Author

Topic: Is it still possible to double spend? (Read 1899 times)

legendary
Activity: 1022
Merit: 1000
January 19, 2015, 05:54:55 PM
#31
Its actually more of a donation thing. Im not really selling anything.

What are the donations going to?
sr. member
Activity: 364
Merit: 250
January 18, 2015, 01:16:08 AM
#30
You can have double-spending only if :
- the seller use a node server with no others nodes connected
- the buyer use ... the same node server
- the transaction is OK for both party with 0 confirmation

It's impossible.
In real life networking, you have 6-9 nodes to sprend the transaction ...

So its safe for me to accept 0 confirmations?

All reputable businesses will use 1. You don't truly have the coins until at least 1 confirmation.
Don't pull a Mt.Gox and leave yourself open with loose code. Protect yourself.

Uh.... ** Bitpay ** does zero-confirmation transactions. The dubious emphasis on confirmations is part of what kills the appeal of using bitcoin. This is not some scamcoin with a dead network. A simple code to do input analysis on a widely broadcast transaction and you are fine to accept 0 confirmations.
It would still be possible to double spend a 0/unconfirmed TX, especially if you control a large amount of hashpower and are either running a pool or are solo mining.

An easy solution to the OP's problem would be to process payments to charities in batches with the payment going out 1 day after payment is received
legendary
Activity: 1232
Merit: 1002
January 16, 2015, 10:26:00 AM
#29

This sounds good. Confirm instantly (0 confirmations needed) and lets those receiving the donation wait a little longer (e.g. 6 confirmations). This gives those donating the good feeling instantly and those receiving the donation can probably wait an hour or two before they withdraw their money. Its FREE money I doubt anyone is going to get impatient about it.

This is true! Just write in T&C that they can only withdraw after 6 confirmations! As this is free money for them they don't have the right to bitch about it! Only if they want to empty your wallet with double spend... so I guess 6 confirmations for withdrawing is perfect! As they can't say they have an emergency and they stay on the net to ask people for money! You call people for that and say I will pay back as soon as people will donate to me!
qwk
donator
Activity: 3542
Merit: 3413
Shitcoin Minimalist
January 16, 2015, 07:05:06 AM
#28
Its actually more of a donation thing. Im not really selling anything.
What's the point of double spending a donation?
IDK. Maybe the creator of the project wants to forge donations on my site and withdraws?
That's very easy to work around.
Accept incoming donations with zero confirmations.
Only pay out to charities anything above 2 or more confirmations.
copper member
Activity: 1498
Merit: 1528
No I dont escrow anymore.
January 16, 2015, 06:43:46 AM
#27
-snip-
Uh.... ** Bitpay ** does zero-confirmation transactions. The dubious emphasis on confirmations is part of what kills the appeal of using bitcoin. This is not some scamcoin with a dead network. A simple code to do input analysis on a widely broadcast transaction and you are fine to accept 0 confirmations.

Which is fine for a company like bitpay that can have multiple nodes online to test how good the propagation of the TX is and keep rebroadcasting it, but a little site (no offense nahtnam) thats accepting donations this might be a little to much to ask for.

-snip-
Will do. I think ill stick with 0 confirmations and add some sort of mechanism that verifies everything before withdrawing.

This sounds good. Confirm instantly (0 confirmations needed) and lets those receiving the donation wait a little longer (e.g. 6 confirmations). This gives those donating the good feeling instantly and those receiving the donation can probably wait an hour or two before they withdraw their money. Its FREE money I doubt anyone is going to get impatient about it.
hero member
Activity: 504
Merit: 500
January 16, 2015, 03:36:33 AM
#26
You can have double-spending only if :
- the seller use a node server with no others nodes connected
- the buyer use ... the same node server
- the transaction is OK for both party with 0 confirmation

It's impossible.
In real life networking, you have 6-9 nodes to sprend the transaction ...

So its safe for me to accept 0 confirmations?

All reputable businesses will use 1. You don't truly have the coins until at least 1 confirmation.
Don't pull a Mt.Gox and leave yourself open with loose code. Protect yourself.

Uh.... ** Bitpay ** does zero-confirmation transactions. The dubious emphasis on confirmations is part of what kills the appeal of using bitcoin. This is not some scamcoin with a dead network. A simple code to do input analysis on a widely broadcast transaction and you are fine to accept 0 confirmations.
legendary
Activity: 1092
Merit: 1000
nahtnam.com
January 15, 2015, 10:40:47 PM
#25
Its actually more of a donation thing. Im not really selling anything.
What's the point of double spending a donation?

IDK. Maybe the creator of the project wants to forge donations on my site and withdraws?
This would not make any sense. If someone donates to your website then they are not receiving anything of value in return. Therefore it is impossible for you to wait for n confirmations because once you get as many confirmations you are not going to give the person potentially double spending anything of value

No, its a site that allows other people to accept donations in bitcoins.

Nice idea you have .... let us know when the site is ready ... I would like to try it

Will do. I think ill stick with 0 confirmations and add some sort of mechanism that verifies everything before withdrawing.
legendary
Activity: 1232
Merit: 1002
January 15, 2015, 10:02:37 PM
#24
Its actually more of a donation thing. Im not really selling anything.
What's the point of double spending a donation?

IDK. Maybe the creator of the project wants to forge donations on my site and withdraws?
This would not make any sense. If someone donates to your website then they are not receiving anything of value in return. Therefore it is impossible for you to wait for n confirmations because once you get as many confirmations you are not going to give the person potentially double spending anything of value

No, its a site that allows other people to accept donations in bitcoins.

Nice idea you have .... let us know when the site is ready ... I would like to try it
legendary
Activity: 1092
Merit: 1000
nahtnam.com
January 15, 2015, 06:15:14 PM
#23
Its actually more of a donation thing. Im not really selling anything.
What's the point of double spending a donation?

IDK. Maybe the creator of the project wants to forge donations on my site and withdraws?
This would not make any sense. If someone donates to your website then they are not receiving anything of value in return. Therefore it is impossible for you to wait for n confirmations because once you get as many confirmations you are not going to give the person potentially double spending anything of value

No, its a site that allows other people to accept donations in bitcoins.
full member
Activity: 137
Merit: 100
January 15, 2015, 04:25:51 PM
#22
Its actually more of a donation thing. Im not really selling anything.
What's the point of double spending a donation?

IDK. Maybe the creator of the project wants to forge donations on my site and withdraws?
This would not make any sense. If someone donates to your website then they are not receiving anything of value in return. Therefore it is impossible for you to wait for n confirmations because once you get as many confirmations you are not going to give the person potentially double spending anything of value
newbie
Activity: 35
Merit: 0
January 15, 2015, 02:33:04 PM
#21
So as I see, more safely will be use 1 confirmation when using BTC pamyment on sites?
legendary
Activity: 1092
Merit: 1000
nahtnam.com
January 15, 2015, 01:04:31 PM
#20
Its actually more of a donation thing. Im not really selling anything.
What's the point of double spending a donation?

IDK. Maybe the creator of the project wants to forge donations on my site and withdraws?
legendary
Activity: 1512
Merit: 1012
January 15, 2015, 11:50:20 AM
#19
So its safe for me to accept 0 confirmations?

yes if :
- you use a "hardware wallet" ... not a virtual wallet (like blockchain.info or coinbase).
- you're connected to a mobile internet connexion and not the free wifi of the owner.

the 1st point is at minimum 6 nodes to emit the transaction.
the 2nd point is a basic and can view in the "monitor network" on android bitcoin wallet for example ... if you have only 1 node, you have a problem and your connexion can be compromised.
legendary
Activity: 1358
Merit: 1014
January 15, 2015, 11:11:12 AM
#18
I use the blockchain.info site to check for at least 1-2 confirmations.
sr. member
Activity: 420
Merit: 250
January 15, 2015, 09:42:17 AM
#17
Its actually more of a donation thing. Im not really selling anything.
What's the point of double spending a donation?
newbie
Activity: 23
Merit: 0
January 15, 2015, 09:08:59 AM
#16
You can make it as many confirmations as you want (6 is considered safe).

However, since it's online you can 0 confirmations for the user.  The frontend can accept the transaction once it's broadcasted (0 confirmations) while you can hold onto the product for as many confirmations as you'd like.  You can contact the user if the transaction is not legitimate.  Other than that, it's just waiting an hour to ship the product. 

If it's a digital good, you could still wait the hour or so to send the email (or in 10 min after 1 confirmation) to download.
legendary
Activity: 1862
Merit: 1011
Reverse engineer from time to time
January 14, 2015, 05:12:47 PM
#15
I think you should wait for 1, unfortunately. There have been various accidents that can happen because of 0 conf.
copper member
Activity: 1498
Merit: 1528
No I dont escrow anymore.
January 14, 2015, 05:07:15 PM
#14
You can have double-spending only if :
- the seller use a node server with no others nodes connected
- the buyer use ... the same node server
- the transaction is OK for both party with 0 confirmation

It's impossible.
In real life networking, you have 6-9 nodes to sprend the transaction ...

So its safe for me to accept 0 confirmations?

Wair for 1 to be safe.

Meuh6879 is missing some points, but since its for a donation 0 conf are fine.
legendary
Activity: 1137
Merit: 1035
Bitcoin accepted here
January 14, 2015, 07:52:25 AM
#13
You can have double-spending only if :
- the seller use a node server with no others nodes connected
- the buyer use ... the same node server
- the transaction is OK for both party with 0 confirmation

It's impossible.
In real life networking, you have 6-9 nodes to sprend the transaction ...

So its safe for me to accept 0 confirmations?

Wair for 1 to be safe.
hero member
Activity: 568
Merit: 500
Smoke weed everyday!
January 13, 2015, 09:16:35 PM
#12
Its actually more of a donation thing. Im not really selling anything.
If you are accepting donations then it really should not matter if someone double spends a transaction sent to you (nor would they have any reason to do so in the first place).
legendary
Activity: 1092
Merit: 1000
nahtnam.com
January 13, 2015, 07:15:26 PM
#11
if you are not sending out any product or service instantly.. then it doesnt matter.. donations can be accepted anytime.. after all what is the sender needing to wait for after they send... nothing. so confirms or not the donator wont care/notice.

if you want to thank the donater, all you could do is just have a message that says
"it appears someone loves me and sent me a donation. many thanks, i love you back" .. as soon as it appears in the tx pool (unconfirmed)



Thanks.
legendary
Activity: 4410
Merit: 4766
January 13, 2015, 07:14:19 PM
#10
if you are not sending out any product or service instantly.. then it doesnt matter.. donations can be accepted anytime.. after all what is the sender needing to wait for after they send... nothing. so confirms or not the donator wont care/notice.

if you want to thank the donater, all you could do is just have a message that says
"it appears someone loves me and sent me a donation. many thanks, i love you back" .. as soon as it appears in the tx pool (unconfirmed)

legendary
Activity: 1092
Merit: 1001
January 13, 2015, 07:12:57 PM
#9
You can have double-spending only if :
- the seller use a node server with no others nodes connected
- the buyer use ... the same node server
- the transaction is OK for both party with 0 confirmation

It's impossible.
In real life networking, you have 6-9 nodes to sprend the transaction ...

So its safe for me to accept 0 confirmations?

All reputable businesses will use 1. You don't truly have the coins until at least 1 confirmation.
Don't pull a Mt.Gox and leave yourself open with loose code. Protect yourself.
legendary
Activity: 1092
Merit: 1000
nahtnam.com
January 13, 2015, 07:07:51 PM
#8
You can have double-spending only if :
- the seller use a node server with no others nodes connected
- the buyer use ... the same node server
- the transaction is OK for both party with 0 confirmation

It's impossible.
In real life networking, you have 6-9 nodes to sprend the transaction ...

So its safe for me to accept 0 confirmations?
legendary
Activity: 1512
Merit: 1012
January 13, 2015, 07:05:10 PM
#7
You can have double-spending only if :
- the seller use a node server with no others nodes connected
- the buyer use ... the same node server
- the transaction is OK for both party with 0 confirmation

It's impossible.
In real life networking, you have 6-9 nodes to sprend the transaction ...
legendary
Activity: 1092
Merit: 1000
nahtnam.com
January 13, 2015, 07:01:28 PM
#6
Its actually more of a donation thing. Im not really selling anything.
legendary
Activity: 1232
Merit: 1002
January 13, 2015, 08:18:39 AM
#5
What you plan to sell?
As I gamble from time to time on luckyb.it and there I can gamble with unconfirmed amount.

Let's say I have 0.3BTC and I gamble all of them in 1 bet, I get the outcome in a matter of seconds and then I get the BTC in my account unconfirmed and I can bet again and again.... so if they go for 0 confirmation I guess you are safe to do it also... or you can contact them and ask them how they did it Smiley

Also don't be so naive to relay on what mtgox relied when they got "hacked" as it is very strange to me that everyone knew about that thing and only after mtgox publicly complained about it they got "hacked"!

 
full member
Activity: 182
Merit: 100
January 13, 2015, 06:22:09 AM
#4
Hey!

I was wondering what the chances of a double spend is.

I am asking because I am building a website and cant decide between 0 and 1 confirmations.

Is it really that big of a risk if I just set it to 1 confirmation?

Thanks.

1 confirmation is usually good enough. However to be safe for sure you can keep it to 2 confirmations.

Thats what most of the sites do .
copper member
Activity: 1498
Merit: 1528
No I dont escrow anymore.
January 13, 2015, 06:17:51 AM
#3
Hey!

I was wondering what the chances of a double spend is.

I am asking because I am building a website and cant decide between 0 and 1 confirmations.

Is it really that big of a risk if I just set it to 1 confirmation?

Thanks.

0 confirmation double spend is relative easy. To analyse the likelihood of a double spend you would have to analyse the incoming transactions. How big is the transaction (byte), how high is the priority, is a fee paid, is the fee high enough considering the priority/size, is one of the inputs unconfirmed, etc.
Unless you expect your customers to go elsewhere because they have to wait for a few minutes I would go with 1 confirmation.  To reverse a transaction that already has one confirmation is very difficult and would require a reorganisation of the blocks.
hero member
Activity: 568
Merit: 500
Smoke weed everyday!
January 13, 2015, 01:34:53 AM
#2
Hey!

I was wondering what the chances of a double spend is.

I am asking because I am building a website and cant decide between 0 and 1 confirmations.

Is it really that big of a risk if I just set it to 1 confirmation?

Thanks.
It really depends on what exactly you are selling on your website. If you are selling low value items and don't generally sell more then a few hundred dollars every 10 minutes or so then you should probably be fine with a 0/unconfirmed transaction as the risk of a double spend is low because it would probably cost more to attempt the double spend then the value of what could potentially be stolen from you.

If the value of what you are selling is much more, in the thousands or tens of thousands of dollars then you should wait for at least one confirmation as at this rate the cost of attempting a double spend would likely cost less then then value of what an attacker would be trying to steal
legendary
Activity: 1092
Merit: 1000
nahtnam.com
January 13, 2015, 12:38:21 AM
#1
Hey!

I was wondering what the chances of a double spend is.

I am asking because I am building a website and cant decide between 0 and 1 confirmations.

Is it really that big of a risk if I just set it to 1 confirmation?

Thanks.
Jump to: