Received-SPF: pass (sog-mx-2.v43.ch3.sourceforge.com: domain of petertodd.org
	designates 62.13.149.43 as permitted sender)
	client-ip=62.13.149.43; envelope-from=pete@petertodd.org;
	helo=outmail149043.authsmtp.co.uk; 
Date: Mon, 24 Feb 2014 23:41:16 -0500
From: Peter Todd <pete@petertodd.org>
To: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Message-ID: <20140225044116.GA28050@savin>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="/04w6evG8XlLl3ft"
Content-Disposition: inline
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: [Bitcoin-development] Fee drop
Precedence: list


--/04w6evG8XlLl3ft
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

So, just to be clear, we're adding, say, a memory limited mempool or
something prior to release so this fee drop doesn't open up an obvious
low-risk DDoS exploit.... right? As we all know, the network bandwidth
DoS attack mitigation strategy relies on transactions we accept to
mempools getting mined, and the clearance rate of the new low-fee
transactions is going to be pretty small; we've already had problems in
the past with mempool growth in periods of high demand. Equally it
should be obvious to people how you can create large groups of low-fee
transactions, and then cheaply double-spend them with higher fee
transactions to suck up network bandwidth - just like I raised for the
equally foolish double-spend propagation pull-req.

Of course, there's also the problem that we're basically lying to people
about whether or not Bitcoin is a good medium for microtransactions.
It's not. Saying otherwise by releasing software that has known and
obvious DoS attack vulnerabilities that didn't exist in the previous
version is irresponsible on multiple levels.

--=20
'peter'[:-1]@petertodd.org
0000000000000000b28e2818c4d8019fb71e33ec2d223f5e09394a89caccf4e2

--/04w6evG8XlLl3ft
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
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==
=X+3t
-----END PGP SIGNATURE-----

--/04w6evG8XlLl3ft--