So it looks like their yearly subscription guarantee is misleading and missing some information.

They say: "If, after the first 30 days, you absolutely hate the report and can't get any value from it, simply let us know you want to cancel your subscription and we will refund you the remainder of your balance."

This makes it seem like you can cancel any time after 30 days and they will refund you on a pro-rata basis, presumably charging you full price for the months and fractions thereof that you used, but refunding the rest.

In reality, their support desk says that after 60 days, no refund of any amount can be offered, so the guarantee is really only good for a 60 day window. Something to consider before buying the yearly.

Price is plummeting because someone had 200+ btc worth of buy walls up to 0.0007 btc or so on poloniex, and after the "announcement" was cancelled, all buy walls were pulled. Now there is a total of about 20 btc in buy orders on poloniex, ergo, price goes down. If you trust in the coin tech and developer, buy some while they're cheap. If not, then sell at a loss I guess...

So..where are we at with this? Is the 72 hours up?

With ungodly amounts of money and hashpower.  He can do a 51% attack ... he's probably lying about everything else and will just brute force it.

His bonnets gonna be much more effective against monero than scaling gpus 4 aura was.

Should not have poked the bear moneros peeps lololol

the thread aint true dude, personally Ive witnessed many such takedowns initiated by wow the BCX

~CfA~

I think I know what the mitigation is for anonymity aspect of the exploit. I will tell you I think it can be fixed going into the future, but we can't restore the anonymity from the past. It is fucked. Meaning if you thought you were anonymous you were not. The NSA can compute the intersections.

The best we could do (if I am correct) is to quickly checkpoint the code and get it out to 51% of the miners so we can prevent BCX's Time Warp attack. But fluffypony says we don't have to do anything rushed and he is at beach any way.

Then we put the mitigation in place so the future anonymity isn't broken.

However my mitigation proposal may still fail in the future when the attacker (NSA?) owns many inputs to many rings on the block chain. I haven't gotten that far in my very rushed analysis. So maybe I can devise a solution (but unlikely because I won't know which inputs the attacker owns) or it doesn't scale well for the attacker (our best hope but I am not optimistic).

So I would say yes ring signatures may be doomed, but I am not sure yet. Maybe not also. I hope not.

If only XMR was affected, there is one of my emotions that would love to see it destroyed. But on rational thought, I don't want to hurt the innocent parties who invested, some of whom are my friends (including but not just Rpietila).

Well someone is having fun 


http://i.imgur.com/y3RmBVI.png

None of them take me seriously. I am tired of this shit.

BCX may or may not have an exploit but this was not what I wanted to do with my time. I have much more lucrative things to be working on. XMR people think they know everything. So let them.

We don't know if he can or not, although we might be very skeptical, it doesn't help for you to push him.

If he does that, he destroys the value of the coins he stole.

My understanding is that the only people who can loan a huge amount of XMR for shorting are the whales, who thus I assume won't loan him the XMR so he could sell them before such an attack. Also they want BTC collateral so they might not return the BTC after such an attack. Perhaps this is why he challenged Rpietila to a 500 BTC escrowed bet.

I wish you all would stop punching him in the nose. I am trying to think and work on mitigation, so we fix everything within the 72 hours if there is anything that needs to be fixed.

I am trying to be careful with my words, because even though I feel reasonably confident there is a problem that needs fixing, I haven't written down proofs and exactly mathematical characterizations of everything.

Again we have not yet confirmed math for how he could steal coins. But that doesn't mean it is impossible. Normally it is impractical to factor a private key from a public key, in the equation P=xG mod l. But because the breakdown in the anonymity identifies the sending key P(i) where i = s, then another equation is revealed from the one-time ring signature, I=xH(P) mod l. If there exists some trick for factoring that is sufficiently sped up by combining the information from the two equations, which would make cracking the private key 'x' plausible, then he threat would be real. But we don't yet know that trick, if one exists.

Yeah it is possible that BCX is bluffing, but why push him and erase the 72 hours he gave us to get this fixed.

Note we don't yet know the precise characterization of how much the anonymity breaks down and what % of the coins the attacker needs to own, if any. That is what I was working on before I fell asleep. The CN paper that Tacotime linked upthread already characterizes some loss of anonymity, but seems to say it isn't that severe (note I haven't had time yet to completely wrap my mind around that paper). And they were working on mitigation. I think I may have discovered a method for amplication of the anonymity loss, which may be what BCX's threatened exploit does. But I haven't yet characterized my algorithm mathematically. I just wrote down some pseudocode. Now I need to go talk with the CN devs to see what they think or discovered about my pseudocode.

Please be nice.

Yes this is true but it doesn't seem good enough for the powers that be.

Maybe a demonstration is in fact needed.

I preferred a forced evolutionary fix, but that seems to beyond the vision of the XMR devs.

Too caught up in their ego's I guess.


~BCX~

More like it is because rpietila has more faith in bcx proven history than than his devs.

Can one of the devs post a donation monero address for a special cause ? I would like to donate to someone who wants to buy mining power to strenghten the network to make a possible attack more difficult. I don't have much but fuck it, i am willing to donate to a good cause. Let's fight back as a community.

Can't find a way to pay with Litecoin.