trinque: ascii_field: incorporating the command line model into GUI programming is very cool
ascii_field: trinque: enjoy the rare experience of encountering one's first non-retarded example of something (in this case, gui programming) for the first time.
trinque: --std=c99 kicks on __STRICT_ANSI__ which affects whether __USE_MISC is defined in features.h
hanbot: BingoBoingo Weak 4096 Bit... suggested edits: "the compromised key in question was" / question which was ; " not only on their total length of the key" / the total length ; "two very large prime number" / numbers ; "subverted by an adversary from the key's generation" / range from the key's ; "what failings of they keyserver" / the keyserver ; "they have yet to factored by" / yet to be factored ; "this highlight a number of" / highlights
gribble: The operation succeeded.
gribble: The operation succeeded.
asciilifeform: ;;later tell mircea_popescu observation: the only thing that doesn't parallelize linearly is the multiplication (still parallelizes as previously discussed, by split into cache-sized batches across cores.) but gcd against a known product does parallelize linearly...
mike_c: it was discussed on hacker news. looks like there are a handful of invalid subkeys on the sks servers
justJanne: Most of them don't seem to be valid.
mats: osprey falls outta the sky, again
asciilifeform: http://news.softpedia.com/news/Researchers-Break-RSA-4096-Bit-Keys-481475.shtml << oddly, one fishwrap got the name spelled.
mats: their fire will be less accurate in a firefight after a day's patrol due to muscle fatigue
mike_c: ads look like they're working (technically at least). we'll see if 8chan'ers have any money.
mats: and as an aside the high ready position is inferior
mats: looks like she has her finger in the well
asciilifeform: motherfuckers.
mircea_popescu: dude, three year's a lifetime for these ephemerides
asciilifeform: jurov: the derpfest in question was so blatantly an organized 'astroturf' affair that it vanished as thoroughly as anything from 20 yrs ago
jurov: "made me reminisce about the old days of Occupy Wall Street".. like, it was 20 years ago?
asciilifeform: (though it, in turn, used data from a paper, cited therein)
asciilifeform: jurov: i regret to say that i may have been responsible for the first such article.
cazalla: what can i say other than he's right.. 9/10 aussies i met on 4chan love nothing more than shit posting
mircea_popescu: http://log.bitcoin-assets.com/?date=18-05-2015#1135914 << i dun recall who put it in, mebbe davout but at any rate from what i've seen they couldn't get consensus behind the "inaccurate title" theory, or w/e it's called there. so that didn't werk.
mircea_popescu: case exactly mirrored by freenode : about a year after they lost at least one server to what appeared like quite the nsa, and promising a full investigation, nothing's been released.
mircea_popescu: "More than two years after unknown hackers gained unfettered access over multiple computers used to maintain and distribute the Linux operating system kernel, officials still haven't released a promised autopsy about what happened."
mircea_popescu: http://log.bitcoin-assets.com/?date=28-02-2015#1035818 << meet the slavegirls sometime.
kakobrekla: click on the 0conf amount
assbot: Logged on 28-02-2015 01:55:22; cazalla: so i made a bitbet under the influence and couldn't fund it until later, i assume 0 conf address listed for it in /propositions/ is the address of which i need to fund?
kakobrekla: since then nfi
mircea_popescu: dja need me to reset pw or something there ?
assbot: Logged on 18-05-2015 03:05:47; mircea_popescu: kakobrekla hey, is something the matter with assbot ?
mircea_popescu: mats http://upload.wikimedia.org/wikipedia/commons/thumb/2/26/Girl_volunteers_of_the_People's_Self-Defense_Force_of_Kien_Dien%2C_a_hamlet_of_Ben_Cat_district_50_kilometers_north_of_Sai_-_NARA_-_541865.tif/lossy-page1-250px-Girl_volunteers_of_the_People's_Self-Defense_Force_of_Kien_Dien%2C_a_hamlet_of_Ben_Cat_district_50_kilometers_north_of_Sai_-_NARA_-_541865.tif.jpg << check out that grip.
mircea_popescu: pro tip : the north won.
mircea_popescu: it's already underway. but, the more the merrier. this is the sort of thing where one can make a difference.
mircea_popescu: not terribly costly, considering what "VC" firms spend and what they get for it.
mircea_popescu: we might consider publishing the "harmless" keys, but for one thing i am not altogether convinced they're so harmless, and for another, much more interesting would be a hunt for diddled php implementations.
mircea_popescu: in that particular circumstance, where an outside but present chance existed that the box was compromised itself.
mircea_popescu: the case of hpa was exceptional because at the time the lightning struck (and understand just how unlikely the event we had on our hands this morning was), a call had to be made.
mircea_popescu: there's been a total of three pairs, so six total keys to date. i have little doubt that as the program progresses through the list, more will be found. generally, the idea is to discuss this with the owners and them only.
