--- Log opened Thu Sep 19 00:00:55 2013 02:35 < midnightmagic> gavinandresen: You might want to supply your nick:pass as the server pass for freenode, you're flapping with your real connection details in bigpond. 02:36 < midnightmagic> gavinandresen: Also, I wouldn't mind helping review proposals so long as my voice isn't the only one that counts. 02:41 < Luke-Jr> gavinandresen: I can take a look 12:28 < warren> huh. I thought Bitcoin Foundation didn't do grants for core dev. Is this new? 12:38 < jgarzik> warren, since Day One, BF has been interested in helping core dev 12:38 < jgarzik> warren, One of the first goals was always to pay Gavin's salary. 12:39 < jgarzik> warren, Side projects included getting some hosting for bitcoincore.org 12:39 < gmaxwell> And BF has provided e.g. hosting for the pulltester robot and some other assorted stuff. 12:39 < gmaxwell> The proposals stuff for review, I assume are mostly not "core dev" 12:39 < warren> what is at bitcoincore.org hosting? 12:40 < jgarzik> There has been an indicated willingness to fund various side projects I've proposed, like having nodes sitting around collecting metrics about the network. -ENOTIME on my side for that stuff, not BF's fault. 12:41 < jgarzik> warren, random stuff we find useful to stick on a server. Mostly Gavin uses it right now, but as gmaxwell said, pull tester and other things 12:41 < jgarzik> There was even resources allocated for a permanent testnet node, as I requested, then never did anything with :( 12:41 < gmaxwell> speaking of metrics, jcorgan has expressed an interest on doing some integrated metrics code as a way to get involved in development. We should encourage this. He does good work elsewhere. 12:41 * jgarzik needs minions 12:41 < jgarzik> +1 12:50 < warren> Earlier gavin mentioned the lack of a security bug bounty program from the BF was largely from the lack of anyone to run it. 12:51 < warren> It was suggested that a volunteer do it. 12:51 < warren> however the average volunteer isn't privy to security issues, and maybe you don't want them to receive the responsible disclosures 12:52 * gmaxwell is skeptical of the value of security bug bounties 12:53 < jgarzik> security bug bounties and assassination markets sometimes share similar economic incentives 12:53 * jgarzik runs 12:53 < gmaxwell> "I can remotely make nodes kinda slow" is not some kind of catagorically worse bug than "OSX users frequently corrupt their database" but one is "security". "meh" 12:54 < warren> I could be wrong, but perhaps Google is keeping drama low and saving money in the long-term by responsible disclosures from their bug bounties. 12:56 < gmaxwell> It's just distorting to give bounties on "security" bugs as uniquely important compared to other bugs. 12:56 < gmaxwell> "omg my private keys were lost by this wallet corruption" is infinitely more important than "some lame dos attack made nodes run slow" 12:58 < gmaxwell> The kind of security bugs that do deserve bounties are so rare as to be unobservable... and any bounty for it would be insultingly low compared to exploiting it.. or alternatively, exploiting it would just destroy bitcoin and wouldn't be profitable in any case. ::shrugs:: 12:58 < warren> Non-profits including the FSF, EFF, Amnesty International, Wikimedia Foundation (and too numerous others) use CiviCRM to automate management of membership. FSF Executive Director John Sullivan really wants somebody to implement a plugin for CiviCRM that relies on Free Software for many of these orgs to be able to automate acceptance of Bitcoin payments. It is currently weird that they accept Paypal but not Bitcoin with that AGPL code. 12:58 < warren> (another example) 12:59 < gmaxwell> warren: sounds like something that could use a grant proposal, indeed. 12:59 < warren> I'm not proposing it because I'm too busy. 12:59 < jgarzik> I know that feeling :) 12:59 < gmaxwell> another point as to why bounties aren't so helpful... 13:00 < jgarzik> warren, RE CiviCRM, interesting. BitGive might benefit from that info. 13:00 < gmaxwell> though perhaps they could be helpful for pulling in more technical people who don't have any bitcoin at all now. 13:00 < warren> jgarzik: indeed. 13:00 < gmaxwell> E.g. a few coins bounty might be worth more than a few hundred dollars to some developer with a passing interest in this bitcoin stuff but no bitcoins. 13:01 < warren> indeed 13:03 < warren> that was fast, found someone who wants to write the grant proposal 13:04 < warren> is it too late to submit? 13:06 < jgarzik> ask the Internet that question :) 13:07 < jgarzik> reddit r bitcointalk had a thread talking about 3q grant props 13:07 < sipa> there's this website 13:07 < sipa> where you can search for stuff on the internet! 13:07 < warren> how do I find that website? 13:07 * warren is lacking sleep 13:08 < sipa> http://bit.ly/157cUBZ 13:54 < HM> Bitmit is awful 13:54 < HM> can't even signup 13:55 < gmaxwell> it wanted my home address and stuff... I'm kinda uneasy giving that to a bitcoin website. 13:56 < HM> i tried disposable email addresses but they have them all blocked 13:56 < HM> fair enough, switch to my real one 13:56 < HM> still doesn't work. just refreshes 13:56 < HM> It's a shame really, Silk Road has a really good user experience --- Log closed Fri Sep 20 00:00:58 2013