References: <CAPg+sBhb+gYMwp1OJuCHYt5=BU63=YBWOFaLLthHBkN_U-scaA@mail.gmail.com>
	<CANdZDc7c5D7YmAn7GUO+--9U2Z3Lz-CR9E-QsKriVeMoudeipA@mail.gmail.com>
	<20120229164747.GA581@vps7135.xlshosting.net>
Message-ID: <1330534949.81609.YahooMailNeo@web121004.mail.ne1.yahoo.com>
Date: Wed, 29 Feb 2012 09:02:29 -0800 (PST)
From: Amir Taaki <zgenjix@yahoo.com>
To: "bitcoin-development@lists.sourceforge.net"
	<bitcoin-development@lists.sourceforge.net>
In-Reply-To: <20120229164747.GA581@vps7135.xlshosting.net>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="-1562933420-65607732-1330534949=:81609"
Subject: Re: [Bitcoin-development] Duplicate transactions vulnerability
Precedence: list
Reply-To: Amir Taaki <zgenjix@yahoo.com>

---1562933420-65607732-1330534949=:81609
Content-Type: text/plain; charset=us-ascii

I support BIP 30.

I gave it a thought. The other ways of resolving this issue, all have various niggles. This is the best way.


________________________________
 From: Pieter Wuille <pieter.wuille@gmail.com>
To: Zooko Wilcox-O'Hearn <zooko@zooko.com> 
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net> 
Sent: Wednesday, February 29, 2012 4:47 PM
Subject: Re: [Bitcoin-development] Duplicate transactions vulnerability
 
On Tue, Feb 28, 2012 at 06:41:31PM -0700, Zooko Wilcox-O'Hearn wrote:
> Could you spell out the attack explicitly? Presumably there aren't a
> lot of people with the "malice energy" to perform the attack but not
> to figure it out for themselves. I, however, have the "niceness
> energy" to think about it for a few minutes but not to figure it out
> for myself. If in your opinion it is realistically dangerous to post
> it publicly, would you be so kind as to include me in the private
> sharing of the explanation?

It's not exactly a secret anymore, as the patch also references it.
Russell O'Connor described the attack on his blog:
http://r6.ca/blog/20120206T005236Z.html

-- 
Pieter

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Bitcoin-development mailing list
Bitcoin-development@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bitcoin-development
---1562933420-65607732-1330534949=:81609
Content-Type: text/html; charset=us-ascii

<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>I support BIP 30.</span></div><div><span><br></span></div><div><span>I gave it a thought. The other ways of resolving this issue, all have various niggles. This is the best way.</span></div><div><br></div>  <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1">  <b><span style="font-weight:bold;">From:</span></b> Pieter Wuille &lt;pieter.wuille@gmail.com&gt;<br> <b><span style="font-weight: bold;">To:</span></b> Zooko Wilcox-O'Hearn &lt;zooko@zooko.com&gt; <br><b><span style="font-weight: bold;">Cc:</span></b> Bitcoin Dev &lt;bitcoin-development@lists.sourceforge.net&gt; <br> <b><span style="font-weight: bold;">Sent:</span></b> Wednesday,
 February 29, 2012 4:47 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [Bitcoin-development] Duplicate transactions vulnerability<br> </font> </div> <br>
On Tue, Feb 28, 2012 at 06:41:31PM -0700, Zooko Wilcox-O'Hearn wrote:<br>&gt; Could you spell out the attack explicitly? Presumably there aren't a<br>&gt; lot of people with the "malice energy" to perform the attack but not<br>&gt; to figure it out for themselves. I, however, have the "niceness<br>&gt; energy" to think about it for a few minutes but not to figure it out<br>&gt; for myself. If in your opinion it is realistically dangerous to post<br>&gt; it publicly, would you be so kind as to include me in the private<br>&gt; sharing of the explanation?<br><br>It's not exactly a secret anymore, as the patch also references it.<br>Russell O'Connor described the attack on his blog:<br>http://r6.ca/blog/20120206T005236Z.html<br><br>-- <br>Pieter<br><br>------------------------------------------------------------------------------<br>Virtualization &amp; Cloud Management Using Capacity Planning<br>Cloud computing makes use of virtualization - but cloud
 computing <br>also focuses on allowing computing to be delivered as a service.<br>http://www.accelacomm.com/jaw/sfnl/114/51521223/<br>_______________________________________________<br>Bitcoin-development mailing list<br><a ymailto="mailto:Bitcoin-development@lists.sourceforge.net" href="mailto:Bitcoin-development@lists.sourceforge.net">Bitcoin-development@lists.sourceforge.net</a><br><a href="https://lists.sourceforge.net/lists/listinfo/bitcoin-development" target="_blank">https://lists.sourceforge.net/lists/listinfo/bitcoin-development</a><br><br><br> </div> </div>  </div></body></html>
---1562933420-65607732-1330534949=:81609--