Bitcoin Forum
May 11, 2024, 04:17:40 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 [3] 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 ... 84 »
41  Bitcoin / Development & Technical Discussion / Re: New transaction malleability attack wave? Another stresstest? on: October 05, 2015, 09:54:53 PM
What goal you want to achieve? Do you want to tighten transaction validation rules?
Isn't it better not to confirm txs with high-S by miners?

The goal is to minimize malleability in the long run, and there are few parts playing together:

  1. wallets, which create transactions with "compliant" or "non-compliant" signatures
  2. nodes, which relay or don't relay transactions with "non-compliant" signatures
  3. miners, which mine or don't mine transactions with "non-compliant" signatures

("compliant" -> low s, "non-compliant" -> high s)

If BIP 62 rule 5 becomes a standard policy (or is enforced), then it would become harder to relay non-compliant transactions, though, the transactions of non-compliant wallets would also be rejected, which is probably not a favorable outcome.

Ideally miners don't mine non-compliant transactions, but assuming they reject all of them right now, at a time when not all wallets create low s values, then the same issue applies: legit transactions are not mined.

The ongoing active mutation of transactions made me wonder, whether targeted mutation could be leveraged - by miners or nodes - to facilitate the process:

By "fixing" non-compliant transactions the issue of dropped or rejected legit transactions would be addressed to some degree, and if primarily non-compliant transactions are mutated, then it could serve as wake up call for wallet software creators (and user's of such wallets), as the sentiment may shift from "let's pitchfork amaclin for messing with our transactions" to "let's create/use better wallets, which don't create bad transactions".

Once that happened, it could be considered to only accept low s signatures, first in form of a standard policy, and at some point it could enforced.
42  Bitcoin / Development & Technical Discussion / Re: New transaction malleability attack wave? Another stresstest? on: October 05, 2015, 08:05:04 PM
Stress-tests can make the network even stronger.

Could you flip your bot and mutate signatures with high s values, to target users with well, "non-compliant" software?
43  Bitcoin / Development & Technical Discussion / Re: New transaction malleability attack wave? Another stresstest? on: October 05, 2015, 10:13:25 AM
I'm curious, why is `SCRIPT_VERIFY_LOW_S` not a standard verification flag?
Because it would block ordinary transactions from many implementations.

I have been nagging implementers on and off for a long time to fix their behavior.  In this latest round it looks like Strongcoin, Bter, Kraken, anything using pybitcointools (full of really scary broken crypto, nothing should use it), electrum (just fixed because ThomasV is awesome), were things I could easily identify.

Oh, I see, thanks! This was what I feared.

I assume the issue is mostly one of awareness and the (lack of) seeing the need to take action.

Given that the transformation seems fairly simple, it would probably help to guide the process a bit: publish information about the issue and how to tackle it. A more radical approach and counter messure could be to setup miners/nodes, which actively mutate transactions to comply. Users with non compliant transactions would be affected, which likely causes some confusion (though certainly not more than during the "attack"), but it could help to pin down specific implementations that need to be improved.
44  Bitcoin / Development & Technical Discussion / Re: New transaction malleability attack wave? Another stresstest? on: October 04, 2015, 10:28:02 PM
I'm curious, why is `SCRIPT_VERIFY_LOW_S` not a standard verification flag?
45  Bitcoin / Bitcoin Discussion / Re: What do you do with your idle coins? on: October 04, 2015, 12:01:09 PM
JoinMarket (warning: experimental, as far as I know) may be used to gain a tiny interest for providing coins for CoinJoins:

https://bitcointalk.org/index.php?topic=919116.msg10096563
https://www.reddit.com/r/joinmarket

To quote:

Elevator Pitch for Investors

Firstly I'd like to clarify what I mean by investing. I don't want you to give your bitcoins to me. I dont want you to give your bitcoins to anybody. The private keys would be safely held on your own computer, known only by you and your wallet.

