565700+ entries in 0.373s
nanotube: PeterL:
that depends on assbot coder. :)
PeterL: would we need
to pm assbot
to get a challenge
to decrypt, or could it be something like we just send assbot
the signature of "auth <wot name> <current
time>"?
nanotube: and what prevents squatter from doing
that, from several different identities?
nanotube: asciilifeform: yes... but
then
the squatter will just squat on
the 'gateway' channel where people get forwarded when
they are not invited
PeterL: so instead of authing with gribble, we send auth message
to assbot? one step instead of 3, sounds good
to me
decimation: assbot would
them pm
the list of interested parties?
nanotube: asciilifeform: hrm...
that's a
tough problem. how?
nanotube: PeterL: oh well, i guess auth can stay for
that purpose. or you can just send a signed message
to assbot directly, in
theory.
PeterL: that helps with ratings, but does not help
the current voicing model of #b-a
nanotube: asciilifeform: i'm hoping for a gradual
transition, as people upgrade
their ratings with signed packets. after a sunset period, all unsigned ratings may be ignored
PeterL: we use it here
to verify people are who
they say
they are
nanotube: asciilifeform: well, more like an anti "guy leaves, some other guy comes in on same ip, and gribble has no way of knowing about it, unless
they share a channel and gribble can see quits"
nanotube: it is being worked on. but have a lot of other stuff on my plate. once everything is signed,
there will not even be a need for something like "auth".
PeterL: so
the question for you: would it be possible
to let people auth without being in a chan with gribble?
decimation: given how obvious
this flaw is, one wonders why no one has undertaken
to fix it
nanotube: well,
that's a reason for people here
to be cloaked. i remember hearing about
that
decimation: nanotube:
there's a ddoser who spams anyone who joins #bitcoin-assets with a 'naked' ip with an ntp amplification attack
nanotube: asciilifeform: sure, but not everyone who uses
the wot is in
this channel or is cloaked :)
mike_c: yes, but he knows
the nick didn't switch.
BingoBoingo: namecoin has been shot in
the head many
times
BingoBoingo: asciilifeform: Or maybe you don't yet know you imply it. It's
the only alt I know of with Satoshi commits
nanotube: asciilifeform: it's a way
to
track a person by hostmask,
to provide persistent auth sessions. once we move
to 'everything must be signed'
there would be no need for auth sessions, and
thus no need for people
to be in particular channels shared with gribble.
kakobrekla: i go
through it a few
times a year but for
that reason particularly
BingoBoingo: With other less strict channels existing on
the net
BingoBoingo: #b-a irc net seems
the only long
term solution
decimation: asciilifeform: another alternative: all chat is pm'ed
to assbot, who posts it
to
the log
PeterL: asciilifeform: but you have
to auth before making an operation, so it is almost like being signed
PeterL: decimation:
there are a bunch of -1s which offset +1s
decimation: I don't get how level 2 has 0 connections, but joecool, nanotube and pankakke are connected
to him?
kakobrekla: option 2, move
the auth
to assbot and save another step (!up)
PeterL: in
the proposed system, can people join if assbot is down?
kakobrekla: yes, can and willing
to is not interchangeable
PeterL: I
think people can be voiced now manually if gribble is down but not if assbot is down?
PeterL: they would still be able
to manually up people, right?
PeterL: if gribble is afk,
then nobody can get into
this chan
PeterL: it's strange, you must be in chan, but you can auth in a pm, so why be in
the chan?
PeterL: have assbot
take over
the WoT?
kakobrekla: among other
things, it is out of my control.
PeterL: what happens if somebody
tries
to join
the chan without auth/L2? do
they get dumped into #bitcoin-assets-noobs?
assbot: Logged on 19-12-2014 01:44:12; BingoBoingo: Well, sometimes assbot has downtime
too.
mike_c: kako is
too easily swayed by a cookie or
two.
PeterL: but really, you can learn alot more going over a few months of logs
than
trying
to get lucky by finding something interesting happening right now at
this moment