Bitcoin Forum
May 21, 2024, 09:13:13 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 3 4 5 6 7 8 [9] 10 11 12 13 14 »  All
  Print  
Author Topic: New transaction malleability attack wave? Another stresstest?  (Read 41216 times)
amaclin
Legendary
*
Offline Offline

Activity: 1260
Merit: 1019


View Profile
October 08, 2015, 07:42:47 AM
 #161

That's why POS coins like Peercoin have a bright future.
Sorry, man. I have bad news for you.
Enema
Sr. Member
****
Offline Offline

Activity: 445
Merit: 250


View Profile
October 08, 2015, 08:20:13 AM
 #162

That's why POS coins like Peercoin have a bright future.
Sorry, man. I have bad news for you.
Crap !
What have I missed ?

amaclin
Legendary
*
Offline Offline

Activity: 1260
Merit: 1019


View Profile
October 08, 2015, 08:31:34 AM
 #163

Crap! What have I missed ?
Decentralized systems like PoS are either very expensive to hodlers (compared to their stack) or unsecure to them in long term.
In fact, current fiat system is PoS - the big holders can change the consensus rules, because they have 51% of funds.

JeromeL
Member
**
Offline Offline

Activity: 554
Merit: 11

CurioInvest [IEO Live]


View Profile
October 08, 2015, 09:37:35 AM
 #164

Quote from: tl121
It requires leadership.
(...)
This part of the argument is the "leadership" problem.
If you are looking for a leader or more efficient ways to do stuff by introducing centralization and single points of failure, then you are not at the right place, nor in the right project.

Quote from: IETF from David Clark, inspiring quote you should try to understand
"We reject kings, presidents and voting.  We believe in rough consensus and running code"


Quote from: tl121
Protocol developers incompetent in foreseeing and avoiding problems their incompetent code and designs have created
(...)
Bitcoin is an open-source project open to every one who wishes to contribute: if you think you can bring value contributing, you are welcome.

Else please go away and waste another project's time with your unproductive comments.

basil00
Member
**
Offline Offline

Activity: 60
Merit: 10


View Profile
October 08, 2015, 11:28:56 AM
 #165

How do I determine whether it is signed with highS or not ?
Step 3: check, whether the S value is below the curve order

The is an easy rule-of-thumb to spot high-S signatures.  For example, the following sig is high-S

3046022100aea3c7faf22df9ecf795ddb470d000bb2345679363fde6c24df4ab9c6922ff5d022100ae2ff77a2cd10794f166cbb7782316d6ceb74fc22c2188a22c52f6f1847401fa01


If the highlighted hex "022100" appears in the middle of the sig, then it is high-S.  Compare with the low-S equivalent:

3045022100aea3c7faf22df9ecf795ddb470d000bb2345679363fde6c24df4ab9c6922ff5d022051d00885d32ef86b0e99344887dce927ebf78d2483271799937f679b4bc23f4701


The low-S has "0220" (highlighted) or something else.
gmaxwell
Moderator
Legendary
*
expert
Offline Offline

Activity: 4186
Merit: 8421



View Profile WWW
October 08, 2015, 05:43:32 PM
 #166

The is an easy rule-of-thumb to spot high-S signatures.  For example, the following sig is high-S
This test is not quite precise, so implementers of bitcoin software shouldn't implement the test this way. Smiley The threshold is not a power of two, so no tidy hex digit sniffing can be precise.
amaclin
Legendary
*
Offline Offline

Activity: 1260
Merit: 1019


View Profile
October 08, 2015, 07:01:26 PM
 #167

This test is not quite precise
you are too pedantic.  Grin
but.
this is not a consensus rule.
everybody has a right to search the pattern 022100 "in the middle of signature" and reject all unconfirmed transactions with it.
BitNow
Legendary
*
Offline Offline

Activity: 1260
Merit: 1003



View Profile WWW
October 08, 2015, 07:29:48 PM
 #168

Who's behind this stress test?


