Quote from: patmast3r on February 01, 2014, 07:57:16 PM

Quote from: opticalcarrier on February 01, 2014, 07:50:50 PM

Quote from: minefish on February 01, 2014, 07:32:35 PM

Is it possible to introduce a username + password option when creating/logging in an account aswell as a brute-force protection in order to make this crypto safer then the alternatives?

Debate!

Id like jaguar to at minimum to consider using a "username" and "password" field such that the password is salted with the username for key streching. It will still require a very complex password though.

And it would be possible for multiple usernames to be in use. LOL

But consider this, if NEM were to go live with a wallet.dat type of setup, it would make it VERY attractive. And if it were to get a wallet.dat type of setup before NXT did, then things would REALLY get interesting.

I envision the following upon opening the client:

User is presented with 2 options when clicking unlock, where the default is to utilize a wallet.dat setup and the user can open locally stored accounts or create a new one. There is an another symbol on this unlock page that is an icon representing a brain, where the user can click it to go the brainwallet route if so desired. Obviously this option would need to come with all appropriate disclaimers

What do you guys think? Im not the S/W dev, just the network dev but I think that would be ideal.

It sounds pretty cool.
The most awesome think would be being able to swtich between brain and wallet.dat.
Example: I'm going to work and in case I want to make a payment or alike in NEM I'd like to be able to access my wallet from any client so I put my wallet into the "brain".
Now I'm home again and I really don't want anyone to steal my NEM so I'll switch to a local wallet.dat file again and remove it from the "brain".

That would be so rad !
If we could introduce something like that people would throw their money at NEM like crazy

It may blow up the blockchain though. Maybe we don't have to hold it in a blockchain but make it possible to put it on a user hosted node. Like if I want to access my wallet from another client I would have to have my node running on the machine that holds my wallet.dat. That sounds doable.

Question: When you say a "wallet.dat type of setup", you're referring to how bitcoin addresses work (where the private keys are stored on the user's local machine), right?

Can't you emulate a "brain" with a wallet file? For example, with BTC, using blockchain.info, you could import a wallet (so its in the "brain") and then later export (so its out of the "brain").

Am I missing something?

(My current thinking is bitcoin like addresses with a wallet.dat file, so I'm just trying to gauge the sentiment for this vs "brain" wallets)