BitShares Forum
Main => General Discussion => Topic started by: jamesc on February 25, 2015, 07:00:33 pm
-
The beta web-site wallet is available. Limit transactions to small amounts only please.
https://wallet.bitshares.org
If you want to grab a account name, it should be quite easy. Accounts are reserved on the public blockchain and are first-come first-serve... I think it will become quite useful to you as there are projects being developed based on BitShares for: voting, gaming, music. Then on the business side, SEC compliant stock offerings for companies (not just the large ones anymore). Today, BitShares are used as money (market pegged assets), bearer shares (bitshares), and for its user issued assets (users issue there own shares).
You can register accounts with the wallet (if you send it some funds) or you may use the built-in faucet. In both cases, the account is registered as a public account.
For the newcomer: use a test transfer from any new source (line an exchange). The technical explanation is: make sure that anyone sending to a public account is using a recent version of full-wallet (like 0.6.1) or using the light wallet or this hosted-wallet. Older versions of the full client will send a private TITAN transaction instead of a public transaction. A full-node will be required to recover the TITAN transaction should this happen.
Source code, bugs, requests, etc.. are hosted at: https://github.com/bitshares/bitshares-js and https://github.com/BitShares/web_wallet
-
Where is the private key stored at ?
If the server is down and never go back up , can I still control my funds ? How ?
-
Bam ... awesome thing
+5%
Edit: is 0.6.1 checking for public field to evaluate if titan tx should be sent? is there a documentation/discussion somewhere?
-
Great work!
-
Wow pretty slick... was able to get up and going in 2 mins.
-
Where is the private key stored at ?
If the server is down and never go back up , can I still control my funds ? How ?
Private keys are in the browser encrypted by the password. The keys can be re-generated from the code in https://github.com/bitshares/bitshares-js ... I'm thinking about the best way to make a off-line recovery tool, either in the Qt wallet or perhaps as a stand-alone. So please stick to the small amount rule until we have a scalable plan B in place.
UPDATE: I'm working on light-wallet compatible accounts
-
good job!
+5%
-
Excellent! One step closer to mass adoption!
-
Bam ... awesome thing
+5%
Edit: is 0.6.1 checking for public field to evaluate if titan tx should be sent? is there a documentation/discussion somewhere?
Yes, it will check the field for registered accounts. But there is still a bug where sending to unregistered accounts may still use TITAN--this will be fixed in 0.6.2.
-
Will we ever be able to use this without an account? Then we could share links with people to show how liquid our markets are:
i.e. it would be great if this link worked without making an account:
https://wallet.bitshares.org/#/market/BitUSD:BitBTC/testing123/buy
-
Where is the private key stored at ?
If the server is down and never go back up , can I still control my funds ? How ?
Private keys are in the browser encrypted by the password. The keys can be re-generated from the code in https://github.com/bitshares/bitshares-js (https://github.com/bitshares/bitshares-js) ... I'm thinking about the best way to make a off-line recovery tool, either in the Qt wallet or perhaps as a stand-alone. So please stick to the small amount rule until we have a scalable plan B in place.
Isn't that what the brain key is for? What role does it play?
Also, this is EPIC. It's so smooth and fast. I can't wait until the markets work :) .
-
IE10 and below doesn't load the interface.. demo'd it to an ex microsoft software engineer on my team and it didn't load on first try, epic fail lol.. had to load up in chrome
-
Brain wallets should be a feature in the QT wallet, and you should be able to log in to the web wallet with the same brain key.
-
Sorry for a silly question ,so I'm not able to log in with the existing (registered) account into the web wallet?
Thanks :)
-
+5%
-
This is huge. We're a few baby steps away from making this highly accessible to users wanting a decentralized exchange.
To market this properly, we need to take extreme security measures, and strengthen the weakest links in security for this wallet.
- What would happen if bitshares.org's server got hacked?
- How do we know if this wallet is on a fork or not?
Also, metaexchange / shapeshift integration?
-
Btw, the auto-scrolling instruction text is very annoying. Just display all the info I need to read at once...
-
Sorry for a silly question ,so I'm not able to log in with the existing (registered) account into the web wallet?
Thanks :)
This wallet does not have the private keys for your registered account. Only you have that on your local backups.
-
Awesome!
-
(http://2.bp.blogspot.com/_irWjshCRmds/TSqg22GmY2I/AAAAAAAAA7Q/Vi6prcZO5SM/s1600/Respect.jpg)
-
Sorry for a silly question ,so I'm not able to log in with the existing (registered) account into the web wallet?
Thanks :)
This wallet does not have the private keys for your registered account. Only you have that on your local backups.
Thank you for explanation.Makes sense.
-
Cool stuff, really !
-
Btw, the auto-scrolling instruction text is very annoying. Just display all the info I need to read at once...
agree
+
1. I have sent to my wallet account 101 BTS but the recent transactions tab remains blanc without mentioning any transaction
2.I can't view the standby delegates (mozilla firefox on linux)
3.the robo avatar I see on the web wallet is different then that I saw when I transfered the funds from my desktop wallet for confirmation. (probably nothing to do with the web wallet)
edit: for 1. I should wait more, the transaction appeared !
-
Excellent work guys. Thanks for the web wallet!
-
question: does the referral system work with the webwallet?
-
Taulant, are you in here? How is moonstone.io coming along?
-
Btw, the auto-scrolling instruction text is very annoying. Just display all the info I need to read at once...
I would show it all at once but there is the matter of small screens. I did that in a hurry, but my plan is to make the box locked in size so there will be no jumping in the screen. Also, I would add an animation to it will slide from screen to screen. Then I can remove those silly arrows...
-
jcalfee1 the page looks awesome!
just fyi - accessing the page on my galaxy tab 3 gives me an https/ssl error:
NET::ERR_CERT_AUTHORITY_INVALID
-
Nice! +5% I was able to register a new account as well as send and receive funds without any problems. It's not quite as fast as the full client but damn fast! 8)
Question- whys the transaction fee set to 1+ BTS by default?
-
yep cant take a look NET::ERR_CERT_AUTHORITY_INVALID
looks like same in bitshares.org before
-
Nice! +5% I was able to register a new account as well as send and receive funds without any problems. It's not quite as fast as the full client but damn fast! 8)
Question- whys the transaction fee set to 1+ BTS by default?
If you consider blockchain downloading / processing / replaying, this is MUCH faster than the full client.
-
Nice! +5% I was able to register a new account as well as send and receive funds without any problems. It's not quite as fast as the full client but damn fast! 8)
Question- whys the transaction fee set to 1+ BTS by default?
If you consider blockchain downloading / processing / replaying, this is MUCH faster than the full client.
Oh absolutely! I just meant confirmation speed... and even then it's still wicked-fast.
-
jcalfee1 the page looks awesome!
just fyi - accessing the page on my galaxy tab 3 gives me an https/ssl error:
NET::ERR_CERT_AUTHORITY_INVALID
I guess it has to do with the bitshares.org server and not the web wallet itself ...
@cass is trying to fix this as I know....
see here:
https://bitsharestalk.org/index.php?topic=14487.0
-
jcalfee1 the page looks awesome!
just fyi - accessing the page on my galaxy tab 3 gives me an https/ssl error:
NET::ERR_CERT_AUTHORITY_INVALID
I guess it has to do with the bitshares.org server and not the web wallet itself ...
@cass is trying to fix this as I know....
see here:
https://bitsharestalk.org/index.php?topic=14487.0
nope each subdomain is pointing to another VPS
So guess each of the project behind have to get ssl secured on there own..
Sure its a wildcard SSL cert ... but i can just configure .org vps
-
Nice! +5% I was able to register a new account as well as send and receive funds without any problems. It's not quite as fast as the full client but damn fast! 8)
Question- whys the transaction fee set to 1+ BTS by default?
The default network fee now is .5 BTS. So, I simply split it: .5 network fee and .5 for business expenses...
-
+5% +5% +5%
Shouldn't be a logout button somewhere?
-
Wonderful :)
-
+5% +5% +5%
Shouldn't be a logout button somewhere?
It is called "lock" (upper right)
-
This is by far the easiest way to introduce someone to BitShares.
Well done! +5%
-
This is by far the easiest way to introduce someone to BitShares.
Well done! +5%
Yeah but it would be even better if you could use the site without creating an account. Hardcore bitcoin maximalists will look at the create account pages and see that as an excuse to close it and not bother to look at the exchange.
Also how can we be certain that the server hosting the wallet has not been hacked? Maybe we could have a robohash or something of all the site's html & js.
-
Also how can we be certain that the server hosting the wallet has not been hacked? Maybe we could have a robohash or something of all the site's html & js.
That doesn't solve anything. You need to be sure that the code you have previously downloaded and trusted is not automatically replaced without your knowledge. I think something like a Chrome extension could help with this. Personally, I prefer the approach where an executable is downloaded and used like Nathan's Qt lite wallet, even if the executable is just a web container for the HTML/JS-based web wallet.
-
This is by far the easiest way to introduce someone to BitShares.
Well done! +5%
Yeah but it would be even better if you could use the site without creating an account. Hardcore bitcoin maximalists will look at the create account pages and see that as an excuse to close it and not bother to look at the exchange.
Also how can we be certain that the server hosting the wallet has not been hacked? Maybe we could have a robohash or something of all the site's html & js.
I agree, I would love to open it up. It seems like low-hanging fruit. Keep in mind, we need to make sure it is reliable before getting even more traffic. I'm going to like this a lot more when it uses multiple servers....
I plan to package it as a plug-in so it can be versioned.. Chrome makes this easy so I would not have to sacrifice another feature to do it. Firefox would be good too but I'm not sure if they support web site plugins yet. A plugin will help protect private keys from a hacked server. There is still a matter of server security where a hacked server could re-direct funds.
A blockchain withdraw limit could help. We could add a cold wallet creator and bring the hot wallet to the web. That might be the more practical way to do it. I know we do not support withdraw limits yet though.
-
Wow amazing job! I'm without a computer at the moment but I was able use my Galaxy S3 mobile to access the web wallet and register via the faucet. Only took 2 minutes! I am massively impressed and can finally begin recommending BitShares to friends once its out of beta. Now the marketing teams really have something to promote!! +5% +5% +5%
-
THIS IS HUGE!!!!!!
-
jcalfee1 the page looks awesome!
just fyi - accessing the page on my galaxy tab 3 gives me an https/ssl error:
NET::ERR_CERT_AUTHORITY_INVALID
I guess it has to do with the bitshares.org server and not the web wallet itself ...
@cass is trying to fix this as I know....
see here:
https://bitsharestalk.org/index.php?topic=14487.0
nope each subdomain is pointing to another VPS
So guess each of the project behind have to get ssl secured on there own..
Sure its a wildcard SSL cert ... but i can just configure .org vps
I'm getting an A now .. Valentine gave me some certs and I added some configuration to the server..
-thanks... Let me know if you see anything else.
-
jcalfee1 the page looks awesome!
just fyi - accessing the page on my galaxy tab 3 gives me an https/ssl error:
NET::ERR_CERT_AUTHORITY_INVALID
I guess it has to do with the bitshares.org server and not the web wallet itself ...
@cass is trying to fix this as I know....
see here:
https://bitsharestalk.org/index.php?topic=14487.0
nope each subdomain is pointing to another VPS
So guess each of the project behind have to get ssl secured on there own..
Sure its a wildcard SSL cert ... but i can just configure .org vps
I'm getting an A now .. Valentine gave me some certs and I added some configuration to the server..
-thanks... Let me know if you see anything else.
great :) yup it was caused due missing additona certs.. great it works now!
-
(http://i57.tinypic.com/2a9o09l.jpg)
+5% +5% +5% +5% +5%
-
Looks like it was team members who bought up the BTS because they knew they were about to release the web wallet/ light wallet :)
-
Can we trade on web wallet? I can't... Should I wait a little bit more? ;)
-
Looks like it was team members who bought up the BTS because they knew they were about to release the web wallet/ light wallet :)
Your not alone, I learned about the release schedule when Dan announced it in the Friday's Mumble session; before that it I was in the dark too. I'm more of a systematic investor than a news guy so that helps me keep things simple. I'm up late adding more cores (CPUs) to the server, it looks like people are using it.. So, I hope to have some more horsepower online soon.
-
Can we trade on web wallet? I can't... Should I wait a little bit more? ;)
Trade, sure just another 1000 lines of code .. no problem! I know it is worth it to you. I'll make it happen.
-
Can we trade on web wallet? I can't... Should I wait a little bit more? ;)
Trade, sure just another 1000 lines of code .. no problem! I know it is worth it to you. I'll make it happen.
+5% +5% +5% +5% +5%
You're making a game-changer!
-
Can we trade on web wallet? I can't... Should I wait a little bit more? ;)
Trade, sure just another 1000 lines of code .. no problem! I know it is worth it to you. I'll make it happen.
Dude you're seriously kickass. +5%
-
Can we trade on web wallet? I can't... Should I wait a little bit more? ;)
Trade, sure just another 1000 lines of code .. no problem! I know it is worth it to you. I'll make it happen.
+1 +1 +1
-
+5% +5% +5%
can anybody fork a simple wallet with only transfer function?
more fast and more simple :)
1. register
2. contract list
3. balance and transaction history
4. transfer asset
-
I just tried it and it is smooth. +5%
I cannot find the 'Console'. Is it in the web wallet?
-
I cannot find the 'Console'. Is it in the web wallet?
Click your username > Advanced > Console
I think this layout is new to 6.0+
-
The app.js is in size of 5MB and is not getting cached in my Chrome browser, which means it is fetched from the server every time when the page loads (slowly). Almost killed my limited Internet bandwidth.
Advice:
1, add Expires and Last-Modified HTTP headers to static files
2, compress .map files while transferring
3, reduce the size of app.js by removing useless code or some kind of compressing
Despite of above issue, the wallet works fine for me.
-
Works great! My computer couldn't handle the full wallet so I finally got to play around with BTS.
FYI I transferred some BTS from Poloniex, but it doesn't show the transaction history for some reason.
Anyways thanks!
-
This is great stuff James, well done!
Now to figure out how to implement this on Bitsharesblocks! :)
-
What is exactly the use case of the web wallet?
Regarding security, this seems catastrophically risky. The browser is an insecure environment [1], and hacking a server is common once money is involved, as illustrated multiple times with exchanges.
Genuinely interested to learn more, hoping these problems have been taken into account when developing the web wallet.
[1] http://matasano.com/articles/javascript-cryptography/
-
What is exactly the use case of the web wallet?
Regarding security, this seems catastrophically risky. The browser is an insecure environment [1], and hacking a server is common once money is involved, as illustrated multiple times with exchanges.
Genuinely interested to learn more, hoping these problems have been taken into account when developing the web wallet.
[1] http://matasano.com/articles/javascript-cryptography/
I agree with these concerns. The use of the web wallet seems to me less about serious trading/holding funds and more as an easy way for people to learn about the exchange and get interested.
-
What is exactly the use case of the web wallet?
Regarding security, this seems catastrophically risky. The browser is an insecure environment [1], and hacking a server is common once money is involved, as illustrated multiple times with exchanges.
Genuinely interested to learn more, hoping these problems have been taken into account when developing the web wallet.
[1] http://matasano.com/articles/javascript-cryptography/
I agree with these concerns. The use of the web wallet seems to me less about serious trading/holding funds and more as an easy way for people to learn about the exchange and get interested.
People use their browser for their bank, trading stocks, etc. From what I've seen it is the centralized accounting and vaults that have been compromised with the traditional crypto exchanges. Easy to use multi-sig and 2FA will do more for security than any fort knox ever could.
-
What is exactly the use case of the web wallet?
Regarding security, this seems catastrophically risky. The browser is an insecure environment [1], and hacking a server is common once money is involved, as illustrated multiple times with exchanges.
...
[1] http://matasano.com/articles/javascript-cryptography/
I agree with these concerns. The use of the web wallet seems to me less about serious trading/holding funds and more as an easy way for people to learn about the exchange and get interested.
I agree too. I wish everything was web based and lightweight. I hate downloading apps. BUT, until we are sure where the content is being served up from, we are risking quite a bit by going web based right now.
Storj [Driveshare] could be a great solution to this. The js that gets distributed to the clients needs to be served up in shards via multiple trusted nodes. NO SERVERS. Even the domain itself needs to be decentralized via .p2p .bit .dac whatever.
-
What is exactly the use case of the web wallet?
Regarding security, this seems catastrophically risky. The browser is an insecure environment [1], and hacking a server is common once money is involved, as illustrated multiple times with exchanges.
Genuinely interested to learn more, hoping these problems have been taken into account when developing the web wallet.
[1] http://matasano.com/articles/javascript-cryptography/
I agree with these concerns. The use of the web wallet seems to me less about serious trading/holding funds and more as an easy way for people to learn about the exchange and get interested.
The Web wallet is absolutely key to the whole project IMHO. This much more closely resembles the user experience of a centralized exchange with all the benefits and security of a decentralized exchange working behind the scenes. A blockchain.info-style site will give users control over their assets. Add in mandatory 2fa and the site should be more secure than any local client.
-
This will be easy to market if we make the default main page the Exchange Asset
It means, you can view the inside without even logging in.
Change the name to Exchange instead of Wallet.
Integrate bitcoin and altcoins gateway
Then let's promote to crypto world as a web decentralize exchange, instead of just web wallet.
Just my +5%
-
Hi,
I can't register an account.
I've got enough funds in the account.
This is the error I get:
31010 expired_transaction: expired transaction
{"trx_arg":{"expiration":"2015-02-26T13:19:06","reserved":null,"operations":[{"type":"register_account_op_type","data":{"name":"fiatcure","public_data":null,"owner_key":"BTS8XBcCY5JXaxqf7iyrSihJwWtBe9vezHWeHALDN2UKXQ651yi36","active_key":"BTS53gRUmLM5xtZndpRcichBasbuxAXUYTshhvdCaN3cRZEW6LL1m","delegate_pay_rate":255,"meta_data":{"type":"public_account","data":""}}},{"type":"withdraw_op_type","data":{"balance_id":"BTSEZwdHSeVNhe7u7K7BsZADwhFhAw2tBRrk","amount":50000,"claim_input_data":""}}],"signatures":["1f7fed31bba0638145ea41eefaeb68977e2ff5fdeeee8d3b082449df3e15bdf5a75782574093e36a2d5bc892c9755d4b899b03438517fe45b5dc7d4bce26ad7153"]},"_current_state->now()":"2015-02-26T15:19:00","expired_by_sec":7194}
th_a transaction_evaluation_state.cpp:214 evaluate
{"trx_arg":{"expiration":"2015-02-26T13:19:06","reserved":null,"operations":[{"type":"register_account_op_type","data":{"name":"fiatcure","public_data":null,"owner_key":"BTS8XBcCY5JXaxqf7iyrSihJwWtBe9vezHWeHALDN2UKXQ651yi36","active_key":"BTS53gRUmLM5xtZndpRcichBasbuxAXUYTshhvdCaN3cRZEW6LL1m","delegate_pay_rate":255,"meta_data":{"type":"public_account","data":""}}},{"type":"withdraw_op_type","data":{"balance_id":"BTSEZwdHSeVNhe7u7K7BsZADwhFhAw2tBRrk","amount":50000,"claim_input_data":""}}],"signatures":["1f7fed31bba0638145ea41eefaeb68977e2ff5fdeeee8d3b082449df3e15bdf5a75782574093e36a2d5bc892c9755d4b899b03438517fe45b5dc7d4bce26ad7153"]}}
th_a transaction_evaluation_state.cpp:256 evaluate
{"trx":{"expiration":"2015-02-26T13:19:06","reserved":null,"operations":[{"type":"register_account_op_type","data":{"name":"fiatcure","public_data":null,"owner_key":"BTS8XBcCY5JXaxqf7iyrSihJwWtBe9vezHWeHALDN2UKXQ651yi36","active_key":"BTS53gRUmLM5xtZndpRcichBasbuxAXUYTshhvdCaN3cRZEW6LL1m","delegate_pay_rate":255,"meta_data":{"type":"public_account","data":""}}},{"type":"withdraw_op_type","data":{"balance_id":"BTSEZwdHSeVNhe7u7K7BsZADwhFhAw2tBRrk","amount":50000,"claim_input_data":""}}],"signatures":["1f7fed31bba0638145ea41eefaeb68977e2ff5fdeeee8d3b082449df3e15bdf5a75782574093e36a2d5bc892c9755d4b899b03438517fe45b5dc7d4bce26ad7153"]}}
th_a chain_database.cpp:1613 evaluate_transaction
{"trx":{"expiration":"2015-02-26T13:19:06","reserved":null,"operations":[{"type":"register_account_op_type","data":{"name":"fiatcure","public_data":null,"owner_key":"BTS8XBcCY5JXaxqf7iyrSihJwWtBe9vezHWeHALDN2UKXQ651yi36","active_key":"BTS53gRUmLM5xtZndpRcichBasbuxAXUYTshhvdCaN3cRZEW6LL1m","delegate_pay_rate":255,"meta_data":{"type":"public_account","data":""}}},{"type":"withdraw_op_type","data":{"balance_id":"BTSEZwdHSeVNhe7u7K7BsZADwhFhAw2tBRrk","amount":50000,"claim_input_data":""}}],"signatures":["1f7fed31bba0638145ea41eefaeb68977e2ff5fdeeee8d3b082449df3e15bdf5a75782574093e36a2d5bc892c9755d4b899b03438517fe45b5dc7d4bce26ad7153"]},"override_limits":false}
th_a chain_database.cpp:2062 store_pending_transaction
{}
th_a common_api_client.cpp:2772 blockchain_broadcast_transaction
-
Change the name to Exchange instead of Wallet.
Integrate bitcoin and altcoins gateway
Then let's promote to crypto world as a web decentralize exchange, instead of just web wallet.
Just my +5%
+5% +5%
-
Change the name to Exchange instead of Wallet.
Integrate bitcoin and altcoins gateway
Then let's promote to crypto world as a web decentralize exchange, instead of just web wallet.
Just my +5%
+5% +5%
it make sense!
+5%
-
This will be easy to market if we make the default main page the Exchange Asset
It means, you can view the inside without even logging in.
Change the name to Exchange instead of Wallet.
Integrate bitcoin and altcoins gateway
Then let's promote to crypto world as a web decentralize exchange, instead of just web wallet.
Just my +5%
And fiat gateways too! +5%
I think that someone can fork the code and make an integrated one.
-
What is exactly the use case of the web wallet?
