Bitcoin Forum
May 24, 2024, 07:34:57 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 [22] 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 »
421  Bitcoin / Bitcoin Discussion / Re: FirstBits.com - remember and share Bitcoin addresses on: July 19, 2013, 03:35:05 PM
Thanks.

Regarding Abe read here: https://bitcointalk.org/index.php?topic=16217.msg960077#msg960077
and here: https://bitcointalk.org/index.php?topic=16217.msg1044812#msg1044812
Just a few posts upstream :-)
422  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 19, 2013, 11:27:30 AM
I simply have to share this awesome demonstration of cold storage spending  Grin
http://www.youtube.com/watch?v=1pDSzOiFgIk

423  Bitcoin / Bitcoin Discussion / Re: FirstBits.com - remember and share Bitcoin addresses on: July 19, 2013, 08:24:44 AM
Alright, I quickly put firstbits.net up, but right now it just reads from blockchain.info's API.  I need to rewrite the engine for calculating them, because the original one was simply too slow.

I may be interested in adding firstbits functionality to the Mycelium backend system. To do this I need to know exactly what the rules for name resolution are. It seems that blockchain.info does not do it the same way that Abe does. Without a firm rule-set the purpose of firstbits is defeated.

SgtSpike, can you share the precise definition of a firstbits address?
424  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 19, 2013, 08:15:30 AM
Cold storage spending and swiping: Basically scan key & spend, your key never hits flash storage

This is quite cool! It would it possible to use paper wallets for spending in practice, and not just use-once.

I would like to reiterate my request for some manual address entry possibility (for use when you absolutely have to and no QR code is available).
Our plan is to allow address entry using shortners like btc.to and firstbits in addition to full length addresses. We are however not ready for this yet. If anyone knows an open-source firstbits implementation I'd be interested in a link. In the meantime, wouldn't the clipboard do the trick for you in those rare cases where you need manual entry?
You might want to consider spending to Namecoin IDs (you can save a Bitcoin address in a Namecoin ID).
Setting up a namecoin system for this seems like a lot of work.
Does anyone other than a handfull of geeks use name coin for associating a name with a bitcoin address?  I never heard of it.
425  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 19, 2013, 08:12:27 AM
Cold storage spending and swiping: Basically scan key & spend, your key never hits flash storage

This is quite cool! It would it possible to use paper wallets for spending in practice, and not just use-once.

I would like to reiterate my request for some manual address entry possibility (for use when you absolutely have to and no QR code is available).
Our plan is to allow address entry using shortners like btc.to and firstbits in addition to full length addresses. We are however not ready for this yet. If anyone knows an open-source firstbits implementation I'd be interested in a link. In the meantime, wouldn't the clipboard do the trick for you in those rare cases where you need manual entry?

Dont you already have the means to implement firstbits in your server?

bitcoin-abe has firstbits functionality. however it seems a bit overkill for your case to setup a bitcoin-abe instance just for that.

couldn't you use blockchain.info api or some publicly accessible bitcoin-abe instance for firstbits lookup?
My intention is absolutely to add it to the server. I am looking for a way to save development bandwidth by getting inspiration on how to do this right in the first stab.

Seems that firstbits.com has been discontinued, and firstbits.net is forwarding to blockchain.info. Abe seems not to follow the same rules as blockchain.info. I'll start a discussion with SgtSpike & piuk on exactly which rules to use for firstbits.
426  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 19, 2013, 06:14:01 AM
Cold storage spending and swiping: Basically scan key & spend, your key never hits flash storage

This is quite cool! It would it possible to use paper wallets for spending in practice, and not just use-once.

I would like to reiterate my request for some manual address entry possibility (for use when you absolutely have to and no QR code is available).
Our plan is to allow address entry using shortners like btc.to and firstbits in addition to full length addresses. We are however not ready for this yet. If anyone knows an open-source firstbits implementation I'd be interested in a link. In the meantime, wouldn't the clipboard do the trick for you in those rare cases where you need manual entry?
427  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 19, 2013, 06:01:26 AM
guys, your development speed is outpacing my hopes Wink

one question about cold storage spend: where does the change go?
Thanks :-)
Two full time developers, a dedicated tester, and great feedback makes a huge difference.

Any change goes back to the paper wallet.

