The Ripple Thread

[JohnQPublic]

https://ripple.com/faq/

Who owns Ripple?
No one owns Ripple. Ripple is an open source protocol created for anyone to build on top of or use.

Ok, then who are you?
We’re OpenCoin (http://opencoin.com), the organization that first built the Ripple protocol. We maintain this site to explain and promote it, but we don’t own or control it.

What is a ripple?
A ripple is a unit of the native currency that exists in the Ripple network. A ripple, also called XRP, is a digital currency that cannot be duplicated or falsified.

How many ripples (XRP) are there?
When Ripple started there were 100 billion ripples in existence. This number is slowly decreasing because, as a security measure, each transaction destroys a tiny fraction of a ripple. Don’t worry — even with the whole world using Ripple, it will take thousands of years to destroy all the ripples. You can see the exact number of ripples at the Live Network Graph (http://ripple.com/graph/#r3kmLJN5D28dHuH8vZNUZpMC43pEHpaocV).

How are you guys going to distribute the ripples?
We are giving away billions of the ripples in a variety of ways. The goal is to spread the ripples as evenly as possible among the people of the world. If you have any ideas, please let us know.

How do I get ripples (XRP)?
We will be announcing the details of our early giveaways over the next few weeks via our email list. If you would like to find out about the giveaways as they happen, please sign up for our email list on our homepage (http://ripple.com).

How is Ripple different than Bitcoin?
See ripple for Bitcoiners (http://ripple.com/bitcoiners/).

[vacuum]

Ripple stores your password in plain text. As bad as password reuse is on this planet, this is a fail waiting to happen. (https://ripple.com/client/#/security)
http://www.reddit.com/r/Bitcoin/comments/1clt5h/ripple_stores_your_password_in_plain_text_as_bad/

Oh for the love of... Even if you don't click "show", both your private key AND your password are there in the HTML.
<span ng-show="passUnmask" class="value ng-binding" style="display: none;">myplaintextpassword</span>
This is such an unbelievable security fail, I don't even... If this is the type of engineering we can expect from ripple, I think it will be very short lived.
I know what ripple engineers will say, "but the unlocking is done in your browser, just like blockchain.info". So what! You never ever show the user their password, that just allows an attacker to compromise the account without the user being aware of it.
Edit: in case I wasn't clear, I think OP is wrong about Ripple storing your password in plain text, that is not necessarily true. It may never leave your browser in plain text, but it should not be in your browser either.

[JohnQPublic]

Ripple stores your password in plain text. As bad as password reuse is on this planet, this is a fail waiting to happen. (https://ripple.com/client/#/security)
http://www.reddit.com/r/Bitcoin/comments/1clt5h/ripple_stores_your_password_in_plain_text_as_bad/

Oh for the love of... Even if you don't click "show", both your private key AND your password are there in the HTML.
<span ng-show="passUnmask" class="value ng-binding" style="display: none;">myplaintextpassword</span>
This is such an unbelievable security fail, I don't even... If this is the type of engineering we can expect from ripple, I think it will be very short lived.
I know what ripple engineers will say, "but the unlocking is done in your browser, just like blockchain.info". So what! You never ever show the user their password, that just allows an attacker to compromise the account without the user being aware of it.
Edit: in case I wasn't clear, I think OP is wrong about Ripple storing your password in plain text, that is not necessarily true. It may never leave your browser in plain text, but it should not be in your browser either.

"welcome to the new world of HTML5 local storage. It's like an app running locally really. Just like BitcoinQt knows your wallet password in plain text as well. I guess the password is encrypted on the drive (this can only keep dumb trojans away really), but it will be decrypted on-demand in memory."

[ximmy]

Sweet! Another digital currency... much safer than paper...

[osoab]

I thought this tread would have been about either this

http://www.youtube.com/watch?v=ciR7Fq2tqJ0

http://www.youtube.com/watch?v=ciR7Fq2tqJ0

or this

http://www.youtube.com/watch?v=CFsbAuX9P4w

http://www.youtube.com/watch?v=CFsbAuX9P4w

[Hillbilly]

This is Dotcom Mania/Greed all over again. And we all remember how that turned out.