seasonw
|
|
May 18, 2015, 03:00:42 PM |
|
-[ANNOUNCEMENT]- New Pool from Burstcoin.de // http://pool.burstcoin.de Pool Name – Burstcoin.de Pool Pool URL – pool.burstcoin.de Pool Mining Port – 8080 Min Payout 250 Fee 2% Bonus 100.000 Burst after the first month, paid to all miners, that are active DONE! Bonus 10.000 Burst after reaching 10 Miners DONE! Bonus 10.000 Burst after reaching 20 Miners DONE! Bonus 10.000 Burst after reaching 30 Miners DONE! Bonus 10.000 Burst after reaching 40 Miners DONE! Bonus 10.000 Burst after reaching 50 Miners Bonus 10.000 Burst after reaching 60 Miners Bonus 10.000 Burst after reaching 70 Miners Bonus 10.000 Burst after reaching 80 Miners Bonus 10.000 Burst after reaching 90 Miners Bonus 100.000 Burst after reaching 100 Miners Bonus 100.000 Burst after reaching 200 Miners Bonus 100.000 Burst after reaching 300 Miners Bonus 200.000 Burst after reaching 400 Miners Hardware Dual Quad Core Xeon with 3.0 Ghz, 24GB Ram Internet 1GBit with DDos Protectoin Fail Safe Replicated Host with Fallback Geo location Germany Quality Made in Germany Pool Software Urays V2 pool modified and error fixed Version from Blago (thanks to blago for the support) All my own miners already use the pool, with now over 160TBJoin and lets make some Burst together![/size] Latest full configurated blago miner you the pool you find here: http://pool.burstcoin.de/howto.htmlJust change the paths in the miner.conf Next 10 new miners will get a welcome bonus of 1000 BurstMoved to this new pool, fast confirmation, good server and bandwidth
|
|
|
|
crzybilly
|
|
May 18, 2015, 03:01:21 PM |
|
-[ANNOUNCEMENT]- New Pool from Burstcoin.de // http://pool.burstcoin.de Pool Name – Burstcoin.de Pool Pool URL – pool.burstcoin.de Pool Mining Port – 8080 Min Payout 250 Fee 2% Bonus 100.000 Burst after the first month, paid to all miners, that are active DONE! Bonus 10.000 Burst after reaching 10 Miners DONE! Bonus 10.000 Burst after reaching 20 Miners DONE! Bonus 10.000 Burst after reaching 30 Miners DONE! Bonus 10.000 Burst after reaching 40 Miners DONE! Bonus 10.000 Burst after reaching 50 Miners Bonus 10.000 Burst after reaching 60 Miners Bonus 10.000 Burst after reaching 70 Miners Bonus 10.000 Burst after reaching 80 Miners Bonus 10.000 Burst after reaching 90 Miners Bonus 100.000 Burst after reaching 100 Miners Bonus 100.000 Burst after reaching 200 Miners Bonus 100.000 Burst after reaching 300 Miners Bonus 200.000 Burst after reaching 400 Miners Hardware Dual Quad Core Xeon with 3.0 Ghz, 24GB Ram Internet 1GBit with DDos Protectoin Fail Safe Replicated Host with Fallback Geo location Germany Quality Made in Germany Pool Software Urays V2 pool modified and error fixed Version from Blago (thanks to blago for the support) All my own miners already use the pool, with now over 160TBJoin and lets make some Burst together![/size] Latest full configurated blago miner you the pool you find here: http://pool.burstcoin.de/howto.htmlJust change the paths in the miner.conf Next 10 new miners will get a welcome bonus of 1000 BurstPool up to 56 miners... has the 50 miner been paid out?
|
|
|
|
smaxer
Newbie
Offline
Activity: 47
Merit: 0
|
|
May 18, 2015, 03:42:11 PM |
|
Sometimes I get the same error. Don't know how to fix it, sorry. Maybe Blago can help us with that.
|
|
|
|
mo35
Member
Offline
Activity: 142
Merit: 10
|
|
May 18, 2015, 04:47:27 PM |
|
I like the new version of your miner very much. Finally memory usage problem under Win7-x64 is solved. The problem is the miner randomly crashes within 1-3 days with the same error message: Any idea whats wrong and what can be done to avoid these crashes? Previous versions worked for many weeks without crashes. Sometimes I get the same error. Don't know how to fix it, sorry. Maybe Blago can help us with that. happens with previous blago versions too, with latest ver. and on burstcoin.de rarely (thanks to fast server responses), its seems related with fastblocks when you send your nounce and next block hits before you receive server confirmation. (its just my observation)
|
|
|
|
|
crowetic
Legendary
Offline
Activity: 2282
Merit: 1072
https://crowetic.com | https://qortal.org
|
|
May 18, 2015, 05:22:47 PM |
|
I'm gonna be sending it out to our news contacts later on today.
