I don't think you realize quite how close this came to a monumental disaster. Had the market been released prior to this the damage done would have been exponentially greater and the ShadowMarket un-trustable thereafter.
The entire chain ws deanonymized which is pretty much the worst thing one could imagine happening. Should such a fate befall DASH or XMR the markets and crypto-community would likely be less forgiving than some members of this community.
More immediately SDC seemingly has no crytorapher, so how will this (and potential future) critical flaw be fixed properly?
SDC has poor distro and a few large bagholders. It is accordingly difficult to judge anything by the SDC market price imo.
But the market hadn't been released yet. So there goes your first point out the window. Why would you think TV is gone? EDIT: Nevermind. Just learned TV is gone but since he fucked up ring sig maybe that is for the best. Confirmed Ryno still at the helm with the rest of the team. SDC has one of the best DISTRIBUTIONs in crypto since the fairlaunch, the price has helped many new people get into it, it is not an IPO/ICO and did not have a premine or a million on it's first block. Sorry you dumped. QQ. |
|
|
|
I am not really sure how much lower you Monero crew can go now, you have even put a neg rating on our irc bot rutherford.
It's a bot. Bot postings break forum rules.  |
|
|
|
First and foremost, that code hasn't been implemented yet into the main chain of Monero. It hasn't been implemented in any chain whatsoever. That is purely R&D work on cryptography. Maybe that's how he came across the math issue, I don't know the details. @erok There is no such bug in Monero itself. It uses the proper method for key images, not the incorrect one. I guess it's a good thing I didn't run a PR campaign around it then.  Then again, that's not the type of guy I am. |
|
|
|
/research-lab/ isn't the main Monero repo. If ShadowTrash refuses to pay Shen for his work, I'll cover the bounty myself. It's unforgivable SDC would advertise rewards for bug hunters, then renege. So it hasnt been patched yet?! And you guys think its a good idea to attack another crypto?! Also the bounty is being paid you moron (from what I read in slack). I don't think SDC can patch this. It's de-anon'd the entire chain. Better to start over, with some good crypto. The bug doesn't exist in Monero. The commit for our Research Lab repo is for documentation purposes. I'm glad SDC is (reportedly) doing the right thing and paying Shen. It's a good thing they didn't listen to the "there's no problem here" hand-waving denials. The market wasn't released yet. There were few transactions at risk and probably none that could implicate anyone. Monero however has risk associated due to, as you all put it, "used by more people". SDC can fork no problem but damn you guys haven't even figured out how to fix it and haven't told anyone yet? You all still have the patch on the testbed? Should I start 4 reddit threads in 3 different subs, a blog, and a dedicated thread while trollfag'ing your main bitcointalk thread on a couple accounts? No, because I'm not that dude. STFU about me and SDC pls. |
|
|
|
/research-lab/ isn't the main Monero repo. If ShadowTrash refuses to pay Shen for his work, I'll cover the bounty myself. It's unforgivable SDC would advertise rewards for bug hunters, then renege. So it hasnt been patched yet?! And you guys think its a good idea to attack another crypto?! Also the bounty is being paid you moron (from what I read in slack). Can't believe Monero has a "gamebreaking" bug and you guys are acting like this. |
|
|
|
So now Shadowsend has been deanonymized the next step is to banter quantum stuff?
Screw it, lets go shopping.
This post will be deleted in approx 5 mins, like so many before.
It's how they keep their ignorant community in the dark. This post will be deleted in approx 5 mins, like so many before. ps lets not b nasty re community altho in this case its pretty much wheatclove, erok and… What would you rather we talk about? obviously the ring sig bug has been talked about to death. Are we now not allowed to talk about normal technology driven stuff because ch and his circlejerk troll buddy say we cant? You two aren't done trolling yet? You two had NOTHING to contribute to any of this except "neener neener" and now you are mocking normal conversation? What is wrong with you people? |
|
|
|
So I'm going to be a broken record on this issue. I'll repeat it a few more times, probably, until it sinks in or someone from the dev team tells me to piss off. Feel free to use those words.
