š
Original date posted:2015-08-18
š Original message:First of all I would like to say... LOL
Second Andrew LeCody is correct, this is off topic.
On 08/18/2015 04:31 PM, F L via bitcoin-dev wrote:
> Bitcoin XT contains an unmentioned addition which periodically
> downloads lists of Tor IP addresses for blacklisting, this has
> considerable privacy implications for hapless users which are being
> prompted to use the software. The feature is not clearly described,
> is enabled by default, and has a switch name which intentionally
> downplays what it is doing (disableipprio). Furthermore these claimed
> anti-DoS measures are trivially bypassed and so offer absolutely no
> protection whatsoever.
>
> Connections are made over clearnet even when using a proxy or
> onlynet=tor, which leaks connections on the P2P network with the real
> location of the node. Knowledge of this traffic along with uptime
> metrics from bitnodes.io can allow observers to easily correlate the
> location and identity of persons running Bitcoin nodes. Denial of
> service can also be used to crash and force a restart of an
> interesting node, which will cause them to make a new request to the
> blacklist endpoint via the clearnet on relaunch at the same time their
> P2P connections are made through a proxy. Requests to the
> blacklisting URL also use a custom Bitcoin XT user agent which makes
> users distinct from other internet traffic if you have access to the
> endpoints logs.
>
>
> https://github.com/bitcoinxt/bitcoinxt/commit/73c9efe74c5cc8faea9c2b2c785a2f5b68aa4c23
>
>
>
> _______________________________________________
> bitcoin-dev mailing list
> bitcoin-dev at lists.linuxfoundation.org
> https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20150818/081aad9b/attachment.html>;
Patrick Strateman [ARCHIVE] /
npub1l3ā¦69pvv
2023-06-07 15:48:19
in reply to nevent1qā¦p2xn
Author Public Key
npub1l3uf9m4yw2y7x8wyjeswhelsqyy8ql4jaca4nyy6en0s474yadssg69pvvPublished at
2023-06-07 15:48:19Event JSON
{
"id": "a009c5b16c66fc4dc78356bf0e93aa3e76e646320a364f5f417a10375fc105eb",
"pubkey": "fc7892eea47289e31dc49660ebe7f00108707eb2ee3b59909accdf0afaa4eb61",
"created_at": 1686152899,
"kind": 1,
"tags": [
[
"e",
"9e65fc10f160e3a1f8abcad8d1666e0dcd59346530c1336724fc0d2af6334cc4",
"",
"root"
],
[
"e",
"bd7fb58c4502c063f9546632ba144d2f5e7576ca1f54c68115e33f86723a1ff4",
"",
"reply"
],
[
"p",
"7805cba4d18a8b44ba47c80fa67d382e69bb0a54f8841c3af251004ee632cac9"
]
],
"content": "š
Original date posted:2015-08-18\nš Original message:First of all I would like to say... LOL\n\nSecond Andrew LeCody is correct, this is off topic.\n\nOn 08/18/2015 04:31 PM, F L via bitcoin-dev wrote:\n\u003e Bitcoin XT contains an unmentioned addition which periodically\n\u003e downloads lists of Tor IP addresses for blacklisting, this has\n\u003e considerable privacy implications for hapless users which are being\n\u003e prompted to use the software. The feature is not clearly described,\n\u003e is enabled by default, and has a switch name which intentionally\n\u003e downplays what it is doing (disableipprio). Furthermore these claimed\n\u003e anti-DoS measures are trivially bypassed and so offer absolutely no\n\u003e protection whatsoever.\n\u003e\n\u003e Connections are made over clearnet even when using a proxy or\n\u003e onlynet=tor, which leaks connections on the P2P network with the real\n\u003e location of the node. Knowledge of this traffic along with uptime\n\u003e metrics from bitnodes.io can allow observers to easily correlate the\n\u003e location and identity of persons running Bitcoin nodes. Denial of\n\u003e service can also be used to crash and force a restart of an\n\u003e interesting node, which will cause them to make a new request to the\n\u003e blacklist endpoint via the clearnet on relaunch at the same time their\n\u003e P2P connections are made through a proxy. Requests to the\n\u003e blacklisting URL also use a custom Bitcoin XT user agent which makes\n\u003e users distinct from other internet traffic if you have access to the\n\u003e endpoints logs. \n\u003e\n\u003e \n\u003e https://github.com/bitcoinxt/bitcoinxt/commit/73c9efe74c5cc8faea9c2b2c785a2f5b68aa4c23\n\u003e\n\u003e\n\u003e\n\u003e _______________________________________________\n\u003e bitcoin-dev mailing list\n\u003e bitcoin-dev at lists.linuxfoundation.org\n\u003e https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev\n\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20150818/081aad9b/attachment.html\u003e",
"sig": "b262c053858708f524d32e451850de0d6fcc2843e8421559cf56f6b8b7929386e87c09e1d07ead2a345ee6af5c3e3822ec92ee2586b2ad7202ab90d6934f46e1"
}