elective-stereophonic
elective-stereophonic
ANN: Release of browser-encrypted wallet of NXTblocks  
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Stable Nxt Client: Nxt 1.12.2

Pages: 1 2 3 4 [All]

Author Topic: ANN: Release of browser-encrypted wallet of NXTblocks  (Read 16732 times)

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
ANN: Release of browser-encrypted wallet of NXTblocks
« on: June 24, 2014, 04:39:03 pm »

We are pleased to announce the first version of our browser encrypted wallet.

https://nxtblocks.info

There will be a beta period for the first two weeks in order to iron out possible wallet bugs and polish it according to feedback.

* Key Characteristics:

- The wallet is browser-encrypted. We do not hold your keys, and we do not know your password.

- The encrypted wallets are backed up three times a day in off-site locations. The most recent 50 versions of each wallet are always kept.

- We've given huge emphasis to security. We don't include external Javascript code anywhere. The application requires a
  recent browser with cryptographic extensions (window.crypto). If your browser doesn't support those features, wallet functionality is disabled.

- We support Google two factor authentication for accessing your wallet.

* Initial features:

- Multiple account support. You can have up to 20 personal accounts, and up to 40 contacts.

- User-specified account support. You can specify your accounts' private keys and access them all from one place.

- Watch-only account support. You can add an account without entering its private key, for monitoring purposes.

- RS account support is the default account format. You can use the numeric account format as well.

- Account management: You can label your accounts to ease management. You can archive the accounts you do not use anymore to keep your wallet uncluttered.

- Contact management: Add accounts as contacts, label them, remove them, and get information about them with a single click.

- You can download your encrypted wallet for backup purposes. This is recommended whenever you add an account. In a few days we will release an offline decryption tool.

- Easily send funds: You can send NXT to one or more accounts at the same time.

- Integration with the Block Explorer: Get QR codes and information regarding every account you have in your wallet with a single click.

At this point, only send money transactions are supported. We'll be integrating more features in the near future, including AE trading directly from your browser.

We have also made some minor modifications regarding the design, icluding a new logo that combines design elements from the nice corporate design, but also enables us to keep a distinct tone. We also managed to acquire the twitter account @nxtblocks, so make sure you follow us there as well! https://twitter.com/nxtblocks

Feel free to inspect the wallet encryption/decryption code. The page loads the relevant code from a separate, on purpose unminified javascript file.
« Last Edit: June 24, 2014, 04:51:11 pm by antanst »
Logged

forkedchain

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +74/-10
  • Offline Offline
  • Posts: 1190
  • bite me
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #1 on: June 24, 2014, 04:47:52 pm »

what do you mean you back up the wallets?  you say you dont know the passphrase.
Logged
NXT tips: 2319251 or NXT-8SWM-2224-YKWW-22222

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #2 on: June 24, 2014, 04:48:50 pm »

Looks pretty good.

Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #3 on: June 24, 2014, 04:50:15 pm »

what do you mean you back up the wallets?  you say you dont know the passphrase.

I guess it means the encrypted version of wallet is backed up. The wallet is encrypted on the client side in browser. One wallet can have many Nxt accounts.
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #4 on: June 24, 2014, 04:50:47 pm »

what do you mean you back up the wallets?  you say you dont know the passphrase.

We don't. The encrypted wallets are backed up. Let me clarify this on the announcement as well, thanks.
Logged

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #5 on: June 24, 2014, 04:55:53 pm »

what do you mean you back up the wallets?  you say you dont know the passphrase.

We don't. The encrypted wallets are backed up. Let me clarify this on the announcement as well, thanks.

Is the signing done locally in the client side?
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #6 on: June 24, 2014, 04:59:43 pm »

Is the signing done locally in the client side?

Yes. The transaction bytes are verified,signed and then broadcasted. The private keys don't leave the browser.
Logged

coretechs

  • Sr. Member
  • ****
  • Karma: +161/-1
  • Offline Offline
  • Posts: 436
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #7 on: June 24, 2014, 05:22:52 pm »

The wallet looks great, nice work!
Logged
https://ardorportal.org - Ardor blockchain explorer | https://nxtportal.org - Nxt blockchain explorer | http://bitcoindoc.com - The Rise and Rise of Bitcoin
ARDOR-T43P-R2K9-8W79-9W2AL | NXT-WY9K-ZMTT-QQTT-3NBL7

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #8 on: June 24, 2014, 05:25:56 pm »

Is the signing done locally in the client side?

