[ANN][SHIFT] The New Web | IPFS/Phantom | ShiftNrg.org Hosted Decentralized!

[ngin-x]

This doesn't look good. Still time to fix this, but I'm surprised there was no urgency even when they knew about it

After getting the above response, I asked the devs when the new version of the web wallet will be released. No response so far. I'll post here if I get any.

This needs to be fixed on an urgent basis. After what happened with Parity hack, I don't think I can sleep easy until this is fixed.

Shift also needs a desktop lite client. Web wallets cannot be trusted.

No answer about it yet ?

Nope.

This is the response a dev named Ralph S gave the Ryder forum a few days ago.


 Some of you mentioned this post about a warning for LSK, SHIFT, RISE.
    https://boards.4chan.org/biz/thread/2836956

    There is no reason to panic, we are aware of that API endpoint and the security risk this could cause. They do have a point, and it is important to repeat: ALWAYS use the OFFICIAL https wallet, if you are not running your own node!
    No need to say that we NEVER log input. Some users who lost their keys wish we would though.

    We do have a fix for this, to be released in the next wallet update. Where we don't use this endpoint at all, and sign transactions at the client side to broadcast to our main nodes.
    That way your private keys are safe, because they aren't sent at all. You can compare it to the way MyEtherWallet works.

    We hope this explains the case and answers your questions.

Why are you copy pasting Ralph's response everywhere? Your answer is not relevant to the question asked.

[realstarlord]

You keep saying no one is answering your questions, but Ralph did. The wallet is being updated and will be released soon. Do you want a time and date? These things take some time and testing. I am sure it will be released soon.

[ngin-x]

You keep saying no one is answering your questions, but Ralph did.

Umm what? When did I ever say that? I already asked the devs about the wallet security hole at Ryver and the response I got in return has already been posted here. Then I asked another question regarding when the new version of the wallet will be released and there was no response to that. Some people want to know this specific bit. I don't know why you are posting the original response everywhere which everyone already knows about.

[realstarlord]

You keep saying no one is answering your questions, but Ralph did.

Umm what? When did I ever say that? I already asked the devs about the wallet security hole at Ryver and the response I got in return has already been posted here. Then I asked another question regarding when the new version of the wallet will be released and there was no response to that. Some people want to know this specific bit. I don't know why you are posting the original response everywhere which everyone already knows about.

Not everyone knows what the devs are saying on Ryder. I just don't want the impression floating around that the wallet update is not being worked on.

[ngin-x]

You keep saying no one is answering your questions, but Ralph did.

Umm what? When did I ever say that? I already asked the devs about the wallet security hole at Ryver and the response I got in return has already been posted here. Then I asked another question regarding when the new version of the wallet will be released and there was no response to that. Some people want to know this specific bit. I don't know why you are posting the original response everywhere which everyone already knows about.

Not everyone knows what the devs are saying on Ryder. I just don't want the impression floating around that the wallet update is not being worked on.

Ok cool. I hope they drop everything and work on this first. With all the hacks going on, plugging the security hole asap is of utmost importance.

[enzeperix]

In Shift's  DPoS system if you are a delegate you get the same reward as the rest of 100 delegates no matter how many coins u have in your wallet ? How many coins / month maked a delegate at the moment ?

[Merick]

Shift Coins from roughly July 2016

I admit, I have not been keep tracking of this coin.  I did mine it during the July time period of 2016.  Recently I wanted to do an inventory of my alt coins, and I found a folder called Phantom-bundle... looked a little deeper and oh ya, I have some Shift coins.

I noticed on page 1 that there was a manual coin swap but I'm afraid I have missed the transfer window by roughly a year.  I do not see my address on the shift block explorer, I am assuming this is because of the manual swap.

So, is there any chance I can salvage my older Shift coins?

Thanks

[realstarlord]

Shift Coins from roughly July 2016

I admit, I have not been keep tracking of this coin.  I did mine it during the July time period of 2016.  Recently I wanted to do an inventory of my alt coins, and I found a folder called Phantom-bundle... looked a little deeper and oh ya, I have some Shift coins.

I noticed on page 1 that there was a manual coin swap but I'm afraid I have missed the transfer window by roughly a year.  I do not see my address on the shift block explorer, I am assuming this is because of the manual swap.

So, is there any chance I can salvage my older Shift coins?

Thanks

Hello,

You should go on the Shiftnrg Ryver forum and ask one of the devs. Hopefully they can help you out.

[Timbo_Slice]

In Shift's  DPoS system if you are a delegate you get the same reward as the rest of 100 delegates no matter how many coins u have in your wallet ? How many coins / month maked a delegate at the moment ?

Yes, same reward, currently at 1.1 per block plus any fees. Block time is 27 seconds, so delegates forge once every 45 minutes, about 30 per day, so about 900 per month.


Also, message from Ralf on the Ryver chat regarding the concerns about the API endpoint:
"Ralf SWed 7:34am
Update regarding the concerns posted at 4chan.org some days ago. We made it priority #1 and have rewritten the wallet transactions to offlinerequests. We're doing some final testing and will soon ask our delegates to update their wallets. For the sake of security we'll completely remove the API call (with private key as parameter) from Shift core as well."

[ngin-x]

In Shift's  DPoS system if you are a delegate you get the same reward as the rest of 100 delegates no matter how many coins u have in your wallet ? How many coins / month maked a delegate at the moment ?

Yes, same reward, currently at 1.1 per block plus any fees. Block time is 27 seconds, so delegates forge once every 45 minutes, about 30 per day, so about 900 per month.


Also, message from Ralf on the Ryver chat regarding the concerns about the API endpoint:
"Ralf SWed 7:34am
Update regarding the concerns posted at 4chan.org some days ago. We made it priority #1 and have rewritten the wallet transactions to offlinerequests. We're doing some final testing and will soon ask our delegates to update their wallets. For the sake of security we'll completely remove the API call (with private key as parameter) from Shift core as well."

Kudos to Ralf for taking this up with very high priority

[realstarlord]

Ralfs is the man! Glad he is with Shift

[enzeperix]

It it difficult to become a delegate ? i guess people are fighting to become delegates . I think many delegates are delegates because they created multiple accounts and voted for their main / delegate account. I can keep a full node on a Dell Poweredge server 24/7 , 99,99% uptime but i don't know if is worth the effort .

[HHWlife]

did we have a different logo before?

[ttookk]

did we have a different logo before?

Define before. But yes, SHIFT had (at least) two logo changes. So, technically, "we" had two different logos before.

[Piston Honda]

[trnpall]

Wallet Update to Fix Security Issues.

Ralf SThu 6:46pm
Hi @team,

Today we have released a security update for our wallet (v6.6).
The login and transactions are rewritten to safe offline requests. So your keys will never leave your computer.

Attention to all delegates (mainnet + testnet), please update your wallets asap too, using the following command:

./shift_manager.bash update_wallet
If you are using a public wallet and have doubts whether somebody got access to your private keys: to be 100% sure move your funds to a brand new address.
We lowered our fees to 0.01 Shift for sending, and 0.1 for creating a second signature. So that shouldn't stop you.

This had to be fixed with priority, we hope you'll understand, more updates to follow soon. Stay tuned!

Replies in +general or +testnet, thank you.

[realstarlord]

Wallet Update to Fix Security Issues.

Ralf SThu 6:46pm
Hi @team,

Today we have released a security update for our wallet (v6.6).
The login and transactions are rewritten to safe offline requests. So your keys will never leave your computer.

Attention to all delegates (mainnet + testnet), please update your wallets asap too, using the following command:

./shift_manager.bash update_wallet
If you are using a public wallet and have doubts whether somebody got access to your private keys: to be 100% sure move your funds to a brand new address.
We lowered our fees to 0.01 Shift for sending, and 0.1 for creating a second signature. So that shouldn't stop you.

This had to be fixed with priority, we hope you'll understand, more updates to follow soon. Stay tuned!

Replies in +general or +testnet, thank you.

Updated! thanks

[Bigbobbasher]

Shift holders stay strong!! ☺️

[Piston Honda]

loving the dumpageeeeeeeeee, easy busy up for certain alts that will moon hard in the coming months (SHIFT being one of them) 

[Bigbobbasher]

Its a huge dump. Still holding as i believe in future. Must just be ppl dumping everything for free bcc?