log☇︎
600700+ entries in 0.371s
mircea_popescu: asciilifeform commenting the source code is never a bad idea.
asciilifeform: incidentally, reserving signature for 'i approve this message' is braindamaged. should sign with comments like 'this line is ok unless goldbach's conjecture is proven false, then yer phucked' etc.
mircea_popescu: so then say this again later we see ? :D
kakobrekla: anyway, some years at the future
mircea_popescu: depends how long it has in the sun
mircea_popescu: it's another to trust it because asciilifeform commited it, and therefore perhaps read it, and it's open source so therefore "billions of eye pairs"
mircea_popescu: it's one thing to trust this rnd function because asciilifeform and 25 others signed on reading it. ☟︎
asciilifeform: this is all quite trivial, so far (until someone starts insisting on actual work)
mircea_popescu: there's no other way to trust software.
mircea_popescu: we need to create that "have read" accounting scheme i was talking about weeks ago.
mircea_popescu: <asciilifeform> how to do signed commits << the barbarian way. everyone who read a patch file (yes) and is willing to sign under it, signs. this gets posted. whoever wants, can apply the patches to get a merged turdball. << i think this is exactly how it should go. ☟︎
mircea_popescu: i have no idea, never looked that closely.
asciilifeform: how to do signed commits << the barbarian way. everyone who read a patch file (yes) and is willing to sign under it, signs. this gets posted. whoever wants, can apply the patches to get a merged turdball.
jurov: mircea_popescu: but iirc it signs the diff, not just commit message
bounce: you can have git trigger a log whatnot and feed that to the other end of a bot
mircea_popescu: bounce only because people see it in the logs.
jurov: i have to look into how signed commits are done
bounce: no real point trying to go through bots when git can do it right away
mircea_popescu: a contrib that is submitted via ssh WAS, maybe, perhaps, signed at some point.
mircea_popescu: jurov might be a good idea via bots, so people can commit from here directly, but even w/o that : a contrib that is signed is signed permanently.
bounce: no idea how that works. you'd have to have git check against valid gpg sigs from blessed keys or something?
asciilifeform: mircea_popescu: i rarely if at all run openbsd tho << now we know, he has personal os and btc apparatus! with alien technology.
jurov: via irc bots! bring the noize!
mircea_popescu: nonw of this ssh bs
mircea_popescu: get everyone used to checking sigs.
bounce: though no, best put a ssh thingy for commit on it
mircea_popescu: https is about as useful as tits on a boar.
bounce: can throw a git repo at it for starters
jurov just snatched therealbitcoin.org/.com . we'll see. ☟︎
asciilifeform: redo the whole thing in cl in a night already << ask me again in peacetime
mircea_popescu: punkman yeah speaking of all this comotion, any chance we get the deedbot up by fri ?
mircea_popescu: asciilifeform you mean the source tarballs ?
asciilifeform: who has the bitcoind tree? othernubs?
mircea_popescu: if lenin were alive today lenin would be begging us to let him in this chan.
mircea_popescu: asciilifeform i rarely if at all run openbsd tho ?
mod6: we'll draft up something, probably have something for all to look at by end of tomorrow or friday? hope that's not too long.
asciilifeform: mircea_popescu: care to upload a favourite and signed openbsd installer? then we roll tonight.
mircea_popescu: except it should be explicitly exclusive rather than inclusive. "We will NOT work with unqualified third parties, which is to say parties that have not satisfied their log reading and wot presence prequalifications." ☟︎
mod6: mircea_popescu: ok thanks, good point.
bounce: redo the whole thing in cl in a night already
mircea_popescu: certainly the cl is a good antecessor.
asciilifeform: valgrind << will run inside. it attaches to a process. if you want out-of-band (say, kernel diddling) both emulators present 'gdb' interface to the outside, stop cpu, play
mike_c: <+ben_vulpes> http://www.nhplace.com/kent/CL/x3j13-sd-05.html << this seems like a good, simple, plain example.
mircea_popescu: asciilifeform hopefully that's done by fri.
mircea_popescu: <mod6> <+ben_vulpes> i've never written a charter, are there good examples out there? << me either, but we can work on it. no sweat. << you've read plenty of mpex contracts, good enough. keep it direct, plain and simp,le.
othernubs`: highest grade i ever got in a math degree was 98% in a technical writing course ;0
BingoBoingo: I have a feeling the great use of Deedbot will be proclamations of giving a fuck.
asciilifeform: i'll happily take a weekend off to read the rng gibblets, once you lot draft a proclamation of Giving A Fuck
mod6: <+ben_vulpes> i've never written a charter, are there good examples out there? << me either, but we can work on it. no sweat.
asciilifeform: qemu only for builders / paranoiacs. ordinary mortals can use the resulting binaries.
mod6: <+mircea_popescu> ben_vulpes mod6 so draft a charter, then we can bitch at it. << okay :)
jurov: yes, you can make the qemu image available for reproducible builds, but dunno if to advertise as sop for everyone
mircea_popescu: and since we're doing this : asciilifeform the one thing you'd be most halpful with would be, look into the god damned rand code/crypto uses thereof.
ben_vulpes: i've never written a charter, are there good examples out there?
othernubs`: maybe it's fair to put the burden of the system's basic integrity on the user
asciilifeform: how it is better as distributing signed binaries? << iron correspondence btween claimed source and claimed binaries. only one way to achieve this reliably - the one suggested above.
othernubs`: yeah, that's valid
mircea_popescu: ben_vulpes mod6 so draft a charter, then we can bitch at it.
mircea_popescu: which is another very valid 2nd step, audit the motherucker.
asciilifeform: even contemplating basic auditability requires a 'capsule' that does not need to milk anything (save mains current) from the outside world, during build setup
mircea_popescu: <bounce> the bitcoin source is actually reasonably portable and doesn't depend on "helpful" stuff like cmake << also true.
bounce: it's still going to be a bitch for shops that're running, say, xen or vmware or whatnot.
mircea_popescu: <jurov> you have to feed it a blockchain to avoid endless waiting? << not like we can't keep an official copy for bootstrapping, or else people who have the patience can just make their own
mircea_popescu: <BingoBoingo> qemu is available just about anywhere << this is true.
bounce: so how do the wallets relying on it then ascertain the validity of the chain that instance serves?
mircea_popescu: <bounce> oh, and deceptive. recall that shop that relied on its "accounting" features, then found out the hard way they're useless for keeping track of accounts? << yeah and definitely must fix, but that'll be hard to do on the first pass. an excellent thing to do for first revision tho, take out "labels" implement accounts correctly (or merge coin control in, either way)
asciilifeform: so does someone actually want this for anything? and othernubs has a tree up for comment?
mircea_popescu: <jurov> and if without gui, then it should work fine on cygwin, no? << probably.
jurov: bounce this is nowallet=1 parameter since 0.9
The20YearIRCloud: mircea_popescu: thanks, although you're a few weeks late :D
ben_vulpes: it's fine and great i mean to say
ben_vulpes: mod6, othernubs`: i'm behind on logs, but this is amenable.
bounce: one thing that would be useful but is probably not that trivial to implement is a way to split keeping the chain and keeping the keys
asciilifeform: mircea_popescu: the term you're looking for is 'non-orthogonality' - ancient lament on my site
mircea_popescu: all this non-unix bs, "gotta make an application to join curl and awk EACH WAY THEY COULD BE JOINED". for fiddy billion "different" aps.
asciilifeform: it builds and then what << damned if i know. then, folks who actually use bitcoin for something, can, presumably, use this one if they so wish
bounce: probably should do multiple image formats for the time being though
mircea_popescu: othernubs`> let others extend. i don't want gpg to incorporate curl libs so it can automatically grab otps from gribs << EXACTLY. do one thing, do it well.
asciilifeform: plus, a snapshot of ordinary x86 bsd install 'for qemu' could be booted on a physical machine. the suggested distribution mechanism is just a way to keep the thing reliably portable without having folks dependency-hunt.
mircea_popescu: othernubs`> i don't think gui should be a priority, at all. << prolly not. if they kill the qt branch it would be no loss anyway
jurov: you have to feed it a blockchain to avoid endless waiting?
jurov: i am fine with qemu... but... it builds and then what?
mircea_popescu: <othernubs`> can't wait to see the charter << me2
bounce: the problem with that is that the emulator itself should be widely available too.
The20YearIRCloud: mircea_popescu: - I've passed out a few, not to all tenants though due to the baby being born on last rent cycle
asciilifeform: eveveryone please try to grasp why i suggest emulator. this gives a complete self-contained block of bits which reliably builds the apparatus. no external anything, ever.
asciilifeform: 'qemu' is simply a machine emulator (x86, mips, sparc, a few others) - we can use another if someone has a good reason to dislike qemu
bounce: they got derided for that, but really, the feature shouldn't have been in there in the first place. that, or something that actually did what it said it'd do.
bounce: oh, and deceptive. recall that shop that relied on its "accounting" features, then found out the hard way they're useless for keeping track of accounts?
asciilifeform: forget maps - if someone actually wants this, no joke, i'll simply crap it out. just say where we'll keep it.
jurov: and if without gui, then it should work fine on cygwin, no?
jurov: well.. seems like we need to draft a roadmap
asciilifeform: no, that's braindamaged. qemu image - complete minimal bsd with all components, boots up (emulated) on any arch from any culture. ☟︎
bounce: yeah, that's the point. useless on the cli, where you'd throw awk at it instead.
othernubs`: open a bash prompt and type node wallet.js or w/e
othernubs`: i don't want real bitcoin to come default w/ candy
bounce: it's quite a lot useless if you're trying to build scripts with it, unless they're browser-based in some way
othernubs`: let others extend. i don't want gpg to incorporate curl libs so it can automatically grab otps from gribs
asciilifeform: donate... to guarantee no gui << Deal!! pay to xxxxx....
bounce: a workable api would be nice. the current js stuff is... er, open for improvement.