darkcoin exploit found in 2 hours by amateur (why open source matters for anon)

[nutildah]

Something good must be coming soon to DRK to warrant this kind of attention.

Darkcoin is the worst form of anonymous coin we've tried yet... except for all of the others.

[robinwilliams]

Hu... technical credibility ? Are you smoking, man ?

DRK is not credible at all from the beginning:

XC named their coin after algorithm invented by DRK

- INSTAMINED BY DEV

XC was ALL MINED in 100 days (at least dark is minable still)

- pump and dumped like never seen on any crypto coin

XC has their dev "review" other shitcoins to pump them.  it's openly discussed in the XC thread so the XC buyers can "get in the action of the coin the dev is about to pump"

- shitty master node architecture

who the hell knows what XC does?  it hasn't been opensourced since the rev 1.  for all anyone knows it could be exactly the same as rev 1.  which did have vulnerabilities from the prof review (not even opensourced - as seen with dark a "review" is worthless).

DRK is a (very bad) joke and give a very bad image of the crypto scene.

No.  dark is a failure.  Possibly a little scammy. 

XC is a joke.

[illodin]

Weren't you one of the guys claiming to be buying more cheap drk all the way down from $12?  

No.

Are you buying more drk now whil;e the price is just over $2?

You think I would tell you?

Do you still think that you'll replace bitcoin?

Never did.

What does the moon look like up close?

Dunno, ask your momma.


Any other questions?

[Cloakko]

[illodin]

PICS

Didn't last long until the arguments ran out. Oh well.

[shojayxt]

PICS

Didn't last long until the arguments ran out. Oh well.

Same with the gasoline in the darkcoin car.  Running on fumes now

[Cloakko]

PICS

Didn't last long until the arguments ran out. Oh well.

I'm sorry for your loss and future loss, dude. Anyway, I still wish you good luck with DRK.

DRK is the highway to hell...



At least, you know where you're going to !  

[illodin]

The system itself could drop the whole master node base and just add an extra layer e.g. Proof of funds which really is nothing more than proof of stake in essence.

So why adding the whole masternodes was to add anonymity and reward investors, the same could have been achieved in a far more streamlined result.

It's always interesting to read about potential improvements.

Assume there is a proof of funds, i.e. you have an address with let's say 1000 DRK in it. How to streamline it from there?

[otto93]

Has this exploit been fixed yet?

[robinwilliams]

the nodes were more a way to drive demand for the coin up on the exchange.

XC recently did the same thing to drive prices up ... suprise suprise 

[RaXmOuSe]

So drk wasnt open source from beginning?

Why?

[robinwilliams]

So drk wasnt open source from beginning?

Why?

it's the same with XC.

Because of the fact that they are trying to monopolize their market niche and know it's somewhat of a scam (instamine, premine, etc) they know that if they DO have good tech - it will be cloned to a fair release fork (IE - Monero vs Bytecoin).  So they keep it closed sourced.

Also their code probably sucks and they don't want it to be public ... selling the coin on what they think they'll have by the time they release vs release it and then try to sell it.

[rangedriver]

Has this exploit been fixed yet?

[illodin]

Has this exploit been fixed yet?

Yes: https://github.com/darkcoin/darkcoin/commit/fe9fddb292a8505a8f915708d87ef27a1ddd6060

[Cloakko]

So drk wasnt open source from beginning?

Why?

it's the same with XC.

Because of the fact that they are trying to monopolize their market niche and know it's somewhat of a scam (instamine, premine, etc) they know that if they DO have good tech - it will be cloned to a fair release fork (IE - Monero vs Bytecoin).  So they keep it closed sourced.

Also their code probably sucks and they don't want it to be public ... selling the coin on what they think they'll have by the time they release vs release it and then try to sell it.

But what do you want to protect in the case of DRK ?

Why would someone copy it ?!? There are tons of far more better solutions available.

Just poke us whenever a darkshit clone is created...

[illodin]

But what do you want to protect in the case of DRK ?

Why would someone copy it ?!? There are tons of far more better solutions available.

Just poke us whenever a darkshit clone is created...

DRK is the best solution available! See, my argument is as good as yours!

The reason I don't think many will copy DRK, is that its masternode network is not easy to copy. You'd start your coin, then after a month you'd have enough coins to run 10 masternodes or w/e depending on your parameters, each generating an income of $0.0001 / day. No one would host a masternode with a loss.

It would take at least 6-12 months until you'd have a credible masternode network each node valuable enough you couldn't easily just buy off the majority of them. Far too long term of a plan for your standard pump & dump clone project. It's just simpler to clone a PoS coin with 1 week PoW period and put random features into the roadmap.

[nsimmons]

...more better...

http://www.engrish.com/

[Cloakko]

...more better...

http://www.engrish.com/

My bad

Much better, indeed :-)

And thank you for this funny site. I had a good laugh 

[patrolman]

https://bitcointalk.org/index.php?topic=421615.msg9121343#msg9121343

What do we know about "XwzmEE1cJ6HG84CgJvAt7ADmJ"? Very little really, but it's not somebody who is willing to take credit for finding the exploit. Do we assume that finding this exploit is this person's first encounter with the cryptocurrency world?

Would it be reasonable to suggest that most people would be happy to take credit for finding the exploit? Perhaps somebody who might benefit from Darkcoin being damaged would be interested in finding a bug and reporting it anonymously, somebody invested in another anonymous cryptocurrency, for example. We know very well from one of the posters in this thread that it's not difficult to create sock-puppet accounts to support your case.

One thing we do know, is that "XwzmEE1cJ6HG84CgJvAt7ADmJ" does not have a reputation to uphold here on bitcointalk. As a result this person can post things which nobody can confirm or deny. For example:

I'm not so good at C++, really.

Throw in a condescending remark about someone who does have a reputation in the crypto community:

Btw, you should hire some real penetration tester, not me or what was the name of that guy?

And of course a parting jab, but with a "nice guy" remark for good measure:

It seems to be more vulnerabilities in darkcoin. Code looks terrible (nothing personal  )

Based on what we actually know about this character, the thread title "darkcoin exploit found in 2 hours by amateur" is impossible to verify and seems sensationalist.

[karlb187]

DRK is the future of crypto so don't listen to the trolls.