Delivery-date: Wed, 27 Mar 2024 12:58:27 -0700 Received: from mail-oo1-f62.google.com ([209.85.161.62]) by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1rpZPn-0000ee-En for bitcoindev@gnusha.org; Wed, 27 Mar 2024 12:58:27 -0700 Received: by mail-oo1-f62.google.com with SMTP id 006d021491bc7-5a53b018156sf135938eaf.1 for ; Wed, 27 Mar 2024 12:58:26 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1711569501; cv=pass; d=google.com; s=arc-20160816; b=ymK1u0zu/AAhubEX1LSzNctVtVIK9U1V2UlDwCwDhFWnDJF/MB9EfGgrpfNfkddAdG UENCpLkL6rIljLUbZcQBrA5ZgtJF5wNOCZH2kiPI5NbIrEeCOSFrjwxeEQypG6Lhig7B n8s19Q44k5evSsUfTNIl/uihOKtoQVi08Y8eAtGY7L73OtE0IqneuhWZEijTjUpL8tVZ J+QNhV0zO9Dtsbiov3WLy9i1vojTq34lPi/NAHLl1EFlT2lk9qh75zC6LbLDqBRMPEqF xF0imst3UrbtcmjpggXZUfMLIvJdQ+yRFi4S66EFKF7AifSFVId7HEGanDTQVZsxKoWW XmCg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:message-id:user-agent:references :in-reply-to:subject:cc:to:from:date:mime-version:sender :dkim-signature; bh=2U0D0HfbjSNdgJDNVNNSt6J+Zo/6XpE7guZj3xf5vMs=; fh=R1190MmuGK/jm3cRr7rOAXLScMCBXaAQ30doh6+2TcM=; b=0Ug7TeqMzPNDSc1n+MPtyie0XnJW8RTIYs5oh1GAod6x235JB6542wbh33zU5MVx7M eRVq5jjI4NjnkeI4iZxh2CU2YH2nNZMa/ljjmKxwudV6yE9X0rfrUNl9PHxOgM2E6QqG abqTN3MSGqViBKUUVRxpTNtisoPQ8dpapygF4u1YfhBpbF9RW2U2rUcfLqJMWEM4W/Fh 8OwjLSjYfX+mV97Yw89Pl8oPXzfOlH8xY9Fte0mdPEFXXjE4HbnjIca8JCXg2ZsIHEa/ ikcAk8880Z/svlhuTHq0yI8YoIQejZhaxoZkHm22+2vCSEAFnFW7gLJoYwa0LUzSFnbh gHOw==; darn=gnusha.org ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of dave@dtrt.org designates 208.79.240.5 as permitted sender) smtp.mailfrom=dave@dtrt.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1711569501; x=1712174301; darn=gnusha.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:message-id:user-agent:references:in-reply-to :subject:cc:to:from:date:mime-version:sender:from:to:cc:subject:date :message-id:reply-to; bh=2U0D0HfbjSNdgJDNVNNSt6J+Zo/6XpE7guZj3xf5vMs=; b=AM3hRiX103NS0pQD6UGaKcyiKbvzcJ0b8Y3S5IRrf0ZuGjysbh7/Hzr8bg8481eibM 0apzP15cH3G8Z4NHMtjQlrrWeKLGBsdPQ+2nGj9XmesB0T7DB3kNB5pHKgMP+4GJ6t/l HmNxZybhtSjmBNm153DwMZ6nGOy8vlcjgCe2kdcdhBj/M7BwuUYbOJLbwnN9zt1D0iDg rTutb9ZZHcq7pcUXOMTaU9N9MbUT4t8yWdHZRrJp6KqL99rotUE/IupoOss0Xva+bTt1 /LfgL6HztcxsyaR1emO/ZDY/GGML4anDUUiKNWDekxZl0t4+AAanKtcT0qFvFVymZQUJ Hd/Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1711569501; x=1712174301; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:message-id:user-agent:references:in-reply-to :subject:cc:to:from:date:mime-version:x-beenthere:x-gm-message-state :sender:from:to:cc:subject:date:message-id:reply-to; bh=2U0D0HfbjSNdgJDNVNNSt6J+Zo/6XpE7guZj3xf5vMs=; b=vKv2svAo23rW7MP+k39d++cAbRrSNmhaurG/HEA0sNDoTJmddtUDnMluBJD/wP+R9p oRZhdSacxXjoWQzYAUspSHyvaDSBXpI8rNL+L4SXZVdMXrUe9CsSoIdv+i/pWC1t6Zf+ oeKaKruu+LASisyG5SiMQ+lBScZUWx1Z++6bNMfGpiCCL7WBqkCJ7l7wLJxP3fBn/ZLs +XArRHBv9WP1pjXYjwVYJRnksn29rttA3WSxzwe25X4VV3ALJ1vEOorpLxTlVFRcVSW4 z+H06wOt9SmNkmuiuT2EpfJwVhkNVu29UkaW2zFxTlhAhfJf35OHQTS6EVgqK3F8Kd+k lIJQ== Sender: bitcoindev@googlegroups.com X-Forwarded-Encrypted: i=2; AJvYcCWy/yQH4RMeNLSeHL42AGz/BHn2+qxwO8dDoMTLKafn9ypB3tJk9Grc7Au9g1WO1EhpDbXp3hoN/9mHMvjp8Zi6xHAien0= X-Gm-Message-State: AOJu0YwGrhqIpYGNF2Dy3akiOow79GRCl/CX9q7RuH3SrT45vz41FXU7 x0YpdFrkrFGs0UJ1deaFq4XBBFa4q/ojC6rbeSWxArFoHVBgj0BO X-Google-Smtp-Source: AGHT+IF/XwguNLIkuNLjQlLajEZakFfF7YMAFj7fUYsD3hs7j15iJrns+iQ+FbP8/5zt1OyhLF456Q== X-Received: by 2002:a4a:de8d:0:b0:5a4:9b0f:3652 with SMTP id v13-20020a4ade8d000000b005a49b0f3652mr126619oou.3.1711569501170; Wed, 27 Mar 2024 12:58:21 -0700 (PDT) X-BeenThere: bitcoindev@googlegroups.com Received: by 2002:a4a:c18a:0:b0:5a4:be52:5f48 with SMTP id w10-20020a4ac18a000000b005a4be525f48ls92478oop.0.-pod-prod-00-us; Wed, 27 Mar 2024 12:58:20 -0700 (PDT) X-Received: by 2002:a05:6820:1c9c:b0:5a5:2923:30c7 with SMTP id ct28-20020a0568201c9c00b005a5292330c7mr24674oob.0.1711569500365; Wed, 27 Mar 2024 12:58:20 -0700 (PDT) Received: by 2002:a05:6808:1526:b0:3c3:c0e6:782f with SMTP id 5614622812f47-3c3de74db1dmsb6e; Wed, 27 Mar 2024 12:50:26 -0700 (PDT) X-Received: by 2002:a05:6870:e30f:b0:222:6e0e:bca8 with SMTP id z15-20020a056870e30f00b002226e0ebca8mr89209oad.10.1711569025304; Wed, 27 Mar 2024 12:50:25 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1711569025; cv=none; d=google.com; s=arc-20160816; b=Ssu6ppc5g7h5PsOIpmj8Qe6GV4/ydjjT1KjX4qudy86qZ2BCbjGOs4OpHebRp8FT+T umRk5x6asd+OyxSx2FHNBkEZN6T42UilOm5R/xDGA9Oz+4Tt5snJ4yB9R50abyehiiGm RUSLv5wIdzWoQXjJb6XkBCvyqVHtS8Iz6TvKoyWbEpQX24EMJsieiXRoPDkj9nHT6oWb W9SqmHtQ9o83TJ8cupMFfHGTtnJR44cUhqQuLwLXFTj8k09CJ9ym3GgUq37qhtLDoyUq 552AbtXwtYiiz7yaBa1OIUrykiM09UrsrOvK0gL+nY2yo7BXFZd06tGhhyQeA2/7CA1E EDEg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:message-id:user-agent:references :in-reply-to:subject:cc:to:from:date:mime-version; bh=ak5LIlrWzrgyBH06xuGeDOuyC32CSiYnU04Og5Dbg/8=; fh=psWP3UCtCzzPEOUoUzVM9ZZK8adYsTeWDAKCd6L5Zok=; b=WJ5cxgZrg+c0MZabxMg39xzZ7+u6EX6F08k3UcWSsNia8/8uVk17b1O7dWCSS1UmHd yK+3jRE2dq/OyX549pWbYLfR2AWVXBsaY4V8ZVMKjm+9Yqa7eB6BzOn5GYdKmbbwtdtb 4EY7uowt8cElJlvWcMUsHvRnWTSMJaLeYAYA8wV8WTh6KlMzMxB1J0Nul63aW3Td3naH 1NYVZn7efyNoykK9L2C+gBHjJZceTSN2s8kwjRQsrRixFIGJTuys3UJu4ajlqgYaxgKm QJJGx3mOaWLBM4rwxqvbQ5n4hj8u3/Nxc1ga7awJwN673gqprKuUUiawK+cW9Fhn+4bE JQkA==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of dave@dtrt.org designates 208.79.240.5 as permitted sender) smtp.mailfrom=dave@dtrt.org Received: from smtpauth.rollernet.us (smtpauth.rollernet.us. [208.79.240.5]) by gmr-mx.google.com with ESMTPS id qj22-20020a0568702f1600b0022a1ce67401si934478oab.2.2024.03.27.12.50.25 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 27 Mar 2024 12:50:25 -0700 (PDT) Received-SPF: pass (google.com: domain of dave@dtrt.org designates 208.79.240.5 as permitted sender) client-ip=208.79.240.5; Received: from smtpauth.rollernet.us (localhost [127.0.0.1]) by smtpauth.rollernet.us (Postfix) with ESMTP id 1D20A280004A; Wed, 27 Mar 2024 12:50:21 -0700 (PDT) Received: from webmail.rollernet.us (webmail.rollernet.us [IPv6:2607:fe70:0:14::a]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (Client did not present a certificate) by smtpauth.rollernet.us (Postfix) with ESMTPSA; Wed, 27 Mar 2024 12:50:20 -0700 (PDT) MIME-Version: 1.0 Date: Wed, 27 Mar 2024 09:50:20 -1000 From: "David A. Harding" To: Peter Todd Cc: bitcoindev@googlegroups.com Subject: Re: [bitcoindev] A Free-Relay Attack Exploiting RBF Rule #6 In-Reply-To: References: User-Agent: Roundcube Webmail/1.4.15 Message-ID: X-Sender: dave@dtrt.org Content-Type: text/plain; charset="UTF-8"; format=flowed X-Rollernet-Abuse: Contact abuse@rollernet.us to report. Abuse policy: http://www.rollernet.us/policy X-Rollernet-Submit: Submit ID 1f0c.6604787c.b53f9.0 X-Original-Sender: dave@dtrt.org X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of dave@dtrt.org designates 208.79.240.5 as permitted sender) smtp.mailfrom=dave@dtrt.org Precedence: list Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com List-ID: X-Google-Group-Id: 786775582512 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Score: -0.8 (/) On 2024-03-27 08:04, Peter Todd wrote: > I was able to verify independently that the relevant people had seen > the email and weren't planning on replying. Can you provide detail on this? > You're just harassing me here; I highly > suspect you'd have said nothing at all if I hadn't brought up > disclosure. I think I would have said something. Any time I'm writing a description for Optech about an attack that affects existing Bitcoin software and was responsibly disclosed, I back link to it from a special page [1]. In cases of ambiguity about whether or not an attack was responsibly disclosed, I investigate. I'm sorry this feels to you like harassment. To me it feels like whiplash: I inferred responsible disclosure based on your original text, learned it might not have been, and now am being told by you that it was indeed responsible. -Dave [1] https://bitcoinops.org/en/topics/responsible-disclosures/ -- You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group. To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/bitcoindev/bbc33ff01e464f8c84a593ac05c5722c%40dtrt.org.