LC^: how many keys have you found so far? do you plan to disclose the owners of the other keys that are similar to hpa's? it doesn't seem to be a big risk there for the owners
mircea_popescu: there are other people matching exactly hpa's profile (high value foss target) with keys apparently added in the same manner. not too many.
LC^: OK, what about the other keys? Are they similar to hpa's key? in the sense that they've been attached to other keys, but lack the proper signature?
mircea_popescu: how often have you moved a file across the tubes ? how often did it have a magically changed byte ?
LC^: there are parts in some archive formats you can modify and the archive will still work, though year I understand your point, the suggested theory of damaged in transit would suggest random damaging not controlled modification
mircea_popescu: understand, opsec is extremely weak all over. including among supposedly experienced hackers. so, a simple scenario : guy with owned userland gpg sends secret info to hpa, it is magically encrypted to wrong key, email sniffed en route, secret is now known, but only to the people knowing what to look for. hpa responds with something like bad key, guy re-encrypts it and resends it.
mircea_popescu: especially amusingm, the "key was damaged in transit" one. people p2p HD movies all day, nobody's seen this. gpg data moves around as archives - try flipping a byte in an archive see if you can stil lget the content. etc.
mircea_popescu: this, of course, is not the only mechanism that would allow such a key to exist. nevertheless, alternative explanations border on the risible.
mircea_popescu: clearly people looking at/for him would be the target, if anything.
mircea_popescu: in any case, the idea that hpa is the target of that attack - if indeed it is an attack - are at best naive and at worst disinfo.
mircea_popescu: but it is a theory - until someone produces such a diddled implementation it stays a theory.
LC^: I see, so the key would serve as an exploit of sorts or a trigger
mircea_popescu: this sort of thing (the so called "fail to pass" testing) is the exact sort of stuff we've seen from the nsa to date, and so it would mesh with that experience.
mircea_popescu: such as, encrypt to it, or email the NSA, or whatever else.
mircea_popescu: if however his pgp implementation is compromised in a specific way, the wrong key on the server may very well be the magic packet, causing it to behave in an unexpected - and not otherwise detectable - manner.
mircea_popescu: with a correctly working pgp implementation, the user connects ot a sks server, discards the wrong key and proceeds as expected.
mircea_popescu: suppose someone needs to talk to hpa - either to verify his signature or to send him encrypted communications.
LC^: I'm just trying to understand what the risk is here and why would someone create such keys, intentionally
mircea_popescu: one of the more interesting constructions as to the possible intended uses is, a tandem arrangement. it would work like so :
LC^: OK, what is the whole story?
mircea_popescu: this is factually correct. it is also not the whole story.
LC^: OK, but can they actually be used? some argued that the weak key supposedly belonging to hpa can't be used to decrypt emails or other data encrypting by him because it was not signed by his real key
mircea_popescu: i am plainly saying that while the weak keys incontrovertibly exist, it's unclear why they exist. someone put the effort into making them, which is not exactly trivial.
mircea_popescu: that aside, the question of how exactly weak keys came to be, and what are they doing there and so on and so forth is not nearly as uninteresting as the usg agency would like to make it.
mircea_popescu: there are all sorts of classes of broken keys, which we're obviously still sorting through.
mircea_popescu: there is at least one key with a p over nine digits.
