Quote from: fluffypony on September 21, 2014, 09:22:23 AM

Quote from: jl777 on September 21, 2014, 08:33:36 AM

you are the only one I know that is able to deal with both the cryptomath and totally open to any type of attack being possible.

One with an open mind can see what others assume cant be there

James

James, with all due respect what you've just said is baseless and untrue.

We're completely open to any type of attack being possible, and I can assure you that we are cryptographically competent. To that end, we have and will continue to push out research like the Monero Research Lab bulletins that cover theoretical attacks and corner cases that may be impossible to practically pull off. We are not naïve enough to believe the CN reference code we inherited lacks flaws, nor are we stupid enough to believe in our infallibility. The code does have bugs, and may contain as-yet unknown issues, but we are quite confident in the maths and cryptography (as are gmaxwell et. al.), and have yet to see any evidence to the contrary.

Thus far we have seen AnonyMint / TheFascistMind merely redo our MRL-0001 research. We are waiting to see if he can add an additional amplification to it or not. Even so, it is unlikely that the MRL-0001 chain reaction has anything to do with this, as a "time warp" attack doesn't relate to it.

And, too, thus far we have seen no evidence that BCX actually has an exploit. All we have are disjointed breadcrumbs that don't fit an overall picture of how the proposed attack would play out. Given the lack of evidence we are certainly not discounting the remote possibility that there actually is an exploit, but just as with each of Bitcoin's 26 very serious exploits we will analyse an attack if there is one, patch it, and move on.

Between now and 60 hours time we are not going to "rapidly evolve" just because BCX claims he has an exploit but won't give us the technical details. We are, instead, going to continue our work on incrementally documenting and refactoring the codebase, as well as our independent research into edge-case cryptographic weaknesses, and deal with an attack if there is one.

no offense to you, but I qualified it with someone that I know and I am not knowing of you yet. Also your response indicates to me that you are content to wait and see what happens and thus are not open to a clear and present danger that could be mitigated.

so regardless of your crypto skills if you are convinced BCX has no attack, then you wont find any because you know there cant be.

I am not saying that there is or isnt an attack possible. All I am saying is that I dont know and that it is possible for there to be one and so anonymint is our best chance to find and mitigate the attack as he apparently redid your MRL-001 research in a day, so maybe another two days and he will do the MRL-002 and MRL-003.

All I know is that anonymint is smarter than me and he says there is a possibility and without a mathematical proof that proves there is no possibility, I would be foolish to ignore the possibility

James

P.S. Have you thought of the possibility that BCX does not know the precise technical details due to the complexity of the CN codebase, but can still create a successful attack? It could be an empirically found exploit and not theoretically based. The fact that BCX said it depended on "implementation" is some clue about this.