Author

Topic: Closed Thread - page 384. (Read 677687 times)

full member
Activity: 140
Merit: 100
August 17, 2014, 12:11:54 PM
if its just the security of the project you was meaning thats fine, its understandable.
at least for me it sounded like u was meaning security in the wallet.

i must ask tho why has the client not been built up to at least a stable beta before the coins were distributed?  a great proportion of other coins have released a functional client before they distributed the coins or at least a secure web client but we diddnt even get that. what was the reasoning behind choosing http over https to distribute NODE as imo it was a security risk to do so.

Our beta test, everything was fine and the network worked
After the release of the client we are faced with the problems of synchronization, we now debug and test with you

I ask the community to be patient until we release the final customer
hero member
Activity: 620
Merit: 500
August 17, 2014, 11:58:29 AM

so is that way of saying currently its insecure? because it sounds like it

i agree with simakki all this should have been done way before launch not after or at least have a half decent working wallet.

Blockchain already formed, the only thing that we set up and test the network and data synchronization. We have already done today new changes in the code
On the following days there is a new client update

I am referring to the safety of our project
Have you seen something to NXT or other project once fully open code from the very beginning


if its just the security of the project you was meaning thats fine, its understandable.
at least for me it sounded like u was meaning security in the wallet.

i must ask tho why has the client not been built up to at least a stable beta before the coins were distributed?  a great proportion of other coins have released a functional client before they distributed the coins or at least a secure web client but we diddnt even get that. what was the reasoning behind choosing http over https to distribute NODE as imo it was a security risk to do so.
full member
Activity: 140
Merit: 100
August 17, 2014, 11:39:10 AM

so is that way of saying currently its insecure? because it sounds like it

i agree with simakki all this should have been done way before launch not after or at least have a half decent working wallet.

Blockchain already formed, the only thing that we set up and test the network and data synchronization. We have already done today new changes in the code
On the following days there is a new client update. You should understand that before the final version of the client will be new updates it will not affect Your accounts and coins

I am referring to the safety of our project
Have you seen something to NXT or other project once fully open code from the very beginning
hero member
Activity: 620
Merit: 500
August 17, 2014, 11:32:46 AM
how do you know that? are you just speculating? they have not released any code that i am aware of so it can be new code or a copy of nxt. neither are a bad thing for node, nxt is a good platform but its mainly the services and uses which give a coin value. correct me if im wrong tho

The first version of the wallet shipped with "packed" but non-obfuscated code for the backend.  I linked to the original code earlier in the thread, but here is the link again for reference: http://pastebin.com/a7JzU7kv

The new version was obfuscated using jscrambler, so it seems they spent additional time, effort, and $35 to $95 this week to try to better hide their source.  To what end, I'm not sure.

I didn't try much to reconstruct the obfuscated source.  Given that we have the first version and there were likely not heavy code changes in-between it should still be relatively easy to get the version 2 source, but I probably will not bother.

Was the code atleast decent or were there any suspicious parts ? I still do not know how to feel about this project. There are something odd in the PR, distribution and development. Do not see What's was the whole point launching NODE before working client, exchanges etc. Basically we have monetary system built up but no ways to use it.

for security purposes, the source code will be published after beta testing

so is that way of saying currently its insecure? because it sounds like it

i agree with simakki all this should have been done way before launch not after or at least have a half decent working wallet.
full member
Activity: 140
Merit: 100
August 17, 2014, 11:18:27 AM
how do you know that? are you just speculating? they have not released any code that i am aware of so it can be new code or a copy of nxt. neither are a bad thing for node, nxt is a good platform but its mainly the services and uses which give a coin value. correct me if im wrong tho

The first version of the wallet shipped with "packed" but non-obfuscated code for the backend.  I linked to the original code earlier in the thread, but here is the link again for reference: http://pastebin.com/a7JzU7kv

The new version was obfuscated using jscrambler, so it seems they spent additional time, effort, and $35 to $95 this week to try to better hide their source.  To what end, I'm not sure.

I didn't try much to reconstruct the obfuscated source.  Given that we have the first version and there were likely not heavy code changes in-between it should still be relatively easy to get the version 2 source, but I probably will not bother.

Was the code atleast decent or were there any suspicious parts ? I still do not know how to feel about this project. There are something odd in the PR, distribution and development. Do not see What's was the whole point launching NODE before working client, exchanges etc. Basically we have monetary system built up but no ways to use it.

for security purposes, the source code will be published after beta testing
hero member
Activity: 697
Merit: 500
August 17, 2014, 10:32:03 AM
how do you know that? are you just speculating? they have not released any code that i am aware of so it can be new code or a copy of nxt. neither are a bad thing for node, nxt is a good platform but its mainly the services and uses which give a coin value. correct me if im wrong tho

The first version of the wallet shipped with "packed" but non-obfuscated code for the backend.  I linked to the original code earlier in the thread, but here is the link again for reference: http://pastebin.com/a7JzU7kv

The new version was obfuscated using jscrambler, so it seems they spent additional time, effort, and $35 to $95 this week to try to better hide their source.  To what end, I'm not sure.

I didn't try much to reconstruct the obfuscated source.  Given that we have the first version and there were likely not heavy code changes in-between it should still be relatively easy to get the version 2 source, but I probably will not bother.

Was the code atleast decent or were there any suspicious parts ? I still do not know how to feel about this project. There are something odd in the PR, distribution and development. Do not see What's was the whole point launching NODE before working client, exchanges etc. Basically we have monetary system built up but no ways to use it.
sr. member
Activity: 434
Merit: 250
August 17, 2014, 10:13:39 AM
how do you know that? are you just speculating? they have not released any code that i am aware of so it can be new code or a copy of nxt. neither are a bad thing for node, nxt is a good platform but its mainly the services and uses which give a coin value. correct me if im wrong tho

The first version of the wallet shipped with "packed" but non-obfuscated code for the backend.  I linked to the original code earlier in the thread, but here is the link again for reference: http://pastebin.com/a7JzU7kv

The new version was obfuscated using jscrambler, so it seems they spent additional time, effort, and $35 to $95 this week to try to better hide their source.  To what end, I'm not sure.

I didn't try much to reconstruct the obfuscated source.  Given that we have the first version and there were likely not heavy code changes in-between it should still be relatively easy to get the version 2 source, but I probably will not bother.
hero member
Activity: 620
Merit: 500
August 17, 2014, 09:43:06 AM



apart from NODE being a stripped down clone of NXT and originally called NXTL you mean?

Everyone knows they just recoded NXT in another language, yawn.

how do you know that? are you just speculating? they have not released any code that i am aware of so it can be new code or a copy of nxt. neither are a bad thing for node, nxt is a good platform but its mainly the services and uses which give a coin value. correct me if im wrong tho
full member
Activity: 168
Merit: 100
August 17, 2014, 09:37:11 AM
Where I can trade NODE?

The community is aiming to trade node on bter.com!

You can vote here: https://bter.com/voting

I'm never gonna grade at bter again. They lost a lot of credibility during recent hack

https://nxtforum.org/news-and-announcements/three-solutions-proposed-by-bter-com-(200btc-deal-or-310btc-bounty-or-fork)/

https://nxtforum.org/news-and-announcements/forgers-have-been-faced-with-a-choice/

https://bitcointalksearch.org/topic/bter-hacked-and-lost-50m-nxt-740147

And I think it wasn't the first time. It might as well have been an inside job.

Better watch out for some quality exchange, develop your own fiat gateway or try to use nxt AE multigateway.

agreed bter is just as good as dead.

I'm curious.  Poloniex was hacked in March.  Why aren't they dead and why are people still using them?  Mintpal was hacked as well wasn't it?  So out of the remaining exchanges that NODE could get on, maybe Cryptsy or Bittrex (shit coin and pump and dump haven) could be used as most others seem to have no serious volume or simply wouldn't take a new coin.


nxt multigateway is the most sensible way forward in such a situation.

taken from nem thread.. its the smartest and cheapest way forward.. (no trading fees bar transaction fees)

the sooner NEM can be untied to NXT, the better..

what is happening with NXT right now is another good lesson to learn from.. well first of all the lesson is don't get hacked if you're an exchange and secondly, don't perform a rollback or hardfork for an exchange. it would just blemish the reputation of your coin, ala the great Vericoin bailout of '14.



This wasn't a fault of the coin though. It was the exchange.

This is why it's important nem gets on a number of equally popular exchanges on release. One exchange monopolizing the volumes can go belly up if they make even a simple mistake.
it is possible to set up and run our own multigateway for nxt WE so that people can trade with out worry of a central point of failure. All we need is for nem to support multisig and some to set up the servers then just 3 highly trusted people from nem to host the servers. I think after recent events it would be a very good idea to give people this option straight of the bat.

Do you not have to worry about those servers getting hacked then though and someone siphoning off trades midstream? (disclaimer - I know noting)

3 people will be in control of a server each.. as long as you trust that the 3 members will not collude to steal the funds with in the servers then your coins are safe.. as far as i know, all three servers would need to be hacked simultaneously in order for someone to steal the coins.. its not entirely decentralized, but it is magnitudes safer than traditional exchanges... preferably you get people with a vested interest in the said currency/platform to be in control of the servers.

for example in nxt, its going to be james, the owner of nxthaus (new nxt exchange in the making) and cant remember  who else.. the reason these were chosen as the right people is because they all have a huge vested interested in not stealing the coins.. james has coded the damn thing and has a reputation to protect and is also heavily invested in nxt and multigateway assets and therefore has to protect the interests of the buyers of MGW asset.

the owner of nxthaus would never mess with servers as he has a vested interest in being seen as trustworthy, cos if hes not, no one will use his new exchange. the same applies for the other guy ie. high vested interest or is very trustworthy already.

you only have to trust that 2 of the 3 wont collude.. one malicious server maintainer cannot steal the funds alone.. he may be able to fek up multigateway so it stops working but funds cannot be stolen or accounts miscalculated. so even if one entity isnt trust worthy your coins are still safe..

if centralised exchanges used multigateway for their back end stuff, the odds of these hacks stealing millions would not be a concern any longer..


This is not so good idea, let's stop trading one coin through the another one coin
NODE haven't any relation with nxt

just stop promotion nxt in every big coin thread, ok ?
As well, I don't think that it is very good idea to trade NEM and of course NODE in nxt AE, cause it hurts NEM(and other coins) when nxt like ussualy has problem- OK?


apart from NODE being a stripped down clone of NXT and originally called NXTL you mean?

Everyone knows they just recoded NXT in another language, yawn.
sr. member
Activity: 347
Merit: 251
There can be only one!
August 17, 2014, 09:30:21 AM
Question: can the current client forge? I'm guessing not, as the pace of blocks is painfully slow.

Yes the client does take a long time to load, especially initially, but even the NXT client can take forever to load up blocks / update the db (mine took hours last night), so I think folks are somewhat accustomed to it. Pretty good for a beta.. It would be nice if there was a built-in blockchain explorer (i.e. see transactions & balances of accounts) - at very least I should be able to clearly see my own history. Again, pretty solid for a beta. It's purdy too Smiley
full member
Activity: 283
Merit: 101
August 17, 2014, 09:01:44 AM
Where I can trade NODE?

The community is aiming to trade node on bter.com!

You can vote here: https://bter.com/voting

I'm never gonna grade at bter again. They lost a lot of credibility during recent hack

https://nxtforum.org/news-and-announcements/three-solutions-proposed-by-bter-com-(200btc-deal-or-310btc-bounty-or-fork)/

https://nxtforum.org/news-and-announcements/forgers-have-been-faced-with-a-choice/

https://bitcointalksearch.org/topic/bter-hacked-and-lost-50m-nxt-740147

And I think it wasn't the first time. It might as well have been an inside job.

Better watch out for some quality exchange, develop your own fiat gateway or try to use nxt AE multigateway.

agreed bter is just as good as dead.

I'm curious.  Poloniex was hacked in March.  Why aren't they dead and why are people still using them?  Mintpal was hacked as well wasn't it?  So out of the remaining exchanges that NODE could get on, maybe Cryptsy or Bittrex (shit coin and pump and dump haven) could be used as most others seem to have no serious volume or simply wouldn't take a new coin.


nxt multigateway is the most sensible way forward in such a situation.

taken from nem thread.. its the smartest and cheapest way forward.. (no trading fees bar transaction fees)

the sooner NEM can be untied to NXT, the better..

what is happening with NXT right now is another good lesson to learn from.. well first of all the lesson is don't get hacked if you're an exchange and secondly, don't perform a rollback or hardfork for an exchange. it would just blemish the reputation of your coin, ala the great Vericoin bailout of '14.



This wasn't a fault of the coin though. It was the exchange.

This is why it's important nem gets on a number of equally popular exchanges on release. One exchange monopolizing the volumes can go belly up if they make even a simple mistake.
it is possible to set up and run our own multigateway for nxt WE so that people can trade with out worry of a central point of failure. All we need is for nem to support multisig and some to set up the servers then just 3 highly trusted people from nem to host the servers. I think after recent events it would be a very good idea to give people this option straight of the bat.

Do you not have to worry about those servers getting hacked then though and someone siphoning off trades midstream? (disclaimer - I know noting)

3 people will be in control of a server each.. as long as you trust that the 3 members will not collude to steal the funds with in the servers then your coins are safe.. as far as i know, all three servers would need to be hacked simultaneously in order for someone to steal the coins.. its not entirely decentralized, but it is magnitudes safer than traditional exchanges... preferably you get people with a vested interest in the said currency/platform to be in control of the servers.

for example in nxt, its going to be james, the owner of nxthaus (new nxt exchange in the making) and cant remember  who else.. the reason these were chosen as the right people is because they all have a huge vested interested in not stealing the coins.. james has coded the damn thing and has a reputation to protect and is also heavily invested in nxt and multigateway assets and therefore has to protect the interests of the buyers of MGW asset.

the owner of nxthaus would never mess with servers as he has a vested interest in being seen as trustworthy, cos if hes not, no one will use his new exchange. the same applies for the other guy ie. high vested interest or is very trustworthy already.

you only have to trust that 2 of the 3 wont collude.. one malicious server maintainer cannot steal the funds alone.. he may be able to fek up multigateway so it stops working but funds cannot be stolen or accounts miscalculated. so even if one entity isnt trust worthy your coins are still safe..

if centralised exchanges used multigateway for their back end stuff, the odds of these hacks stealing millions would not be a concern any longer..


This is not so good idea, let's stop trading one coin through the another one coin
NODE haven't any relation with nxt

just stop promotion nxt in every big coin thread, ok ?
As well, I don't think that it is very good idea to trade NEM and of course NODE in nxt AE, cause it hurts NEM(and other coins) when nxt like ussualy has problem- OK?

Developers of any new coin should think of ways how to prevent such scenarios in the future. That's not just nxt promotion. We should consider every alternative to centralized exchanges.
hero member
Activity: 620
Merit: 500
August 17, 2014, 08:43:18 AM
IMO the amount that was stolen (approx $1.7million) from bter is too much to recover from. poloniex diddnt have anywhere near that amount to pay back so it was "easy" to return the funds.  bter is going to have to pull some tricks out of the hat to fix this mess

in the light of what has happened it just shows that there is an even greater need for a decentralized exchange

The hacker returned 42M of it now so it's not as much for them to recover from.

Haven't looked at NXT, but I played around with the CounterParty exchange and frankly I don't see it going anywhere. To slow. Fees too much and of course there's not enough people using it. I was so frustrated I moved stuff out of it to a regular exchange and had my trade done in minutes. But I guess we'll see what happens.

yea i literally just read that, thats good news at least for bter and the people who lost their coins but i bet its still put a huge dent into there reputation
sr. member
Activity: 686
Merit: 320
August 17, 2014, 08:36:16 AM
IMO the amount that was stolen (approx $1.7million) from bter is too much to recover from. poloniex diddnt have anywhere near that amount to pay back so it was "easy" to return the funds.  bter is going to have to pull some tricks out of the hat to fix this mess

in the light of what has happened it just shows that there is an even greater need for a decentralized exchange

The hacker returned 42M of it now so it's not as much for them to recover from.

Haven't looked at NXT, but I played around with the CounterParty exchange and frankly I don't see it going anywhere. To slow. Fees too much and of course there's not enough people using it. I was so frustrated I moved stuff out of it to a regular exchange and had my trade done in minutes. But I guess we'll see what happens.
sr. member
Activity: 434
Merit: 250
August 17, 2014, 08:13:06 AM
Could someone tell me about the algorithm "curve25519". I tried googling it but can't really find anything related to bitcoin/node. Like is it similar to scrypt?

Afaik curve25519 is what's used for keys (as in your priv- and pub-key).
Scrypt is used for PoW which is something completely different.

Here is the complete contents of the "node-curve25519" module from the first version of the wallet:
Code:
var crypto = require("crypto");

exports.sha256 = function(message) {
    var shasum = crypto.createHash('sha256');
    shasum.update(message);
    return shasum.digest();
};

In the second version that module is not present but since they further obfuscated, and apparently aren't releasing source after all, we can't easily tell what they replaced it with.

member
Activity: 83
Merit: 10
August 17, 2014, 08:10:35 AM
NODE is off to a great start on its own, no need to mix NXT or NEM into the equation  Smiley
hero member
Activity: 854
Merit: 1000
https://iota.org/
August 17, 2014, 08:08:32 AM
Dear Kodtycoon, I just think that every Big coin deserve OWN path without any relation to another coin. with own mistake and so on!
Or may be you think that NEM after distribution(I hope) in September will use again something from nxt? come on...
hero member
Activity: 620
Merit: 500
August 17, 2014, 08:05:46 AM
agreed ^^   

i think node team will have something sorted in the near future Smiley
hero member
Activity: 854
Merit: 1000
https://iota.org/
August 17, 2014, 07:51:43 AM
Where I can trade NODE?

The community is aiming to trade node on bter.com!

You can vote here: https://bter.com/voting

I'm never gonna grade at bter again. They lost a lot of credibility during recent hack

https://nxtforum.org/news-and-announcements/three-solutions-proposed-by-bter-com-(200btc-deal-or-310btc-bounty-or-fork)/

https://nxtforum.org/news-and-announcements/forgers-have-been-faced-with-a-choice/

https://bitcointalksearch.org/topic/bter-hacked-and-lost-50m-nxt-740147

And I think it wasn't the first time. It might as well have been an inside job.

Better watch out for some quality exchange, develop your own fiat gateway or try to use nxt AE multigateway.

agreed bter is just as good as dead.

I'm curious.  Poloniex was hacked in March.  Why aren't they dead and why are people still using them?  Mintpal was hacked as well wasn't it?  So out of the remaining exchanges that NODE could get on, maybe Cryptsy or Bittrex (shit coin and pump and dump haven) could be used as most others seem to have no serious volume or simply wouldn't take a new coin.


nxt multigateway is the most sensible way forward in such a situation.

taken from nem thread.. its the smartest and cheapest way forward.. (no trading fees bar transaction fees)

the sooner NEM can be untied to NXT, the better..

what is happening with NXT right now is another good lesson to learn from.. well first of all the lesson is don't get hacked if you're an exchange and secondly, don't perform a rollback or hardfork for an exchange. it would just blemish the reputation of your coin, ala the great Vericoin bailout of '14.



This wasn't a fault of the coin though. It was the exchange.

This is why it's important nem gets on a number of equally popular exchanges on release. One exchange monopolizing the volumes can go belly up if they make even a simple mistake.
it is possible to set up and run our own multigateway for nxt WE so that people can trade with out worry of a central point of failure. All we need is for nem to support multisig and some to set up the servers then just 3 highly trusted people from nem to host the servers. I think after recent events it would be a very good idea to give people this option straight of the bat.

Do you not have to worry about those servers getting hacked then though and someone siphoning off trades midstream? (disclaimer - I know noting)

3 people will be in control of a server each.. as long as you trust that the 3 members will not collude to steal the funds with in the servers then your coins are safe.. as far as i know, all three servers would need to be hacked simultaneously in order for someone to steal the coins.. its not entirely decentralized, but it is magnitudes safer than traditional exchanges... preferably you get people with a vested interest in the said currency/platform to be in control of the servers.

for example in nxt, its going to be james, the owner of nxthaus (new nxt exchange in the making) and cant remember  who else.. the reason these were chosen as the right people is because they all have a huge vested interested in not stealing the coins.. james has coded the damn thing and has a reputation to protect and is also heavily invested in nxt and multigateway assets and therefore has to protect the interests of the buyers of MGW asset.

the owner of nxthaus would never mess with servers as he has a vested interest in being seen as trustworthy, cos if hes not, no one will use his new exchange. the same applies for the other guy ie. high vested interest or is very trustworthy already.

you only have to trust that 2 of the 3 wont collude.. one malicious server maintainer cannot steal the funds alone.. he may be able to fek up multigateway so it stops working but funds cannot be stolen or accounts miscalculated. so even if one entity isnt trust worthy your coins are still safe..

if centralised exchanges used multigateway for their back end stuff, the odds of these hacks stealing millions would not be a concern any longer..


This is not so good idea, let's stop trading one coin through the another one coin
NODE haven't any relation with nxt

just stop promotion nxt in every big coin thread, ok ?
As well, I don't think that it is very good idea to trade NEM and of course NODE in nxt AE, cause it hurts NEM(and other coins) when nxt like ussualy has problem- OK?
sr. member
Activity: 1188
Merit: 251
August 17, 2014, 07:47:09 AM
Where I can trade NODE?

The community is aiming to trade node on bter.com!

You can vote here: https://bter.com/voting

I'm never gonna grade at bter again. They lost a lot of credibility during recent hack

https://nxtforum.org/news-and-announcements/three-solutions-proposed-by-bter-com-(200btc-deal-or-310btc-bounty-or-fork)/

https://nxtforum.org/news-and-announcements/forgers-have-been-faced-with-a-choice/

https://bitcointalksearch.org/topic/bter-hacked-and-lost-50m-nxt-740147

And I think it wasn't the first time. It might as well have been an inside job.

Better watch out for some quality exchange, develop your own fiat gateway or try to use nxt AE multigateway.

agreed bter is just as good as dead.

I'm curious.  Poloniex was hacked in March.  Why aren't they dead and why are people still using them?  Mintpal was hacked as well wasn't it?  So out of the remaining exchanges that NODE could get on, maybe Cryptsy or Bittrex (shit coin and pump and dump haven) could be used as most others seem to have no serious volume or simply wouldn't take a new coin.
IMO, the best trade way now is in the btt forum via escrow.



The forum BUY / SELL Thread

https://bitcointalksearch.org/topic/node-buy-sell-thread-727745

Another Update

https://bitcointalk.org/index.php?topic=740147.400

Looks like the thief returned most of what he stole for 440 BTC which is a VERY good deal for Bter. They got out rather cheap.

Looks like Bter will take a hit because people are aware of their lack of security and recklessness, but it looks like they will survive
hero member
Activity: 854
Merit: 1000
https://iota.org/
August 17, 2014, 07:45:18 AM
Dgex was hacked as well and now is working, I think that Bter will work as well!

By the way- Bter has already returned 46 000 000 NXT back from hacker for 320 btc.

It seems that BTER will recover quickly!
Jump to: