log☇︎
912300+ entries in 0.67s
mod6: smickles & thestringpuller signed up to help but they're too busy or w/e so I think I'm just back to on-my-own on that one.
mod6: As far as the android app, I've been working on the encryption stuff, which has been going ok -- did a bunch of code clean out etc.
mod6: I've been crazy busy though trying to keep up with work and btc-land stuff. I made few line changes to the vwap & depth perl scripts for bitotter last-night. And I've been testing some changes to the trade script (bitotter.pl) for about 2 weeks, just making sure all works good before the next checkin with that.
Framedragger: bitcoin CVEs yeah, it's funny when folks claim there've been no vulnerabilities
Framedragger: haha for echo.. sounds like a php kiddie trying to do bash scripting or sth
mod6: but if i want to pay 2.3 magical swords for your warez, and you can't deliver, I expect to get my 2.3 magical swords back.
mod6: that's always an issue -- too many fucking scammarz.
mod6: well, aside from the trust level.
mod6: But I value BTC pretty much higher than most other things that I could purchase with it, which is why I don't spend much of it.
mod6: I'd probably negrate for stuff like that.
mod6: guruvan: yeah, I'm ok will refunds minus the fees, but not after a conversion to some fiat.
mircea_popescu: The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but relies on a hash of this signature, which allows remote attackers to cause a denial of service (resource consumption) via a valid modified signature for a circulating alert.
guruvan: mod6: IIRC he'll refund in BTC, after converting to the now current exchange rate. :P
mircea_popescu: Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.7rc3, 0.5.x before 0.5.6rc3, 0.6.0.x before 0.6.0.9rc1, and 0.6.x before 0.6.3rc1 allows remote attackers to cause a denial of service (process hang) via unknown behavior on a Bitcoin network.
mircea_popescu: The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functionality of BSDDB, which allows context-dependent attackers to obtain unencrypted private keys from Bitcoin wallet files by bypassing the BSDDB interface and reading entries that are marked for deletion.
mod6: Yeah, if I pay in BTC, I demand to be paid back in BTC.
guruvan: the BTC makes it so easy to want to do it that way - but. ...I know I certainly offer refunds to people in the currency they paid me (in the same amount as was paid)
mod6: I usually just pay cash at a local place around here, but when it was @ $260/btc ea. I thought, wth, give these guys a shot and see what happens.
mod6: So I was pretty happy with that.
mod6: My silver order was /pretty/ though.
guruvan: when it's back to $25 a coin
guruvan: hmm. yeah - I think I'll buy elsewhere
jcpham: which was some time ago
mod6: not sure if the recent physical gld buying frenzy played a roll in that, or if it was the btc bubble pop that played a roll there. but 60 days i guess is my max limit.
mod6: jcpham: ahh, hmm. i placed my orders on the 9th.. my slv one got here pretty quick. but the gld order took until yesterday to ship apparently.
guruvan: jcpham: not to mention that if he can't fill the order refunds come in fiat, not in the original paid BTC price
truff1es: mjr_1 is that some kind of seduction ?
guruvan: thank god for that mod6 - here I usually see 2-3 ft each snowfall
jcpham: i've seen and seen and seen too
guruvan: I don't think I'd buy from them after the troubles I've seen
mod6: guruvan: well, typically we get a range. its not like mountain snowfall though. sometimes 1-2" sometimes 8-12"...
mod6: So... apparently that's happening. Will give another update after I receive.
mod6: oh and jcpham, i did get an email about the other 1/2 of my coinabul order shipping yesterday.
guruvan: hopefully you don't measure your typical snowfall in FEET like we do here mod6 (or meters)
mjr_1: I want an army like this .... http://www.asctec.de/uav-applications/research/applications/applications-2/swarming/
mod6: was kinda sick earlier this week :/
mircea_popescu: out with your tits out
guruvan: yeah - thank god for that - I had to leave other chans because I'm too "offtopic"
truff1es: guruvan more circle jerking goes on itc than elsewhere too
Framedragger: part of the freakout is obvs sarcastic / intended, but yeah still
guruvan: -assets doesn't lose it when BTC/"USD takes a shit - the freakout in other channels shows the truth
guruvan: oh yes - in this channel there might be a difference - lol hang out in any of the other ones ;)
Framedragger: (i'm just a geek kid too)
Framedragger: maybe that's why i started lurking here lol
mircea_popescu: i think geeks may be a minority on this chan
guruvan: no shit they don't - almost no one in bitcoin has come from anything other than a geek background
Framedragger: and affects trading big time, grr
Framedragger: the issue prob is that gox admins do not come from that kind of background..
