Author

Topic: [ANN][XRB]Cryptocurrency's killer app: RaiBlocks micropayments - page 162. (Read 775150 times)

newbie
Activity: 12
Merit: 0
Why RaiBlocks is not secure.

[...]
5. The Man in the Middle attack.

If an attacker succeeds to put himself between a merchant and the RaiBlocks network he can just filter the double spending payment packets, and the merchant will never know that he is receiving a double spending. The Raiblocks network will discard that payment while the merchant will accept it.

https://s18.postimg.org/7pnm6yweh/doublespend.png
[...]

This kind of FUD can be done to every cryptocurrency. So once and for all :
Every cryptocurrency, every online bank is vulnerable to Mitm attacks, if such attack successfully happens.
Example for bitcoin: If a hacker successfully performs a Mitm attack between a buyer and seller, he can just give to the buyer his own bitcoin address instead of the seller's. End of the story. And there are a myriad of more sophisticated attacks depending on whether you have a temporary or persistant Mitm attack.
Fortunately, Mitm attacks (over ssh) are rare, difficult and simply not accessible to the vast majority. They can still happen though and countermeasures (such as ssl pinning) are outside of the scope of crypto currencies underlying technology.
Basically if you are afraid of Mitm attacks, don't open a bank account, don't use any crypto currency, or better, don't use internet (or LANs) and make payments only in cash.

This is 100% correct. It is a common FUD technique to state extreme "edge cases" like they are common occurrences so you have posts like "this coin is not secure - all an attacker has to do is gain control of the majority of the voting delegates". LMFAO

If it is so easy, why hasn't it happened yet? It would be much easier for this kind of attack to occur early on in a coin's life before more nodes come online. Raiblocks has been running for over 2 years straight - why hasn't anyone exploited these "flaws" yet?

Because the time, money and resources required to do so make it impossible.

Imagine you are storing money in one of those Swiss vaults deep inside a mountain. The idiots on this thread trying to scare people with their FUD would make an argument such as:

"Your money is at great risk! All someone has to do is pay off every single guard inside the mountain, circumvent the alarm system and walk straight out the door with your funds". Their arguments are laughable. In fact, they aren't even arguments at all, they are just straight up talking out their asses  Grin



Well BTC is not vulnerable to the same attack, because of the blockchain and 6 confirmations. What rail is essentially is BTC without the blockchain. That's where the double spend protection has been lost.

And no, it's not that hard to pull a MITM attack. With some DNS poisoning you could do this to an exchange and to empty their wallet. No wonder good exchanges won't accept railblock. They'd have to be crazy to do so.

You don't understand. You take the "confirmation" angle since XRB and BTC have different approaches on this aspect. But if you successfully performed a Mitm attack, there are a myriad of other ways to exploit [insert your favorite crypto currency or bank] system. A simple example for BTC is : the attacker intercepts deposit BTC addresses and replaces them with his own addresses. Same with any crypto. And every online bank is vulnerable AFTER a successful Mitm attack. That's why they place countermeasures such as SSL pinning, not to be vulnerable to Mitm attacks in the first place. But even then, this is not always enough. For example : https://thehackernews.com/2017/12/mitm-ssl-pinning-hostname.html

As I said earlier, if you successfully performed a Mitm attack, you have already won, no matter the crypto currency or bank.
newbie
Activity: 26
Merit: 0
Hey guys,

I have the following problem. I downloaded the desktop wallet for Raiblock, installed it and synced blocks. Have then made a test payment. The coin has arrived "not". The following error: "Receiving, pending deposit to balance. Make sure Wallet is open and all blocks are downloaded." I did everything. I just did not work. Have the seed stored in the hope, when I reinstall the wallet, bring the thing back to work. No way! Now there is a next problem: he confirms that the seed has been imported, but the rest is still at zero and the old address is still not available!? I really do not know what to do anymore Sad Status: Running Block: 4700183 (867)

