Bitcoin Forum
April 26, 2024, 01:19:04 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2] 3 »  All
  Print  
Author Topic: SHA-256 (fixed: maybe) hacked, man gets away with 7 blocks in 10 minutes  (Read 9329 times)
qarl
Newbie
*
Offline Offline

Activity: 8
Merit: 0



View Profile WWW
June 22, 2011, 03:16:51 AM
 #21

yeah.  sha-256 gets broken and the first thing the guy does is steal 350 bitcoins.

HEY!  that could be almost $6000!
1714094344
Hero Member
*
Offline Offline

Posts: 1714094344

View Profile Personal Message (Offline)

Ignore
1714094344
Reply with quote  #2

1714094344
Report to moderator
Be very wary of relying on JavaScript for security on crypto sites. The site can change the JavaScript at any time unless you take unusual precautions, and browsers are not generally known for their airtight security.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714094344
Hero Member
*
Offline Offline

Posts: 1714094344

View Profile Personal Message (Offline)

Ignore
1714094344
Reply with quote  #2

1714094344
Report to moderator
imperi (OP)
Full Member
***
Offline Offline

Activity: 196
Merit: 101


View Profile
June 22, 2011, 03:17:42 AM
 #22

yeah.  sha-256 gets broken and the first thing the guy does is steal 350 bitcoins.

HEY!  that could be almost $6000!

Isn't that 6x more than what the last hacker got?
NF6X
Member
**
Offline Offline

Activity: 98
Merit: 10



View Profile WWW
June 22, 2011, 03:18:18 AM
 #23

Man, that would be such a waste. If I had special hashing powers, I'd make hash browns all over the place. I'd make a bed out of them and then I could wake up in the middle of the night and snack without even leaving my nice warm bed. Oh man that's always been my dream.

[...]

I am intrigued by your ideas, and I would like to subscribe to your newsletter.
FlipPro
Legendary
*
Offline Offline

Activity: 1764
Merit: 1015


View Profile
June 22, 2011, 03:30:55 AM
 #24

Why is it every morons wet dream for this currency to fail? Is it because you can't afford mining equipment? Is it because you can't afford to buy any coins? Is it that your TO LAZY AND WON'T WORK FOR THE CURRENCY SO YOU MIGHT AS WELL TRY TO DESTROY IT?
jibjabz
Newbie
*
Offline Offline

Activity: 59
Merit: 0


View Profile
June 22, 2011, 03:33:14 AM
 #25

This thread is completely worthless until someone posts the mathematical odds of this happening (relative to how long bitcoin mining has been taking place and/or current difficulty rates and hashing power).
Quantumplation
Sr. Member
****
Offline Offline

Activity: 308
Merit: 250



View Profile
June 22, 2011, 03:36:43 AM
 #26

Finding a collision isn't breaking SHA256.  Breaking SHA256 (or at least, any manner of breaking that would matter to us) is finding a FAST and EFFICIENT way to find a collision, other than brute forcing.  There is no way to do this that is currently known, and it's stood up to many many cryptographic tests and analysis, people trying to hack it for years.

well its different when you just work for your guaranteed wages and when there is a instant free big money floating, people could improve in their skills considerably with the right motivation.

However this is most probably a supercomputer working for a short time. Or more probably a good luck.

Yes, the promise of bitcoins, which in TOTAL, at their PEAK was worth less than 40 million dollars (Current Block # * Peak Price) is far more alluring than all of the bank systems relying on SHA256 encryption, all the SSH tunnels to be sniffed, government secrets, crime syndication, encrypted emails, and all the fame of being the one who broke it.

Also, nothing says this is the same person.  If it went to multiple addresses, it could very well be multiple people.  If it went to the same address, that could be one of the larger pools' addresses.  The conspiracy theorists in this forum are growing thick as mud.

NOTE: This account was compromised from 2017 to 2021.  I'm in the process of deleting posts not made by me.
FreeMoney
Legendary
*
Offline Offline

Activity: 1246
Merit: 1014


Strength in numbers


View Profile WWW
June 22, 2011, 03:47:05 AM
 #27

Finding a collision isn't breaking SHA256.  Breaking SHA256 (or at least, any manner of breaking that would matter to us) is finding a FAST and EFFICIENT way to find a collision, other than brute forcing.  There is no way to do this that is currently known, and it's stood up to many many cryptographic tests and analysis, people trying to hack it for years.

well its different when you just work for your guaranteed wages and when there is a instant free big money floating, people could improve in their skills considerably with the right motivation.

However this is most probably a supercomputer working for a short time. Or more probably a good luck.

Yes, the promise of bitcoins, which in TOTAL, at their PEAK was worth less than 40 million dollars (Current Block # * Peak Price) is far more alluring than all of the bank systems relying on SHA256 encryption, all the SSH tunnels to be sniffed, government secrets, crime syndication, encrypted emails, and all the fame of being the one who broke it.

Also, nothing says this is the same person.  If it went to multiple addresses, it could very well be multiple people.  If it went to the same address, that could be one of the larger pools' addresses.  The conspiracy theorists in this forum are growing thick as mud.

Multiplication fail.

Also D- in foresight.

Play Bitcoin Poker at sealswithclubs.eu. We're active and open to everyone.
smartcardguy
Newbie
*
Offline Offline

Activity: 14
Merit: 0



View Profile
June 22, 2011, 03:49:06 AM
 #28

http://dilbert.com/strips/comic/2001-10-25/

Nine, Nine, Nine, Nine
relmeas
Full Member
***
Offline Offline

Activity: 124
Merit: 100


View Profile
June 22, 2011, 04:31:04 AM
Last edit: June 22, 2011, 05:01:39 AM by relmeas
 #29

Finding a collision isn't breaking SHA256.  Breaking SHA256 (or at least, any manner of breaking that would matter to us) is finding a FAST and EFFICIENT way to find a collision, other than brute forcing.  There is no way to do this that is currently known, and it's stood up to many many cryptographic tests and analysis, people trying to hack it for years.

well its different when you just work for your guaranteed wages and when there is a instant free big money floating, people could improve in their skills considerably with the right motivation.

However this is most probably a supercomputer working for a short time. Or more probably a good luck.

Yes, the promise of bitcoins, which in TOTAL, at their PEAK was worth less than 40 million dollars (Current Block # * Peak Price) is far more alluring than all of the bank systems relying on SHA256 encryption, all the SSH tunnels to be sniffed, government secrets, crime syndication, encrypted emails, and all the fame of being the one who broke it.

Also, nothing says this is the same person.  If it went to multiple addresses, it could very well be multiple people.  If it went to the same address, that could be one of the larger pools' addresses.  The conspiracy theorists in this forum are growing thick as mud.

ok since clearly you like conspiracy theories so much i will give you another one, my today's special! i invented this one just now while walking to work.

imagine how much people want to crack sha256.

before bitcoin: a bunch of professional security specialists. also criminals but they lack the skillz anyway.

after bitcoin: basically every single geek on this planet who is capable of reading a C source code of SHA256 implementation. they are not criminals mostly, or if some of them potentially are, they have other means to live and criminal activities are not their strongest suit anyway.

which is orders of magnitude more.

so here is the conspiracy theory: satoshi is basically a security expert of sorts who is testing his new method of brute forcing the security algorithms. basically all the geeks on this planet are raw computational power that tries to solve the SHA256 hash with their feeble minds. just like with mining, one by one they have very little chances to solve it, but working at once on the same task they might solve the block much faster!

we'll see how it goes Smiley
The Script
Sr. Member
****
Offline Offline

Activity: 336
Merit: 250


View Profile
June 22, 2011, 04:57:36 AM
 #30

Forgive my ignorance, but how do you tell that one person got all those blocks? Couldn't it have been multiple miners, and what are the statistics of that happening?
Teej
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
June 22, 2011, 05:04:03 AM
 #31

Yes, the promise of bitcoins, which in TOTAL, at their PEAK was worth less than 40 million dollars (Current Block # * Peak Price) is far more alluring than all of the bank systems relying on SHA256 encryption, all the SSH tunnels to be sniffed, government secrets, crime syndication, encrypted emails, and all the fame of being the one who broke it.


You're off by a factor of 50.

current block# * peak price * 50 coins per block.

There's over 6.6 million coins out there right now.  Even at $15 that's $99 million.  At the peak it was ~  6 million * $30.  180 million.
relmeas
Full Member
***
Offline Offline

Activity: 124
Merit: 100


View Profile
June 22, 2011, 05:04:30 AM
 #32

yeah it's interesting, I wonder if it's possible to try and log the ip addresses of all block solvers? I would guess it's not in the client though since it violates privacy.

so no there is not way to detect it as long as the attacker uses separate addresses for each block.
Quantumplation
Sr. Member
****
Offline Offline

Activity: 308
Merit: 250



View Profile
June 22, 2011, 05:35:35 AM
 #33

Yes, the promise of bitcoins, which in TOTAL, at their PEAK was worth less than 40 million dollars (Current Block # * Peak Price) is far more alluring than all of the bank systems relying on SHA256 encryption, all the SSH tunnels to be sniffed, government secrets, crime syndication, encrypted emails, and all the fame of being the one who broke it.


