Bitcoin Forum

Bitcoin => Development & Technical Discussion => Topic started by: DieJohnny on November 09, 2015, 01:15:05 PM



Title: hacking bitcoin transactions
Post by: DieJohnny on November 09, 2015, 01:15:05 PM
What is the technical reason i cannot listen for new txns, modify them to spend to my address and rebroadcast as my own?

Txns are not encrypted, the target public address is visible and I can modify it and rebroadcast. What am I missing?



Title: Re: hacking bitcoin transactions
Post by: Foxpup on November 09, 2015, 01:25:05 PM
You're missing signatures (https://en.wikipedia.org/wiki/Digital_signature).


Title: Re: hacking bitcoin transactions
Post by: DuddlyDoRight on November 09, 2015, 09:08:07 PM
From what I know from testing and reading for some weeks with blockchain-spec and reference client: If I'm an attacker with the intention of cheating for coins I'm going to look in to forking and mining delayed blocks..


Title: Re: hacking bitcoin transactions
Post by: dex1 on November 09, 2015, 09:54:35 PM
You're missing signatures (https://en.wikipedia.org/wiki/Digital_signature).

And to make one of them you need private keys.




Title: Re: hacking bitcoin transactions
Post by: yenxz on November 12, 2015, 08:28:48 PM
is this really happen?what do you think about algorithm?what algorithm they use?


Title: Re: hacking bitcoin transactions
Post by: mezzomix on November 12, 2015, 09:22:17 PM
If I'm an attacker with the intention of cheating for coins I'm going to look in to forking and mining delayed blocks..

If you have enough money for this kind of attack you maybe can rollback/invalidate transactions but you are not able grab the coins from these transactions.


Title: Re: hacking bitcoin transactions
Post by: tommorisonwebdesign on November 13, 2015, 01:21:00 PM
All transactions, as previously mentioned, are encrypted with digital keys. You would have to be an excellent programmer to break the encryption.


Title: Re: hacking bitcoin transactions
Post by: achow101 on November 13, 2015, 01:23:16 PM
All transactions, as previously mentioned, are encrypted with digital keys. You would have to be an excellent programmer to break the encryption.
They are not encrypted. They are signed, which means that if any data in that is signed changes, the signature won't match.


Title: Re: hacking bitcoin transactions
Post by: Bjiornulf on November 14, 2015, 04:44:47 PM
But encryption and signature are pretty much the same thing, right?


Title: Re: hacking bitcoin transactions
Post by: achow101 on November 14, 2015, 06:55:22 PM
But encryption and signature are pretty much the same thing, right?
No! Encryption is converting a plaintext data to ciphertext so that only a certain persons can know what the plaintext is. Signing requires that the message ( plaintext) is known. It proves that the data was not modified.


Title: Re: hacking bitcoin transactions
Post by: avw1982 on November 15, 2015, 04:42:22 PM
All transactions, as previously mentioned, are encrypted with digital keys. You would have to be an excellent programmer to break the encryption.
To encrypt the lost Bitcoin details is very hard dude. and he would get his Bitcoin from the hackers If he feels pity only. If he is a good person He could get from him. he willingly he hacked means you can't get your hard earnings back for sure


Title: Re: hacking bitcoin transactions
Post by: RealPhotoshoper on November 18, 2015, 02:10:28 PM
hacking bitcoin transaction can be possible,as i read before that last year, Hacking Team already mentioned that they’re working on a feature that could expose transactions related to bitcoin and other cryptocurrencies. Documents have shown that this feature can also expose transactions using litecoin, feathercoin, and namecoin.


Title: Re: hacking bitcoin transactions
Post by: prezbo on November 18, 2015, 10:46:02 PM
hacking bitcoin transaction can be possible,as i read before that last year, Hacking Team already mentioned that they’re working on a feature that could expose transactions related to bitcoin and other cryptocurrencies. Documents have shown that this feature can also expose transactions using litecoin, feathercoin, and namecoin.
source?


Title: Re: hacking bitcoin transactions
Post by: makcik on November 19, 2015, 04:41:31 PM
You are missing everything. Bitcoins work on a different security algorithm, simply modifying transactions and sending bitcoins to your address will never happen.
Wallet providers are not idiots, they use multi layered security and these methods won't work for it. I don't know the actual method, as I'm not interested in doing hacking. But, whatever it is.. It is complicated.


Title: Re: hacking bitcoin transactions
Post by: achow101 on November 19, 2015, 05:33:55 PM
You are missing everything. Bitcoins work on a different security algorithm, simply modifying transactions and sending bitcoins to your address will never happen.
Wallet providers are not idiots, they use multi layered security and these methods won't work for it. I don't know the actual method, as I'm not interested in doing hacking. But, whatever it is.. It is complicated.
It is not just the wallet, it is built into the bitcoin protocol itself.


Title: Re: hacking bitcoin transactions
Post by: knightkon on November 21, 2015, 01:00:24 AM
If I am understanding the correctly, all of the information in the BTC programming is needed in order for the block chain to properly work right.  So I am guessing in order for you to do that, you would have to rewrite the complete block chain from the start so it all lines up.  Am I on the right track with my thinking?


Title: Re: hacking bitcoin transactions
Post by: shorena on November 21, 2015, 02:17:00 PM
If I am understanding the correctly, all of the information in the BTC programming is needed in order for the block chain to properly work right.  So I am guessing in order for you to do that, you would have to rewrite the complete block chain from the start so it all lines up.  Am I on the right track with my thinking?

