Search the Community
Showing results for tags 'android'.
Found 4 results
How to setup Yubikey 5 on Android phone and Windows Desktop guide, to replace Google Authenticator or Authy. Trying to think of ways this could be hacked, not quite sure all of the methods, but I think they all require physical possession of the yubikey itself and a password, on top of your login credentials. The idea behind this is hearing about sim swapping hacks and trying to get away from anything related to the phone carrier being hacked. Get yubikey somewhere, 2 or more of these as 1 will be a backup, probably official source so no tampering. I am using the Yubikey 5 for this example. https://www.yubico.com/products/ All authenticator downloads located here https://www.yubico.com/products/services-software/download/yubico-authenticator/ I don't have an iPhone so I can't test if the NFC part works on Apple products. On Android install the Yubico Authenticator App, now go to your site, lets pick https://www.southxchange.com/ . Go to user settings, Two-Factor Code Authentication and enable. When the QR shows up you want to scan this with your phone. Also write down the manual code. After the QT code is scanned in the phone will ask you to tap the yubikey NFC. Tap the yubikey to the phone. If you already have your backup yubikey, Click add and tap again. Now its stored on both yubikeys using QR code scanning. Enter the 6 digits to enable 2FA on your account. Download and install Windows Yubico Authenticator from the official link above. Plugin one of your yubikeys to your desktop, and your codes now pop up. Put passwords on both authenticator apps for extra security. For github, major exchanges, gmail, etc most of these offer to just add the key itself instead of using the 6 digit code. But this app is really handy for things like Discord.
This is a very easy way to track addresses from your android phone. Like watching masternode payments live. Download Coldfolio from https://whopper.io/ which links to the Google Play Store. Add a card Select your Crypto from the List Scan QR Code from the Denarius QT Wallet go to receive tab, click address and then click below Show QR Code Label your Card in Coldfolio and double check you only have the address This example shows the ?label=MN2, delete this part. This can always be modified later by hodling down the card and clicking modify. Keep track of your staking, masternodes, balances.
Introducing: CryptoPayAPI So a thought occurred to me the other day when I was looking at the wallet daydreaming about all the uses of cryptocurrencies when I realize that apps and games on platforms such as Google Play could accept them as credits instead of USD or other government currencies. Such as in Life of Jaxon to buy level packs, instead of using Google's in-app purchases API we could write one for DNR. It would not be too hard to do. Just ask the users to send coins to an address and set the note as a key, then ask for the TX ID. If I'm missing anything here let me know! I think this could be an excellent way to boost the use of DNR. Current Release: Alpha 2 GitHub Link: https://github.com/Roxas240/CryptoPayAPI
After a bit of thinking, If a developer uses my API and modifies some code of it, they could prevent a transaction from occurring on the client side. That would allow companies or ETH hackers (we all know about the articles) to take money without the customer getting what they paid for. If I were to start an escrow service, then it would be impossible for funds to be stolen. Why would a developer worry about taking up my offer? Security. While my company does not have quite a name out there, and me being the only employee it almost seems risky to people. But as the service grows, more and more trust will come. So a dev would sign up on my site and request an escrow. I would give them an address to deposit funds into. In the bottom corner of the box would be a message saying, "Check Address for Escrow". A user would then be able to copy the address and paste it into a search box on my site to verify we own that wallet. Once a transaction goes through, the customer would press a button accepting the fact that they received whatever they purchased. Once they confirm, I send the coins to the dev. If they do not press the button after a day or two, a notification is sent to the user forcing the user to press I did get the item, or they didn't. If the user says they never received the Item, the developers get a claim of non-payment and I get a transaction ID that user sends to me. A time stamped database will show the transaction ID and the time the item was purchased. The API will include data store inside of itself. This data storage engine is immutable, meaning that a developer cannot change its calls and how they work. An MD5 hash would then be generated from the storage engine API to verify integrity. That hash is then sent to my escrow service to check the integrity. If it succeeds the check, then a function is called on the device to undo the payment and remove the artifact left by the storage engine. If it fails the check, and the developer gets hit with a mark and funds are returned to the user. On Android, the SafetyNet API will be used to check for rooted devices. If a device is rooted, then the user is warned that all purchases cannot be verified and that the dev is not responsible for any non-delivered purchases. Please reply with any concerns or way to check things more effectively.