Pages:
Author

Topic: The profile page should be changed. No one uses ICQ, AIM, MSN or YIM. (Read 620 times)

hero member
Activity: 1078
Merit: 514
I've seen similar suggestions in past already. You're right that you barely can find people who use these services. Some of these services doesn't even works anymore because it was discontinued. But I think that no changes will be made until new forum software will be released.
That's right. After the released all unused and bugs will be removed or corrected in the right way.
donator
Activity: 4760
Merit: 4323
Leading Crypto Sports Betting & Casino Platform
@OgNasty you are right. But the discussion is more about the way to contact someone. On signal you need to have the number of the person that you want to talk. On telegram you just need the nick, and you could talk with that person without exchange your phone number. Discord, slack you only need a nickname/email too.

And I do not think it is off-topic because it is a topic about the part on the profiles page that we use to put personal contact. It is important to discuss anonymous and safe issues about those messagers  =)

Thanks.  The discussion isn't just about ways to contact someone though as you alluded to in your later comment.  It's about increasing the value of the profile page, specifically replacing lines that are no longer useful to anyone.  If someone is trying to send me a message on the forum, I think the ability to use PGP to encrypt the message is useful.  They could also use the more common method here of using https://privnote.com - but that runs a bit counter to the decentralization theme here if you ask me.  


I’ve long thought there should be a spot for PGP fingerprint.

PGP fingerprints are SHA-1, which is insecure. The OpenPGP standard really needs a complete new revision...

Is it really insecure in this context?
To my knowledge the only problem with SHA-1 so far is collision. Considering SHA-1 is 160-bit and there is a known structural weakness, it has a time complexity of 263 which is very fast. But in this context the security depends on ability to find a second preimage (since the message aka the pubkey and the hash of it is already known), and there has been no weaknesses found to help perform this any faster so this has a time complexity of 2160 which makes it expensive enough to be secure.

Everything is relative.  One man's insecure is another man's fortress.  I think rather than debating the security of PGP, we should perhaps ask if there is a better available option.
legendary
Activity: 1040
Merit: 2785
Bitcoin and C♯ Enthusiast
I’ve long thought there should be a spot for PGP fingerprint.

PGP fingerprints are SHA-1, which is insecure. The OpenPGP standard really needs a complete new revision...

Is it really insecure in this context?
To my knowledge the only problem with SHA-1 so far is collision. Considering SHA-1 is 160-bit and there is a known structural weakness, it has a time complexity of 263 which is very fast. But in this context the security depends on ability to find a second preimage (since the message aka the pubkey and the hash of it is already known), and there has been no weaknesses found to help perform this any faster so this has a time complexity of 2160 which makes it expensive enough to be secure.
legendary
Activity: 2408
Merit: 4282
eXch.cx - Automatic crypto Swap Exchange.
It is too much information, and unnecessary.

It's not too much information and it's not unnecessary. First of all, it's not mandatory to fil in those space. It's a thing of choice and important to users advertising their business/services. If you aren't using it for business purposes, or want to stay anonymous on forum you can leave it blank just as some users don't input their BTC address on profile while others do.
legendary
Activity: 2310
Merit: 4085
Farewell o_e_l_e_o
It is too much information, and unnecessary.
I believe that the bitcointalk account is the basic, fundamental one to contact each other.
After that, if need something more, people can easily get more details for further lively discussions.
Adding too much information into account profile page is un-necessary.
It is risky for potential annoying contacs, phishing sites, and other kinds of threats.
Threats can more easily to spread out over Discord, Telegram, Skype, etc. because lots of users use them on mobile devices.
What happen if a message pops-up with phishing link, and user unintentionally tap on it. It's terrible.

Personally, I disagreed with the suggestion.
hero member
Activity: 672
Merit: 526
@OgNasty you are right. But the discussion is more about the way to contact someone. On signal you need to have the number of the person that you want to talk. On telegram you just need the nick, and you could talk with that person without exchange your phone number. Discord, slack you only need a nickname/email too.

And I do not think it is off-topic because it is a topic about the part on the profiles page that we use to put personal contact. It is important to discuss anonymous and safe issues about those messagers  =)

About the tip button, even if it was not widely used, could work as an experiment for other websites and forums. I found the twitter bot tip a very interesting experiment. On Reddit, this was widely used in the past.

Receive tips on Twitter using Lightning Network
https://tippin.me
https://cointip.jp/en
copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
Maybe not through traditional means.  If the information is out there, it can be accessed by someone.  When working in the financial industry, I was always shocked at how easy it was to access client SSNs or other personal information.  That, and social engineering is typically a fairly easy way to get information like this out of nonchalant employees.  Way off topic though.  Sorry.

You'd have to explicitetly share the account name with someone else, so no -- at least through what Og said, traditional means.

But yeah, most companies (in many industries) have some pretty horrible 'security', or for this matter a lack thereof, when it comes to all of your most sensitive information (tax returns, id scans, ssn, etc)

This is true. Government security isn't very good and neither is the security of a lot of cmpanies (but especially the government with files that don't even need to be on the internet, they're just there because someone decided it was better or they couldn't be bothered putting in the time to do some simple air gapping).

There are some services (like the one in my signature) that are already doing that
Edit: I'm no expert, but I just checked here (https://github.com/lightningnetwork/lightning-rfc/blob/master/11-payment-encoding.md) and i wasn't able to find any limitation regarding expiration
I have suggested some ideas here [Merit isn’t enough, tipping using LN] but it seems that the forum will not support the orientations of the lightning network.

No one ever really seems to tip on here though either.

If I went off tips alone I might have about 0.02BTC by now and that would literally be it lol Grin. I don't know about the LN because it seems like a good idea but people might just start tipping 1 or 2 satoshi which is going to clog the network and mean they're paying quite high fees for not much or a reason (it won't even fund a channel closure)... This being said, I'd still be interested in seeing how a solution like this would pan out.
legendary
Activity: 1666
Merit: 1285
Flying Hellfish is a Commie

Can't you access other people's number from telegram? I thought you could (since it's required).

No. You can´t know the phone number from a user on telegram. You could search for him using only their nick.

Maybe not through traditional means.  If the information is out there, it can be accessed by someone.  When working in the financial industry, I was always shocked at how easy it was to access client SSNs or other personal information.  That, and social engineering is typically a fairly easy way to get information like this out of nonchalant employees.  Way off topic though.  Sorry.

You'd have to explicitetly share the account name with someone else, so no -- at least through what Og said, traditional means.

But yeah, most companies (in many industries) have some pretty horrible 'security', or for this matter a lack thereof, when it comes to all of your most sensitive information (tax returns, id scans, ssn, etc)
copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
A lighting network invoice for tipping would be great  Smiley

They expire after two days though don't they? Or are you hoping of an autogen of some sorts.


There are some services (like the one in my signature) that are already doing that

Edit: I'm no expert, but I just checked here (https://github.com/lightningnetwork/lightning-rfc/blob/master/11-payment-encoding.md) and i wasn't able to find any limitation regarding expiration

That's pretty strange since an expiry is usually included in the invoice AFAIK.

I also thought the invoices can only be used once but I'm not sure if that's for privacy.
legendary
Activity: 2646
Merit: 3911
There are some services (like the one in my signature) that are already doing that

Edit: I'm no expert, but I just checked here (https://github.com/lightningnetwork/lightning-rfc/blob/master/11-payment-encoding.md) and i wasn't able to find any limitation regarding expiration
I have suggested some ideas here [Merit isn’t enough, tipping using LN] but it seems that the forum will not support the orientations of the lightning network.
LN is probably unsuitable for tips since the recipient has to be online. That's why these LN tipbots all hold your money, which I'm not a fan of. If you're using LN through a trusted third party, then you're better off not using it at all.

I read that theymos had finished editing the payment code to be done by the lightning network, I thought we would get some additions such as tipping instead of merits. I do not really know what the addition will be provided by the network lightning as the number of transactions that are paid in this forum is few.

donator
Activity: 4760
Merit: 4323
Leading Crypto Sports Betting & Casino Platform

Can't you access other people's number from telegram? I thought you could (since it's required).

No. You can´t know the phone number from a user on telegram. You could search for him using only their nick.

Maybe not through traditional means.  If the information is out there, it can be accessed by someone.  When working in the financial industry, I was always shocked at how easy it was to access client SSNs or other personal information.  That, and social engineering is typically a fairly easy way to get information like this out of nonchalant employees.  Way off topic though.  Sorry.
hero member
Activity: 672
Merit: 526

Can't you access other people's number from telegram? I thought you could (since it's required).

No. You can´t know the phone number from a user on telegram. You could search for him using only their nick.
legendary
Activity: 1680
Merit: 1205
A lighting network invoice for tipping would be great  Smiley

They expire after two days though don't they? Or are you hoping of an autogen of some sorts.


There are some services (like the one in my signature) that are already doing that

Edit: I'm no expert, but I just checked here (https://github.com/lightningnetwork/lightning-rfc/blob/master/11-payment-encoding.md) and i wasn't able to find any limitation regarding expiration
copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
A lighting network invoice for tipping would be great  Smiley

They expire after two days though don't they? Or are you hoping of an autogen of some sorts.

What similar things do people use now?
telegram

+1

Telegram, Discord, Signal (though I wouldn't be putting my # out there), and so on and so forth.

At least in the case of Tele and Signal, privacy minded apps.

Can't you access other people's number from telegram? I thought you could (since it's required).
legendary
Activity: 1666
Merit: 1285
Flying Hellfish is a Commie
What similar things do people use now?
telegram

+1

Telegram, Discord, Signal (though I wouldn't be putting my # out there), and so on and so forth.

At least in the case of Tele and Signal, privacy minded apps.
copper member
Activity: 2996
Merit: 2371
copper member
Activity: 2940
Merit: 4101
Top Crypto Casino
What similar things do people use now?


The crypto community likes to use Telegram. Every crypto websites news has its Telegram channel, some exchanges-web wallets as well. All aitcoins have their Telegram channel. Chat groups use it too. And in the Bitcointalk community the majority of its users has a Telegram ID

Cryptos make Telegram great again
hero member
Activity: 672
Merit: 526
What similar things do people use now?

Those fields are actually built a bit deeply into SMF for some reason, so it's not completely trivial to change, but it can be done. Low on my to-do list, though, as hugeblack mentioned.

I’ve long thought there should be a spot for PGP fingerprint.

PGP fingerprints are SHA-1, which is insecure. The OpenPGP standard really needs a complete new revision...

The point is that what they use today may change in 6 months. Most people use Telegram, discord, Twitter for issues related to crypto.

But I think it would be more interesting to leave an open box. Where we could organize the contacts in the way that was most interesting. Allowing to put the address of Bitcoin and other coins.
legendary
Activity: 1554
Merit: 2037
I was never big on any of these but lately when i get a group trip together we set up chats through telegram, or WhatsApp.

I tend to think a lot of people use them similar, especially cause every scammer out there tries to steer a private convo to these platforms. Wouldn't hurt having a place for it in the profile so that people aren't being fooled by fake accounts pretending to be reputable members.
legendary
Activity: 1680
Merit: 1205
A lighting network invoice for tipping would be great  Smiley
Pages:
Jump to: