Quote from: Windoze on September 17, 2014, 08:03:55 PM

Quote from: jl777 on September 17, 2014, 07:51:00 PM

...
in the meantime this offers a chance for people to make some gains by trading between these assets

If you're really as anti-troll as you're claiming, then please address this issue below. Nobody knows if it's FUD trolling or fact, and I figured someone of your potential would be able to address this. My concern is that BBR is a CN coin, and would have the same fatal flaw:

Quote from: BitcoinEXpress on September 17, 2014, 04:01:54 PM

* I have found very specific exploits in CN that have not been fixed that would be successful on XMR. Most are what I call annoyance attacks, that would be fixed and the coin would probably survive, but one is a coin killer. In XMR there exist a flaw involving the keyrings that under the right conditions will allow an attacker to steal your wallets and hijack your addresses. To fix this, anonymity will need to be sacrificed. These exploits are why two top exchanges who have asked for my opinion have not added XMR.

This is a claim that has not been verified.

I find it unlikely that there is a flaw that allows an attacker to steal a wallet that is only on your local computer and not on the blockchain. Of course, if by "right conditions" he means that if you are publishing your wallet on an unencrypted website, then the possibility does exist. Since the wallets are encrypted locally and the privatekey for wallets are not published, to be able to steal a wallet implies that this encryption is cracked. This is unlikely.

So, until this is backed up with actual details, I would not put much weight to it. If he is whitehat, he should be communicating with the devs and from what I can tell, he is not doing this. If he is blackhat, he wouldnt be posting this. So, why is he posting this? To create a cryptonote panic? I have no idea his history vs cryptonote/XMR so I dont know if he is someone that would want to make FUD

I hope that he will cooperate with the cryptonote devs (all of them) and disclose this attack vector. until then this certainly does not have the status of "fact"

James