📅 Original date posted:2013-07-28
📝 Original message:My signature:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Linux distribution packaging and Bitcoin
========================================
2013-07-23
This note summarises the dangers inherent in the Linux distribution
packaging model for Bitcoin, and forms a request from upstream
maintainers to not distribute Bitcoin node software as part of
distribution package repositories without understanding the special
requirements of Bitcoin.
Distributors typically unbundle internal libraries and apply other
patches for a variety of generally good reasons, including ensuring
that security-critical fixes can be applied once, rather than multiple
times for many different packages. In most cases, the common
distribution packaging policy has many advantages.
However, Bitcoin nodes are an unusual category of software: they
implement a complex group consensus in which every client verifies the
behaviour of every other exactly. Even an exceptionally subtle change -
including apparently harmless bugfixes - can cause a failure to reach
consensus. A consensus failure of one client is a security risk to the
user of that client. A significant number of nodes failing to reach
consensus - as happened in March 2013 due to a change in database
libraries[1] - is a critical problem that threatens the functionality
and security of the system for all users.
For this reason, it is _vital_ that as much of the network as possible
uses _unmodified_ implementations that have been carefully audited and
tested, including dependencies. For instance, if the included copy
of LevelDB in bitcoind is replaced by a system-wide shared library,
_any_ change to that shared library requires auditing and testing,
a requirement generally not met by standard distributor packaging
practices.
Because distributed global consensus is a new area of computer science
research, the undersigned request that distributors refrain from
packaging Bitcoin node software (including bitcoind and Bitcoin-Qt)
and direct users to the upstream-provided binaries instead _until they
understand the unique testing procedures and other requirements to
achieve consensus_. Beyond being globally consistent, upstream binaries
are produced using a reproducible build system[2], ensuring that they
can be audited for backdoors.
1. https://en.bitcoin.it/wiki/BIP_0050
2. http://gitian.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEcBAEBCAAGBQJR9WC5AAoJEEWCsU4mNhiPg6UH/2oHzBWBPaQMhH/GCTHQEi5U
7GSRfqwihIs/M2ROHLNq0HhgWR7mPAh5TTI6+tG95FCGCGNZq0seqw9wW4ZyGCoc
VueY51q4hcn23405oLD/QGK2lDxxywWY8XtFYVPqAzXTq6zRzgpNJkjoRtOAUOP7
3PrRkimYYyj0KrqFg+cEvZDT27dkeX+5PXM6Ua0o7h/TlhR2RJPhej5DI8cNLXgA
f0t+mES4Apb6zLgnEYYlPp22FR9vuFcJO3z1akhVL4DLUMqr58NYHLVnH1FH0Jhn
hVuld159QtCjQ5Qyn19cn86akTQJVi+ikCXqaKriCc2jBFX7TCI8WTDc6aSZpsQ=
=oX5d
-----END PGP SIGNATURE-----
John Dillon [ARCHIVE] /
npub15z…kn0zr
2023-06-07 15:05:07
in reply to nevent1q…mt7n
Author Public Key
npub15z6e9t07ugx267aj3s3c487pln852ydytzlgu0vkkqxfznyvx4jq4kn0zrPublished at
2023-06-07 15:05:07Event JSON
{
"id": "82eba9f8b55822d6bdddc92661b7fee7a798b383f8b1fa7cb9c92094abb2748a",
"pubkey": "a0b592adfee20cad7bb28c238a9fc1fccf4511a458be8e3d96b00c914c8c3564",
"created_at": 1686150307,
"kind": 1,
"tags": [
[
"e",
"02fd0cb2c5efae90b48da3cd958f29d02ad6c1875057a9aab52fcb5414be5b89",
"",
"root"
],
[
"e",
"122999cc022e389ae119ab113792227923f0c58542036a70617ecbf91970507b",
"",
"reply"
],
[
"p",
"4aa6cf9aa5c8e98f401dac603c6a10207509b6a07317676e9d6615f3d7103d73"
]
],
"content": "📅 Original date posted:2013-07-28\n📝 Original message:My signature:\n\n-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nLinux distribution packaging and Bitcoin\n========================================\n2013-07-23\n\nThis note summarises the dangers inherent in the Linux distribution\npackaging model for Bitcoin, and forms a request from upstream\nmaintainers to not distribute Bitcoin node software as part of\ndistribution package repositories without understanding the special\nrequirements of Bitcoin.\n\nDistributors typically unbundle internal libraries and apply other\npatches for a variety of generally good reasons, including ensuring\nthat security-critical fixes can be applied once, rather than multiple\ntimes for many different packages. In most cases, the common\ndistribution packaging policy has many advantages.\n\nHowever, Bitcoin nodes are an unusual category of software: they\nimplement a complex group consensus in which every client verifies the\nbehaviour of every other exactly. Even an exceptionally subtle change -\nincluding apparently harmless bugfixes - can cause a failure to reach\nconsensus. A consensus failure of one client is a security risk to the\nuser of that client. A significant number of nodes failing to reach\nconsensus - as happened in March 2013 due to a change in database\nlibraries[1] - is a critical problem that threatens the functionality\nand security of the system for all users.\n\nFor this reason, it is _vital_ that as much of the network as possible\nuses _unmodified_ implementations that have been carefully audited and\ntested, including dependencies. For instance, if the included copy\nof LevelDB in bitcoind is replaced by a system-wide shared library,\n_any_ change to that shared library requires auditing and testing,\na requirement generally not met by standard distributor packaging\npractices.\n\nBecause distributed global consensus is a new area of computer science\nresearch, the undersigned request that distributors refrain from\npackaging Bitcoin node software (including bitcoind and Bitcoin-Qt)\nand direct users to the upstream-provided binaries instead _until they\nunderstand the unique testing procedures and other requirements to\nachieve consensus_. Beyond being globally consistent, upstream binaries\nare produced using a reproducible build system[2], ensuring that they\ncan be audited for backdoors.\n\n1. https://en.bitcoin.it/wiki/BIP_0050\n2. http://gitian.org/\n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.11 (GNU/Linux)\n\niQEcBAEBCAAGBQJR9WC5AAoJEEWCsU4mNhiPg6UH/2oHzBWBPaQMhH/GCTHQEi5U\n7GSRfqwihIs/M2ROHLNq0HhgWR7mPAh5TTI6+tG95FCGCGNZq0seqw9wW4ZyGCoc\nVueY51q4hcn23405oLD/QGK2lDxxywWY8XtFYVPqAzXTq6zRzgpNJkjoRtOAUOP7\n3PrRkimYYyj0KrqFg+cEvZDT27dkeX+5PXM6Ua0o7h/TlhR2RJPhej5DI8cNLXgA\nf0t+mES4Apb6zLgnEYYlPp22FR9vuFcJO3z1akhVL4DLUMqr58NYHLVnH1FH0Jhn\nhVuld159QtCjQ5Qyn19cn86akTQJVi+ikCXqaKriCc2jBFX7TCI8WTDc6aSZpsQ=\n=oX5d\n-----END PGP SIGNATURE-----",
"sig": "404d3ae55cdd960a273e19efde61e4c3b99148a32cc91a29abc3dcca8bc608a6d92b5e365b9b5f28e27f2cb88b1114cd8af6d10de926442a9430dde8ab3d2d12"
}