Author

Topic: NXT :: descendant of Bitcoin - Updated Information - page 1907. (Read 2761645 times)

hero member
Activity: 1039
Merit: 507
http://postimg.org/image/djfsspw5v/

Except for solid state drives you never know if what you are overwriting is really the original file location, because of the wear-leveling and remapping magic they do internally.
ahh, I see
member
Activity: 98
Merit: 10
This makes the alias harder to remember though, which subtracts from the main purpose of aliases.

What do u prefer:
1. Send to 2587623823894059467
2. Send to John726
?

Would prefer sending to 2587623823894059467[check digits] when I need to enter the entire address and unable to use aliases, and sending to John, or John276, or any other alias of my choice when I can. If I use alias, I do so accepting the consequences of mistyping. I think most regular folks would also feel like this.

EDIT: On further thought, some regular folks would feel like this. Some would just be careless.


There are still 192 reserved bits in addresses right? Maybe can spare some as check bits?

We can't.

But if it's impossible at the protocol level, then maybe we can look at safeguards at the client level. Maybe clients can (at least have the option of) enforcing check digits for entering naked addresses.
sr. member
Activity: 392
Merit: 250
whoever has access to it can examine your hard disk and find that password.

That cache can be perm. deleted with ccleaner or something similar to http://eraser.heidi.ie/ right?
If it does a secure erase, overwriting the file with random bytes, yes, in theory. Except for solid state drives you never know if what you are overwriting is really the original file location, because of the wear-leveling and remapping magic they do internally.

newbie
Activity: 50
Merit: 0
Hey Nxtlers,

we released a NXT game at http://www.thenxtdice.com/  Wink
The game is fully raspberry-powered  Grin
Just try it out and win some coins. And the best: Because the raspi is running 24/7 we help to support the NXT network against attackers  Smiley
member
Activity: 98
Merit: 10
Is it hard to implement 'send to alias' feature in the current javascript browser client? It'll be a while until other clients are released, so if it's only a couple of hours of coding, it'd be great to see 'send to alias' in the current browser client, and this would be a great PR feature for NXT too compared to bitcoin.
legendary
Activity: 2184
Merit: 1000
Did anyone read this:

NSA building Quantum Computer to crack all forms of encryption


http://rt.com/usa/quantum-computer-nsa-encryption-100/

sr. member
Activity: 392
Merit: 250
Download & run 0.4.9e, this fixed it for me.

In nextcoin.org is written:
"EXPERIMENTAL CLIENT (use with caution!)
Download: NRS 0.4.9e"

Is it ready for non-NXTdev-users, with some guarantee? ;-)


It seems to be fine for me, but then again really anything that's version begins with a 0 is experimental to me Wink

0.4.9e should be more stable and with better performance and memory usage than 0.4.8. I labelled it experimental because I made a lot of code changes. But I haven't changed any business logic.

We don't have unit tests yet, and the way the code is structured it will take some time before we can add automated unit tests for a new release. My servers have been running 0.4.9e and mining with it for two days now, without problems, and in particular I no longer find them stuck on a wrong branch. But for testing transactions, the best I can do is try making a few transactions manually and see if it works.
legendary
Activity: 2142
Merit: 1010
Newbie
This makes the alias harder to remember though, which subtracts from the main purpose of aliases.

What do u prefer:
1. Send to 2587623823894059467
2. Send to John726
?


There are still 192 reserved bits in addresses right? Maybe can spare some as check bits?

We can't.
hero member
Activity: 840
Merit: 1002
Simcoin Developer
If I understand correctly, Bitcoin address has an embedded checksum.
hero member
Activity: 1039
Merit: 507
whoever has access to it can examine your hard disk and find that password.

With 0.4.9e, those URLs are not cached on disk, but firefox still keeps them in the memory cache. I haven't tested other browsers. And I don't know how easy it is for other websites to exploit and try to fish out what is in your memory cache. So, to be safe, use a separate browser profile, or incognito mode, when accessing your Nxt node at localhost.
 

That cache can be perm. deleted with ccleaner or something similar to http://eraser.heidi.ie/ right?
legendary
Activity: 2184
Merit: 1000
I have a question about colored coins.
Will it be possible to generate let's say 3 turtlecoins (each with the value of 10 NXT), print a QR-code for each of them, go to the next petshop, give the 3 QR-codes to the petshop and get 3 turtles?
petshop redeems QR-codes and can exchange turtlecoins to NXT within his account?

as long as Turtle coin is traded in the Asset exchange....& the merchant accepts it should be fine...i think...
member
Activity: 98
Merit: 10
Wouldn't aliases still be vulnerable to single-char typo errors?

No, if u register alias that contains CRC.

This makes the alias harder to remember though, which subtracts from the main purpose of aliases.

There are still 192 reserved bits in addresses right? Maybe can spare some as check bits?


...
Bitcoin client GUIs partially solve (or maybe go around is a better way of describing it) this by letting the user set up addresses in advance (and assigning readable labels to those addresses), so that checking accuracy of address only needs to be done one for each unique address.

This is a client problem. We have a nice client soon...

Yeah, looking forward to it Smiley I hope it improves on Bitcoin clients way of handling this. Even checking once is not that great, considering addresses are 64 chars long!

(Sorry if I'm being annoying. I'm just trying to make useability aspects more visible.)
sr. member
Activity: 392
Merit: 250
I have a question related to all security issues we could see today. Should I be worried about my Chrome cache and that with the help of the cache someone will steal my password? Seems to me that I read somewhere in the last pages that we should delete cache as well..

So I have downloaded new client from the  first page and checked the SHA, created new account and transfered my next to the new account with new passphrase. I cleared my cache and started using Chrome in incognito mode(I don't know if this is even necessary).. I also instaled a anti key-logger. After doing all this, am I well protected?
Thanks everyone..
With 0.4.8 and earlier, URLs containing your secret phrase were being cached by the browser in the disk cache. So yes, you should delete that cache, and if you are ever worried about a situation like your laptop being stolen, confiscated by the authorities, at the US border, and so on, whoever has access to it can examine your hard disk and find that password.

With 0.4.9e, those URLs are not cached on disk, but firefox still keeps them in the memory cache. I haven't tested other browsers. And I don't know how easy it is for other websites to exploit and try to fish out what is in your memory cache. So, to be safe, use a separate browser profile, or incognito mode, when accessing your Nxt node at localhost.
 
legendary
Activity: 2142
Merit: 1010
Newbie
Use Alias System.
It's crutch (kostyl) Grin
If i want to send money to dgex how i can use alias system?

It's by design. DGEX must support the same URI scheme for CRCed aliases as u.
hero member
Activity: 910
Merit: 1000
...
Bitcoin client GUIs partially solve (or maybe go around is a better way of describing it) this by letting the user set up addresses in advance (and assigning readable labels to those addresses), so that checking accuracy of address only needs to be done one for each unique address.

This is a client problem. We have a nice client soon...
sr. member
Activity: 392
Merit: 250
isn't a password, that is generated by such a tool, insecure?

Why would you think so? Every time you run the tool OpenSSL RNG is properly seeded and 16-character random prefix is generated, which becomes part of the account password. I personally do not see any issue with this.

I'm also planning to add some minor features and release the source code so anyone can audit.
Please, do release the source of your vanity generator. I was about to warn people not to use it, because it is a closed source tool posted by a new user with 5 posts only. Can't be too paranoid after the incident we already had. Without the source, how does one know if your random prefix is really random?
member
Activity: 98
Merit: 10

If i want to send money to dgex how i can use alias system?


Need to ask client devs to implement 'send money to alias' feature asap.
hero member
Activity: 784
Merit: 500
Just a friendly reminder...

There will be a Bitcoin Conference in February held in Berlin.

http://www.mediabistro.com/insidebitcoins/

I am not from Berlin, but would love to represent Nxt on this venue. I decided to take 3 days off and fly over to Germany and use the opportunity to spread the word, let others know about Nxt and it´s features.
I am sure that we all will benefit from having someone around at a venue like this. I am asking the community to support these efforts by donating to help fund the journey and the purchase of marketing materials like T-Shirts & pendrives with Nxt logo/slogan on them, printing some cool Nxt bills, and so on.

I will document all the expenses and will make the spending of the fund transparent. I will also broadcast from the venue and post some pictures Smiley

I received donations from 3 persons so far... I am asking community members, escpeially with big stakes to support this and help with funds AND ideas how to make Germany aware of Nxt. Even a couple of hundred Nxts will help.

11433600460445633305


Thank you!
newbie
Activity: 35
Merit: 0
isn't it the same with BTC?
I don't know how BTC works.

Use Alias System.
It's crutch (kostyl) Grin
If i want to send money to dgex how i can use alias system?
legendary
Activity: 2142
Merit: 1010
Newbie
Wouldn't aliases still be vulnerable to single-char typo errors?

No, if u register alias that contains CRC.
Jump to: