LoweryCBS (OP)
Sr. Member
Offline
Activity: 364
Merit: 250
firstbits 1LoCBS
|
|
July 24, 2012, 05:34:59 PM |
|
Napkin-backing some point-of-sale ideas, and wondering if there's a simple Android app that will scan a QR of the address and return the balance?
|
|
|
|
casascius
Mike Caldwell
VIP
Legendary
Offline
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
|
|
July 24, 2012, 05:42:54 PM |
|
No, but such a thing should be simple to create and somebody should create it. It could be created for iPhone without being a "bitcoin app", and would merely do the following: 1. scan QR code 2. extract bitcoin address out of it, removing any other URL components 3. direct the web browser to http://blockchain.info/address/ADDRESSGOESHEREAny open-source QR code scanner could be modified to do such a thing and it would work great.
|
Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.
|
|
|
Stephen Gornick
Legendary
Offline
Activity: 2506
Merit: 1010
|
|
July 24, 2012, 05:49:29 PM |
|
Napkin-backing some point-of-sale ideas, and wondering if there's a simple Android app that will scan a QR of the address and return the balance?
I asked essentially the same question and nobody had a solution so it probably doesn't yet exist. But there is definitely a need for it. - http://bitcoin.stackexchange.com/q/4107/153
|
|
|
|
tbcoin
Legendary
Offline
Activity: 1022
Merit: 1000
|
|
July 24, 2012, 09:36:40 PM |
|
|
|
|
|
unclemantis
Member
Offline
Activity: 98
Merit: 10
(:firstbits => "1mantis")
|
|
July 24, 2012, 11:42:37 PM |
|
I have a bookmark in my blackberry that points to my cold storage address and gives me my balance in Satoshi. Yes. I am geeky like that and besides it makes me look like i have a 100 million more than I really do!
|
|
|
|
bg002h
Donator
Legendary
Offline
Activity: 1466
Merit: 1048
I outlived my lifetime membership:)
|
|
July 25, 2012, 01:00:26 AM |
|
I have my addresses in an iOS app I wrote...it's simple, but it works for me. More info in my signature.
|
|
|
|
|
davout
Legendary
Offline
Activity: 1372
Merit: 1008
1davout
|
|
July 25, 2012, 06:38:06 AM |
|
|
|
|
|
rasengan
|
|
July 25, 2012, 06:39:35 AM |
|
That's very cool!
|
Joseon.com - The First Legally Recognized Cyber State
|
|
|
LoweryCBS (OP)
Sr. Member
Offline
Activity: 364
Merit: 250
firstbits 1LoCBS
|
|
July 25, 2012, 11:45:14 AM |
|
Too cool for school, yo! The name "Bitcoin Balance Checker" is ok I guess, but if asked I would have suggested: "The Magic Computer Money Fancy Anonymous Cryptographic Coin Balance-Checker-Outer"
|
|
|
|
rasengan
|
|
July 25, 2012, 02:53:19 PM |
|
Too cool for school, yo!
The name "Bitcoin Balance Checker" is ok I guess, but if asked I would have suggested:
"The Magic Computer Money Fancy Anonymous Cryptographic Coin Balance-Checker-Outer"
Haha - you can definitely rebuild/repackage the app and post it on the Google Play store with this name as well if you would like -- I like the name! :-)
|
Joseon.com - The First Legally Recognized Cyber State
|
|
|
casascius
Mike Caldwell
VIP
Legendary
Offline
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
|
|
July 25, 2012, 04:41:00 PM |
|
I haven't tested any of these apps, but wanted to make sure the apps were coded in such a way that they will resist a malicious QR code that contained a fully qualified URL that led to a fake website. Example: I am an attacker, and I print a QR code on a note that encodes the following URL: http://my-nifty-attack-site.tk/address/128jxLBCaS1MZpCtXEzN8TmwcetBHibP9L When browsed, the attack site shows a mockup of blockexplorer / blockchain.info that shows a big balance that is not really there, which allows me to deceive someone into thinking I paid them when I really haven't. The app should never send the smartphone browser there, but instead be smart enough to strip the bitcoin address out, and formulate the correct complete URL on its own: e.g. http://blockchain.info/address/128jxLBCaS1MZpCtXEzN8TmwcetBHibP9L
|
Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.
