Bitcoin Forum
April 19, 2024, 06:27:27 PM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: A "lightweight" node that still downloads the blockchain.  (Read 658 times)
mustyoshi (OP)
Sr. Member
****
Offline Offline

Activity: 287
Merit: 250



View Profile
March 12, 2014, 05:25:21 PM
 #1

What are some security concerns of a node which only saves transactions that involve itself?

Other than the obvious of being unable to verify transactions, and relying on them being buried a few blocks deep before "accepting" them. What other attacks would such a node be vulnerable to, and what are possible ways to defend against them?

Right now the node I'm running saves headers, coinbase, and tx involving itself. What am I vulnerable to?
1713551247
Hero Member
*
Offline Offline

Posts: 1713551247

View Profile Personal Message (Offline)

Ignore
1713551247
Reply with quote  #2

1713551247
Report to moderator
1713551247
Hero Member
*
Offline Offline

Posts: 1713551247

View Profile Personal Message (Offline)

Ignore
1713551247
Reply with quote  #2

1713551247
Report to moderator
1713551247
Hero Member
*
Offline Offline

Posts: 1713551247

View Profile Personal Message (Offline)

Ignore
1713551247
Reply with quote  #2

1713551247
Report to moderator
"This isn't the kind of software where we can leave so many unresolved bugs that we need a tracker for them." -- Satoshi
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
chriswilmer
Legendary
*
Offline Offline

Activity: 1008
Merit: 1000


View Profile WWW
March 12, 2014, 06:11:41 PM
 #2

Are you just implementing your own version of Simplified Payment Verification?

There is a lot of discussion out there already on the vulnerabilities of this.
mustyoshi (OP)
Sr. Member
****
Offline Offline

Activity: 287
Merit: 250



View Profile
March 12, 2014, 06:20:48 PM
 #3

Are you just implementing your own version of Simplified Payment Verification?

There is a lot of discussion out there already on the vulnerabilities of this.

I've never looked at Simplified Payment Verification, but I'll see if that is indeed the idea I am making.

EDIT: And it is.
chriswilmer
Legendary
*
Offline Offline

Activity: 1008
Merit: 1000


View Profile WWW
March 12, 2014, 06:22:09 PM
 #4

Are you just implementing your own version of Simplified Payment Verification?

There is a lot of discussion out there already on the vulnerabilities of this.

I've never looked at Simplified Payment Verification, but I'll see if that is indeed the idea I am making.

That's amazing. You and Satoshi Nakamoto think alike Smiley

(he wrote about this in his white paper)
mustyoshi (OP)
Sr. Member
****
Offline Offline

Activity: 287
Merit: 250



View Profile
March 12, 2014, 06:33:08 PM
 #5

Are you just implementing your own version of Simplified Payment Verification?

There is a lot of discussion out there already on the vulnerabilities of this.

I've never looked at Simplified Payment Verification, but I'll see if that is indeed the idea I am making.

That's amazing. You and Satoshi Nakamoto think alike Smiley

(he wrote about this in his white paper)

I've read the white paper before, so I probably just forgot what it was called and was just subconciously using the whitepaper as my source.

But what would some ways to keep my node from being tricked? If downloading the entire blockchain is not an option.
chriswilmer
Legendary
*
Offline Offline

Activity: 1008
Merit: 1000


View Profile WWW
March 12, 2014, 06:36:22 PM
 #6

If you are only connected to one "full" node, you are in trouble... but if you connect (randomly!) to many, then you are more likely to be fine.

Multibit is based on this approach, and it surpassed a million downloads recently, so it's a successful model.

Read this:

https://code.google.com/p/bitcoinj/wiki/SecurityModel
mustyoshi (OP)
Sr. Member
****
Offline Offline

Activity: 287
Merit: 250



View Profile
March 12, 2014, 06:48:14 PM
 #7

If you are only connected to one "full" node, you are in trouble... but if you connect (randomly!) to many, then you are more likely to be fine.

Multibit is based on this approach, and it surpassed a million downloads recently, so it's a successful model.

Read this:

https://code.google.com/p/bitcoinj/wiki/SecurityModel

Interesting stuff, I'll see if I can't ensure random node connections on a regular basis. And I'll have to time my downloading of new blocks to make sure that the time remains constant on average.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!