00:45:25 | Guest29624: | Guest29624 is now known as jgarzik |
01:08:44 | michagogo|cloud: | 01:04:12 jtimon: I have my usual story of a bug that could have killed someone caused by how C doesn't have indentation as syntax |
01:08:47 | michagogo|cloud: | Seriously? |
01:08:48 | michagogo|cloud: | o_O |
01:10:35 | sipa: | * sipa guesses: the apple openssl thing? |
01:10:59 | michagogo|cloud: | sipa: Apple OpenSSL thing? |
01:11:05 | michagogo|cloud: | ;;google apple openssl |
01:11:06 | gribble: | Why is Apple Deprecating OpenSSL in MacOS 10.7 (Lion)? - Stack ...: ; openssl(1ssl) Mac OS X Manual Page - Apple Developer: ; Transmitting Data Securely - Apple Developer: (1 more message) |
01:11:12 | michagogo|cloud: | ;;more |
01:11:13 | gribble: | |
01:11:26 | sipa: | https://www.imperialviolet.org/2014/02/22/applebug.html |
01:13:11 | michagogo|cloud: | ...holy crap |
01:13:57 | michagogo|cloud: | sipa: Thanks |
01:14:08 | michagogo|cloud: | but I don't think petertodd was referring to that |
01:14:34 | nsh: | unless he's remarkable prescient :) |
01:14:40 | nsh: | *bly |
01:14:42 | michagogo|cloud: | I don't think that's a bug that could have killed someone, and it's recent |
01:14:51 | michagogo|cloud: | It wouldn't be a "usual story" |
01:14:59 | sipa: | right |
01:15:15 | sipa: | just sounded remarkably similar: indentation as syntax, and C |
01:15:22 | nsh: | it did remind me of a "usual story" though: reflections on trusting trust |
01:15:30 | nsh: | (as the update mechanism to fix this bug is secured by... ssl) |
01:17:02 | michagogo|cloud: | nsh: *an* update mechanism |
01:17:34 | nsh: | * nsh nods |
01:18:56 | Deuplonicus: | Deuplonicus is now known as _captjet23 |
01:19:32 | nsh: | (i'd guess the preponderance of devices affected will be patched over the network) |
01:21:01 | michagogo|cloud: | Possibly |
01:21:16 | michagogo|cloud: | Definitely the majority of OS X machines will |
01:21:56 | michagogo|cloud: | Since updating a Mac w/o the builtin update mechanism means going to their website to download the update manually |
01:22:38 | michagogo|cloud: | While with iOS devices, many people who regularly plug in to their computer to sync may see and install the update through iTunes. |
01:23:26 | michagogo|cloud: | (also, I do think the update itself is signed separately from the SSL connection) |
01:24:40 | michagogo|cloud: | * michagogo|cloud updates his phone |
01:25:20 | nsh: | * nsh nods |
01:53:34 | mike4: | mike4 is now known as c--O-O |
03:22:24 | ens_: | ens_ is now known as ens |
04:17:15 | _captjet23: | _captjet23 is now known as DEUPLONICUS |
05:31:28 | Muis: | Muis is now known as Guest70237 |
05:35:25 | ens: | ens is now known as thereal_ens |
05:52:56 | otoburb: | otoburb is now known as Guest61712 |
06:35:17 | petertodd: | michagogo|cloud: I find it darkly amusing that the SSL bug was indentation related... |
06:36:22 | petertodd: | michagogo|cloud: but yeah, it was for firmware for a power supply monitoring system that needed to alert the operator if some conditions went out of range. this power supply being on an airplane not getting a timely alert of an impending fire could be very, very, very bad, yet for other reasons it wasn't as simple as "just make it shut down" |
06:37:37 | petertodd: | michagogo|cloud: so I wound up spending a good month writing, like 100 lines of firmware that tested some sensors and figured out what lights to flash. stupidly trivial, but by god I was going to make sure it worked perfectly under any circumstance - I didn't even have a single loop in the code and relied on the watchdog timer for that, thereby testing it's functionality constantly! |
06:39:24 | petertodd: | michagogo|cloud: of course, I handed it off to our main firmware developer later, who fucked it up in various ways, including making it possible for the warning lights to stay dark in the event of an abnormal condition - the latter bug being solidly indentation related and just like the apple one, would have been much harder to make in python |
07:02:02 | jgarzik: | petertodd, RE indentation |
07:02:36 | jgarzik: | petertodd, This Apple SSL bug is an excellent example of a possible NSA implant in open source |
