Giter Site home page Giter Site logo

Comments (4)

jl777 avatar jl777 commented on August 14, 2024

they are not needed after a swap reaches the finished state, ie. a .finished file is there
also please make sure to save all the data as it could be needed to recover funds in case something goes wrong.

so the files are needed temporarily, after that they can be transferred into the DB.
maybe when there are no pending swaps, it is something that can be done in a batch

from supernet.

lukechilds avatar lukechilds commented on August 14, 2024

please make sure to save all the data as it could be needed to recover funds in case something goes wrong.

Yep, every single swap database entry has it's HTTP request/response JSON saved along with every JSON message we receive over the socket.

so the files are needed temporarily, after that they can be transferred into the DB.
maybe when there are no pending swaps, it is something that can be done in a batch

Yeah, I was thinking about some kind of batching, maybe just on app quit would be enough.

So we definitely can't disable them all together? They are a small privacy leak. People could easily derive your address and balance from the TXIDs. Our swap DB is encrypted so none of the TXIDs we store are readable by anyone else on the system, or more importantly in the event of losing a backup drive.

from supernet.

jl777 avatar jl777 commented on August 14, 2024

certainly a possible privacy leak if you lose your computer/drive to somebody else, but if you dont, then no leak.

maybe you can ask artem to not have files in 2.0

from supernet.

lukechilds avatar lukechilds commented on August 14, 2024

Well it's a similar issue with storing private keys in plain text. Obviously that's security instead of privacy so the implications are much higher. But if your data never gets into anyone else's hands it's perfectly fine. But inevitably it will eventually, so best to protect against that.

I will raise it with Artem for v2 👍

from supernet.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.