Bitcoin Forum
June 17, 2019, 12:24:59 AM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: « 1 ... 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 [1555] 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 ... 2567 »
  Print  
Author Topic: NXT :: descendant of Bitcoin - Updated Information  (Read 2752710 times)
jl777
Legendary
*
Offline Offline

Activity: 1176
Merit: 1089


View Profile WWW
February 08, 2014, 07:58:14 AM
 #31081

Funny how we are taking about plugins (more security issues) when one fatal flaw  that existed in all versions prior to 0.6 could have completely ended Nxt experiment

https://nextcoin.org/index.php/topic,3884.0.html

Had this flaw been discovered by someone more nefarious, that would have been pretty much the end (40 million Nxt stolen for bter, for example).  
blockchain.info is a pretty big outfit and I think they had the same issue.

I cannot help with cryptographic algo analysis, but I can do what I am doing. Also, we have been searching for a crypto reviewer for a while now.

NXT has many different parts and I am assuming that the NXT core is something that can be built upon. In fact BCNext has said he wants us to build on it. What is wrong about multi-tasking? I am intentionally specifying bounties for miniprojects that can be done by people who are not working on the current mission critical parts. Also, by trying to add new features, it helps me understand better what NXT is and what its true potential is. I think it is doing the same for others, but I am just guessing.

What benefit is there to everyone holding their breath waiting for the things we all know are being worked on?

Eadeqa, please suggest what you think we should do right now that is not already being done. You brought up some good security issues about external services, so I came up with a proposed solution. Do you see a flaw?

What should I work on instead? What is more important that the future feature set of NXT that is not already under way?

James

http://www.digitalcatallaxy.com/report2015.html
100+ page annual report for SuperNET
1560731099
Hero Member
*
Offline Offline

Posts: 1560731099

View Profile Personal Message (Offline)

Ignore
1560731099
Reply with quote  #2

1560731099
Report to moderator
PLAY NOW
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1560731099
Hero Member
*
Offline Offline

Posts: 1560731099

View Profile Personal Message (Offline)

Ignore
1560731099
Reply with quote  #2

1560731099
Report to moderator
pinarello
Full Member
***
Offline Offline

Activity: 266
Merit: 100


NXT is the future


View Profile
February 08, 2014, 08:00:32 AM
 #31082

I do not feel confident with the idea of "plugins" and "turing compete" scripting implementation before more basic stuff is complete. We need  thorough  code rechecking from many more independent sources , finishing already announced projects, and other basic stuff.  

I am surprised how little reaction there is to the fact that a guy who discovered a fatal flaw with Nxt code two days ago could have stolen 40 million from bter Nxt account
 https://nextcoin.org/index.php/topic,3884.0.html

How many more flaws exist? We don't know, but yet we want to implement "plugins" Wow.

Seriously. Forget plugins and send more resources on code auditing and finishing the announced features.


+1 for some kind of odd reason we always drift away from the initial plan and features, they are still NOT implemented.

We cant even walk and already try to run.

finish what is promissed and started.

xyzzyx
Sr. Member
****
Offline Offline

Activity: 490
Merit: 250


I don't really come from outer space.


View Profile
February 08, 2014, 08:01:04 AM
 #31083

I am a bit concerned that there has been very little feedback on my recent proposals, blockchain FIFO and NXT plugin architecture.

This either means its Friday night and nobody has had a chance to think about them, or it is so ridiculous nobody bothered to comment, or maybe I am on everyone's ignore list?

Please, if you see anything wrong, now is the time to find it. Also, if you think it is mostly right, just +1 it or short comment. I feel like I am in a vacuum here...

James

P.S. I just cant believe that I got everything right as that is the fourth possibility.

You have more energy than a toddler that has found her mother's diet pills.

Blockchain FIFO:  I was thinking along similar lines:
https://bitcointalk.org/index.php?topic=345619.msg4981325#msg4981325

But it's only a general idea, and incomplete.

