General

general@lists.hackerspace.pl

1059 discussions

Fwd: Re: Keybase
by rysiek 18 Jan '15

18 Jan '15

Takie tam, na cyferpankach. ---------- Treść przekazywanej wiadomości ---------- Temat: Re: Keybase Data: sobota, 17 stycznia 2015, 11:22:02 Od: Mirimir Do: cypherpunks(a)cpunks.org On 01/17/2015 03:52 AM, rysiek wrote: > So, > > Mirmir wrote: >> | 13. Targeted attacks against PGP key ids are possible >> >> This is an advantage of Keybase. Then we're not depending on the KeyID, >> or even on the fingerprint, but rather on an identity that's multiply >> and independently authenticated. > > I keep hearing more and more about keybase, and I have a problem with it. It's > a centralised service, owned and controlled by a single entity; moreover, the > keys are tied to online identities controlled by corporate third parties > (Twitter, Facebook, et al). I don't see a Diaspora/The Federation support, for > instance. As I understand it, Keybase is an API. The website/service is merely a demonstration. The developers are aiming for mass adoption, and so they've targeted the most popular sites. With some coding, arbitrary sites could be used, with two requirements. First, it must be possible for users to post persistent signed proofs. Second, it must be possible for the API to access those signed proofs, in order to verify them. > My problem with this is two-fold: > > 1. It might allow abuse, esp. MITM attacks. If Keybase becomes a /de facto/ > standard of acquiring keys, it seems trivial to me for them to replace a > valued target's key with something a LEA would provide. That's the value of trackers. Those tracking such a comprised target would see that various public signed proofs are no longer valid for the target's key on Keybase. The adversary could alter all of the target's public signed proofs. But even that wouldn't suffice, because trackers have independent snapshot histories of public proofs. And furthermore, snapshot histories are embedded in the Bitcoin blockchain. > 2. It still promotes the closed, walled-gardens. Diaspora or GNU Social > support would not be that hard to implement. Signed proofs could be placed anywhere that's accessible to the API. But that takes coding, and developers have priorities. One can request. Anyway, I've created a test identity: https://keybase.io/Proba. Once I've added enough proofs, and have enough trackers, I plan to mess with it by replacing the public key held by Keybase, altering some of the proofs, and so on. Then we can see how that shows up for its trackers, and for other users. I'll also explore impacts of malicious trackers. ----------------------------------------- -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147

2 1

SilkRoad, Mt.Gox and shit hitting the fan
by rysiek 17 Jan '15

17 Jan '15

Cześć, taka sytuacja: http://www.dailydot.com/crime/ross-ulbricht-silk-road-mark-karpales-fbi/ DHS fingered Mt. Gox's Mark Karpeles as original Silk Road founder - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Is Mark Karpeles the real Dread Pirate Roberts? In the third day of the Silk Road trial in New York City, suspect Ross Ulbricht’s defense has pointed the finger at Karpeles, the former owner of Mt. Gox, once one the biggest Bitcoin exchanges on the planet. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147

2 1

Nauczanie o kryptografii w bibliotece publicznej w Waszyngtonie
by Robert Sebastian Gerus 17 Jan '15

17 Jan '15

http://motherboard.vice.com/read/washington-dcs-public-library-will-teach-p… http://dclibrary.org/1984 -- iNsanity!

2 1

To czego HSy nie zrobiły na finał WOŚP
by spin＠hackerspace.pl 15 Jan '15

15 Jan '15

No siema, Jurek na zeszłym Woodstocku dostał ode mnie i Wiktora wielki łeb smoka druknięty w 3d. Taki naprawdę fajny, że urywał dupę aż do trzeciego kręgu szyjnego z mlaśnięciem na rdzeniu. A na finał WOŚP poszło coś takiego: http://centrumdruku3d.pl/drukowane-serce-lodzkiego-parku-technologicznego-w…

1 0

Fwd: Re: [Cryptography] open hardware as a defence against state-level attacks
by rysiek 14 Jan '15

14 Jan '15

Joł, takie pytanie się pojawiło w pewnym zakątku Internetów. Podrzucam jako ewentualną inspirację. ---------- Treść przekazywanej wiadomości ---------- Temat: Re: [Cryptography] open hardware as a defence against state-level attacks (...) Where are the open fabs for makers instead of submitting open designs to closed fabs? It's 2015, crowdfunding, open source, non-profits, and public monitoring are done. We're not talking TSMC scale tech here, but a basic backyard shed capability to print useable, useful, marketable silicon. ie: Print off some USB RNG's, radios, DACs/ADCs, even 74 series and discretes, whatever works. Then with that open initial platform, start taking commercial production contracts (even private runs) to pay for growing the open fab. Even including openly replicating yourself. What is the minimum capital and endowment needed to gear up to put 1k, 100k, 500k, 1M, 100M, 1B gates that someone, including makers, would buy down on silicon? ----------------------------------------- -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147

