If the source to SMTP server is reviewed that it does send the email (backed up with test results) and as part of the sending process it adds a hash value of email to the blockchain. I think that allows peer verification, please explain where I am wrong. I am certain I have made mistakes somewhere and I am still coming up to speed with this whole decentralized blockchain approach.

NXTsmtp is just for proof of concept that incorporates something everybody is familiar with. I want to verify the peer verifiability of hardcoded NXTplugin followed by external NXTplugin. I am not worried about NXTsmtp for anything other than proving that NXTplugins work and are peer verified. At first I couldnt understand how on earth a DAC could be implemented. When I started thinking about email plugin, it became not as hard.

If the source to SMTP server is reviewed that it does send the email (backed up with test results) and as part of the sending process it adds a hash value of email to the blockchain. I think that allows peer verification, please explain where I am wrong. I am certain I have made mistakes somewhere and I am still coming up to speed with this whole decentralized blockchain approach.

The problem is that I see all of the things I am posting about as connected. Like the elephant described by different people. All sounds very different, but it is all the same elephant. If I described the elephant in its entirety, it wouldnt fit in posts. I feel a great sense of urgency due to competitive pressures.

James

P.S. I usually dont post when I am sleeping or flying

Funny how we are taking about plugins (more security issues) when one fatal flaw  that existed in all versions prior to 0.6 could have completely ended Nxt experiment

https://nextcoin.org/index.php/topic,3884.0.html

Had this flaw been discovered by someone more nefarious, that would have been pretty much the end (40 million Nxt stolen for bter, for example).  

Italics are  mine, natch.

@eMule: u missed a great chance to kill NXT in the last 24 hours. One good hard dump from u could have started a panic sell, if u dumped hard like u are always promising us.
Are u ever going to back up your talk with just a little bit of action?

I'm the guy.  I just created a thread providing more technical details https://nextcoin.org/index.php/topic,3884.0.html and to answer questions.  I don't really check this forum/thread so posting there is the best way to reach me.

Critical bug disclosure

Few days ago the guy who found a vulnerability in Blockchain.Info and picked the secret phrase of Nxt genesis account found a security flaw in NRS cryptographic algorithm.

I'm the guy.  I just created a thread providing more technical details https://nextcoin.org/index.php/topic,3884.0.html and to answer questions.  I don't really check this forum/thread so posting there is the best way to reach me.

How about contacting D. J. Bernstein himself to see if he can check the implementation

http://cr.yp.to/djb.html

He designed curve25519 so no one would know better than him.

If we get an academic to agree to do the review, we might better give them the latest cleaned-up 0.7.x source. Nothing has changed in the Crypto classes, but overall it will be much easier to navigate the code.

So when I do my installer for 0.7, is it going to cause any issues if I include the nxt_db folder as I include blocks.nxt and transactions.nxt now?

Fee voting tally google doc spreadsheet.  Please check your vote and PM me if I made a mistake.

https://docs.google.com/spreadsheet/ccc?key=0Akjrt0LTBXgcdFFkSGMwXzd4Q2NPU21yU2NOYWVldlE&usp=sharing

To a certain extent if the lead developer issues a release and says it's critical we have no choice but to trust him.  But, outside developers can and should perform their own independent audits of new releases to see if something suspicious is done and raise the alarm if need be.

Open JDK is open source licensed under GPL

http://en.wikipedia.org/wiki/OpenJDK

Java has been around a long time (1996).

Amazon.com and ebay.com run on java on server side

"as it requires to write bunch of code to do some simple tasks."

Nonsense. You don't know what you are talking about

$content = file_get_contents("filepath");

$content = file_get_contents("http://javaispita.com");

fp = open("filepath","r")
content = fp.read()
fp.close()

BufferedReader br = new BufferedReader(new FileReader("filepath"));
StringBuilder sb = new StringBuilder();
String content = null; 

try {
	String line;
	while((line = br.readLine() != null) sb.append(line);
	content = sb.toString();

} catch (IOException e) {
	e.printStackTrace();
} finally {
	br.close();
}