NXT plugins: you could sign the plugin with the issuer's private key and publish the public key for verification purposes in an Alias.  Have the client check the signature before  loading of the plugin. Or something similar <waves hands.>

"An awful lot of code is being written ... in languages that aren't very good by people who don't know what they're doing." -- Barbara Liskov
allwelder
Legendary
*
Offline Offline

Activity: 1498
Merit: 1000



View Profile
February 08, 2014, 08:02:33 AM
 #31084

Nxt introduction video with Cantonese
http://v.youku.com/v_show/id_XNjcwNTEyMzAw.html
salsacz
Hero Member
*****
Offline Offline

Activity: 490
Merit: 500


View Profile
February 08, 2014, 08:02:55 AM
 #31085

I am a bit concerned that there has been very little feedback on my recent proposals, blockchain FIFO and NXT plugin architecture.
It would be nice to have each week a new plugin. 1 week testing and implementation and move on to the nxt plugin...

Nxt tips: NXT-R67P-6BZ2-XWAK-8RHZR | Nxt forum | Nxt Academy | Donate for Nxt at the Universities // BTCD: RVMLrnxYYy7uy8YZo9FcGfXbk1ZMnNifdg
Eadeqa
Hero Member
*****
Offline Offline

Activity: 644
Merit: 500


View Profile
February 08, 2014, 08:07:07 AM
 #31086

Funny how we are taking about plugins (more security issues) when one fatal flaw  that existed in all versions prior to 0.6 could have completely ended Nxt experiment

https://nextcoin.org/index.php/topic,3884.0.html

Had this flaw been discovered by someone more nefarious, that would have been pretty much the end (40 million Nxt stolen for bter, for example).  
blockchain.info is a pretty big outfit and I think they had the same issue.


It was not the same issue. blockchain.info  is web based wallet. This was a fatal flaw with Nxt code. He could have stolen money from any Nxt account, not just bter. Even yours.

You think this is some kind firefox browser where we want plugins.Really?

 How many more  flaws exist? We don't know. Get the code reviewed by many more sources. Finish the announced projects.


NXT-GZYP-FMRT-FQ9K-3YQGS
https://nxtforum.org
jl777
Legendary
*
Offline Offline

Activity: 1176
Merit: 1089


View Profile WWW
February 08, 2014, 08:07:17 AM
 #31087

I do not feel confident with the idea of "plugins" and "turing compete" scripting implementation before more basic stuff is complete. We need  thorough  code rechecking from many more independent sources , finishing already announced projects, and other basic stuff.  

I am surprised how little reaction there is to the fact that a guy who discovered a fatal flaw with Nxt code two days ago could have stolen 40 million from bter Nxt account
 https://nextcoin.org/index.php/topic,3884.0.html

How many more flaws exist? We don't know, but yet we want to implement "plugins" Wow.

Seriously. Forget plugins and send more resources on code auditing and finishing the announced features.
What announced features? the 1000TPS infrastructure. I proposed blockchain FIFO to solve that. Do you want me to code it too? I can only do so much, plus I am not a Java programmer. When I program, I program in C and that does not allow me to help with the cryptographic review, or even code auditing or finishing announced features.

In any case, it is the tech committee's responsibility to make sure the announced features are completed.

My charter is primarily strategic marketing, which means I need to look into the future and make sure it is as happy for NXT as possible. You have to realize that you cant just add more people to a project to make it go faster. That is the manhours fallacy. If a project will take one person 100 hours, 10 people should be able to get it done in 10 hours. WRONG!

Software dev does not work that way. Even if the 10 devs are as good as the single dev, a lot of time is used up coordinating the project and it could even end up taking more actual time that just letting the single dev finish in 100 hours.

For example, if I were to barge in on nexern and say hey, I am going to help you. I don't know the language you use, any of your code base, but I will take up your time as you waste it explaining it to me. Then I wont really understand what he needs done, so all I will be able to do is repeatedly pester him. I guess maybe I could order pizzas for him.

Is that what I should do? slow down other devs progress?

