Name: Robert Maas 2009-10-18 16:41
The whole point of this exercise is that I can covertly upload
account names and passwords from my Macintosh to Unix over a VT100
dialup, and if somebody tapping my phone line watches *everything*
I send and receive, both the uploads of all source code and the
actual upload of user+password itself, *still* there's no
computationally feasible way to learn the password.
When I originally developed that function, and then every time I
change the source-code again, I debug it by manually copying and
pasting one expression at a time (one PROG statement, or one
smaller sub-expression) over VT100 dialup, so the REP shows the
value of each such expression, which somebody tapping my phone line
would be able to see.
obtains the (account password) pair, which I most definitely do
*not* want an eavesdropper to be able to see, hence the LENGTH
around it to allow the inner SETQ etc. to execute but hide the
account-password pair from visibility. Letting eavesdropper see it
would allow said person to get into my geocities account and delete
all the files I'm urgently trying to rescue before GeoCities closes
later this month, as well as get into my e-mail account and wreak
disaster.
pushes that pair onto a list which contains *all* the account names
and corresponding passwords so-far uploaded. Letting an
eavesdropper see that even once would allow that person to get into
*all* my Yahoo! Mail and Geocities accounts and wreak havoc
multipled by number of accounts. Hence it's even more urgent to
protect that line of code with LENGTH.
I can't afford to remove the LENGTH wrapper and then carefully put
it back in when I'm debugging the code. Just one mistake, one
slip-up, where I forget to wrap LENGTH around it, and all my work
is lost.
Dear /prog/: This is the clever part.
I'm currently building a new economic system to replace capitalism,
see tinyurl.com/NewEco for my usual style of blabbering, and
tinyurl.com/Portl1 for the current operational system. IRS and SEC
and the Fed and the Treasury and other agencies would *love* to
learn my passwords and trespass into my system and destroy it so
that I can't compete with their monopoly on how people get jobs,
whereby *only* people with lots of money can hire people, and only
people who are friends with people who have lots of money can get
jobs, whereas NewEco will allow *anyone* to hire people, using
NewEco labor-time credit instead of $cash$ to pay them, using a
bidding system for micro-contracts (no contract longer than 440
seconds, i.e. 6 minutes 20 seconds), thus making it easy for
workers to jump in and out without taking a big risk, and making it
impossible for employers to restrict who does each micro-contract,
and thus spreading the contracts among everyone who can do them
instead of locking some people into jobs they are afraid to lose
and locking everyone else out of a job. I can't afford to make it
easy for any of those agencies to learn either my login passwords
or my public-key prime-pairs, and thus destroy my system, hence all
this covert upload and very carefully preventing any confidential
information from being sent to the REP or printed out by the REP.
Note: The current work, where the new version of CMUCL is crashing
horribly, is for the purpose of rescuing my GeoCities files before
they close later this month. I'm trying to automate the process of
logging into my Yahoo/GeoCities accounts and browsing directories
that are hidden from 'wget', while using 'wget' whereever possible.
These GeoCities files will eventually become a major part of
NewEco, but right now I'm in a desparate race to finish automating
the process of cataloging all my GeoCities files so that I can
download them automatically and upload them somewhere more stable
before they all suddenly dissappear when GeoCities closes. I can't
afford to try to do it all manually and risk overlooking hundreds
of files and never realizing I've lost them all and GeoCities will
be gone so there will never be another chance to rescue them.
http://groups.google.com/group/comp.lang.lisp/msg/60f1628497bda857?
account names and passwords from my Macintosh to Unix over a VT100
dialup, and if somebody tapping my phone line watches *everything*
I send and receive, both the uploads of all source code and the
actual upload of user+password itself, *still* there's no
computationally feasible way to learn the password.
When I originally developed that function, and then every time I
change the source-code again, I debug it by manually copying and
pasting one expression at a time (one PROG statement, or one
smaller sub-expression) over VT100 dialup, so the REP shows the
value of each such expression, which somebody tapping my phone line
would be able to see.
(length (setq pr (read-from-string textstr)))obtains the (account password) pair, which I most definitely do
*not* want an eavesdropper to be able to see, hence the LENGTH
around it to allow the inner SETQ etc. to execute but hide the
account-password pair from visibility. Letting eavesdropper see it
would allow said person to get into my geocities account and delete
all the files I'm urgently trying to rescue before GeoCities closes
later this month, as well as get into my e-mail account and wreak
disaster.
(length (push pr g*YM-assoc-acct+pw))pushes that pair onto a list which contains *all* the account names
and corresponding passwords so-far uploaded. Letting an
eavesdropper see that even once would allow that person to get into
*all* my Yahoo! Mail and Geocities accounts and wreak havoc
multipled by number of accounts. Hence it's even more urgent to
protect that line of code with LENGTH.
I can't afford to remove the LENGTH wrapper and then carefully put
it back in when I'm debugging the code. Just one mistake, one
slip-up, where I forget to wrap LENGTH around it, and all my work
is lost.
Dear /prog/: This is the clever part.
I'm currently building a new economic system to replace capitalism,
see tinyurl.com/NewEco for my usual style of blabbering, and
tinyurl.com/Portl1 for the current operational system. IRS and SEC
and the Fed and the Treasury and other agencies would *love* to
learn my passwords and trespass into my system and destroy it so
that I can't compete with their monopoly on how people get jobs,
whereby *only* people with lots of money can hire people, and only
people who are friends with people who have lots of money can get
jobs, whereas NewEco will allow *anyone* to hire people, using
NewEco labor-time credit instead of $cash$ to pay them, using a
bidding system for micro-contracts (no contract longer than 440
seconds, i.e. 6 minutes 20 seconds), thus making it easy for
workers to jump in and out without taking a big risk, and making it
impossible for employers to restrict who does each micro-contract,
and thus spreading the contracts among everyone who can do them
instead of locking some people into jobs they are afraid to lose
and locking everyone else out of a job. I can't afford to make it
easy for any of those agencies to learn either my login passwords
or my public-key prime-pairs, and thus destroy my system, hence all
this covert upload and very carefully preventing any confidential
information from being sent to the REP or printed out by the REP.
Note: The current work, where the new version of CMUCL is crashing
horribly, is for the purpose of rescuing my GeoCities files before
they close later this month. I'm trying to automate the process of
logging into my Yahoo/GeoCities accounts and browsing directories
that are hidden from 'wget', while using 'wget' whereever possible.
These GeoCities files will eventually become a major part of
NewEco, but right now I'm in a desparate race to finish automating
the process of cataloging all my GeoCities files so that I can
download them automatically and upload them somewhere more stable
before they all suddenly dissappear when GeoCities closes. I can't
afford to try to do it all manually and risk overlooking hundreds
of files and never realizing I've lost them all and GeoCities will
be gone so there will never be another chance to rescue them.
http://groups.google.com/group/comp.lang.lisp/msg/60f1628497bda857?