elective-stereophonic
elective-stereophonic
The most important feature NXT needs singapore
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Nxt Client: Nxt 1.11.15

Pages: 1 [2]  All

Author Topic: The most important feature NXT needs  (Read 2535 times)

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: The most important feature NXT needs
« Reply #20 on: July 28, 2014, 08:25:11 pm »

2-factor auth or at least multisigning would increase the security and trustworthiness of NXT so much.

Wallets like nxtblocks.info and mynxt.info have 2-factor auth. Use them, as I think they are pretty safe and easier to use. 
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

m30188

  • Guest
Re: The most important feature NXT needs
« Reply #21 on: July 28, 2014, 08:32:49 pm »

Wallets like nxtblocks.info and mynxt.info have 2-factor auth. Use them, as I think they are pretty safe and easier to use.
You can still access the account with the private key.
Logged

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: The most important feature NXT needs
« Reply #22 on: July 28, 2014, 08:38:41 pm »

Wallets like nxtblocks.info and mynxt.info have 2-factor auth. Use them, as I think they are pretty safe and easier to use.
You can still access the account with the private key.

which always be the case , no matter what you do. 

2FA is designed to protect against weak/stolen passwords, and  nxtblocks.info and mynxt.info both achive that goal, fulling 2FA security goal.


Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

semibaron

  • Sr. Member
  • ****
  • Karma: +16/-7
  • Offline Offline
  • Posts: 333
    • View Profile
Re: The most important feature NXT needs
« Reply #23 on: July 28, 2014, 08:47:08 pm »

Wallets like nxtblocks.info and mynxt.info have 2-factor auth. Use them, as I think they are pretty safe and easier to use.
You can still access the account with the private key.

which always be the case , no matter what you do. 

2FA is designed to protect against weak/stolen passwords, and  nxtblocks.info and mynxt.info both achive that goal, fulling 2FA security goal.

When a hacker enters my stolen private key into the standard client he can steal my NXT.
Logged

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: The most important feature NXT needs
« Reply #24 on: July 28, 2014, 08:53:24 pm »

When a hacker enters my stolen private key into the standard client he can steal my NXT.

You mean when the hacker enters the secret phrase. The standard Nxt client doesn't use private key.

nxtblocks doesn't use secret phrase. It uses a password that encrypts your wallet. Your secret phrase is in your wallet file, you never type it. If you have 2FA enabled, losing the password alone won't expose the secret phrase as the hacker still would need the wallet file that requires 2FA before you can download it.   
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

semibaron

  • Sr. Member
  • ****
  • Karma: +16/-7
  • Offline Offline
  • Posts: 333
    • View Profile
Re: The most important feature NXT needs
« Reply #25 on: July 28, 2014, 09:13:55 pm »

When a hacker enters my stolen private key into the standard client he can steal my NXT.

You mean when the hacker enters the secret phrase. The standard Nxt client doesn't use private key.

nxtblocks doesn't use secret phrase. It uses a password that encrypts your wallet. Your secret phrase is in your wallet file, you never type it. If you have 2FA enabled, losing the password alone won't expose the secret phrase as the hacker still would need the wallet file that requires 2FA before you can download it.


Still the question if a 3rd party can be considered as safe.
Logged

colin012

  • Hero Member
  • *****
  • Karma: +65/-18
  • Offline Offline
  • Posts: 851
  • NXTOrganization Marketing
    • View Profile
Re: The most important feature NXT needs
« Reply #26 on: July 28, 2014, 10:30:35 pm »

When a hacker enters my stolen private key into the standard client he can steal my NXT.

You mean when the hacker enters the secret phrase. The standard Nxt client doesn't use private key.

nxtblocks doesn't use secret phrase. It uses a password that encrypts your wallet. Your secret phrase is in your wallet file, you never type it. If you have 2FA enabled, losing the password alone won't expose the secret phrase as the hacker still would need the wallet file that requires 2FA before you can download it.


Still the question if a 3rd party can be considered as safe.

3rd party is the only reasonable way 2 factor auth will be usable. What needs to happen is someone needs to create an open source 3rd party client using it.
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSORSHIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

Tosch110

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +211/-18
  • Offline Offline
  • Posts: 2365
    • View Profile

m30188

  • Guest
Re: The most important feature NXT needs
« Reply #28 on: July 29, 2014, 12:53:15 am »

Anyone know offhand the max characters allowed for nxt passphrase?
Logged

Bitfinex_USD

  • Sr. Member
  • ****
  • Karma: +40/-3
  • Offline Offline
  • Posts: 316
  • (Not affiliated with Bitfinex)
    • View Profile
Re: The most important feature NXT needs
« Reply #29 on: July 29, 2014, 01:05:51 am »

N of M signature transactions are really needed IMO. Just improves the security soo much.

If that is not possible in short time, someone should provide a tool to make offline addresses extremely easy!
Logged
Dividend paying USD asset: Thread
Crypto25: The First Professional Altcoin Index Website

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: The most important feature NXT needs
« Reply #30 on: July 29, 2014, 04:39:53 am »

Anyone know offhand the max characters allowed for nxt passphrase?

There is no max; you can put a whole library, but that doesn't increase the security. The max strength is limited by curve25519's max strength, which is 128 bits security. 
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS
Pages: 1 [2]  All
 

elective-stereophonic
elective-stereophonic
assembly
assembly