Regarding security, this seems catastrophically risky. The browser is an insecure environment [1], and hacking a server is common once money is involved, as illustrated multiple times with exchanges.
Genuinely interested to learn more, hoping these problems have been taken into account when developing the web wallet.
[1] http://matasano.com/articles/javascript-cryptography/ (http://matasano.com/articles/javascript-cryptography/)
While I can't speak to the robustness of js-crypto I can assure you that your funds are not stored on the server; at least not in the sense they are with a centralized exchange. The browser stores the encrypted keys locally and sends signed transactions to the node running on the server. If someone hacked the web server all they could really do is turn it off. I doubt the web server node even has a wallet.
-
This is huge +5%!
-
When will it be released?
-
Hi,
I can't register an account.
I've got enough funds in the account.
This is the error I get:
31010 expired_transaction: expired transaction
...
https://github.com/BitShares/BitShares-JS/issues/58
-
What are the thoughts/recommendations/advise when using the webwallet on a mobile devise?
Sent from my iPad using Tapatalk
-
Add in mandatory 2fa and the site should be more secure than any local client.
If someone hacked the web server all they could really do is turn it off.
Nope. And here is why.
If an attacker wants to steal the funds of everyone using the local client, they need to hack into each of their personal computers. If the attacker wants to steal the funds of everyone using the web wallet, they need to only hack into the web wallet server. They then replace the javascript served with one that extracts the locally stored brain keys and sends it to the attacker's server. Everyone that opens and unlocks the web wallet next time will have their funds stolen (it makes more sense to wait until the attacker has a critical mass of brain keys before stealing a single satoshi to not tip them off of the compromise).
Does multisig and 2FA solve anything? No, because the multisig is provided by the web wallet server and if that is compromised then the multisig is also compromised and useless.
It gets worse. It doesn't even require compromising the server, although the following attack is on the local scale rather than the global scale like the previous one. If the attacker can get between the victim and his internet connection, the attacker can use SSLstrip (http://www.thoughtcrime.org/software/sslstrip/) to feed their malicious javascript with a high probability of the victim not noticing that anything is wrong. Most people will not notice if the green lock icon is missing before typing their wallet passphrase. Another approach is to provide an HTTPS protected site (green lock icon included) but to a domain that looks like but is not actually wallet.bitshares.org (e.g. wallet.bltshares.org).
Edit: I just realized the SSLstrip hack would not allow the attacker to steal the brain key. If a homograph attack is used the site will not have access to the wallet.bitshares.org local storage. If the HTTPS is stripped, I believe the HTTP version of the site should also not be allowed to access the local storage that was set up under HTTPS. So the worst an attacker can do if they use the SSLstrip hack is to steal your wallet passphrase but not the encrypted master key or the brain key. Now if they were able to obtain the encrypted master key through other means (for example, use the SSLstrip attack to get your Dropbox/Google password and then use that to get your backed up encrypted JSON wallet, assuming you actually stored in a cloud service) then they could use that along with the captured passphrase to get access to the funds. But as you can see this attack is less of a threat. Also, keep in mind the original attack where the wallet.bitshares.org server is hacked still is valid and that is the more dangerous attack (and more worthwhile attack for the attacker) anyway.
-
Excellent work! This is a huge step forward for making BitShares accessible and useful.
Perhaps add:
- the version detail to the Dashboard.
- a link back to https://bitshares.org
- a statement that the private key is browser and not sent to server.. and then add a necessary confirmation that user has safely saved their brain key and password.. and a warning to back that up. Too easy for noobs to not appreciate they are responsible: that bit needs to be fool proof.
Do we need to worry about bitshares.com and other confusions?
-
Does multisig and 2FA solve anything? No, because the multisig is provided by the web wallet server and if that is compromised then the multisig is also compromised and useless.
Can this be solved by having one or more of the multisig providers reside on another unknown server, or possibly from some or all of the delegates themselves?
-
Does multisig and 2FA solve anything? No, because the multisig is provided by the web wallet server and if that is compromised then the multisig is also compromised and useless.
Can this be solved by having one or more of the multisig providers reside on another unknown server, or possibly from some or all of the delegates themselves?
You can distribute this keys of the multisig over multiple servers but at the end of the day there will only be a handful of servers to attack to gain access to all users.
The better solution is to force the attacker to hack into each user's computer at a minimum if they want to steal their funds. Adding multisig on top of that of course adds more security and I highly recommend that.
And as I explained, serving this as a typical web page (even if HTTPS protected) allows the attacker to avoid hacking into each user's computer. I think a browser extension that you have to manually install once and need to explicitly approve of any upgrades would help a lot. Personally, I don't feel very comfortable with using any browser-based solution for serious money. I would want to download a deterministically-compiled executable that is signed by enough of the core devs with their PGP keys which I have already established on my local computer (actually I would want the source archive signed by the devs and then would want to compile it myself, but the deterministic build is a better solution if you don't want to compile yourself). To make this easier, it should be possible to use the previous version of the client and the web-of-trust on the blockchain to validate the signatures of the new version of the client. That way upgrades can be very simple for regular users (no PGP required). The only issue then is how to establish the first installation of the client on a new computer. Still, even if we rely on HTTPS for the security of that initial download, the attack surface becomes so much smaller that it is difficult for an attacker to be very successful.
-
my transaction from the 0.6.1 client to my unregistered light-wallet account is not showing up.
added contact:
>> wallet_add_contact_account test2 BTS5ihT3L2zY4cYfJ2qvY85m7FAPSjyK191U28qBiTV8cz9qzweqP
OK
I did not use the transfer_public method because it fails:
>> wallet_transfer_to_public_account 0.9 BTS americansilver test2
10 assert_exception: Assert Exception
account_record.valid() && !account_record->is_retracted():
{}
th_a wallet_api.cpp:348 wallet_transfer_to_public_account
{}
th_a common_api_client.cpp:4042 wallet_transfer_to_public_account
{"command":"wallet_transfer_to_public_account"}
th_a cli.cpp:626 execute_command
normal transfer goes through but I don't see it on bitshares.org wallet:
>> transfer 0.9 BTS americansilver test2
TIMESTAMP BLOCK FROM TO AMOUNT MEMO FEE ID
======================================================================================================================================================================
2015-02-26T21:39:57 PENDING americansilver test2 0.90000 BTS 0.10000 BTS 239b3768
-
Does multisig and 2FA solve anything? No, because the multisig is provided by the web wallet server and if that is compromised then the multisig is also compromised and useless.
Can this be solved by having one or more of the multisig providers reside on another unknown server, or possibly from some or all of the delegates themselves?
You can distribute this keys of the multisig over multiple servers but at the end of the day there will only be a handful of servers to attack to gain access to all users.
The better solution is to force the attacker to hack into each user's computer at a minimum if they want to steal their funds. Adding multisig on top of that of course adds more security and I highly recommend that.
And as I explained, serving this as a typical web page (even if HTTPS protected) allows the attacker to avoid hacking into each user's computer. I think a browser extension that you have to manually install once and need to explicitly approve of any upgrades would help a lot. Personally, I don't feel very comfortable with using any browser-based solution for serious money. I would want to download a deterministically-compiled executable that is signed by enough of the core devs with their PGP keys which I have already established on my local computer (actually I would want the source archive signed by the devs and then would want to compile it myself, but the deterministic build is a better solution if you don't want to compile yourself). To make this easier, it should be possible to use the previous version of the client and the web-of-trust on the blockchain to validate the signatures of the new version of the client. That way upgrades can be very simple for regular users (no PGP required). The only issue then is how to establish the first installation of the client on a new computer. Still, even if we rely on HTTPS for the security of that initial download, the attack surface becomes so much smaller that it is difficult for an attacker to be very successful.
I'm not a programmer so you're scaring me Arhag. In terms of ease of use the web wallet has tremendous advantages. How about Blockchain.info, the Ripple & Stellar web wallets etc? I know Blockchain was hacked before. I think it was a bug on an software update. It's been very solid overall and now has 3 million wallets. I came across a Stellar Dev meetup where Andrew Rogers spoke about a solution to allow a client to keep control of the secret keys across multiple devices: http://youtu.be/K8oaHql5aHU?t=32m50s
Something like this where the server only holds part of the encrypted secret key and the client has the other seems to prevent a server-side attack being as devastating no? Anyways what security measures are taken with the current bitShares wallet? What methods were used with prevous web wallet hacks in the past?
-
I cannot load registered account when using Dolphin browser on Android OS and i get error:
"Cannot read property 'private_data' of null".
The wallet itself is loaded and i am able to login, but the registered account is not listed.
-
I'm not a programmer so you're scaring me Arhag. In terms of ease of use the web wallet has tremendous advantages. How about Blockchain.info, the Ripple & Stellar web wallets etc? I know Blockchain was hacked before. I think it was a bug on an software update. It's been very solid overall and now has 3 million wallets.
This BitShares web wallet has the same trust/security model as blockchain.info. So if you trust blockchain.info you can (in theory) trust this web wallet (although I cannot vouch for the security practices of whoever is managing the wallet.bitshares.org host compared to the blockchain.info servers). Now call me paranoid, but I personally do not trust blockchain.info with my BTC for the reasons I already stated earlier in this thread, so you can imagine I would feel the same way with this BitShares web wallet.
I came across a Stellar Dev meetup where Andrew Rogers spoke about a solution to allow a client to keep control of the secret keys across multiple devices: http://youtu.be/K8oaHql5aHU?t=32m50s
Something like this where the server only holds part of the encrypted secret key and the client has the other seems to prevent a server-side attack being as devastating no?
I didn't watch the video, but the problem isn't if the server has encrypted secrets. The problem is that you are trusting the third-party server to deliver the code that will run on your local computer every time you load the page. That javascript code running on your computer has access to the local storage in the browser that stores your encrypted secrets. It also has access to the wallet password you type into the password box. If this code is compromised, then your funds will be compromised. Because you trust the server to deliver you the trusted code, if the server gets compromised the attacker can feed you malicious code instead. To prevent this you need to have a model where you manually approve of the initial installation of the code and any upgrades so that the server cannot feed you new malicious code without you knowing. Furthermore, you need a way to verify that the initial installation or the upgrade is good. This requires deterministic builds (not a problem with javascript) and signatures on the builds from trusted parties (e.g. the core devs). You need to be able to verify the upgrade is good before installing it. You also want the private keys of the trusted people that can sign the code to be stored offline (cold storage) to be secure and not stored on a hot server that can be hacked.
-
Got it up and going. I'm bitninja. When BTER releases my bitshares I"ll test it out.
-
This BitShares web wallet has the same trust/security model as blockchain.info. So if you trust blockchain.info you can (in theory) trust this web wallet (although I cannot vouch for the security practices of whoever is managing the wallet.bitshares.org host compared to the blockchain.info servers). Now call me paranoid, but I personally do not trust blockchain.info with my BTC for the reasons I already stated earlier in this thread, so you can imagine I would feel the same way with this BitShares web wallet.
It's good to be paranoid for security. Hopefully it's at least as good as Blockchain.
