Title: [ANN] 2Crow -- 2 party trustless escrow service -- 2Crow.org Post by: funkenstein on March 01, 2015, 11:11:53 AM Announcing..
A funkenstein the dwarf production... 2Crow.org 2Crow is currently in BETA stage, requesting comments, criticisms, security audits, and abuse. It works, but there is very little error checking in place and many cosmetic errors and other changes are underway. It is NOT recommended to use this for substantial commerce at this stage. Please test the service with small amounts, or comment on the readability / usability of the format of the site. Title: Re: [ANN] 2Crow -- 2 party trustless escrow service -- 2Crow.org Post by: dsattler on March 03, 2015, 07:02:59 AM Announcing.. A funkenstein the dwarf production... 2Crow.org 2Crow is currently in BETA stage, requesting comments, criticisms, security audits, and abuse. It works, but there is very little error checking in place and many cosmetic errors and other changes are underway. It is NOT recommended to use this for substantial commerce at this stage. Please test the service with small amounts, or comment on the readability / usability of the format of the site. Link is not working for me: error 408. Title: Re: [ANN] 2Crow -- 2 party trustless escrow service -- 2Crow.org Post by: funkenstein on March 03, 2015, 09:30:44 AM Announcing.. A funkenstein the dwarf production... 2Crow.org 2Crow is currently in BETA stage, requesting comments, criticisms, security audits, and abuse. It works, but there is very little error checking in place and many cosmetic errors and other changes are underway. It is NOT recommended to use this for substantial commerce at this stage. Please test the service with small amounts, or comment on the readability / usability of the format of the site. Link is not working for me: error 408. Thanks for your reply hmm.. that is odd, where are you pinging from? If this host causes timeout difficulty I will move it. You can also view the site as follows: git clone https://github.com/funkshelper/2crow.git cd 2crow firefox index.html & Cheers -- Title: Re: [ANN] 2Crow -- 2 party trustless escrow service -- 2Crow.org Post by: funkenstein on March 03, 2015, 09:43:40 AM I'll also throw the README here for some background:
2crow _ _ /.) (.\ /)\| |/(\ //)/ \(\\ /'"^" "^"`\ Normal commerce has the following three steps: 1) Merchant prepares an address and sends it to customer 2) Customer sends coin to the address 3) Merchant checks receipt and ships / delivers 2Crow seeks to eliminate a failure mode of this process, in which the merchant does not ship. It does so by using a 2 of 2 multisig escrow address controlled by both customer and merchant. The new flow: 1) Merchant prepares half a 2crow address and sends to customer as 2crow code. 2) Customer creates second half of 2crow escrow address and sends funds, giving the merchant the address and a new 2crow code. 3) Merchant checks funds are sent, ships, and prepares a TX sending it to customer for finalizing as a new 2crow code. 4) Customer receives goods and then signs the finalizing TX. Funds are now moved from the 2crow escrow to merchant's private account. Failure Modes: 1) Merchant disappears. The merchant cannot take the funds before the customer finalizes. However they could still disappear for a variety of reasons. In this case the funds in escrow are lost. Nobody can touch them unless both parties agree and sign a TX moving funds from escrow. 2) Customer disappears. The customer commits their funds in step 2. However if the customer disappears before finalizing step 4, all funds are lost. Nobody can touch them unless both parties agree. The customer has no financial incentive not to finalize if the goods are shipped. However, an addition of a customer deposit could help eliminate this failure mode. 3) Escrow compromised Some escrow services include control by a third party. In these cases, there is a danger that the third party will disappear with the funds. With 2crow this is eliminated. With 2crow, a third party attacker needs to compromise the secrecy of both the customer and the merchant to steal the funds. This cannot be done by intercepting the 2crow codes in standard communication. It could only be accomplished by taking the private keys of both the customer and the merchant. This mode is extremely unlikely, as any attacker who could perform such compromise would likely just empty the individual private wallets of customer and merchant and not bother with waiting for an escrow transaction to occur. Refunds As long as the merchant and customer agree, anything they like can happen to the funds in escrow. By placing a customer controlled adress in the "final address" field of step 3, the merchant can issue a refund before finalizing has occured. Title: Re: [ANN] 2Crow -- 2 party trustless escrow service -- 2Crow.org Post by: master-P on March 03, 2015, 09:58:46 AM The site's quite slow and sometimes it would time out during loading, seems like a problem with your provider?
Title: Re: [ANN] 2Crow -- 2 party trustless escrow service -- 2Crow.org Post by: funkenstein on March 03, 2015, 03:02:04 PM The site's quite slow and sometimes it would time out during loading, seems like a problem with your provider? Thanks, it is hosted with namecheap. I will consider moving it to a dedicated VPS. Title: Re: [ANN] 2Crow -- 2 party trustless escrow service -- 2Crow.org Post by: dsattler on March 04, 2015, 07:32:14 AM Announcing.. A funkenstein the dwarf production... 2Crow.org 2Crow is currently in BETA stage, requesting comments, criticisms, security audits, and abuse. It works, but there is very little error checking in place and many cosmetic errors and other changes are underway. It is NOT recommended to use this for substantial commerce at this stage. Please test the service with small amounts, or comment on the readability / usability of the format of the site. Link is not working for me: error 408. Thanks for your reply hmm.. that is odd, where are you pinging from? If this host causes timeout difficulty I will move it. You can also view the site as follows: git clone https://github.com/funkshelper/2crow.git cd 2crow firefox index.html & Cheers -- Now it's working, must have been a temporarily problem. Title: Re: [ANN] 2Crow -- 2 party trustless escrow service -- 2Crow.org Post by: funkenstein on March 06, 2015, 02:51:57 PM I have updated and simplified the interface. Now new keypairs are generated by javascript in the browser.
If you wish to avoid that of course you can craft your own code, but I figure the purpose of this site is to make this process as simple as possible. More feedback please! :D |