Received-SPF: pass (sog-mx-4.v43.ch3.sourceforge.com: domain of petertodd.org
	designates 62.13.148.95 as permitted sender)
	client-ip=62.13.148.95; envelope-from=pete@petertodd.org;
	helo=outmail148095.authsmtp.com; 
Date: Wed, 15 May 2013 07:38:27 -0400
From: Peter Todd <pete@petertodd.org>
To: Bitcoin-Dev <bitcoin-development@lists.sourceforge.net>
Message-ID: <20130515113827.GB26020@savin>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="CdrF4e02JqNVZeln"
Content-Disposition: inline
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: [Bitcoin-development] 2BTC reward for making probabalistic
 double-spending via conflicting transactions easy
Precedence: list


--CdrF4e02JqNVZeln
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Now that I have the replace-by-fee reward, I might as well spread the
wealth a bit.


So for all this discussion about replace-by-fee and the supposed
security of zero-conf transactions, no-one seems to think much about how
in practice very few vendors have a setup to detect if conflicting
transactions were broadcast on the network simultaneously - after all if
that is the case which transaction gets mined is up to chance, so much
of the time you'll get away with a double spend. We don't yet have a
mechanism to propagate double-spend warnings, and funny enough, in the
case of a single txin transaction the double-spend warning is also
enough information to allow miners to implement replace-by-fee.


So I'm offering 2BTC for anyone who comes up with a nice and easy to use
command line tool that lets you automagically create one version of the
transaction sending the coins to the desired recipient, and another
version sending all the coins back to you, both with the same
transaction inputs. In addition to creating the two versions, you need
to find a way to broadcast them both simultaneously to different nodes
on the network. One clever approach might be to use blockchain.info's
raw transaction POST API, and your local Bitcoin node.

If you happen to be at the conference, a cool demo would be to
demonstrate the attack against my Android wallet. I'll buy Bitcoins off
of you at Mt. Gox rates + %10, and you can see if you can rip me off.
Yes, you can keep the loot. :) This should be videotaped so we can put
an educational video on youtube after.

--=20
'peter'[:-1]@petertodd.org
00000000000000bafd0a55f013e058cc2a672ee0c66b9265a02390d80e4748f5

--CdrF4e02JqNVZeln
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQEcBAEBCAAGBQJRk3OzAAoJECSBQD2l8JH73jQH/0ocmPRauMEAnWWggVPTHaO5
rLRvPQRISz0Z6e50JnKoo3djn6kak/dj/p3TPYzg+0Pa/uHsSNVYe6S/l53s7Ew3
t2zjPO6ONIwISzjNCEsf66/1gWIaSMR5bNJdjEWiIz/0UkclYd3t6AQIUQKlZKBY
MOPS+G3i/hoVv1Kk4bUy8fpWIqW5bsLruHlBe7IV0H144CsWq1pqpmel6PEX9jps
IT7lCy5s+999t4qseNvnJDHmYCauqFCtFcLYhfYdpXMoxGd1Op5C7wY4CAzxBAM5
Zo+g6J6hWrzz5ziu70/pQoLElaRcc2wGP7kFl7UM5ZeQQSxuAbK1TOzBTejF5SY=
=4vYf
-----END PGP SIGNATURE-----

--CdrF4e02JqNVZeln--