LC^: I guess that is the main problem you're trying to highlight, correct? that some generators might be broken and generate weak keys
LC^: so wanted to get your opinion on the issues that have been raised, mainly that the first key was not signed by the owner so was likely added by someone else, with or without malicious intent.
mircea_popescu: at the moment, you do not.
mircea_popescu: the right move would be to get in the wot, cultivate your presence here afterr which next time you may have an angle.
mircea_popescu: in other news, the next batch of usg dept of internet outsourcers, to replace the current batch of third worlders : http://i.imgur.com/9EG2jYA.gifv
mircea_popescu: hmm, anyone has a ready link to the discussion of the reddit deleting the blockchain thing because they had so much fucking consensus it ended up imploding under their feet ?
asciilifeform: worth considering - where are they likely to come into play (as fetched from sks)
asciilifeform: for anyone still awake, i'm presently wondering re: how the rotten keys behave in autoverifier scripts (debian ? etc)
asciilifeform: is the inescapable conclusion.
mircea_popescu: aaaaand fort meade scoressssss again!111 on their ...
mircea_popescu: Holy shit, they broke RSA! or This is false advertising, they didnt really do anything! imbeciles, << no but it's THE CONTROVERSY
mircea_popescu: again. team meade scores another hit on their imaginary, wildly irrelevant scoreboard.
mircea_popescu: team meade scores another hit on their imaginary, wildly irrelevant scoreboard. for which they get paid. with tax dollars. by idiots.
mircea_popescu: asciilifeform notice that idiots are doing their pressing. "If I wanted to poison HPA with a fake key, why would I create a degenerate one? A fake key with strong factors would have gone unnoticed, at least by this analysis"
asciilifeform: anyone with an account (yes, they require one even for 'anonymous' comments) is welcome to post one.
asciilifeform: the mis-spellings are a deliberate trollage, or what.
asciilifeform: http://www.theregister.co.uk/2015/05/18/big_rsa_keys_are_vulnerable_says_researcher << more lulz
asciilifeform: pete_dushenski: the animals in the photo at bottom of your latest article look like guinea pigs
BingoBoingo: Probably for the best
asciilifeform caught up with log, links, overwhelmed by sheer retardation of the pg wank circus, maxxed out dosimeter
asciilifeform: er opened the possibility that still other developers may have fallen prey to the attackers.'
asciilifeform: 'During that time, attackers were able to monitor the activities of anyone using the kernel.org servers known as Hera and Odin1, as well as personal computers belonging to senior Linux developer H. Peter Anvin. The self-injecting rootkit known as Phalanx had access to a wealth of sensitive data, possibly including private keys used to sign and decrypt e-mails and remotely log in to servers. A follow-up advisory a few weeks lat
asciilifeform: 256 clients all with just a number as name... << SOP. one (at least formerly common) botkit which did this was 'athena.' many others likewise.
assbot: Logged on 18-05-2015 01:35:23; justJanne: Sometimes when I get DDoSd I run nmap against the attacking servers, one time I found a small IRC server with only one channel, in which were 256 clients all with just a number as name, and one other client sending specific commands every few minutes
mircea_popescu: something to do with bare adolescentine breasts, one would hope, for the sake of everyone's sanity ?
assbot: Logged on 17-05-2015 23:41:43; williamdunne: Disagree with the cause, but pretty cool project IMIO
mircea_popescu: http://log.bitcoin-assets.com/?date=17-05-2015#1135696 << maybe they could make them also fly, i'd donate.
assbot: Logged on 17-05-2015 23:39:53; pete_dushenski: williamdunne i really have nfi what the first trade was. if you say it's weed, we'll go with that, but that doesn't mean that first=best
mircea_popescu: it all stems from a very funamental confusion as to what things are andwhat technology can do. the idea being that technology = magic, and so it can change the nature of things. take marketplaces, which are by nature centralizing, and magic them into being decentralising. meanwhile irl, technology works to increase quantitatively, not to alter qualitatively.
mircea_popescu: that's the entire fucking point.
assbot: Logged on 17-05-2015 23:34:39; williamdunne: Read the article, and I still don't see how that makes it bad for the last mile
mircea_popescu: http://log.bitcoin-assets.com/?date=17-05-2015#1135682 << because the last mile MUST be decentralized
BingoBoingo: In the calculus series classes test questions were taken from the homework, which was conducive to drinking whiskey before tests.
mircea_popescu: i have my doubts if you could get a decent definition of the notion of number from one in ten us graduates.
justJanne: And, tbh, math101 at university isn't supposed to work with numbers. Math 101 is set theory, logic, lists, trees, functions, relations, sur/in/bijectivity, upper and lower bounds, complexity, etc.
justJanne: Helps keep the study free from scriptkiddies.
mircea_popescu: they were racist.
justJanne: Nah, they'd fail Math101 here.
mircea_popescu: otherwise about as literate.
