kgo

17 ms·

1.
by kgo 10y ago
Anyone can create a random key with a random email. See all the president@whitehouse.gov addresses on the keyservers. So if they used the keyserver network I could just make a fake key for anyone I want to impersonate and upload it. Github
2.
by kgo 12y ago
Keybase lets you do some key stuff, but the bigger feature is that it provides a bunch of ways to authenticate the source of a key above and beyond the WoT and getting into the strong set. Authentication is an inherently hard problem. With
3.
by kgo 12y ago
It depends on whether they use PGP/MIME or inline PGP. Without installing the tool, I'm guessing they use PGP/MIME, because you pretty much can't use html email with inline PGP, and I doubt they're going to default
4.
by kgo 12y ago
Well the odds are non-zero. If you're worried about intelligence agencies harvesting your private keys, any odds above 0 is close to 1.
5.
by kgo 12y ago
Actually the current guidelines are pretty clear. Mining is income. When you receive your coins from mining, that's a taxable event. Current value - mining expenses = income. After that any gains or losses are unrealized until you
6.
by kgo 13y ago
Inflation adjusted, that would put him in the range of Rockefeller, Carnegie, Vanderbilt, Mellon, etc. If (and it's a big if) bitcoin was worth as much as the world gold market, it isn't disruptive like an internet startup, it&#x
7.
by kgo 13y ago
Define 'long term' Government's crumble making the long term value of any currency 0.
8.
by kgo 13y ago
True, but they were able to process a single quarter-million dollar transaction and easily turn that into 'real' cash. That's still a pretty decent accomplishment for magic internet money.
9.
by kgo 13y ago
Switzerland has its own currency and its own central bank. It doesn't use the Euro. So the money doesn't need to 'paid for'. The government can just create the money and hand it out. Of course this might devalue the c
10.
by kgo 13y ago
All the telecom companies, which cooperate fully with law enforcement, charge for their services. It's perfectly fair to bill time and materials that you can no longer use to improve your business and generate revenue. http:/&#x
11.
by kgo 13y ago
These guys are complaining about disk space and bandwidth, not message security. Even so, the current network can probably handle 100,000 messages a day, and the bottleneck there is some side channel timing attack mitigation code that cause
12.
by kgo 13y ago
This seems very similar to bitmessage, which has a functioning client and 1000's of active nodes. Why would I wait for this instead of using bitmessage?
13.
by kgo 13y ago
The problem is that you don't sent to the destination SMTP server. You send to your SMTP server. That goes at least one hop via SMTP and eventually ends up on the destination's domain server. So even if I setup and host my own S
14.
by kgo 13y ago
Meanwhile, per the Washington Post article, he asked the guardian to setup PGP in Feb, and his contact finally did so in March, both before this key's listed creation date.
15.
by kgo 13y ago
With regard to PGP, you can get a reader and smartcard from Kernel Concepts. Assuming you already know how to use GPG, it's pretty easy to set up. http://shop.kernelconcepts.de/index.php?cPath=1_26&sort=2a&l...
16.
by kgo 13y ago
Technically you want to submit a Privacy Act request to get records on yourself which is different than an FOIA request. But the NSA will just deny the request with a form letter.
17.
by kgo 13y ago
And after that is the increasing use of smart-phone clients which don't have support.
18.
by kgo 13y ago
Okay, so lets assume that the NSA has quantum computers that can decrypt RSA and ECC with ease. They would have to assume another state funded effort by someone like China could do so as well. Then the NSA wouldn't issue recommendati
19.
by kgo 13y ago
If you're actually trying to encrypt email, you probably don't want your mail app building a search index in plain text.
20.
by kgo 13y ago
http://en.wikipedia.org/wiki/Orthodox_Judaism
21.
by kgo 13y ago
An actual pyramid scheme involves you giving a cut of your profits to the person who signed you up, and getting a cut of profits from people you sign up. Nothing remotely like this happens with bitcoin. Similarly it's not a Ponzi scheme be
22.
by kgo 13y ago
Some Russians tried this in May 2011 during the last bubble. MtGox was transparent about it. https://bitcointalk.org/index.php?topic=7494.0
23.
by kgo 13y ago
Current Market Cap is at $1 billion. Let's say all bitcoin becomes is a paypal killer. Paypal had a total payment volume of $145 billion in 2012. Now you can't just say a fair value for bitcoin's market cap is $145 billion because that doe
24.
by kgo 14y ago
The emails are actually signed with Aaron's PGP key.
25.
by kgo 14y ago
"Of course one of the disciplines I'm talking about is TDD. Anybody who thinks they can go faster by not writing tests is smoking some pretty serious shit." Why do so many TDD people think that people who don't use TDD don't write tests?
26.
by kgo 14y ago
The next release of rubygems-openpgp, due out in a week or two, will do everything you want: https://github.com/grant-olson/rubygems-openpgp/issues/15
27.
by kgo 14y ago
Basically because a proper X.509 implementation requires a CA to be in place first, so you have a place to submit a CSR, but there is no CA, so you're forced to self sign. I've written a rant on the topic here: http://www.rubygems-openpgp
28.
by kgo 14y ago
But most of the time, someone using MacOS has physical access to the box. They can always just boot up as single user and BOOM root: http://support.apple.com/kb/ht1492
29.
by kgo 14y ago
Yep. I think out of all the reports I've done on github, probably between 5-10% have gotten any answer, even if it was, "piss off!"
30.
by kgo 14y ago
Yep, you can do WoT with X.509 if you write the semantics from scratch, and you can also do a CA approach with OpenPGP. The thing is, for years no-one has stepped in and actually gone through the pesky little details of implementing all tho

More ›