elective-stereophonic
elective-stereophonic
Introducing the NxtVault - Secure account management for Android devices! Beta
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Nxt Client: Nxt 1.11.15

Pages: 1 ... 10 11 [12]  All

Author Topic: Introducing the NxtVault - Secure account management for Android devices! Beta  (Read 36156 times)

_mr_e

  • Hero Member
  • *****
  • Karma: +88/-18
  • Offline Offline
  • Posts: 956
    • View Profile

Just tried pasting from clipboard. It does not work, opening blank "Accounts" page.

You need to go inside your account details page, then select "tx from clipboard" from the options menu on the top right. This works for me using both a jay tx code and as of the latest build, unsigned NRS bytes. Please try the latest build and see if you have any luck.
Logged

yassin54

  • Hero Member
  • *****
  • Karma: +240/-14
  • Offline Offline
  • Posts: 2498
  • I am Homer, Sorry my english is Bad!!
    • View Profile

_mr_e

  • Hero Member
  • *****
  • Karma: +88/-18
  • Offline Offline
  • Posts: 956
    • View Profile

just published a bug fix with nrs scanning... it'll take a few hour to show up in play store, sorry about that. The dropbox apk has been updated. v 0.97.
« Last Edit: November 13, 2015, 06:55:15 pm by _mr_e »
Logged

box1413

  • Hero Member
  • *****
  • Karma: +101/-4
  • Offline Offline
  • Posts: 687
    • View Profile

what is "scan cold storage"? where do i even get a nxt cold storage account?

there should be some description of what or how scan cold storage works.
Logged

lurker10

  • Hero Member
  • *****
  • Karma: +168/-33
  • Offline Offline
  • Posts: 1334
    • View Profile

what is "scan cold storage"? where do i even get a nxt cold storage account?

there should be some description of what or how scan cold storage works.

Cold storage is your offline device never connected to internet, old laptop running linux is perfect.
You transfer NRS and blockchain to this device with a USB stick, run NRS, create a transaction QR code
Quote
by selecting, "Advaned" -> "Do not broadcast" -> "do not sign".
then use your android phone to scan QR code, and broadcast the transaction.
Logged
Run a node - win a prize! "Lucky node" project jar: NXT-8F28-EDVE-LPPX-HY4E7

box1413

  • Hero Member
  • *****
  • Karma: +101/-4
  • Offline Offline
  • Posts: 687
    • View Profile

so it does the same thing as the camera button when you click into an account.

i dont see whats the point of an offline computer when all you need is a NXT address and goto any 1.6.2 public node. even if it was compromised with keyloggers/trojans/etc they can't do anything since signing is done on the mobile device. this was why i was kind of confused.

Instead of Scan Cold Storage it seems misleading, it should really say: "Scan & Broadcast Signed Transaction" which is really what is exactly doing after testing it.
Logged

lurker10

  • Hero Member
  • *****
  • Karma: +168/-33
  • Offline Offline
  • Posts: 1334
    • View Profile

so it does the same thing as the camera button when you click into an account.

i dont see whats the point of an offline computer when all you need is a NXT address and goto any 1.6.2 public node. even if it was compromised with keyloggers/trojans/etc they can't do anything since signing is done on the mobile device. this was why i was kind of confused.

Instead of Scan Cold Storage it seems misleading, it should really say: "Scan & Broadcast Signed Transaction" which is really what is exactly doing after testing it.

The point is your mobile device can be compromised and ta-dah, your passphrase is gone.
The cold storage device is guaranteed to be clean, you don't connect it to the internet.
More precisely, even if your cold storage device is infected, suppose you had a bad luck to use a compromised OS distribution to install to your cold storage device, the keylogger is guaranteed to not be able to transmit anything to its author.
« Last Edit: November 13, 2015, 09:16:31 pm by lurker10 »
Logged
Run a node - win a prize! "Lucky node" project jar: NXT-8F28-EDVE-LPPX-HY4E7

_mr_e

  • Hero Member
  • *****
  • Karma: +88/-18
  • Offline Offline
  • Posts: 956
    • View Profile

what is "scan cold storage"? where do i even get a nxt cold storage account?

there should be some description of what or how scan cold storage works.
You can use Jones' Vapor wallet to generate keys and transactions on an offline machine.

http://jnxt.org/vapor/

Logged

box1413

  • Hero Member
  • *****
  • Karma: +101/-4
  • Offline Offline
  • Posts: 687
    • View Profile

how do u generate a transaction using vapor if it doesnt have a gui to access the nxt services?

or do u login to your nxt account using an address, then do what you do what u need to do and just copy and paste the unsigned transaction data into vapor to sign it. then copy the signed transaction data back out onto an online computer and use the broadcast transaction option?

im just wondering which is the most secure way. having an offline computer seems to be alot of work copying stuff off to a thumb drive here and there.

i wonder if u can use vapor on an offline smartphone. i have a crap load of $10 android 2.3 phones from my repair shop.


----------

is there something similar to this for BTC?
Logged

TheCoinWizard

  • Hero Member
  • *****
  • Karma: +97/-55
  • Offline Offline
  • Posts: 614
  • Learn by questioning everything!
    • View Profile

Thanks for the app, looks great at first  :)

Wondering if you are still planning to update this potentially great app with the account control as mentioned here:
This means I will be implementing Account Control and Phasing when it is ready, and anything else security related. I expect some nice wallets or AE traders could be built on top of this.

I was also wondering why you called it scan cold storage when it seems to scan transaction for broadcasting.... or maybe for signing, I dunno. But it certainly did not allow me to scan the nxt address of my offline storage account.
what is "scan cold storage"? where do i even get a nxt cold storage account?

there should be some description of what or how scan cold storage works.

The best would be if I could simply create/scan and sign a transaction with it by just using that pin and/or signing password.
And after that....
have an overview of my nxt balance, messages, transactions, etc...

Then again I suppose you know all of this and the problem isn't the lack of ideas on how to extend this,
but rather the time, focus and programming expertise required.
 :)

I am just wondering if your goal with this app is just that or nothing much more as what it is now.
Logged
Welcome to the After Nxt Calendar era...
Which started in the year 222 of the French Republic, Frost month, on the fifth day of the first week, better known as the 2456621th Julian day,
even better known as 24 November 2013 at 12:00:00 UTC.

_mr_e

  • Hero Member
  • *****
  • Karma: +88/-18
  • Offline Offline
  • Posts: 956
    • View Profile

Thanks for the app, looks great at first  :)

Wondering if you are still planning to update this potentially great app with the account control as mentioned here:
This means I will be implementing Account Control and Phasing when it is ready, and anything else security related. I expect some nice wallets or AE traders could be built on top of this.

I was also wondering why you called it scan cold storage when it seems to scan transaction for broadcasting.... or maybe for signing, I dunno. But it certainly did not allow me to scan the nxt address of my offline storage account.
what is "scan cold storage"? where do i even get a nxt cold storage account?

there should be some description of what or how scan cold storage works.

The best would be if I could simply create/scan and sign a transaction with it by just using that pin and/or signing password.
And after that....
have an overview of my nxt balance, messages, transactions, etc...

Then again I suppose you know all of this and the problem isn't the lack of ideas on how to extend this,
but rather the time, focus and programming expertise required.
 :)

I am just wondering if your goal with this app is just that or nothing much more as what it is now.

Scan cold storage is meant to be used to scan a presigned transaction on a cold storage machine from something like Jones' vapor wallet: http://jnxt.org/vapor/

So this app was originally intended to be a secure password manager. This job was hard enough and I didn't want to complicate things with "wallet" features. However hooks were built into the app such that third party applications could build on top of nxtvault and have it sign transactions on their behalf, without exposing the private key. The vision was that this could open the floodgates to more apps on android due to not having to worry about passphrase management. Unfortunately it seems like it did not spark any developer interest. So I instead had intentions to build nxtvault 2.0 with multiwallet functionality but to be absolutely honest, unless nxt's volume and price pick up I really can't see myself dedicating the resources required to do this.
Logged

TheCoinWizard

  • Hero Member
  • *****
  • Karma: +97/-55
  • Offline Offline
  • Posts: 614
  • Learn by questioning everything!
    • View Profile

Thanks for clearing things up.
I surely hope that nxt will pick up, but who knows  :)

Scan cold storage is meant to be used to scan a presigned transaction on a cold storage machine from something like Jones' vapor wallet: http://jnxt.org/vapor/
I know, all I am saying is that it should have been broadcast instead of cold storage, as that is what it does.

I've actually been thinking about learning some Android dev and having a crack at a basic wallet to augment it, but I've got a few personal things to sort out at the start of this year before I have time.
Sounds promising, though still only a possibility.
Please let us know if and when you start working on it.
Logged
Welcome to the After Nxt Calendar era...
Which started in the year 222 of the French Republic, Frost month, on the fifth day of the first week, better known as the 2456621th Julian day,
even better known as 24 November 2013 at 12:00:00 UTC.

box1413

  • Hero Member
  • *****
  • Karma: +101/-4
  • Offline Offline
  • Posts: 687
    • View Profile

is this compatible with the new 1.7.4 ? was wondering if it worked with creating a data cloud transaction.
Logged

_mr_e

  • Hero Member
  • *****
  • Karma: +88/-18
  • Offline Offline
  • Posts: 956
    • View Profile

is this compatible with the new 1.7.4 ?
No idea. Try it out and let me know.
Logged
Pages: 1 ... 10 11 [12]  All
 

elective-stereophonic
elective-stereophonic
assembly
assembly