Live data from Hacker News

The Verge Hack, Explained

blog.theabacus.io

21–30 of 68 posts

Re: The Verge Hack, Explained

#21
post #6

>>>In both cases, this hack presents a strong argument for tending towards sticking to things proven to work and to be wary of overcomplicating things and thereby introducing unnecessary risks when people’s financial assets are involved. Which, I suppose, means two points for team Bitcoin. What? The same bitcoin that is betting everything on an untested and incredibly complex second-layer protocol called "lightning n…

> instead of just scaling with larger blocks

Blocks will need to be ~5TB to match Visa transaction volume. Some lightning network advocates are concerned about the effect that a size increase necessary to support even a fraction of this volume would have on mining centralization.

Other concerns are listed here https://en.bitcoin.it/wiki/Block_size_limit_controversy and here https://en.bitcoin.it/wiki/Scalability_FAQ#General_Block_Siz...

Re: The Verge Hack, Explained

#23
post #21
post #6

>>>In both cases, this hack presents a strong argument for tending towards sticking to things proven to work and to be wary of overcomplicating things and thereby introducing unnecessary risks when people’s financial assets are involved. Which, I suppose, means two points for team Bitcoin. What? The same bitcoin that is betting everything on an untested and incredibly complex second-layer protocol called "lightning n…

> instead of just scaling with larger blocks Blocks will need to be ~5TB to match Visa transaction volume. Some lightning network advocates are concerned about the effect that a size increase necessary to support even a fraction of this volume would have on mining centralization. Other concerns are listed here https://en.bitcoin.it/wiki/Block_size_limit_controversy and here https://en.bitcoin.it/wiki/Scalability_FAQ#…

And they use that as an argument against any increase which is completely insane.

Re: The Verge Hack, Explained

#25
post #17

This hack results from a basic design error: for difficulty adjustment to work properly, the window of recent blocks it considers must be relatively immune to time stamp manipulation. In other words, the allowed timestamp drift must be much smaller than the adjustment time window. Bitcoin allows a 2 hour drift, but has an adjustment window of 2 weeks. In verge's case, both are identical, at 2 hours. This is an open i…

> In verge's case, both are identical, at 2 hours. Naive question - is verge adjustment window defined in block time (as opposed to "human" time)? because > Bitcoin allows a 2 hour drift, but has an adjustment window of 2 weeks. The adjustment window is technically 2016 blocks, which is about two weeks in human time, but can in theory vary greatly if mining capacity fluctuates.

I went looking through the source code and found that the adjustment window is indeed defined in block time as PastBlocksMax = 12 while nProofOfWorkTargetSpacing = 150 (half a minute for each of 5 different pow algorithms), giving an expected adjustment window of 12 * 150 = 1800 seconds.

Apparently, the adjustment window, which needs to be way longer than the allowed timestamp drift, is in fact way shorter...

Re: The Verge Hack, Explained

#26
post #17

This hack results from a basic design error: for difficulty adjustment to work properly, the window of recent blocks it considers must be relatively immune to time stamp manipulation. In other words, the allowed timestamp drift must be much smaller than the adjustment time window. Bitcoin allows a 2 hour drift, but has an adjustment window of 2 weeks. In verge's case, both are identical, at 2 hours. This is an open i…

At that point, I got a bit scared, too.

This feels way too much against the rule of thumb that code consuming untrusted input should never be able to modify or control it's own configuration or binaries (or, more generally, trusted input). In this case, the attacker can hijack 50% - 100% of the configuration of the weighting algorithm. For bitcoin, you can control around 4% at most without risking immediate attention. Unless mining speed increases by a factor of 40 or 50 suddenly.

Re: The Verge Hack, Explained

#27
post #12
post #4

This is because, in decentralized networks that obstinately refuse to grant any special authority to third parties, accurately enforcing time synchronization is no simple matter. That depends on what you’re going for. The concept of time is actually a local phenomenon, as relativity shows. To compare whether events A and B happened first, you must first trace some path from A and B to a third party C (maybe C = A or…

Relativistic effects are irrelevant at the level of precision required for running a system distributed across the surface of Earth, what you are describing is just due to a lack of properly synchronized clocks. Place an atomic clock at each node and there is no need for any C deciding the ordering of A and B. Alternatively you may also be able to use logical clocks like a Lamport clock or a vector clock to establish…

Are Lamport and vector clock mechanisms robust in the presence of nodes controlled by bad actors, who may be colluding through a hidden network?

Re: The Verge Hack, Explained

#28
post #4

This is because, in decentralized networks that obstinately refuse to grant any special authority to third parties, accurately enforcing time synchronization is no simple matter. That depends on what you’re going for. The concept of time is actually a local phenomenon, as relativity shows. To compare whether events A and B happened first, you must first trace some path from A and B to a third party C (maybe C = A or…

As you acknowledge, C is a third party, and therefore outside of the scope of the quote.

Re: The Verge Hack, Explained

#29
post #12

Earlier quoted context omitted.

Relativistic effects are irrelevant at the level of precision required for running a system distributed across the surface of Earth, what you are describing is just due to a lack of properly synchronized clocks. Place an atomic clock at each node and there is no need for any C deciding the ordering of A and B. Alternatively you may also be able to use logical clocks like a Lamport clock or a vector clock to establish…

Are Lamport and vector clock mechanisms robust in the presence of nodes controlled by bad actors, who may be colluding through a hidden network?

No, they are just for establishing [partial] orderings of events, they are not designed to be resistent against adversarial behavior.

Re: The Verge Hack, Explained

#30
post #2

PoW coins outside Bitcoin will never work. This will continue to happen over & over again to every smaller PoW chain

Well on point, PoW dint work on Bitcoin as well. The only reason it dint become a problem was that Bitcoin wasn't famous at that time. From Digital Gold by Nathaniel Popper: Laszlo’s CPU had been winning, at most, one block of 50 Bitcoins each day, of the approximately 140 blocks that were released daily. Once Laszlo got his GPU card hooked in he began winning one or two blocks an hour, and occasionally more. On May…

These kinds of shenanigans have been happening a lot on a small PoW chain called Amoveo. It’s been interesting to follow it since the founder is very honest and forthcoming about its difficulties, in contrast to most other blockchains.
Post reply on HN