Post
Topic
Board Speculation (Altcoins)
Re: [XMR] Monero Speculation
by
Hueristic
on 24/01/2017, 13:13:05 UTC
Is there any news about monero latest exploit Huh https://www.reddit.com/r/Monero/comments/5ptm2y/security_avisory_common_exploit_in_monero_miners/

i wonder what this means to monero future with all the botnet in the wild which might be affected by this exploit Huh  i wonder if this was intentional exploit right from the start to undermine monero's anonimity Huh

and... back to topic, what would monero do to fix this exploit ? assuming that botnet miner which affected by this could do 51% attack on the network Huh  should monero change algo ? anyone?
Quote
If you only own Monero - don't panic. The attack has nothing to do with Monero code. It can't be fixed by the Monero devs because they don't write the miners, but even a 51% attacker won't be able to steal your coins. Worst risk for you is disruption to Monero.

If you mine Monero - do panic. Nearly every miner out there is vulnerable. For open source miners 'grep -r 76' will tell you if they are using a magic number to determine the work length. If you see that number, the code likely to be vulnerable.

You can test your miners by connecting to a simulated pool that I set up:

    simpool.xmr-stak.net:3333

The pool is not connected to Monero network - it will just verify that the hash that you sent is correct. Symptoms of a vulnerable miner are rejected shares or disconnects after a share is found.