Fixes have been made to the Viacoin-Seeder


What is the Viacoin-seeder ?
============================

Viacoin-seeder is a crawler for the Viacoin network, which exposes a list
of reliable nodes via a built-in DNS server.

Features:
* regularly revisits known nodes to check their availability
* bans nodes after enough failures, or bad behaviour
* keeps statistics over (exponential) windows of 2 hours, 8 hours,
  1 day and 1 week, to base decisions on.
* very low memory (a few tens of megabytes) and cpu requirements.
* crawlers run in parallel (by default 24 threads simultaneously).

Fixes & Optimization
============================

1. The DNS parser of the Viacoin seeder was vulnerable to a dos attack.
A crafted DNS req could trigger infinite recursive function calls.
This exploit could lead to a stack overflow.

The vulnerability is fixed.
However I noticed a lot of Altcoins if not the majority that have seeders are vulnerabile.
Most altcoins use a seeder. Bad altcoins don't have seeders & you usually have to add nodes.

2. The protocol timeouts have adjusted to improve the seeder.
A commit has been made to avoid connecting to non valid ipv4 ranges.

3. a bug fix to fix negative responses.
Previously if the resolver was asked for a record it didn't have, it would return a response with a NS-record in the authority section.

4. Increase the TTL

5. Wait for more than 1 single address to respond

6. DNS will listen on ipv6 instead of ipv4


Seeder dos exploit that could have been used.


* exploit example by jonasnick

Been really busy with Viacoin !
But just pushed a few updates to the master branch for a new Viacoin version 0.10.11

This is not 0.13.2 (in development) but 0.10.11 contains a lot of security fixes. I also updated the Viacoin seeder with a security fix.

I will write about all of it later. It just has been a busy week.
Getting the old Viacoin to compile the window binaries was a pain since the source code was so old. So yeah I also updates Viacoin with newer versions of dependencies. (new Qt, Boost, Cache etc)

It's going well, soon Viacoin will be on 0.13.2.
That should make auxpow a bit more easier.

I might have to hire a dev specialized in auxpow

Easy !
Almost at 0.13.2
Solving conflicts can be some effort but so many updates !
... Missing that "verified" symbol because I was working in another branch to experiment.. didn't take my GPG key with the rebase.
I will try from now on to have my GPG key with the next rebases to have that verified logo. (Not that it matters much, call it professional or just autism)

Glad this upgrade from 0.13.1 to 0.13.2 is relatively easy with some git/github skills.


* oh cool I'm now an sr.member on btct. I started with a newbie account from 2014 (never posted anything before VIA)

Well wish me luck. This will be a long Friday night... Or weekend.
Keep an eye on the github repo.

If anyone see a mistake or possible improvement, send a private message or pull request.

I'm really looking forward for the day someone will help me with a pull request 

* I already started with 0.13.2, see the commits

Yeah this also applies to XCP. It is off topic.
But alright, follow the instructions https://github.com/ClearingHouse/clearinghoused

Questions about xch into the xch Ann.
XCP questions don't get asked in a Bitcoin room.

Any pool where you can mine LTC & signal Segwit I guess.
I run a mining pool too (since few months ago).

Give me a day or 2 and I can make mine Segwit compatible & test it.

The hard part is the rebase with merged mining. So merged mining is the hard part.
Introducing to pools might be easier. I'm pretty sure.. Almost know for a fact that they are ok with Segwit for Viacoin. I heard good things about 2fa pool owner and him being and I quote "a chill guy". However I would chill too with a couple mil

Commits for today

Commits for today.
I have a commit or 2 ready but needs some testing/improvements before pushing to github.
I will do that tomorrow
 

Yeah just a frustrated other coin developer who got delisted on almost every exchange left with only yobit.

Please read the rules:

No spamming. Keep on topic.
Duplicate posts will be deleted.
Abusive comments will be deleted.
Baseless accusations will be deleted.
Posting fabrications is not allowed.
No cross-posting with other topics. Keep on topic, this thread is about Viacoin.
Opinion posts are welcome, but please back up your point of view and do not repeat yourself multiple times. Seeking clarification is OK or adding new information to support your views.
3rd party projects, other projects, related services and products like independent wallets and services should not be advertised on this thread.

Opinion posts are welcome, but please back up your point of view and do not repeat yourself multiple times.
Stop using Abusive comments in attempt to add power or whatever the reason is that you need to use it.
Also you made 1 racist comment by using the N word. This is possibly offensive to a lot of people.

Telling a timeframe usually backfires 9/10 from what I've seen over the years.
Only thing I can say is, as soon as possible.

The merged mining question you have is in the Ann. You know, the first page with all details about Viacoin.
The thing that most people read before they invest.

But the biggest pool https://www.f2pool.com/

I want it as soon as possible, before Bitcoin is what I aim for.
Right now one of the things to do is Merged Mining, after that SegWit will follow with the new Version of Viacoin.

It will be one of the very few altcoins with bleeding edge technology.

Glad Christmas & new years eve are over.
More hours on a day to work on Viacoin.

I will try to make a few commits today & this week.