Hide Idle (>14 d.) Chans
← 2018-01-25 | 2018-01-27 → ↓
mod6: both vdiffs fail on this.
mod6: and it goes back to the same thing as with diana_coman. having two '++' at the front of the line. the way the vdiff is written, when it passes the diffed file off to awk to pattern match the ---|+++ it adds that '+' in the front, then it matches, causing it to call sha512sum.. which is where the false comes from. I think.
mircea_popescu: i expect.
deedbot: http://www.contravex.com/2018/01/26/the-g-word/ << Contravex: A blog by Pete Dushenski - The G-word.
douchebag: I managed to find two vulnerabilities in Yahoo last night, I highly suggest their bug bounty program for anyone who is interested in doing that sort of stuff.
mircea_popescu: how much do two vulnerabilities in yahoo pay ?
douchebag: Well, I still have to wait until they patch them before they reward the bounty. They pay based on likelyhood/impact, now a friend of mine reported a vulnerability less serious than the one I found and he was rewarded $2,000 total
douchebag: The other one I discovered, I would say probably somewhere between $200-$500
douchebag: However, even though I have to wait until they patch the bugs I found before they reward me, they did reward me $150 on triage and will be rewarding the rest at a later date
douchebag: You can read his blog here: http://www.sxcurity.pro/
mod6: i suppose we should be looking for: (--- |\+\+\+ ) instead of (---|\+\+\+)
mircea_popescu: hey, almost better than tits.
mircea_popescu: mod6 YES!
mircea_popescu: i kept sayin' this!
douchebag: A relatively well known bug bounty hunter I know has made $40k this month off of bug bounties, his goal is $50k for January
mircea_popescu: this is like re-reading old shoemoney drivel about google adsense successes. goals and whatnot.
douchebag: Haha, you do have to admit for the average person $40k in a little over 3 weeks is pretty damn good.
mircea_popescu: i certainly admit.
mircea_popescu: but you're not discussing an average person, you're discussing a selected person.
mircea_popescu: i know a girl that made $30 million with her ass ; and you must admit that for the average girl's ass this is indeed generous.
mircea_popescu: but her ass is not actually all that average.
douchebag: Oh yes, that's very true. However, I do know quite a few people who have been very successful with it
mircea_popescu: i know quite a few people whose iq is over 150. the internet is good at collecting similar things. sadly -- this does little for the intelligence of the race in general.
douchebag: Very true
douchebag: I suppose the point I'm trying to get across is that there is a pretty good community involved with bug bounties, I especially like the classic hacker additude of most of the people in the sense that they're all working together to learn more
douchebag: And how most people are more than willing to share the information they acquire through blogs and whatnot
douchebag: mircea_popescu: Who runs bpvulpes.com?
trinque: surely you can sleuth that one out.
douchebag: Ohh lol I'm retarded
douchebag: ben_vulpes: I found a vulnerability in your site, how would you like me to disclose it to you?
douchebag: It's not a major issue and an easy fix, however it could potentially allow someone to create fake logs
trinque: guy's probably away for the night. why don't you drop him a gpggram on his paste site, link him to it here
douchebag: Forsure
trinque: !!key ben_vulpes
douchebag: Are there any sites any of you guys would like me to check out? I'm a bit bored right now and I am always up for a challenge :-)
trinque: might help you more to do that reading I was talking about, and get a v-tron set up.
trinque off for the night as well
mircea_popescu: douchebag ben_vulpes
douchebag: Mhmmm I already got it, thanks anyway though
douchebag: mircea_popescu: any sites you want me to take a look at really quick?
mircea_popescu: wp-mp, basically, like last time.
douchebag: To make my job a little bit easier, could you tell me a little bit about mp-wp and how it differs from Wordpress?
a111: Logged on 2018-01-23 07:11 mircea_popescu: actually, hanbot is about to genesis mp-wp, you're more than welcome to help down with the paring down effort of that, if you want. mostly php.
mircea_popescu: it's a fork off 2.7 wp trunk iirc.
mircea_popescu: hanbot just published an unofficial genesis, so you can just fire up your v and press that
douchebag: Where can I find a copy of the source?
douchebag: mircea_popescu: I have discovered a vulnerability :-)
douchebag: How would you like me to disclose this?
mircea_popescu: by saying what it is lel
douchebag: Cross Site Scripting
mircea_popescu: but be specific
douchebag: Is it alright if I link you to a PoC of the vulnerability?
douchebag: Alright one moment
mircea_popescu: does that actually do something ?
douchebag: I was able to execute arbitrary Javascript on your site
douchebag: XSS can be used to steal cookies of logged in users which can then be used to jack their session.
mircea_popescu: but you can't log into trilema.
douchebag: So there is never a session stored on the site?
mircea_popescu: not afaik ; moreover, does an alert box actually pop up for you ?
mircea_popescu: odd, neither archive bot not this testbox firefox i have do it.
douchebag: Go there
douchebag: You'll see arbitrary html was added to the page
mircea_popescu: douchebag was this actually in mp-wp ?!
mircea_popescu: this is hysterical, apparently it works in newer (3x, 4x firefox) but not in older (2x say).
douchebag: It might be, I'm not sure at the moment if this was added with mp-wp or if it was uploaded to trilema.com's webhost a later date
douchebag: Oh yeah, javscript is great isn't it?
mircea_popescu: notreally.
douchebag: lol I was being sarcastic
mircea_popescu: anyway, i suppose "the message chosen was $" is just bad webcoding on my part.
mircea_popescu has ~0 experience with this, an' i guess it shows.
douchebag: Don't feel bad, XSS is one of the most common vulnerabilities that exists on the majority of websites
mircea_popescu: but this browsershots set is a comedy goldmine! apparently a good third of the failful firefox browsers ALSO are getting an "uptades" blabla popup
douchebag: hmm i wonder
douchebag: <script>alert`OHAI`</script>
douchebag: I wonder if any of the logs will pop an alert
mircea_popescu: apparently not
douchebag: mircea_popescu: So the bots in this channel for instance the one that will add your GPG key from a url you provide
douchebag: That actually can hold quite the potential of a vulnerability
douchebag: If it
douchebag: If it's returning page responses in any way, it could be used to access internal network addresses
mircea_popescu: go ahead and try it
douchebag: What are the commands that have that sort of functionality?
mircea_popescu: !!register ?
deedbot: 6160E1CAC8A3C52966FD76998A736F0E2FB7B452 is already registered as mircea_popescu.
douchebag: !!help
douchebag: ooh I have an idea
douchebag: 1sec
deedbot: douchebag subscription to https://my.mixtape.moe/kcoilr.xml failed
deedbot: douchebag subscription to https://my.mixtape.moe/spofpo.xml failed
mircea_popescu: you probably need a rss feed
douchebag: Well, since RSS is in XML format I was testing a popular vulnerability that occurs in XML parsers which uses external entities, allowing an attacker to exfiltrate data
mircea_popescu: not a bad idea.
douchebag: !!deed darrq98n7ienm1nx3uw36dvyqpwik7.burpcollaborator.net
deedbot: Bad URL or network outage.
deedbot: Bad URL or network outage.
mircea_popescu: douchebag it has to be signed
douchebag: !!deed gopher://darrq98n7ienm1nx3uw36dvyqpwik7.burpcollaborator.net:80/_TEST
deedbot: Bad URL or network outage.
douchebag: That would have been cool if it worked
douchebag: Honestly, I bet a lot of boxes could be popped just from messing around with IRC bots lol
mircea_popescu: you think ?
douchebag: oh definitely
mircea_popescu: well... go for it.
douchebag: Here's a fun fact,
douchebag: IF I were able to find a bot that essentially returned the content of that URL and it was hosted on Amazon AWS
douchebag: I could grab the AWS Instances API keys lol
douchebag: It's the simple things like that which can do that most damage
mircea_popescu: interesting.
douchebag: Hmm, I wonder
douchebag: !! key ' or '1'='1
douchebag: !!key ' or '1'='1
douchebag: !!key douchebag
douchebag: !!key douchebag'
deedbot: Not registered.
douchebag: !!key douchebag 1
douchebag: !!key douchebag|sleep(10)
deedbot: Not registered.
douchebag: !!key douchebag'|sleep(10)
deedbot: Not registered.
douchebag: !!key douchebag"|sleep(10)
deedbot: Not registered.
mircea_popescu: douchebag you can also do it in pm
douchebag: oh okay
mircea_popescu: !!up emmylark
deedbot: emmylark voiced for 30 minutes.
mircea_popescu: say hello to the group, slut.
emmylark: Hello sirs
emmylark: *and madames. don't wanna discriminate
mircea_popescu: emmylark so write 4b57ff75 on your tits ; and get your slit in the shot as well.
mircea_popescu: aww, for me ?!
mircea_popescu: aite lessee here...
mircea_popescu: emmylark congrats, you're now famous!
douchebag: Hell yeah
mircea_popescu: tell me... how does it feel... to be all nude... like a hm... like a rolling stone.
douchebag: congratz on being famous
emmylark: How did I do sir? Was it acceptable? I sent a second one just in case the first wasnt enough. I thought it might be nice to get to choose
mircea_popescu: quite acceptable, yes.
mircea_popescu: now put your public key in a paste and say !!register url
mircea_popescu: emmylark it's very nice to get to choose ; i choose to keep the second for my private collection of smutty selfies.
deedbot: Provide a paste URL to the ascii-armored GPG public key or the full 40 character key fingerprint without spaces or dashes.
deedbot: 3BC472963B76AEE0448C19F414DEC3397D761EA4 registered as emmylark.
emmylark: Fuck yeah!
mircea_popescu: emmylark did you ever register your name with freenode ?
mircea_popescu: say /msg nickserv register your_password your_email_address ; use a good password and an email you actually can read, they'll send you a verification thing. this way someone else can't steal your name.
emmylark: I'm talking to you through the Freenode server in my IRC client. It made me register a name and email.
mircea_popescu: !!rate emmylark 1 Slutty pixie bearing my protection collar.
mircea_popescu: !!pay emmylark 0.02
mircea_popescu: emmylark congrats on earning your first coupla bitcents!
emmylark: Wait are you serious? I did that for you sir.
douchebag: Will hack 4 BTC :-D
mircea_popescu: !!up emmylark
deedbot: emmylark voiced for 30 minutes.
mircea_popescu: i rated you, so now the bot will allow you to voice yourself. say /query deedbot and then !!up ; it will give you a thing to decrypt, give the result back to it as !!v <string>
douchebag: I just learned about AngularJS XSS attacks
douchebag: Pretty interesting stuff
shinohai: !~ticker --market all
jhvh1: shinohai: Bitstamp BTCUSD last: 10531.07, vol: 14129.46495924 | Bitfinex BTCUSD last: 10527.0, vol: 49688.74405499 | Kraken BTCUSD last: 10538.0, vol: 6394.72947932 | Volume-weighted last average: 10528.8208745
shinohai: Morning tmsr
mod6: mornin'
shinohai: Heya mod6
mod6: how goes?
asciilifeform: meanwhile, in heathendom, https://archive.is/rTmuG >> 'The first freight deal settled in Bitcoin was executed last month on a vessel carrying wheat from top shipper Russia to Turkey, according to Prime Shipping Foundation, the venture behind the transaction. ... The vessel used in Prime Shipping’s transaction carried 3,000 metric tons of wheat from Rostov-on-Don to Samsun. '
BingoBoingo: Awe, shit can only go up from wheat
mircea_popescu: but i thought they already had a perfect medium of exchange called the unified standard dosidoe!
mod6: :D
mircea_popescu: spyked all in.
mircea_popescu: wait, you like blue eyed girls now ?!
asciilifeform: for so long as upside down!111
mircea_popescu: in her case, that's the up side.
shinohai: Nice!
a111: Logged on 2018-01-26 08:59 douchebag: Well, since RSS is in XML format I was testing a popular vulnerability that occurs in XML parsers which uses external entities, allowing an attacker to exfiltrate data
a111: Logged on 2016-05-01 14:53 mircea_popescu: asciilifeform> mod6: the baked-in presumption of webtardism is almost insulting << it is insulting, not to us though. think about it : the crab has pincers because in its environment THAT WORKS ; and so does "GET /blog/blog-config.php~".
mircea_popescu: hey, he did find a trilema vulnerability...
lobbes: http://btcbase.org/log/2018-01-26#1776736 << you really should do the homework trinque pointed you to, but if you are done with that and bored again, plox to look at logs.minigame.bz, lobbesblog.com and lobbesbot? I'm a meganoob so you may find something. I've no shame, so disclose whatever you can find here. I'll toss a handful of satoshis your way if you do (and a wot rating)
a111: Logged on 2018-01-26 07:09 douchebag: Are there any sites any of you guys would like me to check out? I'm a bit bored right now and I am always up for a challenge :-)
lobbes: Most of the 'dynamic' bits of the www are php+sqlite3. lobbesbot is limnoria (fork of supybot, a common python bot api), also atop sqlite3
trinque appreciates the deedbot fuzzing. pretty damned sure all my inputs are quoted though.
mircea_popescu: indeed, but being surer never hurt anything.
trinque: naw, fuzz away
mircea_popescu: in fairness, kid's got me meditating about the nature of things ever since last night. see, the trouble is : in his syustem, he has actually found a vulnerability, as a factual matter. in my system this is entirely meaningless. why the difference ?
mircea_popescu: i suppose i should rate him.
mircea_popescu: !!rated douchebag
deedbot: mircea_popescu rated douchebag 1 at 2018/01/15 07:34:46 << hyde.solutions
mircea_popescu: ah, already did. go me.
mircea_popescu: and in other news, http://www.gutenberg.org/files/3178/3178-h/3178-h.htm << pretty decent yarn, mark twain's forgotten novel.
a111: Logged on 2015-08-13 19:00 phf: mats: well, i actually meant the opposite. classes of attacks can be eliminated by not using c. i think that majority of the attacks come from leaky abstractions. there's no <string> in c, but there's a null terminated memory region. there's no <sql> in perl, but there's a character array with sql text in it. one of the solutions is to plug abstraction holes on a level of the language, in such a way that you can't not use improved abstractions
mircea_popescu: asciilifeform there's two fundamental items i can readily identify, maybe more. 1. i actually did plop an echo $_GET in there. is this just bad coding ? is it a legitimate assumption ? 2. he has a point, as long as it's on trilema.com, a script has powers OUTSIDE of its implicit scope, "steal cookies" whatever. is this ~actually~ bad systems design ?
mircea_popescu: obviously quoted link's right ; other than the attacks croming from nsa ("enemy" aka idiot with vested interest in idiocy), they ALL come from leaky abstractions. both points above qualify.
asciilifeform: mircea_popescu: do you recall the case of http://btcbase.org/log/2016-08-01#1512390 ?
a111: Logged on 2016-08-01 19:48 asciilifeform: oh for fuckssake.
asciilifeform: the other way to think of it, is that for so long as you have a box that eats rubbish from randos, you have a mechanism for folx to host shitware to use against firefox-besotted js victims etc
asciilifeform: whether this matters -- is separate q
mircea_popescu: is this right ?
mircea_popescu: consider the celebrated lulz of (most recently) http://btcbase.org/log/2017-11-06#1733263 : none of those curls are sanitized. yet http://btcbase.org/log/2018-01-16#1771208 right ?
a111: Logged on 2017-11-06 19:27 deedbot: http://trilema.com/2017/how-the-beastforumcom-private-messaging-function-became-a-paid-user-only-item/ << Trilema - How the beastforum.com private messaging function became a paid-user-only item
a111: Logged on 2018-01-16 17:08 mircea_popescu: (also, let it be pointed out for the benefit of the future noob : the use of xargs with shit from curl is dancing with the wolves. finest way to lose a box.)
asciilifeform: let's picture the general case. the pgpkey xss thing did not 'fire' against phuctor viewers, because quoted. but did against wotpaste reader ( with 0 practical effect , but for the principle of the thing )
mircea_popescu: well which the fuck is it, and don't tell me "why mp! perl=bash=php=crap", it's not the point.
asciilifeform: but conceivably one day there will be an idjit browser that gives obama root on yer box when it sees string 'open sesame'. and what, errybody gotta know in advance to escape 'open sesame', lol ?
asciilifeform: the fundamental q is whether there is a diff b/w 'enabled js' and 'enabled opensesamism'
mircea_popescu: if i'm responsible for the above why am i not responsible for sending emmylark nude on a harley to luser's house to tear out intel ME out of his chip ?
asciilifeform: that's the idea.
mircea_popescu: as i said, sent me meditating on nature of things
mircea_popescu: but the "you enabled js, you're dead" position is untenable -- i use js for the selection thing. and i fucking need it
asciilifeform: it isn't , as it happens, particularly difficult to neuter js in pasteolade. but that's separate , imho, matter.
mircea_popescu: without the ability to link INSIDE my output $value would decrease sensibly. not a little. a lot.
asciilifeform: no i get.
asciilifeform: i use the feature also.
mircea_popescu: i honestly believe it's as big as the concept of link.
asciilifeform: it's a poor man's tednelsonlink
mircea_popescu: this triad : links, pingbacks, selection reference make up a whole NEW hypertext. just as far from the old as that was from text.
mircea_popescu: asciilifeform half of one, yes. needs the pingback to be full.
asciilifeform: well, ~wants~ to 'make new hypertext', really it's a sad emulation. but considerable improvement over nothingatall
mircea_popescu: i guess so, at that.
mircea_popescu: "poc" right.
asciilifeform: the interesting thing re js, is that entirely ~aside~ from traditional cmachine bugolade, it gets compiled c-cstyle nowadays, in popular graphical wwwbrowsers, ( how else to churn 50MB of google crapola ) and so e.g. rowhammerism works in it.
mircea_popescu: note the epic lulz of how the "vulnerability" doesn't even work until you gert to ff version 30.
mircea_popescu: there's a pile of browser captures linked in there yest.
asciilifeform: the xss thing ? aha
mircea_popescu: (because they didn't parse svg tags prior, not because "it doesn't work", he could have made it to work with plain script, so it's a separate issue, but quite germane)
mircea_popescu: imo a fabulous textbook example of how the imperial vulnerability cycle goes. 1. make a bad spec, a la SMGL ; 2. implement some portions of it only, because http://btcbase.org/log/2018-01-25#1776189 ; 3. discover the bad spec is vulnerable, issue "best practices" for people to "santize". obviously this will not be made by 1 if 2 wasn't, so... 4) implement slightly more of the spec, throw security in disarray.
a111: Logged on 2018-01-25 16:42 asciilifeform: i dun actually disagree with mircea_popescu : i never liked bigendianism . but it did come from a particular cost analysis , ftr.
mircea_popescu: this is EXACTLY how it goes, and perhaps why there has not yet existed such a thing as a fully implemented specification or a fully specified implementation in empire lands.
asciilifeform: the philosophical puzzler of 'what is a vuln' probably cannot be answered from strictly 1side pov. consider the ultimate degenerate case, microshit, who produces more vulns every day than mircea_popescu spermatozoids , but not 1 of them dings it in any substantial way ( and many in fact are a profit )
mircea_popescu: are you implying my sperm count is low ?
mircea_popescu: hey, i was looking for a pretext to get a test, so bbs.
asciilifeform: and the 'bad spec' thing is part of multilayered shit sandwich, the general principle is that complexicrud accretes; the overflows, etc. follow naturally ( with helping hand from kochs, dreppers, et al as necessary )
asciilifeform: mircea_popescu: lo, aaaah, but where will you get a microshit bugcount. the stars in the sky themselves not sufficient to count !11!
asciilifeform: re specs, whole thread ( e.g. http://btcbase.org/log/2016-08-01#1512423 ) re pgpkey worth a reread.
a111: Logged on 2016-08-01 20:03 phf: mircea_popescu: a lot of xss detection "solutions" rely on grepping for known bad input, like "script" or whatever. and there are ways to sidestep that, like '<scr' + 'ipt>' or a='ipt>';'<scr'+a. in this case whoever is fucking with detection by using this truly wtf feature i've never heard of, <meta charset="a">b</meta> that apparently parses b according to charset a rules
mircea_popescu: asciilifeform slavegirl tasted, says my sperm count's fine (and delicious). so NYAH!
asciilifeform: congrats
mircea_popescu: i suppose on contemplation the http://btcbase.org/log/2018-01-25#1776155 would be to fucking sign javascript and you know "hey, we've had v for a while, get with the program. why are you running unsigned nonsense".
a111: Logged on 2018-01-25 16:29 mircea_popescu: wait wait, i might have a pill
mircea_popescu: i guess ima actually do just that.
asciilifeform: gonna luvv the multi-second pageloads
asciilifeform: or wouldja cache it, or how
mircea_popescu: what's js comment style, # ?
asciilifeform: iirc c-style /* */
asciilifeform: but what'll that do if browser dun check the sig
asciilifeform: mircea_popescu: this is one of those items that really wants the rsa fpga
mircea_popescu: // motherfucker who comes up with this shit
asciilifeform waits for mircea_popescu to scream in 'joy' when he finds that not 1 attempt at any such pgpsig verifies, on account of newline mutilation in www stack
deedbot: accepted: 1
mircea_popescu: asciilifeform i didn't expect it'd work mechanically ; but there it is now.
mircea_popescu: in the future, it can be mecanicized.
asciilifeform: aa i see
mircea_popescu: i suppose the workings of this insane nut posse must be quite disconcerting to the professional. "i told this guy he had an xss hole in some file and he proceeded to sign an unrelated snippet of javascript".
asciilifeform: a flounder in epoxy , then.
mircea_popescu: but, take heart douchebag : there's not that many people your age that can say "hey, i sent mp to meditation room" ; and they're overwhelmingly female to boot.
mircea_popescu: asciilifeform admire the recursive gift : his "reputation in the community" doth indeed grow. what now.
asciilifeform: why is this a whatnow
asciilifeform: for any of us, i mean
mircea_popescu: well... didn't the problem appear misstated originally ?
asciilifeform: how's that? i dungetit
a111: Logged on 2018-01-23 19:52 phf: i can see the education angle, and how it fails these people, but what i'm surprised about is the lack of personal drive? it's some kind of learned helplessness
asciilifeform: sticking to wwwtardism stack is not a manifestation of learnedhelplessness ?
mircea_popescu: not if it works to deliver the results above ?
asciilifeform: i dun see a megaresult.
mircea_popescu: in entirely unrelated lulz : i recommend to the expert entomologist item #341 of the assembly of the state of new york, entered into record april 12, 1838 (a message from W L Marcy, the governor).
asciilifeform: got text ? or does one have to go to nyc and break into a museum to get it
mircea_popescu: at issue is the resumption of a redeemable currency in fact, through payments in specie, supported by new york alone and firmly opposed by our good friends in http://trilema.com/2018/the-principal-agent-problem-or-how-america-went-away/#footnote_9_77193 (ie, 2nd national bank and the wide array of western and southern banks dependent upon it. because guess who brought you slavery in the sense of financing it ? oh yeah, the re
mircea_popescu: formists!)
mircea_popescu: asciilifeform i got a hardbound copy. shall i have it transcribed ?
phf: !!key hanbot
asciilifeform: mircea_popescu: or even photo, if it's reasonably compact
asciilifeform: ( and lol, this has gotta be the 1st time i hear mircea_popescu refer to a hardcopy of sumthing..? )
mircea_popescu: not the first, but yes, rare.
mircea_popescu: ah, check it out, google has it. one moment.
ben_vulpes: douchebag: how does this allow a user to create fake logs?
a111: Logged on 2018-01-26 05:06 mod6: and it goes back to the same thing as with diana_coman. having two '++' at the front of the line. the way the vdiff is written, when it passes the diffed file off to awk to pattern match the ---|+++ it adds that '+' in the front, then it matches, causing it to call sha512sum.. which is where the false comes from. I think.
a111: Logged on 2016-12-11 20:15 mircea_popescu: +++7F0QaZAgBgF3/7448/fmnc/DnT29zJipI3ZCWnifqyfJH6/nRzUt7979al5JtwrACPLNjDb5Pc false <<< ahahaha epic!
jhvh1: asciilifeform: The operation succeeded.
asciilifeform: hey mircea_popescu : asciilifeform sat down and tried to make a 'and i'll give you a 1btc prize' puzzler for douchebag re 'break pehbot' . but how to phrase the condition of said puzzle, i am still at a loss, burned half hour nearly.
asciilifeform: specifically such that puzzler specifically rewards the breaking of the proggy, rather than the condition.
asciilifeform: or is this a perpetuum mobile.
mircea_popescu: i suspect this is what we are gazing upon in amazement : that slavegirl must ~love~, ie that there is no mechanical solution to the problem.
asciilifeform: thought so.
asciilifeform: mircea_popescu: entirely troo, there are no mechanical prostheses for love, loyalty, honour. the ancients -- knew this.
mircea_popescu: !#s flirty fishing
mircea_popescu: in vaguely related lulz : there existed a cult which had the girls prostitute themselves for membership. (apparently it was tried with boys too, but it didn't pay.) eventually they just listed them as proper whores with "escort agencies". apparently a total of >quarter million men were made to feel religious however briefly during a decade.
mircea_popescu: IN THE SEVENTIES.
BingoBoingo: AHA, the Family!
mircea_popescu: "Children of god" / aka varous
asciilifeform: i thought this was sop for meatcults
mircea_popescu: notrly afaik
asciilifeform: hm. gotta wonder then, wainot
mircea_popescu: because usually cults are build around a paranoid not a narcisiac
mircea_popescu: wants to fuck them himself, and what he can't fuck he kills.
asciilifeform: subj lit is so laden with desinfo that asciilifeform has genuinely nfi
asciilifeform: ( enemy has a very good idea of the efficacy of the mircea_popescu form of harem org , and tries to burn it down wherever and however the chance presents itself )
asciilifeform: recall few yrs back during 1st obummer term, for instance, when they set to work on the remaining ortho-mormons
mod6: the warren jefferies thing?
mircea_popescu: i dunno that any of those has anything to do with my harem tbh.
asciilifeform: mircea_popescu: only in so much as the mosquitoes in my backyard have to do with your skin
douchebag: 1BTC reward? I'm up for that challenge any day
mircea_popescu: well, no, i mean something like "just because it has cogs in it doesn't mean it's a clock, could be a car transmission"
asciilifeform: mircea_popescu: to carry the analogy, luddite dun care whether clock or orrery, thinks 'gears'
ben_vulpes: douchebag: how does what you found get leveraged into 'fake irc logs'?
