Bitcoin Forum
May 06, 2024, 11:31:54 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 [71] 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 ... 127 »
1401  Other / Off-topic / Re: What can happen when you don't know geography and design clothes on: September 23, 2011, 04:19:59 PM
Don't forget to attend Brazil 2014 then, hopefully without vuvuzelas and lots of samba.  Grin
1402  Other / Off-topic / Re: What can happen when you don't know geography and design clothes on: September 23, 2011, 02:27:39 PM
BTW, let's see if I can enum those flags by memory (without google or any other kind of support):

Canada, Indonesia/Monaco, United States, United Kingdom, Georgia, Brazil, South Korea, China, Thailand, Argentina, Australia/New Zealand (stars are missing), South Africa, Vietnam, Luxembourg (blue too dark for Netherlands), Japan, Italy, France, Spain, European Union, Sweden, Malaysia, Germany (4th Reich  Grin ), Germany (3rd Reich), Mexico, Singapore, Paraguay, Cameroon, Angola, Barbados, Hungary, Uruguay, Czech Republic, Switzerland (if the flag was square that is), Israel and Portugal.

So... did watch all those World Cup games paid up or did I get something wrong?  Grin
1403  Other / Off-topic / Re: What can happen when you don't know geography and design clothes on: September 23, 2011, 11:34:06 AM
Wait, one of those flags seems out of place...

Where? Haven't you heard the Fürher is now leading the UN alongside with Senator Palpatine? Tongue
1404  Other / Meta / Re: Info about the recent attack on: September 21, 2011, 11:18:56 PM
What do you think?  Are those conditions likely to come about soon?

Anything on such grounds would be mere speculation and sci-fi. Could happen a science breakthrough at any moment, can take centuries, can never happen if humanity is extinct before can reach it... an endless world of possibilities.
1405  Other / Meta / Re: Info about the recent attack on: September 21, 2011, 10:20:55 PM
So I must assume we know the entire universe. Rather call it a day, we call all science academies to shut off, because defxor here just came with a number of atoms in the universe. Nothing more to see, humanity has done its job.
Actually, he's more-or-less right; I mean, to within a couple of orders of magnitude: http://en.wikipedia.org/wiki/Observable_universe#Matter_content:
Quote
Two approximate calculations give the number of atoms in the observable universe to be close to 10^80.
10^80 is roughly 2^266.  Just knowing how many atoms there are doesn't tell you much about what those atoms are doing.  Please make sensible arguments.  A complete rainbow table for 50-char passwords is so-so-so-so-so many orders of magnitude beyond what the human race could ever possibly be capable of storing.  Even if there were 100 billion galaxies, each galaxy with 100 billion planets, each planet with 100 billion people, each person with 100 billion computers, each computer with 100 billion hard discs, each disc with 100 billion bytes, you still wouldn't even prick the surface.  AND, can you imagine the headaches your network administrator would have?

Actually, wait, maybe if someday instant worm-hole travel & communication to remote regions of the universe becomes possible, AND assuming that the actual universe is 10 billion times larger than the visible universe, AND humanity can convert EVERY SINGLE ATOM of it into a combined processor-storage-networking unit..... yeah, ok, could be done.

And...? This is pick on an exaggerated expression to divert the discussion to a non-sense place.
The French also say "tout le monde" when they want to refer to something widely known, yet I serious doubt "the entire World" actually knows about whatever they're talking about.
Still, by that path, we've subatomics... the atom isn't the smallest particle of the universe and whatever the future will bring us I simply can not know, can you? We're already dealing today with numbers of a magnitude someone on the XVIII century would consider intangible.
1406  Alternate cryptocurrencies / Altcoin Discussion / Re: Proposal for possible successor to BitCoin -- EnCoin on: September 20, 2011, 10:28:27 PM
Just took a while to overread what you put to that pastebin.
Sorry for being so hostile early, but at this point you really should avoid words like "successor", "replacement", "super-duper fix them all btc bugs" and alike, due to recent events you would probably jump over the "yet another scammer" cliff. A simple "alternative" would do.

It looks a bit messy on some subjects, despite of the mining related you're already discussing. I can't understand why would someone use its "paid messenger" features as it isn't anonymous and the "global paid" sounds more like paid spam messages. I don't quite agree with currencies with built-in services, like namecoin, from my point of view a currency should be plainly neutral to what you do with it... just like cash in your wallet, you don't have "groceries coins" and "butcher coins", you've cash you can trade for anything, the only built-in service of cash is if you want to print or write and run out of paper, but even so white paper would suit better the purpose and you can buy a bunch of them with a bill.

In fact a virtual currency can give some features physical currency can't, but by using them the line between what is a currency and what isn't could be crossed over.
1407  Other / Meta / Re: Info about the recent attack on: September 20, 2011, 08:28:26 PM
One guy came up with an idea: crypt the salt. I followed that idea, because unlike "square boxes", I like to follow ideas and see where they can get us.
Dodging arguments, some "square boxes" instead of looking for flaws came up with "security trough obscurity", an "argument" as valid as call someone "fascist" or other long-shot meaningless name.

Quote
It's many orders of magnitude larger than the number of atoms in the universe. You fail at simple math.

So I must assume we know the entire universe. Rather call it a day, we call all science academies to shut off, because defxor here just came with a number of atoms in the universe. Nothing more to see, humanity has done its job.
1408  Other / Meta / Re: Info about the recent attack on: September 20, 2011, 08:15:48 PM
Wrong in what?!  Roll Eyes

That a 62^50 db is impossible to store? It is... at least so far, and even if possible to store would be impossible to query.
But your statement proved that you, sir, are a "square", unable to understand expressions and taking everything to literal arguments. Probably your brain has fused with your CPU already...
1409  Other / Meta / Re: Info about the recent attack on: September 20, 2011, 07:31:46 PM
imagine if single hashing algorithm is used web-wide, this would be a leverage to a potential attacker, a single RT would be enough for all unsalted hashes and by now probably even 50 chars long pwds would be there.

I lol'd.

Assuming just lower case + upper case + numbers, no special chars, that's 62^50. Converting to a more familiar base 2 representation it's equivalent to 2^298. Tell me, in which universe where you planning on storing that rainbow table, and for how many heat-death-of-the-universe-eons were you planning on creating it?

When you fail at math, you fail at crypto. Hard.

(edit: Number of atoms in the visible universe: 2^266)


It's an expression, not a math number. I merely mean that if a single hashing algorithm was used in the planet, the RT for it would be by now enough to consider such algorithm more than broke. By having diversity, the hashing power has to split over the options, slowing down the process...
1410  Alternate cryptocurrencies / Altcoin Discussion / Re: Proposal for possible successor to BitCoin -- EnCoin on: September 20, 2011, 03:58:23 PM
All your strategy goes around:

1) Fork bitcoin (you're not doing nothing new)
2) Start a FUD campaign over bitcoin

This results in yet another pump'n'dump scheme, nothing different than CH.
1411  Alternate cryptocurrencies / Altcoin Discussion / Re: Proposal for possible successor to BitCoin -- EnCoin on: September 20, 2011, 03:16:12 PM
Production price measures nothing but the investment itself and ROI part. It DOES NOT settle any final price, final price is settled by how scarce or abundant a good is compared to its demand and use.

This starts to look like "the desperate miners section"! Too bad many didn't took to account that their hardware wouldn't be keeping up with the constantly growing btc network hashrate demand.
1412  Economy / Speculation / Re: Crash to $2 imminent. Willing to bet. on: September 20, 2011, 02:19:17 PM
Where are all the bears  Wink

6.8 was the wall.
It is the time to rally down to $2.



Rally down?!
And crash up?  Grin
1413  Other / Off-topic / Re: What can happen when you don't know geography and design clothes on: September 20, 2011, 01:29:35 PM
we dont answer to that idiot?

Let's see ... if you're british ... you don't answer to your prime minister ?
Interesting idea.

the us president LOL!

Yes, but he meant Cameron is Obama's "bitch", so by answering Cameron, you answer his "pimp".  Grin
1414  Other / Meta / Re: Info about the recent attack on: September 20, 2011, 10:55:44 AM
For the record, this is the security through obscurity:
But what resembles to be the best solution on this on-demand generated salt with Open Source software would be to create a salt class with different approaches and let the site owner to select which to use within config. This way an attacker would have to guess first which salting method was used before attempt to attack, and within the availabilities to generate the salt and input; xored strings, substring of hashes, multiple round sha hashing, bitwise etc... this would may means he would grow old before achieve something, even to the weakest of passwords.

Salts are designed to defeat precomputed rainbow tables that may exist for many common hash functions. With a sufficiently long per-user salt, the time/memory trade-off rainbow tables provide no longer helps. The salt doesn't even have to be that "random" for that task (though I think the entropy should be comparable to password entropy).


That's security by diversity, there's no obscurity as the attacker can still access the code of the class, what he can not know before hand is what function is being active without the config file.
It's quite the same of what you do with hashing, imagine if single hashing algorithm is used web-wide, this would be a leverage to a potential attacker, a single RT would be enough for all unsalted hashes and by now probably even 50 chars long pwds would be there.


EDIT: Thinking it over, this system have a big flaw, an attacker could register himself and by knowing how salt is generated would get the function quite easily- but this would be what some of you "obscurity bashers smart arses" should come with instead of pre-made sentences you barely know the meaning.
1415  Alternate cryptocurrencies / Altcoin Discussion / Re: Proposal for possible successor to BitCoin -- EnCoin on: September 20, 2011, 02:29:01 AM
Proposal for possible successor to BitCoin -- EnCoin

You just started with both wrong feet on the title, no need to read more. Move along, one solidcoin was enough.
1416  Alternate cryptocurrencies / Altcoin Discussion / Re: New Ixcoin fork -> I0coin on: September 19, 2011, 09:06:59 PM
Hmmm... looking at i0coin's forum, is this now "PornCoin"?
1417  Economy / Speculation / Re: Crash to $2 imminent. Willing to bet. on: September 19, 2011, 07:36:05 PM
As for the crash to $2, as I've said before, we're in a long, slow slide. If you look at a 30 day moving average, the trend is clear - the price declines steadily about $4 per month, and all the "rallies" and "crashes" are just short term noise.  Since we're currently around $5, that can't go on much longer. The endgame will be during the holiday season.

How can you make a 30 days av move chart with bitcoin?!

Like this. Straight downhill since the bubble popped in early June.

The brown line is a trailing moving average of the last 30 days. (Because it's a trailing moving average, it lags the actual data by 15 days.) Notice how all the "crashes" and "rallies" disappear and the steady downward trend becomes clear.

I wasn't talking about "how to do it", but "where's enough data" to show a trend? 6 mo is nothing for a 30d av graph, to not mention you even have a bubble mid-way.
To get data enough for a 30d av, for it to mean anything, you would need to be able to go back at least 24/32 months, this means before bitcoin even existed.
1418  Economy / Speculation / Re: Crash to $2 imminent. Willing to bet. on: September 19, 2011, 05:16:28 PM
As for the crash to $2, as I've said before, we're in a long, slow slide. If you look at a 30 day moving average, the trend is clear - the price declines steadily about $4 per month, and all the "rallies" and "crashes" are just short term noise.  Since we're currently around $5, that can't go on much longer. The endgame will be during the holiday season.

How can you make a 30 days av move chart with bitcoin?! You would end up with about 12 or 14 dots and they certainly don't show any $4 downhill/mo.

07/10  ~$0.03
08/10 ~$0.04
(...)
12/10 ~$0.7
01/11 ~$1
(...)
05/11 ~$3
06/11 ~$20
(...)
09/11 ~$5

Despite June's bubble the general trend is up, there's no "steadily decline", but rather a post bubble readjustment.
1419  Other / Off-topic / Re: [SECURITY WARNING] Dangerous PHP.INI setting by default on: September 19, 2011, 03:37:29 PM
Note also that "magic quotes" is a server setting, so at least half of the time it was configured wrongly by the sys admin and the developer didn't take that into account. Resulting in either SQL injections or \\\\\\\\\\\\\\\\" all over the place.

THEN I believe it to be better to have \\\\\\\\\\\\ all over the place than SQL injections... If you see the web as a cow "\\\\\\\\\\\" are the flies and the DB is the milk. The flies are annoying but harmless, yet the milk is precious and must be saved.

The only time those "magical" settings annoyed me was in a project where I must output a XLS file... when I pack the bytes, *puffff*, "magically" rendered a blank file... took me a while to figure out, because it looks all ok on the test server, yet on the production server magic_quotes_runtime were on. gpc on the other hand never bothered me, just strip it if found to be on and it's quite easy to notice.
1420  Other / Off-topic / Re: [SECURITY WARNING] Dangerous PHP.INI setting by default on: September 19, 2011, 03:06:57 PM
Magic codes are crap, they should indeed never have existed in the first place. And people should never have been building SQL queries as strings but using proper parametrized queries (prepared statements) from the beginning. Magic quotes made developers lazy.

"magic quotes" is the reason why you cannot use ' and " in some sites because a \ will always be added (and if you submit multiple times, it will turn into \\\\\\"). Why in hell the PHP developers thought that every string coming in would be submitted as-is in a SQL query, I don't know.



Just do a stripslashes when outputing the data. That's the "most hazard" magic_quotes can do being on.
PHP developers thought that input data will be used with SQL, because PHP+Apache+MySQL is the Trinity of web... and yes, most it goes to MySQL. There they weren't wrong at all.
Pages: « 1 ... 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 [71] 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 ... 127 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!