aminorex
Legendary
Offline
Activity: 1596
Merit: 1029
Sine secretum non libertas
|
|
August 24, 2014, 01:27:00 AM |
|
Agree we need pics
too much identifying info already.
|
Give a man a fish and he eats for a day. Give a man a Poisson distribution and he eats at random times independent of one another, at a constant known rate.
|
|
|
|
|
|
"Bitcoin: the cutting edge of begging technology." -- Giraffe.BTC
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
Anon136
Legendary
Offline
Activity: 1722
Merit: 1217
|
|
August 24, 2014, 02:06:29 AM |
|
Agree we need pics
too much identifying info already. ZzZzZz. Not such a good story without a picture of the painting. Still grats on your wall not being boring anymore.
|
Rep Thread: https://bitcointalk.org/index.php?topic=381041If one can not confer upon another a right which he does not himself first possess, by what means does the state derive the right to engage in behaviors from which the public is prohibited?
|
|
|
nioc
Legendary
Offline
Activity: 1624
Merit: 1008
|
|
August 24, 2014, 03:19:30 AM |
|
Agree we need pics
too much identifying info already. Yes, your name spells either XMR or Monero (if you use the o twice). Back on topic, a question from the cadmium induced drooling masses. For the update, all I need to do is download it and it will replace the files that need to be replaced automatically with nothing else needed to be done on our part?
|
|
|
|
xulescu
|
|
August 24, 2014, 04:49:29 AM |
|
Back on topic, a question from the cadmium induced drooling masses. For the update, all I need to do is download it and it will replace the files that need to be replaced automatically with nothing else needed to be done on our part?
Would be better if you deleted poolstate.bin after you shutdown the daemon and before you start it up again. If my understanding is correct, you will have hundreds of spam transactions in your mempool and you would have to wait 24h for them to drop out. In the meanwhile, I'm not sure how you would be affected. If the blockchain is the persistent storage of the network then the mempool is its RAM. Better make sure you don't cache stale data. In other news I had also purchased a painting with Monero but more to the tune of about 80. It is also rather significantly smaller than my whole wall. De gustibus and all that.
|
|
|
|
smooth
Legendary
Offline
Activity: 2968
Merit: 1198
|
|
August 24, 2014, 04:56:23 AM |
|
Back on topic, a question from the cadmium induced drooling masses. For the update, all I need to do is download it and it will replace the files that need to be replaced automatically with nothing else needed to be done on our part?
Would be better if you deleted poolstate.bin after you shutdown the daemon and before you start it up again. If my understanding is correct, you will have hundreds of spam transactions in your mempool and you would have to wait 24h for them to drop out. In the meanwhile, I'm not sure how you would be affected. This is most important for (solo) miners and pool nodes. For ordinary users having the spam in your mempool for 24 hours doesn't really matter.
|
|
|
|
ArticMine
Legendary
Offline
Activity: 2282
Merit: 1050
Monero Core Team
|
|
August 24, 2014, 05:37:50 AM Last edit: August 24, 2014, 06:47:58 AM by ArticMine |
|
After replacing the linux binaries and running I get Illegal instruction (core dumped) Operating System, Ubuntu 12.04 64bit Monero was originally installed using the compilation script http://www.monero.cc/blog/new-version-installation-script-now-cpuminer-installation-support-ubuntu-12-04/index.html on 2014-07-13 Edit1: Should I rerun the script and recompile? Edit2: I renamed bitmonero to bitmoneroback, ran (to recompile from source) git clone git://github.com/monero-project/bitmonero && cd bitmonero && make and then copied wallet.bin, and wallet.bin.keys, to ~/bitmonero/build/release/src and now everything works fine.
|
|
|
|
rpietila
Donator
Legendary
Offline
Activity: 1722
Merit: 1036
|
|
August 24, 2014, 07:16:50 AM |
|
Current tx fees are very low to keep XMR accessible to all users (about 1 cent per 24.4 KB)
when someone comes to me giving a factual example how his monero use actually suffers due to the fees, I will support him from my own pocket, considering this as a donation to monero ecosystem. Ok, dude, we are pool ops and we are paying tx fees from our profits. Now, when fee raised 20 times, it's significant impact. The fees go to the miners in the first place, so asking me to support your getting 20 times richer already, is understandably ROTFLMAO.