Who can help me please?
hero member
Activity: 630
Merit: 500
Daily update of data.ldb (save Seed, check Guide & Readme if you are going to use it to speed up 1st wallet sync!)
Now for version 9.0!
https://yadi.sk/d/fcZgyES73Jzj5T
https://drive.google.com/drive/folders/1sP1z9S011f1W_0nK1KJ-UCJbjaNmk8GQ?usp=sharing

RaiBlocks_Win64_2018_01_02_07.7z (for version 9.0)   
SHA1: E903C1F51D1FFB6E8F0F9C9E6E6AE63AD4379020     
SHA256: FFD4EE204F37D90151875ED4E1613B8F12FFA87048C2D403953BD470EACF563D   

RaiBlocks_Linux64_2018_01_02_10.7z (for version 9.0)   
SHA1: 3FA3A69CA1EE48CC3DEE0E8AB9FAD0C5B8A5AAD5     
SHA256: 1E5B00D1D1F4149FB35F6D080E35BF214CCA0C24A3208558D0E0E1FE1D657DDC   
full member
Activity: 222
Merit: 102
Why RaiBlocks is not secure.

[...]
5. The Man in the Middle attack.

If an attacker succeeds to put himself between a merchant and the RaiBlocks network he can just filter the double spending payment packets, and the merchant will never know that he is receiving a double spending. The Raiblocks network will discard that payment while the merchant will accept it.


[...]

This kind of FUD can be done to every cryptocurrency. So once and for all :
Every cryptocurrency, every online bank is vulnerable to Mitm attacks, if such attack successfully happens.
Example for bitcoin: If a hacker successfully performs a Mitm attack between a buyer and seller, he can just give to the buyer his own bitcoin address instead of the seller's. End of the story. And there are a myriad of more sophisticated attacks depending on whether you have a temporary or persistant Mitm attack.
Fortunately, Mitm attacks (over ssh) are rare, difficult and simply not accessible to the vast majority. They can still happen though and countermeasures (such as ssl pinning) are outside of the scope of crypto currencies underlying technology.
Basically if you are afraid of Mitm attacks, don't open a bank account, don't use any crypto currency, or better, don't use internet (or LANs) and make payments only in cash.

This is 100% correct. It is a common FUD technique to state extreme "edge cases" like they are common occurrences so you have posts like "this coin is not secure - all an attacker has to do is gain control of the majority of the voting delegates". LMFAO

If it is so easy, why hasn't it happened yet? It would be much easier for this kind of attack to occur early on in a coin's life before more nodes come online. Raiblocks has been running for over 2 years straight - why hasn't anyone exploited these "flaws" yet?

Because the time, money and resources required to do so make it impossible.

Imagine you are storing money in one of those Swiss vaults deep inside a mountain. The idiots on this thread trying to scare people with their FUD would make an argument such as:

"Your money is at great risk! All someone has to do is pay off every single guard inside the mountain, circumvent the alarm system and walk straight out the door with your funds". Their arguments are laughable. In fact, they aren't even arguments at all, they are just straight up talking out their asses  Grin



Well BTC is not vulnerable to the same attack, because of the blockchain and 6 confirmations. What rail is essentially is BTC without the blockchain. That's where the double spend protection has been lost.

And no, it's not that hard to pull a MITM attack. With some DNS poisoning you could do this to an exchange and to empty their wallet. No wonder good exchanges won't accept railblock. They'd have to be crazy to do so.

Damn you are so ignorant that I do not know why I bother to respond to you. You come on here day after day talking out your ass and posting the same garbage over and over again.

Raiblocks is about to be added to Binance, the new #1 exchange now that Bittrex demands verification.

Stop showing your ignorance and go back to school little boy.

PS - If this attack is so easy to pull off as you say, please go ahead and do so or tell the dev how you would do it so you can collect the bounty. Oh that's right, you are full of shit.
member
Activity: 252
Merit: 11
Why RaiBlocks is not secure.

[...]
5. The Man in the Middle attack.

If an attacker succeeds to put himself between a merchant and the RaiBlocks network he can just filter the double spending payment packets, and the merchant will never know that he is receiving a double spending. The Raiblocks network will discard that payment while the merchant will accept it.


[...]

This kind of FUD can be done to every cryptocurrency. So once and for all :
Every cryptocurrency, every online bank is vulnerable to Mitm attacks, if such attack successfully happens.
Example for bitcoin: If a hacker successfully performs a Mitm attack between a buyer and seller, he can just give to the buyer his own bitcoin address instead of the seller's. End of the story. And there are a myriad of more sophisticated attacks depending on whether you have a temporary or persistant Mitm attack.
Fortunately, Mitm attacks (over ssh) are rare, difficult and simply not accessible to the vast majority. They can still happen though and countermeasures (such as ssl pinning) are outside of the scope of crypto currencies underlying technology.
Basically if you are afraid of Mitm attacks, don't open a bank account, don't use any crypto currency, or better, don't use internet (or LANs) and make payments only in cash.

This is 100% correct. It is a common FUD technique to state extreme "edge cases" like they are common occurrences so you have posts like "this coin is not secure - all an attacker has to do is gain control of the majority of the voting delegates". LMFAO

If it is so easy, why hasn't it happened yet? It would be much easier for this kind of attack to occur early on in a coin's life before more nodes come online. Raiblocks has been running for over 2 years straight - why hasn't anyone exploited these "flaws" yet?

Because the time, money and resources required to do so make it impossible.

Imagine you are storing money in one of those Swiss vaults deep inside a mountain. The idiots on this thread trying to scare people with their FUD would make an argument such as:

"Your money is at great risk! All someone has to do is pay off every single guard inside the mountain, circumvent the alarm system and walk straight out the door with your funds". Their arguments are laughable. In fact, they aren't even arguments at all, they are just straight up talking out their asses  Grin



Well BTC is not vulnerable to the same attack, because of the blockchain and 6 confirmations. What rail is essentially is BTC without the blockchain. That's where the double spend protection has been lost.

And no, it's not that hard to pull a MITM attack. With some DNS poisoning you could do this to an exchange and to empty their wallet. No wonder good exchanges won't accept railblock. They'd have to be crazy to do so.
full member
Activity: 222
Merit: 102
Guys, as a huge XRB supporter I will be the first to admit that Bitgrail has all sorts of issues. I never used it myself - I built my stack by buying on Mercatox.

But here's the thing - it has already been confirmed that XRB will be added to Kucoin and it will be added to Binance as well because it currently has a huge lead in the voting. This is huge - Binance is the new #1 exchange ever since Bittrex started demanding verification!

So look at the huge interest and volume currently on Raiblocks being on just 2 crap exchanges.... what do you think is going to happen when it is added to Binance?! Sure, there will be some profit taking but the buy pressure far outweighs the sell pressure! XRB is going to explode higher even more, mark my words!

So my recommendation to any newcomers would be to have your BTC ready to go for the opening on Kucoin or Binance, whichever comes first. Pray for an initial selloff which could provide a brief dip in price and then buy like there is no tomorrow!

You will have to be quick though as even if there is a complete crash in price it will not last long based on the previous corrections.
legendary
Activity: 1442
Merit: 1000
Antifragile
I am sure it's a coincidence the only ones talking good about Bitgrail have just registered on the forum.

I am far from new and used Bitgrail for the first time last night. Bitcon deposits went smooth, but was closer to 3 confirmations and not two for deposit. Wirhdrawing Raiblocks took 10 minutes or so.

Some of the buy orders ran away from me but not complaining now. ;-)
full member
Activity: 280
Merit: 100
I love crypto
It seems withdrawal/deposit issues are related to XRB in Bitgrail. Ive done countless deposits there with Litecoin and everyhing has went ok. Maybe its best to use Litecoin for deposit/withdrawal.

This is just absurd. $XRB is their native crypto, how can they have most problems there?
It might be justscaling issues caused by the insane volume that Bitgrail has faced recently. It seems its related to transfers with "processing" status. They are working on it.
newbie
Activity: 51
Merit: 0
I am sure it's a coincidence the only ones talking good about Bitgrail have just registered on the forum.


Correct, Im new so what?...'cause Im new can't give other users my positive experience with Bitgrail?... Undecided

Great exchange! I transferred some bitcoin to BitGrail: arrived in few minutes.

Bought some RaiBlocks from BitGrail: got them in few minutes, very low fees.

Transferred RaiBlocks from BitGrail to a Rai Wallet: arrived in few minutes.

Great exchange: does the job perfectly, it is quick and no ID verification required.-

Ciao!
full member
Activity: 392
Merit: 100
Multiversum
It seems withdrawal/deposit issues are related to XRB in Bitgrail. Ive done countless deposits there with Litecoin and everyhing has went ok. Maybe its best to use Litecoin for deposit/withdrawal.

This is just absurd. $XRB is their native crypto, how can they have most problems there?
full member
Activity: 280
Merit: 100
I love crypto
It seems withdrawal/deposit issues are related to XRB in Bitgrail. Ive done countless deposits there with Litecoin and everyhing has went ok. Maybe its best to use Litecoin for deposit/withdrawal.
member
Activity: 308
Merit: 13
ZetoChain - ACCELERATING BLOCKCHAIN FOR THE SUPPLY
I am sure it's a coincidence the only ones talking good about Bitgrail have just registered on the forum.

Well hopefully everything settles with a bigger exachange
full member
Activity: 392
Merit: 100
Multiversum
trade Xrb on rightbtc [no fee]
https://www.rightbtc.com/#!/trade



Another scammy exchange, what a news:
- https://twitter.com/Rightbtc_/status/946656043534131200

As with other scammy exchanges there are problems with withdrawals.
full member
Activity: 280
Merit: 100
I love crypto
I am sure it's a coincidence the only ones talking good about Bitgrail have just registered on the forum.
I have sent Litecoin there to buy XRB for two days. Everything has been smooth so far. I plan to eventually sell XRB and withdraw funds as litecoin to buy XBR from better exchange.

Do you know if there are issues with Litecoin withdrawals in Bitgrail? I have lots of money there now.  Sad

As a tech enthusiast Im excited about the zero fees and instant transfer of XRB. Security is still a question but they did hire white hackers to find vulnerabilites and so Im confident it will be tested by the best.
member
Activity: 76
Merit: 10
I think the developers should team up with the Stone dev and combine great idea's, create two of the best DAG, zero fee based coins, Stone can be litecoin to Raiblock's Bitcoin. If your interested in supporting DAG based chains, jump over to the Stone thread and show your support: https://bitcointalksearch.org/topic/pre-ann-stone-dag-data-structured-private-cryptocurrency-2581762

I read that he already scam two times. please check there
I think better to support XRB
full member
Activity: 392
Merit: 100
Multiversum
I am sure it's a coincidence the only ones talking good about Bitgrail have just registered on the forum.
R3x
member
Activity: 112
Merit: 11
trade Xrb on rightbtc [no fee]
https://www.rightbtc.com/#!/trade

full member
Activity: 289
Merit: 100
XRB these two days frequent jumps on the first page, I guess its price increases, did not expect to have been close to 40 US dollars? My wealth is quietly growing again and I am looking forward to you for $ 100
newbie
Activity: 51
Merit: 0
I've just bought a lot of XRB "RaiBlocks" and I am really happy with this honest trading https://bitgrail.com/en/   Cheesy   takes all the transactions in/out super fast and the "market" section within the account in real time gives you an excellent idea how this crypto will be in the top 5 before ends this January!...Open the account and transfer BTC to the wallet and then buy  raiblocks in minutes...low low fee to buy. Have fun!! Grin
newbie
Activity: 25
Merit: 0
here is my personal experience, desktop wallet does take a while to sync the first time which is normal, however on the forum there are ways to speed up the process by downloading the "history" and changing it for your wallet.  from desktop wallet to online wallet takes about 2 seconds to transfer,  from wallet or online wallet to bitgrail exchange takes about 1-2 minutes, i have used mercatox. but i like bigrail better. i have also taken out ltc and doge since btc and eth take time, everything working great on my end.  dont listen to people bashing it bc they didnt buy it when they first learn about it.. well happy new year and happy trading.
Jump to: