DDraceNetwork - developer

speaking of https being safe and so on, how did/does NSA TURMOIL work then?

what is NSA TURMOIL?

https://en.wikipedia.org/wiki/Turbulence_(NSA)

Turbulence is a United States National Security Agency (NSA) information-technology project started c. 2005. It was developed in small, inexpensive "test" pieces rather than one grand plan like its failed predecessor, the Trailblazer Project. It also includes offensive cyberwarfare capabilities, like injecting malware into remote computers. The...

from that page:

Turmoil is involved in the process of decrypting communications.[5]

01:06

I still don't really know what NSA TURMOIL is

gm

04:36

maybe we should store in db the runs that used save or load

04:36

easier to wipe.when exploit is found

by store i meant a flag whether saveload has been used

<ChillerDragon> is it only me or is the editor with a laptop touchpad useless?

07:11

<ChillerDragon> the mouse is hard to control and when i select tiles i get back a random selection

I remember this discussion before somewhere

zhn

speaking of https being safe and so on, how did/does NSA TURMOIL work then?

TURMOIL is the passive data collection part. The more interesting part of that system is QUANTUMTHEORY

07:43

Well TURMOIL is interesting too but moreso in how little corporations care about your privacy part. Many gave the NSA access to install what they call "implants" on their backbones

07:44

Perhaps for money, perhaps to avoid being invited to a cia blacksite for enhanced tea and cookies

Learath2

Perhaps for money, perhaps to avoid being invited to a cia blacksite for enhanced tea and cookies

I want to be invited for tea and cookies

I hear they are irresistible

Mhmmmm, where to apply?

Take part in a terror plot or become the sole sysadmin at a large datacenter. You'll get the invitation soon enough

Learath2

Take part in a terror plot or become the sole sysadmin at a large datacenter. You'll get the invitation soon enough

Sounds like a plan. Want to be my co sysadmin? So we both receive an invitation?

07:51

If we add heinrich and deen as well, maybe they offer us a shuttle service

07:52

No thank you. I don't want any enhanced cookies

07:57

I do wonder how the NSA gets/used to get certificates to perform their QUANTUM attacks. QUANTUMINSERT is just a packet race e.g. if you get to the client before the webserver you have a chance, but you still need to present a certificate

08:02

I guess pre-CT they could just do whatever by compromising just one CA

Just get the Lets Encrypt Root CA

Robyt3

[ddnet/ddnet] Issue opened: #8594 Console command argument validation

Reported by Gwendal on Discord:

/setjumps have weird behaviours when going above 2^31(intmax issues ig)

We are currently not validating any of the integer, float and color console command argument values. Instead, we use whatever value was parsed or zero (or black color). Would be more convenient if the console would validate arguments and output errors like "foobar" is not a valid color instead of executing the command with some unwanted value.

heinrich5991

I still don't really know what NSA TURMOIL is

this page contains slides from nsa presentation about work of turbulence

Learath2

TURMOIL is the passive data collection part. The more interesting part of that system is QUANTUMTHEORY

so, quantumtheory is used to collect data, or are they independent?

10:09

i mean as part of turmoil or not (edited)

TURMOIL analyzes packets, and funnels them to TURBINE. TURBINE then sometimes makes the decision to try an active attack. They have many active attacks in the QUANTUM suite that they use

10:12

QUANTUMINSERT is a packet race attack, if TURBINE gets a TCP SYN, an attack server close by will rush to race the actual TCP response from the destination server

10:13

Paired with a forged certificate this allows you to turn your side channel into a mitm

Learath2

QUANTUMINSERT is a packet race attack, if TURBINE gets a TCP SYN, an attack server close by will rush to race the actual TCP response from the destination server

ig it works with 90% succeds chance since nsa has all capabilities to make physical lines for themselves

Another one we know of is QUANTUMDNS which tries to hijack dns

zhn

ig it works with 90% succeds chance since nsa has all capabilities to make physical lines for themselves

in europe at least

zhn

ig it works with 90% succeds chance since nsa has all capabilities to make physical lines for themselves

They just pay off backbone providers or threaten them or whatever and they get access. No need to build anything

1

gg all our data is being collected by idiocratic country kek

The entire system is an automated self expanding surveillance network. These things need no human intervention

Learath2

The entire system is an automated self expanding surveillance network. These things need no human intervention

except of building new datacenters

If a QUANTUM attack succeeds it'll connect you to a NSA TAO server which will try to auto infiltrate your computer with hundreds and hundreds of zero days and backdoors that they get software and hardware vendors to add in there. Then your computer becomes a part of their surveillence network, occasionally reporting to turbine servers

10:19

The documents that got dumped online reveal some insane capabilities. It's quite impressive the cyberwarfare arsenal they have built

did snowden publish all the documents he got btw?

Oh and if all these sophisticated attacks fail. They have very manual operations too. They will straight up intercept shipments of hardware and install spying chips on them

zhn

did snowden publish all the documents he got btw?

Hm, I actually don't know

Learath2

Oh and if all these sophisticated attacks fail. They have very manual operations too. They will straight up intercept shipments of hardware and install spying chips on them

imagine arguing with somebody who got ties with nsa

10:22

and then

Learath2

Hm, I actually don't know

i remember that he transferred all the data to journalists so they could filter it to fit in our minds

I don't even know if this part of it was leaked by snowden. I remember this being leaked by some hackers

kaitlynia

[ddnet/ddnet] Issue opened: #8595 Missing skin indicator

This sorta revives #4825 based on Tater's suggestion; my idea for this would be to prepend an icon to the nameplate of players with skins that are not found locally or via the skin database. The indicator should be hidden by default but enabled via cl_indicate_missing_skins 1 in console

weird https://robertheaton.com/pyskywifi/

sent before

Ryozuki

https://robertheaton.com/pyskywifi/

yup

11:06

too many embeds kek

Robyt3

[ddnet/ddnet] Pull request opened: #8596 Implement client restarting on Android

Restarting the client previously did not work, as the shell_execute function on Android uses fork which is not supported. Now, the client is restarted by using an Android intent to restart the main activity. This is triggered by sending a user-defined message from the native code to the SDL main activity thread.

Checklist

[X] Tested the change ingame
[ ] Provided screenshots if it is a visual change
[ ] Tested in combination with possibly related configuration options ...

cannot update AUR to 18.3.1 - seems related to the UPNP API update

nvm fixed in latest upstream KEKW

, not sure if i can just cherrypick that tho (edited)

@meloƞ my fish run openbsd

12:57

check the logo

r.i.p. ZillyInsta

meloƞ

cannot update AUR to 18.3.1 - seems related to the UPNP API update

hier deklariert

13:17

Seeing compiler errors in a different language is rattling

meloƞ

cannot update AUR to 18.3.1 - seems related to the UPNP API update

switch to gentoo, i maintain the ebuild