[BBR] Boolberry: Privacy and Security - Guaranteed Since 2014

[tljenson]

I know I'm not any good you should take up the marketing job, your passionate about the name. You'd do a good job at marketing the coin.

[rentahash]

CZ, is this affecting BBR as well?
https://bitcointalk.org/index.php?topic=789978.msg8905825#msg8905825

[surfer43]

CZ, is this affecting BBR as well?
https://bitcointalk.org/index.php?topic=789978.msg8905825#msg8905825

Well, the vague made-up FUD is affecting XMR's price severely. BBR's price is only down to 0.0007, so I would say it affects XMR more than BBR. In the unlikely case it's not false, Boolberry will have time to fix the issue after Monero is "attacked" in a few days.

[rentahash]

CZ, is this affecting BBR as well?
https://bitcointalk.org/index.php?topic=789978.msg8905825#msg8905825

Well, the made-up vague FUD is affecting XMR's price severely. BBR's price is only down to 0.0007, so I would say it affects XMR more than BBR. In the unlikely case it's not false, Boolberry will have time to fix the issue after Monero is "attacked" in a few days.

I know that friend, but thought maybe CZ noted problem earlier and conserved it...
That would place BBR ahead of other CN coins.

[windjc]

CZ, is this affecting BBR as well?
https://bitcointalk.org/index.php?topic=789978.msg8905825#msg8905825

Well, the made-up vague FUD is affecting XMR's price severely. BBR's price is only down to 0.0007, so I would say it affects XMR more than BBR. In the unlikely case it's not false, Boolberry will have time to fix the issue after Monero is "attacked" in a few days.

I know that friend, but thought maybe CZ noted problem earlier and conserved it...
That would place BBR ahead of other CN coins.

Right. Either this is FUD (most likely) and BBR will go up in a couple of days or its not and BBR will go up A LOT in a couple of days.

[jl777]

CZ, is this affecting BBR as well?
https://bitcointalk.org/index.php?topic=789978.msg8905825#msg8905825

We are working on resolving this issue. I was the one that offered anonymint a bounty to research BCX's claims. This is a possible exploit that anonymint says has a fix, so as long as we can concentrate on the important things, then it should be just another day in cryptoland.

My understanding of the attack is that it takes a long time to prepare, and it also requires a lot of hardware resources and only can affect some subset of tx. So, there are many conditions and few people will have the ability and resources to pull this off.

Now this could all be an overreaction to some obscure edge case, but when it comes to something like this I do not want to assume it is inconsequential even if it is improbable. At the very least, this provides some intense scrutiny of the algorithms and creates new ways to harden it.

James

[windjc]

CZ, is this affecting BBR as well?
https://bitcointalk.org/index.php?topic=789978.msg8905825#msg8905825

We are working on resolving this issue. I was the one that offered anonymint a bounty to research BCX's claims. This is a possible exploit that anonymint says has a fix, so as long as we can concentrate on the important things, then it should be just another day in cryptoland.

My understanding of the attack is that it takes a long time to prepare, and it also requires a lot of hardware resources and only can affect some subset of tx. So, there are many conditions and few people will have the ability and resources to pull this off.

Now this could all be an overreaction to some obscure edge case, but when it comes to something like this I do not want to assume it is inconsequential even if it is improbable. At the very least, this provides some intense scrutiny of the algorithms and creates new ways to harden it.

James

Thanks for the update James.

[sussex]

I would highly encourage you to stop discussing the name. It does not help in any way and it does not make an influence to the final decision. Voting has been already finished. Final official decision will be announced soon. Posting metal band pictures won't discourage us to move forward for the better good.

Stay with us and support us or leave us - it's your choice. For all the project (doesn't matter the name) supporters I would like to say big thank you!

Bitcrea

...... and the coup completes.

I'll take option B thanks Bob.

Good luck in Gielinor, look out for those dragons - they can inflict up to 6000 damage on you.  .

[sonoIO]

There is a XMR-BBR comparison document
http://slides.com/viewpresentation/comparison-of-cn--2#/
allegedly from
http://www.sequoiacap.cn/en/

[windjc]

There is a XMR-BBR comparison document
http://slides.com/viewpresentation/comparison-of-cn--2#/
allegedly from
http://www.sequoiacap.cn/en/

Awesome, thanks. Fair assessment of 2 coins imo.

[slapper]

BBR's POW and Diff are different from XMR and the exploit seems to be exploiting XMR only anyway. There is no slippage to BBR yet which is fascinating to me as well as the fact that some of the XMR dumpers also slowly dumped BBR to keep the silver coin in check

[iCEBREAKER]

BBR's POW and Diff are different from XMR and the exploit seems to be exploiting XMR only anyway. There is no slippage to BBR yet which is fascinating to me as well as the fact that some of the XMR dumpers also slowly dumped BBR to keep the silver coin in check

BCX's attack has nothing to do with POW per se.  It targets Cryptnote's implementation of ring signatures AFAIK.

BBR is a much easier target for a Sybil mediated timewarp attack because it has a far smaller network than XMR securing it.

[slapper]

BBR's POW and Diff are different from XMR and the exploit seems to be exploiting XMR only anyway. There is no slippage to BBR yet which is fascinating to me as well as the fact that some of the XMR dumpers also slowly dumped BBR to keep the silver coin in check

BCX's attack has nothing to do with POW per se.  It targets Cryptnote's implementation of ring signatures AFAIK.

BBR is a much easier target for a Sybil mediated timewarp attack because it has a far smaller network than XMR securing it.

Attaboy. Show em who is the boss.

[slapper]

BBR's POW and Diff are different from XMR and the exploit seems to be exploiting XMR only anyway. There is no slippage to BBR yet which is fascinating to me as well as the fact that some of the XMR dumpers also slowly dumped BBR to keep the silver coin in check

BCX's attack has nothing to do with POW per se.  It targets Cryptnote's implementation of ring signatures AFAIK.

BBR is a much easier target for a Sybil mediated timewarp attack because it has a far smaller network than XMR securing it.

Please advice What should be do iCEBREAKER? Are you a professional coder too?

At dinner I suddenly had an epipheny on the exploit. I initially thought I would short Monero, because it seemed it was doomed no matter what I did, because I also see another related attack against Monero because it doesn't have BBR's safety feature. I will detailing this in my next post.

I am sure everyone knows BBR has a feature which XMR doesn't have yet (and would require hard fork to add), where each coin is flagged with the minimum # of inputs it will mix with when it is transacted in the future. This enables BBR to avoid inadvertent unmasking of the anonymity.

Well when we consider an attacker do that on purpose, then XMR is much more suspectible to anonymity reduction (which we are still trying to decide if also reveals the private key).

[crypto_zoidberg]

CZ, is this affecting BBR as well?
https://bitcointalk.org/index.php?topic=789978.msg8905825#msg8905825

We are working on resolving this issue. I was the one that offered anonymint a bounty to research BCX's claims. This is a possible exploit that anonymint says has a fix, so as long as we can concentrate on the important things, then it should be just another day in cryptoland.

My understanding of the attack is that it takes a long time to prepare, and it also requires a lot of hardware resources and only can affect some subset of tx. So, there are many conditions and few people will have the ability and resources to pull this off.

Now this could all be an overreaction to some obscure edge case, but when it comes to something like this I do not want to assume it is inconsequential even if it is improbable. At the very least, this provides some intense scrutiny of the algorithms and creates new ways to harden it.

James

I let myself to uncover a little anonymint's research that we was privately discussed this evening: imo it's not critical, it's not about stealing money and it's not coin killer. it's about anonymity that could be compromised on very rare situations(with some specific conditions) and untypical for current transactions distribution(if could call it so). It similar to flaw that i fixed in august ( https://bitcointalk.org/index.php?topic=577267.msg8548412#msg8548412 ), so this also could be fixed without pain, and as i said - imo it's still not critical.
Anyway, his research was helpful(thanks to anonymint), but it looks like BitcoinEXpress mean something else.

Also many thanks to James for organization efforts!

[iCEBREAKER]

BBR's POW and Diff are different from XMR and the exploit seems to be exploiting XMR only anyway. There is no slippage to BBR yet which is fascinating to me as well as the fact that some of the XMR dumpers also slowly dumped BBR to keep the silver coin in check

BCX's attack has nothing to do with POW per se.  It targets Cryptnote's implementation of ring signatures AFAIK.

BBR is a much easier target for a Sybil mediated timewarp attack because it has a far smaller network than XMR securing it.

Please advice What should be do iCEBREAKER? Are you a professional coder too?

I am sure everyone knows BBR has a feature which XMR doesn't have yet (and would require hard fork to add), where each coin is flagged with the minimum # of inputs it will mix with when it is transacted in the future. This enables BBR to avoid inadvertent unmasking of the anonymity.

Well when we consider an attacker do that on purpose, then XMR is much more suspectible to anonymity reduction (which we are still trying to decide if also reveals the private key).

We should make popcorn and coffee and order Grubhub chow fun delivery.  The next three days will be very interesting.  Maybe BBR and XMR will switch market caps?   

[vipgelsi]

Whats the deal with the name of this coin?

[sonoIO]

Whats the deal with the name of this coin?

It is playful and it smell as berries. But in a couple of days you will find out if it is going to change to something ancient and mystical

[jl777]

CZ, is this affecting BBR as well?
https://bitcointalk.org/index.php?topic=789978.msg8905825#msg8905825

We are working on resolving this issue. I was the one that offered anonymint a bounty to research BCX's claims. This is a possible exploit that anonymint says has a fix, so as long as we can concentrate on the important things, then it should be just another day in cryptoland.

My understanding of the attack is that it takes a long time to prepare, and it also requires a lot of hardware resources and only can affect some subset of tx. So, there are many conditions and few people will have the ability and resources to pull this off.

Now this could all be an overreaction to some obscure edge case, but when it comes to something like this I do not want to assume it is inconsequential even if it is improbable. At the very least, this provides some intense scrutiny of the algorithms and creates new ways to harden it.

James

I let myself to uncover a little anonymint's research that we was privately discussed this evening: imo it's not critical, it's not about stealing money and it's not coin killer. it's about anonymity that could be compromised on very rare situations(with some specific conditions) and untypical for current transactions distribution(if could call it so). It similar to flaw that i fixed in august ( https://bitcointalk.org/index.php?topic=577267.msg8548412#msg8548412 ), so this also could be fixed without pain, and as i said - imo it's still not critical.
Anyway, his research was helpful(thanks to anonymint), but it looks like BitcoinEXpress mean something else.

Also many thanks to James for organization efforts!

Anytime there is any possible exploit anywhere near a coin's codebase it is best to do whatever it takes to get to the bottom of the threat. If it turns out to be a false alert, then it is just a few BTC spent. If it is ignored, well, the results could be pretty bad. i think the expression is "better safe than sorry"

BCX's cryptic "implementation" specific phrasing seems to indicate it is specific to XMR and that BBR already fixed this, or at least most of the exposure to this.

In this case, it highlights the thing that we all know for a while. CZ is the leading cryptonote dev, bar none. Now it could be that there are additional vectors to the one that is found so far, so we must always be on the alert. BCX is a serious guy and I have much respect for him. I am glad that both communities are working closely to get through the next 72 hours. Any attack against XMR will not be good for all the cryptonotes, regardless if BBR is already immune or not.

James

https://bitcointalk.org/index.php?topic=789978.msg8907625#msg8907625

[jl777]

BBR's POW and Diff are different from XMR and the exploit seems to be exploiting XMR only anyway. There is no slippage to BBR yet which is fascinating to me as well as the fact that some of the XMR dumpers also slowly dumped BBR to keep the silver coin in check

BCX's attack has nothing to do with POW per se.  It targets Cryptnote's implementation of ring signatures AFAIK.

BBR is a much easier target for a Sybil mediated timewarp attack because it has a far smaller network than XMR securing it.

Please advice What should be do iCEBREAKER? Are you a professional coder too?

I am sure everyone knows BBR has a feature which XMR doesn't have yet (and would require hard fork to add), where each coin is flagged with the minimum # of inputs it will mix with when it is transacted in the future. This enables BBR to avoid inadvertent unmasking of the anonymity.

Well when we consider an attacker do that on purpose, then XMR is much more suspectible to anonymity reduction (which we are still trying to decide if also reveals the private key).

We should make popcorn and coffee and order Grubhub chow fun delivery.  The next three days will be very interesting.  Maybe BBR and XMR will switch market caps?   

switching marketcaps is a bit much for a single exploit patched and it is quite possible that BCX noticed BBR's fix of this vulnerability and the lack of XMR's fix.

However, the 5:1 price disparity is clearly silly and I expect this to be corrected before yearend

James