714800+ entries in 0.368s
moiety: unfortunately not. i
tried
to frankenstein
the usb bit on
the end with a non frayed one. i ended up with more bits
than i started with D;
moiety: i
tried
to rewire a mouse
today, didnt go so well
BingoBoingo: fluffypony: Do you worry
that maybe your wife might begin
to suspect you might be spending all of
this
time online
trying
to cheat on her with a Manul?
moiety: alongside moiety... so im unsure which
triggered smuxi
to flash
jurov: oh i misunderstood... easy
to use system for an issuer, not for
the user
fluffypony: I'd hazard it's easier
to list
there
than on MasterCoin
jurov: so you have
to log in every 3 days if you want
to maintain standing order
fluffypony: jurov: well you also don't have
to do anything
to list
jurov: lulzbourse is easy
to use????
BingoBoingo: mike_c: Well,
the monthly reports will include exact balances, but I'm not yet sure about
the wisdom of offering balances in real
time.
That might leak
things like when exactly
trades executed and where I had orders sitting on
the orderbook.
mike_c: it would be feasible
to have a webpage showing your balances.
that is perhaps not a good idea for a market maker
though.
BingoBoingo: mike_c: It will be harder
to
track my part of MPIF, but
the monthly statements will still exist, and
there's
the part where at least at
the start of
this
the operation I am running is smaller
than
the other portions.
midnightmagic: history of past bad keyspace means attackers
try
that first always
jurov: because it was never proven otherwise? i can see
that
jurov: asciilifeform: care
to elaborate?
jurov: guess
the dividend plans are guarded with utmost secrecy :D
jurov: SFI unit holders are entitled
to receive dividends indirectly from
the Fund's startups which have a
fluffypony: investors should just
throw money at it
mike_c: they got
their mistakes out of
the way with SF1. You need
to jump on SF2, it's going
to
the moon.
jurov: so not one of
their startups is profitable yet.nice
dR3: Greets all. Appreciate
this chan.
That is all =)
Naphex: nah,
the rest look like bull
fluffypony: Naphex:
that's
the exception
to
the rule
mike_c: there are so many good companies for
them
to invest in!
they need more funds.
ozbot: btcXchange.ro -
The first Bitcoin exchange in Romania
Naphex: and doing some
tutorial video for setting up, for noobs
Naphex: not just
the crypto community
Naphex: thestringpuller: i am, i will be adding GPG auth. but
thats it
Naphex: sure. if you get all 4
the only
thing
that can save you is hope you don't hit any short-circuits or be enough in
the hot wallet
thestringpuller: Naphex: i can get all
three by putting a gun
to
the customer's head
benkay: the comparison is not made on
the basis of openness, rather by asking professionals and
the experienced what
their opinions are and why
they are
that.
benkay: hey, guys: which is less likely
to leak? openssl or gpg?
benkay: this goes back
to
the problem of
trust in
the wot. openssl, pirate...ask anyone who knows
things what
they
think of
the
two.
benkay: however being closed does make a
thing impossible
to
trust.
artifexd: Open source compared
to open source.
The point is
that being open doesn't make something
trustworthy.
artifexd: Similar
to
the
transparency of... openssl?
benkay: contrast with
transparency of...gnu privacy guard.
benkay: it sounds weird and i don't
trust it.
benkay: so yubi is a signing
thing? what are
these yubi servers an implementer
talks
to?
benkay: artifexd: i don't know enough about
the
thing. it pretends
to be a keyboard,
though? sounds like a lot of unexaminable dependencies.
Naphex: ah, i doubt it. unless
their personalization
tool phones home, but doubt
that
artifexd: benkay suggested
that
the yubikey could phone home (or any attacker) with
the new contents if it were reloaded. I was questioning
that.
Naphex: artifexd: you
touch
the button, it
types
the OTP
artifexd: benkay If
the yubikey registers as a keyboard, how can it access
the network?
benkay: not holding party's problem,
though.
benkay: all of a sudden i'm struck by
the notion
that
the only good withdrawal message is one gpg-signed by
the withdrawing party.
Naphex: but
that attack needs
to be
targeted
kakobrekla: gox loaded yubis with
their keys so
the keys were locked
to gox use only
artifexd: That may, or may not, invalidate
the ability
to use yubikey's servers
though. I don't know.
Naphex: you don't have
to go
that deep
artifexd: The point was
that, instead of reading
the key, an attacker could put his own key in
there since he supposedly has access
to
the device prior
to
the client getting it. Also,
the client could generate and insert is own keys
thus destroying
the attacker's advantage.
Naphex: it still needs
that stuff
to do damage
Naphex: at least some 0 day or insider, or whatever breaches deep enough
to issue withdrawal messages
Naphex: some risk reduction is worth it, even if not bulletproof in all
theoretical/practical/NSA cases
benkay: can't vet
the
thing's behavior, artifexd. might as well be squirting
things written
to
those slots back home.
Naphex: true, but my risk is still reduced,
that an attacker/breacher would have
to have private keys leaked, have user secrets, and have user email, and penetrate hard within infrastructure without detection,
to nab some satoshi from
the hot wallet
Naphex: so user gives me yubi pub key, and
then shoots OTP
Naphex: asciilifeform: i'm
talking from a server end point, i don't have
to keep user secret. just public key
Naphex: and OTP just removes
the risk of insider/intrusion
that can just spam hotwallet servers or
trade messages with withdrawals
Naphex: for me it promises a OTP, from
the user. which i can validate without holding a secret
gribble: Rating entry successful. Your rating for user asciilifeform has changed from 1
to 1.
pankkake: ;;rate asciilifeform 1 makes
the best
tinfoil hats
kakobrekla: Naphex forget it, he is busy with
the sub
Naphex: ;;rate asciilifeform 1 NSA Should make a open OTP
Token