What is the most critical problem of Grin?

61

I also thought along that line. This should work when just telling the protocol (works for using tor , audio, nfc protocol). But if extra metadata is needed such as a phone number or email, it can become more difficult due to space constrains not sure how much fits in a QR code). It could also be a single link to online payment preferences in order, but the sender contacting this onformation would lead to IP information being leaked. So I prefer your suggested solution. The challange will be to make it as minimal as possible.

Edit: QR code fits 3KB (around 7000 characters), which is more than needed. So your solution should work fine, just wrap the slatepack adress and other transfer information in prefered order number with the needed metadata

62

Imo my grin ā€œaddressā€ could consist of these 3 things:

  • pubkey A used for encrypting messages for me
  • information of how to reach me (tor pubkey + version, signal, whatever else, maybe ordered, but probably the other party should be the one picking the transfer method)
  • signature done with pubkey A over all this data to prove that I (the owner of this pubkey A) generated all of the above data

I didnā€™t think much about it honestly so it could all be wrong :slight_smile:

2 Likes
63

Iā€™ve already used the explanation as you suggested in my new project https://wallet.easygrin.org , take a look!

64

Without open source, security cannot be guaranteed

65

Safety is the most important

66

Itā€™s running on cloud. Open source means to open the door for Hackers.
Itā€™s designed for small amount of funds to be transferred between mining pool and exchange or local wallet. Donā€™t put large amount in it for long time and your risk is limited.

68

You are right. I know that scam website too, so I designed this website not encouraging people store their funds in it. Itā€™s purpose is become a pipe between mining pool and exchange or local wallet, small funds go through it instead of stay in it.

69

so I designed this website not encouraging people store their funds in it.

Please warn the users of the risk when storing GRIN there, this is important !

If you dont want to release the code, itā€™s also fine , but donā€™t count on much support from the GRIN community then. Our spirit is open-source and even all major wallets are open-source.

I dont mind if you offer a payed service for your wallet once its open-source , or some other ad-based business model.

2 Likes
70

Sure Itā€™s important to warn the users of the risk and Iā€™ve already done it, in case you did not really look into it. I donā€™t expect some support form this community here. Iā€™ve just shared some ideas about Grin here and for now Iā€™m telling @vegycslol Iā€™m shareing the same idea with him about slatepack.
Making it clear, Iā€™m not promoting my website here. WARNNING: Please donā€™t access it if you donā€™t like the idea. Itā€™s NOT open-source for now and put your money in it you will be taking RISKS .

71

I totally agree with what youā€™re describing.

I think there are enough open-source Matrix clients that forking one of them and adding a UX for grin payloads would be a great idea!

Of course someone can just use Signal or even texting, but a client that purposely renders grin slatepacks in a beautiful way would be a good step in showing an ideal UX.

And we need Grin wallets to start supporting app-URIs so that we can prefix slatepack payloads with somethings like grin://[slatepack] so that users can simply click on the links and have it open in their preferred grin wallet app.

4 Likes
72

The official Grin wallet is not very friendly to people who donā€™t know much about programming. I hope the official wallet can be simple, easy to use and stable.

I wish Grin better and better, more and more people use it, and the price is getting higher and higher!

1 Like