Slashdot Mirror


Man Behind Week-Long Bitcoin Attacks Reveals Himself

An anonymous reader writes: A Russian man that calls himself "Alister Maclin" has been disrupting the Bitcoin network for over a week, creating duplicate transactions, and annoying users. According to Bitcoin experts, the attack was not dangerous and is the equivalent of "spam" on the Bitcoin blockchain servers, known in the industry as a "malleability attack," creating duplicate transactions, but not affecting Bitcoin funds. Maclin recently gave an interview to Vice.

71 comments

  1. What doesn't kill bitcoin will make it stronger by JcMorin · · Score: 4, Insightful

    Bitcoin evolve and update it's codebase to adapt those kind of scenarios. Remember it's an experimental currency, so far so good!

    1. Re:What doesn't kill bitcoin will make it stronger by Anonymous Coward · · Score: 0

      Yeah, so far so good as long as you don't mind that BitCoin has lost 75 percent of its value in the last 22 months. There would be riots if that was happening in a real currency market.

    2. Re:What doesn't kill bitcoin will make it stronger by jklovanc · · Score: 0

      Bitcoin has been around for six years. When does it stop bean able to use the "it's an experimental currency" excuse?

    3. Re:What doesn't kill bitcoin will make it stronger by Anonymous Coward · · Score: 0

      It's like Google "betas".

    4. Re:What doesn't kill bitcoin will make it stronger by rmdingler · · Score: 0

      An inflation rate of nearly Venezuelan proportions.

      --
      Happiness in intelligent people is the rarest thing I know.

      Ernest Hemingway

    5. Re:What doesn't kill bitcoin will make it stronger by JcMorin · · Score: 3, Insightful

      Most fiat currency live about 100 years. Giving the fact that Bitcoin is a totally new concept (no central authority) I guess 20-30 years would be enough to prove that it' a viable currency in the long term.

    6. Re:What doesn't kill bitcoin will make it stronger by Anonymous Coward · · Score: 0

      When people commit suicide after staking their entire college funds to gamble on the currency?

    7. Re:What doesn't kill bitcoin will make it stronger by WinstonWolfIT · · Score: 0

      Bean?

    8. Re:What doesn't kill bitcoin will make it stronger by WinstonWolfIT · · Score: 0

      Fiat currencIES maybe? Proofreading before post is a necessary skill.

    9. Re:What doesn't kill bitcoin will make it stronger by jklovanc · · Score: 2

      What are you basing your "100 years" on? The US dollar went fiat curency in 1971. What fiat currencies lasted about 100 years?

    10. Re:What doesn't kill bitcoin will make it stronger by Anon-Admin · · Score: 2, Informative

      In 22 months, sure.

      In 2011 it was $5.80 a coin and today it is $245.00 a coin.

      It is all a matter of perspective.

    11. Re:What doesn't kill bitcoin will make it stronger by Anonymous Coward · · Score: 0

      You must not know much about early American history...

    12. Re:What doesn't kill bitcoin will make it stronger by Anonymous Coward · · Score: 0

      The US was far from the first. Fiat money originated in 11th century China and has used by various countries ever since.

    13. Re:What doesn't kill bitcoin will make it stronger by Tom · · Score: 0

      In 2011 it was $5.80 a coin and today it is $245.00 a coin.

      It was up to 600, 700 and more at the time of the hype. Wish I'd sold back then. Long-term trend seems downwards.

      --
      Assorted stuff I do sometimes: Lemuria.org
    14. Re:What doesn't kill bitcoin will make it stronger by Anonymous Coward · · Score: 0

      An inflation rate of nearly Venezuelan proportions.

      "Venezuelan proportions".... Come on, is that the best you can do?

      Try Zimbabwe -- they basically had to abandon their currency altogether after rampant hyperinflation. In the year 2000 they had a reasonably stable currency, with Z$ 1 being able to buy you (for example) a loaf of bread. Double-digit inflation, but nothing unusual. And then it just went crazy... at the worst point in 2008, they had to issue banknotes for "one hundred trillion dollars", and even those were virtually worthless before they even went into circulation. (that's a 1 with fourteen zeros, but that was after they'd already had several "redemoniation" events that knocked off a large number of zeros, so no matter how bad that sounds, the actual inflation problem was far far worse). To buy the same loaf of bread, you would have needed a large wedge of high demonination notes.

