...If one needs to simply enter account then passphrase, You can think of the Tab key to flip text fields as just another keystroke, and one that is guaranteed. So from a brute forcing perspective, it's possibly less secure than the existing system.
it wouldnt work that way - you wouldnt know what that account# was before you tried to create it. when I referred to 2 fields being used to create an account, with the second being the passphrase, the first would just be a plaintext whatever you wanted to use. then both fields would be used (key-stretching) to generate the private/public/acct numbers. but the more I think about this, the less I like it. One of the things I remember from my Human/Computer Interaction class at university is that this probably too closely resembles the standard username/password setup, which people assume as "online" Where with blockchains, all cracking is offline, thus the need for much more secure passphrases. So IMO we shouldnt go the key stretching route. Go with a wallet.dat setup for normal users. Power users can click on the brain icon and enter in their own high-strength passphrase after being warned of the importance of a truly high-powered passphrase. |
|
|
|
Question: When you say a "wallet.dat type of setup", you're referring to how bitcoin addresses work (where the private keys are stored on the user's local machine), right?
Can't you emulate a "brain" with a wallet file? For example, with BTC, using blockchain.info, you could import a wallet (so its in the "brain") and then later export (so its out of the "brain").
Am I missing something?
(My current thinking is bitcoin like addresses with a wallet.dat file, so I'm just trying to gauge the sentiment for this vs "brain" wallets)
yes, it could be as simple as a flat text-formatted file named wallet.dat that just contains a random string of 100 characters that is the passphrase for an account. A client can then open up any or multiple accounts by reading that file. In this case we are emulating how bitcoin-qt's unencrypted wallet.dat works, but theres nothing from keeping similar encryption done on the file. or instead of a text file, it could be binary format, where instead of 100 character passphrase, its 256 bits of data representing the private key. In this case the client will not perform the first sha256 hash that it normally runs against the passphrase to obtain the private key. The reverse may also be true, where in a custom bitcoin client you could use a single passphrase to represent a bitcoin account; not completely sure yet though - it would depend on the relationship between public/private keys that bitcoin implements. Edit to add: yes a 100% brainwallet for bitcoin would be possible, as with bitcoin the public key is derived from the private key (just as it is with NXT) |
|
|
|
I am really interested in seeing if we can standardize on Raspberry Pis as the Official Public Node of NXT and deploy a lot of those all over the world rather than renew a bunch of more expensive VPSs that got us thru the initial late Dec crunch. I have heard different things about it - it can definitely forge blocks, it's underpowered for the task, it works better if you plug a thumb drive in the USB port to give it more memory, it needs to be replaced by a Cubie. I would like to pull all this together and come up with a definitive answer on a Raspberry config that is qualified to be a Service Node without running out of horsepower. Dave, your thoughts?
....
If we're thinking of deploying embedded servers like Rpi instead of VPS, I'd suggest we consider Odroid-U3. It's only marginally more costly than Rpi, but have far better tech specs. I've been running one for weeks and it works like a charm.  Before movng to this investmemt, do we expect these devices will perform in TF with thousands of transactions per sec, with blocks being forged much more frequently than every 60 secs, etc? Realize the nework connection they will reqire as well. |
|
|
|
Does anybody know how to setup a testnet? How many servers, etc.
I might need to get one setup as early as end of next week.
James
obtain a list of participants, have them generate new accounts from new passphrases these particiapants will provide IP addresses of their clients that will particpate. these IP addresses will be used in wellknownpeers files set up a network of clients that are configured to use some other 2 ports other than 7874/7875 have a member on 1 client willing to send NXT from their local client on the testnet from an existing account to all other new accounts then we are basically running on an isolated fork with just limited people |
|
|
|
I was thinking about the Asset name for the AE and it certainly would be cool if the asset name XCP represented the actual XCP from the XCP DAC gateway.
However, Asset names are not transferable. My proposal is this.
Whoever gets the asset name of the crypto name, eg. "BTC", "DOGE", "XCP", etc. would be the one that gets to run the DAC gateway using that name and the community will support this as long as the fees are not raised and publicly disclosed accts are fully funded at all times.
