oleganza

24 ms·

301.
by oleganza 12y ago
These are not two equal factors. Policy == human promise. Solid tech works regardless of promises.
302.
by oleganza 12y ago
I wonder how much you can trust the software if its developer must choose a favorable jurisdiction? To my knowledge, developers of Git, PGP, GPG, Bittorrent, Tor, Bitcoin and Bitmessage live where they want because the software is designed
303.
by oleganza 12y ago
Do you really consider that some % offered to you as an interest on savings account make a difference when there is almost 100 billion USD printed each month in form of bond purchases by Fed? I'd say more: by locking your money in the
304.
by oleganza 12y ago
Great summary, thanks. But I just have to comment on this: > unless that third party is insured by a government in the event of disaster. "Insurance by government" does not help those who save money. Dollar lost 98% of value ov
305.
by oleganza 12y ago
To enforce contract you do not always need identity. Identity is needed when enforcement is through violence. But you can use economic incentives to make people prefer following the contract. http://blog.oleganza.com/post&#x
306.
by oleganza 12y ago
"Gentlemen," he said, "I invite you to go and measure that kiosk. You will see that the length of the counter is one hundred and forty-nine centimeters-in other words, one hundred-billionth of the distance between the earth a
307.
by oleganza 12y ago
> so higher miner fees would not be a viable incentive? Miner fees are irrelevant if one does not have the coins to begin with. The chain will be maintained by competing miners only if they are incentivized with initial distribution of a
308.
by oleganza 12y ago
Blockchain is a decentralized consensus. It must contain all information relevant to determining consensus in itself, so every node can have all the data necessary to determine which chain is the main chain. That's why any incentive to
309.
by oleganza 12y ago
Even granularity of 1 bit is too big. It is 2x increase or decrease in difficulty while the actual hashing rate grows by 10-20% every 2 weeks even during today's crazy time of land grabbing.
310.
by oleganza 12y ago
Note that blockchain is more than a currency, but it must contain a collectible within itself in order to be. New blocks will appear and will be backed by the maximum computing power only if miners are competing for the rare collectible tha
311.
by oleganza 12y ago
They will, after MacBook Air with retina display.
312.
by oleganza 12y ago
Reminds me of an old puzzle: how to split bread in two parts so no one is upset? Alice splits, Bob chooses the one he wants. If both prefer at least half, Alice will try hard to split as close to 50/50 as possible and, most importantly
313.
by oleganza 12y ago
I think he was indeed sarcastic.
314.
by oleganza 13y ago
Apple claims that the KDF uses salt fabricated into secure conclave in the CPU. You cannot realistically bruteforce password outside the device since you don't know high-entropy salt. So you have to type in pin code by hand and have yo
315.
by oleganza 13y ago
I assume that key was generated through an expensive KDF with a proper salt and is at least 32 bytes long. So "rainbow table attack" is out of question here. That's why I said sha256(key), not sha256(key + salt).
316.
by oleganza 13y ago
People haven't ever deployed reaaaally hardcore KDFs on their servers yet. I myself would like my password stretched with >100 Mb of memory and taking about a second on 8 threads. This kind of setup might be too expensive for a shar
317.
by oleganza 13y ago
The problem with expensive KDF on the server is that you are opening yourself to a higher risk of DoS. More computationally intensive KDF - higher protection against crackers, but easier for someone to DoS you. Better approaches: 1) Let the
318.
by oleganza 13y ago
No, there is credibility demonstrated by actual practice. Merchants accept zero-confirmation transaction, specifically in-person. Yes, there's a risk that the transaction never gets in the block or is double-spent, but that risk for
319.
by oleganza 13y ago
Right now nodes do not accept double spending transactions, no matter how much they pay in mining fees. This makes simple security promise for 0-conf transactions: the most relayed version is the one that most probably will be included in t
320.
by oleganza 13y ago
"There are laws out there, and he doesn't seem to want to follow them." Would you apply this idea to 19th century when blacks and women did not have much rights? Or to 15th century Europe to those who are not following the ru
321.
by oleganza 13y ago
All instances of BE are due to openssl bignum math. When serialized in bitcoin messages, ordinary ints are LE because it's just simpler (all popular CPUs are LE today). So it's a bit of a mess with endianness, but entirely possibl
322.
by oleganza 13y ago
If people have real compatibility problem to migrate to Python 3, harsh policies will do nothing about that. If I'm forced to rewrite my app I may as well rewrite it in Ruby, Go, Java, or whatever. Especially, if Python developers will
323.
by oleganza 13y ago
Guido's or yours opinions are irrelevant. If people have a lot of code for Python 2.7 and have little incentive to migrate to Python 3, then they'll stick with Python 2.7.
324.
by oleganza 13y ago
Because "society" is more important than your greedy individualistic exploitative capitalistic contracts.
325.
by oleganza 13y ago
Could you pls expand on this: "Bitcoin solves also a latency variance problem, to achieve logical broadcast"?
326.
by oleganza 13y ago
It depends on the context. If your OTR is going through a central server or a compromised Tor route, adversary can learn who you are talking to. E.g. Adium OTR plugin sends encrypted messages, but identities of Alice and Bob are in the cle
327.
by oleganza 13y ago
The "social contract" is a religious non-proven abstraction. There was never any social contract anywhere. And even if there was, it does not bind you or me in any way. And even if it could, we could impose our own versions of a s
328.
by oleganza 13y ago
It's not because DH key generation is not interactive. You generate a random cofactor pubkey alone, which will be used together with the recipient's privkey to produce a shared secret from which AES key is derived. So if the recip
329.
by oleganza 13y ago
How do you learn someone's username or email? They tell it to you. Actually, in Bitmessage they tell you an "address" which is a compact hash of a pubkey. Then, p2p network uses special kind of message "what's the p
330.
by oleganza 13y ago
Just FYI. While Bitmessage is not a fast option (anti-spam proof-of-work per message may take a couple of minutes), it is a remarkable example of a very secure messaging tool in every aspect. Its design even gives you better privacy than To

More ›