      The only reason it didn't make it into your Forbes article is that the currency was officially abandoned in 2009; Zimbabweans now use US$ or other regional currencies.

    15. Re:What doesn't kill bitcoin will make it stronger by Anon-Admin · · Score: 2

      I dont agree. It was in the mid 200's (235-240) before the hype and big jump in price. It reached a high dollar amount, which is way above the valuation that bitcoin could sustain. After which it has corrected back down to the mid 200's and has held there for the last year.

      I would say that the long term trend is flat with a slow rise, I also expect to see another large spike when and if the hype picks back up.

    16. Re:What doesn't kill bitcoin will make it stronger by Viol8 · · Score: 0

      He was just one guy. Wait until there are a million zombie PCs doing the same thing for a week. Lets see how well the blockchain copes then.

    17. Re:What doesn't kill bitcoin will make it stronger by Anonymous Coward · · Score: 0

      > Proofreading before post is a necessary skill.

      Why yes, proofreading before postING is a necessary skill.

    18. Re:What doesn't kill bitcoin will make it stronger by Anonymous Coward · · Score: 0

      You realize that the US could bring about a dramatic rise in the value of the dollar ... but only by precipitating a monumental economic crisis? That's because dollars matter and bitcoins don't, not any more than Beanie Babies or Shaquille O'Neal rookie cards.

    19. Re:What doesn't kill bitcoin will make it stronger by Tom · · Score: 1

      I sure hope for another spike, I still own a few BC. But yes, it's not an alarming trend, no race to the bottom, I didn't mean to say that it goes to zero. But from what I see in the yearly stats I check now and then, it seems slightly downward.

      --
      Assorted stuff I do sometimes: Lemuria.org
  2. Hacker? by bmimatt · · Score: 0

    So the guy runs some stress testing tool against bitcoin machines/network and that makes him a hacker? That's quite a hyperbole.

    1. Re:Hacker? by Lunix+Nutcase · · Score: 1

      No, that's why neither the summary nor the article use the term. You got butthurt out of something you imagined out of thin air.

    2. Re:Hacker? by Anonymous Coward · · Score: 0

      Um... those changes are forever in the blockchain record, and every time you run a transaction, you have to validate the entire record if you want to make sure you won't be the target of a double-spending. Yes, you can take shortcuts, but people took "shortcuts" with exchanges, and found their coins gone.

    3. Re:Hacker? by Anonymous Coward · · Score: 0

      "Stress test" is the term the coolaid drinkers use.

      He carried out an attack that affects the bitcoin network as a whole and exposed a critical weakness/flaw. It's an asymmetric attack that effectively brings the whole system to it's knees with fairly few resources. This attack exploits the small block size, a current snag in the bitcoin holy war among true belivers

      And it's not even the best attack to be used. There's another that exploits the sigOp limit that's more expensive, but can literally bring everything to a grinding halt if someone wants to commit enough bitcoins.

      Fixing either of the above requires a cooperation of 51% of miners so their changes to the protocol "win" - Exposing another flaw in the bitcoin idea. You can't have cooperation and cutthroat adversarial anarchy at the same time.

    4. Re:Hacker? by Anonymous Coward · · Score: 0

      Guy makes blockchain do something it normally doesn't do, considered not a "hacker".

      Thanks, Reddit.

    5. Re:Hacker? by Anonymous Coward · · Score: 0

      He is not a cracker, but he sure is a hacker. No called him a hacker though, it is all in your brain.

    6. Re:Hacker? by Anonymous Coward · · Score: 0

      Script kiddie might be more accurate? Effectively this is a type of Denial of Service attack against the network, since it makes it take much longer than usual for transactions to be confirmed.

  3. The system isn't very good by jd · · Score: 0

    It is important that transactions not go through any kind of centralized system, but this sort of attack shows that you can't simply make the entire network a virtual centralized system. We need a replacement system that eliminates the need for a single physical or virtual store.

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    1. Re:The system isn't very good by LordLucless · · Score: 3, Insightful

      Why? You realize this sort of attack was entirely expected, and that the system is engineered to withstand it, and did, trivially?

