[ANN] SpreadCoin | True Decentralization (No Pools) | Testing New Masternodes - page 371.

rotation

member

Activity: 63

Merit: 10

Quote from: NoobKidOnTheBlock on December 14, 2014, 10:11:47 PM

Quote from: rotation on December 14, 2014, 10:00:18 PM

Quote from: MyFarm on December 14, 2014, 09:29:28 PM

Well done Mr. Spread!

https://bitcointalksearch.org/topic/m.9842069

Man, I'm feeling better and better about owning SPR!

More and more DRK fans may join SPR. Grin

I really hope that they do

I hacanve a good feeling about this coin and can't wait to see what Mr. Spread has in store

It might take Mr.spread weeks to finish improved masternodes and darksend.
As soon as it finished,I'll set up a few masternodes. Wink

thelonecrouton

legendary

Activity: 966

Merit: 1000

Quote from: rotation on December 14, 2014, 10:00:18 PM

Quote from: MyFarm on December 14, 2014, 09:29:28 PM

Well done Mr. Spread!

https://bitcointalksearch.org/topic/m.9842069

Man, I'm feeling better and better about owning SPR!

More and more DRK fans may join SPR. Grin

I'll be running DRK and SPR Masternodes side by side on all my VPS instances. Plus a few new ones...

(Don't worry guys, setting up and running a Masternode is really easy.)

NoobKidOnTheBlock

hero member

Activity: 770

Merit: 500

FLY DONATION ADDRESS IN SIGNATURE

Quote from: rotation on December 14, 2014, 10:00:18 PM

Quote from: MyFarm on December 14, 2014, 09:29:28 PM

Well done Mr. Spread!

https://bitcointalksearch.org/topic/m.9842069

Man, I'm feeling better and better about owning SPR!

More and more DRK fans may join SPR. Grin

I really hope that they do

I hacanve a good feeling about this coin and can't wait to see what Mr. Spread has in store

rotation

member

Activity: 63

Merit: 10

Quote from: MyFarm on December 14, 2014, 09:29:28 PM

Well done Mr. Spread!

https://bitcointalksearch.org/topic/m.9842069

Man, I'm feeling better and better about owning SPR!

More and more DRK fans may join SPR. Grin

e1ghtSpace

legendary

Activity: 1526

Merit: 1001

Crypto since 2014

Quote from: MyFarm on December 14, 2014, 09:29:28 PM

Well done Mr. Spread!

https://bitcointalksearch.org/topic/m.9842069

Man, I'm feeling better and better about own SPR!

Me too!

Right now i'm going to sell 95 spr and try out https://bitcoinvideocasino.com/slots.
If I win, I'll be buying more spr. (I'll probably lose it all though)

edit:
Yep. Lost it.

thelonecrouton

legendary

Activity: 966

Merit: 1000

Quote from: MyFarm on December 14, 2014, 09:29:28 PM

Well done Mr. Spread!

https://bitcointalksearch.org/topic/m.9842069

+1 Great stuff, more talent checking code = more bugs squashed.

MyFarm

hero member

Activity: 854

Merit: 1000

Well done Mr. Spread!

https://bitcointalksearch.org/topic/m.9842069

Man, I'm feeling better and better about owning SPR!

RawrRawr

newbie

Activity: 13

Merit: 0

Quote

If they will give you this private key you can send it to me if you trust me and I will send these coins to your new address. If you don't trust me this will complicate things but we can still figure out how to return these coins back to you.

Dude, I trust you more than Jesus. Grin

antonio8

legendary

Activity: 1400

Merit: 1000

Quote from: Mr. Spread on December 14, 2014, 03:18:46 PM

Quote from: RawrRawr on December 14, 2014, 03:05:24 PM

Quote

What is this other coin? Maybe it uses the same address format as SpreadCoin.

epic fail.

You need to contact C-CEX and ask them for private key corresponding to this address. Then you will need to import this key into your SpreadCoin wallet but I'm not sure if this will actually work.

They are going to ask for 0.5 BTC to correct the problem.

I am following/mining another coin where someone has the same issue.

e1ghtSpace

legendary

Activity: 1526

Merit: 1001

Crypto since 2014

Quote from: Mr. Spread on December 14, 2014, 05:07:11 PM

Quote from: e1ghtSpace on December 14, 2014, 03:47:34 PM

Quote from: Mr. Spread on December 14, 2014, 03:44:21 PM

Quote from: e1ghtSpace on December 14, 2014, 03:30:47 PM

Sorry but it looks like your coins are gone. Embarrassed

I'm really sorry about this.

Not necessarily, while address format is the same, private key format is different, it is necessary to convert it, I will try to do it.

Ah, I was hoping something like this would be the case. You are a great dev Mr. Spread.

I successfully converted this private key to SpreadCoin format and now I can steal your 0.16 SPR Grin

Nooooo!!!!! Shocked

Nice job.

Edit:
What is the private key? (you can post it here for people to steal)

Mr. Spread

full member

Activity: 210

Merit: 100

Quote from: e1ghtSpace on December 14, 2014, 03:47:34 PM

Quote from: Mr. Spread on December 14, 2014, 03:44:21 PM

Quote from: e1ghtSpace on December 14, 2014, 03:30:47 PM

Sorry but it looks like your coins are gone. Embarrassed

I'm really sorry about this.

Not necessarily, while address format is the same, private key format is different, it is necessary to convert it, I will try to do it.

Ah, I was hoping something like this would be the case. You are a great dev Mr. Spread.

I successfully converted this private key to SpreadCoin format and now I can steal your 0.16 SPR Grin

Quote from: RawrRawr on December 14, 2014, 03:53:27 PM

Quote

Not necessarily, while address format is the same, private key format is different, it is necessary to convert it, I will try to do it.

Oh, you are truly great dev. I wrote to C-CEX, and I wait for the answer.

If they will give you this private key you can send it to me if you trust me and I will send these coins to your new address. If you don't trust me this will complicate things but we can still figure out how to return these coins back to you.

MyFarm

hero member

Activity: 854

Merit: 1000

Quote from: Mr. Spread on December 14, 2014, 03:51:43 PM

Quote from: MyFarm on December 14, 2014, 03:38:24 PM

Mr. Spread, have you found the part of the Darkcoin code where, "Enforcement" is on or off? I THINK that may be what you're seeing as when enforcement is off, yes, that can and has happened.

And have you notified the Darkcoin developer, Evan Duffield?

It is in the code that checks that payments are correct if they are enforced, more specifically it is in these lines: https://github.com/darkcoin/darkcoin/blob/master/src/main.cpp#L2822
I found it about half an hour ago and haven't yet notified anyone from Darkcoin team. This probably is bad, I should think better next time and contact dev first.
I'm still not 100% sure if it is a bug, maybe all the necessary checks are performed somewhere else but I didn't find any other checks.

I see. And yes, I'd contact the Darkcoin dev privately first in the future.

RawrRawr

newbie

Activity: 13

Merit: 0

Quote

Not necessarily, while address format is the same, private key format is different, it is necessary to convert it, I will try to do it.

Oh, you are truly great dev. I wrote to C-CEX, and I wait for the answer.

Mr. Spread

full member

Activity: 210

Merit: 100

Quote from: MyFarm on December 14, 2014, 03:38:24 PM

Mr. Spread, have you found the part of the Darkcoin code where, "Enforcement" is on or off? I THINK that may be what you're seeing as when enforcement is off, yes, that can and has happened.

And have you notified the Darkcoin developer, Evan Duffield?

It is in the code that checks that payments are correct if they are enforced, more specifically it is in these lines: https://github.com/darkcoin/darkcoin/blob/master/src/main.cpp#L2822
I found it about half an hour ago and haven't yet notified anyone from Darkcoin team. This probably is bad, I should think better next time and contact dev first.
I'm still not 100% sure if it is a bug, maybe all the necessary checks are performed somewhere else but I didn't find any other checks.

e1ghtSpace

legendary

Activity: 1526

Merit: 1001

Crypto since 2014

Quote from: Mr. Spread on December 14, 2014, 03:44:21 PM

Quote from: e1ghtSpace on December 14, 2014, 03:30:47 PM

Sorry but it looks like your coins are gone. Embarrassed

I'm really sorry about this.

Not necessarily, while address format is the same, private key format is different, it is necessary to convert it, I will try to do it.

Ah, I was hoping something like this would be the case. You are a great dev Mr. Spread.

Mr. Spread

full member

Activity: 210

Merit: 100

Quote from: e1ghtSpace on December 14, 2014, 03:30:47 PM

Sorry but it looks like your coins are gone. Embarrassed

I'm really sorry about this.

Not necessarily, while address format is the same, private key format is different, it is necessary to convert it, I will try to do it.

cyptohunter

full member

Activity: 126

Merit: 100

Quote from: Mr. Spread on December 14, 2014, 03:36:41 PM

Quote from: cyptohunter on December 14, 2014, 02:39:13 PM

Mr.spread,what's status of masternode and darksend developmnet?

It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes.
DarkCoin wallet checks the following things for each new block:
1) There is a payment to master node.
2) There is a payment with the same amount as a payment to master node should be (30%).
But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network but I haven't tested it on testnet so I can't be 100% sure.

GREAT!
MR.spread is a excellent Dev,not merely a clone of source code,but discover the bug and improve it Cheesy

e1ghtSpace

legendary

Activity: 1526

Merit: 1001

Crypto since 2014

Quote from: MyFarm on December 14, 2014, 03:39:54 PM

Quote from: e1ghtSpace on December 14, 2014, 03:38:48 PM

Quote from: Mr. Spread on December 14, 2014, 03:36:41 PM

Quote from: cyptohunter on December 14, 2014, 02:39:13 PM

Mr.spread,what's status of masternode and darksend developmnet?

It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes.
DarkCoin wallet checks the following things for each new block:
1) There is a payment to master node.
2) There is a payment with the same amount as a payment to master node should be (30%).
But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network just fine but I haven't tested it on testnet to be 100% sure.

Awesome! (if the vulnerability works) We can be the first coin to have the masternode vulnerability fixed!

While I understand your perspective, it my opinion, it would be wrong not to notify the Darkcoin dev of any potential vulnerabilities.

Yeah, I know. Sad

Maybe he can say "Vulnerability found by SpreadCoin Dev" or something.

MyFarm

hero member

Activity: 854

Merit: 1000

Quote from: e1ghtSpace on December 14, 2014, 03:38:48 PM

Quote from: Mr. Spread on December 14, 2014, 03:36:41 PM

Quote from: cyptohunter on December 14, 2014, 02:39:13 PM

Mr.spread,what's status of masternode and darksend developmnet?

It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes.
DarkCoin wallet checks the following things for each new block:
1) There is a payment to master node.
2) There is a payment with the same amount as a payment to master node should be (30%).
But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network just fine but I haven't tested it on testnet to be 100% sure.

Awesome! (if the vulnerability works) We can be the first coin to have the masternode vulnerability fixed!

While I understand your perspective, it my opinion, it would be wrong not to notify the Darkcoin dev of any potential vulnerabilities.

e1ghtSpace

legendary

Activity: 1526

Merit: 1001

Crypto since 2014

Quote from: Mr. Spread on December 14, 2014, 03:36:41 PM

Quote from: cyptohunter on December 14, 2014, 02:39:13 PM

Mr.spread,what's status of masternode and darksend developmnet?

It is far from ready yet but I think I found a potential vulnerability in DarkCoin which allows miners (actually pools) to not pay part of the block reward to masternodes.
DarkCoin wallet checks the following things for each new block:
1) There is a payment to master node.
2) There is a payment with the same amount as a payment to master node should be (30%).
But there is no check that this is the same payment. This means that if you generate a block you can pay 0.0000001 DRK to masternode and pay 30% and (70% - 0.0000001 DRK) to yourself as separate coinbase outputs. Such blocks should be accepted by DarkCoin network just fine but I haven't tested it on testnet to be 100% sure.

Awesome! (if the vulnerability works) We can be the first coin to have the masternode vulnerability fixed!

edit;

Quote from: MyFarm on December 14, 2014, 03:38:24 PM

Mr. Spread, have you found the part of the Darkcoin code where, "Enforcement" is on or off? I THINK that may be what you're seeing as when enforcement is off, yes, that can and has happened.

Awww.

Topic: [ANN] SpreadCoin | True Decentralization (No Pools) | Testing New Masternodes - page 371. (Read 810079 times)