Author

Topic: NXT :: descendant of Bitcoin - Updated Information - page 1968. (Read 2761645 times)

legendary
Activity: 2184
Merit: 1000

that doesn't make any sense. there is no "nxt company" to receive the text message.

it could be a value added service provided by SERVICE PROVIDERS
legendary
Activity: 2142
Merit: 1010
Newbie
Just a password to send....The function can be optional.

Nxt is decentralized, u can ask the password million times but it won't make ur account more secure if u use a weak master password.

For the record, I hereby vote for implementing an optional 2 factor authorization scheme via cellphone SMS as soon as possible.  All in favor, say aye?

to tie the phone number to the account would be risky.....but you could easily create X amount of anonymous e-mail addresses.



Guys? R u kidding???
legendary
Activity: 1722
Merit: 1217
Just a password to send....The function can be optional.

Nxt is decentralized, u can ask the password million times but it won't make ur account more secure if u use a weak master password.

For the record, I hereby vote for implementing an optional 2 factor authorization scheme via cellphone SMS as soon as possible.  All in favor, say aye?

that doesn't make any sense. there is no "nxt company" to receive the text message.
legendary
Activity: 2184
Merit: 1000
Just a password to send....The function can be optional.

Nxt is decentralized, u can ask the password million times but it won't make ur account more secure if u use a weak master password.

For the record, I hereby vote for implementing an optional 2 factor authorization scheme via cellphone SMS as soon as possible.  All in favor, say aye?

to tie the phone number to the account would be risky.....but you could easily create X amount of anonymous e-mail addresses.

legendary
Activity: 1120
Merit: 1000
What's going on with the Blockchain Explorer? It's been down longer than 24h
full member
Activity: 196
Merit: 100
Just a password to send....The function can be optional.

Nxt is decentralized, u can ask the password million times but it won't make ur account more secure if u use a weak master password.

For the record, I hereby vote for implementing an optional 2 factor authorization scheme via cellphone SMS as soon as possible.  All in favor, say aye?
legendary
Activity: 2142
Merit: 1010
Newbie
Just a password to send....The function can be optional.

Nxt is decentralized, u can ask the password million times but it won't make ur account more secure if u use a weak master password.
member
Activity: 98
Merit: 10
I see a lot of use for one special NXT donation fund in the future - Paranoia Therapy Fund. I am serious.
full member
Activity: 196
Merit: 100
Oops, wrong key on edit.
legendary
Activity: 1092
Merit: 1010
Well. Thought for sure it couldn't happen to me. but just had all of NXT stolen out of my account. yey..

Complete NIGHTMARE!   Sad Angry Sad

It's a nightmare I have often.  

I am terrified of keystroke loggers.  The more widespread NXT becomes, the more keystroke loggers are going to be deployed to steal it.  That's a fact.

I am only running my main NXT account on an old XP laptop that I sanitized by doing a zero bit overwrite of the hard drive and reinstalling the OS from a Dell reinstall disk followed by the minimal add-ons like Java etc brought over on a CD drive of via online downloads.   This laptop is used for NXT and that's it.  I have a hidden and uncommented local handwritten copy of my random password generated offline on the laptop using Awesome Password Generator 1.4 from Google (you know, the guys that are secretly partnered with the NSA) and another handwritten copy in my bank vault safe deposit box.  

I still worry.

I understand that the user space is unimaginably huge at something like (I think I remember seeing) 10^70 - but still.  One lucky hit by somebody else miskeying their own password under the current scheme, and it's all over for you.  That's a fact, mitigated only by just how much luck the thief would need to have.  I've got a degree in math and I understand probability and it still doesn't do much to calm the reptilian fear in my brain.

Is there a separate white paper PDF someplace that goes over in detail from scratch / first principles the entire NXT security scheme and just the security scheme?  If not, there needs to be.  We are going to have to point specifically to that information over and over and over as more and more people come to risk larger and larger sums that the security scheme is adequate - particularly when single colored coins are made that could be worth millions of regular NXT.

So, bottom line, I think we need a security whitepaper PDF and a link to it.

It's weird how even potential wealth can fry the brain Smiley
I have the same issue.
full member
Activity: 196
Merit: 100
Well. Thought for sure it couldn't happen to me. but just had all of NXT stolen out of my account. yey..

Complete NIGHTMARE!   Sad Angry Sad

It's a nightmare I have often.  

I am terrified of keystroke loggers.  The more widespread NXT becomes, the more keystroke loggers are going to be deployed to steal it.  That's a fact.

