1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
|
Delivery-date: Wed, 27 Mar 2024 12:58:27 -0700
Received: from mail-oo1-f62.google.com ([209.85.161.62])
by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.94.2)
(envelope-from <bitcoindev+bncBDZ3NVEJ5UFBBXHUSGYAMGQED4BJZMQ@googlegroups.com>)
id 1rpZPn-0000ee-En
for bitcoindev@gnusha.org; Wed, 27 Mar 2024 12:58:27 -0700
Received: by mail-oo1-f62.google.com with SMTP id 006d021491bc7-5a53b018156sf135938eaf.1
for <bitcoindev@gnusha.org>; Wed, 27 Mar 2024 12:58:26 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1711569501; cv=pass;
d=google.com; s=arc-20160816;
b=ymK1u0zu/AAhubEX1LSzNctVtVIK9U1V2UlDwCwDhFWnDJF/MB9EfGgrpfNfkddAdG
UENCpLkL6rIljLUbZcQBrA5ZgtJF5wNOCZH2kiPI5NbIrEeCOSFrjwxeEQypG6Lhig7B
n8s19Q44k5evSsUfTNIl/uihOKtoQVi08Y8eAtGY7L73OtE0IqneuhWZEijTjUpL8tVZ
J+QNhV0zO9Dtsbiov3WLy9i1vojTq34lPi/NAHLl1EFlT2lk9qh75zC6LbLDqBRMPEqF
xF0imst3UrbtcmjpggXZUfMLIvJdQ+yRFi4S66EFKF7AifSFVId7HEGanDTQVZsxKoWW
XmCg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:message-id:user-agent:references
:in-reply-to:subject:cc:to:from:date:mime-version:sender
:dkim-signature;
bh=2U0D0HfbjSNdgJDNVNNSt6J+Zo/6XpE7guZj3xf5vMs=;
fh=R1190MmuGK/jm3cRr7rOAXLScMCBXaAQ30doh6+2TcM=;
b=0Ug7TeqMzPNDSc1n+MPtyie0XnJW8RTIYs5oh1GAod6x235JB6542wbh33zU5MVx7M
eRVq5jjI4NjnkeI4iZxh2CU2YH2nNZMa/ljjmKxwudV6yE9X0rfrUNl9PHxOgM2E6QqG
abqTN3MSGqViBKUUVRxpTNtisoPQ8dpapygF4u1YfhBpbF9RW2U2rUcfLqJMWEM4W/Fh
8OwjLSjYfX+mV97Yw89Pl8oPXzfOlH8xY9Fte0mdPEFXXjE4HbnjIca8JCXg2ZsIHEa/
ikcAk8880Z/svlhuTHq0yI8YoIQejZhaxoZkHm22+2vCSEAFnFW7gLJoYwa0LUzSFnbh
gHOw==;
darn=gnusha.org
ARC-Authentication-Results: i=2; gmr-mx.google.com;
spf=pass (google.com: domain of dave@dtrt.org designates 208.79.240.5 as permitted sender) smtp.mailfrom=dave@dtrt.org
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlegroups.com; s=20230601; t=1711569501; x=1712174301; darn=gnusha.org;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-authentication-results
:x-original-sender:message-id:user-agent:references:in-reply-to
:subject:cc:to:from:date:mime-version:sender:from:to:cc:subject:date
:message-id:reply-to;
bh=2U0D0HfbjSNdgJDNVNNSt6J+Zo/6XpE7guZj3xf5vMs=;
b=AM3hRiX103NS0pQD6UGaKcyiKbvzcJ0b8Y3S5IRrf0ZuGjysbh7/Hzr8bg8481eibM
0apzP15cH3G8Z4NHMtjQlrrWeKLGBsdPQ+2nGj9XmesB0T7DB3kNB5pHKgMP+4GJ6t/l
HmNxZybhtSjmBNm153DwMZ6nGOy8vlcjgCe2kdcdhBj/M7BwuUYbOJLbwnN9zt1D0iDg
rTutb9ZZHcq7pcUXOMTaU9N9MbUT4t8yWdHZRrJp6KqL99rotUE/IupoOss0Xva+bTt1
/LfgL6HztcxsyaR1emO/ZDY/GGML4anDUUiKNWDekxZl0t4+AAanKtcT0qFvFVymZQUJ
Hd/Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1711569501; x=1712174301;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-authentication-results
:x-original-sender:message-id:user-agent:references:in-reply-to
:subject:cc:to:from:date:mime-version:x-beenthere:x-gm-message-state
:sender:from:to:cc:subject:date:message-id:reply-to;
bh=2U0D0HfbjSNdgJDNVNNSt6J+Zo/6XpE7guZj3xf5vMs=;
b=vKv2svAo23rW7MP+k39d++cAbRrSNmhaurG/HEA0sNDoTJmddtUDnMluBJD/wP+R9p
oRZhdSacxXjoWQzYAUspSHyvaDSBXpI8rNL+L4SXZVdMXrUe9CsSoIdv+i/pWC1t6Zf+
oeKaKruu+LASisyG5SiMQ+lBScZUWx1Z++6bNMfGpiCCL7WBqkCJ7l7wLJxP3fBn/ZLs
+XArRHBv9WP1pjXYjwVYJRnksn29rttA3WSxzwe25X4VV3ALJ1vEOorpLxTlVFRcVSW4
z+H06wOt9SmNkmuiuT2EpfJwVhkNVu29UkaW2zFxTlhAhfJf35OHQTS6EVgqK3F8Kd+k
lIJQ==
Sender: bitcoindev@googlegroups.com
X-Forwarded-Encrypted: i=2; AJvYcCWy/yQH4RMeNLSeHL42AGz/BHn2+qxwO8dDoMTLKafn9ypB3tJk9Grc7Au9g1WO1EhpDbXp3hoN/9mHMvjp8Zi6xHAien0=
X-Gm-Message-State: AOJu0YwGrhqIpYGNF2Dy3akiOow79GRCl/CX9q7RuH3SrT45vz41FXU7
x0YpdFrkrFGs0UJ1deaFq4XBBFa4q/ojC6rbeSWxArFoHVBgj0BO
X-Google-Smtp-Source: AGHT+IF/XwguNLIkuNLjQlLajEZakFfF7YMAFj7fUYsD3hs7j15iJrns+iQ+FbP8/5zt1OyhLF456Q==
X-Received: by 2002:a4a:de8d:0:b0:5a4:9b0f:3652 with SMTP id v13-20020a4ade8d000000b005a49b0f3652mr126619oou.3.1711569501170;
Wed, 27 Mar 2024 12:58:21 -0700 (PDT)
X-BeenThere: bitcoindev@googlegroups.com
Received: by 2002:a4a:c18a:0:b0:5a4:be52:5f48 with SMTP id w10-20020a4ac18a000000b005a4be525f48ls92478oop.0.-pod-prod-00-us;
Wed, 27 Mar 2024 12:58:20 -0700 (PDT)
X-Received: by 2002:a05:6820:1c9c:b0:5a5:2923:30c7 with SMTP id ct28-20020a0568201c9c00b005a5292330c7mr24674oob.0.1711569500365;
Wed, 27 Mar 2024 12:58:20 -0700 (PDT)
Received: by 2002:a05:6808:1526:b0:3c3:c0e6:782f with SMTP id 5614622812f47-3c3de74db1dmsb6e;
Wed, 27 Mar 2024 12:50:26 -0700 (PDT)
X-Received: by 2002:a05:6870:e30f:b0:222:6e0e:bca8 with SMTP id z15-20020a056870e30f00b002226e0ebca8mr89209oad.10.1711569025304;
Wed, 27 Mar 2024 12:50:25 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1711569025; cv=none;
d=google.com; s=arc-20160816;
b=Ssu6ppc5g7h5PsOIpmj8Qe6GV4/ydjjT1KjX4qudy86qZ2BCbjGOs4OpHebRp8FT+T
umRk5x6asd+OyxSx2FHNBkEZN6T42UilOm5R/xDGA9Oz+4Tt5snJ4yB9R50abyehiiGm
RUSLv5wIdzWoQXjJb6XkBCvyqVHtS8Iz6TvKoyWbEpQX24EMJsieiXRoPDkj9nHT6oWb
W9SqmHtQ9o83TJ8cupMFfHGTtnJR44cUhqQuLwLXFTj8k09CJ9ym3GgUq37qhtLDoyUq
552AbtXwtYiiz7yaBa1OIUrykiM09UrsrOvK0gL+nY2yo7BXFZd06tGhhyQeA2/7CA1E
EDEg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-transfer-encoding:message-id:user-agent:references
:in-reply-to:subject:cc:to:from:date:mime-version;
bh=ak5LIlrWzrgyBH06xuGeDOuyC32CSiYnU04Og5Dbg/8=;
fh=psWP3UCtCzzPEOUoUzVM9ZZK8adYsTeWDAKCd6L5Zok=;
b=WJ5cxgZrg+c0MZabxMg39xzZ7+u6EX6F08k3UcWSsNia8/8uVk17b1O7dWCSS1UmHd
yK+3jRE2dq/OyX549pWbYLfR2AWVXBsaY4V8ZVMKjm+9Yqa7eB6BzOn5GYdKmbbwtdtb
4EY7uowt8cElJlvWcMUsHvRnWTSMJaLeYAYA8wV8WTh6KlMzMxB1J0Nul63aW3Td3naH
1NYVZn7efyNoykK9L2C+gBHjJZceTSN2s8kwjRQsrRixFIGJTuys3UJu4ajlqgYaxgKm
QJJGx3mOaWLBM4rwxqvbQ5n4hj8u3/Nxc1ga7awJwN673gqprKuUUiawK+cW9Fhn+4bE
JQkA==;
dara=google.com
ARC-Authentication-Results: i=1; gmr-mx.google.com;
spf=pass (google.com: domain of dave@dtrt.org designates 208.79.240.5 as permitted sender) smtp.mailfrom=dave@dtrt.org
Received: from smtpauth.rollernet.us (smtpauth.rollernet.us. [208.79.240.5])
by gmr-mx.google.com with ESMTPS id qj22-20020a0568702f1600b0022a1ce67401si934478oab.2.2024.03.27.12.50.25
for <bitcoindev@googlegroups.com>
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Wed, 27 Mar 2024 12:50:25 -0700 (PDT)
Received-SPF: pass (google.com: domain of dave@dtrt.org designates 208.79.240.5 as permitted sender) client-ip=208.79.240.5;
Received: from smtpauth.rollernet.us (localhost [127.0.0.1])
by smtpauth.rollernet.us (Postfix) with ESMTP id 1D20A280004A;
Wed, 27 Mar 2024 12:50:21 -0700 (PDT)
Received: from webmail.rollernet.us (webmail.rollernet.us [IPv6:2607:fe70:0:14::a])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(Client did not present a certificate)
by smtpauth.rollernet.us (Postfix) with ESMTPSA;
Wed, 27 Mar 2024 12:50:20 -0700 (PDT)
MIME-Version: 1.0
Date: Wed, 27 Mar 2024 09:50:20 -1000
From: "David A. Harding" <dave@dtrt.org>
To: Peter Todd <pete@petertodd.org>
Cc: bitcoindev@googlegroups.com
Subject: Re: [bitcoindev] A Free-Relay Attack Exploiting RBF Rule #6
In-Reply-To: <ZgRfvrYatcpqPNRn@petertodd.org>
References: <f7fbeb4f58904fc5a24b6fc2d829036c@dtrt.org>
<ZgRfvrYatcpqPNRn@petertodd.org>
User-Agent: Roundcube Webmail/1.4.15
Message-ID: <bbc33ff01e464f8c84a593ac05c5722c@dtrt.org>
X-Sender: dave@dtrt.org
Content-Type: text/plain; charset="UTF-8"; format=flowed
X-Rollernet-Abuse: Contact abuse@rollernet.us to report. Abuse policy: http://www.rollernet.us/policy
X-Rollernet-Submit: Submit ID 1f0c.6604787c.b53f9.0
X-Original-Sender: dave@dtrt.org
X-Original-Authentication-Results: gmr-mx.google.com; spf=pass
(google.com: domain of dave@dtrt.org designates 208.79.240.5 as permitted
sender) smtp.mailfrom=dave@dtrt.org
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com
List-ID: <bitcoindev.googlegroups.com>
X-Google-Group-Id: 786775582512
List-Post: <https://groups.google.com/group/bitcoindev/post>, <mailto:bitcoindev@googlegroups.com>
List-Help: <https://groups.google.com/support/>, <mailto:bitcoindev+help@googlegroups.com>
List-Archive: <https://groups.google.com/group/bitcoindev
List-Subscribe: <https://groups.google.com/group/bitcoindev/subscribe>, <mailto:bitcoindev+subscribe@googlegroups.com>
List-Unsubscribe: <mailto:googlegroups-manage+786775582512+unsubscribe@googlegroups.com>,
<https://groups.google.com/group/bitcoindev/subscribe>
X-Spam-Score: -0.8 (/)
On 2024-03-27 08:04, Peter Todd wrote:
> I was able to verify independently that the relevant people had seen
> the email and weren't planning on replying.
Can you provide detail on this?
> You're just harassing me here; I highly
> suspect you'd have said nothing at all if I hadn't brought up
> disclosure.
I think I would have said something. Any time I'm writing a description
for Optech about an attack that affects existing Bitcoin software and
was responsibly disclosed, I back link to it from a special page [1].
In cases of ambiguity about whether or not an attack was responsibly
disclosed, I investigate.
I'm sorry this feels to you like harassment. To me it feels like
whiplash: I inferred responsible disclosure based on your original text,
learned it might not have been, and now am being told by you that it was
indeed responsible.
-Dave
[1] https://bitcoinops.org/en/topics/responsible-disclosures/
--
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bitcoindev/bbc33ff01e464f8c84a593ac05c5722c%40dtrt.org.
|
