Inputs.io | Instant Payments, Offchain API, Secure Wallet, 235k+ BTC transferred

[johhnny99]

I really like you website, but have a few question before I create a wallet account..

• I din't find any privacy policy. Can you please share a link?
• Somewhere in this thread I read, you have our private key.. is that true? Why not do something like blockchain.info, where they don't have access to your wallet at all.
• How do you store our personal information like email and IP? What if a gov agency ask you for any particular account? What information can you provide?
• If your website gets taken down tomorrow by XYZ agency, do we still have our wallet or it's gone with you? Can we export or move to other service or a desktop client?
• Do you support closing accounts? If yes, do you erase information from your systems?

[Mooshire]

I really like you website, but have a few question before I create a wallet account..

• I din't find any privacy policy. Can you please share a link?
• Somewhere in this thread I read, you have our private key.. is that true? Why not do something like blockchain.info, where they don't have access to your wallet at all.
• How do you store our personal information like email and IP? What if a gov agency ask you for any particular account? What information can you provide?
• If your website gets taken down tomorrow by XYZ agency, do we still have our wallet or it's gone with you? Can we export or move to other service or a desktop client?
• Do you support closing accounts? If yes, do you erase information from your systems?

These are really good questions and need to be answered.

[🏰 TradeFortress 🏰]

I really like you website, but have a few question before I create a wallet account..

• I din't find any privacy policy. Can you please share a link?
• Somewhere in this thread I read, you have our private key.. is that true? Why not do something like blockchain.info, where they don't have access to your wallet at all.
• How do you store our personal information like email and IP? What if a gov agency ask you for any particular account? What information can you provide?
• If your website gets taken down tomorrow by XYZ agency, do we still have our wallet or it's gone with you? Can we export or move to other service or a desktop client?
• Do you support closing accounts? If yes, do you erase information from your systems?

Great questions, please see https://inputs.io/faq#q1-4

There's a few reasons 'why not do something like blockchain.info':

Blockchain.info does have access to your wallet. You get all of your information from Blockchain.info's central servers. They could do a lot of things, like make you sign outputs to their addresses, make up transactions that were never transmitted, and if you use their API they have your private key already. Not to mention they can include malicious JS.

Features like mixing require control of private keys as well as off chain transaction. It's possible to use Inputs.io in a way that limits your counterparty risk to just that we won't double spend.

We have redundancy plans (aka 'dead man's switch'), both automated and manual. This isn't just for seizes / etc, the hot pocket will dump all coins in secure storage if it detects an intrusion.

Send an email to support@inputs.io if you'd like to clear our account, and we'll delete all info we have on you. It'll take longer for the data to be gone in backups.

[johhnny99]

Thanks for answering. I would like to clear a few things.

There's a few reasons 'why not do something like blockchain.info':

Blockchain.info does have access to your wallet. You get all of your information from Blockchain.info's central servers. They could do a lot of things, like make you sign outputs to their addresses, make up transactions that were never transmitted, and if you use their API they have your private key already. Not to mention they can include malicious JS.

Are you talking about, when we create a wallet .. they are the one generating all this for us? How about if we rather create an account offline, and then add it to BlockChain.info?

Features like mixing require control of private keys as well as off chain transaction. It's possible to use Inputs.io in a way that limits your counterparty risk to just that we won't double spend.

What if we don't want to use mixer? Do you provide an option to opt-out, and get full control over your account.

We have redundancy plans (aka 'dead man's switch'), both automated and manual. This isn't just for seizes / etc, the hot pocket will dump all coins in secure storage if it detects an intrusion.

My question is can we move to other services if we want to? and can we add externally generated wallets? Something like an import/export feature.

[minimalB]

Good points! What i also like about blockchain.info is the ability to import paper wallets or create watch only addresses, just for monitoring. If site goes temporarily down, i can still import my paper wallet elsewhere and without interruption.

[🏰 TradeFortress 🏰]

Thanks for answering. I would like to clear a few things.

There's a few reasons 'why not do something like blockchain.info':

Blockchain.info does have access to your wallet. You get all of your information from Blockchain.info's central servers. They could do a lot of things, like make you sign outputs to their addresses, make up transactions that were never transmitted, and if you use their API they have your private key already. Not to mention they can include malicious JS.

Are you talking about, when we create a wallet .. they are the one generating all this for us? How about if we rather create an account offline, and then add it to BlockChain.info?

Features like mixing require control of private keys as well as off chain transaction. It's possible to use Inputs.io in a way that limits your counterparty risk to just that we won't double spend.

What if we don't want to use mixer? Do you provide an option to opt-out, and get full control over your account.

We have redundancy plans (aka 'dead man's switch'), both automated and manual. This isn't just for seizes / etc, the hot pocket will dump all coins in secure storage if it detects an intrusion.

My question is can we move to other services if we want to? and can we add externally generated wallets? Something like an import/export feature.

Happy to!

1) No, with blockchain.info you get pretty much everything from Blockchain.info's servers. Your transaction list, your balance, your outputs that you sign, etc.

2) There isn't a way to opt out at this time - turning on mixing also helps other users as you'll be contributing to our mixer volume

3) Yes. We also have watch only addresses and accounts (say, you manage a bunch of Inputs.io websites) on the planned features list.

[johhnny99]

Happy to!

1) No, with blockchain.info you get pretty much everything from Blockchain.info's servers. Your transaction list, your balance, your outputs that you sign, etc.

2) There isn't a way to opt out at this time - turning on mixing also helps other users as you'll be contributing to our mixer volume

3) Yes. We also have watch only addresses and accounts (say, you manage a bunch of Inputs.io websites) on the planned features list.

Thank you again! Where can I learn more about the mixing process?

[bitfromit]

Hi TF,

I have just seen in your faq: "Tor detection - accounts that registered using Tor can use Tor, other accounts may not for security reasons".

1) I setup non-tor. So am guessing there is indeed no way to allow tor for this account?

2) If so, can we close and reopen a new acct with same email?

Thanks.

[🏰 TradeFortress 🏰]

Hi TF,

I have just seen in your faq: "Tor detection - accounts that registered using Tor can use Tor, other accounts may not for security reasons".

1) I setup non-tor. So am guessing there is indeed no way to allow tor for this account?

2) If so, can we close and reopen a new acct with same email?

Thanks.

There is - please contact support@inputs.io and we can manually enable tor for your account.

We'll be adding extensive proxy lists too but also expose this option to the user after they've signed in of course. For now, just contact us

[GenTarkin]

Hi TF, I was wondering if it at all will be possible soon / now to import private key list from bitcoin-qt?
I use blockchain.info wallet along side my bitcoin-qt wallet(same keys in both) for ease of access and backup.

[Mooshire]

Hi TF, I was wondering if it at all will be possible soon / now to import private key list from bitcoin-qt?
I use blockchain.info wallet along side my bitcoin-qt wallet(same keys in both) for ease of access and backup.

If you want to just sweep the keys, use http://www.bitaddress.org

As of now, there is no way to import specific addresses. You'll have to ask TF about that.

[ninjaboon]

the hot pocket will dump all coins in secure storage if it detects an intrusion.

Interesting. I wonder how you do it.

[Mooshire]

the hot pocket will dump all coins in secure storage if it detects an intrusion.

Interesting. I wonder how you do it.

TF knows when he's being penetrated.

[🏰 TradeFortress 🏰]

the hot pocket will dump all coins in secure storage if it detects an intrusion.

Interesting. I wonder how you do it.

We're really limited on the amount of info we can share on this aspect. Maybe when we revamp it

[Mooshire]

Darn it TF, I always get excited when you're the last poster because new features are cool. Make moar new stuff to feed my appetite for new stuff.

[ranlo]

the hot pocket will dump all coins in secure storage if it detects an intrusion.

Interesting. I wonder how you do it.

TF knows when he's being penetrated.

I lol'd... what if he's asleep?

[Boelens]

the hot pocket will dump all coins in secure storage if it detects an intrusion.

Interesting. I wonder how you do it.

TF knows when he's being penetrated.

I lol'd... what if he's asleep?

Then we're screwed.

[ranlo]

the hot pocket will dump all coins in secure storage if it detects an intrusion.

Interesting. I wonder how you do it.

TF knows when he's being penetrated.

I lol'd... what if he's asleep?

Then we're screwed.

Nonono... if he's the one being penetrated *he's* the one that is getting screwed, o.O

[btcton]

Who are the website's devs?

[Spenzert]

Who are the website's devs?

TradeFortress:
https://bitcointalk.org/index.php?action=profile;u=67058