Topic: NXT :: descendant of Bitcoin - Updated Information - page 1007. (Read 2761642 times)

Has anybody seen NxtChg lately??...Thanks

I am eager to see NXT first implementation in a working client (a side from messages and aliasses)

I am not too concerned about the signatures, more about the logistics of validating the signature for the executable code under all the different OS the plugins will be compiled and run under. This is why hardcoded plugins are much cleaner, but I figured if we can solve the external plugin issue, it really opens things up.

Yes, I am worried about Evil Bob, he is quite clever. What can he do with an NXTsmtp plugin? He could change the email that is being sent and this could be very bad. NXTsmtp is just a proof of concept of this methodology and would not really be useful for anything more than a twitter like feed. Now it is possible for the NXTsmtp messages to be signed and that would add a lot more trust in the content of the feed. Keep in mind, nothing stops Evil Bob from sending any email to anyone, so I dont see the big security hole created by NXTsmtp.

OK, I have an idea for another plugin. Sorry Pin! We can have a plugin that broadcasts data. It would be like the XCP broadcast function, but we have the data signed so it can be trusted as to the source. The plugin is validated as untampered. The source code will show where and how it is getting its data. This way we can create trusted data feeds for various price data. That in turn can be used to implement betting, options, CFD, etc. This is pretty significant!

James

I don't see why you would want a Nxt VM script to "output an email" (or do anything else outside of the blockchain for that matter) - you do understand that whether such email was actually even really sent simply *cannot be proven* (as you are dealing with SMTP rather than a blockchain)?

Also SMTP is going to require accounts that need to be signed into and you don't want to end up with people effectively running "relay servers" or they'll end up on email blacklists.

Wouldn't it make more sense for such things to be services instead?

About walking vs. running - you are getting far too excited jl777 - can you just take something to slow down to a pace that we can keep up with (by the time we've tried to discuss one of your ideas you typically have posted 3 others).

Do realize that the stuff here is =/= to the work the main devs are doing. I'm pretty sure most of us are not able to find flaws, so we can contribute to other parts in the meantime.

Also, we are looking for people to audit the code, but beyond that, there is nothing I can do personally, so I'm helping out in other ways.

What features are not being worked on? What do you mean by walking?

Nice!

It all depends on what the plugins are. Also, I want to get reference implementations out there and a plugin dev kit to really accelerate development by allowing people brand new to NXT to create them. App store and all that

What announced features? the 1000TPS infrastructure. I proposed blockchain FIFO to solve that. Do you want me to code it too? I can only do so much, plus I am not a Java programmer. When I program, I program in C and that does not allow me to help with the cryptographic review, or even code auditing or finishing announced features.

In any case, it is the tech committee's responsibility to make sure the announced features are completed.

My charter is primarily strategic marketing, which means I need to look into the future and make sure it is as happy for NXT as possible. You have to realize that you cant just add more people to a project to make it go faster. That is the manhours fallacy. If a project will take one person 100 hours, 10 people should be able to get it done in 10 hours. WRONG!

Software dev does not work that way. Even if the 10 devs are as good as the single dev, a lot of time is used up coordinating the project and it could even end up taking more actual time that just letting the single dev finish in 100 hours.

For example, if I were to barge in on nexern and say hey, I am going to help you. I don't know the language you use, any of your code base, but I will take up your time as you waste it explaining it to me. Then I wont really understand what he needs done, so all I will be able to do is repeatedly pester him. I guess maybe I could order pizzas for him.

Is that what I should do? slow down other devs progress?

James

It was not the same issue. blockchain.info  is web based wallet. This was a fatal flaw with Nxt code. He could have stolen money from any Nxt account, not just bter. Even yours.

You think this is some kind firefox browser where we want plugins.Really?

 How many more  flaws exist? We don't know. Get the code reviewed by many more sources. Finish the announced projects.

It would be nice to have each week a new plugin. 1 week testing and implementation and move on to the nxt plugin...

Nxt introduction video with Cantonese
http://v.youku.com/v_show/id_XNjcwNTEyMzAw.html

You have more energy than a toddler that has found her mother's diet pills.

Blockchain FIFO:  I was thinking along similar lines:
https://bitcointalksearch.org/topic/m.4981325

But it's only a general idea, and incomplete.

NXT plugins: you could sign the plugin with the issuer's private key and publish the public key for verification purposes in an Alias.  Have the client check the signature before  loading of the plugin. Or something similar

+1 for some kind of odd reason we always drift away from the initial plan and features, they are still NOT implemented.

We cant even walk and already try to run.

finish what is promissed and started.

blockchain.info is a pretty big outfit and I think they had the same issue.

I cannot help with cryptographic algo analysis, but I can do what I am doing. Also, we have been searching for a crypto reviewer for a while now.

NXT has many different parts and I am assuming that the NXT core is something that can be built upon. In fact BCNext has said he wants us to build on it. What is wrong about multi-tasking? I am intentionally specifying bounties for miniprojects that can be done by people who are not working on the current mission critical parts. Also, by trying to add new features, it helps me understand better what NXT is and what its true potential is. I think it is doing the same for others, but I am just guessing.

What benefit is there to everyone holding their breath waiting for the things we all know are being worked on?

Eadeqa, please suggest what you think we should do right now that is not already being done. You brought up some good security issues about external services, so I came up with a proposed solution. Do you see a flaw?

What should I work on instead? What is more important that the future feature set of NXT that is not already under way?

James

I do not feel confident with the idea of "plugins" and "turing compete" scripting implementation before more basic stuff is complete. We need  thorough  code rechecking from many more independent sources , finishing already announced projects, and other basic stuff.  

I am surprised how little reaction there is to the fact that a guy who discovered a fatal flaw with Nxt code two days ago could have stolen 40 million from bter Nxt account
 https://nextcoin.org/index.php/topic,3884.0.html

How many more flaws exist? We don't know, but yet we want to implement "plugins" Wow. This isn't firefox.

Seriously. Forget plugins and spend more resources on code auditing and finishing the announced features.

well, I don't understand much, but I am still guessing such things will be possible after revealing of the 2nd/3rd parts of BCNext's plan. I am pretty sure Nxt isn't about currency. Currency was only an easy way to spread the app

or people don't understand what you talking about like me

I am a bit concerned that there has been very little feedback on my recent proposals, blockchain FIFO and NXT plugin architecture.

This either means its Friday night and nobody has had a chance to think about them, or it is so ridiculous nobody bothered to comment, or maybe I am on everyone's ignore list?

Please, if you see anything wrong, now is the time to find it. Also, if you think it is mostly right, just +1 it or short comment. I feel like I am in a vacuum here...

James

P.S. I just cant believe that I got everything right as that is the fourth possibility.

why is this still on version 0.5.11

http://87.230.14.1/nxt/nxt.cgi?action=20

come on guys this is blockchain explorer.

NEXERN where are you?