asciilifeform: mircea_popescu: eggog
mircea_popescu: and yes ; but that doesn't make the luddite right in any meaningful sense
douchebag: Able to inject Javascript, such javascript could be used to create a link that leads to logs that appear real, however they're completely fake
mircea_popescu: asciilifeform hmm, spermissions ? lemme see.
douchebag: Basically, the javascript could be used to remove the logs that exist (on the client side mind you), and add in logs that are fake
douchebag: It would all be within the url
ben_vulpes: douchebag: so someone sends someone else a link with ?q=<script="diddledepageforme">, and unsuspecting b copies, pastes, reads everything but the url bar?
douchebag: It could be URL encoded, so they wouldn't really be able to read anything
douchebag: So yeah, people who know what the typical url format is would likely know right away that something is up
ben_vulpes is reminded of the doctorow pulp, "human readable"
asciilifeform: mircea_popescu: loads nao
mircea_popescu: ben_vulpes could just put it in an "url shortener"
mircea_popescu: dork reads it off mobile or w/e.
mircea_popescu: the whole issue of http://btcbase.org/log/2018-01-26#1776941 is FAR REACHING.
a111: Logged on 2018-01-26 16:34 asciilifeform: but conceivably one day there will be an idjit browser that gives obama root on yer box when it sees string 'open sesame'. and what, errybody gotta know in advance to escape 'open sesame', lol ?
asciilifeform: mircea_popescu: that wouldn't run js in the log page tho
ben_vulpes: oh i get it
douchebag: yes it would
asciilifeform: douchebag: with urlshortener ?!
douchebag: url -> url w/ js added in vuln parameter
douchebag: -> user
asciilifeform: no i get how original worx
asciilifeform: but in re mircea_popescu's variant
douchebag: i gotta run, be back in about 30 mins
phf: http://btcbase.org/log/2018-01-26#1776698 << if alf don't wan em, i'll take em
a111: Logged on 2018-01-26 05:04 mircea_popescu: meanwhile in girls alf won't like, http://78.media.tumblr.com/33cb28925c37b2cd04d9ff82a675d37d/tumblr_nh7rhnlD9v1qd7u7zo1_1280.jpg
asciilifeform: http://btcbase.org/log/2018-01-26#1777052 << i'd like to make such a challenge. but turns out that we do not even yet have a usable formula for what exactly even is an exploit.
a111: Logged on 2018-01-26 17:45 douchebag: 1BTC reward? I'm up for that challenge any day
asciilifeform: it is almost like trying to define humour
asciilifeform: 'is this funny'
asciilifeform: there is the element of surprise , i.e. ' i had nfi that it would do X ' . but this is subjective, and impossible to say in advance that ' you had nfi that it would X '
asciilifeform: mircea_popescu for instance prolly knew that one could paste a js into his php thing. but had no particular reason to give a damn
a111: Logged on 2018-01-26 08:44 douchebag: <script>alert`OHAI`</script>
asciilifeform: phf: i am at this point nearly convinced that working with www stack -- even moar so than, say, work with retarded children -- is destructive to one's own higher brain
asciilifeform: the fruit hang so low , all muscles atrophy.
asciilifeform: but even worse -- the type of effort that the work rewards, is exactly the wrong type
BingoBoingo: <asciilifeform> http://btcbase.org/log/2018-01-26#1777052 << i'd like to make such a challenge. but turns out that we do not even yet have a usable formula for what exactly even is an exploit. << Dude finds way through pehbot commands to replace host machine BIOS with "Hypercard" binary that shipped with OS7
a111: Logged on 2018-01-26 17:45 douchebag: 1BTC reward? I'm up for that challenge any day
asciilifeform: BingoBoingo: for instance.
asciilifeform: BingoBoingo: why not add 'and burns down the box' also.
asciilifeform: coming next, pole vaulting contest where folx hop over the trump tower.
BingoBoingo: asciilifeform: Burns down box leaves less to confirm by reading failROM
mircea_popescu: phf o yeah i know you're the fancy playboy type.
asciilifeform: BingoBoingo: let's develop your picture. because it still isn't a complete one . because e.g. knowing the magicpacket for that particular box's nic, is not 'exploit for ffa', it is for $nic.
asciilifeform: just like if a d00d managed to sneak in and steal it, it ain't 'exploit for ffa' . etc
BingoBoingo: asciilifeform: You failed to spec that part. You spec'd pehbot
asciilifeform: BingoBoingo: the whole thread is re the impossibility of a satisfying spec of any such kind.
asciilifeform: and it specifically does not admit room for inclusion by 'failed to spec X'.
BingoBoingo: That is a point.
asciilifeform: hey BingoBoingo , recall james randi's flower pot ?
asciilifeform: same type of problem.
asciilifeform: i dun think that it is solvable as-stated.
mircea_popescu: it's very solvable as stated, but not mechanically. "1. figure out v ; 2. press pehbot ; 3. say intelligent things about it." "intelligent according to whom ?" "intelligent according to me" "how am i supposed to cheat this ?!" "you aren't."
asciilifeform: right, not mechanically.
mircea_popescu: http://btcbase.org/log/2018-01-26#1777090 << for all you know this is how kock-weimer goes too.
a111: Logged on 2018-01-26 18:02 asciilifeform: mircea_popescu for instance prolly knew that one could paste a js into his php thing. but had no particular reason to give a damn
mircea_popescu: it's ~certainly~ in the list of things they'd spew once put to the question.
asciilifeform: certainly would
asciilifeform: not that it'd do'em any good.
asciilifeform: the difference b/w http://btcbase.org/log/2018-01-26#1776941 and e.g. koch-rng remains apparent to anybody with half a brain
a111: Logged on 2018-01-26 16:34 asciilifeform: but conceivably one day there will be an idjit browser that gives obama root on yer box when it sees string 'open sesame'. and what, errybody gotta know in advance to escape 'open sesame', lol ?
BingoBoingo: In other exploits, tonight I will be sleeping in a different bed because axe time gas time has some for the chinches de cama!
asciilifeform: i must admit to BingoBoingo , i have not yet experienced the 'joys' of this insect
BingoBoingo: Eh, not such a big deal. First weeks the bites itch and then your immune system stops caring and you cease to get quite the histamine reaction to the bites.
mircea_popescu: asciilifeform with half a brain is not mechanically
asciilifeform: ifonly this worked for mosquito.
asciilifeform: mircea_popescu: this is correct. which is why we dun have mechanisms judging kochs.
mircea_popescu: how's the cocksuckers BingoBoingo ? apparently moar bloodsuckers.
asciilifeform: now to revisit upstack, once i describe peh-rsa , and demonstrate signing etc, it will be possible to make straightforward mechanical puzzle for whoever wants to play.
mircea_popescu: there is that.
mircea_popescu: could even pehbot encrypt a privkey.
asciilifeform: e.g. 'make your invalid sig of $item cause my verifier to say 'valid' ' etc.
asciilifeform: mircea_popescu: or that. ( the difficulty with privkeys-as-prizes is to show that they are in in fact inside the prizebox prior to play )
ben_vulpes: douchebag: ty, fixed
mircea_popescu: you're right, it's not quite as good.
