Sync your blockchain easily!

[mickeyhouse]

Hi,

I made this poor website for free: btstrp.info.
I was downloading the bitcoin-core blocks from 0 and I was fed up of waiting, so I made it available for everyone.

Tell me if you see any improvement to do !

[1714733234]

1714733234

[HeRetiK]

FYI, bootstrapping the Bitcoin blockchain via torrent or download is not recommended anymore since 0.10.0:

As of Bitcoin Core version 0.10.0 and later, the block chain bootstrap
torrent hosted here takes more time to download and import than it would
to simply start Bitcoin Core and let it sync itself.

(also for any newcomers reading this: there have also been cases where bootstrap downloads were used to spread coin-stealing malware, so it's a practice that is generally advised against due to security concerns as well)

[mickeyhouse]

The bitcoin-core syncing still take lot of hours for me if I can't download a complete updated bootstrap, and i'm fed up when I install a new client/bitcoin node.
Also, I provide the file for blockchain analysis outside the bitcoin-core client.

I don't even understand how you can spread malware through the blocks files, but Is there anything I can do to improve the confidence to my files ?

[HeRetiK]

I'm not assuming any ill will from your end and I have no doubt that there are cases where bootstrapping the blockchain may be desirable.

But it is worth noting that in most cases using a bootstrap file will actually take longer and does come with risks due to cases such as this:

FWIW, I just removed a nearly year old post with a .bitcoin directory download that would have stolen all your bitcoins.

Case in point as to why these "download the blockchain" links are a disaster. God knows how many people got robbed due to it.

[mickeyhouse]

I'm also sharing the blocks and chainstate directories, which implies no further sync is needed (except few blocks between the generation dates).

Do you have any link proving bitcoin thefts from malicious blocks files sharing? I can't find any.

[HeRetiK]

Do you have any link proving bitcoin thefts from malicious blocks files sharing? I can't find any.

The quote posted above:
https://bitcointalk.org/index.php?topic=1310261.msg51300579#msg51300579

It might have "just" been malware that got bundled with legit bootstrap files, however I don't know the details.

[mickeyhouse]

What I see is only theory, and manipulating the blocks to steal coins would mean I know something about the visitors wallets...which is not possible :-)

Anyway if I can improve something or add valuable data to this repo, just tell me.

[HCP]

It also goes against the one of the core (if you'll excuse the pun) tenets of Bitcoin: "Don't Trust, Verify"

I know you're just trying to help, but the entire purpose of running a "Full Node" is knowing that you have downloaded and verified every single block. "Bootstrapping" with just blocks is bad enough, taking someone else's chainstate is basically removing all of the verification from the process and going to "Don't Verify, Trust".

To anyone contemplating using this download... If you don't have the time and resources to fully sync a full node the "proper way"™, then perhaps you should be asking yourself why you're even running a full node?

[ranochigo]

Adversary can modify the chainstate as the client does not verify the pre-existing chainstate for it's correctness and allows the malicious party to insert phantom UTXOs, which can result in fake unconfirmed transactions which are directly relayed to them being accepted by their node but will never get a confirmation. Attackers probably won't stand to gain much by modifying the blocks only.

SPV wallets can probably meet your needs and even provide a greater level of security while being way less time consuming and resource intensive. If you want to run a full node but omit the verification part, then there really is no point running one at all.

[gmaxwell]

The quote posted above:
https://bitcointalk.org/index.php?topic=1310261.msg51300579#msg51300579
It might have "just" been malware that got bundled with legit bootstrap files, however I don't know the details.

I think in that case it was a .bitcoin directory that included a locked wallet full of someone elses keys (and funds had been sent and swept). There is currently an amazon image with this too (or was as of a few weeks ago).

But the chainstate database/etc. aren't intended as external interfaces and I would be totally unsurprised if there was a way for malicious data in them to result in code execution.

[pooya87]

I'm also sharing the blocks and chainstate directories, which implies no further sync is needed (except few blocks between the generation dates).

If anyone is OK with trusting these files and not verify anything then they should not be running a full node in first place. The much better and safer way for them is to use a SPV client which doesn't technically sync with the network (it only downloads ~50 MB of headers and its done).

[aliashraf]

OP,
Thank you for your sincere and altruistic intentions and the fact that you have dedicated some resources and time, but I'm afraid to say, it is not going to work for a couple of reasons:

1- As you have already realized after this thread and getting cult-attacked by hard core bitcoiners, there is a strong resistance against this idea, in the so-called "bitcoin community". They are equipped with so many lethal weapons and accusations based on a false interpretation of concepts such as trust, verification, etc.

2- Your approach to the problem is too immature and raw, there are ways more sophisticated proposals that are abandoned by these guys as well.


Besides investigating the fast sync problem in bitcoin (starting with UTXO commitment proposals), I'd suggest spending more time in this technical sub-forum without getting too much impressed and becoming alienated from the great spirit you got now.

[mickeyhouse]

Thanks for your support.

I added torrents as an additional download method.

[bob123]

There is absolutely zero demand for this.

If someone doesn't want to download the blockchain.. simple use a SPV wallet.
If someone wants to download and verify the blockchain, using your method is plain stupid.

I'd not recommend anyone to use that method. Just open up bitcoin core and let it sync.

You are risking your coins as well as any other data stored on your computer.

[mickeyhouse]

That's your point of view.
I posted it here to share it if anyone needs it for syncing or for blockchain analysis. It seems that you only focus on the bootstrap.dat file.
Even if nobody uses this website, I don't care as it simplifies my life and I have real usage.

Also, I did'nt find any trace of a real world bitcoin-core attack through blockchain blocks on the web.

[Khaos77]

There is absolutely zero demand for this.

If someone doesn't want to download the blockchain.. simple use a SPV wallet.
If someone wants to download and verify the blockchain, using your method is plain stupid.

I'd not recommend anyone to use that method. Just open up bitcoin core and let it sync.

You are risking your coins as well as any other data stored on your computer.

You don't know if their is a demand for this or not.
You may not want it , but others might.

No one really cares what you recommend, or at least I don't.  

There are no executable files in a blockchain download.
Plus they can always scan for viruses.
 
@OP,   Ignore these bunch of naysayers, they are so busy making up stories on why not to improve bitcoin performance,
that making anything faster or easier for users is an assault on their little little minds.

FYI
I imagine many student researchers studying the blockchain up close ,
would prefer using your download , instead of waiting on the bitcoin divine experience of slowness that verifying a blockchain requires.

[Wind_FURY]

I'm also sharing the blocks and chainstate directories, which implies no further sync is needed (except few blocks between the generation dates).

If anyone is OK with trusting these files and not verify anything then they should not be running a full node in first place. The much better and safer way for them is to use a SPV client which doesn't technically sync with the network (it only downloads ~50 MB of headers and its done).

This.

Plus I can see the trolls have started again with their disinformation campaign. Haha.

To newbies, it’s important to note that you’re not merely downloading the blocks as you sync your node for the first time, your node is also validating/verifiying all the data.

[HeRetiK]

Btw, thanks for the bandwidth, OP! While I thought it important to give newbs a heads-up that an external download will not increase their sync speed I did not expect the topic to be that contentious lol ¯\_(ツ)_/¯

[bob123]

That's your point of view.

What exactly?
That it is a dumb idea? No, that's a fact.
That it is risky and might compromise their system? No, that's a fact.
That there is no demand for it? Yes, thats my opinion. I should have phrased it more precisely:There shouldn't be any demand for it (because it's dumb).

Also, I did'nt find any trace of a real world bitcoin-core attack through blockchain blocks on the web.

Yes, because we have very little retards doing what you are suggesting.
If more retards start doing this, there will be attacks.

There are no executable files in a blockchain download.
Plus they can always scan for viruses.

Oh wow.
The amount of stupidness overwhelms me.

1) Whether there are "executable files" in a blockchain (holy shit, i'd never thought i'd use these words together in one sentence), doesn't matter.
You obviously don't have any clue, so better remain silent.

2) Scanning for "viruses" (what you meant here is: malware) does not protect you. First, it is extremely easy to make malware undetected and secondly, a remote code execution attacking a parser will not be detected by the AV's behavior based analysis.
You obviously also don't know anything about this topic.

[NeuroticFish]

• Blocks and chainstate ... nobody sane would use it, sorry 
• bootstrap may be risky too and also download + indexing may take just as long as a proper wallet run
• Addresses with balance - these could be useful for some and you may discuss with LoyceV since he's also offering download link for this, I think that he is downloading it from a much slower source and maybe you guys should work together instead of competing in this area.