Re: YubiKey

2017-11-29 Thread John Newman


> On Nov 30, 2017, at 12:03 AM, Kurt Buff  wrote:
> 
> https://github.com/hillbrad/U2FReviews
> 
> On Wed, Nov 29, 2017 at 8:25 PM, John Newman  wrote:
>> Does anyone have any experience with a YubiKey? Specifically using it
>> with the PAM module you can download from their site and tying it to
>> logins for Linux/*BSD/MacOS ?
>> 
>> I've got lots of experience (from jobs) using RSA SecurID tokens, tying
>> them to sshd/login/sudo/etc with pam and the securid PAM module, and it
>> works really well.. I understand YubiKey is not going to print out a
>> stream of changing digits for me, but nor will it require an RSA SecurID
>> server and all that goes along with it.. And also I've read you can
>> store your GPG private keys on the yubikey, which sounds cool.
>> 
>> Is it worth the buy? Anyone using it for any of the above (or other)
>> purposes? I suppose I should do some more reading, just curious if
>> anyone loved it or hated it or whatever..
>> 
>> thanks!
>> 
>> --
>> GPG fingerprint: 17FD 615A D20D AFE8 B3E4  C9D2 E324 20BE D47A 78C7

Thanks!  I’m giving it a read. Doesn’t seem to be too focused on my particular
use case, but of course U2F in the browser is also very cool.



signature.asc
Description: Message signed with OpenPGP


Re: YubiKey

2017-11-29 Thread Kurt Buff
https://github.com/hillbrad/U2FReviews

On Wed, Nov 29, 2017 at 8:25 PM, John Newman  wrote:
> Does anyone have any experience with a YubiKey? Specifically using it
> with the PAM module you can download from their site and tying it to
> logins for Linux/*BSD/MacOS ?
>
> I've got lots of experience (from jobs) using RSA SecurID tokens, tying
> them to sshd/login/sudo/etc with pam and the securid PAM module, and it
> works really well.. I understand YubiKey is not going to print out a
> stream of changing digits for me, but nor will it require an RSA SecurID
> server and all that goes along with it.. And also I've read you can
> store your GPG private keys on the yubikey, which sounds cool.
>
> Is it worth the buy? Anyone using it for any of the above (or other)
> purposes? I suppose I should do some more reading, just curious if
> anyone loved it or hated it or whatever..
>
> thanks!
>
> --
> GPG fingerprint: 17FD 615A D20D AFE8 B3E4  C9D2 E324 20BE D47A 78C7


Re: absurd MacOS High Sierra bug

2017-11-29 Thread John Newman
On Wed, Nov 29, 2017 at 10:46:12PM +, \0xDynamite wrote:
> > Top posting now ...
> 
> Shin!  Sorry about that, thanks for pointing it out.
> 
> > First thought was "thoughts", but the electron synapse reaction time
> > is rather measurable I believe, and so in principle the manifestation
> > of the thought as a set of images (or words or what have you), is
> > most likely O(1).
> >
> > Perhaps O(0) is things that could have happened, but did not happen?
> 
> In C, printf("Hello world.") is an O(1) function (the number of
> charactes is constant), but in Python, I'm suggesting that it might be
> O(0) due to Python being designed as a high-level language, where the
> # of characters isn't considered for computing the function, but as
> seen as one operation.
> 
> That's my take...

That's not what it means / how it works. I'm not much of a
mathematician, but O(1) simply means a routine that will always
take the same amount of time, regardless the input data.

If you don't know the length of the string before hand, and assuming for
sake of example none of the arguments to printf are function calls, eg
printf("math results: %.2f!\n", unknown_math_func(23)), then
I suppose its O(N) where N = the length of the string being printed.

I don't see why this would be any different for Python and its print
function (again, assuming none of the arguments to a format string
are function calls, e.g. -  print "math results: %.2f!\n" %
(unknown_math_func(23)).

I honestly don't know where you geting the idea of O(0) from.. It made
me start thinking of quantum entanglement and time travel. But I did eat
a brownie earlier :P

> 
> Marxos

-- 
GPG fingerprint: 17FD 615A D20D AFE8 B3E4  C9D2 E324 20BE D47A 78C7


signature.asc
Description: PGP signature


First Ever Peer-Reviewed Study of Vaccinated vs Unvaccinated Children...