BingoBoingo: mircea_popescu: Starting to get more attention for them again as my confidence recovers from the past weekend
mircea_popescu: that's good.
mircea_popescu has had the following unpleasant experience : was going to take whore tribe horseback riding ; called whorelist, "o sure, pick me up ?" ; called horse farms "nope, wounded/gone/booked/etc". HOW!!! could it be harder to get horses than whores!
mircea_popescu: what, is it by leg count ?
BingoBoingo: Mebbe horses provide less useful error messages to the locals? Thusly there were many available horses until they hit the same fate the cars do.
mircea_popescu: or maybe the chinese don't ship hay flavoured chips.
BingoBoingo: Possible
asciilifeform: horse himself suffers the disadvantage of being edible
asciilifeform: possibly -- that's where they went.
asciilifeform: like , supposedly, in ro.
mircea_popescu: i never saw horsemeat here, you know that ?
asciilifeform: there was this rumour of a 1time massive horse-to-sausage conversion when eu pressed on a ban against horse on roads
mircea_popescu: eh, greatly exaggerated.
asciilifeform: it's exactly the kind of thing that would be greatlyexaggerated. so i have nfi.
mircea_popescu: the true horse killing was in 50s, when ceausescu decided to force agromecanization
asciilifeform: fefeleagaization lol
mircea_popescu: prolly a million heads give or take.
asciilifeform: ( orwell aficionados will also remember his version of fefeleaga's bator , the sad horse character boxer )
a111: Logged on 2018-01-26 16:15 mircea_popescu: in fairness, kid's got me meditating about the nature of things ever since last night. see, the trouble is : in his syustem, he has actually found a vulnerability, as a factual matter. in my system this is entirely meaningless. why the difference ?
mircea_popescu: i'm sure.
phf: http://btcbase.org/log/2018-01-26#1777009 << this is exactly how "secoority" snake oil propagates: cheap tricks
a111: Logged on 2018-01-26 17:12 mircea_popescu: not if it works to deliver the results above ?
mircea_popescu: phf is this repackageable into a puritan argument against sluts ? if not, why not ?
phf: i don't know the puritan arguments against sluts
mircea_popescu: you may not be aware, but the ~original~ repression of faggotry has everything in common with the original repression of jews, masons, etc : it was perceived by the "normal" man that these "perverts" have it TOO EASY.
mircea_popescu: it's "unfair" (in the exact sense of childhood playground) and therefore "forbidden". because... obviously you can find a MALE partner to work with ; the question is to get one of the speaking cows to do it.
mircea_popescu: so men who fuck men have an "unwarranted" social advantage, and consequently off with their heads.
mircea_popescu: obviously fucking the boss is mandatory in the workplace ; but this is specifically what http://trilema.com/2012/reguli-pentru-iobagi/ DIDNT want.
phf: wake me when there's a "too easy" on btcbase
mircea_popescu: and so : a homebreaker is a female that delivers on the "easy" part which "anyone could do" (sex) and not on the hard part -- and there's no quotes there because how about YOU try polishing an oaken table the size of a current usian garage each morning, plus rub the iron pots.
mircea_popescu: phf how's that related ?
douchebag: alright, I'm back
mircea_popescu: !~google he's here, he's here, he's here have no fear, stay by his side an' he'll take you for a ride...
jhvh1: mircea_popescu: Nana – He's Comin' Lyrics | Genius Lyrics: <https://genius.com/Nana-hes-comin-lyrics>; Nana - He's Comin' Lyrics | LetsSingIt Lyrics: <https://www.letssingit.com/nana-lyrics-he-s-comin-qkcsz32>; Songtext von Nana - He's Comin' Lyrics: <http://www.songtexte.com/songtext/nana/hes-comin-73c2661d.html>
phf: mircea_popescu: i'm perhaps failing to find a point at which your analogy connects with the situation. i read it as "don't know on things that seem trivial"
asciilifeform: mircea_popescu: the 'anyone could cheat with witchcraft' thing is a recurring motif in idjit pygmystans , verily
phf: *don't knock
asciilifeform: ( but pointedly not in ~all~ pygmistans. recall the 'ru prison cheating at cards is not cheating if not obvious' thread )
mircea_popescu: phf no, no, the structure of the argument, "X propagates via r-selection" is not delivering on what i expect is the intent ("of COURSE x is "bad" in the sense of illegitimate).
mircea_popescu: the problem is that illegitimacy crosses a definition boundry (it doesn't mean the same thing in boston wharf side and in african village) and so leaves us stranded.
mircea_popescu: asciilifeform it is, at that. and in ru prison is "not cheating if ~not caught~, to an ellaborate standard of wot-proof. which takes us straight into http://trilema.com/2014/un-prophete/#selection-53.90-53.169 sadness
asciilifeform: and to the 'mechanical puzzle' thread, aha.
phf: oh i finally got it
phf: yes, totally unrelated, yeesh slow day.
douchebag: Alright, what do you guys suppose I do I've been trying to find vulns in Starbucks pretty much all night with very little success. Should I continue hitting this bug bounty, or switch over to Yahoo's program?
phf: but, the intent wasn't actually "of course x is bad", we've had conversation about that elsewhere, this was a pure cause/purpose "you're fat" situation: that's literally how security theater propagates!
mircea_popescu: consider just how weak this "r selection = bad" argument by looking at the principal class of problem we know a (sorta) solution for today. why even have bitcoin nodes when you could have a central server ? http://btcbase.org/log/2018-01-25#1776507 ?
a111: Logged on 2018-01-25 23:37 NoSatoshisHear: centralized system, so one server counts the ticks, it would simply be a demo of reddit "the button" style idiocy combined with gambling. Sounds viral, like the 1918 flu.
mircea_popescu: phf ah, so it was just stating the obvious for some reason ? i'm... aware that's how it propagatges o.O
phf: well, i didn't know if you were aware, and i can always fall back to the usual log "but tis was for the reader!"
mircea_popescu: (the truth of the matter is that the power of human speech comes from parsing and collapsing very lengthy and complex trees ; one of the rules is "obvious branch is dead", which means you practically never assume one's stating the obvious, so you pick the alternative)
mircea_popescu: phf certainly.
mircea_popescu: phf the actual trick i use to force a "no, go down obv branch" is by prepending a "you know" or whatever. but, sure.
phf: i've seen the machinery work many times, though for some reason it reminded me of the case where it misfired, in a famous bit by feynman where he was cracking safes at los alamos, security resolution and the unexpected punchline is "don't let feynman near your safes"
BingoBoingo: douchebag: Have you tried flipping a coin? Or failing that tire flipping a bit?
douchebag: Not really too much, I've held onto coin and made a bit here and there. Typically I end up selling it right away so that I can get my cash in hand and not have to worry about waiting for the price to fluctuate. I know I should have held onto it
trinque gives this "pls to mirror back to me that am doing smart things smartly" hours to live
douchebag: Considering I looked at one of my wallets and $50 transactions are now worth roughly $20,0000
douchebag: $20,000*
asciilifeform: douchebag: does it ever bother you that you sell a $10k info for $1k ?
asciilifeform: ( or 100, for 10, etc )
BingoBoingo: douchebag: I mean in the physical sense. You know... the old fashioned kind of flip and coin. Or flip and tire.
douchebag: Not really, I know that by responsibly disclosing vulnerabilites to companies I am building a pretty awesome resume which will benefit me later in life
asciilifeform: douchebag: on the contrary.
asciilifeform: !#s responsible disclosure
a111: 30 results for "responsible disclosure", http://btcbase.org/log-search?q=responsible%20disclosure
asciilifeform: ^ mandatory reading.
douchebag: Everyone else I know is working some shitty job, not getting a decent amount of experience, and they're just kind of stuck in the same place. Meanwhile, I'm just entertaining myself with the challenge of hacking these companies
trinque: douchebag: your "write-only" mode grows tiresome
shinohai snickers a bit @ 'responsible disclosure'
trinque: nobody is inviting you to "be in the republic in your own way"
asciilifeform: douchebag: do you realize that you are doing the equiv of showing up at e.g. google campus and repainting the stairs in exchange for the pennies accidentally dropped there ?
asciilifeform: the most abject kind of slavery known, really
asciilifeform: !~google mudlarks
jhvh1: asciilifeform: Mudlark - Wikipedia: <https://en.wikipedia.org/wiki/Mudlark>; Museum of London :: Mudlarks children's gallery: <https://www.museumoflondon.org.uk/museum-london-docklands/permanent-galleries/mudlarks-childrens-gallery>; Mudlarks of the 1700 and 1800s - Geri Walton: <https://www.geriwalton.com/child-mudlarks/>
douchebag: Eh, perhaps. It's mainly just a hobby of mine, and I'm constantly learning from it and it pays the bills for now.
douchebag: What do you suggest I do?
shinohai: Read the logs for starters.
asciilifeform: douchebag: look in the subjline for this chan
asciilifeform: for instance.
douchebag: Well, I'm not the best programmer out there however I always make damn sure the code I do write is secure as it can be
asciilifeform: how is this statement a commentary on the item in the subjline ?
douchebag: "V. You could learn how to program correctly, such as for instance by writing your own Vvi implementation, or by standing up an irc botvii, or by following the excellent manuals produced by the Lordshipviii. Bear in mind that it is deemed unethical within the Republic to write code if you haven't actually learned how to write it first, and that orcs' claims to have taught you something often turn out
douchebag: fraudulent upon examination."
trinque: douchebag: skipped right over the reading *again* did you
douchebag: Well, I'm just trying to figure out where my skillset could be best put to use, I would be more than capable of writing a V implementation or setting up an IRC bot. I'm trying to leave it to you guys to tell me where my skillset could best be put to use
lobbes: douchebag: while you are intelligent, and may have succeeded in sending mp to meditation room, realize that continued existence in this forum is predicated on you doing something useful for the Republic. Understanding -what- is useful will require (as trinque has been patiently explaining) "moar ready, less talky".
shinohai: !!rate douchebag -1 *autistic screeching
lobbes: Else that happens ^^
asciilifeform: douchebag: start with v
a111: Logged on 2018-01-23 20:04 ben_vulpes: ours mostly
trinque: several folks told douchebag here to do various somethings
asciilifeform: douchebag: alternatively, ( or best of all, in conjunction ) read the ffa series and do the exercises.
lobbes: douchebag, -as you read more- the "how can I best use my skillset" will become obvious to you
trinque: ayep
shinohai: !!v F446A115E51B6AB6665F943C47F5DBADD60D81F06A76C65156E43F4710A7B46C
deedbot: shinohai rated douchebag -1 << *autistic screeching
trinque ftr thinks it's nice to see someone that shows up and wants to do *anything* aside pull his dick
asciilifeform: trinque: aha!
trinque: just, the dickpulling can now go.
asciilifeform: but asciilifeform for one will read his vtron. and ffa homework answers.
asciilifeform: supposing he produces any.
shinohai: Could have used skills to hack CoinCheck, been 530M usd richer
asciilifeform: shinohai: naaah, see, not 'responsibledisclosure' is it nao.
asciilifeform: d00d gotta cure himself first, of the headcockroaches
shinohai: Precisely my point.
asciilifeform: shinohai, trinque : as i understand, d00d is a kid, and really oughta be beaten with wooden stick, and only after this fails, with spiked iron stick.
shinohai: Beatings bring about character development!
asciilifeform: i dun see any reason to think that he is incurable.
asciilifeform: ( yet )
douchebag: I would like to clarify with someone that I properly understand everything required to create a V implementation.
shinohai: No, not incurable, but simply needs to do time in the logs, etc. to cure the aforementioned head cockroaches.
trinque: asciilifeform: shinohai negrated him all by himself
trinque: I don't see where I condemned
asciilifeform: douchebag: observe that you can readily test what you make : massive amount of vpatch published , at e.g. http://btcbase.org/patches
asciilifeform: trinque: i can readily see that you have not yet condemned , aha
ben_vulpes: douchebag: so demonstrate it, yeah? talk is cheap.
asciilifeform: douchebag: this is not miserable american school . shoot first; ask questions second. make a vtron. if its function diverges in some way from previous vtrons, you will a) notice b) find out why c ) then, ~maybe~ later ask others, if cannot determine solution on your own
douchebag: I'll write something up and let one of you take a look at it when I'm finished.
ben_vulpes: i'll certainly read it
ben_vulpes: gonna post on medium or what?
douchebag: It'll most likely be it's own web application.
ben_vulpes: wutwutwut? a vtron webapp?
shinohai: Oh dear lord
trinque: hey, phf has one
ben_vulpes: i'm curious, not casting aspersions
ben_vulpes: douchebag: surely you're not thinking of something that would eat a mess of patches and sigs and vomit forth a press, are you?
douchebag: Pardon?
shinohai: I'm genuinely curious to see gpg operations performed in a web app.
ben_vulpes: douchebag: howabout you tell me what this "it's own web application" is going to do
mod6: before writing a vtron, maybe spend sometime using one.
asciilifeform: it did not even occur to me that chukcha is a writer and not a reader, and has not used
asciilifeform: presumably has, or will use, then -- write.
ben_vulpes: douchebag: mod6 has a point, consider pressing a trb and syncing it douchebag
douchebag: That
trinque: we'll never know which is a nick reference and which isn't!
