Quote from: noobtrader on February 11, 2017, 10:49:40 AM

this is the exact date

7th Feb: We can see the Monero fix here:
https://github.com/ShenNoether/RingCT/commit/6640e808018bb47ea34fd112dbf2d2bef9c1156b
https://github.com/monero-project/research-lab/commit/b215a98a749c452c0a0336ab4ee93b1d71df2e78

11th Feb: Shen Noether wrote this public blog: Broken Crypto in Shadowcash
12th Feb: The Monero developers and Community leaders also started a forum campaign to discredit the Shadow Project, and at the same time raise the profile of Monero by for example by posting these ---> ShadowCash is mathematically broken. I urge all SDC supporters to join Monero

Normally what usually happens and is expected is that if any vulnerability or major bug is found, it is common professional courtesy to let the developers know of the problem before you make it public and that didnt happen here.

Quote from: LongAndShort on February 11, 2017, 04:40:33 AM

I remember the "bug" was taken quite seriously and needed verifying. I believe one user from this community on this thread jumped the gun and called "fud" when presented with the whole breakdown of shens notes and not just some speculation from the monero crowd. A unnecessary knee jerk reaction, but unnecessary all the same.

I believe the ShadowCash developers tried to break the code before actually having all of shens notes(as the speculation was coming from multiple monero and other troll accounts here on this medium). I believe they said as much and assured the community that they tried and failed to break it in the 10 hours they tried. Remembering that was based on speculation alone! Once verified however, after having shens full notes and breakdown of the correct way to break the codel. The community was told that shen was correct and was thankful to him/them and the bounty was arranged. That was handled for the most part in other mediums of communication but i do remember it all being here, eventually, as well, from members of this community.

Most skidmarks just have to remember there was a bounty for this exact reason in the first place. Shadowcash, its developers, and community members are far better off, now, then they were before shen brought up that bug. The system worked and peer review paid off. I still believe if the developers here were after money alone they would have dumped the project and gone to work for Microsoft...a long time ago!

Why do i believe this? Because you can actually have a relationship with the development team here (and it is a TEAM comprised of professionals not some upstart pretending to be a team). I have had one and got to know them quite intimately. I believe they are one of very few teams who actually show their faces and meet their community in public places. The ShadowCash team is among some of the great names who publicly back their ideas and code with real interactions, in real places.

They are not only great people but have proved over and over again that they believe in something as a collective and will do what it takes to work together to chip away at those goals.

P.S Dev team, i cant seem to find info from official ShadowCash sources. I think its really important to show the findings of shen if only as a badge. It is valuable that you are that transparent, everywhere.
There is nothing to hide, it is a bit embarrassing, but you handled it like the professionals you are and ShadowCash is far better off now because of it. Be proud, stay diligent, and stay safe.

It also shows how the Shadow team is much more professional than Monero's. Even after this fiasco where monero devs acted childish and unprofessionally, didn't a shadow dev find two different really bad bugs in monero's ringct? Yet the dev let them know, instead of starting a campaign to discredit monero. Please correct me if I'm wrong, but I thought they found a unlimited coin generation bug and a deanonymization bug.

robinson5

Posts

Merits