elective-stereophonic
elective-stereophonic
Plugin feature to NXT client (Wesley's UI) Proposal Thread  
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Nxt Client: Nxt 1.11.15

Pages: 1 2 [3] 4 5  All

Author Topic: Plugin feature to NXT client (Wesley's UI) Proposal Thread  (Read 11745 times)

joefox

  • Hero Member
  • *****
  • Karma: +62/-1
  • Offline Offline
  • Posts: 522
    • View Profile
    • The Nxt Wiki
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #40 on: June 23, 2014, 05:04:19 am »

I got the plugin code working after unzipping the files again more carefully.

Looks good, as a proof of concept!
Logged
GPG Key Id: 0x94A521DA613CAE76 | BitMessage BM-NBzUURL9jLagPALxCpxYDaMVe9E3965u
Nxt Wiki: http://wiki.nxtcrypto.org/
Tips: NXT-DBDW-STA8-ARBE-6JRPA

wesley

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +204/-3
  • Offline Offline
  • Posts: 1159
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #41 on: June 23, 2014, 06:07:37 am »

Even if you do javascript encapsulation, a plugin could stil listen to whatever the user types so it's never safe without some sort of developer review. (unfortunately).

The only safe way is if a plugin is totally encapsulated in a sandboxed iframe.
Logged

shin

  • Sr. Member
  • ****
  • Karma: +47/-4
  • Offline Offline
  • Posts: 456
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #42 on: June 23, 2014, 07:03:55 am »


Even if you do javascript encapsulation, a plugin could stil listen to whatever the user types so it's never safe without some sort of developer review. (unfortunately).
The only safe way is if a plugin is totally encapsulated in a sandboxed iframe.
This is great news. It would be really cool if NRS supports plugins.

I have been working with Wordpress for quite sometimes now and I was just wondering, wouldn't it be great if the NRS could adapt the plugin system of WordPress? With hooks and triggers and whatnot? Completely separating the core NRS client code with the plugins code? Major code overhaul is needed on the Wesley's client for this support though. What do you think?
Logged
Wallet: NXT-ELEB-XT6G-L475-HXRFX • 18354136531262130569 • Twitter: Shin NXT

rudeboi

  • Hero Member
  • *****
  • Karma: +55/-4
  • Offline Offline
  • Posts: 633
  • Nxt Organization Member
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #43 on: June 23, 2014, 07:43:39 am »

Congrats supercell on getting something working.

While I think this full access approach will work for a small number of trusted add ons.

Don't we want encourage many apps to be created, and most of us aren't programmers so we wouldn't be able to check the code, meaning I wouldn't run 99% of apps through fear of them being untrustworthy.

One large sandbox would be enough for most apps, and surely a compromise of where other smaller iframes could sit throughout the main client pages could be reached (also enabled/disabled in options).

All the above is from a non technical perspective, so please ignore if incorrect. And I'm not being negative on the project I think it's amazing and must have feature, however due the security issue I don't think it is scalable in its current format.
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSORSHIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

xchrix

  • Guest
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #44 on: June 23, 2014, 07:55:59 am »

nice idea. who is making the charts and graphs plugin?
i am interested in providing a price charts plugin powered by www.cryptocoincharts.info
Logged

DoM P

  • Hero Member
  • *****
  • Karma: +114/-147
  • Offline Offline
  • Posts: 1115
    • View Profile
    • Crypto Finance Analysis Consulting
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #45 on: June 23, 2014, 08:42:51 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...
Logged
Have you heard of CryptoCoins? You should!
Crypto Finance Analysis Consulting: cfa-consulting.ch
Nxt : NXT-LP8G-9NHV-VUQB-58ZZF

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #46 on: June 23, 2014, 08:51:48 am »

nice idea. who is making the charts and graphs plugin?
i am interested in providing a price charts plugin powered by www.cryptocoincharts.info

I am making a small one that is using chartJS.

There's something I'd like to see in the client:
- a detailed view of the assets I own.
- History of my buy and sell orders,
- what's the average price I acquired them at,
- their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

Easy peasy, maybe after the plugins I am currently working on.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

cc001

  • Hero Member
  • *****
  • Karma: +68/-4
  • Offline Offline
  • Posts: 829
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #47 on: June 23, 2014, 09:08:49 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

To summarize this: You need NxtReporting.com in the client, right?  ;D
Logged
cc001 Personal - NXT-8RXS-2SSK-RNF2-HSNL8
NxtReporting.com - The Nxt Asset Exchange Portfolio Manager with Profitability Tracking - Donations are greatly appreciated on NXT-5W4G-GAR6-JHJP-H8ZTW

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #48 on: June 23, 2014, 09:16:00 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

To summarize this: You need NxtReporting.com in the client, right?  ;D

lol yeah I guess so, But again if these are to be in the client you can make a trading BOT as well ;)
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

DoM P

  • Hero Member
  • *****
  • Karma: +114/-147
  • Offline Offline
  • Posts: 1115
    • View Profile
    • Crypto Finance Analysis Consulting
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #49 on: June 23, 2014, 09:21:51 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

To summarize this: You need NxtReporting.com in the client, right?  ;D
I just tried that site.
It definitely goes in the right direction... ;)
Logged
Have you heard of CryptoCoins? You should!
Crypto Finance Analysis Consulting: cfa-consulting.ch
Nxt : NXT-LP8G-9NHV-VUQB-58ZZF

cc001

  • Hero Member
  • *****
  • Karma: +68/-4
  • Offline Offline
  • Posts: 829
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #50 on: June 23, 2014, 09:27:32 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

To summarize this: You need NxtReporting.com in the client, right?  ;D
I just tried that site.
It definitely goes in the right direction... ;)

There are still people which didn't know NxtReporting until now??  :o My marketing skills suxx... ;)
Logged
cc001 Personal - NXT-8RXS-2SSK-RNF2-HSNL8
NxtReporting.com - The Nxt Asset Exchange Portfolio Manager with Profitability Tracking - Donations are greatly appreciated on NXT-5W4G-GAR6-JHJP-H8ZTW

DoM P

  • Hero Member
  • *****
  • Karma: +114/-147
  • Offline Offline
  • Posts: 1115
    • View Profile
    • Crypto Finance Analysis Consulting
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #51 on: June 23, 2014, 09:30:06 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

To summarize this: You need NxtReporting.com in the client, right?  ;D
I just tried that site.
It definitely goes in the right direction... ;)

There are still people which didn't know NxtReporting until now??  :o My marketing skills suxx... ;)
Too many things to do. The forum is immense, I work 100 hours a week... There's a limit at what one can do... ;)
Logged
Have you heard of CryptoCoins? You should!
Crypto Finance Analysis Consulting: cfa-consulting.ch
Nxt : NXT-LP8G-9NHV-VUQB-58ZZF

chanc3r

  • Hero Member
  • *****
  • Karma: +124/-50
  • Offline Offline
  • Posts: 1019
  • NXTInspect
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #52 on: June 23, 2014, 10:05:27 am »

Even if you do javascript encapsulation, a plugin could stil listen to whatever the user types so it's never safe without some sort of developer review. (unfortunately).

The only safe way is if a plugin is totally encapsulated in a sandboxed iframe.

Put the passphrase handling into the sandbox/plugin perhaps and then everything else is untrusted and harden that - so everything incl the default app communicates with that?
I also really like Ola's WoT proposal to confirm that plug-ins are safe....
In fact WoT has been mentioned before and could help with a number of things.. Its stake in NXT but in a different form.... community stake...

No crypto has solved this yet but if we can it will completely open up the way in which the platform that is NXT can be exploited..

