|
xulescu
|
 |
September 24, 2014, 03:31:39 PM |
|
... checkpoints ...
I think the best option is that each client could create checkpoints itself for blocks old enough. In this context, all the files in ~/.bitmonero or %APPDATA%/bitmonero should probably self-signed by the client on exit. Clients could generate their own keys but that opens up other problems.
|
|
|
|
|
infofront
Legendary

Activity: 2688
Merit: 3150
Shitcoin Minimalist
|
 |
September 24, 2014, 03:35:20 PM |
|
Is it plausible to make clients checkpoint themselves regularly? This would require the checkpoints to be saved in some external file that is integrity-verifiable.
Are we going to have nightly build of the wallet file? That is quite inconvenient. Man up solider!
|
|
|
|
|
argentinx
Member


Activity: 109
Merit: 10
|
 |
September 24, 2014, 04:22:03 PM |
|
sorry for English but I'm using google translator
I do not know how it works the blockchain so I write what I think
if I understand correctly there are master nodes servers that are managed by the dev team with bitmonerod above
I understand it a timewarp attack should be a fork of blockchain in practice two blockchain at the same time that's right? the only problem that would would double spending or are there others?
you could not put in the code that whenever bitmonerod download a new block the comparisons with blocks of all the master node if there are two different blocks type 5 master node with a block and 3 with a different block "one of the two would be the fork"
wins the block that is on more master node and then automatically the client who understands that its not the block that won auto erase the blockchain and download once again the blockchain all lead to eliminate the fork would remain only a blockchain it would eliminate the problem instantly double spending
one thing I did not understand when there is this attack occurs against a master node? or a normal node if no you can enter in the source code that the only blockchain exact is present in the master node
if it brings other problems this type of attack In addition to double spending you could explain it? thanks
|
|
|
|
|
klee
Legendary

Activity: 1498
Merit: 1002
|
 |
September 24, 2014, 05:16:47 PM |
|
OK, I'm thoroughly confused. But I do know that if XMR survives this thorough thrashing, it will rise like a Pheonix. I commend those who would protect the ring signatures from the time warp.
At least use bold text 
|
|
|
|
|
fluffypony
Donator
Legendary

Activity: 1274
Merit: 1069
GetMonero.org / MyMonero.com
|
 |
September 24, 2014, 05:31:01 PM |
|
It can literally become a war of attrition; however if the defence is in the process of developing a permanent fix then time is on the side of the defence. I compiled bitmonerod 4x over the last 24 hours on different computers.  And thanks to whoever updated the makefile with the release-static target, as now I can just pull and build once on my main mac, and then copy the bitmonerod file around to my other macs that aren't setup to build but can still solo mine. That was me, I got frustrated with manually building static binaries...it's a pleasure:)
|
|
|
|
skygong
Newbie

Activity: 9
Merit: 0
|
 |
September 24, 2014, 05:39:00 PM |
|
bittrex.com
Disabled Monero Disabled XMR
???
wallet offline precaution at request of the devs
why?
|
|
|
|
|
owlcatz
Legendary

Activity: 4410
Merit: 2115
|
 |
September 24, 2014, 05:53:24 PM Last edit: September 24, 2014, 06:12:06 PM by owlcatz |
|
bittrex.com
Disabled Monero Disabled XMR
???
wallet offline precaution at request of the devs
why?
Here is the best and shortest write-up i've seen so far. btw, you should be able to buy/sell, just not withdraw or deposit. http://bullbearanalytics.com/2014/09/23/whats-going-monero/[edit - removed tracking info that i missed sorry]
|
| DΞX.fo | | | | | | ▄▄██████ █████████ ██████████ ██████████ ██████████ █████████ ▀▀██████
▄███████ ▄██████████ ████████████ █████████████ █████████████ | | | | ▄▄█ ▄████▀ ▄███▀█▄ ▄██▀█▄██ █████▀▀█ ████████ ████████ ▀██▄████ ▄████▄▄█ ▄█████▀███ ▄█████▀████▀ █████▀███████ ▀██▀█████████ | | | | | BTC XMR DAI LTC Fees 0.8% |
|
|
|
skygong
Newbie

Activity: 9
Merit: 0
|
 |
September 24, 2014, 06:36:13 PM |
|
bittrex.com
Disabled Monero Disabled XMR
???
wallet offline precaution at request of the devs
why?
Here is the best and shortest write-up i've seen so far. btw, you should be able to buy/sell, just not withdraw or deposit. http://bullbearanalytics.com/2014/09/23/whats-going-monero/[edit - removed tracking info that i missed sorry] thinks ,I not withdraw or deposit. why? I want deposit xmr.
|
|
|
|
|
infofront
Legendary

Activity: 2688
Merit: 3150
Shitcoin Minimalist
|
 |
September 24, 2014, 06:38:00 PM |
|
bittrex.com
Disabled Monero Disabled XMR
???
wallet offline precaution at request of the devs
why?
Here is the best and shortest write-up i've seen so far. btw, you should be able to buy/sell, just not withdraw or deposit. http://bullbearanalytics.com/2014/09/23/whats-going-monero/[edit - removed tracking info that i missed sorry] thinks ,I not withdraw or deposit. why? I want deposit xmr. temporary security precaution
|
|
|
|
|
psterryl
Member


