your pass phrase generates the account number.  If another user typed in your pass phrase, they would open your node/wallet.

You can always use the web wallet at crypti.me to perform any transaction from node to node.  You will not be downloading the BC at the web wallet.

Come back on Thursday........ the bride is getting her wedding gown fitted, the florist is decorating the church, and the groom is at his bachelor party.  DPOS starts in a few days.  10 second blocks, 6 confirms, node.js; DAPPs on the CBC, and free pizza.

OK..... I exaggerated on the pizza.  Wonderful things coming to Crypti this week. 

What we really need  is a troll-proof blog......... HMMMM

Wow.  Current Crypti is 30 second blocktime, right?  Seems like this would make not wasting blockchain bytes on empty zero transaction blocks three times more of a big deal than it is now.

I gotta ask:

1. Just how many bytes ARE going to be added to the new blockchain for every DPoS zero transaction block?

2. Is there a simple explanation about why 1 bad-guy Delegate issuing an invalid rogue block can be stopped by 100 good-guy Delegates when blocks (full or empty) are being added every ten seconds, but not if always full blocks are being added only after minutes or hours of wait time when there are zero transactions to record?

Crypti 0.2.0 DPoS will be absolutely awesome.  

DPoS certified genesis block regeneration when the blockchain hits a max length, and no addition of zero transaction blocks to allow max time before hitting that max blockchain length, will be even more awesome when it is implemented in Crypti 0.2.X.  As it eventually must be.

  

Mal,

the present block times are 60 seconds.  New DPOS block times are 10 seconds.  

I asked Boris about the possibility of a malicious delegate gaming the system.  He explained that it takes 6 confirms of each forging for a block to be permanent in the block chain.  The delegates are chosen randomly until all 101 have forged to end a cycle.  Unless a delegate owner had 60 or more delegates, the chances of his 6 delegates being the forgers of a malicious block are slim.  Even with 60 delegates, his chances are about 1/100 of forging all 6 times.  The network will drop or ignore delegates that forge X number of bad blocks.  The expense of that many delegates, servers, and bandwidth would make such attack or theft unprofitable.  

We discussed at todays meeting raising that confirms to 10 for the time being.  

There are exciting features that are being worked on, but will be added to 2.1 instead due to the time factor.


P.S.  The number of possible combinations of 101 delegates is 9 followed by 159 zeros.  

Brainwallets like NXT and Crypti are significantly different that Bitcoin.  There are a lot of parts that are kind of hard to understand at first.  The way you are saying your sentences imply that you still have a few misunderstandings.  Again somebody please correct me if what I say below is wrong...

<Then, to send XCR in that account, I have to completely download the blockchain>  No.  You have to download the blockchain before you can add a new block yourself to that blockchain as a Crypti forger, not to send or receive Crypti as a Crypti user.  When you send Crypti, the client should be sending a message to OTHER forgers who HAVE downloaded the entire blockchain that you want to add your transaction in the next block THEY forge.  Your wallet program sending that transfer-of-Crypti message does not require a local copy of the blockchain to send it.

<my account number will never collide with other account number because my account number now is associated with my private key> No.  Crypti ain't Bitcoin.  Registering an exchange of Crypti or a Delegate name or second password on the blockchain is NOT what associates your password with your account number.  Crypti uses a really cool math function called an elliptic curve (specifically, a particular elliptic curve named Ed25519; see: http://en.wikipedia.org/wiki/EdDSA) as a mysterious black box that takes in your secret password and spits out your Crypti account number.   It is the Ed25519 curve that associates your password with your account number, and that association has been embedded in the logic of the rational number line since the dawn of time and not by any action you take with the Crypti blockchain.  

Your account number will never collide with another account number because only the password you picked can generate it.  And more importantly, with Ed25519 nobody will ever come up with a formula or calculation that can take your public account number and back-calculate the password you use to access it.  And most importantly, if your password is strong enough, the chances somebody will accidentally pick the same one you did and accidentally stumble into "your" account is less likely than their getting hit by lightning on the day they win the lottery after losing their virginity.  

Crypti accounts are like a literally endless line of hotel rooms that stretch from Earth to the edge of the universe.  99.9999999999999999999999999999999999999999999999999999999999999999999999999999 999999+% of all Crypti accounts that mathematically exist right now will never be accessed because all the humans typing on all the keyboards until the Sun burns out won't have time to generate the passwords that access them.  

Your (35+ RANDOM alphanumeric character!!!) password checks you into a Crypti account hotel room located in the Andromeda Galaxy.  Somebody else's password checks them into a Crypti account hotel room located in the Sombrero Galaxy.  You can type a 100 character password with your eyes closed in your Crypti wallet software and peek into an empty account room at z8_GND_5296, the most distant galaxy known.  

There's more "space" between Crypti accounts than humans can imagine - IF you use a strong password.  But if you use a short simple password, your Crypti is not stashed deep in the depths of (number) space, it's just up the steps of the fire escape stairs - and a hacker WILL guess it and empty your Crypti account, guaranteed.  

Brainwallets like NXT and Crypti are different from Bitcoin, they are the "wave of the future".  But they don't allow for an "air gap" or "cold wallet" (even tho that term is used even in this Crypti thread) and so ALL accounts are vulnerable to hacker attack AT ALL TIMES.  For this reason, Crypti accounts  REQUIRE REALLY STRONG PASSWORDS.   Download Awesome Password Generator at http://code.google.com/p/awesome-password-generator/ and use at least 35 and preferably 50+ characters.  

Say you are totally new to Crypti and want to buy some Crypti at the current $0.005 each from Poloniex.  You download the Crypti "wallet" software and run it.  It loads the blockchain and gives you a welcome screen where you can enter a password.  It downloaded the blockchain in case you have a Crypti account capable of forging and you want to do so.  But you don't own any Crypti yet so you can't forge yet even if you wanted to.  

So at this point you download Awesome Password Generator and come up with a strong 50 character password.  You type this  password in and the program spits out your new Crypti account number which ends with a C.   You write this account number down on a piece of paper and close the Crypti wallet software.   SO FAR NOTHING ASSOCIATED WITH THIS ACCOUNT NUMBER IS ON THE CRYPTI BLOCKCHAIN YET.  You go to Poloniex and buy some Crypti with Bitcoin you already own.   Next you tell Polonex you want to "withdraw" this Crypti you now own.  You give Polo your Crypti account number.  Polo contacts all operational Crypti forging nodes and instructs them to transfer ownership of the amount of Crypti you specified from their account number to your account number.  The forger does this.  NOW YOUR ACCOUNT NUMBER IS ON THE BLOCKCHAIN.  POLO AND A LUCKY FORGER WHO GOT THE FEES PUT IT THERE, NOT YOU.  

You can now go into the jungle for a few years to write your novel on an old manual typewriter, away from any distracting connection to the internet.  When you finally come back, you can fire up your old laptop, run the Crypti wallet software again, enter the password that you never lost, and transfer your Crypti back to the Polo Crypti account and sell it for its appreciated $1 each.   THIS IS THE FIRST TIME YOU EVER ACCESSED YOUR ACCOUNT NUMBER ON THE BLOCKCHAIN, WHICH HAS BEEN CARRIED ALONG ON THE BLOCKCHAIN WITHOUT ANY DIRECT INTERACTION BY YOU UNTIL NOW.

Is this a "cold wallet" or "cold storage"?  Depends on the definition, and everybody defines a "cold storage" differently.   Here's how Bitcoin defines "cold storage":

http://codinginmysleep.com/bitcoin-cold-storage-in-plain-english/

To oversimplify, the most common Bitcoin versions of "cold storage" takes a chunk of the blockchain associated with an account out of cyberspace and puts it on a physical artifact that you can secure with physical means like a safe or a safe deposit box.  There's no longer enough info left on the blockchain to allow the account to be accessed from cyberspace.  For you to get these "cold storage" bitcoins back, you have to "read" that chunk of the blockchain back into cyberspace from its physical storage.  

Brainwallet blockchains like NXT and Crypti cannot be "factored" into "chunks" that can be taken offline.  All their data is right there for the world to see in all their glory, every minute of every day.  This approach theoretically allows a whole bunch of cool but tricky new features that NXT and Crypti are working hard to implement.   It also means that the blockchain and ALL accounts are right there for the taking by any hacker that can figure out a password that accesses an account that has previously been loaded with coin.  

Bitcoin has the ability to implement "cold storage" via brainwallet techniques among other ways such as "paper wallets", "hardware code safes", etc.   Bitcoin generally no longer recommends using "brainwallet" techniques for their "cold storage" because of so many people losing their money.  See:

http://cointext.com/brain-wallet-thefts-increasing/
https://bitscan.com/bitnews/item/the-pros-and-cons-of-brainwallets

All of this is valid.  However, there are many advantages that brainwallets allow which Bitcoin will never see because of how it is structured - another reason Bitcoin is so willing to abandon brainwallets as a technique.  Basically, "offline storage" = "secrets"; "brainwallet" = "open source"....

Brainwallet tech is the foundation Crypti is based on.  It's the only security method Crypti has got.  And DONE CORRECTLY, IT IS VERY SECURE.  However, HUMAN ERROR CAN EASILY COMPROMISE BRAINWALLET SECURITY.

IF YOU USE SIMPLE PASSWORDS, YOU WILL LOSE YOUR CRYPTI.

IF YOU LOSE YOUR PASSWORD, YOU WILL LOSE YOUR CRYPTI.

THESE TWO POINTS CANNOT BE STRESSED ENOUGH.

So, bottom line, brainwallets are indeed a form of "cold storage".  They enable many cool capabilities that are going to be developed in the near future.  And they have got to be handled with care by their users at all times.

Crypti is serious money for serious people.

I gotta say I would rather see:

"IF YOU USE SIMPLE PASSWORDS, YOU WILL LOSE YOUR CRYPTI.

IF YOU LOSE YOUR PASSWORD, YOU WILL LOSE YOUR CRYPTI.

THESE TWO POINTS CANNOT BE STRESSED ENOUGH.

USE 35+ RANDOM ALPHANUMERIC CHARACTERS IN YOUR PASSWORD."

on the 0.2.0 password page instead of:

"For security reasons, please use long passphrases."

Heck, I'd put in a link to Awesome Password Generator there too.

I saw too many people lose their NXT in the early days and get turned off of the whole cryptocoin thing because this was not common knowledge or widely discussed.  Crypti will hopefully do much better in this area.  It's critical.

That's interesting. How does it work? If you login to a remote note and enter your private key to login; what prevents the owner of the node/webserver from recording your key?

The key doesn't even get to the node. Everything is signed locally and you simply "upload" a hash.

If you log in from a public computer, or do not have anti-virus software running;  there is always the danger of a keylogger getting your password to Crypti and any other account you may have, banks, credit cards, porn sites, email, Facebook, etc.  

If you are in a public place and use a wifi or Bluetooth keyboard, the information typed on such a keyboard is not encrypted when sent to your I-Pad, and can be intercepted and used to steal your funds.

The Crypti passphrase is hashed before being sent over the web, so interception, while possible, is encrypted.