elective-stereophonic
elective-stereophonic
Plugin feature to NXT client (Wesley's UI) Proposal Thread
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Nxt Client: Nxt 1.11.15

Pages: 1 2 3 ... 5 [All]

Author Topic: Plugin feature to NXT client (Wesley's UI) Proposal Thread  (Read 11756 times)

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Plugin feature to NXT client (Wesley's UI) Proposal Thread
« on: June 13, 2014, 07:11:57 am »

Current Version: v0.3 (June 25th)


When new functionalities are introduced to NXT client there is a need to distribute the changes seperately by the developers of those functionalities. In many instances the changes are just a few to facilitate a certain use case and coordinate the flow of information between processes. This is a proposal on how to add a "plugin" functionalities to NXT client (Wesley's UI).

Features:
- Enabling, Disabling and Autostarting of plugins.
- Block chain based verification of the origin and appraisal from other developers.
- Seamless with the current UI.

Downloads and installation:
* for installing, You can just overwrite nxt folder with this one. It will modify some files and add some.

How to add plugins:

* for installing, You can just unzip the folder inside the "plugins" folder. Then add the folder name in JSON format in plugins.list (which is just a text file). Example for a populated plugins.list:
Quote from: plugins.list
[
      "QR",
      "helloworld",
      "SUPERCELL"
]
« Last Edit: June 25, 2014, 02:31:33 pm by supercell »
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

wesley

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +204/-3
  • Offline Offline
  • Posts: 1159
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #1 on: June 13, 2014, 08:27:59 am »

I'm wondering if it wouldn't be better if plugins were loaded in an iframe (essentially the content area would be one big iframe). (With links in sidebar of course).

This keeps the code separate and rogue plugins at least will not be able to change the javascript of the core client (which is possible in your setup, by overriding methods, etc).

To communicate between the core client and plugin iframe can be done via HTML5 messages.

Let me know your thoughts.
Logged

nCtrl

  • Sr. Member
  • ****
  • Karma: +31/-0
  • Offline Offline
  • Posts: 254
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #2 on: June 13, 2014, 08:30:46 am »

Just to be clear, whatever the implementation, by default there would be nothing right? It is up to the user to search, download, install these plugins right? There is no list of "preloaded" plugins, right?
Logged

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #3 on: June 13, 2014, 09:21:39 am »

Just to be clear, whatever the implementation, by default there would be nothing right? It is up to the user to search, download, install these plugins right? There is no list of "preloaded" plugins, right?

Well I don't know if some plugins proven worthy to be added to the client but generally no the default is nada.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #4 on: June 13, 2014, 09:33:06 am »

I'm wondering if it wouldn't be better if plugins were loaded in an iframe (essentially the content area would be one big iframe). (With links in sidebar of course).

This keeps the code separate and rogue plugins at least will not be able to change the javascript of the core client (which is possible in your setup, by overriding methods, etc).

To communicate between the core client and plugin iframe can be done via HTML5 messages.

Let me know your thoughts.

Now how is this seamless? Think big. For example with this someone can write a plugin to include an interactive graph of price fluctuation for assets that would show on each asset's page in a natural way. Another that would show a pop up if a certain chosen type of transactions reached a specific number of confirmations! For example James is working on NXTServices, Even though it is in a completely different programming language with its own daemon. Still it can be used seamlessly with this UI! Multiple accounts in one wallet O_o! the list just goes on.

You missed the main primarily goal of all this, to seperate the plugin and the client just enough so distribution-wise there is no need to distribute a whole modified different version of the client and to make evaluating and analyzing the plugin code easier for the community to ensure it is clear of malicious code.

For now the implementation of nrs.plugins.js (will post it later) is blindly just adding all javascript files but in the future a more sophisticated version can analyze the JS to ensure it does not override functions (if you ask me overriding them can be useful for a plugin sometimes).

Wait for SignBook Droid as well, It will change your mind
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

wesley

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +204/-3
  • Offline Offline
  • Posts: 1159
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #5 on: June 13, 2014, 09:58:18 am »

That would all be great, but security must go first, right?
Logged

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #6 on: June 13, 2014, 10:27:47 am »

That would all be great, but security must go first, right?

There is no way around the need of review and approval for now. I am researching inboxing javascript but still it is a very hard thing to be done.
 
I agree you don't want crossdomain JSON AJAX passing the session passphrase :D
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

chanc3r

  • Hero Member
  • *****
  • Karma: +124/-50
  • Offline Offline
  • Posts: 1019
  • NXTInspect
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #7 on: June 15, 2014, 10:30:23 pm »

With Supercell and TEAM developing significant add-ons for NXT - it would be a huge win to provide a simple standard plug-in method now otherwise both will be issuing modified versions of the client which is not good.
Logged
NXT: 29996814460165 (NXT-JTA7-B2QR-8BFC-2V222)
@imrimr @NXTinspect

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #8 on: June 16, 2014, 01:40:48 am »

With Supercell and TEAM developing significant add-ons for NXT - it would be a huge win to provide a simple standard plug-in method now otherwise both will be issuing modified versions of the client which is not good.

Cleaning up and making sample plugins, helloworld and Qrcode. Unloading plugin scripts is the last thing I am working on before submitting something pretty here. Very soon, awesome times.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

rudeboi

  • Hero Member
  • *****
  • Karma: +55/-4
  • Offline Offline
  • Posts: 633
  • Nxt Organization Member
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #9 on: June 20, 2014, 07:49:39 am »

Really love the idea of add-ons, would definitely help with ease of use, and maintain the fact that Nxt has the best gui which is one of our unique selling points.

Would be great if developers could place additions throughout the gui, as is seamless, but have to say that does sound a like a security risk, due to changing the original code as you wouldn't want someone to delete the original AE and putting their dodgy version in there.

Sand boxing sounds like a good idea, but there is nothing stopping us being limited to just separate new pages, we could have multiple sand boxes placed around the gui so that for example graphs could be added on to assets, you could have a more custom dashboard showing Nxt price in dollars for example. When plugins aren't enabled these sand boxes would show default content or nothing, or even turned off within the options.
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSORSHIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

chanc3r

  • Hero Member
  • *****
  • Karma: +124/-50
  • Offline Offline
  • Posts: 1019
  • NXTInspect
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #10 on: June 20, 2014, 07:57:07 am »

We can already check the block chain for 'signatures'
Maybe when a plugin is loaded the client checked for a hash on the block chain
This would be our equivalent of loading a signed plug in - this would check against tampering with the plug in and unknown plug ins.
This could then warn the user...

Security is an issue but tbh someone could download an installer now and it could just replace code in the default client with its own and/or overwrite it with a damaged copy.

Security starts with the user....
Logged
NXT: 29996814460165 (NXT-JTA7-B2QR-8BFC-2V222)
@imrimr @NXTinspect

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #11 on: June 20, 2014, 08:51:56 pm »

Really love the idea of add-ons, would definitely help with ease of use, and maintain the fact that Nxt has the best gui which is one of our unique selling points.

Would be great if developers could place additions throughout the gui, as is seamless, but have to say that does sound a like a security risk, due to changing the original code as you wouldn't want someone to delete the original AE and putting their dodgy version in there.

Sand boxing sounds like a good idea, but there is nothing stopping us being limited to just separate new pages, we could have multiple sand boxes placed around the gui so that for example graphs could be added on to assets, you could have a more custom dashboard showing Nxt price in dollars for example. When plugins aren't enabled these sand boxes would show default content or nothing, or even turned off within the options.

I will work on sandboxing javascript using object instances and pre-analysis of the script prior to loading. But generally I would recommend relative security by verification of code and recommending. a "web of trust" kind of thing if you may. Further more with external signing plugin that we are developing currently, You might change your mind about the security aspect at all. We already posted a QR code plugin, Basically now you need to show an unsigned tx in qr and work on a way to deliver a qr with the signed version (SignBook Droid). After that your online client would be still safe with plenty of plugins roaming around.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #12 on: June 20, 2014, 08:54:15 pm »

We can already check the block chain for 'signatures'
Maybe when a plugin is loaded the client checked for a hash on the block chain
This would be our equivalent of loading a signed plug in - this would check against tampering with the plug in and unknown plug ins.
This could then warn the user...

Security is an issue but tbh someone could download an installer now and it could just replace code in the default client with its own and/or overwrite it with a damaged copy.

Security starts with the user....

That is a wonderful idea but if you consider rapid development and versioning, wouldn't this forums suffice if the developers are posting hashsums and signed stuff? Maybe for the big plugins that would be a daily usage kind of plugins, You know stable ones, then yeah that is an excellent idea.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #13 on: June 22, 2014, 01:19:05 pm »

On the works btw, Charts and graphs, QR Scanner, will submit them soonish (12 hours to a couple of days.)
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #14 on: June 22, 2014, 06:33:41 pm »

It seems that this idea and implementation is of no interest of most, at least not the expected fuss and discussion. Let me post another screenshot to show what is in the works.




BTW, This is not a UI mockup. Most of them are already working distributable plugins!
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #15 on: June 22, 2014, 06:36:58 pm »

Block chain based verification of plugin origin and integrity is in the works.  ;).

Someone, just tell me what else to make to get your interest  :-\
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

bitcoinpaul

  • Hero Member
  • *****
  • Karma: +589/-588
  • Offline Offline
  • Posts: 3093
  • Karmageddon
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #16 on: June 22, 2014, 06:54:13 pm »

I think this topic is very interesting. But I don't have the technical background to evaluate the security behind this.
Logged
Like my Avatar? Reply now! NXT-M5JR-2L5Z-CFBP-8X7P3

joefox

  • Hero Member
  • *****
  • Karma: +62/-1
  • Offline Offline
  • Posts: 522
    • View Profile
    • The Nxt Wiki
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #17 on: June 22, 2014, 07:46:59 pm »

Someone, just tell me what else to make to get your interest  :-\

Make me able to try these plugins on the testnet.  Or Supercell, even.
Logged
GPG Key Id: 0x94A521DA613CAE76 | BitMessage BM-NBzUURL9jLagPALxCpxYDaMVe9E3965u
Nxt Wiki: http://wiki.nxtcrypto.org/
Tips: NXT-DBDW-STA8-ARBE-6JRPA

cc001

  • Hero Member
  • *****
  • Karma: +68/-4
  • Offline Offline
  • Posts: 829
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #18 on: June 22, 2014, 08:00:27 pm »

I think this is a very good idea! it could evolve in the future to some kind of plugin-store, similar to what is done for chrome. We need to find a way that malicious plugins/code can not harm anything though, which could be very difficult.
Logged
cc001 Personal - NXT-8RXS-2SSK-RNF2-HSNL8
NxtReporting.com - The Nxt Asset Exchange Portfolio Manager with Profitability Tracking - Donations are greatly appreciated on NXT-5W4G-GAR6-JHJP-H8ZTW

joefox

  • Hero Member
  • *****
  • Karma: +62/-1
  • Offline Offline
  • Posts: 522
    • View Profile
    • The Nxt Wiki
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #19 on: June 22, 2014, 08:26:26 pm »

I just tried to install the UI add-ins in the OP.  The HTML files have completely borked my wallet interface (it looks like it's broken all the CSS):




Logged
GPG Key Id: 0x94A521DA613CAE76 | BitMessage BM-NBzUURL9jLagPALxCpxYDaMVe9E3965u
Nxt Wiki: http://wiki.nxtcrypto.org/
Tips: NXT-DBDW-STA8-ARBE-6JRPA

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #20 on: June 22, 2014, 08:30:35 pm »

I just tried to install the UI add-ins in the OP.  The HTML files have completely borked my wallet interface (it looks like it's broken all the CSS):



Which version are you using. It was developed on 1.1.3 and installed perfectly on 1.1.5.

Please tell me what did you do exactly for this to happen. thank you.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #21 on: June 22, 2014, 08:32:01 pm »

Someone, just tell me what else to make to get your interest  :-\

Make me able to try these plugins on the testnet.  Or Supercell, even.

It is all on the UI side and testnet option is in NXT client configurations.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #22 on: June 22, 2014, 08:35:39 pm »

When the plugin system is installed correctly, Installing plugins will not break the UI permanently, just removing the conflicting plugin is enough to fix everything.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

joefox

  • Hero Member
  • *****
  • Karma: +62/-1
  • Offline Offline
  • Posts: 522
    • View Profile
    • The Nxt Wiki
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #23 on: June 22, 2014, 08:36:35 pm »

Which version are you using. It was developed on 1.1.3 and installed perfectly on 1.1.5.

Please tell me what did you do exactly for this to happen. thank you.

I'm on 1.1.5; I just unpacked the distro overtop of my existing Nxt software installation on my Mac (essentially overwriting files in the "html" subfolder).  I surf with Chrome.

I was able to correct the issue by re-importing the original "html" folder from the client distribution.

Logged
GPG Key Id: 0x94A521DA613CAE76 | BitMessage BM-NBzUURL9jLagPALxCpxYDaMVe9E3965u
Nxt Wiki: http://wiki.nxtcrypto.org/
Tips: NXT-DBDW-STA8-ARBE-6JRPA

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #24 on: June 22, 2014, 08:38:16 pm »

Which version are you using. It was developed on 1.1.3 and installed perfectly on 1.1.5.

Please tell me what did you do exactly for this to happen. thank you.

I'm on 1.1.5; I just unpacked the distro overtop of my existing Nxt software installation on my Mac (essentially overwriting files in the "html" subfolder).  I surf with Chrome.

I was able to correct the issue by re-importing the original "html" folder from the client distribution.

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

farl4bit

  • Global Moderator
  • Hero Member
  • *****
  • Karma: +210/-45
  • Offline Offline
  • Posts: 3459
    • View Profile
    • Blockchain Twitter
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #25 on: June 22, 2014, 08:40:24 pm »

Looks like a cool feature, but I don't know about the security issues. keep on developing! :)
Logged

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #26 on: June 22, 2014, 08:41:57 pm »

Which version are you using. It was developed on 1.1.3 and installed perfectly on 1.1.5.

Please tell me what did you do exactly for this to happen. thank you.

I'm on 1.1.5; I just unpacked the distro overtop of my existing Nxt software installation on my Mac (essentially overwriting files in the "html" subfolder).  I surf with Chrome.

I was able to correct the issue by re-importing the original "html" folder from the client distribution.

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?

Would you be interested in helping me figure out why it did not installed correctly on Mac? I just need the log from firebug on firefox :), if you have time. thanks.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #27 on: June 22, 2014, 08:43:12 pm »

Looks like a cool feature, but I don't know about the security issues. keep on developing! :)

At least after block chain verification you can without a doubt verify the origin and integrity. Then we go back to javascript encapsulation but generally peer review is a must.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

VanBreuk

  • Administrator
  • Hero Member
  • *****
  • Karma: +362/-19
  • Offline Offline
  • Posts: 2772
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #28 on: June 22, 2014, 08:51:04 pm »

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?

Actually both html/ui folders look exactly the same, at least in Windows.

joefox - that looks like a path problem, the html is not finding the css. Make sure you uncompress the file following the nxt folder path.



Logged
GPG Fingerprint: B020 D1C1 F289 3B2C 3577  9EAD 455D D175 5913 C7F1

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #29 on: June 22, 2014, 08:53:30 pm »

Description of the verification process for the interested. Each plugin comes with a configuration file that goes like this:

Code: [Select]
{
"name": "Hello world",
"description": "Plugin Example #1",
"developer": "Supercell Inv.",
"version": "1",
"autostart":"false",
"resources":{
"js":[
"hello.js"
],
"html":[
"hello.html"
],
"css":[
]
}
}


The verification additions goes as follows: Every file mentioned in plugin.conf is paired with its SHA256 hashsum and then the publisher sends a message with plugin.conf's sha256 hashsum to a specific address (will announce it later but any would do). So the original creator is without doubt the address that first mentioned such hash. Subsequent (younger) repetitions of the hash can be considered as peers that reviewed the plugin source and are "vouching" for it. The client can automatically list them to the user. Lets just say if Weslyeh and James say this plugin code is legit and not harmful, You have nothing to worry about installing it.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #30 on: June 22, 2014, 08:56:53 pm »

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?

Actually both html/ui folders look exactly the same, at least in Windows.

joefox - that looks like a path problem, the html is not finding the css. Make sure you uncompress the file following the nxt folder path.

Maybe a batching approach is more universal here. I will work something out, maybe some sh script or something. The differences in index.html are not much btw.
« Last Edit: June 22, 2014, 09:09:41 pm by VanBreuk »
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

VanBreuk

  • Administrator
  • Hero Member
  • *****
  • Karma: +362/-19
  • Offline Offline
  • Posts: 2772
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #31 on: June 22, 2014, 09:11:56 pm »

Maybe a batching approach is more universal here. I will work something out, maybe some sh script or something. The differences in index.html are not much btw.

The pointers you give in the first post are correct, if you uncompress your your .zip in the same folder you uncompress the Nxt Client (that would be in the parent folder of /nxt/) it should overwrite the files correctly.
Logged
GPG Fingerprint: B020 D1C1 F289 3B2C 3577  9EAD 455D D175 5913 C7F1

ThomasVeil

  • Hero Member
  • *****
  • Karma: +183/-11
  • Offline Offline
  • Posts: 1400
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #32 on: June 22, 2014, 09:42:35 pm »

The idea is awesome - I think it could be really powerful. But the security issue crossed my mind first too... The ways those could screw the user (intentionally and unintentionally) are pretty huge. The verification is a good idea. But that everyone would review the code every time is unlikely.
Logged
ARDOR-BPV3-837M-QZTQ-9DQ69  oxpal.com

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #33 on: June 22, 2014, 09:55:16 pm »

The idea is awesome - I think it could be really powerful. But the security issue crossed my mind first too... The ways those could screw the user (intentionally and unintentionally) are pretty huge. The verification is a good idea. But that everyone would review the code every time is unlikely.

You forgot that you are already doing that. You are already entrusting Jean Luc at first, then entrusting Wesleyh and other developers to actually read what he did different in the code in the newer releases. Then entrusting the math behind SHA256Hashsum to verify the integrity of the data. Then you use the client.

This is basically the same. The idea started with the fact that it is easier to read a few files that you are to "add" to the client rather than using a different distributed client and comparing the whole thing to ensure there were no "hidden" changes.

With what I am writing at the moment (Block chain based verification), This can be automated and a developer opinion would be posted about a "specific" version and permanently stored in the block chain (Can be remade if pruned in the future). You can make a web of trust and you can verify the origin and integrity of any plugin listed.

Furthermore, we are working on javascript encapsulation for the unloading process and analytic code to detect core functions overriding and sensitive variables accessing. You will be very interested in the "Frozen" plugin (Take a look at the last screenshot), It will take the "security" aspect to a different level since you will not give your passphrase to the client to make any transactions.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

joefox

  • Hero Member
  • *****
  • Karma: +62/-1
  • Offline Offline
  • Posts: 522
    • View Profile
    • The Nxt Wiki
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #34 on: June 22, 2014, 09:59:32 pm »

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?

The Official Release :)
Logged
GPG Key Id: 0x94A521DA613CAE76 | BitMessage BM-NBzUURL9jLagPALxCpxYDaMVe9E3965u
Nxt Wiki: http://wiki.nxtcrypto.org/
Tips: NXT-DBDW-STA8-ARBE-6JRPA

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #35 on: June 22, 2014, 10:03:53 pm »

Are you using "Official Release for Command Line Users" or  "User Friendly Wallet For Windows / Mac"?

The Official Release :)

Ok. In the image you posted it shows that it did not even find the logo image in the top section. If you can produce this problem then copy the image link. Then fix it and copy the image link (the logo on the top left section of the UI), then post them both here. I think it will show exactly what went wrong and why it is not working for you.

Thank you for helping. If Wesleyh were around I am sure he would exactly know why this happened.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

prometheus

  • Sr. Member
  • ****
  • Karma: +23/-3
  • Offline Offline
  • Posts: 431
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #36 on: June 22, 2014, 11:21:16 pm »

Coming from a non-technical standpoint, this looks great. I'll repeat what everyone else has said though - my concern is security. I haven't been following the thread where the guy lost 64k NXT, but I remember a suspect in the theft was an android app (not sure if this has been confirmed).

The screenshots of the UI in supercell's post look awesome. Very aesthetic; us non-tech folks like pictures.
Logged

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #37 on: June 22, 2014, 11:58:18 pm »

Developer verification via block chain is done (Check account 39144599804112126 - NXT-7V9Y-TTH5-XKF2-2KS43). Package integrity via recalculation of SHA256Hashsums is also implemented. Now partial tampering is not possible as well.

I think I am going to sleep for now, good night awesome people.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

ThomasVeil

  • Hero Member
  • *****
  • Karma: +183/-11
  • Offline Offline
  • Posts: 1400
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #38 on: June 23, 2014, 12:01:07 am »

The idea is awesome - I think it could be really powerful. But the security issue crossed my mind first too... The ways those could screw the user (intentionally and unintentionally) are pretty huge. The verification is a good idea. But that everyone would review the code every time is unlikely.

You forgot that you are already doing that. You are already entrusting Jean Luc at first, then entrusting Wesleyh and other developers to actually read what he did different in the code in the newer releases. Then entrusting the math behind SHA256Hashsum to verify the integrity of the data. Then you use the client.

I didn't forget :D But I think there is some difference - for one, if I want to use Nxt, then I have no choice but to trust one client. About plugins I do.
Either way - just pointing out my first thought, that likely everyone will have. I see you're already thinking ahead here with the security features you're adding

Quote
You will be very interested in the "Frozen" plugin (Take a look at the last screenshot), It will take the "security" aspect to a different level since you will not give your passphrase to the client to make any transactions.

Can't imagine how that works. Interesting indeed. :)

Good night!
Logged
ARDOR-BPV3-837M-QZTQ-9DQ69  oxpal.com

devphp

  • Hero Member
  • *****
  • Karma: +87/-14
  • Offline Offline
  • Posts: 1229
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #39 on: June 23, 2014, 04:43:46 am »

Coming from a non-technical standpoint, this looks great. I'll repeat what everyone else has said though - my concern is security. I haven't been following the thread where the guy lost 64k NXT, but I remember a suspect in the theft was an android app (not sure if this has been confirmed).

Nah, that user had a password of the kind:

jtujtujtujtujtujtujtujtujtujtu

that is, a string of 3 chars repeated 10 times, which makes it no harder to crack than just 'jtu'.

It was a dictionary and rules-based bruteforce attack, nothing else.
Logged

joefox

  • Hero Member
  • *****
  • Karma: +62/-1
  • Offline Offline
  • Posts: 522
    • View Profile
    • The Nxt Wiki
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #40 on: June 23, 2014, 05:04:19 am »

I got the plugin code working after unzipping the files again more carefully.

Looks good, as a proof of concept!
Logged
GPG Key Id: 0x94A521DA613CAE76 | BitMessage BM-NBzUURL9jLagPALxCpxYDaMVe9E3965u
Nxt Wiki: http://wiki.nxtcrypto.org/
Tips: NXT-DBDW-STA8-ARBE-6JRPA

wesley

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +204/-3
  • Offline Offline
  • Posts: 1159
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #41 on: June 23, 2014, 06:07:37 am »

Even if you do javascript encapsulation, a plugin could stil listen to whatever the user types so it's never safe without some sort of developer review. (unfortunately).

The only safe way is if a plugin is totally encapsulated in a sandboxed iframe.
Logged

shin

  • Sr. Member
  • ****
  • Karma: +47/-4
  • Offline Offline
  • Posts: 456
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #42 on: June 23, 2014, 07:03:55 am »


Even if you do javascript encapsulation, a plugin could stil listen to whatever the user types so it's never safe without some sort of developer review. (unfortunately).
The only safe way is if a plugin is totally encapsulated in a sandboxed iframe.
This is great news. It would be really cool if NRS supports plugins.

I have been working with Wordpress for quite sometimes now and I was just wondering, wouldn't it be great if the NRS could adapt the plugin system of WordPress? With hooks and triggers and whatnot? Completely separating the core NRS client code with the plugins code? Major code overhaul is needed on the Wesley's client for this support though. What do you think?
Logged
Wallet: NXT-ELEB-XT6G-L475-HXRFX • 18354136531262130569 • Twitter: Shin NXT

rudeboi

  • Hero Member
  • *****
  • Karma: +55/-4
  • Offline Offline
  • Posts: 633
  • Nxt Organization Member
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #43 on: June 23, 2014, 07:43:39 am »

Congrats supercell on getting something working.

While I think this full access approach will work for a small number of trusted add ons.

Don't we want encourage many apps to be created, and most of us aren't programmers so we wouldn't be able to check the code, meaning I wouldn't run 99% of apps through fear of them being untrustworthy.

One large sandbox would be enough for most apps, and surely a compromise of where other smaller iframes could sit throughout the main client pages could be reached (also enabled/disabled in options).

All the above is from a non technical perspective, so please ignore if incorrect. And I'm not being negative on the project I think it's amazing and must have feature, however due the security issue I don't think it is scalable in its current format.
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSORSHIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

xchrix

  • Guest
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #44 on: June 23, 2014, 07:55:59 am »

nice idea. who is making the charts and graphs plugin?
i am interested in providing a price charts plugin powered by www.cryptocoincharts.info
Logged

DoM P

  • Hero Member
  • *****
  • Karma: +114/-147
  • Offline Offline
  • Posts: 1115
    • View Profile
    • Crypto Finance Analysis Consulting
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #45 on: June 23, 2014, 08:42:51 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...
Logged
Have you heard of CryptoCoins? You should!
Crypto Finance Analysis Consulting: cfa-consulting.ch
Nxt : NXT-LP8G-9NHV-VUQB-58ZZF

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #46 on: June 23, 2014, 08:51:48 am »

nice idea. who is making the charts and graphs plugin?
i am interested in providing a price charts plugin powered by www.cryptocoincharts.info

I am making a small one that is using chartJS.

