Bitcoin Forum
April 16, 2014, 08:44:27 AM *
News: ♦♦ A bug in OpenSSL, used by Bitcoin-Qt/Bitcoin Core, could allow your bitcoins to be stolen. Immediately updating Bitcoin Core to 0.9.1 is required in some cases, especially if you're using 0.9.0. Download. More info.
The same bug also affected the forum. Changing your forum password is recommended.
 
   Home   Help Search Donate Login Register  
Pages: 1 ... 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 [138] 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156
  Print  
Author Topic: Blockchain.info - Bitcoin Block explorer & Currency Statistics  (Read 233119 times)
Blockchain_Helper
Newbie
*
Offline Offline

Activity: 25



View Profile WWW

Ignore
October 18, 2013, 10:28:58 PM
 #2741

I'm keeping track of all these suggestions, because we're constantly trying to improve the site. Thanks so much for the feedback so far!

Blockchain.info Support Staff
Follow us! Facebook: https://www.facebook.com/blockchain Twitter: https://twitter.com/blockchain
Appreciate our free service? Send us a tip at 16gKb8fYGdvrmuMmir6mQG5MN6nUroriF3
1397637867
Hero Member
*
Offline Offline

Posts: 1397637867

View Profile Personal Message (Offline)

Ignore
1397637867
Reply with quote  #2

1397637867
Report to moderator
1397637867
Hero Member
*
Offline Offline

Posts: 1397637867

View Profile Personal Message (Offline)

Ignore
1397637867
Reply with quote  #2

1397637867
Report to moderator
There are several different types of Bitcoin clients. The most secure are full nodes like Bitcoin-Qt, but full nodes are more resource-heavy, and they must do a lengthy initial syncing process. As a result, lightweight clients with somewhat less security are commonly used.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1397637867
Hero Member
*
Offline Offline

Posts: 1397637867

View Profile Personal Message (Offline)

Ignore
1397637867
Reply with quote  #2

1397637867
Report to moderator
1397637867
Hero Member
*
Offline Offline

Posts: 1397637867

View Profile Personal Message (Offline)

Ignore
1397637867
Reply with quote  #2

1397637867
Report to moderator
ratty
Full Member
***
Offline Offline

Activity: 163


View Profile

Ignore
October 19, 2013, 01:04:47 AM
 #2742

I totally agree they should do compressed keys, but for those of you that want to use them now, you can import private keys made from other clients, so you can make a compressed key with another client then import it into blockchain.info. And no I'm not saying they shouldn't add the ability to create them, but you can technically do it now with some hassle.

You can tell if a key is compressed if it starts with an L or a K. Uncompressed keys start with a 5.
piuk
Hero Member
*****
Offline Offline

Activity: 910



View Profile WWW

Ignore
October 19, 2013, 10:40:50 AM
 #2743

it's under security options, you can lock the IP addresses that are allowed to connect to your wallet.  This historically has never affected the android app, but it appears to do so now.

This should be fixed now.

Any chance you could add a $ approximation to the miner's fee on the custom send money page.

This will be available next update. Btw you should get a warning if trying to send with a fee above 1 BTC, perhaps the warning should be lowered to 0.1 BTC.

Not 100% sure, but with the new chrome app, the inactivity timeout logout doesn't seem to work.

Will be fixed next update as well.

What happened with Firefox browser extension?

I'm having trouble getting it re-approved into the extension store. For now it can be downloaded directly from here https://github.com/blockchain/My-Wallet-Firefox-Extension/raw/master/blockchain.xpi.

The mining profit and electricity consumption stats are said to be based on electricity consumption of 600 w/gigahash. This is out of date by factor of at least  100 . Can you update? (Block Erupters are about 7.5 w/ghs and some of the newer ASICS are under a watt). Otherwise the false impression is being given that the network is hugely inefficient in terms of electricity consumption, which is unfortunate.

The electricity cost on the existing chart could either be changed a certain date when the first ASICs became available (1st Feb 2013?) or a new chart started for only ASICs . Not sure which would be better.

Inspecting with http://web-sniffer.net/ you can see that no "strict-transport-security:" is set when you type https://blockchain.info.

It is only set on wallet pages e.g. https://blockchain.info/wallet

Feature suggestion - using compressed public keys by default

The out of date iPhone app doesn't support compressed public keys which is preventing them from being made default. When the app is finally updated  this can change.