|
|
|
|
rasengan
|
|
July 25, 2012, 05:15:38 PM |
|
I haven't tested any of these apps, but wanted to make sure the apps were coded in such a way that they will resist a malicious QR code that contained a fully qualified URL that led to a fake website. Example: I am an attacker, and I print a QR code on a note that encodes the following URL: http://my-nifty-attack-site.tk/address/128jxLBCaS1MZpCtXEzN8TmwcetBHibP9L When browsed, the attack site shows a mockup of blockexplorer / blockchain.info that shows a big balance that is not really there, which allows me to deceive someone into thinking I paid them when I really haven't. The app should never send the smartphone browser there, but instead be smart enough to strip the bitcoin address out, and formulate the correct complete URL on its own: e.g. http://blockchain.info/address/128jxLBCaS1MZpCtXEzN8TmwcetBHibP9LHi Mike Hope you are doing well! I am loving my casascius coins! As of now, the way it works is as follows: http://blockexplorer.com/address/(unescape(e.result).match(/([^\?]*)/)[1].replace("bitcoin:","")) What this means is: 1. It is safe from the malicious attack that you have provided above in terms of http://my-nifty-attack... 2. However, it will only accept QR codes that have the following form: 128jxLBCaS1MZpCtXEzN8TmwcetBHibP9L bitcoin:128jxLBCaS1MZpCtXEzN8TmwcetBHibP9LAs per Winterfrost: They will simply get some kind of 404 or Address not found I presume. Please checkout that tiny snippet on GIST -- that is the entirety of what this is as I simply made this quickly in an effort to give back to the bitcoin community which I have really come to value greatly. As Erik Voorhees had once mentioned, you guys (bitcoin community) are truly amazing. With that said, if you think the reader needs to be able to read other types of addresses aside from the "#2" listed above, please let me know. Cheers, rasengan
|
Joseon.com - The First Legally Recognized Cyber State
|
|
|
casascius
Mike Caldwell
VIP
Legendary
Offline
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
|
|
July 25, 2012, 05:37:34 PM |
|
If using regex, then why not just use regex to snip out the first contiguous group of say 28-34 characters starting with '1' and the rest matching the base58 alphabet? This would make it highly universal without adding any complexity.
|
Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.
|
|
|
rasengan
|
|
July 25, 2012, 05:54:49 PM |
|
If using regex, then why not just use regex to snip out the first contiguous group of say 28-34 characters starting with '1' and the rest matching the base58 alphabet? This would make it highly universal without adding any complexity.
Brilliant! I will get on it in a few moments. I have an appointment for a haircut real quick, and then I will change it as per your suggestion thereafter. Thanks again, you always have the brightest ideas casascius.
|
Joseon.com - The First Legally Recognized Cyber State
|
|
|
rasengan
|
|
July 25, 2012, 09:29:55 PM |
|
casascius, Here is your suggestion: https://gist.github.com/3178816/([1][123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{27,34})/ I have tried it with several strangely formulated QR codes and it seems to work well. When a QR is not matched to the match expression, the app will just exit. I'm uploading to Android Market (Google Play) now and it should be available within an hour. Thanks again, rasengan edit: Hope this is what you meant.
|
Joseon.com - The First Legally Recognized Cyber State
|
|
|
|
TheButterZone
Legendary
Offline
Activity: 3066
Merit: 1032
RIP Mommy
|
|
August 10, 2013, 10:59:38 PM |
|
|
Saying that you don't trust someone because of their behavior is completely valid.
|
|
|
|