Matches for a, 205125 total results Sorted by newest | relevance
Thu Aug 25 19:12:19 UTC 2016 <punkman> kakobrekla: how about the fact that when you download a key from a keyserver, gpg doesn't even check if it downloaded and imported the key it was asking for
Thu Aug 25 19:10:45 UTC 2016 <punkman> if you wanna test your gpg, there's a pair here https://github.com/coruus/cooperpair/tree/master/pgpv4
Thu Aug 25 19:09:12 UTC 2016 <asciilifeform> y'know, just as if you had uploaded a genuine key with same id but later timestamp, to sks yourself.
Thu Aug 25 19:05:35 UTC 2016 <asciilifeform> kakobrekla: gpg 'long' fp sucks donkey balls, can be collisioned in a month or so on typical pc.
Thu Aug 25 19:04:51 UTC 2016 <assbot> Logged on 25-08-2016 18:28:00; asciilifeform: iirc their www did not even contain a pubkey
Thu Aug 25 19:04:51 UTC 2016 <assbot> Logged on 25-08-2016 18:28:05; asciilifeform: only a fingerprint
Thu Aug 25 18:51:16 UTC 2016 <funkenstein_> a closer look found the right one
Thu Aug 25 18:28:05 UTC 2016 <asciilifeform> only a fingerprint
Thu Aug 25 18:28:00 UTC 2016 <asciilifeform> iirc their www did not even contain a pubkey
Thu Aug 25 18:17:49 UTC 2016 <funkenstein_> i noticed a lot of 512 bit ssh keys which.. some versions of ssh won't even let you connect to
Thu Aug 25 18:16:39 UTC 2016 <asciilifeform> we have gpg keys, largely (though not entirely) from sks, and a large number of synthetically generated gpg keys from rsa moduli taken from ~ssh~ portscan on ipv4 space.
Thu Aug 25 18:13:22 UTC 2016 <funkenstein_> unless a fair amount of units have the same serial numbers :)
Thu Aug 25 18:12:52 UTC 2016 <funkenstein_> i don't see how such a diddled prng would create more phuctorings
Thu Aug 25 18:10:19 UTC 2016 <asciilifeform> theoretically, a braindamaged router could be capable of generating, say, 1,000,000 different ssh privkeys, and this would result in ~1 phuctoring per 2 million installed units. but if we knew the prng algo we could break the entire lot.
Wed Aug 24 19:07:30 UTC 2016 <asciilifeform> ditto, there are probably folks who believe that phuctor is dross and a distraction from the project stated in the mpex www.
Wed Aug 24 19:06:11 UTC 2016 <asciilifeform> whether i should be held as having betrayed my oath, by, e.g., taking six months entirely to create trb, rather than being 6 mo ahead on cardano, is a matter between i and the ~current~ shareholders.
Wed Aug 24 19:04:32 UTC 2016 <kakobrekla> i have a feeling you are saying that now that we are nolonger owners of cake, we are verboten to discuss why we returned it or anything relating to it.
Wed Aug 24 19:03:04 UTC 2016 <assbot> Logged on 24-08-2016 18:51:43; asciilifeform: i am still waiting for a letter from angry shareholder, for the record.
Wed Aug 24 19:01:42 UTC 2016 <asciilifeform> i, too, would like to have a magical cake, that i can sell and then still eat.
Wed Aug 24 18:55:10 UTC 2016 <asciilifeform> well, jurov mentioned such a thing as shareholders.