ORA:: Development discussion thread

[old fart]

There were a lot of people who disagreed with the decision to call a coin lightcoin when litecoin already existed. I can see how easily it could lead to confusion.

[qiwoman2]

I just wanted to welcome the LOVELY NEW DEV in helping with the KORA DIRECTIVE..I may not be a nerd at all but this coin will shine.

[DarkhorseofNxt]

Starfish organisations are decentralised & regenerative, so they are very lean & simple, but highly effective, and almost impossible to defeat.

That is IT, a starfish!

initial sketch for logo



  


    

Very nice idea for a logo IMO.

I agree 100% The starfish shape also reminds me of a cog in a machine, so that shape says "organic decentralised machine" to me, which is pretty cool

I agree, I love the logo - it is like a cog from nature! Great job gvans!

Gvans - while they are discussing on the names etc, how about you play a little with the starfish. Maybe borders? Give 2 colours. Not like "shell" logo, but something professional looking colors/ corporate colors. Stuff like that. Play around with it. You will find something better than this current one.

[gvans]

Gvans - while they are discussing on the names etc, how about you play a little with the starfish. Maybe borders? Give 2 colours. Not like "shell" logo, but something professional looking colors/ corporate colors. Stuff like that. Play around with it. You will find something better than this current one.

Rather busy atm but will try something later on

[dadingsda]

Gvans - while they are discussing on the names etc, how about you play a little with the starfish. Maybe borders? Give 2 colours. Not like "shell" logo, but something professional looking colors/ corporate colors. Stuff like that. Play around with it. You will find something better than this current one.

Rather busy atm but will try something later on

Great!


ps: Nice work so far

[Anna!]

Hey what about these.

https://dl.dropboxusercontent.com/s/hqdxssoukx0p62b/korastarfish.png

https://dl.dropboxusercontent.com/s/fqf0b1tdgh626or/BD.png

[hypersire]

The second one looks too much like some sort of religious symbol.

I like the simplicity of the original.

[Spayse]

Hey what about these.

This logo is nice design. I'm very like it.

[DarkhorseofNxt]

I didnt mean this. A border around the starfish so it can be seen if its a small logo. The border between white and orange cant be seen sometimes.

[DarkhorseofNxt]

Lesson to be learned :

https://nxtforum.org/general-discussion/price-speculation/5480/

A stakeholder in Nxt got robbed 1170 btc and 6 mil nxt today. Totalling almost usd 1,000,000.

Dear nio,

I hope security will be the utmost priority during this coins development.

[nioccoin]

Lesson to be learned :

https://nxtforum.org/general-discussion/price-speculation/5480/

A stakeholder in Nxt got robbed 1170 btc and 6 mil nxt today. Totalling almost usd 1,000,000.

Dear nio,

I hope security will be the utmost priority during this coins development.

https://nxtforum.org/general-discussion/price-speculation/msg62453/#msg62453

Just based on this info, there may have been some poor defensive measures in play.  Too bad for KLee though.  Hi KLee, wherever you are, whoever you are, my condolences.

Security is a project risk.  For NXT, this does not seem to be a systemic problem with their code, though I will withhold judgement until more details emerge.  A few months ago I read an article that something like 5% of all bitcoin has been stolen, since bitcoin's inception.  Doesn't seem like much, but 5% of today's market cap is big money.  Big money attracts scoundrels.  Unlike in the real world, in the virtual world, the bad guys don't get caught.  There is no downside to stealing cryptocoins.  In the real world, if 5% of something was stolen, at least some would be recovered, and perhaps most of it.
So here is where we are at.  The world hasn't changed.  There are still no less thieves than there were hundreds of years ago.  But the methods have changed.

In some respects, the very things we all like about cryptos are its very weaknesses.  No regulation?  Great, until an exchange like mt gox, or sharex disappears with your coins.

Anonymity?  That's great, until you realize how trivial it is for someone to fence stolen coins.  In the old days, you steal some jewels, and you have to follow a protocol to unload them.  The greatest disincentive to the thief is 10M in jewels is only worth 1M, or much less.  Still an enticement, but nobody is going to pay full price for their hot goods.  But crypto currency?  You get FULL PRICE on the market, because the same anonymity that protects you, also protects the bad guys.