Lets keep hammering away at this one...
Logged
NXT: 29996814460165 (NXT-JTA7-B2QR-8BFC-2V222)
@imrimr @NXTinspect

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #53 on: June 23, 2014, 10:48:42 am »

Guys what do you think, Should I also implement a thumbs down as well? It could lead to spam  :-\. Currently there is only thumbs up (I am talking about the block chain based verification)
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

chanc3r

  • Hero Member
  • *****
  • Karma: +124/-50
  • Offline Offline
  • Posts: 1019
  • NXTInspect
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #54 on: June 23, 2014, 10:53:54 am »

Guys what do you think, Should I also implement a thumbs down as well? It could lead to spam  :-\. Currently there is only thumbs up (I am talking about the block chain based verification)

I am against a thumbs down because this could lead to an attack vector - i.e. activity that can harm the rating of legitimate plugin, by a competitor or someone who but I also understand that people can spam positively to increase the rating of something artificially.

That is why I think that 'who' signs the positive rating also carries some weight in the trust calculation... how we weight the 'trust' value that a single NXT account can provide is a tough one...

Ideas????
Logged
NXT: 29996814460165 (NXT-JTA7-B2QR-8BFC-2V222)
@imrimr @NXTinspect

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #55 on: June 23, 2014, 11:02:24 am »

Guys what do you think, Should I also implement a thumbs down as well? It could lead to spam  :-\. Currently there is only thumbs up (I am talking about the block chain based verification)

I am against a thumbs down because this could lead to an attack vector - i.e. activity that can harm the rating of legitimate plugin, by a competitor or someone who but I also understand that people can spam positively to increase the rating of something artificially.

That is why I think that 'who' signs the positive rating also carries some weight in the trust calculation... how we weight the 'trust' value that a single NXT account can provide is a tough one...

Ideas????

I think we shouldn't go to that extend and leave estimating the risk to the user. But to help for example reviewers can agree to a system to ease the analysis. For example each reviewer would register an alias and point the URL to his/her forum profile page where he publishes the same account number. I will post a screenshot soon to show how is that to be used in the UI.

Yes I agree a thumbdown feature might also give the illusion of trustworthy-ness via spamming thumbs up.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #56 on: June 23, 2014, 11:13:32 am »

So basically what I did goes like this




If there were other accounts that approves of this they will be listed in a popup when the thumbs up icon is clicked and each one is either a link to the account information or the URL of the alias.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

rudeboi

  • Hero Member
  • *****
  • Karma: +55/-4
  • Offline Offline
  • Posts: 633
  • Nxt Organization Member
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #57 on: June 23, 2014, 02:57:51 pm »

Would it possible to create a 2 tier system of addons:

Limited (lite): Only able to create an entry on the side menu, and operates in a single sandbox iframe with no (or limited) connection to the rest of the client.

Unrestricted (full): Full access, with any security controls that can be put in place. This is essentially what supercell has been working to at the moment.

At least then the user is able to decide what level of access is granted, and when for example the full access tick box is clicked, a pop up window could appear “Potential Security Risk: Are you sure you want to continue? Please ensure you trust the developer as the add-on will have full access to your client.”

The reason I’m very afraid of giving full access is that as soon as this platform is available there will be many evil addons launched that will try to grab your passcode, and any kind of reputation system can be gamed, and code review isn’t often practical see below:

Developer creates NxtApp v1, gets code reviewed by community, green flag is given everyone starts using it, developer makes a small ‘bug fix’ and issues v1.1, which is actually a version with major code changes that steal your passcode. The chances of anyone picking this up quickly would be pretty slim, meaning many users scammed, and the Nxt image being damaged.
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSORSHIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #58 on: June 24, 2014, 02:40:38 pm »

New version was released, check the OP. I added

- Block chain based verification of origin.
- Block chain based included files integrity tests through block chain based verification of origin
- Icons

Also only hello world (The newly submitted version) will work and verifies against the block chain. Check the contents of plugin.conf for the changes so you can adapt your plugins in case you are developing some.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #59 on: June 24, 2014, 02:49:06 pm »

QR code release was delyed to include both generation and scanning with one plugin (And the qr scanning doesn't work on firefox  :-\, it just stares at the qr -_- ).
Charter is under development, more lib-like functions to be made for easy utilization of the plugin.
Frozen is VERY early, There are some very cool ideas roaming there which includes no extra software needed than a browser by the signing device.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!
Pages: 1 2 [3] 4 5  All
 

elective-stereophonic
elective-stereophonic
assembly
assembly