Author

Topic: NXT :: descendant of Bitcoin - Updated Information - page 435. (Read 2761642 times)

sr. member
Activity: 392
Merit: 250
wesleys client:

Is there any way to display also the forging transactions like in NRS?

Yes, will add this later on.

Wesleyh, I understand your client is going to be the official client that will replace NRS at nxtcrypto.org this week.
About passwords: It might be included already, but it is obvious we need something like a series of prompts to make sure new users use a long password.

We don't need "prompts". Some people will never use strong passwords. And some will not even understand why the password is weak. We need a client that creates password for the user by default. Don't give user easy option to make their own password or you will continue to see this problem every month.



Yeah, clients could create a password in the background and the user would directly see his account number when he open the client for the first time.
It NEED to be that simple
hero member
Activity: 644
Merit: 500
wesleys client:

Is there any way to display also the forging transactions like in NRS?

Yes, will add this later on.

Wesleyh, I understand your client is going to be the official client that will replace NRS at nxtcrypto.org this week.
About passwords: It might be included already, but it is obvious we need something like a series of prompts to make sure new users use a long password.

We don't need "prompts". Some people will never use strong passwords. And some will not even understand why the password is weak. We need a client that creates password for the user by default. Don't give user easy option to make their own password or you will continue to see this problem every month.
sr. member
Activity: 952
Merit: 253
I agree his actions are beyond reckless, but HIS ACTIONS ARE KILLING NXT.  When one guy loses 20% of his portfolio on NXT due to poor password security and tweets it out to *** 2100 *** followers, WE JUST LOST 2100 PEOPLE WHO WON'T TOUCH NXT NOW.  

THIS IS A DISASTER.

WE COULD HAVE AVOIDED THIS DISASTER  IF WE HAD IMPLEMENTED INTEGRATED AUTOMATIC STRONG PASSWORD GENERATION IN ALL CLIENTS A MONTH AGO.

ARE WE IN AGREEMENT TO IMPLEMENT IT ACROSS THE BOARD NOW?

I don't think its a disaster, its unfortunate, and when the 'official' client's are all out with a better solution, put up a page and tweet a url to it with the same tags.

I agree we have to protect the unwary from having direct access to a brain wallet but we will always have this if people do not follow instructions, he doesn't say what client he uses... Was it NRS directly?

Currently you get this when you click 'unlock' in NRS....

Quote
If opening a new account, please note:
A simple passphrase will certainly result in your NXT being stolen!
Do not use any phrase that appears in any printed or online material,
no matter how long or obscure. A secure passphrase will be at least
35 characters long and consist of random letters, numbers, and special
characters, or a meaningless combination of 10 random words.

And if you ignore that and type in a stupid password you get...

Quote
Your secret phrase is too short
and can be easily picked by a hacker!

So that was TWO WARNINGS that he did something stupid, unless he used some other client and that means we have a downloadable client on our site that accepts bad practice without any warnings, or he got a client from somewhere else which means it could have a trojan in it anyway...

We cannot protect the gullible from themselves and we cannot protect ourselves completely from the bad news that the gullible being taken advantage of will always generate... But I do agree we could/need-to be better at security than we are currently.
hero member
Activity: 490
Merit: 504
he used this page:
http://www.nxtcrypto.org/nxt-coin/create-your-nxt-account-number

all of these pages are... unfriendly Cheesy
http://www.nxtcrypto.org/nxt-coin/install-nxt-software-your-computer
http://www.nxtcrypto.org/nxt-coin/create-your-nxt-account-number

- no info about brainwallet
- no warnings about using brainwallet

- no info how batch file is created (and do we still have to create it?)

I can see this text:

Quote
SHA256 hash of Client 0.8.8
837973d4313b6d3e835ff46c41870ca5ced367b8dc8a160a912d8124f1721b5e

- if my fiancee looked at it, she would have no idea what those lines are, why they are there and how they can be used..
hero member
Activity: 910
Merit: 1000
Guys, relax!

Password generator will get implemented in Wesleyh's installer (NRS + nice GUI). And now, move on.

Please read this monster thread before you post Wink

Thank you.
legendary
Activity: 1176
Merit: 1134
Proposal for "Create NXTcoins" function


Before I code it up, I wanted to make sure I didnt miss anything obvious. I will use a centralized pool server, but this is very similar to a lot of coins at launch where there is only one or a few pools and solo mining is not practical.

