Bitcoin Forum
May 05, 2024, 06:26:39 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 3 4 [5]  All
  Print  
Author Topic: Double spend with zero confirmations has been solved.  (Read 5850 times)
traumschiff
Legendary
*
Offline Offline

Activity: 1498
Merit: 1001


180 BPM


View Profile
August 17, 2015, 10:31:31 AM
 #81


John on sybil attacks regarding ZeroTime: https://talk.vanillacoin.net/topic/193/john-connor-irc-quotes

It may be possible to do it on InstantX, but you won't do it here.

Also please don't compare paid masternodes to random super peers. ZeroTime is fully decentralized.

Please note that the full code is available on GitHub, before trying to act professional and pasting the same attack vector that 10 people did before you (and which obviously John knows about also), do a research. Audit the code and give out your official review.

Quote
07:59 <@john-connor-afk> Finny is a offline attack.
08:00 <@john-connor-afk> 6 full block confirmations
08:00 <@john-connor-afk> so at least 20 mins 3.33 x 6
08:02 <@john-connor-afk> finney only applies to PoW coins in reality when you can outhash the network

It would appear that he doesn't understand what a Finney attack is:

http://bitcoin.stackexchange.com/questions/4942/what-is-a-finney-attack

https://en.bitcoin.it/wiki/Double-spending#Finney_attack


Quote
It requires the attacker to be mining and controlling the content of his blocks; however, he can in theory do this with any hashrate, in particular significantly less than 50% of the network hashrate.

66% of our blocks are POS.

Also these sources are...khm..

1714933599
Hero Member
*
Offline Offline

Posts: 1714933599

View Profile Personal Message (Offline)

Ignore
1714933599
Reply with quote  #2

1714933599
Report to moderator
1714933599
Hero Member
*
Offline Offline

Posts: 1714933599

View Profile Personal Message (Offline)

Ignore
1714933599
Reply with quote  #2

1714933599
Report to moderator
1714933599
Hero Member
*
Offline Offline

Posts: 1714933599

View Profile Personal Message (Offline)

Ignore
1714933599
Reply with quote  #2

1714933599
Report to moderator
Even if you use Bitcoin through Tor, the way transactions are handled by the network makes anonymity difficult to achieve. Do not expect your transactions to be anonymous unless you really know what you're doing.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714933599
Hero Member
*
Offline Offline

Posts: 1714933599

View Profile Personal Message (Offline)

Ignore
1714933599
Reply with quote  #2

1714933599
Report to moderator
1714933599
Hero Member
*
Offline Offline

Posts: 1714933599

View Profile Personal Message (Offline)

Ignore
1714933599
Reply with quote  #2

1714933599
Report to moderator
1714933599
Hero Member
*
Offline Offline

Posts: 1714933599

View Profile Personal Message (Offline)

Ignore
1714933599
Reply with quote  #2

1714933599
Report to moderator
monsterer
Legendary
*
Offline Offline

Activity: 1008
Merit: 1000


View Profile
August 17, 2015, 10:53:14 AM
 #82

What else do you need? There is no incentive to do harm as you can't do harm. Stopping ZT is not a harm scenario just something that is less optimal since our confirmations already take a maximum of 1.5 minutes on avg. People like you heavily misinterpret how a system like this should or could work.

Here is why this doesn't actually hold true:

* As a sybil attacker, I control the majority of nodes, therefore I am able to respond in any way I chose to queries about transaction locks
* So, when I attempt a double spend, the recipient node performs a query to determine lock status, I then am able to respond that the lock is in place
* Once I receive my coins, I submit my own lock whilst simultaneously dropping the fake lock from all my majority nodes memories, such that subsequent lock takes priority and persists from the POV of any other network queries
traumschiff
Legendary
*
Offline Offline

Activity: 1498
Merit: 1001


180 BPM


View Profile
August 17, 2015, 10:56:14 AM
 #83

@monsterer can I ask you if you actually checked the code that is uploaded in github?

You heavily underestimate John and keep questioning his developments on a forum where he won't respond to you. Did you or did you not audit the open sourced full ZT code?

Currently you are theory crafting on issues YOU think John has not dealt with.

monsterer
Legendary
*
Offline Offline

Activity: 1008
Merit: 1000


View Profile
August 17, 2015, 11:00:17 AM
 #84

@monsterer can I ask you if you actually checked the code that is uploaded in github?

You heavily underestimate John and keep questioning his developments on a forum where he won't respond to you. Did you or did you not audit the open sourced full ZT code?

Currently you are theory crafting on issues YOU think John has not dealt  without reading a single line of the code available.

I have no intention of reading code. Code is, at best, an interpretation of the design. The design is key.

edit: In addition, my intention is only to help people who do not have knowledge about the intricacies of consensus design to understand the problem with a little more clarity.
traumschiff
Legendary
*
Offline Offline

Activity: 1498
Merit: 1001


180 BPM


View Profile
August 17, 2015, 11:07:21 AM
 #85

@monsterer can I ask you if you actually checked the code that is uploaded in github?

You heavily underestimate John and keep questioning his developments on a forum where he won't respond to you. Did you or did you not audit the open sourced full ZT code?

Currently you are theory crafting on issues YOU think John has not dealt  without reading a single line of the code available.

I have no intention of reading code. Code is, at best, an interpretation of the design. The design is key.

/thread

Proof is in the code which he will deploy today on the public release. Either break it or review it if you are sure it's a weak design and doesn't need resources. The code is already up, you can start with it.

traumschiff
Legendary
*
Offline Offline

Activity: 1498
Merit: 1001


180 BPM


View Profile
August 17, 2015, 11:11:15 AM
 #86


edit: In addition, my intention is only to help people who do not have knowledge about the intricacies of consensus design to understand the problem with a little more clarity.