guruvan: gox should learn from them
Framedragger: also: multiple exchanges / for different kinds of tradings - gox could block micro trades, others would fill the market. supply and demand, bitch
Framedragger: it's probably writtinen in rails all over the place, it could prob be 100 times as efficient :(
guruvan: they should charge for that kind of thing - plenty of real world exchanges do charge for cancellation of unfilled ordres
Framedragger: yeah this is so fucking insane. it doesn't sound like blocking / restricting mircotrading is even difficult. wtf
inhies: they need to be able to handle the load
inhies: they dont need to police it
inhies: and thats how exchanges work
inhies: because thats life
pgp2: ok... so I've been examing the the gox depth messages... I just watched some guy add and remove thousands of .01 BTC quotes from $1 to $3 in $0.001 price increments, creating a shitload of lag doing it - fucking bullshit - why can't gox police their own fucking exchange!
gribble: MtGox lag is 10.6201 seconds. During this time, light travels 0.0212825614914 AU. You could have sent a bitcoin ten times between Earth and Moon (0.0257 AU).
damientrog: but I'm gonna take a rest see you guys laters
truff1es: u will have an expensive toy
damientrog: I'll need to mutilate a PSU to power it up
damientrog: and then back to baseline
damientrog: that joy will switch to fear and panic trying get the thing working
truff1es: like all of those how to make your internet faster tutorials heh
damientrog: but it brings joy to a nerd indeed
truff1es: sure seems like the nerdy/geeky thing to do if u have the funds
damientrog: I know it's not really a fantastic investment in terms of ROI, more a piece of bitcoin history
damientrog: but I still need to deliver some hardcore bugfixes
truff1es: the day started off strong with laughter though
damientrog: now I want to make someone else's day shitty by gloating, and it's all good
damientrog: after a shitty day friedcat made it all good by providing me with the tracking nr for my asicminer order
truff1es: but still prob easy to hack if it is all lowercase right
mjr_1: making passwords too difficult means i leave sticky note
Framedragger: Scrat might be an interesting exercise heh, though yeah realistically, it's really fine
Scrat: sort of like the people who made gambling machines who used the mersenne twister
Framedragger: might make sense to be curling some very long gutenberg ebook txt while generating though heh
Framedragger: it's probably fine though..
Framedragger: re: /dev/urandom: see http://stackoverflow.com/questions/3690273/did-i-understand-dev-urandom though
davout: that would allow one to build a fully validating implementation ? nope
mircea_popescu: meh i guess i have to have this part read.
mircea_popescu: so i wouldn't be too worried about that part.
Scrat: davout: it does, it never blocks and it is also seeded from /dev/urandom (which never blocks too)
mircea_popescu: davout there's no dispute that the neckbeard collective is going away.
davout: i'll switch to SpecCoin
imsaguy: but if you try to plug it into openssl, they fail
mircea_popescu: blessfully iirc that has no secret OPENSSL_CONFIG files needed.
kakobrekla: i think that is correct
davout: well, i don't know the code very well, but i think the address generation part probably relies on openssl
mircea_popescu: my main concern is that the code is probably shit and we'll end up with weak keys towards the end
mircea_popescu: did you run strength analysis on the keys or any soprt of cryptographic validation ?
mircea_popescu: davout what's the largest pool you ever refilled ?
davout: it pregenerates the addies, so it eats entropy when you refill the pool
imsaguy: or were you banned there too?
mircea_popescu: how exactly does it use the entropy or wtf does it do ?
imsaguy: some people keep pools of thousands
mircea_popescu: is there a limit to the size of the pool that you can refill safely ?
truff1es: nothing gets the point across more than calling somone an idiot
mircea_popescu: because she is talking to idiots.
imsaguy: its like listening to an american pop song