NXT :: descendant of Bitcoin - Updated Information

[^[GS]^]

NXTio now in Russian!!

http://www.nxtio.org/?lang=ru

Thank you very much to Xoralex for his translation!
NXT Donations: 18027583818211494654

[1715165485]

1715165485

[1715165485]

1715165485

[1715165485]

1715165485

[1715165485]

1715165485

[1715165485]

1715165485

[wesleyh]

Is offspring still using the old nxt API or something (the one that will be removed) - since it shows blacklisted peers and other such things, which I don't think is included in the new, official API. Am I wrong?

[MyZhre]

Need some textNxt, someone please send me a few: 11655792499041825006

[mezzovide]

Need some textNxt, someone please send me a few: 11655792499041825006

10k sent.

[BloodyRookie]

If someone wants to write up an overview of what exactly we need for the crypto auditing, I can send it to a few Crypto experts I've been in contact with.  Just PM me.

Please, CfB, help with that.

Edit: what kind of 'experts'?

I've been in contact with several people, including Matt Green (zerocoin).  I was originally referred to Matt by Susan Waters (http://cs.jhu.edu/~susan/) who was his professor, and Susan also recommended Lisa Yin in the same email.  I've had contact with Lisa and she sounds open to an audit.  Lisa has a PHD from MIT in Crypto.  I have contact with a few other academics as well.

Right, Lisa. I remember (https://bitcointalk.org/index.php?topic=345619.msg4989534#msg4989534). Well, what do you think, CfB?

Just do it. We need someone to check that Curve25519 and Crypto have no bugs.

You should email him (or her directly)  the source for 0.73

Her email is listed at http://people.csail.mit.edu/yiqun/

She already wrote in that email:

I am wondering what you are looking for in the code review. If it is mainly the correctness of the implementation, then I would take a pass. I feel that what would be most helpful for Nxt is to review how the above crypto algorithms are utilized within the Nxt currency system to achieve the intended security goals. "

If I understand it correctly, that means she is not willing to check any code. Checking the principal algorithm is not enough. Usually the problems come with the implementation of the algorithm.

[LiQio]

What about signing? Is crypto = using the curve function? Please specify.

Yes, Crypto class uses Curve25519 class to do key agreement and message signing.

@community
Did anyone try to contact Tanja Lange for the crypto/curve25519 review already?

[Eadeqa]

If someone wants to write up an overview of what exactly we need for the crypto auditing, I can send it to a few Crypto experts I've been in contact with.  Just PM me.

Please, CfB, help with that.

Edit: what kind of 'experts'?

I've been in contact with several people, including Matt Green (zerocoin).  I was originally referred to Matt by Susan Waters (http://cs.jhu.edu/~susan/) who was his professor, and Susan also recommended Lisa Yin in the same email.  I've had contact with Lisa and she sounds open to an audit.  Lisa has a PHD from MIT in Crypto.  I have contact with a few other academics as well.

Right, Lisa. I remember (https://bitcointalk.org/index.php?topic=345619.msg4989534#msg4989534). Well, what do you think, CfB?

Just do it. We need someone to check that Curve25519 and Crypto have no bugs.

You should email him (or her directly)  the source for 0.73

Her email is listed at http://people.csail.mit.edu/yiqun/

She already wrote in that email:

I am wondering what you are looking for in the code review. If it is mainly the correctness of the implementation, then I would take a pass. I feel that what would be most helpful for Nxt is to review how the above crypto algorithms are utilized within the Nxt currency system to achieve the intended security goals. "

If I understand it correctly, that means she is not willing to check any code. Checking the principal algorithm is not enough. Usually the problems come with the implementation of the algorithm.

I agree. She should be sent the full source code of 0.73

[Come-from-Beyond]

I agree. She should be sent the full source code of 0.73

What for? She already said that wouldn't check the implementation.

[bitcoinpaul]

So the search goes on.

edit: What's up with Susan?

[Passion_ltc]

nxt.org news:
the domain name nxt.org have been auctioned with 13537 USD recently on Sedo platform .
http://news.domain.cn/html/yumingzixun/2014/0207/31292.html

bougt by Nxt community?

ofc.

[pandaisftw]

I agree. She should be sent the full source code of 0.73

What for? She already said that wouldn't check the implementation.

Didn't we want her to check the algos? Plus, send her bloodyrookie's fix, and see how that compares with the original.

[Come-from-Beyond]

I agree. She should be sent the full source code of 0.73

What for? She already said that wouldn't check the implementation.

Didn't we want her to check the algos? Plus, send her bloodyrookie's fix, and see how that compares with the original.

Let's complete the 1st step - audit the implementation and then move to a higher level.

[Eadeqa]

I agree. She should be sent the full source code of 0.73

What for? She already said that wouldn't check the implementation.

Didn't we want her to check the algos? Plus, send her bloodyrookie's fix, and see how that compares with the original.

Let's complete the 1st step - audit the implementation and then move to a higher level.

Is that 10 BTC offer still open?

[Come-from-Beyond]

I've just read http://www.reddit.com/r/NXT/comments/1xnxjb/transaction_malleability_hahahaha_right/ and would like to tell again, that we shouldn't rely on transaction ids. Even canonical form of a signature doesn't fix the issue coz the owner of a transaction can generate billions of canonical signatures for the same transaction.

[Come-from-Beyond]

Is that 10 BTC offer still open?

I think it is. I don't control the funds though, u should ask the community. There r 3 keepers of the unclaimed coins atm.

[BaiMangal]

PROPOSAL FOR AUTOMATED GATEWAY BACKED BY NXT COMMUNITY


I wanted to get the community's feedback on having a community backed gateway for the popular cryptos, eg. BTC, DOGE, LTC, etc. Long term, I want to have fully automated DAC's, but rather than wait for the NXT VM to be completed, I want to have a way for everyone to be able to trade cryptos in a decentralized way with a minimal amount of trust required.

What I am envisioning is the community will create automated gateway code that will be open sourced and it would be run on a hardened community server. If we cant find a volunteer to code the automated gateway, then I would be willing to hire for NXT someone to write the code. I have the design pretty much worked out, even using the existing AE restrictions.

deposit BTC -> gateway -> get BTC Asset
<BTC Asset is traded via AE>
withdraw BTC Asset -> gateway -> get BTC in wallet

The above is a simplified flow and you can replace BTC with DOGE or whatever we end up supporting. While the gateway would still be a single point of failure, it would be backed by the NXT community. Trusted members would manage the hardened server(s) and I think it makes sense to have a bit of NDIC (NXT deposit insurance by community) so in case of a loss caused by failure of gateway server. I am thinking that a 100000 NXT allocation against exploding data center will give additional peace of mind for people using the gateway. No protection if your computer gets hacked, the insurance is against the gateway server failures.

Assuming the community approves and I can get a volunteer to do the coding and a volunteer to get a hardened server (or maybe add this to an existing NXT node?) we can get this in place very quickly. As long as the gateway code runs, the  deposits and withdrawals will be processed automatically. Once inside the AE, everybody can trade it knowing it can be automatically withdrawn to the real thing at any time.

This means that within NXT there will be a decentralized exchange for all the cryptos, possibly within weeks!

If the client devs will also add a custom crypto exchange to the clients, NXT will effectively have this built in for all users. I am pretty sure DOGE can't do this!

James

Edit: Since community is paying for this, there will be no costs charged other than bare minimum protocol requires.

We suggested something like your proposal here https://bitcointalk.org/index.php?topic=453935.msg5079581#msg5079581
Our main goal is to have FIAT(EUR) - NXT gateway which probably will be done in the future. However to start the gateway we thought to have only BTC/LTC and now maybe Dodge (not added yet).
The website is not fully automated because we wanted to make sure there are minimum security risks and when its manual risks are much lower.
Our suggestion to the community is to run this simple gateway with bounties which will keep us going. The site is under proper hosting etc.. We will be in position to process assets within 12h.
I am unsure if I and Isisldur23 are trusted enough but we are willing to try this gateway.
The link to the site www.quicknxt.com

We have some more ideas about Assets which will be issued after AE is working properly and those assets hopefully will bring benefits to all of us.

[salsacz]

nxt.org news:
the domain name nxt.org have been auctioned with 1,3537 USD recently on Sedo platform .
http://news.domain.cn/html/yumingzixun/2014/0207/31292.html

bougt by Nxt community?

sure

[bitcoinpaul]

Well, a really good cryptographer should get 10 BTC for analyzing the implementation of curve&sign in our code, yes. And some extra BTC for auditing the crypto, too. But right now, we only have 10. CIYAM, you wanted to throw in another 5BTC for what exactly?

[abctc]

we only have 10.

- no, we haven't. That 10BTC were paid to DoctorEvil by CfB.

[Come-from-Beyond]

Well, a really good cryptographer should get 10 BTC for analyzing the implementation of curve&sign in our code, yes. And some extra BTC for auditing the crypto, too. But right now, we only have 10. CIYAM, you wanted to throw in another 5BTC for what exactly?

Audit of how we use the implementation is too much work, luckily we could do it by ourselves. DoctorEvil already did part of the work.