elective-stereophonic
elective-stereophonic
Bug report: severe ddos attack and unfair forging
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Nxt Client: Nxt 1.11.15

Pages: [1] 2 3 ... 13  All

Author Topic: Bug report: severe ddos attack and unfair forging  (Read 28842 times)

harmony666

  • Jr. Member
  • **
  • Karma: +10/-5
  • Offline Offline
  • Posts: 61
    • View Profile
Bug report: severe ddos attack and unfair forging
« on: April 01, 2014, 01:51:38 pm »

Removed temporarily until fixed, then i will discole it fully in this thread.
otherwise it could be still exploitable in the wild.
i have sent the original bug report to the devs and admins.
« Last Edit: April 02, 2014, 02:53:21 pm by farl4bit, Reason: Corrected capitalization title »
Logged
please feel free to support me: my nxt account is 3829444439138730512

Fatih87SK

  • Hero Member
  • *****
  • Karma: +127/-36
  • Offline Offline
  • Posts: 2206
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #1 on: April 01, 2014, 01:56:39 pm »

Thanks for reporting. Hopefully we can fix it!
Logged

Daedelus

  • Hero Member
  • *****
  • Karma: +230/-12
  • Offline Offline
  • Posts: 3280
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #2 on: April 01, 2014, 02:02:50 pm »

Bravo!


But if this is still a wild exploit, you might want to delete it for now and PM it to Come-from-beyond, Jean-luc and wesleyh.

Then re-post when it is solved  ;D

There will be a nice lump of Nxt for you after this  ;)
Logged
NXT: NXT-4CS7-S4N5-PTH5-A8R2Q

gs02xzz

  • Hero Member
  • *****
  • Karma: +56/-12
  • Offline Offline
  • Posts: 1101
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #3 on: April 01, 2014, 02:11:55 pm »

Way to go man!
Logged
Nxt Mission is to commercialize the crypto technology and build new commerce and society.

LiQio

  • Hero Member
  • *****
  • Karma: +50/-5
  • Offline Offline
  • Posts: 672
    • View Profile
    • NxtLoader for Windows
Re: bug report: severe ddos attack and unfair forging
« Reply #4 on: April 01, 2014, 02:17:10 pm »

@harmony666

You should leave the part about being pissed for some reasons and therefore the "stormy" entrance

Will help a lot of NXTers to forgive you  ;)

mcjavar

  • Jr. Member
  • **
  • Karma: +9/-2
  • Offline Offline
  • Posts: 84
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #5 on: April 01, 2014, 02:18:10 pm »

Thank you, harmony!
Logged

achim

  • Hero Member
  • *****
  • Karma: +50/-6
  • Offline Offline
  • Posts: 648
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #6 on: April 01, 2014, 02:19:28 pm »

Thank you for the apology harmony666! and that you hide the bug from public until it's solved.

Your contribution is appreciated!

Keep the bugs coming, I'm sure you'll get a recompenstion for everyone of them if they're as serious as this one.

Could you please perform the next attack on testnet and not on mainnet? I can give you some testXT to play if you want.
Logged

forkedchain

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +74/-10
  • Offline Offline
  • Posts: 1190
  • bite me
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #7 on: April 01, 2014, 02:26:13 pm »

yes, harmony, please make a brand new never been used passphrase and get us the account.  someone here will get you some testNXT sent to that account on our testnet system.

You can set NRS to use testnet in its config.

Im glad you removed the specifics, I sent them to our 3 devs so hopefully they are looking at it now.  can you please tell us what was the determing factor on which accounts were affected from forging?  I noticed that some accounts kept forging. Why were they not affected?

And is it really possible to steal NXT?  or is that a different exploit you have?
Can you please
Logged
NXT tips: 2319251 or NXT-8SWM-2224-YKWW-22222

IveBeenBit

  • Full Member
  • ***
  • Karma: +7/-2
  • Offline Offline
  • Posts: 131
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #8 on: April 01, 2014, 02:28:15 pm »

tag
Logged
I need your suggestions for Nxt Podcast ideas. Click here and speak your mind!

bitcoinpaul

  • Hero Member
  • *****
  • Karma: +589/-588
  • Offline Offline
  • Posts: 3093
  • Karmageddon
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #9 on: April 01, 2014, 02:31:12 pm »

