What does your implementation of words.getDiceWd look like?

Why aren't you using SecureRandom random = new SecureRandom()?

Simpler version from web

char[] allowedCharacters = {'a','b','c','1','2','3','4'};

SecureRandom random = new SecureRandom();
StringBuffer password = new StringBuffer();

for(int i = 0; i < PASSWORD_LENGTH; i++) {
    password.append(allowedCharacters[ random.nextInt(allowedCharacters.length) ]);
}

Java.util.Random is not cryptographically secure.

Change it to SecureRandom or people using Offspring to create Nxt accounts would be vulnerable

http://stackoverflow.com/questions/11051205/difference-between-java-util-random-and-java-security-securerandom

Not sure about the Electrum passphrase generator. Offspring does have a passphrase generator since day one. This is the algorithm that generates that passphrase.

Anyone likes my idea a Electrum-like passphrase generator to be included in Nxt clients? Today there are two new stories of newbies who had their Nxt stolen because they used a weak password

https://nextcoin.org/index.php/topic,4316.0.html

import org.apache.commons.lang3.RandomStringUtils;

private String generatePassphrase() {
    // No space, backslash, newline, tab
    String symbols = "!\"$%^&*()-_=+[{]};:'@#~|,<.>/?"; //$NON-NLS-1$
    String alphaNum = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890"; //$NON-NLS-1$
    int low = 70;
    int high = 90;
    Random random = new Random();
    int count = random.nextInt(high - low) + low;
    return RandomStringUtils.random(count, symbols + alphaNum);
}

Who will communicate with BCNext in April after CFB departs?

Uncertainty about the core dev team isn't instilling much confidence in investors and current holders. Investors will stay away until this confusion and uncertainty disappears.

Friends of mine have no idea which client to download so are keeping their NXT on exchanges. They won't do anything until there is a one click install that works. They ask me which one is the 'main' website. All they want is to Send/Receive and not lose any NXT. No messing around with batch files, firewall settings, testnet and having to update twice a week. They don't even want to know about forging.

I'm sure it wouldn't be difficult to promote one simple client that works and isn't going to freak out newbies. Can someone design a simple, safe, client that just sends and receives? I can assure you that would make so many people happy. Most newcomers aren't going to use all the other features they don't even understand, at least not yet. Forging is not an issue for them and don't care about that because they own 5k to 10k. None of their other coin wallets make any money and they don't expect NXT to either. They just want to send and receive and know their wallet is safe (secure password of course) It's that simple.

Does this make sense to anyone and does anyone have any ideas about how we arrive at one website and one simple client.