Reused R values again

[Pitchotto]

Congratulations I bow before your gesture!
Congratulations ....

[1715462181]

1715462181

[1715462181]

1715462181

[Kprawn]

All white hats off to Johoe  Tip that ChangeTip hat for him on Reddit people.
http://www.reddit.com/r/Bitcoin/comments/2otekd/white_hat_johoe_returns_255_btc_to_blockchaininfo/

We need more people like him/her in this world.

I have been thinking "Bitcoin" has lost the plot, with all the hacks and scamming going around, and then this happens.

It gives me hope in humanity!!

[roterdam]

congratulations
!!!

[woodson]

Nicely done.  Good to see positivism within the community. 

[Rollin.io]

Hats off!!

[newIndia]

This is awesome. Great example set by U

Since this thread was bumped, I think I should update it.

There seems to be a new buggy program that reuses the same R value for all signatures in a transaction.  It started around September 2014. Because the program uses mostly unique addresses, the bug is not always exploitable.  But reuse happened often enough to break over 400 new keys. The list is getting too long to post it here so here are the links:

http://johoe.mooo.com/bitcoin/broken.txt
http://johoe.mooo.com/bitcoin/endangered.txt

The first list contains the addresses whose private key can be computed from the block chain.  The second list additionally contains addresses that were used by the faulty client but only in a context where it cannot be broken (unless I'm missing something).

Does anyone know what the buggy program is?  Or does anyone recognize any of the more recent addresses?

Note that the addresses that appear only in the second list still may be in danger, e.g., if they stem from a BIP32 wallet and one knows the "xpub" public key.

It looks like there are some bots sweeping all funds that go to such a broken wallet.

May I ask you that after creating an address, if I check it against these 2 lists and my address is not available among them, then am I safe ?

If not, then what is the way to check the safety of a new address ?

[FeedbackLoop]

Epic johoe!

I wish there were more like him. We sure need them!

Will johoe post an address so that we, the impressed spectators, can send him a few beers? Also, is blockchain.info rewarding this hero in anyway?

[spooderman]

[dexX7]

Very honorable move. You truely deserve the respect!

Btw is there changetip for bct?

... exactly my thoughts after reading the post.

[Gyrsur]

maybe he/she is satoshi. 

[Velkro]

People like Johoe  are so rare, i can't believe what happened here...

[Matt Y]

No affected by this, but just wanted to thank you for being a boss.

[LFC_Bitcoin]

People like Johoe  are so rare, i can't believe what happened here...

Same here.
Very, very honest.

Rare these days.

[tencentcoin]

thanks johoe , i get my btc return 2 hours ago

i am more bileve you are satoshi

[SpanishSoldier]

maybe he/she is satoshi. 

thanks johoe , i get my btc return 2 hours ago

i am more bileve you are satoshi

Seems so. Either Satoshi or a very very early adopter who has CPU mined coins.

[World]

Right thing to do.Thumbs up johoe

[redsn0w]

maybe he/she is satoshi. 

thanks johoe , i get my btc return 2 hours ago

i am more bileve you are satoshi

Seems so. Either Satoshi or a very very early adopter who has CPU mined coins.

He is only an honest guys , great  work *again* johoe  .

[abacus]

Honesty seems to be not so common in these days and even less in the BTC world.
What you did is admirable.

You, Sir, surely deserve a positive feedback on your trust page.

[sumantso]

Very honourable work there, johoe. Thanks from all

I take it that the reused-whatever bug is solved now? Or do we avoid blockchain for now?

[Stars]

Huge respect for doing this. We need more people in the world like you.