You are obviously more competent in this than John. Not sure why you didn't build the first proper TCP/UDP network capable of decentralized subsecond transactions. On a sidenote, part of his code is already running in a top 15 crypto since months.

rnicoll
Full Member
***
Offline Offline

Activity: 199
Merit: 110


View Profile
August 17, 2015, 11:39:12 AM
 #87


edit: In addition, my intention is only to help people who do not have knowledge about the intricacies of consensus design to understand the problem with a little more clarity.

You are obviously more competent in this than John. Not sure why you didn't build the first proper TCP/UDP network capable of decentralized subsecond transactions. On a sidenote, part of his code is already running in a top 15 crypto since months.

I'd hazard a guess at "UDP is a bloody pain to work with, and the advantages are uncertain", but that kind of gives the impression I'm against the idea - actually, I really like the idea of transaction relaying over UDP at least. I wouldn't do what I _believe_ Vanillacoin does and uses UDP without a controlling TCP channel (the whitepaper isn't too clear on that point), to the same node, but as transactions need to arrive quickly, in no specific order, and losing a few to network congestion isn't a crisis, on the face of it, it's a good idea.

Dogecoin Core developer, ex-researcher, trader.

Unless stated otherwise, opinions are my own and do not necessarily reflect that of other Dogecoin developers.
Este Nuno
Legendary
*
Offline Offline

Activity: 826
Merit: 1000


amarha


View Profile
August 17, 2015, 12:00:21 PM
 #88


John on sybil attacks regarding ZeroTime: https://talk.vanillacoin.net/topic/193/john-connor-irc-quotes

It may be possible to do it on InstantX, but you won't do it here.

Also please don't compare paid masternodes to random super peers. ZeroTime is fully decentralized.

Please note that the full code is available on GitHub, before trying to act professional and pasting the same attack vector that 10 people did before you (and which obviously John knows about also), do a research. Audit the code and give out your official review.

Quote
07:59 <@john-connor-afk> Finny is a offline attack.
08:00 <@john-connor-afk> 6 full block confirmations
08:00 <@john-connor-afk> so at least 20 mins 3.33 x 6
08:02 <@john-connor-afk> finney only applies to PoW coins in reality when you can outhash the network

It would appear that he doesn't understand what a Finney attack is:

http://bitcoin.stackexchange.com/questions/4942/what-is-a-finney-attack

https://en.bitcoin.it/wiki/Double-spending#Finney_attack


Quote
It requires the attacker to be mining and controlling the content of his blocks; however, he can in theory do this with any hashrate, in particular significantly less than 50% of the network hashrate.

66% of our blocks are POS.

Also these sources are...khm..

A stackexchange answer by noted Bitcoin expert Meni Rosenfeld and the Bitcoin Wiki itself which according to the page history was authored by sgornick(https://bitcointalk.org/index.php?action=profile;u=2228) are bad sources?
traumschiff
Legendary
*
Offline Offline

Activity: 1498
Merit: 1001


180 BPM


View Profile
August 17, 2015, 02:09:24 PM
 #89

ZeroTime released. Wallet version 0.3.2

https://talk.vanillacoin.net/topic/197/version-0-3-2-rc1-alpha-release

Enjoy breaking it if you can.

Este Nuno
Legendary
*
Offline Offline

Activity: 826
Merit: 1000


amarha


View Profile
August 17, 2015, 03:40:10 PM
 #90

ZeroTime released. Wallet version 0.3.2

https://talk.vanillacoin.net/topic/197/version-0-3-2-rc1-alpha-release

Enjoy breaking it if you can.

I see there that the bounty is now off the table for breaking zerotime. Any particular reason why? Not planning on attempting it myself, but I would be interested in reading reports from people who try it.
rnicoll
Full Member
***
Offline Offline

Activity: 199
Merit: 110


View Profile
August 17, 2015, 04:11:01 PM
 #91

I'd hazard a guess at "UDP is a bloody pain to work with, and the advantages are uncertain", but that kind of gives the impression I'm against the idea - actually, I really like the idea of transaction relaying over UDP at least. I wouldn't do what I _believe_ Vanillacoin does and uses UDP without a controlling TCP channel (the whitepaper isn't too clear on that point), to the same node, but as transactions need to arrive quickly, in no specific order, and losing a few to network congestion isn't a crisis, on the face of it, it's a good idea.


Oh, also, you get all the fun of dealing with UDP in NAT environments. Enjoy! I do not miss that at all.

Dogecoin Core developer, ex-researcher, trader.

Unless stated otherwise, opinions are my own and do not necessarily reflect that of other Dogecoin developers.
mrvegad
Hero Member
*****
Offline Offline

Activity: 616
Merit: 500


View Profile
August 21, 2015, 05:33:26 PM
 #92

Some new input on VNL here https://bitcointalk.org/index.php?topic=1157409.msg12195905#msg12195905 read from this post and on.
DanielRo
Hero Member
*****
Offline Offline

Activity: 689
Merit: 501



View Profile
August 28, 2015, 01:40:38 PM
 #93

Almost every time I'm visiting https://blockchain.info/unconfirmed-transactions I'm seeing Double Spend transactions.
Yesterday: https://blockchain.info/address/1Ku7ajZ8wCB9fDQAhfE4WThwkVc37VzWsg?offset=50&filter=0, https://blockchain.info/tx-index/99701355
Today: https://blockchain.info/address/163cTKxPehxPi4nJ3oTHAso6eXWywfYr7N, https://blockchain.info/tx/c0e00b3e484481b449bc7185cde28afe5966de4ae39f09a48aa1d931dafcac55.

It seems that some people are trying hard to get some wrongful coins.

Nothing is impossible :-)
Pages: « 1 2 3 4 [5]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!