We need to lock for public all wiki pages with a download link, all download links should aim to the 1st topic here instead of direct downloads
agree joefox already locked some pages today, but there were translator issues related to that. I'm just saying to let everyone know that he has been on the ball concerning wiki security. |
|
|
|
|
Hash on the mega one corresponds with the ones Jean Luc gives on the forums.
|
|
|
|
I made these for friends and family. They are all like "why didnt you tell me about bitcoin earlier", well this time they wont have any excuses.   Nice!  |
|
|
|
EDIT: If transparent mining reveals the node's ability to forge, there's also the incentive to bring down large holders to improve your own forging income.
how about this? This reminded me... From https://en.wikipedia.org/wiki/Laconic_phrase: After invading Greece and receiving the submission of other key city-states, Philip II of Macedon sent a message to Sparta: "If I win this war, you will be slaves forever." In another version, he warned: "You are advised to submit without further delay, for if I bring my army into your land, I will destroy your farms, slay your people, and raze your city." According to both accounts, the Spartan ephors replied with one word: "If" (αἴκα). PS: There is no way to find IP of a forging node if it wants to hide the address. Even better: they cut off the other parts of the message and just sent back the word "if" Spartans apparently recycled  |
|
|
|
CfB
requiring an orthogonal step even after finding an account whose password you stumbled into would make everybody feel much safer.
As it is now a monkey typing random keys on the keyboard can stumble into an acct.
James
P.S. I understand why the current localhost will disappear, it has to so clients can add the new layer of security. Enforcing passwords that are strong enough is a good first step, but longer term please open your mind to the possibility of the "impossible", it will make a huge difference in NXT valuation
Jl777 and I absolutely see eye to eye on all of this. Thirded Edit: joe also added a security page to the wiki: http://wiki.nxtcrypto.org/wiki/Account_SecurityLet's hope that filters out a lot of weaker passes. |
|
|
|
Ok so when a new client arises is it reccomended that all users create new accounts? All current nrs accounts are currently at risk?
Some of these horror storys have me spooked a bit. I have a 50+ random password but still dont feel secure if im honest
If u use truly random password then u r ok. Recent horror stories r just black PR tricks. You are probably right - but you can't be sure. And this difference between "probably right / probably safe" and "sure / certain" is the shadow of doubt that the public mind will seize upon that will hinder widespread adaptation of NXT. Bitcoin will always be able to claim an air gap option that we will not. Getting ahead of this with some form of account freeze blockchain option / two step authentication scheme is the right thing to do. Not only that. Íf there is some bad mediacoverage, we can point out that these issues have been debated amongst the stakeholders before launch and prove that we take security seriously and are also thinking beyond the scope of advanced users. I'm trying to think long term about these things as much as possible. |
|
|
|
This isn't about math. It's about public psychology.
I think this neatly summarises everything that I was trying to point out. To expand on that: for NXT to be succesful and truly added value, it will need to go mainstream at some point. Arguably not now, and I'm not in any way suggesting that. But it needs to be on the cards and taken seriously. How that will be achieved is a different matter. Third parties seems logical. It's not something that is the sole responsibility of the NXT devs. NXT and any crypto that wants to survive, needs the general public. Those is also a fact. Also, in a more productive vein, I'd like to add a security page to the wiki. I now have the following items: - Making a secure password with keepass (does other software need to be added?) (50-60 characters long enough?) - Treat your wallet pass like it was your PIN. - Keep your computer malware/virus free! - never post pass. Does anything else need adding. If it isn't obvious already, I am not a techie (although I know enough to keep myself protected). Can anyone suggest other easily implemented safety precautions? Might as well help people out as much as we can |
|
|
|
I think you are taking a position here that is anti-productive.
All that is true.
However: Average Joe will not accept a system that is inherently unsafe.
As it stands, it seems that there may be issues with the safety.
It's not enough to just say: "everything is unsafe".
There are ways to counteract it, and if they are there, why not use them?
The idea is (I hope) to maximise the NXTproject in terms of ROI for us and others.
Having a huge hole (or perceived hole) in the system will not help.
The fact that banks screw people, too, does not mean we cannot do better.
I am not taking any position, I am just stating facts. Crypto currencies will never be for everyone to use, because many people are just lazy to learn to use them properly and safely. Just like guns. I'm not disputing the facts. let me make that clear. However, seeing as cryptos are very much in the mainstream news at the moment, it is a point of concern image-wise. Banks use protocols behind the scenes that the Average Joe also shouldn't be trusted with. I'm just pointing things out from a PR point of view. People are watching and PR is important for the mainstream. I also disagree that cryptos will never be for everyone. Maybe in the form that they need to be handled now, but if there are ways to make them more accessible to the general public: go for it. It's not a hole in the system. It is a hole in Average Joe mind. Which can be fixed using banks.
But banks must not be part of system, part of decentralized network. Agreed, but it's what you have to work with (the average joe's mind) This ties in generally with my answer above. Any crypto that doesn't appeal to companies that can offer such services will not make it in the end. Mainstream adoption will eventually need to be had. |
|
|
|
NXT is like a gun.