+1
Logged
Like my Avatar? Reply now! NXT-M5JR-2L5Z-CFBP-8X7P3

renat0

  • Jr. Member
  • **
  • Karma: +7/-18
  • Offline Offline
  • Posts: 76
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #10 on: April 01, 2014, 02:41:48 pm »

sorry for calling u a fool on the pub thread, i already took it back there nearly right after i posted but i apologize again
provide us a nxt address to send donations. we hope you save the nxt instead of selling it for btc, people like u that are striving for nxt's improvement are very welcome
im sure the community (and i can say that on behalf of myself!) will be very generous towards u or anybody else willing to help in any way!
Logged
Buying Qora for 12 satoshi each / Selling Nxt for 6600 satoshi each / Exchanging my nxt with your qora at a ratio of 1 nxt = 550 qora / Send me a private message if you're interested in any of these deals

bitcoinpaul

  • Hero Member
  • *****
  • Karma: +589/-588
  • Offline Offline
  • Posts: 3093
  • Karmageddon
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #11 on: April 01, 2014, 02:49:18 pm »

Guys, hold back your precious coins until we get some details.
Logged
Like my Avatar? Reply now! NXT-M5JR-2L5Z-CFBP-8X7P3

Daedelus

  • Hero Member
  • *****
  • Karma: +230/-12
  • Offline Offline
  • Posts: 3280
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #12 on: April 01, 2014, 02:57:03 pm »

To avoid any confusion, Harmony did originally post a full description of the exploit, detailed code and all.

(S)He removed it shortly after and then sent it around the devs (and to me for some reason  :D :D :D )

So all is in hand so far, eagerly awaiting more details  ;D
Logged
NXT: NXT-4CS7-S4N5-PTH5-A8R2Q

bitcoinpaul

  • Hero Member
  • *****
  • Karma: +589/-588
  • Offline Offline
  • Posts: 3093
  • Karmageddon
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #13 on: April 01, 2014, 03:01:40 pm »

I got a postcard from BCNext. He told me all is fine. And he likes my avatar.

And I shouldn't trust anyone.

Especially not the postal company.
Logged
Like my Avatar? Reply now! NXT-M5JR-2L5Z-CFBP-8X7P3

Daedelus

  • Hero Member
  • *****
  • Karma: +230/-12
  • Offline Offline
  • Posts: 3280
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #14 on: April 01, 2014, 03:19:14 pm »

I got a postcard from BCNext. He told me all is fine. And he likes my avatar.

And I shouldn't trust anyone.

Especially not the postal company.

Are you saying I should delete the PM? ???
Logged
NXT: NXT-4CS7-S4N5-PTH5-A8R2Q

farl4bit

  • Global Moderator
  • Hero Member
  • *****
  • Karma: +210/-45
  • Offline Offline
  • Posts: 3459
    • View Profile
    • Blockchain Twitter
Re: bug report: severe ddos attack and unfair forging
« Reply #15 on: April 01, 2014, 03:59:57 pm »

Thank you very much!  :)
Logged

harmony666

  • Jr. Member
  • **
  • Karma: +10/-5
  • Offline Offline
  • Posts: 61
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #16 on: April 01, 2014, 04:04:39 pm »

youre welcome.
just realized, that this attack could have some very serious consequences. turning off all miners and being the only one forging, you could create fake transactions and include them in a block. this could have destroyed the whole network and resulted in huge losses of funds.

also i believe that it should be possible to fork the chain, and revert some earlier transactions.
« Last Edit: April 01, 2014, 04:17:01 pm by harmony666 »
Logged
please feel free to support me: my nxt account is 3829444439138730512

CryptoScalper

  • Full Member
  • ***
  • Karma: +10/-24
  • Offline Offline
  • Posts: 192
  • Banned!
  • I DO NOT CONSENT
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #17 on: April 01, 2014, 04:22:04 pm »


devs?    :-\
Logged
"A world with the money can not be perfect." - BCNext

msin

  • Hero Member
  • *****
  • Karma: +138/-18
  • Offline Offline
  • Posts: 1288
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #18 on: April 01, 2014, 04:42:49 pm »

Following.  On a related note, I think we should have a good amount of unclaimed go towards critical bug discovery/fix.  Harmony666 deserves a bounty for this.
Logged

forkedchain

  • Ex-Staff Member
  • Hero Member
  • *****
  • Karma: +74/-10
  • Offline Offline
  • Posts: 1190
  • bite me
    • View Profile
Re: bug report: severe ddos attack and unfair forging
« Reply #19 on: April 01, 2014, 04:54:15 pm »

youre welcome.
just realized, that this attack could have some very serious consequences. turning off all miners and being the only one forging, you could create fake transactions and include them in a block. this could have destroyed the whole network and resulted in huge losses of funds.

also i believe that it should be possible to fork the chain, and revert some earlier transactions.

what do you mean by 'fake transactions'?  I thoguht transactions had to be signed by the clients that broadcast them. 

and im still not sure if you were successful in extracting NXT from an account without that account voluntarily sending you NXT in a transfer.  All I can see is your DDoS.
Logged
NXT tips: 2319251 or NXT-8SWM-2224-YKWW-22222
Pages: [1] 2 3 ... 13  All
 

elective-stereophonic
elective-stereophonic
assembly
assembly