|
HIM TVA Dragon, AOK-GM, Emperor of the Earth, Creator of the World, King of Crypto Kingdom, Lord of Malla, AOD-GEN, SA-GEN5, Ministry of Plenty (Join NOW!), Professor of Economics and Theology, Ph.D, AM, Chairman, Treasurer, Founder, CEO, 3*MG-2, 82*OHK, NKP, WTF, FFF, etc(x3)
|
|
|
sammy007
Legendary
Offline
Activity: 1904
Merit: 1003
|
|
August 24, 2014, 08:38:04 AM |
|
Current tx fees are very low to keep XMR accessible to all users (about 1 cent per 24.4 KB)
when someone comes to me giving a factual example how his monero use actually suffers due to the fees, I will support him from my own pocket, considering this as a donation to monero ecosystem. Ok, dude, we are pool ops and we are paying tx fees from our profits. Now, when fee raised 20 times, it's significant impact. The fees go to the miners in the first place, so asking me to support your getting 20 times richer already, is understandably ROTFLMAO. Why so serious, man? I thought it would be funny! BTW, it seems exchanges in no hurry, I see last 15 blocks without transactions at all
|
|
|
|
rpietila
Donator
Legendary
Offline
Activity: 1722
Merit: 1036
|
|
August 24, 2014, 08:49:56 AM |
|
Current tx fees are very low to keep XMR accessible to all users (about 1 cent per 24.4 KB)
when someone comes to me giving a factual example how his monero use actually suffers due to the fees, I will support him from my own pocket, considering this as a donation to monero ecosystem. Ok, dude, we are pool ops and we are paying tx fees from our profits. Now, when fee raised 20 times, it's significant impact. The fees go to the miners in the first place, so asking me to support your getting 20 times richer already, is understandably ROTFLMAO. Why so serious, man? I thought it would be funny! BTW, it seems exchanges in no hurry, I see last 15 blocks without transactions at all Rolling on the floor laughing certainly means I found it funny
|
HIM TVA Dragon, AOK-GM, Emperor of the Earth, Creator of the World, King of Crypto Kingdom, Lord of Malla, AOD-GEN, SA-GEN5, Ministry of Plenty (Join NOW!), Professor of Economics and Theology, Ph.D, AM, Chairman, Treasurer, Founder, CEO, 3*MG-2, 82*OHK, NKP, WTF, FFF, etc(x3)
|
|
|
perl
Legendary
Offline
Activity: 1918
Merit: 1190
|
|
August 24, 2014, 09:41:07 AM |
|
monero.crypto-pool.fr as playing the games, the first 3 biggest pool has make mandatory update. Resulrs broken my pool and dev (fluffony) not interest me for help résolve the problem ( is problem off pool ). I resolve on solo with bad patch. ( DEV Bitmonero have been able to limit patch on transaction with bad fee and no other problem badhash per exemple ) --- a/src/cryptonote_protocol/cryptonote_protocol_handler.inl +++ b/src/cryptonote_protocol/cryptonote_protocol_handler.inl @@ -273,7 +273,7 @@ namespace cryptonote if(tvc.m_verifivation_failed) { LOG_PRINT_CCONTEXT_L0("Tx verification failed, dropping connection"); - m_p2p->drop_connection(context); + //m_p2p->drop_connection(context); return 1; } if(tvc.m_should_be_relayed) For information pool for admin: If you update with new patch bitmonerod Before other. When other node relay to you transaction fee 0.005. You reject TX + Disconnecter node on P2P + add in greylisting. After you reconnect at node when greylisting is not switch to blacklisting. Your pool is connected only 3 node and you make orphan and get last block with many time. I have fixed code with comment line disconnect node send bad transaction. Actualy my patch is bad (You can flood bitmonerod off my pool with bad transaction). I have not choice. I use the patch or my pool not work. I do not thank the DEV (fluffony) telling me to wait DEV: Remember that a crypto is also the Pool and not only your code
|
|
|
|
David Latapie
|
|
August 24, 2014, 09:48:50 AM Last edit: August 24, 2014, 10:05:23 AM by David Latapie |
|
Could some esperanto speaker propose motto in esperanto? Let's first consider it in English then after in Esperanto. The actual motto could be slightly changed after the move to esperanto, for euphonic reasons ( traduttore, traditore). Below a compilation of previous proposals I am aware of. I also opened a reddit for this, it will probably be easier to handle there. Also note that this is an exercice in style and it doesn't constitute an official sanction of the motto idea, even though I am in the core team. I also opened a reddit, which will probably be easier to handle than Bitcointalk: Monero motto in Esperanto. Also, I propose an official motto for monero, suitable for business cards, physical coins & c.: Monero est priquiditas pro populo. Because: Quidquid latine dictum sit, altum videtur."Securing Freedom through Privacy" - Google Latin "Praesent libero per Securitate" "Securing Financial Liberty through Privacy" - Google Latin "Aliquam erat volutpat Securitate libertas"
|
|
|
|
David Latapie
|
|
August 24, 2014, 10:09:01 AM |
|
Missive timeline overview I added this link to the OP (Longer summary of each missive by Globb0). Remember to update on the same post. Thanks for your efforts.
|
|
|
|
Globb0
Legendary
Offline
Activity: 2674
Merit: 2053
Free spirit
|
|
August 24, 2014, 10:25:14 AM |
|
OK will do.
Thankyou
|
|
|
|
David Latapie
|
|
August 24, 2014, 10:25:33 AM |
|
I updated the OP accordingly
|
|
|
|
AlexGR
Legendary
Offline
Activity: 1708
Merit: 1049
|
|
August 24, 2014, 10:26:06 AM |
|
Can we have some data on the aftermath of the attack? I'm primarily interested in
- number of transactions done in a given timeframe, - megabytes added as bloat, - effect in transaction speed - total cost for the attacker
If there is anything else you find important, please share.
|
|
|
|
David Latapie
|
|
August 24, 2014, 10:53:09 AM |
|
The Monero Status Android Widget had been added to the OP Note to Bitcoin moderator: next time you delete a post, please notify of the reason.
|
|
|
|
fluffypony
Donator
Legendary
Offline
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
|
|
August 24, 2014, 11:04:32 AM |
|
monero.crypto-pool.fr as playing the games, the first 3 biggest pool has make mandatory update.
This is an incredibly bad patch. It completely breaks the consensus network and relays broke transactions (not just those with the incorrect fee). Pools and nodes deploying this patch will allow an attacker to DDoS the entire network with bad transactions. I cannot emphasise strongly enough how bad this patch is, applying sets us on a path to destroying Monero completely. The network will be a little bit rocky for the next 48 hours as bad (older) nodes are isolated and segregated off, and good nodes are deployed. I'm seeing around 40% of the nodes the DNS seeders connect to having already upgraded. Pools will still operate just fine, transactions will still go through just fine, the nodes that will suffer from flailing connectivity are the ones that have NOT upgraded, not those that have.
|
|
|
|
fluffypony
Donator
Legendary
Offline
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
|
|
August 24, 2014, 11:05:09 AM |
|
Can we have some data on the aftermath of the attack? I'm primarily interested in
- number of transactions done in a given timeframe, - megabytes added as bloat, - effect in transaction speed - total cost for the attacker
If there is anything else you find important, please share.
We'll have a post-mortem later today
|
|
|
|
perl
Legendary
Offline
Activity: 1918
Merit: 1190
|
|
August 24, 2014, 11:18:29 AM |
|
The network will be a little bit rocky for the next 48 hours as bad (older) nodes are isolated and segregated off, and good nodes are deployed. I'm seeing around 40% of the nodes the DNS seeders connect to having already upgraded. Pools will still operate just fine, transactions will still go through just fine, the nodes that will suffer from flailing connectivity are the ones that have NOT upgraded, not those that have.
Yes i agree is verry bad patch. Without my patch my pool is broken not broken now ( lower efficiency ). You make error. I not relay bad transaction and other node not greylisting my pool ( I not relay bad transaction ) I wait all other pool make update for remove patch . My pool not break consensus off TX Fee. I have to give miners the best performance possible, actualy is possible only with my patch. You still want to include a pool perspective You can explain , you have delete key P2P_STAT_TRUSTED_PUB_KEY ? And what it does exactly?
|
|
|
|
fluffypony
Donator
Legendary
Offline
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
|
|
August 24, 2014, 11:26:23 AM |
|
Yes i agree is verry bad patch. Without my patch my pool is broken.
You make error. I not relay bad transaction and other node not greylisting my pool ( I not relay bad transaction ) I wait all other pool make update for remove patch .
My pool not break consensus off TX Fee.
None of the other pools are using your patch, nor are any of them reporting being "broken". Your patch breaks the consensus network because it does not prevent malicious nodes from constantly pushing bad transactions by cutting them off. An attacker can spin up 50 ec2 instances and broadcast nonsense transactions (20kb transactions filled with random data) at you at a rate of tens of thousands a second. Because you're not disconnecting their connections, you will burn CPU time verifying the transactions. Even though you aren't relaying the malicious transactions, you are creating a trivial attack vector for someone to take your pool and any nodes that use this patch out of commission. This patch is bad for you, bad for the network, and fixes an imaginary problem that does not exist.
|
|
|
|
|