Hacker Read top | best | new | newcomments | leaders | about | bookmarklet login

What a great idea. The attack described there is plausible, and experimenting in the means of defence before it happens is crucial for the continuity of cryptocurrncies.


sort by: page size:

Another attack made possible by cryptocurrencies.

I think thats actually a solid idea for a crypto wallet on-boarding: simulate each scam that's likely to be tried against you, let you fall for it so you can see how the scheme works, thereby teaching you how crypto works, one exploit at a time.

<snark>Remind me again why cryptocurrency are a good idea</snark>

Seriously, the idea of smart contracts can truly be of value if attacks like this are no longer possible.


These attacks didn't exist before crypto.

Yes, this needs to be solved at the crypto level - attackers always have the advantage.

Yeah it seems like the real defense of an obvious attack is "This Ethereum proof of stake chain with all of the wallets from right before the attack is the new Bitcoin".

> Plant a crypto-wallet amongst your files and get an alert when someone takes the bait.

This is brilliant.


It's one of our crypto challenges, and the conceptual basis for the BEAST attack.

That’s the hope anyway - even if the cryptography is perfect against all future attacks (remember they’ve already had at least one flaw in earlier versions) there are still things like timing attacks:

https://crypto.stanford.edu/timings/

Nation states are some of hardest attackers since they can do things like monitoring network traffic to correlate with chain activity or compel some fraction of the participants to surrender data. I know some smart people work on Zcash but there’s no safety net when all of the transactions are public and immutable.


What if the attacker is invested in other cryptocurrencies? Think outside the box.

This is not an attack. If anything, it serves to make the bitcoin ecosystem stronger. A course of anti-bionics if you like, forcing the network to build up safeguards against the lack of understanding of this characteristic of the protocol.

Undermining trust in bitcoin is a plausible goal. An attacker with that goal wouldn't stop at one attack.

If they did this, the attack would cause a panic, and Bitcoin would likely instantly loose its value, thereby undermining the validity of their own (illegitimately acquired) wealth. Not very smart...

The inventor of Bitcoin once described this scenario, saying it would be smarter and more profitable to simply mine bitcoins legitimately...


This seems interesting, but I doubt this would be a vulnerability of any properly redundant digital coin.

This is a well known and predictable attack vector. I’m surprised ledger didn’t already protect against it.

This would address some regulatory vulnerabilities, for a little while anywat.

Meanwhile, the real underlying vulnerabilities in the system remain wide open with an ever growing attack surface. I'm of course referring to wallets, smart contracts, etc.

Reference:

https://davegebler.com/post/musings/web-3-0-the-great-con


The idea mentioned in the article of either unintentional or intentionally badly coded wallets seems likely.

That's silly. This attack would be much easier to pull off with cryptocurrency.

Attacks against crypto only get better, not worse.
next

Legal | privacy