People are actively working on quantum computer chips. As far as I can tell, only zerocash users have some level of comfort that they won't be affected. Zerocash is not quantum safe by any means. If that is your concern, do not go there. (Nor are any of these other coins, so please don't take this as FUD or pumping of anything.) Quantum-safe cryptographic methods are a current area of research. Zerocash may or may not be desirable for other reasons. Quantum computers are not one of them. Thanks, all this cryptography talk is confusing me, physics is easier. People are in awe of the possibility of quantum computing because of its potential to bypass the limitations of c (the speed), however the true limitations in computing power are found in the limited thermal and electrical conductivity of existing materials. (Remember superconducting computers?) What limits the mining speed in your 16 nm ASIC is not c but the ability to get rid of the heat and move the information around within and out of the chip. A practical quantum computing device will face these same limitations as soon as the information moves from the quantum to the classical domain which is where it has to be for us to use it. Thus I would not worry about quantum computing destroying crypto. We will do that first. It doesn't seem like quantum chips are a pipe dream. http://www.zmescience.com/research/technology/two-qubit-quantum-computer-0432/something interesting to think about is the amount of computations they will be able to handle is exponentially greater than any 16nm asic or any fpga setup. Heat being the limiting factor they should still be leaps and bounds more powerful. All cryptography will be looking at things differently when quantum attacks are prevalent. Neat reads btw coins101. |
|
|
|
I wasn't specifically referring to this project because you are actually replying to devs code and ffmad which have been quite responsive to this. I have been an investor in XST, SSD, SYS, CLOAK, and maaaaaany others
None of those coins did anything as remotely irresponsible and incompetent as what has been done here. That you and the rest of this ignorant SDC community can't see that speaks volumes. You are wrong and should feel bad for trying to spread fear. Also learn to post better; multiple post responses to a single response of mine? FFS you are a horribly incompetent forum user which highlights the idea that you don't know shit about what you are talking about. And you werent the reason for me selling. That is your ego talking. Shen is the reason and actually now I regret selling . Are you scared of going on your main account and posting here? |
|
|
|
erok did you dump your coins? Shall I post my XMR address now?
Finally the slimebag SDC community oozes from its sewer after the price goes down.
I doubt the devs or anyone else here has the dignity or morals to honor this bounty.
The claim is that publicly disclosing this fatal flaw did not minimized damage, but precisely the opposite is true. This means that the incompetent devs and ignorant community either
(1) Doesn't understand the nature of the flaw.
(2) Has no credibility.
(3) Both
All evidence points to 3.
Yeah I broke half my bag. No clue about the bounty or where that fund came from. The only thing clear is that you are not helping anything by shaming people that are trying to invest in innovation. And shaming a dev for a bug? Tha fuck have you contributed to the crypto scene that makes you think you have the right? |
|
|
|
Great work, Glad that anon was broken so noone will lose money. I suspected it based on the qualify of code that was coming from this team, thus didnt realy expect it to be of commercial quality anyways.. I doubt they will be able to fix it, so id just remove the fteature altogether if i were you.
I suspect based on the number of misspelled words in your post that your ability to judge the quality of code probably isn't too spectacular. Still, you wouldn't be sidhujag if you didn't use this as an opportunity to shill for syscoin (as you have done with the majority of your posts in this thread). It will be fixed. You are wrong, you may read the code of sys offers and judge for yourself.. Infact there is a bounty to try to break it or find major bugs. Then prove me wrong and show me exactly which portions of Shadow's code you think are of poor quality (the part Shen's bug report relates to obviously excluded) and explain how you would improve upon then. Otherwise it just looks like you're here dishonestly casting aspersions on another project in the hope of promoting your own. Point me out to your unit tests as a starter.. Can you do that? You made the claim so the burden of proof is on you. I'll be waiting. Oh i forgot you code is closed source lol.. Again point me out to your unit tests and I will start from there.. No tests? There rests my casse. the burden is NOT on me because you asked me, now if i dont have access to your code (tests) then i cant really answer your q and my original claim stands.. I guess i should have known you still havent grown up have you? The burden of proof on me just like it was on shen for proving his proof even though you guys refutted it with nonsense fud and 10 hours of testing (did you even do that?).. He had to go ahead and break the anon on the chain to prove it to you, that is very impolite and unprofessional! I guess someone who isnt really an engineer or scholar would never understand. Thanks thats all i needed to know.. I will update the decentralized market manifesto and remove anon from sdc aswell as update some pertinent information. It's actually open source which brings us back to what Sativa said about a community growing instead of constantly breaking each others kneecaps. If XMR is capable of debunking anything wouldn't they also be capable of submitting a recommended fix? Or shit even contributing it themselves to the git. Instead of setting up bounties for breaking shit why not setup bounties for fixing shit as a community fund. I'm just spitballing for fun now but dev incentive has always been a worry of mine which would be quelled by a project greenlight type system encompassing all of crypto. If you werent here constantly bashing others and deleting posts with valid content and concerns then maybe "dev incentive" wouldnt be a problem, heck i even considered you guys valid competitors until i came here and learned how you guys work.. Perhaps you guys are all young and havent been around long enough to understand the business/customer side of things. I wasn't specifically referring to this project because you are actually replying to devs code and ffmad which have been quite responsive to this. I have been an investor in XST, SSD, SYS, CLOAK, and maaaaaany others which this concept could apply to as well. Even your syscoin UX/UI could benefit from a system of dev incentives. And really the ignorance of the trolls usually experienced causes one to be "onguard". I suppose it was inevitable though that one of the trolls that my metaphorical sword of best intentions met was a legitimate criticism. FUCK ME FOR THAT RIGHT? lols |
|
|
|
Great work, Glad that anon was broken so noone will lose money. I suspected it based on the qualify of code that was coming from this team, thus didnt realy expect it to be of commercial quality anyways.. I doubt they will be able to fix it, so id just remove the fteature altogether if i were you.