Features:
1. Earn an income from your investment bitcoins.
2. Very low risk. Your coins have to be on an online computer, but the software would only sign transactions that are valid and pay you the correct amount.
3. No commitment, withdraw your bitcoins at any time.
4. Improves the privacy of the bitcoin transactions, which makes bitcoin as a currency more useful and thus increases its value.
5. Improves the fungibility of bitcoin, since the distinction between 'clean' and 'dirty' bitcoins will be meaningless. Eliminates this particular systemic risk to bitcoin.

Downside:
1. Your return is likely to be quite low. Low risk = low reward.
2. You don't get paid unless people who desire privacy actually use this. If you're an investor you have an incentive to tell people about JoinMarket.

Some Dice sites allow to deposit coins for the house, where gains (and losses) are shared.

But in general, I share the sentiment: better check these things twice, before giving away the control over your bitcoins.
46  Economy / Service Discussion / Re: Bitpay's new business model... on: September 25, 2015, 11:11:39 PM
WoW !!! Mircea Popescu is back. Not only on Trilema, but also on Twitter - https://twitter.com/trilema



Great art, very down to the point. Who's that guy on the right? And the magician?
47  Economy / Speculation / Re: What happened to all the old timers? on: September 20, 2015, 01:31:09 PM
When I started, I was primarily active in the speculations sub-forum. Back then I was also "thinking in USD, and not in BTC".

This has changed.

I'm a perma bull with long term perspective.

At this point I acknowledge that I have no crystal ball, and therefore speculation equals risk to lose precious coins, at least for me.
48  Alternate cryptocurrencies / Announcements (Altcoins) / Re: The Official Mastercoin Foundation, Master Protocol & Mastercoin Thread on: August 23, 2015, 10:32:11 PM
Is this still viable for anything?

It really depends on your use case. With the upcoming release it's more and more going to be a tough decision in my opinion.

Do you need a larger community? Use Counterparty. Do you want a stable and fast desktop client or server? Use Omni Core. Do you want bets? Use Counterparty. Do you want crowdsales or bind tokens to arbitrary scripts via pay-to-script-hash? Use the Omni Layer. ... Contracts at some point in the future? ... etc. etc.

There are of course other alternatives, or maybe all this isn't useful to begin with, but I'm mostly comparing apples with apples here.
49  Bitcoin / Development & Technical Discussion / Re: Website for gathering the thoughts of core devs on: August 21, 2015, 06:28:07 PM
I'd consider Meni's proposal actually more as an extension: it could be applied on 1 MB blocks, but also on 8 MB blocks. And the mechanism seems to be soft-forkable. (edit: just to clarify: this shouldn't imply I don't consider it as valuable item on the list!)
50  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [NEWB] NewbieCoin - new feature: ODII(Open Data Index Identifier based on block on: August 19, 2015, 04:47:16 PM
Hi all,

I operate an API endpoint (api.bitwatch.co), which is used by NewbieCoin to request information about unspent outputs.

It started as backend for tests, and somewhere during the last year other projects began to use the API.

While I won't guarantee any availability of the service, I do care about users, so I just wanted to give you a headsup: please feel free to contact me via PM or other means, if there is an issue or anything else to discuss.

Cheers! Smiley
51  Bitcoin / Development & Technical Discussion / Re: Spam attack and miners choice of transactions on: August 16, 2015, 04:09:14 AM
Litecoin has a spam protection included that lets users pay a fee by output not only by size of the transaction, age of coins and size of amount. That effectively prevents spam.

My question is why that wasnt implemented into the bitcoin network. It could prevent the currently ongoing spam, which seems to be done often and shortly.

Hey Sabastian, you are probably referring to:

https://github.com/bitcoin/bitcoin/pull/1536

The logic behind Litecoin's solution: lowish outputs are penalized and each lowish output implies a higher transaction fee.

In retrospective it looks like it was superseded by a related solution:

The minimum values of outputs depend on the size of the outputs. It should not be uneconomic to spend outputs, and the larger the size of an output, the higher the minimum value shall be.

