Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
infernal machines
Oct 11, 2012

we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.
oddly, fantasy sports isn't held to the same standard

Adbot
ADBOT LOVES YOU

duTrieux.
Oct 9, 2003

just use one of those popomatic trouble dice domes for your rng seed, problem solved

flakeloaf
Feb 26, 2003

Still better than android clock

vodkat posted:

so in America you can go to jail for pressing a button to accurately :rip:

pseudorandom name
May 6, 2007

Cocoa Crispies posted:

did intel ever ship that actual rng instruction in chips you can buy

RDRND shipped in Ivy Bridge, RDSEED shipped in Broadwell.

I don't know that anyone dares use them since the output of a stream cipher is indistinguishable from an CPRNG.

Kuvo
Oct 27, 2008

Blame it on the misfortune of your bark!
Fun Shoe

an american hero

https://en.wikipedia.org/wiki/Michael_Larson

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum
a heartwarming tale of man's triumph over capitalism if ever there was one

fisting by many
Dec 25, 2009



vodkat posted:

so in America you can go to jail for pressing a button to accurately :rip:



if they hadn't have taken a plea bargain would that have held up in court? I mean they really didn't do anything other than play the game a little too well.

gaming law is complicated and varies state by state but a general rule is that it's cheating if you use any sort of device

using blackjack as an example, counting cards to gain an advantage is not illegal. you can't be arrested for it or have winnings seized, the casino can only bar you from playing. but it would be illegal if you used a counting device to keep track.

the fact that they used their cell phone to time the presses will probably be enough to convict. if you had some kind of slot machine rain man doing it by memory it'd be much harder to charge him with anything (but he'd still be banned from every casino in the country)

hobbesmaster
Jan 28, 2008

fisting by many posted:

gaming law is complicated and varies state by state but a general rule is that it's cheating if you use any sort of device

using blackjack as an example, counting cards to gain an advantage is not illegal. you can't be arrested for it or have winnings seized, the casino can only bar you from playing. but it would be illegal if you used a counting device to keep track.

the fact that they used their cell phone to time the presses will probably be enough to convict. if you had some kind of slot machine rain man doing it by memory it'd be much harder to charge him with anything (but he'd still be banned from every casino in the country)

note that most people get charged for stuff like "counting cards" or whatever because the sneak back in or use fake ids

Raere
Dec 13, 2007


quote:

Larson used his cash winnings for taxes and real estate investments. However, he also had problems with the law and was involved in illegal schemes. As a result, Larson lost all of his winnings within two years of the show's taping and moved to Florida, where he later died of throat cancer at the age of 49.

Once a cheat always a cheat

Subjunctive
Sep 12, 2006

✨sparkle and shine✨

was memorizing the pattern cheating? is memorizing a lot of words cheating at scrabble?

infernal machines
Oct 11, 2012

we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.
no, using a mechanical aid to subvert the pattern is cheating. memorization is fine.

Lain Iwakura
Aug 5, 2004

The body exists only to verify one's own existence.

Taco Defender

Subjunctive posted:

was memorizing the pattern cheating? is memorizing a lot of words cheating at scrabble?

https://www.youtube.com/watch?v=c18V8q0WMPg

The MUMPSorceress
Jan 6, 2012


^SHTPSTS

Gary’s Answer

Raere posted:

Once a cheat always a cheat

i remember a documentary that showed he literally converted all the winnings to cash and stored them in garbage bags in his house too. not shocking that a guy like that was not mentally all there.

The MUMPSorceress
Jan 6, 2012


^SHTPSTS

Gary’s Answer

i love that the dilbert cartoon was good basically against scott adams' will

The MUMPSorceress
Jan 6, 2012


^SHTPSTS

Gary’s Answer
the grey forum sure is mad that firefox is getting rid of the older more insecure extension framework. how will they get a "sane" tabs-under-url ui without classic theme restorer?

Shame Boy
Mar 2, 2010

LeftistMuslimObama posted:

i remember a documentary that showed he literally converted all the winnings to cash and stored them in garbage bags in his house too. not shocking that a guy like that was not mentally all there.

if i had garbage bag amounts of money i'd probably fill a few garbage bags full too if only to take some pictures of me with my phat sacks

then it'd go right back in the bank cuz i'm a boring white dude

Shame Boy
Mar 2, 2010


quote:

The five light patterns on the Big Board were immediately erased and replaced with five new ones for about a month. Then, to make sure no one was memorizing those, they were again replaced with five new patterns for another month. Finally in August, new software was installed which gave the Big Board a total of 32 patterns, effectively ensuring that no one would ever duplicate Larson's trick

nobody could possibly remember 32 sequences!!

Munkeymon
Aug 14, 2003

Motherfucker's got an
armor-piercing crowbar! Rigoddamndicu𝜆ous.



LeftistMuslimObama posted:

tabs-under-url ui

:barf:

vOv
Feb 8, 2014

ymgve posted:

why are slot machines using PRNGs at all - just have a microphone, a temperature sensor or some optical sensor - the lower bits should provide entropy enough for the system, it's not like it needs more than a few byts of RNG for every spin anyway

if you're really paranoid, just throw the RNG module into a centralized server or something, the slot machines are probably networked anyway

I'm shocked any gambling commission would ever authorize a slot machine that uses any form of PRNG

yeah, way more secure to get all your random numbers over the network

Shaggar
Apr 26, 2006
the limitation here is not on software quality but hardware cost. moving it to a central system would make sense cause you could deliver signed RNG messages to all your client slot machines which would prevent tampering and you'd save money on hardware.

what probably happened is the gaming commission considered the prng good enough and the casinos agreed so no need to spend the extra $$ on a real rng. it would be really interesting to hear the reasoning behind it and if they even considered going with better rng at all.

fishmech
Jul 16, 2006

by VideoGames
Salad Prong

LeftistMuslimObama posted:

the grey forum sure is mad that firefox is getting rid of the older more insecure extension framework. how will they get a "sane" tabs-under-url ui without classic theme restorer?

It's pretty weird how mad you are where other people's ui elements are located

Shame Boy
Mar 2, 2010

vOv posted:

yeah, way more secure to get all your random numbers over the network

there's standard protocols for doing this securely already iirc but lol if people will even use them let alone implement them correctly

Shame Boy
Mar 2, 2010

fishmech posted:

It's pretty weird how mad you are where other people's ui elements are located

fishmech confirmed to use tabs-under-url layout like some kind of freak luddite

Jabor
Jul 16, 2010

#1 Loser at SpaceChem

ate all the Oreos posted:

there's standard protocols for doing this securely already iirc but lol if people will even use them let alone implement them correctly

you just hash random.org's non-https error page, right?

cinci zoo sniper
Mar 15, 2013




Former NSA contractor may have stolen 75% of TAO’s elite hacking tools | Ars Technica https://arstechnica.com/tech-policy/2017/02/former-nsa-contractor-may-have-stolen-75-of-taos-elite-hacking-tools/

Pile Of Garbage
May 28, 2007




quote:

...stole more than 50 terabytes of highly sensitive data.

gently caress the hacking tools, that's prolly only a couple of GB at most. what's the rest of the data?

Wiggly Wayne DDS
Sep 11, 2010



is that a different contractor than the one taking home TBs of material for years? story was up a few weeks ago when they were raided

The_Franz
Aug 8, 2003

Truga posted:

either that or it has something to do with

https://twitter.com/alt_kia/status/818609521928998912?ref_src=twsrc%5Etfw

if you have full debug access to your cpu, hahahaha drm? lol nope.

intel chips have had hardware debugging interfaces for ages. previously you needed a board with an XDP port and their proprietary interface box which costs $3000 to actually use it. now it seems that you just need the $1000+ debugging software.

a hardware debug port on the outside of the case is still pretty dumb though

The_Franz fucked around with this message at 14:17 on Feb 7, 2017

Midjack
Dec 24, 2007



Wiggly Wayne DDS posted:

is that a different contractor than the one taking home TBs of material for years? story was up a few weeks ago when they were raided

same guy that they raided in october

a lot has happened since then

Pile Of Garbage
May 28, 2007



is there any info on how the dude exfiltrated that data? i've been going through poo poo in my head and assuming a semi-competent net-sec team with competent physical security the only way i can think of is the dude was handed a 50TB DMS DB full of all kinds of poo poo

Pile Of Garbage
May 28, 2007



on another subject i noticed today that ssl labs now scans for DNS CAA. has anyone ever configured it and can advise? just wondering for my server that's running a comedy-option config

Wiggly Wayne DDS
Sep 11, 2010



wasn't it just that they never checked pockets or was that what was surmised

cinci zoo sniper
Mar 15, 2013




cheese-cube posted:

is there any info on how the dude exfiltrated that data? i've been going through poo poo in my head and assuming a semi-competent net-sec team with competent physical security the only way i can think of is the dude was handed a 50TB DMS DB full of all kinds of poo poo

i imagine we'll never learn this. admitting competence flaws would be opsec fuckup, admitting lack of competence would unlikely be something in interest of any federal body these days

Pile Of Garbage
May 28, 2007



fake edit: started thinking about possible methods for exfil then realised that we know nowhere near enough to even theorise.

Truga
May 4, 2014
Lipstick Apathy

LeftistMuslimObama posted:

the grey forum sure is mad that firefox is getting rid of the older more insecure extension framework. how will they get a "sane" tabs-under-url ui without classic theme restorer?

the old firefox extension framework is also real loving good though, and allows for a lot of things the lovely js one can't do

i don't give a poo poo where the url bar is, because my url bar doesn't exist, but if the only extensions that are keeping firefox users on firefox break, most will just use chome instead. i'm sure google would love that, but i'm not sure mozilla will.

Shame Boy
Mar 2, 2010

i'm gonna guess flash drive up the butt because it's the funniest option

cinci zoo sniper
Mar 15, 2013




ate all the Oreos posted:

i'm gonna guess flash drive up the butt because it's the funniest option
people used to bring the rubles in their butt out of soviet russia since there were restrictions on hard cash export over the borders of russian sfsr

Pile Of Garbage
May 28, 2007



Truga posted:

the old firefox extension framework is also real loving good though, and allows for a lot of things the lovely js one can't do

NPAPI support : firefox :: register_globals : PHP

ate all the Oreos posted:

i'm gonna guess flash drive up the butt because it's the funniest option

ah but was it 100 x 512GB flash drives on one day or one 512GB flash drive per day for 100 days?

can you even get 512GB flash drives idk

dpkg chopra
Jun 9, 2007

Fast Food Fight

Grimey Drawer
https://twitter.com/cra0kalo/status/828947326425133057

Adbot
ADBOT LOVES YOU

cinci zoo sniper
Mar 15, 2013




cheese-cube posted:

NPAPI support : firefox :: register_globals : PHP


ah but was it 100 x 512GB flash drives on one day or one 512GB flash drive per day for 100 days?

can you even get 512GB flash drives idk

yeah, 512 gb is easy, they are like 200-300 usd each

  • Locked thread