signpost[asciilifeform]: those tuned in should check their php-serving boxes in light of today's RCEs dating back to 2004
signpost[asciilifeform]: in related news, I am working on making my pest node (tempest) available as vpatches. it is *not* hand-spun tmsr-ist C; it's claudism. with that said, I have separated the thing into a black node and red node, and the black node has two implementations, software, and something that runs on a butterstick.
signpost[asciilifeform]: the thing is a USB NIC that lets only properly decrypted red packets arrive at the machine behind it.
signpost[asciilifeform]: seems like such a thing needs to exist.
signpost[asciilifeform]: (and of course, lets only properly encrypted black packets leave)
asciilifeform: signpost: will defo read
asciilifeform: re: php clusterfuck: asciilifeform for 20y nao searched for a usable replacement for that pile o'shit, and still all earz for practical ideas.
asciilifeform: (inb4 'static html' -- plz no)
asciilifeform: phpism is imho pretty much morally dead, even before all the installs get 0d'd and start hosting cock elongator sp4m this week. asciilifeform turned off comments a while back, the llmtrons solved the comment rebus 2+y ago
asciilifeform: if anyone has ideas re: a pill for this, that don't reduce to 'whack-a-mole' -- plz speak up.
signpost[asciilifeform]: nfi, hence focus on getting at least some of my machines behind a pestronic membrane
signpost[asciilifeform]: a friend's grandfather's line: "nature extends a lot of credit but never forgets to send the bill". seems like it's here for open-sores.
asciilifeform: buttoning up ssh etc is well an'good, but oughta be possib to host a public www, shouldn't require a cyclophasotron lol
signpost[asciilifeform]: should! and edible food at the grocery store also
asciilifeform plugs in spiritism board & summons mp, 'if enemy wanted to get people to wall themselves up in bunkers with only sisters to fuck, they're succeeding'
signpost[asciilifeform]: looks very much like an intentional op against having a public internet
asciilifeform: arguably last 20y was this 'op', lel
asciilifeform: anyways the pill here is signpost's luby widget. /me recently fed the problem of 'possible to authenticate broadcast luby packets one at a time?' to industrial llmtron, and...
asciilifeform: ... best it was able to cough up was rabin-williams. cheap verify, $bitness-times moar expensive per packet to sign
asciilifeform: i.e. needs ~8fold bag o'packets, pre-genned, coupla ~hrs per GB, approx
asciilifeform: the 'verification turd' (i.e. equiv. of bittorrent's magnet link) for subj would be, minimally: 1) the rw pubkey (use 1ce) 2) hash of final payload.
asciilifeform: under this, luby, or turbo, or whatever rateless coad.
asciilifeform: ^ not earth-shaking discovery. simulated the bare bones scheme w/ the bot, demonstrated (no prizes for guessing) e.g. ec crypto very certainly too slow to keep up at any reasonable line rate (just as asciilifeform said when folx were chewing on what turned into pest)
asciilifeform: e.g. typical 1core arm can, just barely, verify 2048bit rw at line rt, if sewed in asm
asciilifeform: (fughet about encoding anywhere near line rt tho)
signpost[asciilifeform]: I had to be cooking on multiple cores on a ryzen 7 to approach gigabit streams with occ.
asciilifeform: occ ?
signpost[asciilifeform]: online-codes c, my lib that implements the maymounkov algo
asciilifeform: aa
signpost[asciilifeform]: encoders can all piss independently; decoders have to coordinate to not trip over one another as they peel the payload together.
asciilifeform was stabbing at the problem in the general case, i.e. where all packets (w/ exception of the pubkey + finalhash) are idempotent, i.e. there is no 'carousel wait' as there would be with a merkle tree scheme
asciilifeform: the notion being that you can give someone a small turd that can then be used to piece a payload outta certain number of packets, recv'd in any order, and there's 0 possib of bt-style poisoning
asciilifeform: (naturally 'public' broadcast packets, if there's actual link security a la pest, ~0 of this is needed)