300000+ entries in 2.13s
thestringpuller: mircea_popescu: there is
a glitch in your site, php related
Bunnyh: 02:58 <Scrat> plus it relies on
a 3rd party (ie. google) <-- i think the name "Google Authenticator" has somehow bred the misconception that 2FA required
a third party
fancy_pants: thanks mircea_popescu - yes I can dead drop just fine. the comment about mpex.co was
a heads up in case it helped troubleshoot. We're good.
Namworld: Because the 2FA device does not need to be online at all, thus not give out the location of the gpg device at all. Thus it wouldn't really help at all to perform
a side channel attack.
mircea_popescu: as it stands right now you can make your order and leave it in
a dead drop or w/e
Namworld: Just
a question... are you implying that the 2FA device might give out your location, thus location of the other machine with the gpg key, thus possible access to conduct
a side channel attack? That's kind of far fetched.
dub: mircea_popescu: security is
a scam
Namworld: and I find it funny you believe 2FA allows for
a side channel attack.
mircea_popescu: anyway. when i retire maybe i'll run
a security university.
Scrat: that would require
a custom device
Scrat: last i checked you couldnt query the google 2fa with
a timestamp in the past
Scrat: plus it relies on
a 3rd party (ie. google)
Namworld: I'm just curious as to how using
a device to get
a 2 FA code allows for the analyzis of the encryption process that occurs on another machine. That's not really
a physical possibility.
ThickAsThieves: can it be summed up as,
a machine with more parts, has more parts that can break
mircea_popescu: you're making the newbish mistake on focusing of
a part of the entire thing. suppose it gives away your position.
Namworld: 2FA would not yield any extra data about the gpg encryption process that would allow for
a side channel attack. It is
a completly external process which provide no insight/data as to what is occuring during the encryption, which would allow you to make any kind of deduction needed... It would just baffles me too much. I'm quite curious as to how that would be even remotely possible.
mircea_popescu: security is
a professional field. it is not opened to guesswork and opining. moreso than surgery
Namworld: I'm not sure where you get the idea the 2FA device offers an attack vector. Especially
a side channel attack.
Namworld: It uses the phone, plus
a computer. The phone only provide you
a random number based on an extra secret key.
Namworld: Well it would introduce further complexity on the server-side handling, which could introduce vulnerabilities. But that's not really
a side channel.
Namworld: It's
a random number that would be included within the gpg encrypted message. It doesn't provide an attack vector.
mircea_popescu: that's why you don't go around slapping random things upon
a security scheme
Namworld: Because it's not
a side channel?
mircea_popescu: you don't see how adding
a side channel would add
a side channel ?
Namworld: I'm not... I don't quite see how that would offer
a side channel attack.
Namworld: But still, gpg key theft remains
a possibility.
ThickAsThieves: We apologize for the long wait period on doing these resets, but it is important to give an owner of
a compromised email account plenty of time to realize they are compromised and recover their account before we hand over their entire account contents.
ThickAsThieves: During the 30 days the request detail and status appears at the top of the portfolio page, including
a cancel button to cancel the request.
mircea_popescu: somewhat dead in
a small majority of possible universes.
ThickAsThieves:
a similar phrase some people say: "probably definitely"
mircea_popescu: some idiot said that
a small majority of w/e got stolen
ThickAsThieves: the post about how
a small majority of irresponsible parties can affect everyone was good too
ThickAsThieves: I am doing research in order to work on
a paper of sorts
mircea_popescu: you know i had
a programme, years ago, where i'd pay
a grant towards someone's grad/master studies if they did it on trilema ?
dub: I'll 1v1 cs_italy pistols only for
a butcoin kekeke
Namworld: I don't ask for entry fees or anything, just offer
a prize.
Namworld: It's very similar to
a popular Gameboy Advance game, but online.
Namworld: It wouldn't be challenging. I got no WoW character and I suck at Street Fighter. Wouldn't be
a challenge.
Namworld: What? It's just
a game where they play as
a little virtual kid while I play as
a virtual rapist. It's safe for kids from 7 to 77 years!
ThickAsThieves: Yeah, hello? No no I’m doing, I’m in
a conference. Alright okay goodbye.
Namworld: On OTC. I challenge the public to
a match of an online game. With prize for first person beating me.
ThickAsThieves: ive done
a fair amount of reading in the forums of their months
ThickAsThieves: it's
a lot to take in, I'm trying to be thorough but it still feels like I'm missing so much
kakobreklaa: there was
a active bid at 94 or you had an ask?
ThickAsThieves: [16:21] <pankkake> "Active Mining Shares Increase Profit Share From 10% To 40% " <<<< It's
a Christmas miracle!
joecool: Scrat: yeah he's
a pretty crappy one at that
Scrat: DiabloD3 aint
a troll
joecool: the troll actually says
a thoughtful thing for
a change
smickles: ... i did sell enough to buy
a new car at 220 tho
mircea_popescu: for my own needs i'm satisfied he had
a bout of paranoia.
Namworld: I don't think there's even
a preview yet for MG
Namworld: I did complain
a lot about mircea refusing to claim with Gigavps afterward, however.
Namworld: So much of that discussion could have been avoided if I didn't miss
a line.
mircea_popescu: ThickAsThieves patrick harnett had
a series of board hearings
mircea_popescu: <ThickAsThieves> tempting sure, but buying VIP at this point is like paying for
a Scammer tag <<< lol truer words...
Blastbob: yea, i dont have
a problem giving out
a 1btc now and then. but 50..
ThickAsThieves: tempting sure, but buying VIP at this point is like paying for
a Scammer tag
Blastbob: would be cool to get both Vip and scammer, and you become
a VIP scammer ;)
Blastbob: add
a poll on it, better stats
Namworld: But you're running
a AM passthrough...
thestringpuller: i guess this is why they have miyamoto do the E3 talks and not
a pr rep
mircea_popescu: "you're all running this because if i live off of it i might make
a post on bitcointalk about how you're kinda cool but not as cool as me/mycat/this guy i know"
mircea_popescu: kakobreklaa gets
a lot of fanmail along the lines of "i should be refunded this bet because it lost and it didn't clearly specify i might not win"
Namworld: Even if they won big and lost
a part of it.
mircea_popescu: lol this is pretty lulzy. dev guy : "i'll be in and out for
a lil". quest writer etc, dev guy's gf : "no you're not."
ThickAsThieves: 'And now he's lying in his bed and gets crushed to death by
a cow. There's no justice in the world.'
ozbot: Man killed by
a 1.5tonne cow after it crashes through his corrugated iron roof as he slept | Mail O
ChaangNoi: that was one hell of
a back fire and i bet the russians tricked the us into thinking he was on that plane,
Apocalyptic: he charges
a 10% premium over the spot but that's acceptable given the risk
mircea_popescu: sturles used to do it for noobs as
a public service, not sure he's still into it.
Apocalyptic: btw i just finished
a transaction via paypal, i guess there are still some trusting people
ozbot: Competitive gaming recognized in U.S. as
a pro sport | Polygon
parseval: lol, no,
a virtual game using fake money instead of BTC