You're off by a factor of 50.

current block# * peak price * 50 coins per block.

There's over 6.6 million coins out there right now.  Even at $15 that's $99 million.  At the peak it was ~  6 million * $30.  180 million.

Right, forgot that, still, paltry compared to the lure of all the above.

NOTE: This account was compromised from 2017 to 2021.  I'm in the process of deleting posts not made by me.
The_Duke
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250


Lead Core BitKitty Developer


View Profile
June 22, 2011, 06:30:11 AM
 #34

Didn't japan just launch a computer that can do a quadrillion flops/sec?

That'll only work 1/5th of the time then anyway, due to the rolling power outages they still have Wink

NOT a member of the so called ''Bitcoin Foundation''. Choose Independence!

Donate to the BitKitty Foundation instead! -> 1Fd4yLneGmxRHnPi6WCMC2hAMzaWvDePF9 <-
nathanrees19
Full Member
***
Offline Offline

Activity: 196
Merit: 100



View Profile
June 22, 2011, 11:27:01 AM
 #35



Proof is here. Clearly the system is broken. Image is from http://www.bitcoinmonitor.com/.

No.

I ran some quick numbers. If I'm correctly understanding the distribution, once the first block was found, the chance of finding the next 6 blocks in that time window was something like 0.0000002. However, this possibility has existed every time a block has been found. The chance of this streak happening at least once in 132000 or so blocks is greater than 99.7%. In fact, there is a very high chance that his has happened more than once. If I find the time, I could do an analysis of the whole block chain to see if this has happened before.

Is there an easy way to extract block timestamps from the chain?
irishmick
Full Member
***
Offline Offline

Activity: 134
Merit: 100


View Profile
June 22, 2011, 11:53:41 AM
 #36

BTCGuild found 5 blocks in 10 minutes or so. No random SHA256 crack unless they were stupid enough to share the wealth and ingenious enough to crack it... lol @ conspiracy theorists

http://doge.crypto49er.com:9555         http://doge-eu.crypto49er.com:9555
Pool donations: DTPgwgDvyDL3vcnJFf33nkhBm6o2ZxVT6G
QuantumMechanic
Member
**
Offline Offline

Activity: 110
Merit: 19


View Profile
June 22, 2011, 12:27:16 PM
 #37

I ran some quick numbers. If I'm correctly understanding the distribution, once the first block was found, the chance of finding the next 6 blocks in that time window was something like 0.0000002. However, this possibility has existed every time a block has been found. The chance of this streak happening at least once in 132000 or so blocks is greater than 99.7%. In fact, there is a very high chance that his has happened more than once. If I find the time, I could do an analysis of the whole block chain to see if this has happened before.

Is there an easy way to extract block timestamps from the chain?
If you evaluated the cdf of a gamma distribution with parameters 7 and 1/10min at 10min to get 0.0000002, and 1 - the pdf of the binomial distribution with parameters 132000 and 0.0000002 evaluated at 0 to get 99.7%, then I think it's correct.  I'm too lazy to calculate it, though.

Also, http://www.xkcd.com/882/
DamienBlack
Jr. Member
*
Offline Offline

Activity: 56
Merit: 1


View Profile
June 22, 2011, 12:58:36 PM
 #38

Didn't japan just launch a computer that can do a quadrillion flops/sec?

No they didn't. They launched a computed with the power of about 7% of the entire bitcoin network. No need to worry.
Quantumplation
Sr. Member
****
Offline Offline

Activity: 308
Merit: 250



View Profile
June 22, 2011, 01:00:56 PM
 #39

Well that's it for me. Selling every coin I own. I advise others do the same.

I'll buy them at a dollar a piece.

NOTE: This account was compromised from 2017 to 2021.  I'm in the process of deleting posts not made by me.
Austinh100
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
June 22, 2011, 02:59:45 PM
 #40


 Grin

Here's my favorite: http://xkcd.com/221/
Pages: « 1 [2] 3 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!