📅 Original date posted:2013-08-05
📝 Original message:If you want package authentication, you should at least throw in some
digital signing, not just a checksum. With a compromised host, both the
checksum and binaries can be changed undetectably, but if there's a
signature made by a key that is not kept on the host, there's no way to
fake a valid binary.
There may be other issues people would want to bring up, but surely just
a checksum is not sufficient.
on 08/05/2013 10:39 AM Wendell said the following:
> For usability purposes, we at Hive would like to have an
> auto-updater
in our wallet app.
>
> What is a safe way to do this? I understand that Bitcoin-QT lacks
> such
an updater for security reasons... Has been thought out in more detail
since that decision was made?
>
> We have been toying around with the idea of placing one server
> behind
a Tor hidden service, whose only function is to output a checksum of the
update package. The theory is that if it is well-secured, it will at
least be immune to tampering at the physical hosting level.
>
> Any thoughts or advice about any of this?
> -wendell
>
> grabhive.com | twitter.com/grabhive | gpg: 6C0C9411
>
>
>
> ------------------------------------------------------------------------------
> Get your SQL database under version control now!
> Version control is standard for application code, but databases havent
> caught up. So what steps can you take to put your SQL databases under
> version control? Why should you start doing it? Read more to find out.
> http://pubads.g.doubleclick.net/gampad/clk?id=49501711&iu=/4140/ostg.clktrk
>
>
>
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
>
Daniel F [ARCHIVE] /
npub1rk…3nvht
2023-06-07 15:05:32
in reply to nevent1q…xnug
Author Public Key
npub1rkatdke2237uf5zw6pctfdgz8jvsrm6vrms0hrdcv6f22rv7f78qt3nvhtSeen on
wss://relay.noswhere.comPublished at
2023-06-07 15:05:32Event JSON
{
"id": "c24d156db8978c35affb59c5498879b954f28172a12787f25f676eb30e25d80a",
"pubkey": "1dbab6db2a547dc4d04ed070b4b5023c9901ef4c1ee0fb8db86692a50d9e4f8e",
"created_at": 1686150332,
"kind": 1,
"tags": [
[
"e",
"a4a5f7af9bd38381697d4a3581db549efa1968ef6f6f831d2066e33c2e787bd6",
"",
"root"
],
[
"e",
"ace68e724c5df63b15899e65b4188d3791176d0db13ba68699330f2be5266da2",
"",
"reply"
],
[
"p",
"c534bb535ca1eba460ab96ad869cfa2160259b441c95515f281c187f0130f4f3"
]
],
"content": "📅 Original date posted:2013-08-05\n📝 Original message:If you want package authentication, you should at least throw in some\ndigital signing, not just a checksum. With a compromised host, both the\nchecksum and binaries can be changed undetectably, but if there's a\nsignature made by a key that is not kept on the host, there's no way to\nfake a valid binary.\n\nThere may be other issues people would want to bring up, but surely just\na checksum is not sufficient.\n\non 08/05/2013 10:39 AM Wendell said the following:\n\u003e For usability purposes, we at Hive would like to have an\n\u003e auto-updater\nin our wallet app.\n\u003e \n\u003e What is a safe way to do this? I understand that Bitcoin-QT lacks\n\u003e such\nan updater for security reasons... Has been thought out in more detail\nsince that decision was made?\n\u003e \n\u003e We have been toying around with the idea of placing one server\n\u003e behind\na Tor hidden service, whose only function is to output a checksum of the\nupdate package. The theory is that if it is well-secured, it will at\nleast be immune to tampering at the physical hosting level.\n\u003e \n\u003e Any thoughts or advice about any of this?\n\u003e -wendell\n\u003e \n\u003e grabhive.com | twitter.com/grabhive | gpg: 6C0C9411\n\u003e \n\u003e \n\u003e \n\u003e ------------------------------------------------------------------------------\n\u003e Get your SQL database under version control now!\n\u003e Version control is standard for application code, but databases havent \n\u003e caught up. So what steps can you take to put your SQL databases under \n\u003e version control? Why should you start doing it? Read more to find out.\n\u003e http://pubads.g.doubleclick.net/gampad/clk?id=49501711\u0026iu=/4140/ostg.clktrk\n\u003e \n\u003e \n\u003e \n\u003e _______________________________________________\n\u003e Bitcoin-development mailing list\n\u003e Bitcoin-development at lists.sourceforge.net\n\u003e https://lists.sourceforge.net/lists/listinfo/bitcoin-development\n\u003e",
"sig": "8f580f4301fcf2ee11527d95aa179c90afac760f9b55cf5492856602e3b12c4fd2728b086714b67760191d4c6a084917da95b4044f9f53edffddd106bfa0ecd8"
}