Quote from: Yamane_Keto on September 29, 2024, 03:02:04 PM

The GitHub file doesn't have an introduction to how to install the file or some necessary questions so I dug a little bit into the code:

Code:

self.sender_key_label = tk.Label(self.frame, text="Enter Sender Private Key (Limit to 64 Alphanumeric)", font=("Arial", 9), bg='#8fbc8f')
self.sender_key_label.pack()
self.input_sender_key = tk.Entry(self.frame, validate="key", textvariable=self.sender_key_var, width=85, font=("Arial", 9), borderwidth=2, relief="raised", show="*")
self.input_sender_key['validatecommand'] = (self.input_sender_key.register(self.val_k),'%P','%d')
self.input_sender_key.pack()

Why does the Bitcoin payment services processor need to get the private key? This can be done by usiing the MPK and creating the wallet without risking exposing the private key.

Thank you for your reply and interest.

The reason why the GitHub file doesn't have an introduction on how to install the file is because I haven't yet released a "Package" as this project is still in its early stage. Once the first Package version will be released, a number of security measures will be introduced.

You did the right thing of digging into the code itself.

The upcoming Package release and the updates thereafter will self-destruct all users data. This service will have no memory of users' data.

Line 3 of the quoted code has this: show="*", which means that data is not revealed just like entering a password. As the service doesn't keep any user's data, the only way to send funds is to enter that data as the address alone isn't enough to release funds. Rest assured that this part will be secured further.

The aim is for users not to be dependent on this payment service alone.