In other words, cryptocurrencies are natively "bearer instruments", just like cash.  But like credit card numbers, they allow someone to steal a huge amount all at once off of a database server.  Cryptocoins are essentially cash.  If you have a 100 quid, do you parade down the street and wave it around like a flag?  No.  You hide it in your sock, or put it in your pocket, or your wallet, or whatever.  With money and other valuables, the first instinct is to hide or otherwise protect it.



Security begins in the planning phase, not in the development phase.  I hear developers all the time who say "let's add in some security to the product."  Sorry, but if you already have a product that is more than 50% finished, your chances of making it secure are slim to none.  Better to start over.



What separates Kora from most other coins is that we are putting in place a formal and public project plan.  Most coins only open-source their code.  We are going a step further.  To put it differently, we are "crowd-sourcing" our project assumptions, project risks, and candidate solutions, so that the community - you - can help strengthen Kora with your input and ideas.  And like your instinct to protect your quid, or your yuan, or your dollar, Kora's first instinct is to guard stakeholder value.  I have some ideas on how to "build security in" to Kora.  Undoubtedly you do to, and that is what this thread is for.


When the plan is released, and the community sees it, it will be vetted.  My hope is it will be torn to shreds, and have every assumption and candidate solution scrutinized for error.  Ultimately, isn't it better that the plan is shredded and problems are ironed out, than to have the coin itself scrutinized, when it is too late to fix the errors?  It's easier to change the blueprint than the building.


You don't have to wait for the project plan.  Feel free to chime in now on what you think are security issues with crypto, and any ideas on how they can be solved.  I will then add them to the plan.  Since this is a crucial topic, let's keep the *formal* discussion open for a few days, and collect ideas.  We will always do our best to respond to criticisms and ideas throughout Kora's lifetime.
Many of you probably own coins, and some of you own a great many coins, or perhaps a great volume of one coin.  Maybe you have concerns about the weaknesses in those other coins.  Let's hear them!

kind regards,
nio

[DarkhorseofNxt]

Is it possible to integrate 2FA with wallet?

[Kora]

Lesson to be learned :

https://nxtforum.org/general-discussion/price-speculation/5480/

A stakeholder in Nxt got robbed 1170 btc and 6 mil nxt today. Totalling almost usd 1,000,000.

Dear nio,

I hope security will be the utmost priority during this coins development.

https://nxtforum.org/general-discussion/price-speculation/msg62453/#msg62453

Just based on this info, there may have been some poor defensive measures in play.  Too bad for KLee though.  Hi KLee, wherever you are, whoever you are, my condolences.

Security is a project risk.  For NXT, this does not seem to be a systemic problem with their code, though I will withhold judgement until more details emerge.  A few months ago I read an article that something like 5% of all bitcoin has been stolen, since bitcoin's inception.  Doesn't seem like much, but 5% of today's market cap is big money.  Big money attracts scoundrels.  Unlike in the real world, in the virtual world, the bad guys don't get caught.  There is no downside to stealing cryptocoins.  In the real world, if 5% of something was stolen, at least some would be recovered, and perhaps most of it.
So here is where we are at.  The world hasn't changed.  There are still no less thieves than there were hundreds of years ago.  But the methods have changed.

In some respects, the very things we all like about cryptos are its very weaknesses.  No regulation?  Great, until an exchange like mt gox, or sharex disappears with your coins.

Anonymity?  That's great, until you realize how trivial it is for someone to fence stolen coins.  In the old days, you steal some jewels, and you have to follow a protocol to unload them.  The greatest disincentive to the thief is 10M in jewels is only worth 1M, or much less.  Still an enticement, but nobody is going to pay full price for their hot goods.  But crypto currency?  You get FULL PRICE on the market, because the same anonymity that protects you, also protects the bad guys.

In other words, cryptocurrencies are natively "bearer instruments", just like cash.  But like credit card numbers, they allow someone to steal a huge amount all at once off of a database server.  Cryptocoins are essentially cash.  If you have a 100 quid, do you parade down the street and wave it around like a flag?  No.  You hide it in your sock, or put it in your pocket, or your wallet, or whatever.  With money and other valuables, the first instinct is to hide or otherwise protect it.