|
▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▒ ▒▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▒ ▒▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▒ ▒▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▒ ▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▒ ▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓ ▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓ ▒▒▒▒▒▒ ▓▓▓▓▓▓▒ ▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓ ▒▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▒ ▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▒ ▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▒ ▓▓▓▓▓▓▒ ▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▒ ▒▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓
| ORTAL
| .⊙.Web and Application hosting. ⊙ decentralized infrastructure .⊙.leveling and voting.
| Founder/current dev group facilitator |
[/td][/tr][/table] [/table]
|
|
|
bobafett
|
|
May 18, 2015, 05:29:01 PM |
|
-[ANNOUNCEMENT]- New Pool from Burstcoin.de // http://pool.burstcoin.de Pool Name – Burstcoin.de Pool Pool URL – pool.burstcoin.de Pool Mining Port – 8080 Min Payout 250 Fee 2% Bonus 100.000 Burst after the first month, paid to all miners, that are active DONE! Bonus 10.000 Burst after reaching 10 Miners DONE! Bonus 10.000 Burst after reaching 20 Miners DONE! Bonus 10.000 Burst after reaching 30 Miners DONE! Bonus 10.000 Burst after reaching 40 Miners DONE! Bonus 10.000 Burst after reaching 50 Miners Bonus 10.000 Burst after reaching 60 Miners Bonus 10.000 Burst after reaching 70 Miners Bonus 10.000 Burst after reaching 80 Miners Bonus 10.000 Burst after reaching 90 Miners Bonus 100.000 Burst after reaching 100 Miners Bonus 100.000 Burst after reaching 200 Miners Bonus 100.000 Burst after reaching 300 Miners Bonus 200.000 Burst after reaching 400 Miners Hardware Dual Quad Core Xeon with 3.0 Ghz, 24GB Ram Internet 1GBit with DDos Protectoin Fail Safe Replicated Host with Fallback Geo location Germany Quality Made in Germany Pool Software Urays V2 pool modified and error fixed Version from Blago (thanks to blago for the support) All my own miners already use the pool, with now over 160TBJoin and lets make some Burst together![/size] Latest full configurated blago miner you the pool you find here: http://pool.burstcoin.de/howto.htmlJust change the paths in the miner.conf Next 10 new miners will get a welcome bonus of 1000 BurstPool up to 56 miners... has the 50 miner been paid out? Yes see one page before. Also i throwed in a additional 10k bonus. Have fun
|
|
|
|
profitofthegods
|
|
May 18, 2015, 06:06:22 PM |
|
I'm gonna be sending it out to our news contacts later on today. That's good. Glad I got in with my article first then
|
|
|
|
jamoes
Member
Offline
Activity: 89
Merit: 10
|
|
May 18, 2015, 06:54:14 PM |
|
SSL is not strictly required, it just adds an additional level of security. If you take a look at a packet trace of you authenticating to a non-SSL wallet, the pass phrase is not sent over the wire. Instead, after you enter your passphrase, the browser requests the publickey for your account (The account ID is generated from the passphrase). Presumably then, the private key (also generated from the passphrase) is used to validate the public key and grant access.
So, even without SSL the passphrase cannot be harvested, SSL just adds an additional layer by making the entire conversation encrypted.
SSL is required for real security. SSL provides both encryption and authentication. Without SSL, it is possible to perform a man-in-the-middle attack. For example: an attacker sitting in the middle of your non-SSL connection can replace the javascript on the webpage with malicious javascript that harvests your password. I'm glad Burst City added SSL to their wallet, but it really should have been there all along. To be honest, in this day and age, every website should have SSL, especially a website that is dealing directly with sending and receiving a crypto-currency.
|
|
|
|
haitch
|
|
May 18, 2015, 07:06:09 PM |
|
SSL is not strictly required, it just adds an additional level of security. If you take a look at a packet trace of you authenticating to a non-SSL wallet, the pass phrase is not sent over the wire. Instead, after you enter your passphrase, the browser requests the publickey for your account (The account ID is generated from the passphrase). Presumably then, the private key (also generated from the passphrase) is used to validate the public key and grant access.
So, even without SSL the passphrase cannot be harvested, SSL just adds an additional layer by making the entire conversation encrypted.