mircea_popescu: you gotta appreciate, a compsci student in the us is a guy that's too autistic to deal drugs.
mircea_popescu: <justJanne> BingoBoingo: Yes remember, I use no Google services, and modified half of the apps on my phone myself. << o.O what are you, like a hacker ???
williamdunne: Stick authentication of it in deedbot or summin
williamdunne: I'll eventually create another key offline which I'll use as a master or summin
mats: fwiw i use a smartphone too, the point being rammed here is that you don't really have an expectation of security.
justJanne: And I'd like to dump the firmware, but that would violate copyright.
justJanne: The ISP I'm using was started by a few people from the CCC, so from that side not too high of a risk.
gribble: The operation succeeded.
mike_c: mircea_popescu: you should be able to drop this link in as the source of the iframe: http://www.btcalpha.com/bb_frame.html?height=90&ref=1GiSXgAhjqYvAB17JjXX8YCqNCizCjLJgp
justJanne: BingoBoingo: Yes — remember, I use no Google services, and modified half of the apps on my phone myself.
btcg: i use their webmail mostly
midnightmagic: -- which directly resulted in the erroneous and I would say, outright lying in the Aurora analyses. None of the conjecture that the public could see (because that's what the fuck it was) needed to ever be tested or 'pay rent' in terms of accuracy.
decimation: midnightmagic: convincing-sounding is pretty much the going standard in the english speaking world
midnightmagic: mircea_popescu: Mediocrity is a natural result of psychopathic and sociopathic inroads. The moment upper management ceases to directly observe their employees, the result is the most convincing-sounding people's voices become the most relied-on. Convincing-sounding is not the same as accurate/informed.
mircea_popescu: kakobrekla hey, is something the matter with assbot ?
mircea_popescu: worst part being that it's usually "corporate [in]culture" that takes marginal yet ambitious intellects and molds them to this shit.
midnightmagic: most of the time.
midnightmagic: I personally watched the responses internal to some of the companies involved and observed the evolution of the document they presented to the public. The people on whose opinions some of those documents were based were bullshit artists, borderline pathological, of the worst order.
midnightmagic: mircea_popescu: The old Aurora attacks are an excellent example of the perversion of the idea of 'well-credentialed'. The people they had making comments about the SCM systems involved in that attack and the shoddy investigations going on were.. extreme.
assbot: Logged on 17-05-2015 23:11:27; williamdunne: >Forget MPEX. The best/most reliable stock exchange is, by far, BTCT.CO.
decimation: mircea_popescu: yeah, in fact I suspect "the lady doth protest too much"
justJanne thinks back to the Toyota issue
assbot: Logged on 29-04-2015 14:33:49; davout: mircea_popescu kakobrekla mebbe make scoopbot_revived not mention the title and let assbot handle it?
adlai: was this some fix-in-anger to the http://log.bitcoin-assets.com//?date=29-04-2015#1115842 conundrum?
mircea_popescu: decimation honestly, i suspect the guy complaining on trilema was either trying to stir up shit or else working on meanwhile inacurate history. seems the ddos guy is gone.
mircea_popescu: midnightmagic not bad, but it lost me at the "well credentialed" etc bs.
justJanne: decimation: I'm on phone right now, but as the latency didn't go up, doesn't seem so. Or at least nothing noticeable.
justJanne: A local server you can put in your own data center. It can operate even separate from the web.
assbot: Logged on 17-05-2015 23:07:10; trinque: DreadKnight: doing the ad-supported thing is a loss leader at best; you have to be able to burn money until your audience is large enough to merit being paid for the # of eyeballs
williamdunne: I think with pay they still have your data
williamdunne: Increasing the number of people who know the platform so that enterprise customers will purchase it
adlai: gmail sells adspace to its parent company. the number of people who know its actual revenue is probably quite low.
adlai: (a reporter writing about 'accidentally' carrying a multiple-inch blade onto an airplane damages airplane security far, far less than the security practices that let it through)
assbot: Logged on 17-05-2015 23:00:52; decimation: there are clearly people on hacker news who are enemies of #b-a
mircea_popescu: http://log.bitcoin-assets.com/?date=17-05-2015#1135608 << everywhere someone hopes to get something for nothing and figures govt's the answer to that quandry there's an enemy of b-a. amusingly, this boils down to really very few people and traceably so.
adlai considered writing some words about how security theater damages actual security, but stuck to lazy bean counting
mircea_popescu: who the fuck asked anon what is and isn't reason nao ?
mircea_popescu: "[1] He's been scraping the profiles of young women (specifically) and posting links, names, and hometowns on his blog. Yes, as technologists, we know that this kind of indexing is trivial. That's no reason, as a decent human being, to terrorize innocent people."
decimation: lol she claims that (52:41) that openssl just adds the current time of day in seconds to the entropy pool
assbot: Logged on 17-05-2015 22:57:59; DreadKnight: we have a saying around, going something like "you drawn like the gypsy near the shore", meaning overall that you failed in the last few steps
mircea_popescu: http://log.bitcoin-assets.com/?date=17-05-2015#1135604 << confirmed romanian. "te-neci ca tiganu' la mal." implying normal people drown in blue water, but gypsies can't even do this right, they drown after almost getting to shore.
assbot: Logged on 17-05-2015 22:51:31; DreadKnight: the project gets small contributions constantly, but when it comes to bigger stuff, people tend to vanish at about 90% progress xD
mircea_popescu: http://log.bitcoin-assets.com/?date=17-05-2015#1135600 << heh the blessed 90%. "nothing may ever get done!!1"
decimation: "I don't really know, but I talked to Nadia Heninger about it and she mentioned that they were probably created by some email software only used in Germany. "
decimation: it's in the comments of that article that replaced yours on hacker news https://blog.hboeck.de/archives/872-About-the-supposed-factoring-of-a-4096-bit-RSA-key.html
mircea_popescu: jeez how the world changes in a coupla hours based on what's said in b-a log, you'd think we're talking to gavin-the-handpuppet & co.
mircea_popescu: decimation wait, we're progressed past the "it occured while copying" to obscure email programs naoi ?
decimation: can you identify the supposed "german email program" that was supposedly the source of these weak keys?
decimation: justJanne: given your interest in this gpg episode, there is something that you could assist with
decimation: ^ sufficiently idomatic to pass the google translate test
justJanne: Die wird aber ganz kurz ausfallen müssen ;P Ist auch nicht viel zu sagen – Geboren in then 90ern, ganz normal Grundschule, bin mit 8 ins Hochbegabtenförderungsprogramm gekommen, hab neben der Schule interessantes Zeug gelernt, dann Gymnasium, hab mit 16 neben der Schule angefangen zu studieren, und hab mit 18 Abitur mit 2,2 gemacht. Bin seit letztem Herbst Vollstudentin ;)
adlai: is the middle number vwap?
williamdunne: justJanne: I'm pretty sure a 55 yo Pittsburgh steel mill worker would have the connections to get one of those there fancy emails
mircea_popescu: justJanne well on the plus side now you can voice.
assbot: Successfully added a rating of 1 for justJanne with note: 55 yo Pittsburgh steel mill worker posing as 19 yo girl on the interwebs.
mircea_popescu: !rate justJanne 1 55 yo Pittsburgh steel mill worker posing as 19 yo girl on the interwebs.
cazalla: 14/f/cali oldest fbi trick in the book
mircea_popescu: http://trilema.com/2015/full-disclosure-4096-rsa-key-in-the-strongset-factored/#comment-114229 << lol check it out, ~they~ are going to ~lend me~ credence. i've been visited by backwards world wtf is with today.
justJanne: just another compsci student
justJanne: nah, northern Germany
mircea_popescu: that totally kills the whole thing. i bet you're not even from cali.
mircea_popescu: these guys keep saying it's forbidden on irc.
decimation: you can see the logs at log.bitcoin-assets.com
justJanne: Meh, too lazy to copy it from my other PC, I’ll just make a new one and sign it with my old key later
decimation: justJanne: no problem, make a new subkey or extend the date
justJanne: at least so that one doesn’t discover their botnet that easily
justJanne: but yeah, I was kinda surprised, would have assumed they’d put the control for the botnet on a different system
williamdunne: Guessing for some reason they thought it would be a swell idea to use the IRC server for additional DDoS power?
justJanne: assumed as much, but I have no experience with them yet, and was surprised seeing one in the wild
assbot: Logged on 08-12-2014 17:59:30; asciilifeform: incidentally, if anyone bothered to read the packet dump i posted a while ago, they should know that the ddos bot uses misconfigured consumer routers (upnp reflection)
justJanne: Sometimes when I get DDoSd I run nmap against the attacking servers, one time I found a small IRC server with only one channel, in which were 256 clients all with just a number as name, and one other client sending specific commands every few minutes
BingoBoingo: justJanne: Yeah, just anyone without a freenode cloak who joins when their spybot is online here to pull the trigger
justJanne: or, rather DoS
justJanne: So, they really DDoS random people?
mats: if you read this -- please stop by for another friendly conversation
BingoBoingo: People examining the traffic spotted that most of the zombies were ntp reflection and stuff anyone could walk away with, and they likely did leaving less to hit here with.
