NXT :: descendant of Bitcoin - Updated Information

[NxtMinnow]

On "What happens to the static key if you lose your Yubikey?"  You are only storing one part of your NXT Passphrase in the pseudo 2 factor authentication use case described.  If lost, it cannot be used to gain access to your Nxt account without ALSO knowing the first part of the Nxt Passphrase (which user would memorize)

On "How are you going to get your money out of Nxt account in event of lost Yubikey?  Option 1) Make a backup Yubikey and store it in a safe deposit box or other secure location for the contingency of losing your main Yubikey.  Option 2) Create a local Keepass database with your Yubikey static key backed up inside the encrypted LOCAL Keepass database.

No, Nxt Passphrase backup is not on Yubikey server.  The only involvement of the Yubikey server in the use case I described is to register the Yubikeys and potentially Revoke them if they are lost.

I realize that Lastpass signs and encrypts locally before transmitting encrypted data.  STILL, some security paranoid users may not feel comfortable with any option but LOCAL backup of private keys.

Yubikey offers a Key Registration service that allows multiple keys to be remotely wiped at https://admin.yubico.com/yubirevoke/login.php

A Yubikey costs $30 and is worth far more than that to protect valuable digital assets.

Lastpass uses a third party server verification and for the most security paranoid this is not acceptable.

Wesleyh, can you code your login so that users can enter their OWN STRONG password so that the described Yubikey pseudo 2 factor authentication method can be used?

No, I meant what happens to the static password if you lose your Yubikey? How are you going to get your money out of Nxt account? That static key must be saved somewhere (as a back up). Wiping key doesn't help you to login to Nxt. So there must be a backup somewhere. Where is that backup? On Yubikey server?

As for Lastpass, encryption is done locally on the computer. Only encrypted blob is sent to Lastpass server.

[Anon136]

Final draft. What do you guys think? I'm pretty sure this is what the bars are going to look like.

[NxtMinnow]

Anon136, that is too cool!


Wesleyh, yes that is the manual Passphrase entry I was looking for .

Any way it can show the user the bits of entropy and a Very Strong, Strong, Weak, Very Weak rating after the Passphrase is typed in but before the user creates the account with that Passphrase?

[l8orre]

Final draft. What do you guys think? I'm pretty sure this is what the bars are going to look like.
 

+1

[salsacz]

Final draft. What do you guys think?

that "chao" is a nonsense, at least in latin it must be "chaos"

[Daedelus]

Is the Testnet down?

I am using Wesley's client in Firefox in Windoze.

I see the funds I have and I have created an asset that shows up on the dashboard.

But when I click on the asset exchange and it says "Please select an asset on the left sidebar" nothing appears. The Asset exchange title still appears to be loading (going ... ... ... ... etc) but no change. I see the asset I issued in "My assets" too.

Any help?

Thanks

[Eadeqa]

On "What happens to the static key if you lose your Yubikey?"  You are only storing one part of your NXT Passphrase in the pseudo 2 factor authentication use case described.  If lost, it cannot be used to gain access to your Nxt account without ALSO knowing the first part of the Nxt Passphrase (which user would memorize)

So you have to type the part that you memorized every time and rest is filled by Yubikey?

I realize that Lastpass signs and encrypts locally before transmitting encrypted data.  STILL, some security paranoid users may not feel comfortable with any option but LOCAL backup of private keys.

To each their own. I like having encrypted version backed up online, as I know I can access it even if everything in my house is stolen.

As long as the master password is strong, I am not bothered with online back ups. I like it even better.

[wesleyh]

Anon136, that is too cool!


Wesleyh, yes that is the manual Passphrase entry I was looking for .

Any way it can show the user the bits of entropy and a Very Strong, Strong, Weak, Very Weak rating after the Passphrase is typed in but before the user creates the account with that Passphrase?

Hmm, dunno, it doesn't allow you to create a password without upper case and lowercase, at least 1 number and at least 1 special character and 35 character length. Isn't that good enough?

[Daedelus]

Final draft. What do you guys think? I'm pretty sure this is what the bars are going to look like.

Looking good, what format is that in?

I always liked "Sic Parvis Magna" - Greatness from small beginnings.

It isn't arrogant and will get better over time as Nxt's greatness improves

[Anon136]

Final draft. What do you guys think?

that "chao" is a nonsense, at least in latin it must be "chaos"

my research indicates that this is not the case. this is a well established motto used by high ranking free masons for ages (no connection i just liked the motto so i ganked it) I highly doubt they would have translated incorrectly and just not noticed for 200 years.

http://translate.google.com/#la/en/chao

http://www.masonicdictionary.com/ordoabchao.html

[Anon136]

Final draft. What do you guys think? I'm pretty sure this is what the bars are going to look like.

Sweet!  

Maybe it's just me...  but I always preferred the dot...  .999     

probably not just you but i personally don't share that preference

[wesleyh]

Is the Testnet down?

I am using Wesley's client in Firefox in Windoze.

I see the funds I have and I have created an asset that shows up on the dashboard.

But when I click on the asset exchange and it says "Please select an asset on the left sidebar" nothing appears. The Asset exchange title still appears to be loading (going ... ... ... ... etc) but no change. I see the asset I issued in "My assets" too.

Any help?

Thanks

Seems to be something wrong with that testnet server, I will switch to another one soon. It's a slow server too at the moment.

[xyzzyx]

Final draft. What do you guys think? I'm pretty sure this is what the bars are going to look like.
http://s12.postimg.org/jhib2gpjx/bar01.jpg
http://s22.postimg.org/exbnhi7g1/bar02.jpg
http://s14.postimg.org/pl5cl9n81/bar03.jpg

Nice. 

I hope you know you're going to be swamped with orders once you go live. 

Also, if you want to get an idea of what the actual physical object will look/feel like, you can upload your design and print out a 1:1 size metal object at Shapeways:

http://www.shapeways.com/create

[Anon136]

Final draft. What do you guys think? I'm pretty sure this is what the bars are going to look like.
http://s12.postimg.org/jhib2gpjx/bar01.jpg
http://s22.postimg.org/exbnhi7g1/bar02.jpg
http://s14.postimg.org/pl5cl9n81/bar03.jpg

Nice. 

I hope you know you're going to be swamped with orders once you go live. 

Also, if you want to get an idea of what the actual physical object will look/feel like, you can upload your design and print out a 1:1 size metal object at Shapeways:

http://www.shapeways.com/create

if someone wants to pay for it definitely but not me cuz this project is going to cost a small fortune as is

[brooklynbtc]

2222 the mooon

edit missed the boat rocket

Anon, great bars. Are you planning on an IPO or just selling assets?

[wesleyh]

New version online: http://nxtra.org/nxt-client with the automated password generator.

On first load you will see this:



After you log in for the first time, and log out again, you will no longer see that but simply the way it was before. With the login box focused.

Please also check out http://nxtra.org/nxt-client/js/passphrasegenerator.js and see if I made any mistakes. I use crypto.getRandomValues() if it's available.

If not, I rely on mousemovement to get random values for seed. I usee http://nxtra.org/nxt-client/js/seedrandom.js for this.

Based on: https://github.com/davidbau/seedrandom ,  https://github.com/michenriksen/diceware and https://github.com/ggozad/mnemonic.js

Donations welcome: 8189784314684138350

Let me know if you find any errors before I commit it to the bitbucket repository.

[Tobo]

There is an option to not use the auto-generated pass phrase, is this not what you want?

+1. One suggestion: can you always use "secret phrase" in the wording, instead of one time using "secret phrase" and another time using "password"? imho.

[Anon136]

2222 the mooon

edit missed the boat rocket

Anon, great bars. Are you planning on an IPO or just selling assets?

no ipo for now. im going to save what ever social capital i have in that respect for the event that you guys love my product and i cant produce enough to match demand at a reasonable price. if that should happen then i will use an ipo to raise the funds to start a mint.

[wesleyh]

There is an option to not use the auto-generated pass phrase, is this not what you want?

+1. One suggestion: can you always use "secret phrase" in the wording, instead of one time using "secret phrase" and another time using "password"? imho.

Done.

[Eadeqa]

There is an option to not use the auto-generated pass phrase, is this not what you want?

+1. One suggestion: can you always use "secret phrase" in the wording, instead of one time using "secret phrase" and another time using "password"? imho.

Yeah, replace both with "passphrase"