In practise: consider you receive a very low amount, let's say 1 satoshi, then it would cost you more to spend that value than it's actually worth. To prevent that the chain fills up with outputs, which probably won't get spent, the "dust" threshold was introduced:

https://github.com/bitcoin/bitcoin/pull/2577

There was recently a discussion on Reddit about the topic, which may provide some more insights:

https://www.reddit.com/r/Bitcoin/comments/3ci25k/the_current_spam_attack_on_bitcoin_is_not/csvtt8l

My question is why that wasnt implemented into the bitcoin network.
Who should implement things which break consensus rules? And how?

Output value and transaction fee policies don't break consensus.
52  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANN] FACTOM - Introducing Honesty to Record-Keeping on: August 16, 2015, 03:23:00 AM

Yeah, that's a bit short of information.

Here is some discussion about it, which probably lead to the tweet:

https://docs.google.com/document/d/1idEYEHd0woIFJsIiSGX482R2Q12zcQIXMwOcLquS9g8/
53  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANN][XCP] Counterparty - Pioneering Peer-to-Peer Finance - Official Thread on: August 05, 2015, 08:08:22 AM
I wasn't far wrong - Byrne said T0 is "ledger-agnostic" and that it could use Counterparty.

This isn't the case.

T0 uses OpenAssets, see:

- https://www.coinprism.info/asset/AchDKMsBeAfAQPBPzjHV8bB9WbBYJ1oEcp
- https://www.coinprism.info/asset/AJDL3C38AvULMCxDNM5VqBFdGB2uPknopt
- https://www.coinprism.info/asset/AMizaFrvXCNwTWVA6ijfLqxd1jmA1L2oct

Or with their own explorer:

- http://t0.com/asset/AchDKMsBeAfAQPBPzjHV8bB9WbBYJ1oEcp
- http://t0.com/asset/AJDL3C38AvULMCxDNM5VqBFdGB2uPknopt
- http://t0.com/asset/AMizaFrvXCNwTWVA6ijfLqxd1jmA1L2oct
54  Other / Meta / Re: SebastianJu getting seduced by trust farmers - and he's loving it! on: August 04, 2015, 09:56:45 PM
Is there any evidence that people blindly start trusting each other, only because there is some green text?

I'd assume one would carefully read the actual trust ratings and follow the references first, before trading with a stranger.
55  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANN][XCP] Counterparty - Pioneering Peer-to-Peer Finance - Official Thread on: August 04, 2015, 08:47:14 PM
http://www.bloomberg.com/news/articles/2015-08-04/wall-street-meet-block-368396-the-possible-future-of-finance provides a hint: block 368396.

When looking through that block, there are three notable transactions, with bare multisig encoding:

- https://blockchain.info/tx/adb8129bed9efb0b6ebf4bac8fee2d70ab41fea7a0027b9371c100fa360bb38a
- https://blockchain.info/tx/1c751d4af1fa2385d6df008fede770f365b71c8138b180cc75813e0955d3d0ea
- https://blockchain.info/tx/b7547019ee64f438a05d4458ff879765d984a541a046871d5495d0d0cf92c413

Looks like the Symbiont mainnet testing started at least two days ago.
56  Alternate cryptocurrencies / Announcements (Altcoins) / Re: The Official Mastercoin Foundation, Master Protocol & Mastercoin Thread on: July 30, 2015, 11:58:41 PM
Are there any reason hold MSC anymore?
XCP have all great projects going Symbiont, GetGems, Spell Of Genesis etc but what there exactly are running with Omni?

MaidSafe is higher valuated than all XCP projects combined, based on coinmarketcap.com. And in regards to provided usefulness at the very moment (and volume) Tether is probably worth to mention.
57  Alternate cryptocurrencies / Announcements (Altcoins) / Re: The Official Mastercoin Foundation, Master Protocol & Mastercoin Thread on: July 13, 2015, 09:01:58 PM
I'm thinking outside the box here. So I'm aware that bitcoin is the main desirable chain here, however bitcoin should be also thought of as the sha256d network of hardware.

