elective-stereophonic
elective-stereophonic
Plugin feature to NXT client (Wesley's UI) Proposal Thread
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Nxt Client: Nxt 1.11.15

Pages: 1 [2] 3 4 5  All

Author Topic: Plugin feature to NXT client (Wesley's UI) Proposal Thread  (Read 11764 times)

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #20 on: June 22, 2014, 08:30:35 pm »

I just tried to install the UI add-ins in the OP.  The HTML files have completely borked my wallet interface (it looks like it's broken all the CSS):



Which version are you using. It was developed on 1.1.3 and installed perfectly on 1.1.5.

Please tell me what did you do exactly for this to happen. thank you.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #21 on: June 22, 2014, 08:32:01 pm »

Someone, just tell me what else to make to get your interest  :-\

Make me able to try these plugins on the testnet.  Or Supercell, even.

It is all on the UI side and testnet option is in NXT client configurations.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #22 on: June 22, 2014, 08:35:39 pm »

When the plugin system is installed correctly, Installing plugins will not break the UI permanently, just removing the conflicting plugin is enough to fix everything.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

joefox

  • Hero Member
  • *****
  • Karma: +62/-1
  • Offline Offline
  • Posts: 522
    • View Profile
    • The Nxt Wiki
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #23 on: June 22, 2014, 08:36:35 pm »

Which version are you using. It was developed on 1.1.3 and installed perfectly on 1.1.5.

Please tell me what did you do exactly for this to happen. thank you.

I'm on 1.1.5; I just unpacked the distro overtop of my existing Nxt software installation on my Mac (essentially overwriting files in the "html" subfolder).  I surf with Chrome.

I was able to correct the issue by re-importing the original "html" folder from the client distribution.

Logged
GPG Key Id: 0x94A521DA613CAE76 | BitMessage BM-NBzUURL9jLagPALxCpxYDaMVe9E3965u
Nxt Wiki: http://wiki.nxtcrypto.org/
Tips: NXT-DBDW-STA8-ARBE-6JRPA

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #24 on: June 22, 2014, 08:38:16 pm »

Which version are you using. It was developed on 1.1.3 and installed perfectly on 1.1.5.

Please tell me what did you do exactly for this to happen. thank you.

I'm on 1.1.5; I just unpacked the distro overtop of my existing Nxt software installation on my Mac (essentially overwriting files in the "html" subfolder).  I surf with Chrome.

I was able to correct the issue by re-importing the original "html" folder from the client distribution.

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

farl4bit

  • Global Moderator
  • Hero Member
  • *****
  • Karma: +210/-45
  • Offline Offline
  • Posts: 3459
    • View Profile
    • Blockchain Twitter
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #25 on: June 22, 2014, 08:40:24 pm »

Looks like a cool feature, but I don't know about the security issues. keep on developing! :)
Logged

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #26 on: June 22, 2014, 08:41:57 pm »

Which version are you using. It was developed on 1.1.3 and installed perfectly on 1.1.5.

Please tell me what did you do exactly for this to happen. thank you.

I'm on 1.1.5; I just unpacked the distro overtop of my existing Nxt software installation on my Mac (essentially overwriting files in the "html" subfolder).  I surf with Chrome.

I was able to correct the issue by re-importing the original "html" folder from the client distribution.

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?

Would you be interested in helping me figure out why it did not installed correctly on Mac? I just need the log from firebug on firefox :), if you have time. thanks.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #27 on: June 22, 2014, 08:43:12 pm »

Looks like a cool feature, but I don't know about the security issues. keep on developing! :)

At least after block chain verification you can without a doubt verify the origin and integrity. Then we go back to javascript encapsulation but generally peer review is a must.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

VanBreuk

  • Administrator
  • Hero Member
  • *****
  • Karma: +362/-19
  • Offline Offline
  • Posts: 2772
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #28 on: June 22, 2014, 08:51:04 pm »

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?

