Isn't it "strange" to use compromised private key in 2-of-3 msig?

amaclin

legendary

Activity: 1260

Merit: 1019

Quote from: JPage on August 14, 2016, 09:22:43 AM

I've seen your work. I think you are able to do far more than you've done. I hope you will continue to do it.

Ein Teil fon jener Kraft,
Die staets das Boese will
Und staets das Gute schafft

JPage

full member

Activity: 399

Merit: 105

Quote from: amaclin on August 13, 2016, 11:43:49 AM

Quote from: JPage on August 13, 2016, 11:01:14 AM

Not sure if that is what you are actually seeing.

I am a honest person. I only want to notify. Grin

I am not interested in any investigation for free.
Anyway, this is not my problem. I did everything what I was able to do.

I've seen your work. I think you are able to do far more than you've done. I hope you will continue to do it.

amaclin

legendary

Activity: 1260

Merit: 1019

Quote from: JPage on August 13, 2016, 11:01:14 AM

Not sure if that is what you are actually seeing.

I am a honest person. I only want to notify. Grin

I am not interested in any investigation for free.
Anyway, this is not my problem. I did everything what I was able to do.

JPage

full member

Activity: 399

Merit: 105

Quote from: amaclin on August 12, 2016, 10:51:13 AM

What is "Omni"?

This is Omni - http://www.omnilayer.org/
For a long time, they've been encoding their data payloads within the MultiSig schemes. They may have moved fully to OP_Return now, but prior to that, they used schemes to carry data in the Multisig addresses. I think that might produce some weird looking stuff there. Not sure if that is what you are actually seeing.

bitdumper

sr. member

Activity: 266

Merit: 250

One world One currency, Bitcoin.

yes its strainge but it make no sence to me why someone is using this method because more than 2months no dev touched the transaction or signing part so who the hell is this man.and btw i think thats not compromised thats like somebody is trying to encryped it

amaclin

legendary

Activity: 1260

Merit: 1019

Quote from: JPage on August 12, 2016, 09:48:30 AM

While I am not sure, but I believe you'd be on a head start to look at Omni. Those guys are using multisig to carry data in some kinds of their transactions. I think they intentionally 'forfeit' one key to operate as a data carrier while the other keys operate normally as keys.

It is very strange to use the private key "1" as data carrier. It does not carry any sense.
OK, it can be a "marker" of a new sequence of something.
In fact, a lot of companies today use multisig addresses. Bitfinex for example

What is "Omni"?

JPage

full member

Activity: 399

Merit: 105

Quote from: amaclin on August 04, 2016, 02:07:00 PM

Somebody is using 2-of-3 msig addresses derived from two secret and one compromised private key.

While I am not sure, but I believe you'd be on a head start to look at Omni. Those guys are using multisig to carry data in some kinds of their transactions. I think they intentionally 'forfeit' one key to operate as a data carrier while the other keys operate normally as keys.

amaclin

legendary

Activity: 1260

Merit: 1019

Quote from: achow101 on August 04, 2016, 03:15:30 PM

Does this person happen to be yourself?

no

Quote

Also, how is that private key for that public key compromised?

privkey=1
pubkey=0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798
address=1BgGZ9tcN4rm9KBzDn7KprQz87SZ26SAMH

achow101

staff

Activity: 3458

Merit: 6793

Just writing some code

Does this person happen to be yourself?

Also, how is that private key for that public key compromised?

amaclin

legendary

Activity: 1260

Merit: 1019

I see a lot of "strange" transactions nowadays.
Somebody is using 2-of-3 msig addresses derived from two secret and one compromised private key.
I think I should try to find the owner of these addresses and tell him that his engine for creating msig is broken

3GPFCxz5D5GA4AHUUfRv5hrR7DVVwapvZv
52
21 03192717b4dd834b93c3b4e932a6fba564698fdcfa7cb67db2192e1bcbb1b9424a
21 03a74dab97620dc3b9275195e4d046f58568326b88ab819f593188d14e12adaa27
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3QSaUCsGDLYNnYVGDuLAKURKYRrXPnWPt5
52
21 034df94ab1b44a164237c250aa639ef546ef272e4f1dec345cd2cc582eaa4f1a68
21 02989b143a15f2745403952f5123690a5974e5f8bd5c0241812ebefcad8d8c40a8
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3Dz55pe5Kc5JusPVhRmnNtBS9HQHXbqZjb
52
21 0307f6794bce9e95153bdad770a39fc2cf07d25279665deb7d7f4eece801dab73b
21 0254362c93e0688c719ea342f3a9686a12b8e34289205b25ed4858bfdf770a6aae
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3GPFCxz5D5GA4AHUUfRv5hrR7DVVwapvZv
52
21 03192717b4dd834b93c3b4e932a6fba564698fdcfa7cb67db2192e1bcbb1b9424a
21 03a74dab97620dc3b9275195e4d046f58568326b88ab819f593188d14e12adaa27
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3JVA7vwJuTBsP6Kd5paKB2VWVHHpeeaBBh
52
21 02ec6d2f4769ee380303f6c064ae885cfba4103ab39632c8fd4d6a25e722f5fead
21 03cfbeb461579dc0c0834d799169869e90a510b2ee3590be6c9920e8e218eccb34
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3KjdCK4ggkFJkTdCaxptfLGZN2Y2DjSwW3
52
21 03bc9842c3c5d1c53afa34044c2e37a8be233e55971c1d65ae1cdbc41b32cd50ac
21 03df78b762d6b9fa44bbf0275b5b1e64e102db5e54dce9a5170f3c471759fe7c5a
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3QWH1Ky3Q7qTonT4i2pbceFknqdgd9P5mG
52
21 03f85f7f27ad1fe89f973c6c3a8e5fd40423dffe6491e77faacd58e579974db5cf
21 022a548fb5d03f7f05eb55363db25b97515815151a4f6a2636ac925bf7e3870f7d
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

349BEsPStjV2x2F2erqf5n8RcEBkFtAhA7
52
21 0249128fa86817f5289d5072d137ddc04073d3e2b60482f14484826f82f458c168
21 029ddefa9a50532b5f23f44bdc9f2847127a3480869358ccbf521e58f8f71320a7
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3F5zE8vpe1xmiWURUbmz7gJX4UTxtNZuK5
52
21 02a229d95b42b4cac7778e34ac142fbce353d9b491515cbf25a9e09465b0496a7b
21 035e8f27aee921253a29bcf098146b19081bfb8f60f0cdf9730406f9c8d6c23bbb
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3QnBYy3mHiziL2wF9wjarQv9CRXk6ig7A6
52
21 03780e02e0d147241f3a3efd6a679229c77e6ae99c4107747f0b1969fdc7fd59c9
21 02d3b38c2f6d32d3a77a0e79860f32b61f819867672da1efbb5f9418bd640c8edc
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

32UH5Df5EyZ5aRmK1uKJfLqSDEmDFipG7R
52
21 03c32af785498e63b068d3b44931e7ddab80de02277740f4cfae3d562668cd4e8c
21 023a28db856e83de34d6e0fa658526ed705940dffb6d78046b390ce02c17a30664
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3EGSp5xyZAJBiVjwDJfMXfjd4BZZtR8VY3
52
21 02e1eabce31543afdf4d3a1abaf8f8f4f97c5a1d277da998bb5ce710270c307ef0
21 03382011a573c04ebe3af49e2c92886a77bffb8cddcc39d4bc11fd2d58b7b6f7f3
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3KtVAdQcTpCBhELVDkdENiApGsMXeRZ5sk
52
21 03ea0f8d665b167cdf641a17a8cbbee4d13056e406db28b9ffa730b60da0cd651b
21 0373fad896c749aec3fab28e82b47fde1dd7d4976cb5538ece88ac80bb6956f9c6
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3JMt2rCfjxQQFVRsbi1JysfHS3BU5cJSmZ
52
21 0270335cfefb2bccfe70222d73c3049bab4c7c80f1d43a02d6f0bf1c31b45916ff
21 0383816f8cac4bee3eee0ffc0cc55812cf8c4845943530d57767fa7f6c1a4e3b28
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

37VofotsX2i8ymkJy93D6ZKffKVcsVEAbT
52
21 02096e330ec248fff0c3230907c0a5ea61f211c26ee9fbb1affa91b079d4773f3d
21 02cca54bae0f54202419793665b5a39f69cacf0fc18e5433ae21dd9f0335a9b717
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3Dop9rkTutToPpkjSmis642zzFJFarH5xv
52
21 02ad2ae4410e4206dfaf3e3ff2ebc38f4beb4ca96a6696535b6324ad8ed5b56ac2
21 03a4e7df7e9a5a328483b110d420bb31b65a5ebee741a42d84d1ca1a8e78a98228
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3FXh4oLEZpxQtKUiC7Ho25LT4H8xpaThKC
52
21 02bbb5a771327d9e164f413f6ee851c585010f64dbd6ce7c814119da3108828c1a
21 029533f0e370cc45fb232adedd1d0fcfc4fab246893a8c7d12356f85a1b8b1536f
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3NRsYdUZfZsuECagyQfUY2BKstZpur1XVw
52
21 0263baeff1653cab43908b689791c04a4f91b18e6d5736373e383ea15165673222
21 037be3f37c572d51796f9f826a25d9943e657a74fb1bc34889865ad3d596118550
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

3BPWb4qABfWEArUnnpRBwvo9vnNftX5kny
52
21 03fd6b520d15c2ab0fd853a2eecfa1048d1470548f1e2c953c400739debfb90e19
21 03e16d7a8fc40610eb2ad79b2207d55d132f5fc30b330f91987cf57c2cee061ac0
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

35F6MMLpjc1SZWYUsHbWevb2aVUXCyYQ1n
52
21 03305f86eca922332a317ee9b137d70e18165fb783e1b748f5053f29510a60084f
21 023aa21d27d3adebab272bbc22617df62288ba6ef6a3fe606e1e8aa952bd06179c
21 0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798 53 ae

Topic: Isn't it "strange" to use compromised private key in 2-of-3 msig? (Read 2383 times)