Quote from: nanobrain on January 24, 2017, 11:36:59 AM

Quote from: noobtrader on January 24, 2017, 10:50:27 AM

Is there any news about monero latest exploit Huh

https://www.reddit.com/r/Monero/comments/5ptm2y/security_avisory_common_exploit_in_monero_miners/

i wonder what this means to monero future with all the botnet in the wild which might be affected by this exploit Huh

i wonder if this was intentional exploit right from the start to undermine monero's anonimity Huh

and... back to topic, what would monero do to fix this exploit ? assuming that botnet miner which affected by this could do 51% attack on the network Huh

should monero change algo ? anyone?

you seem overly Huh

"If you only own Monero - don't panic. The attack has nothing to do with Monero code. It can't be fixed by the Monero devs because they don't write the miners, but even a 51% attacker won't be able to steal your coins. Worst risk for you is disruption to Monero.
If you mine Monero - do panic. Nearly every miner out there is vulnerable. For open source miners 'grep -r 76' will tell you if they are using a magic number to determine the work length. If you see that number, the code likely to be vulnerable."

So, I wouldn't Huh

too much

According to that thread there is also a quite trivial fix that pools can implement to avoid this exploit until it the mining software is patched, and it seems all relevant parties have been notified, so personally, not concerned, and grateful that it has been spotted now.

If someone tried this now that it is in the public domain, it would be very clear to all what was happening as the blocksize would be necessarily be increasing at an abnormally fast rate to get to a level at which it was profitable. With as many eyes on this project as there are, I trust that a short-term solution would be found before the attack got this far.

In short, most likely anyone attempting this now would likely be giving away money.

So yeh, I'm with Nano on this Wink

... less