|
Title: Need developer to make a program with blockchain.info Post by: bassguitarman on December 27, 2014, 05:55:36 PM I need someone to develop a proof of concept for my bitmixer.io exploit.
Any language, but I like python Title: Re: Need developer to make a program with blockchain.info Post by: Gazby on December 27, 2014, 06:06:37 PM If you mean what I think you mean by "exploit", are you practicing responsible disclosure? And if so, how are you ensuring that by sharing the exploit you won't be releasing it to the world?
Title: Re: Need developer to make a program with blockchain.info Post by: bassguitarman on December 27, 2014, 06:34:25 PM If you mean what I think you mean by "exploit", are you practicing responsible disclosure? And if so, how are you ensuring that by sharing the exploit you won't be releasing it to the world? I have attempted to do responsible disclosure, and they claimed they have no exploits, so they don't do it. I'm going to offer a proof of concept, but if they decline, I will sell it. It's important to note that doesn't cause anyone to lose money, it only deanonymises Title: Re: Need developer to make a program with blockchain.info Post by: Gazby on December 27, 2014, 06:38:58 PM Publishing after the denial of a PoC is one thing, but I can't condone the selling of an exploit.
I'd urge you to reconsider, and others not to assist you until you have. Title: Re: Need developer to make a program with blockchain.info Post by: bassguitarman on December 27, 2014, 06:41:50 PM Publishing after the denial of a PoC is one thing, but I can't condone the selling of an exploit. I'd urge you to reconsider, and others not to assist you until you have. Ok, i won't sell, but i will publish if they decline. I pm'd you Title: Re: Need developer to make a program with blockchain.info Post by: Blazr on December 27, 2014, 06:50:48 PM They already know about it and admit it's a flaw:
The main current problem - fixed fee. If attacker knows that you use our service, he potentially can analyze blockchain for the next 24 hours and find correspond outgoing transactions. We will add the possibility to set custom fee further. Title: Re: Need developer to make a program with blockchain.info Post by: bassguitarman on December 27, 2014, 06:51:31 PM They already know about it and admit it: The main current problem - fixed fee. If attacker knows that you use our service, he potentially can analyze blockchain for the next 24 hours and find correspond outgoing transactions. We will add the possibility to set custom fee further. Different exploit, yours is already patched |