Topic: . (Read 2982 times)

I have been having issues with one Coinbase transaction not being sent to the blockchain for confirmation.  I agree with the statement above to a certain extent.  About a year ago a large provider internet backbone gear Juniper had a software glitch in an update that allowed for edge and core aggregation routers to be taken down. This happened during a period where one of my largest clients requested a "lockdown" on both their tier one internet providers backbones. IE no grooms, adds, or changes unless critical and notification coordinated between carriers.  It seems to me that if it affects all then it should be fixed and not exploted or overly publicized before it is.

http://www.networkworld.com/news/2013/020413-juniper-routers-266385.html

Although I have only been in bitcoins for about 6 months, from a security standpoint I would not release news about the flaw widely before it was fixed.  Now every Tom, Dick and Harry can exploit it if its real.

In the above scenario a fix was being worked on and implemented a couple of weeks before the hackers made the vulnerability known publicly.  Coordination between vendors was done to mitigate potential dollars losses to clients and only discussed at the highest levels.  I know Bitcoin is not the internet and MTGOX and other exchanges are not the NYSE or a hardware vendor like Juniper, but why make it so public it can be exploited if it is a major vulnerability that needs fixing?

And yet the sending txouts, receiving address and amount are all the same, so no one's bitcoins are at risk or transactions being disrupted.

I doubt its gox doing this. It's any number of malicious hackers out there that want to mess with bitcoin.

well now i know how gox with have some extra coins back, they'll sue the OP for libel

Seems a little extreme for someone who already knows what it's like to lose all his BTC. When (yes, when) MtGox goes under, a lot of people are going to get the short end of that stick.

Let's hope this shit clears up before that and people can get their funds out.... then bury Gox.

They've been slowly working on it for years. It's a big change. Version 0.8 partly addresses the issue (DER malleability).

Yes that's because you have a nonce to sign with your private key. You can't do that without the key.

To get a bit of a visual on just how easy it is to "mutate" a transaction, check out an example here and just press the "Re-sign" button over and over: http://brainwallet.org/#tx
It will display a new hash and raw transaction each time based on the same data.

Look at who relayed the blocks to get an idea (although not proof) if a pool is in on it.


Relayed by BTC Guild.


Relayed by GHash.IO.

How about the rest?

hahaha, this thread escalated fast

But I think the two of you are pretty juvenile, haven't got the time to grow up? Especially Mikey.

See my post on this subject here: https://bitcointalksearch.org/topic/transaction-recast-no-good-deed-goes-unpunished-459474

Yesterday I would have been with you on that. With the recent developments, it is hard to deny that something is not right.

Even if they are responsible, it does not really matter. The fact that it can be done in the first place is important.

Mt.Gox may yet turn out to have prevented a major disaster down the line.



Agreed, they are also to blame. They should have taken the high road and reassured everyone that the issue will be taken care of with haste, instead of telling people to deal with it.

Some day in the future, bitcoin foundation will have to take a stance regarding this circus.

.

Someone needs to grow up?

.

So? You are complaining, others are complaining. That is bad for Bitcoin.

I don't get how you could be against fixing it.

.

I'm not happy with the methods used, but it clearly shows that the issue needs to be addressed.

"Everyone should know how to deal with it." does not really cut it.

.