747900+ entries in 0.48s
mircea_popescu: Mats_cd03
the ^OEX, ie standard and poor 100, is
the index of us stocks. which supposedly have been moving like it's animated by
the gosplan
benkay: nice steady rate of inflation in
the usd?
mircea_popescu: pretty much
the only way kids and senile old people have of causing serious
trouble
mircea_popescu: well, natural gas is dangerous, in
that it'll level a house.
Mats_cd03: is
this something you can only experience in
the dreaded lubyanka
Mats_cd03: what is
this "stove discipline" you speak of
ozbot: The risk compensation
theory and bicycle helmets -- Adams and Hillman 7 (2): 89 -- Injury Prevention
ozbot: Forbidden Hillcrest,
The Sewer Robots of Pulaski County
ninjashogun: benkay - I
think you miss
the point. Valuation literally, bydefinition, is value.
benkay: you miss
the point again.
ninjashogun: benkay - moreover valuation literally is value, in
that it literally is someone paying literally
that price.
ninjashogun: benkay - you are reinforcing my point. valuation might not be value, but it's clear
that airbnb is worth more
than $200K in cash.
dub: I know someone
that implemented IPoW(et)S(tring) at university
ninjashogun: It's
the difference between "How can I help you get from a $500K nominal valuation - your last round -
to $10M" and "Wait, you're not
taking a salary? Why don't you just go on welfare?" --
this channel above :)
mircea_popescu: decimation and if
there's a gas explosion everyone gets unfriended ?
decimation: sending data
through an accoustically coupled gas pipe would be amusing but slow
decimation: spam
the shortwave spectrum for a few megabits
mircea_popescu: "send emails over your farts! it's great for
the environment and ok for your wallpaper"
ninjashogun: Mats_cd03, very humbly, perhaps people here may benefit from a bit more experience with
them.
Mats_cd03: i
think youve spent
too much
time drinking
the silicon valley koolaid
ninjashogun: Mats_cd03, honestly I clearly have given
this channel way
too much access
to what I'm doing already.
There's a reason stealth mode startups operate in
that way.
ninjashogun: Mats_cd03, I humbly disagree, but you are entitled
to your opinion.
ninjashogun: Mats_cd03, it was called "don't feed
the
trolls" and we sold custom consulting services
that consisted of "Don't feed
the
trolls". Hope
this answers your question.
Mats_cd03: thats cool, what was
the service or good being sold
ninjashogun: Mats_cd03, I worked for a startup
that was acquired, as one of just
two employees. Yes, I know how
typical funded startups operate.
ninjashogun: decimation, as I mentioned before we are at
the pre-financing stage -
the startup is not raising money right now. I know a lot of stories of people who built great
things with burn rates near $0. Airbnb is now closing a round at $10B.
They sold cereal
to launch.
Mats_cd03: ive been
trained by mp
to react
to
tumblr
Mats_cd03: whenever i see
tumblr my brain
tells me "boobies"
decimation: ninjashgun has your startup managed
to acquire financing?
ninjashogun: benkay - Yes, you have just written a good example of
trolling.
benkay: you're incapable of even convincing
the government
to pay your welfare.
benkay: i
think
there's a good reason society's locked you up in a 100/mo shithole, sir.
benkay: seems as
though you're
the only one.
ninjashogun: benkay, and I understand
the Risk Compensation argument deeply and with nuance.
benkay: (for reasons you fail apparently
to grasp)
ninjashogun: benkay, a variation on one of
the known methods.
ninjashogun: benkay -
through
the methods other people have alreayd suggested (or something similar)
to asciilifeform.
ninjashogun: benkay,
that's not
true. Some
trolls are happy
to
troll and
tell you
they're
trolling.
benkay: ninjashogun: all
trolls say "I'm not a
troll".
benkay: mircea_popescu:
tib's my
thesis here.
ninjashogun: For what it's worth, I'm not a
troll and do have some experience with product design
trade-offs.
benkay: ninjashogun: how would you make
the key less accesible
to an attacker?
ninjashogun: Apocalyptic, I am
trying
to understand
the architectural
trade-offs in
the Cardano, and, specifically, why
the private key MUST be stored in
the plain with no mitigation against loss. (Except key revocation, if
the user is aware of it). Why it has
to be "fail-dangerous" and not "fail-90% dangeorus"
decimation: he's a high-functioning
troll, as best as anyone can gather
ninjashogun: asciilifeform, if only one
tenth of
thefts actually resulted in
the key becoming known
to
the
thief - would
there be exactly
ten
times as many
thefts as a result?
ninjashogun: asciilifeform, for example if you introduced an architectural change
that, as a direct result, meant half of
thefts did not result in key becoming accessible
to
thief - would
there be instantly
twice as many
thefts as a result?
decimation: it's also obvious
that any precautions
taken could be bypassed, and
thus are worse
than features
ninjashogun: asciilifeform, I did learn from it, yes. Clearly Risk Compensation is not a law :) :) It is possible
to mitigate fallout in some ways without automatically getting an exact compensation.
benkay: asciilifeform: do you
think
this is a case for Hanlon?
decimation: can you propose such a
technology? a spike in
the steering wheel is not such a precaution.
ninjashogun: So, if we know, for sure,
that in some cases Cardanos will be lost or stolen - is it possible
that an architectural change MAY make
the Cardano more secure oerall by reducing
the immediate fallout from
these cases?
ozbot: Shall be Delivered |
The Whet
ninjashogun: (asciilifeform had an example of how soviet submarines did not self-regulate
their nuclear reactors but always had a person in
the loop, who
therefore understood
the gravity of his situatoin.)
ninjashogun: asciilifeform, in which case any change
to
that (by making it "safer") would in fact result in worse effects.
ninjashogun: asciilifeform, it is a good question because in
the case of
the Soviety Submarines, it is possible
that none will ever melt down due
to user error, ever.
ninjashogun: asciilifeform, let me ask you
this. Will any Cardano ever be lost or stolen?
benkay: if you can't guarantee physical security,
the device is useless.
benkay: ninjashogun:
that's
the whole point of "you guarantee physical security, cardano guarantees electrical security."
ninjashogun: I don't
think it's possible
to make a
true
tamper evident device.
ninjashogun: I personally don't like
tamper evident seals at all.
ninjashogun: benkay, fair enough :). However if you are not aware
that it has been out of your possession for a few minutes or hours
this does not help.
benkay: there's more
to it
than
that, but
that's
the high-level approach.
benkay: sign
the cardano key with your master key, and revoke it when you lose it.
ninjashogun: Oh,
this is what I understood from asciilifeform
ninjashogun: So under
the current Cardano architecture,
there is 0 mitigation for even accidental loss, or
theft.
There is no pass phrase
that is possible without rewriting
the firmware yourself.
benkay: don't you understand
the importance of capturing markets with shoddy products asciilifeform?!
ninjashogun: benkay, not so.
This is asciilifeform's current argument for refusing
to add any fallout mitigation for stolen Cardano's (including use of a passphrase
that gets discarded after a while and memory cycled.).
benkay: again with
this "mass market, make it stupid" SV bullshit.
benkay: if
the users of
the cardano need
the key printed on
the outside
to incentivize
them
to
treat it carefully,
those are
the wrong customers for NSA.
ninjashogun: even
though it would cause people
to
treat
their Cardano's in a slightly more coveted manner.
ninjashogun: benkay, but you see it would be wrong
to do so.
That is
too much added insecurity.