I suspect based on the number of misspelled words in your post that your ability to judge the quality of code probably isn't too spectacular. Still, you wouldn't be sidhujag if you didn't use this as an opportunity to shill for syscoin (as you have done with the majority of your posts in this thread). It will be fixed. You are wrong, you may read the code of sys offers and judge for yourself.. Infact there is a bounty to try to break it or find major bugs. Then prove me wrong and show me exactly which portions of Shadow's code you think are of poor quality (the part Shen's bug report relates to obviously excluded) and explain how you would improve upon then. Otherwise it just looks like you're here dishonestly casting aspersions on another project in the hope of promoting your own. Point me out to your unit tests as a starter.. Can you do that? You made the claim so the burden of proof is on you. I'll be waiting. Oh i forgot you code is closed source lol.. Again point me out to your unit tests and I will start from there.. No tests? There rests my casse. the burden is NOT on me because you asked me, now if i dont have access to your code (tests) then i cant really answer your q and my original claim stands.. I guess i should have known you still havent grown up have you? The burden of proof on me just like it was on shen for proving his proof even though you guys refutted it with nonsense fud and 10 hours of testing (did you even do that?).. He had to go ahead and break the anon on the chain to prove it to you, that is very impolite and unprofessional! I guess someone who isnt really an engineer or scholar would never understand. Thanks thats all i needed to know.. I will update the decentralized market manifesto and remove anon from sdc aswell as update some pertinent information. It's actually open source which brings us back to what Sativa said about a community growing instead of constantly breaking each others kneecaps. If XMR is capable of debunking anything wouldn't they also be capable of submitting a recommended fix? Or shit even contributing it themselves to the git. Instead of setting up bounties for breaking shit why not setup bounties for fixing shit as a community fund. I'm just spitballing for fun now but dev incentive has always been a worry of mine which would be quelled by a project greenlight type system encompassing all of crypto. |
|
|
|
If I am not mistaken, Shonoe did say he identified where in Shadowcash's source code it is using the wrong deterministic hash Hp. That is all the proof that is necessary. Those of us who are very knowledgeable about one-time ring sigs can clearly see that if Hp doesn't have the correct properties then the anonymity is toast. Award him the bounty and stop whining. If you offer bounties and then make someone do nonsense extra work, then your bounties are not worth attempting. I don't often quote Anonymint, but when I do it's because there is a point to be made, and a lesson to be learned. So erok, do you want to man up and admit fault, or continue burning what infinitesimal social capital you have left after your previous nattering about "digging in mud" and "flinging crap?" Pro tip: when a cryptographer of vaunted ability such as Shen Noether tells you your shit is fucked, it's best not to double down by rambling about unrelated nonsense that invokes irrelevant, futile deflection frames such as "children digging in mud" and "people flinging crap." Because it turns out you are the metaphorical child digging in mud, who (upon being upset by harsh reality) resorted to flinging rhetorical crap. Learn to know and respect your superiors, then submit to their authority as appropriate. Or you will be taunted a second time! You may go now. You are dismissed. Good day, sir. I already did. I see you like kicking an investor while he is down almost as much as the community enjoyed this PR blast. While I appreciate the clarity I still think you all went about it in the most abrasive way possible ("digging in mud" and "flinging crap"). Now you want to keep taunting me or you about ready to move on? Because as an investor, I am about ready to move on. I do suppose I owe an apology though to iCEBREAKER for calling him a "punk bitch". Sorry about that. Same goes to AP. I couldn't swing my sword fast enough. |
|
|
|
someone in this crypto space needs to focus on an anon decentralized app platform to build a marketplace with and that has been SDC's focus.
