log☇︎
988400+ entries in 0.746s
thestringpuller: and LinkedIn for that matter
thestringpuller: then it's like the plaintext password with Sony and MTGox
thestringpuller: if they can get into another apps local fs somehow
thestringpuller: but rogue apps take over phones everyday
mod6: its time related.
mod6: Well, I could do that for sure. Infact, it started out that way, and then I was like, "why am i encrypting this public key..."
thestringpuller: most people don't encrypt that shit but I don't see why you couldn't
thestringpuller: just for the mpex app
mod6: I see, you're just saying to enc all the files in the local dir?
mod6: thestringpuller: this maybe the way to go. i'll have to talk to you more about that. or do some searching there... need to see how that works out.
thestringpuller: with the AES256 class you are writing
thestringpuller: mod6: just encrypt the app local file store
mod6: So... I'd like to put something in place thats non-native in a way I guess. Another layer to the onion so to speak.
iz: yeah, i took a quick look and it seems like the android DRM is about playback restriction and doesn't really have a pub/priv key that is used
mod6: and what worries me, is like I was saying to mircea_popescu the other night. all these cell providers leave backdoors through the os to turn shit on/off or to steal your data/coins.
thestringpuller: but then you're limiting yourself to only "experienced" users
mod6: iz: hm, I really wish! if they do, I'm missing it. I'm not super well versed in Android though, a lot of stuff is new to me here.
iz: mod6: yeah, that seems good enough for now... does android have DRM crap that you can hijack for that?
thestringpuller: mod6: one thing you an do is encrypt local data for the app
mod6: iz: so in the mean time, I have a AES256 class that I wrote that will utilize AES and enc/dec the key... at least that way, its protected by the symmetric key
thestringpuller: well the low level to high level interface isn't friedly
iz: well, if you loose your wallet, ppl can take your cash out too
mod6: apple is pretty nuts, i'll convert to iOS someday if there is enough interest... but that'll be its own can of worms.
thestringpuller: people can take the private keys out
thestringpuller: if you lose your phone with the bitcoin wallet
mircea_popescu: listening to you ppl talk im slowly realising apple is the new microsoft.
mod6: iz: yeah, i know, but im trying to come up with a clever way to store the users private key incase the device is stolen or hacked, you don't want to lose thatkey.
thestringpuller: iz: so for things that are "private" it stores them locally in a weird fucked up way
iz: yeah, that sucks then
thestringpuller: iz: the keystore is local
mod6: at that level I was working with PGPPublicKey, PGPSecretKey and PGPPrivateKey and converting them to their native java analogues
iz: priv key remains private, public keys are on the keystore so you can look them up
iz: that's not how it's meant to work
Namjies: EskimoBob: what's your email/bitcoin address for GLBSE? PM me. I'll check again but my last list was received some time ago.
mod6: yeah, i don't think it matters
mod6: only the public key. the api is limited here.
mod6: only bitch of it is... once I pull the cert out on the other side, i can't get out the private key.
mod6: i had to get the public key packet, secret key packet... extract the private key from the secrete key spec then create a x509 cert and construct that with the pub and priv keys.
mod6: yeah, i had to get down to the nuts and bolts
thestringpuller: I assume pgp will be similar since the android keystore is a little weird
thestringpuller: but you have to convert you DSA/RSA keys into dropbear format
thestringpuller: they did a port that's now in the android git repo
thestringpuller: to be thwarted by a cp memory overrun
thestringpuller: hold on i spent weeks getting SSHd and SCP to run natively on my droid
thestringpuller: in fact I don't think you can use traditional SSH keys on it
mod6: just had some problems with spongycastle/bouncycastle trying to get the KeyStore to work the way I wanted. I got SOOOOO close, but it was eating up too much time.
mod6: thats great, this is all java, nothing too complicated really at all.
mod6: Right now i have a nuts-o day job, thats more like an everyhour job. I am looking forward to making 2013 the year I can leave that behind :D
thestringpuller: Anything I can do to get better at coding.
mod6: wow. even more awesome. well, you won't be forgotten if you help with this project in some way.
thestringpuller: nah I'd rather just code for the fun of it
mod6: I can work out something in the form of small btc payments on a per-diem basis or something...
thestringpuller: If you migrate to iOS I can't really do anything for you
mod6: If you're really serious, I do have quite a bunch to do. It sounds like you know what's up.
mod6: I was talking about building BitOTTer as an android tool for mpex in march/april, but noone was really interested... until later, and then I really had to turn up the gas to try to catch up.
thestringpuller: well if you want I can be your jr. dev, just assign me tickets and I"ll send you patches
mod6: So in the future, I really hope to get to revise a lot of stuff that I've already learned on the alpha project... but its sort of too late to turn around.
mod6: well, sort of.. i love to make it really nice and awesomesauce, but having it work is much better.
thestringpuller: hit it with a hammer till it behaves solution huh?
mod6: ahh, yeah, nothing with GSON. i tried to get my head wrapped around how to use it with android and the funky mpex json, but I couldn't make it work
thestringpuller: like for instance I was reading in JSON from a server that had data on it
thestringpuller: you have to read from one albeit over an API
thestringpuller: even though there is no writing to a db
thestringpuller: i was talking more about the service to DAO
mod6: it connects to mpex (currently just over inet, tor ability is coming, probably in beta, tor works with perl version) and grabs all the JSON and parses it.
mircea_popescu: a magazine is one of those pointless things whores employed by rich men fill their time with.
mod6: well, i started a #BitOTTer channel for technical discussions.... but basically how this works is it doesn't persist anything at this time
thestringpuller: why don't you spin off trilemma into a magazine?
mircea_popescu: <thestringpuller> lol Bitcoin magazine charges 100 bucks for a 12 issue subscription? <<< yes, they will deliver the 12th issue in 2044
thestringpuller: in terms of data access
thestringpuller: What framework are you going to use?
mod6: thestringpuller: I do actually need help. And for sure in the future there will be tons more to do.
thestringpuller: http://trilema.com/2012/the-bitcoin-drama-timeline/ - I was reading that
EskimoBob: Vlad ripped the magazine off and it sounded like that wast the end
thestringpuller: mod6: can I help with the Mpex android app?
EskimoBob: are they still in business?
dub: moron tax
mod6: (11:34) < thestringpuller> I've learned more in this IRC channel than I ever did in public school
dub: I was looking at some property in a 100-year flood plain the other day, supposedly expected to flood every 3-5 years
thestringpuller: I've learned more in this IRC channel than I ever did in public school
EskimoBob: unless you are talking to someone else Namjies :)
EskimoBob: Namjies: James told me he sent out (or promised to send) a updated list and assured me that my name is on the list
thestringpuller: well I'll just go to my corner and continue reading about relativity then
thestringpuller: Bugpowder: You were talking about a Lorentz right?
thestringpuller: the most brilliant thing ever
thestringpuller: the Lorentz transformation
Bugpowder: Does Black-Scholes have a ponzi correction term?
EskimoBob: fuuuuccckkk usagi is back and off the fkn meds. Not that shit again ... LOL
mircea_popescu: Bugpowder shoulda not been in a market where self-aggrandizing idiots put 5% of the m3 into ponzis
thestringpuller: 14 to 11 in 1 day
thestringpuller: but that month was REALLY bad
thestringpuller: are there any new safeguards?
thestringpuller: mircea_popescu: http://trilema.com/2012/mpoe-bonds-historical-data/ - the loss of august seems to dwarf everything...
gribble: BTCUSD ticker | Best bid: 13.30001, Best ask: 13.34998, Bid-ask spread: 0.04997, Last trade: 13.30002, 24 hour volume: 28406.18807176, 24 hour low: 13.10250, 24 hour high: 13.39900, 24 hour vwap: 13.27054
thestringpuller: keep redirecting to your blog
mircea_popescu: ow tried the wrong one
mircea_popescu: i just tried it, tis fine.
thestringpuller: Usagi can fucking rant on the forums but not get me my fucking BTC
thestringpuller: mircea_popescu: there is a bug, it took me to trilemma
jcpham: requires fibrous tender