             ▐█████▄
            ▐█████████        ▄▄▄
            ▐████  ▐█████   ▀▀▀  █▌
            ▐███  ▐███████      ▐█▌
            ▐██▌   ▀█████▀     ▐█▀
       ▂▄▄▐██▌     ▀▀▀      ▐█▌
    ▐██████████████▄▄▄▄▄     ▄█▌
  ▐███       ▐███▀▀█████▄▄▄ ▐██
   ▐█▌        ▐███    ▀▀▀███████▄▄▄
    ▀▀▀        ▐███        ▐██▀█████▄▄
                ▐███      ▐██▌    ▀▀███▄▄
                 ▐███    ▐██▌  ▄▄▄▄▄  ███▄
         ▄████▄   ▐██▌  ▐███  ▐███████████
       ▐████████▌  ▐██▌▐██▌   ▐████████▀▀
        ▀██████▀    ▐████▀     ▀████▀
         ▐███▀     ▄█▐███
        ▐███▀   ▄████▌▀███
        ▐██████████▀    ▐█▌    █
         ▀████▀▀         ▐█▌  ██
                           ▀▀▀▀





























▶  TELEGRAM
▶  BITCOINTALK
achow101
Moderator
Legendary
*
expert
Offline Offline

Activity: 3402
Merit: 6642


Just writing some code


View Profile WWW
October 08, 2015, 07:34:52 PM
 #169

Who's behind this stress test?
Amaclin is. Did you even read the thread? He admitted it on the first page.

This is the malleability problem: someone is creating copies of transactions

OK. This is not "someone". It is me.
Right now the stress-test is paused. I reserve a right to resume it.
Ask me anything.

BitNow
Legendary
*
Offline Offline

Activity: 1260
Merit: 1003



View Profile WWW
October 08, 2015, 07:37:30 PM
 #170

OT
Who's behind this stress test?
Amaclin is. Did you even read the thread? He admitted it on the first page.

This is the malleability problem: someone is creating copies of transactions

OK. This is not "someone". It is me.
Right now the stress-test is paused. I reserve a right to resume it.
Ask me anything.

Thank You for your reply.

/OT


             ▐█████▄
            ▐█████████        ▄▄▄
            ▐████  ▐█████   ▀▀▀  █▌
            ▐███  ▐███████      ▐█▌
            ▐██▌   ▀█████▀     ▐█▀
       ▂▄▄▐██▌     ▀▀▀      ▐█▌
    ▐██████████████▄▄▄▄▄     ▄█▌
  ▐███       ▐███▀▀█████▄▄▄ ▐██
   ▐█▌        ▐███    ▀▀▀███████▄▄▄
    ▀▀▀        ▐███        ▐██▀█████▄▄
                ▐███      ▐██▌    ▀▀███▄▄
                 ▐███    ▐██▌  ▄▄▄▄▄  ███▄
         ▄████▄   ▐██▌  ▐███  ▐███████████
       ▐████████▌  ▐██▌▐██▌   ▐████████▀▀
        ▀██████▀    ▐████▀     ▀████▀
         ▐███▀     ▄█▐███
        ▐███▀   ▄████▌▀███
        ▐██████████▀    ▐█▌    █
         ▀████▀▀         ▐█▌  ██
                           ▀▀▀▀





























▶  TELEGRAM
▶  BITCOINTALK
amaclin
Legendary
*
Offline Offline

Activity: 1260
Merit: 1019


View Profile
October 08, 2015, 07:40:09 PM
 #171

Amaclin is. Did you even read the thread? He admitted it on the first page.
Bitcoiners do not rAEd anything. They hoDL!  Grin
dexX7
Legendary
*
Offline Offline

Activity: 1106
Merit: 1024



View Profile WWW
October 08, 2015, 08:08:14 PM
 #172

everybody has a right to search the pattern 022100 "in the middle of signature" and reject all unconfirmed transactions with it.

FYI a quick note: active mutation of high S -> low S appears to have started, according to some discussion on IRC.

amaclin
Legendary
*
Offline Offline

Activity: 1260
Merit: 1019


View Profile
October 08, 2015, 08:12:35 PM
 #173

FYI a quick note: active mutation of high S -> low S appears to have started, according to some discussion on IRC.
I like it! Let us start a big tournament!


dexX7
Legendary
*
Offline Offline

Activity: 1106
Merit: 1024



View Profile WWW
October 08, 2015, 10:01:37 PM
 #174

I like it! Let us start a big tournament!

Hehe, it would be interesting to know your success rate. Do you keep track of the mutated transactions?

Mad_Max
Hero Member
*****
Offline Offline

Activity: 894
Merit: 1001


View Profile
October 09, 2015, 01:19:43 AM
 #175

Yes but bigger blocks could mean that it's more expensive for miners to process the blocks.

Sure the extra validation/processing cost pales into insignificance compared to the cost of finding the POW?

Yes, validation/processing cost itself small compared with cost of finding the POW. But you need multiply it by number of all nodes in BTC network.
There are a lot of miners too, but cost of finding the POW is split between them. Each do only small part.
While validation/processing cost do not split - each BTC node need to "pay" it.