      --
      Just because you're paranoid doesn't mean there isn't an invisible demon about to eat your face
    2. Re: The system isn't very good by Anonymous Coward · · Score: 0

      Taking 10 hours for any transaction to complete isn't trivial, dipshit.

    3. Re: The system isn't very good by Anonymous Coward · · Score: 0

      you have obviously never dealt with any bank. ever. let alone international transfers...

      dipshit.

    4. Re:The system isn't very good by IamTheRealMike · · Score: 1

      You realize this sort of attack was entirely expected, and that the system is engineered to withstand it, and did, trivially?

      Expected, yes. Engineered to withstand - no. Bitcoin Core nodes accept as many transactions as they can with no memory limit until eventually they bloat up so much the operating system kills them. The official "solution" for this is to babysit your node and if you see it running out of memory, change a command line flag to make it ignore any transactions with lower than the given fee. Unfortunately of course, this also ignores all end user transactions paying lower than that fee as well.

      I maintain a fork of Core called Bitcoin XT. It has a flag that lets you set a maximum number of transactions to keep in memory at once (and in a future version it'll change to be a max number of bytes, as that's the actual resource that's limited). The node will randomly remove a transaction from the pool to make room for a new one when out of space. As during an attack the memory pool is mostly full of spam, obviously this logic mostly involves kicking out spam to make room for {more spam, actual legit transaction} as opposed to just falling over and dying.

  4. lolwut? by Anonymous Coward · · Score: 0

    Where do you see the term "hacker" being used? It does not appear in the summary or in either of the forward articles. Maybe your brain got hacked?

  5. TRIGGERED by Anonymous Coward · · Score: 0

    Are you telling me that a single person can disrupt this global network of money transaction using a 100-line script?
    that's.. scary

    1. Re:TRIGGERED by sexconker · · Score: 3, Insightful

      No, because he didn't disrupt the network. He just spammed the blockchain a bit. No transactions were forged, interrupted, or otherwise fucked with. Just a few extra megs to store the full blockchain for those running full nodes.

    2. Re:TRIGGERED by Anonymous Coward · · Score: 1

      lets see if we can get the chain up to 1TB

    3. Re:TRIGGERED by Anonymous Coward · · Score: 1

      Not even that. With TX malleability, extra transactions are broadcast around the network, but only 1 is actually stored in the blockchain. He didn't add a single byte to the blockchain that wasn't already going to be there.

    4. Re:TRIGGERED by Anonymous Coward · · Score: 0

      It can only grow up to about 50 MB per year, so come back in about 20 years...

    5. Re:TRIGGERED by fisted · · Score: 1

      Then how is it now(*) 40 GB-ish? I doubt bitcoin dates back to 1200 A.D.

      (*) last time i checked

    6. Re:TRIGGERED by Anonymous Coward · · Score: 0

      Spin up some amazon compute instances?

    7. Re: TRIGGERED by Anonymous Coward · · Score: 0

      He did distrupt. Stop sugar coating it. Causing the system to take 10 hours to do transactions is pretty disrupting in my eyes.

  6. Mid 90's I thought feeding Gibson super computer by future+assassin · · Score: 1

    cookies was hacking, now this sheesh.

    --
    by TheSpoom (715771) Uncaring Linux user here. I have nothing to add to this but please continue. *munches popcorn*
  7. FYI by ajzimm3rman · · Score: 0

    Nobody cares.

  8. Re:Enjoy a Haiku by Anonymous Coward · · Score: 0

    This has been up for nearly 45 minutes with no down-mod. You must have struck a chord.

  9. Re: What doesn't kill bitcoin will make it stronge by Anonymous Coward · · Score: 0

    Probably when it isn't the only currency of its kind.

  10. Re:has lost 75 percent of its value in the last 22 by JcMorin · · Score: 2

    I guess you were not there when it got way more drastic drop in price. In 2011 we got a 90% drop in price... http://arstechnica.com/tech-po... That said, the experimental currency still worth more than 200 times the USD; itself a pretty string currency compared to the hundreds other currency on the planet.