-----

Update for the Mac OSX client available in the app store https://itunes.apple.com/gb/app/blockchain/id688882038?mt=12

paraipan
Hero Member
*****
Offline Offline

Activity: 924


Firstbits: 1pirata


View Profile WWW

Ignore
October 19, 2013, 10:46:16 AM
 #2744

Great work piuk, keep it up  Kiss

BTCitcoin: An Idea Worth Saving - Q&A with bitcoins on rugatu.com - Check my rep
piuk
Hero Member
*****
Offline Offline

Activity: 910



View Profile WWW

Ignore
October 19, 2013, 11:53:52 AM
 #2745

Sharedcoin trustless mixing now available for testing

Sharedcoin uses a technique known as coinjoin to provide coin mixing without needing to trust any third party with your funds. The service still relies on a centralised server but that server only co-ordinates transactions without any funds passing through it. The main advantages are significantly less risk for both the user and operator and no requirement to keep any logs.

Anyone interested in testing can login using the following link:

https://blockchain.info/wallet/login?enable_sharedcoin=true

Please test with small amounts only (0.5 BTC max). 0.1 BTC is the minimum send amount. If you experience any errors please record the output from the javascript console.

The current client stages are:

- The client will submit its "offer", which is the inputs it wants mixing and the desired outputs.
- The server waits a certain amount of time for other clients to submit their offers.
- The server combines everyone's offers and creates a "proposal".
- The clients check they are happy with the proposal and signs their inputs.
- The server submits the final transaction.

The entire process takes about 40 seconds.

Features currently supported:

- Variable number of inputs and outputs per client
- Variable input and output values.
- Randomised fees.
- Ability to draw upon reserve funds when no other participants are available for mixing.
- Taint analysis determines the appropriate inputs to mix.

Features planned:

- Multiple iterations using temporary addresses never saved inside wallets.
- Better randomisation of change outputs and splitting of outputs between multiple iterations.
- Better progress indication.
- Documented Client APIs and SDK.

Example sharedcoin transaction:
 https://blockchain.info/tx/72316782bf48d0cd232b888a7b9ea03f88ba79fac28273cd2aa1804683235412?show_adv=true

The amount currently available in the reserve pool is low, this will be gradually increased over time but during the testing phase if anyone manages to manipulate the client to withdraw excess funds from the pool they can keep that amount.

Client source available at: https://github.com/blockchain/My-Wallet/blob/master/sharedcoin.js
Server status can be viewed while testing at: https://api.sharedcoin.com/

Lohoris
Sr. Member
****
Online Online

Activity: 448


Bitgoblin


View Profile

Ignore
October 19, 2013, 12:53:01 PM
 #2746

You could even get fancy and give us the option to pick our exchange (for price) and give the option to enter a % premium or % discount.
This would be really great, the feature of picking your price in your home currency is great, but unless you can chose which exchange to trust for the price, it isn't really useful.

The current client stages are:

- The client will submit its "offer", which is the inputs it wants mixing and the desired outputs.
- The server waits a certain amount of time for other clients to submit their offers.
- The server combines everyone's offers and creates a "proposal".
- The clients check they are happy with the proposal and sign their inputs.
- The server submits the final transaction.

The entire process takes about 40 seconds.
Does this imply that you only "mix" your coin with people also trying to mix them in those 40 seconds?
i.e. it works much better within peak activity?

1LohorisJie8bGGG7X4dCS9MAVsTEbzrhu
DefaultTrust is very BAD.
zebedee
Donator
Sr. Member
*
Offline Offline

Activity: 430



View Profile

Ignore
October 19, 2013, 01:16:14 PM
 #2747

Feature suggestion: When creating a payment request (by clicking the "Request Payment" button on an address page) it would be great if one could enter a EUR or USD amount. Right now you can only enter BTC amounts, but I do know several merchants who price their products in Euro and would like to be able to create payment requestsbased on Euro amounts.
Well duh, blockchain.info has no control whatsoever over what rate you're exchanging at with whatever exchange counterparty you agreed of your own free will.  So if blockchain were to claim you'd get 10 EUR and you got 9, I guess you'd blame them for that too?