Once you squeeze the trigger, you can't stop the bullet.
Safety lock is your pass phrase.
People are asking for additional safety measures so that they or someone else can't squeeze that trigger or that the gun asks them 'are you sure you want to squeeze it?'
its simple for us...but for the general public its gonna be too much.
This may all be so, but there is a need for the safety to be better.
Mainstream users will NEVER enter NXT in any way if safety is an issue.
Most people just want peace of mind and the knowledge that their money is safe and guaranteed.
For now, in this phase, it's maybe not an issue, but it should definitely be on the cards if NXT has plans to be anything other than a service that is used by the few.
That's why there will always be banks. And some people will always trust banks, no matter how many times banks screw them. Because banks take away worries of how to store funds, sometimes take away funds too. The reality is only death and taxes are guaranteed. Everything else is just chances. I think you are taking a position here that is anti-productive. All that is true. However: Average Joe will not accept a system that is inherently unsafe. As it stands, it seems that there may be issues with the safety. It's not enough to just say: "everything is unsafe". There are ways to counteract it, and if they are there, why not use them? The idea is (I hope) to maximise the NXTproject in terms of ROI for us and others. Having a huge hole (or perceived hole) in the system will not help. The fact that banks screw people, too, does not mean we cannot do better. |
|
|
|
NXT is like a gun.
Once you squeeze the trigger, you can't stop the bullet.
Safety lock is your pass phrase.
People are asking for additional safety measures so that they or someone else can't squeeze that trigger or that the gun asks them 'are you sure you want to squeeze it?'
This may all be so, but there is a need for the safety to be better. Mainstream users will NEVER enter NXT in any way if safety is an issue. Most people just want peace of mind and the knowledge that their money is safe and guaranteed. For now, in this phase, it's maybe not an issue, but it should definitely be on the cards if NXT has plans to be anything other than a service that is used by the few. |
|
|
|
Well. Thought for sure it couldn't happen to me. but just had all of NXT stolen out of my account. yey..
Complete NIGHTMARE!   It's a nightmare I have often. I am terrified of keystroke loggers. The more widespread NXT becomes, the more keystroke loggers are going to be deployed to steal it. That's a fact. I am only running my main NXT account on an old XP laptop that I sanitized by doing a zero bit overwrite of the hard drive and reinstalling the OS from a Dell reinstall disk followed by the minimal add-ons like Java etc brought over on a CD drive of via online downloads. This laptop is used for NXT and that's it. I have a hidden and uncommented local handwritten copy of my random password generated offline on the laptop using Awesome Password Generator 1.4 from Google (you know, the guys that are secretly partnered with the NSA) and another handwritten copy in my bank vault safe deposit box. I still worry. I understand that the user space is unimaginably huge at something like (I think I remember seeing) 10^70 - but still. One lucky hit by somebody else miskeying their own password under the current scheme, and it's all over for you. That's a fact, mitigated only by just how much luck the thief would need to have. I've got a degree in math and I understand probability and it still doesn't do much to calm the reptilian fear in my brain. Is there a separate white paper PDF someplace that goes over in detail from scratch / first principles the entire NXT security scheme and just the security scheme? If not, there needs to be. We are going to have to point specifically to that information over and over and over as more and more people come to risk larger and larger sums that the security scheme is adequate - particularly when single colored coins are made that could be worth millions of regular NXT. So, bottom line, I think we need a security whitepaper PDF and a link to it. It's weird how even potential wealth can fry the brain I have the same issue. |
|
|
|
I finally published my blog post about Alias goldrush on 22nd December (how I spent 7 hours by registering 740 aliases  ): http://nxtcoin.blogspot.com/- there are some personal thoughts and also some statistics Nice read I had no idea there was such a big rush. I'm not in the top 10, but close to it. Also, I chose mostly 'long term' aliases, i.e., I don't have a metric shit ton of aliases like 'Viagra', etc. I grabbed more (hopefully) long-term, long-growth stuff. Frex -- people were probably tripping over themselves to grab Amazon and Facebook (rightfully so), yet they hemorrhage money. There were still hundreds of other Fortune 500 companies available. Anybody know who Nucor is? Probably not. I didn't. They're the largest recycler in North America. Generated half a billion in profits. Certainly not sexy, and will generate virtually 0 in web traffic. But there's value in companies like that, I think. Part of me feels shitty for reserving (squatting) so many aliases. The other part of me says 1) fuck it, I didn't start registering until 12/25 (Christmas night!)... how could valuable aliases still be sitting out there three days later? and 2) it felt like the only way for someone with little NXT to try to generate something. I have 6000 nxt. That won't forge anything. I could have 60,000 and it wouldn't forge anything. I'd love to be at about 250,000 NXT, which is impossible in my current financial situation. I think somewhere in my alias pool I can scrape that together. Other people grabbed porn and poker and prescription drugs, I grabbed the abbreviations of commodity exchanges. I'm a dork. If anyone is interested in this alias pooling concept (I am!!!), PM me! I think my combined accounts put me on place 3. I know the feeling about squatting, too. On the other hand, it was fun seeing loads of people moaning that NXT was too expensive while I sat there with my wallet of 2000 NXT inputting aliases to get some value out of my investment . I think I've got a nice list. If even one third of them does well, I will be a very happy person/bunny. I am interested in any plans concerning aliases, be it development of things (on the ideas side as I have no developer's skills whatsoever) or anything else. Hell, I'm up for anything that involves the use of words and communication. Exciting times! |
|
|
|
I finally published my blog post about Alias goldrush on 22nd December (how I spent 7 hours by registering 740 aliases ): http://nxtcoin.blogspot.com/- there are some personal thoughts and also some statistics Nice read I had no idea there was such a big rush. |
|
|
|
WTF?From http://nextcoin.criptomonedas.tel: NextCoin is the first BitCoin powered debit card With NextCoin you have very little chance of compromisation. Plus, at stores which accept NextCoin specifically, you even have a requirement of a PIN number. Although we can reset your PIN if you need it. It's potentially risk free!
Q: So how does it work?
A: When it is released you request a card from the purchase page and voila!
Q: Why do you use CoinBase?
A: We use CoinBase for wallet hosting so that you don't have to risk your computer being turned off, or your internet being disconnected, or even your power being suspended. Then in turn making your coins inaccessible. Basically taken from here: https://www.coinfunder.com/project/nextcoin |
|
|
|
I still don't understand how to mine this coin. Got absolutely nothing. Any help anywhere in these 600 pages?
Forging is basically not something that is really important in NXT as a way to think about the coin. It's more in the nature of a "perk" when the transactions are going well and you have a significant amount of NXT in your active account. You basically get a chance to "forge" a block in the chain and get all transactionfees associated with that block. However, the chances of forging (when the coin has decentralised a lot) will be very low for most people. I think of it as a nice extra, nót as a way to earn easy money by just having it rest. Hope that clears it up a bit. But why not? I read that top accounts with 50M coins forge appx 35 000 coins a day which means you need 4 years to make another 50M. So even if the price stays the same and number of transactions won't increase you're fine. Four years is a good timing. Open and operate a restaurant for example is much harder and risky. No way you can mine 35k NxT with 50M. It's a lot of less than that. Less than 1k for sure. If people made an average from the beginning of the chain, it may be skewed because I think there were some tryouts with fees in the beginning. I saw some accounts with HUGE fees at a time when NXT was just starting, I think. That would throw the calculation off balance. |
|
|
|
I still don't understand how to mine this coin. Got absolutely nothing. Any help anywhere in these 600 pages?
Forging is basically not something that is really important in NXT as a way to think about the coin. It's more in the nature of a "perk" when the transactions are going well and you have a significant amount of NXT in your active account. You basically get a chance to "forge" a block in the chain and get all transactionfees associated with that block. However, the chances of forging (when the coin has decentralised a lot) will be very low for most people.I think of it as a nice extra, nót as a way to earn easy money by just having it rest. Hope that clears it up a bit. If you think about it it's the opposite of that. The more distributed the Nxt the more coins are not forging because either of the 1 day hold after transfers or people holding coins that aren't bothering with forging. So the more distributed it is the less coins will be actively forging and the higher the odds of forging will be. True, it all depends on how people will use the client. If loads of people will just close it, then chances for active nodes will go up. |
|
|
|
I still don't understand how to mine this coin. Got absolutely nothing. Any help anywhere in these 600 pages?
Forging is basically not something that is really important in NXT as a way to think about the coin. It's more in the nature of a "perk" when the transactions are going well and you have a significant amount of NXT in your active account. You basically get a chance to "forge" a block in the chain and get all transactionfees associated with that block. However, the chances of forging (when the coin has decentralised a lot) will be very low for most people. I think of it as a nice extra, nót as a way to earn easy money by just having it rest. Hope that clears it up a bit. |
|
|
|
|
OK, I think I figured out why Tor didn't work for me.
It just didn't accept "localhost".
Can someone in the know confirm to me that if I go to 127.0.0.1/7874 in Tor, that basically this is what is needed to avoid the earlier mentioned DDos after TF has been implemented?
If so, I can put it separately in the wiki.
Thanks in advance.
|
|
|
|
New Exchange looks good made a deposit and sold some nxt:  Where is this new exchange? |
|
|
|
in TF, everyone knows who will generate next block. whats to keep an attacker (who can also easily find out who should generate the next block) from DDOSing the hell out of that next generator?
Nothing. As I said u should forge behind Tor if u can't handle so much traffic. In the future we'll have companies that will work as a shield between small forgers and big transactions / DDoSers. U'll be just signing blocks and pay some % of the fees to such shielding companies. I won't be surprised if CloudFlare will be one of the pioneers in such business. Can this be put in the wiki for casual users? Seems like important information for the average person who thinks he can casually forge without being subjected to an attack. Sure, put it in the wiki. Great things about wikis is anyone can edit them I was expecting a reaction like that. The problem is that when it comes to this, I may as well bé a casual user. I tried running the client behind Tor already, but couldn't get it to work. If someone could explain it, I would be perfectly willing to put it in the wiki, as I am an editor/translator already anyway |
|
|
|
|
Show Posts