Yes. The transaction bytes are verified,signed and then broadcasted. The private keys don't leave the browser.

What happens if I enable 2FA and lose my phone later? I would like to see email confirmation to remove 2FA as my email already has 2FA enabled
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #9 on: June 24, 2014, 05:29:28 pm »

Is the signing done locally in the client side?

Yes. The transaction bytes are verified,signed and then broadcasted. The private keys don't leave the browser.

Does the user have to reenter the Nxt pass phrase for each outgoing transaction? (I hope not as that doesn't add anything to security and potentially exposes secret phrase to keyloger)
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

forkedchain

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +74/-10
  • Offline Offline
  • Posts: 1190
  • bite me
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #10 on: June 24, 2014, 05:32:20 pm »

what do you mean you back up the wallets?  you say you dont know the passphrase.

We don't. The encrypted wallets are backed up. Let me clarify this on the announcement as well, thanks.


Logged
NXT tips: 2319251 or NXT-8SWM-2224-YKWW-22222

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #11 on: June 24, 2014, 05:36:45 pm »

Does the user have to reenter the Nxt pass phrase for each outgoing transaction? (I hope not as that doesn't add anything to security and potentially exposes secret phrase to keyloger)

No, the passphrase is only used the first time when one opens the wallet. Although, if you have a keylogger on your system, you're probably already hosed...

What happens if I enable 2FA and lose my phone later? I would like to see email confirmation to remove 2FA as my email already has 2FA enabled

When you request a 2FA reset, we contact you in your verified email. This is why you have to verify your email before you enable 2FA.
Logged

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #12 on: June 24, 2014, 05:49:42 pm »

Problem: I tried adding one of my account, and the account that it gets is different from what I get in Wesley client (using the same passphrase)

In fact, the account it generates is this  NXT-23YP-M8H9-FA5W-5CX9B

which is an account with 0 balance and has apparently been hacked by a known hacker account account ( 4576541113110361188 ) according this thread  https://nextcoin.org/index.php?topic=4518.0


« Last Edit: June 24, 2014, 05:53:08 pm by Eadeqa »
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #13 on: June 24, 2014, 06:02:39 pm »

Problem: I tried adding one of my account, and the account that it gets is different from what I get in Wesley client (using the same passphrase)

In fact, the account it generates is this NXT-23YP-M8H9-FA5W-5CX9B

which is an account with 0 balance and has apparently been hacked by a known hacker account account ( 4576541113110361188 ) according this thread  https://nextcoin.org/index.php?topic=4518.0

Are you sure you're using the same passphrase? We're using the same code as in Wesley's client for account generation, and the chances of randomly generating the same account from different passphrases are extremely low.
Logged

forkedchain

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +74/-10
  • Offline Offline
  • Posts: 1190
  • bite me
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #14 on: June 24, 2014, 06:09:31 pm »

Problem: I tried adding one of my account, and the account that it gets is different from what I get in Wesley client (using the same passphrase)

In fact, the account it generates is this NXT-23YP-M8H9-FA5W-5CX9B

which is an account with 0 balance and has apparently been hacked by a known hacker account account ( 4576541113110361188 ) according this thread  https://nextcoin.org/index.php?topic=4518.0

Are you sure you're using the same passphrase? We're using the same code as in Wesley's client for account generation, and the chances of randomly generating the same account from different passphrases are extremely low.

I dont think that is what hes saying is happing; more likely there is some bug that whenever activated,  gives wrong accounts to wrong people.  which seems really really bad
Logged
NXT tips: 2319251 or NXT-8SWM-2224-YKWW-22222

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #15 on: June 24, 2014, 06:11:15 pm »

Are you sure you're using the same passphrase? We're using the same code as in Wesley's client for account generation, and the chances of randomly generating the same account from different passphrases are extremely low.

I wasn't generating an account. I was adding my own by entering (copy and paste) from lastpass secure note. When I clicked on continue, it got this account

NXT-23YP-M8H9-FA5W-5CX9B

Is that the account number for blank password? Can anyone check?

In any case, entering and removing a space fixed the problem.

Do not allow people to enter black password

Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #16 on: June 24, 2014, 06:12:31 pm »

I dont think that is what hes saying is happing; more likely there is some bug that whenever activated,  gives wrong accounts to wrong people.  which seems really really bad

It's not a bug. It just sometime doesn't see entered password if it's copy and pasted and probably just sees it as blank password

Solution: do not allow blank passwords
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

forkedchain

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +74/-10
  • Offline Offline
  • Posts: 1190
  • bite me
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #17 on: June 24, 2014, 06:15:45 pm »

I dont think that is what hes saying is happing; more likely there is some bug that whenever activated,  gives wrong accounts to wrong people.  which seems really really bad

It's not a bug. It just sometime doesn't see entered password if it's copy and pasted and probably just sees it as blank password

Solution: do not allow blank passwords

ive seen this happen before, with a bluecoat SSL firewall,  it was giving incorrrect sessions to people, who then had access to other peoples web accounts on whatever servers were being utilized
Logged
NXT tips: 2319251 or NXT-8SWM-2224-YKWW-22222

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #18 on: June 24, 2014, 06:17:34 pm »

Another problem: I can enter 12345678 as a secret phrase for new account

Please enforce stricter rules for secret phrase. It must be over 16 char long, just as you enforce stricter rules for encryption password
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #19 on: June 24, 2014, 06:21:42 pm »

It's not a bug. It just sometime doesn't see entered password if it's copy and pasted and probably just sees it as blank password

Solution: do not allow blank passwords

This account is indeed the account you get with a blank password. We've never stumbled in a copy paste problem, but you're right we should disallow blank passwords in any case. Thanks for the feedback!

Please enforce stricter rule secret phrases for. It must be over 16 char long, just as you enforce stricter rules for encryption passwordd

We want to let users add their accounts they have despite them not being totally secure, like in the default client. A warning is a good idea though, we'll definitely include one in the next version.
Logged

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #20 on: June 24, 2014, 06:24:28 pm »

If correctly implemented, it has potential to be safer and easier to use than Wesley client. for most users.

(1) There is online backup for wallet
(2) More than one account
(2) 2FA can protect encrypted backup against keyloggers
(3) Not entering secret phrase every time for Nxt account can be safer too (against key loggers).
(4) No Java/blochairn and installation problems
« Last Edit: June 24, 2014, 06:28:10 pm by Eadeqa »
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #21 on: June 24, 2014, 06:26:49 pm »

We want to let users add their accounts they have despite them not being totally secure, like in the default client. A warning is a good idea though, we'll definitely include one in the next version.

I don't think so. Users with Nxt secret phrases smaller than 16 char should just move to new account and transfer their funds to it.

I still say enforce stricter rules on Nxt account. "12345678" should not be acceptable password
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #22 on: June 24, 2014, 06:44:08 pm »

We have disallowed blank passwords.

We want to let users add their accounts they have despite them not being totally secure, like in the default client. A warning is a good idea though, we'll definitely include one in the next version.

I don't think so. Users with Nxt secret phrases smaller than 16 char should just move to new account and transfer their funds to it.

I still say enforce stricter rules on Nxt account. "12345678" should not be acceptable password

You have a point here, it's a usability/security tradeoff we're going to have to consider. We'll add a warning in the next version for sure, but we'll wait for some more feedback before completely disallowing weak passwords.
Logged

LiQio

  • Hero Member
  • *****
  • Karma: +50/-5
  • Offline Offline
  • Posts: 672
    • View Profile
    • NxtLoader for Windows
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #23 on: June 24, 2014, 07:03:35 pm »

Great work antanst - nice, fast, perfect ice-breaker - thank you very much!

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #24 on: June 24, 2014, 07:30:50 pm »

Bug: If try to send money, the destination account can be only 20 char long

RS accounts are longer than that.
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

HolgerD77

  • Sr. Member
  • ****
  • Karma: +49/-0
  • Offline Offline
  • Posts: 299
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #25 on: June 24, 2014, 07:47:36 pm »

Great work, very happy to finally have a NXT wallet for my smartphone! :-)
Logged
NXT-AQ9F-JC4F-NCM2-4JSXZ

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #26 on: June 24, 2014, 07:54:59 pm »

Bug: If try to send money, the destination account can be only 20 char long

RS accounts are longer than that.

Confirmed. We'll fix it first thing tomorrow. Your feedback is greatly appreciated.

Great work antanst - nice, fast, perfect ice-breaker - thank you very much!

