Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - wackou

Pages: 1 ... 8 9 10 11 12 13 14 [15] 16 17 18 19 20 21 22 ... 33
211
Stakeholder Proposals / Re: Slate for btstools.digitalgaia
« on: March 14, 2015, 10:32:52 pm »
Updates:
 - removed yunbi delegates
 - added minebitshares-reloaded: https://bitsharestalk.org/index.php?topic=14887.0

212
General Discussion / Re: API changes for 0.7 [xpost from github]
« on: March 12, 2015, 01:45:17 pm »
thanks indeed!  +5%

213
DevShares / Re: Attack on DevShares / client misbehaving?
« on: March 12, 2015, 11:33:41 am »
my devshares delegate (first screenshot of this thread, this post: https://bitsharestalk.org/index.php?topic=14852.msg192315#msg192315) is running 0.6.3 on debian jessie, 2-core xeon and 4G RAM.

the second and third screenshot are from my laptop which is a 2012 macbook pro, with osx 10.9, devshares 0.6.3 as well.

here's a new one from my laptop where I completely removed the devshares dir:



as you can see, it starts by synchronizing the blockchain and then the same pattern appears. Note that total average cpu usage is not really that high, it's more the pattern that bothers me (so for instance just checking your average daily usage of your server will not show any unusual cpu usage). I am pretty sure also that this appeared 3 days ago and wasn't present before.

Unrelated to this issue, but still worth noticing, is that my BitShares delegate has an extremely low cpu usage (uncannily low, actually), at the cost of a small memory leak (this appeared in bts 0.6.2, 0.6.1 had a more normal cpu usage and no mem leak). Here's a screenshot (specs are the same as my dvs delegate, 2-core xeon and 4G RAM)


214
DevShares / Re: Attack on DevShares / client misbehaving?
« on: March 11, 2015, 01:56:33 pm »
Any opinion from core devs on the matter? This has been going on for more than 48 hours now...

215
DevShares / Re: Attack on DevShares / client misbehaving?
« on: March 10, 2015, 04:38:16 pm »
yes, apart from that, everything is running smoothly, as usual. But given the looks of it, I doubt that it's a real attack, more like a bug that is somehow causing this.

216
DevShares / Re: Attack on DevShares / client misbehaving?
« on: March 10, 2015, 03:52:40 pm »
last 10 minutes on my laptop:



this is something that happens exactly every 30 seconds...

217
DevShares / Attack on DevShares / client misbehaving?
« on: March 10, 2015, 03:46:30 pm »
Since yesterday morning, 2015-03-09 at about 07:40 UTC, my DVS delegate's CPU usage has been spiking, with a client that seems to be connecting / disconnecting a lot:



This is still going on as of today. This also happens when I run a DevShares client on my laptop, so is not restricted to my delegates. see the last 5 minutes on my laptop (no wallet open):



Is this an attack / spamming of the DevShares network? More likely, could it be some client on the network that is misbehaving (hinted at by the deconnection/reconnection)?

I have this IP that comes up in the client a lot:
Code: [Select]
Peer 46.10.205.0:32123 disconnected us: You offered us a block that we reject as invalid

Can anyone shed a light on what could be happening here?

218
General Discussion / Re: [Paperwallet] Python / SVG / automated
« on: March 06, 2015, 07:45:01 pm »
 +5% very nice! btw xeroc, your new avatar/icon rocks ;)

219
In the meantime, people can already use the bts-proxy package I developed at the beginning of the year to achieve the same functionality:

https://bitsharestalk.org/index.php?topic=13143

It has of course a slight overhead, as it is a proxy and not integrated into the client, but it should be negligible.

220
I'd like to offer a 1000 BTS bounty for a member of the chinese community to translate this post in chinese and post it to the relevant subforum.

No one?

221
I'd like to offer a 1000 BTS bounty for a member of the chinese community to translate this post in chinese and post it to the relevant subforum. I believe security is an important issue and would like to see if the chinese community thinks I should be voted as a delegate to work on those issues.

222
no feature request in particular, but +5% on the initiative, offline signing is really important!

223
DevShares / Re: New DVS Delegate: martin-38ptswarrior-raum
« on: February 25, 2015, 09:56:44 am »
voted, it should now be active  ;)

224
I'd recommend every delegate to have at least 1 "relay" node in standby mode (or a manually activated backup delegate) that can be activated in case of an attack.

As the cost of setting up a relay node is minimal and its configuration trivial I do not consider this an issue.

A simple and effective solution.  +5%

I fully agree, hence one of the by-products of setting up the backbone is for me to expand the functionality of the bts_tools package to easily manage multiple nodes, of possibly different types (eg: 1 delegate, 2 relays, etc...) from the same panel. This is already somehow possible, but the implementation under the hood is not really up to snuff.

I would like also to be very careful to not give a false sense of security to other delegates, by having them rely on the backbone and then decide they're safe. I believe that laziness and self-contentment is probably the worst problem one can face security-wise, and good security can only come with delegates being proactive and taking all measures possible to secure their servers. I do not claim that the backbone is the ultimate solution, just one more tool in a toolbox that each delegate should build for himself (along with firewalls, relay nodes, thoughtful arguments on the command-line, etc.)

225
Btw, is Bitcoin susceptible to a similar attack?

bitcoin miners are not vulnerable, as they are not known in advance, so there's really no way to hit them. Mining pools on the other hand are vulnerable, and I remember last year that some pools used to go down every now and then due to DDoS attacks. This doesn't seem to occur so much anymore as pool operators now run them on top end hardware and/or DDoS protected VPS providers (not too sure how it works for them) although I can't say for sure, as I haven't been mining in a long time (thank god for DPoS! :) )

Pages: 1 ... 8 9 10 11 12 13 14 [15] 16 17 18 19 20 21 22 ... 33