Re: [Bitcoin-development] Electrum security model concerns

2012-11-16 Thread Mike Hearn
BTW have you checked the code? I took a quick look and didn't see things I was expecting to see. In particular I couldn't find any code that manages wallet state in the presence of re-orgs. It appears to check that transactions appeared in the block chain, but if there's a chain switch it's not cle

Re: [Bitcoin-development] Electrum security model concerns

2012-11-16 Thread Mike Hearn
Great to hear that. -- Monitor your physical, virtual and cloud infrastructure from a single web console. Get in-depth insight into apps, servers, databases, vmware, SAP, cloud infrastructure, etc. Download 30-day Free Tria

Re: [Bitcoin-development] Electrum security model concerns

2012-11-15 Thread Gregory Maxwell
On Sat, Oct 6, 2012 at 12:37 PM, Gregory Maxwell wrote: > I'm concerned about how the particular security model of electrum is > being described; or rather— not being described. Just to close the loop on this: I finally got in touch with Thomas on IRC and walked over the security issues I brought

Re: [Bitcoin-development] Electrum security model concerns

2012-10-10 Thread Mike Hearn
> I tried in IRC and got no response. These messages are copying the > only contact email address I could find. Forum private message may work better. > I think this is very hard because this matter is rapidly politicized. > There are some in the community who will instantly allege misconduct > w

Re: [Bitcoin-development] Electrum security model concerns

2012-10-10 Thread Gregory Maxwell
On Wed, Oct 10, 2012 at 7:19 AM, Mike Hearn wrote: > +gary > >> Electrum also has a daemon for merchants. > > Well, I suggest taking it up with Thomas directly. A thread here won't do > much. I tried in IRC and got no response. These messages are copying the only contact email address I could fi

Re: [Bitcoin-development] Electrum security model concerns

2012-10-10 Thread Gary Rowe
Just to chime in on the MultiBit Merchant aspect. The architecture is that MBM is a Java backend, but executes as a simple command line: java -jar mbm.jar server config.yml As Mike expects, MBM offers a RESTful API using HAL+JSON. It provides a comprehensive set of order and invoice processing, a

Re: [Bitcoin-development] Electrum security model concerns

2012-10-10 Thread Mike Hearn
+gary > Electrum also has a daemon for merchants. Well, I suggest taking it up with Thomas directly. A thread here won't do much. > Considering the dislike of > Java that exist reflexively in much of the non-java community and the > greater ease of deployment and the integration of type-2 split

Re: [Bitcoin-development] Electrum security model concerns

2012-10-08 Thread Mike Hearn
> What I would expect is a proper discussion, like "Understanding the > bitcoinj security model": > http://code.google.com/p/bitcoinj/wiki/SecurityModel That page was old, it stated that pending transactions aren't provided to the app which hasn't been true for a long time. I've rewritten and ext