Actually both html/ui folders look exactly the same, at least in Windows.

joefox - that looks like a path problem, the html is not finding the css. Make sure you uncompress the file following the nxt folder path.



Logged
GPG Fingerprint: B020 D1C1 F289 3B2C 3577  9EAD 455D D175 5913 C7F1

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #29 on: June 22, 2014, 08:53:30 pm »

Description of the verification process for the interested. Each plugin comes with a configuration file that goes like this:

Code: [Select]
{
"name": "Hello world",
"description": "Plugin Example #1",
"developer": "Supercell Inv.",
"version": "1",
"autostart":"false",
"resources":{
"js":[
"hello.js"
],
"html":[
"hello.html"
],
"css":[
]
}
}


The verification additions goes as follows: Every file mentioned in plugin.conf is paired with its SHA256 hashsum and then the publisher sends a message with plugin.conf's sha256 hashsum to a specific address (will announce it later but any would do). So the original creator is without doubt the address that first mentioned such hash. Subsequent (younger) repetitions of the hash can be considered as peers that reviewed the plugin source and are "vouching" for it. The client can automatically list them to the user. Lets just say if Weslyeh and James say this plugin code is legit and not harmful, You have nothing to worry about installing it.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #30 on: June 22, 2014, 08:56:53 pm »

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?

Actually both html/ui folders look exactly the same, at least in Windows.

joefox - that looks like a path problem, the html is not finding the css. Make sure you uncompress the file following the nxt folder path.

Maybe a batching approach is more universal here. I will work something out, maybe some sh script or something. The differences in index.html are not much btw.
« Last Edit: June 22, 2014, 09:09:41 pm by VanBreuk »
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

VanBreuk

  • Administrator
  • Hero Member
  • *****
  • Karma: +362/-19
  • Offline Offline
  • Posts: 2772
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #31 on: June 22, 2014, 09:11:56 pm »

Maybe a batching approach is more universal here. I will work something out, maybe some sh script or something. The differences in index.html are not much btw.

The pointers you give in the first post are correct, if you uncompress your your .zip in the same folder you uncompress the Nxt Client (that would be in the parent folder of /nxt/) it should overwrite the files correctly.
Logged
GPG Fingerprint: B020 D1C1 F289 3B2C 3577  9EAD 455D D175 5913 C7F1

ThomasVeil

  • Hero Member
  • *****
  • Karma: +183/-11
  • Offline Offline
  • Posts: 1400
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #32 on: June 22, 2014, 09:42:35 pm »

The idea is awesome - I think it could be really powerful. But the security issue crossed my mind first too... The ways those could screw the user (intentionally and unintentionally) are pretty huge. The verification is a good idea. But that everyone would review the code every time is unlikely.
Logged
ARDOR-BPV3-837M-QZTQ-9DQ69  oxpal.com

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #33 on: June 22, 2014, 09:55:16 pm »

The idea is awesome - I think it could be really powerful. But the security issue crossed my mind first too... The ways those could screw the user (intentionally and unintentionally) are pretty huge. The verification is a good idea. But that everyone would review the code every time is unlikely.

You forgot that you are already doing that. You are already entrusting Jean Luc at first, then entrusting Wesleyh and other developers to actually read what he did different in the code in the newer releases. Then entrusting the math behind SHA256Hashsum to verify the integrity of the data. Then you use the client.

This is basically the same. The idea started with the fact that it is easier to read a few files that you are to "add" to the client rather than using a different distributed client and comparing the whole thing to ensure there were no "hidden" changes.

With what I am writing at the moment (Block chain based verification), This can be automated and a developer opinion would be posted about a "specific" version and permanently stored in the block chain (Can be remade if pruned in the future). You can make a web of trust and you can verify the origin and integrity of any plugin listed.

