MIME-Version: 1.0
Sender: marek@palatinus.cz
In-Reply-To: <54C26BFE.1080103@gmail.com>
References: <CAJna-HjwMRff_+7BvcR2YME9f2yUQPvfKOGZ1qq9d0nOGqORkg@mail.gmail.com>
	<78662993-6C67-4480-8062-55CC9FA63908@bitsofproof.com>
	<54C26BFE.1080103@gmail.com>
From: slush <slush@centrum.cz>
Date: Fri, 23 Jan 2015 16:47:41 +0100
Message-ID: <CAJna-HiXxt5E=FBiDuWMCKrK4C0dcvhHEjTAoK3LGQLafJOqtQ@mail.gmail.com>
To: Alan Reiner <etotheipi@gmail.com>
Content-Type: multipart/alternative; boundary=047d7bf18db0400f4a050d53b717
Cc: "bitcoin-development@lists.sourceforge.net"
	<bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] SIGHASH_WITHINPUTVALUE
Precedence: list

--047d7bf18db0400f4a050d53b717
Content-Type: text/plain; charset=ISO-8859-1

Correct, plus the most likely scenario in such attack is that the malware
even don't push such tx with excessive fees to the network, but send it
directly to attacker's pool/miner.

M.

On Fri, Jan 23, 2015 at 4:42 PM, Alan Reiner <etotheipi@gmail.com> wrote:

>  Unfortunately, one major attack vector is someone isolating your node,
> getting you to sign away your whole wallet to fee, and then selling it to a
> mining pool to mine it before you can figure why your transactions aren't
> making it to the network.  In such an attack, the relay rules aren't
> relevant, and if the attacker can DoS you for 24 hours, it doesn't take a
> ton of mining power to make the attack extremely likely to succeed.
>
>
>
>
> On 01/23/2015 10:31 AM, Tamas Blummer wrote:
>
> Not a fix, but would reduce the financial risk, if nodes were not relaying
> excessive fee transactions.
>
>  Tamas Blummer
>
>
>
>
>
> ------------------------------------------------------------------------------
> New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
> GigeNET is offering a free month of service with a new server in Ashburn.
> Choose from 2 high performing configs, both with 100TB of bandwidth.
> Higher redundancy.Lower latency.Increased capacity.Completely compliant.
> http://p.sf.net/sfu/gigenet
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
>
>

--047d7bf18db0400f4a050d53b717
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Correct, plus the most likely scenario in such attack is t=
hat the malware even don&#39;t push such tx with excessive fees to the netw=
ork, but send it directly to attacker&#39;s pool/miner.<div><br></div><div>=
M.</div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On =
Fri, Jan 23, 2015 at 4:42 PM, Alan Reiner <span dir=3D"ltr">&lt;<a href=3D"=
mailto:etotheipi@gmail.com" target=3D"_blank">etotheipi@gmail.com</a>&gt;</=
span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8e=
x;border-left:1px #ccc solid;padding-left:1ex">
 =20
   =20
 =20
  <div bgcolor=3D"#FFFFFF" text=3D"#000000">
    Unfortunately, one major attack vector is someone isolating your
    node, getting you to sign away your whole wallet to fee, and then
    selling it to a mining pool to mine it before you can figure why
    your transactions aren&#39;t making it to the network.=A0 In such an
    attack, the relay rules aren&#39;t relevant, and if the attacker can Do=
S
    you for 24 hours, it doesn&#39;t take a ton of mining power to make the
    attack extremely likely to succeed.<span class=3D""><br>
    <br>
    <br>
    <br>
    <br>
    <div>On 01/23/2015 10:31 AM, Tamas Blummer
      wrote:<br>
    </div>
    <blockquote type=3D"cite">
     =20
      <div>Not a fix, but would reduce the financial risk, if nodes were
        not relaying excessive fee transactions.</div>
      <div><br>
      </div>
      <div>
        <div style=3D"color:rgb(0,0,0);font-family:Helvetica;font-size:12px=
;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:no=
rmal;line-height:normal;text-align:start;text-indent:0px;text-transform:non=
e;white-space:normal;word-spacing:0px">Tamas
          Blummer</div>
        <div style=3D"color:rgb(0,0,0);font-family:Helvetica;font-size:12px=
;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:no=
rmal;line-height:normal;text-align:start;text-indent:0px;text-transform:non=
e;white-space:normal;word-spacing:0px"><br>
        </div>
      </div>
      <br>
    </blockquote>
    <br>
  </span></div>

<br>-----------------------------------------------------------------------=
-------<br>
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.<br>
GigeNET is offering a free month of service with a new server in Ashburn.<b=
r>
Choose from 2 high performing configs, both with 100TB of bandwidth.<br>
Higher redundancy.Lower latency.Increased capacity.Completely compliant.<br=
>
<a href=3D"http://p.sf.net/sfu/gigenet" target=3D"_blank">http://p.sf.net/s=
fu/gigenet</a><br>_______________________________________________<br>
Bitcoin-development mailing list<br>
<a href=3D"mailto:Bitcoin-development@lists.sourceforge.net">Bitcoin-develo=
pment@lists.sourceforge.net</a><br>
<a href=3D"https://lists.sourceforge.net/lists/listinfo/bitcoin-development=
" target=3D"_blank">https://lists.sourceforge.net/lists/listinfo/bitcoin-de=
velopment</a><br>
<br></blockquote></div><br></div>

--047d7bf18db0400f4a050d53b717--