TaoOfSaatoshi
Legendary
Offline
Activity: 2156
Merit: 1014
Dash Nation Founder | CATV Host
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 02:21:41 AM |
|
The Spreadcoin dev is reviewing the Darkcoin code and just posted this: https://bitcointalk.org/index.php?topic=715435.msg9839488#msg9839488Mr.spread,what's status of masternode and darksend developmnet?
It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes. DarkCoin wallet checks the following things for each new block: 1) There is a payment to master node. 2) There is a payment with the same amount as a payment to master node should be (30%). But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network but I haven't tested it on testnet so I can't be 100% sure. I don't want any vulnerabilities out the wild so thought I'd check here. This is what happens when "Enforcement" is off, right? Or is this a separate issue and potential vulnerability? Patched: https://github.com/darkcoin/darkcoin/commit/ee8174a2c690b995003449a046b036d87ae25b5d (sorry, trimmed space after every line) Compiling 10.17.24 now, feel free to update from source Excellent work once again, Mr. Duffield, bug spotted, bug squashed in short order... Don't forget to thank Mr. Spread for discovering the bug! ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif) Thank you Mr. Spread for discovering the bug! Fixed. ![Grin](https://bitcointalk.org/Smileys/default/grin.gif)
|
|
|
|
strix
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 03:48:28 AM |
|
The Spreadcoin dev is reviewing the Darkcoin code and just posted this: https://bitcointalk.org/index.php?topic=715435.msg9839488#msg9839488Mr.spread,what's status of masternode and darksend developmnet?
It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes. DarkCoin wallet checks the following things for each new block: 1) There is a payment to master node. 2) There is a payment with the same amount as a payment to master node should be (30%). But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network but I haven't tested it on testnet so I can't be 100% sure. I don't want any vulnerabilities out the wild so thought I'd check here. This is what happens when "Enforcement" is off, right? Or is this a separate issue and potential vulnerability? Patched: https://github.com/darkcoin/darkcoin/commit/ee8174a2c690b995003449a046b036d87ae25b5d (sorry, trimmed space after every line) Compiling 10.17.24 now, feel free to update from source Excellent work once again, Mr. Duffield, bug spotted, bug squashed in short order... Don't forget to thank Mr. Spread for discovering the bug! ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif) Thank you Mr. Spread for discovering the bug! Fixed. ![Grin](https://bitcointalk.org/Smileys/default/grin.gif) Yes, thank you... and hope you will think about working more with Evan and DRK
|
Je le hibou, suis ↄash; because while the days are evil good must hurry, lest evil parading as an agent of light restrict its activity. XnUjqiYV5mvXAWrWUbGFmitPvmWSthxhBi
|
|
|
yeXIABC
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 04:34:27 AM |
|
The anaemic crypto body has recommenced LTC will lose it's status and funds will move-on to greener and more exciting pastures.
|
|
|
|
splawik21
Legendary
Offline
Activity: 1372
Merit: 1005
DASH is the future of crypto payments!
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 05:48:19 AM |
|
The Spreadcoin dev is reviewing the Darkcoin code and just posted this: https://bitcointalk.org/index.php?topic=715435.msg9839488#msg9839488Mr.spread,what's status of masternode and darksend developmnet?
It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes. DarkCoin wallet checks the following things for each new block: 1) There is a payment to master node. 2) There is a payment with the same amount as a payment to master node should be (30%). But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network but I haven't tested it on testnet so I can't be 100% sure. I don't want any vulnerabilities out the wild so thought I'd check here. This is what happens when "Enforcement" is off, right? Or is this a separate issue and potential vulnerability? Patched: https://github.com/darkcoin/darkcoin/commit/ee8174a2c690b995003449a046b036d87ae25b5d (sorry, trimmed space after every line) Compiling 10.17.24 now, feel free to update from source bump
|
BE SMART, USE DASH ( ͡° ͜ʖ ͡°)
|
|
|
Mr. Spread
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 07:24:43 AM |
|
The Spreadcoin dev is reviewing the Darkcoin code and just posted this: https://bitcointalk.org/index.php?topic=715435.msg9839488#msg9839488Mr.spread,what's status of masternode and darksend developmnet?
It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes. DarkCoin wallet checks the following things for each new block: 1) There is a payment to master node. 2) There is a payment with the same amount as a payment to master node should be (30%). But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network but I haven't tested it on testnet so I can't be 100% sure. I don't want any vulnerabilities out the wild so thought I'd check here. This is what happens when "Enforcement" is off, right? Or is this a separate issue and potential vulnerability? Patched: https://github.com/darkcoin/darkcoin/commit/ee8174a2c690b995003449a046b036d87ae25b5d (sorry, trimmed space after every line) Compiling 10.17.24 now, feel free to update from source Is there any reward for discovering bugs and vulnerabilities? I have found several other bugs.
|
|
|
|
stonehedge
Legendary
Offline
Activity: 1722
Merit: 1002
Decentralize Everything
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 07:43:10 AM |
|
The Spreadcoin dev is reviewing the Darkcoin code and just posted this: https://bitcointalk.org/index.php?topic=715435.msg9839488#msg9839488Mr.spread,what's status of masternode and darksend developmnet?
It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes. DarkCoin wallet checks the following things for each new block: 1) There is a payment to master node. 2) There is a payment with the same amount as a payment to master node should be (30%). But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network but I haven't tested it on testnet so I can't be 100% sure. I don't want any vulnerabilities out the wild so thought I'd check here. This is what happens when "Enforcement" is off, right? Or is this a separate issue and potential vulnerability? Patched: https://github.com/darkcoin/darkcoin/commit/ee8174a2c690b995003449a046b036d87ae25b5d (sorry, trimmed space after every line) Compiling 10.17.24 now, feel free to update from source Is there any reward for discovering bugs and vulnerabilities? I have found several other bugs. Speak to Ed. Thanks for your help.
|
|
|
|
vertoe
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 08:16:27 AM |
|
The Spreadcoin dev is reviewing the Darkcoin code and just posted this: https://bitcointalk.org/index.php?topic=715435.msg9839488#msg9839488Mr.spread,what's status of masternode and darksend developmnet?
It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes. DarkCoin wallet checks the following things for each new block: 1) There is a payment to master node. 2) There is a payment with the same amount as a payment to master node should be (30%). But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network but I haven't tested it on testnet so I can't be 100% sure. I don't want any vulnerabilities out the wild so thought I'd check here. This is what happens when "Enforcement" is off, right? Or is this a separate issue and potential vulnerability? Patched: https://github.com/darkcoin/darkcoin/commit/ee8174a2c690b995003449a046b036d87ae25b5d (sorry, trimmed space after every line) Compiling 10.17.24 now, feel free to update from source Is there any reward for discovering bugs and vulnerabilities? I have found several other bugs. There used to be bounties for bugs and vulnarabilities. Get in contact with eduffield, flare, udjinm6 or me please. We are interested anyways.
|
|
|
|
neutraLTC
Legendary
Offline
Activity: 1492
Merit: 1021
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 08:32:14 AM |
|
Waiting on lead dev's response for integration into SendChat.
|
|
|
|
jdebunt
Legendary
Offline
Activity: 1596
Merit: 1010
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 10:00:17 AM |
|
Small new update article in regards to the vulnerability can be found here. Kudos on getting the issue fixed so soon!
|
|
|
|
tungfa
Legendary
Offline
Activity: 1834
Merit: 1023
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 10:50:42 AM |
|
Small new update article in regards to the vulnerability can be found here. Kudos on getting the issue fixed so soon! very nice and posted tx ![Cool](https://bitcointalk.org/Smileys/default/cool.gif)
|
|
|
|
splawik21
Legendary
Offline
Activity: 1372
Merit: 1005
DASH is the future of crypto payments!
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 12:13:04 PM |
|
~10,48 days to 35% MNs fee ![Cheesy](https://bitcointalk.org/Smileys/default/cheesy.gif) ~16 days to 7% block decrease if(nHeight > 158000) ret += blockValue / 20; //25.0% - 2014-10-23 if(nHeight > 158000+((576*30)*1)) ret += blockValue / 20; //30.0% - 2014-11-23 if(nHeight > 158000+((576*30)*2)) ret += blockValue / 20; //35.0% - 2014-12-23if(nHeight > 158000+((576*30)*3)) ret += blockValue / 40; //37.5% - 2015-01-23 if(nHeight > 158000+((576*30)*4)) ret += blockValue / 40; //40.0% - 2015-02-23 if(nHeight > 158000+((576*30)*5)) ret += blockValue / 40; //42.5% - 2015-03-23 if(nHeight > 158000+((576*30)*6)) ret += blockValue / 40; //45.0% - 2015-04-23 if(nHeight > 158000+((576*30)*7)) ret += blockValue / 40; //47.5% - 2015-05-23 if(nHeight > 158000+((576*30)*9)) ret += blockValue / 40; //50.0% - 2015-07-23 if(nHeight > 158000+((576*30)*11)) ret += blockValue / 40; //52.5% - 2015-09-23 if(nHeight > 158000+((576*30)*13)) ret += blockValue / 40; //55.0% - 2015-11-23 if(nHeight > 158000+((576*30)*15)) ret += blockValue / 40; //57.5% - 2016-01-23 if(nHeight > 158000+((576*30)*17)) ret += blockValue / 40; //60.0% - 2016-03-23
|
BE SMART, USE DASH ( ͡° ͜ʖ ͡°)
|
|
|
tungfa
Legendary
Offline
Activity: 1834
Merit: 1023
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 12:14:00 PM |
|
|
|
|
|
|
tungfa
Legendary
Offline
Activity: 1834
Merit: 1023
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 12:54:09 PM |
|
|
|
|
|
McHammer
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 01:50:39 PM Last edit: December 15, 2014, 02:05:33 PM by McHammer |
|
28 btc sellwall on cryptsy so the whale wants you to sell .. ![Huh](https://bitcointalk.org/Smileys/default/huh.gif)
|
altcoincasinogulagshoppingshow FUD is good, look @altcoin prices ... pls fud me hard via pm id appriciate that.
|
|
|
DavidR
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 65
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 02:10:47 PM |
|
The Spreadcoin dev is reviewing the Darkcoin code and just posted this: https://bitcointalk.org/index.php?topic=715435.msg9839488#msg9839488Mr.spread,what's status of masternode and darksend developmnet?
It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes. DarkCoin wallet checks the following things for each new block: 1) There is a payment to master node. 2) There is a payment with the same amount as a payment to master node should be (30%). But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network but I haven't tested it on testnet so I can't be 100% sure. I don't want any vulnerabilities out the wild so thought I'd check here. This is what happens when "Enforcement" is off, right? Or is this a separate issue and potential vulnerability? Patched: https://github.com/darkcoin/darkcoin/commit/ee8174a2c690b995003449a046b036d87ae25b5d (sorry, trimmed space after every line) Compiling 10.17.24 now, feel free to update from source Is there any reward for discovering bugs and vulnerabilities? I have found several other bugs. I told you guys this guy can code ![Cool](https://bitcointalk.org/Smileys/default/cool.gif) He's going to do amazing things with Spreadcoin.
|
|
|
|
whocares
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 02:15:44 PM |
|
28 btc sellwall on cryptsy so the whale wants you to sell .. ![Huh](https://bitcointalk.org/Smileys/default/huh.gif) Maybe he tries to hold the price on these levels ![Wink](https://bitcointalk.org/Smileys/default/wink.gif) .
|
|
|
|
crackfoo
Legendary
Offline
Activity: 3528
Merit: 1126
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 02:34:57 PM |
|
The latest shift for the Darkcoin multipool paid out over 92DRK. Still need more hash for Sha256, Scrypt & X11 algo. If you got some, bring it over! Cheers!
|
ZPOOL - the miners multipool! Support We pay 10 FLUX Parallel Assets (PA) directly to block rewards! Get paid more and faster. No PA fee's or waiting around for them, paid instantly on every block found!
|
|
|
Artoodeetoo
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 02:47:11 PM |
|
coinz smashing up the exchanges again?
|
DASH #DashDC #DashIntoDigitalCash
|
|
|
oblox
Legendary
Offline
Activity: 1442
Merit: 1018
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
December 15, 2014, 03:14:50 PM |
|
I told you guys this guy can code ![Cool](https://bitcointalk.org/Smileys/default/cool.gif) He's going to do amazing things with Spreadcoin. Lets keep this thread on track with Darkcoin. Bugs and fixes, fine, everything else, keep in respective threads. Too many times people use this thread to gain exposure to other coins since it is one (if not the longest) of the most active altcoin thread on BCT.
|
|
|
|
|