The Alice thread continues!
We take one step further towards decentralization as we federate our way away from Twitter.
Today we're playing with SCITT and ATProto: https://github.com/intel/dffml/discussions/1406?sort=new#discussioncomment-4104302
Prev: https://twitter.com/pdxjohnny/status/1585488415864557568
We have liftoff with virtual confidential ledger (not really using SGX).
https://asciinema.org/a/536709
https://github.com/microsoft/scitt-ccf-ledger/blob/main/DEVELOPMENT.md
Still really stoked about ssh ed25519 keys possibly helping bridge developer hardware roots of trust (TPMs) into DID backed (scitt.io) decentralized software supply chains (decentralized trains of thought).
The easiest way to use Machine Learning. Mix and match underlying ML libraries and data set sources. Generate new datasets or modify existing ones with ease. - dffml/0007-A-GitHub-Public-Bey-and-TP...
We uploaded the alice shouldi contribute dataflow (Living Threat Model Collector Data Flow) to SCITT and get a receipt!
Great discussion today in IETF SCITT working group! What *is* the difference in scope between IETF RATS? Transparency log is a big part.
2022-11-14 SCITT Meeting Notes: https://github.com/intel/dffml/discussions/1406?sort=new#discussioncomment-4138313
Federated transparency logs? Sounds like fun!
RSS VEX feeds?
https://twit.social/@jr/109345573865828477
2022-11-15 Engineering Logs: https://github.com/intel/dffml/discussions/1406?sort=new#discussioncomment-4146655
Attached: 1 image Here's a neat #Mastodon trick I just discovered: You can access an RSS feed of any user's posts simply by adding .rss onto the end of their profile URL — so, for instance: https://twit.social/@jr.rss You can then use that link to follow all of that person's posts in Feedly, Feedbin, or any other RSS reading service. Heck, you can even do it directly in #Chrome, if you want!
We'll get to RSS later, first we're going to implement the NIST NVD API and use it in the CVE Binary Tool tests against the new version 2: https://github.com/intel/cve-bin-tool/pull/2330/files
tests: add tests for NVD 2.0 API
intel/cve-bin-tool#2334: https://github.com/intel/cve-bin-tool/issues/2334#issuecomment-1315643093
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with a list of components and versions. - feat: Support NVD 2.0 API (Fixes #1872) by anthonyharrison · Pull Request #2330 · intel/cve-bin-tool
We're still implementing the NSIT API this morning.
I love the crisp recording of ascii at 4k rendered via SVG. Now if only we could stream that ndjson... soon we'll be able to infer "streams" via streamed dev terminal sessions.
https://asciinema.org/a/538136
2022-11-16 Engineering Logs: https://github.com/intel/dffml/discussions/1406?sort=new#discussioncomment-4157129
LIVE at HEAD Alice's state of the art progresses to serving mock data from an NVD style API via a new CLI command:
$ alice threats vulns serve nvdstyle
Addition of NVD Style HTTP Handler: https://github.com/intel/dffml/blob/4101595a800e74f57cec5537ea2c65680135b71a/entities/alice/alice/threats/vulns/serve/nvdstyle.py
Addition of server as CLI command: https://github.com/intel/dffml/commit/cb2c09ead795ba0046cb5911bcd6e939419058d8
Orie updated didme.me!
https://mastodon.social/@pdxjohnny/109388016187212447
Humans communicate with memes. Machines will too! 😍 Words cannot express how excited I am. Love me a reliable communication / distribution channel! ;) 🐛
In our 7 volume tutorial series we roll Alice.
https://github.com/intel/dffml/blob/alice/docs/tutorials/rolling_alice/0000_preface.md
Alice’s architecture, the open architecture, is based around thought. She communicates thoughts to us in whatever level of detail or viewed through whatever lens one wishes. She explores trains of thought and responds based on triggers and deadlines. She thinks in graphs, aka trains of thought, aka chains of system contexts. She operates in parallel, allowing her to represent N different entities.
Acceleration of secure, fail safe integration is the name of the game. ASI is imminent. Our analysis methodologies for manipulative behavior best improve fast. God’s speed friends. Good luck to us all.
Ref: Rolling Alice: Architecting Alice: Introduction and Context: The Scary Part
My laptop just died, I came here to post this and then low and behold:
PING?!
THERE'S A REMOTE BUFFER OVERFLOW IN FREEBSD'S IMPLEMENTATION OF *PING*?!?!?!
https://www.freebsd.org/security/advisories/FreeBSD-SA-22:15.ping.asc
QT @pdxjohnny
Welcome to the Apocalypse Now^2 LAN Party. Come hell or high water there will be jam today. There is no tomorrow without today. Who’s to say when today is today and today is tomorrow when the world is self sovereign. 🎩☕️🫖
/acc/
https://mastodon.social/@pdxjohnny/109435518980634600
If it doesn't make sense today, I promise it will when we have jam tomorrow ;P
Oh fuck did I just play a joke on myself mother*fucker*!!!
In hindsight I walked right into that one. 😂 😂 😂
https://apocalypsefatigue.org/score (I found this link while searching for “fourth eye” to see if that was a thing anyone else had mentioned, apparently a well known concept!)
Okay I'm exhausted and I'm gonna code tomorrow. Because we can have jam today and jam tomorrow if we want!
Alice Engineering Comms 2022-11-30 Engineering Logs: https://github.com/intel/dffml/discussions/1406#discussioncomment-4273908
Error seen when while creating Dilithium, Falcon, or Sphincs key (tried all three) 918-9082c82850feae6b.js:28 Uncaught (in promise) Error: StegImage#hideBlob: Mismatch after verification; idx=1672 ...
John