3 ms·
Hey guys, I'd love to answer any and all tech related questions. Here's something to get the conversation started: The client-side software is built on top of
by williamcotton 12y ago
Hey guys, I'd love to answer any and all tech related questions. Here's something to get the conversation started:
The client-side software is built on top of Helloblock.io and uses BitcoinJS-lib. All wallets and transactions originate on the client and never on our servers using the same mechanisms found in any other hierarchical deterministic brain wallet. So if you add a passphrase and then promptly forget it there's nothing we can do! This is both a feature and a bug and we are interested in exploring other mechanisms that keep our users in control of their funds while also being very easy and convenient to use. We don't want you to store your life savings in this wallet. Think of it like your real wallet. Just put enough for the day in there. There is a time and place for cold wallets and tight restrictions but that can be less convenient for day-to-day use.
When you first sign up your passphrase is supplied by our servers. This mechanism is similar to how most Bitcoin and Dogecoin tip bots work. It lets people send to a friend's address before they've signed up for the service. This has some dangers. If our servers are compromised these passphrases can be used to gain access to the wallets, but only if the users haven't gone through the "upgrade your security" process and created a new deterministic wallet. We are busy working on multi-factor authorizations based on multiple identity providers including SMS, Twitter, email and more. We think there are ways to keep users fully in control of their own funds, safe from attackers as well as being convenient. It is a tall order but we're ready to take on the challenge.
William Cotton - CTO QuickCoin
- listic 12y agoWhat are your plans? Why do you need so many people? (5 and hiring)
- listic 12y agoDo I have to create a separate Bitcoin wallet if I already have one, to use your service? Where will my wallet file get stored?
- williamcotton 12y agoYour wallet and the private key it uses to sign your transactions are generated in your web browser. You are free to send to and from any Bitcoin address. Your wallet is only associated with our services by signing and submitting a token that proves it owns the associated public address. We are exploring ways where any Bitcoin private keys can sign their own token and register with our infrastructure. This process would require the cooperation of other wallet software creators but we're sure a standard will emerge at some point. We would like to have some form of two-factor authorization in place before we expose the private keys to the user interface. Right now the private key never leaves the warm embrace of a function closure inside of a web worker and well out of the global scope of the DOM.
- mappum 12y agoI hope you realize you are accepting full risk for all your users' money by using Helloblock. You have a team of 5, is it really too much work to run your own node?
- williamcotton 12y agoWe know the guys at Helloblock and we're very excited to be working with them. We feel that a healthy ecosystem of Bitcoin web services is beneficial to everyone. That way everyone can focus on their strengths. Our strengths are in making and shipping consumer Internet software.