  11. Re:Mid 90's I thought feeding Gibson super compute by WinstonWolfIT · · Score: 1

    This isn't even coherent. What?

  12. Re:has lost 75 percent of its value in the last 22 by Anonymous Coward · · Score: 0

    Sure, if you're comparing 1 USD to 1 BTC, but usually it's more than just that that contributes to the desirability of a currency.

  13. The Satan Bug? by Anonymous Coward · · Score: 0

    Or was it the Dark Crusader, playing the Puppet on a Chain, hoping for a Golden Rendezvous?

    Either way, I'm certain Fear is the Key.

  14. Re:why? by Infiniti2000 · · Score: 1

    It's not specific to Slavia. Look at any minecraft server. Heck, look at any MMO game at all. There are jerks everywhere.

  15. Oh my! by Anonymous Coward · · Score: 0

    Someone better call the CEO of Bitcoin.

  16. Not a currency by l0n3s0m3phr34k · · Score: 0

    It's a "commodity", at least per the IRS and CFTC. Not that it matters for this instance...CNBC talks about the recent rule changes. I'm wondering if his attack could be considered something serious now, at least legally. If it can be proven he caused real monetary damages...

    Of course he's Russian, so it doesn't really matter. At least it doesn't matter until he manages to screw up some buddy's of Putin, and then "legal repercussions" will be the least of his worries.

  17. why is this news? by samantha · · Score: 2

    Bitcoin is designed to make it very difficult to successfully get fake transactions into the accepted blockchain except on a very short and soon corrected basis - even if you had huge amounts of hashing power which this individual did not. An entire week of lame attempts? Boring.

  18. Re: What doesn't kill bitcoin will make it stronge by binarylarry · · Score: 1

    Viva Chavez and his minion!

    --
    Mod me down, my New Earth Global Warmingist friends!
  19. Re:has lost 75 percent of its value in the last 22 by Anonymous Coward · · Score: 0

    There was never any particular reason for parity between bitcoin and dollars, so comparing 1 BTC to 1 USD is meaningless. Following your logic, the Krugerrand is currently worth around 1100 times the USD, making that a pretty strong currency too. Should we all be using those?

  20. I know this guy! by Anonymous Coward · · Score: 1

    "Alister Maclin"? I love his books! "The Gums of Navarone", "Ice Station Zorba" and who can forget "Where Beagles Dare"?

  21. And then before by DrYak · · Score: 2

    Yeah, so far so good as long as you don't mind that BitCoin has lost 75 percent of its value in the last 22 months.

    And before it has gained 400% in a few months, and before...
    Seems that "a roomful of pigeons picking furiosly with their beaks at numpads" is the best approximation of BTCs value over time.

    There would be riots if that was happening in a real currency market.

    Such a thing in a real currency market would require everyone involved being on high doses of LSD.

    More seriously:
    - BTCs as a longterm storage currency isn't that much useful (unless you're a big gambler). Just don't store any longterm savings into this.

    - bitcoin, the protocol, with all the technologies involved (blockchain) and thus all the software developed (as mentioned by parent poster) are all very useful and very well designed.
    It already works today, and solves whole classes of problem (the simplest: it solves the problem of pushing around values (BTCs) without needing a central authority but instead distributing the control accross the whole network. The kind of simplification that SEPA brought to sending currency around between european banks, bitcoin protocol brings it to the world of online payment. Except at the scale of hours instead of days).
    Instead of having companies working as single points of failure (Paypal, or the duopoly Visa / Mastercard) and requiring both side of the transaction (customer and merchant) being clients at the same company, bitcoin enables each side of a transaction to pick any solution of their liking no matter which, as long as both end point follow the bitcoin protocol. Thus there's no "bitcoin company inc." that a government could shut down, and no matter which payment processor a merchant has chosen, a client doesn't need to get bitcoin from the same place.

    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
  22. BTC vs bitcoin by DrYak · · Score: 2

    I guess 20-30 years would be enough to prove that it' a viable currency in the long term.

    even if BTC as a currency never gets any useful due to exchange rate instabilities,
    bitcoin the protocole is already extremely useful.
    (absence of a central authority being instead distributed across the whole network, and thus freedom to chose any provider for both ends (customer and merchant) of a transaction - both don't need to have accounts at PayPal, or at the Visa / MasterCard duopoly, etc.)