No, "rewriting" the blockchain will not enable you to forge a signature. You either have to break ECDSA (or the specific curve used for bitcoin) or get the private key in question. Also not every single line of code within bitcoin core is needed for the protocoll to work. A large portion is the wallet part that is not required.


Title: Re: hacking bitcoin transactions
Post by: itod on November 22, 2015, 09:31:18 PM
If I am understanding the correctly, all of the information in the BTC programming is needed in order for the block chain to properly work right.  So I am guessing in order for you to do that, you would have to rewrite the complete block chain from the start so it all lines up.  Am I on the right track with my thinking?

Forget about gaining Bitcoin quick and dirty way by hacking, it's not possible. Every part of the Bitcoin security practices was carefully reviewed by the world's greatest security experts, and there are no holes in them. This doesn't mean you shouldn't take your time to learn as much as you can about Bitcoin code, because you can actually get money from that by offering your programming services to others once you figure out what exactly is going on there.


Title: Re: hacking bitcoin transactions
Post by: lottoshares on November 26, 2015, 11:08:02 PM
If I am understanding the correctly, all of the information in the BTC programming is needed in order for the block chain to properly work right.  So I am guessing in order for you to do that, you would have to rewrite the complete block chain from the start so it all lines up.  Am I on the right track with my thinking?

No, "rewriting" the blockchain will not enable you to forge a signature. You either have to break ECDSA (or the specific curve used for bitcoin) or get the private key in question. Also not every single line of code within bitcoin core is needed for the protocoll to work. A large portion is the wallet part that is not required.

Rewriting the blockchain is impossible for anything but the most recent blocks, and rewriting those would need over 50% of the computational power of the entire network. Each block in the blockchain contains a hash of the previous block in its header. If you attempt to change anything in the previous block its hash changes, and the next block needs to store that changed hash in its header. All Bitcoin nodes store a copy of the blockchain containing those hashes, and if you attempted changing an old block they would refuse to accept it as valid because its hash wouldn't match theirs.



Title: Re: hacking bitcoin transactions
Post by: watashi-kokoto on December 02, 2015, 03:08:38 PM
1. there is nothing encrypted.

2. in user wallet there is a hidden secret "private key" only the true owner of coin can sign "spend" his coin.

3. singature becomes invalid when you change anything in the transaction.
    - you cannot change the amount
    - you cannot change the destination

3. the obstacle to "fake" this signature is
 -  you do not know the key: solution: steal the wallet
  - you cannot fake ECDSA signature: solution: hack ECDSA
  - you cannot change payment: solution: find a SHA collision or RIPEMD collision

currently
ECDSA has not been hacked (nobody knows how to do it)
SHA collision has not been found (nobody knows how to find it)
RIPEMD collision has not been found (nobody knows how to find it)


Title: Re: hacking bitcoin transactions
Post by: maokoto on December 06, 2015, 08:42:18 PM
Do not understand it much, I am not hi-tech into bitcoin... but it is likely that your hacked transaction would not be the one accepted because other nodes will get the transaction and confirm it before you?


Title: Re: hacking bitcoin transactions
Post by: shorena on December 06, 2015, 09:14:31 PM
Do not understand it much, I am not hi-tech into bitcoin... but it is likely that your hacked transaction would not be the one accepted because other nodes will get the transaction and confirm it before you?

No, the reason is:

You're missing signatures (https://en.wikipedia.org/wiki/Digital_signature).

And to make one of them you need private keys.

You can "hack" (as in change) the transaction all you want. If you want the coins to go elsewhere you either need the private key (so the coins are yours anyway) or the signature will be invalid and the transaction not accepted.


Title: Re: hacking bitcoin transactions
Post by: avw1982 on December 09, 2015, 07:19:58 AM
All transactions, as previously mentioned, are encrypted with digital keys. You would have to be an excellent programmer to break the encryption.
Yeah they can try to break, But Bitcoin protocol uses combination of 2 of the strongest non-classified algorithms used by the NSA for encrypting Secret level documents and Breaking the signing algorithm requires a selective forgery attack or stronger and means that arbitrary transactions may be forged and entered into the system.


Title: Re: hacking bitcoin transactions
Post by: helloeverybody on December 09, 2015, 08:16:47 AM
I'm sure it's not possible and its best for everyone that it never is.  Bitcoin hack would be catastrophic.


Title: Re: hacking bitcoin transactions
Post by: DuddlyDoRight on December 10, 2015, 07:47:14 PM
If I'm an attacker with the intention of cheating for coins I'm going to look in to forking and mining delayed blocks..

If you have enough money for this kind of attack you maybe can rollback/invalidate transactions but you are not able grab the coins from these transactions.


I've read somewhere it might be possible to hide blocks that you can mine before they are broadcasted too. I forget the specs to the theory but it probably required controlling a peer or something to do with forks or fee-delays.


Title: Re: hacking bitcoin transactions
Post by: jaydipmodhwadia on December 10, 2015, 08:39:17 PM
Would controlling a mass node (by that I mean like all the nodes on blockchain) mean that you could perchance have the ability to control the whole blockchain?


Title: Re: hacking bitcoin transactions
Post by: Decoded on December 11, 2015, 02:58:31 AM
They aren't encrypted, but you can't broadcast them as your own. You're missing the tx signature. You also need all the other miners to confirm you transaction. You know how hard it is to change a transaction with even one transaction?