TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

A Novel Approach For Computer Worm Control Using Decentralized Data Structures

81 pointsby 666_howitzerover 10 years ago

10 comments

verroqover 10 years ago
Haha, I had the same idea. The since (valid) transactions are passed freely to all nodes in the Bitcoin network, one can just use the network as a signed messaging platform.<p>You don&#x27;t need to query blockchain.info, all you need is a Bitcoin client that listens for incoming transactions.<p>I&#x27;ve been writing an implementation on and off for a while now. The general idea is as follows:<p>The botnet client connects to &quot;n&quot; Bitcoin nodes. If the same transaction is relayed by ceil(n&#x2F;2) nodes, then we say that transaction is &quot;confirmed&quot; and examines the transaction to see if it&#x27;s sent from botmaster&#x27;s address (in fact we don&#x27;t even have to use the botmaster&#x27;s address, with BIP-0032 (<a href="https:&#x2F;&#x2F;github.com&#x2F;bitcoin&#x2F;bips&#x2F;blob&#x2F;master&#x2F;bip-0032.mediawiki" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;bitcoin&#x2F;bips&#x2F;blob&#x2F;master&#x2F;bip-0032.mediawi...</a>), we can use related public keys)<p>You don&#x27;t even have to use transactions (&quot;tx&quot; messages), you can use the block messages if you are willing to tolerate an (on average) 10 minute delay, this would drastically reduce the network traffic sent&#x2F;received by the botnet client.<p>But these guys forced my hand, so I suppose I&#x27;ll have to release what I have so far. The current botcoin client (c++11 with boost::asio) connects to the network, and gets transactions. Data extraction from transactions is unfinished. The current problem I&#x27;m working on is making sure that people cannot easily scan the Blockchain to look for c&amp;c transactions. This can easily be done by encrypting the messages with a client specific key. However, I would like to have perfect forward secrecy, that is, suppose a sample client was obtained by researchers, past c&amp;c messages should not be able to be decrypted (otherwise the blockchain contains a log of all of your C&amp;C messages).<p>[link redacted]
评论 #8746420 未加载
评论 #8745288 未加载
评论 #8745148 未加载
needmoney90over 10 years ago
Author here! I&#x27;m surprised to see this up on HN, I checked the front page, and here it was. This was written for a computer security class, and definitely hasn&#x27;t been proofread yet. If anyone has any questions, I can answer anything you like.
评论 #8747152 未加载
zrailover 10 years ago
Another similar idea (from back in 2008[1]) is to use the Bittorrent DHT as distributed storage for C&amp;C commands. I have no idea anyone has implemented a real-life bonnet in the intervening six years, but it seems plausible enough.<p>[1]: <a href="https://iseclab.org/papers/securecomm08_overbot.pdf" rel="nofollow">https:&#x2F;&#x2F;iseclab.org&#x2F;papers&#x2F;securecomm08_overbot.pdf</a>
murbard2over 10 years ago
Can&#x27;t worms simply relay to each other the message signed by the botnet master? No Sybil attack there.<p>The trend of throwing blockchains at problems for which they are totally uncalled for is profoundly annoying.
评论 #8747138 未加载
super_slothover 10 years ago
So something I&#x27;ve been wondering about with all the talk around The Pirate Bay recently is why aren&#x27;t people using the blockchain to store data needed to bootstrap your joining of a decentralised network.<p>It could be as simple as storing the magnet links themselves.
评论 #8745287 未加载
评论 #8745365 未加载
评论 #8745691 未加载
giovannibajo1over 10 years ago
FWIW, keybase.io do the same; they store the root of the merkle tree into the blockchain with a similar principle of throwaway addresses, making it the whole database they handle basically unforkable.
评论 #8745286 未加载
eudoxusover 10 years ago
The main problem I see with this is that you would have to have each client in the botnet sync with the Bitcoin network. This is a lengthy task and results in gigs of data.<p>Hardly inconspicuous.<p>But I like the idea.
评论 #8745699 未加载
kyrreover 10 years ago
is this a published paper? O_o
评论 #8745015 未加载
评论 #8746209 未加载
评论 #8745385 未加载
评论 #8745019 未加载
gcb0over 10 years ago
really? a pdf with drop shadow on every word? if you didn&#x27;t want me to read it, just say so.
jokoonover 10 years ago
I&#x27;m still struggling to fully understand how bitcoin works.<p>I guess I can understand what the blockchain is, but I struggle to understand how the number of bitcoin can be stable, and how transactions are achieved. I guess I like drawings better.