I am only running my main NXT account on an old XP laptop that I sanitized by doing a zero bit overwrite of the hard drive and reinstalling the OS from a Dell reinstall disk followed by the minimal add-ons like Java etc being brought over on a CD instead of via online downloads.   This laptop is now used for NXT and that's it.  I'm working on creating a second identical sanitized laptop as a backup.  I have a hidden and uncommented local handwritten copy of my random password generated offline on the laptop using Awesome Password Generator 1.4 from Google (you know, the guys that are secretly partnered with the NSA) and another handwritten copy in my bank vault safe deposit box.  

I still worry.

I understand that the user space is unimaginably huge at something like (I think I remember seeing) 10^70 - but still.  One lucky hit by somebody else miskeying their own password under the current scheme, and it's all over for you.  That's a fact, too, mitigated only by just how much luck the thief would need to have.  I've got a degree in math and I understand probability and it still doesn't do much to calm the reptilian fear in my brain.

Is there a separate white paper PDF someplace that goes over in detail from scratch / first principles the entire NXT security scheme and just the security scheme?  If not, there needs to be.  We are going to have to point specifically to that information over and over and over as more and more people come to risk larger and larger sums that the security scheme is adequate - particularly when single colored coins are made that could be worth millions of regular NXT.

So, bottom line, I think we need a security whitepaper PDF and a link to it.



sr. member
Activity: 952
Merit: 253
How could we implement email confirmation for sending of NXT?

Tell me WHO will send this email.


How long would google authenticator support take to implement?

The same issue as with email confirmation - it's impossible.

Can we add a second password inside NXT?

An account should be able to submit a transaction to store / update a secondary password - Fee 1 NXT
If this transaction exists - the nodes don't confirm the transaction unless a node logged with the sending account has re-authenticated the transaction with this secondary password.
legendary
Activity: 2184
Merit: 1000
Adding a secondary password?

1 password is enough, just make it stronger.

Just a password to send....The function can be optional.
legendary
Activity: 2142
Merit: 1010
Newbie
Adding a secondary password?

1 password is enough, just make it stronger.
hero member
Activity: 490
Merit: 504
just wanted to add. this is found for the recipient's address in google cached view of the NXT blockchain.
16204974692852323982

not that it will help me get my NXT back I'm sure..
real lame, how my PW was cracked is beyond me.. really.

http://webcache.googleusercontent.com/search?q=cache:xOs0TPi1UPcJ:87.230.14.1/nxt/nxt.cgi%3Faction%3D3000%26acc%3D3727742886551973110+&cd=2&hl=en&ct=clnk&gl=us
if it's a thief, then there are more thefts:
http://22k.io/-account/16204974692852323982
full member
Activity: 121
Merit: 100
How could we implement email confirmation for sending of NXT?

Tell me WHO will send this email.


How long would google authenticator support take to implement?

The same issue as with email confirmation - it's impossible.

Adding a secondary password?
legendary
Activity: 2184
Merit: 1000

Wesley, Ferment and Landomata, I want to put my voice in as an investor. I think you guys are doing great stuff.

How do you think this Alias company thing could work?
sr. member
Activity: 336
Merit: 250
AKA jefdiesel

Regarding your other remarks, these are valid. We'll keep the server-side source closed for now unless there is a major investment of some kind.

Would you guys be interested in wrapping the server side source up in some form of NxtAlias Company....you could pitch the idea and see if the market would want to invest.

We do need a prototype for an IPO on the Nxt Asset Exchange....anyhow something to think about.



Can you explain this concept in a bit more detail or is there a link to read up on this?

We'll clarify the concept over the coming weeks...also Nxt Asset Exchange has to be launch first....I'm hoping before end of January.....will keep you updated.


EDIT:
Dear James

Do you have any suggestions regarding this Alias Initiative?




Wesley, Ferment and Landomata, I want to put my voice in as an investor. I think you guys are doing great stuff.
legendary
Activity: 2142
Merit: 1010
Newbie
How could we implement email confirmation for sending of NXT?

Tell me WHO will send this email.


How long would google authenticator support take to implement?

The same issue as with email confirmation - it's impossible.
legendary
Activity: 2184
Merit: 1000

Regarding your other remarks, these are valid. We'll keep the server-side source closed for now unless there is a major investment of some kind.

Would you guys be interested in wrapping the server side source up in some form of NxtAlias Company....you could pitch the idea and see if the market would want to invest.

We do need a prototype for an IPO on the Nxt Asset Exchange....anyhow something to think about.



Can you explain this concept in a bit more detail or is there a link to read up on this?

We'll clarify the concept over the coming weeks...also Nxt Asset Exchange has to be launch first....I'm hoping before end of January.....will keep you updated.


EDIT:
Dear James

Do you have any suggestions regarding this Alias Initiative?


Jump to: