Author

Topic: | Nxt | Blockchain Platform | Proof of Stake | Official - page 383. (Read 941260 times)

hero member
Activity: 574
Merit: 500
Also, you can link the description of the clone attack from the Nxt Glossary >>>> https://wiki.nxtcrypto.org/wiki/Glossary

Based on CfB's posts...

****

Clone Attack

Clone Attack is a scheme for stealing NXTs through the use of a Nxt Clone and can only be successful if you use the same passphrase on Nxt and on a Nxt Clone that uses the same transaction format. Very Important: Do not use your Nxt Account passphrase for anything but your Nxt account. The Clone Attack is a very simple attack so could become common if people are reluctant to generate new Strong Passphrases and reuse their Nxt Passphrase in any Clone. It is described below using a fictitious clone named NEX:

1. You use the same account passphrase in NEX as you have in Nxt.

2. The attacker sends you an amount, say 10000NEX, perhaps at the launch of the Clone, as a giveaway or as part of day to day transactions.

3. Later, the attacker offers to buy 5000NEX from you for 0.01 BTC (this will always be a generous offer for the Clone).

4. The Attacker sends you the Bitcoins in advance and you send him 5000NEX.

5. The attacker then broadcasts the NEX transaction you sent them onto Nxt network, .

Result: 5000NXT is removed from your Nxt account and you only received a small percentage of its value. Again, very important: Do not use your Nxt Account passphrase for anything but your Nxt Account. Anyone can broadcast transactions from a Clone into Nxt and vice versa, if the clone doesn't change the transaction format used in Nxt. So anyone who uses the same Account Passphrase in both can lose NXTs.

The transaction signed by the client includes a timestamp (seconds since genesis block), and as all clones so far have a timestamp more than one day in the future compared to Nxt, why would such a transaction if rebroadcast into the Nxt network be accepted?

Using the same pass phrase is playing with fire. I just don't understand why that attack would work.

You can resurrect the thread here : https://nxtforum.org/alternate-cryptocurrencies/nxt-clones/

The attack stuff starts on page 2 I think. Two Nxters were trying to prove it was possible but I think they both got busy  Grin
legendary
Activity: 1680
Merit: 1001
CEO Bitpanda.com
Also, you can link the description of the clone attack from the Nxt Glossary >>>> https://wiki.nxtcrypto.org/wiki/Glossary

Based on CfB's posts...

****

Clone Attack

Clone Attack is a scheme for stealing NXTs through the use of a Nxt Clone and can only be successful if you use the same passphrase on Nxt and on a Nxt Clone that uses the same transaction format. Very Important: Do not use your Nxt Account passphrase for anything but your Nxt account. The Clone Attack is a very simple attack so could become common if people are reluctant to generate new Strong Passphrases and reuse their Nxt Passphrase in any Clone. It is described below using a fictitious clone named NEX:

1. You use the same account passphrase in NEX as you have in Nxt.

2. The attacker sends you an amount, say 10000NEX, perhaps at the launch of the Clone, as a giveaway or as part of day to day transactions.

3. Later, the attacker offers to buy 5000NEX from you for 0.01 BTC (this will always be a generous offer for the Clone).

4. The Attacker sends you the Bitcoins in advance and you send him 5000NEX.

5. The attacker then broadcasts the NEX transaction you sent them onto Nxt network, .

Result: 5000NXT is removed from your Nxt account and you only received a small percentage of its value. Again, very important: Do not use your Nxt Account passphrase for anything but your Nxt Account. Anyone can broadcast transactions from a Clone into Nxt and vice versa, if the clone doesn't change the transaction format used in Nxt. So anyone who uses the same Account Passphrase in both can lose NXTs.

The transaction signed by the client includes a timestamp (seconds since genesis block), and as all clones so far have a timestamp more than one day in the future compared to Nxt, why would such a transaction if rebroadcast into the Nxt network be accepted?

Using the same pass phrase is playing with fire. I just don't understand why that attack would work.
because both jl and CFB said it
hero member
Activity: 574
Merit: 500
Mintpal adding Nxt!

I know I know, not this again  Grin Here is the short history so everyone is up to speed.

A few months ago, Nxt won a vote to get added to Mintpal with some people using donating BTC for votes. Mintpal tried and for whatever reason, couldn't add Nxt so they refunded the money. So nice guys  Grin and that's where it ended.


Something happened today that got their attention (  Cheesy  ) and they tweeted Fatih87SK and Berzerk asking if they wanted Nxt to be listed. But on the condition a 1 BTC payment to cover implementation costs. Naturally, this annoyed some and others didn't mind.

It was too contentious for community funding so the 1 BTC was crowd sourced from the pockets of Nxters who believe it is a good idea. The Nxt is being exchanged as I type and will be sent very soon. I saw in all the discussion they could have Nxt set up in two days so we could have it by Sunday.


Full thread and keep up with the story here >>>> https://nxtforum.org/trading-exchanges/mintpal-and-nxt/100


Two new exchanges in less than a week, not bad going  Grin
sr. member
Activity: 378
Merit: 250
Also, you can link the description of the clone attack from the Nxt Glossary >>>> https://wiki.nxtcrypto.org/wiki/Glossary

Based on CfB's posts...

****

Clone Attack

Clone Attack is a scheme for stealing NXTs through the use of a Nxt Clone and can only be successful if you use the same passphrase on Nxt and on a Nxt Clone that uses the same transaction format. Very Important: Do not use your Nxt Account passphrase for anything but your Nxt account. The Clone Attack is a very simple attack so could become common if people are reluctant to generate new Strong Passphrases and reuse their Nxt Passphrase in any Clone. It is described below using a fictitious clone named NEX:

1. You use the same account passphrase in NEX as you have in Nxt.

2. The attacker sends you an amount, say 10000NEX, perhaps at the launch of the Clone, as a giveaway or as part of day to day transactions.

3. Later, the attacker offers to buy 5000NEX from you for 0.01 BTC (this will always be a generous offer for the Clone).

4. The Attacker sends you the Bitcoins in advance and you send him 5000NEX.

5. The attacker then broadcasts the NEX transaction you sent them onto Nxt network, .

Result: 5000NXT is removed from your Nxt account and you only received a small percentage of its value. Again, very important: Do not use your Nxt Account passphrase for anything but your Nxt Account. Anyone can broadcast transactions from a Clone into Nxt and vice versa, if the clone doesn't change the transaction format used in Nxt. So anyone who uses the same Account Passphrase in both can lose NXTs.

The transaction signed by the client includes a timestamp (seconds since genesis block), and as all clones so far have a timestamp more than one day in the future compared to Nxt, why would such a transaction if rebroadcast into the Nxt network be accepted?

Using the same pass phrase is playing with fire. I just don't understand why that attack would work.
hero member
Activity: 617
Merit: 528

LOTS OF TEXT


Thanks, I'll bookmark that. Added it to my nice big & red ATTENTION post.

Cheers.
sr. member
Activity: 364
Merit: 250
☕ NXT-4BTE-8Y4K-CDS2-6TB82
sr. member
Activity: 364
Merit: 250
☕ NXT-4BTE-8Y4K-CDS2-6TB82
Market Cap continues to rise.

100 millions imminent.
hero member
Activity: 574
Merit: 500
I have a quick question. If one were to use the same address/seed on the nxt network and on a fork (some NXT clone) could this in someway be abused? Asking because I recall reading something like this but i can't find it.

Yes! If the fork uses the same address format and protocol (NXTquant and number variables).

Just use different passwords for all forks, then you are good!

Asking you this because NTX:

https://bitcointalksearch.org/topic/annntxfirst-anon-coin-based-nxtbig-bounties-trading-on-bter-now-625668

Is telling people its OK to use their usual NXT account for the fork they planning to launch. Is this a fishing attempt (so to speak?) See the faq at 2/3 of the OP announcement.



Maybe he doesn't know anybetter or the prefix really makes broadcasting NTX transactions in NXT impossible.

Just don't risk it and make a new account Wink

Damn. I just, once in my life, wanted to yell SCAM in big red letters. Guess I'll just call them out on the issue instead Smiley Thanks.

There are plenty of threads on this board where you can yell scam and be 90% right Wink


I yelled 'ATTENTION' in HUGE red letters. Sort of satisfactory.

On a sidenote. I bought some NXT a very long time ago but the wallet back then sucked on so many different levels that I turned to dgex to sell it off at 3k satoshi. Dgex back then sucked at so many levels also that I turned my back to all things related to NXT and vowed to never return. Since I'm in the process of securing my NEM stake through the AE I was more or less forced to take that back today. This Nxtra wallet does in no way resemble what I went through back then. Its all slick as hell and it can be piloted by human beings. Go forth and multiply.

Hugs,

Mrrr

Also, you can link the description of the clone attack from the Nxt Glossary >>>> https://wiki.nxtcrypto.org/wiki/Glossary

Based on CfB's posts...

****

Clone Attack

Clone Attack is a scheme for stealing NXTs through the use of a Nxt Clone and can only be successful if you use the same passphrase on Nxt and on a Nxt Clone that uses the same transaction format. Very Important: Do not use your Nxt Account passphrase for anything but your Nxt account. The Clone Attack is a very simple attack so could become common if people are reluctant to generate new Strong Passphrases and reuse their Nxt Passphrase in any Clone. It is described below using a fictitious clone named NEX:

1. You use the same account passphrase in NEX as you have in Nxt.

2. The attacker sends you an amount, say 10000NEX, perhaps at the launch of the Clone, as a giveaway or as part of day to day transactions.

3. Later, the attacker offers to buy 5000NEX from you for 0.01 BTC (this will always be a generous offer for the Clone).

4. The Attacker sends you the Bitcoins in advance and you send him 5000NEX.

5. The attacker then broadcasts the NEX transaction you sent them onto Nxt network, .

Result: 5000NXT is removed from your Nxt account and you only received a small percentage of its value. Again, very important: Do not use your Nxt Account passphrase for anything but your Nxt Account. Anyone can broadcast transactions from a Clone into Nxt and vice versa, if the clone doesn't change the transaction format used in Nxt. So anyone who uses the same Account Passphrase in both can lose NXTs.

****
hero member
Activity: 617
Merit: 528
I have a quick question. If one were to use the same address/seed on the nxt network and on a fork (some NXT clone) could this in someway be abused? Asking because I recall reading something like this but i can't find it.

Yes! If the fork uses the same address format and protocol (NXTquant and number variables).

Just use different passwords for all forks, then you are good!

Asking you this because NTX:

https://bitcointalksearch.org/topic/annntxfirst-anon-coin-based-nxtbig-bounties-trading-on-bter-now-625668

Is telling people its OK to use their usual NXT account for the fork they planning to launch. Is this a fishing attempt (so to speak?) See the faq at 2/3 of the OP announcement.



Maybe he doesn't know anybetter or the prefix really makes broadcasting NTX transactions in NXT impossible.

Just don't risk it and make a new account Wink

Damn. I just, once in my life, wanted to yell SCAM in big red letters. Guess I'll just call them out on the issue instead Smiley Thanks.

There are plenty of threads on this board where you can yell scam and be 90% right Wink


I yelled 'ATTENTION' in HUGE red letters. Sort of satisfactory.

On a sidenote. I bought some NXT a very long time ago but the wallet back then sucked on so many different levels that I turned to dgex to sell it off at 3k satoshi. Dgex back then sucked at so many levels also that I turned my back to all things related to NXT and vowed to never return. Since I'm in the process of securing my NEM stake through the AE I was more or less forced to take that back today. This Nxtra wallet does in no way resemble what I went through back then. Its all slick as hell and it can be piloted by human beings. Go forth and multiply.

Hugs,

Mrrr
legendary
Activity: 1680
Merit: 1001
CEO Bitpanda.com
Can someone link me the new images of the NXT client wallet.. Saw it a few pages back but lost it.

What wallet do you mean? http://nxtra.org/nxt-wallet/
legendary
Activity: 1146
Merit: 1000
Can someone link me the new images of the NXT client wallet.. Saw it a few pages back but lost it.
legendary
Activity: 1680
Merit: 1001
CEO Bitpanda.com
I have a quick question. If one were to use the same address/seed on the nxt network and on a fork (some NXT clone) could this in someway be abused? Asking because I recall reading something like this but i can't find it.

Yes! If the fork uses the same address format and protocol (NXTquant and number variables).

Just use different passwords for all forks, then you are good!

Asking you this because NTX:

https://bitcointalksearch.org/topic/annntxfirst-anon-coin-based-nxtbig-bounties-trading-on-bter-now-625668

Is telling people its OK to use their usual NXT account for the fork they planning to launch. Is this a fishing attempt (so to speak?) See the faq at 2/3 of the OP announcement.



Maybe he doesn't know anybetter or the prefix really makes broadcasting NTX transactions in NXT impossible.

Just don't risk it and make a new account Wink

Damn. I just, once in my life, wanted to yell SCAM in big red letters. Guess I'll just call them out on the issue instead Smiley Thanks.

There are plenty of threads on this board where you can yell scam and be 90% right Wink
hero member
Activity: 617
Merit: 528
I have a quick question. If one were to use the same address/seed on the nxt network and on a fork (some NXT clone) could this in someway be abused? Asking because I recall reading something like this but i can't find it.

Yes! If the fork uses the same address format and protocol (NXTquant and number variables).

Just use different passwords for all forks, then you are good!

Asking you this because NTX:

https://bitcointalksearch.org/topic/annntxfirst-anon-coin-based-nxtbig-bounties-trading-on-bter-now-625668

Is telling people its OK to use their usual NXT account for the fork they planning to launch. Is this a fishing attempt (so to speak?) See the faq at 2/3 of the OP announcement.



Maybe he doesn't know anybetter or the prefix really makes broadcasting NTX transactions in NXT impossible.

Just don't risk it and make a new account Wink

Damn. I just, once in my life, wanted to yell SCAM in big red letters. Guess I'll just call them out on the issue instead Smiley Thanks.
legendary
Activity: 1680
Merit: 1001
CEO Bitpanda.com
I have a quick question. If one were to use the same address/seed on the nxt network and on a fork (some NXT clone) could this in someway be abused? Asking because I recall reading something like this but i can't find it.

Yes! If the fork uses the same address format and protocol (NXTquant and number variables).

Just use different passwords for all forks, then you are good!

Asking you this because NTX:

https://bitcointalksearch.org/topic/annntxfirst-anon-coin-based-nxtbig-bounties-trading-on-bter-now-625668

Is telling people its OK to use their usual NXT account for the fork they planning to launch. Is this a fishing attempt (so to speak?) See the faq at 2/3 of the OP announcement.



Maybe he doesn't know anybetter or the prefix really makes broadcasting NTX transactions in NXT impossible.

Just don't risk it and make a new account Wink
hero member
Activity: 617
Merit: 528
I have a quick question. If one were to use the same address/seed on the nxt network and on a fork (some NXT clone) could this in someway be abused? Asking because I recall reading something like this but i can't find it.

Yes! If the fork uses the same address format and protocol (NXTquant and number variables).

Just use different passwords for all forks, then you are good!

Asking you this because NTX:

https://bitcointalksearch.org/topic/annntxfirst-anon-coin-based-nxtbig-bounties-trading-on-bter-now-625668

Is telling people its OK to use their usual NXT account for the fork they planning to launch. Is this a fishing attempt (so to speak?) See the faq at 2/3 of the OP announcement.

legendary
Activity: 1680
Merit: 1001
CEO Bitpanda.com
I have a quick question. If one were to use the same address/seed on the nxt network and on a fork (some NXT clone) could this in someway be abused? Asking because I recall reading something like this but i can't find it.

Yes! If the fork uses the same address format and protocol (NXTquant and number variables).

Just use different passwords for all forks, then you are good!
hero member
Activity: 617
Merit: 528
I have a quick question. If one were to use the same address/seed on the nxt network and on a fork (some NXT clone) could this in someway be abused? Asking because I recall reading something like this but i can't find it.
Jump to: