Bitcoin Forum
May 10, 2024, 04:16:38 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Warning: One or more bitcointalk.org users have reported that they believe that the creator of this topic displays some red flags which make them high-risk. (Login to see the detailed trust ratings.) While the bitcointalk.org administration does not verify such claims, you should proceed with extreme caution.
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 [40] 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 »
  Print  
Author Topic: Nxt source code flaw reports  (Read 113306 times)
SenorHombre
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile
January 09, 2014, 07:32:53 PM
 #781

17598701460244014577

anyone got some NXTcoin as donation for you newcomer :-)

thanks alot for considering it. I know I am late for almost all giveaways. did not find any :-(
1715314598
Hero Member
*
Offline Offline

Posts: 1715314598

View Profile Personal Message (Offline)

Ignore
1715314598
Reply with quote  #2

1715314598
Report to moderator
1715314598
Hero Member
*
Offline Offline

Posts: 1715314598

View Profile Personal Message (Offline)

Ignore
1715314598
Reply with quote  #2

1715314598
Report to moderator
1715314598
Hero Member
*
Offline Offline

Posts: 1715314598

View Profile Personal Message (Offline)

Ignore
1715314598
Reply with quote  #2

1715314598
Report to moderator
It is a common myth that Bitcoin is ruled by a majority of miners. This is not true. Bitcoin miners "vote" on the ordering of transactions, but that's all they do. They can't vote to change the network rules.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715314598
Hero Member
*
Offline Offline

Posts: 1715314598

View Profile Personal Message (Offline)

Ignore
1715314598
Reply with quote  #2

1715314598
Report to moderator
1715314598
Hero Member
*
Offline Offline

Posts: 1715314598

View Profile Personal Message (Offline)

Ignore
1715314598
Reply with quote  #2

1715314598
Report to moderator
1715314598
Hero Member
*
Offline Offline

Posts: 1715314598

View Profile Personal Message (Offline)

Ignore
1715314598
Reply with quote  #2

1715314598
Report to moderator
gsan1
Newbie
*
Offline Offline

Activity: 50
Merit: 0


View Profile
January 09, 2014, 07:46:07 PM
 #782

The hash consists of hash[7], hash[6], ... hash[0]. So it consists of the first 64 bytes of the getByte method.

Could you follow me?  Smiley

//EDIT: This attack would only be possible in 0.4.7e because now a block contains the hash of the previous one (and not only the id).

No , the 64 bytes are taken from the hash and the hash is calculated from all the bytes we got from getBytes(). It is not the first 64 bytes of getBytes().

Yeah.. I mixed that up..
Come-from-Beyond (OP)
Legendary
*
Offline Offline

Activity: 2142
Merit: 1009

Newbie


View Profile
January 09, 2014, 07:50:24 PM
 #783

I think we could have better/faster implementation of Curve25519, but it's something that shoulbe further researched

Btw, we have 100'000 NXT bounty for fast JS-implementation. Look at https://bitcointalk.org/index.php?topic=345619.msg4345122#msg4345122 plz.

why js not java? bounty still open?

We want to create an HTML client that signs transactions locally.

Bounty is open, one guy already posted a script but it's too slow.
Come-from-Beyond (OP)
Legendary
*
Offline Offline

Activity: 2142
Merit: 1009

Newbie


View Profile
January 09, 2014, 07:51:54 PM
 #784

I am on it but I think it will a lot slower than you want Sad

We'll choose the fastest and will pay part of the bounty then.
gimre
Legendary
*
Offline Offline

Activity: 866
Merit: 1002



View Profile WWW
January 09, 2014, 08:48:54 PM
 #785

why js not java? bounty still open?

two words: thin client

yeah I thought so, but still curve will be needed on the server, and something tells me it can be done better than current one...

NemusExMāchinā
Catapult docs: https://docs.symbol.dev
github: https://github.com/symbol
Sebastien256
Hero Member
*****
Offline Offline

Activity: 715
Merit: 500



View Profile
January 09, 2014, 09:09:24 PM
 #786

Not sure if its logic flaw, but somebody could simply change initial allocation in genesis block to give themselves a lot of NXT.

We have seen a case of altered client already, so changing genesis block's hardcoding and hypnotizing jean-luc into signing it as the official release, would be an obvious but effective way to steal a lot of NXT

James

True, that's why noone knows who Jean-Luc is.

Maybe he is BCNext!

Well, BCNext, "Jean-Luc" and Come-from-Beyond are all three Russian.

I'm not entirely sure who is who or whether all three are one, but that makes it more exciting Grin

Come-from-Beyond is BCNext, and Jean-Luc seems to be another guy. Perhaps all those three are one guy.


Jean-Luc writes english with french syntax, like many french speaking native people (I am). I'm confident that his mother tongue is probably french with very high probability. It is not the case with CfB. I do not see french syntax in CfB writing. That is my analysis. Maybe I'm wrong, but...

Nxt official forum at: https://nxtforum.org/
Come-from-Beyond (OP)
Legendary
*
Offline Offline

Activity: 2142
Merit: 1009

Newbie


View Profile
January 09, 2014, 09:10:40 PM
 #787

Jean-Luc writes english with french syntax, like many french speaking native people (I am). I'm confident that his mother tongue is probably french with very high probability. It is not the case with CfB. I do not see french syntax in CfB writing. That is my analysis. Maybe I'm wrong, but...

And what about BCNext's style?
rlh
Hero Member
*****
Offline Offline

Activity: 804
Merit: 1004


View Profile
January 09, 2014, 09:16:37 PM
 #788

Jean-Luc writes english with french syntax, like many french speaking native people (I am). I'm confident that his mother tongue is probably french with very high probability. It is not the case with CfB. I do not see french syntax in CfB writing. That is my analysis. Maybe I'm wrong, but...

And what about BCNext's style?

Come on... we all know the truth.  BCNext, Jean-Luc, CnB, Fuseleer, RealSolid, Coinhunter, Gavin, satoshi, BitcoineXpress AND rlh are all the same, very-schizo multi-personality.

Sorry... I couldn't resist.

A Personal Quote on BTT from 2011:
"I'd be willing to make a moderate "investment" if the value of the BTC went below $2.00.  Otherwise I'll just have to live with my 5 BTC and be happy. :/"  ...sigh.  If only I knew.
Come-from-Beyond (OP)
Legendary
*
Offline Offline

Activity: 2142
Merit: 1009

Newbie


View Profile
January 09, 2014, 09:17:30 PM
 #789

Come on... we all know the truth.  BCNext, Jean-Luc, CnB, Fuseleer, RealSolid, Coinhunter, Gavin, satoshi, BitcoineXpress AND rlh are all the same, very-schizo multi-personality.

Sorry... I couldn't resist.

Grin
instacalm
Hero Member
*****
Offline Offline

Activity: 798
Merit: 500



View Profile
January 09, 2014, 09:19:00 PM
 #790


Jean-Luc writes english with french syntax, like many french speaking native people (I am). I'm confident that his mother tongue is probably french with very high probability. It is not the case with CfB. I do not see french syntax in CfB writing. That is my analysis. Maybe I'm wrong, but...

Code:
gpg: Signature made Tue Jan  7 20:16:43 2014 CET using RSA key ID 3BF9ED80
gpg: Good signature from "Jean-Luc Picard (Lead Developer of The Nxt Generation) <jlp666@yandex.ru>"

Jean-Luc Picard is a Star Trek Character. The way JLP, BCN and CFB write is each a style of purpose -- in my humble opinion. Welcome to the Matrix. It may be one, it may be two or it may be three. Who exactly knows... build ur own opinion Wink.
Come-from-Beyond (OP)
Legendary
*
Offline Offline

Activity: 2142
Merit: 1009

Newbie


View Profile
January 09, 2014, 09:21:00 PM
 #791

It may be one, it may be two or it may be three...

...or even four.
klee
Legendary
*
Offline Offline

Activity: 1498
Merit: 1000



View Profile
January 09, 2014, 09:23:32 PM
 #792

BCNext told in the NXT original thread (in the OP I think) that he is a known forum member.
Hmmmmm...
minusbalancer
Newbie
*
Offline Offline

Activity: 56
Merit: 0


View Profile
January 09, 2014, 09:46:03 PM
 #793

The whole "futureBlocks" branch of code doesn't work because of the bug.

We should update the commonBlockId once we successfully push the block.
If we will have the "futureBlocks" it will roll out all of the newly added blocks (if any) because of non updated currentBlockId.
Then it will try to add the "futureBlocks" and will fail again. So at the end the whole block chain will be rolled back and peer banned.

It's at line 4570 and further.
Come-from-Beyond (OP)
Legendary
*
Offline Offline

Activity: 2142
Merit: 1009

Newbie


View Profile
January 09, 2014, 09:51:10 PM
 #794

The whole "futureBlocks" branch of code doesn't work because of the bug.

We should update the commonBlockId once we successfully push the block.
If we will have the "futureBlocks" it will roll out all of the newly added blocks (if any) because of non updated currentBlockId.
Then it will try to add the "futureBlocks" and will fail again. So at the end the whole block chain will be rolled back and peer banned.

It's at line 4570 and further.


Thx, I'll look at that.
minusbalancer
Newbie
*
Offline Offline

Activity: 56
Merit: 0


View Profile
January 09, 2014, 10:04:41 PM
 #795

With the published code no one will be able to generate any block ever.

In getEffectiveBalance() we do have the check for the account age of 1440 (blocks).

Since at the beginning of the functioning the system all of the accounts had 0 age, none of them will be able to generate the block.
No blocks generated => no age increase.


 
Come-from-Beyond (OP)
Legendary
*
Offline Offline

Activity: 2142
Merit: 1009

Newbie


View Profile
January 09, 2014, 10:07:04 PM
 #796

With the published code no one will be able to generate any block ever.

In getEffectiveBalance() we do have the check for the account age of 1440 (blocks).

Since at the beginning of the functioning the system all of the accounts had 0 age, none of them will be able to generate the block.
No blocks generated => no age increase.

Accounts listed in genesis block can generate blocks, their age is not analyzed.
minusbalancer
Newbie
*
Offline Offline

Activity: 56
Merit: 0


View Profile
January 09, 2014, 10:18:50 PM
 #797

With the published code no one will be able to generate any block ever.

In getEffectiveBalance() we do have the check for the account age of 1440 (blocks).

Since at the beginning of the functioning the system all of the accounts had 0 age, none of them will be able to generate the block.
No blocks generated => no age increase.

Accounts listed in genesis block can generate blocks, their age is not analyzed.

Agree.
Then we do have the other bug - outgoing transactions are not deducted from the "genesis" created accounts while calculating the effective balance.

Edit: incoming
Sebastien256
Hero Member
*****
Offline Offline

Activity: 715
Merit: 500



View Profile
January 09, 2014, 10:50:58 PM
 #798

Jean-Luc writes english with french syntax, like many french speaking native people (I am). I'm confident that his mother tongue is probably french with very high probability. It is not the case with CfB. I do not see french syntax in CfB writing. That is my analysis. Maybe I'm wrong, but...

And what about BCNext's style?

Relative to BCNExt, I don't know. I believe he is not english native, Im pretty sure of that. I did not see any clear french syntax in his writing like in Jean-Luc post. Note that I know Jean-Luc refer to Star Trek, but I still believe he might be french native, but maybe other latin base language have similar syntax to french, so my interpretation might be wrong. I know that english is not latin based. Here are some latin based language: Portuguese, Spanish, French, Italian and Romanian. There are others.

By the way, keep up the good work, what you all are doing is amazing. Really!

Nxt official forum at: https://nxtforum.org/
ricot
Newbie
*
Offline Offline

Activity: 56
Merit: 0


View Profile
January 09, 2014, 11:02:16 PM
 #799

With the published code no one will be able to generate any block ever.

In getEffectiveBalance() we do have the check for the account age of 1440 (blocks).

Since at the beginning of the functioning the system all of the accounts had 0 age, none of them will be able to generate the block.
No blocks generated => no age increase.

Accounts listed in genesis block can generate blocks, their age is not analyzed.

Agree.
Then we do have the other bug - outgoing transactions are not deducted from the "genesis" created accounts while calculating the effective balance.

Edit: incoming


Correct, at the moment they can transfer money to the account that will have the highest chance to forge next...
I also checked in the decompiled 0.5.3 code, same bug.

Nice find!

Unfair advantage for the founders, please fix Wink
gimre
Legendary
*
Offline Offline

Activity: 866
Merit: 1002



View Profile WWW
January 09, 2014, 11:03:30 PM
 #800

The whole "futureBlocks" branch of code doesn't work because of the bug.

We should update the commonBlockId once we successfully push the block.
If we will have the "futureBlocks" it will roll out all of the newly added blocks (if any) because of non updated currentBlockId.
Then it will try to add the "futureBlocks" and will fail again. So at the end the whole block chain will be rolled back and peer banned.

It's at line 4570 and further.


Thx, I'll look at that.

I disagree. I don't think it's wrong. I think these situations are simply exclusive. That is, there can't be both: new blocks added and futureBlocks added.
(I was claiming this here: https://bitcointalk.org/index.php?topic=397183.msg4406466#msg4406466)

NemusExMāchinā
Catapult docs: https://docs.symbol.dev
github: https://github.com/symbol
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 [40] 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 »
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!