SSL is required for real security. SSL provides both encryption and authentication. Without SSL, it is possible to perform a man-in-the-middle attack. For example: an attacker sitting in the middle of your non-SSL connection can replace the javascript on the webpage with malicious javascript that harvests your password. I'm glad Burst City added SSL to their wallet, but it really should have been there all along. To be honest, in this day and age, every website should have SSL, especially a website that is dealing directly with sending and receiving a crypto-currency. Good point - I hadn't considered the MitM attack - was only thinking of the encryption of the passphrase. H.
|
███ ███ ███ ███ ███ ███ ███ ███ ███ ███ ███ ███ █████████████████████████ ███ ███ ███ ███ ███ ███ | IRELINE |
██████ ██████ ██████ ██████ ██████ ██████ ██████ ██████
| Largest Fund worldwide for distributed application makers ███████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████ ███████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████ wireline.io - facebook.com/wirelineio - @wirelineio |
██████ ██████ ██████ ██████ ██████ ██████ ██████ ██████
| ●⚫⦁ ICO ⦁⚫● September 1 |
|
|
|
Blago
|
|
May 18, 2015, 07:37:47 PM |
|
I like the new version of your miner very much. Finally memory usage problem under Win7-x64 is solved. The problem is the miner randomly crashes within 1-3 days with the same error message: Any idea whats wrong and what can be done to avoid these crashes? Previous versions worked for many weeks without crashes. Sometimes I get the same error. Don't know how to fix it, sorry. Maybe Blago can help us with that. happens with previous blago versions too, with latest ver. and on burstcoin.de rarely (thanks to fast server responses), its seems related with fastblocks when you send your nounce and next block hits before you receive server confirmation. (its just my observation) Ok, I'll try to find and fix the problem
|
Relax, I’m russian!... BURST-B2LU-SGCZ-NYVS-HZEPK
|
|
|
bitladen
|
|
May 18, 2015, 08:59:30 PM |
|
any news on mixer?
|
|
|
|
callmejack
|
|
May 18, 2015, 09:22:03 PM Last edit: May 18, 2015, 10:07:41 PM by callmejack |
|
any news on mixer?
dont know but polo became a msb and limits withdrawals per day.... burst withdrawals temporarily dont work. the blockexplorer says the last tx happened 20h ago ( http://burstcoin.eu/address/5810532812037266198). someone in the trollbox just asked when withdrawals will work again refering to the last tx on the blockchain and got roughly told by a mod to open a support ticket if there are any issues. if this trend continues a AT based decentralized exchange may become huge
|
|
|
|
mczarnek
|
|
May 18, 2015, 11:21:05 PM |
|
any news on mixer?
dont know but polo became a msb and limits withdrawals per day.... burst withdrawals temporarily dont work. the blockexplorer says the last tx happened 20h ago ( http://burstcoin.eu/address/5810532812037266198). someone in the trollbox just asked when withdrawals will work again refering to the last tx on the blockchain and got roughly told by a mod to open a support ticket if there are any issues. if this trend continues a AT based decentralized exchange may become huge I definitely see decentralized exchanges as the future, fixes the Mt Gox problem!
|
|
|
|
almond
|
|
May 18, 2015, 11:33:34 PM |
|
-[ANNOUNCEMENT]- New Pool from Burstcoin.de // http://pool.burstcoin.de Pool Name – Burstcoin.de Pool Pool URL – pool.burstcoin.de Pool Mining Port – 8080 Min Payout 250 Fee 2% Bonus 100.000 Burst after the first month, paid to all miners, that are active DONE! Bonus 10.000 Burst after reaching 10 Miners DONE! Bonus 10.000 Burst after reaching 20 Miners DONE! Bonus 10.000 Burst after reaching 30 Miners DONE! Bonus 10.000 Burst after reaching 40 Miners DONE! Bonus 10.000 Burst after reaching 50 Miners Bonus 10.000 Burst after reaching 60 Miners Bonus 10.000 Burst after reaching 70 Miners Bonus 10.000 Burst after reaching 80 Miners Bonus 10.000 Burst after reaching 90 Miners Bonus 100.000 Burst after reaching 100 Miners Bonus 100.000 Burst after reaching 200 Miners Bonus 100.000 Burst after reaching 300 Miners Bonus 200.000 Burst after reaching 400 Miners Hardware Dual Quad Core Xeon with 3.0 Ghz, 24GB Ram Internet 1GBit with DDos Protectoin Fail Safe Replicated Host with Fallback Geo location Germany Quality Made in Germany Pool Software Urays V2 pool modified and error fixed Version from Blago (thanks to blago for the support) All my own miners already use the pool, with now over 160TBJoin and lets make some Burst together![/size] Latest full configurated blago miner you the pool you find here: http://pool.burstcoin.de/howto.htmlJust change the paths in the miner.conf Next 10 new miners will get a welcome bonus of 1000 BurstI 'm a little late to the party, as usual, but since I drive a german car, & love german lenses on my cameras, I had to give this a try. So far so good !
