Received-SPF: pass (sog-mx-4.v43.ch3.sourceforge.com: domain of bitpay.com
	designates 209.85.223.173 as permitted sender)
	client-ip=209.85.223.173; envelope-from=jgarzik@bitpay.com;
	helo=mail-ie0-f173.google.com; 
MIME-Version: 1.0
In-Reply-To: <4E783164-B2DC-45BC-946C-8EA191F31193@me.com>
References: <4E783164-B2DC-45BC-946C-8EA191F31193@me.com>
From: Jeff Garzik <jgarzik@bitpay.com>
Date: Wed, 26 Nov 2014 08:51:31 -0500
Message-ID: <CAJHLa0N6+hpwNECpHUSiKuj4-BYohh=Wr1DP=67Ff8xVBsi8-Q@mail.gmail.com>
To: Jean-Paul Kogelman <jeanpaulkogelman@me.com>
Content-Type: multipart/alternative; boundary=bcaec52e600578b1ea0508c35470
Cc: Bitcoin Development <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Deanonymisation of clients in Bitcoin P2P
 network paper
Precedence: list

--bcaec52e600578b1ea0508c35470
Content-Type: text/plain; charset=UTF-8

I don't recall being contacted directly, but the attack has been
discussed.  It relies on a number of conditions.  For example, if you are
over Tor, they try to kick the machine off Tor, _assuming_ that it will
fall back to non-Tor.  That's only true for dual stack nodes, which are not
really 100% anonymous anyway -- you're operating from your public IP anyway.


On Wed, Nov 26, 2014 at 2:47 AM, Jean-Paul Kogelman <jeanpaulkogelman@me.com
> wrote:

> This paper was just posted on reddit that describes how an attacker can
> de-anonymize clients on the bitcoin network. It mentions that the core devs
> were contacted prior to publication. I was just wondering, how many of
> these issues have already been addressed?
>
>
> Paper (University of Luxembourg):
> http://orbilu.uni.lu/handle/10993/18679
>
>
> Kind regards,
>
> Jean-Paul
>
>
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
>
> http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
>
>


-- 
Jeff Garzik
Bitcoin core developer and open source evangelist
BitPay, Inc.      https://bitpay.com/

--bcaec52e600578b1ea0508c35470
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">I don&#39;t recall being contacted directly, but the attac=
k has been discussed.=C2=A0 It relies on a number of conditions.=C2=A0 For =
example, if you are over Tor, they try to kick the machine off Tor, _assumi=
ng_ that it will fall back to non-Tor.=C2=A0 That&#39;s only true for dual =
stack nodes, which are not really 100% anonymous anyway -- you&#39;re opera=
ting from your public IP anyway.<br><br></div><div class=3D"gmail_extra"><b=
r><div class=3D"gmail_quote">On Wed, Nov 26, 2014 at 2:47 AM, Jean-Paul Kog=
elman <span dir=3D"ltr">&lt;<a href=3D"mailto:jeanpaulkogelman@me.com" targ=
et=3D"_blank">jeanpaulkogelman@me.com</a>&gt;</span> wrote:<br><blockquote =
class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid=
;padding-left:1ex"><div style=3D"word-wrap:break-word"><div>This paper was =
just posted on reddit that describes how an attacker can de-anonymize clien=
ts on the bitcoin network. It mentions that the core devs were contacted pr=
ior to publication. I was just wondering, how many of these issues have alr=
eady been addressed?</div><div><br></div><div><br></div><div>Paper (Univers=
ity of Luxembourg):</div><div><a href=3D"http://orbilu.uni.lu/handle/10993/=
18679" target=3D"_blank">http://orbilu.uni.lu/handle/10993/18679</a></div><=
div><br></div><div><br></div><div>Kind regards,</div><div><br></div><div>Je=
an-Paul</div></div><br>----------------------------------------------------=
--------------------------<br>
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server<br>
from Actuate! Instantly Supercharge Your Business Reports and Dashboards<br=
>
with Interactivity, Sharing, Native Excel Exports, App Integration &amp; mo=
re<br>
Get technology previously reserved for billion-dollar corporations, FREE<br=
>
<a href=3D"http://pubads.g.doubleclick.net/gampad/clk?id=3D157005751&amp;iu=
=3D/4140/ostg.clktrk" target=3D"_blank">http://pubads.g.doubleclick.net/gam=
pad/clk?id=3D157005751&amp;iu=3D/4140/ostg.clktrk</a><br>__________________=
_____________________________<br>
Bitcoin-development mailing list<br>
<a href=3D"mailto:Bitcoin-development@lists.sourceforge.net">Bitcoin-develo=
pment@lists.sourceforge.net</a><br>
<a href=3D"https://lists.sourceforge.net/lists/listinfo/bitcoin-development=
" target=3D"_blank">https://lists.sourceforge.net/lists/listinfo/bitcoin-de=
velopment</a><br>
<br></blockquote></div><br><br clear=3D"all"><br>-- <br><div class=3D"gmail=
_signature">Jeff Garzik<br>Bitcoin core developer and open source evangelis=
t<br>BitPay, Inc. =C2=A0 =C2=A0 =C2=A0<a href=3D"https://bitpay.com/" targe=
t=3D"_blank">https://bitpay.com/</a></div>
</div>

--bcaec52e600578b1ea0508c35470--