elective-stereophonic
elective-stereophonic
Security problem in the installation of InstantDEX singapore
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Nxt Client: Nxt 1.11.15

Author Topic: Security problem in the installation of InstantDEX  (Read 1174 times)

Skape

  • Jr. Member
  • **
  • Karma: +4/-0
  • Offline Offline
  • Posts: 16
    • View Profile
Security problem in the installation of InstantDEX
« on: November 02, 2015, 07:01:25 pm »

Hi guys,

I'm following these instructions to install InstantDEX : https://titanpad.com/testing-instantdex

Big problem is when you create the file SuperNET.conf : you have to enter your passphrase IN CLEAR !!! So if someone stole my computer or whatever he can access to my passphrase simply by openning the file...

Thanks for all your work :)
Logged

jl777

  • Hero Member
  • *****
  • Karma: +718/-123
  • Offline Offline
  • Posts: 6170
    • View Profile
Re: Security problem in the installation of InstantDEX
« Reply #1 on: November 02, 2015, 07:36:47 pm »

Hi guys,

I'm following these instructions to install InstantDEX : https://titanpad.com/testing-instantdex

Big problem is when you create the file SuperNET.conf : you have to enter your passphrase IN CLEAR !!! So if someone stole my computer or whatever he can access to my passphrase simply by openning the file...

Thanks for all your work :)
that is why i recommend to not use any main account for now.

if you set "secret":"randvals" it will generate a set of randvals files, which encodes the privkey. It would be a matter to add some login password to encrypt/decrypt these files and we get essentially a wallet type of setup. Now that everything is in a chrome app, if somebody can help to do some JS forms to call into the C code, I can add such an encryption/decryption layer pretty quickly.

tl:dr this is known condition and things are already setup to solve this, but need some GUI help
Logged
There are over 1000 people in SuperNET slack! http://slackinvite.supernet.org/ automatically sends you an invite

I am just a simple C programmer
 

elective-stereophonic
elective-stereophonic
assembly
assembly