D.H.
|
|
October 19, 2012, 09:05:33 PM |
|
The flag in the dropdown menu for the Swedish translation is not the Swedish flag. This is what the Swedish flag looks like:
|
www.bitcoin.se - Forum, nyheter och information på svenska! (Forum, news and information in Swedish)
|
|
|
Raoul Duke
aka psy
Legendary
Offline
Activity: 1372
Merit: 1002
|
|
October 19, 2012, 09:10:05 PM |
|
The flag in the dropdown menu for the Swedish translation is not the Swedish flag. This is what the Swedish flag looks like: That's the El Salvador flag lol They typed sv.png when they should've typed se.png. The flag is there, look
|
|
|
|
|
pminers
Newbie
Offline
Activity: 21
Merit: 0
|
|
October 20, 2012, 06:49:44 AM |
|
Hi blockchain.info support,
i wrote a mail complaining a possible security issue to you on 12. Oct and got no reply so far. Therefore i will post the answer here and hope to get feedback soon:
"In the qr code for iphone device pairing the plaintext login password is contained. this is (in my opinion) a possible security issue and it makes me nervous because this means that my login password is stored in a way which is decryptable ( normally i would have expected that the password is stored as a salted hashvalue). so please can you explain."
Kind regards -pminers
|
|
|
|
picobit
|
|
October 20, 2012, 11:17:26 AM |
|
You just typed the password to generate the QR code. It is my understanding that the password is not even transmitted to blockchain.info, but is used locally to decrypt your wallet with some javascript in your browser. Most likely the QR code is generated by local javascript too, so your password never leaves the browser. But it would of course be nice to hear an official confirmation of this.
What worries me slightly more is that this password is somehow stored on my iPhone in a decryptable way (otherwise the app would not be able to access the web page). I really hope it cannot be recovered from the backup files or something like that, but since my backups are unencrypted it probably can.
|
|
|
|
pminers
Newbie
Offline
Activity: 21
Merit: 0
|
|
October 20, 2012, 12:21:06 PM |
|
You just typed the password to generate the QR code. It is my understanding that the password is not even transmitted to blockchain.info, but is used locally to decrypt your wallet with some javascript in your browser. Most likely the QR code is generated by local javascript too, so your password never leaves the browser. But it would of course be nice to hear an official confirmation of this.
What worries me slightly more is that this password is somehow stored on my iPhone in a decryptable way (otherwise the app would not be able to access the web page). I really hope it cannot be recovered from the backup files or something like that, but since my backups are unencrypted it probably can.
If the password never leaves the browser thats would be absolutely perfect, i also want to have a official confirmation. The qr code is not a picture (jpg, png etc), its a html canvas - so it looks like that its only get rendered in the browser. Anyhow its at least a problem if you leave the browser window open in an unsecure environment (or you print it out) which no knowledge of that the qr code contains your cleartext password. The question how the password is stored on the iphone is another good issue to point out. Its annoying that i have not heard anything from blockchain.info for more than a week.
|
|
|
|
ErebusBat
|
|
October 20, 2012, 01:29:13 PM |
|
Can I claim a bounty for translating the strings into pirate english (YARR, etc?)
Hrm... not sure many people would want to see their interface in pirate as of late.
|
|
|
|
SuperP
|
|
October 20, 2012, 04:28:16 PM Last edit: October 25, 2012, 03:47:31 PM by SuperP |
|
Error saving wallet: In My Wallet, whenever I try to change the label of an address, archive an address, or delete an archived address, it acts like the change goes through, but the status always says "Error saving wallet" and when I log out and back in, none of the changes I made are there. The wallet has about 300 addresses in it.
It also says "You have Watch Only seconds to change your mind." when I try deleting an address. This is fixed now and counts down correctly.
|
|
|
|
Mushroomized
Legendary
Offline
Activity: 1470
Merit: 1002
Hello!
|
|
October 20, 2012, 06:37:52 PM |
|
Can I claim a bounty for translating the strings into pirate english (YARR, etc?)
Hrm... not sure many people would want to see their interface in pirate as of late. I guess you are right
|
hi
|
|
|
techmix
Newbie
Offline
Activity: 15
Merit: 0
|
|
October 23, 2012, 11:18:53 AM |
|
2 other errors on language.json: line no. 477 and 524
|
|
|
|
AvL42
|
|
October 24, 2012, 10:57:00 AM |
|
About the Greek translation: in most of the texts, the machine translation is probably better than my own Greek, but there is one mistranslation that caught my eye, namely the translation of the "close button". The Greek word "Koντά" means "close" only in the sense of "close by" or "near". For close buttons, Greek use the noun "Kλείσιμo" (literally "the closing of ..."). (Didn't want to bother with JSON-editing just for that one word.)
@piuk: I'd like to hear your opinion about the suggestion I made while you were on vacation (on page 76 now): adding a display field to the "custom send"-dialog that shows the sum of all selected own addresses minus the sum of so far entered outputs.
|
|
|
|
fimp
|
|
October 25, 2012, 10:31:21 AM |
|
Can the send anonymously mixing service be used with the API?
|
|
|
|
2weiX
Legendary
Offline
Activity: 2072
Merit: 1006
this space intentionally left blank
|
|
October 25, 2012, 10:55:32 AM |
|
German translation is way off. Where can I contribute?
|
|
|
|
piuk (OP)
|
|
October 25, 2012, 05:22:53 PM |
|
Artefacts of the machine translation, they can be removed. makes me nervous because this means that my login password is stored in a way which is decryptable ( normally i would have expected that the password is stored as a salted hashvalue). so please can you explain."
The password is never sent or stored server side. The QR code is generated using javascript. Possibly it should be base64 encoded or something to slightly obfuscate it. The password is stored plain text in the iphone app using NSUserDefaults. If you are concerned about this enable double encryption (which is never stored at all). Can I claim a bounty for translating the strings into pirate english (YARR, etc?)
Yes, I wouldn't want any pirates to miss out 5 BTC bounty for a full translation. Can the send anonymously mixing service be used with the API?
You can now: https://blockchain.info/api/api_sendGerman translation is way off. Where can I contribute?
https://blockchain.info/wallet/translations Thank You to everyone who has contributed so far. adding a display field to the "custom send"-dialog that shows the sum of all selected own addresses minus the sum of so far entered outputs.
I have added this now. New summary dialog when you click on a transaction:
|
|
|
|
piuk (OP)
|
|
October 25, 2012, 05:40:09 PM |
|
|
|
|
|
teste
|
|
October 26, 2012, 12:57:01 AM |
|
Wow, I really liked the bitcoin value at time of transaction on summary dialog. 1- The data is from MtGox? 2- Could you add an option to choose other exchanges?
|
|
|
|
teste
|
|
October 26, 2012, 01:07:15 AM |
|
Piuk,
I'm browsing blockchain.info wallet on a tablet. When I open the transaction summary dialog, the only way to close it is clicking on close button or on X icon. Could you add an option to just click out of the dialog to close it?
|
|
|
|
|
Stephen Gornick
Legendary
Offline
Activity: 2506
Merit: 1010
|
|
October 26, 2012, 02:26:22 AM |
|
Attempts to get to the service using www.Blockchain.info responds in a 404. Not everyone knows that www. isn't needed, and the www. was even the "official" URL at one time: Maybe put in (or restore) a 301 (moved permanently) redirect?
|
|
|
|
fimp
|
|
October 26, 2012, 09:20:54 AM |
|
Cool. However, as far as I can see this requires me to use your wallet. Is there some way I can request an anonymous forwarding address I can send to from my own wallet software?
|
|
|
|
|