[cathub] could this be done with Yubikey instead of storing unencrypted passphrases locally ?

rudyardcatling (65)in #rudyardcatling • 6 years ago

bipolarnarcistscumbaglabellabellabel ... language, young man! yes, sir , which one do you mean ?
the one man thing, ergo-therapeutic brainrot prevention, one post a day ... holding up ... now ... about the money ? why are you people wrecking my money like that ? dumping prices into deep space zeroes? dont you know i need this for my epic?)

Trying to look like a pro yet i'm not, out of the chaos comes creation, i am Random of Amber ... not mister Formal Ed

2018-06-18

AAAaaah, you don't like my Wu-Cat style ? too much motion in a small space all over the place well

I TOLD YOU

when i get the money maybe you can come work for me, i'll need structured people but ME?

i will NEVER FIT IN YOUR FUCKING TEAM

u-huh, voters prerogative, if you wanna play democrator you dont get to tell people what to do with theirs ... if you HAVE to call it something you can call it sound politics but you dont have to, fair is what i try to do and i hope to be able to do so longer than google fell for money and stopped doing it, but i DO NEED THE MONEY THOUGH or i'll be stuck in a life where my leonidas complex wont allow me to roll over for cookies ... me having money is good, except for people who REALLY fucked me over in the past, but thats another chapter, one that will never see the light of steemit HAHAHAH (im SO funny)

Soooo ....

checking into steempy ... so far i find ... i actually have to type the passphrase everytime or i have to actually set it in an environemnt variable ... which makes it VISIBLE ON SCREEN .. or worse, put it in .bashrc WHICH STORES IT UNENCRYPTED PERMANENTLY ON MY HARD DRIVE ... ??!??

you must be living in a place where you're sure no one will ever get to your pc then ? so i would have to actually switch the passphrase EVERY TIME i use it ?

so maybe i could .... pfff, is that REALLY "it" ? maybe i can use my old yubikey somehow cos this is a fucking hassle .. i dont wanna compromise any security in the name of automation here ... so does that go for windows too ?

people have to store it on their fuckin hard drive unencrypted ?

i read many interesting things : EOS bugged out, shows them well for selling crud ... mozilla succeeded in losing ALL my bookmarks in their sync after an update, on the forums it said "yes its a minor drawback for an otherwise great solution"

THATS YEARS OF BOOKMARKS YOU FUCKER ... first xmarks down, now this

o yea ... topic ...

SO ... python ... invalid identifiers on the house

steempy ?

o well ... ERROR:root blablabla but the vote has arrived

okay this might take some time, i never done a line of python in my life (and i dun a lot of lines back in my time HAHAHA not funny)

ah you think im doing dark souls hm ? ofcourse, why else would it say that on my profile ... well ive actually been too much garden yesterday, my eyes are burning, actually it feels like my face is burned and my eyes have been replace with sand , ive been washing the doors and doorframes and i'm doing laundry and jumping at the keyboard when i get a second of clarity in between, dark souls hangs around there somewhere when i pass by, i don't really "enjoy" things anymore since they stuck me back here

the things and stuff

folder structure :

it's actually supposed to be a folder structure you can unzip anywhere and use as is without installing anything (you know how to rightclick/view image i suppose). Basically just a bunch of snips i scribbled up to do some things and view some things but, structure might be possible

commands available

parseaccounthistory_wrk.sh (several subroutines to parse data from an account history kept locally)
pretty_please.sh (something i got from stackoverflow that strips .json data into separate lines without having to install extra packages, which is the intention and so far, other than curl seems to work)
updatehistory_rudyardcatling.sh / updatehistory.sh (gets an accounts full history , incrementally depending on how much is already stored locally)
wurdamoney.sh0 [accountname] calculates the worth of a 100/100 vote on any given account (not counting delegation, only 'own' power)
findeligiblevoters.sh0 (parse list of accountnames (gathered from a post voted on in this case so far) check one by one the time of latest root post, it time <7days add to list of eligible) used to simplify finding the random people to vote on who participated (a LOT of accounts are stale, bots or re-steem only)
batchpay.sh0 (tbd)
batchupvote.sh0 (tbd)

includes

the point would be to as many of these since they don't require separate PIDs

composemainbody.inc split from ubasti/ubasti, used to get all the necessary variables to include in a pre-formatted text body, can now be used for multiple types or repeating posts with changing vars

functions available

under /include ... well its not really /include but the intention is that it is , its not all functions it might just be sets of variables or ENV_VAR declarations for use in multiple scripts or commands with the linux shell source command

formatname.inc (used to make it independent wether user inputs @accountname or simply accountname
getacctvars.inc (basically meant to store lots more but atm only gets last tx , last tx number and last tx id of account)
getSP.inc (gets steem power of account by calculation (delegation not included) )
votersfrompost.inc (gets all voters on a certain post from the post.json and puts them in a nice small flatfile)
getvoteworth.inc (gets the sbd value of a 100/100 vote from accountname) <--- alarming downtrend

