Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: jake262144 on March 28, 2012, 07:02:44 PM



Title: [botnet down] Security researchers kill Kelihos @ArsTechnica
Post by: jake262144 on March 28, 2012, 07:02:44 PM
116 000 immobilized zombie machines is definitely good news. (http://arstechnica.com/business/news/2012/03/p2p-botnets-the-bigger-they-come-the-faster-they-fall.ars)

Does it come as any surprise that the bulk of the machine population were running the dated Windows XP?
Neglected, unpatched and unprotected machines are not only a risk to their owners but to the Internet as a whole.
If only the owners were technical enough to realize that...


Title: Re: [botnet down] Security researchers kill Kelihos @ArsTechnica
Post by: cypherdoc on March 28, 2012, 07:27:29 PM
that was an interesting article.  learned alot.


Title: Re: [botnet down] Security researchers kill Kelihos @ArsTechnica
Post by: SpontaneousDisorder on March 28, 2012, 07:38:22 PM
Is this the one that wasn't including transaction fees?


Title: Re: [botnet down] Security researchers kill Kelihos @ArsTechnica
Post by: cypherdoc on March 28, 2012, 07:52:31 PM
Is this the one that wasn't including transaction fees?

thats a good question.


Title: Re: [botnet down] Security researchers kill Kelihos @ArsTechnica
Post by: jake262144 on March 28, 2012, 07:54:34 PM
Is this the one that wasn't including transaction fees?
You must mean transactions, not tx fees.
I don't believe so, but the issue of not including transactions is far less serious than some give it credit for.
Mining empty blocks will at most slightly increase the time transactions take to get confirmed.

There are two larger risks botnets pose to Bitcoin:
(1) they could be employed to mount an array of disruptive attacks, possibly even the 51% attack
(2) they damage the economy creating downward pressure on the price. Unlike the honest miners, botnet operators can afford to sell their coins at $1.



Title: Re: [botnet down] Security researchers kill Kelihos @ArsTechnica
Post by: apetersson on March 28, 2012, 07:56:44 PM
good find!
this was the first time i learned something new about bitcoin that came from an MSM Article and not from the community.


Title: Re: [botnet down] Security researchers kill Kelihos @ArsTechnica
Post by: cypherdoc on March 28, 2012, 08:02:51 PM
Is this the one that wasn't including transaction fees?
You must mean transactions, not tx fees.
I don't believe so, but the issue of not including transactions is far less serious than some give it credit for.
Mining empty blocks will at most slightly increase the time transactions take to get confirmed.

There are two larger risks botnets pose to Bitcoin:
(1) they could be employed to mount an array of disruptive attacks, possibly even the 51% attack
(2) they damage the economy creating downward pressure on the price. Unlike the honest miners, botnet operators can afford to sell their coins at $1.



where can we look to see what % of blocks the mystery miner controls?


Title: Re: [botnet down] Security researchers kill Kelihos @ArsTechnica
Post by: jake262144 on March 28, 2012, 08:15:16 PM
This data can be mined out of the blockchain (http://blockchain.info/blocks) but I'm not aware of any project meant specifically to monitor the current situation.
BTW, doesn't the huge number of 1-tx blocks by Eligius(1) seem odd?

Notes:
(1) Supposedly. Blockchain.info has been known to make mistakes before.


Title: Re: [botnet down] Security researchers kill Kelihos @ArsTechnica
Post by: bitclown on March 28, 2012, 08:24:20 PM
I don't believe so, but the issue of not including transactions is far less serious than some give it credit for.
Mining empty blocks will at most slightly increase the time transactions take to get confirmed.
Wouldn't thin miners facilitate 51% attacks since they will continue to build upon the last block, regardless of whether it's valid or not? With the help of the Mystery Miner's 15% network power couldn't that make a 36% attack viable?


Title: Re: [botnet down] Security researchers kill Kelihos @ArsTechnica
Post by: guruvan on March 28, 2012, 08:26:29 PM
In the other thread about the solominer with 0-1 TXs blocks, there are graphs showing the temporal distribution of those blocks.

Also, re: eligius - this has been discussed, and is likely the solominer relaying blocks through them. Eligius has their actual stats posted.

I am of the growing suspicion (especially after the link to purchase "iMine" - botnet mining software) that the mystery miner is not one botnet operator, but many, using the same or similar software.