    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
    1. Re:BTC vs bitcoin by Registered+Coward+v2 · · Score: 1

      I guess 20-30 years would be enough to prove that it' a viable currency in the long term.

      even if BTC as a currency never gets any useful due to exchange rate instabilities, bitcoin the protocole is already extremely useful. (absence of a central authority being instead distributed across the whole network, and thus freedom to chose any provider for both ends (customer and merchant) of a transaction - both don't need to have accounts at PayPal, or at the Visa / MasterCard duopoly, etc.)

      Exactly. Currency, to be viable, must be a reliable store of value. Large swings in value negate that, even as it makes it a useful speculative investment. The protocol is useful for what it provides, but that can be replicated by any number of currencies should someone want to so do. As long as there is a way to immediately convert BitCoin to real money you'll be able to buy things with it; if only because all it is acting as is an intermediary to facilitate the transaction and thus unlikely to see any significant change in value from the time a payment is made to when the receiver converts the BitCoin to dollars, Euros, or whatever. As soon as liquidity becomes a problem BitCoin, as a transaction system, will cease to be useful for most transactions and the ability to instantaneously convert large amount of BitCoin to real money has always been one of the hurdles to overcome. It may be all well and good that someone has say $20 million in Bitcoin but since they couldn't go to an exchange and say send $20 million to my bank and have the transaction go through right away like any other wire transfer is a problem; especially since that $20 million could be worth a lot less the next day or so as yo parcel out the transactions in small enough amounts the exchanges could handle.

      --
      I'm a consultant - I convert gibberish into cash-flow.
  23. BTC (currency/commodity) vs bitcoin (protocol) by DrYak · · Score: 2

    bitcoin is also a network protocol (designed to shift around values using blockchain technology).

    TFA's attacks are mainly attacks on the protocol. (i.e.: he didn't try to steal BTCs currency/commodity, he tried to wreak havoc the blockchain. The bitcoin network handled that quite well).

    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
  24. bitcoin (protocol) vs BTC (currency) by DrYak · · Score: 1

    Bitcoin is designed to make it very difficult to successfully get fake transactions into the accepted blockchain except on a very short and soon corrected basis - even if you had huge amounts of hashing power which this individual did not. An entire week of lame attempts? Boring.

    Which is exycatly why bitcoin, the piece of software and its protocol, together with the underlying blockchain technology, are very useful *as of today*, despite the fact that BTC currency seems to have a complete random value.

    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
  25. Re: What doesn't kill bitcoin will make it stronge by Anonymous Coward · · Score: 0

    That was not the first US fiat currency.

    Look in to the Greenbacks of the civil war or the Pennsylvania Pound (which some say was the real cause of the American Revolution).

  26. Re:has lost 75 percent of its value in the last 22 by binarylarry · · Score: 0

    Sure if you're a bond villian or international drug trafficker.

    Or a bond villian who moonlights as an international drug trafficker.

    --
    Mod me down, my New Earth Global Warmingist friends!
  27. Re: What doesn't kill bitcoin will make it stronge by DanJ_UK · · Score: 1
    It's not.

    Not in the slightest.

    In fact that comment is somewhat embarrasing.

    This is a list of notable cryptocurrencies. There were more than 669 cryptocurrencies available for trade in online markets as of 24 August 2015 and more than 740 in total[1] but only 8 of them had market capitalizations over $10 million.

    --
    - Dan
  28. Re: Mid 90's I thought feeding Gibson super comput by Anonymous Coward · · Score: 0

    "Did you see how cool he was? He didn't even really get pissed when you were fucking with em"

    "Please, call me Winston"

  29. Spending bitcoins twice by Anonymous Coward · · Score: 0

    What happens if I take 1 Bitcoin, and have 50,000 servers confirm it has been transferred to my other address (over a smallish time period, say less than 4 hours)
    I own, but keep the verification computations a secret.

    Then I spend the same Bitcoin to buy something real. Spending it twice.

    The my 50,000 servers send it to their entire network, who each also verify it.

    Surely I have a head start and will win the race to over 50% network confirmation?

    But the other guy while knowing he lost out already shipped the item.