Bitcoin Forum
April 26, 2024, 02:30:05 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Dust outputs redeemable with obvious brain wallet keys, for what?  (Read 1076 times)
grau (OP)
Hero Member
*****
Offline Offline

Activity: 836
Merit: 1021


bits of proof


View Profile WWW
July 08, 2015, 12:57:43 PM
 #1

What is the purpose of creating tons of trivially redeemable outputs?
 
See:
https://blockchain.info/address/162TRPRZvdgLVNksMoMyGJsYBfYtB4Q8tM

Anyone could claim the 0.04 BTC there (at the moment) with a key derivable as SHA256("cat").
Rational miner will claim them for themselves, that however leads to a block stuffed with a big transaction like:
https://blockchain.info/block/000000000000000003dd2fdbb484d6d9c349d644d8bbb3cbfa5e67f639a465fe
since the 0.04 is distributed to hundreds of outputs.

The redemption attempts of non-miner will be included into the mempool by nodes in some non-conflicting combination until they are purged as doublespend.

Is this a troll, a DoS, trying to prove some point or engineered to drive up fees?
1714098605
Hero Member
*
Offline Offline

Posts: 1714098605

View Profile Personal Message (Offline)

Ignore
1714098605
Reply with quote  #2

1714098605
Report to moderator
1714098605
Hero Member
*
Offline Offline

Posts: 1714098605

View Profile Personal Message (Offline)

Ignore
1714098605
Reply with quote  #2

1714098605
Report to moderator
1714098605
Hero Member
*
Offline Offline

Posts: 1714098605

View Profile Personal Message (Offline)

Ignore
1714098605
Reply with quote  #2

1714098605
Report to moderator
"There should not be any signed int. If you've found a signed int somewhere, please tell me (within the next 25 years please) and I'll change it to unsigned int." -- Satoshi
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
fairglu
Legendary
*
Offline Offline

Activity: 1100
Merit: 1030


View Profile WWW
July 10, 2015, 01:45:43 PM
 #2

What is the purpose of creating tons of trivially redeemable outputs?

I see it as an attempt to multiply the spam effects, like throwing cash in the street to create a flash mob.

If many people see they can grab the spam, they will attempt to grab it, creating thousandths of dust collection transactions, which will further clog the network.

If the spammer was sending to a private address and collecting the dust, that would be just two tx.

By sending to a trivially redeemable output, he can expect many tx (1 for the dust creation, then many for the people attempting to grab the dust)


grau (OP)
Hero Member
*****
Offline Offline

Activity: 836
Merit: 1021


bits of proof


View Profile WWW
July 12, 2015, 07:41:46 AM
Last edit: July 12, 2015, 08:32:34 AM by grau
 #3

If that is the idea, it does not work for reasons:
- further spend attempts will not be broadcasted by a node after one of the attempts is included into the mempool
- people will figure soon that miner have advantage grabbing the outputs and stop trying.

Therefore the attack, if that is the purpose, is pretty lame.
fairglu
Legendary
*
Offline Offline

Activity: 1100
Merit: 1030


View Profile WWW
July 12, 2015, 09:13:06 AM
 #4

If that is the idea, it does not work for reasons:
- further spend attempts will not be broadcasted by a node after one of the attempts is included into the mempool
- people will figure soon that miner have advantage grabbing the outputs and stop trying.

Therefore the attack, if that is the purpose, is pretty lame.

People do not get rich from dollar bills thrown in a street, it does not prevent them from rushing and elbowing.

http://www.sott.net/article/290788-Shanghai-New-Year-stampede-kills-35-after-fake-dollar-bills-thrown-into-crowd

achow101
Moderator
Legendary
*
expert
Offline Offline

Activity: 3374
Merit: 6535


Just writing some code


View Profile WWW
July 12, 2015, 02:49:12 PM
 #5

If that is the idea, it does not work for reasons:
- further spend attempts will not be broadcasted by a node after one of the attempts is included into the mempool
- people will figure soon that miner have advantage grabbing the outputs and stop trying.

Therefore the attack, if that is the purpose, is pretty lame.
I don't think that was the purpose of the attack. However, there are thousands of those dust transactions, all of them the same size, so the client can just select inputs that haven't already been spent. Even if it double spends, it is still spam that clogs the network, which might be the idea here. Also, why would miners grab the outputs? In order to spend all of those transaction, they need to create a transaction that is larger than 1 Mb and it wouldn't be worth that much. It would be more effective for them to mine other transactions that have higher fees and they can both earn more money and confirm and clear more of the backlog.

I tried to claim those BTC along with another address that was used for spamming but the transaction required a 2.4 BTC fee.

johoe
Full Member
***
Offline Offline

Activity: 217
Merit: 238


View Profile
July 12, 2015, 03:09:39 PM
 #6

If that is the idea, it does not work for reasons:
- further spend attempts will not be broadcasted by a node after one of the attempts is included into the mempool
- people will figure soon that miner have advantage grabbing the outputs and stop trying.

Therefore the attack, if that is the purpose, is pretty lame.

Unfortunately, this attack is still quite successful.  One reason is that even miners spending the 1000 Satoshi outputs will get a lower fee (about 70 bits/kB) than with regular transactions.  So the spammer spent less for the outputs than cleaning them up costs. There are currently still > 5 BTC in the 100 most spammed addresses.  Cleaning them up takes about 70 MB.

The problem is that the dust limit is computed from the mintxfee and some miners have it still set to 10bits/kB.   Also it take much less space and therefore fee to send to 1000 Addresses than it takes to spend from 1000 Addresses.  There were several suggestion to penalize outputs over inputs when computing the required fee but AFAIK it was never done in the standard bitcoin client.

Donations to 1CF62UFWXiKqFUmgQMUby9DpEW5LXjypU3
amaclin
Legendary
*
Offline Offline

Activity: 1260
Merit: 1019


View Profile
July 12, 2015, 10:11:41 PM
 #7

- further spend attempts will not be broadcasted by a node after one of the attempts is included into the mempool
Wrong. Some clients (BitcoinXT?) broadcast conflicting txs.

There are currently still > 5 BTC in the 100 most spammed addresses.  Cleaning them up takes about 70 MB.
1185868 utxo (11.85868000 btc) as for block #365041 according to my set of compromised private keys
(some addresses are compressed, some uncompressed)

There were several suggestion to penalize outputs over inputs when computing the required fee but AFAIK it was never done in the standard bitcoin client.
Miners think about their profits.
We can not force miners to include "normal" transactions and reject "faucet/spam" transactions, because it is economically unreasonable for them
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!