What is the feasibility of in-addition to bitcoin, omnicore is copied and also run on ixcoin and i0coin to take advantage of these two bitcoin merge mined coins. (lets ignore that these chains need to have majority hash running the new versions that can support this)

Omni could act as a routing protocol for transactions that go to the appropriate chain, maybe atomically, maybe with a decentralized exchange. But omni would live in 3 places and communicate with each copy and respective chains.

In general I think this is an interesting idea, and in theory, as long as a coin has a mechanism to publish arbitrary messages, in one way or another, it should be possible to port the protocol.

However, I see a practical issue: if the global state is shared across multiple blockchains, then it would be mandatory to continuously keep up with all chains at the same time. Primarily, this has an impact on the resource consumption, like disk space to store the chains, and right now Omni Core requires a full copy of the Bitcoin blockchain, with enabled transaction index.

This is pretty wasteful, given that only a fraction of all (Bitcoin) transactions are Omni/Master transactions. It's one of the things I have in mind for some time, and while Omni Core isn't ready for it yet, the preperations were done during the class C/OP_RETURN integration, to support a no-txindex mode, and ultimately to support block pruning. This would at least tackle the space requirements, even though the additional processing of other chains would still be given, and I don't see an easy solution for it at the moment.

Another question that comes to my mind is the following: how are multiple chains synchronized?

While Omni transactions are unconfirmed, the state is fuzzy, and may change at any moment. Once transactions confirm, their order within a block determines the sequence of actions. But if there are multiple chains, then it basically comes down to the question: which block happend first? Bitcoin block xxxxxx, or XYZ block yyyyyy?
58  Bitcoin / Development & Technical Discussion / Re: Question on CPFP and what happens if its violated. on: July 06, 2015, 09:23:02 PM
Would a block be valid if one of it's TXs (txid:y, aka "child") is spending outputs that are still in the mempool (txid:x, aka "parent")?

No, this isn't possible. The parent must be processed/mined before the child can.
59  Bitcoin / Bitcoin Discussion / Re: How bitcoin dev's are helping to kill bitcoin on: July 06, 2015, 09:18:56 PM
If you have antivirus software some of it is known to corrupt Bitcoin, you should disable it or except the Bitcoin directories.

Please, for your own sake, don't do this.

I'm not aware of any antivirus software that interferes with Bitcoin Core, but the better alternative would probably be to switch to a less hostile antivirus product.
60  Bitcoin / Development & Technical Discussion / Re: Transaction v3 (BIP 62) on: July 05, 2015, 07:19:05 PM
BIP62 mentions that transactions that want to get malleability enforced in blocks should be in version 3.
I am puzzled, because I see nowhere in the bitcoin source code where the check against v3 is done.

There are no v3 transactions currently, and this seems more like a feature for the future, as sort of stated at the bottom of BIP 62.

It means that legacy transactions with high locktimes cannot be spent (if they have non-DER signatures).  It would need a hard-fork to reverse.

v1 transactions remain valid, and the use of v3 appears to be optional, but all v3 transactions must follow the rules of BIP 62:

Quote
- All transactions in v3 blocks are required to follow rules #1-#2.
- v3 (and higher) transactions in v3 blocks are required to follow rules #3-#7 as well.

When 95% of the past 1000 blocks are v3 or higher, v2 blocks become invalid entirely. Note however that v1 (and v2) transactions remain valid forever.

And this seems to be the relevant part of BIP 66:

Quote
The requirement to have signatures that comply strictly with DER has been enforced as a relay policy by the reference client since v0.8.0, and very few transactions violating it are being added to the chain as of January 2015. In addition, every non-compliant signature can trivially be converted into a compliant one, so there is no loss of functionality by this requirement. This proposal has the added benefit of reducing transaction malleability (see BIP 62).
Pages: « 1 2 [3] 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 ... 84 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!