He знaя пoкoя и oтдыxa, Пpи лyннoм и coлнeчнoм cвeтe, Mы дeлaeм дeньги из вoздyxa, Чтoб cнoвa cпycтить иx нa вeтep!
aws
Full Member
***
Offline Offline

Activity: 219
Merit: 100


View Profile
October 09, 2015, 02:01:13 AM
 #176

It can be calculated as ( AmountOfElectricuty + CostOfHardWare ) / NumberOfTransactions
How do you calculate cost per transaction in a fiat system, for example the USD?
Think about all the energy that is used by a fiat monetary system.
amaclin
Legendary
*
Offline Offline

Activity: 1260
Merit: 1019


View Profile
October 09, 2015, 04:01:35 AM
 #177

It can be calculated as ( AmountOfElectricuty + CostOfHardWare ) / NumberOfTransactions
How do you calculate cost per transaction in a fiat system, for example the USD?
Think about all the energy that is used by a fiat monetary system.
Same formula, isn't it?
aws
Full Member
***
Offline Offline

Activity: 219
Merit: 100


View Profile
October 09, 2015, 05:55:11 AM
 #178

It can be calculated as ( AmountOfElectricuty + CostOfHardWare ) / NumberOfTransactions
How do you calculate cost per transaction in a fiat system, for example the USD?
Think about all the energy that is used by a fiat monetary system.
Same formula, isn't it?


How about cost of employees, cost of real estate, etc. etc. in a fiat system?
I wonder what the cost of the USD system would be.
TooDumbForBitcoin
Legendary
*
Offline Offline

Activity: 1638
Merit: 1001



View Profile
October 09, 2015, 09:26:06 AM
 #179

It can be calculated as ( AmountOfElectricuty + CostOfHardWare ) / NumberOfTransactions
How do you calculate cost per transaction in a fiat system, for example the USD?
Think about all the energy that is used by a fiat monetary system.
Same formula, isn't it?


How about cost of employees, cost of real estate, etc. etc. in a fiat system?
I wonder what the cost of the USD system would be.

First we have to agree on units, then a baseline.

Compared to the existing system that one finds preferable to USD, what is the average gain (or loss), per participant, in:

life expectancy
opportunity for independence (political, financial)
time spent completing a transaction (financial, social, commercial)
access to <food, health care, environmental security, education, information>     What is a good word encompassing the <  >?






▄▄                                  ▄▄
 ███▄                            ▄███
  ██████                      ██████
   ███████                  ███████
    ███████                ███████
     ███████              ███████
      ███████            ███████
       ███████▄▄      ▄▄███████
        ██████████████████████
         ████████████████████
          ██████████████████
           ████████████████
            ██████████████
             ███████████
              █████████
               ███████
                █████
                 ██
                  █
veil|     PRIVACY    
     WITHOUT COMPROMISE.      
▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂▂
|   NO ICO. NO PREMINE. 
   X16RT GPU Mining. Fair distribution.  
|      The first Zerocoin-based Cryptocurrency      
   WITH ALWAYS-ON PRIVACY.  
|



                   ▄▄████
              ▄▄████████▌
         ▄▄█████████▀███
    ▄▄██████████▀▀ ▄███▌
▄████████████▀▀  ▄█████
▀▀▀███████▀   ▄███████▌
      ██    ▄█████████
       █  ▄██████████▌
       █  ███████████
       █ ██▀ ▀██████▌
       ██▀     ▀████
                 ▀█▌




   ▄███████
   ████████
   ███▀
   ███
██████████
██████████
   ███
   ███
   ███
   ███
   ███
   ███




     ▄▄█▀▀ ▄▄▄▄▄▄▄▄ ▀▀█▄▄
   ▐██▄▄██████████████▄▄██▌
   ████████████████████████
  ▐████████████████████████▌
  ███████▀▀▀██████▀▀▀███████
 ▐██████     ████     ██████▌
 ███████     ████     ███████
▐████████▄▄▄██████▄▄▄████████▌
▐████████████████████████████▌
 █████▄▄▀▀▀▀██████▀▀▀▀▄▄█████
  ▀▀██████          ██████▀▀
      ▀▀▀            ▀▀▀
basil00
Member
**
Offline Offline

Activity: 60
Merit: 10


View Profile
October 09, 2015, 10:30:02 AM
 #180

The is an easy rule-of-thumb to spot high-S signatures.  For example, the following sig is high-S
This test is not quite precise, so implementers of bitcoin software shouldn't implement the test this way. Smiley The threshold is not a power of two, so no tidy hex digit sniffing can be precise.

It was meant to be a "rule of thumb" for humans -- not a precise test.
Pages: « 1 2 3 4 5 6 7 8 [9] 10 11 12 13 14 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!