Bitcoin Forum
November 17, 2019, 06:06:40 PM *
News: 10th anniversary art contest
 
   Home   Help Search Login Register More  
Pages: « 1 ... 1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 [1774] 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 ... 2565 »
  Print  
Author Topic: NXT :: descendant of Bitcoin - Updated Information  (Read 2756303 times)
abuelau
Hero Member
*****
Offline Offline

Activity: 751
Merit: 500


www.coinschedule.com


View Profile
February 19, 2014, 05:23:25 PM
 #35461

In short:

1) Nxt Account Private Keys are 50 chars randomly generated by cryptographic standard algorithm
2) Keys are AES 256 encrypted twice. One time using a site-wide private AES key and one time using the user's salted password.
3) Only SSL is allowed through the site

If an attacker ever gets on hold of my database, they won't be able to decrypt the account private keys without having both the user password AND the site-wide AES private key.

No system is 100% safe, we all know this. But I think this wallet is much safer than simply using brain wallets (as it is today). Humans are not very good in creating and then storing truly random passwords.

Sounds good.

What is the cryptographic standard algorithm for creating the passwords?

Linux's urandom whch uses environmental noise from drivers to generate truly random numbers.

Know what's happening in cryptoworld: www.coinschedule.com
The Bitcoin Forum is turning 10 years old! Join the community in sharing and exploring the notable posts made over the years.
1574014000
Hero Member
*
Offline Offline

Posts: 1574014000

View Profile Personal Message (Offline)

Ignore
1574014000
Reply with quote  #2

1574014000
Report to moderator
martismartis
Legendary
*
Offline Offline

Activity: 1162
Merit: 1005


View Profile
February 19, 2014, 05:24:31 PM
 #35462

Just to inform, 0.7.6 runs smoothly on Android TV stick public node.

For a while Smiley
lophie
Hero Member
*****
Offline Offline

Activity: 924
Merit: 1000

Unlimited Free Crypto


View Profile
February 19, 2014, 05:25:33 PM
 #35463

Guys I have been thinking (<- typical  Roll Eyes).

If I am mining with alot of nxt and I wasn to send a transaction but I am okay if it takes the whole day to include, How about I DONT broadcast my transactions and just try to generate a block with my transactions + others. So whenever I find a block I will actually be sending NXT for free.

Is there any major flaws in this logic, I mean can anyone here point them out because sure there are plenty Tongue.

- Lophie

Will take me a while to climb up again, But where is a will, there is a way...
lophie
Hero Member
*****
Offline Offline

Activity: 924
Merit: 1000

Unlimited Free Crypto


View Profile
February 19, 2014, 05:26:15 PM
 #35464

Just to inform, 0.7.6 runs smoothly on Android TV stick public node.

For a while Smiley

Picuntu? Please share hardware and software information, I am VERY interested... I bricked a stick for this...

Will take me a while to climb up again, But where is a will, there is a way...
punkrock
Hero Member
*****
Offline Offline

Activity: 808
Merit: 1010



View Profile
February 19, 2014, 05:29:56 PM
 #35465

Unregistered users = 3 votes per hour!

>>>>>>>>>>>>>>> PLEASE VOTE! <<<<<<<<<<<<<<<

Registered users = 6 votes per hour!


Please quote me, share on Twitter, Facebook, Reddit... thanks!


BUY VOTES FOR NXT!

1 VOTE = 0,00005 BTC
1 BTC = 20,000 VOTES FOR NXT

Website: https://www.mintpal.com/voting
How to? Send any BTC to 1KB2AWLpKByBifkyQLJERhZi4jVDGWMA4n

Each 0.00005000 BTC received will count for 1 vote. All payment votes will be publicly visible, as you can see by clicking here.

wesleyh
Sr. Member
****
Offline Offline

Activity: 308
Merit: 250


View Profile
February 19, 2014, 05:31:13 PM
 #35466

Unregistered users = 3 votes per hour!

>>>>>>>>>>>>>>> PLEASE VOTE! <<<<<<<<<<<<<<<

Registered users = 6 votes per hour!


Please quote me, share on Twitter, Facebook, Reddit... thanks!


BUY VOTES FOR NXT!

1 VOTE = 0,00005 BTC
1 BTC = 20,000 VOTES FOR NXT

Website: https://www.mintpal.com/voting
How to? Send any BTC to 1KB2AWLpKByBifkyQLJERhZi4jVDGWMA4n

Each 0.00005000 BTC received will count for 1 vote. All payment votes will be publicly visible, as you can see by clicking here.


You should change the message to say that you can actually click 3 times in a row. There appears to be no time limit in between.
ChuckOne
Sr. Member
****
Offline Offline

Activity: 364
Merit: 250

☕ NXT-4BTE-8Y4K-CDS2-6TB82


View Profile
February 19, 2014, 05:31:17 PM
 #35467

In short:

1) Nxt Account Private Keys are 50 chars randomly generated by cryptographic standard algorithm
2) Keys are AES 256 encrypted twice. One time using a site-wide private AES key and one time using the user's salted password.
3) Only SSL is allowed through the site

If an attacker ever gets on hold of my database, they won't be able to decrypt the account private keys without having both the user password AND the site-wide AES private key.

No system is 100% safe, we all know this. But I think this wallet is much safer than simply using brain wallets (as it is today). Humans are not very good in creating and then storing truly random passwords.

Sounds good.

What is the cryptographic standard algorithm for creating the passwords?

Linux's urandom whch uses environmental noise from drivers to generate truly random numbers.

Thank you. Smiley

This should be the certificate fingerprints:

sha-256: 15 0B D5 E2 89 C9 73 4A D5 89 29 07 10 28 22 F4 4B 8F 9B 72 90 B9 58 AF 47 73 E7 98 7B BD 0C 79
sha-1: 88 5F 57 E9 93 51 F9 48 96 9F 1A 31 A6 B9 93 C9 8E 28 3E A0
issued on 2/2/14
expires on 2/3/15

I think that should be enough data for everyone to decide whether they trust you and the security of the server.

Am I right that the physical device is in the cloud?
opticalcarrier
Full Member
***
Offline Offline

Activity: 238
Merit: 100



View Profile
February 19, 2014, 05:31:33 PM
 #35468

Best case is to wait for a javascript client that signs outbound transactions and polls public nodes for inbound transactions.  We REALLY need this, if this comes out....price will skyrocket.

Umm isn't that what my client does ? http://nxtra.org/nxt-client (ok, it doesn't yet sign outbound transactions, but it's on my todo list :-))

right, what I mean is the ability to have a wallet where your passphrase is kept completely local.

a system with no trust.
wesleyh
Sr. Member
****
Offline Offline

Activity: 308
Merit: 250


View Profile
February 19, 2014, 05:32:27 PM
 #35469

Best case is to wait for a javascript client that signs outbound transactions and polls public nodes for inbound transactions.  We REALLY need this, if this comes out....price will skyrocket.

Umm isn't that what my client does ? http://nxtra.org/nxt-client (ok, it doesn't yet sign outbound transactions, but it's on my todo list :-))

right, what I mean is the ability to have a wallet where your passphrase is kept completely local.

a system with no trust.

Yes well that's what my wallet will do (it will be downloadable, not just on the web)
ChuckOne
Sr. Member
****
Offline Offline

Activity: 364
Merit: 250

☕ NXT-4BTE-8Y4K-CDS2-6TB82


View Profile
February 19, 2014, 05:33:06 PM
 #35470

Guys I have been thinking (<- typical  Roll Eyes).

If I am mining with alot of nxt and I wasn to send a transaction but I am okay if it takes the whole day to include, How about I DONT broadcast my transactions and just try to generate a block with my transactions + others. So whenever I find a block I will actually be sending NXT for free.

Is there any major flaws in this logic, I mean can anyone here point them out because sure there are plenty Tongue.

- Lophie

When TF is extended to group forging then you might loose the race and therefore your fees.
msin
Legendary
*
Offline Offline

Activity: 1218
Merit: 1001


View Profile
February 19, 2014, 05:33:43 PM
 #35471


Don't trust online wallets.


THIS THIS THIS.  you can never fully trust online wallets!  EVEN IF they have SSL certs!  By trusting an online wallet you are trusting anyone who has access to the server.  Do you know how many people that is?  If its a VPS its even worse!

Best case is to wait for a javascript client that signs outbound transactions and polls public nodes for inbound transactions.  We REALLY need this, if this comes out....price will skyrocket.

Umm isn't that what my client does ? http://nxtra.org/nxt-client (ok, it doesn't yet sign outbound transactions, but it's on my todo list :-))

Great. Smiley We would love to see it.

ChuckOne, hope you don't mind, but I added your name for Nxt Technical Committee for unreleased funds.
lophie
Hero Member
*****
Offline Offline

Activity: 924
Merit: 1000

Unlimited Free Crypto


View Profile
February 19, 2014, 05:34:35 PM
 #35472

Guys I have been thinking (<- typical  Roll Eyes).

If I am mining with alot of nxt and I wasn to send a transaction but I am okay if it takes the whole day to include, How about I DONT broadcast my transactions and just try to generate a block with my transactions + others. So whenever I find a block I will actually be sending NXT for free.

Is there any major flaws in this logic, I mean can anyone here point them out because sure there are plenty Tongue.

- Lophie

When TF is extended to group forging then you might loose the race and therefore your fees.

How?  Huh Huh I will not even broadcast them!

Will take me a while to climb up again, But where is a will, there is a way...
msin
Legendary
*
Offline Offline

Activity: 1218
Merit: 1001


View Profile
February 19, 2014, 05:34:47 PM
 #35473

Best case is to wait for a javascript client that signs outbound transactions and polls public nodes for inbound transactions.  We REALLY need this, if this comes out....price will skyrocket.

Umm isn't that what my client does ? http://nxtra.org/nxt-client (ok, it doesn't yet sign outbound transactions, but it's on my todo list :-))

right, what I mean is the ability to have a wallet where your passphrase is kept completely local.

a system with no trust.

Yes well that's what my wallet will do (it will be downloadable, not just on the web)

Will it be open source?
abuelau
Hero Member
*****
Offline Offline

Activity: 751
Merit: 500


www.coinschedule.com


View Profile
February 19, 2014, 05:35:03 PM
 #35474

In short:

1) Nxt Account Private Keys are 50 chars randomly generated by cryptographic standard algorithm
2) Keys are AES 256 encrypted twice. One time using a site-wide private AES key and one time using the user's salted password.
3) Only SSL is allowed through the site

If an attacker ever gets on hold of my database, they won't be able to decrypt the account private keys without having both the user password AND the site-wide AES private key.

No system is 100% safe, we all know this. But I think this wallet is much safer than simply using brain wallets (as it is today). Humans are not very good in creating and then storing truly random passwords.

Sounds good.

What is the cryptographic standard algorithm for creating the passwords?

Linux's urandom whch uses environmental noise from drivers to generate truly random numbers.

Thank you. Smiley

This should be the certificate fingerprints:

sha-256: 15 0B D5 E2 89 C9 73 4A D5 89 29 07 10 28 22 F4 4B 8F 9B 72 90 B9 58 AF 47 73 E7 98 7B BD 0C 79
sha-1: 88 5F 57 E9 93 51 F9 48 96 9F 1A 31 A6 B9 93 C9 8E 28 3E A0
issued on 2/2/14
expires on 2/3/15

I think that should be enough data for everyone to decide whether they trust you and the security of the server.

Am I right that the physical device is in the cloud?

Smiley yes, thanks.

What do you mean by "device is in the cloud"?

Know what's happening in cryptoworld: www.coinschedule.com
martismartis
Legendary
*
Offline Offline

Activity: 1162
Merit: 1005


View Profile
February 19, 2014, 05:35:16 PM
 #35475

Just to inform, 0.7.6 runs smoothly on Android TV stick public node.

For a while Smiley

Picuntu? Please share hardware and software information, I am VERY interested... I bricked a stick for this...

Ubuntu 13.10 in Android, TV stick with RK3066 chip
wesleyh
Sr. Member
****
Offline Offline

Activity: 308
Merit: 250


View Profile
February 19, 2014, 05:35:42 PM
 #35476

Best case is to wait for a javascript client that signs outbound transactions and polls public nodes for inbound transactions.  We REALLY need this, if this comes out....price will skyrocket.

Umm isn't that what my client does ? http://nxtra.org/nxt-client (ok, it doesn't yet sign outbound transactions, but it's on my todo list :-))

right, what I mean is the ability to have a wallet where your passphrase is kept completely local.

a system with no trust.

Yes well that's what my wallet will do (it will be downloadable, not just on the web)

Will it be open source?

Of course.
ChuckOne
Sr. Member
****
Offline Offline

Activity: 364
Merit: 250

☕ NXT-4BTE-8Y4K-CDS2-6TB82


View Profile
February 19, 2014, 05:35:45 PM
 #35477

ChuckOne, hope you don't mind, but I added your name for Nxt Technical Committee for unreleased funds.

I do not mind. Smiley

I am not sure how this committee will work, though. Let us see.
pinarello
Full Member
***
Offline Offline

Activity: 266
Merit: 100


NXT is the future


View Profile
February 19, 2014, 05:36:15 PM
 #35478


8 projects waiting for approval in infrastructure committee:

https://forums.nxtcrypto.org/viewtopic.php?f=54&t=806&p=3877#p3877

1 projects waiting for approval in marketing fund committee (salsazc please look for double entry with your administered fund)

https://forums.nxtcrypto.org/viewtopic.php?f=54&t=807

please go discuss and vote.

thank you

committee members:

if no objection these project will be granted a bounty, please have a look.

pinarello
Full Member
***
Offline Offline

Activity: 266
Merit: 100


NXT is the future


View Profile
February 19, 2014, 05:37:04 PM
 #35479

ChuckOne, hope you don't mind, but I added your name for Nxt Technical Committee for unreleased funds.

I do not mind. Smiley

I am not sure how this committee will work, though. Let us see.

why shouldnt it work?

wesleyh
Sr. Member
****
Offline Offline

Activity: 308
Merit: 250


View Profile
February 19, 2014, 05:38:02 PM
 #35480

ChuckOne, hope you don't mind, but I added your name for Nxt Technical Committee for unreleased funds.

I do not mind. Smiley

I am not sure how this committee will work, though. Let us see.

why shouldnt it work?

Would be better with 3 subforums, and 1 thread per suggested project. Too much in 1 thread now (like here).
Pages: « 1 ... 1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 [1774] 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 ... 2565 »
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!