"projects"

steemterm : the eventual compilation , commands for now : help, clear, reload, sbi, upvotes, downvotes, transfers , display [on/off]

ubasti / sakhmet : used to generate the main body of the daily post and pick out the voters and non eligible voters from the last paid out post

well, python crud ofcourse, so far nothing really but i think the generated script from topline of file should be handy

18/06/2008

steemUX

nada so far

pythoncrud

i have made a vote on a post using python crud, YAY is ME !
i have also made a payment on python crud , YAY is MEx2! powerup collected


Python 3.5.2 (default, Nov 23 2017, 16:37:01) 
[GCC 5.4.0 20160609] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> s.commit.transfer(to='sakhmet', amount=0.001, asset='SBD', account='ubasti')
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
NameError: name 's' is not defined
>>> from steem import Steem
>>> s = Steem()
>>> s.commit.transfer(to='sakhmet', amount=0.001, asset='SBD', account='ubasti')
Passphrase: 
ERROR:root:Downgrade-retry rpc.steemviz.com
{'extensions': [], 'ref_block_num': 3559, 'ref_block_prefix': 683348188, 'operations': [['transfer', {'to': 'sakhmet', 'memo': '', 'amount': '0.001 SBD', 'from': 'ubasti'}]], 'signatures': ['1f21a49d9ad7c9f0ef513cab140d2922e1a887e4bffd67e1e1e40c4d39f496821f6e06a925046fae25dbc783acb97299299c870a913507952d0b4c3de7d79b0915'], 'expiration': '2018-06-17T11:39:09'}
>>> 
celeroncat@cerebro /mnt/6f1cfa9e-a67f-43e5-bacd-8e60ac8ef226/steempyth/steem-python $

its probably very funny to people who do this every day but you should consider the fact that i had to spend about 3 hours on google to actually get it installed at all due to contradicting instructions and manual that go like "o its like this so you can take it from here, right ? i need EXAMPLES , snippets i can check with info on what they do, i dont do very well with schoolbooktype ... i'll get there, at my pace divided by how its done by who does it

im not negative, this is just me, you dont know what negative is so

can i just try to stick these in a one-script and hope it asks me only once for the passphrase ?

well i can try :)

looks straightforward enough ... no delimiters hm, i read some about that for a while on "to delimit or not to delimit, that is the question" and me like so whats the difference between a carriage return and a semi colon ?

because you only have the illusion that you need to carriage return at the end, so you can read what you wrote after the week-end

variables ... straightforward enough ?

from steem import Steem

steem = Steem()
amountsbd = 'amount=0.001'
fromaccount = 'account=ubasti'

try:
   s.commit.transfer(to='sakhmet', amountsbd, asset='SBD', fromaccount)
   print ("Succesfully paid!")
except Exception as e:
   print (repr(e))

or not ?


celeroncat@cerebro /mnt/6f1cfa9e-a67f-43e5-bacd-8e60ac8ef226/steempyth/steem-python $ python3 ../testpay.py
  File "../testpay.py", line 8
    s.commit.transfer(to='sakhmet', amountsbd, asset='SBD', fromaccount)
                                      ^
SyntaxError: positional argument follows keyword argument

right ... i guess i could generate line by line using linux shell but ... tell me i cant use variables in commands ? not possible, right ?

okay, so lets stick to the comfort zone ...


#!/bin/bash
#######################################
RECIPIENT="sakhmet"
AMOUNT="0.001"
ASSET="SBD"

steempy transfer sakhmet 0.001 $ASSET

steempy transfer $RECIPIENT 0.001 SBD

steempy transfer sakhmet $AMOUNT SBD

well well ..


celeroncat@cerebro /mnt/6f1cfa9e-a67f-43e5-bacd-8e60ac8ef226/steempyth/steem-python $ ../batchpay.sh0
Passphrase: 
ERROR:root:Downgrade-retry rpc.steemviz.com
{
    "extensions": [],
    "ref_block_num": 4307,
    "signatures": [
        "2015a58087cd68b1a5c388c1ac0d165e2921abd3e511981607b3392e9c979d87da0341aef3799136811364d1857d7c2f86d03a3b44ff006cca4dd426794dcdfd71"
    ],
    "expiration": "2018-06-17T12:16:34",
    "operations": [
        [
            "transfer",
            {
                "to": "sakhmet",
                "memo": "",
                "from": "ubasti",
                "amount": "0.001 SBD"
            }
        ]
    ],
    "ref_block_prefix": 585854633
}
Passphrase: 
ERROR:root:Downgrade-retry rpc.steemviz.com
{
    "signatures": [
        "2001908921d454577d0b946f420edbc500a64a0e2565dd9006c2d467d7be270fee742f17ca8bdcd3ecb5013bd4e369959f454edd3271b761b2beb0e988eea9b884"
    ],
    "expiration": "2018-06-17T12:16:44",
    "operations": [
        [
            "transfer",
            {
                "memo": "",
                "from": "ubasti",
                "to": "sakhmet",
                "amount": "0.001 SBD"
            }
        ]
    ],
    "extensions": [],
    "ref_block_prefix": 1302258338,
    "ref_block_num": 4310
}
Passphrase: 
ERROR:root:Downgrade-retry rpc.steemviz.com
{
    "expiration": "2018-06-17T12:16:53",
    "ref_block_prefix": 1740438359,
    "operations": [
        [
            "transfer",
            {
                "from": "ubasti",
                "to": "sakhmet",
                "amount": "0.001 SBD",
                "memo": ""
            }
        ]
    ],
    "extensions": [],
    "ref_block_num": 4314,
    "signatures": [
        "2049c43b4c798eb9a5c85a9d990b223f23a3ca092565df93b362f481109854a71914bb64f02fe9ab4360b5989e065c96b3d4a7cfc1c4e78ea39ecdc7cffe4f142c"
    ]
}
celeroncat@cerebro /mnt/6f1cfa9e-a67f-43e5-bacd-8e60ac8ef226/steempyth/steem-python $