Well it sounds like the last 18 months working on your "anon decentralized app platform" was jumping the gun. Fix the "anon" part first and then come back in another 18 months with a marketplace app and see how it does against open bazaar which will have already established itself. Good luck! p.s. Getting quality peer review will be more difficult for you now based on the way you treated a valid bounty claim this time. p.p.s. Is technovert and rynomster the same person? No shit. And I don't know. |
|
|
|
OH I am the biggest SDC supporter historically because the wallet is legit and a decentralized marketplace IS NEEDED and Monero aint doing it and all of the mainstream solutions are either centralized or require a coinbase wallet or some bullcrap to tie to. And I can't tip you because you are still on your anon troll account.
Well, I tried to help. No, it has been proven mathematically and empirically that the wallet is not "legit". CRZ's designs are beautiful and it's html5 which I love. You are confusing the different components now. I hope you are kidding. It's a cryptocurrency. Beyond that functionality, nothing else matters. No it's seriously the best looking wallet on the market. But that isn't why I like it. I like it because someone in this crypto space needs to focus on an anon decentralized app platform to build a marketplace with and that has been SDC's focus. |
|
|
|
OH I am the biggest SDC supporter historically because the wallet is legit and a decentralized marketplace IS NEEDED and Monero aint doing it and all of the mainstream solutions are either centralized or require a coinbase wallet or some bullcrap to tie to. And I can't tip you because you are still on your anon troll account.
Well, I tried to help. No, it has been proven mathematically and empirically that the wallet is not "legit". CRZ's designs are beautiful and it's html5 which I love. You are confusing the different components now. |
|
|
|
I edited my original post to include "My limited understanding is that reveals which signature belongs to the original initiator of a ring signature. Can any other information be deduced from that signature?
You have the SDC logo in your avatar but you have no idea what is being offered with this coin or how it works? A knowledgeable investor wouldn't ask this question. FINE i erased the "no it doesnt" I'm going to give you the benefit of the doubt and assume that even though you support this coin you are not just another SDC slimebag. Here's what you need to do: (1) Face your denail. (2) Dump your SDC while the price is still inflated. (3) If you like it so much, buy back cheaper. (4) Consider the profit your reward for monitoring this thread and staying loyal to your coin. If you want to tip me after you realize your profits, I'll take XMR. OH I am the biggest SDC supporter historically because the wallet is legit and a decentralized marketplace IS NEEDED and Monero aint doing it and all of the mainstream solutions are either centralized or require a coinbase wallet or some bullcrap to tie to. And I can't tip you because you are still on your anon troll account. |
|
|
|
So, their whole blockchain is now useless from a privacy perspective right?
The SDC portion was always equivalent to BTC from a privacy perspective (except for being less used which likely makes it worse in practice). The Shadow portion has functioning (afaik) stealth addresses but the ring sigs did not function. That makes it equivalent to BTC where addresses are never reused. No 'mixing' function. You are too much of a gentleman. It is much much much worse than bitcoin because people have used the "anonymous" feature of this coin with the expectation of anonymity. This jeopardizes their freedom, safety, and maybe even life. It's inexcusable. No it doesn't. SDT is still functional and SDC ring sig math was fundamentally flawed. I suspect that came from the size changes that were made to increase performance in 2014 which Smooth referenced in December as change he hadn't noticed in the code which I thought at the time was a significant improvement to ring. Just turns out maybe it wasn't or is just buggy. I don't know. You are in denial. They produced a list of every ring signature of SDC deanonymized. FINE i erased the "no it doesnt" |
|
|
|
So, their whole blockchain is now useless from a privacy perspective right?
The SDC portion was always equivalent to BTC from a privacy perspective (except for being less used which likely makes it worse in practice). The Shadow portion has functioning (afaik) stealth addresses but the ring sigs did not function. That makes it equivalent to BTC where addresses are never reused. No 'mixing' function. You are too much of a gentleman. It is much much much worse than bitcoin because people have used the "anonymous" feature of this coin with the expectation of anonymity. This jeopardizes their freedom, safety, and maybe even life. It's inexcusable. SDT is still functional and SDC ring sig math was fundamentally flawed. I suspect that came from the size changes that were made to increase performance in 2014 which Smooth referenced in December as change he hadn't noticed in the code which I thought at the time was a significant improvement to ring. Just turns out maybe it wasn't or is just buggy. I don't know. |
|
|
|
You issued this:
No but I do suppose I was the one blowing the loudest "bullshit trollfud" horn. |
|
|
|
|
Show Posts
