BitShares Forum

Main => General Discussion => Topic started by: emski on September 09, 2014, 01:02:38 pm

Title: Possible Attack Scenario Questions
Post by: emski on September 09, 2014, 01:02:38 pm
1 A malicious person (EVIL) registers asset ASSET. Let it be 100000000000000 ASSET (precision 1).
2 That person starts flooding the network with transactions. Each one sending 1 ASSET to random address.

Is this possible?

Who's responsibility is to prevent this ? (Delegates?)
Is there an easy mechanism to block an asset trading?
Title: Re: Possible Attack Scenario Questions
Post by: xeroc on September 09, 2014, 01:08:01 pm
He does need to pay fees for the creation and for spending .. but you are right .. he will at the end be able to use his asste to pay the tx fee ..

Btw, how are fees set for assets? Maybe by delegates?

If so delegates can prevent floods by setting fees to availableAmount+1
Title: Re: Possible Attack Scenario Questions
Post by: emski on September 09, 2014, 09:40:42 pm
Yes but that needs to be done by most (all) of the delegates.
Can it be done without recompile?
Title: Re: Possible Attack Scenario Questions
Post by: bytemaster on September 09, 2014, 09:42:37 pm
Yes but that needs to be done by most (all) of the delegates.
Can it be done without recompile?

Only BitAssets can be used for fees.  User issued assets cannot be used for fees because of this exact attack vector.
Title: Re: Possible Attack Scenario Questions
Post by: emski on September 09, 2014, 09:47:10 pm
So if you issue a new market asset you need to pay transaction fees in BTSX?
What if you short significant amount ASSET to someone and he trade it... Does he have to pay in btsx?

EDIT: Though you might need price feeds and market depth for the market to operate . However if an extremely cheap market issued asset exist this might still be an issue.
Title: Re: Possible Attack Scenario Questions
Post by: bytemaster on September 09, 2014, 09:51:16 pm
So if you issue a new market asset you need to pay transaction fees in BTSX?
What if you short significant amount ASSET to someone and he trade it... Does he have to pay in btsx?

Market Issued assets... if created by a user require a price feed and thus approval of delegates.
Title: Re: Possible Attack Scenario Questions
Post by: emski on September 09, 2014, 09:58:43 pm
So if you issue a new market asset you need to pay transaction fees in BTSX?
What if you short significant amount ASSET to someone and he trade it... Does he have to pay in btsx?

Market Issued assets... if created by a user require a price feed and thus approval of delegates.

What if someone includes DOGE coin as market issued asset. It might make flood attack about 30000% cheaper.
Title: Re: Possible Attack Scenario Questions
Post by: bytemaster on September 09, 2014, 10:00:13 pm
So if you issue a new market asset you need to pay transaction fees in BTSX?
What if you short significant amount ASSET to someone and he trade it... Does he have to pay in btsx?

Market Issued assets... if created by a user require a price feed and thus approval of delegates.

What if someone includes DOGE coin as market issued asset. It might make flood attack about 30000% cheaper.

Nothing can make it cheaper... attacking with a BitAsset is 2x more expensive than using BTSX to pay your fees.
Title: Re: Possible Attack Scenario Questions
Post by: emski on September 09, 2014, 10:03:35 pm
So the fees for bitassets are at least 0.5 BTSX converted in the ASSET ?
Title: Re: Possible Attack Scenario Questions
Post by: bytemaster on September 09, 2014, 10:04:25 pm
So the fees for bitassets are at least 0.5 BTSX converted in the ASSET ?

The fees must be greater than  2*BTSX_FEE * LOWEST_ASK_PRICE
Title: Re: Possible Attack Scenario Questions
Post by: eagleeye on September 10, 2014, 02:45:29 am
So the fees for bitassets are at least 0.5 BTSX converted in the ASSET ?

The fees must be greater than  2*BTSX_FEE * LOWEST_ASK_PRICE

What happens when the BTSX is $10 dollars will the fees be adjusted lower per transaction?  (Sorry if this has been brought up or I have brought this up).
Title: Re: Possible Attack Scenario Questions
Post by: bytemaster on September 10, 2014, 02:46:43 am
So the fees for bitassets are at least 0.5 BTSX converted in the ASSET ?

The fees must be greater than  2*BTSX_FEE * LOWEST_ASK_PRICE

What happens when the BTSX is $10 dollars will the fees be adjusted lower per transaction?  (Sorry if this has been brought up or I have brought this up).

Yes, delegates are in control of the fees (or will be by the time we hit $10 per BTSX)
Title: Re: Possible Attack Scenario Questions
Post by: tonyk on September 10, 2014, 02:50:31 am
So the fees for bitassets are at least 0.5 BTSX converted in the ASSET ?

The fees must be greater than  2*BTSX_FEE * LOWEST_ASK_PRICE

Minor issue.
 I am not very comfortable with LOWEST_ASK_PRICE as it can/is changing rapidly.
Maybe median feed price, average price etc.

Title: Re: Possible Attack Scenario Questions
Post by: emski on September 10, 2014, 06:45:16 am
So the fees for bitassets are at least 0.5 BTSX converted in the ASSET ?

The fees must be greater than  2*BTSX_FEE * LOWEST_ASK_PRICE

Minor issue.
 I am not very comfortable with LOWEST_ASK_PRICE as it can/is changing rapidly.
Maybe median feed price, average price etc.

Isn't it tied to median price?
If not it should be median, otherwise it doesn't matter that much.
Title: Re: Possible Attack Scenario Questions
Post by: tonyk on September 10, 2014, 06:56:33 am
So the fees for bitassets are at least 0.5 BTSX converted in the ASSET ?

The fees must be greater than  2*BTSX_FEE * LOWEST_ASK_PRICE

Minor issue.
 I am not very comfortable with LOWEST_ASK_PRICE as it can/is changing rapidly.
Maybe median feed price, average price etc.

Isn't it tied to median price?
If not it should be median, otherwise it doesn't matter that much.
LOWEST_ASK is somewhat tied to the median price. It just tends to change more frequently (and increasingly so with more dynamic market). Not that the median or the average will never change, but it will be far less frequently, imo.

Not the biggest deal, of deals, at this point in time anyway.
Title: Re: Possible Attack Scenario Questions
Post by: emski on September 10, 2014, 07:17:50 am
What matters is that transaction price stays above 0.5 BTSX (standart btsx transaction) so flood attacks cannot be made cheaper.
It seems that this rule is sufficient.
Title: Re: Possible Attack Scenario Questions
Post by: tonyk on September 10, 2014, 07:30:31 am
What matters is that transaction price stays above 0.5 BTSX (standart btsx transaction) so flood attacks cannot be made cheaper.
It seems that this rule is sufficient.

Yes, for the purposes of this thread.
 
I was just expressing a more general concern and the exact formula was posted here ... only.
True, I could have quoted the post in more appropriate thread.