Namworld: You'd love to see some of the requests Coinroll gets. Pretty lulzy too.

Namworld: The stuff people come up with to get refunded their loss.

Namworld: Even if they won big and lost a part of it.

Namworld: To add to your quote, "I thought this was welfare with lights and colors and shit"

Namworld: Why would I not be surprised.

Namworld: "Not to troll, but you're all idiots! I'll build my own exchange, with blackjack and hookers!"

Namworld: It was more for the reference than anything.

Namworld: ...

Namworld: But you're running a AM passthrough...

Namworld: That's me.

Namworld: It pretty much is, I suppose.

Namworld: Eventually the data got out...

Namworld: There was another argument about claiming the Gigamining shares, which mircea systematically refused.

Namworld: I don't remember. Because Nefario is slow as heck.

Namworld: I received all my balances as well as all my shares without any error, oddly enough. Some apparently didn't get their things right.

Namworld: Either way, he could have just dumped the whole database.

Namworld: Yeah

Namworld: So much of that discussion could have been avoided if I didn't miss a line.

Namworld: I did complain a lot about mircea refusing to claim with Gigavps afterward, however.

Namworld: I don't think there's even a preview yet for MG

Namworld: What? talking about the game?

Namworld: There's too much lolis in games already. Surely this game won't have any?

Namworld: No one ever takes my challenge.

Namworld: On OTC. I challenge the public to a match of an online game. With prize for first person beating me.

Namworld: It's all free, but no challengers.

Namworld: What? It's just a game where they play as a little virtual kid while I play as a virtual rapist. It's safe for kids from 7 to 77 years!

Namworld: But seriously, http://weewar.com

Namworld: It's just moving and producing little war units. Kind of retro.

Namworld: It's not really like Risk.

Namworld: Which is just countries, units and rolling dices.

Namworld: It wouldn't be challenging. I got no WoW character and I suck at Street Fighter. Wouldn't be a challenge.

Namworld: It's very similar to a popular Gameboy Advance game, but online.

Namworld: Indeed, if the guy is paying... pick the game.

Namworld: I don't ask for entry fees or anything, just offer a prize.

Namworld: Which reminds me... is it possible to get your MPEx key changed?

Namworld: How annoying.

Namworld: and no 2FA of any kind.

Namworld: It would certainly help against gpg key theft.

Namworld: I was thinking about going offline key only.

Namworld: But still, gpg key theft remains a possibility.

Namworld: Requires access to an external device, not just the appropriate password/gpg signature/etc

Namworld: 2 factor auth is actually quite effective.

Namworld: Albeit just an extra layer.

Namworld: How would that affect gpg security in any way?

Namworld: I'm not... I don't quite see how that would offer a side channel attack.

Namworld: Because it's not a side channel?

Namworld: It's a random number that would be included within the gpg encrypted message. It doesn't provide an attack vector.

Namworld: Well it would introduce further complexity on the server-side handling, which could introduce vulnerabilities. But that's not really a side channel.

Namworld: It uses the phone, plus a computer. The phone only provide you a random number based on an extra secret key.

Namworld: The phone doesn't allow you to do any input or decrypt/sign gpg.

Namworld: It does not offer any attack vector on the gpg signature required nor bypass the need for it.

Namworld: Such that if one device is compromised, the account isn't, as it requires to authing method. One alone is not sufficient, such that it requires access to 2 devices to effectively gain access to an account.

Namworld: I'm not sure where you get the idea the 2FA device offers an attack vector. Especially a side channel attack.

Namworld: or perhaps you're thinking of something else than side channel...

Namworld: I'm definitly certain side channel is not the term you meant.

Namworld: and I'm pretty positive on that matter....

Namworld: 2FA would not yield any extra data about the gpg encryption process that would allow for a side channel attack. It is a completly external process which provide no insight/data as to what is occuring during the encryption, which would allow you to make any kind of deduction needed... It would just baffles me too much. I'm quite curious as to how that would be even remotely possible.

Namworld: Yes?

Namworld: Well that's not what it is about for the side channel attack. That's true for the server side handling where extra complexity can introduce bugs.

Namworld: I'm just curious as to how using a device to get a 2 FA code allows for the analyzis of the encryption process that occurs on another machine. That's not really a physical possibility.

Namworld: It doesn't need an internet connection. It's time based. The device can be completly offline.