RE: Account model, Wallet model and Security on the DEX part 1 of 2 by john-robert

View this thread on: hive.blog | peakd.com | ecency.com

Viewing a response to: @clockwork/account-model-wallet-model-and-security-on-the-dex-part-1-of-2

bitshares · @john-robert · Feb 12 '18

$0.03

Good post.  And here lies the double edged sword.  Ultimate security and sovereignty over your digital assets comes at the cost of absolute responsibility.  I think it would be worth bringing up with any future core dev team whether to include some compromises in the wallet model to allow general population a "forgot my password" function.  What do you think?

👍 john-robert, clockwork

`author`	john-robert
`permlink`	re-clockwork-account-model-wallet-model-and-security-on-the-dex-part-1-of-2-20180212t124902558z
`category`	bitshares
`json_metadata`	{"tags":["bitshares"],"app":"steemit/0.1"}
`created`	2018-02-12 12:48:51
`last_update`	2018-02-12 12:48:51
`depth`	1
`children`	4
`last_payout`	2018-02-19 12:48:51
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.028 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	361
`author_reputation`	2,529,767,637,749
`root_title`	"Account model, Wallet model and Security on the DEX part 1 of 2"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	36,929,007
`net_rshares`	4,147,354,919
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
john-robert	0 B		3,539,776,575	100%
clockwork	0 B		607,578,344	100%

@clockwork · Feb 12 '18

$0.03

"Forgot my password" automatically implies that it also exists (or can be reset) with a 3rd party/centralized entity. It pretty much defeats the whole purpose. 

Keeping your private key safe has been the key (pun intended)  instruction for ALL crypto since the beginning.  There is some confusion because bitshares' wallet also functions as an exchange(and centralised exchanges have their own auth mechanisms with 2FA and reset functionalities etc. but they do it by virtue of holding on to the private keys.

I think the system as it stands is great. What is lacking is some "ease of use" features / abstractions. For example a Trezor multisig equivalent for bitshares for people needing more security....Or a suggestion to print out your PKs and keep copies in hard form in safe locations etc.

👍 john-robert, clockwork, diogogomes

`author`	clockwork
`permlink`	re-john-robert-re-clockwork-account-model-wallet-model-and-security-on-the-dex-part-1-of-2-20180212t125653274z
`category`	bitshares
`json_metadata`	{"tags":["bitshares"],"app":"steemit/0.1"}
`created`	2018-02-12 12:58:06
`last_update`	2018-02-12 12:58:06
`depth`	2
`children`	3
`last_payout`	2018-02-19 12:58:06
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.028 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	797
`author_reputation`	2,206,574,983,916
`root_title`	"Account model, Wallet model and Security on the DEX part 1 of 2"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	36,931,017
`net_rshares`	4,326,701,278
`author_curate_reward`	""

properties (23)vote details (3)

voter	rshares	pct
diogogomes	239,455,488	69%
john-robert	3,491,941,756	100%
clockwork	595,304,034	100%

@john-robert · Feb 12 '18

Good response and I agree.  My thought is that perhaps there's a way to accommodate the 5 billion people who are not at this moment willing/capable to take total control and responsibility.  Perhaps there is a way to have a similar ease of use feature a la a third party gateway with a degree of centralization for people who want to opt in to handcuffs and want a Coinbase like experience.

You seem to be going the other way and I think I agree with you.  We should focus on making it easier for people to take responsibility and not enabling them to take the easy way out.

👍 clockwork

`author`	john-robert
`permlink`	re-clockwork-re-john-robert-re-clockwork-account-model-wallet-model-and-security-on-the-dex-part-1-of-2-20180212t130421609z
`category`	bitshares
`json_metadata`	{"tags":["bitshares"],"app":"steemit/0.1"}
`created`	2018-02-12 13:04:21
`last_update`	2018-02-12 13:04:21
`depth`	3
`children`	2
`last_payout`	2018-02-19 13:04:21
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	575
`author_reputation`	2,529,767,637,749
`root_title`	"Account model, Wallet model and Security on the DEX part 1 of 2"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	36,932,325
`net_rshares`	583,029,724
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
clockwork	0 B		583,029,724	100%

@clockwork · Feb 12 '18

I think technically OL does that with their AirBitz integration.

Not my preference but it definately fills the gap you're referring to.

👍 clockwork, diogogomes

`author`	clockwork
`permlink`	re-john-robert-re-clockwork-re-john-robert-re-clockwork-account-model-wallet-model-and-security-on-the-dex-part-1-of-2-20180212t131024322z
`category`	bitshares
`json_metadata`	{"tags":["bitshares"],"app":"steemit/0.1"}
`created`	2018-02-12 13:11:36
`last_update`	2018-02-12 13:11:36
`depth`	4
`children`	1
`last_payout`	2018-02-19 13:11:36
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	136
`author_reputation`	2,206,574,983,916
`root_title`	"Account model, Wallet model and Security on the DEX part 1 of 2"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	36,933,877
`net_rshares`	810,558,395
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
diogogomes	0 B		236,734,403	69%
clockwork	0 B		573,823,992	100%

1 reply