summaryrefslogtreecommitdiff
path: root/eb/0d7309f62c9fbf7ce94e0f412b2c5a4320e3b4
blob: cf018bf5aa89eb62a5696c43d13f3355bd7b1f1b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
Received: from sog-mx-2.v43.ch3.sourceforge.com ([172.29.43.192]
	helo=mx.sourceforge.net)
	by sfs-ml-2.v29.ch3.sourceforge.com with esmtp (Exim 4.76)
	(envelope-from <allen.piscitello@gmail.com>) id 1Vvuxb-0007Iy-So
	for bitcoin-development@lists.sourceforge.net;
	Wed, 25 Dec 2013 20:21:43 +0000
Received-SPF: pass (sog-mx-2.v43.ch3.sourceforge.com: domain of gmail.com
	designates 74.125.82.46 as permitted sender)
	client-ip=74.125.82.46; envelope-from=allen.piscitello@gmail.com;
	helo=mail-wg0-f46.google.com; 
Received: from mail-wg0-f46.google.com ([74.125.82.46])
	by sog-mx-2.v43.ch3.sourceforge.com with esmtps (TLSv1:RC4-SHA:128)
	(Exim 4.76) id 1Vvuxa-0000kj-H6
	for bitcoin-development@lists.sourceforge.net;
	Wed, 25 Dec 2013 20:21:43 +0000
Received: by mail-wg0-f46.google.com with SMTP id m15so6715795wgh.25
	for <bitcoin-development@lists.sourceforge.net>;
	Wed, 25 Dec 2013 12:21:36 -0800 (PST)
MIME-Version: 1.0
X-Received: by 10.180.215.3 with SMTP id oe3mr26431894wic.35.1388002896325;
	Wed, 25 Dec 2013 12:21:36 -0800 (PST)
Received: by 10.194.190.133 with HTTP; Wed, 25 Dec 2013 12:21:36 -0800 (PST)
In-Reply-To: <CAO7N=i0xVm8jxOuz5Rh4g1acpTEuYzcGerH+aHRKaE1ae7FCpA@mail.gmail.com>
References: <mailman.388916.1387882054.12996.bitcoin-development@lists.sourceforge.net>
	<CAO7N=i0xVm8jxOuz5Rh4g1acpTEuYzcGerH+aHRKaE1ae7FCpA@mail.gmail.com>
Date: Wed, 25 Dec 2013 14:21:36 -0600
Message-ID: <CAJfRnm7fQ1hpoxaQiivCxcNg=pe0wcuHt29eZ4DVvDD4=xVZpg@mail.gmail.com>
From: Allen Piscitello <allen.piscitello@gmail.com>
To: Ryan Carboni <ryan.jc.pc@gmail.com>
Content-Type: multipart/alternative; boundary=001a11360b7c9530e404ee619b32
X-Spam-Score: -0.6 (/)
X-Spam-Report: Spam Filtering performed by mx.sourceforge.net.
	See http://spamassassin.org/tag/ for more details.
	0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
	See
	http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
	for more information. [URIs: doubleclick.net]
	-1.5 SPF_CHECK_PASS SPF reports sender host as permitted sender for
	sender-domain
	0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
	(allen.piscitello[at]gmail.com)
	-0.0 SPF_PASS               SPF: sender matches SPF record
	1.0 HTML_MESSAGE           BODY: HTML included in message
	-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
	author's domain
	0.1 DKIM_SIGNED            Message has a DKIM or DK signature,
	not necessarily valid
	-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
X-Headers-End: 1Vvuxa-0000kj-H6
Cc: Bitcoin Development <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] Bitcoin-development Digest, Vol 31,
	Issue 41
X-BeenThere: bitcoin-development@lists.sourceforge.net
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <bitcoin-development.lists.sourceforge.net>
List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/bitcoin-development>,
	<mailto:bitcoin-development-request@lists.sourceforge.net?subject=unsubscribe>
List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum_name=bitcoin-development>
List-Post: <mailto:bitcoin-development@lists.sourceforge.net>
List-Help: <mailto:bitcoin-development-request@lists.sourceforge.net?subject=help>
List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/bitcoin-development>,
	<mailto:bitcoin-development-request@lists.sourceforge.net?subject=subscribe>
X-List-Received-Date: Wed, 25 Dec 2013 20:21:44 -0000

--001a11360b7c9530e404ee619b32
Content-Type: text/plain; charset=ISO-8859-1

No, you don't get it, and it's been explained clearly to you twice.  Take
it to bitcointalk, this does not belong on this list.  Your cure is worse
than the disease.


On Wed, Dec 25, 2013 at 12:53 AM, Ryan Carboni <ryan.jc.pc@gmail.com> wrote:

> You just completely ignored my point. I'm not sure who's trying to insult
> whom, or if you're attempting an argumentum ad hominem. My idea is
> completely valid.
>
> The only way to man in the middle to have such a large percentage of hash
> power is to either a) attack a pool (which people would notice when their
> withdrawals go nowhere), b) attack a large number of nodes, which must have
> enough combined hash power to mine four blocks within three days for people
> to notice (I think it is unlikely for Bitcoin point of sale nodes to have
> significant hash power), or c) the attacker himself has 1% of the hash
> power and is diverting it to conduct a man in the middle attack against one
> single person (as opposed to a major retailer who has a round the clock IT
> staff). In order for a large number of nodes to be attacked, it must be by
> someone who either is a state actor or an ISP, at which point you've
> already lost.
>
> It's really simple math, it require on even the most optimistic estimates
> a tenth of a percent of the total network hash power to mine 4 blocks
> within three days with good luck. Or maybe this single person is on
> vacation, then it would take a hundredth of a percent of the total hash
> power over two weeks. I think very few people even have a hundredth of a
> percent of the total hash power, which goes to show how secure the network
> is, and how little my proposal would weaken network security. I'll concede
> that difficulty could be reduced only by 80% if only four blocks were mined
> in 3 days, which would provide sufficient margin against these proposed man
> in the middle attacks, because block-chain growth would be noticeably
> reduced.
>
> But I repeat myself. Repeatedly. I wish you would understand my points.
> I'm making a good faith effort to provide an original idea before it's
> possibly too late. But fine. I have nothing more to add, and it's the
> holidays.
>
>
> On Tue, Dec 24, 2013 at 2:47 AM, <
> bitcoin-development-request@lists.sourceforge.net> wrote:
>
>> An attacker with some small hashpower isolates you (as an individual)
>> from the network by MITMing your network. You just switch the the
>> attackers chain as if nothing happened because of the network rule
>> that defines it as OK. Today, you will see that you're behind and warn
>> the user.
>>
>> Was it really so hard to write a three-sentence paragraph to clarify
>> the attack instead of insulting people? Still, posting ideas here
>> without spending time to ensure you understand the Bitcoin network
>> well is frowned upon.
>>
>
>
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT
> organizations don't have a clear picture of how application performance
> affects their revenue. With AppDynamics, you get 100% visibility into your
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
> Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
>
>

--001a11360b7c9530e404ee619b32
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">No, you don&#39;t get it, and it&#39;s been explained clea=
rly to you twice. =A0Take it to bitcointalk, this does not belong on this l=
ist. =A0Your cure is worse than the disease.</div><div class=3D"gmail_extra=
"><br>
<br><div class=3D"gmail_quote">On Wed, Dec 25, 2013 at 12:53 AM, Ryan Carbo=
ni <span dir=3D"ltr">&lt;<a href=3D"mailto:ryan.jc.pc@gmail.com" target=3D"=
_blank">ryan.jc.pc@gmail.com</a>&gt;</span> wrote:<br><blockquote class=3D"=
gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-=
left:1ex">
<div dir=3D"ltr">You just completely ignored my point. I&#39;m not sure who=
&#39;s trying to insult whom, or if you&#39;re attempting an argumentum ad =
hominem. My idea is completely valid.<div><br></div><div>The only way to ma=
n in the middle to have such a large percentage of hash power is to either =
a) attack a pool (which people would notice when their withdrawals go nowhe=
re), b) attack a large number of nodes, which must have enough combined has=
h power to mine four blocks within three days for people to notice (I think=
 it is unlikely for Bitcoin point of sale nodes to have significant hash po=
wer), or c) the attacker himself has 1% of the hash power and is diverting =
it to conduct a man in the middle attack against one single person (as oppo=
sed to a major retailer who has a round the clock IT staff). In order for a=
 large number of nodes to be attacked, it must be by someone who either is =
a state actor or an ISP, at which point you&#39;ve already lost.</div>

<div><br></div><div>It&#39;s really simple math, it require on even the mos=
t optimistic estimates a tenth of a percent of the total network hash power=
 to mine 4 blocks within three days with good luck. Or maybe this single pe=
rson is on vacation, then it would take a hundredth of a percent of the tot=
al hash power over two weeks. I think very few people even have a hundredth=
 of a percent of the total hash power, which goes to show how secure the ne=
twork is, and how little my proposal would weaken network security. I&#39;l=
l concede that difficulty could be reduced only by 80% if only four blocks =
were mined in 3 days, which would provide sufficient margin against these p=
roposed man in the middle attacks, because block-chain growth would be noti=
ceably reduced.</div>

<div><br></div><div>But I repeat myself. Repeatedly. I wish you would under=
stand my points. I&#39;m making a good faith effort to provide an original =
idea before it&#39;s possibly too late. But fine. I have nothing more to ad=
d, and it&#39;s the holidays.</div>

<div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote">On Tue, =
Dec 24, 2013 at 2:47 AM,  <span dir=3D"ltr">&lt;<a href=3D"mailto:bitcoin-d=
evelopment-request@lists.sourceforge.net" target=3D"_blank">bitcoin-develop=
ment-request@lists.sourceforge.net</a>&gt;</span> wrote:<br>

<blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-=
left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;p=
adding-left:1ex"><span style=3D"font-family:arial,sans-serif;font-size:13px=
">An attacker with some small hashpower isolates you (as an individual)</sp=
an><br style=3D"font-family:arial,sans-serif;font-size:13px">

<span style=3D"font-family:arial,sans-serif;font-size:13px">from the networ=
k by MITMing your network. You just switch the the</span><br style=3D"font-=
family:arial,sans-serif;font-size:13px"><span style=3D"font-family:arial,sa=
ns-serif;font-size:13px">attackers chain as if nothing happened because of =
the network rule</span><br style=3D"font-family:arial,sans-serif;font-size:=
13px">

<span style=3D"font-family:arial,sans-serif;font-size:13px">that defines it=
 as OK. Today, you will see that you&#39;re behind and warn</span><br style=
=3D"font-family:arial,sans-serif;font-size:13px"><span style=3D"font-family=
:arial,sans-serif;font-size:13px">the user.</span><br style=3D"font-family:=
arial,sans-serif;font-size:13px">

<br style=3D"font-family:arial,sans-serif;font-size:13px"><span style=3D"fo=
nt-family:arial,sans-serif;font-size:13px">Was it really so hard to write a=
 three-sentence paragraph to clarify</span><br style=3D"font-family:arial,s=
ans-serif;font-size:13px">

<span style=3D"font-family:arial,sans-serif;font-size:13px">the attack inst=
ead of insulting people? Still, posting ideas here</span><br style=3D"font-=
family:arial,sans-serif;font-size:13px"><span style=3D"font-family:arial,sa=
ns-serif;font-size:13px">without spending time to ensure you understand the=
 Bitcoin network</span><br style=3D"font-family:arial,sans-serif;font-size:=
13px">

<span style=3D"font-family:arial,sans-serif;font-size:13px">well is frowned=
 upon.</span><br></blockquote></div></div></div></div>
<br>-----------------------------------------------------------------------=
-------<br>
Rapidly troubleshoot problems before they affect your business. Most IT<br>
organizations don&#39;t have a clear picture of how application performance=
<br>
affects their revenue. With AppDynamics, you get 100% visibility into your<=
br>
Java,.NET, &amp; PHP application. Start your 15-day FREE TRIAL of AppDynami=
cs Pro!<br>
<a href=3D"http://pubads.g.doubleclick.net/gampad/clk?id=3D84349831&amp;iu=
=3D/4140/ostg.clktrk" target=3D"_blank">http://pubads.g.doubleclick.net/gam=
pad/clk?id=3D84349831&amp;iu=3D/4140/ostg.clktrk</a><br>___________________=
____________________________<br>

Bitcoin-development mailing list<br>
<a href=3D"mailto:Bitcoin-development@lists.sourceforge.net">Bitcoin-develo=
pment@lists.sourceforge.net</a><br>
<a href=3D"https://lists.sourceforge.net/lists/listinfo/bitcoin-development=
" target=3D"_blank">https://lists.sourceforge.net/lists/listinfo/bitcoin-de=
velopment</a><br>
<br></blockquote></div><br></div>

--001a11360b7c9530e404ee619b32--