Security begins in the planning phase, not in the development phase.  I hear developers all the time who say "let's add in some security to the product."  Sorry, but if you already have a product that is more than 50% finished, your chances of making it secure are slim to none.  Better to start over.



What separates Kora from most other coins is that we are putting in place a formal and public project plan.  Most coins only open-source their code.  We are going a step further.  To put it differently, we are "crowd-sourcing" our project assumptions, project risks, and candidate solutions, so that the community - you - can help strengthen Kora with your input and ideas.  And like your instinct to protect your quid, or your yuan, or your dollar, Kora's first instinct is to guard stakeholder value.  I have some ideas on how to "build security in" to Kora.  Undoubtedly you do to, and that is what this thread is for.


When the plan is released, and the community sees it, it will be vetted.  My hope is it will be torn to shreds, and have every assumption and candidate solution scrutinized for error.  Ultimately, isn't it better that the plan is shredded and problems are ironed out, than to have the coin itself scrutinized, when it is too late to fix the errors?  It's easier to change the blueprint than the building.


You don't have to wait for the project plan.  Feel free to chime in now on what you think are security issues with crypto, and any ideas on how they can be solved.  I will then add them to the plan.  Since this is a crucial topic, let's keep the *formal* discussion open for a few days, and collect ideas.  We will always do our best to respond to criticisms and ideas throughout Kora's lifetime.
Many of you probably own coins, and some of you own a great many coins, or perhaps a great volume of one coin.  Maybe you have concerns about the weaknesses in those other coins.  Let's hear them!

kind regards,
nio

Thanks for a great post nio!!

I've had a few minor dealings with Klee in the past (not using this 'Kora' account though), and I always found him to be a very constructive and honest guy with a very advanced appreciation of the power of a decentralised 'community'. I was actually unable to sleep last night for thinking about his situation, and on a human level it is truly devastating and I send him all the good vibes I can from a distance. NXT owes a lot to Klee, and I hope he can rise above this personal tragedy.

As for security, one thing I like about my bank account is I have a maximum daily withdrawal limit on my account of 5K, so if my account was compromised the attacker could only get 5K per day until I realised. If I want to withdraw more than 5K I have to call my bank and authorise that over the phone. I also like that for a transfer to a new account I need to receive and then enter a code using my mobile phone. Those two features, withdrawal limit & 2FA for new accounts transfers, limit my paranoia about online banking to some degree.

With crypto I would like the ability to freeze some crypto coins in a 'term deposit' type structure where they couldn't be moved for X period of time. For a POS coin if you could 'withdraw freeze' your savings for a few months, then you really could leave your PC on and forge 24/7 without too much stress about having your PC hacked. Having your account pass-phrase in RAM while you forge always worries me.

[DarkhorseofNxt]

Ideas

1. Limit daily transfer set by user. X exceeding certain amount need more confirmation or extra security measures.

2. "Lock" balance. If you are planning not to use the funds for some time, lock it and to unlock it must follow steps from step 1 (extra security measure)

# extra security measure is what we need to think about, verification by email or mobile? Then will it still be called decentralization since now you can be tracked with email or mobile.number? Something to think about.

[beckham]

any update now?

[From Above]

kora to the stars and beyond

~CfA~

[Neo.op]

A simple multisig implementation to start with. I am not sure but I thought that feature alone has the ability to stop many attacks. Even after BTC implementing, other coins seem to be dragging their feet.

[schnötzel]

Ideas

1. Limit daily transfer set by user. X exceeding certain amount need more confirmation or extra security measures.

2. "Lock" balance. If you are planning not to use the funds for some time, lock it and to unlock it must follow steps from step 1 (extra security measure)

# extra security measure is what we need to think about, verification by email or mobile? Then will it still be called decentralization since now you can be tracked with email or mobile.number? Something to think about.

1+2 This would be awesome! Great idea.

#extra security: If it´s optional, why not.

[cryptonikus]

 those logos, seriously...

[feina24h]

those logos, seriously...

i am having the same feeling about those logos.....