My model is that a NXTcoins will have an issuer that is the basis for the coin. It is assumed that the issuer will also be the pool operator or be working closely with the pool operator. Maybe I will offer NXTcoins pool operating service. Anyway, if this works out well, I can always add support for multiple pool operators later.

All miners will be monitoring adherence to the NXTcoins parameters to ensure compliance.

The coin issuer will issuer the asset (up to 1 billion) and distribute whatever presale amounts (if any) to the NXTaccts before issuing the Create NXTcoins AM. Once the Create NXTcoins is processed, the parameters are enforced by peer review. The coins that are to be mined will be either with the issuer or the pool operator. It will be the responsibility of the issuer to make sure the pool operator has enough coins to distribute to miners.

I have specified royalty, bounty and donation rates. This is a percentage of the mined coins that go to the issuer, bountyfund and donationfund. I will default the donationfund to me, hopefully people wont have a problem with that. The royalty goes to the founder, but it is not a premine, it is from the coins that are mined. I think this is much better for a coin. I put the presale in there though, so people can choose how they want to distribute their coin. 100% presale would be PoS. I also have a bountyfund so that as the coin grows, it will be possible to have a continuous stream of funds, if there is any coins mined.

There is maxblockrewards[16][2] that is set to be the maximum number of coins that can be issued at any point in time, along with when that limit is enforced. The details of how the coin is mined is totally up to the issuer as long as the maxblockrewards are followed.

There is a URL to sourcecode that implements the mining and pooling part of the coin.

If this structure looks good, I will implement a reference pooler for nodecoin along with nodeminer, subject to changes as I run into implementation issues, but I think this is a decent place to start. Once this is done, there will essentially be a create coin API for NXT, and we dont have to wait for any NXT core changes, I am designing to current testnet version.

James

Code:
struct NXTcoins_data    // 1% of presale and mined goes to pooling acct, send (authorized - .99*presale) to pooling acct
{
    int64_t totalcoins __attribute__ ((packed));    // in satoshis
   
    int64_t presale __attribute__ ((packed));       // in satoshis, must be less than authorized and exactly match preissued
    int64_t royalty __attribute__ ((packed));       // rate in satoshis, goes to issuer
    int64_t bountyrate __attribute__ ((packed));    // rate in satoshis, goes to bountyfund
    int64_t donation __attribute__ ((packed));      // rate in satoshis, goes to donationfund, defaulted to NXTcoins
    int64_t maxblockrewards[16][2] __attribute__ ((packed));    // in satoshis reward and threshold active

    char coin_name[16];
    char website[64],sourcecode[64];
    char issuer[MAX_NXTADDR_LEN],poolingacct[MAX_NXTADDR_LEN],assetidstr[MAX_NXTADDR_LEN];
    char bountyfund[MAX_NXTADDR_LEN],presalefund[MAX_NXTADDR_LEN],donationfund[MAX_NXTADDR_LEN];
   
};
legendary
Activity: 1092
Merit: 1010
He has 2100 followers...

https://i.imgur.com/fud4JGC.jpg

We know that a weak password is the user's responsibility, but it's also true that the current base client is not user friendly in that sense, at all. Regardless, in this case, contacting @onemanatatime, finding the related blockchain information and trying to perhaps partially or fully compensate the leeching would be a VERY smart PR move.

Edit: I just saw the amounts. 400K+. I'm sorry for him, but buying and transferring that amount without doing your homework is beyond reckless.

  

I agree his actions are beyond reckless, but HIS ACTIONS ARE KILLING NXT.  When one guy loses 20% of his portfolio on NXT due to poor password security and tweets it out to *** 2100 *** followers, WE JUST LOST 2100 PEOPLE WHO WON'T TOUCH NXT NOW.  

THIS IS A DISASTER.

WE COULD HAVE AVOIDED THIS DISASTER  IF WE HAD IMPLEMENTED INTEGRATED AUTOMATIC STRONG PASSWORD GENERATION IN ALL CLIENTS A MONTH AGO.

ARE WE IN AGREEMENT TO IMPLEMENT IT ACROSS THE BOARD NOW?

Actually, I just looked at his account and he is very open about using a short and unsafe pass.
He isn't attacking Nxt at all and acknowledges he wasn't smart to do it.

I don't see it as a major PR problem. The reactions he gets are good, too. Most of his followers are traders themselves who had losses, too.

