Topic: Network Attack on XVG / VERGE - page 46. (Read 29513 times)

Okay guys, as the shit keep hitting the fan harder and harder here I need to take a few steps to actually end that drama for me:

Suprnova will not reopen any of it's XVG/Verge pools for mining whatsoever. You can mine it freely on any different pool if you like. Withdrawals are possible of course.

The background is that the "fix" promoted by the devs simply won't fix the problem. It will just make the timeframe smaller in which the blocks can be mined / spoofed and the attack
will still work, just be a bit slower.

Also the over 20 Million XVG which were instamined by the attacker won't be blacklisted, reverted, filtered or rolled-back in anyway according to the verge-dev, so in my opinion you all (the miners and investors) got betrayed about that 20 M coins .. For some it might be only a few coins, for some it might be a lot.. For some this might all be drama for them, I see you there of course..

Just to clarify a few last things:

1. The fix won't fix it. The problem is not alone the drifttime, but also the algo variance. You have to make sure that not X blocks get mined on one algo.
    Myriad and digibyte had the same issues - they fixed it.

    Here's a possible fix for the issues: https://github.com/digibyte/digibyte/pull/15

    Please DON'T just merge the code like you see it in that commit, you need to actually find the right places in your code and merge it. It's a slightly different codebase, so it won't work
    with just copy & paste, you actually have to understand and rewrite it to fit to your needs.

2. It's possible to blacklist certain addresses within the blockchain. So if you know on which addresses hacked funds reside, you can simply "blacklist" them directly in the codebase of the coin.
    For example you know that the attacker has used address "123abc123acb123abc" as the root for his hacked funds. You can now - at anytime - update your wallet code and just say
    "orphan all transactions with the root address "123abc123acb123abc". So even if the hacker moves the funds NOW or in one year, it won't happen as you've blacklisted the originating address.
    This was done previously also, not on myriad but on another coin - I can also find that commit for you.

3. I was getting blamed for "judging" too early and posting this info publicly on bitcointalk. I've mixed feelings about this.. Yes, I could have spoken silently to the devs at first and tell them "hey,
    something weird is going on on your blockchain" - however in the same time my miners were asking why the pool wasn't finding blocks and I already saw the first tweets about "skimming" and    
    stuff.. So.. What to do ? Keep the info about the hacker silent with the devs and wait 3-4 days for a (non-working) fix and get my reputation killed totally or just go for a public post about it
    and shutdown the pools ? I know, it's a difficult decision and my decision might have been wrong, but hey, I'm neither the attacker nor am I the guy responsible for the coin..  Also I was a bit
    astonished that I was actually the first to report the problem.. I was expecting devs watch their coin closely and come up with fixes upfront.. or at least know about what happend.

    In my opinion the optimal handling for this problem probably would have been something like this:

   1. Contact pools and exchanges to shutdown mining and trading
   1a. Tweet/Inform miners about the problem and tell them it's been worked on but takes it's time.
   2. Talk about possible problems and mitigation practices with devs/exchanges and pools.. Create a "conference room" for this for example and invite all necessary people there.
   3. Find a resolution, roll back the chain or at least filter the malicious coins (as someone as a (big) advantage here which he shouldn't, or?? So some others have a big disadvantage, or not ?)
   4. Go back online with the resolution and back to mining.

It's a pathological if it's true situation with your banks in NL. I dont see any of these things, in others EU banks, as I was, never ddosed, sometimes some conservative works, and that's it. It's really bad there I see.
And this attack just dusted a cover on verge being a shitcoin, true shitcoin, without even working properly without exploits blockchain, pump and dumpers dream

I have been out of this topic as pool operator of NLPool.NL because as pool operator you have to be neutral with your opinion i think. That's something up to the miners, not us.

However, this argument you make here is not making any sense. My bank, and also many more here in this country get D-Dossed multiple times a year, and with that their nice I-Phone app breaks, android app breaks, website down, no pin transactions etc. Also, Skimming of bankcards, creditcards .... it is day to day practice here in the Netherlands. So i don't see how my bank is any better then a xvg-coin in times of difficulty. The argument that the banking system is more secure is also not valid... you and i know it isn't.... it's far worse. If you talk about millions of coins now extra in circulation, that still worry's me less then the amount of coins the ECB printed in a minute.

So i actually do believe that such partnership *can* be possible. I am more worried about the EU stance against crypto then over this thing.
Perhaps this hacker who did this job can solicit at the ECB... he sure as hell knows how to print money from thin air, so he can just continue his job there without anyone caring or bothering.  

So, i left our pool open for XVG during last days. VergeDEV was helpful and communicating and they still are.

So anyone looking for a pool to mine XVG ( Blake / Lyra2V2 or X17 ) , you are welcome @ NLPOOL ( www.nlpool.nl )

And for the other arguments of fellow pool's losing 12.8K of money .... Sorry but is all in the game. If you do XXX's TH/s of traffic and make lot's of money a day, just make a reservation for times it goes bad because we all have our good and bad days in life.

“ Speculation :that partnership gonna be very probably with German Bank and they will release xvg debit cards. Imagine Verge chain being attacked in future, how you will pay with such card. Useless. And I'm not even talking about that when I was in team dev said xvg will NEVER partnership with bank, ever. Because it is anonymous, decentralized currency.“

Hey. Thx for reply.
Where in my post did I say, that partnership is not possible ?
Where in my post did I say the banking system is more secure ? (actually it is definitely more secure then xvg blockchain )
Because I did not.
I´m just saying what main dev said many times, that xvg won´t coop with any bank ever.But I guess he just changed his mind. As he often does, w/e.

GL

I have been out of this topic as pool operator of NLPool.NL because as pool operator you have to be neutral with your opinion i think. That's something up to the miners, not us.

However, this argument you make here is not making any sense. My bank, and also many more here in this country get D-Dossed multiple times a year, and with that their nice I-Phone app breaks, android app breaks, website down, no pin transactions etc. Also, Skimming of bankcards, creditcards .... it is day to day practice here in the Netherlands. So i don't see how my bank is any better then a xvg-coin in times of difficulty. The argument that the banking system is more secure is also not valid... you and i know it isn't.... it's far worse. If you talk about millions of coins now extra in circulation, that still worry's me less then the amount of coins the ECB printed in a minute.

So i actually do believe that such partnership *can* be possible. I am more worried about the EU stance against crypto then over this thing.
Perhaps this hacker who did this job can solicit at the ECB... he sure as hell knows how to print money from thin air, so he can just continue his job there without anyone caring or bothering.  

So, i left our pool open for XVG during last days. VergeDEV was helpful and communicating and they still are.

So anyone looking for a pool to mine XVG ( Blake / Lyra2V2 or X17 ) , you are welcome @ NLPOOL ( www.nlpool.nl )

And for the other arguments of fellow pool's losing 12.8K of money .... Sorry but is all in the game. If you do XXX's TH/s of traffic and make lot's of money a day, just make a reservation for times it goes bad because we all have our good and bad days in life.

“ Speculation :that partnership gonna be very probably with German Bank and they will release xvg debit cards. Imagine Verge chain being attacked in future, how you will pay with such card. Useless. And I'm not even talking about that when I was in team dev said xvg will NEVER partnership with bank, ever. Because it is anonymous, decentralized currency.“

Little chronological  summary.

-Undelivered half of June 2017 roadmap
-Wraith (stealth adressesing) hype for half year as game changing tech, even with fake countdown website
-Coinpouchapp 134millions xvg hack
-McAfee paid tweet pump
-official xvg Twitter account and main dev Twitter account hacked
- announcement of mysterious "deal of century" partnership, collected 75millions xvg, 60millions from Tokenpay ICO where main XVG dev is team member
-successful 51% attack on xvg blockchain, lost tens of millions xvg
-unintentionally hardforked

WHAT A TIMELINE.
Solid project.

Probably be the first and last time I post here, but hasn't really been mentioned much after reading all 40 something pages.

You realize the ONLY reason you guys are talking about Verge is because some kid named Peter from Austin, TX (allegedly) who goes by the name of @XVGWhaleReal, actually posted screenshots (this was Christmas Eve, Dec. 2017) of his text conversation with McAfee, discussing his paying $100k for McAfee to tweet about Verge.

Then when the MC of Verge blew up bigger than they could have imagined, McAfee got enraged and demanded more money, or else he was going to destroy them.  (it wasn't those actual words, but it was still some grandiose shit indicative of megalomania - and funny to boot!)

Peter claimed his account was hacked, and then started this one: https://twitter.com/XVGWhaleReal/

Explained better than I can, here:  https://www.youtube.com/watch?v=g-9ZLQpZwZg

BIGGEST DEAL IN CRYPTO MOTHERFUCKERS!

Probably be the first and last time I post here, but hasn't really been mentioned much after reading all 40 something pages.

You realize the ONLY reason you guys are talking about Verge is because some kid named Peter from Austin, TX (allegedly) who goes by the name of @XVGWhaleReal, actually posted screenshots (this was Christmas Eve, Dec. 2017) of his text conversation with McAfee, discussing his paying $100k for McAfee to tweet about Verge.

Then when the MC of Verge blew up bigger than they could have imagined, McAfee got enraged and demanded more money, or else he was going to destroy them.  (it wasn't those actual words, but it was still some grandiose shit indicative of megalomania - and funny to boot!)

Peter claimed his account was hacked, and then started this one: https://twitter.com/XVGWhaleReal/

Explained better than I can, here:  https://www.youtube.com/watch?v=g-9ZLQpZwZg

BIGGEST DEAL IN CRYPTO MOTHERFUCKERS!