BingoBoingo: justJanne: Well the person doing it at first called themselves the reddit police and started by DoS'ing sites affiliated with regulars here. Then the sites beefed up and weren't so easy to DoS. So now they's had to settle for messing with home internet connections.
justJanne: Reminds me of that guy spamming a gaming channel with links to their DDoSing company
BingoBoingo: justJanne: It isn't anything done by any of the channel regulars. It's just some butthurt dickbag with an excess of unwarranted self importance who imagines they are saving the world by DoSing every ip they spot here
justJanne: Nah, I was just reading on the RSA factorization article where someone claimed this channel would still DDoS everyone who joins. Sadly I can’t see any of that (was hoping to see if it actually is true xD)
decimation: well, then sjw is where it's at
pete_dushenski: http://filmschoolrejects.com/features/10-famous-films-that-surprisingly-fail-the-bechdel-test.php?all=1
mats: decimation: i'm just happy to find a fun action movie that passes the Bechdel test
mats: (they tend to shit on everything)
mats: i drank something like 6-7 litres of water that day... missouri is hot as fuck during the summer
cazalla: http://log.bitcoin-assets.com/?date=18-05-2015#1135780 <<< did this one countless times, not as punishment though, old man forced me to do it along the fenceline so he didn't have to whippersnip it
mats: i spent the whole day (0900-1600) with some other trainees cutting grass at battalion hq because one of the nubs in my squad saved his granola bar from the mess hall and put it in his locker where it was discovered
cazalla: http://log.bitcoin-assets.com/?date=18-05-2015#1135775 <<< heh we had this even here but i'd walk off with the group which cleaned dishes the night before, never washed as much as a plate
pete_dushenski: decimation no doubt. it wasn't *that* expensive, at least compared to the bbyo summer camps.
pete_dushenski: i wrote for the newspaper, wrote mad magazine-esque fake nooz
decimation: like, sweeping the forest?
pete_dushenski: seriously, the shit in my veins !
decimation: heh did they teach hebrew?
decimation: pete_dushenski: are you planing on visiting any other outlying islands or the rest of bc from there?
decimation: their website is unwhelming
decimation: I suppose they figure enough derps would come and go on foot
decimation: heh. I guess I can see why a pawn shop wouldn't bother with shipping
decimation: also, victoria is well south of the canada-us border
decimation: fun fact: there's a part of vancouver, bc that is us territory (point roberts)
pete_dushenski: i guess there's enough local demand in this retirement town that they don't have to try.
pete_dushenski: i didn't want one that bad when i woke up, just saw the right one at the right price and wanted it.
pete_dushenski: or w/e, mebbe my privilege knows no bounds. hey, i'm not the one losing business.
ben_vulpes: your privilege is dripping on the floor
pete_dushenski: ben_vulpes i've used fedex freight before, they'll come pick up the package from wherever and deliver it wherever.
chetty: the replacement story is already up hehe
pete_dushenski: just basic frieght is too complicated for these people.
pete_dushenski: honestly, there are thousands of cruise ship tourist visiting victoria daily, and these assderps haven't figured out shipping a box 1,000km IN THE SAME COUNTRY
pete_dushenski: all they have are cardboard boxes, no freight boxes, no shipping relationships in place, no arrangements can be made.
pete_dushenski: no can do, they tell me.
pete_dushenski: so i walk into a shop on the edge of chinatown and find a beautiful mid-century modern walnut table
deedbot-: [cascadian hacker] how to process bitcoin transactions for your webapp (or: the ghetto watch-only-wallet) - http://cascadianhacker.com/blog/2015/05/17_how-to-process-bitcoin-transactions-for-your-webapp-or-the-ghetto-watch-only-wallet.html
williamdunne: Disagree with the cause, but pretty cool project IMIO