|
Freedom of the press is guaranteed only to those who own one
|
|
|
Elmit
|
|
May 19, 2015, 01:00:19 AM |
|
SSL is not strictly required, it just adds an additional level of security. If you take a look at a packet trace of you authenticating to a non-SSL wallet, the pass phrase is not sent over the wire. Instead, after you enter your passphrase, the browser requests the publickey for your account (The account ID is generated from the passphrase). Presumably then, the private key (also generated from the passphrase) is used to validate the public key and grant access.
So, even without SSL the passphrase cannot be harvested, SSL just adds an additional layer by making the entire conversation encrypted.
SSL is required for real security. SSL provides both encryption and authentication. Without SSL, it is possible to perform a man-in-the-middle attack. For example: an attacker sitting in the middle of your non-SSL connection can replace the javascript on the webpage with malicious javascript that harvests your password. I'm glad Burst City added SSL to their wallet, but it really should have been there all along. To be honest, in this day and age, every website should have SSL, especially a website that is dealing directly with sending and receiving a crypto-currency. Two notes to that:1. SSL is as good as the certificate is. There are different levels. Some, as this one, are only good that you know the connection is secure. It misses contacts, background checks, ... Basically this certificate says: the connection is correct! 2. The next step is what the server does with your information. ... I don't want to spell out what could happen, if the passphrase leaks to the owner/employee/hacker of that site. With all anonymity, ... we know not even who is xxx of that site. I strongly recommend NOT to use such site for MONEY sensitive issues! For me it is merrily a "proof of concept", but not to use!
|
|
|
|
bitladen
|
|
May 19, 2015, 01:19:40 AM |
|
any news on mixer?
dont know but polo became a msb and limits withdrawals per day.... burst withdrawals temporarily dont work. the blockexplorer says the last tx happened 20h ago ( http://burstcoin.eu/address/5810532812037266198). someone in the trollbox just asked when withdrawals will work again refering to the last tx on the blockchain and got roughly told by a mod to open a support ticket if there are any issues. if this trend continues a AT based decentralized exchange may become huge I definitely see decentralized exchanges as the future, fixes the Mt Gox problem! they even fix scenarios that didn't happen yet, like government seizure, which is the real threat
|
|
|
|
crowetic
Legendary
Offline
Activity: 2282
Merit: 1072
https://crowetic.com | https://qortal.org
|
|
May 19, 2015, 01:22:43 AM |
|
SSL is not strictly required, it just adds an additional level of security. If you take a look at a packet trace of you authenticating to a non-SSL wallet, the pass phrase is not sent over the wire. Instead, after you enter your passphrase, the browser requests the publickey for your account (The account ID is generated from the passphrase). Presumably then, the private key (also generated from the passphrase) is used to validate the public key and grant access.
So, even without SSL the passphrase cannot be harvested, SSL just adds an additional layer by making the entire conversation encrypted.
SSL is required for real security. SSL provides both encryption and authentication. Without SSL, it is possible to perform a man-in-the-middle attack. For example: an attacker sitting in the middle of your non-SSL connection can replace the javascript on the webpage with malicious javascript that harvests your password. I'm glad Burst City added SSL to their wallet, but it really should have been there all along. To be honest, in this day and age, every website should have SSL, especially a website that is dealing directly with sending and receiving a crypto-currency. Two notes to that:1. SSL is as good as the certificate is. There are different levels. Some, as this one, are only good that you know the connection is secure. It misses contacts, background checks, ... Basically this certificate says: the connection is correct! 2. The next step is what the server does with your information. ... I don't want to spell out what could happen, if the passphrase leaks to the owner/employee/hacker of that site. With all anonymity, ... we know not even who is xxx of that site. I strongly recommend NOT to use such site for MONEY sensitive issues! For me it is merrily a "proof of concept", but not to use! 1. it has already been stated and proven that BURST doesn't allow for password stealing in this manner. 2. The SSL was something that was done for peace of mind and for no other purpose 3. If you don't trust me, don't use my wallet, no one is forcing you.
|
▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▒ ▒▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▒ ▒▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▒ ▒▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▒ ▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▒ ▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓ ▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓ ▒▒▒▒▒▒ ▓▓▓▓▓▓▒ ▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓ ▒▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▒ ▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▒ ▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▒ ▓▓▓▓▓▓▒ ▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▒ ▒▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▒▓▓▓▓▓▓▓▓▓▓▓▓▓▓
| ORTAL
| .⊙.Web and Application hosting. ⊙ decentralized infrastructure .⊙.leveling and voting.
| Founder/current dev group facilitator |
[/td][/tr][/table] [/table]
|
|
|
haitch
|
|
May 19, 2015, 01:28:48 AM |
|
SSL is not strictly required, it just adds an additional level of security. If you take a look at a packet trace of you authenticating to a non-SSL wallet, the pass phrase is not sent over the wire. Instead, after you enter your passphrase, the browser requests the publickey for your account (The account ID is generated from the passphrase). Presumably then, the private key (also generated from the passphrase) is used to validate the public key and grant access.