You're welcome!
Logged

allwelder

  • Hero Member
  • *****
  • Karma: +196/-13
  • Offline Offline
  • Posts: 1867
  • NxtChina.org
    • View Profile
    • NxtChina.org
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #27 on: June 25, 2014, 12:03:08 am »

great,the wallet is online.
the wallet is onchain like blockchain.info?
Logged
NxtChina |Weibo |Twitter Donation welcomed:NXT-APL9-66GU-K8LY-B3JJJ

joefox

  • Hero Member
  • *****
  • Karma: +62/-1
  • Offline Offline
  • Posts: 522
    • View Profile
    • The Nxt Wiki
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #28 on: June 25, 2014, 01:24:26 am »

Congratulations!

I've been taking this for a spin and you've done a terrific job.  It's a "thorough" experience with a workflow that will be familiar to anyone who has a QT-style wallet from another crypto.  The 2FA, wallet download, and wallet identifier components are *excellent*.

Bravo!  Can't wait to see additional features (Nxt AE!)
Logged
GPG Key Id: 0x94A521DA613CAE76 | BitMessage BM-NBzUURL9jLagPALxCpxYDaMVe9E3965u
Nxt Wiki: http://wiki.nxtcrypto.org/
Tips: NXT-DBDW-STA8-ARBE-6JRPA

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #29 on: June 25, 2014, 02:20:41 am »

I've been taking this for a spin and you've done a terrific job.  It's a "thorough" experience with a workflow that will be familiar to anyone who has a QT-style wallet from another crypto.  The 2FA, wallet download, and wallet identifier components are *excellent*.

I think they could have simplified it even more by not requiring wallet identifier. The encryption password itself could have been used as wallet identifier.

For example,

Encryption Key = Hash (password)

for 1 to 100000
  Key = Hash (Key)

Key would encrypt the wallet and  and wallet identifier then would be = Hash (Key) one more time




Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

joefox

  • Hero Member
  • *****
  • Karma: +62/-1
  • Offline Offline
  • Posts: 522
    • View Profile
    • The Nxt Wiki
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #30 on: June 25, 2014, 02:42:05 am »

I think they could have simplified it even more by not requiring wallet identifier. The encryption password itself could have been used as wallet identifier.

I don't disagree.  But there's something *reassuring* about the use of the identifier because:
  • it is simpler/more readable than the encryption password (or the hash of that password)
  • it's a clean, "password-like entity" that is NOT your encryption password AND that can be used for other purposes, like resetting 2FA -- so it can be exposed to the network without compromising your wallet

The big bonus is a psychological feeling of security... mixed with clear attention towards usability.
Logged
GPG Key Id: 0x94A521DA613CAE76 | BitMessage BM-NBzUURL9jLagPALxCpxYDaMVe9E3965u
Nxt Wiki: http://wiki.nxtcrypto.org/
Tips: NXT-DBDW-STA8-ARBE-6JRPA

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #31 on: June 25, 2014, 02:52:33 am »

I think they could have simplified it even more by not requiring wallet identifier. The encryption password itself could have been used as wallet identifier.

I don't disagree.  But there's something *reassuring* about the use of the identifier because:
  • it is simpler/more readable than the encryption password (or the hash of that password)
  • it's a clean, "password-like entity" that is NOT your encryption password AND that can be used for other purposes, like resetting 2FA -- so it can be exposed to the network without compromising your wallet

The big bonus is a psychological feeling of security... mixed with clear attention towards usability.

Yes, they did good a pretty good job. Now they need to add the rest of the features (messaging, aliases, asset exchange, etc)

Can it be released as stand alone plugin/extension? 




Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

CryptKeeper

  • Hero Member
  • *****
  • Karma: +78/-5
  • Offline Offline
  • Posts: 1235
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #32 on: June 25, 2014, 06:45:29 am »


We have disallowed blank passwords.

We want to let users add their accounts they have despite them not being totally secure, like in the default client. A warning is a good idea though, we'll definitely include one in the next version.

I don't think so. Users with Nxt secret phrases smaller than 16 char should just move to new account and transfer their funds to it.

I still say enforce stricter rules on Nxt account. "12345678" should not be acceptable password

You have a point here, it's a usability/security tradeoff we're going to have to consider. We'll add a warning in the next version for sure, but we'll wait for some more feedback before completely disallowing weak passwords.

I second eadeqa's opinion here, strong passwords are a must have.
Logged
Follow me on twitter for the latest news on bitcoin and altcoins!
Vanity Accounts Sale :-)

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #33 on: June 25, 2014, 06:47:41 am »

I second eadeqa's opinion here, strong passwords are a must have.

At least they should enforce it by default and let the user disable that enforcement optionally in the setting . Both sides happy
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #34 on: June 25, 2014, 06:52:09 am »

If someone wants a free add for  nxtblocks on Wikipedia, add it here

https://en.wikipedia.org/wiki/Google_Authenticator#Usage

Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #35 on: June 25, 2014, 08:14:17 am »

The send-to-custom-RS-account bug has been fixed.

Regarding the derivation of the wallet identifier from the user's passphrase, initially we gave this a thought as well. We thought about using an additional 20,000 rounds of PBKDF2 or so to derive the identifier from the user's passphrase. In the end, however, we decided that it's better to leave those two separate for security and other reasons, like the ones JoeFox outlines.

Regarding the password strength, I want to make it clear that we use strong passwords everywhere (256 bit keys when automatically creating NXT accounts), and that the tradeoff we are discussing only concerns the NXT account creation with manual password specification.
Logged

abctc

  • Hero Member
  • *****
  • Karma: +148/-13
  • Offline Offline
  • Posts: 1396
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #36 on: June 25, 2014, 08:17:55 am »

We are pleased to announce the first version of our browser encrypted wallet.
- its HUGE!
Russian translation of the OP posted here.
Logged
Welcome to the Nxt generation of crypto!   Magis quam Moneta (More than a Coin)
"Do not worry, it is an attack" (c) Jean-Luc

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #37 on: June 25, 2014, 10:16:38 am »

The send-to-custom-RS-account bug has been fixed.

Regarding the derivation of the wallet identifier from the user's passphrase, initially we gave this a thought as well. We thought about using an additional 20,000 rounds of PBKDF2 or so to derive the identifier from the user's passphrase. In the end, however, we decided that it's better to leave those two separate for security and other reasons, like the ones JoeFox outlines.

Regarding the password strength, I want to make it clear that we use strong passwords everywhere (256 bit keys when automatically creating NXT accounts), and that the tradeoff we are discussing only concerns the NXT account creation with manual password specification.

Yes, and looks like you also fixed blank account bug. 
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #38 on: June 25, 2014, 10:24:11 am »

Another serious bug.

I sent some Nxt (less than 10)  to to deliberately mistyped RS account (I changed just one char -- from 3 to 2).  Instead of catching the error, the wallet sent the nxt to some total random  account. (that doesn't have a public key)


« Last Edit: June 25, 2014, 10:27:45 am by Eadeqa »
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #39 on: June 25, 2014, 10:40:22 am »

Another serious bug.

I sent some Nxt (less than 10)  to to deliberately mistyped RS account (I changed just one char -- from 3 to 2).  Instead of catching the error, the wallet sent the nxt to some total random  account. (that doesn't have a public key)

Confirmed.

This feature needs some more work. For the time being, we've disabled sending to custom RS accounts (sending to numeric accounts works ok, as is sending to accounts already on the wallet.)

Please send me a PM with your NXT address, we'll compensate you for those NXT and with a bonus as well for your testing so far :-)
Logged

abctc

  • Hero Member
  • *****
  • Karma: +148/-13
  • Offline Offline
  • Posts: 1396
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #40 on: June 25, 2014, 10:43:06 am »

I sent some Nxt (less than 10)  to to deliberately mistyped RS account (I changed just one char -- from 3 to 2).  Instead of catching the error, the wallet sent the nxt to some total random  account.
- not to "total random", but always to https://nxtblocks.info/#section/accountId/1190112520884487201
(NXT-3333-3333-FYKW-33333)
Logged
Welcome to the Nxt generation of crypto!   Magis quam Moneta (More than a Coin)
"Do not worry, it is an attack" (c) Jean-Luc

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #41 on: June 25, 2014, 10:43:41 am »

This feature needs some more work. For the time being, we've disabled sending to custom RS accounts (sending to numeric accounts works ok, as is sending to accounts already on the wallet.)

