
asciilifeform: prior to the 'eatblock' patch, pfrom was never null
asciilifeform: but 'eatblock' introduces possibility of blocks that did not originate from net
asciilifeform: hence the conditional.
asciilifeform: fwiw i tested the 'who-gave' prior to publication.
mod6: yeah, i've been testing with it too. seems fine so far.
asciilifeform: mod6: if you want to regrind, may be clearer to replace the if (pfrom) ... w/ if (pfrom != NULL) ...
mod6: you're right too, my thing wouldn't work if pfrom is null, no such CAddress would exist.
asciilifeform: there are actually machines where NULL != 0
feedbot: http://qntra.net/2020/02/cocaine-refinery-found-back-home-on-the-farm-of-colombian-ambassador-to-uruguay/ << Qntra -- Cocaine Refinery Found Back Home On The Farm Of Colombian Ambassador To Uruguay
mod6: I think as it stands is fine. '!= NULL' is a bit more clear, but the meaning is the same, code wise.
asciilifeform: i rec to use this last form , for max clarity and portability.
mod6: But will change if you think it's better.
asciilifeform: it is, in principle.
asciilifeform: ty for the magnifying glass work, mod6
asciilifeform: ( on x86 you ought to expect to get same binary when building this as prev. )
mod6: Ugh, C. I'm with you though. ~ought~.
mod6: Alright, I think I'll just make that one small change then. from '(pfrom)' to '(pfrom != NULL)'.
asciilifeform: imho since this patch is destined to be reground, may as well massage it properly.
asciilifeform: i'ma test the variant you come up with.
mod6: Cool, I'll do that too ofc.
mod6: I may just have to sign them with my vpatch-testing key before final publication. Shouldn't take ~too~ long to get the testing done.
mod6: Ok, off I go to work on these a bit more. Will report back when ready for testing. Thanks for the conversation.
asciilifeform: mod6: didja ever share the test pub ?
asciilifeform: i'd like to add it to my set
mod6: I did, back a while ago. I don't think it exists anywhere handy at the moment, although, let me double check.
asciilifeform: and the sigs? (or none signed to date with this?)
mod6: None that matter any longer, no.
mod6: I've probably used it, figure, dozen times over the years to get things into people's Vtrons for press/building tests.
mod6: (iirc once upon a time, a WILD vpatch was acceptable, but then the rules changed and only signed vpatches were allowed to be placed in the 'flow'.)
mod6: Which is why, again iirc, why I created the key.
asciilifeform: i have several like this, but use only in-house
asciilifeform: ( at a certain point ran into problem sorting own spew, in '18 )
mod6: To all readers, nothing should be used in a 'battlefield' vtree that is signed with my vpatch-testing key (FP: 3ED0 6EF3 40C6 3F18 5EE5 AA06 8365 BB7F D2C0 2F12).
mod6: asciilifeform: werd, I use it as sparingly as possible. It's only intended for srs testing folks, where I'm also super reluctant to publish a yet ~experimental~ vpatch with my main key sig on there, lest it find it's way into someone's vtree thinking it's a "final approved" vpatch.
mod6: Hope this all makes sense. If not, say.
mod6: Ok, off to work on these. Will be back. Thx!
asciilifeform: np. ty mod6 .
mod6: yw!
shinohai: BingoBoingo: I could not resist sharing these lulz with you: http://btc.info.gf/paste/d92b23@raw
BingoBoingo: shinohai: tyvm
feedbot: http://qntra.net/2020/02/zookos-altcoin-to-fund-usg-honeypot-tor/ << Qntra -- Zooko's Altcoin To Fund USG Honeypot Tor
asciilifeform thought that this particular shitcoin was dead & buried in '17...
shinohai: nope they are still around, complete with tranny Shithub developer that gets triggered if you dont use its pronouns
curiousd0g: once i told him "hey mate, amazing job you did with..."
curiousd0g: he never talked to me again XD
curiousd0g: i guess "mate" was too masculine for his standards
Vexual: C dog is a nifty handle for international waters
Vexual: do you have HF radio on board curiousd0g?
curiousd0g: yes, internet speed is 64 kbps, blazing fast
Vexual ponders the possibility that cdog is actually @sea
← 2020-02-12 | 2020-02-14 → ↑
Random(asciilifeform) | Download hourly DB snapshot | Get Source Code