Furthermore, we are working on javascript encapsulation for the unloading process and analytic code to detect core functions overriding and sensitive variables accessing. You will be very interested in the "Frozen" plugin (Take a look at the last screenshot), It will take the "security" aspect to a different level since you will not give your passphrase to the client to make any transactions.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

joefox

  • Hero Member
  • *****
  • Karma: +62/-1
  • Offline Offline
  • Posts: 522
    • View Profile
    • The Nxt Wiki
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #34 on: June 22, 2014, 09:59:32 pm »

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?

The Official Release :)
Logged
GPG Key Id: 0x94A521DA613CAE76 | BitMessage BM-NBzUURL9jLagPALxCpxYDaMVe9E3965u
Nxt Wiki: http://wiki.nxtcrypto.org/
Tips: NXT-DBDW-STA8-ARBE-6JRPA

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #35 on: June 22, 2014, 10:03:53 pm »

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?

The Official Release :)

Ok. In the image you posted it shows that it did not even find the logo image in the top section. If you can produce this problem then copy the image link. Then fix it and copy the image link (the logo on the top left section of the UI), then post them both here. I think it will show exactly what went wrong and why it is not working for you.

Thank you for helping. If Wesleyh were around I am sure he would exactly know why this happened.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

prometheus

  • Sr. Member
  • ****
  • Karma: +23/-3
  • Offline Offline
  • Posts: 431
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #36 on: June 22, 2014, 11:21:16 pm »

Coming from a non-technical standpoint, this looks great. I'll repeat what everyone else has said though - my concern is security. I haven't been following the thread where the guy lost 64k NXT, but I remember a suspect in the theft was an android app (not sure if this has been confirmed).

The screenshots of the UI in supercell's post look awesome. Very aesthetic; us non-tech folks like pictures.
Logged

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #37 on: June 22, 2014, 11:58:18 pm »

Developer verification via block chain is done (Check account 39144599804112126 - NXT-7V9Y-TTH5-XKF2-2KS43). Package integrity via recalculation of SHA256Hashsums is also implemented. Now partial tampering is not possible as well.

I think I am going to sleep for now, good night awesome people.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

ThomasVeil

  • Hero Member
  • *****
  • Karma: +183/-11
  • Offline Offline
  • Posts: 1400
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #38 on: June 23, 2014, 12:01:07 am »

The idea is awesome - I think it could be really powerful. But the security issue crossed my mind first too... The ways those could screw the user (intentionally and unintentionally) are pretty huge. The verification is a good idea. But that everyone would review the code every time is unlikely.

You forgot that you are already doing that. You are already entrusting Jean Luc at first, then entrusting Wesleyh and other developers to actually read what he did different in the code in the newer releases. Then entrusting the math behind SHA256Hashsum to verify the integrity of the data. Then you use the client.

I didn't forget :D But I think there is some difference - for one, if I want to use Nxt, then I have no choice but to trust one client. About plugins I do.
Either way - just pointing out my first thought, that likely everyone will have. I see you're already thinking ahead here with the security features you're adding

Quote
You will be very interested in the "Frozen" plugin (Take a look at the last screenshot), It will take the "security" aspect to a different level since you will not give your passphrase to the client to make any transactions.

Can't imagine how that works. Interesting indeed. :)

Good night!
Logged
ARDOR-BPV3-837M-QZTQ-9DQ69  oxpal.com

devphp

  • Hero Member
  • *****
  • Karma: +87/-14
  • Offline Offline
  • Posts: 1229
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #39 on: June 23, 2014, 04:43:46 am »

Coming from a non-technical standpoint, this looks great. I'll repeat what everyone else has said though - my concern is security. I haven't been following the thread where the guy lost 64k NXT, but I remember a suspect in the theft was an android app (not sure if this has been confirmed).

Nah, that user had a password of the kind:

jtujtujtujtujtujtujtujtujtujtu

that is, a string of 3 chars repeated 10 times, which makes it no harder to crack than just 'jtu'.

It was a dictionary and rules-based bruteforce attack, nothing else.
Logged
Pages: 1 [2] 3 4 5  All
 

elective-stereophonic
elective-stereophonic
assembly
assembly