Please send me a PM with your NXT address, we'll compensate you for those NXT and with a bonus as well for your testing so far :-)

The one in my signature works

NXT-GZYP-FMRT-FQ9K-3YQGS

Why can't you just copy the code that is implemented by Wesley? It's pretty cool and even suggests "corrections"

Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #42 on: June 25, 2014, 10:58:16 am »

Sent.

Why can't you just copy the code that is implemented by Wesley? It's pretty cool and even suggests "corrections"

It isn't as simple as a copy paste, but we will do something similar to what Wesley does, yes.
« Last Edit: June 25, 2014, 03:00:54 pm by antanst »
Logged

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #43 on: June 25, 2014, 12:10:40 pm »

Russian translation of the OP posted here.

Super!
Logged

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #44 on: June 25, 2014, 02:18:52 pm »

Ok, RS account error correction has been implemented.
Logged

s11m8

  • Newbie
  • *
  • Karma: +0/-0
  • Offline Offline
  • Posts: 3
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #45 on: June 26, 2014, 07:47:13 pm »

If I try to add a user specified account, and I enter the secret key of one of my accounts a random account is added instead of the mine.

Further I am only able to send NXT to numerical addresses as I have an old client but I can't see the numerical address of the account generated with nxtblocks... When clicking on "Account information" it tells me: "Account NXT-XXXX-XXXX-XXXX does not have any record in the blockchain.

Any suggestions?
Logged

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #46 on: June 26, 2014, 09:00:35 pm »

If I try to add a user specified account, and I enter the secret key of one of my accounts a random account is added instead of the mine.

What's the account number that is added? In my case it was a "blank" account
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #47 on: June 26, 2014, 09:38:39 pm »

If I try to add a user specified account, and I enter the secret key of one of my accounts a random account is added instead of the mine.

Are you absolutely sure you are entering your correct private key? Did you enter it by hand, or copy-pasted it? What's the account number you get? We use the same account generation code as in Wesley's client.

Quote
Further I am only able to send NXT to numerical addresses as I have an old client but I can't see the numerical address of the account generated with nxtblocks... When clicking on "Account information" it tells me: "Account NXT-XXXX-XXXX-XXXX does not have any record in the blockchain.

Any suggestions?

If an account doesn't have a record on the blockchain, then there is no data for the blockchain explorer to show, hence this message. We will add the numerical format there though for cases such as yours.
Logged

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #48 on: June 26, 2014, 10:15:32 pm »

great,the wallet is online.
the wallet is onchain like blockchain.info?

Missed that, sorry. Yes, the wallet is on-chain, exactly like blockchain.info.
Logged

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #49 on: June 27, 2014, 10:18:38 am »

In order to clear up this issue when creating accounts with user-specified keys, we will offer 10'000 NXT to the first person who will provide us a private key string that, when entered, it generates a different account ID than the official NRS client when given this very same key.

After some consideration we decided that we'll disallow weak keys when creating custom accounts. This will be implemented in the next version.
Logged

Berzerk

  • Hero Member
  • *****
  • Karma: +118/-40
  • Offline Offline
  • Posts: 1530
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #50 on: June 27, 2014, 10:42:32 pm »

In order to clear up this issue when creating accounts with user-specified keys, we will offer 10'000 NXT to the first person who will provide us a private key string that, when entered, it generates a different account ID than the official NRS client when given this very same key.

After some consideration we decided that we'll disallow weak keys when creating custom accounts. This will be implemented in the next version.

Code: [Select]
!"§$%&/()=/&%$§"!$%&/()rseewdc21§$%&/(543
Creates NXT-FTWM-5PHB-RNVQ-3DGZC at your wallet and NXT-8NZR-3WBL-N6RW-57R3D at wesleys wallet.
Logged

Eadeqa

  • Hero Member
  • *****
  • Karma: +83/-68
  • Offline Offline
  • Posts: 1888
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #51 on: June 28, 2014, 06:52:31 am »

In order to clear up this issue when creating accounts with user-specified keys, we will offer 10'000 NXT to the first person who will provide us a private key string that, when entered, it generates a different account ID than the official NRS client when given this very same key.

After some consideration we decided that we'll disallow weak keys when creating custom accounts. This will be implemented in the next version.

Code: [Select]
!"§$%&/()=/&%$§"!$%&/()rseewdc21§$%&/(543
Creates NXT-FTWM-5PHB-RNVQ-3DGZC at your wallet and NXT-8NZR-3WBL-N6RW-57R3D at wesleys wallet.

Confirmed
Logged
NXT-GZYP-FMRT-FQ9K-3YQGS

s11m8

  • Newbie
  • *
  • Karma: +0/-0
  • Offline Offline
  • Posts: 3
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #52 on: June 28, 2014, 08:15:53 am »

Oh, wow, 10k NXT would have been nice.
Wasn't at home the last days, but glad you see it as confirmed.
Logged

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #53 on: June 28, 2014, 08:32:22 am »

Code: [Select]
!"§$%&/()=/&%$§"!$%&/()rseewdc21§$%&/(543
Creates NXT-FTWM-5PHB-RNVQ-3DGZC at your wallet and NXT-8NZR-3WBL-N6RW-57R3D at wesleys wallet.

Confirmed. 10'000 NXT sent to your sig account: https://nxtblocks.info/#section/txid/5831860675299454340

The account creation with custom private keys has been disabled until further notice. In the case someone has stumbled upon this bug, funds from those accounts are spendable from within the wallet, so no funds are being lost.

Now, excuse us while we go squash some bugs.
Logged

Berzerk

  • Hero Member
  • *****
  • Karma: +118/-40
  • Offline Offline
  • Posts: 1530
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #54 on: June 28, 2014, 08:34:49 am »

Code: [Select]
!"§$%&/()=/&%$§"!$%&/()rseewdc21§$%&/(543
Creates NXT-FTWM-5PHB-RNVQ-3DGZC at your wallet and NXT-8NZR-3WBL-N6RW-57R3D at wesleys wallet.

Confirmed. 10'000 NXT sent to your sig account: https://nxtblocks.info/#section/txid/5831860675299454340

The account creation with custom private keys has been disabled until further notice. In the case someone has stumbled upon this bug, funds from those accounts are spendable from within the wallet, so no funds are being lost.

Now, excuse us while we go squash some bugs.

Wow! Thank you so much! :)

Btw: I really love your web wallet. It's very easy to use.
Logged

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #55 on: June 28, 2014, 09:00:58 am »

You're welcome, glad you like it. Keep pounding on it and feel free to send us any further feedback :-)
Logged

kLee

  • Full Member
  • ***
  • Karma: +24/-4
  • Offline Offline
  • Posts: 115
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #56 on: June 28, 2014, 09:01:04 am »

Oh, wow, 10k NXT would have been nice.
Wasn't at home the last days, but glad you see it as confirmed.
@antanst Is s11m8 deserving a bounty too?
Logged

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #57 on: June 28, 2014, 09:03:32 am »

@antanst Is s11m8 deserving a bounty too?

He is, I've already contacted him via PM for more details about his case as well.
Logged

s11m8

  • Newbie
  • *
  • Karma: +0/-0
  • Offline Offline
  • Posts: 3
    • View Profile
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #58 on: June 29, 2014, 09:02:00 pm »

Sent the private key that was causing problems via PM. Hope you can solve the problem quickly.

edit: 2000 Nxt sent to me as a bounty! Thanks!
« Last Edit: June 30, 2014, 06:52:14 pm by s11m8 »
Logged

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #59 on: June 30, 2014, 10:02:35 am »

Thanks, you've got PM.
Logged

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #60 on: July 02, 2014, 10:41:03 am »

We've deployed a new version. Changes:

Asset Exchange

* Asset trade types (sell/buy) are shown as well.
* Add weekly and monthly ranges in candlestick chart.

Wallet

* Key strength checks have been enforced when user creates an account using custom private key.
* Again in account creation using custom private key, the bug when sometimes incorrect accounts where generated is solved.
* We've added an offline wallet decryption tool. You can download it from your wallet options, right where you download the encrypted wallet file.
Logged

antanst

  • Board Moderator
  • Full Member
  • ****
  • Karma: +36/-0
  • Offline Offline
  • Posts: 216
    • View Profile
    • nxtblocks.info
Re: ANN: Release of browser-encrypted wallet of NXTblocks
« Reply #61 on: July 17, 2014, 12:17:22 pm »

The wallet BETA period has been extended, although no significant bugs were found recently. We'll be adding new features on the site soon.
Logged
Pages: 1 2 3 4 [All]
 

elective-stereophonic
elective-stereophonic
assembly
assembly