Currently the min fee is 1 NXT. I propose that the high bidders for the Asset names keep the fee at 1NXT or double the minimum transaction fee, even when the minimum fee goes to 0.1 NXT or less. I realize that this means that there wont be any profit at first. However, in the long run there will be much more profit if there are hundreds of transactions per hour and you are making fractional NXT on each one. Trading volumes are very sensitive to transaction fees.
This will unfortunately create a bidding war for the Asset names of the other cryptos, but I see no way around that.
Feedback?
James
In my testing of AE, its the asset id number thats important. names can duplicate. Scratch that, they cannot duplicate after all |
|
|
|
Rofl at being proud of NXT distribution. I hope this shit dies or someones creates a fork with same attributes but new ppl  its called NEM, and there are tons of NXT people behind it. it will lag NXT for quite a while though |
|
|
|
I am trying to make sure when we go to TF in April that the network is ready for it. CfB estimated 1Mbps to support that, so any nodes that doesn't have that bandwidth will need to use clients that don't do everything.
Of course, just because 1000TPS is possible doesn't mean it will happen right away and I imagine it will be a gradual ramp, unless we stress test it ourselves.
Who else would you recommend to be on the NXT infrastructure advisory group? I want to make sure we get input from all the people who are actually involved in setting up servers all the time. opticalcarrier, gbeirn, tbd, tbd.
We still have time and can plan an orderly ramp up in NXT network capabilities. I just don't want to login one day in April to find TF was enabled while I was sleeping and we are doing 666TPS and everything went to hell
James
IMO I dont think we have anything to worry about until we get to the point where during peak periods (to be profiled later, when the peak periods begin hitting) that we fill up blocks with max transactions, at a rate of every minute. I just dont see that happening any time soon. But it would be great to be wrong. For example - consider bitcoin - we could currently take over ALL of bitcoin's traffic right now, without even needing TF. If we get to that point, were multimillionaires, and I just dont see that happening this year, But it would be great to be wrong. We'll just have to keep an eye on it. Now, one thing to consider is if NXT really does take off, we could see more attacks again in the future, and so will need to be ready to summon more hallmarked VPSs short notice. But hopefully not. |
|
|
|
Does anybody know what percentage of hallmarked nodes have 1Mbps+
What about normal nodes?
James
I hope you're aware, that a) tx size currently is much bigger than 128 bytes... b) we're quite far from 1000TPS I am trying to make sure when we go to TF in April that the network is ready for it. CfB estimated 1Mbps to support that, so any nodes that doesn't have that bandwidth will need to use clients that don't do everything. Of course, just because 1000TPS is possible doesn't mean it will happen right away and I imagine it will be a gradual ramp, unless we stress test it ourselves. Who else would you recommend to be on the NXT infrastructure advisory group? I want to make sure we get input from all the people who are actually involved in setting up servers all the time. opticalcarrier, gbeirn, tbd, tbd. We still have time and can plan an orderly ramp up in NXT network capabilities. I just don't want to login one day in April to find TF was enabled while I was sleeping and we are doing 666TPS and everything went to hell James TF itself won't let you anywhere near 1000TPS on 1Mbps. Current tx size is rather closer to 500 bytes (and that is without aliases/messages) So besides TF switch to binary format must also happen, but I presume, this will happen before April. I thouight we already switched to binary format... I remember a few weeks ago that all of a sudden blockloading sped up considerably - I thought that was due to switching to binary? was I wrong? |
|
|
|
So i've got another question, i had 2213 Nxt in my account. But somehow it's gone? No transactions are shown other than the one from the exhange site to my account..
check your account in block explorer http://blocks.nxtcrypto.org/nxt/nxt.cgi?action=3000&acc=put your account# after that last equals sign. if that tool shows your NXT in there then you just need to resync blockchain. |
|
|
|
|
yeah i see the admins possibly just getting rid of altcoin section altogether to get rid of the IPO scamming issue.
there have been rumblings of big changes coming, new board s/w redesign, etc
|
|
|
|
That's THE example why noone should use well-known quotes as password!
++1 doubleplusone what you did there, I see it He incremented the constant, son of a gun! Now we have to change math. someone hasnt read 1984 |
|
|
|
Is it possible to introduce a username + password option when creating/logging in an account aswell as a brute-force protection in order to make this crypto safer then the alternatives?
Debate!
Id like jaguar to at minimum to consider using a "username" and "password" field such that the password is salted with the username for key streching. It will still require a very complex password though. And it would be possible for multiple usernames to be in use. LOL But consider this, if NEM were to go live with a wallet.dat type of setup, it would make it VERY attractive. And if it were to get a wallet.dat type of setup before NXT did, then things would REALLY get interesting. I envision the following upon opening the client: User is presented with 2 options when clicking unlock, where the default is to utilize a wallet.dat setup and the user can open locally stored accounts or create a new one. There is an another symbol on this unlock page that is an icon representing a brain, where the user can click it to go the brainwallet route if so desired. Obviously this option would need to come with all appropriate disclaimers What do you guys think? Im not the S/W dev, just the network dev but I think that would be ideal. |
|
|
|
That's THE example why noone should use well-known quotes as password!
++1 doubleplusone what you did there, I see it |
|
|
|
Has anyone tried to install NRS on LG Smart TV set?
I have one. How do i go about installing |
|
|
|
Thank you Salsa Can we put in that document for how long VPS is maintained? VPS owners? please have a look Pin Neer.g has paid me for 5 vps for 3 months. Should expire by end of march. I was also provided 100k and have used that for another 7 vps. 3 I suspect with the amount i hve been given that i can run these 12 till the end of next year. Or i could add more if need be. I will say that emoneyru's ansible playbook makes managing these things really easy. The good thing here is that i have also managed to get soome heavy hallmarks on these 12. so they run LOTS of traffic Im also running 5 other vps for other individuals in a deal where they provide the vps and i manage it |
|
|
|
That is a impossible task and you know it.
I am asking you to be honest with your intellect. Of course the accounts are sockaccounts, Where do you think they magically appeared from with a instant desire to get a hold of NEM?
I *know* you know this, but due to the interest real people has also shown you don't want to shut it down and start over in a fair way.
how is it impossible? he put his money where his mouth is. hes got HUGE balls as far as Im concerned with that offer. I can guarantee had I been one to claim that large a stake Id for sure come up with the proof for 1M NXT. hopefully it wont come to that. You should put a time limit on that offer though - like if someone does that they have to prove they accounts they used, and the winner must have had 5% before today. otherwise you'll have 50 retreads for sure hammering away at the task for 1M NXT. |
|
|
|
|
what devs do you have committed now? are they going to clone nxt with a different genesis block? if so how to avoid the traps CfB has discussed?
|
|
|
|
Might perhaps this show that BCNext is one of top cryptographers in the world?
We could ask him to do the audit of NRS crypto algo for 10 BTC...  I seriously doubt it. The way he coded the 'secret phrase' stuff. That was borderline pathetic. you are a raging retard if you dont understand what this allows. and its still possible to implement a wallet.dat type of client if so desired. the fact that you dont seem to understand this tells me you have no clue on how to dev a coin |
|
|
|
Quick update: the stakeholder list is updated to page 6 of the second registration thread. We are at 1571.
1. Now I would like to have a second pair of eyes to re-check all the incoming transactions to make sure they are legit and satisfy the sending address condition aka counter -sockpuppet measure. I would continue to check everything when I update the stakeholder list but I think a second eyes to double check everything would give stakeholder list a greater degree of reliability and transparency. The person who do this would start from the registration thread 2 and continue until the fundraising is over. He should PM me if he find any issue with a particular stake spot reservation. This position would be given 1 dev stake and also a big thanks from NEM community.
2. I would temporarily stop "promotion to qualify" in a next few days to try some direct advertising to see if we see any differences in the new number of registrations. The goal has always been to reach out to a large and diverse base of users who do not necessarily have an experience with cryptocurrency before.
ugh, thats a crappy job. ill volunteer if no one else does. but IMO the dev stake in question should be dependent on a high accuracy % target of a doublecheck. |
|
|
|
Does anybody have a problem of BTER not crediting their coins? I made a transfer last night and its been sitting in their account for 24h. Nothing credited.
Weird because I never had problems with them, this is the first time..
Anyone else?
yes, Ive got 100+ confirmations of my deposit, but not in account. I sent them an email a bit ago. |
|
|
|
|
Show Posts