2017-11-29 Thread Zenaan Harkness
Thalidamide, take 2.

You're welcome.




- Forwarded message from Zenaan Harkness  -
From: Zenaan Harkness 
Date: Thu, 30 Nov 2017 14:47:28 +1100
Subject: [jim.sovere...@optusnet.com.au: First Ever Peer-Reviewed Study of 
Vaccinated vs Unvaccinated Children...]

Here it is:

Bow before the facts, punk!

(With good will intended of course :)

Z



- Forwarded message from Jim  -

From: Jim 
To: Jim 
Date: Tue, 28 Nov 2017 23:51:33 +1100
Subject: First Ever Peer-Reviewed Study of Vaccinated vs Unvaccinated 
Children...

--- Forwarded message ---
From: Bob Jungles 
Date: Sun, Nov 26, 2017 at 2:38 AM
Subject: First Ever Peer-Reviewed Study of Vaccinated vs Unvaccinated 
Children...


First Ever Peer Reviewed Study of Vaccinated vs Unvaccinated Children Shows 
Vaccinated Kids Have a Higher Rate of Sickness, 470% Increase in Autism
 
Need To Know News
May 7, 2017  
Mark  

 Blaxill, Age of Autism 
 
 

 

The first-ever, peer-review study has been published comparing total-health in 
vaccinated and unvaccinated children. Dr. Anthony Mawson led a research team 
that investigated the relationship between vaccination exposures and acute or 
chronic illnesses in home-schooled children. The vaccinated children had a much 
higher rate of autism and ADHD, at a rate of 470% higher than those who 
received no shots.  Vaccinated children were also more vulnerable to allergies 
and eczema. Unvaccinated children contract mild childhood diseases more 
frequently, but their vaccinated counterparts suffer pneumonia and ear 
infections more frequently. The finding that vaccination introduces a 
significant risk for autism is devastating to the vaccine industry and, 
therefore, will be vigorously attacked. –GEG
 
 
Pilot Comparative Study on the Health of Vaccinated and Unvaccinated 6-12 Year 
Old US Children
 
In a development that autism parents have long anticipated, the first-ever, 
peer-reviewed study comparing total health outcomes in vaccinated and 
unvaccinated children was released on line yesterday. According to sources 
close to the project, the study had been reviewed and accepted by two different 
journals, both of which pulled back on their approval once the political 
implications of the findings became clear. That’s largely because, as parents 
have long expected, the rate of autism is significantly higher in the 
vaccinated group, a finding that could shake vaccine safety claims just as the 
first president who has ever stated a belief in a link between vaccines and 
autism has taken office.
 
Working in partnership with the National Home Education Research Institute 
(NHERI), Dr. Anthony Mawson led a research team that investigated the 
relationship between vaccination exposures and a range of over 40 acute and 
chronic illnesses in home schooled children, a population chosen for its high 
proportion of unvaccinated children. Surveying families in four states–Florida, 
Louisiana, Mississippi and Oregon—the study (officially titled Vaccination and 
Health Outcomes: A Survey of 6- to 12-year-old Vaccinated and Unvaccinated 
Children based on Mothers’ Reports), reported a number of startling findings.
 
Vaccinated children were significantly more likely than the unvaccinated to 
have been diagnosed with a neurodevelopmental disorder: most notably, the risk 
of being affected by an Autism Spectrum Disorder (ASD) was 4.7 fold higher in 
vaccinated children; as well, ADHD risk was 4.7 fold higher and learning 
disability risk was 3.7 fold higher. Overall, the vaccinated children in the 
study were 3.7 times more likely to have been diagnosed with some kind of 
neurodevelopmental disorder.
 
Vaccinated children were also significantly more likely to be diagnosed with an 
immune-related disorder. The risk of allergic rhinitis (commonly known as hay 
fever) was over 30 times higher in vaccinated children, while the risk of other 
allergies was increased 3.9 fold and the eczema risk was increased 2.4 fold.
 
With respect to acute illness and infectious disease the outcomes were in some 
respects surprising.  As might be expected, unvaccinated children were 
significantly (4-10 times) more likely to have come down with chicken pox, 
rubella or pertussis. Perhaps unexpectedly, the unvaccinated children were less 
likely to suffer from otitis media and pneumonia: vaccinated children had 3.8 
times greater odds of a middle ear infection and 5.9 times greater odds of a 
bout with pneumonia.
 
The study was based on 

Re: How the NSA apparently protects their computers

2017-11-29 Thread James A. Donald

On 11/30/2017 6:29 AM, Ryan Carboni wrote:
https://groups.google.com/forum/#!topic/qubes-users/I7_Hs4eZ0Yg 



The webpage no longer is there, but the video is online: 
https://www.youtube.com/watch?v=CK3BE2VMT-s


For the transcript: 
https://web.archive.org/web/20131001131726/http://www.nsa.gov/public_info/media_center/ia/video/orlando2010/Transcript.html


It is well known that if you
: :	"Our HAP workstation was built from standards developed by the 
National Security Agency's High Assurance Platform Program, to show how 
Trusted Computing technologies can be used to secure the workstation and 
the networks it's connected to"


That if you follow National Security Standards, you are opening a back 
door to the NSA, which back door has leaked to all and sundry.


---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus



Re: absurd MacOS High Sierra bug

2017-11-29 Thread Zenaan Harkness
On Wed, Nov 29, 2017 at 10:46:12PM +, \0xDynamite wrote:
> > Top posting now ...
> 
> Shin!  Sorry about that, thanks for pointing it out.
> 
> > First thought was "thoughts", but the electron synapse reaction time
> > is rather measurable I believe, and so in principle the manifestation
> > of the thought as a set of images (or words or what have you), is
> > most likely O(1).
> >
> > Perhaps O(0) is things that could have happened, but did not happen?
> 
> In C, printf("Hello world.") is an O(1) function (the number of
> charactes is constant), but in Python, I'm suggesting that it might be
> O(0) due to Python being designed as a high-level language, where the
> # of characters isn't considered for computing the function, but as
> seen as one operation.

That's called O(1), unless Python makes it worse.


Re: Cryptocurrency: Speaking of $10k...

2017-11-29 Thread Marina Brown
On 11/29/2017 05:53 PM, Mirimir wrote:
> On 11/28/2017 08:26 PM, grarpamp wrote:
>> https://www.reddit.com/r/Bitcoin/comments/7g9cd3/its_official_1_bitcoin_1_usd/
>> https://news.ycombinator.com/item?id=15803714
>> https://www.youtube.com/results?search_query=bitcoin=CAI%253D
>>
>> A few of the of the megathreads are above.
>> Congrats cypherpunks!
>>
>> Cryptocurrency and blockchain just getting started,
>> in a number of years $10k will feel like $100 does now,
>> a distant happy memory.
> 
> Over the past ~7 years, the price has increased ~10^5. If futures do
> become available, $10K could indeed seem like ~$0. Especially if
> brokerages provide substantial leverage.
> 

If you want leverage - simplefx.com offers a LOT of leverage in trading
forex, crypto and some commodities. I think it is something like 500:1.

--- Marina

>> Nice collection of news videos
>> https://www.youtube.com/channel/UCry6pZNehIejCzPQjfvAaZA/videos
>>
>> https://www.youtube.com/watch?v=l6sGWfZQ5kw
>>
>> Just.getting.started...
>>
> 



Re: Cryptocurrency: Speaking of $10k...

2017-11-29 Thread Mirimir
On 11/28/2017 08:26 PM, grarpamp wrote:
> https://www.reddit.com/r/Bitcoin/comments/7g9cd3/its_official_1_bitcoin_1_usd/
> https://news.ycombinator.com/item?id=15803714
> https://www.youtube.com/results?search_query=bitcoin=CAI%253D
> 
> A few of the of the megathreads are above.
> Congrats cypherpunks!
> 
> Cryptocurrency and blockchain just getting started,
> in a number of years $10k will feel like $100 does now,
> a distant happy memory.

Over the past ~7 years, the price has increased ~10^5. If futures do
become available, $10K could indeed seem like ~$0. Especially if
brokerages provide substantial leverage.

> Nice collection of news videos
> https://www.youtube.com/channel/UCry6pZNehIejCzPQjfvAaZA/videos
> 
> https://www.youtube.com/watch?v=l6sGWfZQ5kw
> 
> Just.getting.started...
> 


Re: absurd MacOS High Sierra bug

2017-11-29 Thread \0xDynamite
> Top posting now ...

Shin!  Sorry about that, thanks for pointing it out.

> First thought was "thoughts", but the electron synapse reaction time
> is rather measurable I believe, and so in principle the manifestation
> of the thought as a set of images (or words or what have you), is
> most likely O(1).
>
> Perhaps O(0) is things that could have happened, but did not happen?

In C, printf("Hello world.") is an O(1) function (the number of
charactes is constant), but in Python, I'm suggesting that it might be
O(0) due to Python being designed as a high-level language, where the
# of characters isn't considered for computing the function, but as
seen as one operation.

That's my take...

Marxos


Re: absurd MacOS High Sierra bug

2017-11-29 Thread Zenaan Harkness
Top posting now ...

First thought was "thoughts", but the electron synapse reaction time
is rather measurable I believe, and so in principle the manifestation
of the thought as a set of images (or words or what have you), is
most likely O(1).

Perhaps O(0) is things that could have happened, but did not happen?

Or rather than "have not happened yet", "could never happen" perhaps?

It's missing from here:
https://en.wikipedia.org/wiki/Big_O_notation#Orders_of_common_functions

and since it's not taken yet, let's call it the order of my thought
(or is that disorder?) - on second thoughts, if ƒ(thought)≡O(0),
perhaps that would mean I have no thoughts? But what of the thought
that thought this thought?

... meltdown of the universe in 3 … 2 … ggg




On Wed, Nov 29, 2017 at 07:25:43PM +, \0xDynamite wrote:
> Speaking of Big-O notation.  Can anyone give me an example of
> something that is O(0)?
> 
> Marxos
> 
> On 11/29/17, John Newman  wrote:
> >
> >
> > On November 29, 2017 12:27:54 PM EST, Georgi Guninski
> >  wrote:
> >>On Wed, Nov 29, 2017 at 10:03:29AM -0500, John Newman wrote:
> >>>
> >>https://it.slashdot.org/story/17/11/28/2135236/macos-high-sierra-bug-allows-login-as-root-with-no-password
> >>>
> >>>
> >>This is not absurd, this is how the real world works.
> >>Software comes with no warranty of any kind for a reason ;)
> >>The ironic part is how this feature survived so long - password
> >>bruteforcer would have caught the empty password in O(1).
> >
> > That's why I called it absurd ;).  How does something so
> > simple to catch fall through the cracks of an ostensibly
> > "large & professional" software shop?
> >
> > Fucking embarrassing for Apple.
> >


How the NSA apparently protects their computers

2017-11-29 Thread Ryan Carboni
https://groups.google.com/forum/#!topic/qubes-users/I7_Hs4eZ0Yg

The webpage no longer is there, but the video is online:
https://www.youtube.com/watch?v=CK3BE2VMT-s

For the transcript:
https://web.archive.org/web/20131001131726/http://www.nsa.gov/public_info/media_center/ia/video/orlando2010/Transcript.html


Re: absurd MacOS High Sierra bug

2017-11-29 Thread \0xDynamite
Speaking of Big-O notation.  Can anyone give me an example of
something that is O(0)?

Marxos

On 11/29/17, John Newman  wrote:
>
>
> On November 29, 2017 12:27:54 PM EST, Georgi Guninski
>  wrote:
>>On Wed, Nov 29, 2017 at 10:03:29AM -0500, John Newman wrote:
>>>
>>https://it.slashdot.org/story/17/11/28/2135236/macos-high-sierra-bug-allows-login-as-root-with-no-password
>>>
>>>
>>This is not absurd, this is how the real world works.
>>Software comes with no warranty of any kind for a reason ;)
>>The ironic part is how this feature survived so long - password
>>bruteforcer would have caught the empty password in O(1).
>
> That's why I called it absurd ;).  How does something so
> simple to catch fall through the cracks of an ostensibly
> "large & professional" software shop?
>
> Fucking embarrassing for Apple.
>


Re: absurd MacOS High Sierra bug

2017-11-29 Thread John Newman


On November 29, 2017 12:27:54 PM EST, Georgi Guninski  
wrote:
>On Wed, Nov 29, 2017 at 10:03:29AM -0500, John Newman wrote:
>>
>https://it.slashdot.org/story/17/11/28/2135236/macos-high-sierra-bug-allows-login-as-root-with-no-password
>> 
>>
>This is not absurd, this is how the real world works.
>Software comes with no warranty of any kind for a reason ;)
>The ironic part is how this feature survived so long - password
>bruteforcer would have caught the empty password in O(1). 