1 0

NAS (не догонят)
by Piotr Szotkowski 11 Jan '15

11 Jan '15

Drugare, dojrzałem do rozwiązania problemu pt. „mam cztery dyski przenośne, wszystkie wolne, jeden już chyba nie żyje, nie wiem co na czym, a i tak korzystam tylko w domu” sposobem pt. „kupię jedno coś z dużą pojemnością i podłączę do routera” (tak, spróbuję przez te skromne 100 Mbit/s – dwutygodniowe dziecko dzień w dzień udowadnia, że mam więcej cierpliwości w sercu niż by ktokolwiek podejrzewał). Coś polecacie gotowego? Kupić ileś-tam dysków w RAID-zie? Co jest teraz modne fogle? — Piotr Szotkowski -- Internet of things that should not be. [cms the chaos wizard]

6 5

Kocham mój blender miłością krwawą
by spin＠hackerspace.pl 10 Jan '15

10 Jan '15

Siema Właśnie possałem sobie set acidcore'owy z YT, wywaliłem z niego ścieżkę wideo, dociąłem i przekompresowałem pod rozmiar (20MB), i wyeksportowałem do MP3. Zajęło mi to jakieś 15 minut, razem z obczajeniem jak to zrobić i czasem renderowania audio. Odsłuch na żywo z renderowanego pliku w VLC. Kuźwa, blender, ty szatanie.

1 1

Looting the corpse: Makerbot and the death of the opensource 3d printer market
by spin＠hackerspace.pl 09 Jan '15

