Matches for cardano, 607 total results Sorted by newest | relevance
Sat Mar 22 20:56:16 UTC 2014 <benkay> ninjashogun: that's the whole point of "you guarantee physical security, cardano guarantees electrical security."
Sat Mar 22 20:55:14 UTC 2014 <benkay> sign the cardano key with your master key, and revoke it when you lose it.
Sat Mar 22 20:54:53 UTC 2014 <ninjashogun> So under the current Cardano architecture, there is 0 mitigation for even accidental loss, or theft. There is no pass phrase that is possible without rewriting the firmware yourself.
Sat Mar 22 20:54:11 UTC 2014 <ninjashogun> benkay, not so. This is asciilifeform's current argument for refusing to add any fallout mitigation for stolen Cardano's (including use of a passphrase that gets discarded after a while and memory cycled.).
Sat Mar 22 20:53:21 UTC 2014 <benkay> if the users of the cardano need the key printed on the outside to incentivize them to treat it carefully, those are the wrong customers for NSA.
Sat Mar 22 20:53:19 UTC 2014 <ninjashogun> even though it would cause people to treat their Cardano's in a slightly more coveted manner.
Sat Mar 22 20:52:47 UTC 2014 <ninjashogun> benkay, yes it's just a thought experiment. Clearly to SOME extent people would treat their cardano's slightly more securely physically if the printed key were on it.
Sat Mar 22 20:52:05 UTC 2014 <ninjashogun> asciilifeform, so, how do we determine the difference between Steering Wheel Spike - print the private key on the Cardano for anyone to see - and genuinely sound decisions added for gravity?
Sat Mar 22 20:51:27 UTC 2014 <ninjashogun> So that is true of a 500x risk compensation psychology. In this case, every Cardano should have a private key easily legibly printed on it for anyone tosee.
Sat Mar 22 20:50:39 UTC 2014 <ninjashogun> asciilifeform, in this hypothesis, clearly it would make the Cardano MUCH safer to physically print the private key on it (ascii-padded) on a piece of paper that is folded a single time and taped to the Cardano. If users MUST do this or there is no way to do this, they will treat the Cardano much more safely.
Sat Mar 22 20:44:54 UTC 2014 <asciilifeform> it is absolutely crucial that a cardano owner fully understand the gravity of his situation
Sat Mar 22 20:43:31 UTC 2014 <ninjashogun> decimation, so this relates to an architectural discussion I had with asciilifeform on it. Specifically, a very GOOD reason not to include ANY second factor, not even the most trivial one (such as not writing your name and bitcoin address on the Cardano) is because any second factor will INCREASE the risky behavior in its users.
Sat Mar 22 20:42:29 UTC 2014 <decimation> ninjashogun are you saying that if the enemy possesses your cardano, then it is suspect?
Sat Mar 22 20:39:09 UTC 2014 <ninjashogun> I thought about some of the architectural things you point out re cardano. As a practical question, how do we determine the limits of risk compensation arguments?
Fri Mar 21 04:14:51 UTC 2014 <asciilifeform> in the event of damage, or jettison (using 'zap') one is to retrieve a secreted, more senior key (optionally kept on a cardano, or in some other fashion) and sign message to the effect of 'this newly baked cardano key is my new pubkey'
Fri Mar 21 04:13:51 UTC 2014 <asciilifeform> decimation: cardano is not intended to house your only, 'master' key.
Fri Mar 21 04:12:55 UTC 2014 <decimation> asciilifeform I had a question about Cardano. I assume that measures have been taken to prevent loss of the private key in the case of the failure of a flash chip or bits thereof?
Thu Mar 20 04:08:42 UTC 2014 <joecool> the cardano seems ok if you can maintain physical security, it doesn't even try to stop an opportunistic attacker, i really don't see why it shouldn't have at least a simple auth system
Thu Mar 20 03:55:31 UTC 2014 <bitcoinpete> asciilifeform: you're right, the cardano isn't the holy grail. but teleportation still is. i've edited the article accordingly.
Thu Mar 20 02:45:48 UTC 2014 <novusordo> didn't know about the cardano, interesting