douchebag: That's probably a good idea before I start.
ben_vulpes: still curious in re what this hypothetical webapp would do
asciilifeform: ben_vulpes: imho even a straight cleanroom clone of http://btcbase.org/patches wouldn't be entirely useless
asciilifeform: ( supposing it works )
ben_vulpes: asciilifeform: let the kid speak for himself, eh?
asciilifeform: let the d00d write his vtron. it's a homework, not a heroic quest . then -- beat with sticks. not before.
asciilifeform: ben_vulpes: i fully expect that he'll speak, lol
douchebag: Well, the web application would just be for viewing purposes, the PGP operations will still be done via command line. I am quite comfortable writing web apps using Python's Flask web framework
trinque: I see guidance, not beating, no harm there
ben_vulpes: guidance and beatins can be hard to distinguish at twenty feet when kiddo's reaching for the stove
trinque: haw
asciilifeform bbl,meat
ben_vulpes: douchebag: do yr marching orders make sense?
douchebag: http://therealbitcoin.org/ml/btc-dev/2015-August/000161.html <- I'm looking at this right now, to get an understanding of what I'll be making.
douchebag: I do not know what marching orders are at this time, I'm going to have to read more into it to better understand
shinohai: ben_vulpes link is most definitely required reading imho
ben_vulpes: douchebag: press a trb with non-"release" patches so's you understand usage, ideally sync the binary if you can afford the hardware. then, write your own v, test it, and bring it back for review.
douchebag: Forsure, is there one you suggest me starting with?
ben_vulpes: one what
douchebag: V implementation to use so that I understand how everything is working together
ben_vulpes: asciilifeform's elaborates the fundamentals, mod6 has polished his to handle a bunch of edge cases.
ben_vulpes: it is a matter of taste. would you rather read python or perl?
mod6: fwiw, if you're comfortable with py, and you're on a learning quest, then start with alf's
douchebag: I prefer Python
shinohai: http://archive.is/KoGnA <<< Not mentioned here, how Coincheck asked the NEM developers to roll back chain ala mETH to recover losses.
ben_vulpes: aaaand at the intersection of pantsuit and me too streets: http://archive.is/xKXxl
shinohai: Her "Faith adviser" no less! Must have counseled 'ol Bill too.
phf: "The currency of the far-right: why neo-Nazis love bitcoin (The Guardian)"
phf: "... Only joint action by the G20 countries, as proposed by France and Germany, could be enough to become a game changer. ..."
phf: articled penned by one Julia Ebner, who also wrote "The Rage: The Vicious Circle of Islamist and Far Right Extremism" https://www.vox.com/world/2017/12/19/16764046/islam-terrorism-far-right-extremism-isis
phf: wherein she blames far right for creating and feeding islamic extrimism
mircea_popescu: http://btcbase.org/log/2018-01-26#1777200 << well, does it ever bother you you spend an hour you'll never ever get back ?
a111: Logged on 2018-01-26 19:24 asciilifeform: douchebag: does it ever bother you that you sell a $10k info for $1k ?
a111: Logged on 2018-01-26 20:04 douchebag: I would like to clarify with someone that I properly understand everything required to create a V implementation.
a111: Logged on 2018-01-25 01:01 mircea_popescu: v is esentially found today as an enchanted castle surrounded by 5000 rakes upon which the prince is welcome to step, and once he stepped he can come to us and by the shape in his forehead we can describe the rake he stepped on.
mircea_popescu: gol; step.
mircea_popescu: lmao the zingers.
mod6: haha.
shinohai: In other competence of the feebs news: http://archive.is/Un7mm
mircea_popescu: http://btcbase.org/log/2018-01-26#1777309 << yeah, right. to reiterate, a) http://btcbase.org/log/2014-02-07#487027 and b) nobody fucking walks.
a111: Logged on 2018-01-26 22:16 phf: "... Only joint action by the G20 countries, as proposed by France and Germany, could be enough to become a game changer. ..."
a111: Logged on 2014-02-07 15:23 mircea_popescu: "Remember : we know where YOU live."
mircea_popescu: better make sure there's replacement "representatives" "presidents" etcetera for the WHOLE list.
asciilifeform: mircea_popescu: rerun !
asciilifeform: i could've sworn i saw it 2-3y ago
mircea_popescu: well... if you do this many shows eventually you're gonna have to rely on reruns!
a111: Logged on 2018-01-26 22:30 mircea_popescu: http://btcbase.org/log/2018-01-26#1777200 << well, does it ever bother you you spend an hour you'll never ever get back ?
mircea_popescu: so stop being so bothered! :D
asciilifeform: http://btcbase.org/log/2018-01-26#1777305 << 'One of Japan’s biggest cryptocurrency exchanges said that about $400 million in NEM tokens ...' >> asciilifeform was replacing a ceiling light and lost a screw, which he arbitrarily will value at 500 trillion unified reformed dubloons
a111: Logged on 2018-01-26 20:46 shinohai: http://archive.is/KoGnA <<< Not mentioned here, how Coincheck asked the NEM developers to roll back chain ala mETH to recover losses.
mircea_popescu: i have about $1 trillion in trimmed pubic hairs. they, unlike a "transgender", are actually female, being XX.
shinohai: There's actually a market for shaved pubic hair! lol
mircea_popescu: i'm thinking of branching out into plucked.
asciilifeform: http://btcbase.org/log/2018-01-26#1777321 << observe that in all such cases under modern usg, the corpse 'hangs' on the designated gallows bird; and never on the gestapo ( who can machine-gun or even demolish, as in florida 2y ago, entire houses , with clear conscience )
a111: Logged on 2018-01-26 23:09 shinohai: In other competence of the feebs news: http://archive.is/Un7mm
mircea_popescu: asciilifeform the more interesting point is that purely latino style "kidnappings" are moving into the us in complete defiance of "law enforcement".
asciilifeform: ( iirc in all 50 states at this point, if even local cop runs somebody over on his way to arresting a pickpocket, corpse 'hangs' on the pickpocket )
mircea_popescu: the battle has evidently been lost.
asciilifeform: mircea_popescu: eh those have been a thing for many years
asciilifeform: typically not publicized , but they're there.
asciilifeform: ( recall how fbi was even created )
mircea_popescu: i was talking re "contempo" period, post ww2 not of the fucking know-nothing movement.
asciilifeform: well yes, hoover's fbi
mircea_popescu: !#s "the morgue"
mircea_popescu: there was a bar in new york where ~100 people died /year because people got drunk and starting shooting pistols at each other.
mod6: all of that, yet people are still 'maga' or whatever it is today
mod6: as if
← 2018-01-25 | 2018-01-27 → ↑
Random(trilema) | Download hourly DB snapshot | Get Source Code