09 Jan '15

Due to time constraints I'm gonna be brief (ok, I intended to. Fuck it.), and I'm gonna write in English so this can reach a wider audience. Perhaps. Or not. "Be wary what you wish for" they say, eh? Anyway! DISCLAIMER: THis stuff is full of opinions. Don't grow attached to them, cause I don't. I make a lot of jokes, and when people tell me I'm crossing the Red Line, I tell them that animu was pretty rad. I kind of eye affectionately the (xirdal's?) Cupcake makerbot that's in the hackerspce, myself working with a clone of the dual-headed wooden Replicator, and did some stuff with 2X, and that model starts to show some bad design decisions. By 'did stuff' I mean like, pulled it apart and went at it with a file, lathe, drill press, sandpaper, etc. Come to think of it, I rarely print anymore, and my relationships with printers became more intimate. It's kind of fitting that the Hackerspace is located in a dungeon. Ahem. So. I'm a latecomer to every party (1). The early makerbot printing hype passed before my eyes unnoticed. I was observing it from a distance, not sure what it was about, and whether it would be nice/good/beneficial to participate. Now I know it was about a direction. I browsed old galleries, followed old links, read old blogs... and it looks like a postwar landscape. In a kind of a sad way, but then again, I enjoy post-apo muchly. So we had a wonderful team. Hoeken and Pettis were a very good pair, regardless of what people seem to think about Pettis, and what Hoeken may be doing out in China. A hardware guy and a marketing guy, a great brand... and suddenly you have a lot of people developing things for a de facto corporation! I mean, the way they scaled up was amazing. And the amount of research and development was crazy awesome. And Thingiverse was a brilliant idea that hit the spot. And they were on a right path, perhaps one to parallell Elon Musk's (except he was only one guy). They could have changed the way hardware was developed. There was a lot of dedication from the user base, a lot of belief, a lot of wanting more, a lot of participating in something bigger, and a lot of making something awesome. And it was all heading the right way, seemingly, following Hoeken's vision of a machine that can make stuff (not only print, mind you). I've seen things you people wouldn't believe. Attack ships on fire off the sho... Well, ok, I've seen mods of this device that were brilliant. They were gamechangers. They are from, what, 2009? Those things didn't feel like free gold,jewels and uranium, they felt like cheat codes, even when you find them 5 years later! Those were the things that went 'holy fuck'(2) in my head for 72 hours duration at 7 hertz. And they were usermade, often modelled with software I would't touch with a dick-tentacle ripped out of alien cloaca, stiffened with wire and wrapped in paper towels. (Note the alliteration. I couldn't do that if this were not English.)(3) Now, if you look at that landscape, it's all there, like juicy, fruitful ruins of dead cities. (4) Beause there is no one who could pick up what Makerbot left off. Many of their solutions are beginning to be cloned, successful, and closed source. I could name companies. There are several. Oh, Opensource? Cannot patent? Sorry dear friend, but this is not how it works. I could patent my mom's tits, and she would have to shave them off, or face a $6M lawsuit. Well, she would win, eventually... ... but not until she paid up the costs. See a hook here? Or, should I say, a bandsaw? Skeinforge, oh god, this is a 3d printer... printu... printing...person's? dream. I could do things to it that the Shortbus movie is too prude to show. It's years ahead of everything out there, and it's from 2012 (last update, last time I checked). I remember people being hyped about Slic3r and then Makerware and Cura, and now I am delighted to see how many battle hardened 3d printerers (rererers) return to this glimmering sapphire of duct tape, paper bags, styrofoam and wood glue, and produce the most amazing results. Hell, this bunch of Python scripts now sits behind several closed source applications, or is bundled with them contary to the license, AND NO ONE GIVES A HAMSTERFISTFUCK.(5) It's all out there, all those ruins plundered by everyone, closed into black boxes, driven to their enclaves like war loot, and sold as dumb shiny blobs with a sticker "NEW"!. And Ultimaker disappeared somewhere, or maybe they are outside of this Fallout mind-map of mine. I don't feel that there is this soul of making crazy stuff surrounding them as it was with Makerbot, I appreciate what they do, but it feels like careful marketing more and more. Like wanting a piece of cake on your boss's birthday party. And in the end, all this stifles development, pushes us back into our human condition. When my kids grow up, I'm gonna tell them a story, along the lines of "Once upon a time we had a hardware equivalent of Linux that got sold to a big corporation that could have became Redhat, but they chose to become Microsoft, and it's another 40 years since they decided to release something opensource." ******** But it all proved a point. Today we have full-metal-frame printers that look nice and cost tons of money. And people buy them. The fun thing is that they are in no way better than the second lasercut generation of the makerbots. I've printed those things to death. Several deaths actually, break it fix it, as the saying goes. I could print anything on them. While the closed ones? Well, they go like bouncers in a night club when you grab the wrong kind of ass one time too many. Protip: you don't get a refund, unless you count the bruises. Hell, when I pay for it, I want to grab ass all I like! I'll stick with my opensource stuff that makes those squealing startup efforts sound like a pig farm fed tortillas. The amount of R&D and released projects and clones this hardware model has to offer is unprecedented. Makerbot was the first working open source firm, and after all that time, I think I'm fairly certain I've pinned down most of the elements that made it tick (in b4 tock, in b4 Intel). It has proven that the open company model, the prosumer-participating company model, the let's-do-stuff-together and our-clients-are-a-part-of-us model has amazing benefits to offer. It's like crowsourced design thinking(6). What I'm worried about is how much fucking time is it going to take this species to discover that cooperations makes things 600% more awesome? A single then-opensource company pushed the development of a device stagnant for 30 years to unprecedented levels within 3-4 years, on a limited budget. Once it went closed-source, the market divided, shit gone closed source, development not only became stagnant but actively REGRESSED. It will take 3 to 4 generations of closed source FFF printers to match what Makerbot was before it was sold. ********* Now, what's worrisome is that the Makerbot was a one of a kind company. OK, PeachyPrinter may be another, but time will tell. Most people at hackerspaces are more interested in their corporate jobs and their Dells/Thinkpads or in staying homeless and angry than actually BETTERING THE HUMAN CONDITION. I would even say that they are actively UNCOOPERATIVE, they are like an amorphous liquid that fucking STAYS LIQUID for, like, fucking EVER, be it polar winter or equatorial monsoons. And if they do finally harden, we get Makerbot, that breaks easily under tension (or repeated stress. Like amorphous metals. Durr hurr.) I am not satisfied with this state of affairs. I am majorly pissed, actually. Pissed, disillusioned, and busy working my ass off to the limits (dis?)allowed by biology, for this shit will not stand.(7) Bring it on, world, we'll have a topless battle and I will gouge your eyes out with my nippless, because they're as hard as hell, and I'm not gonna take it anymore! (yes, this is a movie reference, no don't goggle it, I'm a duckduckfag, in b4 Amazon. All is futile, go watch External World). ********** (1) and I always bring a taser (2) in Christian mythology Angels don't have sex organs, you have to carve your way in. (3) if anyone tells you that studying Arts is useless, show them this message. My state educated me to my full ability when it comes to writing these things. Poland, you're the best, even if your english is funny. (4) I didn't mean the corpses you sick fuck. (5) Ok, I give, but that could possibly put me in conflict with animal right activists. (6) I hate... uh, ok, I'm sceptical towards this term, it was annexed by the wrong kind of people. To both those terms actually, it feels like they blanket-cover more shit than content. We should let it dry in the sun for a while and pull off the blanket, the shit would stick and we'd end up with the real deal. I wonder if you could commercialize this process in chemistry. Or sociology. Or eugenics... (7) Unless you imagine alternate history with Columbus and the egg...

5 6

Network Filter: SECURITY : OPENBSD VS FREEBSD
by viq 09 Jan '15

09 Jan '15

http://networkfilter.blogspot.com/2014/12/security-openbsd-vs-freebsd.html -- viq

3 2

SAGE, czyli zamiennik WolframAlpha na GPLu
by rysiek 09 Jan '15

09 Jan '15

Elo, może komuś się przyda: http://sagemath.org/ -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

General