Nooo!!! Please don't! The privacy implications of having control not to mix keys when sending is quite valuable. Sure, getting the change back to the same key is a privacy drawback but please think up something that solves both issues.
please bring forth your suggestions on how to solve this. regarding the new akp attack: obviously it is neccessary to patch it. BUT the way i see it currently the following can happen: user downloads an apk. any MITM could now alter the apk. with "regular" apps this is also not a problem, except if they use other exploits. it is a problem if the user downloads a "system" apk and installs it. for example an update to HTC sense. if an attacker now manages to modify the apk before it is installed - for example via malware on the server, a router or an intermediary PC - he can execute whatever code he likes with the access privileges of the original app. i still don't know why play store is unaffected - it is kind of hard to MITM play store downloads and additionally the play store installer might do some more checksum checking. |
|
|
|
just use the mycelium bitcoin wallet: it has support to instantly import private keys. they are stored on your device only and uses our backend servers to quickly obtain balance + transactions. |
|
|
|
I've been using the Mycelium Wallet now, and I'm loving it. There are a few things that I noticed. First of all, the program seems to label itself as "Barcode Scanner". Secondly, I'd really like the possibility to sign messages with this wallet.
thanks for bringing this to my attention. this should definitely not happen, and the reason is a name collision between the bundled barcode scanner. |
|
|
|
The day I decided that American patents (in IT at least) were ridiculous was when RLE was patented (back in the 80's).
in europe most software-only ideas are not patentable. the trouble unfortunately begins when you interact with the physical world, like with qr codes it suddenly becomes patentable. I think the whole patent system is broken and just shovels money to lawyers and hinders innovation. it would be great if we had some consensus on that in the bitcoin world. since the field is relatively new i forsee new a lot of patents on relatively obvious stuff (like this) being patented. maybe we should gather together and build a non-agression alliance with enough power to eliminate this threat. |
|
|
|
Die aktuelle Folge 32 unseres Bitcoin Updates wurde soeben online gestellt: http://bitcoinupdate.com/index.php?id=22Die Themen diesmal: - Kaffeesatzlesen bei der Preisentwicklung - Bitcoin Kursgewinne nach einem Jahr steuerfrei - Mtgox beantragt MSB Lizenz - Micropayment channels mit BitcoinJ - Multibit wird Standardclient - Bitcoin-Qt 0.8.3 veröffentlicht - Citibank stellt wire transfers zu Mt. Gox ein - Flattr arbeitet an Bitcoin Integration |
|
|
|
Well done, but I'm just "panelist"?!
im am very sorry Mr Jansen - i did not include your name in the first summary . I have to say you did a very good job at moderating the panel by not pushing yourself in the foreground. |
|
|
|
|
some take-away points as they were parsed by me:
Patrick Murck (PM) Carol R. Van Cleef (CRVC), Will Voorhees (WV), J. Bradley Jansen (JBJ) - Freebanking.org
JBJ: what is bitcoin?
PM: we don't know what asset class bitcoin actually is. def not legal tender, thinks its simply a new thing.
CRVC: please hire me i'm smart. its a value transfer mechanism and easier to work with than a security.
WV:Bitcoin scary because LE does not know how it works. money laundering, terrorist financing. government is used to simply harvesting full financial info.
JBJ: bank secrecy act has not stopped drugs, lets abolish it.
CRVC: BSA just documents financial crimes, should not stop it.
PM: we need safe harbor for banking innovators with open guidelines everyone could follow to have more innovation.
WV: good thing that fincen puts a burden on bitcoin exchanges.
PM: no one is in charge of bitcoin, bitcoin is not anonymous. irreversible TX - not required by bitcoin we will have multisig support. that makes it more friendly for endusers.
CRVC: whatsup with that C&D in CA?
PM: US is too complicated with their 50 different regulations. State of California is clueless and we will school them.
CRVC: Banks should simply take on the exchange function and everything will be dandy.
WV: Bitocoin will need to change to adopt to US law and he thinks the Bitcoin Foundation is going to introduce it.
PM:regarding the fincen guidance: fincen ruling is backwards with mining. Needs proper de minimis rules.
CRVC: makes statements which make it look like she does not know what mining is.
PM: foundation is working on something to reach out to regulators: we will reach out to LE that users can report suspicious stuff to authorities. invites FBI to build a FBI wallet so they aquire more information. Bitcoiners can either put their head in the sand or accept the coming changes through regulation. does not matter if you are in the US or not, apparently US regulations apply worldwide.
CRVC: Portion of the Bitcoin community will have to retain information who transacts with whom, just like banks need to track cash flows.
Q:if regulation becomes too cumbersome, will bitcoin be a closed system.
PM: we don't know. i just earn and spend them
WV: transfer or exchange fincen does not care, still money transmission. coffe shop owner who takes bitcoin == money transmitter.
CRVC: opposite is true. but IRS still wants taxes on those tx.
Q: how does my 82 year old mother benefit from bitcoin?
PM:bitcoin is not ready for mass adoption yet.
Q:is bitcoin asking for criminals?
PM: No. blockchain.
CRVC: e-gold was not criminal and had full records but complaint from LE was this is not enough and they wanted more.
PM: LE will have to do some more work by themselves. invites LE to tell him what they exactly need.
closing remarks:
WV: change regulation, update them. new payments system will have to adopt.
CRVC: digs Bitcoin. transformational.
PM:bitcoin too small for serious money laundering.
|
|
|
|
|
how exactly are you able to spend money sent to this address?
|
|
|
|
|
your concerns about wallet management are heard. we will find a simple solution for that.
|
|
|
|
it is both doomed and not doomed at the same time. |
|
|
|
I just sent 2mɃ to the address visible in your market screenshot.
good news! i managed to recover the backup. no worries, all funds sent there are save  |
|
|
|
some time ago i read iran is blocking all SSL traffic and later it replaced it with their own root cert which means they are intercepting all traffic. I don't know if it is currently also the case. if so, you will need to find a creative tunneling solution for your android to be able to use the Wallet. |
|
|
|
|
The issues you are adressing are very valuable. I will put those into our internal issue tracker.
Importing vanity addresses is definitely possible and we should already be compatible with almost all paper wallets.
Regarding the backend servers: Currently it is not really feasable to set up such a server by yourself. The servers are constantly evolving and we are using them not only for the wallet, but also for other upcoming projects. It connects to many regular nodes in the Bitcoin P2P network and provides convinience methods for this app+ others as well. In this first release we use hardcoded dns names, and we check for a specific SSL fingerprint (sorry, Iran..) The Mycelium Bitcoin Wallet connects exclusively to these servers, chosing them randomly. (this is all documented in the source) If you want to migrate from our app somewhere else i am sure you can import the key somehow.
If you use it on the conference, just make sure the internet is working. This is the reason for half of the bitcoin user interaction failures. We will even address this in the future, but for now internet access is required.
also, can you elaborate on the interaction of qr code/label/amount
|
|
|
|
|
uh-oh. i am not sure if i kept that backup in the dozends of tests i ran. those coins might be destroyed now. i will definitely update the screenshots with valid addresses, who knows
|
|
|
|
Please consider packaging it for BlackBerry10 too.
the plan is to have the application in beta for some time and then incrementally improving user experience. we certainly consider creating a build for Blackberry 10, but we don't have a device for testing. would you like to help us running the tests on your device? |
|
|
|
|
Thanks Jan for the excellent work on this wallet. We hope to improve it further and need your feedback.
this is a "stealth" open beta release. we will announce it more broadly once we are confident that no severe bugs remain.
|
|
|
|
Why should he deal with British law? He could just as well be a provider in any EU country.
well, UK is part of the EU. if you have a license in one member state, you can operate in all of them. |
|
|
|
|
"one firm here in new york" asking for information: was this bitinstant?
and can someone explain this expression: "they are not all in the up and up"
|
|
|
|
|
Show Posts
