#tlsnotary-chat

dansmith_btc: there have been attacks where browser plugin injected JS code to modify the receiving address for HTTP PSOT

POST even

yes,there have, moo-_- . Actually I spent some time yday with bc.i wallet and I see that they forgot to fix one hole which still allows JS injection. I notified them. But I dont expect a timely response.

some slides from yesterday http://www.slideshare.net/miohtama/operations-s...

https://medium.com/@Tapeke/its-been-a-long-time... you kept using that word, i don't think it means what you think it means

if you think about it: FBI now has a vested interest to keep Bitcoin's price high :)

moo-_-, thanks for the slides, interesting. how does Python factor in ? or maybe it doesn't?

oakpacific, yeah read this on their privacy-security page: https://tapeke.com/privacy-security/

"Your private financial details are encrypted with AES using a passphrase, which is then encrypted client-side in your browser with RSA keys before being saved on Tapeke’s servers. No one can read your data even if your password gets hacked, because the RSA keys are also needed. You can access your Tapeke account on additional devices by creating specific RSA key pairs for each one in your account settings.

This is the badass zero-knowledge option."

facepalm

i just noticed they have a nice three keyhold padlock image there :)

or keyhole even

dansmith_btc, did the assertion error occur on the very first run with the PR?

moo-_-: how secure is google authenticator I wonder, I only recently learned that they store the password seed in plaintext on user's phone

waxwing, no, it was the 3rd run. I also had gzip disabled in the .ini

ah gzip ok. we can try to reproduce that

that's part of the problem, the dimensionality of the tests is exploding with all the options we have now

waxwing: vitalike would like it :)

oakpacific, nice one :)

running gzip disabled now; not seeing an issue yet

btw 'Info: got a discarded...' is when multiple handshake messages get packed into a record. i should prob. remove that at some point. it's normal.

wonder if china has similar

waxwing: u kidding me

:)

i mean for github

i meant, what so far has surprised me about Daddy Putin: 1. he doesn't censor the internet in general; 2. he hasn't pegged his currency

heck, there are quite a few tor exit nodes in russia

http://arstechnica.com/tech-policy/2014/12/feds... Pffft

oakpacific, so you remember the chinese folks who were gonna set up a nash exchange. the had the word snowball in their name. how are they faring?

dansmith_btc: they hanged around for a while, and saw they can make no profit out of it, and switched to full-blown mining power trading last time i checked

wasn't exactly a nash exchange afaicr