When entering the amount to pay you now have a "Max" button, which will calculate the maximum amount you can send from the key while paying the minimum network propagation fee of 0.0001 btc pr 1000 bytes of transaction size (iterative algorithm that eventually reaches a fix-point or fails, quite tiresome to do in your head if you have many small outputs). Anyway, hitting the Max button means you clean out the key, aka swiping.
428  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 18, 2013, 07:58:21 PM
Upcoming release 0.6.0 will feature some pretty interesting features:
- Switch between aggregated/segregated view: Switch between managing the combined balance of all your keys (aggregated) and key control (segregated))
- Cold storage spending and swiping: Basically scan key & spend, your key never hits flash storage
- Autopay amount: Scan to pay. When scanning a bitcoin URI, any amount below the Autopay threshold is spent without any dialogs (if a PIN is configured you still need to enter a the PIN)
- Keys & Addresses view now displays the balance of your individual keys

0.6.0 is available for testing now. To get access you just need to join the g+ group at
https://plus.google.com/communities/102264813364583686576

You can then activate beta builds at
https://play.google.com/apps/testing/com.mycelium.wallet
429  Bitcoin / Bitcoin Discussion / Re: Do I really need a Bitcoin wallet? on: July 18, 2013, 07:54:29 AM
1) Generate a key-pair
2) Put the private key and bitcoin address on paper (keep paper, delete the rest)
3) Mine to the address

Finally monitor your balance: http://blockchain.info/address/<insert bitcoin address>

Then you don't need a wallet until you want to spend.

There are several ways to do 1 & 2 in a secure way, here is one:
http://www.youtube.com/watch?v=milxhe-RoCI
430  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 18, 2013, 07:29:51 AM
I keep seeing ideas to increase security gradually, like by keeping secrets in memory only for a short time, displaying them on screen for the user to write down manually, etc.

I don't understand the purpose. All such measures do not ultimately create security. I would call them pseudo-security. If the phone is compromised, they are all exercises in futility, because for a Trojan that has taken over the phone and is attacking the wallet it does not matter much where and for how short a key is present—it will grab the key anyway.

My proposal is to forget about such measures and concentrate only on true, unbreakable security. The user has to be told clearly where the attack vectors are and what exactly he has to do to keep the wallet secure.

One possible way to create security may be to use a separate, sealed device for the cryptographic processes and provide only one communications channel to and from that separate device that is so narrow and observable that it cannot be compromised without that being noticed. By sealed, I mean either dedicated hardware or hardware devoid of any uncontrollable communications channels, like an Android phone without SIM card, without WiFi, without third-party apps, without installing apps, etc.

Make it clear to the user that they should use a full-function wallet on a single, normally used phone only for moderate amounts and tell them clearly that, if the phone is compromised, their bitcoins can get stolen, instead of heaping ineffective measures on the app that create a false sense of security in the unsuspecting user.

You are right in many regards. Personally I use a dedicated phone for handling my stash.

However, Exporting your private key from your phone to a piece of paper securely is not trivial.
You can do it like this if you have a printer that reads SD cards, and if you trust the printer:
http://www.youtube.com/watch?v=milxhe-RoCI

But not everyone has one of those, and will be exporting it through a computer, or using a printer that has "interesting" features. Using a device chosen passphrase makes sense in this scenario. You only have to trust your phone and yourself.
431  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 18, 2013, 06:48:51 AM
approved. I like that list Smiley
the sending address window could have one more option though. Consider I want to pay 5BTC and have 5 addresses with 1.2BTC each. I want to be able to select the 5 addresses but return the new BTC to a new address, leaving me with now 5 empty (sweeped, not to be used again) addresses and a new spending address that I might or might not receive funds to. This way Mycelium would at barely any extra costs (for the client) have a comparable anonymity as bitcoinqt.
The model we use is not feasible for thousands of addresses. So unlike bitcoinqt we cannot generate additional addresses for every transaction sent. Bitcoinqt's model has proven not to be that anonymous after all, but I agree that if being anonymous is important then you should do something else.
What you propose is to sweep (and I guess delete) depleted keys. This is quite dangerous as someone may send you funds to those keys.
432  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 18, 2013, 06:32:59 AM
Thanks for the feedback!

Proposals for MYCELIUM feature improvements (in no particular order):

(feature (3) is particularly important I think to allow having full control of your keys when spending...was mentioned before in this thread)

(1)- Settings: Allow specifying a PASSPHRASE that will be used when exporting a priv key, which will then be AES256 encrypted, preferably using an algo that makes the exported encrypted key also decodable by a standard linux library function like ssss (and say in docu which one) or other open source tools.
Of course importing such passphrase protected keys shall be possible, too.
Note that the passphrase is for protecting the exported keys, not to be confused with the PIN used to protect the app (and the priv keys) on this phone.

I have been thinking about something along those lines also. My objections to the suggested approach:
The passphrase has to be quite long to have any real effect
Most people are notoriously bad at choosing secure passphrases
Typing passphrases on an android device is a real pain
I am not fond of keeping the passphrase on the phone.

Instead I would suggest this:
You can export in plain-text (as now) or in encrypted form. Whenever you do an encrypted export the device chooses a strong random passphrase, encrypts the key and, exports it to JPG. The passphrase is displayed on-screen. The user writes down the passphrase, optionally on the same printout, which has some boxes for this purpose.

Also discussed here: https://bitcointalk.org/index.php?topic=140103.msg2592804#msg2592804

(2)- Include a possibility to sweep in keys (e.g. from a btc voucher) and transfer the balance of the sweeped-in key to one of the own keys, then move the sweeped-in key to list of sweeped-in keys for your records. The default label for this sweeped-in key is the date&time.

You can do this right now by importing/spending/deleting, but it is a bit cumbersome. I am working on what I call Cold Storage Spending, which gives you a nice workflow that allows you to do both partial and full spending of a scanned key which is only kept in memory for a short time. It may make it into the next release.

(3)- Support three ways how to spend (send) bitcoins:
EITHER send normal (input keys and change addresses will be selected automatically by the app),
OR send by scanning priv key from paper wallet w/o saving that priv key to flash memory (change addr = that key itself),
OR send from user-specified key(s): open list of the keys with checkboxes on the left and radiobuttons on the right: So user has to check all keys to be used as input for the following transaction, at least one. At the top of screen show the nb of currently checked (=selected) keys and the cumulated balance of all so-checked addresses=max amount to be spent. On the right-hand side the user must select the change address by the radio buttons (exactly one address, hence radio-buttons instead of check boxes).

In the next release we will have a setting called Aggregated View. When enabled (enabled by default) your balance/spending/history will be on the combination of all your keys and addresses. When disabled (segregated view) you will work on one key at a time. Combined with Cold Storage Spending you will almost have everything you describe above, except for the key-cherry-picking feature, which IMO is a little over the top for a smartphone wallet.

(4)- Settings: Allow to specify the default tx fee (and also allow to set/modify the tx fee in the actual spend dialog)
Right now the tx base fee is 0.0001 pr 1000 bytes of transaction size. This is the minimum for nodes to relay your transaction. If you go below that you risk that your transaction gets rejected by the network (there are enough threads in this forum complaining about stuck transactions. However, it may make sense to manually configure a higher base fee.
I have some ideas for how to automatically calculate a fee based on the user's preference (confirmation speed: fast/normal/economic): https://bitcointalk.org/index.php?topic=166302.msg1817408#msg1817408

(5)- Settings: Allow to specify language, like in bitcoin spinner. Many users prefer english instead of a bad translation, sometimes also because translation strings are longer and lead to malformated screen output because less thoroughly tested (so happened with bitcoinSpinner for me), so always good to be able to select the language of the user interface.

Agree.
We haven't really started on translation yet. Andreas is right now maintaining the german translation. We will have to set up system for managing translations. I think MultiBit uses some kind of web-thing where you can see how far various translations are  and contribute.

(6)- Separate the addressbooks:
(a) own addresses (with or w/o priv keys, like in mycelium v.0.56)
(b) addresses where I am sending funds to, i.e. my normal "list of contacts/friends/business partners/..."
(c) watch addresses (like (b), but showing the addresses' balances from the blockchain. These addresses can be grouped hierarchically in "watch-only wallets" and can be input in bulks by importing txt files containing a list of addresses separated by comma or newline.
(d) The list of sweeped-in keys (see item (2) above) can be considered a 4th kind of "addressbook".

Splitting into (a) and (b) can be done by having two tabs (Mine/Others). This could be combined with the option to view the balance or transaction history of the selected address. © Sounds too advanced for a smartphone wallet IMO.

(7)- Possibility to export (and of course also to import) the addressbooks to a txt file that is human-readable/editable.

Agree.

(Cool- Settings: Standard mode or Expert mode. Standard mode hides many options like "multiple keys" or "watch-only keys" or "addressbook (c)/(d)" or sweep-in key feature (2) from user interface. Only the expert mode opens up the full features. Advantage: App is easy to use for beginners/"normal" users. But for users wishing to use all features and to be able to manage all keys and have full control, it is possile with expert mode. The default, after installing the app, is the standard mode.

Agree. You will see this starting in next version with the aggregated/segregated view.

(9) Support of protocol for Electrum Server
Electrum servers will not support some of the advanced (read revenue-generating) projects we have in mind.
433  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 16, 2013, 06:15:16 AM
Jan, at Bitcoin 2013, you talked about the ability to sweep in amounts you kept in a QR code in your physical wallet and change directly back to the physical wallet... when do you think this feature will be more automated in mycelium?
Hi Tuxavant. The functionality you saw at the conference is still there, but it could be made even slicker.
Current workflow:
1. Go into Keys & Addresses and click the + button
2. Scan private key QR code from paper
3. Click and open key, which takes you to the Balance view
4. Click Send and do your spending in the send workflow
5. Go to Keys & Addresses and click the key
6. Click Delete Key, confirm, confirm

The key is no longer on your device.

Better Workflow:
1. Select Cold Storage Spending from the options menu (maybe under Advanced)
2. Scan QR code
3. Do your spending in the send workflow

The key is no longer on your device.

When? I am right now working on a hefty refactoring which changes the app's data model (in app database holding unspent outputs). This paves the way for aggregated key view, offline transaction generation (if we want that), and bandwidth reduction. Cold Storage Spending is right after that
 
Sweeping addresses has some slightly distinct use. Imagine you receive a bit-bill and want to make sure, nobody else receives it. You would scan it, but never actively use the address after receiving what was in it this moment. An advanced option would be, to also in the future sweep what is received with it, instantly, but that would surely not be a free service.
Sweeping would be a natural add-on to Cold Storage Spending.
434  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 15, 2013, 06:30:30 AM
i think it would make sense to not allow deletion of private keys when it is sure that it has never been exported (freshly generated, never exported in any way)
So is there such thing in Bitcoin Spinner?
Andreas is pondering about the Mycelium Bitcoin Wallet functionality. In BitcoinSpinner you only manage one key.
435  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 15, 2013, 06:28:16 AM
Any way I can recover my Spinner wallet if I deleted app data earlier?
You can always restore your backup (Click options button -> Settings -> Restore wallet) and scan the QR-code of your backup.
You did make a backup right?
436  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 07, 2013, 03:21:39 PM
I guess mycelium wallet is a commercial project?
Yes. However, the wallet is free and the sources available. We are also working on the Mycelium Payment System, which allows physical shops to:
 - Sell products/services for BTC
 - Sell BTC back to customers
 - Buy BTC from customers
All in all things that let your local Bitcoin economy flourish.
The Mycelium Payment System was demoed at the San Jose conference but is not fully developed yet.
We develop the wallet because we believe that better mobile wallets are needed, and we are going to integrate the wallet with our payment system (locate shops, view invoices in transaction history, etc), while letting it be the greatest mobile Bitcoin wallet on the planet.

The Mycelium Bitcoin Wallet and Mycelium Payment System are not ready for primetime yet, but we are constantly getting closer.
If you are looking for candidates for Commercial Product of the Month I think it would be better if we get nominated in one or two months.
437  Economy / Service Discussion / Re: If you used Brainwallet.org - MUST READ! - Security Breach! on: July 06, 2013, 08:11:14 PM
The block chain is a public vault. Anyone can use it. Access to specific funds is determined by the key used. The security of your money depends on your ability to protect your key. Creating a unique key from the start is an important step in protecting your key.

When you use a key that someone else already has...



...they can access any funds attached to that key.

The most important thing new users should learn before using Bitcoin is how to protect their key.

+1
Keep your private keys private
438  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 05, 2013, 03:51:08 PM
I'm eagerly waiting for the bitcoincard to come real and count me in to buy one if the conditions are ok (security without third party risk but with backup?, price below $40, usability, etc). To big surprise a friend told me it already is!?!? …

Be very careful. Fraudsters could offer such a card on a shiny web page, knowing full well how much many people are longing for one.
Andreas and I are part of the team developing bitcoincard. Prototype hw was shown at the San Jose conference, but there are no devices in circulation. Here is the official page: http://bitcoincard.org/
Content is partially outdated, but will be updated once we are ready.
439  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 04, 2013, 06:21:43 PM
Jan, for a vacation week, you're posting quite a lot Wink
Woops... Guilty. I am not coding, posting is different  Grin
440  Bitcoin / Wallet software / Re: BitcoinSpinner on: July 04, 2013, 11:32:15 AM
Noticed that I didn't post the complete list of 0.5.4 features:
- Added add-to-address-book button on send summary
- Displaying name of receiver in send summary if the receiving address is in the address book
- Made back-button in Keys & Addresses take you to balance view instead of quitting
- Fixed an issue that made the app appear sluggish in most views (you will notice that one)
- Properly centering of "Show to Sender" text when receiving coins
- Displaying a warning if you request to receive coins to an address which is not associated with a private key
- Keys & Addresses: Smaller address font size, and showing showing partial one-liner address for records with labels

Andreas just published version 0.5.5:
- Fixed issue where app name appears as Barcode Scanner on some devices
- No longer asking user whether to export keys as PNG/JPG when exporting to SD card. Always using JPG
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 [22] 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!