Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - crazybit

Pages: 1 ... 13 14 15 16 17 18 19 [20] 21 22 23 24 25 26 27 ... 29
286
我对这个方法是否可行存怀疑态度,如果是针对领取地址签名,那么这个签名是唯一的。倘若用这个签名就可以Clain DAC里面的shares,那泄露签名跟泄露私钥没有什么分别, 除非在其他DAC里用来Clain shares的签名是针对不同的文本进行签名的,但是能证明这些shares的唯一文本就是你捐AGS的地址,这个地址是不变的。

287
appreciated if could sent me some fund.

XTS393aySU6RQ1sWGJxKX2vMwxbLJwjopVmBpgkREYWYXQvdVZLftsVJhXrMaeyHRg6rdagvrjEUg3hKHr2BM6krSUd2ktqBN

and my node:58.62.197.239, see if anyone can connect to me.

289
我在想如果ags不能和pts合并,bitshares me可能可以解决这个问题。

290
中文 (Chinese) / Re: 关于PTSer和AGSer的安全问题
« on: May 27, 2014, 04:38:33 am »
https://bitsharestalk.org/index.php?topic=4732.0

同担忧,昨天刚发了一个类似的帖子在英文版。

291
Technical Support / Re: AGS potential security issue
« on: May 26, 2014, 05:01:46 pm »
I think he means a malicious client stealing private keys. Of course this is a great reason to make AGS liquid.

You can always sign transactions offline and refuse to use a client that doesn't allow you to construct unsigned transactions.
Yes,you got my point of the security issue part,but i am not talking about liquid AGS,just concern for the AGS Security issue.

292
Technical Support / 回复: Re: AGS potential security issue
« on: May 26, 2014, 04:45:33 pm »
I don't think you expose your private keys to anyone else in the network. You just verify on your local machine to the network that you own the address that is granted shares...
you have to admit that it is possible your private key might be exposed if it is imported to the customized or malicious DAC client with the purpose to steal your private key.we cannot review every DAC client source code(i think mainly the third party DAC) and build client by ourselves to make sure the client will not steal our private key.

293
Technical Support / AGS potential security issue
« on: May 26, 2014, 04:16:01 pm »
One thing sure is that more and more DAC will come out in future,but there is a potential security issue that the more times we import the AGS private key to claim the corresponding shares in the DAC,the more risk the private key might be exposed,under the current social contract without AGS Liquid,we even cannot transfer the AGS shares to other address if the private key exposed,is there any consideration or plan to improve the AGS security,please discuss.

294
any one can connect to the test network? seems i can not connect to test network and download the blockchain.

295
Does it work for Windows and Linux?
BM's version should only work on Mac, i build it myself on Win7

296
my acccount: XTS2F61RsDFxsacvZZ3tuNUDcipVAkd5BsvoKZHSbHh8LS4xKhQt6E9AhfWkYo2eeZVDFQAp57dheRVq3NzsbT3kCmfZnkEHj

297
MemoryCoin / Re: MMC -> LottoShares
« on: May 24, 2014, 05:35:47 pm »
will the snapshot be taken as scheduled(end of May)?


298
LottoShares / Re: Honoring AGS
« on: May 24, 2014, 05:18:36 pm »
excited to hear this good news! +5%

299
review了代码,有个问题不太明白,如何保证产生块的delegate是随机的?现在似乎是从list里随机拿出一个跟自己的id对比,如果match则产生块,不是则跳过,假如我的客户端是custermized的,而我又是delegate,我是否就可以跳过这个 checking直接产生块,如何防止这种情况?

就是 https://bitsharestalk.org/index.php?topic=4164.0 里面提到的算法,每个delegate先publish secret_hash,下一轮reveal secret,由这些secrets哈希值来更新随机数。

之前的实现有一个漏洞,最新的实现每一轮delegate的顺序仍然是随机的,但是只在这一轮开始的时候刷新一下随机顺序,不是随机确定下一个delegate,而是随机确定下一轮delegate顺序。

谢谢解答,但是在块产生代码里我还是没看到你说的实现算法(https://github.com/BitShares/bitshares_toolkit/blob/ab177ba65f4355af9805b4e7451ed9f7dba8a0b7/libraries/client/client.cpp#L70#L104)能否指出具体实现在哪里?

300
压力测试这个事我之前好像提过。不过P2P的如果不靠大量的用户,压力测试还是有点难度的。

Pages: 1 ... 13 14 15 16 17 18 19 [20] 21 22 23 24 25 26 27 ... 29