I didn't watch the video, but the problem isn't if the server has encrypted secrets. The problem is that you are trusting the third-party server to deliver the code that will run on your local computer every time you load the page. That javascript code running on your computer has access to the local storage in the browser that stores your encrypted secrets. It also has access to the wallet password you type into the password box. If this code is compromised, then your funds will be compromised. Because you trust the server to deliver you the trusted code, if the server gets compromised the attacker can feed you malicious code instead. To prevent this you need to have a model where you manually approve of the initial installation of the code and any upgrades so that the server cannot feed you new malicious code without you knowing. Furthermore, you need a way to verify that the initial installation or the upgrade is good. This requires deterministic builds (not a problem with javascript) and signatures on the builds from trusted parties (e.g. the core devs). You need to be able to verify the upgrade is good before installing it. You also want the private keys of the trusted people that can sign the code to be stored offline (cold storage) to be secure and not stored on a hot server that can be hacked.
If the code is bad I hear what you are saying. It seems there should be a protocol in place to certify the code on updates, especially the important parts (ie. if the code splits the secret keys between client and server and does the encryption, that part should especially be certified.) Furthermore the 2FA code should also be certified to be good so that it can't be disabled without 2FA with any malicious external code... Anyways I remember hearing as long as the cost of hacking is more expensive than a successful hack things should work out. Hope that's the case here.
-
my transaction from the 0.6.1 client to my unregistered light-wallet account is not showing up.
added contact:
>> wallet_add_contact_account test2 BTS5ihT3L2zY4cYfJ2qvY85m7FAPSjyK191U28qBiTV8cz9qzweqP
OK
I did not use the transfer_public method because it fails:
>> wallet_transfer_to_public_account 0.9 BTS americansilver test2
10 assert_exception: Assert Exception
account_record.valid() && !account_record->is_retracted():
{}
th_a wallet_api.cpp:348 wallet_transfer_to_public_account
{}
th_a common_api_client.cpp:4042 wallet_transfer_to_public_account
{"command":"wallet_transfer_to_public_account"}
th_a cli.cpp:626 execute_command
normal transfer goes through but I don't see it on bitshares.org wallet:
>> transfer 0.9 BTS americansilver test2
TIMESTAMP BLOCK FROM TO AMOUNT MEMO FEE ID
======================================================================================================================================================================
2015-02-26T21:39:57 PENDING americansilver test2 0.90000 BTS 0.10000 BTS 239b3768
It is easier to use: wallet_transfer_to_address .01 BTS americansilver BTS5ihT3L2zY4cYfJ2qvY85m7FAPSjyK191U28qBiTV8cz9qzweqP
Vikram tells me that those commands will be going away and eventually combined into the wallet_transfer command. Also, I believe it did work I was able to add a contact and my transfer did show up in the wallet.. You would have seen your balance update but the Recent Transactions tab does not update as often as it should (guess it is acting like more like "old transactions" then "recent transactions"). Click on the dashboard and you should see it there.
-
Definatelly need a 'security' page or something in this web wallet somewhere explaining what security measures are in place and what risks there are.
-
Can I only access the web wallet from my computer and only on the browser I used to create the wallet? Can I access it from another location or another computer? What does the brain key do?
-
Can I only access the web wallet from my computer and only on the browser I used to create the wallet? Can I access it from another location or another computer? What does the brain key do?
If you load the brain key onto another computer's browser, it can regenerate your keys allowing you to spend from that machine.
-
my transaction from the 0.6.1 client to my unregistered light-wallet account is not showing up.
added contact:
>> wallet_add_contact_account test2 BTS5ihT3L2zY4cYfJ2qvY85m7FAPSjyK191U28qBiTV8cz9qzweqP
OK
I did not use the transfer_public method because it fails:
>> wallet_transfer_to_public_account 0.9 BTS americansilver test2
10 assert_exception: Assert Exception
account_record.valid() && !account_record->is_retracted():
{}
th_a wallet_api.cpp:348 wallet_transfer_to_public_account
{}
th_a common_api_client.cpp:4042 wallet_transfer_to_public_account
{"command":"wallet_transfer_to_public_account"}
th_a cli.cpp:626 execute_command
normal transfer goes through but I don't see it on bitshares.org wallet:
>> transfer 0.9 BTS americansilver test2
TIMESTAMP BLOCK FROM TO AMOUNT MEMO FEE ID
======================================================================================================================================================================
2015-02-26T21:39:57 PENDING americansilver test2 0.90000 BTS 0.10000 BTS 239b3768
It is easier to use: wallet_transfer_to_address .01 BTS americansilver BTS5ihT3L2zY4cYfJ2qvY85m7FAPSjyK191U28qBiTV8cz9qzweqP
Vikram tells me that those commands will be going away and eventually combined into the wallet_transfer command. Also, I believe it did work I was able to add a contact and my transfer did show up in the wallet.. You would have seen your balance update but the Recent Transactions tab does not update as often as it should (guess it is acting like more like "old transactions" then "recent transactions"). Click on the dashboard and you should see it there.
wallet_transfer_to_address works. but my account on the web wallet still does not receive the transaction in question above. Also the reason I used the cli in the first place is because transfer I made by the GUI did not show up, and still has not.
-
Hmmmm....I haven't read the rest of the thread. How do I link my current account into the web wallet?
-
Can I only access the web wallet from my computer and only on the browser I used to create the wallet? Can I access it from another location or another computer? What does the brain key do?
If you load the brain key onto another computer's browser, it can regenerate your keys allowing you to spend from that machine.
How exactly do I regenerate my keys... Can I do it on the same computer but with a different browser?
-
If someone hacked the web server all they could really do is turn it off.
Nope. And here is why.
If an attacker wants to steal the funds of everyone using the local client, they need to hack into each of their personal computers. If the attacker wants to steal the funds of everyone using the web wallet, they need to only hack into the web wallet server. They then replace the javascript served with one that extracts the locally stored brain keys and sends it to the attacker's server. Everyone that opens and unlocks the web wallet next time will have their funds stolen (it makes more sense to wait until the attacker has a critical mass of brain keys before stealing a single satoshi to not tip them off of the compromise).
Does multisig and 2FA solve anything? No, because the multisig is provided by the web wallet server and if that is compromised then the multisig is also compromised and useless.
It gets worse. It doesn't even require compromising the server, although the following attack is on the local scale rather than the global scale like the previous one. If the attacker can get between the victim and his internet connection, the attacker can use SSLstrip (http://www.thoughtcrime.org/software/sslstrip/) to feed their malicious javascript with a high probability of the victim not noticing that anything is wrong. Most people will not notice if the green lock icon is missing before typing their wallet passphrase. Another approach is to provide an HTTPS protected site (green lock icon included) but to a domain that looks like but is not actually wallet.bitshares.org (e.g. wallet.bltshares.org).
Edit: I just realized the SSLstrip hack would not allow the attacker to steal the brain key. If a homograph attack is used the site will not have access to the wallet.bitshares.org local storage. If the HTTPS is stripped, I believe the HTTP version of the site should also not be allowed to access the local storage that was set up under HTTPS. So the worst an attacker can do if they use the SSLstrip hack is to steal your wallet passphrase but not the encrypted master key or the brain key. Now if they were able to obtain the encrypted master key through other means (for example, use the SSLstrip attack to get your Dropbox/Google password and then use that to get your backed up encrypted JSON wallet, assuming you actually stored in a cloud service) then they could use that along with the captured passphrase to get access to the funds. But as you can see this attack is less of a threat. Also, keep in mind the original attack where the wallet.bitshares.org server is hacked still is valid and that is the more dangerous attack (and more worthwhile attack for the attacker) anyway.
Thanks for raising awareness for the security issues concerning a web wallet.
There is an article showing 'how easy it is to hack the brain wallet passwords' -
http://www.reddit.com/r/Bitcoin/comments/1zti1p/17956_hacked_brainwallet_passwords/
Where money is concerned, it is important to address these security issues before every users start placing their coins and the responsibility of safeguarding them onto the hosting site. Could the devs share with us how they could minimise these security risks?
-
+5%
Change the name to Exchange instead of Wallet.
Integrate bitcoin and altcoins gateway
Then let's promote to crypto world as a web decentralize exchange, instead of just web wallet.
Just my +5%
+5% +5%
here here
-
I cannot load registered account when using Dolphin browser on Android OS and i get error:
"Cannot read property 'private_data' of null".
The wallet itself is loaded and i am able to login, but the registered account is not listed.
nevermind, i have used Opera instead.
And that feeling when you can send USD or Gold directly from your brain .. it's amazing.. even if it's just a very small amount, lol :)
-
i can not use it. It crashed with chrome.
-
Hmmmm....I haven't read the rest of the thread. How do I link my current account into the web wallet?
You can't because those might be titan and they weren't deterministic we created from the brain key.
-
Can I only access the web wallet from my computer and only on the browser I used to create the wallet? Can I access it from another location or another computer? What does the brain key do?
If you load the brain key onto another computer's browser, it can regenerate your keys allowing you to spend from that machine.
How exactly do I regenerate my keys... Can I do it on the same computer but with a different browser?
Yes... Also a different password should work but to be sure you should use your browser's incognito mode or different browser.
-
Hmmmm....I haven't read the rest of the thread. How do I link my current account into the web wallet?
You can't because those might be titan and they weren't deterministic we created from the brain key.
Hmm ... IIRC this is not completely correct ... the bitshares client also uses deterministic keys .. also has a master key .. but that one is chosen randomly .. and was not generated from a brain key ..
-
Great work! +5%
-
What are the thoughts/recommendations/advise when using the webwallet on a mobile devise?
Sent from my iPad using Tapatalk
I have looked at this...We have a long ways to go, it did not do well on my phone. I hope to get some help on layout fixes and I'll optimize it to make it perform. I'm only thinking about security right now.
-
Hmmmm....I haven't read the rest of the thread. How do I link my current account into the web wallet?
You can't because those might be titan and they weren't deterministic we created from the brain key.
Hmm ... IIRC this is not completely correct ... the bitshares client also uses deterministic keys .. also has a master key .. but that one is chosen randomly .. and was not generated from a brain key ..
Yes, thanks for clarifying... I'm going for light-wallet compatibility and a version release scheme to test it right now.
-
What are the thoughts/recommendations/advise when using the webwallet on a mobile devise?
I have looked at this...We have a long ways to go, it did not do well on my phone. I hope to get some help on layout fixes and I'll optimize it to make it perform. I'm only thinking about security right now.
Security security security, exactly. Thank you @jcalfee1 :)
-
Hmmmm....I haven't read the rest of the thread. How do I link my current account into the web wallet?
You can't because those might be titan and they weren't deterministic we created from the brain key.
Hmm ... IIRC this is not completely correct ... the bitshares client also uses deterministic keys .. also has a master key .. but that one is chosen randomly .. and was not generated from a brain key ..
Yes, thanks for clarifying... I'm going for light-wallet compatibility and a version release scheme to test it right now.
BTW: The brain key in the bitshares client is used to create the master key. I managed to get it very close to working the same way on the web, however, I consulted with the team and the way to do is to have light wallet brain-seed compatibility. So, I'm going for light-wallet compatibility. I just need a version release scheme so you can help me test it :) without messing with production.
-
Why not upgrade0.62
-
I've tried to log in the web wallet with what I remembered as the password, but it's not working.
Is there any recovery mechanism as I continue to try?
-
This BitShares web wallet has the same trust/security model as blockchain.info. So if you trust blockchain.info you can (in theory) trust this web wallet (although I cannot vouch for the security practices of whoever is managing the wallet.bitshares.org host compared to the blockchain.info servers). Now call me paranoid, but I personally do not trust blockchain.info with my BTC for the reasons I already stated earlier in this thread, so you can imagine I would feel the same way with this BitShares web wallet.
My blockchain wallet has an email confirmation to login and one to withdraw funds. My bitshare web wallet dose not.
Also I notice the bitshare web wallet don't have any account backup.
-
I've tried to log in the web wallet with what I remembered as the password, but it's not working.
Is there any recovery mechanism as I continue to try?
I tried login with my password and it went to create a new account. I entered my saved brain key for the new account and it opened my existing account.
-
I've tried to log in the web wallet with what I remembered as the password, but it's not working.
Is there any recovery mechanism as I continue to try?
I tried login with my password and it went to create a new account. I entered my saved brain key for the new account and it opened my existing account.
Great thanks! I tried and it worked! Awesome. I guess it would be nice if there was a recover link on the first Log in page... but happy I'm able to access now.
-
it seems some complicated for now.
Maybe we can learn NXT web wallet : secureae.com
-
it seems some complicated for now.
Maybe we can learn NXT web wallet : secureae.com
NXT uses the password to derive a brainkey .. this is a security issue and different in this wallet for that reason
-
it seems some complicated for now.
Maybe we can learn NXT web wallet : secureae.com
NXT uses the password to derive a brainkey .. this is a security issue and different in this wallet for that reason
How is this a any different than a single master key to recover all accounts?
-
The masterkey is random .. something humans cannot generate ..
-
The masterkey is random .. something humans cannot generate ..
But you have to write it down, which leaves an attack vector open.
-
I googled it, but can't find any def for "brain key". Would someone explain what that is or point me to a definition?
Thanks!
-
The masterkey is random .. something humans cannot generate ..
But you have to write it down, which leaves an attack vector open.
That's a different kind of attack. The attacker would have to attack that specific victim (by breaking into his home and stealing the paper he wrote the brain key down on, or hacking into his personal computer).
However, if the brain key is chosen by the user rather than randomly generated by the computer, then the attacker can just go through a rainbow table and even just brute force simple password combinations and eventually find some victim (not a particular one just any victim who chose an easy password). We can guarantee there will be users who choose easy passwords (the password doesn't even need to be that simple to brute force) and these users will be hacked if the wallet master key is solely derived from a password the user chooses.
-
I googled it, but can't find any def for "brain key". Would someone explain what that is or point me to a definition?
A brain key is basically a passphrase that deterministically generates the wallet master private key. The wallet master private key deterministically generates the owner private keys for all of the accounts created in the wallet. So if you know the brain key of a wallet, you can easily get access to all of the accounts of that wallet.
When creating a new wallet it is possible to specify a custom brain key (that is advanced usage), but typically a random one is generated by the computer when creating a new BitShares wallet.
It is called a brain key because if you are able to memorize this key (or alternatively create a wallet with a slightly more memorable brain key passphrase than a randomly generated one), you can gain access to all of your funds and accounts at anytime solely from the knowledge stored in your brain. And if you do not store this key or any other relevant keys derived from this key anywhere else, then you maintain exclusive control over your funds in your head and the only way anyone can get access to it (assuming the passphrase is actually good enough to not be brute forced) is if you choose to give up the brain key to them (excluding rubber-hose cryptanalysis (http://en.wikipedia.org/wiki/Rubber-hose_cryptanalysis) of course ;)).
-
+5% Kewl!
Thanks arhag!
-
Hi,
Is there any way to backup my online wallet?
Thanks
Michael
-
Is there any way to backup my online wallet?
1) Click on the drop down menu labeled with your account name near the top right corner and click the item labeled "Advanced".
2) Click on the "Wallet" tab.
3) Type in your wallet password in the text box next to the "Brain-Key" label.
4) If you type in the password properly, it should display your brain key in the text box.
5) Copy that brain key somewhere safe. If anyone gets access to those string of words, they will get access to all of your accounts and funds in that web wallet.
6) You can later use that brain key to recover your wallet on another computer/OS/browser (or on the same browser if you were to clear your browser local storage).
-
Is there any way to backup my online wallet?
1) Click on the drop down menu labeled with your account name near the top right corner and click the item labeled "Advanced".
2) Click on the "Wallet" tab.
3) Type in your wallet password in the text box next to the "Brain-Key" label.
4) If you type in the password properly, it should display your brain key in the text box.
5) Copy that brain key somewhere safe. If anyone gets access to those string of words, they will get access to all of your accounts and funds in that web wallet.
6) You can later use that brain key to recover your wallet on another computer/OS/browser (or on the same browser if you were to clear your browser local storage).
Thank you
-
Here's a tutorial, it is written in Chinese, you can use Chrome to translate.
http://www.bts.hk/bts-web-wallet.html
-
Wow...thank you everyone. What do you think about adding light-wallet compatible accounts? I am traveling, but I did manage to get a test published. I do not know if it will work. wallet.bitshares.org/pre_release ... Same brain seed same account name but any password.. It should generate the same private key for the account.
-
Wow...thank you everyone. What do you think about adding light-wallet compatible accounts? I am traveling, but I did manage to get a test published. I do not know if it will work. wallet.bitshares.org/pre_release ... Same brain seed same account name but any password.. It should generate the same private key for the account.
Would be amazing, if it will be possible to create lightwallet account without a faucet.
-
Wow...thank you everyone. What do you think about adding light-wallet compatible accounts? I am traveling, but I did manage to get a test published. I do not know if it will work. wallet.bitshares.org/pre_release ... Same brain seed same account name but any password.. It should generate the same private key for the account.
Would be amazing, if it will be possible to create lightwallet account without a faucet.
Dan Notestein just reported that he was able to create a light wallet account in the pre_release version.
-
Wow...thank you everyone. What do you think about adding light-wallet compatible accounts? I am traveling, but I did manage to get a test published. I do not know if it will work. wallet.bitshares.org/pre_release ... Same brain seed same account name but any password.. It should generate the same private key for the account.
Would be amazing, if it will be possible to create lightwallet account without a faucet.
Dan Notestein just reported that he was able to create a light wallet account in the pre_release version. It was a bit confusing to him though, he did not realize he had to add the account after creating the wallet.
I'm getting "Could not claim registered account ******. Is your recovery password correct?" message in the lightwallet.
-
... I guess it would be nice if there was a recover link on the first Log in page...
Change Wallet intro to: 1) Open 2) Create, or 3) Recover https://github.com/BitShares/BitShares-JS/issues/66
-
1. I have sent to my wallet account 101 BTS but the recent transactions tab remains blanc without mentioning any transaction
2.I can't view the standby delegates (mozilla firefox on linux)
3.the robo avatar I see on the web wallet is different then that I saw when I transfered the funds from my desktop wallet for confirmation. (probably nothing to do with the web wallet)
2. can't view the standby delegates: https://github.com/BitShares/web_wallet/issues/645
3. robo avatars are being replaced in the next release.
-
Thank you so much for developers.
When does your web wallet can have the function of market?
Really looking forward to!
Also, now put all money in web wallet safe?
-
Thank you so much for developers.
When does your web wallet can have the function of market?
Really looking forward to!
Also, now put all money in web wallet safe?
Not sure what youre looking at, it already does have market functionality.
No dont do that.
Edit: unless it just shows the market but doesnt let you trade. I havent actually used it.
-
Can the web wallet integrate the entrance of some gateway or bridge? Then people can loggin to the web wallet and directly deposit fiat and receive bitAsset. It just like the deposit directly from fiat to bitasset. It will be much smooth for people to come in.
-
Can the web wallet integrate the entrance of some gateway or bridge? Then people can loggin to the web wallet and directly deposit fiat and receive bitAsset. It just like the deposit directly from fiat to bitasset. It will be much smooth for people to come in.
As soon as Bitshares implements a fiat onramp, the banks and governments will be all over this, NOT good. Just use the centralized exchanges to send your fiat to bitcoin then xfer to bitshares.
-
Can the web wallet integrate the entrance of some gateway or bridge? Then people can loggin to the web wallet and directly deposit fiat and receive bitAsset. It just like the deposit directly from fiat to bitasset. It will be much smooth for people to come in.
As soon as Bitshares implements a fiat onramp, the banks and governments will be all over this, NOT good. Just use the centralized exchanges to send your fiat to bitcoin then xfer to bitshares.
You may be the only person on the forum that believes that. We are dead if we don't get fiat on/off ramps.
-
Can the web wallet integrate the entrance of some gateway or bridge? Then people can loggin to the web wallet and directly deposit fiat and receive bitAsset. It just like the deposit directly from fiat to bitasset. It will be much smooth for people to come in.
As soon as Bitshares implements a fiat onramp, the banks and governments will be all over this, NOT good. Just use the centralized exchanges to send your fiat to bitcoin then xfer to bitshares.
You may be the only person on the forum that believes that. We are dead if we don't get fiat on/off ramps.
Legal compliance is still a concern. We need to get the fiat on/off ramps and clear any legal requirements, where applicable.
-
Can the web wallet integrate the entrance of some gateway or bridge? Then people can loggin to the web wallet and directly deposit fiat and receive bitAsset. It just like the deposit directly from fiat to bitasset. It will be much smooth for people to come in.
As soon as Bitshares implements a fiat onramp, the banks and governments will be all over this, NOT good. Just use the centralized exchanges to send your fiat to bitcoin then xfer to bitshares.
You may be the only person on the forum that believes that. We are dead if we don't get fiat on/off ramps.
I think @bytemaster agrees with me:
http://bytemaster.bitshares.org/article/2015/01/22/Use-Gold-and-Silver-with-BitShares-to-bypass-Fiat-Regulations/
Today I would like to present the case for abandoning fiat all together and adopting a truly free market currency: gold, silver, and other metals.
-
Can the web wallet integrate the entrance of some gateway or bridge? Then people can loggin to the web wallet and directly deposit fiat and receive bitAsset. It just like the deposit directly from fiat to bitasset. It will be much smooth for people to come in.
As soon as Bitshares implements a fiat onramp, the banks and governments will be all over this, NOT good. Just use the centralized exchanges to send your fiat to bitcoin then xfer to bitshares.
You may be the only person on the forum that believes that. We are dead if we don't get fiat on/off ramps.
Legal compliance is still a concern. We need to get the fiat on/off ramps and clear any legal requirements, where applicable.
I think @bytemaster agrees with me:
http://bytemaster.bitshares.org/article/2015/01/22/Use-Gold-and-Silver-with-BitShares-to-bypass-Fiat-Regulations/
Today I would like to present the case for abandoning fiat all together and adopting a truly free market currency: gold, silver, and other metals.
-
something wrong with the web wallet? my test account seems gone, another user reported a blank account too: http://twitter.com/toluselu/status/575178810221461504
-
something wrong with the web wallet? my test account seems gone, another user reported a blank account too: http://twitter.com/toluselu/status/575178810221461504
There have been no upgrades. I was able to see my account and I'm still able to re-create the wallet and the account appears there too. EDIT: Any variation in the brain-key can cause this.
I'll PM you and we can figure out what is going on...
-
something wrong with the web wallet? my test account seems gone, another user reported a blank account too: http://twitter.com/toluselu/status/575178810221461504
There have been no upgrades. I was able to see my account and I'm still able to re-create the wallet and the account appears there too. EDIT: Any variation in the brain-key can cause this.
I'll PM you and we can figure out what is going on...
not at home so I can't test it right away, but that's what I told them on twitter https://twitter.com/btsfav/status/575228654436945920
-
I think its extremely important that once we have market functionality in the web wallet that we integrate bridges into the wallet as well. If bridges are integrated into the web wallet then we have a competitive advantage over other exchanges. Users can send bitcoin to their wallet and have their account can be credited with a desired bitassets. I see the user experience unfolding as follows:
1) go to wallet.bitshares.org
2) create a wallet and register name
3) set deposit preference to bitusd / add bitcoin withdrawal address
4) click deposit button which generates a bitcoin address for user to deposit to
5) exchange fiat for bitcoin instantly with circle or coinbase
6) send bitcoin to deposit address
7) receive bitusd in 10 minutes
8) trade bitusd for other bitassets
9) withraw specified amount of bitusd to bitcoin withdrawal address
10) exchange bitcoin to fiat
-
I have updated "pre_release" ... We have added a lot of your suggestions. Re-post if I missed something. A "key" change in this pre release is a new algorithm: Draft standard for BitShares Wallet Key Generation. This standardizes how account keys are create for your accounts in the wallet. The idea is to maximize compatibility between all BitShares Wallets.
https://wallet.bitshares.org/pre_release
The plan is to move the pre_release branch to the main wallet Saturday. I'll be around on the weekend to monitor things. I have submitted an entry about the online wallet to The NullStreet Journal for Monday's issue..
** Tomorrow, Friday, I'll make a few performance and refresh updates (mostly timing).. **
EDIT: I will include support for the accounts registered prior to this release.
I will look forward to your feedback (kind words).
-
The guest account feature is great ;D
But I still cant share a guest url - this redirects me back to the login screen for example: https://wallet.bitshares.org/pre_release/#/market/BitUSD:BTS/Guest_4227b502c7/buy
-
Just in-case, in the near future, please register with an account name that you are not particularly attached too; stick with this until we see that your recover key can show the same account in two different wallets and we give it all a good thumbs up..
https://wallet.bitshares.org/legacy_accounts
Damn, I used a name I really really like so work extra hard on this.
-
Can the web wallet integrate the entrance of some gateway or bridge? Then people can loggin to the web wallet and directly deposit fiat and receive bitAsset. It just like the deposit directly from fiat to bitasset. It will be much smooth for people to come in.
As soon as Bitshares implements a fiat onramp, the banks and governments will be all over this, NOT good. Just use the centralized exchanges to send your fiat to bitcoin then xfer to bitshares.
You may be the only person on the forum that believes that. We are dead if we don't get fiat on/off ramps.
Legal compliance is still a concern. We need to get the fiat on/off ramps and clear any legal requirements, where applicable.
What are the legal compliances in Africa and Argentjna .. I think we may focus to much on the U.S.
Sent from my iPhone using Tapatalk
-
Can we have the open shorts orders and margin call orders show up in the web wallet like they do in the regular wallet? I know we can't actually use the exchange in the web wallet yet, but just having a more reliable source (bitsharesblocks.com often seems to be out-of-date or incorrect in the order books it displays for some reason) for short information through an easily accessible website is nice.
I also agree along the lines of what speedy is suggesting in that it would be nice to have one main read-only guest account (perhaps with the dashboard disabled and account pages made read-only so that no one could transfer funds to and from the account) which could have permalinks to the various views (like the exchange markets, delegate pages, account pages, etc.). By the way, I really appreciate being able to go into the console on a guest account (it is nice to quickly be able to load a web page and run blockchain_* accounts without even needing to type in a password).
-
Damn, I used a name I really really like so work extra hard on this.
LOL...Damn is a lot kinder than the f word...
OK, good to know. I pick up those accounts registered before this release.
-
Can the web wallet integrate the entrance of some gateway or bridge? Then people can loggin to the web wallet and directly deposit fiat and receive bitAsset. It just like the deposit directly from fiat to bitasset. It will be much smooth for people to come in.
As soon as Bitshares implements a fiat onramp, the banks and governments will be all over this, NOT good. Just use the centralized exchanges to send your fiat to bitcoin then xfer to bitshares.
You may be the only person on the forum that believes that. We are dead if we don't get fiat on/off ramps.
Legal compliance is still a concern. We need to get the fiat on/off ramps and clear any legal requirements, where applicable.
I think @bytemaster agrees with me:
http://bytemaster.bitshares.org/article/2015/01/22/Use-Gold-and-Silver-with-BitShares-to-bypass-Fiat-Regulations/
Today I would like to present the case for abandoning fiat all together and adopting a truly free market currency: gold, silver, and other metals.
Good luck with that. If nobody launches Fiat <---> BitAsset ramps that address legal requirements where the ramp is implemented, then there will be no improvements in adoption. None.
-
Can we have the open shorts orders and margin call orders show up in the web wallet like they do in the regular wallet? I know we can't actually use the exchange in the web wallet yet, but just having a more reliable source (bitsharesblocks.com often seems to be out-of-date or incorrect in the order books it displays for some reason) for short information through an easily accessible website is nice.
I also agree along the lines of what speedy is suggesting in that it would be nice to have one main read-only guest account (perhaps with the dashboard disabled and account pages made read-only so that no one could transfer funds to and from the account) which could have permalinks to the various views (like the exchange markets, delegate pages, account pages, etc.). By the way, I really appreciate being able to go into the console on a guest account (it is nice to quickly be able to load a web page and run blockchain_* accounts without even needing to type in a password).
CORRECTION: Open shorts / margins are only shown for one's own accounts. This will be added when trading is added.
I thinking it might be good to drop the login and guest. We should have a new landing page. The Tollbar could then say "login" instead of "lock" then toggle (to lock) after a login.
Bytemaster's advice was to get a good VPS.. This is serving us well... We have SSD storage which is better for this software. This also means I can cluster and not have to worry as much about caching..
-
LOVE the guest account. I haven't checked in with the web wallet in a bit. Great to see the progress you've been making.
+5%
-
I thinking it might be good to drop the login and guest. We should have a new landing page. The Tollbar could then say "login" instead of "lock" then toggle (to lock) after a login.
Oh, I like that. And the landing page could be the exchange instead of the dashboard (which wouldn't exist when not logged in). Although I don't see the reason for using "lock" in that case instead of "Log out" to be symmetric with the "Login". The right hand corner of the toolbar could instead be a drop down menu. When a wallet exists on the computer and the wallet is not already logged in, the drop down would by default show "Login" and clicking on the drop down would reveal the other two options: "Create new wallet" and "Recover wallet". When a wallet does not exist on the computer, the drop down would by default show "Create wallet" and clicking on the drop down would reveal the other option: "Recover wallet". When already logged into the only wallet on the computer, the drop down would by default show "Log out" and the drop down would actually be disabled since no other option would be available. When already logged into one of multiple wallets on the computer, the drop down would by default show "Log out" and clicking on the drop down would reveal the other option: "Switch wallet". Clicking on "Switch wallet" would log out of the current wallet and take the user to the same page that clicking on "Login" takes them: a page that allows the user to type in the wallet password and log in, or click a button to return to the logged out landing page. Clicking on "Log out" would take the user to the logged out landing page.
-
Can we have the open shorts orders and margin call orders show up in the web wallet like they do in the regular wallet? I know we can't actually use the exchange in the web wallet yet, but just having a more reliable source (bitsharesblocks.com often seems to be out-of-date or incorrect in the order books it displays for some reason) for short information through an easily accessible website is nice.
I also agree along the lines of what speedy is suggesting in that it would be nice to have one main read-only guest account (perhaps with the dashboard disabled and account pages made read-only so that no one could transfer funds to and from the account) which could have permalinks to the various views (like the exchange markets, delegate pages, account pages, etc.). By the way, I really appreciate being able to go into the console on a guest account (it is nice to quickly be able to load a web page and run blockchain_* accounts without even needing to type in a password).
There was a bug in my back-end code that made the asset update cycle get stuck, I fixed it yesterday so bitsharesblocks should be more reliable for assets now.
-
Damn, I used a name I really really like so work extra hard on this.
LOL...Damn is a lot kinder than the f word...
OK, good to know. I pick up those accounts registered before this release.
Me too :-X
-
it seems that I cannot dump my private key in online wallet
>> wallet_dump_private_key BTS7G72UfgQ52pR9XtkBND9fQExJ1RSMCrJd2NcUWFnvzKdPJtsWb
null
>> wallet_dump_account_private_key myapple
"Not Implemented [wallet_dump_account_private_key]"
-
it seems that I cannot dump my private key in online wallet
>> wallet_dump_private_key BTS7G72UfgQ52pR9XtkBND9fQExJ1RSMCrJd2NcUWFnvzKdPJtsWb
null
>> wallet_dump_account_private_key myapple
"Not Implemented [wallet_dump_account_private_key]"
Use "wallet_dump_private_key account_name" instead.. We will filter unimplemented rpc calls from the console's help, that probably would have help you in this case.
-
how can i recover my wallet with the brain key？
I have delete the webwallet from my computer, and want to test how to recover before i really rely on it.
-
Wahoo now everyone can share this url:
https://wallet.bitshares.org/#/market/BitBTC:BitUSD/Guest/buy
Which is awesome because we can easily show that BitShares is the safest place to trade bitcoin. Nice one James!
Now if only we could increase the volume on that market...
-
how can i recover my wallet with the brain key？
I have delete the webwallet from my computer, and want to test how to recover before i really rely on it.
Goto to the website and refresh... Use Recover Wallet
-
jcalfee Here is more low-hanging fruit: Can you make the BitBTC:BitUSD market one of the featured markets? It doesnt matter if it has low-volume right now, people need to know about it before they will use it.
Edit: it looks like a one-liner:
$scope.featured_markets.push "BitUSD:#{main_asset.symbol}"
$scope.featured_markets.push "BitCNY:#{main_asset.symbol}"
...
$scope.featured_markets.push "BitBTC:BitUSD"
Edit 2: There is a huge market for speculating on BTC on a blockchain with the cost basis in dollars. Our competitors are thinking about how to write a contract for it: https://forum.ethereum.org/discussion/1435/anyone-interesting-in-options-futures-cfd-market-contract We already have this market setup but for some bizarre reason we are not advertising it. Please someone tell me why.
Edit 3: I checked and that bit of code does work.
-
Hey.
Yesterday when I tried to send BitUSD via this wallet I could not get it to work. Hasn't tried today due to the Network problems today,
When I pressed the Send button I got a confirmation window and when I clicked the confirm button in that window it disappeared and nothing happened at all. Left it like that for 5 minutes or so and tested in both Chrome and Ff.
Edit: Finally found the problem. The memo from https://metaexchange.info/ was to long. There should be an error showed on the page if this happens. I just captured it in the dev console.
-
Edit 2: There is a huge market for speculating on BTC on a blockchain with the cost basis in dollars. Our competitors are thinking about how to write a contract for it: https://forum.ethereum.org/discussion/1435/anyone-interesting-in-options-futures-cfd-market-contract We already have this market setup but for some bizarre reason we are not advertising it. Please someone tell me why.
In 140 characters or less, how can we advertise that? A photo would be nice too, but that would shorten the char count I think.
Either way, let me know so that we can assist!
Thanx in advance :)
-ken
-
In 140 characters or less, how can we advertise that? A photo would be nice too, but that would shorten the char count I think.
Either way, let me know so that we can assist!
Thanx in advance :)
-ken
We need market making to be done on the internal BitBTC:BitUSD exchange first. Im willing to do it with a bot that I wrote but theres probably no point until it the market gets advertised on the exchange page. Fortunately svk has put in a fix for that and its coming soon.
-
Someone said it earlier already. On my android the screen size of the wallet cannot be changed. It is too big. Yesterday I linked to the wallet only. That*s good, because the people can immediately see something nice.
-
How about affiliate tracking?
-
We did say I would have some market features before I pack up and move (through the weekend). So, here it is: https://wallet.bitshares.org/pre_release ... This is for testers only, but all transactions are real and permanent! It is definitely a pre-release. I'm sure there will be plenty for me to do next week to ready it for a real release.
So, you may try out small market orders in the Buy Sell tabs. Be cautious that you can cancel the orders at will, that is a different kind of transaction on the back-end. Consider that an order can be partially filled and that will effect the data in the request to cancel the order....
In my testing I see this: GUI updates are a bit slow and in a UIA trade did not consistently update. On my testnet, a very small buy order did not cancel due to "insufficient fees" .. This may be related to a light wallet fee calculation, perhaps rounding.
Transfers are to be questioned as well, I moved from regular JavaScript ints to a Long objects on all transactions to achieve higher precision.
With all that said: I can buy and sell market and user-issued assets. Also, I am able to transfer/receive all types of assets as it worked before.
-
BTW: should there be a demand for the DevShares market place, we could get enough price feeds going on DevShares. This would be ideal for market changes like this...
-
BTW: should there be a demand for the DevShares market place, we could get enough price feeds going on DevShares. This would be ideal for market changes like this...
The transaction details show UNKNOWN for me .. but the $50c I bought with BTS have arrived :)
Great work +5%
-
I've started to use the web wallet more and more for my daily shuffling of funds. It truly is awesome.
-
We did say I would have some market features before I pack up and move (through the weekend). So, here it is: https://wallet.bitshares.org/pre_release ... This is for testers only, but all transactions are real and permanent! It is definitely a pre-release. I'm sure there will be plenty for me to do next week to ready it for a real release.
Tried open my existing wallet and I'm login as Guest. Tried 'Recover Wallet' with my 'Brain Key' and was still login as guest. Is my old BTS account still out there with my tiny balance?
-
Some folks on Reddit are frustrated it's not mobile-compatible.
http://www.reddit.com/r/BitShares/comments/319m73/really_want_to_use_walletbitsharesorg_on_my/
Could the CSS be adjusted so it formats better?
-
Moonstone crowdsale starts in a few days and is very very mobile friendly :)
-
Moonstone crowdsale starts in a few days and is very very mobile friendly :)
I wish you would all stop hyping Moonstone so much, yes the promo video looks nice but what we really know about it is next to nothing. Do keep in mind that Bitsapphire, like I3, have a habit of over-promising, so it may not be the silver bullet that will fire Bitshares to the moon and turn water into wine...
-
Some folks on Reddit are frustrated it's not mobile-compatible.
http://www.reddit.com/r/BitShares/comments/319m73/really_want_to_use_walletbitsharesorg_on_my/
Could the CSS be adjusted so it formats better?
sure i could help on that task … @james
-
I wish you would all stop hyping Moonstone so much, yes the promo video looks nice but what we really know about it is next to nothing. Do keep in mind that Bitsapphire, like I3, have a habit of over-promising, so it may not be the silver bullet that will fire Bitshares to the moon and turn water into wine...
+5% The only silver bullet that I have any hope for is the web-based wallet. Once its really polished and shows some trading volume, it should attract lots more users.
-
What was the 'silver bullet' in case of bitcoin? There was none. It took years of hard work, polishing the clients, services and message. Gradually making things usable.
There is no 'silver bullet': not any single wallet, not "1.0", not one marketing push.
I recommend this presentation from Mike Hearn aspecially the bit about Google maps:
https://youtu.be/2MtUKr05Y3I
-
@jcalfee .. What do I need to do to let the web_wallet interface with the RPC of the BitShares client .. where do I have to put the rpc_user and password? Can't find it :(
-
the silver bullet that will fire Bitshares to the moon and turn water into wine...
Jesus said it best: https://youtu.be/lgKIk7ujxvw
-
@jcalfee1 - Any chance we could get the BitShares logo with the "b" in it on this page?
https://wallet.bitshares.org
ie, this one:
http://bitshares-munich.de/img/_masters/BitShares-logo-transparent.png
-
@jcalfee1 - Any chance we could get the BitShares logo with the "b" in it on this page?
https://wallet.bitshares.org
ie, this one:
http://bitshares-munich.de/img/_masters/BitShares-logo-transparent.png
I have let valentine and svk know...
-
@jcalfee .. What do I need to do to let the web_wallet interface with the RPC of the BitShares client .. where do I have to put the rpc_user and password? Can't find it :(
Please PM me if your still interested.
-
Some folks on Reddit are frustrated it's not mobile-compatible.
http://www.reddit.com/r/BitShares/comments/319m73/really_want_to_use_walletbitsharesorg_on_my/
Could the CSS be adjusted so it formats better?
sure i could help on that task … @james
Great, svk has shown support for this too. I can offer support in the back-end implementation/debugging on android (that is all I have around the house at the moment).
-
Hi J, in case it is possible to zoom the start screen on android, where it says *create account*, i would be very happy if you could hack that. At the moment i cannot show anyone the wallet. Thx in advance and have a good day, m.
-
Hi,
I have opened in the past an account in the web wallet. When I tried to login yesterday, I only had the option to create or recover a wallet. I tried to recover the wallet with the brain wallet passphrase and i am not sure if i have done something wrong but the only account appearing is "guest"
When I type the password today and I put the same password I had before and the same from yesterday (maybe new created wallet) I again see only "guest"..
Anyway. Is there something I can do to recover my original wallet with the accounts I have created?
-
Question: is there a way to select my own Recovery Key rather than the random one thats automatically generated?
I'm sure there is, i just dont see it.
Thanks
M
-
Question: is there a way to select my own Recovery Key rather than the random one thats automatically generated?
I'm sure there is, i just dont see it.
Thanks
M
it's only possible with the console version of the client:
wallet_create <wallet_name> <new_passphrase> [brain_key] [new_passphrase_verify]
but I would not recommend using a brain_key unless you REALLY REALLY REALLY know what you are doing!!
-
Hi,
I have opened in the past an account in the web wallet. When I tried to login yesterday, I only had the option to create or recover a wallet. I tried to recover the wallet with the brain wallet passphrase and i am not sure if i have done something wrong but the only account appearing is "guest"
When I type the password today and I put the same password I had before and the same from yesterday (maybe new created wallet) I again see only "guest"..
Anyway. Is there something I can do to recover my original wallet with the accounts I have created?
I posted this same problem/question over a month ago. Hope they get it fixed.
-
Hope they get it fixed.
I'm sure jcalfee1 is working on it..
I for example use my tablet for everything, more than my laptop these days. At the Meetups I'd like to be able to sign people up, but I can't. Everybody is expected to bring a laptop if they want to sign up.
On my tablet, I can't see the entire screen on the web wallet, the bottom is cut off. No scrolling down is allowed.
I can see the create wallet button though, I tap it, move around the generate the recovery key and then that's as far as it will let me go.
For that reason, just for me, the web wallet is totally unusable right now. If we could get past the first screen, I'm sure it's great.
-
btslan transfer BTS to exchange.btsbots from web wallet,
but I can't get the transaction from my wallet.
I have change active key, and I only import the latest active key,
maybe it's the problem.
when I use the old wallet, which have all active key and owner key, I can find the transaction.
the transactin ID is 60aca2b7
please fixed this, thanks.
-
I think the web wallet should be able to handle "update active key" right?
btslan transfer BTS to exchange.btsbots from web wallet,
but I can't get the transaction from my wallet.
I have change active key, and I only import the latest active key,
maybe it's the problem.
when I use the old wallet, which have all active key and owner key, I can find the transaction.
the transactin ID is 60aca2b7
please fixed this, thanks.
you need that active key that was the latest active key at the time of the transfer ..
it can be easily fixed by either also importing all old active keys or by sending all your funds back to your self (i.e. with the new active key)
Also, the web wallet (wallet.bitshares.org) is not able to handle "update_active_key" .. so you should not change the active key there .. yet
-
I think the web wallet should be able to handle "update active key" right?
@jcalfee
Would you please take a look if this is manageable?
-
What was the 'silver bullet' in case of bitcoin? There was none. It took years of hard work, polishing the clients, services and message. Gradually making things usable.
There is no 'silver bullet': not any single wallet, not "1.0", not one marketing push.
I recommend this presentation from Mike Hearn aspecially the bit about Google maps:
https://youtu.be/2MtUKr05Y3I
Well said.. +5% but the truth is.. this is what most people who saw that thought:
(https://i.imgflip.com/cm1y1.jpg)
-
Hi,
I have opened in the past an account in the web wallet. When I tried to login yesterday, I only had the option to create or recover a wallet. I tried to recover the wallet with the brain wallet passphrase and i am not sure if i have done something wrong but the only account appearing is "guest"
When I type the password today and I put the same password I had before and the same from yesterday (maybe new created wallet) I again see only "guest"..
Anyway. Is there something I can do to recover my original wallet with the accounts I have created?
Has this been fixed yet? I can access my webwallet from google chrome, which is the browser I created it with. When I try to use internet explorer and regenerate the wallet with my brain key, I only see "guest" when I add a password and open my wallet.
-
Here it takes less than 30 secs for the browser to recover my accounts ..
I dont think you should use internet explorer for money related tasks ..
You have the same trouble with chrome and firefox?
-
Hi,
I have opened in the past an account in the web wallet. When I tried to login yesterday, I only had the option to create or recover a wallet. I tried to recover the wallet with the brain wallet passphrase and i am not sure if i have done something wrong but the only account appearing is "guest"
When I type the password today and I put the same password I had before and the same from yesterday (maybe new created wallet) I again see only "guest"..
Anyway. Is there something I can do to recover my original wallet with the accounts I have created?
Has this been fixed yet? I can access my webwallet from google chrome, which is the browser I created it with. When I try to use internet explorer and regenerate the wallet with my brain key, I only see "guest" when I add a password and open my wallet.
For me it hasn't been fixed..I am using chrome which is the one I have created it. 2 days ago I have re tried to recover my wallet. I put my brain key and when i put my password i got a message that "this password already exists" and the wallet didn't open...
I don't have any BTS there. I only expect some BTS to receive from the BTS Game that hk team has ceated from HLP which I am not even sure if they will deliver the promised BTS anyway. If I had bitassets and BTS in there and this happened I would be very annoyed so I would say that if the web wallet has bugs that may result losing funds it should be avoided for now and we shouldn't advise new members to use it when they complain about the slowness of the GUI wallet.
Does anyone else resolved their issues? Is there something else I can do to recover my accounts?
-
I only had a couple of bucks in BTS to exerment with in the wallet. I'm not worried about that. What I'm worried about is recovering my username. I liked it and want to be able to use it again.
-
On a seperate note, would I be correct in assuming that shorting BitUSD and other MPA's is not currently possible on the Web Wallet interface?
-
On a seperate note, would I be correct in assuming that shorting BitUSD and other MPA's is not currently possible on the Web Wallet interface?
Correct
-
Lost one account after laptop migration but cannot recover account.
>> wallet_recover_accounts clayop-web 10
"Not Implemented [wallet_recover_accounts]"
Is there any other way to recover account?
-
Will our unrecover account servive the Migrating to BitShares 2.0?
-
Lost one account after laptop migration but cannot recover account.
>> wallet_recover_accounts clayop-web 10
"Not Implemented [wallet_recover_accounts]"
Is there any other way to recover account?
http://wiki.bitshares.org/index.php/RecoveringFunds#Recovering_lost_account
>> wallet_recover_accounts 10
-
Lost one account after laptop migration but cannot recover account.
>> wallet_recover_accounts clayop-web 10
"Not Implemented [wallet_recover_accounts]"
Is there any other way to recover account?
http://wiki.bitshares.org/index.php/RecoveringFunds#Recovering_lost_account
>> wallet_recover_accounts 10
Same output :-[
-
Same output :-[
Have you used a number > 10 .. maybe 100 or so?
Do you use the exact same "wallet" as you used when you created your account?
maybe also try a second optional parameter like 2000
-
Question: is there a way to select my own Recovery Key rather than the random one thats automatically generated?
I'm sure there is, i just dont see it.
Thanks
M
it's only possible with the console version of the client:
wallet_create <wallet_name> <new_passphrase> [brain_key] [new_passphrase_verify]
but I would not recommend using a brain_key unless you REALLY REALLY REALLY know what you are doing!!
Just use "Recover Wallet" and type anything you want.. yes, you really should limit funds if you start doing that or better yet run some numbers and share. I use simple keys for my test accounts which will be transferable to a stronger key later in Graphene. At least the wallet gives us a hint what the a proper strength should be (we did some math and compared it to the industry standard)... Of course, keep in mind, this is a server hosting js files that creates the key. We really have to do better than this; we just need that key created in a format where the source code can be frozen or ran in cold storage. So, you can at least see what a retirement strength key should look like..
-
Same output :-[
Have you used a number > 10 .. maybe 100 or so?
Do you use the exact same "wallet" as you used when you created your account?
maybe also try a second optional parameter like 2000
The hosted wallet does not recover numbered account in the same way as the desktop wallet. Even though the hosted wallet uses a sequence it is not the same hash. This is really only because the c++ code is amazingly complex in the way that was done (well easy to do in c++ but not so easy to re-create or debug). I got close but never got it right. We finally just moved on based on good advice and the idea that this was all gonig to be re-written (graphene, yea!!). So, I just used some more of Nathan's great ideas and added a simple hash and the counter. The hosted wallet differs a bit, there is no large number involved your really not scanning much. It just counts and checks every step of the way. You really can't skip numbers. It is straight forward so there is no number exposed in the API, it is done behind the scenes.
There is a Wallet Advance feature where you can try to recover an account by its name. This is a light-wallet account or, for a 'very' short period of time, the hosted wallet used the account name in that hash I mentioned above. In any case, you may gain insight by using it. If you try to recover an account by name that was not created with your recover key you will see something like this 'can't recover, this account is not owned by this wallet'... So, this would confirm you need to check the recover key.
-
Does the online wallet has the same functions like the app ?
-
Yes except for shorting
Sent from my iPhone using Tapatalk
-
How do you vote with the web wallet? There is nothing to click on the Delegates page to do so
-
How do you vote with the web wallet? There is nothing to click on the Delegates page to do so
There is a distinct vote page
-
How do you vote with the web wallet? There is nothing to click on the Delegates page to do so
There is a distinct vote page
Can you be more specific, where do I find this page, it is probably obvious but 15 minutes of looking around and clicking seemingly everything...
However, I did notice that on the Preferences page it has the By Default Vote For: ALL, if I change it to anything else, when I click Update nothing happens, leaving that tab/page and returning has it back to ALL.
-
How do you vote with the web wallet? There is nothing to click on the Delegates page to do so
There is a distinct vote page
Can you be more specific, where do I find this page, it is probably obvious but 15 minutes of looking around and clicking seemingly everything...
However, I did notice that on the Preferences page it has the By Default Vote For: ALL, if I change it to anything else, when I click Update nothing happens, leaving that tab/page and returning has it back to ALL.
Are we talking about bitshares 0.9.2? Then there should be a list of delegates and a clickable empty thumbsup/down icon ..
(http://i.imgur.com/9rYOtFQ.png)
-
Not on my screen (Firefox). Xeroc are you using a dev instance of the web wallet?
(http://i.imgur.com/sXU8WX8.png)
-
How do you vote with the web wallet? There is nothing to click on the Delegates page to do so
There is a distinct vote page
Can you be more specific, where do I find this page, it is probably obvious but 15 minutes of looking around and clicking seemingly everything...
However, I did notice that on the Preferences page it has the By Default Vote For: ALL, if I change it to anything else, when I click Update nothing happens, leaving that tab/page and returning has it back to ALL.
Are we talking about bitshares 0.9.2? Then there should be a list of delegates and a clickable empty thumbsup/down icon ..
(http://i.imgur.com/9rYOtFQ.png)
Like Riverhead said, this is the Web Wallet topic, so no not the client app 0.9.2.
I use Chrome and do not see those thumbs.
Maybe this explains our voter apathy issue, people using the web wallet, which is likely a lot of users, can't vote.
-
The BTS .9 (aka 1.0) web wallet does not support voting. Also, this version is still for small amounts only. The 2.0 web wallet can vote using the user interface. We will use that when it is put into production.
-
Is it safe to use the Web Wallet with iOS browsers?
-
Is it safe to use the Web Wallet with iOS browsers?
Just make sure you backup the Brainkey key and wallet file before you send any money to your account. Send a small amount. You really only need one: brainkey or wallet backup.
Safari was tested in Bitshares 2 and with a lot of help from Valentine it is working...
-
@jcalfee1, @xerox
For some of us the only real options are to either a) keep funds on an exchange or b) use the current web wallet. Which would you recommend during the transition to 2.0?
Also, even if a) above is preferred, obviously some assets cannot be held outside of a Bitshares wallet. So a transition from the current web wallet to the new web wallet will be necessary for some of us either way. With that in mind, can you tell me if such a transition would be as simple as entering the seed words into the new web wallet?
Thanks in advance.
-
@jcalfee1, @xerox
For some of us the only real options are to either a) keep funds on an exchange or b) use the current web wallet. Which would you recommend during the transition to 2.0?
Also, even if a) above is preferred, obviously some assets cannot be held outside of a Bitshares wallet. So a transition from the current web wallet to the new web wallet will be necessary for some of us either way. With that in mind, can you tell me if such a transition would be as simple as entering the seed words into the new web wallet?
Thanks in advance.
Definitely web wallet. And you will be able to import your tokens from the brain seed from what I know .. @jcalfee1 should know: will the brain import regenerate all keys and import them automatically? IIRC the accounts are non titan, so transfer keys are easy .. what about market orders?
-
@jcalfee1, @xerox
For some of us the only real options are to either a) keep funds on an exchange or b) use the current web wallet. Which would you recommend during the transition to 2.0?
Also, even if a) above is preferred, obviously some assets cannot be held outside of a Bitshares wallet. So a transition from the current web wallet to the new web wallet will be necessary for some of us either way. With that in mind, can you tell me if such a transition would be as simple as entering the seed words into the new web wallet?
Thanks in advance.
Definitely web wallet. And you will be able to import your tokens from the brain seed from what I know .. @jcalfee1 should know: will the brain import regenerate all keys and import them automatically? IIRC the accounts are non titan, so transfer keys are easy .. what about market orders?
The hosted wallet has "Setting" and a way to "Backup" the wallet. Use that feature. Make sure you know your password. We need to have some level of brainkey support in the new wallet, but your backup files will be the only thing you really need. Also backup files are going to be important in the future. It is a good option to start now and make sure your have your private keys that were created at any point when there were code changes taking place in the hosted wallet.. If everyone uses the Backup method it could help us keep the new codebase a bit cleaner... It is a good idea to have this secondary USB backup file.
Exchanges are going to have to figure out how to do balance claims and integrate with our API. I'm sure they will work it out. The goal is definitely to limit the amount of time and amount of the funds have to go into a 3rd party like an exchange.
2 cents (hope I'm not sounding like a broken-record here) .. I would use the hosted wallet like a real wallet: just keep what I might need to spend and would not mind too much if I lost it... Any substantial amounts I would keep in a locally installed audited open source program on a safe and secure operating system (open source if possible too). I use the native wallet and Ubuntu.. I know it is asking a lot from some, but this is good practice for any local program local hardware in general. I believe high security JavaScript is possible and we are getting closer by the week.
-
@jcalfee1 Thanks for answering my previous questions :)
I have another.
With the release of Bitshares 2.0, will the web wallet be safe to use as a primary wallet to hold all your BTS ?
Or would still recommend only using the web wallet to hold smaller amounts of funds for daily transactions?
-
@jcalfee1 Thanks for answering my previous questions :)
I have another.
With the release of Bitshares 2.0, will the web wallet be safe to use as a primary wallet to hold all your BTS ?
Or would still recommend only using the web wallet to hold smaller amounts of funds for daily transactions?
Still unproven software ..
however i used tje current web wallet alot and never lost a single satoshi
New webeallet will implememt almost the whole protocol .. i think you will be fine to import all your funds evetually ..
give it some time to mature
-
Unfortunate for me.
I'll have a iPad, no other computer.
So I need a mobile solution that I can have 100% confidence in.
I've watched the Bitshares price double in recent weeks, and it seems like I'm going to miss the boat for investment before Bitshares 2.0 is released.
argh. frustrated.
-
Unfortunate for me.
I'll have a iPad, no other computer.
So I need a mobile solution that I can have 100% confidence in.
I've watched the Bitshares price double in recent weeks, and it seems like I'm going to miss the boat for investment before Bitshares 2.0 is released.
argh. frustrated.
If you know a Bitshares holder that you can trust. You could have them hold Bitshares on their wallet until you have one working.
-
this is bug from webwallet? my depositand withdrawal missing
https://bitsharestalk.org/index.php/topic,18555.0.html
please comment
-
Hello friends,
I am learning about bitshares and presently have purchased bitshares on Poloniex. My goal is to get my bitshares into a secure wallet until I decide what options I will pursue.
I have thought about waiting until BitShares 2.0 and then transfer my shares into the 2.0 web wallet from the exchange.
My other option as I see it is to download the Bitshares hosted web wallet now before 2.0 and transfer my shares to this wallet. Would these shares then automatically transfer to the 2.0 web wallet on October 13? Is this a better option for me?
Many thanks.
-
Hello friends,
I am learning about bitshares and presently have purchased bitshares on Poloniex. My goal is to get my bitshares into a secure wallet until I decide what options I will pursue.
I have thought about waiting until BitShares 2.0 and then transfer my shares into the 2.0 web wallet from the exchange.
My other option as I see it is to download the Bitshares hosted web wallet now before 2.0 and transfer my shares to this wallet. Would these shares then automatically transfer to the 2.0 web wallet on October 13? Is this a better option for me?
Many thanks.
. I think these instructions are the best way http://blog.smartcoin.pw/2015/09/bitshares-how-to-prepare-your-wallet.html?m=1
-
Good link konelectric, thanks!
-
Good link konelectric, thanks!
You can thank Fav.