07:03:06 | jgarzik: | An open source implant is certainly not impossible. You just have to work harder to hide in plain sight. |
07:03:06 | petertodd: | absolutely, just dumb enough to convince people otherwise |
07:04:21 | phantomcircuit: | jgarzik, to be fair im not aware of *anybody* who has ever reviewed that code |
07:05:14 | phantomcircuit: | what apple gets for writing thier own version of everything |
07:05:59 | petertodd: | phantomcircuit: and what's hard about it is stopping people who have been paid off to sabotage your projects is incredibly difficult from a social point of view |
07:14:55 | phantomcircuit: | oh |
07:14:59 | phantomcircuit: | gmaxwell isn't here |
07:15:18 | phantomcircuit: | but i actually expect mtgox to keep generating invalid transactions of all kinds for a while |
07:15:29 | phantomcircuit: | even after they reinstate transactions |
07:15:40 | petertodd: | because of saved tx's in their wallet? |
07:16:02 | phantomcircuit: | nope |
07:16:26 | phantomcircuit: | because the business case for fixing it (which iirc was <1% of transactions) isn't as obvious as preventing double withdrawals |
07:16:37 | phantomcircuit: | they can fix double withdrawals without fixing invalid transactions |
07:16:45 | phantomcircuit: | (and indeed it would be much faster) |
07:18:19 | petertodd: | true |
07:18:59 | phantomcircuit: | for sure if i was them it wouldn't be my top priority |
07:32:17 | Guest73215: | Guest73215 is now known as UukGoblin |
07:58:47 | midnightmagic: | :-/ what the heck, where do they get access to minted coined anyway and why are there so many of them for mtgox to spend |
07:59:00 | petertodd: | ? |
08:00:04 | phantomcircuit: | midnightmagic, people set their eligius address to mtgox addresses |
08:00:15 | phantomcircuit: | iirc that accounts for 100% of them |
08:00:19 | midnightmagic: | ah. that makes sense. |
08:00:35 | midnightmagic: | That would explain why they're trying to spend them too early too |
09:20:38 | Guest70237: | Guest70237 is now known as Muis |
09:31:08 | nsh__: | nsh__ is now known as nsh |
09:46:59 | michagogo|cloud: | Is Eligius the only pool that pays miners in coinbase? |
09:47:23 | michagogo|cloud: | Actually, no it's not -- p2pool does too. Are there any others? |
10:19:47 | HM: | HM is now known as HM2 |
10:53:04 | warren: | https://bitcointalk.org/index.php?topic=482951 |
10:53:49 | gmaxwell: | of course, the first reply is moronic. |
10:54:10 | gmaxwell: | one might wonder how they don't manage to drown when they go out in the rain. |
10:55:07 | warren: | at least Luke-Jr's reply was helpful |
10:55:25 | gmaxwell: | jaja |
10:55:40 | nsh: | * nsh blinks |
10:56:23 | gmaxwell: | back in 2011 I once patched bitcoin so that IsMine returned true. At the time this worked okay (though the resulting wallet.dat was like 2GBytes) |
10:56:38 | gmaxwell: | Didn't think to bring up the GUI and make a screenshot. |
10:58:19 | nsh: | heh |
10:58:50 | nsh: | i'm more jealous of their having a coveted @example.com email address |
10:59:48 | warren: | yeah, I expect to get blackmail threats about handing that domain over |
11:06:31 | nsh: | * nsh smiles |
16:03:34 | orwell.freenode.net: | topic is: "Bitcoin research, hardfork wishlist, ideas for the future - see also: https://en.bitcoin.it/wiki/Hardfork_Wishlist https://en.bitcoin.it/wiki/User:Gmaxwell/alt_ideas. This channel is logged at http://download.wpsoftware.net/bitcoin/wizards/. For questions about the logs talk to andytoshi." |
16:03:34 | orwell.freenode.net: | Users on #bitcoin-wizards: andytoshi-logbot zacm tromp nOgAnOo rdymac warren orperelman1 _ingsoc K1773R otoburb airbreather Emcy HM2 sl01 Guest30320 edulix_ Graet jhj ielo jron gmaxwell roconnor__ shesek spin123456 jtimon MoALTz Muis nsh eristisk midnightmagic hno tt_away Sangheil- EasyAt justanot^ Hunger- forrestv Ryan52 c--O-O mappum phantomcircuit andytoshi nanotube jgarzik espes__ Krellan_ area iddo harrow thrasher1 comboy amiller_ OneFixt matrixfox petertodd |
16:03:34 | orwell.freenode.net: | Users on #bitcoin-wizards: wumpus heakins a5m0 @ChanServ michagogo|cloud keus jrmithdobbs pajarillo Taek42 epscy Alanius optimator ryan-c Manfred__ wangbus aksyn Luke-Jr ageis coryfields pigeons Sorcier_FXK sipa jarpiain Krellan CodeShark grzs realazthat Ursium qwertyoruiop UukGoblin bobke BitCoroner kinlo samson_ crucif0rm Mikalv_ BlueMatt perrier_ poggy Guest17723 maaku_ rs0 Fistful_of_Coins gribble |
16:19:41 | Guest30320: | Guest30320 is now known as helo |
17:31:16 | [\\\]: | [\\\] is now known as Guest81047 |
17:35:13 | [\\\\]: | [\\\\] is now known as [\\\] |
17:59:13 | edulix_: | edulix_ is now known as Edulix |
18:05:17 | azariah4: | The future is here, support for running a Bitcoin node/wallet on Lego EV3: https://vine.co/v/MmvAFpU02nP |
18:08:08 | andytoshi: | 10:07:06 is there a huge go-to bitcoin web development resource? |
18:08:19 | andytoshi: | we really need to write a 'stop handling others' money!' document |
18:08:44 | tt_away: | I dig the cat |
18:14:17 | sipa: | andytoshi: http://canibuildasitehandlingotherpeoplesmoney.com/ |
18:14:34 | andytoshi: | :D |
18:15:15 | sipa: | (by michagogo|cloud) |
18:17:20 | nsh_: | nice colour-scheme |
18:21:14 | michagogo|cloud: | pong |
18:21:19 | michagogo|cloud: | Ahhh |
18:22:04 | michagogo|cloud: | If anyone has any ideas on how to improve that, let me know :-P |
18:22:30 | nsh_: | it's pretty good as is :) |
18:22:56 | michagogo|cloud: | (Also, it might be a good idea to make it a more serious page at some point, actually explaining the issues.) |
18:27:23 | nsh_: | * nsh_ nods |
18:34:19 | sipa: | michagogo|cloud: ask a dozen questions about how they plan to handle money, whether they have thought about cold storage, checked with a lawyer, what language they're writing in, whether they accept 0-conf transactions, ... |
18:34:27 | sipa: | but always end up with answer no |
18:35:04 | michagogo|cloud: | sipa: Okay, if you make that, I can put it there :-P |
18:35:53 | michagogo|cloud: | * michagogo|cloud could barely get what's there now to work with a bunch of Googling and "borrowing" a code snippet from Wikipedia |
18:37:17 | shesek: | heh, I haven't seen |
18:37:21 | shesek: | since geocities days |
18:39:12 | michagogo|cloud: | shesek: it's not even a real |
18:39:20 | michagogo|cloud: | That tag doesn't actually do anything |
18:39:28 | michagogo|cloud: | At least, not in Chrome |
18:39:47 | michagogo|cloud: | I copied a script from Wikipedia to replicate it |
18:40:32 | michagogo|cloud: | (It's |
18:40:45 | michagogo|cloud: | Btw, have you found out any more about that conference? |
18:43:05 | shesek: | yeah, I think browsers removed |
18:43:21 | shesek: | and found out more about what? |
18:44:13 | sipa: | michagogo|cloud: i know nothing about websites |
18:44:29 | michagogo|cloud: | sipa: same |
18:44:40 | michagogo|cloud: | shesek: the thing on Thursday |
18:45:52 | shesek: | I found out that I should be speaking there, but not much other than that |
18:46:29 | shesek: | I asked if I can get people in, but didn't get an answer yet |
18:46:40 | shesek: | would you like to come if I can? |
18:49:03 | michagogo|cloud: | shesek: I don't know for sure if I would be able to make it, but if all the logistics were to work out it'd be cool to go |
18:50:10 | shesek: | cool, I'll update you |
18:59:40 | qwertyoruiop: | lol |
18:59:44 | qwertyoruiop: | google blink html |
19:25:34 | shesek: | qwertyoruiop, haha, that's neat |
19:25:37 | shesek: | never heard of that |
19:25:41 | qwertyoruiop: | me neither |
19:25:50 | shesek: | https://www.google.com/search?q=blink%20html&gl=us&hl=en |
19:26:03 | qwertyoruiop: | yea lol i never knew it |
19:26:06 | qwertyoruiop: | i just googled it |
19:51:51 | Muis: | Muis is now known as Guest90414 |
21:06:49 | michagogo|cloud: | Does it make some element of the page blink? |
21:12:37 | shesek: | michagogo|cloud, yeah, the words "blink" and "html" |
21:12:48 | shesek: | check out that link |
21:13:10 | michagogo|cloud: | Does it work on mobile? |
21:13:40 | shesek: | dunno |
21:14:31 | michagogo|cloud: | It does |
21:14:34 | michagogo|cloud: | Hehe |
21:26:09 | comboy: | |
21:27:15 | rdymac_: | rdymac_ is now known as rdymac |
21:41:58 | just[dead]: | just[dead] is now known as justanotheruser |
21:50:43 | Guest90414: | Guest90414 is now known as Muis |
21:51:16 | Muis: | Muis is now known as Guest94789 |
21:53:04 | Guest94789: | Guest94789 is now known as Muis_ |
22:01:49 | nsh_: | nsh_ is now known as nsh |
23:22:38 | justanotheruser: | justanotheruser is now known as just[dead] |