Emule
|
 |
March 23, 2014, 09:00:07 PM |
|
Cut...
What the buggery....?
Elitist ?
Just because we're trying to build something with a little bit more frigging ambition than mine, pump, dump, repeat ?
It's been said before, but NXT is for everyone. If L+F (or anyone else) wants to concentrate on NXT as a first gen crypto, then he's got all the room in the world to do so. 2nd gen features do not explicitly exclude all of the simpler first gen stuff. Maybe L+F could set up a first gen workgroup/posse to concentrate on the promotion and use of NXT in the first gen space........?
nxt is for geeks, not for average joe. at least with pump and dump something is happening to the price and even small stakeholders can have some profit. with nxt only early stakeholders founders can profit. There are approximately 187 crypto-currencies on coinmarketcap.com right now, most of these can be pumped and dumped, and I'm sure that absolutely none of them have any sort of early stakeholder issue. So why are u hanging around here whining like a little bitch, Elmo? cos i feel so loved here 
|
|
|
|
EvilDave
|
 |
March 23, 2014, 09:00:52 PM |
|
aww...what a sweety Elmo...*tickles behind ears*
|
|
|
|
Eadeqa
|
 |
March 23, 2014, 09:01:45 PM |
|
Can I summarise the SSL situation as: No SSL on nodes. Not needed. SSL on forums/wiki may be useful, if only as security theater. Wesleys client must have SSL in order to function securely. http://nxtra.org/nxt-client/Correct me if i'm wrong. My client doesn't need SSL to function securely (No passwords are sent to the server). Jean-luc talks about privacy. Not sure what he means by that though. However if you want to forge, the API requires that you send your password so that does needs SSL. SSL is needed to ensure that javascript client is not manipulated during transmission
|
|
|
|
martismartis
Legendary
Offline
Activity: 1162
Merit: 1005
|
 |
March 23, 2014, 09:03:43 PM |
|
I see only two accounts are forging on the testnet, one of them is me  Or I am on testnet fork? Check: 94612 3/23/2014 22:59:59 0 0 0 5728597073699734894 0 B 3703071 %
|
|
|
|
|
jl777
Legendary
Offline
Activity: 1176
Merit: 1134
|
 |
March 23, 2014, 09:05:34 PM |
|
Are you saying that to avoid malleability, I need to do a getTransactionbytes, calc SHA256 and compare that with the "hash" of getTransaction and then reject any that doesnt match?
Maybe I just wait for 10 confirmations. Seems like it is too much work otherwise. At 10 confirmations, you said I can trust txid
James
ZERO signature before SHA256. And btw, u still should wait for confirmations to avoid double-spending. Wait, so I HAVE to do all this complicated stuff AND wait for 10 confirmations? It seems like some GUIDs could get lost if all the querying is done via txid. James P.S. Any URL for good SHA256 C source code?
|
|
|
|
Jean-Luc
|
 |
March 23, 2014, 09:09:57 PM |
|
How can I get a trusted list of transaction hashes to know what to lookup?
Scanning each block for all transactions to find asset transfers is the only way I know of to get a list of asset transfers for an asset (or acct). For buy/sells, getTrades gets the list, but again I think it is a list of txids...
To go to an unmalleable hash based tx wouldnt there need to be a method to get all the transactions without ever using txid?
http://localhost:7876/test for a listing of all available APIs and their parameters. getAccountTransactions supports filtering by type and subtype, you can get asset transfer transactions for a given account. But this still returns transaction id's only, not the full transaction json. The API needs improvement. Are you sure you need to use the hash and not just the transaction id? IDs are still guaranteed to be unique and continue to be used as the unique identifier internally. Hashes are used to make sure no new transactions are accepted that are duplicates (in all fields other than the signature) of an existing transaction even though they may have a different id.
|
|
|
|
EvilDave
|
 |
March 23, 2014, 09:15:31 PM |
|
cos i feel so loved here  hey pinarello, alles goed met je ?  Gotverdomme...een stealth-Nederlander!
|
|
|
|
jl777
Legendary
Offline
Activity: 1176
Merit: 1134
|
 |
March 23, 2014, 09:16:20 PM |
|
How can I get a trusted list of transaction hashes to know what to lookup?
Scanning each block for all transactions to find asset transfers is the only way I know of to get a list of asset transfers for an asset (or acct). For buy/sells, getTrades gets the list, but again I think it is a list of txids...
To go to an unmalleable hash based tx wouldnt there need to be a method to get all the transactions without ever using txid?
http://localhost:7876/test for a listing of all available APIs and their parameters. getAccountTransactions supports filtering by type and subtype, you can get asset transfer transactions for a given account. But this still returns transaction id's only, not the full transaction json. The API needs improvement. Are you sure you need to use the hash and not just the transaction id? IDs are still guaranteed to be unique and continue to be used as the unique identifier internally. Hashes are used to make sure no new transactions are accepted that are duplicates (in all fields other than the signature) of an existing transaction even though they may have a different id. Fantastic page! I missed it. I am not sure of anything about this hash stuff. It sounds like I can continue to index everything by txid, but put in a check to make sure that there is no other txid with the same hash?! Sorry if I am asking silly stuff. It sounded like people could fiddle with txid and that I couldnt trust txids to be valid. From what you are saying, it sounds like this is not the case. The attack the hash is addressing is people submitting the same transaction and making it look like a totally new one. So if I make sure that there is no conflict at the transaction hash level, we will know this didnt happen. If there is a collision of the transaction hash, which one is the imposter? I guess safer to invalidate both? James
|
|
|
|
lyynx
|
 |
March 23, 2014, 09:19:08 PM |
|
Just bumping this, we cannot allow disinformation to run unchecked.
|
|
|
|
mr_random
Legendary
Offline
Activity: 1344
Merit: 1001
|
 |
March 23, 2014, 09:20:58 PM |
|
nxt is for geeks, not for average joe.
What do you think Bitcoin started off as? 
|
|
|
|
mikesbmw
|
 |
March 23, 2014, 09:23:09 PM |
|
cos i feel so loved here  hey pinarello, alles goed met je ?  Gotverdomme...een stealth-Nederlander! godverdomme* Hè jakkiebah*  FIFY
|
|
|
|
opticalcarrier
|
 |
March 23, 2014, 09:26:57 PM |
|
Can I summarise the SSL situation as: No SSL on nodes. Not needed. SSL on forums/wiki may be useful, if only as security theater. Wesleys client must have SSL in order to function securely. http://nxtra.org/nxt-client/Correct me if i'm wrong. My client doesn't need SSL to function securely (No passwords are sent to the server). Jean-luc talks about privacy. Not sure what he means by that though. However if you want to forge, the API requires that you send your password so that does needs SSL. SSL is needed to ensure that javascript client is not manipulated during transmission depending on the client and how "light" it is, this may/not be the case (assuming a not-so-light-client does verify the returned bytes before signing). But it always IS the case that its possible to tie an account ID to IP address if not using SSL. But the infrastructure committee deems tor to be the solution. Im about to upgrade all my VPSs to 0.8.12 and will remove SSL. So everyone prepare for the howls of "ahhhh, now we dont have to use the java client, but we have to figure out TOR???" Wesley, can your client be configured to also handle its own DNS, and route DNS requests through tor or does it hand DNS off to the OS? if the latter then this setup will leak DNS even if tor is used.
|
|
|
|
^[GS]^
Member

Offline
Activity: 112
Merit: 10
|
 |
March 23, 2014, 09:28:44 PM |
|
I have a bug report! This is happening, since I can remember. If I unlock an account at the node, the blocks are always kept updated. (0.7.x+) But if I unlock more than one account, the blocks are retarded and need to restart every 24 hours to be updated.  I'll make logs, so they can see if something special happens.  Greetings!
|
|
|
|
Sebastien256
|
 |
March 23, 2014, 09:30:47 PM |
|
I have a bug report! This is happening, since I can remember. If I unlock an account at the node, the blocks are always kept updated. (0.7.x+) But if I unlock more than one account, the blocks are retarded and need to restart every 24 hours to be updated.  I'll make logs, so they can see if something special happens.  Greetings! I'll would create a topic on the new official forum to avoid lost track of your bug. It is messy here and not the place to post bug: http://107.170.117.237/index.php
|
|
|
|
Jean-Luc
|
 |
March 23, 2014, 09:34:36 PM |
|
SSL is needed to ensure that javascript client is not manipulated during transmission
Right. But the user is getting the javascript from nxtra.org, which I presume is under Wesley's control. If so, user has to trust him (and still use SSL so it is not modified in transit), but he already is trusting him that the client he maintains is not malicious. Now, if there is a copy of Wesley's javascript available for example at https://wallet.nxtcrypto.org, which is not under Wesley's control, we are back to where we started, the user has to absolutely trust the owner of nxtcrypto.org, as indeed even the javascript could have been modified.
|
|
|
|
rickyjames
|
 |
March 23, 2014, 09:38:18 PM |
|
OK, everybody, your favorite dictator rickyjames here, flapping my gums wildly once more.We've coming up on 2500 pages on this Bitcointalk thread. What an accomplishment!!! Woo Hoo!!! We have a new forum that is Our Very Own at nxtforum.org . Go ahead, enter it into your address bar of your browser, it works and it's a Simple Machine forum just like this one at Bitcointalk. You'll feel right at home. I've created a thread there called NXT Pub Thread - 2500 More Pages Here Or Bust http://107.170.117.237/index.php/topic,91.0.htmlI propose that 2Kool lock this thread at page 2500 and we do a mass migration over there. It would be nice, neat, poetic closure. And a new beginning. Like this: https://www.youtube.com/watch?v=gUQbLz7AoYcC'mon, everybody. Think Nike. Just do it.
|
|
|
|
Conurtrol
|
 |
March 23, 2014, 09:39:14 PM |
|
Some guy from Mastercoin says about Nxt "Their proof of stake algorithm for consensus depends on developer checkpoints so without the developers it doesn't work" Any comments from developers?
|
|
|
|
Passion_ltc
|
 |
March 23, 2014, 09:41:36 PM |
|
OK, everybody, your favorite dictator rickyjames here, flapping my gums wildly once more.We've coming up on 2500 pages on this Bitcointalk thread. What an accomplishment!!! Woo Hoo!!! We have a new forum that is Our Very Own at nxtforum.org . Go ahead, enter it into your address bar of your browser, it works and it's a Simple Machine forum just like this one at Bitcointalk. You'll feel right at home. I've created a thread there called NXT Pub Thread - 2500 More Pages Here Or Bust http://107.170.117.237/index.php/topic,91.0.htmlI propose that 2Kewl lock this thread at page 2500 and we do a mass migration over there. It would be nice, neat, poetic closure. And a new beginning. Like this: https://www.youtube.com/watch?v=gUQbLz7AoYcC'mon, everybody. Think Nike. Just do it. +1 www.nxtforum.org
|
|
|
|
btler420
|
 |
March 23, 2014, 09:42:02 PM |
|
Some guy from Mastercoin says about Nxt "Their proof of stake algorithm for consensus depends on developer checkpoints so without the developers it doesn't work" Any comments from developers? Do you wanna say the developers are not working on Nxt? Wow 
|
y1.
|
|
|
|