Quote from: kodtycoon on April 02, 2014, 08:21:06 PM

Quote from: jkoil on April 02, 2014, 08:16:53 PM

Quote from: j23a on April 02, 2014, 07:23:36 PM

Quote from: kodtycoon on April 02, 2014, 07:11:52 PM

Quote from: rix5 on April 02, 2014, 07:00:31 PM

Quote from: kodtycoon on April 02, 2014, 06:56:43 PM

Quote from: rix5 on April 02, 2014, 05:56:01 PM

we absolutely need desktopwallets aswell since myself for example don't trust anything that i do not have under my own control. I think others may think the same way. What's not on your own system (desktop wallet) is not really yours.
I wouldn't use any onlinesolution for storing coins. I think it's not safe. An onlinepage with login and password is like an invitation for hackers to brute force.

i am actually pretty excited about nem. Can't wait for release.

i use a 512bit passphrase.. your saying that isnt safe?

i don't even know what that is Cheesy

i got used to securing desktopwallets though and improved constantly on security and would be nice if i could use that knowledge for nem also.
I never lost a coin that was on my own system. But i lost quite some coins on hacked exchanges. I like my coins offline for that reason Wink

edit:
the logic is: if it is online theoretically the whole world can try to steal it. If it is not online nobody has really a way to access.

it means that it would take 100s if not thousands of years to brute force it...

well what if you go to someones house and you need your coins? ok if you have a 'seed' you can download a wallet but thats a pain in the ass... with brain wallets you can go from one comp to another very easily and move/use your coins.. also with the AE being inclient you can also trade with out even having to send your coins anywhere.. cant do that with offline clients.. also how many peoples computers have been directly hacked and coins stolen? if you state on here you have x amount of coins a good hacker wants then.. im sure they could take them.. brian wallets are the way to go.. for sure.. but there still needs to be support for offline storage i think... personally i think its pointless but if it makes people feel more secure then ok...

Actually, with current technology a password that would take 100s or thousands of years to brute force would be a password that's under 10 characters long. Every time you add one character, the number of years goes up by a very large amount.

A long time ago I created a program that would tell me how long it would take to brute force a password, based on certain conditions.

I just tried it and a password with ten characters, would take 379.72 years to brute force, if a 95 key keyboard was used, and the computer was testing out 5 billion password per second. Which is a lot more than the average computer can do.

If I add one more charter, the it goes from 379.72 years to 36,037.07 years.

12 characters 3.4 million years
13 characters 325.5 million years
14 characters 30 billion years
15 characters, my computer can't calculated, because the total number of unique passwords is too large. But with just 14 character we already went longer than the age of the universe.

Those are quite big numbers, maybe scares brute forcers away

Unless they think that "nope, the users won't use 95 keys, only a-z and 0-9, and there is 5 million accounts ... it is enough to get one of those"
How big are the numbers then?

When NXT accounts were hacked, was there any brute force case or was they all hacked by stolen passwords or the password was some "movie phrase" or such?

movie phrases i think.. dictionary words ect... im quite happy with my passphrase then lol

I only use Bruce Willis movie lines backwards and translated into Swahili first.