Activity: 87
Merit: 10
|
 |
September 24, 2014, 07:23:24 PM Last edit: September 24, 2014, 08:11:06 PM by psterryl |
|
Edit: never mind, seems this isn't to do with the ongoing attack threat and the devs are already on top of it.
|
|
|
|
|
skygong
Newbie

Activity: 9
Merit: 0
|
 |
September 24, 2014, 07:37:43 PM |
|
bittrex.com
Disabled Monero Disabled XMR
???
wallet offline precaution at request of the devs
why?
Here is the best and shortest write-up i've seen so far. btw, you should be able to buy/sell, just not withdraw or deposit. http://bullbearanalytics.com/2014/09/23/whats-going-monero/[edit - removed tracking info that i missed sorry] thinks ,I not withdraw or deposit. why? I want deposit xmr. temporary security precaution thinks. how long temporary security precaution?
|
|
|
|
|
|
25hashcoin
|
 |
September 24, 2014, 07:51:42 PM |
|
I've never mined any coin in my life. I am interested in mining Monero. I run Ubuntu. Is there an easy/straightforward guide on how i can set this up?
|
Bitcoin - Peer to Peer Electronic CASH
|
|
|
ArticMine
Legendary

Activity: 2282
Merit: 1062
Monero Core Team
|
 |
September 24, 2014, 07:51:53 PM |
|
Hi folk,
I suspect some potential problem, so i would like to ask to contact me every exchange that trade CN (especially Polo, Bittrex and Bter). If someone is in touch with exchange operators, please let them know.
Zoidberg
X-posted from BBR thread. Seems an attack against Cryptonote coins may actually be underway? Is there a link to actual post where crypto_zoidberg posted this?
|
|
|
|
Chicken76
Newbie

Activity: 58
Merit: 0
|
 |
September 24, 2014, 07:52:28 PM |
|
thinks. how long temporary security precaution?
The initial announcement was for 24 hours. We're waiting for the developers to post more details if there's anything going on that would require it to be prolonged.
|
|
|
|
|
psterryl
Member


Activity: 87
Merit: 10
|
 |
September 24, 2014, 07:54:15 PM Last edit: September 24, 2014, 08:11:19 PM by psterryl |
|
Edit: never mind, seems this isn't to do with the ongoing attack threat and the devs are already on top of it.
|
|
|
|
|
|
xulescu
|
 |
September 24, 2014, 07:57:44 PM |
|
Hi folk,
I suspect some potential problem, so i would like to ask to contact me every exchange that trade CN (especially Polo, Bittrex and Bter). If someone is in touch with exchange operators, please let them know.
Zoidberg
X-posted from BBR thread. Seems an attack against Cryptonote coins may actually be underway? Is there a link to actual post where crypto_zoidberg posted this? Click on "Quote from: crypto_zoidberg on Today at 07:06:01 PM" at the top of the quote. Post was removed.
|
|
|
|
|
|
xulescu
|
 |
September 24, 2014, 08:00:39 PM |
|
I've never mined any coin in my life. I am interested in mining Monero. I run Ubuntu. Is there an easy/straightforward guide on how i can set this up?
Welcome, and let me point you to http://monero.cc/getting-started/index.htmlDepending on your setup, make sure to read the OP and look for a list of miners. You might have to follow their threads to get more information about how to compile, run, configure them from their own threads (if applicable).
|
|
|
|
|
smooth
Legendary

Activity: 2982
Merit: 1203
|
 |
September 24, 2014, 08:21:52 PM |
|
Plus open checkpoints evaluated at runtime allow us to disappear off the face of the earth and a new group could still deliver checkpoints (ie. a reduction in centralisation).
The only plausible way for someone else to take over if we disappear off the face of the earth would be to also take over maintaining the software, which means they could change any public key used to verify a signature, if it were done that way. The idea that the existing software can continue to run indefinitely and decentralized without being updated is totally implausible.
|
|
|
|
|
fluffypony
Donator
Legendary

Activity: 1274
Merit: 1069
GetMonero.org / MyMonero.com
|
 |
September 24, 2014, 09:50:17 PM |
|
Plus open checkpoints evaluated at runtime allow us to disappear off the face of the earth and a new group could still deliver checkpoints (ie. a reduction in centralisation).
The only plausible way for someone else to take over if we disappear off the face of the earth would be to also take over maintaining the software, which means they could change any public key used to verify a signature, if it were done that way. The idea that the existing software can continue to run indefinitely and decentralized without being updated is totally implausible. Point. So then the checkpoints.json thing is a convenience tool more than anything else.
|
|
|
|
smooth
Legendary

Activity: 2982
Merit: 1203
|
 |
September 24, 2014, 09:56:14 PM |
|
Plus open checkpoints evaluated at runtime allow us to disappear off the face of the earth and a new group could still deliver checkpoints (ie. a reduction in centralisation).
The only plausible way for someone else to take over if we disappear off the face of the earth would be to also take over maintaining the software, which means they could change any public key used to verify a signature, if it were done that way. The idea that the existing software can continue to run indefinitely and decentralized without being updated is totally implausible. Point. So then the checkpoints.json thing is a convenience tool more than anything else. In any case I agree with your point that it doesn't need to be signed, especially if blockchain.bin is not signed.
|
|
|
|
|
|