Project Decorum - Wallet Release

You may have some fresh, new, FastCoin? :slight_smile:

Can anyone send me something too, please?

1 Like

Whatā€™s your name to send tokens to?

My name is: traktion

Couldnā€™t you have picked something more obvious? :wink:

Apologies - I thought Iā€™d tried that already, but apparently not! Enjoy your NVST. Theyā€™re like Safecoin Version 10!

8 Likes

LOL!
(20 characters)

4 Likes

I made a wallet and a name but need to find more time to create some coinage! Public name is always ā€œNigelā€

1 Like

I created one ā€œWalletsā€: pŠ¾lpolrene (this by the way is NOT @polpolrene and a potentially a way to steal people their SAFEcoin, by just posting a name that looks exactly like polpolrene, maybe your web of trust can help here or that certain keyboard types/languages inputs are not accepted in the wallets) after that I created two ā€œNamesā€ pŠ¾lpolrene and pietje.

@Seneca I have a few questions, here I created/received 10000 Concoins in the pŠ¾lpolrene Wallet on Name pŠ¾lpolrene:
safe://wallet.decorum/#/set/d9c5585bceeb4a5000b0a9ecd79862071953f2f6b22bc1b99a2450aae678a46407b90000000000000120000000000000008b71070339c356e4135ba99ebaf4934257ede92e41acecb810d777bc1c744d381800000000000000705ee3edfe7f00007069e3edfe7f0000180000000000000000

Here is send 0.1 Concoins from pŠ¾lpolrene to pietje (pietje was also asigned to the pŠ¾lpolrene ā€œWalletsā€)


safe://wallet.decorum/#/set/cde5d7d383e80887ac742092624c79fa0c2a324a9a974046e43d558b50ad932907b90000000000000120000000000000001990f09e1752702ef899236ffc90c8aea55c22be727b7e1c79793a6b342f286d180000000000000080cec1a1fd7f000000000000867f0000180000000000000000

Strangely now the pŠ¾lpolrene Wallet got 0.1 Concoins and the 9999.90000000 in the pŠ¾lpolrene wallet is in limbo.

So you can send money to your own Wallet in the current setting and destroy/hide the money that you should have left in your wallet, after the transaction.

Here I made a second transaction from pŠ¾lpolrene 0.01 Concoins to pietje
safe://wallet.decorum/#/set/b0dd5bf842b8c4ce26501d37fb880adbdd6457c20943cd044d41c60cbbc5ca7107b9000000000000012000000000000000bde8f38c4de71b167081d4f4a97a42ec860efd2d52ac014e809ec7a1cdc882431800000000000000c133dd9e502f0000030000000000000050e42cf4b102000000

When I return to Wallets I get this (I also got this the first time)

I hope/know that this wouldnā€™t happen in the real world, but it was just a experiment, this is a experimental wallet after all. :stuck_out_tongue_closed_eyes: Sorry @polpolrene for the name abuse, but Iā€™m trying to think a little like a hacker thinks to improve our wallets.

Now that I think about it, those links that I send you look an awful lot like an blockchain/explorer

Yeah yeah now I do realize that every Name needs to be assigned to itā€™s own Wallet

3 Likes

I canā€™t comment until Iā€™ve spoken with my legal team about this :joy: .

Isnā€™t that wallet name just a local thing? I can rename my Bitcoin wallet ā€œDogecoinā€ for example but if itā€™s only me to see that locally there shouldnā€™t be a problem.

EDIT:

Wallet

I still own the polpolrene public_id on Alpha 2. My wallet is called My_wallet. So to steal my tokens you need to become the owner of the public_id polpolrene. Which is as hard as hacking safe://polpolrene

So as far as I know you canā€™t steal someoneā€™s tokens that way. You really need the public_id for that.

3 Likes

One way to avoid this name abuse would be for wallets to use a dedicated service. So safecoin.polpolrene would be your wallet address, which means any wallet can transact with polpolreneā€™s Safecoin wallet and know it was the polpolrene who owns that public Iā€™d.

4 Likes

If you copy/paste this pŠ¾lpolrene
Youā€™ll be able to register it again as an publicID. Itā€™s something like this story

But this is more like a social hacking that has been going on in the Ethereum space, for instant they post an address or website name and people copy it or click on it and send their funds to the wrong address or get their privatekeys stolen by entering it into a phishing site like happened many times with Myetherwallet exact clones.

Purely using another languageā€™s keyboard your name can look exactly the same while itā€™s not. Maybe senecaā€™s web of trust could help, it could potentially have a Ripplesc feature like borrowing money from close friends and family.

3 Likes

Yes, indeed, it has no meaning except for in the UI. Itā€™s just meant to be a human friendly wallet identifier.

Thanks for reporting this! Transacting from and to the same wallet is an edge case that we havenā€™t taken care of yet.

At the moment that is actually happening, but weā€™re not showing it in the UI. When a public ID is given, such as MyId, then it is prefixed by decorum. resulting in decorum.MyId. When associating a public ID, weā€™re storing a file called decorum-wallet under the decorum service of the specified public ID. However, the public container does not contain any reference to this folder yet, as Iā€™m unsure what the convention is with the public container and NFS.

7 Likes

They arrived! Your post made me lol! :smile:

6 Likes

So whatā€™s the consensus guys? Buy, sell, love it, hate it?

Ummā€¦ whatā€™s the subject?

1 Like

The wallet. Anyone done a YouTube walkthru or anything?

Bit early for that - itā€™s not operational yet

1 Like

Pretty neat Decorumā€™s wallet, when you create a PublicID in the wallet itā€™s also created in the Web Hosting Manager. I was planning something similar by integrating all the Web Hosting Managerā€™s feature in our wallet. @luandro this is what we were talking about, how to make the desktop WHM obsolete. :stuck_out_tongue_closed_eyes:

2 Likes

This is a side effect of both applications following the same standard. Initially our wallet did not conform with this as we were storing wallet data directly under the public ID, causing the WHM to get stuck after our wallet was used. By storing the data under a file, conformity is ensured, although storing such data using a file does not feel like the ultimate solution to me. Perhaps more elaborate standards (@maidsafe) will appear once other developers require more complex use cases (e.g. ways to store data under public IDs without NFS).

8 Likes

Is there a roadmap/ETA for pre-alpha software release besides the wallet?

8 Likes

We have an internal roadmap to develop the following core Project Decorum features in this order:

  1. Identity and contacts management
  2. Private messaging
  3. Topic/threaded discussions
  4. Endorsements and moderation
  5. Refactor and integration of the wallet module

By reviewing the development process of the wallet we identified the following three areas where we want to make significant improvements for the next releases:

  • Test driven development
    Even though fully automatic testing doesnā€™t seem to be an option for us right now (no headless browser support yet), weā€™re looking into applying ā€œsemi-automaticā€ testing where some minimal human interaction is required to run tests.
  • SAFE data model and transmission
    The wallet turned out to generate many redundant requests to the SAFE Network. Often two or more consecutive requests for different data would interact with the same container/MutableData, causing it to be fetched multiple times, introducing unnecessary delays. Since we expect the latency to be significantly higher on the real SAFE Network than in the late Alphaā€™s and testnets weā€™re designing a model to handle this more elegantly. Weā€™re considering to always update the store (the appā€™s local database) with all the data present in a fetched container/MutableData, plus timestamping this data when that happens so the actions generated by the web-app can decide on a case-by-case basis if the data in the store is still considered fresh enough or if a refresh from the SAFE network is warranted.
  • Data sanitation
    Weā€™re going to analyse if there are currently any obvious vulnerabilities to attacks by malicious user-generated content that our app loads into the browser. If found we will attempt to find data sanitation solutions for them. We are hardly security specialists, so as SAFE moves closer to itā€™s v1.0 release some actual professionals should get involved. We want to take any necessary basic measures in the meantime to hopefully prevent widespread abuse that could result in loss of confidence in this project.

Weā€™re not comfortable giving ETAā€™s for the same reason as MaidSafe. Weā€™re trying to step up our game now, so we will take some more time than if we would rush ahead at the same level of quality as the wallet. So Iā€™ll just say that you shouldnā€™t start holding your breath already for major strides forward. At the same time we plan to gradually open up our activities though (this update being an example of that).

28 Likes