618800+ entries in 0.366s
MolokoDesk: put people with high profiles on
their boards of directors
that do nothing but waive attending
the annual meeting.
MolokoDesk: anyway, I know how startups are.
they do anything
to make
their "forward-looking statements" remain plausible for as long as possible.
MolokoDesk: usually CSO isn't an honorary
title. oh well.
bounce: it's called "best current practice" and
the industry is full of it.
MolokoDesk: but
then Mark Karpeles was in
that
too.
MolokoDesk: yeah, he's kind of verbal intervention and keynote speaker. Not sure what his early role in bitcoin is. I
think he may have been in
the first round bitcoin foundation group.
bounce: what, decals don't fix engines? news
to me.
mircea_popescu: this is like complaining
that
the decals didn't fix
the engine.
MolokoDesk: and I
think he has a stronger background in security
than I do.
MolokoDesk: I know you've noticed
the criticism A.Andropoulos has been getting.
MolokoDesk: ok. I'll look into
this. I'm not a security guy and linux admin is not something I do regularly, just as needed for my own projects.
mircea_popescu: you're
taking a sizeable bite here, if you manage
to run all
this for a while and not get hacked you'll have all
the cred you could possibly want
MolokoDesk: if people are comfortable with
the size of
their deposits at risk, and
the risk level
that's doable.
MolokoDesk: authing people
to make payment on
the cred of
their freenode nick, I guess
that works if you
trust gribble's data.
MolokoDesk: yeah, I can do
that. it's not clear how i'd store
the accounts yet. Probably an SQL database, but if it's storing pooled funds in a single wallet
that's kind of an unsound practice.
MolokoDesk: bot
trigger collision may need some work. laff.
MolokoDesk: ok. uh, where does
that happen, just a report from deedBot?
punkman: MolokoDesk: no, unicode in
the message
assbot: .balance Your balance with me is XXX. [If balance over X btc]
This is excessive - Pastebin.com
MolokoDesk: you're
talking abut
the unicode dashes in
the PGP signed message delimiters?
assbot: .balance Your balance with me is XXX. [If balance over X btc]
This is excessive - Pastebin.com
MolokoDesk: we're still
trying
to break deedBot, but I
think it passes.
mircea_popescu: RagnarDanneskjol i dun gas when, he did it before
the end of
the month.
gribble: Error: For identification purposes, you must be authenticated
to use
the rating system.
MolokoDesk: there's a low balance message
that's never been activated yet.
MolokoDesk: if I put something up elsewhere on
the same server
that's just another exposure risk
MolokoDesk: I do so much stuff on
this VM ... my dev activities are probably
the biggest risk.
assbot: .balance Your balance with me is XXX. [If balance over X btc]
This is excessive - Pastebin.com
MolokoDesk: or on a server instance where
that's
the only
thing running
there.
MolokoDesk: if
there's serious btc flow
through a payment system I'd
think we'd want
to put
this on a dedicated server instead of
the virtual machine where it is now.
MolokoDesk: payments extension: what is
that about?
assbot: View
the profile of jimmothy
mircea_popescu: fluffypony dude look at
that jimothy guy still fightin'
the good fight, one year and a half later, 2.x k posts in.
MolokoDesk: other point of security would be
the keyring for ;;eauth
MolokoDesk: the source on
the private GITHub has stubs for
that info.
MolokoDesk: however. if you had access
to
the source code, which is stored outside of webspace, you'd have enough info
to spend
the wallet using
the API.
mircea_popescu: which brings us
to
the nextr q : would you like
to develop a payments extension for
this ?
MolokoDesk: it's secure enough
that nobody would spend
time
trying
to hack it for $20
mircea_popescu: MolokoDesk well so
then i'd better only send .1 or something ?
MolokoDesk: it doesn't matter how
the BTC is spent.
MolokoDesk: yeah, we decided
the wallet is disposable, all of
the security is in
the signatures and blockchain.
MolokoDesk: just change
the API key and "secret"
to spend.
MolokoDesk: so far nobody has
the passphrase or keys or passwords but me.
MolokoDesk: I've always been intrigued by prediction marketplaces.
The
theory is
that markets efficiently integrate all available information, so
the price reflects some sort of best-estimate of
the probability of
the predicted events.
mircea_popescu: meanwhile
the yc bitbet
thread ? where is it ? "o, let's ignore and pretend
that means we can stay relevant"
assbot: Truthcoin:
Trustless, Decentralized Bitcoin Prediction Marketplace | Hacker News
MolokoDesk: running out of BTC would make it stop registering
to
the blockchain and
the result might be one big giant deed bundle whenever
that was remedied.
MolokoDesk: yeah,
the program flow is sufficiently linear
that it's not going
to halt if something 500 server errors out at
the API level.
mircea_popescu: honestly i don't expect anything
to break, since php is so stable and everything.
MolokoDesk: it's likely
that deedBot degrade gracefully. if any process in
the chain stops
things still get set up for
the next bundle.
mircea_popescu: it's not mission critical, it's in
the "can wait a day can't wait a week" pile.
MolokoDesk: ok. well
that
time frame is casual. it would be fixed at my earliest convenience same-day.
MolokoDesk: yeah, no rush on decisions about
that.
MolokoDesk: there'd be some way
to send a message
to my phone or desk.
mircea_popescu: well something reasonable, nothing set. if you're in
the hospital and
take half a week nobody's gonna sue.
RagnarDanneskjol: whats your expectation for response
time mp? on any bot maintenance
MolokoDesk: I noticed
that some people responded immediately by hand
to stuff I sent
to
their bots.
MolokoDesk: well, what's
the attention span of a bot op adquate
to service
the
trading/contract flow here?
MolokoDesk: it'd be ok with being
the on-going bot op here. we'd have
to work something out.
mircea_popescu: MolokoDesk question was whether you want ot be
the one running
this or not.
MolokoDesk: now
that
the architecture and methods and algorithms are worked out it should be faster
to complete.
Azelphur: mircea_popescu: fair enough, yea I'm not
too active here
mircea_popescu: RagnarDanneskjol you're paying for
that. it's a worthy cause :)
MolokoDesk: the hashing spec is just SHA256 of
the file converted
to a bitcoin address.
mircea_popescu: MolokoDesk well sure. gribble can't be permaout of
the loop :p
MolokoDesk: so I guess gribble is still in
the loop, but not as part of
the bundling process.
MolokoDesk: the logic for handing an ;;eauth challenge is already in. when it logs on and identifies
to freenode it issues an ;;eauth deedBot
to gribble and picks up any challenge response, decrypts
the item and does
the ;;everify
mircea_popescu: MolokoDesk okay, what's your gameplan here, do you want
to also run
this as a going concern ?
MolokoDesk: probably #bitcoin-assets watching it work long enough for you
to
take delivery of it.
assbot: The Bitcoin Lordship list, first revision pe
Trilema - Un blog de Mircea Popescu.
Azelphur: speaking of assbot
trust levels, what does it
take
to get into assbots l1
trust?
mircea_popescu: well ok. if it's
too much we'll fiddle with it or something. it is better code.