That's why I called it absurd ;).  How does something so
simple to catch fall through the cracks of an ostensibly
"large & professional" software shop?

Fucking embarrassing for Apple.


signature.asc
Description: PGP signature


Re: absurd MacOS High Sierra bug

2017-11-29 Thread Georgi Guninski
On Wed, Nov 29, 2017 at 10:03:29AM -0500, John Newman wrote:
> https://it.slashdot.org/story/17/11/28/2135236/macos-high-sierra-bug-allows-login-as-root-with-no-password
> 
>
This is not absurd, this is how the real world works.
Software comes with no warranty of any kind for a reason ;)
The ironic part is how this feature survived so long - password
bruteforcer would have caught the empty password in O(1). 


Re: absurd MacOS High Sierra bug

2017-11-29 Thread James Bunnell
saw it coming, i'm in linux now, ran mac for 7 yrs, saw it was time
for a change again.

On Wed, Nov 29, 2017 at 10:03 AM, John Newman  wrote:
> https://it.slashdot.org/story/17/11/28/2135236/macos-high-sierra-bug-allows-login-as-root-with-no-password
>
>
> The title pretty much says it all - you can login as root with no
> password, or elevate to root privileges to make system changes with
> no password, on all the current MacOS High Sierra releases. There
> is a work around (I think you simply have to enable the root account,
> with a password), but man..  wtf !?
>
> It shouldn't affect sshd - PermitRootLogin defaults to no. However
> it does appear to affect VNC / Apple Remote Desktop connections.
> LOL! How does something like this get past QA ?
>
> --
> GPG fingerprint: 17FD 615A D20D AFE8 B3E4  C9D2 E324 20BE D47A 78C7


Re: absurd MacOS High Sierra bug

2017-11-29 Thread Edward Low

Lol time to visit Apple Store


El 29/11/17 a las 16:03, John Newman escribió:

https://it.slashdot.org/story/17/11/28/2135236/macos-high-sierra-bug-allows-login-as-root-with-no-password


The title pretty much says it all - you can login as root with no
password, or elevate to root privileges to make system changes with
no password, on all the current MacOS High Sierra releases. There
is a work around (I think you simply have to enable the root account,
with a password), but man..  wtf !?

It shouldn't affect sshd - PermitRootLogin defaults to no. However
it does appear to affect VNC / Apple Remote Desktop connections.
LOL! How does something like this get past QA ?





absurd MacOS High Sierra bug

2017-11-29 Thread John Newman
https://it.slashdot.org/story/17/11/28/2135236/macos-high-sierra-bug-allows-login-as-root-with-no-password


The title pretty much says it all - you can login as root with no
password, or elevate to root privileges to make system changes with
no password, on all the current MacOS High Sierra releases. There
is a work around (I think you simply have to enable the root account,
with a password), but man..  wtf !?

It shouldn't affect sshd - PermitRootLogin defaults to no. However
it does appear to affect VNC / Apple Remote Desktop connections.
LOL! How does something like this get past QA ?

-- 
GPG fingerprint: 17FD 615A D20D AFE8 B3E4  C9D2 E324 20BE D47A 78C7


signature.asc
Description: PGP signature


Re: [OMELETTE] Germany on track to minimize crime stats since immigration influx

2017-11-29 Thread Cecilia Tanaka
Hi, Hi!  :D

I would like to explain to the new members of the CP list why I was so
aggressive and made several references to c*cks and anal sex in my
last message on this thread.

Zenaan, his fake profiles, and his friends are *extremely homophobic*
(search for older messages in our archives, it's pretty scary!)  and
mentioning their obsession with c*cks, anal sex, Putin's topless
"sexy" pics and Trump's bizarre sexual preferences ("golden shower"
and so goes on)  is the best way of making them feel a bit embarrassed
for still living in the closet, with lots of skeletons and repressed
sexual desires.

Anal sex and c*cks are really delicious, awesome, I swear.  They
should leave the closet and be happy, instead of always sending nazi
white supremacist garbage to this list.

Little kisses, hot chocolate and an amazing day for all of you!  <3

Ceci
---
"Don't let anyone rob you of your imagination, your creativity, or
your curiosity.  It's your place in the world; it's your life.  Go on
and do all you can with it, and make it the life you want to live."  -
 Mae Jemison