Circle payment gateway

nmei 2016-01-16 14:32:14 UTC #1

Very interesting. We need to reach out and tell them about NBT.

masterOfDisaster 2016-01-16 14:34:21 UTC #2

No source code?
For that type of software almost a must in my opinion.

nmei 2016-01-16 14:36:02 UTC #3

Please explain further…

masterOfDisaster 2016-01-16 14:45:40 UTC #4

I had a quick look at the page and when skimming it for the link to the source code, didn’t find any.
I’d never feel good a software like this on my phone without source code availability.
It’s still dangerous with open code, like we can see at Cryptsy (which claims to have been robbed by a malicious wallet software).
But without open code? No way.
The only reason to run Nu, when it was closed software, was trust in the developers.
And despite the trust, I ran it in isolated environments, e.g. on a RaspberryPi.

jooize 2016-01-16 14:54:39 UTC #5

Well, Apple and Google at least checks it to some degree, right? Even with source we couldn’t know whether Circle pushes that code to the app stores. Circle is also a company that would (or should) be liable.

masterOfDisaster 2016-01-16 15:04:09 UTC #6

Apple users are a bit lost. Android users can compile from code and install that apk file.
Would you trust Apple’s standard scans and heuristics to find code snippets in crypto coin related apps (consider Apple’s experience with that type of software due to their policy) that empty wallets to an address coded by the app developer?
Circle might be held liable, but if a rogue developer steals more then Circle can compensate, it will end bad for the users.
Maybe I’m just paranoid.

jooize 2016-01-16 15:13:06 UTC #7

Apple made developer accounts free (at least to some degree), so we can actually compile from source now through Xcode 7.

I wouldn’t fully trust that, no, but I do (or will) anyway. I don’t use Circle, but say I actually began paying with coins, I would choose to trust some wallet in the App Store. Compiling oneself and updating just isn’t practical. Wouldn’t keep all my funds in it, though.

I encourage paranoia, but in practice I think it’s not going to be a huge concern for most people. I do wish it were, so there’d be a more forceful push toward practices of such transparency. Say verifying that an app is built on the code we can view. Something like Gitian, maybe.

Cybnate 2016-04-10 01:35:06 UTC #8

This looks like some competition with wallets:

Circle adds British Pounds and Euros backed by a major bank to their wallets, basically integrating Bitcoin with fiat in a way.