TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

The Flaw that May Bring Down Bitcoin or Change it Forever

75 pointsby thetabyteabout 12 years ago

16 comments

friscoabout 12 years ago
There's already a proposal floating around on the dev list to introduce a new address type, P2SH^2, which would allow the relevant data fields currently being used to stuff the info discussed in the article to become hashes. This would have the effect that if you wanted to stuff arbitrary data, you'd be limited to finding hash collisions. See the thread here: <a href="http://sourceforge.net/mailarchive/message.php?msg_id=30705609" rel="nofollow">http://sourceforge.net/mailarchive/message.php?msg_id=307056...</a><p>I've been lurking on the bitcoin-dev list for a while to observe how they handle issues just like this. I'm confident that these problems will be transient.
评论 #5636125 未加载
评论 #5636581 未加载
评论 #5636126 未加载
AnthonyMouseabout 12 years ago
The flaw in all of this is that you're embedding 20 bytes in the blockchain. In order to do that, you have to choose an encoding method. In order to get the embedded data back out, you have to convey the encoding method and which block is encoded with it to the recipient. Which is totally pointless because if you can convey <i>that</i> to the recipient then you might as well just use the same communications method to convey the original message. The only plausible reason not to would be if the law prohibits the message but not the information about how to construct the message from the blockchain (and even that is not guaranteed). Even then all you would accomplish is to cause the government to pass a new law that prohibits you from telling anyone that a prohibited link is encoded in the block in the same way that you're currently prohibited from telling anyone the link itself.<p>The real problem here is not that child pornographers would actually use bitcoin to distribute links, it's that assholes who want to damage bitcoin would put contraband in the blockchain in order to cause legal trouble for innocent users.<p>But I think that's a broader problem than just bitcoin. You can encode anything into anything. Take anything anyone else has posted and xor it with something you want to encode. The output will resemble garbage rather than either input. But now you can post the "garbage" and instructions on what to xor it with to allow anyone to recover your encoded message, and the poster of the other message becomes an unwilling participant in your encoding scheme. It clearly makes no sense to punish distributors of the original message just because the encoded message is contraband. Which doesn't mean there won't be laws that will punish it anyway, but <i>that</i> is the fight that needs to be won -- to not allow stupid laws that would punish innocent people.
评论 #5636824 未加载
评论 #5636896 未加载
moxieabout 12 years ago
Travis Goodspeed and Dan Kaminksy demonstrated this in 2011 by embedding a tribute to the late Len Sassaman in the blockchain: <a href="http://pastebin.com/raw.php?i=BUB3dygQ" rel="nofollow">http://pastebin.com/raw.php?i=BUB3dygQ</a>
tyreabout 12 years ago
This will neither bring bitcoin down or change it forever.<p>Any information contained in those bytes is just that: information. What can you say in 20 bytes that can have permanent, material damage to human beings?<p>A wonderfully sensationalist title, but really nothing to back it up.
评论 #5636268 未加载
评论 #5636707 未加载
评论 #5649127 未加载
评论 #5637000 未加载
TheEskimoabout 12 years ago
I believe that there is an even more important practical issue.<p>What if someone manages to embed something very much like the EICER string[0] in it? How many people do you think would use the bitcoin client on windows if their AV automatically deleted the blockchain as it downloaded in a misguided attempt to protect them?<p>Of course, first we have to know if this is possible at all. Does anyone know if there's either a) 20 bytes with a very high AV detection rate or b) some way to embed more than 20 bytes in a row in the block chain?<p>[0]: <a href="http://en.wikipedia.org/wiki/EICAR_test_file" rel="nofollow">http://en.wikipedia.org/wiki/EICAR_test_file</a>
评论 #5639950 未加载
sicularsabout 12 years ago
Of all the things threatening bitcoin this is by far the least worrisome. What if people start writing links to censored/illegal content on circulating dollar bills? Nothing, that's what.
评论 #5636943 未加载
评论 #5637298 未加载
eurleifabout 12 years ago
Kind of like how somewhere, within the digits of pi, there's all sorts of criminal data. <a href="http://everything2.com/title/Converting+Pi+to+binary%253A+Don%2527t+do+it%2521" rel="nofollow">http://everything2.com/title/Converting+Pi+to+binary%253A+Do...</a>
rockylealabout 12 years ago
I think there is a lot of sensationalism in the way this issue has been aproached. To inject data into the blockchain in this way is comparable (although not identical) to writing the same 'evil urls' in a dollar bill with a pen, and then passing it around.<p>It is a problem that exists in a different layer than the currency, even if it is to some degree 'passed on' through the currency. Likewise, the solution (imho) lies in a different layer: detect a cp link in the blockchain? Great, take down the link, problem solved.<p>Just as it is not the fault of TCP/IP, or its 'downfall', that it is able to transmit 'evil data', it is not Bitcoin's fault what vandals sometimes write on it.
评论 #5636217 未加载
评论 #5636131 未加载
dasil003about 12 years ago
How is this any different than a government declaring bitcoin illegal for whatever legal reasoning they can come up with?<p>It's not practical to shut down everyone with a bitcoin database any more than it's practical to raid every server with wikileaks data. If they're going to declare this nuclear war on bitcoin it's not going to be on the basis of some piece of data which by the point it's in the blockchain is out of the bag anyway.
tlrobinsonabout 12 years ago
This brings up some interesting questions. One could also XOR some illegal data with the text of the US Constitution, then claim that the Constitution "contains" that data, you just need to XOR it with this particular key.<p>Obviously that's absurd, but where do you draw the line? You need specialized software and the 32 byte transaction ID in order to extract the data.<p>What other permanent public records could be manipulated like this?
评论 #5636597 未加载
andr3w321about 12 years ago
Can someone post the command to create these messages or at least tell me what portion of the transaction this is being stored under? I am curious. My chain is a bit out of date, but I was able to generate the messages <a href="http://pastebin.com/wdpF4L4k" rel="nofollow">http://pastebin.com/wdpF4L4k</a><p>~/.bitcoin/blocks $ ls | xargs strings -n 20 | tee ~/Downloads/hiddenblockchain.txt<p><a href="https://en.bitcoin.it/wiki/Original_Bitcoin_client/API_Calls_list" rel="nofollow">https://en.bitcoin.it/wiki/Original_Bitcoin_client/API_Calls...</a><p>Are they just sending coins to an invalid address (their string)?
Xcelerateabout 12 years ago
I would think the solution to this problem is to somehow prove to the blockchain that the address was indeed produced by the SHA256 RIPEMD160 process. I would think mathematically there is some way to do this without revealing what it was you hashed.<p>I mean, you can verify that you are who you say you are simply by using your private key to sign a message; I would think a comparable process would work for this.<p>EDIT: Facepalm; you're hashing the public key. You don't need to hide that. See my comment below.
评论 #5636143 未加载
评论 #5636167 未加载
评论 #5636587 未加载
LAMikeabout 12 years ago
What's the worst thing you can transmit with 20 bytes? A link to a website? A couple of the 7 words? A "yo mama" joke? C'mon this is a BS linkbait article
评论 #5636386 未加载
ck2about 12 years ago
I guess they should have disallowed vowels eh?<p>Has spam appeared yet? Because you know that is next.
评论 #5636572 未加载
scottmcleodabout 12 years ago
Title seems irrelevant. My prediction is we will see coins dedicated to just this purpose.
评论 #5637045 未加载
drivebyacct2about 12 years ago
Am I wrong in thinking that this is some sort of "freedom of speech" and that it isn't necessarily wholly different than Bitcoin's sense of "hands off, let it be, decentralization, no one can control/stifle/limit/etc"?