Author [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] Topic: Bitshares Faucet Request for Proposal [1000 PTS]  (Read 5002 times)

0 Members and 1 Guest are viewing this topic.

Offline bytemaster

Bitshares Faucet Request for Proposal [1000 PTS]
« on: June 05, 2014, 08:06:03 PM »

This RFP is for someone to setup and maintain an open source faucet application for BTS chains.  This faucet will differ slightly from most bitcoin faucets in that it will require the user to provide:

1) Their Account Public Key
2) A globally unique account name to be registered on their behalf
3) A valid email address that is verified and for which there is a valid gravatar (https://en.gravatar.com/site/implement/hash/) account + image.

It should validate their account by sending them an email.

After they have validated their account, it should register a new account in the blockchain under the provided username and include the gravatar md5 hash as a public property of their account.

This will mean that everyone who wants to get started can use BTS with the following steps:

1) Download Client
2) Create local account and copy public key
3) Fill out form at Faucet
4) Check Email and click link.
5) 30 seconds later they have a registered account with initial balance.

Now all clients have the ability to display information from the gravatar profile along with the account which makes the directory more usable.  The faucet should be branded and professional looking.   


THIS IS NOT A BOUNTY, WE WILL PICK SOMEONE TO DO IT OR NO ONE.   

« Last Edit: June 07, 2014, 03:54:41 PM by bytemaster »
For the latest updates checkout my blog: http://bytemaster.bitshares.org
Anything said on these forums does not constitute an intent to create a legal obligation or contract between myself and anyone else.   These are merely my opinions and I reserve the right to change them at any time.

Offline cgafeng

Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #1 on: June 05, 2014, 08:21:27 PM »
interesting
BTC:1EYwcZ9cYVj6C9LMLafdcjK9wicVMDV376

Offline cass

  • Hero Member
  • *****
  • Posts: 4328
  • /(┬.┬)\
    • View Profile
Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #2 on: June 06, 2014, 06:35:58 AM »
somebody who could do the backend stuff for this bounty!?
I would love to design the frontend if needed.. pls contact me via PM or directly here if you have interest to finish this bounty task.

Cheers
cass
█║▌║║█  - - -  The quieter you become, the more you are able to hear  - - -  █║▌║║█

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12280
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BTS: xeroc
  • GitHub: xeroc
Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #3 on: June 06, 2014, 09:01:39 AM »
Too bad I am not a coder .. this seems like an 'easy task' for experienced python/ruby/web coders!

//EDIT: willing to donate some bucks for the faucet!
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline peterzz

  • Newbie
  • *
  • Posts: 15
    • View Profile
Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #4 on: June 06, 2014, 09:23:16 AM »
I can do this. This project need limit per IP address just once?
The next few days i can release some demo.

Offline peterzz

  • Newbie
  • *
  • Posts: 15
    • View Profile
Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #5 on: June 06, 2014, 09:24:35 AM »
somebody who could do the backend stuff for this bounty!?
I would love to design the frontend if needed.. pls contact me via PM or directly here if you have interest to finish this bounty task.

Cheers
cass

I can do that backend , We work together?

Offline cass

  • Hero Member
  • *****
  • Posts: 4328
  • /(┬.┬)\
    • View Profile
Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #6 on: June 06, 2014, 10:17:57 AM »
somebody who could do the backend stuff for this bounty!?
I would love to design the frontend if needed.. pls contact me via PM or directly here if you have interest to finish this bounty task.

Cheers
cass

I can do that backend , We work together?

You got PM. Yup deal, we'll work together...
█║▌║║█  - - -  The quieter you become, the more you are able to hear  - - -  █║▌║║█

Offline mint chocolate chip

Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #7 on: June 06, 2014, 02:31:17 PM »
The faucet should work only once per user? or can a user return to the faucet over and over? Whatever it is, questions like these should be built into the specs.

Offline bytemaster

Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #8 on: June 06, 2014, 04:56:43 PM »
Some more details on this particular project:

The goal is only one per person.   
I want to add SMS verification.
I want to add Referral Rewards
I want to integrate this service with our wallet.

The service should not store email addresses after sending emails, only the hash of the email addresses.

The factors that prove uniqueness:
1) email
2) phone
3) gravatar account

If someone wants to fake all 3 then that is fine.

I would like to support finding friends on Google / Facebook for 'automatic referral'.

So if someone you refer ends up signing up you get a bonus.     

Now we have financial incentive for people to sign up unique individuals and to refer their friends.   

New users will be able to use our DACs without ever having to see or know about the existence of public keys / private keys.



For the latest updates checkout my blog: http://bytemaster.bitshares.org
Anything said on these forums does not constitute an intent to create a legal obligation or contract between myself and anyone else.   These are merely my opinions and I reserve the right to change them at any time.

Offline mauritso

  • Full Member
  • ***
  • Posts: 64
    • View Profile
Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #9 on: June 06, 2014, 06:45:37 PM »
I think I know a way to do this with using just the block chain and temporary place to store the email verification codes (no other databases).

If there is someone who is experienced with PHP (or any other language for the backend) and doesn't know where to get started, I already have a portion of the backend design and I should be able to finish it this afternoon, PM me. I think I would be able to do it on my own but seeing as there is someone already started on this and the fact that I don't have much experience in programming, I don't think it's a good idea, but I would like to help.

For SMS verification you probably need an external service, is that desirable?

Maybe make it:

(Gravatar registered) Email address
Unique name
Valid public key
Captcha
Max 2/IP/month or so.

Fairly bot proof and no need for SMS verification right?

If you still require SMS verification, this seems fairly cheap: https://www.twilio.com/sms/pricing
Or are there cheaper/free ways to do this?
BTS: maurits

Offline testz

Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #10 on: June 06, 2014, 07:05:54 PM »
I want to add SMS verification.

For SMS verification you probably need an external service, is that desirable?

Crypto peoples doesn't like to share the phone numbers, we need to found the way to do it without SMS notifications.

Offline mauritso

  • Full Member
  • ***
  • Posts: 64
    • View Profile
Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #11 on: June 06, 2014, 07:28:47 PM »
I want to add SMS verification.

For SMS verification you probably need an external service, is that desirable?

Crypto peoples doesn't like to share the phone numbers, we need to found the way to do it without SMS notifications.

That's what I thought, captchas and a well chosen IP limit should prevent bots for the most part. Check emails against the 10minutemail a like services and +'es in gmail.com accounts.

Then someone would have to create an alias in outlook.com, create a gravatar account for it, upload an image, get another IP, create another public key and fill in the info/captcha.

adjust the amount you get on top of a paid for registration to the amount of work required to beat the system.
Advertise it as a way to freely register your unique name and get a little xts, emphasise on the free registration.

Raw draft for the bitshares faucet:

http://pastebin.com/xSRuvMAt

Forgot faucet in the title. Download and view fullscreen for the formatting to make sense.

EDIT:

Or maybe (not a fan of this, just trying to come up with a compromise (?)

tier 1 free registration and a very small amount of xts (required: email address)
tier 2 free registration and a bigger amount of xts (required: email address and phone number)

Another EDIT:

Maybe issue a special play around asset, give people a big number of them to get familiar with the system (give them a small amount of xts alongside this, the xts for real and the play around as some kind of dogecoin get accustomed to this new thing asset?)

Just typing out ideas right now.
« Last Edit: June 06, 2014, 07:35:16 PM by mauritso »
BTS: maurits

Offline bytemaster

Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #12 on: June 06, 2014, 09:09:50 PM »
Nice draft...

Just make sure that every 'form' also comes with a JSON-RPC API call that we can issue from the wallet GUI without having to use your website interface.

No captcha's. 

For the latest updates checkout my blog: http://bytemaster.bitshares.org
Anything said on these forums does not constitute an intent to create a legal obligation or contract between myself and anyone else.   These are merely my opinions and I reserve the right to change them at any time.

Offline itnom

  • Full Member
  • ***
  • Posts: 64
    • View Profile
    • Bitsapphire - The web development group that makes disruptive startups happen
Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #13 on: June 06, 2014, 10:26:17 PM »
Hello,

Looks like this could be an interesting intro project.

Last time we've checked one of the bounties (the initial website bounty) my team was put off by the bounty approach (and several other issues) so we backed off. We think that the wide-open bounty approach is not agile and discourages pre-existing professional teams from participating. 3rd party products which are build on top of 3I products are crucial to the 3I ecosystem and need to be build in an agile manner. Block explorers, faucets, browser extensions, etc are the equivalent of "launch titles" for gaming consoles or an app ecosystem for mobile phones, they make or break the underlying technology. Development bounties without assurances don't fit the bill. The current kind of bounties are also not scalable, you have to micromanage too much, maybe even outsource bounty oversight.

That said, we think that we can build the faucet with email and gravatar verification + reasonable spam protection in a week. We haven't worked with the Bitshares toolkit RPC yet, so that might need a few days to get used to. The whole thing should take at most 2 weeks, with professional design and security (nobody wants this scenario http://gavintech.blogspot.com/2012/03/bitcoin-faucet-hacked.html).

Our monthly  (4 weeks) rate for a 3 person team (1 designer/frontend, 1 frontend/backend, 1 backend) is 9400 USD total (we're in South Eastern Europe). This means that our 2 week estimate amounts to 4700 USD in development costs for this faucet. Most of our portfolio is whitelabel deals so if you're interested to see it PM me. We have won security bug bounties for Google, Nokia, Microsoft, ebay, etc, so we are very security focused. We don't do waterfall or fixed price/scope development, only agile development. We understand that requirements change over time (just as in this case sms verification was added), therefore we do only contract work.

However, we understand that 3I needs to be transparent about bounties so we're proposing a 1 week sprint escrow contract through bitrated (https://www.bitrated.com/) (multisig arbitration). The product owner, meaning somebody from I3 in charge of the project creates a list of features he wants to see in the product. Our team then creates high level user stories out of them. The product owner rates the user stories on a list of 1-10 on importance (the broader community could do this rating too via the forum). We multiply each user story rating with the development time it takes * cost per day. This way I3 and the broader community have a clear picture of the cost breakdown and ROI per feature. Our team then creates a weekly sprint backlog out of those user stories which are chosen to be the highest ROI. The development cost is locked in USD in bitcoin and put into a multisig transaction through https://www.bitrated.com/ at the beginning of the sprint. The transaction only goes through when all user stories are met according to specs. Any potential dispute can be settled through a 3rd party.

This way when feature creep happens (which is normal) the team developing the product won't be be helpless and the product owner can add to the backlog the additional feature to future weekly sprints.

We believe this is the best way to ensure high quality products at a low cost, and transparent to the community. This is also the only way we could think of for 3I how to scale the bounty system and get more professional teams on board.

Bounties without assurance might look tempting for the client, but they keep the good teams away. You might get good individuals from time to time, but teams need real assurance.

All that said, we're PTS stakeholders so keep the good work up!
Back our bid as a BitShares Delegate! http://bitsapphire.com/Bitshares-Delegate

wallet_approve_delegate bitsapphire true

Offline mauritso

  • Full Member
  • ***
  • Posts: 64
    • View Profile
Re: Bitshares Faucet Bounty [1000 PTS]
« Reply #14 on: June 06, 2014, 10:35:42 PM »
I think I will start working on it after I got some sleep (~12 hours from now), given that there is no-one else who already started working and updated us by that time. If I start with creating functions for validation and calling the RPC API then it would be easy for other people to use.

Nice draft...

Just make sure that every 'form' also comes with a JSON-RPC API call that we can issue from the wallet GUI without having to use your website interface.

No captcha's. 



Thanks I guess, hope it can be of some use.

BTS: maurits

 

Google+