Hopefully you can see the problem in your suggestion.  The best that could be done is that blockchain say the rate is indicative.  You should expect an indicative rate to be 5% or more wrong worst case.  Are you happy?  If so, you understand.  If not happy, you need to think more.
chriswilmer
Hero Member
*****
Offline Offline

Activity: 574


View Profile WWW

Ignore
October 19, 2013, 02:39:34 PM
 #2748

Is it important to use whole increments (like 0.1 BTC) when using this? If so, you should enforce that in the user interface.
(if you can send arbitrary amounts, that's cool, I don't know how this works)
dillpicklechips
Sr. Member
****
Offline Offline

Activity: 280


View Profile

Ignore
October 19, 2013, 02:40:48 PM
 #2749

Sharedcoin trustless mixing now available for testing

Sharedcoin uses a technique known as coinjoin to provide coin mixing without needing to trust any third party with your funds. The service still relies on a centralised server but that server only co-ordinates transactions without any funds passing through it. The main advantages are significantly less risk for both the user and operator and no requirement to keep any logs.
Cool! Does it allow other users not using blockchain.info to join a coinjoin transaction?
piuk
Hero Member
*****
Offline Offline

Activity: 910



View Profile WWW

Ignore
October 19, 2013, 06:34:30 PM
 #2750

Does this imply that you only "mix" your coin with people also trying to mix them in those 40 seconds?
i.e. it works much better within peak activity?

As the transactions are large and incur high network fees, paid by the operator, there is an advantage to the operator to have multiple participants in one transaction.

But for users themselves as long as the coins in the sharedcoin wallet are being consistently swapped with fresh coins (tainted by many sources) it doesn't necessarily matter if another user is directly involved in your transaction or not. In fact the server can provide better anonymity (see below).

Is it important to use whole increments (like 0.1 BTC) when using this? If so, you should enforce that in the user interface.
(if you can send arbitrary amounts, that's cool, I don't know how this works)

Only if you are mixing with other users who want to send different amounts. When mixing with the sharedcoin pool the server doesn't desire any particular output size so can deliberately add input and output combinations which mimic your own. Then when you include randomised fees into the mix it makes it almost impossible to determine the inputs used from the value of one output.

Cool! Does it allow other users not using blockchain.info to join a coinjoin transaction?

Yes there will be a browser extension available which you can input a private key.

molecular
Donator
Hero Member
*
Offline Offline

Activity: 1176



View Profile

Ignore
October 19, 2013, 07:57:28 PM
 #2751

Sharedcoin trustless mixing now available for testing

Cool. Thanks for going forward on this.

Do I understand correctly that the pool server still knows which inputs and outputs were provided by who? So you still trust the server regarding privacy, just not coins, right?

Peter Todd
Hero Member
*****
Offline Offline

Activity: 728

aka retep


View Profile

Ignore
October 19, 2013, 09:58:52 PM
 #2752

Only if you are mixing with other users who want to send different amounts. When mixing with the sharedcoin pool the server doesn't desire any particular output size so can deliberately add input and output combinations which mimic your own. Then when you include randomised fees into the mix it makes it almost impossible to determine the inputs used from the value of one output.

One issue with the current version is that the blockchain.info wallet app only uses uncompressed keys, especially for sharedcoin change addresses, while internally the pool uses compressed keys.

I know iPhone compatibility is a problem, but maybe you could make the pool at least occasionally use uncompressed keys, or add compressed key change as an advanced experts-only option?

sunnankar
Hero Member
*****
Offline Offline

Activity: 882



View Profile

Ignore
October 20, 2013, 12:09:15 AM
 #2753

Then when you include randomised fees into the mix it makes it almost impossible to determine the inputs used from the value of one output.

How about being able to specify multiple outputs?

ThePiachu
Sr. Member
****
Offline Offline

Activity: 418



View Profile WWW

Ignore
October 20, 2013, 08:48:08 AM
 #2754

Feature suggestion - Blockchain Wallet API List Addresses should include an optional field $confirmations

Reasoning:
If I am keeping track of multiple accounts looking for full confirmations I first have to make an API call to get 0 confirmation balance for every address and then make individual call for every wallet with balance >0 to check if their balance has 6 or more confirmations. Including $confirmations optional flag in List Addresses API call would cut down on the API calls from potentially many to just 1 API call.

1HWbVLhxj7bhewhyapMZpyhqWAeAhJd51E
My Bitcoin Calculator:
http://tpbitcalc.appspot.com/
malevolent
Hypernode
Global Moderator
Hero Member
*
Online Online

Activity: 1036


View Profile

Ignore
October 20, 2013, 09:36:15 PM
 #2755

(Yet Another) Feature Suggestion — would it possible for blockchain.info to include an option in account settings, that when enabled, the user would be asked for 2FA (email, sms, gauth, yubikey, etc.) also upon trying to withdraw BTC (with the ability to set up a daily transaction threshold (in BTC of fiat), above which the user would be asked for 2FA)?

This would protect people from some more sophisticated malware that waits till the user logs in with his credentials and 2FA, and only then sends funds to the attacker's address.

There is still a possibility that the attacker could wait till the user tries to make a transaction and would replace the user-specified address with his own one. To protect against this, people who have SMS or email as 2FA (hopefully accessing the email account from a different device) could get transaction information about the addresses that are involved along with the code.

It would be also nice to be able to set ranges of IP addresses from which the user should be allowed to log in (for those with dynamic IP addresses). Wink

I'll also post this here again in case piuk last time missed it:
Minor feature request: Please print out a text version of the TOTP secret key below the qr code image on the two factor authentication settings page.

I'll pass this suggestion along, but in the meantime you can use a different QR scanner app to get a copy of the secret key. If you ever need to reset two factor authentication, then you can just submit a 2FA reset request. We usually process these within 12-24 hours max (I check them multiple times a day).

Yes, please print a text version of the key, it would be very convenient for users with older phones for which there are alternative Gauth implementations but none of them can scan QR codes. Other QR scanning apps are also problematic to work with.
VTC
Jr. Member
*
Offline Offline

Activity: 46



View Profile

Ignore
October 21, 2013, 06:09:04 PM
 #2756

(Yet Another) Feature Suggestion — would it possible for blockchain.info to include an option in account settings, that when enabled, the user would be asked for 2FA (email, sms, gauth, yubikey, etc.) also upon trying to withdraw BTC (with the ability to set up a daily transaction threshold (in BTC of fiat), above which the user would be asked for 2FA)?

This would protect people from some more sophisticated malware that waits till the user logs in with his credentials and 2FA, and only then sends funds to the attacker's address.

There is still a possibility that the attacker could wait till the user tries to make a transaction and would replace the user-specified address with his own one. To protect against this, people who have SMS or email as 2FA (hopefully accessing the email account from a different device) could get transaction information about the addresses that are involved along with the code.


This won't help security. One you successfully login, your wallet is fully decrypted locally, and all the private keys become exposed to your computer,  unless you are using a secondary password.  Make a transaction and use a secondary password and now all your private keys are potentially exposed to malware.  I suggested earlier that secondary password should act like a PIN, and only be used to sign the transaction and never saved in memory.  So multiple transaction would require re-entering the secondary password.  This can potentially help a bit more. 
dillpicklechips
Sr. Member
****
Offline Offline

Activity: 280


View Profile

Ignore
October 21, 2013, 09:37:22 PM
 #2757

Can blockchain.info somehow integrate with the Trezor? Have the trezor and web browser interact with it so the private keys aren't even on the computer?
Blockchain_Helper
Newbie
*
Offline Offline

Activity: 25



View Profile WWW

Ignore
October 22, 2013, 02:13:39 PM
 #2758

Can blockchain.info somehow integrate with the Trezor? Have the trezor and web browser interact with it so the private keys aren't even on the computer?

Piuk actually posted about this - https://bitcointalk.org/index.php?topic=40264.msg3308975#msg3308975. I'm sure more details will be released as Trezor starts to be used.

Blockchain.info Support Staff
Follow us! Facebook: https://www.facebook.com/blockchain Twitter: https://twitter.com/blockchain
Appreciate our free service? Send us a tip at 16gKb8fYGdvrmuMmir6mQG5MN6nUroriF3
mb300sd
Hero Member
*****
Offline Offline

Activity: 896

troll (mini)whale, TO THE MOON!!! ┗(°0°)┛


View Profile

Ignore
October 22, 2013, 06:32:35 PM
 #2759

Is there any way to pull full raw transaction or block data in hex? I'm trying to use http://blockchain.info/rawtx/$tx_index but the scriptsig and scriptpubkey are missing. Being able to pull the information is the same format as sendrawtransaction would be very useful.

Bltcoin Libraries: https://github.com/mb300sd
┗(°0°)┛!!! 1D7FJWRzeKa4SLmTznd3JpeNU13L1ErEco !!! ┗(°0°)┛
dillpicklechips
Sr. Member
****
Offline Offline

Activity: 280


View Profile

Ignore
October 22, 2013, 07:16:44 PM
 #2760

Can blockchain.info somehow integrate with the Trezor? Have the trezor and web browser interact with it so the private keys aren't even on the computer?

Piuk actually posted about this - https://bitcointalk.org/index.php?topic=40264.msg3308975#msg3308975. I'm sure more details will be released as Trezor starts to be used.
This will change everything! All the convienance of blockchain.info and impossible to steal the private keys! Sweet!
Pages: 1 ... 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 [138] 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!