Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Yumcoin - Share and sell your digital creations for Bitcoin

yumcoin.com

Post reply on HN
Print view View original

21–30 of 31 posts

Re: Show HN: Yumcoin - Share and sell your digital creations for Bitcoin

#21

Post by yumcoin »

jyu wrote: post #19

I'd like to know more about the security measures you guys take. I've been working on a personal project, and haven't found any good guides to securing bitcoin transactions and managing private keys properly (assuming you host the bitcoin client on some server somewhere).

Obviously, the security and scalability of our platform is a big part of the value we provide to buyers and sellers.

For now, know that there are a number of measures we take to ensure that the site and users' bitcoins are secure: The site runs entirely over SSL (HTTPS). We protect against CSRF and XSS attacks. The addresses used for purchases are generated offline. Withdrawals are handled separately from the application server. Importantly, sellers can withdraw their balances quickly to the Bitcoin address of their choice. As we scale up, we'll store the majority of sellers' funds offline, keeping enough for transaction fees and withdrawals.

We'll be writing a more detailed overview of how we handle security here: https://yumcoin.com/security

Re: Show HN: Yumcoin - Share and sell your digital creations for Bitcoin

#24

Post by gesman »

Here's the way to build your own online store for $0 and pay $0 + 0% on every sale:

1. Install self-hosted wordpress - usually few clicks via your hosting company's CPanel.

2. Install WooCommerce wordpress plugin to make online store: http://wordpress.org/plugins/woocommerce/

3. Install BitcoinWay plugin to make sales in Bitcoins as well as in any other currency: http://wordpress.org/plugins/bitcoin-payments-for-woocommerc...

NOTE: Your bitcoins are completely safe as above setup sends bitcoins directly into your personal Electrum wallet without relying on middleman and it does not need to store your bitcoin private keys anywhere whatsoever.

Re: Show HN: Yumcoin - Share and sell your digital creations for Bitcoin

#25

Post by gesman »

gesman wrote: post #24

Here's the way to build your own online store for $0 and pay $0 + 0% on every sale: 1. Install self-hosted wordpress - usually few clicks via your hosting company's CPanel. 2. Install WooCommerce wordpress plugin to make online store: http://wordpress.org/plugins/woocommerce/ 3. Install BitcoinWay plugin to make sales in Bitcoins as well as in any other currency: http://wordpress.org/plugins/bitcoin-payments-for-wooc…

PS: to the one who downvoted my post - we all know who you are :)

Re: Show HN: Yumcoin - Share and sell your digital creations for Bitcoin

#26

Post by gesman »

jyu wrote: post #19

I'd like to know more about the security measures you guys take. I've been working on a personal project, and haven't found any good guides to securing bitcoin transactions and managing private keys properly (assuming you host the bitcoin client on some server somewhere).

The absolutely best way to avoid any problem with stolen bitcoins is to use Master Public Key (MPK) to generate bitcoin addresses for customers to send money to. Electrum wallet (electrum.org) supports MPK. MPK allows generation of bitcoin addresses programmatically in a "receive only" way, without private keys. This way - even if hackers totally break into your server and online store database and steal everything - not a single bitcoin can possibly be stolen.

Real life implementation of this concept: http://wordpress.org/plugins/bitcoin-payments-for-woocommerc...

Re: Show HN: Yumcoin - Share and sell your digital creations for Bitcoin

#28

Post by jyu »

yumcoin wrote: post #21
jyu wrote: post #19

I'd like to know more about the security measures you guys take. I've been working on a personal project, and haven't found any good guides to securing bitcoin transactions and managing private keys properly (assuming you host the bitcoin client on some server somewhere).

Obviously, the security and scalability of our platform is a big part of the value we provide to buyers and sellers. For now, know that there are a number of measures we take to ensure that the site and users' bitcoins are secure: The site runs entirely over SSL (HTTPS). We protect against CSRF and XSS attacks. The addresses used for purchases are generated offline. Withdrawals are handled separately from the applica…

Thanks for the overview. It's refreshing to get straight answers.

Which wallet are you guys using? I've heard good things about armory which make it easier to do hot / cold storage. Keeping withdrawals separate from the application server makes a lot of sense; is this using the SSL protocol for JSON-RPC on a non-standard port, and then closing off internet facing ports for that computer/server?

Are you doing any sort of 2 factor authentication to limit hacked accounts getting emptied?

I'd be happy to email or something if you're up for it.

Re: Show HN: Yumcoin - Share and sell your digital creations for Bitcoin

#30

Post by VMG »

gesman wrote: post #24

Here's the way to build your own online store for $0 and pay $0 + 0% on every sale: 1. Install self-hosted wordpress - usually few clicks via your hosting company's CPanel. 2. Install WooCommerce wordpress plugin to make online store: http://wordpress.org/plugins/woocommerce/ 3. Install BitcoinWay plugin to make sales in Bitcoins as well as in any other currency: http://wordpress.org/plugins/bitcoin-payments-for-wooc…

A lot more effort and predicates you already have hosting.
Post reply on HN