[ANN][GEMZ] GetGems - Social Messaging App That Pays - Live on Android, iOS, Web

[reRaise]

I have a couple questions.

1. Can the devs have access to my coins?

2. Like every other wallet i would like to know if someone can steel my coins from my smartphone without having my phone and my PIN?

3. Could my coins just disappear in the wallet without anyone steeling it? Maybe caused by a bug or something, or is it on the blockchain anyway no matter what happens to the app?

[mishax1]

Sorry for not answering all three questions, the answers depend on the code of the app and the keys should be stored in a protected memory ,but don't expect it to be secure as a Trezor wallet...

Your coins can't just disappear since they are on the blockchain and not on a server(yet), and can be accessed from https://www.counterwallet.io with your passphrase

[peled1986]

I have a couple questions.

1. Can the devs have access to my coins?

No, only the user can access any btc/gemz that are on-chain because the passphrase is generated locally on the device. In order to comply with the level of security enforced by Counterparty, we use the same open-source code used by Couterparty in their official web wallet (https://github.com/CounterpartyXCP/counterwallet/). This code makes sure the passphrase itself never leaves the device, only appropriate hashes.

2. Like every other wallet i would like to know if someone can steel my coins from my smartphone without having my phone and my PIN?

The user is asked to choose a 4 digit PIN code to protect the passphrase on the device. The passphrase is only held decrypted in volatile memory and deleted from memory as soon as it’s not needed. This makes sure that even if the device is stolen, the thief will not be able to decrypt the passphrase from local storage.

As an extra security measure upon installation, the app generates a unique key (secure random with 30 characters). This key is saved persistently on the device and used to identify this specific device hardware in future API calls (anonymously). This locks usage of the Gems app to this specific device for security reasons (the user will need to type in their passphrase in order to add a new device and thus locking the old stolen device).

3. Could my coins just disappear in the wallet without anyone steeling it? Maybe caused by a bug or something, or is it on the blockchain anyway no matter what happens to the app?

BTC/GEMZ that are held on-chain can only be accessed using the passphrase. Even if the GetGems app and Counterwallet are offline you can still mathematically generate your public and private keys using your passphrase. Since the addresses are generated on the fly using JavaScript, it is possible to do this in your own browser (even offline). You can use this tool: https://blockscan.com/tool_generatekey

The Counterparty exchange is actually part of the Bitcoin blockchain. This means that Bitcoin itself would have to be shut down entirely in order for it to go offline.

In the next development update (in QA right now) like we said in the past, our plan is that GEMZ will be settled offline through the GetGems internal hosted wallet. This is a hybrid semi centralized database system meant for smaller balances and to allow for speed, security and zero transaction fees. GEMZ will be able to withdrawn to any external counterparty wallet which will be processed using our secure counterparty gateway server.

This hybrid solution (very similar to how coinbase and changetip operate) is good for the "Airdrop" and for new users while not taking from the security of users that want to have their GEMZ only on-chain outside of the app. .

[reRaise]

Thanks

[reRaise]

Sorry for not answering all three questions, the answers depend on the code of the app and the keys should be stored in a protected memory ,but don't expect it to be secure as a Trezor wallet...

Your coins can't just disappear since they are on the blockchain and not on a server(yet), and can be accessed from https://www.counterwallet.io with your passphrase

I was wondering can Gemz also be stored on a Trezor device, since both Gemz and Bitcoin the use the same address?

[PilotofBTC]

I have a couple questions.

1. Can the devs have access to my coins?

2. Like every other wallet i would like to know if someone can steel my coins from my smartphone without having my phone and my PIN?

3. Could my coins just disappear in the wallet without anyone steeling it? Maybe caused by a bug or something, or is it on the blockchain anyway no matter what happens to the app?

1. If they implement off chain transactions, then yes, they will be stored on a centralized server that the devs (or someone) will have access to.

The other two have to do with app security and phone security. The code is supposed to be open source but I'm not sure if any security experts have audited it.

[reRaise]

The user is asked to choose a 4 digit PIN code to protect the passphrase on the device. The passphrase is only held decrypted in volatile memory and deleted from memory as soon as it’s not needed. This makes sure that even if the device is stolen, the thief will not be able to decrypt the passphrase from local storage.

As an extra security measure upon installation, the app generates a unique key (secure random with 30 characters). This key is saved persistently on the device and used to identify this specific device hardware in future API calls (anonymously). This locks usage of the Gems app to this specific device for security reasons (the user will need to type in their passphrase in order to add a new device and thus locking the old stolen device).

If my phone gets stolen does the thief have to decrypt my 4 digit PIN or the passphrase? Is this passphrase the 12 word passphrase?

Also if my phone gets stolen what should i do next to protect my coins? Would i have to need the 12 word passphrase and access my coins through the Counterparty web wallet and send the coins elsewhere? or do i need to do something else?

[peled1986]

The user is asked to choose a 4 digit PIN code to protect the passphrase on the device. The passphrase is only held decrypted in volatile memory and deleted from memory as soon as it’s not needed. This makes sure that even if the device is stolen, the thief will not be able to decrypt the passphrase from local storage.

As an extra security measure upon installation, the app generates a unique key (secure random with 30 characters). This key is saved persistently on the device and used to identify this specific device hardware in future API calls (anonymously). This locks usage of the Gems app to this specific device for security reasons (the user will need to type in their passphrase in order to add a new device and thus locking the old stolen device).

If my phone gets stolen does the thief have to decrypt my 4 digit PIN or the passphrase? Is this passphrase the 12 word passphrase?

The thief will have to decrypt a key that was generated by combination of a random key + your 4 digit PIN.
[Yes, passphrase refers to the 12 words passphrase]

Also if my phone gets stolen what should i do next to protect my coins? Would i have to need the 12 word passphrase and access my coins through the Counterparty web wallet and send the coins elsewhere? or do i need to do something else?

You have two options to protect your coins:
(1) Use the 12 word passphrase to access your wallet through Counterparty web wallet and send the coins elsewhere.
(2) Use the 12 word passphrase to login into your GetGems account from a new mobile device, thus locking the old stolen device.

[reRaise]

The user is asked to choose a 4 digit PIN code to protect the passphrase on the device. The passphrase is only held decrypted in volatile memory and deleted from memory as soon as it’s not needed. This makes sure that even if the device is stolen, the thief will not be able to decrypt the passphrase from local storage.

As an extra security measure upon installation, the app generates a unique key (secure random with 30 characters). This key is saved persistently on the device and used to identify this specific device hardware in future API calls (anonymously). This locks usage of the Gems app to this specific device for security reasons (the user will need to type in their passphrase in order to add a new device and thus locking the old stolen device).

If my phone gets stolen does the thief have to decrypt my 4 digit PIN or the passphrase? Is this passphrase the 12 word passphrase?

The thief will have to decrypt a key that was generated by combination of a random key + your 4 digit PIN.
[Yes, passphrase refers to the 12 words passphrase]

Also if my phone gets stolen what should i do next to protect my coins? Would i have to need the 12 word passphrase and access my coins through the Counterparty web wallet and send the coins elsewhere? or do i need to do something else?

You have two options to protect your coins:
(1) Use the 12 word passphrase to access your wallet through Counterparty web wallet and send the coins elsewhere.
(2) Use the 12 word passphrase to login into your GetGems account from a new mobile device, thus locking the old stolen device.

I see, imagine he decrypted the 4 digit pin and the passphrase and i logged in from a new device before he decrypted it, what will the app show when it's locked? Will he not be able to enter the app or will the wallet show locked etc. I'm asking because people might ask me such questions while introducing it to them.

[Jayjay04]

Daniel (peled1986)

Could you tell us more about your supposely friends working at Synereo ?
What do you think about the project and the relation / competition with Getgems ?

THX

[nextgencoin]

Someone dumped pretty hard on Polinex. I wish I had some BTC spare right now.

[ninjaboon]

Someone dumped pretty hard on Polinex. I wish I had some BTC spare right now.

why did  they dump it? about 240xxx gemz. wow

[nextgencoin]

Someone dumped pretty hard on Polinex. I wish I had some BTC spare right now.

why did  they dump it? about 240xxx gemz. wow

It was a suspicious dump too, anyone can decide to sell but a tiny bit of patience and they could of got probably 40% or so more BTC. Maybe somone wants to put some into Synero a related project but still selling like that they either are idiots or trying to drag the price down.


You know anything about it? You seem to be quite involved in Telebit?

https://bitcointalk.org/index.php?topic=961216.msg10529216#msg10529216

[Bitcoinmeetups.org]

Someone dumped pretty hard on Polinex. I wish I had some BTC spare right now.

why did  they dump it? about 240xxx gemz. wow

It was a suspicious dump too, anyone can decide to sell but a tiny bit of patience and they could of got probably 40% or so more BTC. Maybe somone wants to put some into Synero a related project but still selling like that they either are idiots or trying to drag the price down.


You know anything about it? You seem to be quite involved in Telebit?

https://bitcointalk.org/index.php?topic=961216.msg10529216#msg10529216

Patience is important when selling. Personally I know nothing about it.

[TrackCoin]

Google play it's getting..? Actually wasn't details so confused....

[Bitcoinmeetups.org]

I think hashtag enabled status updates functionality could be a useful feature for GetGems. But maybe too heavy to implement.

[icmp22]

https://twitter.com/getgemsorg/status/580650862567038976

iOS application has been submitted to the App Store and is waiting for manual approval. We'll update on Twitter.

[Bitcoinmeetups.org]

https://twitter.com/getgemsorg/status/580650862567038976

iOS application has been submitted to the App Store and is waiting for manual approval. We'll update on Twitter.

Waiting for Twitter updates. My friends use iOS and could use the app.

[yoyoamigo]

Someone dumped pretty hard on Polinex. I wish I had some BTC spare right now.

why did  they dump it? about 240xxx gemz. wow

It was a suspicious dump too, anyone can decide to sell but a tiny bit of patience and they could of got probably 40% or so more BTC. Maybe somone wants to put some into Synero a related project but still selling like that they either are idiots or trying to drag the price down.


You know anything about it? You seem to be quite involved in Telebit?

https://bitcointalk.org/index.php?topic=961216.msg10529216#msg10529216

Patience is important when selling. Personally I know nothing about it.

lol!!! dump followed by an iOS update that just got from soon to sooner 

[Netnox]

When airdrop goes live then getgems has set a new benchmark in the instant messaging apps industry, this kind of progress should get coverage, because its based on a complete new, working, money based technology and you can cash out immediately, i mentioned the latter because there is quack messenger which rewards users with fiat but as someone mentioned they get their money after 30 - 90 days.

I think getgems is setting a standard on how instant messengers are going to evolve.