I'm not saying I think we shouldn't care, but he did this himself and knows it was stupid. If people want to help him, that's cool.

And we should get it sorted, but that will be done.

legendary
Activity: 2142
Merit: 1010
Newbie
I agree his actions are beyond reckless, but HIS ACTIONS ARE KILLING NXT.  When one guy loses 20% of his portfolio on NXT due to poor password security and tweets it out to *** 2100 *** followers, WE JUST LOST 2100 PEOPLE WHO WON'T TOUCH NXT NOW. 

THIS IS A DISASTER.

WE COULD HAVE AVOIDED THIS DISASTER  IF WE HAD IMPLEMENTED INTEGRATED AUTOMATIC STRONG PASSWORD GENERATION IN ALL CLIENTS A MONTH AGO.

ARE WE IN AGREEMENT TO IMPLEMENT IT ACROSS THE BOARD NOW?



There is no such thing as bad publicity Smiley
full member
Activity: 224
Merit: 100
He has 2100 followers...

https://i.imgur.com/fud4JGC.jpg

We know that a weak password is the user's responsibility, but it's also true that the current base client is not user friendly in that sense, at all. Regardless, in this case, contacting @onemanatatime, finding the related blockchain information and trying to perhaps partially or fully compensate the leeching would be a VERY smart PR move.

Edit: I just saw the amounts. 400K+. I'm sorry for him, but buying and transferring that amount without doing your homework is beyond reckless.

  

I agree his actions are beyond reckless, but HIS ACTIONS ARE KILLING NXT.  When one guy loses 20% of his portfolio on NXT due to poor password security and tweets it out to *** 2100 *** followers, WE JUST LOST 2100 PEOPLE WHO WON'T TOUCH NXT NOW. 

THIS IS A DISASTER.

WE COULD HAVE AVOIDED THIS DISASTER  IF WE HAD IMPLEMENTED INTEGRATED AUTOMATIC STRONG PASSWORD GENERATION IN ALL CLIENTS A MONTH AGO.

ARE WE IN AGREEMENT TO IMPLEMENT IT ACROSS THE BOARD NOW?



Acknowledged. And implemented in my client since you can actually create a new account with it.
full member
Activity: 196
Merit: 100
He has 2100 followers...

https://i.imgur.com/fud4JGC.jpg

We know that a weak password is the user's responsibility, but it's also true that the current base client is not user friendly in that sense, at all. Regardless, in this case, contacting @onemanatatime, finding the related blockchain information and trying to perhaps partially or fully compensate the leeching would be a VERY smart PR move.

Edit: I just saw the amounts. 400K+. I'm sorry for him, but buying and transferring that amount without doing your homework is beyond reckless.

  

I agree his actions are beyond reckless, but HIS ACTIONS ARE KILLING NXT.  When one guy loses 20% of his portfolio on NXT due to poor password security and tweets it out to *** 2100 *** followers, WE JUST LOST 2100 PEOPLE WHO WON'T TOUCH NXT NOW. 

THIS IS A DISASTER.

WE COULD HAVE AVOIDED THIS DISASTER  IF WE HAD IMPLEMENTED INTEGRATED AUTOMATIC STRONG PASSWORD GENERATION IN ALL CLIENTS A MONTH AGO.

ARE WE IN AGREEMENT TO IMPLEMENT IT ACROSS THE BOARD NOW?

sr. member
Activity: 294
Merit: 260
Has anybody tested NRS against an application-level DOS/DDOS attack?

Stuff like this?:
* Flood 7874 with garbage packets from 1-N peers.
* Flood 7874 with valid NRS packets, but invalid transaction signatures.
* more?

I've tried to flood NRS in port 7876 (the API port). The DDOS filter worked pretty well, most commands were ignored.
newbie
Activity: 35
Merit: 0
I don't think the official client should let people generate their password by default.

It should be like with Bitcoin, because people are used to that.  "NXT = Account/password" -  "BTC = PublicKey/Privatekey"


When people first open the client an account is automatically generated and people can receive coin immeditaly . The password is saved in a "wallet.dat" equivalent. The user doesn't have to know it unless he search for it.

More advanced users could still create their own password and deactivate the wallet.dat creation for a real brainwallet.

But i think if we want a mass adoption, it need to be extremely easy to use.
The first step to mass adoption is adoption by the bitcoin crowd and those people are used to the wallet.dat. For those people, a wallet.dat is far more secure than a choosen password ( one guy just lose 400k NXT because he used a 8char password)
+1
I think the same!
This is a silly idea to let a person choose his own bank account pin!
sr. member
Activity: 392
Merit: 250
I don't think the official client should let people generate their password by default.

It should be like with Bitcoin, because people are used to that.  "NXT = Account/password" -  "BTC = PublicKey/Privatekey"


When people first open the client an account is automatically generated and people can receive coin immediatly . The password is saved in a "wallet.dat" equivalent. The user doesn't have to know it unless he search for it.

More advanced users could still create their own password and deactivate the wallet.dat creation for a real brainwallet.

But i think if we want a mass adoption, it need to be extremely easy to use.
The first step to mass adoption is adoption by the bitcoin crowd and those people are used to the wallet.dat. For those people, a wallet.dat is far more secure than a choosen password ( one guy just lose 400k NXT because he used a 8char password)



EDIT : In this thread there is a lot of very skilled people, very tech-savy, programmers, etc...So the discussion tend to revolve around those persons and their needs
Normal user/noob don't post here, so they are easily forgotten. But we shouldn't forgot that at the end of the day, they are the one that NXT need to convince. And for that, it need to be extremely easy to use !
sr. member
Activity: 756
Merit: 250
legendary
Activity: 1092
Merit: 1010
I didn't checked yet. For sure I bought two. In worst scenario, I will own 4 Cheesy.

Why 4?

NSFW http://s6.pikabu.ru/images/big_size_comm/2014-02_3/13923014986204.png

Cheesy

After Asset Exchange launch, what will be #1 example I could buy there? Coins, I know. Shares of some startup firm?

What?
Half an hour and no one made a "firm startup" joke?

I'm appalled!

(I'm taking the night off of being serious, so it's allowed)
sr. member
Activity: 288
Merit: 250

Wesleyh, I understand your client is going to be the official client that will replace NRS at nxtcrypto.org this week.
About passwords: It might be included already, but it is obvious we need something like a series of prompts to make sure new users use a long password.
And simple install instructions at the nxtcrypto.org download location.

What has to be done to make this happen? Are plans in place to achieve this over the next few days?

Could something like this to know-how to generate the password be interesting?I think it is secure and makes it comfortable to have huge passwords without having to remember it or copy it from somewhere.And if it is possible,those generated passwords,to be  a minimum of 60 digits or whatever. I am not a programmer so i dont know what could be done.
Maybe if it had it optional,it could be a nice feature.

I found this app,from a tweet of Antonopoulos,so it must be legit and interesting.I tried it and loved it.

http://braincontrol.me/
http://betanomics.asia/blog/store-and-send-bitcoin-directly-from-your-brain-using-braincontrol


You just put an account name, a passphrase(15 characters min recommended), an extra salt, and a pin, which could be easy to remember for everyone.

BrainControl ultimately uses the following function to determenistically generate the necessary keys at the precise time required to perform any sensitive functionality such as send or backing-up:

Code:

Essentially, we combine the device salt, the URL of the web application, the account name / label of the wallet, a passphrase and an optional six digit identification number to create a fairly impenetrable system for storing Bitcoin.

newbie
Activity: 35
Merit: 0
Hello just a few Questions from a Complete NXT beginner...
First. I am sure verry much Newbies ask on that, but i could'nt find anything on the Internet about it.
What the Hell ist this Adress?

http://87.230.14.1/nxt/nxt.cgi?action=3000&acc=1739068987193023818

Quote
ACCOUNT:   1739068987193023818
Balance Total:   -999,997,096 NXT


Second. Do NXT use the same system of Private and Public Keys like Bitcoins?
full member
Activity: 180
Merit: 100

Nxt Mobile Application Company NMAC will be listed, and watch out for more..
Then I could buy NMAC shares and it will be only place where they will sell their shares?

I suppose Google shares will not be there Smiley. As I think about it, I have no idea how it will work.
sr. member
Activity: 336
Merit: 250
AKA jefdiesel
I didn't checked yet. For sure I bought two. In worst scenario, I will own 4 Cheesy.

Why 4?

NSFW http://s6.pikabu.ru/images/big_size_comm/2014-02_3/13923014986204.png

Cheesy.

After launch Asset Exchange, what will be #1 example I could buy there? Coins, I know. Shares of some startup firm?

Nxt Mobile Application Company NMAC will be listed, and watch out for more..
Jump to: