Software Online Address Generator

Discussion in 'Technical Development' started by 418Sec, Jan 5, 2016.

  1. 2017/12/15 - Decred v1.1.2 released! → Release Notes  → Downloads
  1. 418Sec

    418Sec Member
    Advocate (Twitter)

    Jan 3, 2016
    122
    65
    Male
    [​IMG]

    So far..
    Single Address, grabbed that image from decred.org, too lazy to add the font. :p
    Will add more things soon.
     
    Blizzy and Freedom2Choose like this.
  2. ceejep

    ceejep Sr. Member
    Developer

    Dec 14, 2015
    192
    220
    Thanks for making this. I'd like to note that the JS BLAKE256 from Google is buggy and often returns faulty hashes while passing their internal unit tests. We will update our Github today with our JS repo for BLAKE256 so you may use that in address generation.
     
    tacotime and 418Sec like this.
  3. Costin

    Costin Member
    Advocate (Twitter)

    Dec 28, 2015
    243
    84
    Male
    JavaScript
    Liverpool
    Finnaly. That code from Google is awful.
     
  4. 418Sec

    418Sec Member
    Advocate (Twitter)

    Jan 3, 2016
    122
    65
    Male
    #4 418Sec, Jan 5, 2016
    Last edited: Jan 5, 2016
    Yes!!
    That would be great help.
    I was having problems..
    I will make changes and upload this generator to my github soon.
     
  5. ceejep

    ceejep Sr. Member
    Developer

    Dec 14, 2015
    192
    220
    tacotime likes this.
  6. shoshin

    shoshin Member

    Dec 28, 2015
    86
    94
    Male
    You might want to contact @Freedom2Choose he was interested in working on an online address generator and he is a talented graphic designer.
     
    marcelocoin likes this.
  7. Costin

    Costin Member
    Advocate (Twitter)

    Dec 28, 2015
    243
    84
    Male
    JavaScript
    Liverpool
    #7 Costin, Jan 14, 2016
    Last edited: Jan 14, 2016
    Hey mate. I'm also the developer of decredaddress and I can say the site will be up ETA 20-30 hours. If anyone wants to help out, hit me with a message. Thanks.
     
    marcelocoin and ClokworkGremlin like this.
  8. ClokworkGremlin

    ClokworkGremlin Sr. Member

    Jan 10, 2016
    535
    381
    Male
    Whatever I want.
    #8 ClokworkGremlin, Jan 14, 2016
    Last edited: Jan 14, 2016
    I look forward to testing it out. The address generation, at least.

    Request: ability to print individual public/private keys in a reciept or printable label format.
     
  9. Costin

    Costin Member
    Advocate (Twitter)

    Dec 28, 2015
    243
    84
    Male
    JavaScript
    Liverpool
    Thanks mate! Really appreciated.
     
    marcelocoin likes this.
  10. Freedom2Choose

    Freedom2Choose Full Member
    Designer

    Dec 17, 2015
    103
    118
    Designer
    USA
    Hey guys, if anyone needs any graphical spiffing just let me know!
     
    Costin likes this.
  11. walkeralencar

    walkeralencar New Member
    Translator (Português)

    Dec 29, 2015
    57
    24
    Male
    CTO and PHP Consultant
    Brasília-DF, Brazil
    ClokworkGremlin likes this.
  12. ClokworkGremlin

    ClokworkGremlin Sr. Member

    Jan 10, 2016
    535
    381
    Male
    Whatever I want.
    Oh that's nice. Very smooth.

    How secure is the "noseed" generator, and would you consider adding a field to the "seed" generator(words or hex entry mode), so that users can regenerate a particular wallet?

    I assume the webpage can run from a flash drive, unconnected to the internet. If not, I assume that'll be coming very soon.

    I also assume you have plans to add QR code generation.
     
  13. walkeralencar

    walkeralencar New Member
    Translator (Português)

    Dec 29, 2015
    57
    24
    Male
    CTO and PHP Consultant
    Brasília-DF, Brazil
    It's a simple way to generate for who dont have programming expertise.
    The Code used on server side are open:
    https://gist.github.com/walkeralencar/112bbe929a6711c9b35d
     
  14. shoshin

    shoshin Member

    Dec 28, 2015
    86
    94
    Male
    Good work, unfortunately the address generation is done server-side[1], so it would be insecure for a user to generate an address on this site... Basically the server could be keeping a copy of every seed generated. It would be much more preferable if the code were implemented as client-side JavaScript which a user could run on an offline computer. I do not mean to detract from the work you have done, I simply think it is very important for users not to have to trust anybody...

    [1] https://decred-vanity-walkeralencar.c9users.io/generate/seed
     
    ClokworkGremlin likes this.
  15. walkeralencar

    walkeralencar New Member
    Translator (Português)

    Dec 29, 2015
    57
    24
    Male
    CTO and PHP Consultant
    Brasília-DF, Brazil
    I propose to select some user, preferable project leaders to audit code, and have full access on my code and site. My porpous is provide a easy choice until have a secure client side code.
     
    ironbits likes this.
  16. shoshin

    shoshin Member

    Dec 28, 2015
    86
    94
    Male
    I appreciate the gesture, however it would not improve the security model. The code could be changed on the server at any time by anyone who gains access to it. The server logs could easily contain every seed ever generated by the app. There is no way to know if the hardware is under your full control (is the server being hosted in a data center?). The chance of something bad happing may be minute but we are dealing with money, as well as some users who may be technologically unsophisticated and new to cryptocurrency. I would feel terrible if something were to happen that damaged the reputation of this project or our community.
     
  17. ClokworkGremlin

    ClokworkGremlin Sr. Member

    Jan 10, 2016
    535
    381
    Male
    Whatever I want.
    Also means the seeds are being transmitted over the internet. If you're paranoid enough to run your seed generation in a VM or otherwise sanitized environment(like most cryptocurrency users frankly should be), then you shouldn't trust data sent over the web, no matter how well it may be encrypted.
     
  18. walkeralencar

    walkeralencar New Member
    Translator (Português)

    Dec 29, 2015
    57
    24
    Male
    CTO and PHP Consultant
    Brasília-DF, Brazil
    its running on c9.io its a cloud server, developed in there since first line of code. I understand, isn't best option of security, but is a easy way for who dont have no ways to generate your own wallet. Anyone have the option to get code and run in yur own machine.
     
  19. ClokworkGremlin

    ClokworkGremlin Sr. Member

    Jan 10, 2016
    535
    381
    Male
    Whatever I want.
    Which they should. Standard practice. It's why most web-wallet generators treat their websites as a demo and have a link to the Github where you can download the entire website and run it in a secure offline location.

    The website is a good start, but please keep in mind that key generation should always be done locally. Anything else just isn't safe.
     
  20. walkeralencar

    walkeralencar New Member
    Translator (Português)

    Dec 29, 2015
    57
    24
    Male
    CTO and PHP Consultant
    Brasília-DF, Brazil
    So guys, come to solutions... what you propose? open code to every one like i did:
    1. https://gist.github.com/walkeralencar/112bbe929a6711c9b35d
    2. https://gist.github.com/walkeralencar/58cb3342d9cb9bdb18b0
    3. https://gist.github.com/walkeralencar/7c1eaa5acc7470d5abf5
    OK, wut more, next steps... how I said i'm not providing THE SOLUTION, but only a way to make it easy, who use need trust me? no, i'm using my fucking nickname based on my Real Name, that is used in all my social networks. Very smart for who want save "seeds", so create a wallet with NOSEED, or GET the code and run in your machine. Each one you prefer.

    So, come and show the solution you propose until haven't a secure way, and not skilled people can easily use?
     

Share This Page