James

http://www.digitalcatallaxy.com/report2015.html
100+ page annual report for SuperNET
jl777
Legendary
*
Offline Offline

Activity: 1176
Merit: 1089


View Profile WWW
February 08, 2014, 08:08:28 AM
 #31088

I am a bit concerned that there has been very little feedback on my recent proposals, blockchain FIFO and NXT plugin architecture.
It would be nice to have each week a new plugin. 1 week testing and implementation and move on to the nxt plugin...
It all depends on what the plugins are. Also, I want to get reference implementations out there and a plugin dev kit to really accelerate development by allowing people brand new to NXT to create them. App store and all that

http://www.digitalcatallaxy.com/report2015.html
100+ page annual report for SuperNET
xyzzyx
Sr. Member
****
Offline Offline

Activity: 490
Merit: 250


I don't really come from outer space.


View Profile
February 08, 2014, 08:08:52 AM
 #31089

Nxt introduction video with Cantonese
http://v.youku.com/v_show/id_XNjcwNTEyMzAw.html

Nice!

"An awful lot of code is being written ... in languages that aren't very good by people who don't know what they're doing." -- Barbara Liskov
jl777
Legendary
*
Offline Offline

Activity: 1176
Merit: 1089


View Profile WWW
February 08, 2014, 08:09:57 AM
 #31090

I do not feel confident with the idea of "plugins" and "turing compete" scripting implementation before more basic stuff is complete. We need  thorough  code rechecking from many more independent sources , finishing already announced projects, and other basic stuff.  

I am surprised how little reaction there is to the fact that a guy who discovered a fatal flaw with Nxt code two days ago could have stolen 40 million from bter Nxt account
 https://nextcoin.org/index.php/topic,3884.0.html

How many more flaws exist? We don't know, but yet we want to implement "plugins" Wow.

Seriously. Forget plugins and send more resources on code auditing and finishing the announced features.


+1 for some kind of odd reason we always drift away from the initial plan and features, they are still NOT implemented.

We cant even walk and already try to run.

finish what is promissed and started.
What features are not being worked on? What do you mean by walking?

http://www.digitalcatallaxy.com/report2015.html
100+ page annual report for SuperNET
pandaisftw
Full Member
***
Offline Offline

Activity: 224
Merit: 100


View Profile
February 08, 2014, 08:11:56 AM
 #31091

I do not feel confident with the idea of "plugins" and "turing compete" scripting implementation before more basic stuff is complete. We need  thorough  code rechecking from many more independent sources , finishing already announced projects, and other basic stuff.  

I am surprised how little reaction there is to the fact that a guy who discovered a fatal flaw with Nxt code two days ago could have stolen 40 million from bter Nxt account
 https://nextcoin.org/index.php/topic,3884.0.html

How many more flaws exist? We don't know, but yet we want to implement "plugins" Wow. This isn't firefox.

Seriously. Forget plugins and spend more resources on code auditing and finishing the announced features.

Do realize that the stuff here is =/= to the work the main devs are doing. I'm pretty sure most of us are not able to find flaws, so we can contribute to other parts in the meantime.

Also, we are looking for people to audit the code, but beyond that, there is nothing I can do personally, so I'm helping out in other ways.

NXT: 13095091276527367030
CIYAM
Legendary
*
Offline Offline

Activity: 1890
Merit: 1003


Ian Knowles - CIYAM Lead Developer


View Profile WWW
February 08, 2014, 08:12:23 AM
 #31092

I don't see why you would want a Nxt VM script to "output an email" (or do anything else outside of the blockchain for that matter) - you do understand that whether such email was actually even really sent simply *cannot be proven* (as you are dealing with SMTP rather than a blockchain)?

Also SMTP is going to require accounts that need to be signed into and you don't want to end up with people effectively running "relay servers" or they'll end up on email blacklists.

Wouldn't it make more sense for such things to be services instead?

About walking vs. running - you are getting far too excited jl777 - can you just take something to slow down to a pace that we can keep up with (by the time we've tried to discuss one of your ideas you typically have posted 3 others).

With CIYAM anyone can create 100% generated C++ web applications in literally minutes.

GPG Public Key | 1ciyam3htJit1feGa26p2wQ4aw6KFTejU
jl777
Legendary
*
Offline Offline

Activity: 1176
Merit: 1089


View Profile WWW
February 08, 2014, 08:18:20 AM
 #31093

I am a bit concerned that there has been very little feedback on my recent proposals, blockchain FIFO and NXT plugin architecture.

This either means its Friday night and nobody has had a chance to think about them, or it is so ridiculous nobody bothered to comment, or maybe I am on everyone's ignore list?

Please, if you see anything wrong, now is the time to find it. Also, if you think it is mostly right, just +1 it or short comment. I feel like I am in a vacuum here...

James

P.S. I just cant believe that I got everything right as that is the fourth possibility.

You have more energy than a toddler that has found her mother's diet pills.

Blockchain FIFO:  I was thinking along similar lines:
https://bitcointalk.org/index.php?topic=345619.msg4981325#msg4981325

But it's only a general idea, and incomplete.

NXT plugins: you could sign the plugin with the issuer's private key and publish the public key for verification purposes in an Alias.  Have the client check the signature before  loading of the plugin. Or something similar <waves hands.>
I am not too concerned about the signatures, more about the logistics of validating the signature for the executable code under all the different OS the plugins will be compiled and run under. This is why hardcoded plugins are much cleaner, but I figured if we can solve the external plugin issue, it really opens things up.

Yes, I am worried about Evil Bob, he is quite clever. What can he do with an NXTsmtp plugin? He could change the email that is being sent and this could be very bad. NXTsmtp is just a proof of concept of this methodology and would not really be useful for anything more than a twitter like feed. Now it is possible for the NXTsmtp messages to be signed and that would add a lot more trust in the content of the feed. Keep in mind, nothing stops Evil Bob from sending any email to anyone, so I dont see the big security hole created by NXTsmtp.

OK, I have an idea for another plugin. Sorry Pin! We can have a plugin that broadcasts data. It would be like the XCP broadcast function, but we have the data signed so it can be trusted as to the source. The plugin is validated as untampered. The source code will show where and how it is getting its data. This way we can create trusted data feeds for various price data. That in turn can be used to implement betting, options, CFD, etc. This is pretty significant!

James

http://www.digitalcatallaxy.com/report2015.html
100+ page annual report for SuperNET
pinarello
Full Member
***
Offline Offline

Activity: 266
Merit: 100


NXT is the future


View Profile
February 08, 2014, 08:22:12 AM
 #31094

I do not feel confident with the idea of "plugins" and "turing compete" scripting implementation before more basic stuff is complete. We need  thorough  code rechecking from many more independent sources , finishing already announced projects, and other basic stuff.  

I am surprised how little reaction there is to the fact that a guy who discovered a fatal flaw with Nxt code two days ago could have stolen 40 million from bter Nxt account
 https://nextcoin.org/index.php/topic,3884.0.html

How many more flaws exist? We don't know, but yet we want to implement "plugins" Wow.

Seriously. Forget plugins and send more resources on code auditing and finishing the announced features.


+1 for some kind of odd reason we always drift away from the initial plan and features, they are still NOT implemented.

We cant even walk and already try to run.

finish what is promissed and started.
What features are not being worked on? What do you mean by walking?


I am eager to see NXT first implementation in a working client (a side from messages and aliasses)

tman10
Newbie
*
Offline Offline

Activity: 21
Merit: 0


View Profile
February 08, 2014, 08:22:20 AM
 #31095

Has anybody seen NxtChg lately??...Thanks
pinarello
Full Member
***
Offline Offline

Activity: 266
Merit: 100


NXT is the future


View Profile
February 08, 2014, 08:23:17 AM
 #31096

Has anybody seen NxtChg lately??...Thanks

No, please read his last posts.

salsacz
Hero Member
*****
Offline Offline

Activity: 490
Merit: 500


View Profile
February 08, 2014, 08:27:27 AM
 #31097

NxtChg left us, withdraw from the exchange. He had another of his emotional breakdowns caused by his Obsessive–compulsive disorder and left, althought we asked him to stay

a) I am a programmer with OCD, most of you here know what I mean: we obsess about tiniest details and double, triple check everything, especially something as important as sending a big chunk of money.

Nxt tips: NXT-R67P-6BZ2-XWAK-8RHZR | Nxt forum | Nxt Academy | Donate for Nxt at the Universities // BTCD: RVMLrnxYYy7uy8YZo9FcGfXbk1ZMnNifdg
jl777
Legendary
*
Offline Offline

Activity: 1176
Merit: 1089


View Profile WWW
February 08, 2014, 08:27:55 AM
 #31098

I don't see why you would want a Nxt VM script to "output an email" (or do anything else outside of the blockchain for that matter) - you do understand that whether such email was actually even really sent simply *cannot be proven* (as you are dealing with SMTP rather than a blockchain)?

Also SMTP is going to require accounts that need to be signed into and you don't want to end up with people effectively running "relay servers" or they'll end up on email blacklists.

Wouldn't it make more sense for such things to be services instead?

About walking vs. running - you are getting far too excited jl777 - can you just take something to slow down to a pace that we can keep up with (by the time we've tried to discuss one of your ideas you typically have posted 3 others).

NXTsmtp is just for proof of concept that incorporates something everybody is familiar with. I want to verify the peer verifiability of hardcoded NXTplugin followed by external NXTplugin. I am not worried about NXTsmtp for anything other than proving that NXTplugins work and are peer verified. At first I couldnt understand how on earth a DAC could be implemented. When I started thinking about email plugin, it became not as hard.

If the source to SMTP server is reviewed that it does send the email (backed up with test results) and as part of the sending process it adds a hash value of email to the blockchain. I think that allows peer verification, please explain where I am wrong. I am certain I have made mistakes somewhere and I am still coming up to speed with this whole decentralized blockchain approach.

The problem is that I see all of the things I am posting about as connected. Like the elephant described by different people. All sounds very different, but it is all the same elephant. If I described the elephant in its entirety, it wouldnt fit in posts. I feel a great sense of urgency due to competitive pressures.

James

P.S. I usually dont post when I am sleeping or flying Smiley

http://www.digitalcatallaxy.com/report2015.html
100+ page annual report for SuperNET
jl777
Legendary
*
Offline Offline

Activity: 1176
Merit: 1089


View Profile WWW
February 08, 2014, 08:29:11 AM
 #31099

I do not feel confident with the idea of "plugins" and "turing compete" scripting implementation before more basic stuff is complete. We need  thorough  code rechecking from many more independent sources , finishing already announced projects, and other basic stuff.  

I am surprised how little reaction there is to the fact that a guy who discovered a fatal flaw with Nxt code two days ago could have stolen 40 million from bter Nxt account
 https://nextcoin.org/index.php/topic,3884.0.html

How many more flaws exist? We don't know, but yet we want to implement "plugins" Wow.

Seriously. Forget plugins and send more resources on code auditing and finishing the announced features.


+1 for some kind of odd reason we always drift away from the initial plan and features, they are still NOT implemented.

We cant even walk and already try to run.

finish what is promissed and started.
What features are not being worked on? What do you mean by walking?


I am eager to see NXT first implementation in a working client (a side from messages and aliasses)
Who doesnt? How do you suggest I help nexern out?

http://www.digitalcatallaxy.com/report2015.html
100+ page annual report for SuperNET
tman10
Newbie
*
Offline Offline

Activity: 21
Merit: 0


View Profile
February 08, 2014, 08:30:10 AM
 #31100

Has anybody seen NxtChg lately??...Thanks

No, please read his last posts.

Where might I find his last post?...Thanks
Pages: « 1 ... 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 [1555] 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 ... 2567 »
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!