Topic: [ANN][STEEM][POW] - NO IPO | NO PREMINE | NO INSTAMINE (relaunch) - page 24. (Read 133095 times)

If you want to help prevent others from abusing, then pull, build, and restart mining.  Right now all of steemit miner's have upgraded which prevents most abuse, but obviously it is best if everyone upgrades.

Do we have to git pull ? or its fine to keep mining ?

Yes, on the horizon.

I have identified a small security vulnerability that has been remedied with the latest commits on github. Depending upon the current queue length, someone could reuse the same POW up to 4 times in the same block. Ie: if the queue length was 88, they could do it 4 times, if it was 89 then 3, etc.   If the queue length was 81 then there would be no vulnerability.

This bug is a side effect of a last minute decision to divide the queue length by 4 when calculating the target difficulty. Under the original design, each POW would increase the difficulty and thus it would have been impossible to reuse the same POW unless the POW was 2x the target difficulty.

The fix that has been implemented will reject duplicate POW when propagating the transaction or generating a block, but will still accept it if it gets included into a block. The end result is that no hard fork is necessary. So long as the majority of miners update their code, the difficulty of exploiting this will be much less likely than actually doing 4x the work.

I first discovered this bug when I noticed an attacker who appeared to exploit it by submitting more than one POW at a time. Bravo good sir and thanks for reviewing the code enjoy your spoils!

Upon reviewing the code it is clear that if you use the same private key for multiple miners on separate machines then you will generate the same POW on two different machines. If they are on the same machine then the NONCE will be different for each thread and you should be fine.

If / when a hard fork is necessary to fix some future bug, then I will include this soft fix as part of the same hard fork.

Once again, thank you for your patience as we work out the kinks in this new code.  

NO FORK REQUIRED
NO RELAUNCH

any windows wallet on the horizon?

remember vanillacoin ?

It wouldn't be the first time someone pulled that here.  We'll see what happens here.  :-)

Here is little more detail for compile on fresh ubuntu if someone needs it.
(you will need to use a swapfile if you have less than 1GB RAM)

sudo apt-get update
sudo apt-get install git cmake g++ python-dev autotools-dev libicu-dev build-essential libbz2-dev libboost-all-dev libssl-dev libncurses5-dev doxygen libreadline-dev dh-autoreconf


boost
wget -O boost_1_60_0.tar.gz http://sourceforge.net/projects/boost/files/boost/1.60.0/boost_1_60_0.tar.gz/download
tar xzvf boost_1_60_0.tar.gz
cd boost_1_60_0
./bootstrap.sh --prefix=/usr/local
./b2 install
(depending on your system, this will take long)

secp256k
cd
git clone https://github.com/bitcoin/secp256k1
cd secp256k1
./autogen.sh
./configure
make
./tests


cd
git clone https://github.com/steemit/steem
cd steem
git submodule update --init --recursive
cmake CMakeLists.txt
make

Not at this time.

Are you offering Bounty for do faucet etc.?

BitShares doesn't have mining.

If you see a hash rate of 0 then it means one of several things:

1. --miner no miners specified properly
2. --witness no witness specified
3. --mining-threads is not set
4. you already produced one POW and are in the queue

After mining for about an hour my hash rate has dropped to 0 hps. I'm not familiar with Bitshares, is this normal? I still appear to be connected to the network.

Or maybe I'm more like .   Too bad SMF doesn't let me post images yet, it would be fun.

Maybe all of this bumbling around is just a front to skillfully hide the super powers within Steem?  But you would never believe that

Get ready to have your comment deleted

Now it stopped hashing, even after a reboot. There were no changes made not sure what this is from.

I did that, and when I type list_keys it shows them.

i got lots of blocks myself, u must import_key PRIVKEY , to list your accounts

So no Win binaries then?

Gonna buy the instamine dumps of your Linux pals once the fud hits

Anyone find anything yet(not dev)? I have 10,000 hps and still nothing, or I think nothing cause
 list_my_accounts
3575798ms th_a       websocket_api.cpp:77          on_message           ] message: {"id":14,"result":[[],[],[]]}


shows that, and am guessing it means empty.

Personally, I love mining perceived shitcoins.