errors all around and a lot of crud, have to enter the passphrase every time but ... if i take ubasti/ubasti, generate the body and use the paidpost_voters file to parse as variable "foreach" this should get me somewhere since i can set it up at 11:59 hours before payout more or less, then just check on payout for the exact amount

IF I REALLY get sloppy i could pass an ENV VAR and then change the passphrase EVERY fucking day ... which is LA-LA-LAME ... there has to be a better way ... i dont once if it actually gets on screen want to keep it

and bla and bla and dance for cookies, getting ahead of myself but thats cos i am ... with this steempy thing who needs python actually ? that comes down to ... one more command but curl in fact but its written in python or something ??? i dunno, don't care

but it seems to work for now ... if i change the passphrase to 'y' before i do it and then back to something more compli after i dont need to store anything unencrypted anywhere, could possible pipe that into the script

now THAT is for the to-do section

AlleyCat

nada for now ? lots of daily deardiary pics ofcourse but how boring is that?

things to do ? (lots)

among others i might have already thought of or not

switch as many commands as possible to includes (no new processes spawned while running, not much difference on todays machines but i like it and i will try to keep it built for speed and minimal network load)
split up functions as small as possible to make sure no network access is made that's not needed, network is the bottleneck for speed here after all
add env_vars include to make it easy to use relative paths within the main folder and get rid of the symlinks which dont work when its copied to another place
find out what i need to get a localnode up and running (hopefully 240 gb is enough), i'm downloading that actually atm
see if i can make transactions like payments on the local network while that one syncs to the blockchain so the actual keys never have to leave ... IF POSSIBLE :p (or is that already happening with steempy?)
euhm ... now we filtered out the root_posts, maybe check for comments that arent stale yet in case someone quit trying because of (you know, why, elitist bastard) and just interacts a little here and there, but that will be for later, re-steems wont count and ...
ofcourse, randomize the processs BUT id need to see vote value for that , i dont wanna elect anyone who will get a vote that turns to dust, thats an honourable mention with zero practical use, pragmacticalists like me (not a spelling mistake) cant have that ... i'm sure its possible but as i dont count this as getting paid it will happen in my time on my tempo, im sure no one has any reason to complain so far
switch pretty_please to include function
split up accounts when they reach treshold due to the lousy security one factor password system to spread assets over multiple 'vaults', it will lose on curation and probably look like you're upvoting with a whole system, but one compromised password doesnt mean losing everything that way, MUST DO !
ponder specific vars in composemainbody on flag or switch to relative project and put them there like

if [ -n "$RAFFLEVOTES" ]
then
RAFFLEVOTEFILE="$ACCOUNTURI""_rafflevotes"
RAFFLEVOTESELECTED=$(cat $RAFFLEVOTEFILE)
fi

can be put in either ubasti/ubasti without the conditional or in the mainbody where its conditional depending on flag $2

put composemainbody.inc autodeclined / non eligible in separate file
start my own bookmarks folder on alleycat.be this is how many times now ? trusting third parties and that cloud-shyte never works out
finally start that appgamekit thing simulating population and put that here too ...
yes, thats not half a bad idea precious ... script a script that generates python code and picks permlinks from a list ... i can set up the list in advance and just run the command and enter the passphrase on alarm-time-is-now ... not quite supreme but timesaving, good let me write this down in the middle of my laundry before i forget it, m-hm, it wont work to keep up the 100% votes while sleeping or afk but for now its a timesaver, GUD, downwritten
check if i can pipe an OTP into the batchpay script that would solve most of my moral dilemma on storing unencrypted passphrases locally on disk or in an env var ... GOOD IDEA, PRECIOUS, TWICE A DAY AND WITH A BLEEDING HEADACHE LIKE THIS, we might get it up and running and get to the appgamekit after all ... now where's my money ?
make enough money from one post per week to not make more than one post per week and focus on other things that do not require phoneboy and/or suitman to have the illusion to be the boss of me (cos thats never gonna happen again, im damaged)
get independent from handouts by government, employers lobby and benevolend enlighters
get rich or die trying
hunt down and exterminate whoever has been wrecking the sbd price fro a month now
never go for witness on steemit
much much more
get catfood
dont trust dogs
avoid humans
live by night (because i couldnt even type this post by day)
and so on ...