There's something I'd like to see in the client:
- a detailed view of the assets I own.
- History of my buy and sell orders,
- what's the average price I acquired them at,
- their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

Easy peasy, maybe after the plugins I am currently working on.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

cc001

  • Hero Member
  • *****
  • Karma: +68/-4
  • Offline Offline
  • Posts: 829
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #47 on: June 23, 2014, 09:08:49 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

To summarize this: You need NxtReporting.com in the client, right?  ;D
Logged
cc001 Personal - NXT-8RXS-2SSK-RNF2-HSNL8
NxtReporting.com - The Nxt Asset Exchange Portfolio Manager with Profitability Tracking - Donations are greatly appreciated on NXT-5W4G-GAR6-JHJP-H8ZTW

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #48 on: June 23, 2014, 09:16:00 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

To summarize this: You need NxtReporting.com in the client, right?  ;D

lol yeah I guess so, But again if these are to be in the client you can make a trading BOT as well ;)
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

DoM P

  • Hero Member
  • *****
  • Karma: +114/-147
  • Offline Offline
  • Posts: 1115
    • View Profile
    • Crypto Finance Analysis Consulting
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #49 on: June 23, 2014, 09:21:51 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

To summarize this: You need NxtReporting.com in the client, right?  ;D
I just tried that site.
It definitely goes in the right direction... ;)
Logged
Have you heard of CryptoCoins? You should!
Crypto Finance Analysis Consulting: cfa-consulting.ch
Nxt : NXT-LP8G-9NHV-VUQB-58ZZF

cc001

  • Hero Member
  • *****
  • Karma: +68/-4
  • Offline Offline
  • Posts: 829
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #50 on: June 23, 2014, 09:27:32 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

To summarize this: You need NxtReporting.com in the client, right?  ;D
I just tried that site.
It definitely goes in the right direction... ;)

There are still people which didn't know NxtReporting until now??  :o My marketing skills suxx... ;)
Logged
cc001 Personal - NXT-8RXS-2SSK-RNF2-HSNL8
NxtReporting.com - The Nxt Asset Exchange Portfolio Manager with Profitability Tracking - Donations are greatly appreciated on NXT-5W4G-GAR6-JHJP-H8ZTW

DoM P

  • Hero Member
  • *****
  • Karma: +114/-147
  • Offline Offline
  • Posts: 1115
    • View Profile
    • Crypto Finance Analysis Consulting
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #51 on: June 23, 2014, 09:30:06 am »

There's something I'd like to see in the client: a detailed view of the assets I own. History of my buy and sell orders, what's the average price I acquired them at, their total worth at current market price (right now, I have a total for each asset and I have to add them up.)...

Just an idea for dev, which I am not...

To summarize this: You need NxtReporting.com in the client, right?  ;D
I just tried that site.
It definitely goes in the right direction... ;)

There are still people which didn't know NxtReporting until now??  :o My marketing skills suxx... ;)
Too many things to do. The forum is immense, I work 100 hours a week... There's a limit at what one can do... ;)
Logged
Have you heard of CryptoCoins? You should!
Crypto Finance Analysis Consulting: cfa-consulting.ch
Nxt : NXT-LP8G-9NHV-VUQB-58ZZF

chanc3r

  • Hero Member
  • *****
  • Karma: +124/-50
  • Offline Offline
  • Posts: 1019
  • NXTInspect
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #52 on: June 23, 2014, 10:05:27 am »

Even if you do javascript encapsulation, a plugin could stil listen to whatever the user types so it's never safe without some sort of developer review. (unfortunately).

The only safe way is if a plugin is totally encapsulated in a sandboxed iframe.

Put the passphrase handling into the sandbox/plugin perhaps and then everything else is untrusted and harden that - so everything incl the default app communicates with that?
I also really like Ola's WoT proposal to confirm that plug-ins are safe....
In fact WoT has been mentioned before and could help with a number of things.. Its stake in NXT but in a different form.... community stake...

No crypto has solved this yet but if we can it will completely open up the way in which the platform that is NXT can be exploited..

Lets keep hammering away at this one...
Logged
NXT: 29996814460165 (NXT-JTA7-B2QR-8BFC-2V222)
@imrimr @NXTinspect

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #53 on: June 23, 2014, 10:48:42 am »

Guys what do you think, Should I also implement a thumbs down as well? It could lead to spam  :-\. Currently there is only thumbs up (I am talking about the block chain based verification)
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

chanc3r

  • Hero Member
  • *****
  • Karma: +124/-50
  • Offline Offline
  • Posts: 1019
  • NXTInspect
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #54 on: June 23, 2014, 10:53:54 am »

Guys what do you think, Should I also implement a thumbs down as well? It could lead to spam  :-\. Currently there is only thumbs up (I am talking about the block chain based verification)

I am against a thumbs down because this could lead to an attack vector - i.e. activity that can harm the rating of legitimate plugin, by a competitor or someone who but I also understand that people can spam positively to increase the rating of something artificially.

That is why I think that 'who' signs the positive rating also carries some weight in the trust calculation... how we weight the 'trust' value that a single NXT account can provide is a tough one...

Ideas????
Logged
NXT: 29996814460165 (NXT-JTA7-B2QR-8BFC-2V222)
@imrimr @NXTinspect

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #55 on: June 23, 2014, 11:02:24 am »

Guys what do you think, Should I also implement a thumbs down as well? It could lead to spam  :-\. Currently there is only thumbs up (I am talking about the block chain based verification)

I am against a thumbs down because this could lead to an attack vector - i.e. activity that can harm the rating of legitimate plugin, by a competitor or someone who but I also understand that people can spam positively to increase the rating of something artificially.

That is why I think that 'who' signs the positive rating also carries some weight in the trust calculation... how we weight the 'trust' value that a single NXT account can provide is a tough one...

Ideas????

I think we shouldn't go to that extend and leave estimating the risk to the user. But to help for example reviewers can agree to a system to ease the analysis. For example each reviewer would register an alias and point the URL to his/her forum profile page where he publishes the same account number. I will post a screenshot soon to show how is that to be used in the UI.

Yes I agree a thumbdown feature might also give the illusion of trustworthy-ness via spamming thumbs up.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #56 on: June 23, 2014, 11:13:32 am »

So basically what I did goes like this




If there were other accounts that approves of this they will be listed in a popup when the thumbs up icon is clicked and each one is either a link to the account information or the URL of the alias.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

rudeboi

  • Hero Member
  • *****
  • Karma: +55/-4
  • Offline Offline
  • Posts: 633
  • Nxt Organization Member
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #57 on: June 23, 2014, 02:57:51 pm »

Would it possible to create a 2 tier system of addons:

Limited (lite): Only able to create an entry on the side menu, and operates in a single sandbox iframe with no (or limited) connection to the rest of the client.

Unrestricted (full): Full access, with any security controls that can be put in place. This is essentially what supercell has been working to at the moment.

At least then the user is able to decide what level of access is granted, and when for example the full access tick box is clicked, a pop up window could appear “Potential Security Risk: Are you sure you want to continue? Please ensure you trust the developer as the add-on will have full access to your client.”

The reason I’m very afraid of giving full access is that as soon as this platform is available there will be many evil addons launched that will try to grab your passcode, and any kind of reputation system can be gamed, and code review isn’t often practical see below:

Developer creates NxtApp v1, gets code reviewed by community, green flag is given everyone starts using it, developer makes a small ‘bug fix’ and issues v1.1, which is actually a version with major code changes that steal your passcode. The chances of anyone picking this up quickly would be pretty slim, meaning many users scammed, and the Nxt image being damaged.
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSORSHIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #58 on: June 24, 2014, 02:40:38 pm »

New version was released, check the OP. I added

- Block chain based verification of origin.
- Block chain based included files integrity tests through block chain based verification of origin
- Icons

Also only hello world (The newly submitted version) will work and verifies against the block chain. Check the contents of plugin.conf for the changes so you can adapt your plugins in case you are developing some.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #59 on: June 24, 2014, 02:49:06 pm »

QR code release was delyed to include both generation and scanning with one plugin (And the qr scanning doesn't work on firefox  :-\, it just stares at the qr -_- ).
Charter is under development, more lib-like functions to be made for easy utilization of the plugin.
Frozen is VERY early, There are some very cool ideas roaming there which includes no extra software needed than a browser by the signing device.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #60 on: June 25, 2014, 12:00:48 am »

QR code plugin is finished and I built another plugin to utilize it called (QR Login),

YES with it the main window have a QR window and if you scan a qr it will be used as your login passphrase. You don't press enter it will do that for you  ;)

 ;D, now flood me with comments please.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

Tosch110

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +211/-18
  • Offline Offline
  • Posts: 2365
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #61 on: June 25, 2014, 12:37:48 am »

QR code plugin is finished and I built another plugin to utilize it called (QR Login),

YES with it the main window have a QR window and if you scan a qr it will be used as your login passphrase. You don't press enter it will do that for you  ;)

 ;D, now flood me with comments please.

Hm, good idea. But I am a little sceptical. Usually QR codes are used to share something. Its the open version of a passphrase, therefore any screenshot where this can be seen already reveals your account?

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #62 on: June 25, 2014, 01:37:58 am »

QR code plugin is finished and I built another plugin to utilize it called (QR Login),

YES with it the main window have a QR window and if you scan a qr it will be used as your login passphrase. You don't press enter it will do that for you  ;)

 ;D, now flood me with comments please.

Hm, good idea. But I am a little sceptical. Usually QR codes are used to share something. Its the open version of a passphrase, therefore any screenshot where this can be seen already reveals your account?

The use case is when your passphrase is not the memorize-able kind and you do not want to keep it on a file on the computer. So you have in your wallet a qr code printed or a qr on your mobile phone/secured android device. No copy paste and no files moving in USB drives. Scan, bleep, logged in.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

Tosch110

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +211/-18
  • Offline Offline
  • Posts: 2365
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #63 on: June 25, 2014, 01:52:08 am »

Ok, that sounds really helpful.

I do not want to make up more "confused user" cases. Great stuff!

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #64 on: June 26, 2014, 06:33:32 pm »

Hey guys have you been checking Quer and QRLogin plugins? They are working fantastically. I wanted your opinion either to pick Chart.js or D3 for the Charter plugin.... Chart.js is pretty simple but works great and D3 is full of awesomeness but a bloated  :-\


what do you guys think?
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

xchrix

  • Guest
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #65 on: June 27, 2014, 09:21:19 pm »

i am using D3JS for cryptocoincharts.info/v2 and i really like it because its so powerful and you could really do anything with it! but on the other side sometimes its a real pain in the ass because its so complex and eaven small task could lead to some hours of coding and searching and saying "WTF?!?!?!?" :)
its a hard decision but if you have time and want to learn something for the future then choose D3


Hey guys have you been checking Quer and QRLogin plugins? They are working fantastically. I wanted your opinion either to pick Chart.js or D3 for the Charter plugin.... Chart.js is pretty simple but works great and D3 is full of awesomeness but a bloated  :-\


what do you guys think?
Logged

Berzerk

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +118/-40
  • Offline Offline
  • Posts: 1530
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #66 on: June 27, 2014, 10:20:05 pm »

New version was released, check the OP. I added

- Block chain based verification of origin.
- Block chain based included files integrity tests through block chain based verification of origin
- Icons

Also only hello world (The newly submitted version) will work and verifies against the block chain. Check the contents of plugin.conf for the changes so you can adapt your plugins in case you are developing some.


I can't get past the login.
Logged

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #67 on: June 27, 2014, 11:14:57 pm »

New version was released, check the OP. I added

- Block chain based verification of origin.
- Block chain based included files integrity tests through block chain based verification of origin
- Icons

Also only hello world (The newly submitted version) will work and verifies against the block chain. Check the contents of plugin.conf for the changes so you can adapt your plugins in case you are developing some.


I can't get past the login.

Please tell me the steps you did to install it and what exactly happened. I will not install it from scratch to ensure it works.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

Berzerk

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +118/-40
  • Offline Offline
  • Posts: 1530
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #68 on: June 27, 2014, 11:19:48 pm »

New version was released, check the OP. I added

- Block chain based verification of origin.
- Block chain based included files integrity tests through block chain based verification of origin
- Icons

Also only hello world (The newly submitted version) will work and verifies against the block chain. Check the contents of plugin.conf for the changes so you can adapt your plugins in case you are developing some.


I can't get past the login.

Please tell me the steps you did to install it and what exactly happened. I will not install it from scratch to ensure it works.

I installed it in a new folder named ui/plugins. Because I'm running different versions of the client at the same time. The others all work. :)

There is no form to insert my passphrase.
Logged

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #69 on: June 27, 2014, 11:31:11 pm »

New version was released, check the OP. I added

- Block chain based verification of origin.
- Block chain based included files integrity tests through block chain based verification of origin
- Icons

Also only hello world (The newly submitted version) will work and verifies against the block chain. Check the contents of plugin.conf for the changes so you can adapt your plugins in case you are developing some.


I can't get past the login.

Please tell me the steps you did to install it and what exactly happened. I will not install it from scratch to ensure it works.

I installed it in a new folder named ui/plugins. Because I'm running different versions of the client at the same time. The others all work. :)

There is no form to insert my passphrase.

ui/plugins?

Ok I just did it again from scratch to test if it is working and it works fine.

- Unzip the latest NXT client.
- Unzip 0.3 in the same location. It will ask to replace NRS.settings.js and index.html
- Start the client
At this point the plugin additions are working fin

Now for helloworld:
- Unzip helloworld2.zip in /nxt/html/ui/plugins
- Add "helloworld" in plugins.list so the file would look like this:
Quote
[
   "helloworld"
]
- You can enable the plugin from the plugins window now.




Please tell me where it went wrong with you and what happened? thank you.
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

Tosch110

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +211/-18
  • Offline Offline
  • Posts: 2365
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #70 on: July 05, 2014, 01:51:26 pm »

QR code plugin is finished and I built another plugin to utilize it called (QR Login),

YES with it the main window have a QR window and if you scan a qr it will be used as your login passphrase. You don't press enter it will do that for you  ;)

 ;D, now flood me with comments please.

Hm, good idea. But I am a little sceptical. Usually QR codes are used to share something. Its the open version of a passphrase, therefore any screenshot where this can be seen already reveals your account?

The use case is when your passphrase is not the memorize-able kind and you do not want to keep it on a file on the computer. So you have in your wallet a qr code printed or a qr on your mobile phone/secured android device. No copy paste and no files moving in USB drives. Scan, bleep, logged in.

Thought some more about this feature and am looking really forward on seeing it working!

So many possibilities :D

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #71 on: July 06, 2014, 02:58:44 am »

QR code plugin is finished and I built another plugin to utilize it called (QR Login),

YES with it the main window have a QR window and if you scan a qr it will be used as your login passphrase. You don't press enter it will do that for you  ;)

 ;D, now flood me with comments please.

Hm, good idea. But I am a little sceptical. Usually QR codes are used to share something. Its the open version of a passphrase, therefore any screenshot where this can be seen already reveals your account?

The use case is when your passphrase is not the memorize-able kind and you do not want to keep it on a file on the computer. So you have in your wallet a qr code printed or a qr on your mobile phone/secured android device. No copy paste and no files moving in USB drives. Scan, bleep, logged in.

Thought some more about this feature and am looking really forward on seeing it working!

So many possibilities :D

I have not been posting here for a while now because I started to think no one wants these features :(. This is already complete and working! and you can try them now.

Check this thread which is dedicated to this plugin:

https://nxtforum.org/news-and-announcements/%28plugin%29-qrlogin-qr-scan-login-for-nxt-client-%28wesleyh-ui%29/msg53807/#msg53807
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

Sebastien256

  • Hero Member
  • *****
  • Karma: +169/-24
  • Offline Offline
  • Posts: 2823
  • ^LOOK UP^ = Nxt community!
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #72 on: July 06, 2014, 03:09:18 am »

IMO, option to add plugin should be directly integrate into the Nxt client. Indeed, I think that Nxt plugin should be similar to the functionnality of Chrome extensions. So "Plugin system" should be in the Nxt client and a user should then need to externally install one by one the plugin that he wishes in the Nxt client plugin section.

Is that in the pipeline for the wesley client?
Logged
Please drop your ideas concerning Nxt and/or NRS in this topic -> List of feature request for Nxt and/or NRS (with the full list in OP).

supercell

  • Full Member
  • ***
  • Karma: +12/-4
  • Offline Offline
  • Posts: 103
  • Never Fork
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #73 on: July 06, 2014, 03:22:07 am »

IMO, option to add plugin should be directly integrate into the Nxt client. Indeed, I think that Nxt plugin should be similar to the functionnality of Chrome extensions. So "Plugin system" should be in the Nxt client and a user should then need to externally install one by one the plugin that he wishes in the Nxt client plugin section.

Is that in the pipeline for the wesley client?

Wesleyh is very interested in some of the plugins like the QR code one which I released already with example implementations. I am working on something I call "NXT client UI enhanced security proposal" which relies on taking the "signing" of transactions out of the main UI.

When the prototype is ready. I will release it here... mean while RBTrade is taking my time these days.
"
Logged
Supercell investments is an investment opportunity for Joe, Jean and by the Satoshi. Welcome to the future, we want to help you build it!

apenzl

  • Hero Member
  • *****
  • Karma: +246/-10
  • Offline Offline
  • Posts: 2493
    • View Profile
    • Nxter.org
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #74 on: July 07, 2014, 10:53:10 am »

I have not been posting here for a while now because I started to think no one wants these features :(.

Interested interested interested. Just not posting.

This is already complete and working! and you can try them now.

I haven't had the time to test yet. I will.   

Also, remember you are in sharp competition - with the summertime. Keep your head up, this is gonna be great!  :)

kodtycoon

  • Hero Member
  • *****
  • Karma: +43/-18
  • Offline Offline
  • Posts: 916
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #75 on: July 07, 2014, 11:23:30 am »

I have not been posting here for a while now because I started to think no one wants these features :(.

Interested interested interested. Just not posting.

This is already complete and working! and you can try them now.

I haven't had the time to test yet. I will.   

Also, remember you are in sharp competition - with the summertime. Keep your head up, this is gonna be great!  :)

also very interested in this! could bring some really nice apps/features into the client at the touch of a button.
Logged

Fatih87SK

  • Hero Member
  • *****
  • Karma: +127/-36
  • Offline Offline
  • Posts: 2206
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #76 on: July 07, 2014, 11:26:57 am »

I think NEM will have plugins as well. So we need to keep ahead of the game.

Plugins make the client fun to use.
Logged

apenzl

  • Hero Member
  • *****
  • Karma: +246/-10
  • Offline Offline
  • Posts: 2493
    • View Profile
    • Nxter.org
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #77 on: July 07, 2014, 12:09:18 pm »

And will fuel the N(e)xt internet. Die www. Die FB.  :-X

rudeboi

  • Hero Member
  • *****
  • Karma: +55/-4
  • Offline Offline
  • Posts: 633
  • Nxt Organization Member
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #78 on: July 09, 2014, 09:18:04 pm »

Just posting to say still very interested, having plugins in the client a no brainer really.

Just tried it and it works very well, however think we need an easier way of installing plugins regurlar users wouldn't want to edit text files.
.
But obviously the only way this would take off if it comes included in the official client, so I suppose it is just about working with Wesleyh about integration.
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSORSHIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

Sebastien256

  • Hero Member
  • *****
  • Karma: +169/-24
  • Offline Offline
  • Posts: 2823
  • ^LOOK UP^ = Nxt community!
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #79 on: July 09, 2014, 09:44:10 pm »

Just posting to say still very interested, having plugins in the client a no brainer really.

Just tried it and it works very well, however think we need an easier way of installing plugins regurlar users wouldn't want to edit text files.
.
But obviously the only way this would take off if it comes included in the official client, so I suppose it is just about working with Wesleyh about integration.

+1, we need the plugin system directly within the Wesleyh client.
Logged
Please drop your ideas concerning Nxt and/or NRS in this topic -> List of feature request for Nxt and/or NRS (with the full list in OP).

rudeboi

  • Hero Member
  • *****
  • Karma: +55/-4
  • Offline Offline
  • Posts: 633
  • Nxt Organization Member
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #80 on: July 20, 2014, 06:23:40 pm »


Now that more plugins are coming out we need to add some kind of standard to introduce them into the client, so thought I would try to bump this project again, to try and find a middle ground between security and features.

I like supercells GUI and concept implementation which allows the user to enable/disable available plugins and is the only working proposal at the moment.

Apps in my mind should start off as being completely sandboxed, then as a community we decide what rights all apps as a whole should be granted, weighing up what each right in terms of benefit vs the security concern.

Starting point - 1 page sandboxed, no access to ANY client or account information, cannot make any transaction, external links not allowed, only accessed through side App sub menu.

Example right request additions, (personal opinion only)

- Feature "Read Account ID": Apps are allowed to read the account ID.
Benefit: So the app can show relative information about the user
Security Concern: None, this information is available on blockchain
Verdict: Allowed

- Feature "Read Private Key": Apps are allowed to read the private key/secret pass
Benefit: Possible password manager
Security  Concern: Attacker could then learn your pass and access your account
Verdict: Disallowed

- Feature "Send NXT" Apps are allowed to send NXT
Benefit: Automate payments
Security Concern: Attacker could send NXT to themselves
Verdict: Disallowed

- Feature "Send AM": Apps are allowed to send a AM
Benefit: Apps like the MGWs withdraw/deposit process would work
Security Concern: Attackers couldn't financially benefit from sent AM, but could be used to drain account slowly (1 min tx fee at a time)
Verdict: Allowed with restrictions eg: warning pop up with user confirmation needed to send AM everytime request is made.

Feature - "Other pages": Apps allowed to display other information throughout the client outside the 1 app page
Benefit: Better app integration with client from a user perspective
Security Concern: User won't know what is original and altered, used to change other parts of the client to malicious versions
Verdict: Disallowed but allow apps to have a widget(s), it is then up the user to select if they want to display an app widget elsewhere giving the user control so they know what is core and what isn't. An example would be widget/tiles displayed on the dashboard.

This doesn't stop the creativity of programmers, as if planned features were so good but couldn't be run in the agreed app sandbox environment, then as the current process it could be considered to be added to the default GUI.

What are everybody's thoughts? As I'm all for apps but we can't just have everyone replacing the UI folder in the fashion that they are now, as it is a bit of a security nightmare, and not exactly user friendly.

@Supercell: Would this work for you, especially the widgets part (seamless enough for the user?)
@Wesleyh: Could an app process be implemented into your GUI, what help would you need to accomplish this?
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSORSHIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

Sebastien256

  • Hero Member
  • *****
  • Karma: +169/-24
  • Offline Offline
  • Posts: 2823
  • ^LOOK UP^ = Nxt community!
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #81 on: August 05, 2014, 08:43:19 pm »

any development on this?
Logged
Please drop your ideas concerning Nxt and/or NRS in this topic -> List of feature request for Nxt and/or NRS (with the full list in OP).

_mr_e

  • Hero Member
  • *****
  • Karma: +88/-18
  • Offline Offline
  • Posts: 956
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #82 on: September 01, 2014, 04:21:29 pm »

Wow we desperately need this. I would love to have something like nxtreporting right inside the client... or another sort of "portfolio management" app. MGW could be released as a plugin like this, with it's own update cycle. Along with everything else James is doing. All we would need is some sort of api that allows plugins to send/receive nxt. When a plugin needs to send nxt it send a request to the core which pops up a security display saying, "x plugin is requesting to send y nxt to address [address]"  Confirm: Yes/No. A solid plugin system could really bring nxt to the nxt level!
Logged

rudeboi

  • Hero Member
  • *****
  • Karma: +55/-4
  • Offline Offline
  • Posts: 633
  • Nxt Organization Member
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #83 on: September 01, 2014, 09:40:27 pm »

Definitely need this.

Think the warning message asking for confirmation every time the app wants to do any thing that could effect the balance is the best approach very similar to the iOS app implementation.
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSORSHIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

Sebastien256

  • Hero Member
  • *****
  • Karma: +169/-24
  • Offline Offline
  • Posts: 2823
  • ^LOOK UP^ = Nxt community!
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #84 on: September 28, 2014, 08:54:17 am »

is this comming? With MGW going down for an unknown period of time It would be nice to have the plugin ready so that the supercell bitcoin gateway is activated.
Logged
Please drop your ideas concerning Nxt and/or NRS in this topic -> List of feature request for Nxt and/or NRS (with the full list in OP).

jones

  • Hero Member
  • *****
  • Karma: +310/-8
  • Offline Offline
  • Posts: 1043
  • write code not war
    • View Profile
    • jNxt
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #85 on: September 28, 2014, 01:35:57 pm »

https://nxtforum.org/general-discussion/the-official-jones-thought-thread/msg103498/#msg103498

I'm developing another wallet with modularity from the ground up. It will take a while to create though.
Logged
-- Jones NXT-RJU8-JSNR-H9J4-2KWKY

kwilliams

  • Full Member
  • ***
  • Karma: +28/-3
  • Offline Offline
  • Posts: 226
  • NXT-FG7F-2W46-M7DE-EHPV5
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #86 on: February 08, 2015, 08:53:04 pm »

Is this plugin system open source? Where can I find the code?
Logged

Berzerk

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +118/-40
  • Offline Offline
  • Posts: 1530
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #87 on: February 24, 2015, 08:29:45 am »

Can someone PM me all information? I will add it on nxt.org
Logged

bitcoinpaul

  • Hero Member
  • *****
  • Karma: +589/-588
  • Offline Offline
  • Posts: 3093
  • Karmageddon
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #88 on: February 24, 2015, 08:40:00 am »

This is dead.
Logged
Like my Avatar? Reply now! NXT-M5JR-2L5Z-CFBP-8X7P3

Daedelus

  • Hero Member
  • *****
  • Karma: +230/-12
  • Offline Offline
  • Posts: 3280
    • View Profile
Re: Plugin feature to NXT client (Wesley's UI) Proposal Thread
« Reply #89 on: February 28, 2015, 11:55:46 am »

This thread is dead but the idea is still alive here:

https://nxtforum.org/nrs-client-development/(client-plugins)-specification-developers-guide/

To be introduced in NRS v1.5
Logged
NXT: NXT-4CS7-S4N5-PTH5-A8R2Q
Pages: 1 2 3 ... 5 [All]
 

elective-stereophonic
elective-stereophonic
assembly
assembly