<stellar-slack> <dzham> @buhrmi: Use NFC tags or QR codes. Or use both. Encrypt the seed, and store.
<stellar-slack> <dzham> Something like this one -> http://buynfctags.com/nfc-pvc-card-ntag213/
<stellar-slack> <dzham> Slap a QR code sticker on top of that.
pixelbeat has quit [Ping timeout: 264 seconds]
<stellar-slack> <sacarlson> so if this is they way to sign with two sigs if I hold both of them but what if the other key ac2 is held by someone else, how do they also sign the envelope? tx.to_envelope(*[ac1, ac2])
<stellar-slack> <dzham> you send the envelope to them
<stellar-slack> <sacarlson> I'll try that so what's the method to sign an evelope?
<stellar-slack> <sacarlson> cool thanks that gives me a clue at least
<stellar-slack> <dzham> fakeRPCSigner takes an envelope, signs it, and hands it back
<stellar-slack> <sacarlson> envelope.addSigner(ac1) ; envelope.addSigner(ac2) is maybe what I'm thinking
<stellar-slack> <sacarlson> so these partly sighned transacations aren't stored on the stellar network?
<stellar-slack> <jed> no that is you building the tx to submit
<stellar-slack> <dzham> @sacarlson: nothing happens with the network until server.submitTransaction()
<stellar-slack> <sacarlson> right but I would have thought there would already be infrastructure in place to setup an exchange of partly signed transactions
<stellar-slack> <sacarlson> this is how I presently sign when I hold two keys: envelope = tx.to_envelope(keypair1,keypair2)
<stellar-slack> <dzham> there’s plenty of infrastructure. homing pigeons, smoke signals, jungle drums, telegraphs, fax machines, phone calls, text messages. even internet.
<stellar-slack> <sacarlson> well the first part is figureing out how to sign the envelope on two different lines. the rest I'll figure out later
<stellar-slack> <buhrmi> @dzham: i mean i want a physical object that stores the neccesary info to sign a transaction
<stellar-slack> <buhrmi> @dzham: qr code cant do it
<stellar-slack> <sacarlson> like a verible?
<stellar-slack> <buhrmi> like a magnetic bank card
<stellar-slack> <sacarlson> oh ya a qr code can do that
<stellar-slack> <sacarlson> printed on a paper
<stellar-slack> <buhrmi> yeah but anyone who snaps a pic of the qr code has my secret seed
<stellar-slack> <sacarlson> true then a smart card or just a usb flash drive then
<stellar-slack> <sacarlson> with a properly programed smart card it can even sign transactions no they key never leaves the card
<stellar-slack> <buhrmi> yeah i wanna do that
<stellar-slack> <sacarlson> but that's way above my paygrade
<stellar-slack> <buhrmi> mine too
<stellar-slack> <buhrmi> need money lol
<stellar-slack> <sacarlson> got to have money to even have a paygrade so I guess I flunked
<stellar-slack> <dzham> @buhrmi: which is why you store it encrypted, just like your http://launch.stellar.org|launch.stellar.org wallet
<stellar-slack> <buhrmi> you mean encrypted as in "requires password to decrytpt"
<stellar-slack> <dzham> yes, so you’ve got 2FA — card/QR-code + password
<stellar-slack> <sacarlson> not sure what the 2FA part is
<stellar-slack> <buhrmi> dont like "password" as a factor... maybe find something else
<stellar-slack> <buhrmi> DNA scan?
<stellar-slack> <buhrmi> haha
<stellar-slack> <dzham> two factor authentication… something you have, something you know
<stellar-slack> <sacarlson> finger print
<stellar-slack> <sacarlson> some laptops have the fingerprint reader built in
<stellar-slack> <dzham> neither of which are passwords
<stellar-slack> <sacarlson> the vault that I was reading is setup with two key authentication, neather is setup to sign a transaction on this account alone
<stellar-slack> <sacarlson> you hold one key, the server has the other that you never had. when you ask to sign some thing the server responds with sending you an sms to verify you are you then it continues to be the second signer
<stellar-slack> <dzham> Yeah, you could still use something like that for added security (even if sms supposedly are easy to intercept/redirect). That would be on a per-account basis. The NFC/QR-thing would be for protecting a secret key. And that key could be tied to multiple accounts.
<stellar-slack> <dzham> I’d probably use Google Authenticator instead
<stellar-slack> <sacarlson> might this be a method to sign a tx with two keys on two lines? tx.sign(ac1) ; tx.sign(ac2)
<stellar-slack> <sacarlson> it's seems to be valid in the ruby-stellar-base that you can sign a tx in this way, so I'm down to weather I can sign a tx more than one time this way. so we will trial and error as I find no examples
<stellar-slack> <sacarlson> nope {"status"=>"ERROR", "error"=>"AAAAAAAAAAr/////AAAAAf////8AAAAA"}
bharatpn has joined #stellar-dev
<stellar-slack> <sacarlson> so we now know that the envelope stores the sigs not the tx
bharatpn has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
sv-logger has quit [Remote host closed the connection]
sv-logger has joined #stellar-dev
<stellar-slack> <dzham> @sacarlson: You’re in Thailand right? What’s the status regarding "working online” there nowadays?
jbenet has quit [Quit: they're onto me.]
<stellar-slack> <dzham> ...as a foreigner
jbenet has joined #stellar-dev
<stellar-slack> <sacarlson> what they don't know can't hurt you. just don't tell them
<stellar-slack> <dzham> OK, I thought I read some news about changes, but that might have been somewhere else
<stellar-slack> <sacarlson> we should start a commune here with a bunch of programes, that would be cool and cheap
<stellar-slack> <dzham> that’s what me and a buddy of mine set out to do when we move to the Philippines.
<stellar-slack> <sacarlson> ya how was that? some of my friends like it more than here
<stellar-slack> <sacarlson> girls speak better english there
<stellar-slack> <dzham> well, I’m still here four years later :) it’s alright. I met a girl. my buddy went back home. nobody else joined us.
<stellar-slack> <sacarlson> oh I thought you were in canada
<stellar-slack> <sacarlson> is the infrastructure ok like internet speeds, power stable? people rob you ?
<stellar-slack> <dzham> funny you should mention robberies… I got robbed my first night here, but since then I’ve been fine
<stellar-slack> <dzham> power is OK, internet sucks
<stellar-slack> <sacarlson> internet speed here is good, power has started to become unstable here over the past few weeks. almost always an outage about every 6 months for at least 1 hour or more
<stellar-slack> <dzham> I’m on dual 5mbps lines (for redundancy), $70 per month
<stellar-slack> <sacarlson> I have a single line 12mb for about $36
<stellar-slack> <sacarlson> I had two line for a bit but droped the tot that was so poor at fixing the problem I had
<stellar-slack> <sacarlson> tot at like 4mb is like $15 but they suck if it breaks
<stellar-slack> <sacarlson> I had tot for 3 months after it broke and they never fixed. when I had it canceled they still tried to bill my account that I had to close at the bank to stop them from taking my money
<stellar-slack> <sacarlson> now for redundancy we have good 4G wireless
<stellar-slack> <sacarlson> I've been robed 2 times here over the past 13 years. but the trick is don't cary a bag they think has something in it. no roberies in over 8 years now
<stellar-slack> <buhrmi> What if the bag itself is super expensive
<stellar-slack> <buhrmi> Carry it in a cheap bag
<stellar-slack> <sacarlson> no they seem to look at size and expect a white boys to be carring expesive cameras and such
<stellar-slack> <sacarlson> they were disapointed that all I had was $3 worth of baht and a baby rabit I had planed to sell to pay for the rest of the beer for that night
<stellar-slack> <sacarlson> I got to keep the rabit, they didn't want it
<stellar-slack> <sacarlson> I ended up selling the rabit for $3 so still had beer money
<stellar-slack> <buhrmi> There's a market for rabbit?
<stellar-slack> <buhrmi> How many CHP for 1 RABBIT
<stellar-slack> <sacarlson> I would sell them from 100 - 200 baht depending on what it looked like my buyer would give me
<stellar-slack> <buhrmi> Lol u sell them as food?
<stellar-slack> <sacarlson> CHP are worthless so would take infinite>
<stellar-slack> <sacarlson> no as pets, well they could do what they want with them but the girls love flufy things
<stellar-slack> <buhrmi> Maybe. Unless people like your poker and want to have CHP to play it
<stellar-slack> <sacarlson> ya good point that would be cool, I could just issuer infinite amounts of CHP and live on that
<stellar-slack> <buhrmi> Yeah
<stellar-slack> <buhrmi> Well u have to be careful not to inflate
TheSeven has quit [Disconnected by services]
[7] has joined #stellar-dev
<stellar-slack> <sacarlson> ya set it up like my beertokens exchange bot that just keep it stable by having the bot buy and sell them between a price range
<stellar-slack> <sacarlson> up until the point you buy them all back or run out of the other fiat currency needed to keep it stable
Kwelstr has quit [Ping timeout: 246 seconds]
Kwelstr has joined #stellar-dev
loglaunch has quit [Excess Flood]
loglaunch has joined #stellar-dev
<stellar-slack> <sacarlson> ok I'm getting close now, must be a better way but this seems to work to add a key sign to an envelope
<stellar-slack> <sacarlson> problem with this one is that at present it only accepts 2 sigs, so next step is to allow it to add to an env that already has 2 or more sigs in it
<stellar-slack> <sacarlson> I'm sure later I will find that there was already a better way to do this that was already done
bharatpn has joined #stellar-dev
bharatpn has quit [Client Quit]
bharatpn has joined #stellar-dev
bharatpn has quit [Client Quit]
<stellar-slack> <sacarlson> so this is what I came up with to allow an envnvelope that already has multiple sigs in it to be signed by as many more keys as you want to add
<stellar-slack> <sacarlson> so the next step is to figure out how the users will pass the tx and env packages to each other so each can sign them and finaly submit it
<stellar-slack> <sacarlson> I was hoping for some kind of peer to peer exchange of the tx and envelope data in some way without the need for them to be sent to some central server database
<stellar-slack> <sacarlson> but that might be asking for too much
de_henne has joined #stellar-dev
<stellar-slack> <dzham> how do I check the weights on a multisig account without having to bloody run my own stellar-core instance?
<stellar-slack> <sacarlson> I'm not sure, I don't think it's yet present in horizon, ya we should add them
<stellar-slack> <dzham> Oh, I hate how bloody opaque everything in stellar-core is compared to stellard
<stellar-slack> <sacarlson> at least I can run stellar-core, I failed in my attempts to run stellard that took all my mem
<stellar-slack> <dzham> Multisig worked perfectly a couple of months ago
<stellar-slack> <sacarlson> stellar-core takes almost nothing at this point
<stellar-slack> <sacarlson> it is working my multisig is now fully functional
<stellar-slack> <dzham> I try it out today, create an account, it says “A-OK”, then continue to pay out anyway with only one signature
<stellar-slack> <sacarlson> is this on stellar-core or stellard?
<stellar-slack> <dzham> core
<stellar-slack> <sacarlson> oh then maybe the js-libs are mest up but the core is working with ruby
<stellar-slack> <sacarlson> you have an account you want me to check to see what it has in the core db?
<stellar-slack> <dzham> Oh, that would be nice.. let me check
<stellar-slack> <dzham> GC4NMBNICOOCIYM3FXZYPYYF3AYV6IRT54YEYQTB5S5U7FV5WIJQWVX2
<stellar-slack> <sacarlson> let take a peak
<stellar-slack> <sacarlson> ya it's present last on the list with public key GAFWKOCQ56W75OVLUJGDBIJFLGIX3FS63HLN7XO45LTYGTLVVWGDHE2N wait of 1
<stellar-slack> <dzham> it’s the correct public key at least
<stellar-slack> <dzham> both keys should have a weight of 1. then low:1, medium:2, high:2
<stellar-slack> <dzham> and medium is payment, no?
<stellar-slack> <sacarlson> I'm not sure I assume payment at high
<stellar-slack> <sacarlson> not sure what low and med are for
<stellar-slack> <dzham> yeah, either way, payment shouldn’t work with only one sig, and it did :S
<stellar-slack> <sacarlson> oh I had the oposite problem I locked my account as I created med 2 high 2 but only had one sig so never could access anything ever as far as I know
<stellar-slack> <sacarlson> I had to trash the account and start a new set
<stellar-slack> <sacarlson> oh my low is 0
<stellar-slack> <sacarlson> so try that
<stellar-slack> <sacarlson> I think low at one means anyone of the accounts can sign it
<stellar-slack> <sacarlson> but I'm still a bit confused until I start to play with it to verify
<stellar-slack> <dzham> low: allow trust, high: anything related to changing signers, and weights, medium: everything else
<stellar-slack> <sacarlson> well what you might have found in writing may not be the case but that's good to know to see if it is true
<stellar-slack> <buhrmi> @dzham: "I’ll add signer and threshold information to go-horizon today, so that the `/accounts/:id` endpoint returns that info" -- @scott
<stellar-slack> <buhrmi> does that help? ^^
<stellar-slack> <sacarlson> ya he did mention that yestarday
<stellar-slack> <dzham> yeah baby!
<stellar-slack> <dzham> that would be exactly what I need
<stellar-slack> <dzham> Ah! Got it! The names of the threshold variables has changed!!1!1
<stellar-slack> <sacarlson> I think with that info I should write another function called envelope_authorized?(env) that will look at what keys are present in the env and see what present total the weights of the sigs are to decide if it's ready for submit
<stellar-slack> <buhrmi> is the horizon importer able to read the dumped history files?
<stellar-slack> <buhrmi> from amazon
<stellar-slack> <dzham> @sacarlson: that’s not such a bad idea!
<stellar-slack> <sacarlson> again it probly exists but I have no clue
<stellar-slack> <sacarlson> you sometimes get a better understanding when you write it yourself anyway
<stellar-slack> <buhrmi> @sacarlson: if you want to know if your tx is good enough to submit, you can just submit it to stellar core and check the response -.0
<stellar-slack> <sacarlson> true maybe even easier oh but mine has all the info local not that it make any diff
<stellar-slack> <buhrmi> ah right, unless you do it for understanding reasons... or something
<stellar-slack> <sacarlson> but with mine I guess I could isolate what sig is missing to see if I can fetch it
<stellar-slack> <sacarlson> oh and merge envelopse can we do that?
<stellar-slack> <sacarlson> newenv = env_merge(tx,env1, env2)
<stellar-slack> <sacarlson> if that works maybe that's the way, you send out the tx to all the partys, they all send back there sighned envelope to some center of the group. he mergers all of them until it good to submit
<stellar-slack> <dzham> I’m not sure how big the envelopes would be, but all you need to send back are the signatures themselves
<stellar-slack> <sacarlson> ya I think you right
<stellar-slack> <sacarlson> so merge sigs
<stellar-slack> <dzham> you posted the struct before, env = tx + array of sigs
<stellar-slack> <sacarlson> envelope = sig_merge(tx,sig1,sig2..)
<stellar-slack> <sacarlson> yes
<stellar-slack> <sacarlson> oh so with env merge you would only need newenv = env_merge(env1,env2...)
<stellar-slack> <sacarlson> can't hert to have both functions just in case
<stellar-slack> <sacarlson> when I send a bad not fully authorized transaction does that not get recorded on stellar-core?
<stellar-slack> <sacarlson> I think it does, if that's the case maybe others detect his attempt pull the unfinished transaction and also sign it and resubmit it until unuf sigs are present for it to be authorized
<stellar-slack> <sacarlson> I'm hoping this is the case, then no other centralization is needed
<stellar-slack> <sacarlson> but in any case I think it's above my paygrade again
pixelbeat has joined #stellar-dev
<stellar-slack> <sacarlson> doesn't work from here
<stellar-slack> <dzham> works here
<stellar-slack> <sacarlson> yes now working here also, maybe internet problems on my side
<stellar-slack> <buhrmi> site loading is a bit slow cause of the real time connections being set up between browser -- america -- tokyo
<stellar-slack> <buhrmi> should move hosting to tokyo too
<stellar-slack> <buhrmi> if you happen to be in the thailand ... lol you go all around the world
<stellar-slack> <sacarlson> in the event we take the path of mergeing envelopes I created this
<stellar-slack> <sacarlson> maybe I should rename it to envelope_merge(*envs)
<stellar-slack> <sacarlson> since envelopes are what we now normally send as transactions this might be the path I end up using
<stellar-slack> <sacarlson> to share signed tx with possible groups of keys for multi-sign transactions
<stellar-slack> <buhrmi> i like sending envelopes
<stellar-slack> <sacarlson> I did some research on p2p broadcast but it doesn't look good from what I can see, so a temp server base for the collection of multi-sig transactions might be it. how about collect them on yours site buhrmi
<stellar-slack> <dzham> @sacarlson: did you try the rpc thing? sending the envelope to someone else, and getting it signed?
<stellar-slack> <sacarlson> rpc I'll have to look that up
<stellar-slack> <sacarlson> remind you my poker has 10 players
<stellar-slack> <dzham> rpc = remote procedure call, if my memory isn’t off
<stellar-slack> <dzham> p2p multisig
<stellar-slack> <sacarlson> is that a part of horizon or ??
<stellar-slack> <buhrmi> @sacarlson: yeah why not. what exactly do you want to collect / display?
<stellar-slack> <dzham> no… it’s what we were talking about before… sending your envelope to someone else, and have them sign their part of it
<stellar-slack> <sacarlson> yes I under stand that is just organizing an uncentralized group of 10 people to all exchange some small data structure with each other, each sign it and recentralize it and submit it
<stellar-slack> <sacarlson> rpc from what I just read " sends a request message to a known remote server"
<stellar-slack> <sacarlson> in this case we are all just remote nodes with changing ip address that one day want to play
<stellar-slack> <sacarlson> but if centralized it the solution then I just need someone to provide the stable ip that all meet and exchange
<stellar-slack> <sacarlson> like we did in early bitcoin we used IRC to first link up
<stellar-slack> <sacarlson> some standardized protocol and point of how to setup a group to setup the exchange is what I'm looking for ideas
<stellar-slack> <dzham> XMPP if people are online? 3rd party server if not?
<stellar-slack> <sacarlson> xmpp i'll look it up, yes they are all online
<stellar-slack> <dzham> XMPP is the IM protocol behind jabber
<stellar-slack> <sacarlson> that sounds promissing
<stellar-slack> <sacarlson> I don't see anything wrong with xmpp so far. I'll see what kind of support they have for it in ruby
<stellar-slack> <sacarlson> I did have another thought though as I see we do have a collection of the IP now seen in on stellar-core net. we could also use those ip with some random selected port that we standardize as used for multi-sign servers. but I'm going to take a close look at xmpp first
<stellar-slack> <dzham> I’ll probably use XMPP for my wallet
<stellar-slack> <sacarlson> cool
<stellar-slack> <sacarlson> I already see it has good ruby support libs
<stellar-slack> <sacarlson> oh and we have the domain in stellar-core that we can use as the address for xmpp
<stellar-slack> <buhrmi> i can add multi sign support on my site if you want
<stellar-slack> <buhrmi> how to create the base tx that needs to be signed?
<stellar-slack> <sacarlson> I published two examples but they are in ruby
<stellar-slack> <sacarlson> the base is the envelope or transaction envelope not sure what's it called
<stellar-slack> <buhrmi> yeah i know how to add signers to an envelope, but where does the envelope come from?
<stellar-slack> <sacarlson> in ruby I can create an empty one with env = tx.to_envelope()
<stellar-slack> <sacarlson> well empty of keys
<stellar-slack> <buhrmi> yeah but what's the contents?
<stellar-slack> <sacarlson> the contents is the tx transaction and an array of a group or posible group of keys
<stellar-slack> <sacarlson> can be one key or no keys
<stellar-slack> <buhrmi> okay but the "tx transaction" must come from somewhere, no?
<stellar-slack> <sacarlson> yes I guess it can come from anyone
<stellar-slack> <buhrmi> hmm
<stellar-slack> <sacarlson> I'm sorry I guess to start you need to create a multi-sig account
<stellar-slack> <sacarlson> with that you can create multi-sig transactions with signers that are in that account
<stellar-slack> <sacarlson> this is an example of creating an account with 3 signers https://github.com/sacarlson/stellar_utility/blob/master/create_multi-sign_account.rb
<stellar-slack> <sacarlson> the other half of that is an example that uses those accounts to create a simple multi-sig transaction that requires 2 of the 3 signatures to allow a transaction as seen in this example https://github.com/sacarlson/stellar_utility/blob/master/sign_multi_sign_transaction.rb
<stellar-slack> <sacarlson> that's the best I can explain it
<stellar-slack> <sacarlson> I'll later create an example more like what I plan to use that has 10 signers, after everyone signs it the master can then set the thrshold and they can then all deposit there funds safely into the pot without any of the 10 taking the funds
<stellar-slack> <sacarlson> untill they setup a transaction that sends the money to the winner. this tx will have to be signed by all in the game before they can submit it and the transacation is sent to the winners account
<stellar-slack> <sacarlson> to complicate it more as any one player drops out the group can have his key deleted from the poll account but not before they change the thrshold on the account
<stellar-slack> <buhrmi> sounds complicated
<stellar-slack> <sacarlson> hopefully it will all be transparant to the players, all done automated
<stellar-slack> <dzham> why do you need to drop keys? as long as you have a signed tx out of the pot-account it shouldn’t matter, no?
<stellar-slack> <buhrmi> i don't understand any of this lol
<stellar-slack> <dzham> you’ve got ten player account plus the pot
<stellar-slack> <dzham> the pot is a 10-of-10 multisig account
<stellar-slack> <sacarlson> the player is gone out of the game he will go see his girl friend and never sign the pot over to the winner when he wins
<stellar-slack> <sacarlson> yes but some players loose all there money before others so drop out of that game
<stellar-slack> <dzham> nevermind, yeah, you’d need to know the size of the pot, of course :S
<stellar-slack> <sacarlson> when that happens we can setup 9 of 10 or 8 of 10 to allow someone droping out and we still having control of the pot as a group
<stellar-slack> <dzham> but cant’ you just let each player that’s still in the game sign a bunch of tx’s?
<stellar-slack> <sacarlson> we will then delete those that are no longer in the game as they have no rights to sign it with none of there assets in it
<stellar-slack> <dzham> everytime the pot size changes, everyone just signs tx’s to all the remaining players
<stellar-slack> <buhrmi> i think "The pot" should just be an automated account ....
<stellar-slack> <buhrmi> but not multi-sign
<stellar-slack> <sacarlson> each player has weight of 1 if we start it with threshold of 8 to be safe at least 8 have to sign to move the money
<stellar-slack> <sacarlson> automated account? it will be automated, the pokerthacc will detect that the player lost and will perform the transactions transparant to the players
<stellar-slack> <sacarlson> how else can you protect the funds if not with multi-sign
<stellar-slack> <sacarlson> "everytime the pot size changes, everyone just signs tx’s to all the remaining players " ya that sounds good but it's still multi-sig
<stellar-slack> <sacarlson> that's basicly the way it works now with no multi-sig
<stellar-slack> <buhrmi> imma going back to trade beers and sausages
<stellar-slack> <sacarlson> good idea
<stellar-slack> <sacarlson> I'm going to rest my eye and watch some tv
<stellar-slack> <buhrmi> k... if u want u can help me betatest the UI ... wanna make it more intuitive to trade beers and sausage
<stellar-slack> <buhrmi> ...later
domnulmunteanu has joined #stellar-dev
<stellar-slack> <buhrmi> i relieved you from the promised 3 beers by wiping the database
<stellar-slack> <buhrmi> lol
domnulmunteanu has quit [Client Quit]
stellar-slack has quit [Remote host closed the connection]
stellar-slack has joined #stellar-dev
pixelbeat has quit [Ping timeout: 260 seconds]
kushed_AFK has joined #stellar-dev
luvtux_ has joined #stellar-dev
Kushed has quit [Ping timeout: 244 seconds]
bittrex-richie has quit [Ping timeout: 244 seconds]
luvtux has quit [Ping timeout: 244 seconds]
bittrex-richie has joined #stellar-dev
bittrex-richie is now known as Guest40885
Guest40885 is now known as bittrex-richie
bittrex-richie is now known as Guest68746
Guest68746 is now known as bittrex-richiela
<stellar-slack> <scott> More RFR: https://github.com/stellar/js-stellar-base/pull/36
<stellar-slack> <jed> scott: lmk when all the fixes are in for this change and then we will update testnet
<stellar-slack> <scott> will do. It’s going to take a bit yet (i.e. I might not get it done today). The go changes and stellar_core_commander changes are taking a bit longer than expected
bittrex-richiela is now known as bittrex-richie
<stellar-slack> <jed> k
Kwelstr has quit [Remote host closed the connection]
Kwelstr has joined #stellar-dev
pixelbeat has joined #stellar-dev