Mycelium is a brilliant wallet. Still hoping for the comeback of the pay-without-confirmation feature (as an advanced feature). That is the one feature that for me makes the difference compared to other payment methods, in terms of speed and convenience. Not that it's slow and inconvenient otherwise, it's not, but that's the cherry on the cake.
Hey, it is Christmas... and Andreas is more or less over his influenza. With a little luck he may get bored during the next week and just add it. Seriously, we will add 'autopay' in an improved version. Right now, however, all our cycles are spent on an exciting (and big) feature which may get published around the beginning of February... Sorry, but that's all I am allowed to say  |
|
|
|
Congratulations! I always like to see a bitcoin business going out of business without big chaos like being hacked or so. Guess it's really time to change my sig from Spinner to Mycelium  How are the other Mycelium ventures doing? Is the bitcoincard coming soon? All the backend systems for Bitcoincard have been completed for quite some time. The tricky part is the hardware. Making something that is 0.86 mm thick AND bendable while containing a processor, radio, battery, buttons, and display is really really hard. For every piece there is only one or two companies in the world who can do it. Anyway, since I am a software developer (and know nothing about hardware) I really cannot answer any questions in that regard, but you are welcome to send an email to info@mycelium.com. Since it is Christmas it may take some time before you get an answer |
|
|
|
|
What are you waiting for?
|
|
|
|
|
Shop at Target, become a target
|
|
|
|
What are the requirements to get the  "bitcoin expert" tag? |
|
|
|
BitcoinSpinner bids a fond farewell. BitcoinSpinner has now been officially replaced by Mycelium Bitcoin Wallet. Mycelium is far superior, made by the same developer, and has a huge active user base. Migrating to Mycelium is easy: 1. Install Mycelium on your device 2. Open BitcoinSpinner and go to Settings -> Advanced -> Export private key -> Copy to clipboard 3. Open Mycelium and go to Settings and enable Expert Mode 4. In Mycelium go to the Keys tab, click the + button and click Clipboard (If you don't want to place your private key on the clipboard you can take a picture with an offline camera and have Mycelium scan it directly from the camera display) The BitcoinSpinner server will run until December 30. The next BitcoinSpinner update will clearly tell you how to migrate (available in an hour or two). Q: Can I still run BitcoinSpinner after December 30? A: Yes. You can start BitcoinSpinner and migrate your private keys to another wallet. But, you cannot synchronize with the block chain or send transactions. Q: Does it hurt to shut down the BitcoinSpinner server after more than 2 years? A: Actually yes, in bitcoinland 2 years is quite a lot. However working full time on Mycelium for more than half a year has been so fun and rewarding, and knowing that I leave the old BitcoinSpinner users with a much better wallet really soothes the pain :-) Q: Is it fun to ask yourself questions when you know that it is unlikely that anyone reads this far? A: Hmm... |
|
|
|
We really hope for the beginning of February. If it is done by January 24'th I'll demo it myself in Miami (which I doubt, as we have the first internal prototype demo by January 15'th)
Wow, didn't know you'll be going all the way to Miami. Will be great to see you again (maybe you could do a private demo like you did in San Jose  I'll come if we are done by the 24'th, but it seems unlikely. I'd love to give an in person demo :-) |
|
|
|
Hey Rassah, sorry for the late reply... half of our development team is down with the flu :-(
Don't be getting any computer viruses into our android wallets  Use gloves while you type. Right now we are working hard on a mind-blowing (revenue generating) feature which our investor does not want us to reveal until it is ready for production, which I expect to be around the beginning of february.
ETA for this? Would love to show it off at the next few conferences I'm going to (Miami, and maybe Texas) We really hope for the beginning of February. If it is done by January 24'th I'll demo it myself in Miami (which I doubt, as we have the first internal prototype demo by January 15'th) |
|
|
|
Any progress, or at least plans, for BIP32 yet?
Had an idea. Since Mycelium let's you store only the public key, and receive to the public key, it makes a good alternative to a Bitcoin point-of-sale system. Only thing missing, or that would at least be helpful, is basic calculator functions in the receive amount section.
Finally, bit of wishful thinking, I would love to be able to add notes to my transactions, so I can remember what it was that I paid that 0.02476436 bitcoin for. This would also be useful if there was a comment box in the Receive section, so merchants and bartenders/waiters can enter a note of what was being paid for in a transaction. Like BitPay allows you to enter a receipt note along with amount. This could just be stored on the phone in a file somewhere. Heck, store it as a comma delimited text file with transaction IDs, notes, and amounts, and you have a way to export "bank statements."
Hey Rassah, sorry for the late reply... half of our development team is down with the flu :-( We do have BIP32 plans, but it is going to take quite some time to get it right. Implementing BIP32 effectively on a mobile device that doesn't download the block chain is by no means easy. Deriving the private keys from a seed is the easy part, tracking an in principle unlimited number of private keys while limiting bandwidth and server side resources is not. Regarding using Mycelium as a POS device you are absolutely right. We have several reports of stores doing this already. The ability to request payment in 164 currencies is a great help. Several things would make it even better: 1. (as you suggest) adding merchant messages. The recipient should be able to add a message to the payment request (in the QR code), which gets persisted either on the phone, or maybe even server-side. 2. Add/modify my own messages on my transactions (if stored server-side they are preserved when you restore on another device) 3. Setting a discount percentage for payments in BTC (or markup for that matter) on top of the exchange rate. ... There is so much to do, and so little time :-) Right now we are working hard on a mind-blowing (revenue generating) feature which our investor does not want us to reveal until it is ready for production, which I expect to be around the beginning of february. |
|
|
|
In case you didn't notice, Mycelium Bitcoin Wallet is now available in Nederlands. We are very grateful for Martijn Wismeijer from the Bitcoin community who put a lot of time and effort into translating it. Please help us spread the word in your country. |
|
|
|
Sorry for reviving this old thread, but can someone confirm whether non-canonical signatures are now non-standard or even invalid.
Signatures which are non-canonical in the manners mentioned in this thread are non-standard now. There are several more restrictions which must be imposed before the malleability attacks will be gone, however. ... such as ambiguous chunk encoding. Do you remember which version started enforcing those rules? |
|
|
|
Hello everyone,
as some of you may know, Bitcoin uses DER-encoded signatures. However, at least the reference client supports any signature encoded in the less strictly defined BER encoding (and even allows some deviations from that). There are several inconveniences associated with allowing multiple encodings, and even some very weak attacks (there's no risk of losing money, in any case). To prevent this, we'd like to at first make non-canonical signatures non-standard, and maybe at a (much) later time, propose a BIP to make them invalid entirely.
...
Sorry for reviving this old thread, but can someone confirm whether non-canonical signatures are now non-standard or even invalid. |
|
|
|
it looks like you are looking for the Mycelium Wallet with watch-only addresses and Bip38 cold storage spending support.
Ah very cool, mind explaining briefly how this works and how it might be different from the above idea? 1. Install Mycelium on some Android device and start it 2. Click the options button and select Settings and enable Expert Mode -> hit back button 3. Go to Keys tab and click the + button and scan the bitcoin address of your BIP38 paper backup (you now have a read-only address) 4. (optional) In the Keys tab select and delete the key that was automatically generated when the wallet was first started 5. swipe to the balance tab to see the balance of your BIP38 key Whenever you want to spend: 1. Click the options button and select Cold Storage 2. Scan the BIP38 private key 3. Enter password and go through the spending wizard |
|
|
|
...
By the way, I think Mycelium has already gotten better and better. I really like it.
I fully agree. Mycelium is getting better every time, the developers really THINK and make CONCEPTS and REALIZE them. Awesome! And a possibility to store keys in a 100% offline fashion (on a 100% offline smartphone) would be great - I proposed this here some time ago: " https://bitcointalk.org/index.php?topic=210261.0", which is exactly what you are suggesting here, I think. I think and hope that the Mycelium app would be eligible for this in future versions. It has all the key management and backup features already built-in. What would be needed is to run Mycelium, optionally, in an "offline mode" (or make a new app that inherits Mycelium's today's key management functions) that has extra features like offline transaction signing. Communication (i.e. transfer of the (un)signed transaction strings) between the offline and online device should be done via QR codes (or animated QR codes for transfer of longer strings). The offline device should also have built-in functionality of supervising offline status etc. and show enough nag screens etc. to "force" the user to operate his/her offline phone in a paranoidly secure way, and it should make sure that the device is (and was) offline all the time..., and e.g. should not start up at all if a SIM card is inserted or WiFi is enabled... My vision is that, in some not so distant future, everyone (not only the tech-savvy) can use a really really secure solution for OFFLINE wallet handling with apps having an easy to understand and self-explanatory GUI that guides the user all the way and avoids that (s)he makes any mistakes. An Android phone is the optimum platform for obvious reasons: Cheaper then a PC or Netbook, smaller (does not take space), and many outdated phones are anyway idling around today although they would be perfectly suitable for use as offline wallets. So the hurdle for using this is much lower than for somebody who first has to buy an EeePC or Raspberry PI or Trezor device. Michael_S, I am fully with you. I have been thinking about how to do a totally offline app for a long time.. So many ideas, so little time :-) The problem with using QR codes or even animated QR codes doesn't really work. To be 100% certain that you are not signing something wrong you need to transfer not only the unspent outputs to sign, but all the "supporting" transactions. By that I mean the entire transaction that every unspent output is part of. This could easily be 100kb of data. If you use Mycelium as it is, on a dedicated device with an open source OS with nothing else installed except a firewall that blocks anything but Mycelium, no SIM, only wifi. On top of that, only use cold-storage spending and keep the device in a safe along with your paper wallets... then I'd say you are pretty secure. Plus it is affordable, easy to set up, and easy to use. |
|
|
|
thanks for the reminder to fix landscape mode. this needs some love.
While you are at it—… Users can increase their security by using a separate phone with a minimized set of apps and minimized communications (no SIM card, Wi-Fi mostly off, etc.). Often they will use an old phone for this purpose that would otherwise gather dust. If this is so, please try to make and keep Mycelium usable on such phones. The most obvious problem areas are: - Weak hardware
- Older versions of Android
- Small screens
I am worrying particularly about those small screens. I have not actually tested Mycelium under such conditions and have no clue whether it already fulfills these wishes. If so, it may be a good idea to keep it that way during future development. Of course, another interesting direction is to use a separate phone with very minimal communications, maybe only through QC codes, only for transaction signing. That might fulfill quite high security demands. I think this has been discussed a long time ago already. I'm only trying to refresh memories. By the way, I think Mycelium has already gotten better and better. I really like it. Thanks. I am always testing Mycelium on my old 2.2 devices. Someone (can't remember who) reported that it worked nicely on a brand new cheap low-res 40$ phone (can't remember the brand)... can't remember much these days it seems ;-) Please have in mind that the device should have at least 24 MB memory to do BIP38 and encrypted PDF export/import, which is mandated by the scrypt parameters chosen. Those cheap phones are ideal to use as a dedicated device, only running one app with the sole purpose of sending coins with cold storage spending. Personally I now use a Samsung GT-S5300, prior to that a Samsung GT-I5700 with cyanogen mod and no SIM. |
|
|
|
BIP38 works perfectly on my DROID BIONIC (Android 4.1.2) taking less than a minute.
Works as well on an older HTC INCREDIBLE (Android 2.3.4) taking about 3 minutes.
The BIP38 is compatible with BitAddress generated BIP38 keys. Does Mycelium generate BIP38 protected exports?
Thanks again for a great wallet.
Thanks. Mycelium has been tested with BIP38 keys generated by bitaddress.org, and also verifies the BIP38 test vectors in our unit tests. Mycelium does not export using BIP38. When doing encrypted PDF export we use another format which resembles BIP38 in several ways (which is described in detail on the last page of every exported document, please read). The way BIP38 works does not allow you to export more than one key without repeating the intensive key stretching for every key being exported. This is because the Bitcoin address is used as the salt for the key stretching. (The format we use uses has a separate salt field included in the QR-code). |
|
|
|
Awesome awesome work Mycelium is basically perfect now!
I'd just like to ask if you can detail the measures Mycelium takes to protect from bad applications and forensic investigation reading the private keys stored on the phone?
Private keys are in app private storage. Another app can only get to them if the device is rooted. While exporting the private key as a QR code shown on the display the app prevents other apps from taking a screenshot (Not supported for Gingerbread, also a few devices may not honor this). In the end the private keys are stored in flash memory of your device. As far as I know flash storage drivers attempt to write key material in new places whenever a file is overwritten to prevent wearing out the cells. If you open up an android device and get to the flash chips you should be able to retrieve the private keys... maybe even if you have deleted them. Cold storage spending does not store your keys on flash, so this is suggested for larger amounts and enhanced security. |
|
|
|
Mycelium Bitcoin Wallet is now available in Russian. We (the developers) are grateful for the volunteers from the Bitcoin community who put a lot of time and effort into translating it. Please help us spread the word in Russian speaking countries.
|
|
|
|
Mycelium Bitcoin Wallet is now available in Portuguese. We (the developers) are grateful for the volunteers from the Bitcoin community who put a lot of time and effort into translating it. Please help us spread the word in Portuguese speaking countries.
|
|
|
|
|
Show Posts