So, even without SSL the passphrase cannot be harvested, SSL just adds an additional layer by making the entire conversation encrypted.
SSL is required for real security. SSL provides both encryption and authentication. Without SSL, it is possible to perform a man-in-the-middle attack. For example: an attacker sitting in the middle of your non-SSL connection can replace the javascript on the webpage with malicious javascript that harvests your password. I'm glad Burst City added SSL to their wallet, but it really should have been there all along. To be honest, in this day and age, every website should have SSL, especially a website that is dealing directly with sending and receiving a crypto-currency. Two notes to that:1. SSL is as good as the certificate is. There are different levels. Some, as this one, are only good that you know the connection is secure. It misses contacts, background checks, ... Basically this certificate says: the connection is correct! 2. The next step is what the server does with your information. ... I don't want to spell out what could happen, if the passphrase leaks to the owner/employee/hacker of that site. With all anonymity, ... we know not even who is xxx of that site. I strongly recommend NOT to use such site for MONEY sensitive issues! For me it is merrily a "proof of concept", but not to use! Elmit, Crowetic is a known, trusted, member of the burst community. I trust the services he provides totally. If you offered a web wallet I wouldn't trust it even if you offered 10x the encryption level. Reputation and history is everything, and you fail on both. H.
|
███ ███ ███ ███ ███ ███ ███ ███ ███ ███ ███ ███ █████████████████████████ ███ ███ ███ ███ ███ ███ | IRELINE |
██████ ██████ ██████ ██████ ██████ ██████ ██████ ██████
| Largest Fund worldwide for distributed application makers ███████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████ ███████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████ wireline.io - facebook.com/wirelineio - @wirelineio |
██████ ██████ ██████ ██████ ██████ ██████ ██████ ██████
| ●⚫⦁ ICO ⦁⚫● September 1 |
|
|
|
wmikrut
|
|
May 19, 2015, 01:36:11 AM |
|
SSL is not strictly required, it just adds an additional level of security. If you take a look at a packet trace of you authenticating to a non-SSL wallet, the pass phrase is not sent over the wire. Instead, after you enter your passphrase, the browser requests the publickey for your account (The account ID is generated from the passphrase). Presumably then, the private key (also generated from the passphrase) is used to validate the public key and grant access.
So, even without SSL the passphrase cannot be harvested, SSL just adds an additional layer by making the entire conversation encrypted.
SSL is required for real security. SSL provides both encryption and authentication. Without SSL, it is possible to perform a man-in-the-middle attack. For example: an attacker sitting in the middle of your non-SSL connection can replace the javascript on the webpage with malicious javascript that harvests your password. I'm glad Burst City added SSL to their wallet, but it really should have been there all along. To be honest, in this day and age, every website should have SSL, especially a website that is dealing directly with sending and receiving a crypto-currency. Two notes to that:1. SSL is as good as the certificate is. There are different levels. Some, as this one, are only good that you know the connection is secure. It misses contacts, background checks, ... Basically this certificate says: the connection is correct! 2. The next step is what the server does with your information. ... I don't want to spell out what could happen, if the passphrase leaks to the owner/employee/hacker of that site. With all anonymity, ... we know not even who is xxx of that site. I strongly recommend NOT to use such site for MONEY sensitive issues! For me it is merrily a "proof of concept", but not to use! Elmit, Crowetic is a known, trusted, member of the burst community. I trust the services he provides totally. If you offered a web wallet I wouldn't trust it even if you offered 10x the encryption level. Reputation and history is everything, and you fail on both. H. Wow... in Crowetic's defense... he has been completely transparent if nothing else. He has been a part of Burst when only like 5 or 6 of us were chatting in the beginning. Elmit... if it's the same Elmit I know of from burstforum... you couldn't give me anything he has to offer if it was free and you added something to it.
|
I will NEVER ask for any kind of funds up front in a buy/sale of anything on bitcointalk.
BM-2cTFihJKmSwusMAoYuUHPvpx56Jozv64KK
|
|
|
|